@omnitron-dev/omnitron 0.3.0 → 0.3.2

package/dist/shared/fresh-module-reader.js

@@ -0,0 +1,257 @@
+/** One bounded, fresh module graph for definition and ecosystem readers.
+ * Extracted from the bootstrap reader lifecycle: wait for the answer, exit and
+ * IPC close before returning; no long-lived process/module cache is retained. */
+import path from 'node:path';
+import fs from 'node:fs';
+import { fork } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { serialize } from 'node:v8';
+import { redactDiagnosticText } from '@omnitron-dev/titan/diagnostics';
+export const FRESH_MODULE_ANSWER = 'omnitron:module-reader:answer';
+export const FRESH_MODULE_MARK = 'OMNITRON_MODULE_READER_CHILD';
+const STDERR_TAIL_CHARS = 4_000;
+const MODULE_READ_OUTPUT_BYTES = 1024 * 1024;
+const MODULE_READ_RESULT_BYTES = 16 * 1024 * 1024;
+/** Locate the checked-in child beside source or compiled caller; never a cwd guess. */
+export function moduleReaderEntry(callerUrl, name) {
+    const file = fileURLToPath(callerUrl);
+    return path.join(path.dirname(file), name + path.extname(file));
+}
+/** Install before importing user code, so an abandoned parent cannot leave a reader. */
+export function initializeModuleReader() {
+    if (!process.send || !process.env[FRESH_MODULE_MARK])
+        throw Error('Module reader requires its parent IPC channel');
+    process.once('disconnect', () => process.exit(3));
+}
+export function answerModuleRead(result) {
+    let message;
+    if (result.ok) {
+        try {
+            if (serialize(result.value).byteLength > MODULE_READ_RESULT_BYTES)
+                throw Error('Module configuration exceeds its 16 MiB result budget');
+            message = { type: FRESH_MODULE_ANSWER, ok: true, value: result.value };
+        }
+        catch (error) {
+            answerModuleRead({ ok: false, error });
+            return;
+        }
+    }
+    else {
+        const error = result.error instanceof Error ? result.error : Error(String(result.error));
+        message = { type: FRESH_MODULE_ANSWER, ok: false, message: redactDiagnosticText(error.message),
+            name: error.name, stack: error.stack ? redactDiagnosticText(error.stack) : undefined };
+    }
+    if (!process.send)
+        process.exit(2);
+    process.send(message, undefined, {}, error => process.exit(error ? 2 : message.ok ? 0 : 1));
+}
+/** Flags `childExecArgv` drops that carry a value, inline or as the next argument. */
+const DROPPED_WITH_VALUE = new Set([
+    '-e', '--eval', '-p', '--print', '-pe', '--input-type', '--inspect-port', '--debug-port', '--watch-path',
+]);
+/**
+ * This process's Node flags as the reading process should get them.
+ *
+ * Everything that shapes how modules resolve and load is kept, so the child
+ * reads the definition exactly as this process would have — `--import
+ * tsx/esm` first of all, which the daemon is started with (spawn-daemon.ts)
+ * and `canLoadTypeScript` looks for. What goes is what would make the child a
+ * different program than its entry: `-e`/`-p` and their code, which it would
+ * run instead (node's own `fork` drops them for the same reason, but only
+ * from an unmodified `process.execArgv`); `--input-type`, which node refuses
+ * beside a file entry; an inspector flag, whose port is this process's and
+ * whose `-brk` would wait for a debugger until the deadline; and watch mode,
+ * which restarts where the child must exit.
+ */
+function childExecArgv(parentArgv) {
+    const kept = [];
+    for (let i = 0; i < parentArgv.length; i++) {
+        const arg = parentArgv[i];
+        const flag = arg.split('=', 1)[0];
+        if (DROPPED_WITH_VALUE.has(flag)) {
+            // `--flag value` takes the next argument with it; `--flag=value` does not.
+            if (arg === flag)
+                i++;
+            continue;
+        }
+        if (flag.startsWith('--inspect') || flag.startsWith('--debug') || flag.startsWith('--watch'))
+            continue;
+        if (flag === '--import') {
+            const specifier = arg === flag ? parentArgv[i + 1] : arg.slice(flag.length + 1);
+            if (specifier === 'tsx' || specifier === 'tsx/esm') {
+                // The daemon starts in its installed package, then may chdir to the
+                // project or service home. A bare preload resolves from the child's
+                // cwd before its entry runs. Pin our loader to this runtime without
+                // changing the working directory seen by the application definition.
+                const loader = pathToFileURL(createRequire(import.meta.url).resolve(specifier)).href;
+                if (arg === flag) {
+                    kept.push(flag, loader);
+                    i++;
+                }
+                else
+                    kept.push(`${flag}=${loader}`);
+                continue;
+            }
+        }
+        kept.push(arg);
+    }
+    return kept;
+}
+function isAnswer(message) {
+    if (!message || typeof message !== 'object')
+        return false;
+    const m = message;
+    if (m['type'] !== FRESH_MODULE_ANSWER)
+        return false;
+    return m['ok'] === true ? 'value' in m : m['ok'] === false && typeof m['message'] === 'string';
+}
+/**
+ * Read one definition in a process started for it, and wait until that
+ * process is gone. Resolves with what it answered; rejects with its error's
+ * message when it answered with one, and otherwise with how it ended and the
+ * last of its stderr.
+ */
+export function readInFreshProcess(options) {
+    const { entryPath, args, timeoutMs, label } = options;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > 600_000)
+        return Promise.reject(Error('Invalid module read deadline'));
+    if (process.env[FRESH_MODULE_MARK]) {
+        return Promise.reject(new Error(`a process reading a module does not start another (${label})`));
+    }
