@smthrs/platform-node 1.0.0-rc.4 → 1.0.0-rc.6

package/README.md

@@ -51,8 +51,8 @@ A missing helper refuses confined operations, including MCP flow discovery.
 ```ts
 import { NodeHost } from "@smthrs/platform-node"
 import { Effect } from "effect"
-import * as ChildProcess from "effect/unstable/process/ChildProcess"
-import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner"
+import * as ChildProcess from "effect/process/ChildProcess"
+import { ChildProcessSpawner } from "effect/process/ChildProcessSpawner"
 
 const program = Effect.gen(function*() {
   const spawner = yield* ChildProcessSpawner

package/bin/linux-x64/smithers-jj-export

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/bin/linux-x64/smithers-jj-export
-size: 53554360 bytes
-sha256: 082aad5f9ca4c16a4bf1ad78225e1c0e1677141913c3a5601c586f8a8a5fdb08
+size: 53557016 bytes
+sha256: bf2b35d0a9b35df1bd5dd504c25c655988e4a5a07cbda16f221c812e344dac06

package/dist/cjs/EgressHttpClient.d.ts

@@ -29,10 +29,10 @@
 import type * as Undici from "../vendor/cjs/node/Undici.js";
 import { GrantStore } from "@smthrs/kernel/GrantStore";
 import * as Effect from "effect/Effect";
+import { HttpClient } from "effect/http/HttpClient";
 import * as Layer from "effect/Layer";
 import * as Schema from "effect/Schema";
 import * as Scope from "effect/Scope";
-import { HttpClient } from "effect/unstable/http/HttpClient";
 declare const EgressAddressError_base: Schema.Class<EgressAddressError, Schema.TaggedStruct<"@smthrs/platform-node/EgressAddressError", {
     readonly code: Schema.Literal<"no_approved_address">;
     readonly message: Schema.String;

package/dist/cjs/EgressHttpClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EgressHttpClient.d.ts","sourceRoot":"","sources":["../../src/EgressHttpClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,KAAK,MAAM,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAGtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;;;;;AAM5D;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,uBAGvC;IACC,SAAkB,IAAI,wBAAuB;CAC9C;AAoCD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,GACrB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAsBlD,CAAA;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,KAAK,GAChB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,KAAK,CAAC,KAAK,CAAC,UAAU,CAqHtB,CAAA;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAC7D,WAAU,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAkB,KAC3E,MAAM,CAAC,MAAM,CACd;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;CAC5C,EACD,KAAK,EACL,KAAK,CAAC,KAAK,CAqBT,CAAA;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;qBAlCrE,UAAU;sBACT,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;mCAyC3C,CAAA"}
+{"version":3,"file":"EgressHttpClient.d.ts","sourceRoot":"","sources":["../../src/EgressHttpClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,KAAK,MAAM,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAGtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAInD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;;;;;AAIrC;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,uBAGvC;IACC,SAAkB,IAAI,wBAAuB;CAC9C;AAoCD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,GACrB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAsBlD,CAAA;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,KAAK,GAChB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,KAAK,CAAC,KAAK,CAAC,UAAU,CAqHtB,CAAA;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAC7D,WAAU,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAkB,KAC3E,MAAM,CAAC,MAAM,CACd;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;CAC5C,EACD,KAAK,EACL,KAAK,CAAC,KAAK,CAqBT,CAAA;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;qBAlCrE,UAAU;sBACT,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;mCAyC3C,CAAA"}

package/dist/cjs/EgressHttpClient.js

@@ -41,14 +41,14 @@ var KernelHttpClient = __toESM(require("@smthrs/kernel/HttpClient"), 1);
 var import_HttpClient = require("@smthrs/kernel/HttpClient");
 var Effect = __toESM(require("effect/Effect"), 1);
 var Exit = __toESM(require("effect/Exit"), 1);
+var import_HttpClient2 = require("effect/http/HttpClient");
+var EffectHttpClient = __toESM(require("effect/http/HttpClient"), 1);
+var HttpClientError = __toESM(require("effect/http/HttpClientError"), 1);
+var HttpClientRequest = __toESM(require("effect/http/HttpClientRequest"), 1);
 var Layer = __toESM(require("effect/Layer"), 1);
 var Schema = __toESM(require("effect/Schema"), 1);
 var Scope = __toESM(require("effect/Scope"), 1);
 var Semaphore = __toESM(require("effect/Semaphore"), 1);
-var import_HttpClient2 = require("effect/unstable/http/HttpClient");
-var EffectHttpClient = __toESM(require("effect/unstable/http/HttpClient"), 1);
-var HttpClientError = __toESM(require("effect/unstable/http/HttpClientError"), 1);
-var HttpClientRequest = __toESM(require("effect/unstable/http/HttpClientRequest"), 1);
 var import_node_net = require("node:net");
 class EgressAddressError extends Schema.TaggedError()(
   "@smthrs/platform-node/EgressAddressError",

package/dist/cjs/EgressHttpClient.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/EgressHttpClient.ts"],
-  "sourcesContent": ["/**\n * The outbound HTTP client a Node process should use, read off its environment.\n *\n * `@effect/platform-node` ships `NodeHttpClient.layerUndici`, and its\n * dispatcher is a bare Undici `Agent`. A bare `Agent` dials every origin\n * directly: it does not read `HTTP_PROXY`, `HTTPS_PROXY` or `NO_PROXY`, and\n * nothing at the call site says so. That is invisible on a developer machine\n * with open egress and fatal inside a sandbox whose egress is default-deny\n * behind a named proxy \u2014 the request leaves for the origin, the firewall drops\n * it, and the only symptom is a transport failure far from the composition\n * that chose the client.\n *\n * This module is the one place that decision is made. {@link layer} is the\n * client every Node host composition installs; it honours the proxy the\n * environment names. Requests without a web destination use a shared pool;\n * web requests receive a fresh pinned dispatcher.\n *\n * The rule for loopback is fixed here, not by the environment: `localhost`,\n * `127.0.0.1` and `[::1]` are always reached directly, even when the\n * environment names a proxy and no exclusion, and every other origin follows\n * `NO_PROXY`. A proxy is how a process leaves its machine, and\n * `--remote http://127.0.0.1:3000` is not leaving it. The exemption is those\n * three names and nothing wider: Undici matches `NO_PROXY` entries by name,\n * never by resolved address, so `127.0.0.2` or a hostname that resolves to\n * loopback is an origin like any other and goes through the proxy.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as NodeHttpClient from \"@effect/platform-node/NodeHttpClient\"\nimport type * as Undici from \"@effect/platform-node/Undici\"\nimport { GrantStore } from \"@smthrs/kernel/GrantStore\"\nimport * as KernelHttpClient from \"@smthrs/kernel/HttpClient\"\nimport { Destination, withDestinationPinning } from \"@smthrs/kernel/HttpClient\"\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport * as Scope from \"effect/Scope\"\nimport * as Semaphore from \"effect/Semaphore\"\nimport { HttpClient } from \"effect/unstable/http/HttpClient\"\nimport * as EffectHttpClient from \"effect/unstable/http/HttpClient\"\nimport * as HttpClientError from \"effect/unstable/http/HttpClientError\"\nimport * as HttpClientRequest from \"effect/unstable/http/HttpClientRequest\"\nimport { isIP } from \"node:net\"\n\n/**\n * A pinned connection asked for an address family none of the authorized\n * addresses has. It is the `cause` of the `TransportError` the request fails\n * with; `code` is always `no_approved_address`.\n *\n * @category errors\n * @since 1.0.0\n */\nexport class EgressAddressError extends Schema.TaggedError<EgressAddressError>()(\n  \"@smthrs/platform-node/EgressAddressError\",\n  { code: Schema.Literal(\"no_approved_address\"), message: Schema.String }\n) {\n  override readonly name = \"EgressAddressError\"\n}\n\n/**\n * The hosts a proxy is never for. A proxy is how a process leaves its machine;\n * these names are the machine itself. Matched by name, the way Undici matches\n * every `NO_PROXY` entry, so the list is exactly these three and not\n * `127.0.0.0/8`.\n */\nconst loopback = [\"localhost\", \"127.0.0.1\", \"::1\"] as const\n\n/**\n * The exclusion list to hand Undici, given the one the environment names.\n *\n * Undici proxies *every* origin when `NO_PROXY` is empty \u2014 `#shouldProxy`\n * returns early with \"Always proxy if NO_PROXY is not set or empty\" \u2014 so a host\n * that names a proxy to reach the internet would also send `smthrs --remote\n * http://127.0.0.1:3000` and a local Ollama at `http://localhost:11434` to it.\n * Nothing in this repository has ever needed `NO_PROXY=127.0.0.1`, because the\n * client these compositions used before ignored the proxy variables outright.\n * So loopback is always excluded, the way Go's `net/http.ProxyFromEnvironment`\n * excludes it, and the environment's own entries are kept beside it.\n *\n * `*` is returned untouched: Undici recognises the wildcard only as the entire\n * value, and it already means every origin is direct.\n */\nconst exclusions = (declared: string): string =>\n  declared === \"*\" ? declared : [declared, ...loopback].filter((entry) => entry !== \"\").join(\",\")\n\n// Split ESM bundles expose CommonJS Undici through default, without synthetic\n// named exports. Node and Bun also expose its constructors through default.\n// Its typings declare `default` as a namespace without them, and `bundler`\n// resolution reads that, so the value is typed as the module it carries.\nconst loadUndici = Effect.promise(\n  async () => (await import(\"undici/index.js\")).default as unknown as typeof Undici\n)\n\n/**\n * An Undici dispatcher that routes through the egress proxy the supplied\n * environment names, or a direct one when it names none.\n *\n * The proxy variables are read in the order Undici itself reads them,\n * lowercase first, and passed explicitly rather than left to\n * `EnvHttpProxyAgent`'s own ambient lookup: a host serving a guest's\n * environment is not the guest, and the pool has to follow the record it was\n * handed. Loopback is always direct; see {@link exclusions}. Each dispatcher is\n * acquired in the caller's scope and destroyed with it, so a composition that\n * builds several still owns every pool it opened.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const dispatcher = (\n  environment: Readonly<Record<string, string | undefined>>\n): Effect.Effect<Undici.Dispatcher, never, Scope.Scope> =>\n  Effect.suspend(() => {\n    const httpProxy = environment.http_proxy ?? environment.HTTP_PROXY ?? \"\"\n    const httpsProxy = environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\"\n    const noProxy = exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\")\n    // Explicit empty values prevent Undici from falling back to a different\n    // ambient environment. Each replacement pool uses the same proxy policy.\n    //\n    // Undici is loaded here rather than imported at the top, the way\n    // `NodeHttpClient.makeDispatcher` loads it, because this module is imported\n    // by `NodeHost` and every bundle built on it. A static import pulls the\n    // whole of Undici into any process that merely composes a host, whose\n    // side effects a host bundle must not carry: it reddened the Node host's\n    // own `FileSystem` contract case, which never makes a request. The explicit\n    // package entry also avoids Bun's incomplete built-in \"undici\" substitute.\n    return Effect.acquireRelease(\n      Effect.map(\n        loadUndici,\n        (undici) => new undici.EnvHttpProxyAgent({ httpProxy, httpsProxy, noProxy })\n      ),\n      (dispatcher) => Effect.promise(() => dispatcher.destroy())\n    )\n  })\n\n/**\n * The Undici `HttpClient` to install, given the environment the process runs in.\n *\n * Use this wherever `NodeHttpClient.layerUndici` would otherwise be provided\n * under a layer that takes `HttpClient` from context \u2014 a model transport, a\n * judge, a fetch rule, a host bundle. The two differ only in whether the pool\n * honours `HTTP_PROXY`/`HTTPS_PROXY`/`NO_PROXY`, which is the difference\n * between a request that reaches the gateway from inside a default-deny\n * sandbox and one the firewall drops.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (\n  environment: Readonly<Record<string, string | undefined>>\n): Layer.Layer<HttpClient> =>\n  Layer.effect(\n    HttpClient,\n    Effect.gen(function*() {\n      const shared = yield* dispatcher(environment)\n      const ordinary = yield* NodeHttpClient.makeUndici.pipe(Effect.provideService(NodeHttpClient.Dispatcher, shared))\n      return withDestinationPinning(EffectHttpClient.transform(ordinary, (execute, request) =>\n        Effect.gen(function*() {\n          const destination = yield* Destination\n          if (destination === undefined) return yield* execute\n          const url = new URL(request.url)\n          if (\n            url.origin !== destination.origin || destination.addresses.length === 0 ||\n            destination.addresses.some((address) => isIP(address) === 0)\n          ) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Invalid pinned HTTP destination\"\n                })\n              })\n            )\n          }\n          const proxies = [\n            environment.http_proxy ?? environment.HTTP_PROXY,\n            environment.https_proxy ?? environment.HTTPS_PROXY\n          ]\n          // The record is read per request, and a live one such as NodeHost's\n          // `process.env` can name an unparsable proxy after the shared pool\n          // was built from it; that is a refusal here, never a thrown URL error.\n          const validProxies = proxies.every((proxy) => {\n            if (!proxy) return true\n            try {\n              return [\"http:\", \"https:\"].includes(new URL(proxy).protocol)\n            } catch {\n              return false\n            }\n          })\n          if (!validProxies) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Pinned HTTP requests require HTTP or HTTPS proxies\"\n                })\n              })\n            )\n          }\n          const undici = yield* loadUndici\n          const addresses = destination.addresses.map((address) => ({ address, family: isIP(address) }))\n          // Construction and its disposal are one uninterruptible step: an\n          // interruption that lands after the agent exists but before the request\n          // owns it would otherwise leave the agent neither destroyed nor closed.\n          return yield* Effect.uninterruptibleMask((restore) => {\n            const pinned = new undici.EnvHttpProxyAgent({\n              httpProxy: environment.http_proxy ?? environment.HTTP_PROXY ?? \"\",\n              httpsProxy: environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\",\n              noProxy: exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\"),\n              // Tunnelling HTTP too prevents the proxy resolving the target hostname.\n              proxyTunnel: true,\n              connect: {\n                lookup: (_hostname, options, callback) => {\n                  const candidates = options.family\n                    ? addresses.filter((item) => item.family === options.family)\n                    : addresses\n                  const first = candidates[0]\n                  if (first === undefined) {\n                    return callback(\n                      new EgressAddressError({\n                        code: \"no_approved_address\",\n                        message: \"No approved address for family\"\n                      }),\n                      \"\",\n                      4\n                    )\n                  }\n                  if (options.all) callback(null, candidates)\n                  else callback(null, first.address, first.family)\n                }\n              },\n              clientFactory: (origin, options) => {\n                const proxy = new undici.Pool(origin, options)\n                const connect = proxy.connect.bind(proxy)\n                // EnvHttpProxyAgent selects the route using the ORIGINAL hostname.