@openge/forge-process-control-node 0.1.0 → 0.3.0-rc.0

package/README.md

@@ -1,35 +1,33 @@
 # `@openge/forge-process-control-node`
 
-Explicit Windows and Posix Node.js Providers for `@openge/forge-process-control`.
-
-## Installation
-
-```sh
-pnpm add @openge/forge-process-control @openge/forge-process-control-node
-```
-
-## Usage
-
-```ts
-import { createWindowsProcessControl } from '@openge/forge-process-control-node';
-
-const processes = createWindowsProcessControl({ listenerBackend: 'powershell' });
-const running = await processes.listProcesses();
-const listeners = await processes.listTcpListeners({ ports: [3000] });
-```
-
-Callers explicitly choose `createWindowsProcessControl` with `powershell` or
-`netstat`, or `createPosixProcessControl` with `lsof`. The provider never detects
-a platform, switches backends, or retries through an implicit fallback.
-
-Process discovery returns stable identities together with the available name,
-command path, command line, and parent PID. Termination revalidates the PID start
-token before sending a graceful or force signal. `terminateProcess` targets one
-process; `terminateProcessTree` uses `taskkill /T` on Windows and the process
-group identified by the PID on Posix. Callers using Posix tree termination must
-launch the owned process as its process-group leader. Command absence and
-command failures are reported as structured Core errors.
-
-## License
+Explicit Windows and Posix Node.js Providers for Foundation process control.
+
+Use `createWindowsProcessIdentityReader()` or `createPosixProcessIdentityReader()`
+for identity-only reads. Both implement the Core `ProcessIdentityReader` contract
+and accept an optional `ProcessIdentityReaderOptions.runner` without requiring a
+listener backend. The Windows identity reader uses .NET Process creation time
+without loading PowerShell cmdlet modules and preserves the existing CIM JSON-date
+start-token format. Posix retains `ps`. Permission failures are rejected without
+retries or fallback sources; full Windows process queries retain their existing backend.
+
+Explicit `createWindowsOwnedProcessScopeProvider()` and
+`createLinuxOwnedProcessScopeProvider()` implement owned command scopes on
+Windows x64 (Job Objects) and Linux/glibc x64 (subreaper, wait/reap and pidfds).
+Other hosts, missing native capabilities or unsupported Job assignment fail
+before the job starts. Owned scopes currently require force termination.
+Windows verifies completed member handles and complete Job membership before
+synchronizing delayed exit accounting; a live descendant is rejected immediately.
+Koffi is pinned to 3.3.3 and loaded lazily from installed prebuilds; runtime code
+never downloads or compiles a fallback. With pnpm, set `allowBuilds.koffi: false`
+when installing to prevent Koffi's optional install-time compilation fallback.
+
+These scopes manage trusted foreground commands, not a security sandbox.
+Commands must not delegate execution to WMI, system services or another external
+process owner. Normal closure differs from successful forced cleanup: cleanup
+can prove emptiness while completion remains unknown.
+
+Complete usage, backend selection, examples, termination semantics, and provider boundaries are maintained in the [中文使用文档](https://github.com/zopenge/foundation-forge/blob/main/docs/packages/process-execution/process-control-node.md).
+
+For repository-wide capability discovery, see the [Foundation Forge documentation](https://github.com/zopenge/foundation-forge/blob/main/docs/README.md).
 
 Licensed under the Apache License 2.0.

