@paperclipai/server 2026.817.0 → 2026.818.0-beta.1

package/dist/services/runtime-exposure/port-reservation.d.ts

@@ -0,0 +1,211 @@
+/**
+ * Who holds (or wants) a port pair. Every field is optional evidence — a
+ * conflict report is only as specific as the views that produced it — but
+ * `executionWorkspaceId` is the identity that governs adoption.
+ */
+export interface ExposureOwnerIdentity {
+    runtimeServiceId: string | null;
+    executionWorkspaceId: string | null;
+    projectWorkspaceId: string | null;
+    issueId: string | null;
+}
+/** Where a reservation came from, ordered by strength of evidence below. */
+export type ExposureReservationSource = 
+/** This process is running the runtime that owns the pair. */
+"in_memory_runtime"
+/** The broker reports a live Paperclip-owned Serve mapping on the port. */
+ | "broker_mapping"
+/** A persisted row still claims an exposure that is not `removed`. */
+ | "persisted_exposure"
+/** A stopped/removed row whose execution-workspace lease is still open. */
+ | "leased_workspace"
+/** Quarantined after an ambiguous cleanup; never reusable by anyone. */
+ | "quarantine";
+export interface ExposurePortReservation {
+    port: number;
+    source: ExposureReservationSource;
+    owner: ExposureOwnerIdentity;
+}
+export interface ExposureReservationLedger {
+    /** Every port currently spoken for, whoever holds it. */
+    reservedPorts: ReadonlySet<number>;
+    /** Strongest-evidence reservation per port. */
+    reservationByPort: ReadonlyMap<number, ExposurePortReservation>;
+}
+/**
+ * The subset of a `workspace_runtime_services` row this module reasons about.
+ * Deliberately structural rather than the Drizzle row type: startup
+ * reconciliation, allocation, and tests all project into it from different
+ * queries.
+ */
+export interface PersistedExposureRowSnapshot {
+    id: string;
+    status: string;
+    executionWorkspaceId: string | null;
+    projectWorkspaceId: string | null;
+    issueId: string | null;
+    /** App port column; survives teardown and is the lease's durable claim. */
+    port: number | null;
+    exposure: {
+        state: string;
+        listeners: ReadonlyArray<{
+            targetPort: number;
+        }>;
+    } | null;
+}
+/** A runtime this process is currently running with an exposure attached. */
+export interface InMemoryExposureSnapshot {
+    runtimeServiceId: string;
+    executionWorkspaceId: string | null;
+    projectWorkspaceId: string | null;
+    issueId: string | null;
+    ports: ReadonlyArray<number>;
+}
+/** One Paperclip-owned listener as reported by the broker's `list()`. */
+export interface BrokerMappingSnapshot {
+    runtimeId: string;
+    port: number;
+}
+export interface BuildExposureReservationLedgerInput {
+    persistedRows?: Iterable<PersistedExposureRowSnapshot>;
+    inMemoryRuntimes?: Iterable<InMemoryExposureSnapshot>;
+    brokerMappings?: Iterable<BrokerMappingSnapshot>;
+    quarantinedPorts?: Iterable<number>;
+    /**
+     * Execution workspaces whose exclusive lease is still open. A row belonging
+     * to one of these reserves its pair regardless of process or exposure state;
+     * that is the whole fix for "stopped-but-leased pair reuse".
+     */
+    activeExecutionWorkspaceIds?: Iterable<string>;
+    /** In-process pair claims held by starts that have not bound a listener yet. */
+    inFlightClaimedPorts?: Iterable<number>;
+}
+/**
+ * Every port a row's pair covers.
+ *
+ * The union of the exposure's declared listeners and the pair derived from the
+ * `port` column matters: `deprovisionExposure` replaces the status with a fresh
+ * `removed` one whose `listeners` is `[]`, so a torn-down row would otherwise
+ * contribute nothing at all. The `port` column is what still names the pair the
+ * lease paid for.
+ */
+export declare function collectRowExposurePorts(row: PersistedExposureRowSnapshot): Set<number>;
+/**
+ * Merge every reservation view into one ledger. Later, weaker evidence never
+ * overwrites a stronger claim already recorded for the same port.
+ */
+export declare function buildExposureReservationLedger(input: BuildExposureReservationLedgerInput): ExposureReservationLedger;
+/**
+ * May `claimant` take over a port currently attributed to `holder`?