\n                // Only the proxy tunnel destination changes; endpoint TLS still uses\n                // the original hostname for SNI and certificate verification.\n                proxy.connect = (options: Undici.Dispatcher.ConnectOptions) => {\n                  const address = addresses[0]!.address\n                  const host = isIP(address) === 6 ? `[${address}]` : address\n                  const authority = `${host}:${url.port || (url.protocol === \"https:\" ? \"443\" : \"80\")}`\n                  return connect({ ...options, path: authority, headers: { ...options.headers, host: authority } })\n                }\n                return proxy\n              }\n            })\n            const pinnedRequest = request.pipe(\n              HttpClientRequest.setHeader(\"host\", url.host),\n              HttpClientRequest.removeHeader(\"proxy-authorization\"),\n              HttpClientRequest.removeHeader(\"connection\"),\n              HttpClientRequest.removeHeader(\"transfer-encoding\"),\n              HttpClientRequest.removeHeader(\"content-length\")\n            )\n            return restore(NodeHttpClient.makeUndici.pipe(\n              Effect.provideService(NodeHttpClient.Dispatcher, pinned),\n              Effect.flatMap((client) => client.execute(pinnedRequest))\n            )).pipe(Effect.onExit((exit) =>\n              Exit.isFailure(exit)\n                ? Effect.promise(() => pinned.destroy())\n                // close prevents reuse immediately, but lets the active body drain.\n                : Effect.sync(() => {\n                  void pinned.close().catch(() => pinned.destroy())\n                })\n            ))\n          })\n        })))\n    })\n  )\n\n/**\n * Owns one replaceable Undici pool in the caller's scope. Each replacement\n * receives the same middleware and closes the previous pool.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const rebuildableTransport = (\n  acquire: Effect.Effect<Undici.Dispatcher, never, Scope.Scope>,\n  decorate: (client: HttpClient) => Effect.Effect<HttpClient> = Effect.succeed\n): Effect.Effect<\n  {\n    readonly client: HttpClient\n    readonly rebuild: Effect.Effect<HttpClient>\n  },\n  never,\n  Scope.Scope\n> =>\n  Effect.gen(function*() {\n    const scope = yield* Scope.Scope\n    const gate = yield* Semaphore.make(1)\n    let held: Scope.Closeable | undefined = undefined\n    const rebuild = gate.withPermit(Effect.uninterruptibleMask((restore) =>\n      Effect.gen(function*() {\n        const owned = yield* Scope.fork(scope)\n        const client = yield* restore(NodeHttpClient.makeUndici.pipe(\n          Effect.provideServiceEffect(NodeHttpClient.Dispatcher, acquire),\n          Effect.flatMap(decorate),\n          Effect.provideService(Scope.Scope, owned)\n        )).pipe(Effect.onExit((exit) => Exit.isSuccess(exit) ? Effect.void : Scope.close(owned, exit)))\n        const previous = held\n        held = owned\n        if (previous !== undefined) yield* Scope.close(previous, Exit.void)\n        return client\n      })\n    ))\n    return { client: yield* rebuild, rebuild }\n  })\n\n/**\n * A model transport whose replacements retain the caller's grant store and\n * environment proxy policy. Pass it to RequestExecutor.makeWith in the host scope.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const guardedTransport = (environment: Readonly<Record<string, string | undefined>>) =>\n  Effect.gen(function*() {\n    const grants = yield* GrantStore\n    return yield* rebuildableTransport(dispatcher(environment), (client) =>\n      HttpClient.pipe(Effect.provide(KernelHttpClient.layer.pipe(\n        Layer.provide(Layer.succeed(HttpClient)(client)),\n        Layer.provide(Layer.succeed(GrantStore)(grants))\n      ))))\n  })\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BA,qBAAgC;AAEhC,wBAA2B;AAC3B,uBAAkC;AAClC,wBAAoD;AACpD,aAAwB;AACxB,WAAsB;AACtB,YAAuB;AACvB,aAAwB;AACxB,YAAuB;AACvB,gBAA2B;AAC3B,IAAAA,qBAA2B;AAC3B,uBAAkC;AAClC,sBAAiC;AACjC,wBAAmC;AACnC,sBAAqB;AAUd,MAAM,2BAA2B,OAAO,YAAgC;AAAA,EAC7E;AAAA,EACA,EAAE,MAAM,OAAO,QAAQ,qBAAqB,GAAG,SAAS,OAAO,OAAO;AACxE,EAAE;AAAA,EACkB,OAAO;AAC3B;AAQA,MAAM,WAAW,CAAC,aAAa,aAAa,KAAK;AAiBjD,MAAM,aAAa,CAAC,aAClB,aAAa,MAAM,WAAW,CAAC,UAAU,GAAG,QAAQ,EAAE,OAAO,CAAC,UAAU,UAAU,EAAE,EAAE,KAAK,GAAG;AAMhG,MAAM,aAAa,OAAO;AAAA,EACxB,aAAa,MAAM,OAAO,iBAAiB,GAAG;AAChD;AAkBO,MAAM,aAAa,CACxB,gBAEA,OAAO,QAAQ,MAAM;AACnB,QAAM,YAAY,YAAY,cAAc,YAAY,cAAc;AACtE,QAAM,aAAa,YAAY,eAAe,YAAY,eAAe;AACzE,QAAM,UAAU,WAAW,YAAY,YAAY,YAAY,YAAY,EAAE;AAW7E,SAAO,OAAO;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA,CAAC,WAAW,IAAI,OAAO,kBAAkB,EAAE,WAAW,YAAY,QAAQ,CAAC;AAAA,IAC7E;AAAA,IACA,CAACC,gBAAe,OAAO,QAAQ,MAAMA,YAAW,QAAQ,CAAC;AAAA,EAC3D;AACF,CAAC;AAgBI,MAAM,QAAQ,CACnB,gBAEA,MAAM;AAAA,EACJ;AAAA,EACA,OAAO,IAAI,aAAY;AACrB,UAAM,SAAS,OAAO,WAAW,WAAW;AAC5C,UAAM,WAAW,OAAO,eAAe,WAAW,KAAK,OAAO,eAAe,eAAe,YAAY,MAAM,CAAC;AAC/G,eAAO,0CAAuB,iBAAiB,UAAU,UAAU,CAAC,SAAS,YAC3E,OAAO,IAAI,aAAY;AACrB,YAAM,cAAc,OAAO;AAC3B,UAAI,gBAAgB,OAAW,QAAO,OAAO;AAC7C,YAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UACE,IAAI,WAAW,YAAY,UAAU,YAAY,UAAU,WAAW,KACtE,YAAY,UAAU,KAAK,CAAC,gBAAY,sBAAK,OAAO,MAAM,CAAC,GAC3D;AACA,eAAO,OAAO,OAAO;AAAA,UACnB,IAAI,gBAAgB,gBAAgB;AAAA,YAClC,QAAQ,IAAI,gBAAgB,eAAe;AAAA,cACzC;AAAA,cACA,aAAa;AAAA,YACf,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,UAAU;AAAA,QACd,YAAY,cAAc,YAAY;AAAA,QACtC,YAAY,eAAe,YAAY;AAAA,MACzC;AAIA,YAAM,eAAe,QAAQ,MAAM,CAAC,UAAU;AAC5C,YAAI,CAAC,MAAO,QAAO;AACnB,YAAI;AACF,iBAAO,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,IAAI,KAAK,EAAE,QAAQ;AAAA,QAC7D,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AACD,UAAI,CAAC,cAAc;AACjB,eAAO,OAAO,OAAO;AAAA,UACnB,IAAI,gBAAgB,gBAAgB;AAAA,YAClC,QAAQ,IAAI,gBAAgB,eAAe;AAAA,cACzC;AAAA,cACA,aAAa;AAAA,YACf,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,SAAS,OAAO;AACtB,YAAM,YAAY,YAAY,UAAU,IAAI,CAAC,aAAa,EAAE,SAAS,YAAQ,sBAAK,OAAO,EAAE,EAAE;AAI7F,aAAO,OAAO,OAAO,oBAAoB,CAAC,YAAY;AACpD,cAAM,SAAS,IAAI,OAAO,kBAAkB;AAAA,UAC1C,WAAW,YAAY,cAAc,YAAY,cAAc;AAAA,UAC/D,YAAY,YAAY,eAAe,YAAY,eAAe;AAAA,UAClE,SAAS,WAAW,YAAY,YAAY,YAAY,YAAY,EAAE;AAAA;AAAA,UAEtE,aAAa;AAAA,UACb,SAAS;AAAA,YACP,QAAQ,CAAC,WAAW,SAAS,aAAa;AACxC,oBAAM,aAAa,QAAQ,SACvB,UAAU,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ,MAAM,IACzD;AACJ,oBAAM,QAAQ,WAAW,CAAC;AAC1B,kBAAI,UAAU,QAAW;AACvB,uBAAO;AAAA,kBACL,IAAI,mBAAmB;AAAA,oBACrB,MAAM;AAAA,oBACN,SAAS;AAAA,kBACX,CAAC;AAAA,kBACD;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AACA,kBAAI,QAAQ,IAAK,UAAS,MAAM,UAAU;AAAA,kBACrC,UAAS,MAAM,MAAM,SAAS,MAAM,MAAM;AAAA,YACjD;AAAA,UACF;AAAA,UACA,eAAe,CAAC,QAAQ,YAAY;AAClC,kBAAM,QAAQ,IAAI,OAAO,KAAK,QAAQ,OAAO;AAC7C,kBAAM,UAAU,MAAM,QAAQ,KAAK,KAAK;AAIxC,kBAAM,UAAU,CAACC,aAA8C;AAC7D,oBAAM,UAAU,UAAU,CAAC,EAAG;AAC9B,oBAAM,WAAO,sBAAK,OAAO,MAAM,IAAI,IAAI,OAAO,MAAM;AACpD,oBAAM,YAAY,GAAG,IAAI,IAAI,IAAI,SAAS,IAAI,aAAa,WAAW,QAAQ,KAAK;AACnF,qBAAO,QAAQ,EAAE,GAAGA,UAAS,MAAM,WAAW,SAAS,EAAE,GAAGA,SAAQ,SAAS,MAAM,UAAU,EAAE,CAAC;AAAA,YAClG;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AACD,cAAM,gBAAgB,QAAQ;AAAA,UAC5B,kBAAkB,UAAU,QAAQ,IAAI,IAAI;AAAA,UAC5C,kBAAkB,aAAa,qBAAqB;AAAA,UACpD,kBAAkB,aAAa,YAAY;AAAA,UAC3C,kBAAkB,aAAa,mBAAmB;AAAA,UAClD,kBAAkB,aAAa,gBAAgB;AAAA,QACjD;AACA,eAAO,QAAQ,eAAe,WAAW;AAAA,UACvC,OAAO,eAAe,eAAe,YAAY,MAAM;AAAA,UACvD,OAAO,QAAQ,CAAC,WAAW,OAAO,QAAQ,aAAa,CAAC;AAAA,QAC1D,CAAC,EAAE,KAAK,OAAO;AAAA,UAAO,CAAC,SACrB,KAAK,UAAU,IAAI,IACf,OAAO,QAAQ,MAAM,OAAO,QAAQ,CAAC,IAErC,OAAO,KAAK,MAAM;AAClB,iBAAK,OAAO,MAAM,EAAE,MAAM,MAAM,OAAO,QAAQ,CAAC;AAAA,UAClD,CAAC;AAAA,QACL,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC,CAAC,CAAC;AAAA,EACP,CAAC;AACH;AASK,MAAM,uBAAuB,CAClC,SACA,WAA8D,OAAO,YASrE,OAAO,IAAI,aAAY;AACrB,QAAM,QAAQ,OAAO,MAAM;AAC3B,QAAM,OAAO,OAAO,UAAU,KAAK,CAAC;AACpC,MAAI,OAAoC;AACxC,QAAM,UAAU,KAAK,WAAW,OAAO;AAAA,IAAoB,CAAC,YAC1D,OAAO,IAAI,aAAY;AACrB,YAAM,QAAQ,OAAO,MAAM,KAAK,KAAK;AACrC,YAAM,SAAS,OAAO,QAAQ,eAAe,WAAW;AAAA,QACtD,OAAO,qBAAqB,eAAe,YAAY,OAAO;AAAA,QAC9D,OAAO,QAAQ,QAAQ;AAAA,QACvB,OAAO,eAAe,MAAM,OAAO,KAAK;AAAA,MAC1C,CAAC,EAAE,KAAK,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,IAAI,OAAO,OAAO,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC;AAC9F,YAAM,WAAW;AACjB,aAAO;AACP,UAAI,aAAa,OAAW,QAAO,MAAM,MAAM,UAAU,KAAK,IAAI;AAClE,aAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AACD,SAAO,EAAE,QAAQ,OAAO,SAAS,QAAQ;AAC3C,CAAC;AASI,MAAM,mBAAmB,CAAC,gBAC/B,OAAO,IAAI,aAAY;AACrB,QAAM,SAAS,OAAO;AACtB,SAAO,OAAO,qBAAqB,WAAW,WAAW,GAAG,CAAC,WAC3D,8BAAW,KAAK,OAAO,QAAQ,iBAAiB,MAAM;AAAA,IACpD,MAAM,QAAQ,MAAM,QAAQ,6BAAU,EAAE,MAAM,CAAC;AAAA,IAC/C,MAAM,QAAQ,MAAM,QAAQ,4BAAU,EAAE,MAAM,CAAC;AAAA,EACjD,CAAC,CAAC,CAAC;AACP,CAAC;",
+  "sourcesContent": ["/**\n * The outbound HTTP client a Node process should use, read off its environment.\n *\n * `@effect/platform-node` ships `NodeHttpClient.layerUndici`, and its\n * dispatcher is a bare Undici `Agent`. A bare `Agent` dials every origin\n * directly: it does not read `HTTP_PROXY`, `HTTPS_PROXY` or `NO_PROXY`, and\n * nothing at the call site says so. That is invisible on a developer machine\n * with open egress and fatal inside a sandbox whose egress is default-deny\n * behind a named proxy \u2014 the request leaves for the origin, the firewall drops\n * it, and the only symptom is a transport failure far from the composition\n * that chose the client.\n *\n * This module is the one place that decision is made. {@link layer} is the\n * client every Node host composition installs; it honours the proxy the\n * environment names. Requests without a web destination use a shared pool;\n * web requests receive a fresh pinned dispatcher.\n *\n * The rule for loopback is fixed here, not by the environment: `localhost`,\n * `127.0.0.1` and `[::1]` are always reached directly, even when the\n * environment names a proxy and no exclusion, and every other origin follows\n * `NO_PROXY`. A proxy is how a process leaves its machine, and\n * `--remote http://127.0.0.1:3000` is not leaving it. The exemption is those\n * three names and nothing wider: Undici matches `NO_PROXY` entries by name,\n * never by resolved address, so `127.0.0.2` or a hostname that resolves to\n * loopback is an origin like any other and goes through the proxy.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as NodeHttpClient from \"@effect/platform-node/NodeHttpClient\"\nimport type * as Undici from \"@effect/platform-node/Undici\"\nimport { GrantStore } from \"@smthrs/kernel/GrantStore\"\nimport * as KernelHttpClient from \"@smthrs/kernel/HttpClient\"\nimport { Destination, withDestinationPinning } from \"@smthrs/kernel/HttpClient\"\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport { HttpClient } from \"effect/http/HttpClient\"\nimport * as EffectHttpClient from \"effect/http/HttpClient\"\nimport * as HttpClientError from \"effect/http/HttpClientError\"\nimport * as HttpClientRequest from \"effect/http/HttpClientRequest\"\nimport * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport * as Scope from \"effect/Scope\"\nimport * as Semaphore from \"effect/Semaphore\"\nimport { isIP } from \"node:net\"\n\n/**\n * A pinned connection asked for an address family none of the authorized\n * addresses has. It is the `cause` of the `TransportError` the request fails\n * with; `code` is always `no_approved_address`.\n *\n * @category errors\n * @since 1.0.0\n */\nexport class EgressAddressError extends Schema.TaggedError<EgressAddressError>()(\n  \"@smthrs/platform-node/EgressAddressError\",\n  { code: Schema.Literal(\"no_approved_address\"), message: Schema.String }\n) {\n  override readonly name = \"EgressAddressError\"\n}\n\n/**\n * The hosts a proxy is never for. A proxy is how a process leaves its machine;\n * these names are the machine itself. Matched by name, the way Undici matches\n * every `NO_PROXY` entry, so the list is exactly these three and not\n * `127.0.0.0/8`.\n */\nconst loopback = [\"localhost\", \"127.0.0.1\", \"::1\"] as const\n\n/**\n * The exclusion list to hand Undici, given the one the environment names.\n *\n * Undici proxies *every* origin when `NO_PROXY` is empty \u2014 `#shouldProxy`\n * returns early with \"Always proxy if NO_PROXY is not set or empty\" \u2014 so a host\n * that names a proxy to reach the internet would also send `smthrs --remote\n * http://127.0.0.1:3000` and a local Ollama at `http://localhost:11434` to it.\n * Nothing in this repository has ever needed `NO_PROXY=127.0.0.1`, because the\n * client these compositions used before ignored the proxy variables outright.\n * So loopback is always excluded, the way Go's `net/http.ProxyFromEnvironment`\n * excludes it, and the environment's own entries are kept beside it.\n *\n * `*` is returned untouched: Undici recognises the wildcard only as the entire\n * value, and it already means every origin is direct.\n */\nconst exclusions = (declared: string): string =>\n  declared === \"*\" ? declared : [declared, ...loopback].filter((entry) => entry !== \"\").join(\",\")\n\n// Split ESM bundles expose CommonJS Undici through default, without synthetic\n// named exports. Node and Bun also expose its constructors through default.\n// Its typings declare `default` as a namespace without them, and `bundler`\n// resolution reads that, so the value is typed as the module it carries.\nconst loadUndici = Effect.promise(\n  async () => (await import(\"undici/index.js\")).default as unknown as typeof Undici\n)\n\n/**\n * An Undici dispatcher that routes through the egress proxy the supplied\n * environment names, or a direct one when it names none.\n *\n * The proxy variables are read in the order Undici itself reads them,\n * lowercase first, and passed explicitly rather than left to\n * `EnvHttpProxyAgent`'s own ambient lookup: a host serving a guest's\n * environment is not the guest, and the pool has to follow the record it was\n * handed. Loopback is always direct; see {@link exclusions}. Each dispatcher is\n * acquired in the caller's scope and destroyed with it, so a composition that\n * builds several still owns every pool it opened.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const dispatcher = (\n  environment: Readonly<Record<string, string | undefined>>\n): Effect.Effect<Undici.Dispatcher, never, Scope.Scope> =>\n  Effect.suspend(() => {\n    const httpProxy = environment.http_proxy ?? environment.HTTP_PROXY ?? \"\"\n    const httpsProxy = environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\"\n    const noProxy = exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\")\n    // Explicit empty values prevent Undici from falling back to a different\n    // ambient environment. Each replacement pool uses the same proxy policy.\n    //\n    // Undici is loaded here rather than imported at the top, the way\n    // `NodeHttpClient.makeDispatcher` loads it, because this module is imported\n    // by `NodeHost` and every bundle built on it. A static import pulls the\n    // whole of Undici into any process that merely composes a host, whose\n    // side effects a host bundle must not carry: it reddened the Node host's\n    // own `FileSystem` contract case, which never makes a request. The explicit\n    // package entry also avoids Bun's incomplete built-in \"undici\" substitute.\n    return Effect.acquireRelease(\n      Effect.map(\n        loadUndici,\n        (undici) => new undici.EnvHttpProxyAgent({ httpProxy, httpsProxy, noProxy })\n      ),\n      (dispatcher) => Effect.promise(() => dispatcher.destroy())\n    )\n  })\n\n/**\n * The Undici `HttpClient` to install, given the environment the process runs in.