@moorline/core 0.0.1

package/dist/core/runtime/supervision/sidecarManager.js

@@ -0,0 +1,409 @@
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { createWriteStream, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { buildChildProcessEnv } from '../../shared/utils/childProcessEnv.js';
+import { buildManagedSidecarId, normalizeSidecarScopeKey } from './managedSidecar.js';
+import { isSameLaunchDefinition, normalizeReadinessProbe } from './sidecarLaunchDefinition.js';
+const LOG_STREAM_MAX_BUFFER_BYTES = 256 * 1024;
+const LOG_STREAM_RESUME_BUFFER_BYTES = 64 * 1024;
+export class SidecarManager {
+    deps;
+    sidecarsRoot;
+    running = new Map();
+    shuttingDown = false;
+    stopGracePeriodMs;
+    killGracePeriodMs;
+    constructor(deps) {
+        this.deps = deps;
+        this.sidecarsRoot = join(this.deps.runtimeRoot, 'sidecars');
+        this.stopGracePeriodMs = this.deps.stopGracePeriodMs ?? 2_000;
+        this.killGracePeriodMs = this.deps.killGracePeriodMs ?? 1_000;
+        mkdirSync(this.sidecarsRoot, { recursive: true });
+    }
+    listSidecars() {
+        return this.deps.store.listManagedSidecars();
+    }
+    async recover() {
+        const recoverable = this.deps.store
+            .listManagedSidecars()
+            .filter((sidecar) => sidecar.status === 'starting' || sidecar.status === 'ready');
+        for (const sidecar of recoverable) {
+            await this.startSidecar(sidecar, true);
+        }
+    }
+    async ensure(definition) {
+        const scopeKey = normalizeSidecarScopeKey(definition.scope);
+        const sidecarId = buildManagedSidecarId({
+            pluginId: definition.pluginId,
+            name: definition.name,
+            scopeKind: definition.scope.kind,
+            scopeKey
+        });
+        const cwd = definition.launch.cwd?.trim() || join(this.sidecarsRoot, sidecarId);
+        mkdirSync(cwd, { recursive: true });
+        const running = this.running.get(sidecarId);
+        if (running && isSameLaunchDefinition(running.record, definition, cwd)) {
+            return await running.ready;
+        }
+        const existing = this.deps.store.getManagedSidecar(sidecarId);
+        if (existing && isSameLaunchDefinition(existing, definition, cwd)) {
+            if (!running && (existing.status === 'ready' || existing.status === 'starting')) {
+                return await this.startSidecar(existing, true);
+            }
+            if (existing.status === 'ready') {
+                return existing;
+            }
+        }
+        if (running) {
+            await this.stopById(sidecarId, 'sidecar.replaced');
+        }
+        const now = this.deps.now();
+        const record = {
+            sidecarId,
+            instanceId: randomUUID(),
+            pluginId: definition.pluginId,
+            name: definition.name,
+            scopeKind: definition.scope.kind,
+            scopeKey,
+            status: 'starting',
+            command: definition.launch.command,
+            args: definition.launch.args ?? [],
+            cwd,
+            env: definition.launch.env ?? {},
+            restartPolicy: definition.launch.restart?.policy ?? 'never',
+            maxRestarts: definition.launch.restart?.maxRestarts ?? 0,
+            readiness: normalizeReadinessProbe(definition.launch.readiness),
+            artifactDir: cwd,
+            pid: null,
+            restartCount: existing?.restartCount ?? 0,
+            startedAt: now,
+            readyAt: null,
+            stoppedAt: null,
+            lastExitCode: null,
+            lastExitSignal: null,
+            lastError: null,
+            updatedAt: now
+        };
+        return await this.startSidecar(record, false);
+    }
+    async stop(input) {
+        const sidecarId = buildManagedSidecarId(input);
+        return await this.stopById(sidecarId, 'sidecar.stopped');
+    }
+    async cleanupScope(input) {
+        const sidecars = this.deps.store.listManagedSidecarsByScope(input.scopeKind, input.scopeKey);
+        const stopped = [];
+        for (const sidecar of sidecars) {
+            const result = await this.stopById(sidecar.sidecarId, 'sidecar.cleaned_up', input.reason);
+            if (result) {
+                stopped.push(result);
+            }
+        }
+        return stopped;
+    }
+    async shutdown(reason) {
+        this.shuttingDown = true;
+        const sidecarIds = [...this.running.keys()];
+        for (const sidecarId of sidecarIds) {
+            await this.stopById(sidecarId, 'sidecar.cleaned_up', reason);
+        }
+    }
+    attachLogStream(input) {
+        const stream = createWriteStream(input.path, { flags: 'a' });
+        let paused = false;
+        const tryResume = () => {
+            if (!paused || stream.writableLength > LOG_STREAM_RESUME_BUFFER_BYTES) {
+                return;
+            }
+            paused = false;
+            input.source.resume();
+        };
+        stream.on('drain', tryResume);
+        input.source.on('data', (chunk) => {
+            const value = String(chunk);
+            input.onChunk(value);
+            stream.write(value, 'utf8');
+            if (!paused && stream.writableLength >= LOG_STREAM_MAX_BUFFER_BYTES) {
+                paused = true;
+                input.source.pause();
+            }
+        });
+        const close = async () => {
+            if (paused) {
