@smthrs/kernel 1.0.0-rc.5 → 1.0.0-rc.6

package/README.md

@@ -2,9 +2,9 @@
 
 Release candidate scope, host requirements and compatibility review are defined in the [library support policy](https://github.com/smithersai/smithers/blob/main/RELEASE_SUPPORT.md).
 
-This package declares `effect` as an exact
-`4.0.0-rc.115` peer dependency. Keep the application on that version so
-all Smithers packages share one Effect runtime.
+This package declares `effect` as a `^4.0.4` peer dependency. Install one
+`effect` release in that range so all Smithers packages share one Effect
+runtime.
 
 **Documentation:** https://kernel.smithers.sh
 
@@ -29,7 +29,7 @@ without ever mentioning permission.
 [installation page](https://kernel.smithers.sh/installation/) covers how to
 depend on it from a checkout, the import forms, and the two test helpers.
 
-It needs Node.js 26.4.0 or later and `effect` 4.0.0-rc.115. It carries no
+It needs Node.js 26.4.0 or later and `effect` `^4.0.4`. It carries no
 platform implementations of its own, so a composition that reaches a real
 machine also adds a bundle such as
 [`@smthrs/platform-node`](https://platform-node.smithers.sh).

package/dist/cjs/ChildProcessSpawner.d.ts

@@ -2,7 +2,7 @@
  * Permission-aware process spawning.
  *
  * Smithers has no shell service of its own — process execution is Effect's
- * `effect/unstable/process`. The only thing the kernel adds is the
+ * `effect/process`. The only thing the kernel adds is the
  * `proc:spawn` capability check and the host confinement wrapper, applied to
  * the one primitive every other helper is derived from.
  *
@@ -22,7 +22,7 @@
  * @since 1.0.0-rc.0
  */
 import { Layer, Path } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
+import { ChildProcessSpawner } from "effect/process/ChildProcessSpawner";
 import { GrantStore } from "./GrantStore.ts";
 import { Workspace } from "./Workspace.ts";
 /**
@@ -32,7 +32,7 @@ import { Workspace } from "./Workspace.ts";
  * @category services
  * @since 1.0.0-rc.0
  */
-export { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
+export { ChildProcessSpawner } from "effect/process/ChildProcessSpawner";
 /**
  * Derives the full six-method surface from one `spawn`, so `exitCode`,
  * `string`, `lines`, and both `stream*` helpers can never bypass whatever
@@ -41,7 +41,7 @@ export { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner
  * @category constructors
  * @since 1.0.0-rc.0
  */
-export { make } from "effect/unstable/process/ChildProcessSpawner";
+export { make } from "effect/process/ChildProcessSpawner";
 /**
  * Constructs an unavailable spawner stub.
  *

package/dist/cjs/ChildProcessSpawner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ChildProcessSpawner.d.ts","sourceRoot":"","sources":["../../src/ChildProcessSpawner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAsB,KAAK,EAAU,IAAI,EAAc,MAAM,QAAQ,CAAA;AAG5E,OAAO,EAAE,mBAAmB,EAAuB,MAAM,6CAA6C,CAAA;AAEtG,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAK5C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgK1C;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAA;AAEjF;;;;;;;GAOG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,6CAA6C,CAAA;AAElE;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ,GACnB,YAAW,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAM,KACtD,mBAAmB,CAAC,SAAS,CAY9B,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GACpB,YAAW,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAM,KACtD,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAA4D,CAAA;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,mBAAmB,EACnB,KAAK,EACL,mBAAmB,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,SAAS,CA4HzD,CAAA"}
+{"version":3,"file":"ChildProcessSpawner.d.ts","sourceRoot":"","sources":["../../src/ChildProcessSpawner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,EAAsB,KAAK,EAAU,IAAI,EAAc,MAAM,QAAQ,CAAA;AAG5E,OAAO,EAAE,mBAAmB,EAAuB,MAAM,oCAAoC,CAAA;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAK5C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAgK1C;;;;;;GAMG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAExE;;;;;;;GAOG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAA;AAEzD;;;;;;;;;GASG;AACH,eAAO,MAAM,QAAQ,GACnB,YAAW,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAM,KACtD,mBAAmB,CAAC,SAAS,CAY9B,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GACpB,YAAW,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAM,KACtD,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAA4D,CAAA;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,mBAAmB,EACnB,KAAK,EACL,mBAAmB,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,SAAS,CA4HzD,CAAA"}

package/dist/cjs/ChildProcessSpawner.js

@@ -38,8 +38,8 @@ module.exports = __toCommonJS(ChildProcessSpawner_exports);
 var import_Permission = require("@smthrs/capability/Permission");
 var import_effect = require("effect");
 var import_PlatformError = require("effect/PlatformError");
-var ChildProcess = __toESM(require("effect/unstable/process/ChildProcess"), 1);
-var import_ChildProcessSpawner = require("effect/unstable/process/ChildProcessSpawner");
+var ChildProcess = __toESM(require("effect/process/ChildProcess"), 1);
+var import_ChildProcessSpawner = require("effect/process/ChildProcessSpawner");
 var CommandLine = __toESM(require("./CommandLine.js"), 1);
 var import_GrantStore = require("./GrantStore.js");
 var Containment = __toESM(require("./internal/Containment.js"), 1);
@@ -47,8 +47,8 @@ var import_makeCapability = require("./internal/makeCapability.js");
 var ProcessConfinement = __toESM(require("./ProcessConfinement.js"), 1);
 var Rooted = __toESM(require("./Rooted.js"), 1);
 var import_Workspace = require("./Workspace.js");
-var import_ChildProcessSpawner2 = require("effect/unstable/process/ChildProcessSpawner");
-var import_ChildProcessSpawner3 = require("effect/unstable/process/ChildProcessSpawner");
+var import_ChildProcessSpawner2 = require("effect/process/ChildProcessSpawner");
+var import_ChildProcessSpawner3 = require("effect/process/ChildProcessSpawner");
 const data = (value, name) => {
   const descriptor = Object.getOwnPropertyDescriptor(value, name);
   if (descriptor === void 0 || !("value" in descriptor)) {