+    const execArgv = childExecArgv(process.execArgv ?? []);
+    if ((path.extname(entryPath) === '.ts' || options.typescript) && typeof globalThis.Bun === 'undefined' && !execArgv.some(arg => arg.includes('tsx')))
+        execArgv.push('--import', pathToFileURL(createRequire(import.meta.url).resolve('tsx/esm')).href);
+    if (!fs.existsSync(entryPath)) {
+        return Promise.reject(new Error(`the module reader ${entryPath} is missing — is this build complete?`));
+    }
+    return new Promise((resolve, reject) => {
+        let child;
+        try {
+            child = fork(entryPath, args, {
+                execArgv,
+                env: { ...process.env, ...options.env, [FRESH_MODULE_MARK]: '1' },
+                // Configuration output is bounded and private. Only a redacted error tail
+                // may leave this reader; stdout must not corrupt CLI JSON or leak secrets.
+                stdio: ['ignore', 'pipe', 'pipe', 'ipc'],
+                serialization: 'advanced',
+            });
+        }
+        catch (err) {
+            reject(new Error(`could not start a process to read ${label}: ${err.message}`, { cause: err }));
+            return;
+        }
+        let answer;
+        let exit;
+        let channelClosed = false;
+        let timedOut = false;
+        let concluding = false;
+        let settled = false;
+        let stderrTail = '';
+        let outputBytes = 0;
+        let outputExceeded = false;
+        const observeOutput = (chunk) => {
+            outputBytes += Buffer.byteLength(chunk);
+            if (outputBytes > MODULE_READ_OUTPUT_BYTES) {
+                outputExceeded = true;
+                child.kill('SIGKILL');
+            }
+        };
+        child.stdout?.setEncoding('utf8');
+        child.stdout?.on('data', observeOutput);
+        const timers = [];
+        const stdoutClosed = new Promise(done => {
+            if (!child.stdout)
+                done();
+            else
+                child.stdout.once('close', done);
+        });
+        const stderrClosed = new Promise((done) => {
+            if (!child.stderr) {
+                done();
+                return;
+            }
+            child.stderr.setEncoding('utf8');
+            child.stderr.on('data', (chunk) => {
+                stderrTail = (stderrTail + chunk).slice(-STDERR_TAIL_CHARS);
+                observeOutput(chunk);
+            });
+            child.stderr.once('close', () => done());
+        });
+        const settle = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            for (const timer of timers)
+                clearTimeout(timer);
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+            outcome();
+        };
+        // The answer, if one was sent, has been delivered once the process has
+        // exited AND its channel has closed — `exit` alone can come first.
+        const conclude = async () => {
+            if (concluding || settled || !exit || !channelClosed)
+                return;
+            concluding = true;
+            await Promise.race([Promise.all([stdoutClosed, stderrClosed]), new Promise(done => timers.push(setTimeout(done, 500)))]);
+            if (answer?.ok && !outputExceeded && !timedOut && exit.code === 0) {
+                const value = answer.value;
+                settle(() => resolve(value));
+                return;
+            }
+            if (answer && !answer.ok && !outputExceeded && !timedOut) {
+                const failure = answer;
+                settle(() => reject(errorFromAnswer(failure)));
+                return;
+            }
+            // No answer: what the process said on its way out is the explanation,
+            // and a moment lets the pipe deliver its last lines — never longer, as
+            // something the definition started may hold the pipe open.
+            const ended = exit;
+            const how = outputExceeded ? `exceeded its ${MODULE_READ_OUTPUT_BYTES} byte output budget` : timedOut
+                ? `did not answer within ${timeoutMs / 1000} s and was killed`
+                : ended.signal
+                    ? `was ended by ${ended.signal} before answering`
+                    : `exited with code ${ended.code} before answering`;
+            const said = redactDiagnosticText(stderrTail.trim());
+            settle(() => reject(new Error(`the process reading ${label} ${how}${said ? `:\n${said}` : ''}`)));
+        };
+        child.on('message', (message) => {
+            if (!answer && isAnswer(message))
+                answer = message;
+        });
+        child.once('disconnect', () => {
+            channelClosed = true;
+            void conclude();
+        });
+        child.once('exit', (code, signal) => {
+            exit = { code, signal };
+            // The channel closes right behind the process. Should it not, what
+            // arrived by then is all there is.
+            timers.push(setTimeout(() => {
+                channelClosed = true;
+                void conclude();
+            }, 1_000));
+            void conclude();
+        });
+        child.on('error', (err) => {
+            // Only a process that never started has no exit to wait for.
+            if (child.pid === undefined) {
+                settle(() => reject(new Error(`could not start a process to read ${label}: ${err.message}`, { cause: err })));
+            }
+        });
+        timers.push(setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGKILL');
+        }, timeoutMs));
+    });
+}
+function errorFromAnswer(answer) {
+    const message = redactDiagnosticText(answer.message);
+    const cause = answer.stack ? Object.assign(Error(message), {
+        name: answer.name ?? 'Error', stack: redactDiagnosticText(answer.stack),
+    }) : undefined;
+    return new Error(message, cause ? { cause } : undefined);
+}
+//# sourceMappingURL=fresh-module-reader.js.map