\n *\n * Use this wherever `NodeHttpClient.layerUndici` would otherwise be provided\n * under a layer that takes `HttpClient` from context \u2014 a model transport, a\n * judge, a fetch rule, a host bundle. The two differ only in whether the pool\n * honours `HTTP_PROXY`/`HTTPS_PROXY`/`NO_PROXY`, which is the difference\n * between a request that reaches the gateway from inside a default-deny\n * sandbox and one the firewall drops.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (\n  environment: Readonly<Record<string, string | undefined>>\n): Layer.Layer<HttpClient> =>\n  Layer.effect(\n    HttpClient,\n    Effect.gen(function*() {\n      const shared = yield* dispatcher(environment)\n      const ordinary = yield* NodeHttpClient.makeUndici.pipe(Effect.provideService(NodeHttpClient.Dispatcher, shared))\n      return withDestinationPinning(EffectHttpClient.transform(ordinary, (execute, request) =>\n        Effect.gen(function*() {\n          const destination = yield* Destination\n          if (destination === undefined) return yield* execute\n          const url = new URL(request.url)\n          if (\n            url.origin !== destination.origin || destination.addresses.length === 0 ||\n            destination.addresses.some((address) => isIP(address) === 0)\n          ) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Invalid pinned HTTP destination\"\n                })\n              })\n            )\n          }\n          const proxies = [\n            environment.http_proxy ?? environment.HTTP_PROXY,\n            environment.https_proxy ?? environment.HTTPS_PROXY\n          ]\n          // The record is read per request, and a live one such as NodeHost's\n          // `process.env` can name an unparsable proxy after the shared pool\n          // was built from it; that is a refusal here, never a thrown URL error.\n          const validProxies = proxies.every((proxy) => {\n            if (!proxy) return true\n            try {\n              return [\"http:\", \"https:\"].includes(new URL(proxy).protocol)\n            } catch {\n              return false\n            }\n          })\n          if (!validProxies) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Pinned HTTP requests require HTTP or HTTPS proxies\"\n                })\n              })\n            )\n          }\n          const undici = yield* loadUndici\n          const addresses = destination.addresses.map((address) => ({ address, family: isIP(address) }))\n          // Construction and its disposal are one uninterruptible step: an\n          // interruption that lands after the agent exists but before the request\n          // owns it would otherwise leave the agent neither destroyed nor closed.\n          return yield* Effect.uninterruptibleMask((restore) => {\n            const pinned = new undici.EnvHttpProxyAgent({\n              httpProxy: environment.http_proxy ?? environment.HTTP_PROXY ?? \"\",\n              httpsProxy: environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\",\n              noProxy: exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\"),\n              // Tunnelling HTTP too prevents the proxy resolving the target hostname.\n              proxyTunnel: true,\n              connect: {\n                lookup: (_hostname, options, callback) => {\n                  const candidates = options.family\n                    ? addresses.filter((item) => item.family === options.family)\n                    : addresses\n                  const first = candidates[0]\n                  if (first === undefined) {\n                    return callback(\n                      new EgressAddressError({\n                        code: \"no_approved_address\",\n                        message: \"No approved address for family\"\n                      }),\n                      \"\",\n                      4\n                    )\n                  }\n                  if (options.all) callback(null, candidates)\n                  else callback(null, first.address, first.family)\n                }\n              },\n              clientFactory: (origin, options) => {\n                const proxy = new undici.Pool(origin, options)\n                const connect = proxy.connect.bind(proxy)\n                // EnvHttpProxyAgent selects the route using the ORIGINAL hostname.\n                // Only the proxy tunnel destination changes; endpoint TLS still uses\n                // the original hostname for SNI and certificate verification.\n                proxy.connect = (options: Undici.Dispatcher.ConnectOptions) => {\n                  const address = addresses[0]!.address\n                  const host = isIP(address) === 6 ? `[${address}]` : address\n                  const authority = `${host}:${url.port || (url.protocol === \"https:\" ? \"443\" : \"80\")}`\n                  return connect({ ...options, path: authority, headers: { ...options.headers, host: authority } })\n                }\n                return proxy\n              }\n            })\n            const pinnedRequest = request.pipe(\n              HttpClientRequest.setHeader(\"host\", url.host),\n              HttpClientRequest.removeHeader(\"proxy-authorization\"),\n              HttpClientRequest.removeHeader(\"connection\"),\n              HttpClientRequest.removeHeader(\"transfer-encoding\"),\n              HttpClientRequest.removeHeader(\"content-length\")\n            )\n            return restore(NodeHttpClient.makeUndici.pipe(\n              Effect.provideService(NodeHttpClient.Dispatcher, pinned),\n              Effect.flatMap((client) => client.execute(pinnedRequest))\n            )).pipe(Effect.onExit((exit) =>\n              Exit.isFailure(exit)\n                ? Effect.promise(() => pinned.destroy())\n                // close prevents reuse immediately, but lets the active body drain.\n                : Effect.sync(() => {\n                  void pinned.close().catch(() => pinned.destroy())\n                })\n            ))\n          })\n        })))\n    })\n  )\n\n/**\n * Owns one replaceable Undici pool in the caller's scope. Each replacement\n * receives the same middleware and closes the previous pool.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const rebuildableTransport = (\n  acquire: Effect.Effect<Undici.Dispatcher, never, Scope.Scope>,\n  decorate: (client: HttpClient) => Effect.Effect<HttpClient> = Effect.succeed\n): Effect.Effect<\n  {\n    readonly client: HttpClient\n    readonly rebuild: Effect.Effect<HttpClient>\n  },\n  never,\n  Scope.Scope\n> =>\n  Effect.gen(function*() {\n    const scope = yield* Scope.Scope\n    const gate = yield* Semaphore.make(1)\n    let held: Scope.Closeable | undefined = undefined\n    const rebuild = gate.withPermit(Effect.uninterruptibleMask((restore) =>\n      Effect.gen(function*() {\n        const owned = yield* Scope.fork(scope)\n        const client = yield* restore(NodeHttpClient.makeUndici.pipe(\n          Effect.provideServiceEffect(NodeHttpClient.Dispatcher, acquire),\n          Effect.flatMap(decorate),\n          Effect.provideService(Scope.Scope, owned)\n        )).pipe(Effect.onExit((exit) => Exit.isSuccess(exit) ? Effect.void : Scope.close(owned, exit)))\n        const previous = held\n        held = owned\n        if (previous !== undefined) yield* Scope.close(previous, Exit.void)\n        return client\n      })\n    ))\n    return { client: yield* rebuild, rebuild }\n  })\n\n/**\n * A model transport whose replacements retain the caller's grant store and\n * environment proxy policy. Pass it to RequestExecutor.makeWith in the host scope.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const guardedTransport = (environment: Readonly<Record<string, string | undefined>>) =>\n  Effect.gen(function*() {\n    const grants = yield* GrantStore\n    return yield* rebuildableTransport(dispatcher(environment), (client) =>\n      HttpClient.pipe(Effect.provide(KernelHttpClient.layer.pipe(\n        Layer.provide(Layer.succeed(HttpClient)(client)),\n        Layer.provide(Layer.succeed(GrantStore)(grants))\n      ))))\n  })\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BA,qBAAgC;AAEhC,wBAA2B;AAC3B,uBAAkC;AAClC,wBAAoD;AACpD,aAAwB;AACxB,WAAsB;AACtB,IAAAA,qBAA2B;AAC3B,uBAAkC;AAClC,sBAAiC;AACjC,wBAAmC;AACnC,YAAuB;AACvB,aAAwB;AACxB,YAAuB;AACvB,gBAA2B;AAC3B,sBAAqB;AAUd,MAAM,2BAA2B,OAAO,YAAgC;AAAA,EAC7E;AAAA,EACA,EAAE,MAAM,OAAO,QAAQ,qBAAqB,GAAG,SAAS,OAAO,OAAO;AACxE,EAAE;AAAA,EACkB,OAAO;AAC3B;AAQA,MAAM,WAAW,CAAC,aAAa,aAAa,KAAK;AAiBjD,MAAM,aAAa,CAAC,aAClB,aAAa,MAAM,WAAW,CAAC,UAAU,GAAG,QAAQ,EAAE,OAAO,CAAC,UAAU,UAAU,EAAE,EAAE,KAAK,GAAG;AAMhG,MAAM,aAAa,OAAO;AAAA,EACxB,aAAa,MAAM,OAAO,iBAAiB,GAAG;AAChD;AAkBO,MAAM,aAAa,CACxB,gBAEA,OAAO,QAAQ,MAAM;AACnB,QAAM,YAAY,YAAY,cAAc,YAAY,cAAc;AACtE,QAAM,aAAa,YAAY,eAAe,YAAY,eAAe;AACzE,QAAM,UAAU,WAAW,YAAY,YAAY,YAAY,YAAY,EAAE;AAW7E,SAAO,OAAO;AAAA,IACZ,OAAO;AAAA,MACL;AAAA,MACA,CAAC,WAAW,IAAI,OAAO,kBAAkB,EAAE,WAAW,YAAY,QAAQ,CAAC;AAAA,IAC7E;AAAA,IACA,CAACC,gBAAe,OAAO,QAAQ,MAAMA,YAAW,QAAQ,CAAC;AAAA,EAC3D;AACF,CAAC;AAgBI,MAAM,QAAQ,CACnB,gBAEA,MAAM;AAAA,EACJ;AAAA,EACA,OAAO,IAAI,aAAY;AACrB,UAAM,SAAS,OAAO,WAAW,WAAW;AAC5C,UAAM,WAAW,OAAO,eAAe,WAAW,KAAK,OAAO,eAAe,eAAe,YAAY,MAAM,CAAC;AAC/G,eAAO,0CAAuB,iBAAiB,UAAU,UAAU,CAAC,SAAS,YAC3E,OAAO,IAAI,aAAY;AACrB,YAAM,cAAc,OAAO;AAC3B,UAAI,gBAAgB,OAAW,QAAO,OAAO;AAC7C,YAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UACE,IAAI,WAAW,YAAY,UAAU,YAAY,UAAU,WAAW,KACtE,YAAY,UAAU,KAAK,CAAC,gBAAY,sBAAK,OAAO,MAAM,CAAC,GAC3D;AACA,eAAO,OAAO,OAAO;AAAA,UACnB,IAAI,gBAAgB,gBAAgB;AAAA,YAClC,QAAQ,IAAI,gBAAgB,eAAe;AAAA,cACzC;AAAA,cACA,aAAa;AAAA,YACf,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,UAAU;AAAA,QACd,YAAY,cAAc,YAAY;AAAA,QACtC,YAAY,eAAe,YAAY;AAAA,MACzC;AAIA,YAAM,eAAe,QAAQ,MAAM,CAAC,UAAU;AAC5C,YAAI,CAAC,MAAO,QAAO;AACnB,YAAI;AACF,iBAAO,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,IAAI,KAAK,EAAE,QAAQ;AAAA,QAC7D,QAAQ;AACN,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AACD,UAAI,CAAC,cAAc;AACjB,eAAO,OAAO,OAAO;AAAA,UACnB,IAAI,gBAAgB,gBAAgB;AAAA,YAClC,QAAQ,IAAI,gBAAgB,eAAe;AAAA,cACzC;AAAA,cACA,aAAa;AAAA,YACf,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,SAAS,OAAO;AACtB,YAAM,YAAY,YAAY,UAAU,IAAI,CAAC,aAAa,EAAE,SAAS,YAAQ,sBAAK,OAAO,EAAE,EAAE;AAI7F,aAAO,OAAO,OAAO,oBAAoB,CAAC,YAAY;AACpD,cAAM,SAAS,IAAI,OAAO,kBAAkB;AAAA,UAC1C,WAAW,YAAY,cAAc,YAAY,cAAc;AAAA,UAC/D,YAAY,YAAY,eAAe,YAAY,eAAe;AAAA,UAClE,SAAS,WAAW,YAAY,YAAY,YAAY,YAAY,EAAE;AAAA;AAAA,UAEtE,aAAa;AAAA,UACb,SAAS;AAAA,YACP,QAAQ,CAAC,WAAW,SAAS,aAAa;AACxC,oBAAM,aAAa,QAAQ,SACvB,UAAU,OAAO,CAAC,SAAS,KAAK,WAAW,QAAQ,MAAM,IACzD;AACJ,oBAAM,QAAQ,WAAW,CAAC;AAC1B,kBAAI,UAAU,QAAW;AACvB,uBAAO;AAAA,kBACL,IAAI,mBAAmB;AAAA,oBACrB,MAAM;AAAA,oBACN,SAAS;AAAA,kBACX,CAAC;AAAA,kBACD;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AACA,kBAAI,QAAQ,IAAK,UAAS,MAAM,UAAU;AAAA,kBACrC,UAAS,MAAM,MAAM,SAAS,MAAM,MAAM;AAAA,YACjD;AAAA,UACF;AAAA,UACA,eAAe,CAAC,QAAQ,YAAY;AAClC,kBAAM,QAAQ,IAAI,OAAO,KAAK,QAAQ,OAAO;AAC7C,kBAAM,UAAU,MAAM,QAAQ,KAAK,KAAK;AAIxC,kBAAM,UAAU,CAACC,aAA8C;AAC7D,oBAAM,UAAU,UAAU,CAAC,EAAG;AAC9B,oBAAM,WAAO,sBAAK,OAAO,MAAM,IAAI,IAAI,OAAO,MAAM;AACpD,oBAAM,YAAY,GAAG,IAAI,IAAI,IAAI,SAAS,IAAI,aAAa,WAAW,QAAQ,KAAK;AACnF,qBAAO,QAAQ,EAAE,GAAGA,UAAS,MAAM,WAAW,SAAS,EAAE,GAAGA,SAAQ,SAAS,MAAM,UAAU,EAAE,CAAC;AAAA,YAClG;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AACD,cAAM,gBAAgB,QAAQ;AAAA,UAC5B,kBAAkB,UAAU,QAAQ,IAAI,IAAI;AAAA,UAC5C,kBAAkB,aAAa,qBAAqB;AAAA,UACpD,kBAAkB,aAAa,YAAY;AAAA,UAC3C,kBAAkB,aAAa,mBAAmB;AAAA,UAClD,kBAAkB,aAAa,gBAAgB;AAAA,QACjD;AACA,eAAO,QAAQ,eAAe,WAAW;AAAA,UACvC,OAAO,eAAe,eAAe,YAAY,MAAM;AAAA,UACvD,OAAO,QAAQ,CAAC,WAAW,OAAO,QAAQ,aAAa,CAAC;AAAA,QAC1D,CAAC,EAAE,KAAK,OAAO;AAAA,UAAO,CAAC,SACrB,KAAK,UAAU,IAAI,IACf,OAAO,QAAQ,MAAM,OAAO,QAAQ,CAAC,IAErC,OAAO,KAAK,MAAM;AAClB,iBAAK,OAAO,MAAM,EAAE,MAAM,MAAM,OAAO,QAAQ,CAAC;AAAA,UAClD,CAAC;AAAA,QACL,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC,CAAC,CAAC;AAAA,EACP,CAAC;AACH;AASK,MAAM,uBAAuB,CAClC,SACA,WAA8D,OAAO,YASrE,OAAO,IAAI,aAAY;AACrB,QAAM,QAAQ,OAAO,MAAM;AAC3B,QAAM,OAAO,OAAO,UAAU,KAAK,CAAC;AACpC,MAAI,OAAoC;AACxC,QAAM,UAAU,KAAK,WAAW,OAAO;AAAA,IAAoB,CAAC,YAC1D,OAAO,IAAI,aAAY;AACrB,YAAM,QAAQ,OAAO,MAAM,KAAK,KAAK;AACrC,YAAM,SAAS,OAAO,QAAQ,eAAe,WAAW;AAAA,QACtD,OAAO,qBAAqB,eAAe,YAAY,OAAO;AAAA,QAC9D,OAAO,QAAQ,QAAQ;AAAA,QACvB,OAAO,eAAe,MAAM,OAAO,KAAK;AAAA,MAC1C,CAAC,EAAE,KAAK,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,IAAI,OAAO,OAAO,MAAM,MAAM,OAAO,IAAI,CAAC,CAAC;AAC9F,YAAM,WAAW;AACjB,aAAO;AACP,UAAI,aAAa,OAAW,QAAO,MAAM,MAAM,UAAU,KAAK,IAAI;AAClE,aAAO;AAAA,IACT,CAAC;AAAA,EACH,CAAC;AACD,SAAO,EAAE,QAAQ,OAAO,SAAS,QAAQ;AAC3C,CAAC;AASI,MAAM,mBAAmB,CAAC,gBAC/B,OAAO,IAAI,aAAY;AACrB,QAAM,SAAS,OAAO;AACtB,SAAO,OAAO,qBAAqB,WAAW,WAAW,GAAG,CAAC,WAC3D,8BAAW,KAAK,OAAO,QAAQ,iBAAiB,MAAM;AAAA,IACpD,MAAM,QAAQ,MAAM,QAAQ,6BAAU,EAAE,MAAM,CAAC;AAAA,IAC/C,MAAM,QAAQ,MAAM,QAAQ,4BAAU,EAAE,MAAM,CAAC;AAAA,EACjD,CAAC,CAAC,CAAC;AACP,CAAC;",
   "names": ["import_HttpClient", "dispatcher", "options"]
 }

package/dist/cjs/NodeHost.d.ts

@@ -29,11 +29,11 @@ import type { HostServiceIds } from "@smthrs/kernel/HostServices";
 import type * as KernelProcessConfinement from "@smthrs/kernel/ProcessConfinement";
 import type * as ProcessLedger from "@smthrs/kernel/ProcessLedger";
 import type { FileSystem } from "effect/FileSystem";
+import type { HttpClient } from "effect/http/HttpClient";
 import * as Layer from "effect/Layer";
 import type * as Path from "effect/Path";
+import type { ChildProcessSpawner } from "effect/process/ChildProcessSpawner";
 import * as Schema from "effect/Schema";
-import type { HttpClient } from "effect/unstable/http/HttpClient";
-import type { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
 import * as AtomicFileSystem from "./AtomicFileSystem.ts";
 import * as EgressHttpClient from "./EgressHttpClient.ts";
 import * as ProcessReaper from "./ProcessReaper.ts";

package/dist/cjs/NodeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NodeHost.d.ts","sourceRoot":"","sources":["../../src/NodeHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,uBAAuB,MAAM,+CAA+C,CAAA;AACxF,OAAO,KAAK,UAAU,MAAM,kCAAkC,CAAA;AAC9D,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AAEtE,OAAO,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,KAAK,KAAK,wBAAwB,MAAM,mCAAmC,CAAA;AAClF,OAAO,KAAK,KAAK,aAAa,MAAM,8BAA8B,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAA;AAEtF,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AAEzD,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACd,CAAA;AAcD;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,IAAI,CAAC,IAAI,GACT,mBAAmB,GACnB,EAAE,GACF,UAAU,GACV,wBAAwB,CAAC,kBAAkB,CAAA;;;;;AAE/C;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,kBAGjC;IACA,SAAkB,IAAI,mBAAkB;CACzC;AAYD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAMvF,CAAA;AAKD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,cAAc,GAAG,aAAa,CAAC,OAAO,CAAA;AAQnF;;;;;GAKG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAMhD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,OAAO,GAAI,gBAAgB,MAAM,KAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAO3E,CAAA;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,cAAc,GACzB,UAAU,gBAAgB,KACzB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,aAAa,CAgB5D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAC3B,gBAAgB,MAAM,EACtB,UAAU,gBAAgB,KACzB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,aAAa,CAW5D,CAAA"}