package/dist/cjs/ChildProcessSpawner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/ChildProcessSpawner.ts"],
-  "sourcesContent": ["/**\n * Permission-aware process spawning.\n *\n * Smithers has no shell service of its own \u2014 process execution is Effect's\n * `effect/unstable/process`. The only thing the kernel adds is the\n * `proc:spawn` capability check and the host confinement wrapper, applied to\n * the one primitive every other helper is derived from.\n *\n * There is no kernel spawner interface and no kernel spawner tag. Effect owns\n * both, and its tag fixes the error channel to `PlatformError`, so this module\n * is only the middleware: a `Layer` over Effect's own tag. A denied command is\n * projected into `PlatformError` by `Permission.toPlatformError`, which keeps\n * the structured kernel failure on the error's `cause`. Because the channel\n * stays `PlatformError`, the full six-method surface is derived from the one\n * guarded `spawn` through Effect's own `ChildProcessSpawner.make` without a\n * cast.\n *\n * Governing design:\n * `docs/specs/Concepts/Permission Kernel.md` and\n * `docs/specs/Concepts/Host Adapters.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport { toPlatformError } from \"@smthrs/capability/Permission\"\nimport { Effect, FileSystem, Layer, Option, Path, type Scope } from \"effect\"\nimport { type PlatformError, systemError } from \"effect/PlatformError\"\nimport * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport { ChildProcessSpawner, make as makeSpawner } from \"effect/unstable/process/ChildProcessSpawner\"\nimport * as CommandLine from \"./CommandLine.ts\"\nimport { GrantStore } from \"./GrantStore.ts\"\nimport * as Containment from \"./internal/Containment.ts\"\nimport { makeCapability } from \"./internal/makeCapability.ts\"\nimport * as ProcessConfinement from \"./ProcessConfinement.ts\"\nimport * as Rooted from \"./Rooted.ts\"\nimport { Workspace } from \"./Workspace.ts\"\n\nconst data = (value: object, name: PropertyKey): unknown => {\n  const descriptor = Object.getOwnPropertyDescriptor(value, name)\n  if (descriptor === undefined || !(\"value\" in descriptor)) {\n    throw new TypeError(`command ${String(name)} must be a data property`)\n  }\n  return descriptor.value\n}\n\nconst optionalData = (value: object, name: PropertyKey): unknown => {\n  const descriptor = Object.getOwnPropertyDescriptor(value, name)\n  if (descriptor === undefined) return undefined\n  if (!(\"value\" in descriptor)) throw new TypeError(`command ${String(name)} must be a data property`)\n  return descriptor.value\n}\n\nconst snapshotRecord = (\n  value: Readonly<Record<string, string | undefined>> | undefined\n): Record<string, string | undefined> | undefined => {\n  if (value === undefined) return undefined\n  const snapshot: Record<string, string | undefined> = Object.create(null)\n  for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {\n    if (!descriptor.enumerable) continue\n    if (!(\"value\" in descriptor) || (descriptor.value !== undefined && typeof descriptor.value !== \"string\")) {\n      throw new TypeError(\"command environment must contain string data properties\")\n    }\n    snapshot[name] = descriptor.value\n  }\n  return Object.freeze(snapshot)\n}\n\nconst snapshotStreamConfig = <A>(value: A): A => {\n  if (typeof value !== \"object\" || value === null) return value\n  const descriptors = Object.getOwnPropertyDescriptors(value)\n  if (descriptors.stream === undefined) return value\n  if (!(\"value\" in descriptors.stream)) throw new TypeError(\"command stream must be a data property\")\n  const snapshot: Record<string, unknown> = { stream: descriptors.stream.value }\n  for (const name of [\"endOnDone\", \"encoding\"] as const) {\n    const descriptor = descriptors[name]\n    if (descriptor !== undefined) {\n      if (!(\"value\" in descriptor)) throw new TypeError(`command ${name} must be a data property`)\n      snapshot[name] = descriptor.value\n    }\n  }\n  return Object.freeze(snapshot) as A\n}\n\nconst snapshotAdditionalFds = (\n  value: ChildProcess.CommandOptions[\"additionalFds\"]\n): ChildProcess.CommandOptions[\"additionalFds\"] => {\n  if (value === undefined) return undefined\n  const snapshot: Record<`fd${number}`, ChildProcess.AdditionalFdConfig> = {}\n  for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {\n    if (!descriptor.enumerable) continue\n    if (!(\"value\" in descriptor) || typeof descriptor.value !== \"object\" || descriptor.value === null) {\n      throw new TypeError(\"additional file descriptors must be data records\")\n    }\n    const config = descriptor.value as ChildProcess.AdditionalFdConfig\n    const type = data(config, \"type\")\n    if (type === \"input\") {\n      const stream = Object.getOwnPropertyDescriptor(config, \"stream\")\n      snapshot[name as `fd${number}`] = Object.freeze({\n        type,\n        ...(stream === undefined ? {} : \"value\" in stream ? { stream: stream.value } : (() => {\n          throw new TypeError(\"additional fd stream must be a data property\")\n        })())\n      })\n    } else if (type === \"output\") {\n      const sink = Object.getOwnPropertyDescriptor(config, \"sink\")\n      snapshot[name as `fd${number}`] = Object.freeze({\n        type,\n        ...(sink === undefined ? {} : \"value\" in sink ? { sink: sink.value } : (() => {\n          throw new TypeError(\"additional fd sink must be a data property\")\n        })())\n      })\n    } else {\n      throw new TypeError(\"additional file descriptor type is invalid\")\n    }\n  }\n  return Object.freeze(snapshot)\n}\n\nconst snapshotOptions = (options: ChildProcess.CommandOptions): ChildProcess.CommandOptions =>\n  Object.freeze({\n    killSignal: options.killSignal,\n    forceKillAfter: options.forceKillAfter,\n    cwd: options.cwd,\n    env: snapshotRecord(options.env),\n    extendEnv: options.extendEnv,\n    shell: options.shell,\n    detached: options.detached,\n    windowsHide: options.windowsHide,\n    stdin: snapshotStreamConfig(options.stdin),\n    stdout: snapshotStreamConfig(options.stdout),\n    stderr: snapshotStreamConfig(options.stderr),\n    additionalFds: snapshotAdditionalFds(options.additionalFds)\n  })\n\nconst snapshotCommand = (command: ChildProcess.Command): ChildProcess.Command => {\n  const tag = data(command, \"_tag\")\n  if (tag === \"StandardCommand\") {\n    const executable = data(command, \"command\")\n    const args = data(command, \"args\")\n    const options = data(command, \"options\")\n    if (typeof executable !== \"string\" || !Array.isArray(args) || !args.every((arg) => typeof arg === \"string\")) {\n      throw new TypeError(\"standard command executable and arguments are invalid\")\n    }\n    if (typeof options !== \"object\" || options === null) throw new TypeError(\"command options are invalid\")\n    return ChildProcess.make(\n      executable,\n      Object.freeze([...args]),\n      snapshotOptions(options)\n    )\n  }\n  if (tag === \"PipedCommand\") {\n    const left = data(command, \"left\")\n    const right = data(command, \"right\")\n    const options = data(command, \"options\")\n    if (typeof left !== \"object\" || left === null || typeof right !== \"object\" || right === null) {\n      throw new TypeError(\"pipeline commands are invalid\")\n    }\n    if (typeof options !== \"object\" || options === null) throw new TypeError(\"pipeline options are invalid\")\n    const from = optionalData(options, \"from\")\n    const to = optionalData(options, \"to\")\n    return ChildProcess.pipeTo(\n      snapshotCommand(right as ChildProcess.Command),\n      Object.freeze({\n        ...(from === undefined ? {} : { from: from as ChildProcess.PipeFromOption }),\n        ...(to === undefined ? {} : { to: to as ChildProcess.PipeToOption })\n      })\n    )(snapshotCommand(left as ChildProcess.Command))\n  }\n  throw new TypeError(\"unsupported command shape\")\n}\n\nconst maximumEnvironmentNames = 64\n\n/**\n * The environment this process holds, which a child built with\n * `ChildProcessEnvironment.make` inherits its bootstrap names from. Empty on a\n * host with no process environment, so every declared bootstrap name counts\n * as an override there.\n */\nconst ambientEnvironment = (): Readonly<Record<string, string | undefined>> =>\n  (globalThis as { readonly process?: { readonly env?: Record<string, string | undefined> } }).process?.env ?? {}\n\nconst environmentNames = (command: ChildProcess.StandardCommand): ReadonlyArray<string> | undefined => {\n  const environment = command.options.env\n  if (environment === undefined) return undefined\n  const names = Object.entries(environment)\n    .filter(([, value]) => value !== undefined)\n    .map(([name]) => name)\n    .sort()\n  if (names.length === 0) return undefined\n  return names.length <= maximumEnvironmentNames\n    ? names\n    : [...names.slice(0, maximumEnvironmentNames), `+${names.length - maximumEnvironmentNames} more`]\n}\n\n/**\n * Effect's own process spawner tag, unchanged. Re-exported so the kernel\n * namespace stays one-stop; it is the *same* tag, never a second one.\n *\n * @category services\n * @since 1.0.0-rc.0\n */\nexport { ChildProcessSpawner } from \"effect/unstable/process/ChildProcessSpawner\"\n\n/**\n * Derives the full six-method surface from one `spawn`, so `exitCode`,\n * `string`, `lines`, and both `stream*` helpers can never bypass whatever\n * `spawn` was given.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport { make } from \"effect/unstable/process/ChildProcessSpawner\"\n\n/**\n * Constructs an unavailable spawner stub.\n *\n * Every derived helper reports the missing host as a `NotFound`\n * `PlatformError` naming the command line, so an unconfigured capability\n * answers rather than vanishing.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const makeNoop = (\n  overrides: Partial<ChildProcessSpawner[\"Service\"]> = {}\n): ChildProcessSpawner[\"Service\"] => ({\n  ...makeSpawner((command) =>\n    Effect.fail(\n      systemError({\n        _tag: \"NotFound\",\n        module: \"ChildProcessSpawner\",\n        method: \"spawn\",\n        description: `no process host for \\`${CommandLine.render(command)}\\``\n      })\n    )\n  ),\n  ...overrides\n})\n\n/**\n * Provides an unavailable spawner stub.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layerNoop = (\n  overrides: Partial<ChildProcessSpawner[\"Service\"]> = {}\n): Layer.Layer<ChildProcessSpawner> => Layer.succeed(ChildProcessSpawner)(makeNoop(overrides))\n\n/**\n * Decorates the process spawner in place with a `proc:spawn` capability check.\n *\n * The check is suspended into the spawn itself, so building a `Command` or a\n * stream neither requests permission nor starts a process; only running one\n * does. Every pipeline stage is checked as its own capability, left to right,\n * and no stage starts until all pass. A stage's resource is\n * `CommandLine.resource`: the command line `CommandLine.render` produces, with\n * a `shell: true` line that holds shell control syntax marked as\n * `sh -c '<line>'`, any environment variable the child would not inherit from\n * this process named in an `env <NAME>\u2026 -- ` prefix, and a working directory\n * outside `Workspace.root` named in a `cwd <path> -- ` prefix. Custom shell\n * paths are included explicitly in the resource; browser and remote adapters\n * reject them rather than silently substituting a different shell.\n *\n * Every approved stage requires `ProcessConfinement` in the host context.\n * A missing service refuses spawning; its `layerNoop` is the explicit choice\n * for an unconfined host.\n *\n * Pipeline `from`/`to` routing remains outside the grant. The working\n * directory and overridden environment names also reach attended surfaces as\n * display metadata; environment values never leave the command.\n *\n * The layer provides the tag it also requires: compose it over a host spawner\n * layer with `Layer.provide` and a `ChildProcess.Command` run as a plain\n * `Effect` is checked too.\n *\n * A command with no `cwd`, or a relative one, runs in `Workspace.root`, never\n * the process's own directory; the check sees that resolved directory. When\n * the host filesystem is in the layer's context, the working directory and\n * `Workspace.root` are compared by real path, so a symlink inside the\n * workspace that leads out of it is named, as its target, in the `cwd` prefix.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer: Layer.Layer<\n  ChildProcessSpawner,\n  never,\n  ChildProcessSpawner | GrantStore | Path.Path | Workspace\n> = Layer.effect(\n  ChildProcessSpawner,\n  Effect.gen(function*() {\n    const spawner = yield* ChildProcessSpawner\n    const grants = yield* GrantStore\n    const confinement = yield* Effect.serviceOption(ProcessConfinement.ProcessConfinement)\n    const path = yield* Path.Path\n    const rooted = Rooted.path(path, path.resolve((yield* Workspace).root))\n    const root = rooted.resolve(\".\")\n    // The raw host filesystem this layer is composed over, when there is one.\n    // A symlink inside the workspace can lead out of it, so containment is\n    // judged on real paths; a directory that cannot be resolved (it does not\n    // exist, or the host has no filesystem) is judged lexically.\n    const fileSystem = yield* Effect.serviceOption(FileSystem.FileSystem)\n    const real = (directory: string) =>\n      Option.match(fileSystem, {\n        onNone: () => Effect.succeed(directory),\n        onSome: (fs) => fs.realPath(directory).pipe(Effect.orElseSucceed(() => directory))\n      })\n    const within = (base: string) => (directory: string) => {\n      const relative = path.relative(base, directory)\n      return relative.split(path.sep)[0] !== \"..\" && !path.isAbsolute(relative)\n    }\n    const checkStage = (stage: ChildProcess.StandardCommand) =>\n      Effect.gen(function*() {\n        // Rooted.command gives every stage an absolute cwd.\n        const cwd = stage.options.cwd!\n        const realRoot = yield* real(root)\n        const resolvedCwd = yield* real(cwd)\n        const contains = resolvedCwd === cwd\n          ? (directory: string) => within(root)(directory) || within(realRoot)(directory)\n          : within(realRoot)\n        return yield* checkResolved(\n          stage,\n          CommandLine.resource(stage, {\n            ambient: ambientEnvironment(),\n            contains,\n            resolvedCwd\n          })\n        )\n      })\n    const checkResolved = (stage: ChildProcess.StandardCommand, rendered: string) => {\n      const environment = environmentNames(stage)\n      return makeCapability(\"proc:spawn\", rendered).pipe(\n        Effect.flatMap((capability) =>\n          grants.check(capability, {\n            cwd: stage.options.cwd,\n            ...(environment === undefined ? {} : { env: environment })\n          })\n        ),\n        Effect.mapError((error) =>\n          toPlatformError({\n            module: \"ChildProcessSpawner\",\n            method: \"spawn\",\n            pathOrDescriptor: rendered,\n            error\n          })\n        )\n      )\n    }\n    const check = (command: ChildProcess.Command) =>\n      Effect.forEach(CommandLine.stages(command), checkStage, { discard: true })\n    const confine = (\n      command: ChildProcess.Command\n    ): Effect.Effect<\n      ChildProcess.Command,\n      PlatformError,\n      Scope.Scope\n    > =>\n      Option.match(confinement, {\n        onNone: () =>\n          Effect.fail(systemError({\n            _tag: \"NotFound\",\n            module: \"ProcessConfinement\",\n            method: \"confine\",\n            description:\n              \"process confinement is required; use ProcessConfinement.layerNoop to explicitly run unconfined\"\n          })),\n        onSome: (service) =>\n          Effect.gen(function*() {\n            const profile = yield* ProcessConfinement.profile(grants, root, path).pipe(\n              Effect.mapError((error) => toPlatformError({ module: \"ChildProcessSpawner\", method: \"spawn\", error }))\n            )\n            const wrap = (\n              command: ChildProcess.Command\n            ): Effect.Effect<\n              ChildProcess.Command,\n              PlatformError,\n              Scope.Scope\n            > =>\n              command._tag === \"StandardCommand\"\n                ? service.confine(command, profile)\n                : Effect.gen(function*() {\n                  const left = yield* wrap(command.left)\n                  const right = yield* wrap(command.right)\n                  return ChildProcess.pipeTo(right, command.options)(left)\n                })\n            return yield* wrap(command)\n          })\n      })\n    return Containment.inherit(\n      spawner,\n      makeSpawner(\n        Effect.fn(\"ChildProcessSpawner.spawn\")((command: ChildProcess.Command) =>\n          Effect.try({\n            try: () => snapshotCommand(command),\n            catch: () =>\n              systemError({\n                _tag: \"InvalidData\",\n                module: \"ChildProcessSpawner\",\n                method: \"spawn\",\n                description: \"command must be an immutable supported process description\"\n              })\n          }).pipe(\n            Effect.map((snapshot) => Rooted.command(snapshot, rooted)),\n            Effect.flatMap((rooted) =>\n              check(rooted).pipe(Effect.andThen(confine(rooted)), Effect.flatMap(spawner.spawn))\n            )\n          )\n        )\n      )\n    )\n  })\n)\n"],
+  "sourcesContent": ["/**\n * Permission-aware process spawning.\n *\n * Smithers has no shell service of its own \u2014 process execution is Effect's\n * `effect/process`. The only thing the kernel adds is the\n * `proc:spawn` capability check and the host confinement wrapper, applied to\n * the one primitive every other helper is derived from.\n *\n * There is no kernel spawner interface and no kernel spawner tag. Effect owns\n * both, and its tag fixes the error channel to `PlatformError`, so this module\n * is only the middleware: a `Layer` over Effect's own tag. A denied command is\n * projected into `PlatformError` by `Permission.toPlatformError`, which keeps\n * the structured kernel failure on the error's `cause`. Because the channel\n * stays `PlatformError`, the full six-method surface is derived from the one\n * guarded `spawn` through Effect's own `ChildProcessSpawner.make` without a\n * cast.\n *\n * Governing design:\n * `docs/specs/Concepts/Permission Kernel.md` and\n * `docs/specs/Concepts/Host Adapters.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport { toPlatformError } from \"@smthrs/capability/Permission\"\nimport { Effect, FileSystem, Layer, Option, Path, type Scope } from \"effect\"\nimport { type PlatformError, systemError } from \"effect/PlatformError\"\nimport * as ChildProcess from \"effect/process/ChildProcess\"\nimport { ChildProcessSpawner, make as makeSpawner } from \"effect/process/ChildProcessSpawner\"\nimport * as CommandLine from \"./CommandLine.ts\"\nimport { GrantStore } from \"./GrantStore.ts\"\nimport * as Containment from \"./internal/Containment.ts\"\nimport { makeCapability } from \"./internal/makeCapability.ts\"\nimport * as ProcessConfinement from \"./ProcessConfinement.ts\"\nimport * as Rooted from \"./Rooted.ts\"\nimport { Workspace } from \"./Workspace.ts\"\n\nconst data = (value: object, name: PropertyKey): unknown => {\n  const descriptor = Object.getOwnPropertyDescriptor(value, name)\n  if (descriptor === undefined || !(\"value\" in descriptor)) {\n    throw new TypeError(`command ${String(name)} must be a data property`)\n  }\n  return descriptor.value\n}\n\nconst optionalData = (value: object, name: PropertyKey): unknown => {\n  const descriptor = Object.getOwnPropertyDescriptor(value, name)\n  if (descriptor === undefined) return undefined\n  if (!(\"value\" in descriptor)) throw new TypeError(`command ${String(name)} must be a data property`)\n  return descriptor.value\n}\n\nconst snapshotRecord = (\n  value: Readonly<Record<string, string | undefined>> | undefined\n): Record<string, string | undefined> | undefined => {\n  if (value === undefined) return undefined\n  const snapshot: Record<string, string | undefined> = Object.create(null)\n  for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {\n    if (!descriptor.enumerable) continue\n    if (!(\"value\" in descriptor) || (descriptor.value !== undefined && typeof descriptor.value !== \"string\")) {\n      throw new TypeError(\"command environment must contain string data properties\")\n    }\n    snapshot[name] = descriptor.value\n  }\n  return Object.freeze(snapshot)\n}\n\nconst snapshotStreamConfig = <A>(value: A): A => {\n  if (typeof value !== \"object\" || value === null) return value\n  const descriptors = Object.getOwnPropertyDescriptors(value)\n  if (descriptors.stream === undefined) return value\n  if (!(\"value\" in descriptors.stream)) throw new TypeError(\"command stream must be a data property\")\n  const snapshot: Record<string, unknown> = { stream: descriptors.stream.value }\n  for (const name of [\"endOnDone\", \"encoding\"] as const) {\n    const descriptor = descriptors[name]\n    if (descriptor !