package/dist/shared/fresh-module-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fresh-module-reader.js","sourceRoot":"","sources":["../../src/shared/fresh-module-reader.ts"],"names":[],"mappings":"AAAA;;iFAEiF;AACjF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAChE,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYlD,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnH,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoE;IACnG,IAAI,OAA0B,CAAC;IAC/B,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,wBAAwB;gBAAE,MAAM,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACxI,OAAO,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,OAAO,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5F,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,sFAAsF;AACtF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc;CACzG,CAAC,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,SAAS,aAAa,CAAC,UAA6B;IAClD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,2EAA2E;YAC3E,IAAI,GAAG,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACvG,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChF,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnD,oEAAoE;gBACpE,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;;oBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;gBACpC,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,OAAgB;IAChC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC;AACjG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;IACvI,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CAAC,sDAAsD,KAAK,GAAG,CAAC,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,OAAQ,UAAkB,CAAC,GAAG,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3J,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,SAAS,uCAAuC,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9C,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE;gBAC5B,QAAQ;gBACR,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE;gBACjE,0EAA0E;gBAC1E,2EAA2E;gBAC3E,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;gBACxC,aAAa,EAAE,UAAU;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QAED,IAAI,MAAqC,CAAC;QAC1C,IAAI,IAAwE,CAAC;QAC7E,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,aAAa,GAAG,CAAC,KAAa,EAAQ,EAAE;YAC5C,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,WAAW,GAAG,wBAAwB,EAAE,CAAC;gBAAC,cAAc,GAAG,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAC/F,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACxC,MAAM,MAAM,GAAqB,EAAE,CAAC;QAEpC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,IAAI,EAAE,CAAC;;gBAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;YAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAC5D,aAAa,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,OAAmB,EAAQ,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAChD,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;YACzC,IAAI,UAAU,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa;gBAAE,OAAO;YAC7D,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/H,IAAI,MAAM,EAAE,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzD,MAAM,OAAO,GAAG,MAAM,CAAC;gBACvB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,sEAAsE;YACtE,uEAAuE;YACvE,2DAA2D;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,gBAAgB,wBAAwB,qBAAqB,CAAC,CAAC,CAAC,QAAQ;gBACnG,CAAC,CAAC,yBAAyB,SAAS,GAAG,IAAI,mBAAmB;gBAC9D,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,CAAC,CAAC,gBAAgB,KAAK,CAAC,MAAM,mBAAmB;oBACjD,CAAC,CAAC,oBAAoB,KAAK,CAAC,IAAI,mBAAmB,CAAC;YACxD,MAAM,IAAI,GAAG,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YACvC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,GAAG,OAAO,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE;YAC5B,aAAa,GAAG,IAAI,CAAC;YACrB,KAAK,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACxB,mEAAmE;YACnE,mCAAmC;YACnC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC1B,aAAa,GAAG,IAAI,CAAC;gBACrB,KAAK,QAAQ,EAAE,CAAC;YAClB,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACX,KAAK,QAAQ,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,6DAA6D;YAC7D,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAChH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE;YAC1B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,MAAiD;IACxE,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QACzD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC;KACxE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACf,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC"}