+ *
+ * The rule is deliberately narrow, because the failure this prevents is a
+ * managed start silently adopting another issue's live service and then
+ * generating security evidence attributed to the wrong workspace:
+ *
+ *  - the same runtime service reclaiming its own port is fine (restart);
+ *  - otherwise both sides must name the *same, non-null* execution workspace.
+ *
+ * An unknown identity on either side is never adopted. "We could not tell whose
+ * it is" is a reason to fail closed, not a reason to assume it is ours.
+ */
+export declare function isExposureAdoptionPermitted(holder: ExposureOwnerIdentity | null, claimant: ExposureOwnerIdentity): boolean;
+export type ExposurePortConflictCode = "quarantined_port" | "reserved_by_other_workspace" | "listener_owned_by_other_workspace" | "serve_mapping_owned_by_other_workspace";
+export interface ExposurePortConflict {
+    code: ExposurePortConflictCode;
+    port: number;
+    claimant: ExposureOwnerIdentity;
+    holder: ExposureOwnerIdentity | null;
+    source: ExposureReservationSource | null;
+}
+export interface FindExposurePairConflictInput {
+    pair: {
+        appPort: number;
+        hmrPort: number;
+    };
+    claimant: ExposureOwnerIdentity;
+    ledger: ExposureReservationLedger;
+    /**
+     * Identity behind the process actually listening on each port, when one could
+     * be resolved. `null` for a port with a live listener whose owner is unknown —
+     * which is itself a conflict, since an unattributable listener must never be
+     * adopted.
+     */
+    listenerOwners?: ReadonlyMap<number, ExposureOwnerIdentity | null>;
+    /** Identity behind each live Serve mapping, keyed by port. */
+    serveMappingOwners?: ReadonlyMap<number, ExposureOwnerIdentity | null>;
+}
+/**
+ * Complete mediation for one candidate pair: the first conflict across the
+ * persisted ledger, the live listeners, and the Serve mappings — or null when
+ * all three agree the claimant may have it.
+ */
+export declare function findExposurePairConflict(input: FindExposurePairConflictInput): ExposurePortConflict | null;
+/**
+ * Operator-facing conflict text. Always names the port and the conflicting
+ * workspace/issue identity: a bare "port unavailable" is what made the original
+ * incident take a manual `tailscale serve status` read to attribute.
+ */
+export declare function describeExposurePortConflict(conflict: ExposurePortConflict): string;
+/** Thrown on the allocation/start path so the failure is terminal and attributed. */
+export declare class ExposurePortOwnershipConflictError extends Error {
+    readonly conflict: ExposurePortConflict;
+    readonly code: "exposure_port_ownership_conflict";
+    constructor(conflict: ExposurePortConflict);
+}
+export interface ExposureReservationDrift {
+    /** The row Paperclip believes is stopped/removed. */
+    runtimeServiceId: string;
+    owner: ExposureOwnerIdentity;
+    port: number;
+    reason: "live_listener" | "serve_mapping";
+    /** Who actually holds it, when that could be attributed. */
+    conflictingOwner: ExposureOwnerIdentity | null;
+}
+export interface FindExposureReservationDriftInput {
+    persistedRows: Iterable<PersistedExposureRowSnapshot>;
+    /** Ports with a live loopback listener right now. */
+    livePorts?: ReadonlySet<number>;
+    listenerOwners?: ReadonlyMap<number, ExposureOwnerIdentity | null>;
+    brokerMappings?: Iterable<BrokerMappingSnapshot>;
+}
+/**
+ * Rows whose state says "nothing here" while the host says otherwise.
+ *
+ * Reconciliation calls this so a lane reported `stopped` with its exposure
+ * `removed` — but whose reserved ports are live, or mapped to some other
+ * runtime — becomes a visible, attributable finding instead of a pair that
+ * quietly returns to the free list. A port still held by the row's *own*
+ * runtime is not drift; that is just a lane the sweep has yet to adopt.
+ */
+export declare function findExposureReservationDrift(input: FindExposureReservationDriftInput): ExposureReservationDrift[];
+/** Human-readable drift line for reconciliation logs and operator evidence. */
+export declare function describeExposureReservationDrift(entry: ExposureReservationDrift): string;
+/**
+ * In-process, pair-atomic claims for starts that have not bound a listener yet.
