@phigon/observer 8.1.0 → 8.3.0

package/dist/src/pair.js.map

@@ -1 +1 @@
-{"version":3,"file":"pair.js","sourceRoot":"","sources":["../../src/pair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EACL,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AAgCpE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,0BAA0B,CACrD,OAAO,CAAC,MAAM,CAAC,aAAa,CAC7B,CAAC;IACF,IACE,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM;QAC9C,OAAO,CAAC,cAAc,KAAK,MAAM,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,sBAAsB,EACtB,OAAO,CAAC,MAAM,CAAC,eAAe,CAC/B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe;QAC7C,IAAI,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,mHAAmH,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,IAAI;gBACJ,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;gBAC1E,eAAe,EAAE,cAAc;gBAC/B,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE;gBACvD,QAAQ,EAAE,QAAQ,EAAE;gBACpB,gBAAgB,EAAE,yBAAyB,EAAE;gBAC7C,YAAY,EAAE,IAAI,EAAE;gBACpB,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,OAAO,CAAC,cAAc;oBAC/B,cAAc,EAAE,+BAA+B;iBAChD;aACF,CAAC;YACF,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,cAAc,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,MAAM,iDAAiD,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,IAAI,KAAK,CAAC,+HAA+H,CAAC,CAAC;IACnJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,eAAe,CAAC,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;QAClC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;QACzD,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;QACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,oBAAoB,EAAE,+BAA+B;QACrD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC5B,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;QACxC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;QAC3B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;QACzD,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC;QACrB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC;QACxB,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;QACpC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC3C,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC;QAClC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ;QAC9C,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAwB,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAkB;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAO,IAAI,KAAK;YAChB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,KAAK,CAAC,KAAK,KAAK,IAAI;YACpB,SAAS,IAAI,KAAK,CAAC,KAAK;YACxB,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,EACvC,CAAC;YACD,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,4BAA4B,QAAQ,CAAC,MAAM,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB;IAChC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"pair.js","sourceRoot":"","sources":["../../src/pair.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC;AA0DpE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IACE,OAAO,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM;QAC9C,OAAO,CAAC,cAAc,KAAK,MAAM,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,sBAAsB,EACtB,OAAO,CAAC,MAAM,CAAC,eAAe,CAC/B,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAmB;QACvD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9F,QAAQ,EAAE,CAAC,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE;YACnF,IAAI;YACJ,eAAe,EAAE,cAAc;YAC/B,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE;YACvD,QAAQ,EAAE,QAAQ,EAAE;YACpB,gBAAgB,EAAE,yBAAyB,EAAE;YAC7C,YAAY,EAAE,IAAI,EAAE;YACpB,OAAO,EAAE;gBACP,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,OAAO,CAAC,cAAc;gBAC/B,cAAc,EAAE,+BAA+B;aAChD;YACD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;SACzF,CAAC;QACF,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,oBAAoB,EAAE,+BAA+B;YACrD,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,OAAO;SACvB,CAAC;KACH,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,MAAM,CAAC;AAC1B,CAAC;AAaD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA0B;IAE1B,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;IACnD,MAAM,cAAc,GAAG,MAAM,0BAA0B,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe;QAC7C,IAAI,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,mHAAmH,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,MAAqB,CAAC;IAC1B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;aAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACvC,MAAM,OAAO,CAAC,KAAK,CAAC;QACtB,CAAC;aAAM,IACL,MAAM,uBAAuB,CAC3B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,MAAM,CAAC,eAAe,EAC9B,QAAQ,CAAC,UAAU,CACpB,EACD,CAAC;YACD,sEAAsE;YACtE,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;QAC7I,CAAC;IACH,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3D,sEAAsE;YACtE,+DAA+D;YAC/D,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YACjD,sEAAsE;YACtE,mEAAmE;YACnE,gEAAgE;YAChE,EAAE;YACF,uEAAuE;YACvE,mEAAmE;YACnE,kEAAkE;YAClE,sBAAsB;YACtB,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;YAC5D,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE;gBACrD,kBAAkB;gBAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,mBAAmB,GAAG,SAAS;oBACnC,CAAC,CAAC,MAAM,0BAA0B,CAAC,aAAa,CAAC;oBACjD,CAAC,CAAC,cAAc,CAAC;gBACnB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;gBAC1D,