package/dist/shared/host-boot-identity.d.ts

@@ -0,0 +1,12 @@
+export declare const isStableDarwinBootIdentity: (value: unknown) => value is string;
+/** Callers must collect native lstart with LC_ALL=C and TZ=UTC. */
+export declare function formatDarwinProcessLifetime(boot: string, start: string): string;
+export declare function isLegacyDarwinBootIdentity(value: unknown): value is string;
+export declare const isStableHostBootIdentity: (value: unknown) => value is string;
+/** kern.boottime can change after clock adjustments; it is never a boot fence. */
+export declare function readHostBootIdentity(): string;
+/** Only comparable stable IDs can prove a reboot; legacy wall-clock text cannot. */
+export declare function provesDifferentHostBoot(previous: string, current: string): boolean;
+/** A different wall-clock rendering is not proof that a Darwin writer died. */
+export declare function compareProcessLifetimes(previous: string, current: string): 'same' | 'different' | 'unknown';
+//# sourceMappingURL=host-boot-identity.d.ts.map

package/dist/shared/host-boot-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-boot-identity.d.ts","sourceRoot":"","sources":["../../src/shared/host-boot-identity.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,0BAA0B,UAAW,OAAO,KAAG,KAAK,IAAI,MACkB,CAAC;AAExF,mEAAmE;AACnE,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI/E;AACD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAK1E;AACD,eAAO,MAAM,wBAAwB,UAAW,OAAO,KAAG,KAAK,IAAI,MACmB,CAAC;AAEvF,kFAAkF;AAClF,wBAAgB,oBAAoB,IAAI,MAAM,CAe7C;AAED,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAGlF;AAED,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,CA0B3G"}