package/dist/command-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-runner.d.ts","sourceRoot":"","sources":["../src/command-runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,EAAE,oBAmB9B,CAAC"}
+{"version":3,"file":"command-runner.d.ts","sourceRoot":"","sources":["../src/command-runner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,eAAO,MAAM,iBAAiB,EAAE,oBAyB9B,CAAC"}

package/dist/command-runner.js

@@ -1,16 +1,19 @@
 import { execFile } from 'node:child_process';
-export const runProcessCommand = async (request) => new Promise((resolve) => {
+import { ProcessControlError, processControlErrorCodes } from '@openge/forge-process-control';
+export const runProcessCommand = async (request) => new Promise((resolve, reject) => {
     execFile(request.command, [...request.args], {
         encoding: 'utf8',
         maxBuffer: 16 * 1_024 * 1_024,
         signal: request.signal,
         windowsHide: true,
     }, (error, stdout, stderr) => {
-        const exitCode = error === null
-            ? 0
-            : typeof error.code === 'number'
-                ? error.code
-                : 1;
+        if (error !== null && typeof error.code !== 'number') {
+            reject(new ProcessControlError(request.signal?.aborted === true
+                ? processControlErrorCodes.operationAborted
+                : processControlErrorCodes.commandFailed, { command: request.command }, error));
+            return;
+        }
+        const exitCode = typeof error?.code === 'number' ? error.code : 0;
         resolve({ exitCode, stderr, stdout });
     });
 });

package/dist/command-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-runner.js","sourceRoot":"","sources":["../src/command-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,MAAM,CAAC,MAAM,iBAAiB,GAAyB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IAChG,QAAQ,CACN,OAAO,CAAC,OAAO,EACf,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EACjB;QACE,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,KAAK,GAAG,KAAK;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,IAAI;KAClB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI;YAC7B,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,CAAC,CAAC;QACR,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}
+{"version":3,"file":"command-runner.js","sourceRoot":"","sources":["../src/command-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAI9F,MAAM,CAAC,MAAM,iBAAiB,GAAyB,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACxG,QAAQ,CACN,OAAO,CAAC,OAAO,EACf,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EACjB;QACE,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,KAAK,GAAG,KAAK;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,IAAI;KAClB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,mBAAmB,CAC5B,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;gBAC9B,CAAC,CAAC,wBAAwB,CAAC,gBAAgB;gBAC3C,CAAC,CAAC,wBAAwB,CAAC,aAAa,EAC1C,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAC5B,KAAK,CACN,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/contracts.d.ts

@@ -9,6 +9,9 @@ export interface ProcessCommandResult {
     readonly stdout: string;
 }
 export type ProcessCommandRunner = (request: ProcessCommandRequest) => Promise<ProcessCommandResult>;
+export interface ProcessIdentityReaderOptions {
+    readonly runner?: ProcessCommandRunner;
+}
 export interface WindowsProcessControlOptions {
     readonly listenerBackend: 'netstat' | 'powershell';
     readonly runner?: ProcessCommandRunner;

package/dist/contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,qBAAqB,KAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEnC,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,SAAS,GAAG,YAAY,CAAC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC"}
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,qBAAqB,KAC3B,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEnC,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,eAAe,EAAE,SAAS,GAAG,YAAY,CAAC;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC"}

package/dist/index.d.ts

@@ -1,3 +1,4 @@
-export { type PosixProcessControlOptions, type ProcessCommandRequest, type ProcessCommandResult, type ProcessCommandRunner, type WindowsProcessControlOptions, } from './contracts.js';
-export { createPosixProcessControl, createWindowsProcessControl } from './provider.js';
+export { type PosixProcessControlOptions, type ProcessCommandRequest, type ProcessCommandResult, type ProcessCommandRunner, type ProcessIdentityReaderOptions, type WindowsProcessControlOptions, } from './contracts.js';
+export { createPosixProcessControl, createPosixProcessIdentityReader, createWindowsProcessControl, createWindowsProcessIdentityReader, } from './provider.js';
+export { createWindowsOwnedProcessScopeProvider, createLinuxOwnedProcessScopeProvider } from './owned-process-scope.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,GAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,GAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,kCAAkC,GACnC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sCAAsC,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
 export {} from './contracts.js';
-export { createPosixProcessControl, createWindowsProcessControl } from './provider.js';
+export { createPosixProcessControl, createPosixProcessIdentityReader, createWindowsProcessControl, createWindowsProcessIdentityReader, } from './provider.js';
+export { createWindowsOwnedProcessScopeProvider, createLinuxOwnedProcessScopeProvider } from './owned-process-scope.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAMN,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAON,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,2BAA2B,EAC3B,kCAAkC,GACnC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sCAAsC,EAAE,oCAAoC,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/owned-process-scope.d.ts

