@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/storage/pi-rpc-authorization-operations.js

@@ -0,0 +1,136 @@
+import { DateTime, Effect } from "effect";
+import { commandReceiptFromPersisted } from "../command-receipt/storage/codec.js";
+import { applyPiRpcIntegrationAuthorization, beginPiRpcIntegrationRevocation, createPiRpcIntegrationPlan, dispatchPiRpcIntegrationPermit, issuePiRpcIntegrationPermit, readPiRpcIntegrationPlan, settlePiRpcIntegrationPermit, settlePiRpcIntegrationRevocation, showPiRpcIntegrationAuthorization, startPiRpcIntegrationPermit, } from "../harness/pi-rpc/authorization/index.js";
+import { asNodeRuntimeError, makeNodeRuntimeError, } from "../runtime/errors.js";
+import { commitCommandInCurrentTransaction, getPersistedCommand, } from "./journal.js";
+const withStorage = (semaphore, message, operation) => semaphore.withPermit(Effect.gen(function* () {
+    const recordedAt = DateTime.formatIso(yield* DateTime.now);
+    return yield* Effect.try({
+        catch: (error) => asNodeRuntimeError(error, "storage_failed", message),
+        try: () => operation(recordedAt),
+    });
+}));
+const receiptPayload = (authorization, outcome) => JSON.stringify({
+    authorization: {
+        adapterVersion: authorization.adapterVersion,
+        artifact: {
+            closureSha256: authorization.artifact.closureSha256,
+            entrySha256: authorization.artifact.entrySha256,
+            interpreterSha256: authorization.artifact.interpreterSha256,
+            packageName: authorization.artifact.packageName,
+            packageVersion: authorization.artifact.packageVersion,
+        },
+        conversationPolicyRevision: authorization.conversationPolicyRevision,
+        ownerKinds: authorization.ownerKinds,
+        planDigest: authorization.planDigest,
+        planId: authorization.planId,
+        revision: authorization.revision,
+        state: authorization.state,
+        vouchPolicyRevision: authorization.vouchPolicyRevision,
+    },
+    outcome,
+});
+const commitReceipt = (input) => {
+    const payloadJson = receiptPayload(input.authorization, input.outcome);
+    return commitCommandInCurrentTransaction(input.database, {
+        actorId: "actor_local_user",
+        aggregateId: "pi-rpc",
+        aggregateType: "integration-authorization",
+        commandId: input.commandId,
+        eventPayloadJson: payloadJson,
+        eventType: input.outcome === "applied"
+            ? "integration.authorization.applied"
+            : "integration.authorization.revoking",
+        method: input.method,
+        requestDigest: input.requestDigest,
+        resultJson: payloadJson,
+        targetId: "pi-rpc",
+        targetType: "integration-authorization",
+    }, input.recordedAt);
+};
+const requireReceipt = (database, commandId, committed) => {
+    const persisted = committed ?? getPersistedCommand(database, commandId);
+    if (persisted !== undefined)
+        return commandReceiptFromPersisted(commandId, persisted);
+    throw makeNodeRuntimeError("storage_corrupt", "The Pi RPC integration authorization receipt was not persisted.");
+};
+const applyStoredAuthorization = (database, input, recordedAt) => {
+    let committed;
+    const result = applyPiRpcIntegrationAuthorization(database, {
+        ...input,
+        onNewResult: (created) => {
+            input.verifyArtifactIdentity();
+            committed = commitReceipt({
+                authorization: created.authorization,
+                commandId: input.commandId,
+                database,
+                method: "integration.apply.pi-rpc",
+                outcome: "applied",
+                recordedAt: created.recordedAt,
+                requestDigest: input.requestDigest,
+            });
+        },
+        recordedAt,
+    });
+    return {
+        authorization: result.authorization,
+        delivery: result.delivery,
+        receipt: requireReceipt(database, input.commandId, committed),
+        recordedAt: result.recordedAt,
+    };
+};
+const beginStoredRevocation = (database, input, recordedAt) => {
+    let committed;
+    const result = beginPiRpcIntegrationRevocation(database, {
+        ...input,
+        onNewResult: (created) => {
+            committed = commitReceipt({
+                authorization: created.authorization,
+                commandId: input.commandId,
+                database,
+                method: "integration.remove.pi-rpc",
+                outcome: "revocation_started",
+                recordedAt: created.recordedAt,
+                requestDigest: input.requestDigest,
+            });
+        },
+        recordedAt,
+    });
+    return {
+        authorization: result.authorization,
+        delivery: result.delivery,
+        invalidatedIssuedPermits: result.invalidatedIssuedPermits,
+        receipt: requireReceipt(database, input.commandId, committed),
+        recordedAt: result.recordedAt,
+    };
+};
+const makePlanOperations = (database, semaphore) => ({
+    createPiRpcIntegrationPlan: (input) => withStorage(semaphore, "The Pi RPC plan could not be persisted.", (at) => createPiRpcIntegrationPlan(database, { ...input, recordedAt: at })).pipe(Effect.map((result) => result.plan)),
+    readPiRpcIntegrationPlan: (planId) => withStorage(semaphore, "The Pi RPC plan could not be read.", () => readPiRpcIntegrationPlan(database, planId)),
+});
+const makeAuthorizationOperations = (database, semaphore) => ({
+    applyPiRpcIntegrationAuthorization: (input) => withStorage(semaphore, "The Pi RPC authorization could not be applied.", (at) => applyStoredAuthorization(database, input, at)),
+    beginPiRpcIntegrationRevocation: (input) => withStorage(semaphore, "The Pi RPC revocation could not begin.", (at) => beginStoredRevocation(database, input, at)),
+    settlePiRpcIntegrationRevocation: (input) => withStorage(semaphore, "The Pi RPC revocation could not settle.", (at) => settlePiRpcIntegrationRevocation(database, { ...input, recordedAt: at })),
+    showPiRpcIntegrationAuthorization: () => withStorage(semaphore, "The Pi RPC authorization could not be read.", () => showPiRpcIntegrationAuthorization(database)),
+});
+const makePermitOperations = (database, semaphore) => ({
+    dispatchPiRpcIntegrationPermit: (input) => withStorage(semaphore, "The Pi RPC permit could not dispatch.", (at) => dispatchPiRpcIntegrationPermit(database, { ...input, recordedAt: at })),
+    issuePiRpcIntegrationPermit: (input) => withStorage(semaphore, "The Pi RPC permit could not be issued.", (at) => issuePiRpcIntegrationPermit(database, { ...input, recordedAt: at })),
+    settlePiRpcIntegrationPermit: (input) => withStorage(semaphore, "The Pi RPC permit could not settle.", (at) => settlePiRpcIntegrationPermit(database, { ...input, recordedAt: at })),
+    startPiRpcIntegrationPermit: makeStartPermitOperation(database, semaphore),
+});
+const makeStartPermitOperation = (database, semaphore) => (input) => withStorage(semaphore, "The Pi RPC permit could not start.", (at) => startPiRpcIntegrationPermit(database, {
+    commandId: input.commandId,
+    identity: input,
+    permitId: input.permitId,
+    processTreeId: input.processTreeId,
+    recordedAt: at,
+    requestDigest: input.requestDigest,
+}));
+export const makePiRpcAuthorizationDatabaseOperations = (database, semaphore) => ({
+    ...makeAuthorizationOperations(database, semaphore),
+    ...makePermitOperations(database, semaphore),
+    ...makePlanOperations(database, semaphore),
+});
+//# sourceMappingURL=pi-rpc-authorization-operations.js.map