+ *
+ * Two concurrent allocators see identical persisted state and identical probe
+ * results, so without a claim they both walk away with the lowest free pair.
+ * Claiming is all-or-nothing across the two ports: a half-claimed pair would
+ * let one start own the app port and another the HMR port, which is the
+ * orphaned-companion failure the pairing exists to prevent.
+ */
+export declare class ExposurePortPairClaims {
+    private readonly ttlMs;
+    private readonly heldUntilByPort;
+    constructor(ttlMs?: number);
+    private isHeld;
+    /** Claim both ports, or neither. Returns false when either is already held. */
+    claim(pair: {
+        appPort: number;
+        hmrPort: number;
+    }, nowMs?: number): boolean;
+    /** Release on lease release/teardown, or when a start reaches a terminal state. */
+    release(pair: {
+        appPort: number;
+        hmrPort: number;
+    }): void;
+    /** Ports still claimed, for folding into an allocator's reserved set. */
+    activePorts(nowMs?: number): Set<number>;
+    clear(): void;
+}
+//# sourceMappingURL=port-reservation.d.ts.map

package/dist/services/runtime-exposure/port-reservation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-reservation.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-reservation.ts"],"names":[],"mappings":"AAkDA;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,MAAM,yBAAyB;AACnC,8DAA8D;AAC5D,mBAAmB;AACrB,2EAA2E;GACzE,gBAAgB;AAClB,sEAAsE;GACpE,oBAAoB;AACtB,2EAA2E;GACzE,kBAAkB;AACpB,wEAAwE;GACtE,YAAY,CAAC;AAgBjB,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,qBAAqB,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,yDAAyD;IACzD,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,+CAA+C;IAC/C,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,aAAa,CAAC;YAAE,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClD,GAAG,IAAI,CAAC;CACV;AAED,6EAA6E;AAC7E,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mCAAmC;IAClD,aAAa,CAAC,EAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACvD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACtD,cAAc,CAAC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACzC;AAWD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,4BAA4B,GAAG,GAAG,CAAC,MAAM,CAAC,CAUtF;AAgBD;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,yBAAyB,CAiD3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,qBAAqB,GAAG,IAAI,EACpC,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAWT;AAED,MAAM,MAAM,wBAAwB,GAChC,kBAAkB,GAClB,6BAA6B,GAC7B,mCAAmC,GACnC,wCAAwC,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,EAAE,yBAAyB,CAAC;IAClC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnE,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC,CAAC;CACxE;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,6BAA6B,GACnC,oBAAoB,GAAG,IAAI,CAqD7B;AAqBD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,CASnF;AAED,qFAAqF;AACrF,qBAAa,kCAAmC,SAAQ,KAAK;IAG/C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB;IAFnD,QAAQ,CAAC,IAAI,EAAG,kCAAkC,CAAU;gBAEvC,QAAQ,EAAE,oBAAoB;CAIpD;AAED,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,GAAG,eAAe,CAAC;IAC1C,4DAA4D;IAC5D,gBAAgB,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACtD,qDAAqD;IACrD,SAAS,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,cAAc,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACnE,cAAc,CAAC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;CAClD;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,wBAAwB,EAAE,CA8B5B;AAED,+EAA+E;AAC/E,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAQxF;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAsB;IAGrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;gBAEhC,KAAK,GAAE,MAAgB;IAEpD,OAAO,CAAC,MAAM;IAQd,+EAA+E;IAC/E,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,GAAE,MAAmB,GAAG,OAAO;IAOtF,mFAAmF;IACnF,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAKzD,yEAAyE;IACzE,WAAW,CAAC,KAAK,GAAE,MAAmB,GAAG,GAAG,CAAC,MAAM,CAAC;IAQpD,KAAK,IAAI,IAAI;CAGd"}

package/dist/services/runtime-exposure/port-reservation.js

@@ -0,0 +1,380 @@
+/**
+ * Central reservation + ownership mediation for `tailscale_https` app/HMR port
+ * pairs (PAP-17419, from the PAP-17251 finding).
+ *
+ * ## Why this module exists
+ *
+ * Before it, "is this pair free?" was answered by three unrelated views that
+ * never had to agree:
+ *
+ *  1. the allocator's liveness probe — is anything *listening* right now,
+ *  2. `collectReservedExposurePorts` — persisted rows, but only those whose
+ *     `exposure.state` was not yet `removed`,
+ *  3. the broker's Serve mapping — consulted nowhere on the allocation path.