@@ -0,0 +1,4 @@
+import type { OwnedProcessScopeProvider } from '@openge/forge-process-control';
+export declare function createWindowsOwnedProcessScopeProvider(): OwnedProcessScopeProvider;
+export declare function createLinuxOwnedProcessScopeProvider(): OwnedProcessScopeProvider;
+//# sourceMappingURL=owned-process-scope.d.ts.map

package/dist/owned-process-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-process-scope.d.ts","sourceRoot":"","sources":["../src/owned-process-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAK/E,wBAAgB,sCAAsC,IAAI,yBAAyB,CAElF;AACD,wBAAgB,oCAAoC,IAAI,yBAAyB,CAEhF"}

package/dist/owned-process-scope.js

@@ -0,0 +1,10 @@
+import { startSupervisor } from './owned-scope/supervisor.js';
+import { createWindowsJob } from './owned-scope/windows-job.js';
+import { createLinuxSubreaper } from './owned-scope/linux-subreaper.js';
+export function createWindowsOwnedProcessScopeProvider() {
+    return { start: (request, output) => startSupervisor(request, 'win32', createWindowsJob, output) };
+}
+export function createLinuxOwnedProcessScopeProvider() {
+    return { start: (request, output) => startSupervisor(request, 'linux', createLinuxSubreaper, output) };
+}
+//# sourceMappingURL=owned-process-scope.js.map

package/dist/owned-process-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-process-scope.js","sourceRoot":"","sources":["../src/owned-process-scope.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,MAAM,UAAU,sCAAsC;IACpD,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;AACrG,CAAC;AACD,MAAM,UAAU,oCAAoC;IAClD,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,CAAC;AACzG,CAAC"}

package/dist/owned-scope/backend.d.ts

@@ -0,0 +1,9 @@
+import type { ProcessIdentity } from '@openge/forge-process-control';
+export interface ScopeBackend {
+    attach(pid: number): Promise<void>;
+    bind(identity: ProcessIdentity): Promise<void>;
+    empty(rootExited: boolean): Promise<boolean>;
+    force(): Promise<void>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=backend.d.ts.map

package/dist/owned-scope/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/owned-scope/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,KAAK,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B"}

package/dist/owned-scope/backend.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=backend.js.map

package/dist/owned-scope/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/owned-scope/backend.ts"],"names":[],"mappings":""}

package/dist/owned-scope/linux-native.d.ts

@@ -0,0 +1,18 @@
+/** 只调用 glibc 已导出的接口，不猜测 syscall 编号，也不在维护者进程设置 subreaper。 */
+export declare function loadLinuxScopeNative(): Promise<{
+    establish(): void;
+    reap(): {
+        pid: number;
+        errno: number;
+    };
+    open(pid: number): {
+        fd: number;
+        errno: number;
+    };
+    signal(fd: number, value: number): {
+        ok: boolean;
+        errno: number;
+    };
+    close(fd: number): void;
+}>;
+//# sourceMappingURL=linux-native.d.ts.map

package/dist/owned-scope/linux-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-native.d.ts","sourceRoot":"","sources":["../../src/owned-scope/linux-native.ts"],"names":[],"mappings":"AAGA,4DAA4D;AAC5D,wBAAsB,oBAAoB;;YAsB5B;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;cAC5B,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;eACrC,MAAM,SAAS,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;cACvD,MAAM;GAKrB"}