+{"version":3,"file":"NodeHost.d.ts","sourceRoot":"","sources":["../../src/NodeHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,uBAAuB,MAAM,+CAA+C,CAAA;AACxF,OAAO,KAAK,UAAU,MAAM,kCAAkC,CAAA;AAC9D,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AAEtE,OAAO,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,KAAK,KAAK,wBAAwB,MAAM,mCAAmC,CAAA;AAClF,OAAO,KAAK,KAAK,aAAa,MAAM,8BAA8B,CAAA;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAC7E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AACzD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAA;AAEzD,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAA;AAEnD;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,cAAc,EACd,cAAc,EACd,aAAa,EACd,CAAA;AAcD;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,IAAI,CAAC,IAAI,GACT,mBAAmB,GACnB,EAAE,GACF,UAAU,GACV,wBAAwB,CAAC,kBAAkB,CAAA;;;;;AAE/C;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,kBAGjC;IACA,SAAkB,IAAI,mBAAkB;CACzC;AAYD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAMvF,CAAA;AAKD;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,cAAc,GAAG,aAAa,CAAC,OAAO,CAAA;AAQnF;;;;;GAKG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAMhD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,OAAO,GAAI,gBAAgB,MAAM,KAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAO3E,CAAA;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,cAAc,GACzB,UAAU,gBAAgB,KACzB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,aAAa,CAgB5D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAC3B,gBAAgB,MAAM,EACtB,UAAU,gBAAgB,KACzB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,aAAa,CAAC,aAAa,CAW5D,CAAA"}

package/dist/cjs/NodeHost.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/NodeHost.ts"],
-  "sourcesContent": ["/**\n * Aggregate Node.js Host bundle.\n *\n * This module defines the `NodeHost` service union and a single `layer` that\n * provides the closed Host surface backed by Node: `@effect/platform-node`'s\n * filesystem, child-process spawner, Undici `HttpClient`, native `Path`,\n * and the Node `Jj` adapter from its own package. Use the layer when a Node\n * program wants every host capability from one place; use the individual\n * modules when a program should only be able to reach part of the host. The\n * bundle also supplies native `ProcessConfinement` for the kernel spawner.\n *\n * There is no Node HTTP module either: outgoing requests are Effect's\n * `HttpClient`, and `@effect/platform-node` already ships the Undici-backed\n * implementation. Undici follows no redirect unless a redirect interceptor is\n * installed, so every hop stays visible to `@smthrs/kernel`'s decorator.\n *\n * There is no Node shell module: running a command is Effect's\n * `ChildProcessSpawner`, and `@effect/platform-node` already ships the\n * implementation.\n *\n * @since 0.1.0\n */\n\nimport * as NodeChildProcessSpawner from \"@effect/platform-node/NodeChildProcessSpawner\"\nimport * as NodeCrypto from \"@effect/platform-node/NodeCrypto\"\nimport * as NodeFileSystem from \"@effect/platform-node/NodeFileSystem\"\nimport * as NodeHttpClient from \"@effect/platform-node/NodeHttpClient\"\nimport * as NodePath from \"@effect/platform-node/NodePath\"\nimport type { Jj, JjError } from \"@smthrs/jj\"\nimport * as NodeJj from \"@smthrs/jj/node/NodeJj\"\nimport type { HostServiceIds } from \"@smthrs/kernel/HostServices\"\nimport type * as KernelProcessConfinement from \"@smthrs/kernel/ProcessConfinement\"\nimport type * as ProcessLedger from \"@smthrs/kernel/ProcessLedger\"\nimport type { FileSystem } from \"effect/FileSystem\"\nimport * as Layer from \"effect/Layer\"\nimport type * as Path from \"effect/Path\"\nimport * as Schema from \"effect/Schema\"\nimport type { HttpClient } from \"effect/unstable/http/HttpClient\"\nimport type { ChildProcessSpawner } from \"effect/unstable/process/ChildProcessSpawner\"\nimport { isAbsolute } from \"node:path\"\nimport * as AtomicFileSystem from \"./AtomicFileSystem.ts\"\nimport * as EgressHttpClient from \"./EgressHttpClient.ts\"\nimport * as ProcessConfinement from \"./ProcessConfinement.ts\"\nimport * as ProcessReaper from \"./ProcessReaper.ts\"\n\n/**\n * The Node platform modules Effect ships, re-exported so a program that wants\n * only part of the host has one place to reach for them. `NodeJj` belongs to\n * `@smthrs/jj`; import it from there.\n *\n * `NodeCrypto` is here for a different reason than the rest. `Crypto` is not a\n * Host service \u2014 it carries no host authority the kernel could attenuate, so\n * it is not in {@link NodeHost} and not in the closed list \u2014 but every durable\n * composition needs one, and a program that already depends on this package\n * for its host should not have to add a second dependency for the digest.\n *\n * @category re-exports\n * @since 0.1.0\n */\nexport {\n  AtomicFileSystem,\n  EgressHttpClient,\n  NodeChildProcessSpawner,\n  NodeCrypto,\n  NodeFileSystem,\n  NodeHttpClient,\n  ProcessReaper\n}\n\n/**\n * The `HttpClient` every bundle below installs: Undici through the egress\n * proxy this process's environment names, and a direct Undici pool when it\n * names none.\n *\n * `NodeHttpClient.layerUndici` is the direct pool unconditionally. It is still\n * re-exported above for a program composing its own services, but a bundle\n * that spans a whole host has to work inside a sandbox whose only way out is a\n * proxy, so the bundles read the environment. See {@link EgressHttpClient}.\n */\nconst httpClient = EgressHttpClient.layer(process.env)\n\n/**\n * The union of host services provided by the Node host layer.\n *\n * @category models\n * @since 0.1.0\n */\nexport type NodeHost =\n  | FileSystem\n  | Path.Path\n  | ChildProcessSpawner\n  | Jj\n  | HttpClient\n  | KernelProcessConfinement.ProcessConfinement\n\n/**\n * Invalid repository-root configuration, refused before layer construction.\n * @category errors\n * @since 1.0.0-rc.0\n */\nexport class NodeHostError extends Schema.TaggedError<NodeHostError>()(\"@smthrs/platform-node/NodeHostError\", {\n  code: Schema.Literal(\"invalid_repository_root\"),\n  message: Schema.String\n}) {\n  override readonly name = \"NodeHostError\"\n}\n\nconst absoluteRoot = (root: string): string => {\n  if (isAbsolute(root)) return root\n  throw new NodeHostError({\n    code: \"invalid_repository_root\",\n    message: `NodeHost requires an absolute repository root, got ${\n      JSON.stringify(Array.from(root).slice(0, 64).join(\"\"))\n    }`\n  })\n}\n\n/**\n * Stable implementation identities for the raw bundle's five Host slots.\n * Contained POSIX factories replace its spawner with {@link ProcessReaper.layerSpawner}.\n * @category models\n * @since 1.0.0-rc.0\n */\nexport const implementationIds: Readonly<Record<(typeof HostServiceIds)[number], string>> = {\n  \"effect/FileSystem\": \"@smthrs/platform-node/AtomicFileSystem\",\n  \"effect/Path\": \"@effect/platform-node/NodePath\",\n  \"effect/process/ChildProcessSpawner\": \"@effect/platform-node/NodeChildProcessSpawner\",\n  \"@smthrs/jj/Jj\": \"@smthrs/jj/node/NodeJj\",\n  \"effect/HttpClient\": \"@smthrs/platform-node/EgressHttpClient\"\n}\n\n/** The two services `NodeChildProcessSpawner` resolves paths and files with. */\nconst platform = Layer.mergeAll(AtomicFileSystem.layer, NodePath.layer)\n\n/**\n * What a caller may configure about a contained Node host.\n *\n * `platform` is deliberately absent. `ContainedSpawner.Options` declares it so a\n * caller that supplies its own spawner can describe one, but this native host\n * detaches by `process.platform` whatever a record claims. A caller-supplied\n * `\"win32\"` on a POSIX host would therefore\n * record `pgid: null` for a child that really does lead a group, and\n * {@link ProcessReaper.reap} would retire that record as `no-group` and leave\n * the orphan running forever \u2014 a durable lie rather than a compile error.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport type ContainedOptions = ProcessReaper.SpawnerOptions & ProcessReaper.Options\n\n/** The reaper half of {@link ContainedOptions}. */\nconst reaping = (options?: ContainedOptions): ProcessReaper.Options => ({\n  ownerPid: options?.ownerPid,\n  system: options?.system\n})\n\n/**\n * Provides the default Node implementations for the whole closed Host surface.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layer: Layer.Layer<NodeHost, JjError> = Layer.mergeAll(\n  ProcessConfinement.layer(),\n  platform,\n  Layer.provide(NodeChildProcessSpawner.layer, platform),\n  httpClient,\n  NodeJj.layer\n)\n\n/**\n * Provides the Node host with `Jj` bound to one absolute repository root.\n *\n * @category layers\n * @since 1.0.0\n */\nexport const layerAt = (repositoryRoot: string): Layer.Layer<NodeHost, JjError> =>\n  Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    Layer.provide(NodeChildProcessSpawner.layer, platform),\n    httpClient,\n    NodeJj.layerAt(absoluteRoot(repositoryRoot))\n  )\n\n/**\n * Provides the Node host with process containment turned on.\n *\n * The difference from {@link layer} is what happens to a spawned process when\n * its run stops. Under {@link layer} a child is signalled when its scope\n * closes and then waited for, forever if it ignores `SIGTERM`, and a host that\n * dies without closing its scopes abandons every child it started. This layer\n * gives each child an escalation deadline and records it in the\n * `ProcessLedger`, then sweeps the records a previous incarnation of the same\n * host left behind before it hands the host over\n * ({@link ProcessReaper.reap}).\n *\n * jj is contained here too: `layerContained` builds the `Jj` service over the\n * same spawner rather than letting it start its own children, so a `jj`\n * invocation a crashed host left running is a record the next incarnation\n * reaps like any other.\n *\n * The ledger is a requirement rather than a default because the durable half\n * of containment is only as good as the journal underneath it:\n * `ProcessLedger.layer` inherits a crashed incarnation's processes,\n * `ProcessLedger.layerMemory` contains this incarnation and nothing more, and\n * the choice belongs to the program that knows which it has.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layerContained = (\n  options?: ContainedOptions\n): Layer.Layer<NodeHost, JjError, ProcessLedger.ProcessLedger> => {\n  const spawner = Layer.provide(\n    ProcessReaper.layerSpawner({ graceMs: options?.graceMs }),\n    Layer.provide(NodeChildProcessSpawner.layer, platform)\n  )\n  return Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    httpClient,\n    // jj goes through the CONTAINED spawner here, not around it. `NodeJj.layer`\n    // spawns its own children, which is right for a host that has no spawner\n    // to offer, but under containment it would mean a `jj` that leads no\n    // recorded process group, appears in no ledger, and survives the\n    // incarnation that started it.\n    Layer.provideMerge(NodeJj.layerSpawner, spawner)\n  ).pipe(Layer.provideMerge(ProcessReaper.layer(reaping(options))))\n}\n\n/**\n * Provides the contained Node host with `Jj` bound to one absolute repository\n * root.\n *\n * @category layers\n * @since 1.0.0\n */\nexport const layerContainedAt = (\n  repositoryRoot: string,\n  options?: ContainedOptions\n): Layer.Layer<NodeHost, JjError, ProcessLedger.ProcessLedger> => {\n  const spawner = Layer.provide(\n    ProcessReaper.layerSpawner({ graceMs: options?.graceMs }),\n    Layer.provide(NodeChildProcessSpawner.layer, platform)\n  )\n  return Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    httpClient,\n    Layer.provideMerge(NodeJj.layerSpawnerAt(absoluteRoot(repositoryRoot)), spawner)\n  ).pipe(Layer.provideMerge(ProcessReaper.layer(reaping(options))))\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuBA,8BAAyC;AACzC,iBAA4B;AAC5B,qBAAgC;AAChC,qBAAgC;AAChC,eAA0B;AAE1B,aAAwB;AAKxB,YAAuB;AAEvB,aAAwB;AAGxB,uBAA2B;AAC3B,uBAAkC;AAClC,uBAAkC;AAClC,yBAAoC;AACpC,oBAA+B;AAoC/B,MAAM,aAAa,iBAAiB,MAAM,QAAQ,GAAG;AAqB9C,MAAM,sBAAsB,OAAO,YAA2B,EAAE,uCAAuC;AAAA,EAC5G,MAAM,OAAO,QAAQ,yBAAyB;AAAA,EAC9C,SAAS,OAAO;AAClB,CAAC,EAAE;AAAA,EACiB,OAAO;AAC3B;AAEA,MAAM,eAAe,CAAC,SAAyB;AAC7C,UAAI,6BAAW,IAAI,EAAG,QAAO;AAC7B,QAAM,IAAI,cAAc;AAAA,IACtB,MAAM;AAAA,IACN,SAAS,sDACP,KAAK,UAAU,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CACvD;AAAA,EACF,CAAC;AACH;AAQO,MAAM,oBAA+E;AAAA,EAC1F,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,sCAAsC;AAAA,EACtC,iBAAiB;AAAA,EACjB,qBAAqB;AACvB;AAGA,MAAM,WAAW,MAAM,SAAS,iBAAiB,OAAO,SAAS,KAAK;AAmBtE,MAAM,UAAU,CAAC,aAAuD;AAAA,EACtE,UAAU,SAAS;AAAA,EACnB,QAAQ,SAAS;AACnB;AAQO,MAAM,QAAwC,MAAM;AAAA,EACzD,mBAAmB,MAAM;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,OAAO;AACT;AAQO,MAAM,UAAU,CAAC,mBACtB,MAAM;AAAA,EACJ,mBAAmB,MAAM;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,OAAO,QAAQ,aAAa,cAAc,CAAC;AAC7C;AA4BK,MAAM,iBAAiB,CAC5B,YACgE;AAChE,QAAM,UAAU,MAAM;AAAA,IACpB,cAAc,aAAa,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,IACxD,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACvD;AACA,SAAO,MAAM;AAAA,IACX,mBAAmB,MAAM;AAAA,IACzB;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAM,aAAa,OAAO,cAAc,OAAO;AAAA,EACjD,EAAE,KAAK,MAAM,aAAa,cAAc,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC;AAClE;AASO,MAAM,mBAAmB,CAC9B,gBACA,YACgE;AAChE,QAAM,UAAU,MAAM;AAAA,IACpB,cAAc,aAAa,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,IACxD,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACvD;AACA,SAAO,MAAM;AAAA,IACX,mBAAmB,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,MAAM,aAAa,OAAO,eAAe,aAAa,cAAc,CAAC,GAAG,OAAO;AAAA,EACjF,EAAE,KAAK,MAAM,aAAa,cAAc,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC;AAClE;",
+  "sourcesContent": ["/**\n * Aggregate Node.js Host bundle.\n *\n * This module defines the `NodeHost` service union and a single `layer` that\n * provides the closed Host surface backed by Node: `@effect/platform-node`'s\n * filesystem, child-process spawner, Undici `HttpClient`, native `Path`,\n * and the Node `Jj` adapter from its own package. Use the layer when a Node\n * program wants every host capability from one place; use the individual\n * modules when a program should only be able to reach part of the host. The\n * bundle also supplies native `ProcessConfinement` for the kernel spawner.\n *\n * There is no Node HTTP module either: outgoing requests are Effect's\n * `HttpClient`, and `@effect/platform-node` already ships the Undici-backed\n * implementation. Undici follows no redirect unless a redirect interceptor is\n * installed, so every hop stays visible to `@smthrs/kernel`'s decorator.\n *\n * There is no Node shell module: running a command is Effect's\n * `ChildProcessSpawner`, and `@effect/platform-node` already ships the\n * implementation.\n *\n * @since 0.1.0\n */\n\nimport * as NodeChildProcessSpawner from \"@effect/platform-node/NodeChildProcessSpawner\"\nimport * as NodeCrypto from \"@effect/platform-node/NodeCrypto\"\nimport * as NodeFileSystem from \"@effect/platform-node/NodeFileSystem\"\nimport * as NodeHttpClient from \"@effect/platform-node/NodeHttpClient\"\nimport * as NodePath from \"@effect/platform-node/NodePath\"\nimport type { Jj, JjError } from \"@smthrs/jj\"\nimport * as NodeJj from \"@smthrs/jj/node/NodeJj\"\nimport type { HostServiceIds } from \"@smthrs/kernel/HostServices\"\nimport type * as KernelProcessConfinement from \"@smthrs/kernel/ProcessConfinement\"\nimport type * as ProcessLedger from \"@smthrs/kernel/ProcessLedger\"\nimport type { FileSystem } from \"effect/FileSystem\"\nimport type { HttpClient } from \"effect/http/HttpClient\"\nimport * as Layer from \"effect/Layer\"\nimport type * as Path from \"effect/Path\"\nimport type { ChildProcessSpawner } from \"effect/process/ChildProcessSpawner\"\nimport * as Schema from \"effect/Schema\"\nimport { isAbsolute } from \"node:path\"\nimport * as AtomicFileSystem from \"./AtomicFileSystem.ts\"\nimport * as EgressHttpClient from \"./EgressHttpClient.ts\"\nimport * as ProcessConfinement from \"./ProcessConfinement.ts\"\nimport * as ProcessReaper from \"./ProcessReaper.ts\"\n\n/**\n * The Node platform modules Effect ships, re-exported so a program that wants\n * only part of the host has one place to reach for them. `NodeJj` belongs to\n * `@smthrs/jj`; import it from there.\n *\n * `NodeCrypto` is here for a different reason than the rest. `Crypto` is not a\n * Host service \u2014 it carries no host authority the kernel could attenuate, so\n * it is not in {@link NodeHost} and not in the closed list \u2014 but every durable\n * composition needs one, and a program that already depends on this package\n * for its host should not have to add a second dependency for the digest.