package/dist/shared/host-boot-identity.js

@@ -0,0 +1,89 @@
+import fs from 'node:fs';
+import { execFileSync } from 'node:child_process';
+const uuid = /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i;
+const weekdays = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
+const months = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
+function isNativeBirthDate(value) {
+    const match = /^(Sun|Mon|Tue|Wed|Thu|Fri|Sat) (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) {1,2}(\d{1,2}) (\d{2}):(\d{2}):(\d{2}) ([1-9]\d{3})$/.exec(value);
+    if (!match)
+        return false;
+    const [, day, month, date, hours, minutes, seconds, year] = match;
+    const instant = new Date(Date.UTC(Number(year), months.indexOf(month), Number(date), Number(hours), Number(minutes), Number(seconds)));
+    return instant.getUTCFullYear() === Number(year) && instant.getUTCMonth() === months.indexOf(month) &&
+        instant.getUTCDate() === Number(date) && instant.getUTCHours() === Number(hours) && instant.getUTCMinutes() === Number(minutes) &&
+        instant.getUTCSeconds() === Number(seconds) && weekdays[instant.getUTCDay()] === day;
+}
+export const isStableDarwinBootIdentity = (value) => typeof value === 'string' && value.startsWith('darwin:') && uuid.test(value.slice(7));
+/** Callers must collect native lstart with LC_ALL=C and TZ=UTC. */
+export function formatDarwinProcessLifetime(boot, start) {
+    if (!isStableDarwinBootIdentity(boot) || !isNativeBirthDate(start))
+        throw new Error('Cannot verify the macOS process birth');
+    return `${boot.toLowerCase()}:utc:${start.replace(/ +/g, ' ')}`;
+}
+export function isLegacyDarwinBootIdentity(value) {
+    if (typeof value !== 'string')
+        return false;
+    const match = /^\{ *sec *= *(\d+), *usec *= *(\d+) *\} (.+)$/.exec(value);
+    return !!match && Number.isSafeInteger(Number(match[1])) && Number(match[1]) > 0 &&
+        Number.isSafeInteger(Number(match[2])) && Number(match[2]) < 1_000_000 && isNativeBirthDate(match[3]);
+}
+export const isStableHostBootIdentity = (value) => typeof value === 'string' && (isStableDarwinBootIdentity(value) || uuid.test(value));
+/** kern.boottime can change after clock adjustments; it is never a boot fence. */
+export function readHostBootIdentity() {
+    if (process.platform === 'linux') {
+        const value = fs.readFileSync('/proc/sys/kernel/random/boot_id', 'utf8').trim().toLowerCase();
+        if (!uuid.test(value))
+            throw new Error('Cannot verify the Linux boot identity');
+        return value;
+    }
+    if (process.platform === 'darwin') {
+        const value = execFileSync('/usr/sbin/sysctl', ['-n', 'kern.bootsessionuuid'], {
+            encoding: 'utf8', timeout: 1000, maxBuffer: 1024,
+            stdio: ['ignore', 'pipe', 'pipe'], env: { ...process.env, LC_ALL: 'C' },
+        }).trim().toLowerCase();
+        if (!uuid.test(value))
+            throw new Error('Cannot verify the macOS boot session');
+        return 'darwin:' + value;
+    }
+    throw new Error('Cannot verify this host boot identity');
+}
+/** Only comparable stable IDs can prove a reboot; legacy wall-clock text cannot. */
+export function provesDifferentHostBoot(previous, current) {
+    return isStableHostBootIdentity(previous) && isStableHostBootIdentity(current) &&
+        isStableDarwinBootIdentity(previous) === isStableDarwinBootIdentity(current) && previous.toLowerCase() !== current.toLowerCase();
+}
+/** A different wall-clock rendering is not proof that a Darwin writer died. */
+export function compareProcessLifetimes(previous, current) {
+    const format = (value) => {
+        if (value.startsWith('darwin:')) {
+            if (!isStableDarwinBootIdentity(value.slice(0, 43)) || value[43] !== ':')
+                return null;
+            const utc = value.slice(44).startsWith('utc:');
+            if (!isNativeBirthDate(value.slice(utc ? 48 : 44)))
+                return null;
+            return utc ? 'darwin-utc' : 'darwin';
+        }
+        // The former rollout reader used '/' between the same Linux boot UUID and ticks.
+        const ticks = value.slice(37);
+        return uuid.test(value.slice(0, 36)) && [':', '/'].includes(value[36]) &&
+            /^\d{1,20}$/.test(ticks) && BigInt(ticks) <= 18446744073709551615n ? 'linux' : null;
+    };
+    const before = format(previous), after = format(current);
+    if (!before || !after || (before === 'linux') !== (after === 'linux'))
+        return 'unknown';
+    if (before !== 'linux') {
+        if (previous.slice(0, 43).toLowerCase() !== current.slice(0, 43).toLowerCase())
+            return 'different';
+        if (before !== after)
+            return 'unknown';
+        const offset = before === 'darwin-utc' ? 48 : 44;
+        if (previous.slice(offset).replace(/ +/g, ' ') === current.slice(offset).replace(/ +/g, ' '))
+            return 'same';
+        // Legacy records did not retain TZ. Even two valid native dates can describe
+        // one live process, so keep its unfinished messages until death is observed.
+        return before === 'darwin-utc' ? 'different' : 'unknown';
+    }
+    const normalize = (value) => value.slice(0, 36).toLowerCase() + ':' + BigInt(value.slice(37)).toString();
+    return normalize(previous) === normalize(current) ? 'same' : 'different';
+}
+//# sourceMappingURL=host-boot-identity.js.map

package/dist/shared/host-boot-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-boot-identity.js","sourceRoot":"","sources":["../../src/shared/host-boot-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,IAAI,GAAG,gDAAgD,CAAC;AAC9D,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACnE,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACpG,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,uIAAuI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClK,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxI,OAAO,OAAO,CAAC,cAAc,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,KAAM,CAAC;QAClG,OAAO,CAAC,UAAU,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,aAAa,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC;QAC/H,OAAO,CAAC,aAAa,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,GAAG,CAAC;AACzF,CAAC;AACD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC5E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAExF,mEAAmE;AACnE,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,KAAa;IACrE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9E,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;AAC3G,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC1E,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAEvF,kFAAkF;AAClF,MAAM,UAAU,oBAAoB;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,YAAY,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE;YAC7E,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;YAChD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;SACxE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC/E,OAAO,SAAS,GAAG,KAAK,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAe;IACvE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,IAAI,wBAAwB,CAAC,OAAO,CAAC;QAC5E,0BAA0B,CAAC,QAAQ,CAAC,KAAK,0BAA0B,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;AACrI,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,OAAe;IACvE,MAAM,MAAM,GAAG,CAAC,KAAa,EAA4C,EAAE;QACzE,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChE,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC;QACD,iFAAiF;QACjF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAE,CAAC;YACrE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,WAAW,CAAC;QACnG,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;QAC5G,6EAA6E;QAC7E,6EAA6E;QAC7E,OAAO,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjH,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;AAC3E,CAAC"}