package/dist/owned-scope/linux-native.js

@@ -0,0 +1,45 @@
+import { ProcessControlError, processControlErrorCodes } from '@openge/forge-process-control';
+import { loadOwnedNative } from './native-loader.js';
+/** 只调用 glibc 已导出的接口，不猜测 syscall 编号，也不在维护者进程设置 subreaper。 */
+export async function loadLinuxScopeNative() {
+    try {
+        const k = await loadOwnedNative('linux'), lib = k.load('libc.so.6');
+        const set = lib.func('int prctl(int option, uintptr_t value, uintptr_t arg3, uintptr_t arg4, uintptr_t arg5)');
+        const get = lib.func('prctl', 'int', ['int', k.out(k.pointer('int')), 'uintptr_t', 'uintptr_t', 'uintptr_t']);
+        const wait = lib.func('waitpid', 'int', ['int', k.out(k.pointer('int')), 'int']);
+        const open = lib.func('int pidfd_open(int pid, unsigned int flags)');
+        const signal = lib.func('int pidfd_send_signal(int fd, int signal, void *info, unsigned int flags)');
+        const close = lib.func('int close(int fd)');
+        const state = [0];
+        if (get(37, state, 0, 0, 0) !== 0)
+            throw Error('SUBREAPER_PROBE');
+        const own = Number(open(process.pid, 0));
+        if (own < 0)
+            throw Error('PIDFD_PROBE');
+        let signaled = false, closed = false;
+        try {
+            signaled = signal(own, 0, null, 0) === 0;
+        }
+        finally {
+            closed = close(own) === 0;
+        }
+        if (!signaled || !closed)
+            throw Error('PIDFD_SIGNAL_PROBE');
+        return {
+            establish() {
+                const value = [0];
+                if (set(36, 1, 0, 0, 0) !== 0 || get(37, value, 0, 0, 0) !== 0 || value[0] !== 1)
+                    throw Error('SUBREAPER_SETUP');
+            },
+            reap() { const status = [0], pid = Number(wait(-1, status, 1)); return { pid, errno: pid < 0 ? k.errno() : 0 }; },
+            open(pid) { const fd = Number(open(pid, 0)); return { fd, errno: fd < 0 ? k.errno() : 0 }; },
+            signal(fd, value) { const ok = signal(fd, value, null, 0) === 0; return { ok, errno: ok ? 0 : k.errno() }; },
+            close(fd) { if (close(fd) !== 0)
+                throw Error('PIDFD_CLOSE'); },
+        };
+    }
+    catch {
+        throw new ProcessControlError(processControlErrorCodes.scopeUnsupported, { reason: 'LINUX_GLIBC_SCOPE' });
+    }
+}
+//# sourceMappingURL=linux-native.js.map

package/dist/owned-scope/linux-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-native.js","sourceRoot":"","sources":["../../src/owned-scope/linux-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QAC/G,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9G,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QACrC,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;gBACzC,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5D,OAAO;YACL,SAAS;gBACP,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACnH,CAAC;YACD,IAAI,KAAqC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACjJ,IAAI,CAAC,GAAW,IAAmC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnI,MAAM,CAAC,EAAU,EAAE,KAAa,IAAoC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5J,KAAK,CAAC,EAAU,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACvE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC"}

package/dist/owned-scope/linux-subreaper.d.ts

@@ -0,0 +1,16 @@
+import { type ReadProcessIdentityRequest } from '@openge/forge-process-control';
+import type { ScopeBackend } from './backend.js';
+import { loadLinuxScopeNative } from './linux-native.js';
+import type { SupervisorPort } from './supervisor.js';
+declare function startTicks(pid: number): Promise<string>;
+export declare function createLinuxSubreaper(port: SupervisorPort, io?: {
+    load: typeof loadLinuxScopeNative;
+    ticks: typeof startTicks;
+    readIdentity: (request: ReadProcessIdentityRequest) => Promise<import("@openge/forge-process-control").ReadProcessIdentityResult>;
+}): Promise<ScopeBackend>;
+export declare function createLinuxReaper(directClosed: () => boolean, timeoutMs: number): Promise<{
+    empty: () => boolean;
+    stop(): Promise<boolean>;
+}>;
+export {};
+//# sourceMappingURL=linux-subreaper.d.ts.map