\n *\n * @category re-exports\n * @since 0.1.0\n */\nexport {\n  AtomicFileSystem,\n  EgressHttpClient,\n  NodeChildProcessSpawner,\n  NodeCrypto,\n  NodeFileSystem,\n  NodeHttpClient,\n  ProcessReaper\n}\n\n/**\n * The `HttpClient` every bundle below installs: Undici through the egress\n * proxy this process's environment names, and a direct Undici pool when it\n * names none.\n *\n * `NodeHttpClient.layerUndici` is the direct pool unconditionally. It is still\n * re-exported above for a program composing its own services, but a bundle\n * that spans a whole host has to work inside a sandbox whose only way out is a\n * proxy, so the bundles read the environment. See {@link EgressHttpClient}.\n */\nconst httpClient = EgressHttpClient.layer(process.env)\n\n/**\n * The union of host services provided by the Node host layer.\n *\n * @category models\n * @since 0.1.0\n */\nexport type NodeHost =\n  | FileSystem\n  | Path.Path\n  | ChildProcessSpawner\n  | Jj\n  | HttpClient\n  | KernelProcessConfinement.ProcessConfinement\n\n/**\n * Invalid repository-root configuration, refused before layer construction.\n * @category errors\n * @since 1.0.0-rc.0\n */\nexport class NodeHostError extends Schema.TaggedError<NodeHostError>()(\"@smthrs/platform-node/NodeHostError\", {\n  code: Schema.Literal(\"invalid_repository_root\"),\n  message: Schema.String\n}) {\n  override readonly name = \"NodeHostError\"\n}\n\nconst absoluteRoot = (root: string): string => {\n  if (isAbsolute(root)) return root\n  throw new NodeHostError({\n    code: \"invalid_repository_root\",\n    message: `NodeHost requires an absolute repository root, got ${\n      JSON.stringify(Array.from(root).slice(0, 64).join(\"\"))\n    }`\n  })\n}\n\n/**\n * Stable implementation identities for the raw bundle's five Host slots.\n * Contained POSIX factories replace its spawner with {@link ProcessReaper.layerSpawner}.\n * @category models\n * @since 1.0.0-rc.0\n */\nexport const implementationIds: Readonly<Record<(typeof HostServiceIds)[number], string>> = {\n  \"effect/FileSystem\": \"@smthrs/platform-node/AtomicFileSystem\",\n  \"effect/Path\": \"@effect/platform-node/NodePath\",\n  \"effect/process/ChildProcessSpawner\": \"@effect/platform-node/NodeChildProcessSpawner\",\n  \"@smthrs/jj/Jj\": \"@smthrs/jj/node/NodeJj\",\n  \"effect/HttpClient\": \"@smthrs/platform-node/EgressHttpClient\"\n}\n\n/** The two services `NodeChildProcessSpawner` resolves paths and files with. */\nconst platform = Layer.mergeAll(AtomicFileSystem.layer, NodePath.layer)\n\n/**\n * What a caller may configure about a contained Node host.\n *\n * `platform` is deliberately absent. `ContainedSpawner.Options` declares it so a\n * caller that supplies its own spawner can describe one, but this native host\n * detaches by `process.platform` whatever a record claims. A caller-supplied\n * `\"win32\"` on a POSIX host would therefore\n * record `pgid: null` for a child that really does lead a group, and\n * {@link ProcessReaper.reap} would retire that record as `no-group` and leave\n * the orphan running forever \u2014 a durable lie rather than a compile error.\n *\n * @category models\n * @since 1.0.0-rc.0\n */\nexport type ContainedOptions = ProcessReaper.SpawnerOptions & ProcessReaper.Options\n\n/** The reaper half of {@link ContainedOptions}. */\nconst reaping = (options?: ContainedOptions): ProcessReaper.Options => ({\n  ownerPid: options?.ownerPid,\n  system: options?.system\n})\n\n/**\n * Provides the default Node implementations for the whole closed Host surface.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layer: Layer.Layer<NodeHost, JjError> = Layer.mergeAll(\n  ProcessConfinement.layer(),\n  platform,\n  Layer.provide(NodeChildProcessSpawner.layer, platform),\n  httpClient,\n  NodeJj.layer\n)\n\n/**\n * Provides the Node host with `Jj` bound to one absolute repository root.\n *\n * @category layers\n * @since 1.0.0\n */\nexport const layerAt = (repositoryRoot: string): Layer.Layer<NodeHost, JjError> =>\n  Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    Layer.provide(NodeChildProcessSpawner.layer, platform),\n    httpClient,\n    NodeJj.layerAt(absoluteRoot(repositoryRoot))\n  )\n\n/**\n * Provides the Node host with process containment turned on.\n *\n * The difference from {@link layer} is what happens to a spawned process when\n * its run stops. Under {@link layer} a child is signalled when its scope\n * closes and then waited for, forever if it ignores `SIGTERM`, and a host that\n * dies without closing its scopes abandons every child it started. This layer\n * gives each child an escalation deadline and records it in the\n * `ProcessLedger`, then sweeps the records a previous incarnation of the same\n * host left behind before it hands the host over\n * ({@link ProcessReaper.reap}).\n *\n * jj is contained here too: `layerContained` builds the `Jj` service over the\n * same spawner rather than letting it start its own children, so a `jj`\n * invocation a crashed host left running is a record the next incarnation\n * reaps like any other.\n *\n * The ledger is a requirement rather than a default because the durable half\n * of containment is only as good as the journal underneath it:\n * `ProcessLedger.layer` inherits a crashed incarnation's processes,\n * `ProcessLedger.layerMemory` contains this incarnation and nothing more, and\n * the choice belongs to the program that knows which it has.\n *\n * @category layers\n * @since 0.1.0\n */\nexport const layerContained = (\n  options?: ContainedOptions\n): Layer.Layer<NodeHost, JjError, ProcessLedger.ProcessLedger> => {\n  const spawner = Layer.provide(\n    ProcessReaper.layerSpawner({ graceMs: options?.graceMs }),\n    Layer.provide(NodeChildProcessSpawner.layer, platform)\n  )\n  return Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    httpClient,\n    // jj goes through the CONTAINED spawner here, not around it. `NodeJj.layer`\n    // spawns its own children, which is right for a host that has no spawner\n    // to offer, but under containment it would mean a `jj` that leads no\n    // recorded process group, appears in no ledger, and survives the\n    // incarnation that started it.\n    Layer.provideMerge(NodeJj.layerSpawner, spawner)\n  ).pipe(Layer.provideMerge(ProcessReaper.layer(reaping(options))))\n}\n\n/**\n * Provides the contained Node host with `Jj` bound to one absolute repository\n * root.\n *\n * @category layers\n * @since 1.0.0\n */\nexport const layerContainedAt = (\n  repositoryRoot: string,\n  options?: ContainedOptions\n): Layer.Layer<NodeHost, JjError, ProcessLedger.ProcessLedger> => {\n  const spawner = Layer.provide(\n    ProcessReaper.layerSpawner({ graceMs: options?.graceMs }),\n    Layer.provide(NodeChildProcessSpawner.layer, platform)\n  )\n  return Layer.mergeAll(\n    ProcessConfinement.layer(),\n    platform,\n    httpClient,\n    Layer.provideMerge(NodeJj.layerSpawnerAt(absoluteRoot(repositoryRoot)), spawner)\n  ).pipe(Layer.provideMerge(ProcessReaper.layer(reaping(options))))\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuBA,8BAAyC;AACzC,iBAA4B;AAC5B,qBAAgC;AAChC,qBAAgC;AAChC,eAA0B;AAE1B,aAAwB;AAMxB,YAAuB;AAGvB,aAAwB;AACxB,uBAA2B;AAC3B,uBAAkC;AAClC,uBAAkC;AAClC,yBAAoC;AACpC,oBAA+B;AAoC/B,MAAM,aAAa,iBAAiB,MAAM,QAAQ,GAAG;AAqB9C,MAAM,sBAAsB,OAAO,YAA2B,EAAE,uCAAuC;AAAA,EAC5G,MAAM,OAAO,QAAQ,yBAAyB;AAAA,EAC9C,SAAS,OAAO;AAClB,CAAC,EAAE;AAAA,EACiB,OAAO;AAC3B;AAEA,MAAM,eAAe,CAAC,SAAyB;AAC7C,UAAI,6BAAW,IAAI,EAAG,QAAO;AAC7B,QAAM,IAAI,cAAc;AAAA,IACtB,MAAM;AAAA,IACN,SAAS,sDACP,KAAK,UAAU,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CACvD;AAAA,EACF,CAAC;AACH;AAQO,MAAM,oBAA+E;AAAA,EAC1F,qBAAqB;AAAA,EACrB,eAAe;AAAA,EACf,sCAAsC;AAAA,EACtC,iBAAiB;AAAA,EACjB,qBAAqB;AACvB;AAGA,MAAM,WAAW,MAAM,SAAS,iBAAiB,OAAO,SAAS,KAAK;AAmBtE,MAAM,UAAU,CAAC,aAAuD;AAAA,EACtE,UAAU,SAAS;AAAA,EACnB,QAAQ,SAAS;AACnB;AAQO,MAAM,QAAwC,MAAM;AAAA,EACzD,mBAAmB,MAAM;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,OAAO;AACT;AAQO,MAAM,UAAU,CAAC,mBACtB,MAAM;AAAA,EACJ,mBAAmB,MAAM;AAAA,EACzB;AAAA,EACA,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACrD;AAAA,EACA,OAAO,QAAQ,aAAa,cAAc,CAAC;AAC7C;AA4BK,MAAM,iBAAiB,CAC5B,YACgE;AAChE,QAAM,UAAU,MAAM;AAAA,IACpB,cAAc,aAAa,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,IACxD,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACvD;AACA,SAAO,MAAM;AAAA,IACX,mBAAmB,MAAM;AAAA,IACzB;AAAA,IACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,MAAM,aAAa,OAAO,cAAc,OAAO;AAAA,EACjD,EAAE,KAAK,MAAM,aAAa,cAAc,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC;AAClE;AASO,MAAM,mBAAmB,CAC9B,gBACA,YACgE;AAChE,QAAM,UAAU,MAAM;AAAA,IACpB,cAAc,aAAa,EAAE,SAAS,SAAS,QAAQ,CAAC;AAAA,IACxD,MAAM,QAAQ,wBAAwB,OAAO,QAAQ;AAAA,EACvD;AACA,SAAO,MAAM;AAAA,IACX,mBAAmB,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,MAAM,aAAa,OAAO,eAAe,aAAa,cAAc,CAAC,GAAG,OAAO;AAAA,EACjF,EAAE,KAAK,MAAM,aAAa,cAAc,MAAM,QAAQ,OAAO,CAAC,CAAC,CAAC;AAClE;",
   "names": []
 }

package/dist/cjs/ProcessConfinement.js

@@ -36,7 +36,7 @@ var KernelProcessConfinement = __toESM(require("@smthrs/kernel/ProcessConfinemen
 var Effect = __toESM(require("effect/Effect"), 1);
 var Layer = __toESM(require("effect/Layer"), 1);
 var PlatformError = __toESM(require("effect/PlatformError"), 1);
-var ChildProcess = __toESM(require("effect/unstable/process/ChildProcess"), 1);
+var ChildProcess = __toESM(require("effect/process/ChildProcess"), 1);
 var NodeFs = __toESM(require("node:fs"), 1);
 var NodeOs = __toESM(require("node:os"), 1);
 var NodePath = __toESM(require("node:path"), 1);

package/dist/cjs/ProcessConfinement.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/ProcessConfinement.ts"],
-  "sourcesContent": ["/**\n * The kernel's `ProcessConfinement` seam, filled with this host's native\n * sandbox: bubblewrap on Linux, seatbelt on macOS.\n *\n * `@smthrs/kernel`'s `ChildProcessSpawner.layer` hands every stage that passed\n * its `proc:spawn` check to the confinement in its context, together with the\n * `ProcessConfinement.Profile` the grants in force admit. This module turns\n * that profile into a {@link ProcessSandbox.Request}, plans it against the\n * workspace, and wraps the stage's argv in the mechanism the host has, so an\n * approved `bash` can write only where an `fs:write` grant says and reach the\n * network only when a `net:*` grant says. A stage that asked for the platform\n * shell is spelled out as `/bin/sh -c <line>` first: wrapping a `shell: true`\n * command line would otherwise leave its redirections and pipes to a shell\n * outside the sandbox.\n *\n * A host with no mechanism is the one decision this module leaves to its\n * caller: {@link Options.unavailable} either refuses the spawn, so nothing\n * runs that the profile would not have confined, or runs it unconfined with\n * a warning, the way every host did before this seam existed. A write set\n * the mechanism cannot enforce safely, a symbolic link below the workspace\n * root, is always refused.\n *\n * @since 1.0.0-rc.1\n */\n\nimport * as KernelProcessConfinement from \"@smthrs/kernel/ProcessConfinement\"\nimport * as Effect from \"effect/Effect\"\nimport * as Layer from \"effect/Layer\"\nimport * as PlatformError from \"effect/PlatformError\"\nimport type * as Scope from \"effect/Scope\"\nimport * as ChildProcess from \"effect/unstable/process/ChildProcess\"\nimport * as NodeFs from \"node:fs\"\nimport * as NodeOs from \"node:os\"\nimport * as NodePath from \"node:path\"\nimport * as ProcessSandbox from \"./ProcessSandbox.ts\"\n\n/**\n * How the confinement is built.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface Options {\n  /**\n   * What happens when this host has no mechanism to enforce a profile with.\n   * `\"refuse\"` fails the spawn, so a command never runs with more than the\n   * profile allows; `\"unconfined\"` runs it as given and logs a\n   * warning naming what the host lacks.\n   */\n  readonly unavailable?: \"refuse\" | \"unconfined\" | undefined\n  /** The host facts mechanism selection reads; defaults to the real host. */\n  readonly host?: ProcessSandbox.Host | undefined\n  /** Where each run's private temporary directory is created; defaults to the OS temporary directory. */\n  readonly temporaryDirectory?: string | undefined\n}\n\nconst shellLine = (command: ChildProcess.StandardCommand): string => [command.command, ...command.args].join(\" \")\n\n/**\n * The argv a stage executes, with a shell request made explicit.\n *\n * Node runs a `shell: true` stage as `/bin/sh -c <line>` on POSIX, and a\n * string shell as `<shell> -c <line>`; the wrapper needs that program to be\n * the one it confines, so the shell becomes the argv's first token and the\n * spawned stage no longer asks for one.\n */\nconst argvOf = (command: ChildProcess.StandardCommand): ReadonlyArray<string> => {\n  const shell = command.options.shell\n  if (shell === undefined || shell === false) return [command.command, ...command.args]\n  return [shell === true ? \"/bin/sh\" : shell, \"-c\", shellLine(command)]\n}\n\nconst failure = (\n  tag: \"NotFound\" | \"PermissionDenied\" | \"Unknown\",\n  command: ChildProcess.StandardCommand,\n  description: string,\n  cause: unknown\n): PlatformError.PlatformError =>\n  PlatformError.systemError({\n    _tag: tag,\n    module: \"ProcessConfinement\",\n    method: \"confine\",\n    pathOrDescriptor: shellLine(command),\n    description,\n    cause\n  })\n\nconst messageOf = (cause: unknown): string =>\n  ProcessSandbox.isUnenforceable(cause)\n    ? cause.message\n    : cause instanceof Error\n    ? cause.message\n    : String(cause)\n\n/** Classic BPF for seccomp_data: deny host Unix sockets and io_uring, preserving stream socketpair.\n * Closed networking additionally denies every IP socket family.\n * Wrong ABI and x32 syscall encodings fail closed rather than bypassing socket(). */\nconst networkFilter = (architecture: string, network: \"none\" | \"open\"): Uint8Array => {\n  const abi = architecture === \"x64\"\n    ? { audit: 0xc000003e, socket: 41, socketpair: 53 }\n    : architecture === \"arm64\"\n    ? { audit: 0xc00000b7, socket: 198, socketpair: 199 }\n    : undefined\n  if (abi === undefined) throw new Error(`native-network seccomp is unavailable on ${architecture}`)\n  const instructions: Array<readonly [number, number, number, number]> = [\n    [0x20, 0, 0, 4], // load audit architecture\n    [0x15, 1, 0, abi.audit],\n    [0x06, 0, 0, 0x80000000], // kill unsupported ABI\n    [0x20, 0, 0, 0], // load syscall number\n    [0x35, 0, 1, 0x40000000],\n    [0x06, 0, 0, 0x80000000], // kill x32 / invalid high syscall numbers\n    [0x15, 0, 1, 425], // io_uring_setup on both supported ABIs\n    [0x06, 0, 0, 0x00050001], // io_uring can otherwise create sockets without socket()\n    [0x15, 0, 6, abi.socketpair],\n    [0x20, 0, 0, 16], // socketpair domain\n    [0x15, 0, 4, 1], // AF_UNIX\n    [0x20, 0, 0, 24], // socketpair type, low 32 bits of args[1]\n    [0x54, 0, 0, 0xf], // strip SOCK_NONBLOCK and SOCK_CLOEXEC\n    [0x15, 1, 0, 1], // only SOCK_STREAM; Linux aliases SOCK_RAW to datagram operations\n    [0x06, 0, 0, 0x00050001],\n    [0x20, 0, 0, 0] // reload syscall number before the socket() policy\n  ]\n  if (network === \"none\") {\n    instructions.push([0x15, 0, 1, abi.socket], [0x06, 0, 0, 0x00050001]) // EPERM for every socket family\n  } else {\n    instructions.push(\n      [0x15, 0, 3, abi.socket],\n      [0x20, 0, 0, 16], // socket domain, low 32 bits of args[0]\n      [0x15, 0, 1, 1], // AF_UNIX; IP families remain available\n      [0x06, 0, 0, 0x00050001]\n    )\n  }\n  instructions.push([0x06, 0, 0, 0x7fff0000]) // SECCOMP_RET_ALLOW\n  const bytes = new Uint8Array(instructions.length * 8)\n  const view = new DataView(bytes.buffer)\n  for (const [index, [code, jt, jf, value]] of instructions.entries()) {\n    view.setUint16(index * 8, code, true)\n    view.setUint8(index * 8 + 2, jt)\n    view.setUint8(index * 8 + 3, jf)\n    view.setUint32(index * 8 + 4, value, true)\n  }\n  return bytes\n}\n\n/**\n * Builds the native confinement.