@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/process/resource/process-identity.js

@@ -0,0 +1,199 @@
+import { open } from "node:fs/promises";
+import { Deferred, Effect, Semaphore } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+import { isSameLinuxProcessIdentity, parseLinuxProcessIdentity, } from "./linux-process-identity.js";
+import { processResourcePolicy } from "./policy.js";
+import { recordSamplerHandleCloseFailure } from "./telemetry.js";
+const failureReason = (error) => {
+    try {
+        if (error === null ||
+            (typeof error !== "object" && typeof error !== "function")) {
+            return "not_exposed";
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(error, "code");
+        const code = descriptor?.get === undefined ? descriptor?.value : undefined;
+        if (typeof code !== "string" || code.length > 16)
+            return "not_exposed";
+        switch (code) {
+            case "EACCES":
+            case "EPERM":
+                return "permission_denied";
+            case "ENOENT":
+            case "ESRCH":
+                return "process_churn";
+            default:
+                return "not_exposed";
+        }
+    }
+    catch {
+        return "not_exposed";
+    }
+};
+const openProcfsFile = (path) => open(path, "r");
+const procfsOpenAdmission = Semaphore.makeUnsafe(processResourcePolicy.maximumConcurrentProcfsIdentityOpens);
+const completeLifecycleSettlement = (settlement, outcome) => {
+    Deferred.doneUnsafe(settlement, Effect.succeed(outcome));
+};
+const retainLifecycleAdmissionUntilSettled = (admission, settlement, recordHandleCloseFailure) => Deferred.await(settlement).pipe(Effect.flatMap((outcome) => outcome === "handle_close_failed"
+    ? recordHandleCloseFailure
+    : Effect.void), Effect.ensuring(admission.release(1).pipe(Effect.asVoid)), Effect.forkDetach({ uninterruptible: true }));
+const completeHandleClose = (input, outcome) => {
+    completeLifecycleSettlement(input.settlement, outcome);
+    if (input.state.cancelled || input.continuation === undefined)
+        return;
+    input.resume(outcome === "handle_close_failed"
+        ? Effect.fail("sampler_handle_close_failed")
+        : input.continuation);
+};
+const closeHandleOnce = ({ continuation, handle, resume, settlement, state, }) => {
+    if (state.closeStarted)
+        return;
+    state.closeStarted = true;
+    const input = { continuation, handle, resume, settlement, state };
+    let closing;
+    try {
+        closing = Promise.resolve(handle.close());
+    }
+    catch {
+        completeHandleClose(input, "handle_close_failed");
+        return;
+    }
+    void closing.then(() => {
+        completeHandleClose(input, "settled");
+    }, () => {
+        completeHandleClose(input, "handle_close_failed");
+    });
+};
+const closeAfterRead = (input, continuation) => {
+    closeHandleOnce({ ...input, continuation });
+};
+const readContinuation = (output, result) => {
+    try {
+        return result.bytesRead > processResourcePolicy.maximumProcfsIoBytes
+            ? Effect.fail("not_exposed")
+            : Effect.succeed(output.subarray(0, result.bytesRead).toString("utf8"));
+    }
+    catch (error) {
+        return Effect.fail(failureReason(error));
+    }
+};
+const observePendingRead = (pending, output, input) => {
+    void pending.then((result) => {
+        if (!input.state.closeStarted) {
+            closeAfterRead(input, readContinuation(output, result));
+        }
+    }, (error) => {
+        closeAfterRead(input, Effect.fail(failureReason(error)));
+    });
+};
+const readHandle = ({ handle, resume, settlement, state, }) => {
+    const input = { handle, resume, settlement, state };
+    let output;
+    let pending;
+    try {
+        output = Buffer.alloc(processResourcePolicy.maximumProcfsIoBytes + 1);
+        pending = Promise.resolve(handle.read(output, 0, output.byteLength, 0));
+    }
+    catch (error) {
+        closeAfterRead(input, Effect.fail(failureReason(error)));
+        return;
+    }
+    observePendingRead(pending, output, input);
+};
+const observePendingHandle = (pending, input) => {
+    void pending.then((handle) => {
+        input.state.handle = handle;
+        const handleInput = { ...input, handle };
+        (input.state.cancelled ? closeHandleOnce : readHandle)(handleInput);
+    }, (error) => {