package/dist/storage/pi-rpc-authorization-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-rpc-authorization-operations.js","sourceRoot":"","sources":["../../src/storage/pi-rpc-authorization-operations.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EACL,kCAAkC,EAClC,+BAA+B,EAC/B,0BAA0B,EAC1B,8BAA8B,EAC9B,2BAA2B,EAQ3B,wBAAwB,EACxB,4BAA4B,EAC5B,gCAAgC,EAChC,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iCAAiC,EACjC,mBAAmB,GAEpB,MAAM,cAAc,CAAC;AAuGtB,MAAM,WAAW,GAAG,CAClB,SAA8B,EAC9B,OAAe,EACf,SAAyC,EACA,EAAE,CAC3C,SAAS,CAAC,UAAU,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,CAAC;QACtE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,cAAc,GAAG,CACrB,aAA2C,EAC3C,OAAyC,EACzC,EAAE,CACF,IAAI,CAAC,SAAS,CAAC;IACb,aAAa,EAAE;QACb,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,QAAQ,EAAE;YACR,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,aAAa;YACnD,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW;YAC/C,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,iBAAiB;YAC3D,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW;YAC/C,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC,cAAc;SACtD;QACD,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,MAAM,EAAE,aAAa,CAAC,MAAM;QAC5B,QAAQ,EAAE,aAAa,CAAC,QAAQ;QAChC,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;KACvD;IACD,OAAO;CACR,CAAC,CAAC;AAYL,MAAM,aAAa,GAAG,CAAC,KAAmB,EAA0B,EAAE;IACpE,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,iCAAiC,CACtC,KAAK,CAAC,QAAQ,EACd;QACE,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,QAAQ;QACrB,aAAa,EAAE,2BAA2B;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,WAAW;QAC7B,SAAS,EACP,KAAK,CAAC,OAAO,KAAK,SAAS;YACzB,CAAC,CAAC,mCAAmC;YACrC,CAAC,CAAC,oCAAoC;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,2BAA2B;KACxC,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAsB,EACtB,SAAiB,EACjB,SAA6C,EAC7B,EAAE;IAClB,MAAM,SAAS,GAAG,SAAS,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,SAAS,KAAK,SAAS;QACzB,OAAO,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,iEAAiE,CAClE,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,wBAAwB,GAAG,CAC/B,QAAsB,EACtB,KAAiB,EACjB,UAAkB,EACL,EAAE;IACf,IAAI,SAA6C,CAAC;IAClD,MAAM,MAAM,GAAG,kCAAkC,CAAC,QAAQ,EAAE;QAC1D,GAAG,KAAK;QACR,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;YACvB,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/B,SAAS,GAAG,aAAa,CAAC;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ;gBACR,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;QACD,UAAU;KACX,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC;QAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,qBAAqB,GAAG,CAC5B,QAAsB,EACtB,KAAkB,EAClB,UAAkB,EACJ,EAAE;IAChB,IAAI,SAA6C,CAAC;IAClD,MAAM,MAAM,GAAG,+BAA+B,CAAC,QAAQ,EAAE;QACvD,GAAG,KAAK;QACR,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE;YACvB,SAAS,GAAG,aAAa,CAAC;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ;gBACR,MAAM,EAAE,2BAA2B;gBACnC,OAAO,EAAE,oBAAoB;gBAC7B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;QACD,UAAU;KACX,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;QACzD,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC;QAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,QAAsB,EACtB,SAA8B,EAI9B,EAAE,CAAC,CAAC;IACJ,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,CACpC,WAAW,CAAC,SAAS,EAAE,yCAAyC,EAAE,CAAC,EAAE,EAAE,EAAE,CACvE,0BAA0B,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACnE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,wBAAwB,EAAE,CAAC,MAAM,EAAE,EAAE,CACnC,WAAW,CAAC,SAAS,EAAE,oCAAoC,EAAE,GAAG,EAAE,CAChE,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAC3C;CACJ,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,QAAsB,EACtB,SAA8B,EAO9B,EAAE,CAAC,CAAC;IACJ,kCAAkC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC5C,WAAW,CACT,SAAS,EACT,gDAAgD,EAChD,CAAC,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CACtD;IACH,+BAA+B,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,WAAW,CAAC,SAAS,EAAE,wCAAwC,EAAE,CAAC,EAAE,EAAE,EAAE,CACtE,qBAAqB,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAC3C;IACH,gCAAgC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1C,WAAW,CAAC,SAAS,EAAE,yCAAyC,EAAE,CAAC,EAAE,EAAE,EAAE,CACvE,gCAAgC,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACzE;IACH,iCAAiC,EAAE,GAAG,EAAE,CACtC,WAAW,CAAC,SAAS,EAAE,6CAA6C,EAAE,GAAG,EAAE,CACzE,iCAAiC,CAAC,QAAQ,CAAC,CAC5C;CACJ,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAC3B,QAAsB,EACtB,SAA8B,EAO9B,EAAE,CAAC,CAAC;IACJ,8BAA8B,EAAE,CAAC,KAAK,EAAE,EAAE,CACxC,WAAW,CAAC,SAAS,EAAE,uCAAuC,EAAE,CAAC,EAAE,EAAE,EAAE,CACrE,8BAA8B,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACvE;IACH,2BAA2B,EAAE,CAAC,KAAK,EAAE,EAAE,CACrC,WAAW,CAAC,SAAS,EAAE,wCAAwC,EAAE,CAAC,EAAE,EAAE,EAAE,CACtE,2BAA2B,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACpE;IACH,4BAA4B,EAAE,CAAC,KAAK,EAAE,EAAE,CACtC,WAAW,CAAC,SAAS,EAAE,qCAAqC,EAAE,CAAC,EAAE,EAAE,EAAE,CACnE,4BAA4B,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CACrE;IACH,2BAA2B,EAAE,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC;CAC3E,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAC5B,CACE,QAAsB,EACtB,SAA8B,EACuC,EAAE,CACzE,CAAC,KAAK,EAAE,EAAE,CACR,WAAW,CAAC,SAAS,EAAE,oCAAoC,EAAE,CAAC,EAAE,EAAE,EAAE,CAClE,2BAA2B,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,KAAK,CAAC,SAAS;IAC1B,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,aAAa,EAAE,KAAK,CAAC,aAAa;IAClC,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,KAAK,CAAC,aAAa;CACnC,CAAC,CACH,CAAC;AAEN,MAAM,CAAC,MAAM,wCAAwC,GAAG,CACtD,QAAsB,EACtB,SAA8B,EACQ,EAAE,CAAC,CAAC;IAC1C,GAAG,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC;IACnD,GAAG,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC5C,GAAG,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC;CAC3C,CAAC,CAAC"}