+                paused = false;
+                input.source.resume();
+            }
+            await new Promise((resolve) => {
+                stream.end(() => resolve());
+            });
+        };
+        return {
+            close
+        };
+    }
+    async stopById(sidecarId, eventName, reason) {
+        const running = this.running.get(sidecarId);
+        if (!running) {
+            const existing = this.deps.store.getManagedSidecar(sidecarId);
+            if (!existing) {
+                return null;
+            }
+            const stopped = this.persist({
+                ...existing,
+                status: 'stopped',
+                pid: null,
+                stoppedAt: this.deps.now(),
+                updatedAt: this.deps.now(),
+                lastError: reason ?? existing.lastError
+            });
+            this.deps.appendAuditEvent(eventName, {
+                sidecarId,
+                instanceId: stopped.instanceId,
+                reason: reason ?? null
+            });
+            return stopped;
+        }
+        running.expectedStop = true;
+        const stopping = this.persist({
+            ...running.record,
+            status: 'stopping',
+            updatedAt: this.deps.now(),
+            lastError: reason ?? null
+        });
+        running.record = stopping;
+        running.child.kill('SIGTERM');
+        let stopped;
+        try {
+            stopped = await this.awaitStop(running, this.stopGracePeriodMs);
+        }
+        catch {
+            running.forcedKill = true;
+            running.child.kill('SIGKILL');
+            try {
+                stopped = await this.awaitStop(running, this.killGracePeriodMs);
+            }
+            catch {
+                this.running.delete(sidecarId);
+                stopped = this.persist({
+                    ...running.record,
+                    status: 'failed',
+                    pid: null,
+                    stoppedAt: this.deps.now(),
+                    lastExitCode: null,
+                    lastExitSignal: 'SIGKILL',
+                    lastError: `Sidecar did not exit within ${this.stopGracePeriodMs + this.killGracePeriodMs}ms.`,
+                    updatedAt: this.deps.now()
+                });
+            }
+        }
+        this.deps.appendAuditEvent(eventName, {
+            sidecarId,
+            instanceId: stopped.instanceId,
+            reason: reason ?? null
+        });
+        return stopped;
+    }
+    async startSidecar(record, recovered) {
+        mkdirSync(record.artifactDir, { recursive: true });
+        const child = spawn(record.command, record.args, {
+            cwd: record.cwd,
+            env: buildChildProcessEnv({ explicit: record.env }),
+            stdio: 'pipe'
+        });
+        let resolveReady;
+        let rejectReady;
+        let resolveStopped;
+        const ready = new Promise((resolve, reject) => {
+            resolveReady = resolve;
+            rejectReady = reject;
+        });
+        const stopped = new Promise((resolve) => {
+            resolveStopped = resolve;
+        });
+        const running = {
+            child,
+            record,
+            expectedStop: false,
+            forcedKill: false,
+            ready,
+            resolveReady,
+            rejectReady,
+            stopped,
+            resolveStopped
+        };
+        this.running.set(record.sidecarId, running);
+        const started = this.persist({
+            ...record,
+            status: 'starting',
+            pid: child.pid ?? null,
+            startedAt: this.deps.now(),
+            readyAt: null,
+            stoppedAt: null,
+            lastExitCode: null,
+            lastExitSignal: null,
+            lastError: recovered ? 'Recovered after runtime restart.' : null,
+            updatedAt: this.deps.now()
+        });
+        running.record = started;
+        const stdoutLog = join(started.artifactDir, 'stdout.log');
+        const stderrLog = join(started.artifactDir, 'stderr.log');
+        let settled = false;
+        const markReady = () => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            const current = this.persist({
+                ...running.record,
+                status: 'ready',
+                readyAt: this.deps.now(),
+                updatedAt: this.deps.now(),
+                lastError: null
+            });
+            running.record = current;
+            this.deps.appendAuditEvent('sidecar.started', {
+                sidecarId: current.sidecarId,
+                instanceId: current.instanceId,
+                pluginId: current.pluginId,
+                scopeKind: current.scopeKind,
+                scopeKey: current.scopeKey,
+                pid: current.pid,
+                recovered
+            });
+            running.resolveReady(current);
+        };
+        const readiness = running.record.readiness;
+        const readinessPattern = readiness.kind === 'stdio' ? new RegExp(readiness.pattern) : null;
+        const readinessTimer = readiness.kind === 'stdio'
+            ? globalThis.setTimeout(() => {
+                if (!settled) {
+                    running.child.kill('SIGTERM');
+                    running.rejectReady(new Error(`Sidecar ${running.record.sidecarId} did not become ready before timeout.`));
+                }