package/dist/owned-scope/linux-subreaper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-subreaper.d.ts","sourceRoot":"","sources":["../../src/owned-scope/linux-subreaper.ts"],"names":[],"mappings":"AACA,OAAO,EAAuE,KAAK,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAErJ,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD,iBAAe,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKtD;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE;;;4BADwB,0BAA0B;CACtC,GAAG,OAAO,CAAC,YAAY,CAAC,CA2CtG;AAED,wBAAsB,iBAAiB,CAAC,YAAY,EAAE,MAAM,OAAO,EAAE,SAAS,EAAE,MAAM;;YAepE,OAAO,CAAC,OAAO,CAAC;GAyBjC"}

package/dist/owned-scope/linux-subreaper.js

@@ -0,0 +1,147 @@
+import { readFile } from 'node:fs/promises';
+import { ProcessControlError, processControlErrorCodes } from '@openge/forge-process-control';
+import { createPosixProcessIdentityReader } from '../provider.js';
+import { loadLinuxScopeNative } from './linux-native.js';
+async function startTicks(pid) {
+    const text = await readFile(`/proc/${String(pid)}/stat`, 'utf8');
+    const value = text.slice(text.lastIndexOf(')') + 2).split(' ')[19];
+    if (text.length > 65_536 || value === undefined || !/^\d+$/u.test(value))
+        throw Error('ROOT_STAT');
+    return value;
+}
+const defaultIo = { load: loadLinuxScopeNative, ticks: startTicks, readIdentity: (request) => createPosixProcessIdentityReader().readIdentity(request) };
+export async function createLinuxSubreaper(port, io = defaultIo) {
+    const native = await io.load();
+    let fd, actual, provenEmpty = false, rootExited = false;
+    return {
+        attach: async (pid) => {
+            if (fd !== undefined)
+                throw Error('ATTACH_STATE');
+            // spawn 返回后先同步固定实例；未验证的 fd 只可关闭，不能接收终止信号。
+            const handle = native.open(pid);
+            if (handle.fd < 0)
+                throw Error('ROOT_PIDFD');
+            try {
+                port.assertRootInstance(pid);
+                const before = await io.ticks(pid), observed = await io.readIdentity({ pid, signal: port.startupSignal });
+                if (observed.status !== 'FOUND' || before !== await io.ticks(pid) || !native.signal(handle.fd, 0).ok)
+                    throw Error('ROOT_INSTANCE');
+                port.assertRootInstance(pid);
+                actual = observed.identity;
+                fd = handle.fd;
+            }
+            catch (error) {
+                native.close(handle.fd);
+                throw error;
+            }
+        },
+        bind: async (identity) => {
+            if (!actual || fd === undefined || identity.pid !== actual.pid || identity.startToken !== actual.startToken || !native.signal(fd, 0).ok) {
+                throw new ProcessControlError(processControlErrorCodes.scopeBinding, { reason: 'ROOT_IDENTITY' });
+            }
+        },
+        empty: async (exited) => {
+            if (exited) {
+                rootExited = true;
+                return provenEmpty;
+            }
+            const result = await port.rpc('inspect');
+            provenEmpty = result.empty === true;
+            return provenEmpty;
+        },
+        force: async () => {
+            if (rootExited)
+                return;
+            try {
+                const result = await port.rpc('stop');
+                provenEmpty = result.empty === true;
+                if (!provenEmpty)
+                    throw Error('CHILDREN_UNKNOWN');
+                await port.rpc('finish');
+            }
+            catch (error) {
+                // IPC 失效时请求自有 helper 收尾；不能用宿主进程差集代替后代归属。
+                if (fd !== undefined)
+                    native.signal(fd, 15);
+                throw error;
+            }
+        },
+        dispose: async () => {
+            if (fd !== undefined) {
+                try {
+                    if (!rootExited)
+                        native.signal(fd, 9);
+                }
+                finally {
+                    native.close(fd);
+                    fd = undefined;
+                }
+            }
+        },
+    };
+}
+export async function createLinuxReaper(directClosed, timeoutMs) {
+    const native = await loadLinuxScopeNative();
+    native.establish();
+    const empty = () => {
+        if (!directClosed())
+            return false;
+        for (let attempts = 0; attempts < 4096; attempts++) {
+            const result = native.reap();
+            if (result.pid > 0 || (result.pid < 0 && result.errno === 4))
+                continue;
+            if (result.pid === 0)
+                return false;
+            if (result.errno === 10)
+                return true;
+            throw Error('WAIT_UNKNOWN');
+        }
+        throw Error('REAP_LIMIT');
+    };
+    return {
+        empty,
+        async stop() {
+            const deadline = Date.now() + timeoutMs;
+            do {
+                if (empty())
+                    return true;
+                const text = await readFile(`/proc/self/task/${String(process.pid)}/children`, 'utf8');
+                if (text.length > 65_536)
+                    throw Error('CHILDREN_LIMIT');
+                const children = text.trim() ? text.trim().split(/\s+/u) : [];
+                if (children.length > 4096 || children.some(value => !/^[1-9]\d*$/u.test(value)))
+                    throw Error('CHILDREN_INVALID');
+                for (const value of children) {
+                    const pid = Number(value), opened = native.open(pid);
+                    if (opened.fd < 0) {
+                        if (opened.errno === 3)
+                            continue;
+                        throw Error('CHILD_PIDFD');
+                    }
+                    try {
+                        let status;
+                        try {
+                            status = await readFile(`/proc/${value}/status`, 'utf8');
+                        }
+                        catch (error) {
+                            if (error instanceof Error && 'code' in error && error.code === 'ENOENT')
+                                continue;
+                            throw error;
+                        }
+                        if (status.length > 65_536 || /^PPid:\s+(\d+)$/mu.exec(status)?.[1] !== String(process.pid))
+                            continue;
+                        const sent = native.signal(opened.fd, 9);
+                        if (!sent.ok && sent.errno !== 3)
+                            throw Error('CHILD_SIGNAL');
+                    }
+                    finally {
+                        native.close(opened.fd);
+                    }
+                }
+                await new Promise(accept => setTimeout(accept, 10));
+            } while (Date.now() < deadline);
+            return empty();
+        },
+    };
+}
+//# sourceMappingURL=linux-subreaper.js.map