package/dist/storage/policy.d.ts

@@ -0,0 +1,8 @@
+export declare const sqlitePolicy: {
+    readonly applicationId: 1296124225;
+    readonly busyTimeoutMs: 1000;
+    readonly maximumDatabaseBytes: number;
+    readonly maximumPageBytes: 65536;
+    readonly maximumWalBytes: number;
+};
+//# sourceMappingURL=policy.d.ts.map

package/dist/storage/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/storage/policy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC"}

package/dist/storage/policy.js

@@ -0,0 +1,8 @@
+export const sqlitePolicy = {
+    applicationId: 1_296_124_225,
+    busyTimeoutMs: 1000,
+    maximumDatabaseBytes: 512 * 1024 * 1024,
+    maximumPageBytes: 65_536,
+    maximumWalBytes: 64 * 1024 * 1024,
+};
+//# sourceMappingURL=policy.js.map

package/dist/storage/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/storage/policy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,IAAI;IACnB,oBAAoB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACvC,gBAAgB,EAAE,MAAM;IACxB,eAAe,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACzB,CAAC"}

package/dist/storage/sqlite-integer.d.ts

@@ -0,0 +1,3 @@
+export declare const MAX_SIGNED_SQLITE_INTEGER = 9223372036854775807n;
+export declare const advanceSignedSqliteInteger: (value: bigint | string, delta?: number) => bigint;
+//# sourceMappingURL=sqlite-integer.d.ts.map

package/dist/storage/sqlite-integer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-integer.d.ts","sourceRoot":"","sources":["../../src/storage/sqlite-integer.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,yBAAyB,uBAA6B,CAAC;AAoBpE,eAAO,MAAM,0BAA0B,GACrC,OAAO,MAAM,GAAG,MAAM,EACtB,cAAS,KACR,MAcF,CAAC"}