\n *\n * @category constructors\n * @since 1.0.0-rc.1\n */\nexport const make = (options: Options = {}): KernelProcessConfinement.Service => {\n  const hostFacts = options.host ?? ProcessSandbox.host()\n  const temporaryRoot = options.temporaryDirectory ?? NodeOs.tmpdir()\n  const unavailable = options.unavailable ?? \"refuse\"\n  const confine = Effect.fn(\"ProcessConfinement.confine\")(function*(\n    command: ChildProcess.StandardCommand,\n    profile: KernelProcessConfinement.Profile\n  ): Effect.fn.Return<ChildProcess.StandardCommand, PlatformError.PlatformError, Scope.Scope> {\n    const request: ProcessSandbox.Request = {\n      network: profile.network,\n      unixSockets: false,\n      strict: true,\n      reads: profile.reads,\n      writes: profile.writes,\n      readOnly: profile.readOnly\n    }\n    const selected = ProcessSandbox.select(request, hostFacts)\n    if (ProcessSandbox.isUnenforceable(selected)) {\n      if (unavailable === \"refuse\") {\n        return yield* failure(\n          \"NotFound\",\n          command,\n          `${selected.message} This host refuses to spawn unconfined.`,\n          selected\n        )\n      }\n      yield* Effect.logWarning(`${selected.message} Running unconfined.`)\n      return command\n    }\n    // The stage's directory is absolute: the kernel spawner roots it first.\n    const cwd = command.options.cwd ?? profile.workspaceRoot\n    const within = (root: string, path: string): boolean => {\n      const relative = NodePath.relative(root, path)\n      return relative !== \"..\" && !relative.startsWith(`..${NodePath.sep}`) && !NodePath.isAbsolute(relative)\n    }\n    if (!within(profile.workspaceRoot, cwd)) {\n      return yield* failure(\"PermissionDenied\", command, \"command directory is outside the workspace\", undefined)\n    }\n    // A lexical workspace path can enter an unrelated host directory through\n    // a symlink. Check the real directory before granting or preparing a run.\n    const canonical = yield* Effect.try({\n      try: () => {\n        const root = NodeFs.realpathSync(profile.workspaceRoot)\n        const directory = NodeFs.realpathSync(cwd)\n        if (!within(root, directory)) throw new Error(\"command directory is outside the workspace\")\n        for (const relative of profile.reads) {\n          const lexical = NodePath.resolve(root, relative)\n          if (!within(root, lexical)) continue\n          // A read bind follows its source symlink. Refuse a grant that would\n          // therefore mount unrelated host bytes inside the workspace.\n          if (NodeFs.existsSync(lexical)) {\n            const real = NodeFs.realpathSync(lexical)\n            if (!within(root, real)) throw new Error(\"read grant resolves outside the workspace\")\n            if (real !== lexical) throw new Error(\"read grant is a symbolic link\")\n          }\n        }\n        return { root, cwd: directory }\n      },\n      catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n    })\n    // The private tmp lives as long as the spawn's scope, however preparation\n    // ends; the declared write directories are created so the mechanism has\n    // something to bind, which the grant that opened them already permits.\n    const allocatedTmp = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => NodeFs.mkdtempSync(NodePath.join(temporaryRoot, \"smithers-confinement-\")),\n        catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n      }),\n      (directory) =>\n        Effect.sync(() => {\n          try {\n            NodeFs.rmSync(directory, { recursive: true, force: true })\n          } catch {\n            // Cleanup is best-effort when the host refuses directory removal.\n          }\n        })\n    )\n    const tmp = yield* Effect.try({\n      try: () => NodeFs.realpathSync(allocatedTmp),\n      catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n    })\n    const planned = yield* Effect.try({\n      try: () => ProcessSandbox.plan(request, { workspaceRoot: canonical.root, cwd: canonical.cwd, tmp }, hostFacts),\n      catch: (cause) => failure(\"Unknown\", command, `could not plan the confinement: ${messageOf(cause)}`, cause)\n    })\n    if (ProcessSandbox.isUnenforceable(planned)) {\n      return yield* failure(\"PermissionDenied\", command, planned.message, planned)\n    }\n    // Build outputs may grant their parent directory. An agent grant must\n    // never inherit that widening when a requested tree is already a file.\n    const exactWrites = profile.writes.map((relative) => NodePath.resolve(planned.workspaceRoot, relative))\n    if (planned.writes.some((write) => !exactWrites.includes(write))) {\n      return yield* failure(\"PermissionDenied\", command, \"write grant is not a directory tree\", undefined)\n    }\n    // A workspace link does not grant authority to its target on the host.\n    const confinement: ProcessSandbox.Plan = { ...planned, externalReads: [] }\n    yield* Effect.try({\n      try: () => {\n        ProcessSandbox.validateWrites(confinement, hostFacts)\n        NodeFs.mkdirSync(NodePath.join(tmp, \"home\"), { recursive: true })\n        NodeFs.mkdirSync(NodePath.join(tmp, \"cache\"), { recursive: true })\n        for (const write of planned.writes) NodeFs.mkdirSync(write, { recursive: true })\n      },\n      catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n    })\n    // Only the target receives its requested environment. Dynamic-loader and\n    // other startup variables must never configure the host sandbox launcher.\n    const targetEnvironment: Record<string, string> = {}\n    const inherited = command.options.env === undefined || command.options.extendEnv === true\n    for (const [name, value] of Object.entries(inherited ? process.env : {})) {\n      // Bash exports functions as names such as BASH_FUNC_which%%. These\n      // ambient entries cannot be exported by the portable inner launcher.\n      if (typeof value === \"string\" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) targetEnvironment[name] = value\n    }\n    for (const [name, value] of Object.entries(command.options.env ?? {})) {\n      if (typeof value === \"string\") targetEnvironment[name] = value\n      else delete targetEnvironment[name]\n    }\n    const privateEnvironment = ProcessSandbox.environment(confinement)\n    const script = yield* Effect.try({\n      try: () => {\n        const quote = (value: string): string => `'${value.replaceAll(\"'\", \"'\\\\''\")}'`\n        const exports: Array<string> = []\n        for (const [name, value] of Object.entries({ ...targetEnvironment, ...privateEnvironment })) {\n          if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) throw new Error(\"environment variable name is not portable\")\n          if (value.includes(\"\\0\")) throw new Error(\"environment variable contains a null byte\")\n          exports.push(`export ${name}=${quote(value)}`)\n        }\n        const file = NodePath.join(tmp, \"environment.sh\")\n        // Values stay off argv and journal receipts; the script is private,\n        // removed with the scope, and interpreted only inside confinement.\n        NodeFs.writeFileSync(\n          file,\n          [\n            \"#!/bin/sh\",\n            \"unset ENV BASH_ENV CDPATH PWD OLDPWD SHLVL _\",\n            ...exports,\n            \"exec \\\"$@\\\"\",\n            \"\"\n          ].join(\"\\n\"),\n          { flag: \"wx\", mode: 0o600 }\n        )\n        return file\n      },\n      catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n    })\n    // Resolve the actual program before wrapping it in the environment shell.\n    // Otherwise the sandbox sees only /usr/bin/env and omits a native helper\n    // installed outside its ordinary runtime paths.\n    const originalArgv = argvOf(command)\n    const launch = ProcessSandbox.launcher(\n      originalArgv[0]!,\n      targetEnvironment.PATH,\n      [...confinement.reads, ...confinement.writes, ...confinement.externalReads],\n      confinement.workspaceRoot,\n      hostFacts\n    )\n    const targetArgv = [\"/usr/bin/env\", \"-i\", \"/bin/sh\", script, launch.program, ...originalArgv.slice(1)]\n    const wrapped = yield* Effect.try({\n      try: () =>\n        ProcessSandbox.wrap(\n          { ...confinement, externalReads: [...confinement.externalReads, ...launch.reads, script] },\n          targetArgv,\n          targetEnvironment,\n          hostFacts\n        ),\n      catch: (cause) => failure(\"Unknown\", command, `could not render the confinement: ${messageOf(cause)}`, cause)\n    })\n    let [executable, ...args] = wrapped.argv\n    if (selected._tag === \"bubblewrap\") {\n      const filter = yield* Effect.try({\n        try: () => {\n          const file = NodePath.join(tmp, \"network.seccomp\")\n          NodeFs.writeFileSync(file, networkFilter(process.arch, profile.network), { flag: \"wx\", mode: 0o600 })\n          return file\n        },\n        catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n      })\n      let fd = 3\n      while (command.options.additionalFds?.[`fd${fd}`] !== undefined) fd++\n      // A regular file avoids a filter-input pipe whose early closure can\n      // surface as an unhandled ECONNRESET before bwrap reports its refusal.\n      args = [\n        \"-c\",\n        `exec ${fd}<\"$1\"; shift; exec \"$@\"`,\n        \"smithers-seccomp\",\n        filter,\n        executable!,\n        \"--seccomp\",\n        String(fd),\n        ...args\n      ]\n      executable = \"/bin/sh\"\n    }\n    return ChildProcess.make(executable!, args, {\n      ...command.options,\n      cwd: canonical.cwd,\n      shell: false,\n      env: { PATH: \"/usr/bin:/bin:/usr/sbin:/sbin\", LANG: \"C\", ...privateEnvironment },\n      extendEnv: false\n    })\n  })\n  return KernelProcessConfinement.ProcessConfinement.of({ confine })\n}\n\n/**\n * Provides the native confinement.\n *\n * @category layers\n * @since 1.0.0-rc.1\n */\nexport const layer = (options: Options = {}): Layer.Layer<KernelProcessConfinement.ProcessConfinement> =>\n  Layer.succeed(KernelProcessConfinement.ProcessConfinement)(make(options))\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,+BAA0C;AAC1C,aAAwB;AACxB,YAAuB;AACvB,oBAA+B;AAE/B,mBAA8B;AAC9B,aAAwB;AACxB,aAAwB;AACxB,eAA0B;AAC1B,qBAAgC;AAsBhC,MAAM,YAAY,CAAC,YAAkD,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG;AAUhH,MAAM,SAAS,CAAC,YAAiE;AAC/E,QAAM,QAAQ,QAAQ,QAAQ;AAC9B,MAAI,UAAU,UAAa,UAAU,MAAO,QAAO,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACpF,SAAO,CAAC,UAAU,OAAO,YAAY,OAAO,MAAM,UAAU,OAAO,CAAC;AACtE;AAEA,MAAM,UAAU,CACd,KACA,SACA,aACA,UAEA,cAAc,YAAY;AAAA,EACxB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,kBAAkB,UAAU,OAAO;AAAA,EACnC;AAAA,EACA;AACF,CAAC;AAEH,MAAM,YAAY,CAAC,UACjB,eAAe,gBAAgB,KAAK,IAChC,MAAM,UACN,iBAAiB,QACjB,MAAM,UACN,OAAO,KAAK;AAKlB,MAAM,gBAAgB,CAAC,cAAsB,YAAyC;AACpF,QAAM,MAAM,iBAAiB,QACzB,EAAE,OAAO,YAAY,QAAQ,IAAI,YAAY,GAAG,IAChD,iBAAiB,UACjB,EAAE,OAAO,YAAY,QAAQ,KAAK,YAAY,IAAI,IAClD;AACJ,MAAI,QAAQ,OAAW,OAAM,IAAI,MAAM,4CAA4C,YAAY,EAAE;AACjG,QAAM,eAAiE;AAAA,IACrE,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,IAAI,KAAK;AAAA,IACtB,CAAC,GAAM,GAAG,GAAG,UAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,UAAU;AAAA,IACvB,CAAC,GAAM,GAAG,GAAG,UAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,GAAG;AAAA;AAAA,IAChB,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,IAAI,UAAU;AAAA,IAC3B,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,IACf,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,IACf,CAAC,IAAM,GAAG,GAAG,EAAG;AAAA;AAAA,IAChB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,EAChB;AACA,MAAI,YAAY,QAAQ;AACtB,iBAAa,KAAK,CAAC,IAAM,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,GAAM,GAAG,GAAG,MAAU,CAAC;AAAA,EACtE,OAAO;AACL,iBAAa;AAAA,MACX,CAAC,IAAM,GAAG,GAAG,IAAI,MAAM;AAAA,MACvB,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,MACf,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,MACd,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA,IACzB;AAAA,EACF;AACA,eAAa,KAAK,CAAC,GAAM,GAAG,GAAG,UAAU,CAAC;AAC1C,QAAM,QAAQ,IAAI,WAAW,aAAa,SAAS,CAAC;AACpD,QAAM,OAAO,IAAI,SAAS,MAAM,MAAM;AACtC,aAAW,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,aAAa,QAAQ,GAAG;AACnE,SAAK,UAAU,QAAQ,GAAG,MAAM,IAAI;AACpC,SAAK,SAAS,QAAQ,IAAI,GAAG,EAAE;AAC/B,SAAK,SAAS,QAAQ,IAAI,GAAG,EAAE;AAC/B,SAAK,UAAU,QAAQ,IAAI,GAAG,OAAO,IAAI;AAAA,EAC3C;AACA,SAAO;AACT;AAQO,MAAM,OAAO,CAAC,UAAmB,CAAC,MAAwC;AAC/E,QAAM,YAAY,QAAQ,QAAQ,eAAe,KAAK;AACtD,QAAM,gBAAgB,QAAQ,sBAAsB,OAAO,OAAO;AAClE,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,UAAU,OAAO,GAAG,4BAA4B,EAAE,WACtD,SACA,SAC0F;AAC1F,UAAM,UAAkC;AAAA,MACtC,SAAS,QAAQ;AAAA,MACjB,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,OAAO,QAAQ;AAAA,MACf,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,IACpB;AACA,UAAM,WAAW,eAAe,OAAO,SAAS,SAAS;AACzD,QAAI,eAAe,gBAAgB,QAAQ,GAAG;AAC5C,UAAI,gBAAgB,UAAU;AAC5B,eAAO,OAAO;AAAA,UACZ;AAAA,UACA;AAAA,UACA,GAAG,SAAS,OAAO;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AACA,aAAO,OAAO,WAAW,GAAG,SAAS,OAAO,sBAAsB;AAClE,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,QAAQ,QAAQ,OAAO,QAAQ;AAC3C,UAAM,SAAS,CAAC,MAAc,SAA0B;AACtD,YAAM,WAAW,SAAS,SAAS,MAAM,IAAI;AAC7C,aAAO,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,SAAS,GAAG,EAAE,KAAK,CAAC,SAAS,WAAW,QAAQ;AAAA,IACxG;AACA,QAAI,CAAC,OAAO,QAAQ,eAAe,GAAG,GAAG;AACvC,aAAO,OAAO,QAAQ,oBAAoB,SAAS,8CAA8C,MAAS;AAAA,IAC5G;AAGA,UAAM,YAAY,OAAO,OAAO,IAAI;AAAA,MAClC,KAAK,MAAM;AACT,cAAM,OAAO,OAAO,aAAa,QAAQ,aAAa;AACtD,cAAM,YAAY,OAAO,aAAa,GAAG;AACzC,YAAI,CAAC,OAAO,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,4CAA4C;AAC1F,mBAAW,YAAY,QAAQ,OAAO;AACpC,gBAAM,UAAU,SAAS,QAAQ,MAAM,QAAQ;AAC/C,cAAI,CAAC,OAAO,MAAM,OAAO,EAAG;AAG5B,cAAI,OAAO,WAAW,OAAO,GAAG;AAC9B,kBAAM,OAAO,OAAO,aAAa,OAAO;AACxC,gBAAI,CAAC,OAAO,MAAM,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACpF,gBAAI,SAAS,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAAA,UACvE;AAAA,QACF;AACA,eAAO,EAAE,MAAM,KAAK,UAAU;AAAA,MAChC;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,IAChF,CAAC;AAID,UAAM,eAAe,OAAO,OAAO;AAAA,MACjC,OAAO,IAAI;AAAA,QACT,KAAK,MAAM,OAAO,YAAY,SAAS,KAAK,eAAe,uBAAuB,CAAC;AAAA,QACnF,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,MAC/G,CAAC;AAAA,MACD,CAAC,cACC,OAAO,KAAK,MAAM;AAChB,YAAI;AACF,iBAAO,OAAO,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QAC3D,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACL;AACA,UAAM,MAAM,OAAO,OAAO,IAAI;AAAA,MAC5B,KAAK,MAAM,OAAO,aAAa,YAAY;AAAA,MAC3C,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC/G,CAAC;AACD,UAAM,UAAU,OAAO,OAAO,IAAI;AAAA,MAChC,KAAK,MAAM,eAAe,KAAK,SAAS,EAAE,eAAe,UAAU,MAAM,KAAK,UAAU,KAAK,IAAI,GAAG,SAAS;AAAA,MAC7G,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,mCAAmC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC5G,CAAC;AACD,QAAI,eAAe,gBAAgB,OAAO,GAAG;AAC3C,aAAO,OAAO,QAAQ,oBAAoB,SAAS,QAAQ,SAAS,OAAO;AAAA,IAC7E;AAGA,UAAM,cAAc,QAAQ,OAAO,IAAI,CAAC,aAAa,SAAS,QAAQ,QAAQ,eAAe,QAAQ,CAAC;AACtG,QAAI,QAAQ,OAAO,KAAK,CAAC,UAAU,CAAC,YAAY,SAAS,KAAK,CAAC,GAAG;AAChE,aAAO,OAAO,QAAQ,oBAAoB,SAAS,uCAAuC,MAAS;AAAA,IACrG;AAEA,UAAM,cAAmC,EAAE,GAAG,SAAS,eAAe,CAAC,EAAE;AACzE,WAAO,OAAO,IAAI;AAAA,MAChB,KAAK,MAAM;AACT,uBAAe,eAAe,aAAa,SAAS;AACpD,eAAO,UAAU,SAAS,KAAK,KAAK,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAChE,eAAO,UAAU,SAAS,KAAK,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACjE,mBAAW,SAAS,QAAQ,OAAQ,QAAO,UAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AAAA,MACjF;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC/G,CAAC;AAGD,UAAM,oBAA4C,CAAC;AACnD,UAAM,YAAY,QAAQ,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,cAAc;AACrF,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,YAAY,QAAQ,MAAM,CAAC,CAAC,GAAG;AAGxE,UAAI,OAAO,UAAU,YAAY,2BAA2B,KAAK,