+        completeLifecycleSettlement(input.settlement, "settled");
+        if (!input.state.cancelled) {
+            input.resume(Effect.fail(failureReason(error)));
+        }
+    });
+};
+const interruptPendingRead = ({ resume, settlement, state, }) => Effect.sync(() => {
+    state.cancelled = true;
+    if (state.handle !== undefined) {
+        closeHandleOnce({ handle: state.handle, resume, settlement, state });
+    }
+});
+const registerProcfsRead = (input) => {
+    input.state.started = true;
+    let pending;
+    try {
+        pending = Promise.resolve(input.openFile(input.path));
+    }
+    catch (error) {
+        completeLifecycleSettlement(input.settlement, "settled");
+        input.resume(Effect.fail(failureReason(error)));
+        return;
+    }
+    observePendingHandle(pending, input);
+    return interruptPendingRead(input);
+};
+const awaitProcfsRead = ({ openFile, path, settlement, state, }) => Effect.callback((resume) => registerProcfsRead({ openFile, path, resume, settlement, state }));
+const makeProcfsReadState = () => ({
+    cancelled: false,
+    closeStarted: false,
+    started: false,
+});
+const settleUnstartedRead = (settlement, state) => Effect.sync(() => {
+    if (!state.started)
+        completeLifecycleSettlement(settlement, "settled");
+});
+/**
+ * Node cannot cancel fs.promises open, read, or close. A detached caretaker
+ * retains bounded admission until every started native operation settles and
+ * closes an opened handle once while interruption itself stays prompt.
+ */
+const readProcfsLifecycle = (path, openFile, options) => {
+    const admission = options.openAdmission ?? procfsOpenAdmission;
+    const recordHandleCloseFailure = options.recordHandleCloseFailure ??
+        options.recordLateCloseFailure ??
+        recordSamplerHandleCloseFailure();
+    return Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+        yield* restore(admission.take(1));
+        const settlement = yield* Deferred.make();
+        const caretaker = yield* retainLifecycleAdmissionUntilSettled(admission, settlement, recordHandleCloseFailure);
+        options.observeCaretaker?.(caretaker);
+        const state = makeProcfsReadState();
+        return yield* restore(awaitProcfsRead({ openFile, path, settlement, state })).pipe(Effect.onInterrupt(() => settleUnstartedRead(settlement, state)));
+    }));
+};
+const readFileBounded = Effect.fn("ProcessIdentity.readFileBounded")(function* (path, openFile, options) {
+    return yield* readProcfsLifecycle(path, openFile, options).pipe(Effect.timeoutOrElse({
+        duration: processResourcePolicy.samplerDeadline,
+        orElse: () => Effect.fail("sampler_deadline"),
+    }));
+});
+export const readLinuxProcessIdentityWithOpen = Effect.fn("ProcessIdentity.readLinuxWithOpen")(function* (processId, openFile, options = {}) {
+    const output = yield* readFileBounded(`/proc/${String(processId)}/stat`, openFile, options);
+    const identity = parseLinuxProcessIdentity(output);
+    return identity === undefined
+        ? yield* Effect.fail("sampler_output_invalid")
+        : identity;
+});
+export const readLinuxProcessIdentity = Effect.fn("ProcessIdentity.readLinux")(function* (processId) {
+    return yield* readLinuxProcessIdentityWithOpen(processId, openProcfsFile);
+});
+const launchIdentityFailure = () => makeNodeRuntimeError("transport_failed", "The managed process launch identity could not be established.");
+export const captureLaunchLeaderIdentity = Effect.fn("ProcessIdentity.captureLaunchLeader")(function* (processId, processGroupId) {
+    if (process.platform !== "linux") {
+        return {
+            platform: process.platform,
+            reason: "platform_unsupported",
+            state: "unavailable",
+        };
+    }
+    const result = yield* Effect.result(readLinuxProcessIdentity(processId));
+    if (result._tag === "Failure" ||
+        result.success.processId !== processId ||
+        result.success.processGroupId !== processGroupId) {
+        return yield* Effect.fail(launchIdentityFailure());
+    }
+    return { platform: "linux", state: "available", value: result.success };
+});
+export const matchesLaunchLeaderIdentity = (expected, current) => expected.state === "available" &&
+    isSameLinuxProcessIdentity(expected.value, current);
+//# sourceMappingURL=process-identity.js.map