package/dist/owned-scope/linux-subreaper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-subreaper.js","sourceRoot":"","sources":["../../src/owned-scope/linux-subreaper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAyD,MAAM,+BAA+B,CAAC;AACrJ,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAElE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGzD,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;IACnG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,OAAmC,EAAE,EAAE,CAAC,gCAAgC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;AACrL,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAoB,EAAE,EAAE,GAAG,SAAS;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,EAAsB,EAAE,MAAmC,EAAE,WAAW,GAAG,KAAK,EAAE,UAAU,GAAG,KAAK,CAAC;IACzG,OAAO;QACL,MAAM,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;YAClB,IAAI,EAAE,KAAK,SAAS;gBAAE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;YAClD,0CAA0C;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;gBAC1G,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;oBAAE,MAAM,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;gBAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YAC3E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAC3D,CAAC;QACD,IAAI,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;YACrB,IAAI,CAAC,MAAM,IAAI,EAAE,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACxI,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD,KAAK,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;YACpB,IAAI,MAAM,EAAE,CAAC;gBAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,OAAO,WAAW,CAAC;YAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAAC,WAAW,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC;QACpG,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAAC,WAAW,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;gBAC3E,IAAI,CAAC,WAAW;oBAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAClD,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yCAAyC;gBACzC,IAAI,EAAE,KAAK,SAAS;oBAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC;oBAAC,IAAI,CAAC,UAAU;wBAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,EAAE,GAAG,SAAS,CAAC;gBAAC,CAAC;YAC9F,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAA2B,EAAE,SAAiB;IACpF,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAS;YACvE,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnC,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;YACrC,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO;QACL,KAAK;QACL,KAAK,CAAC,IAAI;YACR,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,GAAG,CAAC;gBACF,IAAI,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBACvF,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;oBAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAClH,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;oBAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrD,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;wBAAC,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;4BAAE,SAAS;wBAAC,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;oBAAC,CAAC;oBACpF,IAAI,CAAC;wBACH,IAAI,MAAc,CAAC;wBACnB,IAAI,CAAC;4BAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,MAAM,CAAC,CAAC;wBAAC,CAAC;wBACjE,OAAO,KAAK,EAAE,CAAC;4BAAC,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gCAAE,SAAS;4BAAC,MAAM,KAAK,CAAC;wBAAC,CAAC;wBAClH,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;4BAAE,SAAS;wBACtG,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;wBACzC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;oBAChE,CAAC;4BAAS,CAAC;wBAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACtD,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE;YAChC,OAAO,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/owned-scope/native-loader.d.ts