package/dist/storage/sqlite-integer.js

@@ -0,0 +1,25 @@
+import { makeNodeRuntimeError, NodeRuntimeError } from "../runtime/errors.js";
+export const MAX_SIGNED_SQLITE_INTEGER = 9223372036854775807n;
+const parseSignedSqliteInteger = (value) => {
+    try {
+        const parsed = typeof value === "bigint" ? value : BigInt(value);
+        if (parsed < 0n || parsed > MAX_SIGNED_SQLITE_INTEGER)
+            throw makeNodeRuntimeError("storage_corrupt", "The durable counter is outside SQLite's signed integer range.");
+        return parsed;
+    }
+    catch (error) {
+        if (error instanceof NodeRuntimeError)
+            throw error;
+        throw makeNodeRuntimeError("storage_corrupt", "The durable counter is not an exact signed SQLite integer.");
+    }
+};
+export const advanceSignedSqliteInteger = (value, delta = 1) => {
+    const current = parseSignedSqliteInteger(value);
+    if (!Number.isSafeInteger(delta) || delta < 1)
+        throw makeNodeRuntimeError("storage_corrupt", "The durable counter increment is invalid.");
+    const increment = BigInt(delta);
+    if (current > MAX_SIGNED_SQLITE_INTEGER - increment)
+        throw makeNodeRuntimeError("saturated", "The durable counter exhausted SQLite's signed integer range.");
+    return current + increment;
+};
+//# sourceMappingURL=sqlite-integer.js.map

package/dist/storage/sqlite-integer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite-integer.js","sourceRoot":"","sources":["../../src/storage/sqlite-integer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAA0B,CAAC;AAEpE,MAAM,wBAAwB,GAAG,CAAC,KAAsB,EAAU,EAAE;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,yBAAyB;YACnD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,+DAA+D,CAChE,CAAC;QACJ,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB;YAAE,MAAM,KAAK,CAAC;QACnD,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,KAAsB,EACtB,KAAK,GAAG,CAAC,EACD,EAAE;IACV,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC3C,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,2CAA2C,CAC5C,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,OAAO,GAAG,yBAAyB,GAAG,SAAS;QACjD,MAAM,oBAAoB,CACxB,WAAW,EACX,8DAA8D,CAC/D,CAAC;IACJ,OAAO,OAAO,GAAG,SAAS,CAAC;AAC7B,CAAC,CAAC"}

package/dist/storage/store-effect.d.ts

@@ -0,0 +1,5 @@
+import { Effect, type Semaphore } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+export declare const wrapStoreRead: <TValue>(operation: () => TValue) => Effect.Effect<TValue, NodeRuntimeError>;
+export declare const wrapStoreWrite: <TValue>(semaphore: Semaphore.Semaphore, verifyAuthority: Effect.Effect<void, NodeRuntimeError>, operation: (recordedAt: string) => TValue) => Effect.Effect<TValue, NodeRuntimeError>;
+//# sourceMappingURL=store-effect.d.ts.map

package/dist/storage/store-effect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-effect.d.ts","sourceRoot":"","sources":["../../src/storage/store-effect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,MAAM,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,aAAa,GAAI,MAAM,EAClC,WAAW,MAAM,MAAM,KACtB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CASrC,CAAC;AAEL,eAAO,MAAM,cAAc,GAAI,MAAM,EACnC,WAAW,SAAS,CAAC,SAAS,EAC9B,iBAAiB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,EACtD,WAAW,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,KACxC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAetC,CAAC"}

package/dist/storage/store-effect.js

@@ -0,0 +1,15 @@
+import { DateTime, Effect } from "effect";
+import { asNodeRuntimeError, } from "../runtime/errors.js";
+export const wrapStoreRead = (operation) => Effect.try({
+    catch: (error) => asNodeRuntimeError(error, "storage_failed", "The Maia project workspace store could not be read."),
+    try: operation,
+});
+export const wrapStoreWrite = (semaphore, verifyAuthority, operation) => semaphore.withPermit(Effect.gen(function* () {
+    yield* verifyAuthority;
+    const recordedAt = DateTime.formatIso(yield* DateTime.now);
+    return yield* Effect.try({
+        catch: (error) => asNodeRuntimeError(error, "storage_failed", "The Maia project workspace command could not be persisted."),
+        try: () => operation(recordedAt),
+    });
+}));
+//# sourceMappingURL=store-effect.js.map

package/dist/storage/store-effect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-effect.js","sourceRoot":"","sources":["../../src/storage/store-effect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAE1D,OAAO,EACL,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,SAAuB,EACkB,EAAE,CAC3C,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,kBAAkB,CAChB,KAAK,EACL,gBAAgB,EAChB,qDAAqD,CACtD;IACH,GAAG,EAAE,SAAS;CACf,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,SAA8B,EAC9B,eAAsD,EACtD,SAAyC,EACA,EAAE,CAC3C,SAAS,CAAC,UAAU,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,eAAe,CAAC;IACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,kBAAkB,CAChB,KAAK,EACL,gBAAgB,EAChB,4DAA4D,CAC7D;QACH,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/dist/terminal/application/live-requests.d.ts