package/dist/runtime/process/resource/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAc,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAG9E,OAAO,EACL,0BAA0B,EAE1B,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AAcjE,MAAM,aAAa,GAAG,CAAC,KAAc,EAA6B,EAAE;IAClE,IAAI,CAAC;QACH,IACE,KAAK,KAAK,IAAI;YACd,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC,EAC1D,CAAC;YACD,OAAO,aAAa,CAAC;QACvB,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,aAAa,CAAC;QACvE,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACV,OAAO,mBAAmB,CAAC;YAC7B,KAAK,QAAQ,CAAC;YACd,KAAK,OAAO;gBACV,OAAO,eAAe,CAAC;YACzB;gBACE,OAAO,aAAa,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAKF,MAAM,cAAc,GAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAmBnE,MAAM,mBAAmB,GAAG,SAAS,CAAC,UAAU,CAC9C,qBAAqB,CAAC,oCAAoC,CAC3D,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,UAAkD,EAClD,OAA4B,EACtB,EAAE;IACR,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,oCAAoC,GAAG,CAC3C,SAA8B,EAC9B,UAAkD,EAClD,wBAA6C,EAC7C,EAAE,CACF,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACzB,OAAO,KAAK,qBAAqB;IAC/B,CAAC,CAAC,wBAAwB;IAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,EACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EACzD,MAAM,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAC7C,CAAC;AAcJ,MAAM,mBAAmB,GAAG,CAC1B,KAAuB,EACvB,OAA4B,EACtB,EAAE;IACR,2BAA2B,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO;IACtE,KAAK,CAAC,MAAM,CACV,OAAO,KAAK,qBAAqB;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC;QAC5C,CAAC,CAAC,KAAK,CAAC,YAAY,CACvB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,EACvB,YAAY,EACZ,MAAM,EACN,MAAM,EACN,UAAU,EACV,KAAK,GACY,EAAQ,EAAE;IAC3B,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO;IAC/B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAClE,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,KAAK,OAAO,CAAC,IAAI,CACf,GAAG,EAAE;QACH,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,EACD,GAAG,EAAE;QACH,mBAAmB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,cAAc,GAAG,CACrB,KAAsB,EACtB,YAA8D,EACxD,EAAE;IACR,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,MAAc,EACd,MAAsC,EACY,EAAE;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,SAAS,GAAG,qBAAqB,CAAC,oBAAoB;YAClE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YAC5B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,OAAgD,EAChD,MAAc,EACd,KAAsB,EAChB,EAAE;IACR,KAAK,OAAO,CAAC,IAAI,CACf,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9B,cAAc,CAAC,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,EAClB,MAAM,EACN,MAAM,EACN,UAAU,EACV,KAAK,GACW,EAAQ,EAAE;IAC1B,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,MAAc,CAAC;IACnB,IAAI,OAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC;QACtE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC;AAaF,MAAM,oBAAoB,GAAG,CAC3B,OAAkC,EAClC,KAA8B,EACxB,EAAE;IACR,KAAK,OAAO,CAAC,IAAI,CACf,CAAC,MAAM,EAAE,EAAE;QACT,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAC5B,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC;IACtE,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,2BAA2B,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,EAC5B,MAAM,EACN,UAAU,EACV,KAAK,GACmB,EAAE,EAAE,CAC5B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;IACf,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;IACvB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CAAC,KAA8B,EAAE,EAAE;IAC5D,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3B,IAAI,OAAkC,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2BAA2B,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,EACvB,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,KAAK,GACgB,EAAoD,EAAE,CAC3E,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CACzB,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAClE,CAAC;AAEJ,MAAM,mBAAmB,GAAG,GAAoB,EAAE,CAAC,CAAC;IAClD,SAAS,EAAE,KAAK;IAChB,YAAY,EAAE,KAAK;IACnB,OAAO,EAAE,KAAK;CACf,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAC1B,UAAkD,EAClD,KAAsB,EACtB,EAAE,CACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;IACf,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,2BAA2B,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAC1B,IAAY,EACZ,QAA0B,EAC1B,OAAkC,EACgB,EAAE;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAC/D,MAAM,wBAAwB,GAC5B,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,sBAAsB;QAC9B,+BAA+B,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAuB,CAAC;QAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,oCAAoC,CAC3D,SAAS,EACT,UAAU,EACV,wBAAwB,CACzB,CAAC;QACF,OAAO,CAAC,gBAAgB,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CACvD,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAC5E,IAAY,EACZ,QAA0B,EAC1B,OAAkC;IAElC,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAC7D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,qBAAqB,CAAC,eAAe;QAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAA2B,CAAC;KACvD,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,EAAE,CACvD,mCAAmC,CACpC,CAAC,QAAQ,CAAC,EACT,SAAiB,EACjB,QAA0B,EAC1B,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CACnC,SAAS,MAAM,CAAC,SAAS,CAAC,OAAO,EACjC,QAAQ,EACR,OAAO,CACR,CAAC;IACF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAiC,CAAC;QACvD,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAC5E,QAAQ,CAAC,EACP,SAAiB;IAEjB,OAAO,KAAK,CAAC,CAAC,gCAAgC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC,CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,GAAqB,EAAE,CACnD,oBAAoB,CAClB,kBAAkB,EAClB,+DAA+D,CAChE,CAAC;AAEJ,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,EAAE,CAClD,qCAAqC,CACtC,CAAC,QAAQ,CAAC,EACT,SAAiB,EACjB,cAAsB;IAEtB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,sBAAsB;YAC9B,KAAK,EAAE,aAAa;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,IACE,MAAM,CAAC,IAAI,KAAK,SAAS;QACzB,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;QACtC,MAAM,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,EAChD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,QAA8B,EAC9B,OAA6B,EACpB,EAAE,CACX,QAAQ,CAAC,KAAK,KAAK,WAAW;IAC9B,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC"}