IAAI,EAAG,mBAAkB,IAAI,IAAI;AAAA,IACpG;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC,CAAC,GAAG;AACrE,UAAI,OAAO,UAAU,SAAU,mBAAkB,IAAI,IAAI;AAAA,UACpD,QAAO,kBAAkB,IAAI;AAAA,IACpC;AACA,UAAM,qBAAqB,eAAe,YAAY,WAAW;AACjE,UAAM,SAAS,OAAO,OAAO,IAAI;AAAA,MAC/B,KAAK,MAAM;AACT,cAAM,QAAQ,CAAC,UAA0B,IAAI,MAAM,WAAW,KAAK,OAAO,CAAC;AAC3E,cAAM,UAAyB,CAAC;AAChC,mBAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,EAAE,GAAG,mBAAmB,GAAG,mBAAmB,CAAC,GAAG;AAC3F,cAAI,CAAC,2BAA2B,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACvG,cAAI,MAAM,SAAS,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACrF,kBAAQ,KAAK,UAAU,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AAAA,QAC/C;AACA,cAAM,OAAO,SAAS,KAAK,KAAK,gBAAgB;AAGhD,eAAO;AAAA,UACL;AAAA,UACA;AAAA,YACE;AAAA,YACA;AAAA,YACA,GAAG;AAAA,YACH;AAAA,YACA;AAAA,UACF,EAAE,KAAK,IAAI;AAAA,UACX,EAAE,MAAM,MAAM,MAAM,IAAM;AAAA,QAC5B;AACA,eAAO;AAAA,MACT;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,IAChF,CAAC;AAID,UAAM,eAAe,OAAO,OAAO;AACnC,UAAM,SAAS,eAAe;AAAA,MAC5B,aAAa,CAAC;AAAA,MACd,kBAAkB;AAAA,MAClB,CAAC,GAAG,YAAY,OAAO,GAAG,YAAY,QAAQ,GAAG,YAAY,aAAa;AAAA,MAC1E,YAAY;AAAA,MACZ;AAAA,IACF;AACA,UAAM,aAAa,CAAC,gBAAgB,MAAM,WAAW,QAAQ,OAAO,SAAS,GAAG,aAAa,MAAM,CAAC,CAAC;AACrG,UAAM,UAAU,OAAO,OAAO,IAAI;AAAA,MAChC,KAAK,MACH,eAAe;AAAA,QACb,EAAE,GAAG,aAAa,eAAe,CAAC,GAAG,YAAY,eAAe,GAAG,OAAO,OAAO,MAAM,EAAE;AAAA,QACzF;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACF,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,qCAAqC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC9G,CAAC;AACD,QAAI,CAAC,YAAY,GAAG,IAAI,IAAI,QAAQ;AACpC,QAAI,SAAS,SAAS,cAAc;AAClC,YAAM,SAAS,OAAO,OAAO,IAAI;AAAA,QAC/B,KAAK,MAAM;AACT,gBAAM,OAAO,SAAS,KAAK,KAAK,iBAAiB;AACjD,iBAAO,cAAc,MAAM,cAAc,QAAQ,MAAM,QAAQ,OAAO,GAAG,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AACpG,iBAAO;AAAA,QACT;AAAA,QACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,MAChF,CAAC;AACD,UAAI,KAAK;AACT,aAAO,QAAQ,QAAQ,gBAAgB,KAAK,EAAE,EAAE,MAAM,OAAW;AAGjE,aAAO;AAAA,QACL;AAAA,QACA,QAAQ,EAAE;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,EAAE;AAAA,QACT,GAAG;AAAA,MACL;AACA,mBAAa;AAAA,IACf;AACA,WAAO,aAAa,KAAK,YAAa,MAAM;AAAA,MAC1C,GAAG,QAAQ;AAAA,MACX,KAAK,UAAU;AAAA,MACf,OAAO;AAAA,MACP,KAAK,EAAE,MAAM,iCAAiC,MAAM,KAAK,GAAG,mBAAmB;AAAA,MAC/E,WAAW;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AACD,SAAO,yBAAyB,mBAAmB,GAAG,EAAE,QAAQ,CAAC;AACnE;AAQO,MAAM,QAAQ,CAAC,UAAmB,CAAC,MACxC,MAAM,QAAQ,yBAAyB,kBAAkB,EAAE,KAAK,OAAO,CAAC;",
+  "sourcesContent": ["/**\n * The kernel's `ProcessConfinement` seam, filled with this host's native\n * sandbox: bubblewrap on Linux, seatbelt on macOS.\n *\n * `@smthrs/kernel`'s `ChildProcessSpawner.layer` hands every stage that passed\n * its `proc:spawn` check to the confinement in its context, together with the\n * `ProcessConfinement.Profile` the grants in force admit. This module turns\n * that profile into a {@link ProcessSandbox.Request}, plans it against the\n * workspace, and wraps the stage's argv in the mechanism the host has, so an\n * approved `bash` can write only where an `fs:write` grant says and reach the\n * network only when a `net:*` grant says. A stage that asked for the platform\n * shell is spelled out as `/bin/sh -c <line>` first: wrapping a `shell: true`\n * command line would otherwise leave its redirections and pipes to a shell\n * outside the sandbox.\n *\n * A host with no mechanism is the one decision this module leaves to its\n * caller: {@link Options.unavailable} either refuses the spawn, so nothing\n * runs that the profile would not have confined, or runs it unconfined with\n * a warning, the way every host did before this seam existed. A write set\n * the mechanism cannot enforce safely, a symbolic link below the workspace\n * root, is always refused.\n *\n * @since 1.0.0-rc.1\n */\n\nimport * as KernelProcessConfinement from \"@smthrs/kernel/ProcessConfinement\"\nimport * as Effect from \"effect/Effect\"\nimport * as Layer from \"effect/Layer\"\nimport * as PlatformError from \"effect/PlatformError\"\nimport * as ChildProcess from \"effect/process/ChildProcess\"\nimport type * as Scope from \"effect/Scope\"\nimport * as NodeFs from \"node:fs\"\nimport * as NodeOs from \"node:os\"\nimport * as NodePath from \"node:path\"\nimport * as ProcessSandbox from \"./ProcessSandbox.ts\"\n\n/**\n * How the confinement is built.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface Options {\n  /**\n   * What happens when this host has no mechanism to enforce a profile with.\n   * `\"refuse\"` fails the spawn, so a command never runs with more than the\n   * profile allows; `\"unconfined\"` runs it as given and logs a\n   * warning naming what the host lacks.\n   */\n  readonly unavailable?: \"refuse\" | \"unconfined\" | undefined\n  /** The host facts mechanism selection reads; defaults to the real host. */\n  readonly host?: ProcessSandbox.Host | undefined\n  /** Where each run's private temporary directory is created; defaults to the OS temporary directory. */\n  readonly temporaryDirectory?: string | undefined\n}\n\nconst shellLine = (command: ChildProcess.StandardCommand): string => [command.command, ...command.args].join(\" \")\n\n/**\n * The argv a stage executes, with a shell request made explicit.\n *\n * Node runs a `shell: true` stage as `/bin/sh -c <line>` on POSIX, and a\n * string shell as `<shell> -c <line>`; the wrapper needs that program to be\n * the one it confines, so the shell becomes the argv's first token and the\n * spawned stage no longer asks for one.\n */\nconst argvOf = (command: ChildProcess.StandardCommand): ReadonlyArray<string> => {\n  const shell = command.options.shell\n  if (shell === undefined || shell === false) return [command.command, ...command.args]\n  return [shell === true ? \"/bin/sh\" : shell, \"-c\", shellLine(command)]\n}\n\nconst failure = (\n  tag: \"NotFound\" | \"PermissionDenied\" | \"Unknown\",\n  command: ChildProcess.StandardCommand,\n  description: string,\n  cause: unknown\n): PlatformError.PlatformError =>\n  PlatformError.systemError({\n    _tag: tag,\n    module: \"ProcessConfinement\",\n    method: \"confine\",\n    pathOrDescriptor: shellLine(command),\n    description,\n    cause\n  })\n\nconst messageOf = (cause: unknown): string =>\n  ProcessSandbox.isUnenforceable(cause)\n    ? cause.message\n    : cause instanceof Error\n    ? cause.message\n    : String(cause)\n\n/** Classic BPF for seccomp_data: deny host Unix sockets and io_uring, preserving stream socketpair.\n * Closed networking additionally denies every IP socket family.\n * Wrong ABI and x32 syscall encodings fail closed rather than bypassing socket(). */\nconst networkFilter = (architecture: string, network: \"none\" | \"open\"): Uint8Array => {\n  const abi = architecture === \"x64\"\n    ? { audit: 0xc000003e, socket: 41, socketpair: 53 }\n    : architecture === \"arm64\"\n    ? { audit: 0xc00000b7, socket: 198, socketpair: 199 }\n    : undefined\n  if (abi === undefined) throw new Error(`native-network seccomp is unavailable on ${architecture}`)\n  const instructions: Array<readonly [number, number, number, number]> = [\n    [0x20, 0, 0, 4], // load audit architecture\n    [0x15, 1, 0, abi.audit],\n    [0x06, 0, 0, 0x80000000], // kill unsupported ABI\n    [0x20, 0, 0, 0], // load syscall number\n    [0x35, 0, 1, 0x40000000],\n    [0x06, 0, 0, 0x80000000], // kill x32 / invalid high syscall numbers\n    [0x15, 0, 1, 425], // io_uring_setup on both supported ABIs\n    [0x06, 0, 0, 0x00050001], // io_uring can otherwise create sockets without socket()\n    [0x15, 0, 6, abi.socketpair],\n    [0x20, 0, 0, 16], // socketpair domain\n    [0x15, 0, 4, 1], // AF_UNIX\n    [0x20, 0, 0, 24], // socketpair type, low 32 bits of args[1]\n    [0x54, 0, 0, 0xf], // strip SOCK_NONBLOCK and SOCK_CLOEXEC\n    [0x15, 1, 0, 1], // only SOCK_STREAM; Linux aliases SOCK_RAW to datagram operations\n    [0x06, 0, 0, 0x00050001],\n    [0x20, 0, 0, 0] // reload syscall number before the socket() policy\n  ]\n  if (network === \"none\") {\n    instructions.push([0x15, 0, 1, abi.socket], [0x06, 0, 0, 0x00050001]) // EPERM for every socket family\n  } else {\n    instructions.push(\n      [0x15, 0, 3, abi.socket],\n      [0x20, 0, 0, 16], // socket domain, low 32 bits of args[0]\n      [0x15, 0, 1, 1], // AF_UNIX; IP families remain available\n      [0x06, 0, 0, 0x00050001]\n    )\n  }\n  instructions.push([0x06, 0, 0, 0x7fff0000]) // SECCOMP_RET_ALLOW\n  const bytes = new Uint8Array(instructions.length * 8)\n  const view = new DataView(bytes.buffer)\n  for (const [index, [code, jt, jf, value]] of instructions.entries()) {\n    view.setUint16(index * 8, code, true)\n    view.setUint8(index * 8 + 2, jt)\n    view.setUint8(index * 8 + 3, jf)\n    view.setUint32(index * 8 + 4, value, true)\n  }\n  return bytes\n}\n\n/**\n * Builds the native confinement.\n *\n * @category constructors\n * @since 1.0.0-rc.1\n */\nexport const make = (options: Options = {}): KernelProcessConfinement.Service => {\n  const hostFacts = options.host ?? ProcessSandbox.host()\n  const temporaryRoot = options.temporaryDirectory ?? NodeOs.tmpdir()\n  const unavailable = options.unavailable ?? \"refuse\"\n  const confine = Effect.fn(\"ProcessConfinement.confine\")(function*(\n    command: ChildProcess.StandardCommand,\n    profile: KernelProcessConfinement.Profile\n  ): Effect.fn.Return<ChildProcess.StandardCommand, PlatformError.PlatformError, Scope.Scope> {\n    const request: ProcessSandbox.Request = {\n      network: profile.network,\n      unixSockets: false,\n      strict: true,\n      reads: profile.reads,\n      writes: profile.writes,\n      readOnly: profile.readOnly\n    }\n    const selected = ProcessSandbox.select(request, hostFacts)\n    if (ProcessSandbox.isUnenforceable(selected)) {\n      if (unavailable === \"refuse\") {\n        return yield* failure(\n          \"NotFound\",\n          command,\n          `${selected.message} This host refuses to spawn unconfined.`,\n          selected\n        )\n      }\n      yield* Effect.logWarning(`${selected.message} Running unconfined.`)\n      return command\n    }\n    // The stage's directory is absolute: the kernel spawner roots it first.\n    const cwd = command.options.cwd ?? profile.workspaceRoot\n    const within = (root: string, path: string): boolean => {\n      const relative = NodePath.relative(root, path)\n      return relative !== \"..\" && !relative.startsWith(`..${NodePath.sep}`) && !NodePath.isAbsolute(relative)\n    }\n    if (!within(profile.workspaceRoot, cwd)) {\n      return yield* failure(\"PermissionDenied\", command, \"command directory is outside the workspace\", undefined)\n    }\n    // A lexical workspace path can enter an unrelated host directory through\n    // a symlink. Check the real directory before granting or preparing a run.\n    const canonical = yield* Effect.try({\n      try: () => {\n        const root = NodeFs.realpathSync(profile.workspaceRoot)\n        const directory = NodeFs.realpathSync(cwd)\n        if (!within(root, directory)) throw new Error(\"command directory is outside the workspace\")\n        for (const relative of profile.reads) {\n          const lexical = NodePath.resolve(root, relative)\n          if (!within(root, lexical)) continue\n          // A read bind follows its source symlink. Refuse a grant that would\n          // therefore mount unrelated host bytes inside the workspace.\n          if (NodeFs.existsSync(lexical)) {\n            const real = NodeFs.realpathSync(lexical)\n            if (!within(root, real)) throw new Error(\"read grant resolves outside the workspace\")\n            if (real !== lexical) throw new Error(\"read grant is a symbolic link\")\n          }\n        }\n        return { root, cwd: directory }\n      },\n      catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n    })\n    // The private tmp lives as long as the spawn's scope, however preparation\n    // ends; the declared write directories are created so the mechanism has\n    // something to bind, which the grant that opened them already permits.\n    const allocatedTmp = yield* Effect.acquireRelease(\n      Effect.try({\n        try: () => NodeFs.mkdtempSync(NodePath.join(temporaryRoot, \"smithers-confinement-\")),\n        catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n      }),\n      (directory) =>\n        Effect.sync(() => {\n          try {\n            NodeFs.rmSync(directory, { recursive: true, force: true })\n          } catch {\n            // Cleanup is best-effort when the host refuses directory removal.\n          }\n        })\n    )\n    const tmp = yield* Effect.try({\n      try: () => NodeFs.realpathSync(allocatedTmp),\n      catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n    })\n    const planned = yield* Effect.try({\n      try: () => ProcessSandbox.plan(request, { workspaceRoot: canonical.root, cwd: canonical.cwd, tmp }, hostFacts),\n      catch: (cause) => failure(\"Unknown\", command, `could not plan the confinement: ${messageOf(cause)}`, cause)\n    })\n    if (ProcessSandbox.isUnenforceable(planned)) {\n      return yield* failure(\"PermissionDenied\", command, planned.message, planned)\n    }\n    // Build outputs may grant their parent directory. An agent grant must\n    // never inherit that widening when a requested tree is already a file.\n    const exactWrites = profile.writes.map((relative) => NodePath.resolve(planned.workspaceRoot, relative))\n    if (planned.writes.some((write) => !exactWrites.includes(write))) {\n      return yield* failure(\"PermissionDenied\", command, \"write grant is not a directory tree\", undefined)\n    }\n    // A workspace link does not grant authority to its target on the host.\n    const confinement: ProcessSandbox.Plan = { ...planned, externalReads: [] }\n    yield* Effect.try({\n      try: () => {\n        ProcessSandbox.validateWrites(confinement, hostFacts)\n        NodeFs.mkdirSync(NodePath.join(tmp, \"home\"), { recursive: true })\n        NodeFs.mkdirSync(NodePath.join(tmp, \"cache\"), { recursive: true })\n        for (const write of planned.writes) NodeFs.mkdirSync(write, { recursive: true })\n      },\n      catch: (cause) => failure(\"Unknown\", command, `could not prepare the confinement: ${messageOf(cause)}`, cause)\n    })\n    // Only the target receives its requested environment. Dynamic-loader and\n    // other startup variables must never configure the host sandbox launcher.\n    const targetEnvironment: Record<string, string> = {}\n    const inherited = command.options.env === undefined || command.options.extendEnv === true\n    for (const [name, value] of Object.entries(inherited ? process.env : {})) {\n      // Bash exports functions as names such as BASH_FUNC_which%%. These\n      // ambient entries cannot be exported by the portable inner launcher.\n      if (typeof value === \"string\" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) targetEnvironment[name] = value\n    }\n    for (const [name, value] of Object.entries(command.options.env ?? {})) {\n      if (typeof value === \"string\") targetEnvironment[name] = value\n      else delete targetEnvironment[name]\n    }\n    const privateEnvironment = ProcessSandbox.environment(confinement)\n    const script = yield* Effect.try({\n      try: () => {\n        const quote = (value: string): string => `'${value.replaceAll(\"'\", \"'\\\\''\")}'`\n        const exports: Array<string> = []\n        for (const [name, value] of Object.entries({ ...targetEnvironment, ...privateEnvironment })) {\n          if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) throw new Error(\"environment variable name is not portable\")\n          if (value.includes(\"\\0\")) throw new Error(\"environment variable contains a null byte\")\n          exports.push(`export ${name}=${quote(value)}`)\n        }\n        const file = NodePath.join(tmp, \"environment.sh\")\n        // Values stay off argv and journal receipts; the script is private,\n        // removed with the scope, and interpreted only inside confinement.