@@ -0,0 +1,18 @@
+import type { LocalNodeRequestPayload, LocalNodeSuccessResult } from "@maiaos/protocol";
+import { Effect } from "effect";
+import type { NodeRuntimeError } from "../../runtime/errors.js";
+import type { LiveTerminalRuntimeService } from "../live-service.js";
+type TerminalCreateRequest = Extract<LocalNodeRequestPayload, {
+    readonly method: "terminal.create";
+}>;
+type ActivatedLiveTerminalCreateRequest = Omit<TerminalCreateRequest, "parameters"> & {
+    readonly parameters: Extract<TerminalCreateRequest["parameters"], {
+        readonly mode: "interactive";
+    }>;
+};
+export type ActivatedLiveTerminalRequest = ActivatedLiveTerminalCreateRequest | Extract<LocalNodeRequestPayload, {
+    readonly method: "terminal.controller.acquire" | "terminal.controller.release" | "terminal.controller.request" | "terminal.controller.request.show" | "terminal.input.write" | "terminal.session.close" | "terminal.session.resize" | "terminal.session.signal";
+}>;
+export declare const executeLiveTerminalRequest: (runtime: LiveTerminalRuntimeService, request: ActivatedLiveTerminalRequest) => Effect.Effect<LocalNodeSuccessResult, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=live-requests.d.ts.map

package/dist/terminal/application/live-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-requests.d.ts","sourceRoot":"","sources":["../../../src/terminal/application/live-requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAErE,KAAK,qBAAqB,GAAG,OAAO,CAClC,uBAAuB,EACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CACvC,CAAC;AAEF,KAAK,kCAAkC,GAAG,IAAI,CAC5C,qBAAqB,EACrB,YAAY,CACb,GAAG;IACF,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,qBAAqB,CAAC,YAAY,CAAC,EACnC;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,4BAA4B,GACpC,kCAAkC,GAClC,OAAO,CACL,uBAAuB,EACvB;IACE,QAAQ,CAAC,MAAM,EACX,6BAA6B,GAC7B,6BAA6B,GAC7B,6BAA6B,GAC7B,kCAAkC,GAClC,sBAAsB,GACtB,wBAAwB,GACxB,yBAAyB,GACzB,yBAAyB,CAAC;CAC/B,CACF,CAAC;AAEN,eAAO,MAAM,0BAA0B,gJA0BrC,CAAC"}

package/dist/terminal/application/live-requests.js

@@ -0,0 +1,24 @@
+import { Effect } from "effect";
+export const executeLiveTerminalRequest = Effect.fn("LiveTerminal.executeRequest")(function* (runtime, request) {
+    switch (request.method) {
+        case "terminal.controller.acquire":
+            return yield* runtime.acquireController(request.parameters);
+        case "terminal.controller.release":
+            return yield* runtime.releaseController(request.parameters);
+        case "terminal.controller.request":
+            return yield* runtime.requestController(request.parameters);
+        case "terminal.controller.request.show":
+            return yield* runtime.showControllerRequest(request.parameters);
+        case "terminal.create":
+            return yield* runtime.create(request.parameters);
+        case "terminal.input.write":
+            return yield* runtime.write(request.parameters);
+        case "terminal.session.close":
+            return yield* runtime.close(request.parameters);
+        case "terminal.session.resize":
+            return yield* runtime.resize(request.parameters);
+        case "terminal.session.signal":
+            return yield* runtime.signal(request.parameters);
+    }
+});
+//# sourceMappingURL=live-requests.js.map

package/dist/terminal/application/live-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-requests.js","sourceRoot":"","sources":["../../../src/terminal/application/live-requests.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAqChC,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CACjD,6BAA6B,CAC9B,CAAC,QAAQ,CAAC,EACT,OAAmC,EACnC,OAAqC;IAErC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,6BAA6B;YAChC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,KAAK,6BAA6B;YAChC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,KAAK,6BAA6B;YAChC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,KAAK,kCAAkC;YACrC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClE,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,sBAAsB;YACzB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,KAAK,wBAAwB;YAC3B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,KAAK,yBAAyB;YAC5B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,yBAAyB;YAC5B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/terminal/application/requests.d.ts

@@ -0,0 +1,10 @@
+import type { LocalNodeRequestPayload, TerminalResult } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { type NodeRuntimeError } from "../../runtime/errors.js";
+import type { NodeDatabaseResource } from "../../storage/node-database.js";
+type TerminalRequest = Extract<LocalNodeRequestPayload, {
+    readonly method: "terminal.create" | "terminal.events.list" | "terminal.list" | "terminal.read" | "terminal.show";
+}>;
+export declare const executeTerminalRequest: (database: NodeDatabaseResource, request: TerminalRequest) => Effect.Effect<TerminalResult, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=requests.d.ts.map

package/dist/terminal/application/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/terminal/application/requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAO3E,KAAK,eAAe,GAAG,OAAO,CAC5B,uBAAuB,EACvB;IACE,QAAQ,CAAC,MAAM,EACX,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,eAAe,GACf,eAAe,CAAC;CACrB,CACF,CAAC;AAyDF,eAAO,MAAM,sBAAsB,sHAkBlC,CAAC"}