package/dist/runtime/process/resource/ps-snapshot.d.ts

@@ -0,0 +1,12 @@
+export declare class PsSnapshotParseError extends TypeError {
+    readonly reason: "sampler_output_invalid" | "sampler_output_limit";
+    constructor(reason: "sampler_output_invalid" | "sampler_output_limit");
+}
+export type PsProcessRow = {
+    readonly cpuTimeMilliseconds: number;
+    readonly processGroupId: number;
+    readonly processId: number;
+    readonly residentBytes: number;
+};
+export declare const parsePsSnapshot: (output: string) => readonly PsProcessRow[];
+//# sourceMappingURL=ps-snapshot.d.ts.map

package/dist/runtime/process/resource/ps-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ps-snapshot.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/ps-snapshot.ts"],"names":[],"mappings":"AAIA,qBAAa,oBAAqB,SAAQ,SAAS;IAE/C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,GAAG,sBAAsB;gBAAzD,MAAM,EAAE,wBAAwB,GAAG,sBAAsB;CAKrE;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AA6DF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,SAAS,YAAY,EAkBrE,CAAC"}

package/dist/runtime/process/resource/ps-snapshot.js

@@ -0,0 +1,77 @@
+import { Predicate } from "effect";
+import { processResourcePolicy } from "./policy.js";
+export class PsSnapshotParseError extends TypeError {
+    reason;
+    constructor(reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = "PsSnapshotParseError";
+    }
+}
+const cpuTimePattern = /^(?:(?<days>[0-9]+)-)?(?:(?<hours>[0-9]+):)?(?<minutes>[0-9]+):(?<seconds>[0-9]+(?:\.[0-9]+)?)$/u;
+const parseCpuTime = (value) => {
+    const match = cpuTimePattern.exec(value);
+    if (match?.groups === undefined)
+        return;
+    const days = Number(match.groups.days ?? 0);
+    const hours = Number(match.groups.hours ?? 0);
+    const minutes = Number(match.groups.minutes);
+    const seconds = Number(match.groups.seconds);
+    if (![days, hours, minutes, seconds].every(Number.isFinite) ||
+        (match.groups.hours !== undefined && minutes > 59) ||
+        seconds >= 60) {
+        return;
+    }
+    const milliseconds = Math.round((((days * 24 + hours) * 60 + minutes) * 60 + seconds) * 1000);
+    return Number.isSafeInteger(milliseconds) ? milliseconds : undefined;
+};
+const parseInteger = (value) => {
+    if (!/^[0-9]+$/u.test(value))
+        return;
+    const parsed = Number(value);
+    return Number.isSafeInteger(parsed) ? parsed : undefined;
+};
+const hasFourFields = (fields) => fields.length === 4;
+const parseRow = (line) => {
+    const fields = line.trim().split(/\s+/u);
+    if (!hasFourFields(fields))
+        return;
+    const [pidText, groupText, rssText, cpuText] = fields;
+    const processId = parseInteger(pidText);
+    const processGroupId = parseInteger(groupText);
+    const residentKilobytes = parseInteger(rssText);
+    const cpuTimeMilliseconds = parseCpuTime(cpuText);
+    if (processId === undefined ||
+        processGroupId === undefined ||
+        residentKilobytes === undefined ||
+        cpuTimeMilliseconds === undefined) {
+        return;
+    }
+    const residentBytes = residentKilobytes * 1024;
+    if (!Number.isSafeInteger(residentBytes))
+        return;
+    return {
+        cpuTimeMilliseconds,
+        processGroupId,
+        processId,
+        residentBytes,
+    };
+};
+export const parsePsSnapshot = (output) => {
+    if (Buffer.byteLength(output, "utf8") >
+        processResourcePolicy.maximumPsOutputBytes) {
+        throw new PsSnapshotParseError("sampler_output_limit");
+    }
+    const lines = output.trim().length === 0 ? [] : output.trim().split("\n");
+    if (lines.length > processResourcePolicy.maximumPsRows) {
+        throw new PsSnapshotParseError("sampler_output_limit");
+    }
+    return lines.map((line) => {
+        const row = parseRow(line);
+        if (Predicate.isUndefined(row)) {
+            throw new PsSnapshotParseError("sampler_output_invalid");
+        }
+        return row;
+    });
+};
+//# sourceMappingURL=ps-snapshot.js.map

package/dist/runtime/process/resource/ps-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ps-snapshot.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/ps-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IAEtC;IADX,YACW,MAAyD;QAElE,KAAK,CAAC,MAAM,CAAC,CAAC;QAFL,WAAM,GAAN,MAAM,CAAmD;QAGlE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AASD,MAAM,cAAc,GAClB,kGAAkG,CAAC;AAErG,MAAM,YAAY,GAAG,CAAC,KAAa,EAAsB,EAAE;IACzD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;QAAE,OAAO;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,IACE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvD,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,GAAG,EAAE,CAAC;QAClD,OAAO,IAAI,EAAE,EACb,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAC7B,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAC7D,CAAC;IACF,OAAO,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAa,EAAsB,EAAE;IACzD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,MAAyB,EAC4B,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAE9E,MAAM,QAAQ,GAAG,CAAC,IAAY,EAA4B,EAAE;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO;IACnC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IACtD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClD,IACE,SAAS,KAAK,SAAS;QACvB,cAAc,KAAK,SAAS;QAC5B,iBAAiB,KAAK,SAAS;QAC/B,mBAAmB,KAAK,SAAS,EACjC,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,aAAa,GAAG,iBAAiB,GAAG,IAAI,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;QAAE,OAAO;IACjD,OAAO;QACL,mBAAmB;QACnB,cAAc;QACd,SAAS;QACT,aAAa;KACd,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAA2B,EAAE;IACzE,IACE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;QACjC,qBAAqB,CAAC,oBAAoB,EAC1C,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/runtime/process/resource/sampler.d.ts

@@ -0,0 +1,18 @@
+import { Effect } from "effect";
+import type { ResourceUnavailableReason, ResourceValue } from "./contract.js";
+import type { LinuxProcessIdentity } from "./linux-process-identity.js";
+import type { PsProcessRow } from "./ps-snapshot.js";
+export type SampledProcessRow = PsProcessRow & {
+    readonly fileDescriptorCount: ResourceValue<number>;
+    readonly ioReadBytes: ResourceValue<number>;
+    readonly ioWriteBytes: ResourceValue<number>;
+    readonly processIdentity?: LinuxProcessIdentity;
+};
+/**
+ * Observation remains unavailable while Maia lacks one identity-bound helper
+ * for launch, sampling, signalling, and reaping. Spawning `/bin/ps` here would
+ * create an unregistered helper and its cancellation would require the same
+ * unsafe numeric signal that the manager rejects.
+ */
+export declare const sampleProcessGroups: (processGroupIds: readonly number[]) => Effect.Effect<readonly SampledProcessRow[], ResourceUnavailableReason, never>;
+//# sourceMappingURL=sampler.d.ts.map

package/dist/runtime/process/resource/sampler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/sampler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,KAAK,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACjD,CAAC;AASF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,uHAU/B,CAAC"}

package/dist/runtime/process/resource/sampler.js

@@ -0,0 +1,19 @@
+import { Effect } from "effect";
+import { processResourcePolicy } from "./policy.js";
+const validProcessGroups = (processGroupIds) => processGroupIds.length <= processResourcePolicy.maximumActiveTrees &&
+    processGroupIds.every((processGroupId) => Number.isSafeInteger(processGroupId) && processGroupId > 0);
+/**
+ * Observation remains unavailable while Maia lacks one identity-bound helper
+ * for launch, sampling, signalling, and reaping. Spawning `/bin/ps` here would
+ * create an unregistered helper and its cancellation would require the same
+ * unsafe numeric signal that the manager rejects.
+ */
+export const sampleProcessGroups = Effect.fn("ProcessSampler.sampleGroups")(function* (processGroupIds) {
+    if (!validProcessGroups(processGroupIds)) {
+        return yield* Effect.fail("sampler_output_limit");
+    }
+    if (processGroupIds.length === 0)
+        return [];
+    return yield* Effect.fail("platform_unsupported");
+});
+//# sourceMappingURL=sampler.js.map