+ *
+ * A workspace can hold an exclusive lease on a pair while satisfying none of
+ * those: stop the backend and the listener is gone; tear the exposure down and
+ * the row goes `stopped` with `exposure.state = "removed"` **and an emptied
+ * `listeners` array**, so the row stops contributing anything to the reserved
+ * set even though its `port` column still names the pair the lease owns. That
+ * is exactly how the pair leased to workspace `b7ce28b4` (`42001/52001`) was
+ * handed to the unrelated workspace `PAP-16986-add-posthog-mcp`, while
+ * Paperclip went on reporting the leased lane `stopped` and its exposure
+ * `removed`.
+ *
+ * ## The mediation this module centralizes
+ *
+ * - **Reservation follows the lease, not the process.** An execution workspace
+ *   whose lease is still open reserves its pair through stop, teardown, and
+ *   `removed` — until the lease is explicitly released. {@link
+ *   buildExposureReservationLedger} derives the pair from the row's `port`
+ *   column precisely because teardown erases `exposure.listeners`.
+ * - **Complete mediation on allocation.** {@link findExposurePairConflict}
+ *   checks the persisted ledger *and* the live listener owner *and* the Serve
+ *   mapping owner. Any of the three disagreeing fails the allocation closed,
+ *   naming the conflicting workspace/issue.
+ * - **No adoption across execution workspaces, ever.** {@link
+ *   isExposureAdoptionPermitted} is the single predicate for "may this claimant
+ *   take over that holder's port", and it answers no whenever the two execution
+ *   workspace IDs are not the identical, non-null value.
+ * - **Drift is surfaced, not silently reused.** {@link
+ *   findExposureReservationDrift} reports a `stopped`/`removed` row whose
+ *   reserved ports are live or mapped by someone else, so reconciliation can
+ *   report a false-`stopped` lane instead of recycling it.
+ *
+ * Pure functions and one in-process claim registry: no sockets, no DB, no
+ * broker. Every caller injects its own view, which is what makes all five
+ * PAP-17419 regression cases testable without touching host Serve state.
+ */
+import { deriveViteHmrPort, isRuntimeExposureAppPort } from "@paperclipai/shared";
+/**
+ * Precedence when several views claim one port. Strongest first: the report
+ * should name the most concrete evidence available, so an operator reading
+ * "held by the live Serve mapping for workspace X" is not told "reserved by a
+ * lease" when both are true.
+ */
+const RESERVATION_SOURCE_RANK = {
+    quarantine: 0,
+    in_memory_runtime: 1,
+    broker_mapping: 2,
+    persisted_exposure: 3,
+    leased_workspace: 4,
+};
+function emptyIdentity() {
+    return {
+        runtimeServiceId: null,
+        executionWorkspaceId: null,
+        projectWorkspaceId: null,
+        issueId: null,
+    };
+}
+/**
+ * Every port a row's pair covers.
+ *
+ * The union of the exposure's declared listeners and the pair derived from the
+ * `port` column matters: `deprovisionExposure` replaces the status with a fresh
+ * `removed` one whose `listeners` is `[]`, so a torn-down row would otherwise
+ * contribute nothing at all. The `port` column is what still names the pair the
+ * lease paid for.
+ */
+export function collectRowExposurePorts(row) {
+    const ports = new Set();
+    for (const listener of row.exposure?.listeners ?? []) {
+        if (Number.isInteger(listener.targetPort))
+            ports.add(listener.targetPort);
+    }
+    if (row.port !== null && isRuntimeExposureAppPort(row.port)) {
+        ports.add(row.port);
+        ports.add(deriveViteHmrPort(row.port));
+    }
+    return ports;
+}
+/** True when the row's own exposure state still claims the mapping. */
+function rowClaimsLiveExposure(row) {
+    return Boolean(row.exposure) && row.exposure.state !== "removed";
+}
+function rowIdentity(row) {
+    return {
+        runtimeServiceId: row.id,
+        executionWorkspaceId: row.executionWorkspaceId,
+        projectWorkspaceId: row.projectWorkspaceId,
+        issueId: row.issueId,
+    };
+}
+/**
+ * Merge every reservation view into one ledger. Later, weaker evidence never
+ * overwrites a stronger claim already recorded for the same port.