+            }, readiness.timeoutMs ?? 15_000)
+            : null;
+        const inspectChunk = (stream, chunk) => {
+            if (readiness.kind !== 'stdio' || !readinessPattern || settled) {
+                return;
+            }
+            const allowedStream = readiness.stream === 'both' || readiness.stream === undefined ? true : readiness.stream === stream;
+            if (!allowedStream) {
+                return;
+            }
+            if (readinessPattern.test(chunk)) {
+                if (readinessTimer) {
+                    globalThis.clearTimeout(readinessTimer);
+                }
+                markReady();
+            }
+        };
+        const stdout = this.attachLogStream({
+            source: running.child.stdout,
+            path: stdoutLog,
+            onChunk: (value) => {
+                inspectChunk('stdout', value);
+            }
+        });
+        const stderr = this.attachLogStream({
+            source: running.child.stderr,
+            path: stderrLog,
+            onChunk: (value) => {
+                inspectChunk('stderr', value);
+            }
+        });
+        running.child.once('exit', (code, signal) => {
+            if (readinessTimer) {
+                globalThis.clearTimeout(readinessTimer);
+            }
+            void Promise.all([stdout.close(), stderr.close()]);
+            const current = this.running.get(record.sidecarId);
+            if (!current || current.record.instanceId !== started.instanceId) {
+                return;
+            }
+            this.running.delete(record.sidecarId);
+            const failed = current.forcedKill || (!current.expectedStop && !this.shuttingDown && code !== 0);
+            const nextRecord = this.persist({
+                ...current.record,
+                status: failed ? 'failed' : 'stopped',
+                pid: null,
+                stoppedAt: this.deps.now(),
+                lastExitCode: code,
+                lastExitSignal: signal,
+                lastError: failed ? `Sidecar exited unexpectedly with code ${code ?? 'null'}.` : current.record.lastError,
+                updatedAt: this.deps.now()
+            });
+            current.resolveStopped(nextRecord);
+            if (!settled) {
+                settled = true;
+                current.rejectReady(new Error(nextRecord.lastError ?? `Sidecar ${nextRecord.sidecarId} exited before readiness.`));
+            }
+            this.deps.appendAuditEvent(failed ? 'sidecar.failed' : 'sidecar.stopped', {
+                sidecarId: nextRecord.sidecarId,
+                instanceId: nextRecord.instanceId,
+                exitCode: code,
+                signal,
+                restartCount: nextRecord.restartCount
+            });
+            if (failed &&
+                !current.expectedStop &&
+                nextRecord.restartPolicy === 'on-failure' &&
+                nextRecord.restartCount < nextRecord.maxRestarts) {
+                const restarting = this.persist({
+                    ...nextRecord,
+                    instanceId: randomUUID(),
+                    status: 'starting',
+                    restartCount: nextRecord.restartCount + 1,
+                    pid: null,
+                    readyAt: null,
+                    stoppedAt: null,
+                    lastError: nextRecord.lastError,
+                    updatedAt: this.deps.now()
+                });
+                this.deps.appendAuditEvent('sidecar.restarted', {
+                    sidecarId: restarting.sidecarId,
+                    previousInstanceId: nextRecord.instanceId,
+                    instanceId: restarting.instanceId,
+                    restartCount: restarting.restartCount
+                });
+                void this.startSidecar(restarting, false).catch((error) => {
+                    const message = error instanceof Error ? error.message : String(error);
+                    const failedRestart = this.persist({
+                        ...restarting,
+                        status: 'failed',
+                        pid: null,
+                        stoppedAt: this.deps.now(),
+                        lastError: message,
+                        updatedAt: this.deps.now()
+                    });
+                    this.deps.appendAuditEvent('sidecar.restart.failed', {
+                        sidecarId: failedRestart.sidecarId,
+                        instanceId: failedRestart.instanceId,
+                        previousInstanceId: nextRecord.instanceId,
+                        restartCount: failedRestart.restartCount,
+                        error: message
+                    });
+                });
+            }
+        });
+        if (readiness.kind === 'none') {
+            markReady();
+        }
+        return await ready;
+    }
+    persist(record) {
+        this.deps.store.upsertManagedSidecar(record);
+        return this.deps.store.getManagedSidecar(record.sidecarId) ?? record;
+    }
+    async awaitStop(running, timeoutMs) {
+        return await Promise.race([
+            running.stopped,
+            new Promise((_, reject) => {
+                globalThis.setTimeout(() => {
+                    reject(new Error(`Timed out waiting for ${running.record.sidecarId} to stop.`));
+                }, timeoutMs);
+            })
+        ]);
+    }
+}
+//# sourceMappingURL=sidecarManager.js.map