== undefined) {\n      if (!(\"value\" in descriptor)) throw new TypeError(`command ${name} must be a data property`)\n      snapshot[name] = descriptor.value\n    }\n  }\n  return Object.freeze(snapshot) as A\n}\n\nconst snapshotAdditionalFds = (\n  value: ChildProcess.CommandOptions[\"additionalFds\"]\n): ChildProcess.CommandOptions[\"additionalFds\"] => {\n  if (value === undefined) return undefined\n  const snapshot: Record<`fd${number}`, ChildProcess.AdditionalFdConfig> = {}\n  for (const [name, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(value))) {\n    if (!descriptor.enumerable) continue\n    if (!(\"value\" in descriptor) || typeof descriptor.value !== \"object\" || descriptor.value === null) {\n      throw new TypeError(\"additional file descriptors must be data records\")\n    }\n    const config = descriptor.value as ChildProcess.AdditionalFdConfig\n    const type = data(config, \"type\")\n    if (type === \"input\") {\n      const stream = Object.getOwnPropertyDescriptor(config, \"stream\")\n      snapshot[name as `fd${number}`] = Object.freeze({\n        type,\n        ...(stream === undefined ? {} : \"value\" in stream ? { stream: stream.value } : (() => {\n          throw new TypeError(\"additional fd stream must be a data property\")\n        })())\n      })\n    } else if (type === \"output\") {\n      const sink = Object.getOwnPropertyDescriptor(config, \"sink\")\n      snapshot[name as `fd${number}`] = Object.freeze({\n        type,\n        ...(sink === undefined ? {} : \"value\" in sink ? { sink: sink.value } : (() => {\n          throw new TypeError(\"additional fd sink must be a data property\")\n        })())\n      })\n    } else {\n      throw new TypeError(\"additional file descriptor type is invalid\")\n    }\n  }\n  return Object.freeze(snapshot)\n}\n\nconst snapshotOptions = (options: ChildProcess.CommandOptions): ChildProcess.CommandOptions =>\n  Object.freeze({\n    killSignal: options.killSignal,\n    forceKillAfter: options.forceKillAfter,\n    cwd: options.cwd,\n    env: snapshotRecord(options.env),\n    extendEnv: options.extendEnv,\n    shell: options.shell,\n    detached: options.detached,\n    windowsHide: options.windowsHide,\n    stdin: snapshotStreamConfig(options.stdin),\n    stdout: snapshotStreamConfig(options.stdout),\n    stderr: snapshotStreamConfig(options.stderr),\n    additionalFds: snapshotAdditionalFds(options.additionalFds)\n  })\n\nconst snapshotCommand = (command: ChildProcess.Command): ChildProcess.Command => {\n  const tag = data(command, \"_tag\")\n  if (tag === \"StandardCommand\") {\n    const executable = data(command, \"command\")\n    const args = data(command, \"args\")\n    const options = data(command, \"options\")\n    if (typeof executable !== \"string\" || !Array.isArray(args) || !args.every((arg) => typeof arg === \"string\")) {\n      throw new TypeError(\"standard command executable and arguments are invalid\")\n    }\n    if (typeof options !== \"object\" || options === null) throw new TypeError(\"command options are invalid\")\n    return ChildProcess.make(\n      executable,\n      Object.freeze([...args]),\n      snapshotOptions(options)\n    )\n  }\n  if (tag === \"PipedCommand\") {\n    const left = data(command, \"left\")\n    const right = data(command, \"right\")\n    const options = data(command, \"options\")\n    if (typeof left !== \"object\" || left === null || typeof right !== \"object\" || right === null) {\n      throw new TypeError(\"pipeline commands are invalid\")\n    }\n    if (typeof options !== \"object\" || options === null) throw new TypeError(\"pipeline options are invalid\")\n    const from = optionalData(options, \"from\")\n    const to = optionalData(options, \"to\")\n    return ChildProcess.pipeTo(\n      snapshotCommand(right as ChildProcess.Command),\n      Object.freeze({\n        ...(from === undefined ? {} : { from: from as ChildProcess.PipeFromOption }),\n        ...(to === undefined ? {} : { to: to as ChildProcess.PipeToOption })\n      })\n    )(snapshotCommand(left as ChildProcess.Command))\n  }\n  throw new TypeError(\"unsupported command shape\")\n}\n\nconst maximumEnvironmentNames = 64\n\n/**\n * The environment this process holds, which a child built with\n * `ChildProcessEnvironment.make` inherits its bootstrap names from. Empty on a\n * host with no process environment, so every declared bootstrap name counts\n * as an override there.\n */\nconst ambientEnvironment = (): Readonly<Record<string, string | undefined>> =>\n  (globalThis as { readonly process?: { readonly env?: Record<string, string | undefined> } }).process?.env ?? {}\n\nconst environmentNames = (command: ChildProcess.StandardCommand): ReadonlyArray<string> | undefined => {\n  const environment = command.options.env\n  if (environment === undefined) return undefined\n  const names = Object.entries(environment)\n    .filter(([, value]) => value !== undefined)\n    .map(([name]) => name)\n    .sort()\n  if (names.length === 0) return undefined\n  return names.length <= maximumEnvironmentNames\n    ? names\n    : [...names.slice(0, maximumEnvironmentNames), `+${names.length - maximumEnvironmentNames} more`]\n}\n\n/**\n * Effect's own process spawner tag, unchanged. Re-exported so the kernel\n * namespace stays one-stop; it is the *same* tag, never a second one.\n *\n * @category services\n * @since 1.0.0-rc.0\n */\nexport { ChildProcessSpawner } from \"effect/process/ChildProcessSpawner\"\n\n/**\n * Derives the full six-method surface from one `spawn`, so `exitCode`,\n * `string`, `lines`, and both `stream*` helpers can never bypass whatever\n * `spawn` was given.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport { make } from \"effect/process/ChildProcessSpawner\"\n\n/**\n * Constructs an unavailable spawner stub.\n *\n * Every derived helper reports the missing host as a `NotFound`\n * `PlatformError` naming the command line, so an unconfigured capability\n * answers rather than vanishing.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const makeNoop = (\n  overrides: Partial<ChildProcessSpawner[\"Service\"]> = {}\n): ChildProcessSpawner[\"Service\"] => ({\n  ...makeSpawner((command) =>\n    Effect.fail(\n      systemError({\n        _tag: \"NotFound\",\n        module: \"ChildProcessSpawner\",\n        method: \"spawn\",\n        description: `no process host for \\`${CommandLine.render(command)}\\``\n      })\n    )\n  ),\n  ...overrides\n})\n\n/**\n * Provides an unavailable spawner stub.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layerNoop = (\n  overrides: Partial<ChildProcessSpawner[\"Service\"]> = {}\n): Layer.Layer<ChildProcessSpawner> => Layer.succeed(ChildProcessSpawner)(makeNoop(overrides))\n\n/**\n * Decorates the process spawner in place with a `proc:spawn` capability check.\n *\n * The check is suspended into the spawn itself, so building a `Command` or a\n * stream neither requests permission nor starts a process; only running one\n * does. Every pipeline stage is checked as its own capability, left to right,\n * and no stage starts until all pass. A stage's resource is\n * `CommandLine.resource`: the command line `CommandLine.render` produces, with\n * a `shell: true` line that holds shell control syntax marked as\n * `sh -c '<line>'`, any environment variable the child would not inherit from\n * this process named in an `env <NAME>\u2026 -- ` prefix, and a working directory\n * outside `Workspace.root` named in a `cwd <path> -- ` prefix. Custom shell\n * paths are included explicitly in the resource; browser and remote adapters\n * reject them rather than silently substituting a different shell.\n *\n * Every approved stage requires `ProcessConfinement` in the host context.\n * A missing service refuses spawning; its `layerNoop` is the explicit choice\n * for an unconfined host.\n *\n * Pipeline `from`/`to` routing remains outside the grant. The working\n * directory and overridden environment names also reach attended surfaces as\n * display metadata; environment values never leave the command.\n *\n * The layer provides the tag it also requires: compose it over a host spawner\n * layer with `Layer.provide` and a `ChildProcess.Command` run as a plain\n * `Effect` is checked too.\n *\n * A command with no `cwd`, or a relative one, runs in `Workspace.root`, never\n * the process's own directory; the check sees that resolved directory. When\n * the host filesystem is in the layer's context, the working directory and\n * `Workspace.root` are compared by real path, so a symlink inside the\n * workspace that leads out of it is named, as its target, in the `cwd` prefix.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer: Layer.Layer<\n  ChildProcessSpawner,\n  never,\n  ChildProcessSpawner | GrantStore | Path.Path | Workspace\n> = Layer.effect(\n  ChildProcessSpawner,\n  Effect.gen(function*() {\n    const spawner = yield* ChildProcessSpawner\n    const grants = yield* GrantStore\n    const confinement = yield* Effect.serviceOption(ProcessConfinement.ProcessConfinement)\n    const path = yield* Path.Path\n    const rooted = Rooted.path(path, path.resolve((yield* Workspace).root))\n    const root = rooted.resolve(\".\")\n    // The raw host filesystem this layer is composed over, when there is one.\n    // A symlink inside the workspace can lead out of it, so containment is\n    // judged on real paths; a directory that cannot be resolved (it does not\n    // exist, or the host has no filesystem) is judged lexically.\n    const fileSystem = yield* Effect.serviceOption(FileSystem.FileSystem)\n    const real = (directory: string) =>\n      Option.match(fileSystem, {\n        onNone: () => Effect.succeed(directory),\n        onSome: (fs) => fs.realPath(directory).pipe(Effect.orElseSucceed(() => directory))\n      })\n    const within = (base: string) => (directory: string) => {\n      const relative = path.relative(base, directory)\n      return relative.split(path.sep)[0] !== \"..\" && !path.isAbsolute(relative)\n    }\n    const checkStage = (stage: ChildProcess.StandardCommand) =>\n      Effect.gen(function*() {\n        // Rooted.command gives every stage an absolute cwd.\n        const cwd = stage.options.cwd!\n        const realRoot = yield* real(root)\n        const resolvedCwd = yield* real(cwd)\n        const contains = resolvedCwd === cwd\n          ? (directory: string) => within(root)(directory) || within(realRoot)(directory)\n          : within(realRoot)\n        return yield* checkResolved(\n          stage,\n          CommandLine.resource(stage, {\n            ambient: ambientEnvironment(),\n            contains,\n            resolvedCwd\n          })\n        )\n      })\n    const checkResolved = (stage: ChildProcess.StandardCommand, rendered: string) => {\n      const environment = environmentNames(stage)\n      return makeCapability(\"proc:spawn\", rendered).pipe(\n        Effect.flatMap((capability) =>\n          grants.check(capability, {\n            cwd: stage.options.cwd,\n            ...(environment === undefined ? {} : { env: environment })\n          })\n        ),\n        Effect.mapError((error) =>\n          toPlatformError({\n            module: \"ChildProcessSpawner\",\n            method: \"spawn\",\n            pathOrDescriptor: rendered,\n            error\n          })\n        )\n      )\n    }\n    const check = (command: ChildProcess.Command) =>\n      Effect.forEach(CommandLine.stages(command), checkStage, { discard: true })\n    const confine = (\n      command: ChildProcess.Command\n    ): Effect.Effect<\n      ChildProcess.Command,\n      PlatformError,\n      Scope.Scope\n    > =>\n      Option.match(confinement, {\n        onNone: () =>\n          Effect.fail(systemError({\n            _tag: \"NotFound\",\n            module: \"ProcessConfinement\",\n            method: \"confine\",\n            description:\n              \"process confinement is required; use ProcessConfinement.layerNoop to explicitly run unconfined\"\n          })),\n        onSome: (service) =>\n          Effect.gen(function*() {\n            const profile = yield* ProcessConfinement.profile(grants, root, path).pipe(\n              Effect.mapError((error) => toPlatformError({ module: \"ChildProcessSpawner\", method: \"spawn\", error }))\n            )\n            const wrap = (\n              command: ChildProcess.Command\n            ): Effect.Effect<\n              ChildProcess.Command,\n              PlatformError,\n              Scope.Scope\n            > =>\n              command._tag === \"StandardCommand\"\n                ? service.confine(command, profile)\n                : Effect.gen(function*() {\n                  const left = yield* wrap(command.left)\n                  const right = yield* wrap(command.right)\n                  return ChildProcess.pipeTo(right, command.options)(left)\n                })\n            return yield* wrap(command)\n          })\n      })\n    return Containment.inherit(\n      spawner,\n      makeSpawner(\n        Effect.fn(\"ChildProcessSpawner.spawn\")((command: ChildProcess.Command) =>\n          Effect.try({\n            try: () => snapshotCommand(command),\n            catch: () =>\n              systemError({\n                _tag: \"InvalidData\",\n                module: \"ChildProcessSpawner\",\n                method: \"spawn\",\n                description: \"command must be an immutable supported process description\"\n              })\n          }).pipe(\n            Effect.map((snapshot) => Rooted.command(snapshot, rooted)),\n            Effect.flatMap((rooted) =>\n              check(rooted).pipe(Effect.andThen(confine(rooted)), Effect.flatMap(spawner.spawn))\n            )\n          )\n        )\n      )\n    )\n  })\n)\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwBA,wBAAgC;AAChC,oBAAoE;AACpE,2BAAgD;AAChD,mBAA8B;AAC9B,iCAAyD;AACzD,kBAA6B;AAC7B,wBAA2B;AAC3B,kBAA6B;AAC7B,4BAA+B;AAC/B,yBAAoC;AACpC,aAAwB;AACxB,uBAA0B;AAuK1B,IAAAA,8BAAoC;AAUpC,IAAAA,8BAAqB;AA/KrB,MAAM,OAAO,CAAC,OAAe,SAA+B;AAC1D,QAAM,aAAa,OAAO,yBAAyB,OAAO,IAAI;AAC9D,MAAI,eAAe,UAAa,EAAE,WAAW,aAAa;AACxD,UAAM,IAAI,UAAU,WAAW,OAAO,IAAI,CAAC,0BAA0B;AAAA,EACvE;AACA,SAAO,WAAW;AACpB;AAEA,MAAM,eAAe,CAAC,OAAe,SAA+B;AAClE,QAAM,aAAa,OAAO,yBAAyB,OAAO,IAAI;AAC9D,MAAI,eAAe,OAAW,QAAO;AACrC,MAAI,EAAE,WAAW,YAAa,OAAM,IAAI,UAAU,WAAW,OAAO,IAAI,CAAC,0BAA0B;AACnG,SAAO,WAAW;AACpB;AAEA,MAAM,iBAAiB,CACrB,UACmD;AACnD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAA+C,uBAAO,OAAO,IAAI;AACvE,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO,0BAA0B,KAAK,CAAC,GAAG;AACxF,QAAI,CAAC,WAAW,WAAY;AAC5B,QAAI,EAAE,WAAW,eAAgB,WAAW,UAAU,UAAa,OAAO,WAAW,UAAU,UAAW;AACxG,YAAM,IAAI,UAAU,yDAAyD;AAAA,IAC/E;AACA,aAAS,IAAI,IAAI,WAAW;AAAA,EAC9B;AACA,SAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,MAAM,uBAAuB,CAAI,UAAgB;AAC/C,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,cAAc,OAAO,0BAA0B,KAAK;AAC1D,MAAI,YAAY,WAAW,OAAW,QAAO;AAC7C,MAAI,EAAE,WAAW,YAAY,QAAS,OAAM,IAAI,UAAU,wCAAwC;AAClG,QAAM,WAAoC,EAAE,QAAQ,YAAY,OAAO,MAAM;AAC7E,aAAW,QAAQ,CAAC,aAAa,UAAU,GAAY;AACrD,UAAM,aAAa,YAAY,IAAI;AACnC,QAAI,eAAe,QAAW;AAC5B,UAAI,EAAE,WAAW,YAAa,OAAM,IAAI,UAAU,WAAW,IAAI,0BAA0B;AAC3F,eAAS,IAAI,IAAI,WAAW;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,MAAM,wBAAwB,CAC5B,UACiD;AACjD,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAmE,CAAC;AAC1E,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,OAAO,0BAA0B,KAAK,CAAC,GAAG;AACxF,QAAI,CAAC,WAAW,WAAY;AAC5B,QAAI,EAAE,WAAW,eAAe,OAAO,WAAW,UAAU,YAAY,WAAW,UAAU,MAAM;AACjG,YAAM,IAAI,UAAU,kDAAkD;AAAA,IACxE;AACA,UAAM,SAAS,WAAW;AAC1B,UAAM,OAAO,KAAK,QAAQ,MAAM;AAChC,QAAI,SAAS,SAAS;AACpB,YAAM,SAAS,OAAO,yBAAyB,QAAQ,QAAQ;AAC/D,eAAS,IAAqB,IAAI,OAAO,OAAO;AAAA,QAC9C;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,WAAW,SAAS,EAAE,QAAQ,OAAO,MAAM,KAAK,MAAM;AACpF,gBAAM,IAAI,UAAU,8CAA8C;AAAA,QACpE,GAAG;AAAA,MACL,CAAC;AAAA,IACH,WAAW,SAAS,UAAU;AAC5B,YAAM,OAAO,OAAO,yBAAyB,QAAQ,MAAM;AAC3D,eAAS,IAAqB,IAAI,OAAO,OAAO;AAAA,QAC9C;AAAA,QACA,GAAI,SAAS,SAAY,CAAC,IAAI,WAAW,OAAO,EAAE,MAAM,KAAK,MAAM,KAAK,MAAM;AAC5E,gBAAM,IAAI,UAAU,4CAA4C;AAAA,QAClE,GAAG;AAAA,MACL,CAAC;AAAA,IACH,OAAO;AACL,YAAM,IAAI,UAAU,4CAA4C;AAAA,IAClE;AAAA,EACF;AACA,SAAO,OAAO,OAAO,QAAQ;AAC/B;AAEA,MAAM,kBAAkB,CAAC,YACvB,OAAO,OAAO;AAAA,EACZ,YAAY,QAAQ;AAAA,EACpB,gBAAgB,QAAQ;AAAA,EACxB,KAAK,QAAQ;AAAA,EACb,KAAK,eAAe,QAAQ,GAAG;AAAA,EAC/B,WAAW,QAAQ;AAAA,EACnB,OAAO,QAAQ;AAAA,EACf,UAAU,QAAQ;AAAA,EAClB,aAAa,QAAQ;AAAA,EACrB,OAAO,qBAAqB,QAAQ,KAAK;AAAA,EACzC,QAAQ,qBAAqB,QAAQ,MAAM;AAAA,EAC3C,QAAQ,qBAAqB,QAAQ,MAAM;AAAA,EAC3C,eAAe,sBAAsB,QAAQ,aAAa;AAC5D,CAAC;AAEH,MAAM,kBAAkB,CAAC,YAAwD;AAC/E,QAAM,MAAM,KAAK,SAAS,MAAM;AAChC,MAAI,QAAQ,mBAAmB;AAC7B,UAAM,aAAa,KAAK,SAAS,SAAS;AAC1C,UAAM,OAAO,KAAK,SAAS,MAAM;AACjC,UAAM,UAAU,KAAK,SAAS,SAAS;AACvC,QAAI,OAAO,eAAe,YAAY,CAAC,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,OAAO,QAAQ,QAAQ,GAAG;AAC3G,YAAM,IAAI,UAAU,uDAAuD;AAAA,IAC7E;AACA,QAAI,OAAO,YAAY,YAAY,YAAY,KAAM,OAAM,IAAI,UAAU,6BAA6B;AACtG,WAAO,aAAa;AAAA,MAClB;AAAA,MACA,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC;AAAA,MACvB,gBAAgB,OAAO;AAAA,IACzB;AAAA,EACF;AACA,MAAI,QAAQ,gBAAgB;AAC1B,UAAM,OAAO,KAAK,SAAS,MAAM;AACjC,UAAM,QAAQ,KAAK,SAAS,OAAO;AACnC,UAAM,UAAU,KAAK,SAAS,SAAS;AACvC,QAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,OAAO,UAAU,YAAY,UAAU,MAAM;AAC5F,YAAM,IAAI,UAAU,+BAA+B;AAAA,IACrD;AACA,QAAI,OAAO,YAAY,YAAY,YAAY,KAAM,OAAM,IAAI,UAAU,8BAA8B;AACvG,UAAM,OAAO,aAAa,SAAS,MAAM;AACzC,UAAM,KAAK,aAAa,SAAS,IAAI;AACrC,WAAO,aAAa;AAAA,MAClB,gBAAgB,KAA6B;AAAA,MAC7C,OAAO,OAAO;AAAA,QACZ,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,KAA0C;AAAA,QAC1E,GAAI,OAAO,SAAY,CAAC,IAAI,EAAE,GAAoC;AAAA,MACpE,CAAC;AAAA,IACH,EAAE,gBAAgB,IAA4B,CAAC;AAAA,EACjD;AACA,QAAM,IAAI,UAAU,2BAA2B;AACjD;AAEA,MAAM,0BAA0B;AAQhC,MAAM,qBAAqB,MACxB,WAA4F,SAAS,OAAO,CAAC;AAEhH,MAAM,mBAAmB,CAAC,YAA6E;AACrG,QAAM,cAAc,QAAQ,QAAQ;AACpC,MAAI,gBAAgB,OAAW,QAAO;AACtC,QAAM,QAAQ,OAAO,QAAQ,WAAW,EACrC,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,UAAU,MAAS,EACzC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,EACpB,KAAK;AACR,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,MAAM,UAAU,0BACnB,QACA,CAAC,GAAG,MAAM,MAAM,GAAG,uBAAuB,GAAG,IAAI,MAAM,SAAS,uBAAuB,OAAO;AACpG;AA+BO,MAAM,WAAW,CACtB,YAAqD,CAAC,OAClB;AAAA,EACpC,OAAG,2BAAAC;AAAA,IAAY,CAAC,YACd,qBAAO;AAAA,UACL,kCAAY;AAAA,QACV,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aAAa,yBAAyB,YAAY,OAAO,OAAO,CAAC;AAAA,MACnE,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EACA,GAAG;AACL;AAQO,MAAM,YAAY,CACvB,YAAqD,CAAC,MACjB,oBAAM,QAAQ,8CAAmB,EAAE,SAAS,SAAS,CAAC;AAsCtF,MAAM,QAIT,oBAAM;AAAA,EACR;AAAA,EACA,qBAAO,IAAI,aAAY;AACrB,UAAM,UAAU,OAAO;AACvB,UAAM,SAAS,OAAO;AACtB,UAAM,cAAc,OAAO,qBAAO,cAAc,mBAAmB,kBAAkB;AACrF,UAAM,OAAO,OAAO,mBAAK;AACzB,UAAM,SAAS,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,4BAAW,IAAI,CAAC;AACtE,UAAM,OAAO,OAAO,QAAQ,GAAG;AAK/B,UAAM,aAAa,OAAO,qBAAO,cAAc,yBAAW,UAAU;AACpE,UAAM,OAAO,CAAC,cACZ,qBAAO,MAAM,YAAY;AAAA,MACvB,QAAQ,MAAM,qBAAO,QAAQ,SAAS;AAAA,MACtC,QAAQ,CAAC,OAAO,GAAG,SAAS,SAAS,EAAE,KAAK,qBAAO,cAAc,MAAM,SAAS,CAAC;AAAA,IACnF,CAAC;AACH,UAAM,SAAS,CAAC,SAAiB,CAAC,cAAsB;AACtD,YAAM,WAAW,KAAK,SAAS,MAAM,SAAS;AAC9C,aAAO,SAAS,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,WAAW,QAAQ;AAAA,IAC1E;AACA,UAAM,aAAa,CAAC,UAClB,qBAAO,IAAI,aAAY;AAErB,YAAM,MAAM,MAAM,QAAQ;AAC1B,YAAM,WAAW,OAAO,KAAK,IAAI;AACjC,YAAM,cAAc,OAAO,KAAK,GAAG;AACnC,YAAM,WAAW,gBAAgB,MAC7B,CAAC,cAAsB,OAAO,IAAI,EAAE,SAAS,KAAK,OAAO,QAAQ,EAAE,SAAS,IAC5E,OAAO,QAAQ;AACnB,aAAO,OAAO;AAAA,QACZ;AAAA,QACA,YAAY,SAAS,OAAO;AAAA,UAC1B,SAAS,mBAAmB;AAAA,UAC5B;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AACH,UAAM,gBAAgB,CAAC,OAAqC,aAAqB;AAC/E,YAAM,cAAc,iBAAiB,KAAK;AAC1C,iBAAO,sCAAe,cAAc,QAAQ,EAAE;AAAA,QAC5C,qBAAO;AAAA,UAAQ,CAAC,eACd,OAAO,MAAM,YAAY;AAAA,YACvB,KAAK,MAAM,QAAQ;AAAA,YACnB,GAAI,gBAAgB,SAAY,CAAC,IAAI,EAAE,KAAK,YAAY;AAAA,UAC1D,CAAC;AAAA,QACH;AAAA,QACA,qBAAO;AAAA,UAAS,CAAC,cACf,mCAAgB;AAAA,YACd,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR,kBAAkB;AAAA,YAClB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AACA,UAAM,QAAQ,CAAC,YACb,qBAAO,QAAQ,YAAY,OAAO,OAAO,GAAG,YAAY,EAAE,SAAS,KAAK,CAAC;AAC3E,UAAM,UAAU,CACd,YAMA,qBAAO,MAAM,aAAa;AAAA,MACxB,QAAQ,MACN,qBAAO,SAAK,kCAAY;AAAA,QACtB,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,aACE;AAAA,MACJ,CAAC,CAAC;AAAA,MACJ,QAAQ,CAAC,YACP,qBAAO,IAAI,aAAY;AACrB,cAAM,UAAU,OAAO,mBAAmB,QAAQ,QAAQ,MAAM,IAAI,EAAE;AAAA,UACpE,qBAAO,SAAS,CAAC,cAAU,mCAAgB,EAAE,QAAQ,uBAAuB,QAAQ,SAAS,MAAM,CAAC,CAAC;AAAA,QACvG;AACA,cAAM,OAAO,CACXC,aAMAA,SAAQ,SAAS,oBACb,QAAQ,QAAQA,UAAS,OAAO,IAChC,qBAAO,IAAI,aAAY;AACvB,gBAAM,OAAO,OAAO,KAAKA,SAAQ,IAAI;AACrC,gBAAM,QAAQ,OAAO,KAAKA,SAAQ,KAAK;AACvC,iBAAO,aAAa,OAAO,OAAOA,SAAQ,OAAO,EAAE,IAAI;AAAA,QACzD,CAAC;AACL,eAAO,OAAO,KAAK,OAAO;AAAA,MAC5B,CAAC;AAAA,IACL,CAAC;AACH,WAAO,YAAY;AAAA,MACjB;AAAA,UACA,2BAAAD;AAAA,QACE,qBAAO,GAAG,2BAA2B;AAAA,UAAE,CAAC,YACtC,qBAAO,IAAI;AAAA,YACT,KAAK,MAAM,gBAAgB,OAAO;AAAA,YAClC,OAAO,UACL,kCAAY;AAAA,cACV,MAAM;AAAA,cACN,QAAQ;AAAA,cACR,QAAQ;AAAA,cACR,aAAa;AAAA,YACf,CAAC;AAAA,UACL,CAAC,EAAE;AAAA,YACD,qBAAO,IAAI,CAAC,aAAa,OAAO,QAAQ,UAAU,MAAM,CAAC;AAAA,YACzD,qBAAO;AAAA,cAAQ,CAACE,YACd,MAAMA,OAAM,EAAE,KAAK,qBAAO,QAAQ,QAAQA,OAAM,CAAC,GAAG,qBAAO,QAAQ,QAAQ,KAAK,CAAC;AAAA,YACnF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
   "names": ["import_ChildProcessSpawner", "makeSpawner", "command", "rooted"]
 }