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,KAAK,CAAC;gBAC5C,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,eAAe,CAAC,IAAI,CAAC;YACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;YACzD,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;YACzC,SAAS,EAAE,QAAQ;YACnB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,EAAE,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YAC5B,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY;YACxC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;YAC3B,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM;YACzD,gBAAgB,EAAE,IAAI;YACtB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,QAAwC,EACxC,MAAwB;IAExB,OAAO,QAAQ,KAAK,IAAI;QACtB,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE;QACxC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS;QAC9C,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAqB,EACrB,QAAa,EACb,IAAuC;IAEvC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,cAAc,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,MAAM,iDAAiD,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,4BAA4B,QAAQ,CAAC,MAAM,GAAG,CAAC;YACnF,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,IAAI,KAAK,CAAC,+HAA+H,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,OAAsD;IAEtD,OAAO,OAAO,CAAC,IAAI,KAAK,oBAAoB;QAC1C,CAAC,MAAM,KAAK,GAAG;YACb,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,OAAqB,EACrB,eAAoB,EACpB,UAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,MAAM,EAAE,kBAAkB;aAC3B;YACD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mBAAmB,QAAQ,CAAC,MAAM,0FAA0F,CAC7H,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,EACxD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yDAAyD,QAAQ,CAAC,MAAM,eAAe,CACxF,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,KAAK,KAAK,IAAI;QACd,YAAY,IAAI,KAAK;QACrB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;QACrC,SAAS,IAAI,KAAK;QAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,IAAI,IAAI,KAAK,CAAC,OAAO;QACrB,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;QACpC,WAAW,IAAI,KAAK,CAAC,OAAO;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;QAC3C,cAAc,IAAI,KAAK,CAAC,OAAO;QAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,QAAQ;QAC9C,OAAO,IAAI,KAAK,CAAC,OAAO;QACxB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAO,IAAI,KAAK;YAChB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAC/B,KAAK,CAAC,KAAK,KAAK,IAAI,EACpB,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAC1B,OAAO;gBACL,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;oBACnD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBACtB,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBACzD,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;oBAC5B,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/private-directory.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The current account's SID from whoami. A name built from USERDOMAIN and
+ * USERNAME does not resolve for every account: services that run as
+ * LocalSystem or a virtual account see names icacls cannot look up.
+ */
+export declare function currentUserSID(): string | undefined;
+/** Restrict an existing directory to its owner on every platform. */
+export declare function makeDirectoryPrivate(path: string): Promise<void>;
+export declare function makeDirectoryPrivateSync(path: string): void;
+//# sourceMappingURL=private-directory.d.ts.map

package/dist/src/private-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-directory.d.ts","sourceRoot":"","sources":["../../src/private-directory.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAkBnD;AAuBD,qEAAqE;AACrE,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG3D"}

package/dist/src/private-directory.js

@@ -0,0 +1,66 @@
+import { execFileSync } from "node:child_process";
+import { chmodSync } from "node:fs";
+import { chmod } from "node:fs/promises";
+import { join, resolve } from "node:path";
+// chmod only changes the read-only flag on Windows, so the credential store and
+// event spool would otherwise rely on the profile folder's default ACL. Owner
+// and SYSTEM keep access; files created inside inherit the restriction.
+const restricted = new Set();
+// The account this process runs as, by security identifier: null when
+// Windows would not say.
+let processUserSID;
+/**
+ * The current account's SID from whoami. A name built from USERDOMAIN and
+ * USERNAME does not resolve for every account: services that run as
+ * LocalSystem or a virtual account see names icacls cannot look up.
+ */
+export function currentUserSID() {
+    if (processUserSID === undefined) {
+        processUserSID = null;
+        try {
+            // By full path: Git for Windows puts another whoami on PATH.
+            const whoami = join(process.env["SystemRoot"] ?? "C:\\Windows", "System32", "whoami.exe");
+            const output = execFileSync(whoami, ["/user", "/fo", "csv", "/nh"], {
+                encoding: "utf8",
+                windowsHide: true,
+                stdio: ["ignore", "pipe", "ignore"],
+                timeout: 15_000,
+            });
+            processUserSID = /"(S-1-[0-9]+(?:-[0-9]+){1,15})"\s*$/u.exec(output.trim())?.[1] ?? null;
+        }
+        catch {
+            // Fall back to the account name below.