package/dist/core/runtime/supervision/sidecarManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidecarManager.js","sourceRoot":"","sources":["../../../../../../../src/core/runtime/supervision/sidecarManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAoB,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EAIzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAuB/F,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,CAAC;AAC/C,MAAM,8BAA8B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,MAAM,OAAO,cAAc;IAOI;IANZ,YAAY,CAAS;IACrB,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,YAAY,GAAG,KAAK,CAAC;IACZ,iBAAiB,CAAS;IAC1B,iBAAiB,CAAS;IAE3C,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC9D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK;aAChC,mBAAmB,EAAE;aACrB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACpF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAoC;QAC/C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,qBAAqB,CAAC;YACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;YAChC,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAChF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YACvE,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,QAAQ,IAAI,sBAAsB,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;gBAChF,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAyB;YACnC,SAAS;YACT,UAAU,EAAE,UAAU,EAAE;YACxB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;YAChC,QAAQ;YACR,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;YAClC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;YAClC,GAAG;YACH,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE;YAChC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,OAAO;YAC3D,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC;YACxD,SAAS,EAAE,uBAAuB,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;YAC/D,WAAW,EAAE,GAAG;YAChB,GAAG,EAAE,IAAI;YACT,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,CAAC;YACzC,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;SACf,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAwF;QACjG,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAwE;QACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7F,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1F,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAIvB;QAGC,MAAM,MAAM,GAAgB,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,GAAG,8BAA8B,EAAE,CAAC;gBACtE,OAAO;YACT,CAAC;YACD,MAAM,GAAG,KAAK,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,IAAI,2BAA2B,EAAE,CAAC;gBACpE,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;YACtC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,KAAK,CAAC;gBACf,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO;YACL,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,SAAiB,EAAE,MAAe;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,GAAG,QAAQ;gBACX,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,SAAS,EAAE,MAAM,IAAI,QAAQ,CAAC,SAAS;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;gBACpC,SAAS;gBACT,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM,EAAE,MAAM,IAAI,IAAI;aACvB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC5B,GAAG,OAAO,CAAC,MAAM;YACjB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAC1B,SAAS,EAAE,MAAM,IAAI,IAAI;SAC1B,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,OAA6B,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBACrB,GAAG,OAAO,CAAC,MAAM;oBACjB,MAAM,EAAE,QAAQ;oBAChB,GAAG,EAAE,IAAI;oBACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBAC1B,YAAY,EAAE,IAAI;oBAClB,cAAc,EAAE,SAAS;oBACzB,SAAS,EAAE,+BAA+B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,KAAK;oBAC9F,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACpC,SAAS;YACT,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,MAAM,IAAI,IAAI;SACvB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAA4B,EAAE,SAAkB;QACzE,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YAC/C,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,oBAAoB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACnD,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,IAAI,YAAoD,CAAC;QACzD,IAAI,WAAoC,CAAC;QACzC,IAAI,cAAsD,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClE,YAAY,GAAG,OAAO,CAAC;YACvB,WAAW,GAAG,MAAM,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE;YAC5D,cAAc,GAAG,OAAO,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAmB;YAC9B,KAAK;YACL,MAAM;YACN,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;YACjB,KAAK;YACL,YAAY;YACZ,WAAW;YACX,OAAO;YACP,cAAc;SACf,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC3B,GAAG,MAAM;YACT,MAAM,EAAE,UAAU;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;YACtB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,IAAI;YAChE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;QAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,GAAG,OAAO,CAAC,MAAM;gBACjB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;gBAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS;aACV,CAAC,CAAC;YACH,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAC3C,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3F,MAAM,cAAc,GAClB,SAAS,CAAC,IAAI,KAAK,OAAO;YACxB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9B,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,SAAS,uCAAuC,CAAC,CAAC,CAAC;gBAC7G,CAAC;YACH,CAAC,EAAE,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC;YACnC,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,YAAY,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAQ,EAAE;YACxE,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,gBAAgB,IAAI,OAAO,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,MAAM,aAAa,GACjB,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;YACrG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,cAAc,EAAE,CAAC;oBACnB,UAAU,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC1C,CAAC;gBACD,SAAS,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC;YAClC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC;YAClC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;YAC5B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,cAAc,EAAE,CAAC;gBACnB,UAAU,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAC1C,CAAC;YACD,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;YACjG,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC9B,GAAG,OAAO,CAAC,MAAM;gBACjB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBACrC,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,YAAY,EAAE,IAAI;gBAClB,cAAc,EAAE,MAAM;gBACtB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,yCAAyC,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;gBACzG,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;aAC3B,CAAC,CAAC;YACH,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,WAAW,UAAU,CAAC,SAAS,2BAA2B,CAAC,CAAC,CAAC;YACrH,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,EAAE;gBACxE,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,QAAQ,EAAE,IAAI;gBACd,MAAM;gBACN,YAAY,EAAE,UAAU,CAAC,YAAY;aACtC,CAAC,CAAC;YACH,IACE,MAAM;gBACN,CAAC,OAAO,CAAC,YAAY;gBACrB,UAAU,CAAC,aAAa,KAAK,YAAY;gBACzC,UAAU,CAAC,YAAY,GAAG,UAAU,CAAC,WAAW,EAChD,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC9B,GAAG,UAAU;oBACb,UAAU,EAAE,UAAU,EAAE;oBACxB,MAAM,EAAE,UAAU;oBAClB,YAAY,EAAE,UAAU,CAAC,YAAY,GAAG,CAAC;oBACzC,GAAG,EAAE,IAAI;oBACT,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;iBAC3B,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,EAAE;oBAC9C,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,kBAAkB,EAAE,UAAU,CAAC,UAAU;oBACzC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,YAAY,EAAE,UAAU,CAAC,YAAY;iBACtC,CAAC,CAAC;gBACH,KAAK,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACjE,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;wBACjC,GAAG,UAAU;wBACb,MAAM,EAAE,QAAQ;wBAChB,GAAG,EAAE,IAAI;wBACT,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;wBAC1B,SAAS,EAAE,OAAO;wBAClB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;qBAC3B,CAAC,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,wBAAwB,EAAE;wBACnD,SAAS,EAAE,aAAa,CAAC,SAAS;wBAClC,UAAU,EAAE,aAAa,CAAC,UAAU;wBACpC,kBAAkB,EAAE,UAAU,CAAC,UAAU;wBACzC,YAAY,EAAE,aAAa,CAAC,YAAY;wBACxC,KAAK,EAAE,OAAO;qBACf,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,EAAE,CAAC;QACd,CAAC;QAED,OAAO,MAAM,KAAK,CAAC;IACrB,CAAC;IAEO,OAAO,CAAC,MAA4B;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAuB,EAAE,SAAiB;QAChE,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,OAAO;YACf,IAAI,OAAO,CAAuB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC9C,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE;oBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,MAAM,CAAC,SAAS,WAAW,CAAC,CAAC,CAAC;gBAClF,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/shared/fs/atomicWrite.d.ts