+ */
+export function buildExposureReservationLedger(input) {
+    const reservationByPort = new Map();
+    const record = (port, source, owner) => {
+        if (!Number.isInteger(port))
+            return;
+        const existing = reservationByPort.get(port);
+        if (existing && RESERVATION_SOURCE_RANK[existing.source] <= RESERVATION_SOURCE_RANK[source])
+            return;
+        reservationByPort.set(port, { port, source, owner });
+    };
+    const activeLeases = new Set(input.activeExecutionWorkspaceIds ?? []);
+    for (const port of input.quarantinedPorts ?? [])
+        record(port, "quarantine", emptyIdentity());
+    // An in-flight claim has no identity yet by construction — the claiming start
+    // has not persisted a row. It still must block a concurrent allocator.
+    for (const port of input.inFlightClaimedPorts ?? [])
+        record(port, "in_memory_runtime", emptyIdentity());
+    for (const runtime of input.inMemoryRuntimes ?? []) {
+        const owner = {
+            runtimeServiceId: runtime.runtimeServiceId,
+            executionWorkspaceId: runtime.executionWorkspaceId,
+            projectWorkspaceId: runtime.projectWorkspaceId,
+            issueId: runtime.issueId,
+        };
+        for (const port of runtime.ports)
+            record(port, "in_memory_runtime", owner);
+    }
+    // Broker mappings identify a runtime, not a workspace; resolve the workspace
+    // from the persisted rows when we can so a conflict can name it.
+    const rows = [...(input.persistedRows ?? [])];
+    const identityByRuntimeId = new Map(rows.map((row) => [row.id, rowIdentity(row)]));
+    for (const mapping of input.brokerMappings ?? []) {
+        record(mapping.port, "broker_mapping", identityByRuntimeId.get(mapping.runtimeId)
+            ?? { ...emptyIdentity(), runtimeServiceId: mapping.runtimeId });
+    }
+    for (const row of rows) {
+        const leaseOpen = Boolean(row.executionWorkspaceId) && activeLeases.has(row.executionWorkspaceId);
+        const claimsExposure = rowClaimsLiveExposure(row);
+        if (!leaseOpen && !claimsExposure)
+            continue;
+        const source = claimsExposure ? "persisted_exposure" : "leased_workspace";
+        for (const port of collectRowExposurePorts(row))
+            record(port, source, rowIdentity(row));
+    }
+    return { reservationByPort, reservedPorts: new Set(reservationByPort.keys()) };
+}
+/**
+ * May `claimant` take over a port currently attributed to `holder`?
+ *
+ * The rule is deliberately narrow, because the failure this prevents is a
+ * managed start silently adopting another issue's live service and then
+ * generating security evidence attributed to the wrong workspace:
+ *
+ *  - the same runtime service reclaiming its own port is fine (restart);
+ *  - otherwise both sides must name the *same, non-null* execution workspace.
+ *
+ * An unknown identity on either side is never adopted. "We could not tell whose
+ * it is" is a reason to fail closed, not a reason to assume it is ours.
+ */
+export function isExposureAdoptionPermitted(holder, claimant) {
+    if (!holder)
+        return true;
+    if (holder.runtimeServiceId !== null
+        && claimant.runtimeServiceId !== null
+        && holder.runtimeServiceId === claimant.runtimeServiceId) {
+        return true;
+    }
+    if (holder.executionWorkspaceId === null || claimant.executionWorkspaceId === null)
+        return false;
+    return holder.executionWorkspaceId === claimant.executionWorkspaceId;
+}
+/**
+ * Complete mediation for one candidate pair: the first conflict across the
+ * persisted ledger, the live listeners, and the Serve mappings — or null when
+ * all three agree the claimant may have it.
+ */
+export function findExposurePairConflict(input) {
+    const ports = [input.pair.appPort, input.pair.hmrPort];
+    for (const port of ports) {
+        const reservation = input.ledger.reservationByPort.get(port);
+        if (!reservation)
+            continue;
+        if (reservation.source === "quarantine") {
+            return { code: "quarantined_port", port, claimant: input.claimant, holder: null, source: "quarantine" };
+        }
+        if (!isExposureAdoptionPermitted(reservation.owner, input.claimant)) {
+            return {
+                code: "reserved_by_other_workspace",
+                port,
+                claimant: input.claimant,
+                holder: reservation.owner,
+                source: reservation.source,
+            };
+        }
+    }
+    // Presence in these maps means the host has something on the port. A `null`
+    // value is therefore NOT "no holder" — it is "a holder we could not name",
+    // which is the one case that must never be adopted. `isExposureAdoptionPermitted`
+    // is only consulted once we have an identity to compare.