+        }
+    }
+    return processUserSID ?? undefined;
+}
+function restrictWindowsDirectory(path) {
+    const key = resolve(path).toLowerCase();
+    if (restricted.has(key))
+        return;
+    const sid = currentUserSID();
+    const owner = sid === undefined
+        ? `${process.env["USERDOMAIN"] ?? ""}\\${process.env["USERNAME"] ?? ""}`
+        : `*${sid}`;
+    try {
+        execFileSync("icacls", [resolve(path), "/inheritance:r", "/grant:r", `${owner}:(OI)(CI)F`, "/grant:r", "*S-1-5-18:(OI)(CI)F"], { windowsHide: true, stdio: "ignore", timeout: 15_000 });
+    }
+    catch {
+        // Storing a credential or activity under an open ACL would defeat the
+        // point of this directory, so refuse instead of continuing silently.
+        throw new Error("Could not restrict the Phigon data directory to the current user. Choose a data directory on an NTFS drive that you own.");
+    }
+    restricted.add(key);
+}
+/** Restrict an existing directory to its owner on every platform. */
+export async function makeDirectoryPrivate(path) {
+    await chmod(path, 0o700);
+    if (process.platform === "win32")
+        restrictWindowsDirectory(path);
+}
+export function makeDirectoryPrivateSync(path) {
+    chmodSync(path, 0o700);
+    if (process.platform === "win32")
+        restrictWindowsDirectory(path);
+}
+//# sourceMappingURL=private-directory.js.map

package/dist/src/private-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-directory.js","sourceRoot":"","sources":["../../src/private-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,gFAAgF;AAChF,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AACrC,sEAAsE;AACtE,yBAAyB;AACzB,IAAI,cAAyC,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,cAAc,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;gBAClE,QAAQ,EAAE,MAAM;gBAChB,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;gBACnC,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YACH,cAAc,GAAG,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,cAAc,IAAI,SAAS,CAAC;AACrC,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS;QAC7B,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;QACxE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,YAAY,CACV,QAAQ,EACR,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,KAAK,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,EACtG,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,IAAI,KAAK,CAAC,0HAA0H,CAAC,CAAC;IAC9I,CAAC;IACD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/src/process-tree.d.ts

@@ -0,0 +1,73 @@
+/** One exact process lifetime: a PID alone is never an identity. */
+export type ExactProcess = Readonly<{
+    processId: number;
+    startedAt: Date;
+}>;
+export type TreeStopMode = "stop" | "kill";
+export type TreeStopOutcome = Readonly<{
+    outcome: "stale" | "exited" | "access_denied" | "graceful_unsupported" | "console_shared" | "self_target";
+}> | Readonly<{
+    outcome: "failed";
+    code: string;
+}> | Readonly<{
+    outcome: "dispatched";
+    rootRunning: boolean;
+    /** Verified descendants that were signalled. */
+    descendants: number;
+    /** Signalled descendants still running at the end of the wait. */
+    descendantsRunning: number;
+    /** Running descendants the OS would not let the observer stop. */
+    descendantsDenied: number;
+}>;
+/** Stops one exact process and the descendants it started. */
+export interface ProcessTreeControl {
+    stop(target: ExactProcess, mode: TreeStopMode): Promise<TreeStopOutcome>;
+}
+export type TreeStopReceipt = Readonly<{
+    state: "succeeded" | "failed" | "rejected";
+    code: string;
+    detail: string;
+    targetStillRunning: boolean;
+}>;
+/** Plain-language receipts; detail stays within the 256-character journal bound. */
+export declare function describeTreeOutcome(outcome: TreeStopOutcome, graceful: boolean): TreeStopReceipt;
+export declare function defaultProcessTreeControl(platform?: NodeJS.Platform): ProcessTreeControl;
+export type ProcessRow = Readonly<{
+    processId: number;
+    parentId: number;
+    startedAt: number;
+    zombie: boolean;
+}>;
+type Signal = "SIGTERM" | "SIGKILL" | 0;
+/**
+ * Linux and macOS: one process-table snapshot verifies the root's start time
+ * immediately before signalling, and finds descendants whose start is not
+ * earlier than their parent's (a stale parent PID cannot adopt them). The
+ * observer and everything it started are never members.