@@ -0,0 +1,87 @@
+/** 只有显式启用 scope 才加载原生依赖；缺失预编译制品不触发构建或降级。 */
+export declare function loadOwnedNative(platform: 'win32' | 'linux', importer?: () => Promise<{
+    LibraryHandle: import("koffi").LibraryHandle;
+    TypeObject: import("koffi").TypeObject;
+    Union: import("koffi").Union;
+    address: typeof import("koffi").address;
+    alias: typeof import("koffi").alias;
+    alignof: typeof import("koffi").alignof;
+    alloc: typeof import("koffi").alloc;
+    array: typeof import("koffi").array;
+    as: typeof import("koffi").as;
+    call: typeof import("koffi").call;
+    config: typeof import("koffi").config;
+    decode: typeof import("koffi").decode;
+    disposable: typeof import("koffi").disposable;
+    encode: typeof import("koffi").encode;
+    enumeration: typeof import("koffi").enumeration;
+    errno: typeof import("koffi").errno;
+    extension: typeof import("koffi").extension;
+    free: typeof import("koffi").free;
+    inout: typeof import("koffi").inout;
+    introspect: typeof import("koffi").introspect;
+    load: typeof import("koffi").load;
+    node: typeof import("koffi").node;
+    offsetof: typeof import("koffi").offsetof;
+    opaque: typeof import("koffi").opaque;
+    os: typeof import("koffi").os;
+    out: typeof import("koffi").out;
+    pack: typeof import("koffi").pack;
+    pointer: typeof import("koffi").pointer;
+    proto: typeof import("koffi").proto;
+    register: typeof import("koffi").register;
+    reset: typeof import("koffi").reset;
+    resolve: typeof import("koffi").resolve;
+    sizeof: typeof import("koffi").sizeof;
+    stats: typeof import("koffi").stats;
+    struct: typeof import("koffi").struct;
+    type: typeof import("koffi").type;
+    types: typeof import("koffi").types;
+    union: typeof import("koffi").union;
+    unregister: typeof import("koffi").unregister;
+    version: typeof import("koffi").version;
+    view: typeof import("koffi").view;
+}>): Promise<{
+    LibraryHandle: import("koffi").LibraryHandle;
+    TypeObject: import("koffi").TypeObject;
+    Union: import("koffi").Union;
+    address: typeof import("koffi").address;
+    alias: typeof import("koffi").alias;
+    alignof: typeof import("koffi").alignof;
+    alloc: typeof import("koffi").alloc;
+    array: typeof import("koffi").array;
+    as: typeof import("koffi").as;
+    call: typeof import("koffi").call;
+    config: typeof import("koffi").config;
+    decode: typeof import("koffi").decode;
+    disposable: typeof import("koffi").disposable;
+    encode: typeof import("koffi").encode;
+    enumeration: typeof import("koffi").enumeration;
+    errno: typeof import("koffi").errno;
+    extension: typeof import("koffi").extension;
+    free: typeof import("koffi").free;
+    inout: typeof import("koffi").inout;
+    introspect: typeof import("koffi").introspect;
+    load: typeof import("koffi").load;
+    node: typeof import("koffi").node;
+    offsetof: typeof import("koffi").offsetof;
+    opaque: typeof import("koffi").opaque;
+    os: typeof import("koffi").os;
+    out: typeof import("koffi").out;
+    pack: typeof import("koffi").pack;
+    pointer: typeof import("koffi").pointer;
+    proto: typeof import("koffi").proto;
+    register: typeof import("koffi").register;
+    reset: typeof import("koffi").reset;
+    resolve: typeof import("koffi").resolve;
+    sizeof: typeof import("koffi").sizeof;
+    stats: typeof import("koffi").stats;
+    struct: typeof import("koffi").struct;
+    type: typeof import("koffi").type;
+    types: typeof import("koffi").types;
+    union: typeof import("koffi").union;
+    unregister: typeof import("koffi").unregister;
+    version: typeof import("koffi").version;
+    view: typeof import("koffi").view;
+}>;
+//# sourceMappingURL=native-loader.d.ts.map