package/dist/runtime/process/resource/sampler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/sampler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAUpD,MAAM,kBAAkB,GAAG,CAAC,eAAkC,EAAW,EAAE,CACzE,eAAe,CAAC,MAAM,IAAI,qBAAqB,CAAC,kBAAkB;IAClE,eAAe,CAAC,KAAK,CACnB,CAAC,cAAc,EAAE,EAAE,CACjB,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,CAC7D,CAAC;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CACzE,QAAQ,CAAC,EACP,eAAkC;IAElC,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,sBAA+B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,sBAA+B,CAAC,CAAC;AAC7D,CAAC,CACF,CAAC"}

package/dist/runtime/process/resource/sampling.d.ts

@@ -0,0 +1,23 @@
+import { Effect, type Semaphore } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import type { ProcessTerminationReason, ResourceUnavailableReason } from "./contract.js";
+import { type ManagedEntry, type ManagerState } from "./managed-tree.js";
+import { type SampledProcessRow } from "./sampler.js";
+import { type SampleObservation } from "./snapshot.js";
+export type ProcessViolation = {
+    readonly entry: ManagedEntry;
+    readonly reason: ProcessTerminationReason;
+};
+export declare const trackSampledMembers: (entry: ManagedEntry, rows: readonly SampledProcessRow[]) => boolean;
+export declare const sampleViolation: (entry: ManagedEntry, rows: readonly SampledProcessRow[], observation: SampleObservation) => readonly ProcessViolation[];
+type SampleEntriesInput = {
+    readonly active: readonly ManagedEntry[];
+    readonly identityReasons: ReadonlyMap<string, ResourceUnavailableReason>;
+    readonly observation: SampleObservation;
+    readonly rows: readonly SampledProcessRow[];
+};
+export declare const sampleViolationsForEntries: ({ active, identityReasons, observation, rows, }: SampleEntriesInput) => readonly ProcessViolation[];
+export declare const makeRefresh: (state: ManagerState, samplerAdmission: Semaphore.Semaphore) => Effect.Effect<void, NodeRuntimeError, never>;
+export declare const logSamplerFailure: (failure: NodeRuntimeError) => Effect.Effect<void, never, never>;
+export {};
+//# sourceMappingURL=sampling.d.ts.map

package/dist/runtime/process/resource/sampling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/sampling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,MAAM,EAAU,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE/D,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAO9E,OAAO,KAAK,EACV,wBAAwB,EAExB,yBAAyB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,YAAY,EAElB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,cAAc,CAAC;AAC3E,OAAO,EAKL,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AASvB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C,CAAC;AA+GF,eAAO,MAAM,mBAAmB,GAC9B,OAAO,YAAY,EACnB,MAAM,SAAS,iBAAiB,EAAE,KACjC,OASA,CAAC;AAYJ,eAAO,MAAM,eAAe,GAC1B,OAAO,YAAY,EACnB,MAAM,SAAS,iBAAiB,EAAE,EAClC,aAAa,iBAAiB,KAC7B,SAAS,gBAAgB,EAU3B,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC7C,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,iDAKxC,kBAAkB,KAAG,SAAS,gBAAgB,EAM7C,CAAC;AA4EL,eAAO,MAAM,WAAW,GACtB,OAAO,YAAY,EACnB,kBAAkB,SAAS,CAAC,SAAS,iDAMpC,CAAC;AAEJ,eAAO,MAAM,iBAAiB,GAAI,SAAS,gBAAgB,sCAIxD,CAAC"}