+ */
+export declare class UnixProcessTreeControl implements ProcessTreeControl {
+    #private;
+    constructor(options?: Readonly<{
+        list?: () => Promise<ReadonlyMap<number, ProcessRow>>;
+        signal?: (processId: number, signal: Signal) => void;
+        sleep?: (milliseconds: number) => Promise<void>;
+        observerProcessId?: number;
+        clock?: () => number;
+    }>);
+    stop(target: ExactProcess, mode: TreeStopMode): Promise<TreeStopOutcome>;
+}
+export declare function descendantsOf(table: ReadonlyMap<number, ProcessRow>, root: ProcessRow, observerProcessId: number): ProcessRow[];
+export declare function readUnixProcessTable(): Promise<ReadonlyMap<number, ProcessRow>>;
+export declare function parseUnixProcessTable(stdout: string): ReadonlyMap<number, ProcessRow>;
+/**
+ * Windows: the native helper holds a handle to every member while it works,
+ * so no member's PID can be recycled before the report is written.
+ */
+export declare class WindowsProcessTreeControl implements ProcessTreeControl {
+    #private;
+    constructor(run?: (args: readonly string[]) => Promise<string>);
+    stop(target: ExactProcess, mode: TreeStopMode): Promise<TreeStopOutcome>;
+}
+export declare function parseTreeReport(stdout: string): TreeStopOutcome;
+export {};
+//# sourceMappingURL=process-tree.d.ts.map

package/dist/src/process-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.d.ts","sourceRoot":"","sources":["../../src/process-tree.ts"],"names":[],"mappings":"AAGA,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAC5E,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C,MAAM,MAAM,eAAe,GACvB,QAAQ,CAAC;IAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,eAAe,GAAG,sBAAsB,GAAG,gBAAgB,GAAG,aAAa,CAAA;CAAE,CAAC,GACvH,QAAQ,CAAC;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC7C,QAAQ,CAAC;IACT,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC;AAEL,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC1E;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC,CAAC;AAEH,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,GAAG,eAAe,CAkChG;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,kBAAkB,CAE1G;AAMD,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAC/G,KAAK,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;AAExC;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,kBAAkB;;gBAOnD,OAAO,GAAE,QAAQ,CAAC;QAC5B,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACrD,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;KACtB,CAAM;IAQD,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;CAuD/E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,GAAG,UAAU,EAAE,CAwB/H;AAMD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAQrF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAWrF;AAED;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;;gBAGtD,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC;IAIxD,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;CAgB/E;AAQD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAuB/D"}

package/dist/src/process-tree.js

@@ -0,0 +1,256 @@
+import { execFile } from "node:child_process";
+import { guardianRunnerPath } from "./guardian-native.js";
+/** Plain-language receipts; detail stays within the 256-character journal bound. */
+export function describeTreeOutcome(outcome, graceful) {
+    const receipt = (state, code, detail, targetStillRunning) => ({ state, code, detail, targetStillRunning });
+    switch (outcome.outcome) {
+        case "stale":
+            return receipt("rejected", "stale_target", "The process ID now belongs to a different process. Nothing was signalled.", false);
+        case "exited":
+            return receipt("rejected", "target_already_stopped", "The agent process had already exited. Nothing was signalled.", false);
+        case "self_target":
+            return receipt("rejected", "self_target_rejected", "Observer refuses to terminate its own process.", true);
+        case "access_denied":
+            return receipt("failed", "access_denied", "The operating system denied permission to stop this process. It may run as another user or as administrator. It is still running.", true);
+        case "graceful_unsupported":
+            return receipt("rejected", "graceful_stop_unsupported", "This agent has no window to close and no terminal to press Ctrl+C in, so a graceful stop is not possible. Nothing was sent. Use force stop instead.", true);
+        case "console_shared":
+            return receipt("rejected", "terminal_shared", "Other programs share this agent's terminal, and Ctrl+C would reach them too. Nothing was sent. Use force stop instead.", true);
+        case "failed":
+            return receipt("failed", "os_dispatch_failed", `The operating system could not complete the request (${outcome.code}). The agent may still be running.`, true);
+        case "dispatched": {
+            if (outcome.rootRunning) {
+                return receipt("failed", "process_still_running", graceful
+                    ? "The stop request was sent, but the agent is still running after 5 seconds. It was not escalated; use force stop if needed."