package/dist/cjs/CommandLine.d.ts

@@ -1,7 +1,7 @@
 /**
  * @since 1.0.0-rc.0
  *
- * Rendering an `effect/unstable/process` `Command` back to a shell command
+ * Rendering an `effect/process` `Command` back to a shell command
  * line.
  *
  * Two callers need the same string and must agree on it exactly:
@@ -18,7 +18,7 @@
  * The module is pure string handling — no host access — so it stays on the
  * browser-safe side of the package.
  */
-import type * as ChildProcess from "effect/unstable/process/ChildProcess";
+import type * as ChildProcess from "effect/process/ChildProcess";
 /**
  * Quotes one token for a POSIX shell, leaving obviously safe tokens alone.
  *

package/dist/cjs/CommandLine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CommandLine.d.ts","sourceRoot":"","sources":["../../src/CommandLine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,KAAK,YAAY,MAAM,sCAAsC,CAAA;AAMzE;;;;;GAKG;AACH,eAAO,MAAM,KAAK,GAAI,OAAO,MAAM,KAAG,MAC4C,CAAA;AAElF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAOG,CAAA;AAiB1D;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAA;IAC3E;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;IAChE;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAgBD;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,aAAa,CAAC,YAAY,CAAC,eAAe,CACK,CAAA;AAEtG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,QAAQ,GAAI,SAAS,YAAY,CAAC,eAAe,EAAE,UAAS,eAAoB,KAAG,MAW/F,CAAA;AASD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAKO,CAAA;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAAM,GAAG,SACiB,CAAA;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,GACd,SAAS,YAAY,CAAC,OAAO,KAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SACsC,CAAA"}
+{"version":3,"file":"CommandLine.d.ts","sourceRoot":"","sources":["../../src/CommandLine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAMhE;;;;;GAKG;AACH,eAAO,MAAM,KAAK,GAAI,OAAO,MAAM,KAAG,MAC4C,CAAA;AAElF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAOG,CAAA;AAiB1D;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAA;IAC3E;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAA;IAChE;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C;AAgBD;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,aAAa,CAAC,YAAY,CAAC,eAAe,CACK,CAAA;AAEtG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,QAAQ,GAAI,SAAS,YAAY,CAAC,eAAe,EAAE,UAAS,eAAoB,KAAG,MAW/F,CAAA;AASD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAKO,CAAA;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,GAAG,GAAI,SAAS,YAAY,CAAC,OAAO,KAAG,MAAM,GAAG,SACiB,CAAA;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,GACd,SAAS,YAAY,CAAC,OAAO,KAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SACsC,CAAA"}