package/dist/terminal/application/requests.js

@@ -0,0 +1,50 @@
+import { Effect } from "effect";
+import { makeNodeRuntimeError, } from "../../runtime/errors.js";
+import { terminalCreateResultFromCommand, } from "../storage/create.js";
+import { terminalCreateRequestDigest } from "../storage/request-digest.js";
+const LOCAL_USER_ACTOR_ID = "actor_local_user";
+const nodePlatform = () => {
+    if (process.platform === "darwin" ||
+        process.platform === "linux" ||
+        process.platform === "win32") {
+        return process.platform;
+    }
+    return "other";
+};
+const decodePersistedTerminalCreation = Effect.fn("Terminal.decodePersistedCreation")((commandId, persisted) => Effect.try({
+    catch: () => makeNodeRuntimeError("storage_corrupt", "The persisted terminal request result is invalid."),
+    try: () => terminalCreateResultFromCommand(commandId, persisted),
+}));
+const createTerminalRequest = Effect.fn("Terminal.create")(function* (database, request) {
+    const requestDigest = terminalCreateRequestDigest(request.parameters);
+    const existing = yield* database.findCommand({
+        actorId: LOCAL_USER_ACTOR_ID,
+        commandId: request.parameters.commandId,
+        method: request.method,
+        requestDigest,
+    });
+    if (existing !== undefined) {
+        return yield* decodePersistedTerminalCreation(request.parameters.commandId, existing);
+    }
+    return yield* database.createTerminal({
+        actorId: LOCAL_USER_ACTOR_ID,
+        parameters: request.parameters,
+        platform: nodePlatform(),
+        requestDigest,
+    });
+});
+export const executeTerminalRequest = Effect.fn("Terminal.executeRequest")(function* (database, request) {
+    switch (request.method) {
+        case "terminal.create":
+            return yield* createTerminalRequest(database, request);
+        case "terminal.events.list":
+            return yield* database.listTerminalEvents(request.parameters);
+        case "terminal.list":
+            return yield* database.listTerminals(request.parameters);
+        case "terminal.read":
+            return yield* database.readTerminal(request.parameters);
+        case "terminal.show":
+            return yield* database.showTerminal(request.parameters.terminalId);
+    }
+});
+//# sourceMappingURL=requests.js.map

package/dist/terminal/application/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/terminal/application/requests.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EACL,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,+BAA+B,GAEhC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAc3E,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAE/C,MAAM,YAAY,GAAG,GAAqB,EAAE;IAC1C,IACE,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC7B,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,OAAO,CAAC,QAAQ,KAAK,OAAO,EAC5B,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,MAAM,CAAC,EAAE,CAC/C,kCAAkC,CACnC,CACC,CACE,SAAiB,EACjB,SAAgE,EAChE,EAAE,CACF,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,GAAG,EAAE,CACV,oBAAoB,CAClB,iBAAiB,EACjB,mDAAmD,CACpD;IACH,GAAG,EAAE,GAAG,EAAE,CAAC,+BAA+B,CAAC,SAAS,EAAE,SAAS,CAAC;CACjE,CAAC,CACL,CAAC;AAEF,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAClE,QAA8B,EAC9B,OAAyE;IAEzE,MAAM,aAAa,GAAG,2BAA2B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,OAAO,EAAE,mBAAmB;QAC5B,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,aAAa;KACd,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,+BAA+B,CAC3C,OAAO,CAAC,UAAU,CAAC,SAAS,EAC5B,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QACpC,OAAO,EAAE,mBAAmB;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,YAAY,EAAE;QACxB,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CACxE,QAAQ,CAAC,EACP,QAA8B,EAC9B,OAAwB;IAExB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,KAAK,sBAAsB;YACzB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/terminal/live-launch.d.ts

@@ -0,0 +1,16 @@
+import { type LiveTerminalCreateParameters, type LiveTerminalCreateResult } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { makeNodeRuntimeError } from "../runtime/errors.js";
+import type { ManagedInteractiveTerminalProcess } from "../runtime/process/resource/contract.js";
+import { type LiveTerminalRuntimeState } from "./live-runtime-state.js";
+declare const terminalEnvironment: () => Effect.Effect<Readonly<NodeJS.ProcessEnv>, import("../runtime/errors.js").NodeRuntimeError, never>;
+type LiveTerminalLaunchDependencies = {
+    readonly environment: typeof terminalEnvironment;
+    readonly supervise: (state: LiveTerminalRuntimeState, terminalId: string, process_: ManagedInteractiveTerminalProcess) => Effect.Effect<void, ReturnType<typeof makeNodeRuntimeError>>;
+};
+export declare const createLiveTerminal: (state: LiveTerminalRuntimeState, parameters: LiveTerminalCreateParameters) => Effect.Effect<LiveTerminalCreateResult, ReturnType<typeof makeNodeRuntimeError>>;
+export declare const liveTerminalLaunchInternals: {
+    createLiveTerminalWithDependencies: (state: LiveTerminalRuntimeState, parameters: LiveTerminalCreateParameters, dependencies: LiveTerminalLaunchDependencies) => Effect.Effect<LiveTerminalCreateResult, import("../runtime/errors.js").NodeRuntimeError, never>;
+};
+export {};
+//# sourceMappingURL=live-launch.d.ts.map

package/dist/terminal/live-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-launch.d.ts","sourceRoot":"","sources":["../../src/terminal/live-launch.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAI9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAS,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EACV,iCAAiC,EAGlC,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EAEL,KAAK,wBAAwB,EAM9B,MAAM,yBAAyB,CAAC;AA6CjC,QAAA,MAAM,mBAAmB,0GAiBrB,CAAC;AAwEL,KAAK,8BAA8B,GAAG;IACpC,QAAQ,CAAC,WAAW,EAAE,OAAO,mBAAmB,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,wBAAwB,EAC/B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,iCAAiC,KACxC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;CACnE,CAAC;AA6TF,eAAO,MAAM,kBAAkB,GAC7B,OAAO,wBAAwB,EAC/B,YAAY,4BAA4B,KACvC,MAAM,CAAC,MAAM,CACd,wBAAwB,EACxB,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAMtC,CAAC;AAEJ,eAAO,MAAM,2BAA2B;;CAEvC,CAAC"}