+    for (const port of ports) {
+        if (!input.listenerOwners?.has(port))
+            continue;
+        const owner = input.listenerOwners.get(port) ?? null;
+        if (owner === null || !isExposureAdoptionPermitted(owner, input.claimant)) {
+            return {
+                code: "listener_owned_by_other_workspace",
+                port,
+                claimant: input.claimant,
+                holder: owner,
+                source: null,
+            };
+        }
+    }
+    for (const port of ports) {
+        if (!input.serveMappingOwners?.has(port))
+            continue;
+        const owner = input.serveMappingOwners.get(port) ?? null;
+        if (owner === null || !isExposureAdoptionPermitted(owner, input.claimant)) {
+            return {
+                code: "serve_mapping_owned_by_other_workspace",
+                port,
+                claimant: input.claimant,
+                holder: owner,
+                source: null,
+            };
+        }
+    }
+    return null;
+}
+function describeIdentity(identity) {
+    if (!identity)
+        return "an unidentified owner";
+    const parts = [];
+    if (identity.executionWorkspaceId)
+        parts.push(`execution workspace ${identity.executionWorkspaceId}`);
+    if (identity.issueId)
+        parts.push(`issue ${identity.issueId}`);
+    if (identity.runtimeServiceId)
+        parts.push(`runtime service ${identity.runtimeServiceId}`);
+    if (identity.projectWorkspaceId && parts.length === 0) {
+        parts.push(`project workspace ${identity.projectWorkspaceId}`);
+    }
+    return parts.length > 0 ? parts.join(", ") : "an unidentified owner";
+}
+const CONFLICT_REASONS = {
+    quarantined_port: "is quarantined after an ambiguous exposure cleanup and can never be reused",
+    reserved_by_other_workspace: "is reserved by",
+    listener_owned_by_other_workspace: "has a live loopback listener owned by",
+    serve_mapping_owned_by_other_workspace: "is published by a Tailscale Serve mapping owned by",
+};
+/**
+ * Operator-facing conflict text. Always names the port and the conflicting
+ * workspace/issue identity: a bare "port unavailable" is what made the original
+ * incident take a manual `tailscale serve status` read to attribute.
+ */
+export function describeExposurePortConflict(conflict) {
+    const subject = `port ${conflict.port}`;
+    if (conflict.code === "quarantined_port") {
+        return `${subject} ${CONFLICT_REASONS.quarantined_port}`;
+    }
+    const suffix = conflict.source === "leased_workspace"
+        ? " (the lane is stopped, but its lease is still open)"
+        : "";
+    return `${subject} ${CONFLICT_REASONS[conflict.code]} ${describeIdentity(conflict.holder)}${suffix}`;
+}
+/** Thrown on the allocation/start path so the failure is terminal and attributed. */
+export class ExposurePortOwnershipConflictError extends Error {
+    conflict;
+    code = "exposure_port_ownership_conflict";
+    constructor(conflict) {
+        super(`HTTPS exposure allocation denied: ${describeExposurePortConflict(conflict)}`);
+        this.conflict = conflict;
+        this.name = "ExposurePortOwnershipConflictError";
+    }
+}
+/**
+ * Rows whose state says "nothing here" while the host says otherwise.
+ *
+ * Reconciliation calls this so a lane reported `stopped` with its exposure
+ * `removed` — but whose reserved ports are live, or mapped to some other
+ * runtime — becomes a visible, attributable finding instead of a pair that
+ * quietly returns to the free list. A port still held by the row's *own*
+ * runtime is not drift; that is just a lane the sweep has yet to adopt.