@@ -0,0 +1,6 @@
+interface WriteFileAtomicSyncOptions {
+    mode?: number;
+    fsync?: boolean;
+}
+export declare function writeFileAtomicSync(path: string, body: string | Uint8Array, options?: WriteFileAtomicSyncOptions): void;
+export {};

package/dist/core/shared/fs/atomicWrite.js

@@ -0,0 +1,48 @@
+import { randomUUID } from 'node:crypto';
+import { closeSync, fsyncSync, mkdirSync, openSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+function fsyncParentDir(path) {
+    try {
+        const dirFd = openSync(dirname(path), 'r');
+        try {
+            fsyncSync(dirFd);
+        }
+        finally {
+            closeSync(dirFd);
+        }
+    }
+    catch {
+        // Some filesystems do not support directory fsync; best-effort only.
+    }
+}
+export function writeFileAtomicSync(path, body, options = {}) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    let fd = null;
+    try {
+        fd = openSync(tempPath, 'w', options.mode);
+        writeFileSync(fd, body);
+        if (options.fsync !== false) {
+            fsyncSync(fd);
+        }
+        closeSync(fd);
+        fd = null;
+        renameSync(tempPath, path);
+        if (options.fsync !== false) {
+            fsyncParentDir(path);
+        }
+    }
+    catch (error) {
+        if (fd !== null) {
+            try {
+                closeSync(fd);
+            }
+            catch {
+                // Ignore close failures on an already-failing write path.
+            }
+        }
+        rmSync(tempPath, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=atomicWrite.js.map

package/dist/core/shared/fs/atomicWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicWrite.js","sourceRoot":"","sources":["../../../../../../../src/core/shared/fs/atomicWrite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,IAAyB,EACzB,UAAsC,EAAE;IAExC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAC9D,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,IAAI,CAAC;QACV,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,cAAc,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/shared/fs/canonicalPathContainment.d.ts