package/dist/terminal/live-launch.js

@@ -0,0 +1,213 @@
+import { userInfo } from "node:os";
+import { liveTerminalCreateResultSchema, MAX_TERMINAL_MUTATION_WAIT_MS, MAX_TERMINAL_OUTPUT_CHUNK_BYTES, } from "@maiaos/protocol";
+import { Effect, Scope } from "effect";
+import { makeNodeRuntimeError } from "../runtime/errors.js";
+import { asRuntimeFailure, mutationIdentity, persistedLiveTerminalResult, recordLiveTerminalAcknowledgementLost, recordLiveTerminalInterrupted, recordLiveTerminalUnknown, } from "./live-runtime-state.js";
+import { cleanupUnacknowledgedTerminal, superviseLiveTerminalProcess, } from "./live-supervision.js";
+import { liveTerminalCommandRequestDigest, } from "./storage/live-commands.js";
+const admittedTerminalAccount = (account) => {
+    if (account.shell === "/bin/zsh" &&
+        account.username.length > 0 &&
+        account.homedir.length > 0) {
+        return account;
+    }
+    throw makeNodeRuntimeError("path_invalid", "The authenticated local account is not admitted for /bin/zsh login Terminal use.");
+};
+const accountEnvironment = (account) => ({
+    ["COLORTERM"]: "truecolor",
+    ["HOME"]: account.homedir,
+    ["LANG"]: "C",
+    ["LOGNAME"]: account.username,
+    ["PATH"]: "/usr/bin:/bin:/usr/sbin:/sbin",
+    ["SHELL"]: account.shell,
+    ["TERM"]: "xterm-256color",
+    ["USER"]: account.username,
+});
+const terminalEnvironment = () => Effect.try({
+    catch: (error) => asRuntimeFailure(error, "The authenticated local account could not be resolved for the Terminal."),
+    try: () => {
+        const account = userInfo({ encoding: "utf8" });
+        return accountEnvironment(admittedTerminalAccount({
+            homedir: account.homedir,
+            shell: account.shell ?? "",
+            username: account.username,
+        }));
+    },
+});
+const repositoryAuthority = (context) => ({
+    gitCommonDevice: context.gitCommonDirectoryIdentity.device.toString(),
+    gitCommonDirectory: context.gitCommonDirectory,
+    gitCommonInode: context.gitCommonDirectoryIdentity.inode.toString(),
+    rootDevice: context.rootIdentity.device.toString(),
+    rootInode: context.rootIdentity.inode.toString(),
+    rootPath: context.rootPath,
+});
+const interactiveLimits = {
+    maximumCpuTimeMilliseconds: 7 * 24 * 60 * 60 * 1000,
+    maximumMemoryBytes: 64 * 1024 * 1024 * 1024,
+    maximumProcessCount: 1024,
+    maximumWallTimeMilliseconds: 7 * 24 * 60 * 60 * 1000,
+};
+const interactiveStreamLimits = {
+    maximumDataChunkBytes: MAX_TERMINAL_OUTPUT_CHUNK_BYTES,
+    maximumPendingInputBytes: 64 * 1024,
+    maximumPendingOutputBytes: 256 * 1024,
+};
+const launchRequest = (input) => ({
+    arguments_: ["-l"],
+    environment: input.environment,
+    executable: "/bin/zsh",
+    interactiveTerminal: {
+        columns: input.parameters.columns,
+        generation: 1,
+        nativeOperationSequence: 1,
+        rows: input.parameters.rows,
+        terminalId: input.terminalId,
+    },
+    limits: interactiveLimits,
+    owner: {
+        commandId: input.parameters.commandId,
+        kind: "interactive-terminal",
+        terminalId: input.terminalId,
+        workspaceId: input.parameters.workspaceId,
+    },
+    repositoryAuthority: repositoryAuthority(input.context),
+    standardInput: "pipe",
+    streamLimits: interactiveStreamLimits,
+    workingDirectory: input.context.workingDirectory,
+});
+const requireInteractiveProcess = (process_) => process_.control === "interactive-terminal"
+    ? Effect.succeed(process_)
+    : Effect.fail(makeNodeRuntimeError("internal_error", "The ProcessResourceManager did not expose Terminal control."));
+const defaultLaunchDependencies = {
+    environment: terminalEnvironment,
+    supervise: superviseLiveTerminalProcess,
+};
+const prepareLaunchRequest = Effect.fn("LiveTerminal.prepareLaunchRequest")(function* (input, prepared) {
+    const context = yield* input.state.database.readLiveTerminalLaunchContext(input.parameters.workspaceId);
+    const verifyAuthority = input.state.inspector.revalidate(context);
+    yield* verifyAuthority;
+    const environment = yield* input.dependencies.environment();
+    return {
+        mutation: prepared.mutation,
+        request: launchRequest({
+            context,
+            environment,
+            parameters: input.parameters,
+            terminalId: prepared.mutation.terminalId,
+        }),
+        state: "prepared",
+        verifyAuthority,
+    };
+});
+const preflightLiveTerminalCreate = Effect.fn("LiveTerminal.preflightCreate")(function* (input) {
+    const prepared = yield* input.state.database.prepareLiveTerminalCreate({
+        parameters: input.parameters,
+        requestDigest: input.requestDigest,
+    });
+    if (prepared.mutation.dispatchState !== "acknowledged") {
+        return yield* prepareLaunchRequest(input, prepared);
+    }
+    const result = yield* input.state.database.acknowledgeLiveTerminalCreate({
+        commandId: input.parameters.commandId,
+        requestDigest: input.requestDigest,
+    });
+    return { result, state: "acknowledged" };
+});
+const spawnLiveTerminal = (input, restore) => restore(input.runtime.manager.spawn(input.request).pipe(Scope.provide(input.runtime.scope), Effect.flatMap(requireInteractiveProcess), Effect.timeoutOrElse({