package/dist/runtime/process/resource/sampling.js

@@ -0,0 +1,131 @@
+import { Clock, Effect, Result } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+import { releaseEntryWithRetry, retryUnknownCleanups, terminateEntries, } from "./cleanup.js";
+import { replaceTrackedMembers, } from "./managed-tree.js";
+import { matchesLaunchLeaderIdentity, readLinuxProcessIdentity, } from "./process-identity.js";
+import { sampleProcessGroups } from "./sampler.js";
+import { appendSnapshot, makeUnavailableSnapshot, policyViolation, sampleEntry, } from "./snapshot.js";
+import { recordProcessOutcome, recordSamplerDuration } from "./telemetry.js";
+const samplerFailure = (reason) => makeNodeRuntimeError("resource_cleanup_failed", `The process-resource sampler failed closed (${reason}).`);
+const verifyLeaderIdentity = Effect.fn("ProcessResourceManager.verifyLeaderIdentity")(function* (entry) {
+    if (entry.leaderIdentity.state !== "available") {
+        return { entry, reason: "platform_unsupported" };
+    }
+    const current = yield* Effect.result(readLinuxProcessIdentity(entry.processGroupId));
+    return current._tag === "Success" &&
+        matchesLaunchLeaderIdentity(entry.leaderIdentity, current.success)
+        ? { entry }
+        : {
+            entry,
+            reason: current._tag === "Failure" ? current.failure : "process_churn",
+        };
+});
+const verifyEntries = (entries) => Effect.forEach(entries, verifyLeaderIdentity, { concurrency: 8 });
+const observationReasons = (before, after) => [...before, ...after].reduce((reasons, observation) => {
+    if (observation.reason !== undefined &&
+        !reasons.has(observation.entry.treeId)) {
+        reasons.set(observation.entry.treeId, observation.reason);
+    }
+    return reasons;
+}, new Map());
+const observeActiveEntries = Effect.fn("ProcessResourceManager.observeActiveEntries")(function* (active) {
+    const startedAtNanos = yield* Clock.monotonicTimeNanos;
+    const before = yield* verifyEntries(active);
+    const eligible = before
+        .filter((observation) => observation.reason === undefined)
+        .map((observation) => observation.entry);
+    const sampled = yield* Effect.result(sampleProcessGroups(eligible.map((entry) => entry.processGroupId)));
+    const after = yield* verifyEntries(eligible);
+    const observation = {
+        currentTimeMillis: yield* Clock.currentTimeMillis,
+        monotonicTimeNanos: yield* Clock.monotonicTimeNanos,
+    };
+    yield* recordSamplerDuration(Number(observation.monotonicTimeNanos - startedAtNanos) / 1_000_000);
+    return {
+        identityReasons: observationReasons(before, after),
+        observation,
+        sampled,
+    };
+});
+const failClosedSample = Effect.fn("ProcessResourceManager.failClosedSample")(function* ({ active, identityReasons, observation, reason, state, }) {
+    active.forEach((entry) => {
+        appendSnapshot(entry, makeUnavailableSnapshot(entry, identityReasons.get(entry.treeId) ?? reason, observation));
+    });
+    yield* recordProcessOutcome(`sampler_failed:${reason}`);
+    const cleanup = yield* Effect.result(terminateEntries(state, active, "sampling_unavailable"));
+    return yield* Effect.fail(cleanup._tag === "Failure" ? cleanup.failure : samplerFailure(reason));
+});
+const requiredMetricUnavailable = (snapshot) => snapshot.processCount.state === "unavailable" ||
+    snapshot.rssBytes.state === "unavailable" ||
+    snapshot.cpuTimeMilliseconds.state === "unavailable";
+export const trackSampledMembers = (entry, rows) => replaceTrackedMembers(entry, rows.flatMap((row) => row.processGroupId === entry.processGroupId &&
+    row.processIdentity !== undefined
+    ? [row.processIdentity]
+    : []));
+const unavailableViolation = (entry, reason, observation) => {
+    replaceTrackedMembers(entry, []);
+    appendSnapshot(entry, makeUnavailableSnapshot(entry, reason, observation));
+    return [{ entry, reason: "sampling_unavailable" }];
+};
+export const sampleViolation = (entry, rows, observation) => {
+    if (!trackSampledMembers(entry, rows)) {
+        return unavailableViolation(entry, "sampler_output_limit", observation);
+    }
+    const snapshot = sampleEntry(entry, rows, observation);
+    appendSnapshot(entry, snapshot);
+    const reason = requiredMetricUnavailable(snapshot)
+        ? "sampling_unavailable"
+        : policyViolation(entry, snapshot);
+    return reason === undefined ? [] : [{ entry, reason }];
+};
+export const sampleViolationsForEntries = ({ active, identityReasons, observation, rows, }) => active.flatMap((entry) => {
+    const identityFailure = identityReasons.get(entry.treeId);
+    return identityFailure === undefined
+        ? sampleViolation(entry, rows, observation)
+        : unavailableViolation(entry, identityFailure, observation);
+});
+const firstCleanupFailure = (results) => {
+    const failure = results.find(Result.isFailure);
+    return failure?.failure;
+};
+const terminateViolations = Effect.fn("ProcessResourceManager.terminateViolations")(function* (state, violations) {
+    const results = yield* Effect.forEach(violations, ({ entry, reason }) => Effect.result(releaseEntryWithRetry(state, entry, reason)), { concurrency: 4 });
+    const failure = firstCleanupFailure(results);
+    if (failure !== undefined)
+        return yield* Effect.fail(failure);
+});
+const refreshEntriesEffect = Effect.fn("ProcessResourceManager.refresh")(function* (state) {
+    yield* retryUnknownCleanups(state);
+    const active = [...state.entries.values()].filter((entry) => entry.latest.cleanup.state === "active");
+    if (active.length === 0)
+        return;
+    const { identityReasons, observation, sampled } = yield* observeActiveEntries(active);
+    if (sampled._tag === "Failure") {
+        return yield* failClosedSample({
+            active,
+            identityReasons,
+            observation,
+            reason: sampled.failure,
+            state,
+        });
+    }
+    const violations = sampleViolationsForEntries({
+        active,
+        identityReasons,
+        observation,
+        rows: sampled.success,
+    });
+    yield* terminateViolations(state, violations);
+});
+const refreshEntries = (state) => refreshEntriesEffect(state).pipe(Effect.withSpan("maia.node.process_resource.sample", {
+    attributes: { activeTreeCount: state.entries.size },
+}));
+const requireSamplerAdmission = Effect.fn("ProcessResourceManager.admitSampler")(function* (admission) {
+    const admitted = yield* admission.takeIfAvailable(1);
+    if (admitted)
+        return;
+    return yield* Effect.fail(makeNodeRuntimeError("transport_failed", "The shared process-resource sampler is already running.", true));
+});
+export const makeRefresh = (state, samplerAdmission) => Effect.acquireUseRelease(requireSamplerAdmission(samplerAdmission), () => refreshEntries(state), () => samplerAdmission.release(1).pipe(Effect.asVoid));
+export const logSamplerFailure = (failure) => Effect.logError("maia.node.process_resource_sampler_failed", new Map([["code", failure.code]]));
+//# sourceMappingURL=sampling.js.map