+ */
+export function findExposureReservationDrift(input) {
+    const rows = [...input.persistedRows];
+    const identityByRuntimeId = new Map(rows.map((row) => [row.id, rowIdentity(row)]));
+    const mappingOwnerByPort = new Map();
+    for (const mapping of input.brokerMappings ?? []) {
+        mappingOwnerByPort.set(mapping.port, identityByRuntimeId.get(mapping.runtimeId)
+            ?? { ...emptyIdentity(), runtimeServiceId: mapping.runtimeId });
+    }
+    const drift = [];
+    for (const row of rows) {
+        const dormant = row.status === "stopped" || row.status === "failed" || !rowClaimsLiveExposure(row);
+        if (!dormant)
+            continue;
+        const owner = rowIdentity(row);
+        for (const port of collectRowExposurePorts(row)) {
+            const mappingOwner = mappingOwnerByPort.get(port) ?? null;
+            if (mappingOwner && mappingOwner.runtimeServiceId !== row.id) {
+                drift.push({ runtimeServiceId: row.id, owner, port, reason: "serve_mapping", conflictingOwner: mappingOwner });
+                continue;
+            }
+            if (!input.livePorts?.has(port))
+                continue;
+            const listenerOwner = input.listenerOwners?.get(port) ?? null;
+            if (listenerOwner && listenerOwner.runtimeServiceId === row.id)
+                continue;
+            drift.push({ runtimeServiceId: row.id, owner, port, reason: "live_listener", conflictingOwner: listenerOwner });
+        }
+    }
+    return drift;
+}
+/** Human-readable drift line for reconciliation logs and operator evidence. */
+export function describeExposureReservationDrift(entry) {
+    const held = entry.reason === "serve_mapping"
+        ? "is still published by a Tailscale Serve mapping"
+        : "still has a live loopback listener";
+    return (`runtime service ${entry.runtimeServiceId} (${describeIdentity(entry.owner)}) is recorded stopped/removed, `
+        + `but its reserved port ${entry.port} ${held} owned by ${describeIdentity(entry.conflictingOwner)}`);
+}
+/**
+ * In-process, pair-atomic claims for starts that have not bound a listener yet.
+ *
+ * Two concurrent allocators see identical persisted state and identical probe
+ * results, so without a claim they both walk away with the lowest free pair.
+ * Claiming is all-or-nothing across the two ports: a half-claimed pair would
+ * let one start own the app port and another the HMR port, which is the
+ * orphaned-companion failure the pairing exists to prevent.
+ */
+export class ExposurePortPairClaims {
+    ttlMs;
+    heldUntilByPort = new Map();
+    constructor(ttlMs = 120_000) {
+        this.ttlMs = ttlMs;
+    }
+    isHeld(port, nowMs) {
+        const heldUntil = this.heldUntilByPort.get(port);
+        if (heldUntil === undefined)
+            return false;
+        if (heldUntil > nowMs)
+            return true;
+        this.heldUntilByPort.delete(port);
+        return false;
+    }
+    /** Claim both ports, or neither. Returns false when either is already held. */
+    claim(pair, nowMs = Date.now()) {
+        if (this.isHeld(pair.appPort, nowMs) || this.isHeld(pair.hmrPort, nowMs))
+            return false;
+        this.heldUntilByPort.set(pair.appPort, nowMs + this.ttlMs);
+        this.heldUntilByPort.set(pair.hmrPort, nowMs + this.ttlMs);
+        return true;
+    }
+    /** Release on lease release/teardown, or when a start reaches a terminal state. */
+    release(pair) {
+        this.heldUntilByPort.delete(pair.appPort);
+        this.heldUntilByPort.delete(pair.hmrPort);
+    }
+    /** Ports still claimed, for folding into an allocator's reserved set. */
+    activePorts(nowMs = Date.now()) {
+        const active = new Set();
+        for (const port of [...this.heldUntilByPort.keys()]) {
+            if (this.isHeld(port, nowMs))
+                active.add(port);
+        }
+        return active;
+    }
+    clear() {
+        this.heldUntilByPort.clear();
+    }
+}
+//# sourceMappingURL=port-reservation.js.map

package/dist/services/runtime-exposure/port-reservation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-reservation.js","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-reservation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AA2BlF;;;;;GAKG;AACH,MAAM,uBAAuB,GAA8C;IACzE,UAAU,EAAE,CAAC;IACb,iBAAiB,EAAE,CAAC;IACpB,cAAc,EAAE,CAAC;IACjB,kBAAkB,EAAE,CAAC;IACrB,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAiEF,SAAS,aAAa;IACpB,OAAO;QACL,gBAAgB,EAAE,IAAI;QACtB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAiC;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,SAAS,qBAAqB,CAAC,GAAiC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAS,CAAC,KAAK,KAAK,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,GAAiC;IACpD,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,EAAE;QACxB,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