@@ -0,0 +1,8 @@
+export declare function canonicalizeExistingPath(path: string, label: string): string;
+export declare function isCanonicalExistingPathWithinRoot(rootPath: string, candidatePath: string): boolean;
+export declare function assertCanonicalExistingPathWithinRoot(input: {
+    rootPath: string;
+    candidatePath: string;
+    rootLabel: string;
+    candidateLabel: string;
+}): string;

package/dist/core/shared/fs/canonicalPathContainment.js

@@ -0,0 +1,31 @@
+import { realpathSync } from 'node:fs';
+import { isAbsolute, relative, resolve, sep } from 'node:path';
+function isResolvedPathWithinRoot(rootPath, candidatePath) {
+    const rel = relative(rootPath, candidatePath);
+    return (rel === '' ||
+        (!(rel === '..' || rel.startsWith(`..${sep}`) || rel.startsWith('../') || rel.startsWith('..\\')) &&
+            !isAbsolute(rel)));
+}
+export function canonicalizeExistingPath(path, label) {
+    const resolved = resolve(path);
+    try {
+        return realpathSync(resolved);
+    }
+    catch (error) {
+        throw new Error(`${label} does not exist or cannot be resolved: ${path}. ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+export function isCanonicalExistingPathWithinRoot(rootPath, candidatePath) {
+    const canonicalRoot = canonicalizeExistingPath(rootPath, 'Root path');
+    const canonicalCandidate = canonicalizeExistingPath(candidatePath, 'Candidate path');
+    return isResolvedPathWithinRoot(canonicalRoot, canonicalCandidate);
+}
+export function assertCanonicalExistingPathWithinRoot(input) {
+    const canonicalRoot = canonicalizeExistingPath(input.rootPath, input.rootLabel);
+    const canonicalCandidate = canonicalizeExistingPath(input.candidatePath, input.candidateLabel);
+    if (!isResolvedPathWithinRoot(canonicalRoot, canonicalCandidate)) {
+        throw new Error(`${input.candidateLabel} must stay inside ${input.rootLabel}.`);
+    }
+    return canonicalCandidate;
+}
+//# sourceMappingURL=canonicalPathContainment.js.map

package/dist/core/shared/fs/canonicalPathContainment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalPathContainment.js","sourceRoot":"","sources":["../../../../../../../src/core/shared/fs/canonicalPathContainment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,SAAS,wBAAwB,CAAC,QAAgB,EAAE,aAAqB;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC9C,OAAO,CACL,GAAG,KAAK,EAAE;QACV,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/F,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,KAAa;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0CAA0C,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB,EAAE,aAAqB;IACvF,MAAM,aAAa,GAAG,wBAAwB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACrF,OAAO,wBAAwB,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,CAAC,wBAAwB,CAAC,aAAa,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,qBAAqB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/dist/core/shared/fs/runtimeOwnedPath.d.ts

@@ -0,0 +1,6 @@
+export declare function assertRuntimeOwnedWorkspacePath(input: {
+    workspacesDir: string;
+    workspacePath: string;
+    expectedWorkspaceId: string;
+    entityLabel: string;
+}): string;