package/dist/shared/kernel-file-lock.d.ts

@@ -0,0 +1,3 @@
+/** Keep the open file description in Node; the kernel releases it on process death. */
+export declare function withKernelFileLock<T>(file: string, body: () => Promise<T>, timeoutSeconds?: number): Promise<T>;
+//# sourceMappingURL=kernel-file-lock.d.ts.map

package/dist/shared/kernel-file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-file-lock.d.ts","sourceRoot":"","sources":["../../src/shared/kernel-file-lock.ts"],"names":[],"mappings":"AAIA,uFAAuF;AACvF,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,SAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAsCjH"}

package/dist/shared/kernel-file-lock.js

@@ -0,0 +1,53 @@
+import fs, { constants } from 'node:fs/promises';
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+/** Keep the open file description in Node; the kernel releases it on process death. */
+export async function withKernelFileLock(file, body, timeoutSeconds = 30) {
+    if (!['darwin', 'linux'].includes(process.platform))
+        throw new Error('Owner recovery requires macOS lockf or Linux flock');
+    if (!Number.isSafeInteger(timeoutSeconds) || timeoutSeconds < 0 || timeoutSeconds > 30)
+        throw new Error('Invalid kernel lock timeout');
+    const parent = await fs.lstat(path.dirname(file));
+    if (!parent.isDirectory() || parent.isSymbolicLink() || (parent.mode & 0o077) !== 0 ||
+        (process.getuid && parent.uid !== process.getuid()))
+        throw new Error('Owner recovery lock requires a private parent directory');
+    const handle = await fs.open(file, constants.O_RDWR | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+    try {
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.nlink !== 1 || (opened.mode & 0o022) !== 0 || (process.getuid && opened.uid !== process.getuid()))
+            throw new Error('Owner recovery lock must be a private regular file owned by this user');
+        // Both utilities operate on inherited fd3. They acquire flock(2) on its
+        // shared open description; helper exit does not release our descriptor.
+        const command = process.platform === 'darwin' ? '/usr/bin/lockf' : 'flock';
+        const args = process.platform === 'darwin' ? ['-t', String(timeoutSeconds), '3'] : ['--exclusive', '--timeout', String(timeoutSeconds), '3'];
+        await new Promise((resolve, reject) => {
+            const child = spawn(command, args, { stdio: ['ignore', 'pipe', 'pipe', handle.fd] });
+            let output = '', errors = '';
+            const timer = setTimeout(() => { child.kill(); }, (timeoutSeconds + 5) * 1000);
+            child.stdout.on('data', (chunk) => { output = (output + chunk.toString()).slice(-1024); });
+            child.stderr.on('data', (chunk) => { errors = (errors + chunk.toString()).slice(-1024); });
+            child.once('error', error => { clearTimeout(timer); reject(new Error('Native kernel lock helper is unavailable', { cause: error })); });
+            child.once('close', code => {
+                clearTimeout(timer);
+                if (code === 0 && !output && !errors)
+                    resolve();
+                else
+                    reject(new Error(`Owner recovery kernel lock was not acquired (exit ${code ?? 'signal'}): ${errors.trim()}`));
+            });
+        });
+        const named = await fs.lstat(file);
+        const currentParent = await fs.lstat(path.dirname(file));
+        if (named.isSymbolicLink() || named.dev !== opened.dev || named.ino !== opened.ino ||
+            currentParent.isSymbolicLink() || currentParent.dev !== parent.dev || currentParent.ino !== parent.ino || (currentParent.mode & 0o077) !== 0)
+            throw new Error('Owner recovery lock path changed during acquisition');
+        // Older flock-based owners created an empty 0644 lock under their private
+        // execution directory. Preserve that inode/lock domain while tightening it.
+        if ((opened.mode & 0o777) !== 0o600)
+            await handle.chmod(0o600);
+        return await body();
+    }
+    finally {
+        await handle.close();
+    }
+}
+//# sourceMappingURL=kernel-file-lock.js.map

package/dist/shared/kernel-file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-file-lock.js","sourceRoot":"","sources":["../../src/shared/kernel-file-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,IAAY,EAAE,IAAsB,EAAE,cAAc,GAAG,EAAE;IACnG,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC3H,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACjF,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAClI,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9H,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7I,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACrF,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC/E,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpG,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;oBAAE,OAAO,EAAE,CAAC;;oBAC3C,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,IAAI,IAAI,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACrH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAChF,aAAa,CAAC,cAAc,EAAE,IAAI,aAAa,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,aAAa,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAC5I,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC"}

package/dist/shared/linux-file-lock.d.ts

@@ -0,0 +1,4 @@
+export type LinuxFileLock = <T>(file: string, body: () => Promise<T>) => Promise<T>;
+/** Linux kernel lock, released on process death. No stale PID-file deletion race. */
+export declare const withLinuxFileLock: LinuxFileLock;
+//# sourceMappingURL=linux-file-lock.d.ts.map