package/dist/owned-scope/native-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-loader.d.ts","sourceRoot":"","sources":["../../src/owned-scope/native-loader.ts"],"names":[],"mappings":"AAGA,4CAA4C;AAC5C,wBAAsB,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,EAAE,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GASzF"}

package/dist/owned-scope/native-loader.js

@@ -0,0 +1,17 @@
+import { ProcessControlError, processControlErrorCodes } from '@openge/forge-process-control';
+const importNative = async () => (await import('koffi')).default;
+/** 只有显式启用 scope 才加载原生依赖；缺失预编译制品不触发构建或降级。 */
+export async function loadOwnedNative(platform, importer = importNative) {
+    if (process.platform !== platform || process.arch !== 'x64')
+        throw new ProcessControlError(processControlErrorCodes.scopeUnsupported, { reason: 'HOST', platform, architecture: process.arch });
+    try {
+        const native = await importer();
+        if (native.version !== '3.3.3')
+            throw new Error('NATIVE_VERSION');
+        return native;
+    }
+    catch {
+        throw new ProcessControlError(processControlErrorCodes.scopeUnsupported, { reason: 'NATIVE_PREBUILD', platform });
+    }
+}
+//# sourceMappingURL=native-loader.js.map

package/dist/owned-scope/native-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-loader.js","sourceRoot":"","sources":["../../src/owned-scope/native-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9F,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;AACjE,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA2B,EAAE,QAAQ,GAAG,YAAY;IACxF,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChM,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpH,CAAC;AACH,CAAC"}

package/dist/owned-scope/protocol.d.ts

@@ -0,0 +1,20 @@
+import { type OwnedProcessLaunchRequest } from '@openge/forge-process-control';
+export declare const controlLimit = 65536, launchLimit = 1048576;
+export declare function object(value: unknown): Record<string, unknown>;
+export declare function validateLaunch(value: unknown): asserts value is OwnedProcessLaunchRequest;
+export interface ScopeKey {
+    readonly scopeId: string;
+    readonly binding: string;
+    readonly nonce: string;
+}
+export interface ScopeFrame extends ScopeKey {
+    readonly version: 1;
+    readonly sequence: number;
+    readonly type: string;
+    readonly id?: number;
+    readonly payload?: unknown;
+}
+export declare function frame(key: ScopeKey, sequence: number, type: string, payload?: unknown, id?: number): ScopeFrame;
+export declare function readFrame(value: unknown, key: ScopeKey, sequence: number): ScopeFrame;
+export declare function supervisorEnvironment(environment: Readonly<Record<string, string | undefined>>): NodeJS.ProcessEnv;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/owned-scope/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/owned-scope/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE9H,eAAO,MAAM,YAAY,QAAS,EAAE,WAAW,UAAY,CAAC;AAC5D,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9D;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,yBAAyB,CAUzF;AACD,MAAM,WAAW,QAAQ;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACxG,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE;AACxK,wBAAgB,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,UAAU,CAE/G;AACD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAMrF;AACD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAElH"}