+                    : "Force stop was sent, but the agent still reports running.", true);
+            }
+            const remaining = outcome.descendantsRunning + outcome.descendantsDenied;
+            if (remaining > 0) {
+                return receipt("succeeded", "process_stopped_children_running", `The agent process exited, but ${remaining} of its child processes ${remaining === 1 ? "is" : "are"} still running.`, false);
+            }
+            return receipt("succeeded", "process_stopped", outcome.descendants > 0
+                ? `The agent process and its ${outcome.descendants} child ${outcome.descendants === 1 ? "process" : "processes"} exited.`
+                : "The agent process exited.", false);
+        }
+    }
+}
+export function defaultProcessTreeControl(platform = process.platform) {
+    return platform === "win32" ? new WindowsProcessTreeControl() : new UnixProcessTreeControl();
+}
+const maxDescendants = 1024;
+// Graceful stop gives the agent time to save state; force stop is immediate.
+const exitWait = { stop: 5_000, kill: 3_000 };
+/**
+ * Linux and macOS: one process-table snapshot verifies the root's start time
+ * immediately before signalling, and finds descendants whose start is not
+ * earlier than their parent's (a stale parent PID cannot adopt them). The
+ * observer and everything it started are never members.
+ */
+export class UnixProcessTreeControl {
+    #list;
+    #signal;
+    #sleep;
+    #observerProcessId;
+    #clock;
+    constructor(options = {}) {
+        this.#list = options.list ?? readUnixProcessTable;
+        this.#signal = options.signal ?? ((processId, signal) => { process.kill(processId, signal); });
+        this.#sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
+        this.#observerProcessId = options.observerProcessId ?? process.pid;
+        this.#clock = options.clock ?? Date.now;
+    }
+    async stop(target, mode) {
+        if (target.processId === this.#observerProcessId)
+            return { outcome: "self_target" };
+        let table;
+        try {
+            table = await this.#list();
+        }
+        catch {
+            return { outcome: "failed", code: "process_table_unavailable" };
+        }
+        const root = table.get(target.processId);
+        if (root === undefined || root.zombie)
+            return { outcome: "exited" };
+        if (!sameStart(root.startedAt, target.startedAt.getTime()))
+            return { outcome: "stale" };
+        const descendants = descendantsOf(table, root, this.#observerProcessId);
+        const signal = mode === "stop" ? "SIGTERM" : "SIGKILL";
+        try {
+            this.#signal(root.processId, signal);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === "ESRCH")
+                return { outcome: "exited" };
+            if (code === "EPERM")
+                return { outcome: "access_denied" };
+            return { outcome: "failed", code: String(code ?? "unknown").slice(0, 32) };
+        }
+        const denied = new Set();
+        for (const descendant of descendants) {
+            try {
+                this.#signal(descendant.processId, signal);
+            }
+            catch (error) {
+                if (error.code === "EPERM")
+                    denied.add(descendant.processId);
+            }
+        }
+        const members = [root, ...descendants];
+        const deadline = this.#clock() + exitWait[mode];
+        while (this.#clock() < deadline && members.some((member) => this.#alive(member.processId))) {
+            await this.#sleep(100);
+        }
+        // A final snapshot tells an exited process from a zombie or a reused PID.
+        let after;
+        try {
+            after = await this.#list();
+        }
+        catch {
+            after = undefined;
+        }
+        const running = (member) => {
+            if (after === undefined)
+                return this.#alive(member.processId);
+            const current = after.get(member.processId);
+            return current !== undefined && !current.zombie && sameStart(current.startedAt, member.startedAt);
+        };
+        const stillRunning = descendants.filter(running);
+        return {
+            outcome: "dispatched",
+            rootRunning: running(root),
+            descendants: descendants.length,
+            // Counted separately so a receipt can say why a child survived.
+            descendantsRunning: stillRunning.filter((member) => !denied.has(member.processId)).length,
+            descendantsDenied: stillRunning.filter((member) => denied.has(member.processId)).length,
+        };
+    }
+    #alive(processId) {
+        try {
+            this.#signal(processId, 0);
+            return true;
+        }
+        catch (error) {
+            return error.code === "EPERM";
+        }
+    }
+}
+export function descendantsOf(table, root, observerProcessId) {
+    const children = new Map();
+    for (const row of table.values()) {
+        if (row.processId === row.parentId)
+            continue;
+        const siblings = children.get(row.parentId) ?? [];
+        siblings.push(row);
+        children.set(row.parentId, siblings);
+    }
+    const found = [];
+    const seen = new Set([root.processId]);
+    const queue = [root];
+    for (let index = 0; index < queue.length && found.length < maxDescendants; index++) {
+        const parent = queue[index];
+        for (const child of children.get(parent.processId) ?? []) {
+            if (seen.has(child.processId) || child.processId <= 1 || child.processId === observerProcessId)
+                continue;
+            seen.add(child.processId);
+            // ps start times have one-second resolution.