package/dist/shared/linux-file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-file-lock.d.ts","sourceRoot":"","sources":["../../src/shared/linux-file-lock.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AACpF,qFAAqF;AACrF,eAAO,MAAM,iBAAiB,EAAE,aAwB/B,CAAC"}

package/dist/shared/linux-file-lock.js

@@ -0,0 +1,36 @@
+import { spawn } from 'node:child_process';
+/** Linux kernel lock, released on process death. No stale PID-file deletion race. */
+export const withLinuxFileLock = async (file, body) => {
+    if (process.platform !== 'linux')
+        throw new Error('This operation requires Linux with util-linux flock');
+    const child = spawn('flock', ['--exclusive', '--timeout', '30', file, 'sh', '-c', 'printf "locked\\n"; cat >/dev/null'], { stdio: ['pipe', 'pipe', 'pipe'] });
+    child.stdin.on('error', () => { });
+    let errorText = '';
+    child.stderr.on('data', (chunk) => { errorText = (errorText + chunk.toString()).slice(-4096); });
+    const ended = new Promise((resolve) => { child.once('close', () => resolve()); child.once('error', () => resolve()); });
+    try {
+        await new Promise((resolve, reject) => {
+            const timer = setTimeout(() => { child.kill(); reject(new Error('Linux file lock timed out')); }, 35_000);
+            let output = '';
+            child.once('error', (error) => { clearTimeout(timer); reject(error); });
+            child.once('close', () => { clearTimeout(timer); reject(new Error(`Linux file lock unavailable: ${errorText}`)); });
+            child.stdout.on('data', (chunk) => {
+                output += chunk.toString();
+                if (output === 'locked\n') {
+                    clearTimeout(timer);
+                    resolve();
+                }
+                else if (output.length > 32) {
+                    clearTimeout(timer);
+                    reject(new Error('Unexpected Linux file lock response'));
+                }
+            });
+        });
+        return await body();
+    }
+    finally {
+        child.stdin.end();
+        await ended;
+    }
+};
+//# sourceMappingURL=linux-file-lock.js.map

package/dist/shared/linux-file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-file-lock.js","sourceRoot":"","sources":["../../src/shared/linux-file-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAG3C,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAkB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,oCAAoC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9J,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,SAAS,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1G,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;qBACzD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBAAC,CAAC;YACjH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/shared/local-infra-host.d.ts

@@ -5,8 +5,8 @@
  * `127.0.0.1` — and Node tries them in the order the resolver returns, which
  * is IPv6 first here. Docker publishes a container's port on IPv4 only:
  *
- *     daos-dev-redis      127.0.0.1:6379->6379/tcp
- *     daos-dev-postgres   127.0.0.1:5432->5432/tcp
+ *     sample-dev-redis      127.0.0.1:6379->6379/tcp
+ *     sample-dev-postgres   127.0.0.1:5432->5432/tcp
  *
  * so the first attempt of every new connection is refused and the client
  * reaches the service on the second. Measured, five connects each:

package/dist/shared/local-infra-host.js

@@ -5,8 +5,8 @@
  * `127.0.0.1` — and Node tries them in the order the resolver returns, which
  * is IPv6 first here. Docker publishes a container's port on IPv4 only:
  *
- *     daos-dev-redis      127.0.0.1:6379->6379/tcp
- *     daos-dev-postgres   127.0.0.1:5432->5432/tcp
+ *     sample-dev-redis      127.0.0.1:6379->6379/tcp
+ *     sample-dev-postgres   127.0.0.1:5432->5432/tcp
  *
  * so the first attempt of every new connection is refused and the client
  * reaches the service on the second. Measured, five connects each:

package/dist/shared/log-ingestion-reading.d.ts

@@ -0,0 +1,9 @@
+import type { LogIngestionStats } from './dto/logs.js';
+/** One operational verdict for Console and CLI; absence is never a healthy zero. */
+export declare function readLogIngestion(stats: LogIngestionStats | null): {
+    severity: 'success' | 'warning' | 'error';
+    title: string;
+    detail: string;
+};
+export declare function readLogTime(metadata: Record<string, unknown> | null): string | null;
+//# sourceMappingURL=log-ingestion-reading.d.ts.map

package/dist/shared/log-ingestion-reading.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-ingestion-reading.d.ts","sourceRoot":"","sources":["../../src/shared/log-ingestion-reading.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG;IAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAkB9I;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAKnF"}