package/dist/cjs/CommandLine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/CommandLine.ts"],
-  "sourcesContent": ["/**\n * @since 1.0.0-rc.0\n *\n * Rendering an `effect/unstable/process` `Command` back to a shell command\n * line.\n *\n * Two callers need the same string and must agree on it exactly:\n *\n *  1. `@smthrs/kernel/ChildProcessSpawner` uses it as the `proc:spawn`\n *     capability resource, so a grant reads the way an operator wrote it; and\n *  2. `@smthrs/platform-browser/BrowserChildProcessSpawner` uses it as the line\n *     it hands to the in-browser bash interpreter, which has no `argv` to spawn\n *     with.\n *\n * A single renderer keeps a granted capability and the command a browser\n * actually runs from drifting apart.\n *\n * The module is pure string handling \u2014 no host access \u2014 so it stays on the\n * browser-safe side of the package.\n */\n\nimport type * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport { isInheritedName } from \"./ChildProcessEnvironment.ts\"\n\n/** Tokens made only of these characters need no quoting in a POSIX shell. */\nconst SAFE = /^[A-Za-z0-9_@%+=:,./-]+$/\n\n/**\n * Quotes one token for a POSIX shell, leaving obviously safe tokens alone.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const quote = (token: string): string =>\n  token !== \"\" && SAFE.test(token) ? token : `'${token.replaceAll(\"'\", `'\\\\''`)}'`\n\n/**\n * Renders a `Command` as a single shell command line.\n *\n * A standard command with `shell: true` renders its tokens verbatim, matching\n * the line Node and the browser interpreter hand to the default shell. A\n * custom shell renders as an explicit `<shell> -c <line>` invocation so the\n * selected executable is part of the permission resource. Without `shell`,\n * every token is POSIX-quoted to preserve literal argv semantics. These\n * distinctions are security-sensitive: the rendered value is also the\n * `proc:spawn` capability resource, so it must describe what will execute.\n * The rendering is POSIX-only by contract: on Windows, Node invokes the shell\n * with `/d /s /c` rather than `-c`, so the rendered line describes the POSIX\n * invocation, not a cmd.exe one.\n *\n * The `proc:spawn` capability resource is {@link resource}, which starts from\n * this line and adds what the line alone cannot show.\n *\n * A `PipedCommand` renders with `|` between its sides. That is a faithful\n * rendering of what the pipeline does, and it is the only form an interpreter\n * that takes a command line rather than an `argv` can be given. `from`/`to`\n * pipe options are *not* expressible this way; rendering ignores them, so a\n * pipeline that redirects `stderr` renders like one that pipes `stdout`.\n * Capability checks therefore see the commands, never the plumbing.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const render = (command: ChildProcess.Command): string =>\n  command._tag === \"StandardCommand\"\n    ? command.options.shell === undefined || command.options.shell === false\n      ? [command.command, ...command.args].map(quote).join(\" \")\n      : command.options.shell === true\n      ? [command.command, ...command.args].join(\" \")\n      : `${quote(command.options.shell)} -c ${quote([command.command, ...command.args].join(\" \"))}`\n    : `${render(command.left)} | ${render(command.right)}`\n\n/**\n * Shell syntax that chains, substitutes, groups, or redirects: everything that\n * lets one shell line run or write more than a single simple command.\n */\nconst shellControl = /[;&|`$<>()\\n\\r]/\n\n/**\n * Redirections that neither run nor write anything a grant should see: an fd\n * duplication such as `2>&1` and a discard to `/dev/null`. They are removed\n * before {@link shellControl} is tested, so `git status 2>&1` keeps its\n * verbatim resource. Only a space or tab may sit between `>` and `/dev/null`:\n * `>` followed by a line break is not a discard, so it stays control syntax.\n */\nconst harmlessRedirect = /(^|\\s)(?:\\d*>&\\d+|\\d*>[ \\t]*\\/dev\\/null)(?=\\s|$)/g\n\n/**\n * What {@link resource} compares a stage against, supplied by the spawner that\n * checks it.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface ResourceContext {\n  /**\n   * The environment the spawning process itself holds. A bootstrap name\n   * (`PATH`, `HOME`, ...) whose declared value equals the ambient value is the\n   * inherited default and stays out of the resource; one set to anything else\n   * is named. Omitted, every declared bootstrap name is named.\n   */\n  readonly ambient?: Readonly<Record<string, string | undefined>> | undefined\n  /**\n   * Whether a stage's working directory is inside the directory the flow\n   * already governs. A `cwd` it rejects is named in the resource. Omitted,\n   * every `cwd` a stage sets is named.\n   */\n  readonly contains?: ((directory: string) => boolean) | undefined\n  /**\n   * The stage `cwd` with every symlink resolved, when the host could resolve\n   * it. It replaces the lexical `cwd` both for `contains` and in the\n   * `cwd <path> -- ` prefix, so a symlink inside the governed directory that\n   * leads out of it is judged, and shown, by where the command really runs.\n   */\n  readonly resolvedCwd?: string | undefined\n}\n\n/**\n * Names of the environment variables a stage sets that the child would not\n * otherwise inherit: every name outside the bootstrap set, and a bootstrap\n * name whose value differs from the ambient one.\n */\nconst overriddenNames = (\n  command: ChildProcess.StandardCommand,\n  ambient: Readonly<Record<string, string | undefined>>\n): ReadonlyArray<string> =>\n  Object.entries(command.options.env ?? {})\n    .filter(([name, value]) => value !== undefined && (!isInheritedName(name) || ambient[name] !== value))\n    .map(([name]) => name)\n    .sort()\n\n/**\n * The stages of a command in execution order: the command itself, or every\n * `StandardCommand` of a pipeline from left to right. The spawner checks each\n * stage as its own `proc:spawn` capability.\n *\n * @category rendering\n * @since 1.0.0-rc.1\n */\nexport const stages = (command: ChildProcess.Command): ReadonlyArray<ChildProcess.StandardCommand> =>\n  command._tag === \"StandardCommand\" ? [command] : [...stages(command.left), ...stages(command.right)]\n\n/**\n * The `proc:spawn` capability resource for one stage: {@link render}, with\n * three additions that keep a prefix grant from authorizing code the stage\n * never named.\n *\n *  - A `shell: true` stage whose line holds shell control syntax (`;`, `&`,\n *    `|`, `` ` ``, `$`, `<`, `>`, `(`, `)`, or a line break) is marked as the\n *    explicit `sh -c '<line>'` it is. A grant such as `git status *` then\n *    cannot match `git status; curl x | sh`, while a simple shell line such as\n *    `git status --short` keeps its verbatim resource. An fd duplication such\n *    as `2>&1` and a discard to `/dev/null` do not count as control syntax.\n *  - A stage that sets an environment variable the child would not otherwise\n *    inherit is prefixed with `env <NAME>\u2026 -- `, sorted names only. That is\n *    every name outside the bootstrap set `ChildProcessEnvironment` inherits\n *    (`PATH`, `HOME`, `USER`, `LANG`, `TERM`, `TMPDIR`, `SHELL`, `LC_*`), and a\n *    bootstrap name whose value differs from `context.ambient`. A grant for\n *    `git status` covers neither `env GIT_SSH_COMMAND -- git status` nor\n *    `env PATH -- git status`. Values never enter the resource because they\n *    often carry credentials.\n *  - A stage whose `cwd` `context.contains` rejects is prefixed with\n *    `cwd <path> -- `, so a grant does not follow the command into a\n *    directory whose configuration the flow does not govern. When\n *    `context.resolvedCwd` is given, that real path is judged and named\n *    instead of the lexical `cwd`.\n *\n * A pipeline has no single resource: the spawner checks every one of its\n * {@link stages}, so `git status | sh` needs a grant for `sh` too.\n *\n * The `env` and `cwd` prefixes share their spelling with a literal command:\n * `make(\"env\", [\"PATH\", \"--\", \"git\", \"status\"])` renders as\n * `env PATH -- git status`, the resource of `git status` with `PATH`\n * overridden. The alias grants nothing extra. The literal command runs a\n * program named `PATH` (or `cwd`) from the ambient `PATH`, not `git`. A grant\n * with `*` inside the prefix, such as `env * -- git status`, also matches\n * `env -C /x -- git status`, but it already admits any variable name,\n * including `GIT_SSH_COMMAND` and `LD_PRELOAD`, which run arbitrary code.\n * Grant a prefixed resource exactly as the request shows it.\n *\n * @category rendering\n * @since 1.0.0-rc.1\n */\nexport const resource = (command: ChildProcess.StandardCommand, context: ResourceContext = {}): string => {\n  const line = render(command)\n  const shown = command.options.shell === true && shellControl.test(line.replace(harmlessRedirect, \"$1\"))\n    ? `sh -c ${quote(line)}`\n    : line\n  const names = overriddenNames(command, context.ambient ?? {})\n  const withEnv = names.length === 0 ? shown : `env ${names.map(quote).join(\" \")} -- ${shown}`\n  const directory = command.options.cwd === undefined ? undefined : context.resolvedCwd ?? command.options.cwd\n  return directory === undefined || context.contains?.(directory) === true\n    ? withEnv\n    : `cwd ${quote(directory)} -- ${withEnv}`\n}\n\n/** The leading token of a shell line, which is the program the line runs. */\nconst program = (line: string): string => {\n  const trimmed = line.trimStart()\n  const end = trimmed.search(/\\s/)\n  return end === -1 ? trimmed : trimmed.slice(0, end)\n}\n\n/**\n * The executable a command runs, without its arguments.\n *\n * A durable record of a spawned process names its program with this rather\n * than with {@link render}: arguments carry credentials (`curl -u user:pass`,\n * `mysql -phunter2`), and a journal that keeps them keeps them permanently.\n * Nothing that reads such a record needs more than the program name; a reaper\n * matches processes by pid and process group.\n *\n * Without `shell`, `command` is the executable itself, spaces and all. With a\n * shell, the line is what runs, so the program is its first token: both\n * `make(\"mysql -phunter2\", [], { shell: true })` and\n * `make(\"mysql\", [\"-phunter2\"])` yield `mysql`. A pipeline names one\n * executable per stage, joined the way {@link render} joins the stages.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const executable = (command: ChildProcess.Command): string =>\n  command._tag === \"StandardCommand\"\n    ? command.options.shell === undefined || command.options.shell === false\n      ? command.command\n      : program(command.command)\n    : `${executable(command.left)} | ${executable(command.right)}`\n\n/**\n * The working directory a command runs in, taking the leftmost stage of a\n * pipeline, which is the stage `setCwd` and the spawners agree to treat as the\n * pipeline's own directory.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const cwd = (command: ChildProcess.Command): string | undefined =>\n  command._tag === \"StandardCommand\" ? command.options.cwd : cwd(command.left)\n\n/**\n * The environment overrides a command runs with, taking the leftmost stage of\n * a pipeline for the same reason {@link cwd} does.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const env = (\n  command: ChildProcess.Command\n): Record<string, string | undefined> | undefined =>\n  command._tag === \"StandardCommand\" ? command.options.env : env(command.left)\n"],
+  "sourcesContent": ["/**\n * @since 1.0.0-rc.0\n *\n * Rendering an `effect/process` `Command` back to a shell command\n * line.\n *\n * Two callers need the same string and must agree on it exactly:\n *\n *  1. `@smthrs/kernel/ChildProcessSpawner` uses it as the `proc:spawn`\n *     capability resource, so a grant reads the way an operator wrote it; and\n *  2. `@smthrs/platform-browser/BrowserChildProcessSpawner` uses it as the line\n *     it hands to the in-browser bash interpreter, which has no `argv` to spawn\n *     with.\n *\n * A single renderer keeps a granted capability and the command a browser\n * actually runs from drifting apart.\n *\n * The module is pure string handling \u2014 no host access \u2014 so it stays on the\n * browser-safe side of the package.\n */\n\nimport type * as ChildProcess from \"effect/process/ChildProcess\"\nimport { isInheritedName } from \"./ChildProcessEnvironment.ts\"\n\n/** Tokens made only of these characters need no quoting in a POSIX shell. */\nconst SAFE = /^[A-Za-z0-9_@%+=:,./-]+$/\n\n/**\n * Quotes one token for a POSIX shell, leaving obviously safe tokens alone.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const quote = (token: string): string =>\n  token !== \"\" && SAFE.test(token) ? token : `'${token.replaceAll(\"'\", `'\\\\''`)}'`\n\n/**\n * Renders a `Command` as a single shell command line.\n *\n * A standard command with `shell: true` renders its tokens verbatim, matching\n * the line Node and the browser interpreter hand to the default shell. A\n * custom shell renders as an explicit `<shell> -c <line>` invocation so the\n * selected executable is part of the permission resource. Without `shell`,\n * every token is POSIX-quoted to preserve literal argv semantics. These\n * distinctions are security-sensitive: the rendered value is also the\n * `proc:spawn` capability resource, so it must describe what will execute.\n * The rendering is POSIX-only by contract: on Windows, Node invokes the shell\n * with `/d /s /c` rather than `-c`, so the rendered line describes the POSIX\n * invocation, not a cmd.exe one.\n *\n * The `proc:spawn` capability resource is {@link resource}, which starts from\n * this line and adds what the line alone cannot show.\n *\n * A `PipedCommand` renders with `|` between its sides. That is a faithful\n * rendering of what the pipeline does, and it is the only form an interpreter\n * that takes a command line rather than an `argv` can be given. `from`/`to`\n * pipe options are *not* expressible this way; rendering ignores them, so a\n * pipeline that redirects `stderr` renders like one that pipes `stdout`.\n * Capability checks therefore see the commands, never the plumbing.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const render = (command: ChildProcess.Command): string =>\n  command._tag === \"StandardCommand\"\n    ? command.options.shell === undefined || command.options.shell === false\n      ? [command.command, ...command.args].map(quote).join(\" \")\n      : command.options.shell === true\n      ? [command.command, ...command.args].join(\" \")\n      : `${quote(command.options.shell)} -c ${quote([command.command, ...command.args].join(\" \"))}`\n    : `${render(command.left)} | ${render(command.right)}`\n\n/**\n * Shell syntax that chains, substitutes, groups, or redirects: everything that\n * lets one shell line run or write more than a single simple command.\n */\nconst shellControl = /[;&|`$<>()\\n\\r]/\n\n/**\n * Redirections that neither run nor write anything a grant should see: an fd\n * duplication such as `2>&1` and a discard to `/dev/null`. They are removed\n * before {@link shellControl} is tested, so `git status 2>&1` keeps its\n * verbatim resource. Only a space or tab may sit between `>` and `/dev/null`:\n * `>` followed by a line break is not a discard, so it stays control syntax.\n */\nconst harmlessRedirect = /(^|\\s)(?:\\d*>&\\d+|\\d*>[ \\t]*\\/dev\\/null)(?=\\s|$)/g\n\n/**\n * What {@link resource} compares a stage against, supplied by the spawner that\n * checks it.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface ResourceContext {\n  /**\n   * The environment the spawning process itself holds. A bootstrap name\n   * (`PATH`, `HOME`, ...) whose declared value equals the ambient value is the\n   * inherited default and stays out of the resource; one set to anything else\n   * is named. Omitted, every declared bootstrap name is named.\n   */\n  readonly ambient?: Readonly<Record<string, string | undefined>> | undefined\n  /**\n   * Whether a stage's working directory is inside the directory the flow\n   * already governs. A `cwd` it rejects is named in the resource. Omitted,\n   * every `cwd` a stage sets is named.\n   */\n  readonly contains?: ((directory: string) => boolean) | undefined\n  /**\n   * The stage `cwd` with every symlink resolved, when the host could resolve\n   * it. It replaces the lexical `cwd` both for `contains` and in the\n   * `cwd <path> -- ` prefix, so a symlink inside the governed directory that\n   * leads out of it is judged, and shown, by where the command really runs.\n   */\n  readonly resolvedCwd?: string | undefined\n}\n\n/**\n * Names of the environment variables a stage sets that the child would not\n * otherwise inherit: every name outside the bootstrap set, and a bootstrap\n * name whose value differs from the ambient one.\n */\nconst overriddenNames = (\n  command: ChildProcess.StandardCommand,\n  ambient: Readonly<Record<string, string | undefined>>\n): ReadonlyArray<string> =>\n  Object.entries(command.options.env ?? {})\n    .filter(([name, value]) => value !== undefined && (!isInheritedName(name) || ambient[name] !== value))\n    .map(([name]) => name)\n    .sort()\n\n/**\n * The stages of a command in execution order: the command itself, or every\n * `StandardCommand` of a pipeline from left to right. The spawner checks each\n * stage as its own `proc:spawn` capability.\n *\n * @category rendering\n * @since 1.0.0-rc.1\n */\nexport const stages = (command: ChildProcess.Command): ReadonlyArray<ChildProcess.StandardCommand> =>\n  command._tag === \"StandardCommand\" ? [command] : [...stages(command.left), ...stages(command.right)]\n\n/**\n * The `proc:spawn` capability resource for one stage: {@link render}, with\n * three additions that keep a prefix grant from authorizing code the stage\n * never named.\n *\n *  - A `shell: true` stage whose line holds shell control syntax (`;`, `&`,\n *    `|`, `` ` ``, `$`, `<`, `>`, `(`, `)`, or a line break) is marked as the\n *    explicit `sh -c '<line>'` it is. A grant such as `git status *` then\n *    cannot match `git status; curl x | sh`, while a simple shell line such as\n *    `git status --short` keeps its verbatim resource. An fd duplication such\n *    as `2>&1` and a discard to `/dev/null` do not count as control syntax.\n *  - A stage that sets an environment variable the child would not otherwise\n *    inherit is prefixed with `env <NAME>\u2026 -- `, sorted names only. That is\n *    every name outside the bootstrap set `ChildProcessEnvironment` inherits\n *    (`PATH`, `HOME`, `USER`, `LANG`, `TERM`, `TMPDIR`, `SHELL`, `LC_*`), and a\n *    bootstrap name whose value differs from `context.ambient`. A grant for\n *    `git status` covers neither `env GIT_SSH_COMMAND -- git status` nor\n *    `env PATH -- git status`. Values never enter the resource because they\n *    often carry credentials.\n *  - A stage whose `cwd` `context.contains` rejects is prefixed with\n *    `cwd <path> -- `, so a grant does not follow the command into a\n *    directory whose configuration the flow does not govern. When\n *    `context.resolvedCwd` is given, that real path is judged and named\n *    instead of the lexical `cwd`.\n *\n * A pipeline has no single resource: the spawner checks every one of its\n * {@link stages}, so `git status | sh` needs a grant for `sh` too.\n *\n * The `env` and `cwd` prefixes share their spelling with a literal command:\n * `make(\"env\", [\"PATH\", \"--\", \"git\", \"status\"])` renders as\n * `env PATH -- git status`, the resource of `git status` with `PATH`\n * overridden. The alias grants nothing extra. The literal command runs a\n * program named `PATH` (or `cwd`) from the ambient `PATH`, not `git`. A grant\n * with `*` inside the prefix, such as `env * -- git status`, also matches\n * `env -C /x -- git status`, but it already admits any variable name,\n * including `GIT_SSH_COMMAND` and `LD_PRELOAD`, which run arbitrary code.\n * Grant a prefixed resource exactly as the request shows it.\n *\n * @category rendering\n * @since 1.0.0-rc.1\n */\nexport const resource = (command: ChildProcess.StandardCommand, context: ResourceContext = {}): string => {\n  const line = render(command)\n  const shown = command.options.shell === true && shellControl.test(line.replace(harmlessRedirect, \"$1\"))\n    ? `sh -c ${quote(line)}`\n    : line\n  const names = overriddenNames(command, context.ambient ?? {})\n  const withEnv = names.length === 0 ? shown : `env ${names.map(quote).join(\" \")} -- ${shown}`\n  const directory = command.options.cwd === undefined ? undefined : context.resolvedCwd ?? command.options.cwd\n  return directory === undefined || context.contains?.(directory) === true\n    ? withEnv\n    : `cwd ${quote(directory)} -- ${withEnv}`\n}\n\n/** The leading token of a shell line, which is the program the line runs. */\nconst program = (line: string): string => {\n  const trimmed = line.trimStart()\n  const end = trimmed.search(/\\s/)\n  return end === -1 ? trimmed : trimmed.slice(0, end)\n}\n\n/**\n * The executable a command runs, without its arguments.\n *\n * A durable record of a spawned process names its program with this rather\n * than with {@link render}: arguments carry credentials (`curl -u user:pass`,\n * `mysql -phunter2`), and a journal that keeps them keeps them permanently.\n * Nothing that reads such a record needs more than the program name; a reaper\n * matches processes by pid and process group.\n *\n * Without `shell`, `command` is the executable itself, spaces and all. With a\n * shell, the line is what runs, so the program is its first token: both\n * `make(\"mysql -phunter2\", [], { shell: true })` and\n * `make(\"mysql\", [\"-phunter2\"])` yield `mysql`. A pipeline names one\n * executable per stage, joined the way {@link render} joins the stages.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const executable = (command: ChildProcess.Command): string =>\n  command._tag === \"StandardCommand\"\n    ? command.options.shell === undefined || command.options.shell === false\n      ? command.command\n      : program(command.command)\n    : `${executable(command.left)} | ${executable(command.right)}`\n\n/**\n * The working directory a command runs in, taking the leftmost stage of a\n * pipeline, which is the stage `setCwd` and the spawners agree to treat as the\n * pipeline's own directory.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const cwd = (command: ChildProcess.Command): string | undefined =>\n  command._tag === \"StandardCommand\" ? command.options.cwd : cwd(command.left)\n\n/**\n * The environment overrides a command runs with, taking the leftmost stage of\n * a pipeline for the same reason {@link cwd} does.\n *\n * @category rendering\n * @since 1.0.0-rc.0\n */\nexport const env = (\n  command: ChildProcess.Command\n): Record<string, string | undefined> | undefined =>\n  command._tag === \"StandardCommand\" ? command.options.env : env(command.left)\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,qCAAgC;AAGhC,MAAM,OAAO;AAQN,MAAM,QAAQ,CAAC,UACpB,UAAU,MAAM,KAAK,KAAK,KAAK,IAAI,QAAQ,IAAI,MAAM,WAAW,KAAK,OAAO,CAAC;AA6BxE,MAAM,SAAS,CAAC,YACrB,QAAQ,SAAS,oBACb,QAAQ,QAAQ,UAAU,UAAa,QAAQ,QAAQ,UAAU,QAC/D,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,IAAI,KAAK,EAAE,KAAK,GAAG,IACtD,QAAQ,QAAQ,UAAU,OAC1B,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG,IAC3C,GAAG,MAAM,QAAQ,QAAQ,KAAK,CAAC,OAAO,MAAM,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,KAC3F,GAAG,OAAO,QAAQ,IAAI,CAAC,MAAM,OAAO,QAAQ,KAAK,CAAC;AAMxD,MAAM,eAAe;AASrB,MAAM,mBAAmB;AAqCzB,MAAM,kBAAkB,CACtB,SACA,YAEA,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC,CAAC,EACrC,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,UAAU,WAAc,KAAC,gDAAgB,IAAI,KAAK,QAAQ,IAAI,MAAM,MAAM,EACpG,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,EACpB,KAAK;AAUH,MAAM,SAAS,CAAC,YACrB,QAAQ,SAAS,oBAAoB,CAAC,OAAO,IAAI,CAAC,GAAG,OAAO,QAAQ,IAAI,GAAG,GAAG,OAAO,QAAQ,KAAK,CAAC;AA2C9F,MAAM,WAAW,CAAC,SAAuC,UAA2B,CAAC,MAAc;AACxG,QAAM,OAAO,OAAO,OAAO;AAC3B,QAAM,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,aAAa,KAAK,KAAK,QAAQ,kBAAkB,IAAI,CAAC,IAClG,SAAS,MAAM,IAAI,CAAC,KACpB;AACJ,QAAM,QAAQ,gBAAgB,SAAS,QAAQ,WAAW,CAAC,CAAC;AAC5D,QAAM,UAAU,MAAM,WAAW,IAAI,QAAQ,OAAO,MAAM,IAAI,KAAK,EAAE,KAAK,GAAG,CAAC,OAAO,KAAK;AAC1F,QAAM,YAAY,QAAQ,QAAQ,QAAQ,SAAY,SAAY,QAAQ,eAAe,QAAQ,QAAQ;AACzG,SAAO,cAAc,UAAa,QAAQ,WAAW,SAAS,MAAM,OAChE,UACA,OAAO,MAAM,SAAS,CAAC,OAAO,OAAO;AAC3C;AAGA,MAAM,UAAU,CAAC,SAAyB;AACxC,QAAM,UAAU,KAAK,UAAU;AAC/B,QAAM,MAAM,QAAQ,OAAO,IAAI;AAC/B,SAAO,QAAQ,KAAK,UAAU,QAAQ,MAAM,GAAG,GAAG;AACpD;AAoBO,MAAM,aAAa,CAAC,YACzB,QAAQ,SAAS,oBACb,QAAQ,QAAQ,UAAU,UAAa,QAAQ,QAAQ,UAAU,QAC/D,QAAQ,UACR,QAAQ,QAAQ,OAAO,IACzB,GAAG,WAAW,QAAQ,IAAI,CAAC,MAAM,WAAW,QAAQ,KAAK,CAAC;AAUzD,MAAM,MAAM,CAAC,YAClB,QAAQ,SAAS,oBAAoB,QAAQ,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAStE,MAAM,MAAM,CACjB,YAEA,QAAQ,SAAS,oBAAoB,QAAQ,QAAQ,MAAM,IAAI,QAAQ,IAAI;",
   "names": []
 }