;QAC9C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAErE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAiC,EAAE,KAA4B,EAAE,EAAE;QAC/F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC;YAAE,OAAO;QACpG,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAEtE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IAC7F,8EAA8E;IAC9E,uEAAuE;IACvE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC,CAAC;IAExG,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,KAAK,GAA0B;YACnC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,CACJ,OAAO,CAAC,IAAI,EACZ,gBAAgB,EAChB,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;eACrC,EAAE,GAAG,aAAa,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,SAAS,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAqB,CAAC,CAAC;QACnG,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc;YAAE,SAAS;QAC5C,MAAM,MAAM,GAA8B,cAAc,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACrG,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAoC,EACpC,QAA+B;IAE/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IACE,MAAM,CAAC,gBAAgB,KAAK,IAAI;WAC7B,QAAQ,CAAC,gBAAgB,KAAK,IAAI;WAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB,EACxD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,oBAAoB,KAAK,IAAI,IAAI,QAAQ,CAAC,oBAAoB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB,CAAC;AACvE,CAAC;AA+BD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAoC;IAEpC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC1G,CAAC;QACD,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpE,OAAO;gBACL,IAAI,EAAE,6BAA6B;gBACnC,IAAI;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,WAAW,CAAC,KAAK;gBACzB,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,kFAAkF;IAClF,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI,EAAE,mCAAmC;gBACzC,IAAI;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QACzD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,IAAI,EAAE,wCAAwC;gBAC9C,IAAI;gBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAsC;IAC9D,IAAI,CAAC,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,oBAAoB;QAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC1F,IAAI,QAAQ,CAAC,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC;AACvE,CAAC;AAED,MAAM,gBAAgB,GAA6C;IACjE,gBAAgB,EAAE,4EAA4E;IAC9F,2BAA2B,EAAE,gBAAgB;IAC7C,iCAAiC,EAAE,uCAAuC;IAC1E,sCAAsC,EAAE,oDAAoD;CAC7F,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,QAA8B;IACzE,MAAM,OAAO,GAAG,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,OAAO,GAAG,OAAO,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,kBAAkB;QACnD,CAAC,CAAC,qDAAqD;QACvD,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;AACvG,CAAC;AAED,qFAAqF;AACrF,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAGtC;IAFZ,IAAI,GAAG,kCAA2C,CAAC;IAE5D,YAAqB,QAA8B;QACjD,KAAK,CAAC,qCAAqC,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QADlE,aAAQ,GAAR,QAAQ,CAAsB;QAEjD,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IACnD,CAAC;CACF;AAoBD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAwC;IAExC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QACjD,kBAAkB,CAAC,GAAG,CACpB,OAAO,CAAC,IAAI,EACZ,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;eACrC,EAAE,GAAG,aAAa,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,SAAS,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YAC1D,IAAI,YAAY,IAAI,YAAY,CAAC,gBAAgB,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC7D,KAAK,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC/G,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YAC9D,IAAI,aAAa,IAAI,aAAa,CAAC,gBAAgB,KAAK,GAAG,CAAC,EAAE;gBAAE,SAAS;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gCAAgC,CAAC,KAA+B;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,eAAe;QAC3C,CAAC,CAAC,iDAAiD;QACnD,CAAC,CAAC,oCAAoC,CAAC;IACzC,OAAO,CACL,mBAAmB,KAAK,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,iCAAiC;UAC1G,yBAAyB,KAAK,CAAC,IAAI,IAAI,IAAI,aAAa,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CACrG,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAsB;IAGJ;IAFZ,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D,YAA6B,QAAgB,OAAO;QAAvB,UAAK,GAAL,KAAK,CAAkB;IAAG,CAAC;IAEhD,MAAM,CAAC,IAAY,EAAE,KAAa;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,SAAS,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,IAA0C,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mFAAmF;IACnF,OAAO,CAAC,IAA0C;QAChD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,yEAAyE;IACzE,WAAW,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/services/runtime-exposure/port-reservation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=port-reservation.test.d.ts.map

package/dist/services/runtime-exposure/port-reservation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-reservation.test.d.ts","sourceRoot":"","sources":["../../../src/services/runtime-exposure/port-reservation.test.ts"],"names":[],"mappings":""}