package/dist/shared/log-ingestion-reading.js

@@ -0,0 +1,32 @@
+/** One operational verdict for Console and CLI; absence is never a healthy zero. */
+export function readLogIngestion(stats) {
+    if (!stats?.journal)
+        return { severity: 'warning', title: 'Log persistence unverified', detail: 'This backend does not expose durable capture diagnostics.' };
+    // Older backends may expose an empty AggregateError.message. Only null or
+    // an absent field means no failure; retain every reported source's cause.
+    const errors = [
+        ['Log ingestion', stats.lastError],
+        ['Local journal', stats.journal.error],
+        ['Owner journal', stats.ownerError],
+    ].flatMap(([source, error]) => error == null ? [] : [`${source}: ${error.trim() || 'operation failed; backend supplied no details'}`]);
+    if (errors.length)
+        return { severity: 'error', title: 'Log persistence delayed',
+            detail: `${errors.join('; ')}. ${stats.journal.pending} local records await confirmation; unacknowledged records are retained.` };
+    if (stats.capture === 'legacy-owner')
+        return { severity: 'warning', title: 'Legacy log capture',
+            detail: 'Database delivery is checked; the running owner cannot prove original capture time or durable replay. An owner update is required.' };
+    const pending = stats.journal.pending + (stats.ownerPending ?? 0);
+    if (stats.durability !== 'persistent' || !stats.lastCommitAt)
+        return { severity: 'warning', title: 'Awaiting a durable log commit',
+            detail: `${pending} records pending. Database durability: ${stats.durability}.` };
+    return { severity: pending > 5000 || (pending > 0 && Date.now() - Date.parse(stats.lastCommitAt) > 10000) ? 'warning' : 'success', title: pending ? `${pending} logs pending` : 'Logs committed',
+        detail: `Last database commit: ${stats.lastCommitAt}. Capture: ${stats.capture}. Dropped: ${stats.droppedTotal}.` };
+}
+export function readLogTime(metadata) {
+    const capture = metadata?.['_omnitron'];
+    if (!capture || typeof capture !== 'object')
+        return null;
+    const value = capture;
+    return `Time: ${String(value['timeBasis'] ?? 'unknown')}; event: ${String(value['eventTime'] ?? value['reportedTime'] ?? 'unspecified')}; captured: ${String(value['capturedAt'] ?? 'unknown')}; ${String(value['stream'] ?? '')}; sequence: ${String(value['sequence'] ?? '')}`;
+}
+//# sourceMappingURL=log-ingestion-reading.js.map

package/dist/shared/log-ingestion-reading.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-ingestion-reading.js","sourceRoot":"","sources":["../../src/shared/log-ingestion-reading.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,KAA+B;IAC9D,IAAI,CAAC,KAAK,EAAE,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,2DAA2D,EAAE,CAAC;IAC9J,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG;QACb,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtC,CAAC,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC;KACpC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,+CAA+C,EAAE,CAAC,CAAC,CAAC;IACvI,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB;YAC7E,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,yEAAyE,EAAE,CAAC;IACpI,IAAI,KAAK,CAAC,OAAO,KAAK,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB;YAC7F,MAAM,EAAE,oIAAoI,EAAE,CAAC;IACjJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B;YAChI,MAAM,EAAE,GAAG,OAAO,0CAA0C,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC;IACpF,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,eAAe,CAAC,CAAC,CAAC,gBAAgB;QAC9L,MAAM,EAAE,yBAAyB,KAAK,CAAC,YAAY,cAAc,KAAK,CAAC,OAAO,cAAc,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAwC;IAClE,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,OAAO,SAAS,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,aAAa,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACnR,CAAC"}

package/dist/shared/log-levels.d.ts

@@ -0,0 +1,19 @@
+/** Pino's numbers for the levels it names — the file and the filters speak these. */
+export declare const LEVEL_RANK: {
+    readonly trace: 10;
+    readonly debug: 20;
+    readonly info: 30;
+    readonly warn: 40;
+    readonly error: 50;
+    readonly fatal: 60;
+};
+export type KnownLevel = keyof typeof LEVEL_RANK;
+export declare const RANKED_LOG_LEVELS: readonly KnownLevel[];
+/** The level of a line that says nothing about its level. */
+export declare const UNKNOWN_LEVEL = "unknown";
+/** The rank of a level, or `undefined` for one that has no place in the order. */
+export declare function levelRank(level: string): number | undefined;
+/** Bounds on exact level predicates accepted from CLI, Console and RPC clients. */
+export declare const MAX_QUERY_LEVELS = 64;
+export declare function isQueryLogLevel(value: unknown): value is string;
+//# sourceMappingURL=log-levels.d.ts.map