package/dist/cjs/ContainedSpawner.d.ts

@@ -26,9 +26,9 @@
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as PlatformError from "effect/PlatformError";
+import * as ChildProcess from "effect/process/ChildProcess";
+import { type ChildProcessHandle, ChildProcessSpawner } from "effect/process/ChildProcessSpawner";
 import * as Scope from "effect/Scope";
-import * as ChildProcess from "effect/unstable/process/ChildProcess";
-import { type ChildProcessHandle, ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
 import * as ProcessLedger from "./ProcessLedger.ts";
 /**
  * How long a contained child may take to honour `SIGTERM`.

package/dist/cjs/ContainedSpawner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ContainedSpawner.d.ts","sourceRoot":"","sources":["../../src/ContainedSpawner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAErD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,YAAY,MAAM,sCAAsC,CAAA;AACpE,OAAO,EACL,KAAK,kBAAkB,EACvB,mBAAmB,EAEpB,MAAM,6CAA6C,CAAA;AAIpD,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,OAAO,CAAA;AAElC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,SAAS,GAAG,CACtB,OAAO,EAAE,YAAY,CAAC,eAAe,EACrC,KAAK,EAAE,CACL,OAAO,EAAE,YAAY,CAAC,eAAe,KAClC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAC7E,MAAM,CAAC,MAAM,CAChB;IACE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;CACzC,EACD,aAAa,CAAC,aAAa,EAC3B,KAAK,CAAC,KAAK,CACZ,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,mBAAmB,CAAC,SAAS,CAAC,KAAG,OAA2C,CAAA;AAEjH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,YAAY,CAAC,OAAO,EAC7B,UAAU,OAAO,KAChB,YAAY,CAAC,OAcf,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,YAAY,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,WAAW,MAAM,KAAG,MAAM,GAAG,IAIhG,CAAA;AAKD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,GAChB,UAAU,OAAO,EACjB,YAAY,SAAS,KACpB,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,GAAG,aAAa,CAAC,aAAa,CAmEzF,CAAA"}
+{"version":3,"file":"ContainedSpawner.d.ts","sourceRoot":"","sources":["../../src/ContainedSpawner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,KAAK,kBAAkB,EAAE,mBAAmB,EAAuB,MAAM,oCAAoC,CAAA;AAEtH,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAIrC,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,OAAO,CAAA;AAElC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,SAAS,GAAG,CACtB,OAAO,EAAE,YAAY,CAAC,eAAe,EACrC,KAAK,EAAE,CACL,OAAO,EAAE,YAAY,CAAC,eAAe,KAClC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAC7E,MAAM,CAAC,MAAM,CAChB;IACE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAChF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;CACzC,EACD,aAAa,CAAC,aAAa,EAC3B,KAAK,CAAC,KAAK,CACZ,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,mBAAmB,CAAC,SAAS,CAAC,KAAG,OAA2C,CAAA;AAEjH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,YAAY,CAAC,OAAO,EAC7B,UAAU,OAAO,KAChB,YAAY,CAAC,OAcf,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,YAAY,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,WAAW,MAAM,KAAG,MAAM,GAAG,IAIhG,CAAA;AAKD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,GAChB,UAAU,OAAO,EACjB,YAAY,SAAS,KACpB,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,GAAG,aAAa,CAAC,aAAa,CAmEzF,CAAA"}

package/dist/cjs/ContainedSpawner.js

@@ -39,10 +39,10 @@ var Effect = __toESM(require("effect/Effect"), 1);
 var Exit = __toESM(require("effect/Exit"), 1);
 var Layer = __toESM(require("effect/Layer"), 1);
 var PlatformError = __toESM(require("effect/PlatformError"), 1);
+var ChildProcess = __toESM(require("effect/process/ChildProcess"), 1);
+var import_ChildProcessSpawner = require("effect/process/ChildProcessSpawner");
 var Schedule = __toESM(require("effect/Schedule"), 1);
 var Scope = __toESM(require("effect/Scope"), 1);
-var ChildProcess = __toESM(require("effect/unstable/process/ChildProcess"), 1);
-var import_ChildProcessSpawner = require("effect/unstable/process/ChildProcessSpawner");
 var CommandLine = __toESM(require("./CommandLine.js"), 1);
 var Containment = __toESM(require("./internal/Containment.js"), 1);
 var Pipeline = __toESM(require("./internal/Pipeline.js"), 1);