+            if (child.zombie || child.startedAt < parent.startedAt - 999)
+                continue;
+            found.push(child);
+            queue.push(child);
+            if (found.length >= maxDescendants)
+                break;
+        }
+    }
+    return found;
+}
+function sameStart(observed, expected) {
+    return Math.abs(observed - expected) < 1_000;
+}
+export async function readUnixProcessTable() {
+    const stdout = await new Promise((resolve, reject) => execFile("ps", ["-A", "-o", "pid=,ppid=,stat=,lstart="], { timeout: 3_000, maxBuffer: 8 << 20, encoding: "utf8", env: { ...process.env, LANG: "C", LC_ALL: "C" } }, (error, output) => error ? reject(error) : resolve(output)));
+    return parseUnixProcessTable(stdout);
+}
+export function parseUnixProcessTable(stdout) {
+    const table = new Map();
+    for (const line of stdout.split(/\r?\n/u)) {
+        const match = /^\s*(\d+)\s+(\d+)\s+(\S+)\s+(\S+\s+\S+\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})\s*$/u.exec(line);
+        if (match === null)
+            continue;
+        const processId = Number(match[1]);
+        const startedAt = Date.parse(match[4]);
+        if (!Number.isSafeInteger(processId) || processId < 1 || !Number.isFinite(startedAt))
+            continue;
+        table.set(processId, { processId, parentId: Number(match[2]), startedAt, zombie: match[3].startsWith("Z") });
+    }
+    return table;
+}
+/**
+ * Windows: the native helper holds a handle to every member while it works,
+ * so no member's PID can be recycled before the report is written.
+ */
+export class WindowsProcessTreeControl {
+    #run;
+    constructor(run) {
+        this.#run = run ?? runGuardianHelper;
+    }
+    async stop(target, mode) {
+        let stdout;
+        try {
+            stdout = await this.#run([
+                "--kill-pid", String(target.processId),
+                "--started-at", target.startedAt.toISOString(),
+                "--tree", ...(mode === "stop" ? ["--graceful"] : []),
+            ]);
+        }
+        catch (error) {
+            const code = error.killed === true
+                ? "helper_timeout"
+                : `helper_${String(error.code ?? "failed")}`;
+            return { outcome: "failed", code: code.slice(0, 32) };
+        }
+        return parseTreeReport(stdout);
+    }
+}
+function runGuardianHelper(args) {
+    return new Promise((resolve, reject) => execFile(guardianRunnerPath(), args, {
+        windowsHide: true, timeout: 20_000, maxBuffer: 16 << 10, encoding: "utf8",
+    }, (error, stdout) => error ? reject(error) : resolve(stdout)));
+}
+export function parseTreeReport(stdout) {
+    let value;
+    try {
+        value = JSON.parse(stdout.trim());
+    }
+    catch {
+        return { outcome: "failed", code: "helper_report_invalid" };
+    }
+    if (value === null || typeof value !== "object")
+        return { outcome: "failed", code: "helper_report_invalid" };
+    const report = value;
+    const count = (key) => {
+        const item = report[key];
+        return typeof item === "number" && Number.isSafeInteger(item) && item >= 0 ? item : 0;
+    };
+    switch (report["outcome"]) {
+        case "stale":
+        case "exited":
+        case "access_denied":
+        case "graceful_unsupported":
+        case "console_shared":
+        case "self_target":
+            return { outcome: report["outcome"] };
+        case "dispatched":
+            return {
+                outcome: "dispatched",
+                rootRunning: report["root_running"] === true,
+                descendants: count("descendants"),
+                descendantsRunning: count("descendants_running"),
+                descendantsDenied: count("descendants_denied"),
+            };
+        default:
+            return { outcome: "failed", code: `helper_${String(report["outcome"] ?? "invalid")}`.slice(0, 32) };
+    }
+}
+//# sourceMappingURL=process-tree.js.map

package/dist/src/process-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../src/process-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAgC1D,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAAwB,EAAE,QAAiB;IAC7E,MAAM,OAAO,GAAG,CAAC,KAA+B,EAAE,IAAY,EAAE,MAAc,EAAE,kBAA2B,EAAE,EAAE,CAC7G,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAChD,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,2EAA2E,EAAE,KAAK,CAAC,CAAC;QACjI,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,UAAU,EAAE,wBAAwB,EAAE,8DAA8D,EAAE,KAAK,CAAC,CAAC;QAC9H,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC,UAAU,EAAE,sBAAsB,EAAE,gDAAgD,EAAE,IAAI,CAAC,CAAC;QAC7G,KAAK,eAAe;YAClB,OAAO,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,mIAAmI,EAAE,IAAI,CAAC,CAAC;QACvL,KAAK,sBAAsB;YACzB,OAAO,OAAO,CAAC,UAAU,EAAE,2BAA2B,EAAE,qJAAqJ,EAAE,IAAI,CAAC,CAAC;QACvN,KAAK,gBAAgB;YACnB,OAAO,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,wHAAwH,EAAE,IAAI,CAAC,CAAC;QAChL,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,QAAQ,EAAE,oBAAoB,EAAE,wDAAwD,OAAO,CAAC,IAAI,oCAAoC,EAAE,IAAI,CAAC,CAAC;QACjK,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,QAAQ,EAAE,uBAAuB,EAAE,QAAQ;oBACxD,CAAC,CAAC,4HAA4H;oBAC9H,CAAC,CAAC,2DAA2D,EAAE,IAAI,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YACzE,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC,WAAW,EAAE,kCAAkC,EAC5D,iCAAiC,SAAS,2BAA2B,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACjI,CAAC;YACD,OAAO,OAAO,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,WAAW,GAAG,CAAC;gBACpE,CAAC,CAAC,6BAA6B,OAAO,CAAC,WAAW,UAAU,OAAO,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,UAAU;gBACzH,CAAC,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IACpF,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,sBAAsB,EAAE,CAAC;AAC/F,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,6EAA6E;AAC7E,MAAM,QAAQ,GAAiC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAK5E;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IACxB,KAAK,CAAiD;IACtD,OAAO,CAA8C;IACrD,MAAM,CAA0C;IAChD,kBAAkB,CAAS;IAC3B,MAAM,CAAe;IAE9B,YAAY,UAMP,EAAE;QACL,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,oBAAoB,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/G,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAoB,EAAE,IAAkB;QACjD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,kBAAkB;YAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACpF,IAAI,KAAsC,CAAC;QAC3C,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnC,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;QAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACxF,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YACnD,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YACnD,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAC5G,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,0EAA0E;QAC1E,IAAI,KAAkD,CAAC;QACvD,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;QAAC,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,MAAkB,EAAE,EAAE;YACrC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACpG,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;YAC1B,WAAW,EAAE,WAAW,CAAC,MAAM;YAC/B,gEAAgE;YAChE,kBAAkB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACzF,iBAAiB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;SACxF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAsC,EAAE,IAAgB,EAAE,iBAAyB;IAC/G,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,QAAQ;YAAE,SAAS;QAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB;gBAAE,SAAS;YACzG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1B,6CAA6C;YAC7C,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,GAAG;gBAAE,SAAS;YACvE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc;gBAAE,MAAM;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,EAAE,QAAgB;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CACpE,IAAI,EACJ,CAAC,IAAI,EAAE,IAAI,EAAE,0BAA0B,CAAC,EACxC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EACzG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAC3D,CAAC,CAAC;IACH,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,oFAAoF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9G,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC/F,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IAC3B,IAAI,CAA+C;IAE5D,YAAY,GAAkD;QAC5D,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,iBAAiB,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAoB,EAAE,IAAkB;QACjD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;gBACvB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;gBAC9C,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA8C,CAAC,MAAM,KAAK,IAAI;gBAC1E,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,UAAU,MAAM,CAAE,KAA4B,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,IAAuB;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE;QAC3E,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM;KAC1E,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAAC,CAAC;IACjH,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAC7G,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC;IACF,QAAQ,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,KAAK,OAAO,CAAC;QAAC,KAAK,QAAQ,CAAC;QAAC,KAAK,eAAe,CAAC;QAAC,KAAK,sBAAsB,CAAC;QAAC,KAAK,gBAAgB,CAAC;QAAC,KAAK,aAAa;YACvH,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,KAAK,YAAY;YACf,OAAO;gBACL,OAAO,EAAE,YAAY;gBACrB,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;gBAC5C,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;gBACjC,kBAAkB,EAAE,KAAK,CAAC,qBAAqB,CAAC;gBAChD,iBAAiB,EAAE,KAAK,CAAC,oBAAoB,CAAC;aAC/C,CAAC;QACJ;YACE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACxG,CAAC;AACH,CAAC"}

package/dist/src/proxy.d.ts

@@ -0,0 +1,68 @@
+import type { Socket } from "node:net";
+/**
+ * Corporate proxies. The observer's HTTPS calls (pairing, removal, update
+ * checks, Guardian and the doctor probe) use `fetch`, which ignores
+ * HTTPS_PROXY unless Node.js is told to read it, and the telemetry stream
+ * uses @grpc/grpc-js, which reads only the lowercase names. This module
+ * points both at the same proxy, using what Node.js offers natively.