package/dist/runtime/process/resource/sampling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/sampling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAMtB,OAAO,EAGL,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAA0B,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,eAAe,EACf,WAAW,GAEZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE7E,MAAM,cAAc,GAAG,CAAC,MAAiC,EAAoB,EAAE,CAC7E,oBAAoB,CAClB,yBAAyB,EACzB,+CAA+C,MAAM,IAAI,CAC1D,CAAC;AAYJ,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CACpC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,KAAmB;IAC9B,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAClC,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC,CAC/C,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS;QAC/B,2BAA2B,CAAC,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC;QAClE,CAAC,CAAC,EAAE,KAAK,EAAE;QACX,CAAC,CAAC;YACE,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SACvE,CAAC;AACR,CAAC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CACpB,OAAgC,EACoB,EAAE,CACtD,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AAEpE,MAAM,kBAAkB,GAAG,CACzB,MAA2C,EAC3C,KAA0C,EACM,EAAE,CAClD,CAAC,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE;IACpD,IACE,WAAW,CAAC,MAAM,KAAK,SAAS;QAChC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EACtC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,EAAE,IAAI,GAAG,EAAqC,CAAC,CAAC;AAEnD,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CACpC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,MAA+B;IAC1C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM;SACpB,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC;SACzD,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAClC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG;QAClB,iBAAiB,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB;QACjD,kBAAkB,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,kBAAkB;KACxB,CAAC;IAC9B,KAAK,CAAC,CAAC,qBAAqB,CAC1B,MAAM,CAAC,WAAW,CAAC,kBAAkB,GAAG,cAAc,CAAC,GAAG,SAAS,CACpE,CAAC;IACF,OAAO;QACL,eAAe,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC;QAClD,WAAW;QACX,OAAO;KACR,CAAC;AACJ,CAAC,CAAC,CAAC;AAUH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,yCAAyC,CAAC,CAC3E,QAAQ,CAAC,EAAE,EACT,MAAM,EACN,eAAe,EACf,WAAW,EACX,MAAM,EACN,KAAK,GACa;IAClB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,cAAc,CACZ,KAAK,EACL,uBAAuB,CACrB,KAAK,EACL,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,EAC3C,WAAW,CACZ,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAClC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,sBAAsB,CAAC,CACxD,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CACtE,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,QAA6B,EAAW,EAAE,CAC3E,QAAQ,CAAC,YAAY,CAAC,KAAK,KAAK,aAAa;IAC7C,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,aAAa;IACzC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,KAAK,aAAa,CAAC;AAEvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAmB,EACnB,IAAkC,EACzB,EAAE,CACX,qBAAqB,CACnB,KAAK,EACL,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;IAC3C,GAAG,CAAC,eAAe,KAAK,SAAS;IAC/B,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;IACvB,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAC3B,KAAmB,EACnB,MAAiC,EACjC,WAA8B,EACD,EAAE;IAC/B,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjC,cAAc,CAAC,KAAK,EAAE,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAAmB,EACnB,IAAkC,EAClC,WAA8B,EACD,EAAE;IAC/B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,oBAAoB,CAAC,KAAK,EAAE,sBAAsB,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,yBAAyB,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,EACzC,MAAM,EACN,eAAe,EACf,WAAW,EACX,IAAI,GACe,EAA+B,EAAE,CACpD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;IACvB,MAAM,eAAe,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,eAAe,KAAK,SAAS;QAClC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC;QAC3C,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAC1B,OAAyD,EAC3B,EAAE;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,OAAO,EAAE,OAAO,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CACnC,4CAA4C,CAC7C,CAAC,QAAQ,CAAC,EACT,KAAmB,EACnB,UAAuC;IAEvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnC,UAAU,EACV,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CACpB,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAC5D,EAAE,WAAW,EAAE,CAAC,EAAE,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CACtE,QAAQ,CAAC,EAAE,KAAmB;IAC5B,KAAK,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CACnD,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,GAC7C,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,gBAAgB,CAAC;YAC7B,MAAM;YACN,eAAe;YACf,WAAW;YACX,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC5C,MAAM;QACN,eAAe;QACf,WAAW;QACX,IAAI,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC,CACF,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE,CAC7C,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE;IACnD,UAAU,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;CACpD,CAAC,CACH,CAAC;AAEJ,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CACvC,qCAAqC,CACtC,CAAC,QAAQ,CAAC,EACT,SAA8B;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,QAAQ;QAAE,OAAO;IACrB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,kBAAkB,EAClB,yDAAyD,EACzD,IAAI,CACL,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,KAAmB,EACnB,gBAAqC,EACrC,EAAE,CACF,MAAM,CAAC,iBAAiB,CACtB,uBAAuB,CAAC,gBAAgB,CAAC,EACzC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAC3B,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACtD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAyB,EAAE,EAAE,CAC7D,MAAM,CAAC,QAAQ,CACb,2CAA2C,EAC3C,IAAI,GAAG,CAAkB,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CACnD,CAAC"}