package/dist/core/shared/fs/runtimeOwnedPath.js

@@ -0,0 +1,23 @@
+import { lstatSync } from 'node:fs';
+import { basename, isAbsolute, join, relative, resolve } from 'node:path';
+function isPathWithinRoot(rootPath, candidatePath) {
+    const rel = relative(rootPath, candidatePath);
+    return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+}
+export function assertRuntimeOwnedWorkspacePath(input) {
+    const root = resolve(input.workspacesDir);
+    const candidate = resolve(input.workspacePath);
+    const expected = resolve(join(root, input.expectedWorkspaceId));
+    if (!isPathWithinRoot(root, candidate)) {
+        throw new Error(`${input.entityLabel} workspace path is outside the managed runtime workspace root.`);
+    }
+    if (candidate !== expected || basename(candidate) !== input.expectedWorkspaceId) {
+        throw new Error(`${input.entityLabel} workspace path does not match the runtime-owned workspace id ${input.expectedWorkspaceId}.`);
+    }
+    const stats = lstatSync(candidate, { throwIfNoEntry: false });
+    if (stats?.isSymbolicLink()) {
+        throw new Error(`${input.entityLabel} workspace path is a symlink and cannot be deleted recursively.`);
+    }
+    return candidate;
+}
+//# sourceMappingURL=runtimeOwnedPath.js.map

package/dist/core/shared/fs/runtimeOwnedPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeOwnedPath.js","sourceRoot":"","sources":["../../../../../../../src/core/shared/fs/runtimeOwnedPath.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1E,SAAS,gBAAgB,CAAC,QAAgB,EAAE,aAAqB;IAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAEhE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,gEAAgE,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,WAAW,iEAAiE,KAAK,CAAC,mBAAmB,GAAG,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,iEAAiE,CAAC,CAAC;IACzG,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/core/shared/utils/childProcessEnv.d.ts

@@ -0,0 +1,4 @@
+export declare function buildChildProcessEnv(input?: {
+    explicit?: Record<string, string | undefined>;
+    additionalAllowlist?: string[];
+}): Record<string, string | undefined>;

package/dist/core/shared/utils/childProcessEnv.js

@@ -0,0 +1,66 @@
+const BASE_ENV_ALLOWLIST = new Set([
+    'PATH',
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'SHELL',
+    'TMP',
+    'TEMP',
+    'TMPDIR',
+    'LANG',
+    'LC_ALL',
+    'TZ',
+    'TERM',
+    'COLORTERM',
+    'NO_COLOR',
+    'FORCE_COLOR',
+    'CI',
+    'SSH_AUTH_SOCK',
+    'SSL_CERT_FILE',
+    'SSL_CERT_DIR',
+    'HTTP_PROXY',
+    'HTTPS_PROXY',
+    'NO_PROXY',
+    'http_proxy',
+    'https_proxy',
+    'no_proxy'
+]);
+const PREFIX_ALLOWLIST = ['MOORLINE_', 'CODEX_'];
+function parseExtraAllowlist(raw) {
+    if (!raw) {
+        return [];
+    }
+    return raw
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+}
+export function buildChildProcessEnv(input = {}) {
+    const allowed = new Set(BASE_ENV_ALLOWLIST);
+    for (const key of input.additionalAllowlist ?? []) {
+        if (key.trim()) {
+            allowed.add(key.trim());
+        }
+    }
+    for (const key of parseExtraAllowlist(process.env.MOORLINE_CHILD_ENV_ALLOWLIST)) {
+        allowed.add(key);
+    }
+    const env = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value === undefined) {
+            continue;
+        }
+        if (allowed.has(key) || PREFIX_ALLOWLIST.some((prefix) => key.startsWith(prefix))) {
+            env[key] = value;
+        }
+    }
+    for (const [key, value] of Object.entries(input.explicit ?? {})) {
+        if (value === undefined) {
+            delete env[key];
+            continue;
+        }
+        env[key] = value;
+    }
+    return env;
+}
+//# sourceMappingURL=childProcessEnv.js.map

package/dist/core/shared/utils/childProcessEnv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"childProcessEnv.js","sourceRoot":"","sources":["../../../../../../../src/core/shared/utils/childProcessEnv.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,WAAW;IACX,UAAU;IACV,aAAa;IACb,IAAI;IACJ,eAAe;IACf,eAAe;IACf,cAAc;IACd,YAAY;IACZ,aAAa;IACb,UAAU;IACV,YAAY;IACZ,aAAa;IACb,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AAEjD,SAAS,mBAAmB,CAAC,GAAuB;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAGjC,EAAE;IACJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAClF,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}