+ *
+ * HTTPS goes through the proxy as a CONNECT tunnel, and TLS is negotiated
+ * with the server itself inside it, so the usual certificate checks,
+ * including an authority pinned for a company's own server, still apply.
+ */
+export type ProxySettings = Readonly<{
+    https?: URL;
+    http?: URL;
+    /** NO_PROXY as written: comma- or space-separated host names. */
+    noProxy: string;
+}>;
+/** Reads HTTPS_PROXY, HTTP_PROXY and NO_PROXY (either case) from `environment`. */
+export declare function proxySettings(environment: NodeJS.ProcessEnv): ProxySettings;
+/**
+ * The proxy `target` goes through, or undefined to connect directly. It
+ * follows Node.js: an entry matches its host and every host under it
+ * (`example.com`, `.example.com` and `*.example.com` all cover
+ * `a.example.com`), `*` matches everything, and `host:port` only that port.
+ */
+export declare function proxyForUrl(target: URL, settings: ProxySettings): URL | undefined;
+/**
+ * NO_PROXY in the form @grpc/grpc-js reads, which matches plain host name
+ * endings only: `*.example.com` and `.example.com` become `example.com`, and
+ * an entry for another port is left out because the stream cannot check
+ * ports.
+ */
+export declare function grpcNoProxy(noProxy: string, streamPort: number): string;
+/** Whether NO_PROXY turns the proxy off for every host, which grpc-js cannot express. */
+export declare function noProxyForAll(environment: NodeJS.ProcessEnv): boolean;
+type SetGlobalProxy = (environment: NodeJS.ProcessEnv) => () => void;
+export type ProxySetup = Readonly<{
+    /** Puts back the global agents and the variables changed for the stream. */
+    restore: () => void;
+    /** A plain sentence to show when part of the setup could not be applied. */
+    notice?: string;
+}>;
+export type ProxySetupOptions = Readonly<{
+    /** `http.setGlobalProxyFromEnv`, Node.js 24.14 and newer. */
+    setGlobalProxyFromEnv?: SetGlobalProxy | undefined;
+    /** The environment @grpc/grpc-js reads: process.env. */
+    processEnvironment?: NodeJS.ProcessEnv;
+    /** Whether Node.js already applied the proxy variables when it started. */
+    startedWithEnvProxy?: boolean;
+    nodeVersion?: string;
+    /** The telemetry endpoint, to keep NO_PROXY port entries for it. */
+    streamUrl?: URL;
+}>;
+/**
+ * Sends `fetch` (and `http`/`https` requests) through the proxy that
+ * `environment` names, and gives the telemetry stream the same proxy and
+ * NO_PROXY list. Does nothing when no proxy is set.
+ */
+export declare function useProxyFromEnvironment(environment: NodeJS.ProcessEnv, options?: ProxySetupOptions): ProxySetup;
+/**
+ * Opens a CONNECT tunnel through `proxy` to `host:port`, for a raw TLS
+ * connection that `fetch` does not cover. Messages name the proxy by host
+ * only, never with its credentials.
+ */
+export declare function connectThroughProxy(proxy: URL, host: string, port: number, timeoutMs?: number): Promise<Socket>;
+export {};
+//# sourceMappingURL=proxy.d.ts.map

package/dist/src/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAuCH,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,aAAa,CAQ3E;AAaD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,GAAG,GAAG,GAAG,SAAS,CAYjF;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAKvE;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAGrE;AAED,KAAK,cAAc,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC;AAErE,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC;IAChC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,6DAA6D;IAC7D,qBAAqB,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACnD,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACvC,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,SAAS,CAAC,EAAE,GAAG,CAAC;CACjB,CAAC,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,OAAO,GAAE,iBAAsB,GAC9B,UAAU,CA0DZ;AAOD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,GAAG,EACV,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,SAAS,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAoCjB"}