package/dist/cjs/ContainedSpawner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/ContainedSpawner.ts"],
-  "sourcesContent": ["/**\n * Process containment: prepared ownership, bounded cleanup and durable records.\n *\n * A host supplies a {@link Lifecycle} that owns launch and cleanup independently\n * of the command's exit status. The lifecycle first prepares a process identity;\n * this decorator commits that identity to {@link ProcessLedger.ProcessLedger}\n * before activating the caller's command. Failed or interrupted startup closes\n * its child scope immediately, including any earlier legs of a partial pipeline.\n *\n * Each command receives default termination and escalation options. The host\n * lifecycle validates that policy and verifies cleanup before the decorator\n * retires its record. Unverifiable cleanup retains the record for recovery;\n * a host that dies also leaves its committed records discoverable by the next\n * incarnation's reaper (`ProcessReaper` in `@smthrs/platform-node`).\n *\n * Every pipeline leg is prepared and recorded separately, including legs whose\n * pid the aggregate handle does not expose. The module remains platform-neutral.\n * A layer without a lifecycle provides only deadline defaults and bookkeeping;\n * it does not declare the verified-cleanup contract read by {@link isContained}.\n *\n * Governing design:\n * `docs/specs/Concepts/Host Adapters.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport * as Layer from \"effect/Layer\"\nimport * as PlatformError from \"effect/PlatformError\"\nimport * as Schedule from \"effect/Schedule\"\nimport * as Scope from \"effect/Scope\"\nimport * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport {\n  type ChildProcessHandle,\n  ChildProcessSpawner,\n  make as makeSpawner\n} from \"effect/unstable/process/ChildProcessSpawner\"\nimport * as CommandLine from \"./CommandLine.ts\"\nimport * as Containment from \"./internal/Containment.ts\"\nimport * as Pipeline from \"./internal/Pipeline.ts\"\nimport * as ProcessLedger from \"./ProcessLedger.ts\"\n\n/**\n * How long a contained child may take to honour `SIGTERM`.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport const defaultGraceMs = 2000\n\n/**\n * Containment configuration.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport interface Options {\n  /**\n   * Milliseconds between the `SIGTERM` that asks a child to stop and the\n   * `SIGKILL` that makes it. Default {@link defaultGraceMs}.\n   */\n  readonly graceMs?: number | undefined\n  /**\n   * The platform the host spawner runs on, as `process.platform` spells it.\n   * Windows records no POSIX process group, including for detached children.\n   * On POSIX, detachment determines whether the child leads its own group.\n   * Default `\"linux\"`; host bundles pass their actual platform.\n   */\n  readonly platform?: string | undefined\n}\n\n/**\n * A platform's preparation, activation, and cleanup of a contained process.\n *\n * Preparation receives the underlying spawner and must own cleanup before it\n * can fail or be interrupted. It returns the process identity to record and an\n * idempotent `activate` effect. The decorator runs activation only after that\n * identity commits to the ledger. A platform can therefore prepare an owner\n * without executing the caller's command before it is durably discoverable.\n *\n * Failed startup closes its own scope immediately. A successful startup keeps\n * that scope attached to the caller's scope. `settled` must stay false on failed\n * or unverifiable cleanup; only verified cleanup permits ledger retirement.\n * The wrapped handle applies the same policy to an explicit `kill`.\n *\n * @category models\n * @since 1.0.0\n */\nexport type Lifecycle = (\n  command: ChildProcess.StandardCommand,\n  spawn: (\n    command: ChildProcess.StandardCommand\n  ) => Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope>\n) => Effect.Effect<\n  {\n    readonly handle: ChildProcessHandle\n    readonly activate: Effect.Effect<void, PlatformError.PlatformError, Scope.Scope>\n    readonly settled: Effect.Effect<boolean>\n  },\n  PlatformError.PlatformError,\n  Scope.Scope\n>\n\n/**\n * Whether a spawner declares the platform lifecycle required for containment.\n *\n * Only a layer with a {@link Lifecycle} declares this contract. A kill deadline\n * alone does not verify cleanup. The permission decorator preserves the\n * declaration when it wraps a contained service. The marker interoperates\n * across the package's ESM and CommonJS projections.\n *\n * This is a trusted composition check: a caller-supplied lifecycle remains\n * responsible for implementing its contract.\n *\n * @category predicates\n * @since 1.0.0\n */\nexport const isContained = (spawner: ChildProcessSpawner[\"Service\"]): boolean => Containment.isContained(spawner)\n\n/**\n * Supplies a command's default termination signal and escalation deadline.\n *\n * Both legs of a pipeline get the same policy \u2014 a pipeline is one action's\n * process tree and a surviving leg is as much of a leak as a surviving\n * child. Explicit `killSignal` and `forceKillAfter` values are preserved for\n * the host lifecycle to validate.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const withContainment = (\n  command: ChildProcess.Command,\n  options?: Options\n): ChildProcess.Command => {\n  const graceMs = options?.graceMs ?? defaultGraceMs\n  if (command._tag === \"PipedCommand\") {\n    return ChildProcess.pipeTo(\n      withContainment(command.left, options),\n      withContainment(command.right, options),\n      command.options\n    )\n  }\n  return ChildProcess.make(command.command, [...command.args], {\n    ...command.options,\n    killSignal: command.options.killSignal ?? \"SIGTERM\",\n    forceKillAfter: command.options.forceKillAfter ?? graceMs\n  })\n}\n\n/**\n * The process group a started child leads, or `null` when it shares the\n * host's or the platform has no POSIX process groups.\n *\n * A detached POSIX child leads a group whose id is its own pid. A child in\n * the host's group must not record that group as its own cleanup target.\n * Windows detachment creates an independent console, not a POSIX group;\n * Windows records therefore always carry `null`.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const groupOf = (command: ChildProcess.Command, pid: number, platform?: string): number | null => {\n  if (platform === \"win32\") return null\n  const options = command._tag === \"PipedCommand\" ? rightmost(command).options : command.options\n  return (options.detached ?? true) ? pid : null\n}\n\nconst rightmost = (command: ChildProcess.Command): ChildProcess.StandardCommand =>\n  command._tag === \"StandardCommand\" ? command : rightmost(command.right)\n\n/**\n * Decorates the process spawner in place with containment and bookkeeping.\n *\n * Compose it over a host spawner layer with `Layer.provide`. It provides the\n * tag it also requires. Compose the permission decorator over this layer to\n * authorize the caller's whole pipeline before its per-process expansion. A\n * lifecycle may use different commands during preparation; a decorator below\n * containment sees those platform commands instead of the caller's command.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (\n  options?: Options,\n  lifecycle?: Lifecycle\n): Layer.Layer<ChildProcessSpawner, never, ChildProcessSpawner | ProcessLedger.ProcessLedger> =>\n  Layer.effect(\n    ChildProcessSpawner,\n    Effect.gen(function*() {\n      const spawner = yield* ChildProcessSpawner\n      const ledger = yield* ProcessLedger.ProcessLedger\n      const service = makeSpawner(\n        (command) =>\n          Effect.uninterruptibleMask((restore) =>\n            Effect.gen(function*() {\n              // A failed startup must clean up even when its caller catches the\n              // error and keeps the outer scope open. One child scope contains\n              // the entire pipeline, so failure of a later leg also closes all\n              // earlier legs. Successful spawns retain it until their caller closes.\n              const processScope = yield* Scope.fork(yield* Scope.Scope)\n              return yield* restore(\n                Pipeline.spawn(\n                  command,\n                  Effect.fn(\"ContainedSpawner.spawn\")(function*(command) {\n                    // The release finalizer is registered BEFORE the spawn, so scope\n                    // closure runs it AFTER the spawn's own kill finalizer: finalizers\n                    // run last-registered-first, and a ledger that announced an exit\n                    // while the process was still being signalled would be telling the\n                    // next incarnation to stop looking for something still alive. The\n                    // slot is empty until the record exists, which is also what makes a\n                    // spawn that never got recorded a no-op to release.\n                    const slot: { current?: ProcessLedger.ProcessRecord; settled: Effect.Effect<boolean> } = {\n                      settled: Effect.succeed(true)\n                    }\n                    yield* Effect.addFinalizer(() =>\n                      Effect.gen(function*() {\n                        if (slot.current === undefined) return\n                        if (yield* slot.settled) return yield* releaseQuietly(ledger, slot.current)\n                        yield* Effect.logWarning(\n                          `process cleanup could not verify ${slot.current.pid}; retaining its ledger record`\n                        )\n                      })\n                    )\n                    const contained = withContainment(command, options) as ChildProcess.StandardCommand\n                    const watched = lifecycle === undefined ? undefined : yield* lifecycle(contained, spawner.spawn)\n                    const handle = watched?.handle ?? (yield* spawner.spawn(contained))\n                    slot.settled = watched?.settled ?? slot.settled\n                    const pid = handle.pid as number\n                    slot.current = yield* ledger.record({\n                      pid,\n                      pgid: groupOf(command, pid, options?.platform),\n                      commandDigest: CommandLine.executable(command)\n                    }).pipe(\n                      // A spawn whose record did not commit is precisely the child this\n                      // module exists to make discoverable, so it is not started: the\n                      // process is signalled and the caller is told, rather than left\n                      // running with nothing durable naming it.\n                      Effect.tapCause(() => Effect.ignore(handle.kill())),\n                      Effect.mapError(unrecorded)\n                    )\n                    if (watched !== undefined) yield* watched.activate\n                    return handle\n                  })\n                ).pipe(Scope.provide(processScope))\n              ).pipe(\n                Effect.onError((cause) => Scope.close(processScope, Exit.failCause(cause)))\n              )\n            })\n          )\n      )\n      return lifecycle === undefined ? service : Containment.mark(service)\n    })\n  )\n\n/** The spawn failure a caller sees when the ledger could not record a child. */\nconst unrecorded = (cause: unknown): PlatformError.PlatformError =>\n  PlatformError.systemError({\n    _tag: \"Unknown\",\n    module: \"ChildProcess\",\n    method: \"spawn\",\n    description: \"the process ledger could not record this spawn durably\",\n    cause\n  })\n\n/**\n * Retires a record on scope close, retrying the durable write.\n *\n * A finalizer has nowhere to report a failure, so the retry is the report: an\n * exit that never commits leaves the record inherited, and the next\n * incarnation's reaper finds a pid that is already gone and retires it then.\n * That is the safe direction, and the reason this is the ONE place a ledger\n * failure is logged rather than propagated.\n */\nconst releaseQuietly = (\n  ledger: ProcessLedger.Service,\n  record: ProcessLedger.ProcessRecord\n): Effect.Effect<void> =>\n  ledger.release(record).pipe(\n    Effect.retry(Schedule.recurs(2)),\n    Effect.catch((error) =>\n      Effect.logWarning(`process ledger could not retire ${record.pid}; leaving it for the reaper`, error)\n    )\n  )\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0BA,aAAwB;AACxB,WAAsB;AACtB,YAAuB;AACvB,oBAA+B;AAC/B,eAA0B;AAC1B,YAAuB;AACvB,mBAA8B;AAC9B,iCAIO;AACP,kBAA6B;AAC7B,kBAA6B;AAC7B,eAA0B;AAC1B,oBAA+B;AAQxB,MAAM,iBAAiB;AAqEvB,MAAM,cAAc,CAAC,YAAqD,YAAY,YAAY,OAAO;AAazG,MAAM,kBAAkB,CAC7B,SACA,YACyB;AACzB,QAAM,UAAU,SAAS,WAAW;AACpC,MAAI,QAAQ,SAAS,gBAAgB;AACnC,WAAO,aAAa;AAAA,MAClB,gBAAgB,QAAQ,MAAM,OAAO;AAAA,MACrC,gBAAgB,QAAQ,OAAO,OAAO;AAAA,MACtC,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,aAAa,KAAK,QAAQ,SAAS,CAAC,GAAG,QAAQ,IAAI,GAAG;AAAA,IAC3D,GAAG,QAAQ;AAAA,IACX,YAAY,QAAQ,QAAQ,cAAc;AAAA,IAC1C,gBAAgB,QAAQ,QAAQ,kBAAkB;AAAA,EACpD,CAAC;AACH;AAcO,MAAM,UAAU,CAAC,SAA+B,KAAa,aAAqC;AACvG,MAAI,aAAa,QAAS,QAAO;AACjC,QAAM,UAAU,QAAQ,SAAS,iBAAiB,UAAU,OAAO,EAAE,UAAU,QAAQ;AACvF,SAAQ,QAAQ,YAAY,OAAQ,MAAM;AAC5C;AAEA,MAAM,YAAY,CAAC,YACjB,QAAQ,SAAS,oBAAoB,UAAU,UAAU,QAAQ,KAAK;AAcjE,MAAM,QAAQ,CACnB,SACA,cAEA,MAAM;AAAA,EACJ;AAAA,EACA,OAAO,IAAI,aAAY;AACrB,UAAM,UAAU,OAAO;AACvB,UAAM,SAAS,OAAO,cAAc;AACpC,UAAM,cAAU,2BAAAA;AAAA,MACd,CAAC,YACC,OAAO;AAAA,QAAoB,CAAC,YAC1B,OAAO,IAAI,aAAY;AAKrB,gBAAM,eAAe,OAAO,MAAM,KAAK,OAAO,MAAM,KAAK;AACzD,iBAAO,OAAO;AAAA,YACZ,SAAS;AAAA,cACP;AAAA,cACA,OAAO,GAAG,wBAAwB,EAAE,WAAUC,UAAS;AAQrD,sBAAM,OAAmF;AAAA,kBACvF,SAAS,OAAO,QAAQ,IAAI;AAAA,gBAC9B;AACA,uBAAO,OAAO;AAAA,kBAAa,MACzB,OAAO,IAAI,aAAY;AACrB,wBAAI,KAAK,YAAY,OAAW;AAChC,wBAAI,OAAO,KAAK,QAAS,QAAO,OAAO,eAAe,QAAQ,KAAK,OAAO;AAC1E,2BAAO,OAAO;AAAA,sBACZ,oCAAoC,KAAK,QAAQ,GAAG;AAAA,oBACtD;AAAA,kBACF,CAAC;AAAA,gBACH;AACA,sBAAM,YAAY,gBAAgBA,UAAS,OAAO;AAClD,sBAAM,UAAU,cAAc,SAAY,SAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC/F,sBAAM,SAAS,SAAS,WAAW,OAAO,QAAQ,MAAM,SAAS;AACjE,qBAAK,UAAU,SAAS,WAAW,KAAK;AACxC,sBAAM,MAAM,OAAO;AACnB,qBAAK,UAAU,OAAO,OAAO,OAAO;AAAA,kBAClC;AAAA,kBACA,MAAM,QAAQA,UAAS,KAAK,SAAS,QAAQ;AAAA,kBAC7C,eAAe,YAAY,WAAWA,QAAO;AAAA,gBAC/C,CAAC,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,kBAKD,OAAO,SAAS,MAAM,OAAO,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,kBAClD,OAAO,SAAS,UAAU;AAAA,gBAC5B;AACA,oBAAI,YAAY,OAAW,QAAO,QAAQ;AAC1C,uBAAO;AAAA,cACT,CAAC;AAAA,YACH,EAAE,KAAK,MAAM,QAAQ,YAAY,CAAC;AAAA,UACpC,EAAE;AAAA,YACA,OAAO,QAAQ,CAAC,UAAU,MAAM,MAAM,cAAc,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,UAC5E;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACJ;AACA,WAAO,cAAc,SAAY,UAAU,YAAY,KAAK,OAAO;AAAA,EACrE,CAAC;AACH;AAGF,MAAM,aAAa,CAAC,UAClB,cAAc,YAAY;AAAA,EACxB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,aAAa;AAAA,EACb;AACF,CAAC;AAWH,MAAM,iBAAiB,CACrB,QACA,WAEA,OAAO,QAAQ,MAAM,EAAE;AAAA,EACrB,OAAO,MAAM,SAAS,OAAO,CAAC,CAAC;AAAA,EAC/B,OAAO;AAAA,IAAM,CAAC,UACZ,OAAO,WAAW,mCAAmC,OAAO,GAAG,+BAA+B,KAAK;AAAA,EACrG;AACF;",
+  "sourcesContent": ["/**\n * Process containment: prepared ownership, bounded cleanup and durable records.\n *\n * A host supplies a {@link Lifecycle} that owns launch and cleanup independently\n * of the command's exit status. The lifecycle first prepares a process identity;\n * this decorator commits that identity to {@link ProcessLedger.ProcessLedger}\n * before activating the caller's command. Failed or interrupted startup closes\n * its child scope immediately, including any earlier legs of a partial pipeline.\n *\n * Each command receives default termination and escalation options. The host\n * lifecycle validates that policy and verifies cleanup before the decorator\n * retires its record. Unverifiable cleanup retains the record for recovery;\n * a host that dies also leaves its committed records discoverable by the next\n * incarnation's reaper (`ProcessReaper` in `@smthrs/platform-node`).\n *\n * Every pipeline leg is prepared and recorded separately, including legs whose\n * pid the aggregate handle does not expose. The module remains platform-neutral.\n * A layer without a lifecycle provides only deadline defaults and bookkeeping;\n * it does not declare the verified-cleanup contract read by {@link isContained}.\n *\n * Governing design:\n * `docs/specs/Concepts/Host Adapters.md`.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport * as Layer from \"effect/Layer\"\nimport * as PlatformError from \"effect/PlatformError\"\nimport * as ChildProcess from \"effect/process/ChildProcess\"\nimport { type ChildProcessHandle, ChildProcessSpawner, make as makeSpawner } from \"effect/process/ChildProcessSpawner\"\nimport * as Schedule from \"effect/Schedule\"\nimport * as Scope from \"effect/Scope\"\nimport * as CommandLine from \"./CommandLine.ts\"\nimport * as Containment from \"./internal/Containment.ts\"\nimport * as Pipeline from \"./internal/Pipeline.ts\"\nimport * as ProcessLedger from \"./ProcessLedger.ts\"\n\n/**\n * How long a contained child may take to honour `SIGTERM`.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport const defaultGraceMs = 2000\n\n/**\n * Containment configuration.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport interface Options {\n  /**\n   * Milliseconds between the `SIGTERM` that asks a child to stop and the\n   * `SIGKILL` that makes it. Default {@link defaultGraceMs}.\n   */\n  readonly graceMs?: number | undefined\n  /**\n   * The platform the host spawner runs on, as `process.platform` spells it.\n   * Windows records no POSIX process group, including for detached children.\n   * On POSIX, detachment determines whether the child leads its own group.\n   * Default `\"linux\"`; host bundles pass their actual platform.\n   */\n  readonly platform?: string | undefined\n}\n\n/**\n * A platform's preparation, activation, and cleanup of a contained process.\n *\n * Preparation receives the underlying spawner and must own cleanup before it\n * can fail or be interrupted. It returns the process identity to record and an\n * idempotent `activate` effect. The decorator runs activation only after that\n * identity commits to the ledger. A platform can therefore prepare an owner\n * without executing the caller's command before it is durably discoverable.\n *\n * Failed startup closes its own scope immediately. A successful startup keeps\n * that scope attached to the caller's scope. `settled` must stay false on failed\n * or unverifiable cleanup; only verified cleanup permits ledger retirement.\n * The wrapped handle applies the same policy to an explicit `kill`.\n *\n * @category models\n * @since 1.0.0\n */\nexport type Lifecycle = (\n  command: ChildProcess.StandardCommand,\n  spawn: (\n    command: ChildProcess.StandardCommand\n  ) => Effect.Effect<ChildProcessHandle, PlatformError.PlatformError, Scope.Scope>\n) => Effect.Effect<\n  {\n    readonly handle: ChildProcessHandle\n    readonly activate: Effect.Effect<void, PlatformError.PlatformError, Scope.Scope>\n    readonly settled: Effect.Effect<boolean>\n  },\n  PlatformError.PlatformError,\n  Scope.Scope\n>\n\n/**\n * Whether a spawner declares the platform lifecycle required for containment.\n *\n * Only a layer with a {@link Lifecycle} declares this contract. A kill deadline\n * alone does not verify cleanup. The permission decorator preserves the\n * declaration when it wraps a contained service. The marker interoperates\n * across the package's ESM and CommonJS projections.\n *\n * This is a trusted composition check: a caller-supplied lifecycle remains\n * responsible for implementing its contract.\n *\n * @category predicates\n * @since 1.0.0\n */\nexport const isContained = (spawner: ChildProcessSpawner[\"Service\"]): boolean => Containment.isContained(spawner)\n\n/**\n * Supplies a command's default termination signal and escalation deadline.\n *\n * Both legs of a pipeline get the same policy \u2014 a pipeline is one action's\n * process tree and a surviving leg is as much of a leak as a surviving\n * child. Explicit `killSignal` and `forceKillAfter` values are preserved for\n * the host lifecycle to validate.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const withContainment = (\n  command: ChildProcess.Command,\n  options?: Options\n): ChildProcess.Command => {\n  const graceMs = options?.graceMs ?? defaultGraceMs\n  if (command._tag === \"PipedCommand\") {\n    return ChildProcess.pipeTo(\n      withContainment(command.left, options),\n      withContainment(command.right, options),\n      command.options\n    )\n  }\n  return ChildProcess.make(command.command, [...command.args], {\n    ...command.options,\n    killSignal: command.options.killSignal ?? \"SIGTERM\",\n    forceKillAfter: command.options.forceKillAfter ?? graceMs\n  })\n}\n\n/**\n * The process group a started child leads, or `null` when it shares the\n * host's or the platform has no POSIX process groups.\n *\n * A detached POSIX child leads a group whose id is its own pid. A child in\n * the host's group must not record that group as its own cleanup target.\n * Windows detachment creates an independent console, not a POSIX group;\n * Windows records therefore always carry `null`.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const groupOf = (command: ChildProcess.Command, pid: number, platform?: string): number | null => {\n  if (platform === \"win32\") return null\n  const options = command._tag === \"PipedCommand\" ? rightmost(command).options : command.options\n  return (options.detached ?? true) ? pid : null\n}\n\nconst rightmost = (command: ChildProcess.Command): ChildProcess.StandardCommand =>\n  command._tag === \"StandardCommand\" ? command : rightmost(command.right)\n\n/**\n * Decorates the process spawner in place with containment and bookkeeping.\n *\n * Compose it over a host spawner layer with `Layer.provide`. It provides the\n * tag it also requires. Compose the permission decorator over this layer to\n * authorize the caller's whole pipeline before its per-process expansion. A\n * lifecycle may use different commands during preparation; a decorator below\n * containment sees those platform commands instead of the caller's command.\n *\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (\n  options?: Options,\n  lifecycle?: Lifecycle\n): Layer.Layer<ChildProcessSpawner, never, ChildProcessSpawner | ProcessLedger.ProcessLedger> =>\n  Layer.effect(\n    ChildProcessSpawner,\n    Effect.gen(function*() {\n      const spawner = yield* ChildProcessSpawner\n      const ledger = yield* ProcessLedger.ProcessLedger\n      const service = makeSpawner(\n        (command) =>\n          Effect.uninterruptibleMask((restore) =>\n            Effect.gen(function*() {\n              // A failed startup must clean up even when its caller catches the\n              // error and keeps the outer scope open. One child scope contains\n              // the entire pipeline, so failure of a later leg also closes all\n              // earlier legs. Successful spawns retain it until their caller closes.\n              const processScope = yield* Scope.fork(yield* Scope.Scope)\n              return yield* restore(\n                Pipeline.spawn(\n                  command,\n                  Effect.fn(\"ContainedSpawner.spawn\")(function*(command) {\n                    // The release finalizer is registered BEFORE the spawn, so scope\n                    // closure runs it AFTER the spawn's own kill finalizer: finalizers\n                    // run last-registered-first, and a ledger that announced an exit\n                    // while the process was still being signalled would be telling the\n                    // next incarnation to stop looking for something still alive. The\n                    // slot is empty until the record exists, which is also what makes a\n                    // spawn that never got recorded a no-op to release.\n                    const slot: { current?: ProcessLedger.ProcessRecord; settled: Effect.Effect<boolean> } = {\n                      settled: Effect.succeed(true)\n                    }\n                    yield* Effect.addFinalizer(() =>\n                      Effect.gen(function*() {\n                        if (slot.current === undefined) return\n                        if (yield* slot.settled) return yield* releaseQuietly(ledger, slot.current)\n                        yield* Effect.logWarning(\n                          `process cleanup could not verify ${slot.current.pid}; retaining its ledger record`\n                        )\n                      })\n                    )\n                    const contained = withContainment(command, options) as ChildProcess.StandardCommand\n                    const watched = lifecycle === undefined ? undefined : yield* lifecycle(contained, spawner.spawn)\n                    const handle = watched?.handle ?? (yield* spawner.spawn(contained))\n                    slot.settled = watched?.settled ?? slot.settled\n                    const pid = handle.pid as number\n                    slot.current = yield* ledger.record({\n                      pid,\n                      pgid: groupOf(command, pid, options?.platform),\n                      commandDigest: CommandLine.executable(command)\n                    }).pipe(\n                      // A spawn whose record did not commit is precisely the child this\n                      // module exists to make discoverable, so it is not started: the\n                      // process is signalled and the caller is told, rather than left\n                      // running with nothing durable naming it.\n                      Effect.tapCause(() => Effect.ignore(handle.kill())),\n                      Effect.mapError(unrecorded)\n                    )\n                    if (watched !== undefined) yield* watched.activate\n                    return handle\n                  })\n                ).pipe(Scope.provide(processScope))\n              ).pipe(\n                Effect.onError((cause) => Scope.close(processScope, Exit.failCause(cause)))\n              )\n            })\n          )\n      )\n      return lifecycle === undefined ? service : Containment.mark(service)\n    })\n  )\n\n/** The spawn failure a caller sees when the ledger could not record a child. */\nconst unrecorded = (cause: unknown): PlatformError.PlatformError =>\n  PlatformError.systemError({\n    _tag: \"Unknown\",\n    module: \"ChildProcess\",\n    method: \"spawn\",\n    description: \"the process ledger could not record this spawn durably\",\n    cause\n  })\n\n/**\n * Retires a record on scope close, retrying the durable write.\n *\n * A finalizer has nowhere to report a failure, so the retry is the report: an\n * exit that never commits leaves the record inherited, and the next\n * incarnation's reaper finds a pid that is already gone and retires it then.\n * That is the safe direction, and the reason this is the ONE place a ledger\n * failure is logged rather than propagated.\n */\nconst releaseQuietly = (\n  ledger: ProcessLedger.Service,\n  record: ProcessLedger.ProcessRecord\n): Effect.Effect<void> =>\n  ledger.release(record).pipe(\n    Effect.retry(Schedule.recurs(2)),\n    Effect.catch((error) =>\n      Effect.logWarning(`process ledger could not retire ${record.pid}; leaving it for the reaper`, error)\n    )\n  )\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0BA,aAAwB;AACxB,WAAsB;AACtB,YAAuB;AACvB,oBAA+B;AAC/B,mBAA8B;AAC9B,iCAAkF;AAClF,eAA0B;AAC1B,YAAuB;AACvB,kBAA6B;AAC7B,kBAA6B;AAC7B,eAA0B;AAC1B,oBAA+B;AAQxB,MAAM,iBAAiB;AAqEvB,MAAM,cAAc,CAAC,YAAqD,YAAY,YAAY,OAAO;AAazG,MAAM,kBAAkB,CAC7B,SACA,YACyB;AACzB,QAAM,UAAU,SAAS,WAAW;AACpC,MAAI,QAAQ,SAAS,gBAAgB;AACnC,WAAO,aAAa;AAAA,MAClB,gBAAgB,QAAQ,MAAM,OAAO;AAAA,MACrC,gBAAgB,QAAQ,OAAO,OAAO;AAAA,MACtC,QAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO,aAAa,KAAK,QAAQ,SAAS,CAAC,GAAG,QAAQ,IAAI,GAAG;AAAA,IAC3D,GAAG,QAAQ;AAAA,IACX,YAAY,QAAQ,QAAQ,cAAc;AAAA,IAC1C,gBAAgB,QAAQ,QAAQ,kBAAkB;AAAA,EACpD,CAAC;AACH;AAcO,MAAM,UAAU,CAAC,SAA+B,KAAa,aAAqC;AACvG,MAAI,aAAa,QAAS,QAAO;AACjC,QAAM,UAAU,QAAQ,SAAS,iBAAiB,UAAU,OAAO,EAAE,UAAU,QAAQ;AACvF,SAAQ,QAAQ,YAAY,OAAQ,MAAM;AAC5C;AAEA,MAAM,YAAY,CAAC,YACjB,QAAQ,SAAS,oBAAoB,UAAU,UAAU,QAAQ,KAAK;AAcjE,MAAM,QAAQ,CACnB,SACA,cAEA,MAAM;AAAA,EACJ;AAAA,EACA,OAAO,IAAI,aAAY;AACrB,UAAM,UAAU,OAAO;AACvB,UAAM,SAAS,OAAO,cAAc;AACpC,UAAM,cAAU,2BAAAA;AAAA,MACd,CAAC,YACC,OAAO;AAAA,QAAoB,CAAC,YAC1B,OAAO,IAAI,aAAY;AAKrB,gBAAM,eAAe,OAAO,MAAM,KAAK,OAAO,MAAM,KAAK;AACzD,iBAAO,OAAO;AAAA,YACZ,SAAS;AAAA,cACP;AAAA,cACA,OAAO,GAAG,wBAAwB,EAAE,WAAUC,UAAS;AAQrD,sBAAM,OAAmF;AAAA,kBACvF,SAAS,OAAO,QAAQ,IAAI;AAAA,gBAC9B;AACA,uBAAO,OAAO;AAAA,kBAAa,MACzB,OAAO,IAAI,aAAY;AACrB,wBAAI,KAAK,YAAY,OAAW;AAChC,wBAAI,OAAO,KAAK,QAAS,QAAO,OAAO,eAAe,QAAQ,KAAK,OAAO;AAC1E,2BAAO,OAAO;AAAA,sBACZ,oCAAoC,KAAK,QAAQ,GAAG;AAAA,oBACtD;AAAA,kBACF,CAAC;AAAA,gBACH;AACA,sBAAM,YAAY,gBAAgBA,UAAS,OAAO;AAClD,sBAAM,UAAU,cAAc,SAAY,SAAY,OAAO,UAAU,WAAW,QAAQ,KAAK;AAC/F,sBAAM,SAAS,SAAS,WAAW,OAAO,QAAQ,MAAM,SAAS;AACjE,qBAAK,UAAU,SAAS,WAAW,KAAK;AACxC,sBAAM,MAAM,OAAO;AACnB,qBAAK,UAAU,OAAO,OAAO,OAAO;AAAA,kBAClC;AAAA,kBACA,MAAM,QAAQA,UAAS,KAAK,SAAS,QAAQ;AAAA,kBAC7C,eAAe,YAAY,WAAWA,QAAO;AAAA,gBAC/C,CAAC,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,kBAKD,OAAO,SAAS,MAAM,OAAO,OAAO,OAAO,KAAK,CAAC,CAAC;AAAA,kBAClD,OAAO,SAAS,UAAU;AAAA,gBAC5B;AACA,oBAAI,YAAY,OAAW,QAAO,QAAQ;AAC1C,uBAAO;AAAA,cACT,CAAC;AAAA,YACH,EAAE,KAAK,MAAM,QAAQ,YAAY,CAAC;AAAA,UACpC,EAAE;AAAA,YACA,OAAO,QAAQ,CAAC,UAAU,MAAM,MAAM,cAAc,KAAK,UAAU,KAAK,CAAC,CAAC;AAAA,UAC5E;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACJ;AACA,WAAO,cAAc,SAAY,UAAU,YAAY,KAAK,OAAO;AAAA,EACrE,CAAC;AACH;AAGF,MAAM,aAAa,CAAC,UAClB,cAAc,YAAY;AAAA,EACxB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,aAAa;AAAA,EACb;AACF,CAAC;AAWH,MAAM,iBAAiB,CACrB,QACA,WAEA,OAAO,QAAQ,MAAM,EAAE;AAAA,EACrB,OAAO,MAAM,SAAS,OAAO,CAAC,CAAC;AAAA,EAC/B,OAAO;AAAA,IAAM,CAAC,UACZ,OAAO,WAAW,mCAAmC,OAAO,GAAG,+BAA+B,KAAK;AAAA,EACrG;AACF;",
   "names": ["makeSpawner", "command"]
 }