+    duration: MAX_TERMINAL_MUTATION_WAIT_MS,
+    orElse: () => Effect.fail(makeNodeRuntimeError("deadline_exceeded", "The live Terminal launch acknowledgement deadline expired.", true)),
+})));
+const removeExactActiveProcess = (state, terminalId, process_) => {
+    if (state.active.get(terminalId)?.process === process_) {
+        state.active.delete(terminalId);
+    }
+};
+const acknowledgementLostCompensation = (input) => cleanupUnacknowledgedTerminal(input.process_, {
+    generation: input.attempted.generation,
+    terminalId: input.attempted.terminalId,
+}).pipe(Effect.tap(() => Effect.sync(() => {
+    removeExactActiveProcess(input.state, input.attempted.terminalId, input.process_);
+})), Effect.flatMap((settlement) => recordLiveTerminalAcknowledgementLost({
+    mutation: input.attempted,
+    requestDigest: input.requestDigest,
+    settlement,
+    state: input.state,
+})));
+const superviseLaunchedCreate = (input, restore, cleanup) => restore(input.dependencies.supervise(input.runtime, input.attempted.terminalId, input.process_)).pipe(Effect.as(true), Effect.catch(() => cleanup.pipe(Effect.map((result) => ({ result })))), Effect.onInterrupt(() => cleanup.pipe(Effect.asVoid)));
+const completeLaunchedCreate = Effect.fn("LiveTerminal.completeLaunchedCreate")(function* (input, restore) {
+    const cleanup = acknowledgementLostCompensation({
+        attempted: input.attempted,
+        process_: input.process_,
+        requestDigest: input.requestDigest,
+        state: input.runtime,
+    });
+    const supervised = yield* superviseLaunchedCreate(input, restore, cleanup);
+    if (supervised !== true)
+        return supervised.result;
+    return yield* input.runtime.database
+        .acknowledgeLiveTerminalCreate({
+        commandId: input.parameters.commandId,
+        requestDigest: input.requestDigest,
+    })
+        .pipe(Effect.catch(() => cleanup));
+});
+const claimAttemptedMutation = Effect.fn("LiveTerminal.claimAttemptedMutation")(function* (input) {
+    const claimed = yield* input.runtime.database.claimLiveTerminalMutationDispatch({
+        ...mutationIdentity(input.mutation),
+        verifyAuthority: input.verifyAuthority,
+    });
+    return yield* input.runtime.database.markLiveTerminalMutationAttempted(mutationIdentity(claimed));
+});
+const spawnAttemptedTerminal = (input, attempted, restore) => spawnLiveTerminal(input, restore).pipe(Effect.map((process_) => ({ process_, state: "launched" })), Effect.catch((error) => recordLiveTerminalUnknown({
+    error,
+    mutation: attempted,
+    requestDigest: input.requestDigest,
+    state: input.runtime,
+}).pipe(Effect.map((result) => ({ result, state: "unknown" })))), Effect.onInterrupt(() => recordLiveTerminalInterrupted(input.runtime, attempted, input.requestDigest)));
+const executeAttemptedCreate = Effect.fn("LiveTerminal.executeAttemptedCreate")(function* (input, restore) {
+    const attempted = yield* claimAttemptedMutation(input);
+    const launched = yield* spawnAttemptedTerminal(input, attempted, restore);
+    if (launched.state === "unknown")
+        return launched.result;
+    return yield* completeLaunchedCreate({ ...input, attempted, process_: launched.process_ }, restore);
+});
+const requireDarwinTerminalCandidate = () => process.platform === "darwin"
+    ? Effect.void
+    : Effect.fail(makeNodeRuntimeError("command_not_implemented", "Interactive live Terminals are a macOS-only source candidate."));
+const findDuplicateCreate = (state, parameters, requestDigest) => persistedLiveTerminalResult(state, {
+    commandId: parameters.commandId,
+    method: "terminal.create",
+    requestDigest,
+    schema: liveTerminalCreateResultSchema,
+});
+const createUnderPermit = Effect.fn("LiveTerminal.createUnderPermit")(function* (input) {
+    const preflight = yield* preflightLiveTerminalCreate(input);
+    if (preflight.state === "acknowledged")
+        return preflight.result;
+    return yield* Effect.uninterruptibleMask((restore) => executeAttemptedCreate({
+        ...preflight,
+        dependencies: input.dependencies,
+        parameters: input.parameters,
+        requestDigest: input.requestDigest,
+        runtime: input.state,
+    }, restore));
+});
+const createLiveTerminalWithDependencies = Effect.fn("LiveTerminal.create")(function* (state, parameters, dependencies) {
+    yield* requireDarwinTerminalCandidate();
+    const requestDigest = liveTerminalCommandRequestDigest("terminal.create", parameters);
+    const duplicate = yield* findDuplicateCreate(state, parameters, requestDigest);
+    if (duplicate !== undefined)
+        return duplicate;
+    return yield* state.launchAdmission.withPermit(createUnderPermit({
+        dependencies,
+        parameters,
+        requestDigest,
+        state,
+    }).pipe(Effect.map((result) => liveTerminalCreateResultSchema.parse(result))));
+});
+export const createLiveTerminal = (state, parameters) => createLiveTerminalWithDependencies(state, parameters, defaultLaunchDependencies);
+export const liveTerminalLaunchInternals = {
+    createLiveTerminalWithDependencies,
+};
+//# sourceMappingURL=live-launch.js.map