package/dist/runtime/process/resource/service.d.ts

@@ -0,0 +1,15 @@
+import { Context, Layer } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import type { ProcessResourceManagerService } from "./contract.js";
+import type { ProcessHostTargetTriple } from "./host-protocol-contract.js";
+import { NativeProcessHostAdapter, type NativeProcessHostAdapterOptions } from "./native-host-adapter.js";
+declare const ProcessResourceManager_base: Context.ServiceClass<ProcessResourceManager, "@maiaos/node/runtime/process/ProcessResourceManager", ProcessResourceManagerService>;
+export declare class ProcessResourceManager extends ProcessResourceManager_base {
+    static readonly layer: Layer.Layer<ProcessResourceManager, never, never>;
+    /** Internal composition seam. Product consumers remain on `layer` until
+     * their exact platform source-enablement gate has passed. */
+    static readonly nativeLayer: (targetTriple: ProcessHostTargetTriple) => Layer.Layer<ProcessResourceManager, NodeRuntimeError, NativeProcessHostAdapter>;
+    static readonly configuredNativeLayer: (options: NativeProcessHostAdapterOptions) => Layer.Layer<ProcessResourceManager, NodeRuntimeError, never>;
+}
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/runtime/process/resource/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAGV,6BAA6B,EAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EACL,wBAAwB,EAExB,KAAK,+BAA+B,EACrC,MAAM,0BAA0B,CAAC;;AAsClC,qBAAa,sBAAuB,SAAQ,2BAGc;IACxD,MAAM,CAAC,QAAQ,CAAC,KAAK,oDAGnB;IAEF;iEAC6D;IAC7D,MAAM,CAAC,QAAQ,CAAC,WAAW,GAAI,cAAc,uBAAuB,qFAMhE;IAEJ,MAAM,CAAC,QAAQ,CAAC,qBAAqB,GACnC,SAAS,+BAA+B,kEAStC;CACL"}

package/dist/runtime/process/resource/service.js

@@ -0,0 +1,39 @@
+import { Context, Effect, Layer } from "effect";
+import { makeNodeRuntimeError } from "../../errors.js";
+import { unavailableProcessResourceManagerHealth } from "./health.js";
+import { NativeProcessHostAdapter, nativeProcessHostAdapterLayer, } from "./native-host-adapter.js";
+import { makeNativeProcessResourceManager } from "./native-manager.js";
+import { normalizeProcessLaunch } from "./policy.js";
+import { recordActiveTrees, recordProcessOutcome } from "./telemetry.js";
+const unavailableNativeHost = () => makeNodeRuntimeError("transport_failed", "A qualified Maia native process host is unavailable.");
+const spawnManaged = Effect.fn("ProcessResourceManager.spawn")(function* (request) {
+    const normalized = normalizeProcessLaunch(request);
+    if (normalized.state === "invalid") {
+        return yield* Effect.fail(normalized.error);
+    }
+    // ADR-009 requires the manager—not its caller—to select a platform tier
+    // after verifying the exact helper, adapter and requested limits. No native
+    // host exists yet, so fail before admission or product creation.
+    yield* recordProcessOutcome("spawn_unavailable:native_host");
+    return yield* Effect.fail(unavailableNativeHost());
+});
+const makeProcessResourceManager = Effect.gen(function* () {
+    yield* recordActiveTrees(0);
+    return ProcessResourceManager.of({
+        activeCount: Effect.succeed(0),
+        health: Effect.succeed(unavailableProcessResourceManagerHealth),
+        refresh: Effect.void,
+        spawn: (request) => spawnManaged(request).pipe(Effect.withSpan("maia.node.process_resource.spawn")),
+    });
+});
+export class ProcessResourceManager extends Context.Service()("@maiaos/node/runtime/process/ProcessResourceManager") {
+    static layer = Layer.effect(ProcessResourceManager, makeProcessResourceManager);
+    /** Internal composition seam. Product consumers remain on `layer` until
+     * their exact platform source-enablement gate has passed. */
+    static nativeLayer = (targetTriple) => Layer.effect(ProcessResourceManager, NativeProcessHostAdapter.use((adapter) => makeNativeProcessResourceManager(adapter, targetTriple)));
+    static configuredNativeLayer = (options) => ProcessResourceManager.nativeLayer(options.artifact.targetTriple).pipe(Layer.provide(nativeProcessHostAdapterLayer({
+        ...options,
+        admissionAuthority: "process_resource_manager",
+    })));
+}
+//# sourceMappingURL=service.js.map

package/dist/runtime/process/resource/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/runtime/process/resource/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,iBAAiB,CAAC;AAO9E,OAAO,EAAE,uCAAuC,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EACL,wBAAwB,EACxB,6BAA6B,GAE9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEzE,MAAM,qBAAqB,GAAG,GAAqB,EAAE,CACnD,oBAAoB,CAClB,kBAAkB,EAClB,sDAAsD,CACvD,CAAC;AAEJ,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACtE,OAAqC;IAErC,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,wEAAwE;IACxE,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,CAAC,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrD,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,sBAAsB,CAAC,EAAE,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,uCAAuC,CAAC;QAC/D,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CACxB,MAAM,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CACpD;KACJ,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,sBAAuB,SAAQ,OAAO,CAAC,OAAO,EAGxD,CAAC,qDAAqD,CAAC;IACxD,MAAM,CAAU,KAAK,GAAG,KAAK,CAAC,MAAM,CAClC,sBAAsB,EACtB,0BAA0B,CAC3B,CAAC;IAEF;iEAC6D;IAC7D,MAAM,CAAU,WAAW,GAAG,CAAC,YAAqC,EAAE,EAAE,CACtE,KAAK,CAAC,MAAM,CACV,sBAAsB,EACtB,wBAAwB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACvC,gCAAgC,CAAC,OAAO,EAAE,YAAY,CAAC,CACxD,CACF,CAAC;IAEJ,MAAM,CAAU,qBAAqB,GAAG,CACtC,OAAwC,EACxC,EAAE,CACF,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CACpE,KAAK,CAAC,OAAO,CACX,6BAA6B,CAAC;QAC5B,GAAG,OAAO;QACV,kBAAkB,EAAE,0BAA0B;KAC/C,CAAC,CACH,CACF,CAAC"}