package/dist/cjs/FileSystem.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileSystem.d.ts","sourceRoot":"","sources":["../../src/FileSystem.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EACL,MAAM,EAEN,UAAU,IAAI,gBAAgB,EAC9B,KAAK,EAEL,IAAI,IAAI,UAAU,EAClB,aAAa,EACb,MAAM,EACN,MAAM,EAGP,MAAM,QAAQ,CAAA;AACf,OAAO,KAAK,KAAK,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,cAAc,sBAAsB,CAAA;AAEpC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,kBAAkB,CAAA;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,eAAgD,CAAA;AAEnF;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3C;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACtE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,GAClH,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACjE,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CACxF,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAChH,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAC5E,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACvE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAClH,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3F,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACpE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EACb;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAC7F,SAAS,CAAA;CACd,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EACb;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAC7F,SAAS,CAAA;CACd,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;CAAE,CAAC,CAAA;AAExG;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,YAAY,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9G;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAEpH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;KAC9E,CAAC,CAAA;CACH;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;AAEjF;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,CAAC,IAAI,MAAM,aAAa,GAAG,CACnC,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAA;KAAE,CAAC,KACvD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC;CAClE,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IACjD,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,GAAG,SAAS,CAAA;IAC1G,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,aAAa,EACxC,OAAO,EAAE,CAAC,KACP,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;IAChE;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,UAAU,GAAG,SAAS,CAAA;IAC3D,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;IACvF;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3C;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,UAAU,GAAG;IAC/D,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,gBAAgB,CAAA;CACpD,CAAA;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAC/B,YAAY,gBAAgB,CAAC,UAAU,EACvC,QAAQ,gBAAgB,KACvB,oBAAuF,CAAA;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,wHAI9B,CAAA;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;;;;;AAEjE;;;;;;;;;;GAUG;AACH,qBAAa,eAAgB,SAAQ,oBAGnC;IACA,SAAkB,IAAI,qBAAoB;CAC3C;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,GACjC,YAAY,gBAAgB,CAAC,UAAU,KACtC,oBAuCF,CAAA;AA8ED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,gBAAgB,CAAC,UAAU,KAAG,OACS,CAAA;AAEhF;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,gBAAgB,CAAC,UAAU,KAAG,MAAM,GAAG,SACY,CAAA;AAE5F;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,CACkC,CAAA;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,QAAQ,GACnB,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CA6FtF,CAAA;AAwCJ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,GAC5B,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,UAAU,CAAC,IAAI,EACrB,eAAe,MAAM,EACrB,OAAO,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CA6CnD,CAAA;AAoID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,gBAAgB,CAAC,UAAU,EAC3B,aAAa,CAAC,aAAa,EAC3B,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,GAAG,SAAS,GAAG,UAAU,CAkvBvE,CAAA"}
+{"version":3,"file":"FileSystem.d.ts","sourceRoot":"","sources":["../../src/FileSystem.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EACL,MAAM,EACN,UAAU,IAAI,gBAAgB,EAC9B,KAAK,EAEL,IAAI,IAAI,UAAU,EAClB,aAAa,EACb,MAAM,EACN,MAAM,EAGP,MAAM,QAAQ,CAAA;AAEf,OAAO,KAAK,KAAK,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE1C,cAAc,sBAAsB,CAAA;AAEpC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,kBAAkB,CAAA;AAE3D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,eAAgD,CAAA;AAEnF;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3C;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACtE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC,GAClH,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CACjE,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CACxF,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAChH,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAC5E,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACxE,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACvE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAClH,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3F,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACpE,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EACb;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAC7F,SAAS,CAAA;CACd,CAAC,GACA,CAAC,UAAU,GAAG;IACd,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EACb;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,QAAQ,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAC7F,SAAS,CAAA;CACd,CAAC,GACA,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAA;CAAE,CAAC,CAAA;AAExG;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,YAAY,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9G;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAA;AAEpH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;KAC9E,CAAC,CAAA;CACH;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;IAC5B,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;CACpC;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;AAEjF;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,CAAC,IAAI,MAAM,aAAa,GAAG,CACnC,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAA;KAAE,CAAC,KACvD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC;CAClE,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IACjD,qFAAqF;IACrF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,GAAG,SAAS,CAAA;IAC1G,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,aAAa,EACxC,OAAO,EAAE,CAAC,KACP,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAA;IAChE;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,UAAU,GAAG,SAAS,CAAA;IAC3D,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;IACvF;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC3C;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,UAAU,GAAG;IAC/D,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,gBAAgB,CAAA;CACpD,CAAA;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAC/B,YAAY,gBAAgB,CAAC,UAAU,EACvC,QAAQ,gBAAgB,KACvB,oBAAuF,CAAA;AAE1F;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,wHAI9B,CAAA;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;;;;;AAEjE;;;;;;;;;;GAUG;AACH,qBAAa,eAAgB,SAAQ,oBAGnC;IACA,SAAkB,IAAI,qBAAoB;CAC3C;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,GACjC,YAAY,gBAAgB,CAAC,UAAU,KACtC,oBAuCF,CAAA;AA8ED;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,gBAAgB,CAAC,UAAU,KAAG,OACS,CAAA;AAEhF;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,GAAI,YAAY,gBAAgB,CAAC,UAAU,KAAG,MAAM,GAAG,SACY,CAAA;AAE5F;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,aAAa,CACkC,CAAA;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,QAAQ,GACnB,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,CA6FtF,CAAA;AAwCJ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,GAC5B,YAAY,gBAAgB,CAAC,UAAU,EACvC,MAAM,UAAU,CAAC,IAAI,EACrB,eAAe,MAAM,EACrB,OAAO,MAAM,KACZ,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CA6CnD,CAAA;AAoID;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,gBAAgB,CAAC,UAAU,EAC3B,aAAa,CAAC,aAAa,EAC3B,gBAAgB,CAAC,UAAU,GAAG,UAAU,CAAC,IAAI,GAAG,SAAS,GAAG,UAAU,CAkvBvE,CAAA"}

package/dist/cjs/FileSystem.js

@@ -45,6 +45,7 @@ __export(FileSystem_exports, {
 module.exports = __toCommonJS(FileSystem_exports);
 var import_Permission = require("@smthrs/capability/Permission");
 var import_effect = require("effect");
+var import_encoding = require("effect/encoding");
 var Batch = __toESM(require("./FileSystemBatch.js"), 1);
 var import_GrantStore = require("./GrantStore.js");
 var import_makeCapability = require("./internal/makeCapability.js");
@@ -90,7 +91,7 @@ const withIsolatedFileSystem = (fileSystem) => {
       remove: (request) => fileSystem.remove(request.path, request.options),
       rename: (request) => fileSystem.rename(request.from, request.to),
       stat: (request) => fileSystem.stat(request.path),
-      writeFile: (request) => import_effect.Encoding.decodeBase64(request.data).pipe(
+      writeFile: (request) => import_encoding.Base64.decode(request.data).pipe(
         import_effect.Effect.fromResult,
         import_effect.Effect.orDie,
         import_effect.Effect.flatMap((data) => fileSystem.writeFile(request.path, data, request.options))
@@ -200,7 +201,7 @@ const confined = (fileSystem, root) => import_effect.Effect.gen(function* () {
         return run({
           operation: "writeFile",
           path: normalize(value),
-          data: import_effect.Encoding.encodeBase64(data),
+          data: import_encoding.Base64.encode(data),
           options
         });
       }
@@ -732,7 +733,7 @@ const layer = import_effect.Layer.effect(
           return atomicOne("fs:write", value, "writeFile", {
             operation: "writeFile",
             path: normalize(value),
-            data: import_effect.Encoding.encodeBase64(bytes),
+            data: import_encoding.Base64.encode(bytes),
             options: captured
           });
         })