\n        NodeFs.writeFileSync(\n          file,\n          [\n            \"#!/bin/sh\",\n            \"unset ENV BASH_ENV CDPATH PWD OLDPWD SHLVL _\",\n            ...exports,\n            \"exec \\\"$@\\\"\",\n            \"\"\n          ].join(\"\\n\"),\n          { flag: \"wx\", mode: 0o600 }\n        )\n        return file\n      },\n      catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n    })\n    // Resolve the actual program before wrapping it in the environment shell.\n    // Otherwise the sandbox sees only /usr/bin/env and omits a native helper\n    // installed outside its ordinary runtime paths.\n    const originalArgv = argvOf(command)\n    const launch = ProcessSandbox.launcher(\n      originalArgv[0]!,\n      targetEnvironment.PATH,\n      [...confinement.reads, ...confinement.writes, ...confinement.externalReads],\n      confinement.workspaceRoot,\n      hostFacts\n    )\n    const targetArgv = [\"/usr/bin/env\", \"-i\", \"/bin/sh\", script, launch.program, ...originalArgv.slice(1)]\n    const wrapped = yield* Effect.try({\n      try: () =>\n        ProcessSandbox.wrap(\n          { ...confinement, externalReads: [...confinement.externalReads, ...launch.reads, script] },\n          targetArgv,\n          targetEnvironment,\n          hostFacts\n        ),\n      catch: (cause) => failure(\"Unknown\", command, `could not render the confinement: ${messageOf(cause)}`, cause)\n    })\n    let [executable, ...args] = wrapped.argv\n    if (selected._tag === \"bubblewrap\") {\n      const filter = yield* Effect.try({\n        try: () => {\n          const file = NodePath.join(tmp, \"network.seccomp\")\n          NodeFs.writeFileSync(file, networkFilter(process.arch, profile.network), { flag: \"wx\", mode: 0o600 })\n          return file\n        },\n        catch: (cause) => failure(\"PermissionDenied\", command, messageOf(cause), cause)\n      })\n      let fd = 3\n      while (command.options.additionalFds?.[`fd${fd}`] !== undefined) fd++\n      // A regular file avoids a filter-input pipe whose early closure can\n      // surface as an unhandled ECONNRESET before bwrap reports its refusal.\n      args = [\n        \"-c\",\n        `exec ${fd}<\"$1\"; shift; exec \"$@\"`,\n        \"smithers-seccomp\",\n        filter,\n        executable!,\n        \"--seccomp\",\n        String(fd),\n        ...args\n      ]\n      executable = \"/bin/sh\"\n    }\n    return ChildProcess.make(executable!, args, {\n      ...command.options,\n      cwd: canonical.cwd,\n      shell: false,\n      env: { PATH: \"/usr/bin:/bin:/usr/sbin:/sbin\", LANG: \"C\", ...privateEnvironment },\n      extendEnv: false\n    })\n  })\n  return KernelProcessConfinement.ProcessConfinement.of({ confine })\n}\n\n/**\n * Provides the native confinement.\n *\n * @category layers\n * @since 1.0.0-rc.1\n */\nexport const layer = (options: Options = {}): Layer.Layer<KernelProcessConfinement.ProcessConfinement> =>\n  Layer.succeed(KernelProcessConfinement.ProcessConfinement)(make(options))\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyBA,+BAA0C;AAC1C,aAAwB;AACxB,YAAuB;AACvB,oBAA+B;AAC/B,mBAA8B;AAE9B,aAAwB;AACxB,aAAwB;AACxB,eAA0B;AAC1B,qBAAgC;AAsBhC,MAAM,YAAY,CAAC,YAAkD,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG;AAUhH,MAAM,SAAS,CAAC,YAAiE;AAC/E,QAAM,QAAQ,QAAQ,QAAQ;AAC9B,MAAI,UAAU,UAAa,UAAU,MAAO,QAAO,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI;AACpF,SAAO,CAAC,UAAU,OAAO,YAAY,OAAO,MAAM,UAAU,OAAO,CAAC;AACtE;AAEA,MAAM,UAAU,CACd,KACA,SACA,aACA,UAEA,cAAc,YAAY;AAAA,EACxB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,kBAAkB,UAAU,OAAO;AAAA,EACnC;AAAA,EACA;AACF,CAAC;AAEH,MAAM,YAAY,CAAC,UACjB,eAAe,gBAAgB,KAAK,IAChC,MAAM,UACN,iBAAiB,QACjB,MAAM,UACN,OAAO,KAAK;AAKlB,MAAM,gBAAgB,CAAC,cAAsB,YAAyC;AACpF,QAAM,MAAM,iBAAiB,QACzB,EAAE,OAAO,YAAY,QAAQ,IAAI,YAAY,GAAG,IAChD,iBAAiB,UACjB,EAAE,OAAO,YAAY,QAAQ,KAAK,YAAY,IAAI,IAClD;AACJ,MAAI,QAAQ,OAAW,OAAM,IAAI,MAAM,4CAA4C,YAAY,EAAE;AACjG,QAAM,eAAiE;AAAA,IACrE,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,IAAI,KAAK;AAAA,IACtB,CAAC,GAAM,GAAG,GAAG,UAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,UAAU;AAAA,IACvB,CAAC,GAAM,GAAG,GAAG,UAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,GAAG;AAAA;AAAA,IAChB,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,IAAI,UAAU;AAAA,IAC3B,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,IACf,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,IACf,CAAC,IAAM,GAAG,GAAG,EAAG;AAAA;AAAA,IAChB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,IACd,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA,IACvB,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,EAChB;AACA,MAAI,YAAY,QAAQ;AACtB,iBAAa,KAAK,CAAC,IAAM,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,GAAM,GAAG,GAAG,MAAU,CAAC;AAAA,EACtE,OAAO;AACL,iBAAa;AAAA,MACX,CAAC,IAAM,GAAG,GAAG,IAAI,MAAM;AAAA,MACvB,CAAC,IAAM,GAAG,GAAG,EAAE;AAAA;AAAA,MACf,CAAC,IAAM,GAAG,GAAG,CAAC;AAAA;AAAA,MACd,CAAC,GAAM,GAAG,GAAG,MAAU;AAAA,IACzB;AAAA,EACF;AACA,eAAa,KAAK,CAAC,GAAM,GAAG,GAAG,UAAU,CAAC;AAC1C,QAAM,QAAQ,IAAI,WAAW,aAAa,SAAS,CAAC;AACpD,QAAM,OAAO,IAAI,SAAS,MAAM,MAAM;AACtC,aAAW,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,aAAa,QAAQ,GAAG;AACnE,SAAK,UAAU,QAAQ,GAAG,MAAM,IAAI;AACpC,SAAK,SAAS,QAAQ,IAAI,GAAG,EAAE;AAC/B,SAAK,SAAS,QAAQ,IAAI,GAAG,EAAE;AAC/B,SAAK,UAAU,QAAQ,IAAI,GAAG,OAAO,IAAI;AAAA,EAC3C;AACA,SAAO;AACT;AAQO,MAAM,OAAO,CAAC,UAAmB,CAAC,MAAwC;AAC/E,QAAM,YAAY,QAAQ,QAAQ,eAAe,KAAK;AACtD,QAAM,gBAAgB,QAAQ,sBAAsB,OAAO,OAAO;AAClE,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,UAAU,OAAO,GAAG,4BAA4B,EAAE,WACtD,SACA,SAC0F;AAC1F,UAAM,UAAkC;AAAA,MACtC,SAAS,QAAQ;AAAA,MACjB,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,OAAO,QAAQ;AAAA,MACf,QAAQ,QAAQ;AAAA,MAChB,UAAU,QAAQ;AAAA,IACpB;AACA,UAAM,WAAW,eAAe,OAAO,SAAS,SAAS;AACzD,QAAI,eAAe,gBAAgB,QAAQ,GAAG;AAC5C,UAAI,gBAAgB,UAAU;AAC5B,eAAO,OAAO;AAAA,UACZ;AAAA,UACA;AAAA,UACA,GAAG,SAAS,OAAO;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AACA,aAAO,OAAO,WAAW,GAAG,SAAS,OAAO,sBAAsB;AAClE,aAAO;AAAA,IACT;AAEA,UAAM,MAAM,QAAQ,QAAQ,OAAO,QAAQ;AAC3C,UAAM,SAAS,CAAC,MAAc,SAA0B;AACtD,YAAM,WAAW,SAAS,SAAS,MAAM,IAAI;AAC7C,aAAO,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,SAAS,GAAG,EAAE,KAAK,CAAC,SAAS,WAAW,QAAQ;AAAA,IACxG;AACA,QAAI,CAAC,OAAO,QAAQ,eAAe,GAAG,GAAG;AACvC,aAAO,OAAO,QAAQ,oBAAoB,SAAS,8CAA8C,MAAS;AAAA,IAC5G;AAGA,UAAM,YAAY,OAAO,OAAO,IAAI;AAAA,MAClC,KAAK,MAAM;AACT,cAAM,OAAO,OAAO,aAAa,QAAQ,aAAa;AACtD,cAAM,YAAY,OAAO,aAAa,GAAG;AACzC,YAAI,CAAC,OAAO,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,4CAA4C;AAC1F,mBAAW,YAAY,QAAQ,OAAO;AACpC,gBAAM,UAAU,SAAS,QAAQ,MAAM,QAAQ;AAC/C,cAAI,CAAC,OAAO,MAAM,OAAO,EAAG;AAG5B,cAAI,OAAO,WAAW,OAAO,GAAG;AAC9B,kBAAM,OAAO,OAAO,aAAa,OAAO;AACxC,gBAAI,CAAC,OAAO,MAAM,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACpF,gBAAI,SAAS,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAAA,UACvE;AAAA,QACF;AACA,eAAO,EAAE,MAAM,KAAK,UAAU;AAAA,MAChC;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,IAChF,CAAC;AAID,UAAM,eAAe,OAAO,OAAO;AAAA,MACjC,OAAO,IAAI;AAAA,QACT,KAAK,MAAM,OAAO,YAAY,SAAS,KAAK,eAAe,uBAAuB,CAAC;AAAA,QACnF,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,MAC/G,CAAC;AAAA,MACD,CAAC,cACC,OAAO,KAAK,MAAM;AAChB,YAAI;AACF,iBAAO,OAAO,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QAC3D,QAAQ;AAAA,QAER;AAAA,MACF,CAAC;AAAA,IACL;AACA,UAAM,MAAM,OAAO,OAAO,IAAI;AAAA,MAC5B,KAAK,MAAM,OAAO,aAAa,YAAY;AAAA,MAC3C,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC/G,CAAC;AACD,UAAM,UAAU,OAAO,OAAO,IAAI;AAAA,MAChC,KAAK,MAAM,eAAe,KAAK,SAAS,EAAE,eAAe,UAAU,MAAM,KAAK,UAAU,KAAK,IAAI,GAAG,SAAS;AAAA,MAC7G,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,mCAAmC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC5G,CAAC;AACD,QAAI,eAAe,gBAAgB,OAAO,GAAG;AAC3C,aAAO,OAAO,QAAQ,oBAAoB,SAAS,QAAQ,SAAS,OAAO;AAAA,IAC7E;AAGA,UAAM,cAAc,QAAQ,OAAO,IAAI,CAAC,aAAa,SAAS,QAAQ,QAAQ,eAAe,QAAQ,CAAC;AACtG,QAAI,QAAQ,OAAO,KAAK,CAAC,UAAU,CAAC,YAAY,SAAS,KAAK,CAAC,GAAG;AAChE,aAAO,OAAO,QAAQ,oBAAoB,SAAS,uCAAuC,MAAS;AAAA,IACrG;AAEA,UAAM,cAAmC,EAAE,GAAG,SAAS,eAAe,CAAC,EAAE;AACzE,WAAO,OAAO,IAAI;AAAA,MAChB,KAAK,MAAM;AACT,uBAAe,eAAe,aAAa,SAAS;AACpD,eAAO,UAAU,SAAS,KAAK,KAAK,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAChE,eAAO,UAAU,SAAS,KAAK,KAAK,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACjE,mBAAW,SAAS,QAAQ,OAAQ,QAAO,UAAU,OAAO,EAAE,WAAW,KAAK,CAAC;AAAA,MACjF;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,sCAAsC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC/G,CAAC;AAGD,UAAM,oBAA4C,CAAC;AACnD,UAAM,YAAY,QAAQ,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,cAAc;AACrF,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,YAAY,QAAQ,MAAM,CAAC,CAAC,GAAG;AAGxE,UAAI,OAAO,UAAU,YAAY,2BAA2B,KAAK,IAAI,EAAG,mBAAkB,IAAI,IAAI;AAAA,IACpG;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC,CAAC,GAAG;AACrE,UAAI,OAAO,UAAU,SAAU,mBAAkB,IAAI,IAAI;AAAA,UACpD,QAAO,kBAAkB,IAAI;AAAA,IACpC;AACA,UAAM,qBAAqB,eAAe,YAAY,WAAW;AACjE,UAAM,SAAS,OAAO,OAAO,IAAI;AAAA,MAC/B,KAAK,MAAM;AACT,cAAM,QAAQ,CAAC,UAA0B,IAAI,MAAM,WAAW,KAAK,OAAO,CAAC;AAC3E,cAAM,UAAyB,CAAC;AAChC,mBAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,EAAE,GAAG,mBAAmB,GAAG,mBAAmB,CAAC,GAAG;AAC3F,cAAI,CAAC,2BAA2B,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACvG,cAAI,MAAM,SAAS,IAAI,EAAG,OAAM,IAAI,MAAM,2CAA2C;AACrF,kBAAQ,KAAK,UAAU,IAAI,IAAI,MAAM,KAAK,CAAC,EAAE;AAAA,QAC/C;AACA,cAAM,OAAO,SAAS,KAAK,KAAK,gBAAgB;AAGhD,eAAO;AAAA,UACL;AAAA,UACA;AAAA,YACE;AAAA,YACA;AAAA,YACA,GAAG;AAAA,YACH;AAAA,YACA;AAAA,UACF,EAAE,KAAK,IAAI;AAAA,UACX,EAAE,MAAM,MAAM,MAAM,IAAM;AAAA,QAC5B;AACA,eAAO;AAAA,MACT;AAAA,MACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,IAChF,CAAC;AAID,UAAM,eAAe,OAAO,OAAO;AACnC,UAAM,SAAS,eAAe;AAAA,MAC5B,aAAa,CAAC;AAAA,MACd,kBAAkB;AAAA,MAClB,CAAC,GAAG,YAAY,OAAO,GAAG,YAAY,QAAQ,GAAG,YAAY,aAAa;AAAA,MAC1E,YAAY;AAAA,MACZ;AAAA,IACF;AACA,UAAM,aAAa,CAAC,gBAAgB,MAAM,WAAW,QAAQ,OAAO,SAAS,GAAG,aAAa,MAAM,CAAC,CAAC;AACrG,UAAM,UAAU,OAAO,OAAO,IAAI;AAAA,MAChC,KAAK,MACH,eAAe;AAAA,QACb,EAAE,GAAG,aAAa,eAAe,CAAC,GAAG,YAAY,eAAe,GAAG,OAAO,OAAO,MAAM,EAAE;AAAA,QACzF;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,MACF,OAAO,CAAC,UAAU,QAAQ,WAAW,SAAS,qCAAqC,UAAU,KAAK,CAAC,IAAI,KAAK;AAAA,IAC9G,CAAC;AACD,QAAI,CAAC,YAAY,GAAG,IAAI,IAAI,QAAQ;AACpC,QAAI,SAAS,SAAS,cAAc;AAClC,YAAM,SAAS,OAAO,OAAO,IAAI;AAAA,QAC/B,KAAK,MAAM;AACT,gBAAM,OAAO,SAAS,KAAK,KAAK,iBAAiB;AACjD,iBAAO,cAAc,MAAM,cAAc,QAAQ,MAAM,QAAQ,OAAO,GAAG,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AACpG,iBAAO;AAAA,QACT;AAAA,QACA,OAAO,CAAC,UAAU,QAAQ,oBAAoB,SAAS,UAAU,KAAK,GAAG,KAAK;AAAA,MAChF,CAAC;AACD,UAAI,KAAK;AACT,aAAO,QAAQ,QAAQ,gBAAgB,KAAK,EAAE,EAAE,MAAM,OAAW;AAGjE,aAAO;AAAA,QACL;AAAA,QACA,QAAQ,EAAE;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,EAAE;AAAA,QACT,GAAG;AAAA,MACL;AACA,mBAAa;AAAA,IACf;AACA,WAAO,aAAa,KAAK,YAAa,MAAM;AAAA,MAC1C,GAAG,QAAQ;AAAA,MACX,KAAK,UAAU;AAAA,MACf,OAAO;AAAA,MACP,KAAK,EAAE,MAAM,iCAAiC,MAAM,KAAK,GAAG,mBAAmB;AAAA,MAC/E,WAAW;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AACD,SAAO,yBAAyB,mBAAmB,GAAG,EAAE,QAAQ,CAAC;AACnE;AAQO,MAAM,QAAQ,CAAC,UAAmB,CAAC,MACxC,MAAM,QAAQ,yBAAyB,kBAAkB,EAAE,KAAK,OAAO,CAAC;",
   "names": []
 }

package/dist/cjs/ProcessReaper.d.ts

@@ -53,7 +53,7 @@ import * as ProcessLedger from "@smthrs/kernel/ProcessLedger";
 import * as Effect from "effect/Effect";
 import * as Layer from "effect/Layer";
 import * as Metric from "effect/Metric";
-import { ChildProcessSpawner } from "effect/unstable/process/ChildProcessSpawner";
+import { ChildProcessSpawner } from "effect/process/ChildProcessSpawner";
 import * as ProcessCleanup from "./internal/ProcessCleanup.ts";
 /**
  * What the operating system can say about a pid.

package/dist/cjs/ProcessReaper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ProcessReaper.d.ts","sourceRoot":"","sources":["../../src/ProcessReaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,KAAK,gBAAgB,MAAM,iCAAiC,CAAA;AACnE,OAAO,KAAK,aAAa,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,6CAA6C,CAAA;AAOtG,OAAO,KAAK,cAAc,MAAM,8BAA8B,CAAA;AAG9D;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,WAAW;AACrB,gCAAgC;AAC9B,WAAW;AACb,qEAAqE;GACnE,cAAc;AAChB,wEAAwE;GACtE,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,SAAS;AACnB,2EAA2E;AACzE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAC5D,gCAAgC;GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3B,oDAAoD;GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE;AAClC,oDAAoD;GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAA;AAEpC;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAA;IAC3C,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IAChD,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAA;IACjC;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,KAAK,OAAO,GAAG,SAAS,CAAA;IACnF,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,KAAK,WAAW,CAAA;CACxE;AA2CD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,YAAY,CAAA;AAqD5C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,KAAG,CAAC,IAAI,EAAE,MAAM,KAAK,cAAc,CAAC,QAAQ,GAAG,SACF,CAAA;AAE9F;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG,OAS1C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,4BAI3B,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,GACvB,UAAU,cAAc,KACvB,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAMrE,CAAA;AA+DD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAgCD;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,aAAa,KAAG,MAKpB,CAAA;AAEtC;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc,GAAI,UAAU,iBAAiB,KAAG,MAW5D,CAAA;AAuCD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,EAAE,MAA0B,CAAA;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,aAAa,KAAG,MAoD3D,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa,EAAE,MAA4B,CAAA;AAExD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,MAAyB,CAAA;AAElD;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,KAAG,MAC2C,CAAA;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,OAAO;AACjB,4EAA4E;AAC1E,aAAa;AACf,2EAA2E;GACzE,UAAU;AACZ,qDAAqD;GACnD,WAAW;AACb,kFAAkF;GAChF,mBAAmB;AACrB,iEAAiE;GAC/D,gBAAgB;AAClB,mFAAmF;GACjF,UAAU;AACZ,2EAA2E;GACzE,cAAc;AAChB,oEAAoE;GAClE,mBAAmB;AACrB,8EAA8E;GAC5E,qBAAqB;AACvB,4EAA4E;GAC1E,aAAa,CAAA;AAkBjB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,MAAM,GACd;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CACzB,GACC;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAuDH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,IAAI,GACf,UAAU,OAAO,KAChB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,wBAAwB,EAAE,aAAa,CAAC,aAAa,CA+BvG,CAAA;AAyBJ;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,wBAEnB,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAmBtE,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,GAAI,UAAU,OAAO,KAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAS5F,CAAA"}
+{"version":3,"file":"ProcessReaper.d.ts","sourceRoot":"","sources":["../../src/ProcessReaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,KAAK,gBAAgB,MAAM,iCAAiC,CAAA;AACnE,OAAO,KAAK,aAAa,MAAM,8BAA8B,CAAA;AAC7D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,oCAAoC,CAAA;AAO7F,OAAO,KAAK,cAAc,MAAM,8BAA8B,CAAA;AAG9D;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,MAAM,WAAW;AACrB,gCAAgC;AAC9B,WAAW;AACb,qEAAqE;GACnE,cAAc;AAChB,wEAAwE;GACtE,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,SAAS;AACnB,2EAA2E;AACzE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAC5D,gCAAgC;GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3B,oDAAoD;GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE;AAClC,oDAAoD;GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAA;AAEpC;;;;;;;;;GASG;AACH,MAAM,WAAW,MAAM;IACrB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAA;IAC3C,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAA;IAChD,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACtC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAA;IACjC;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,KAAK,OAAO,GAAG,SAAS,CAAA;IACnF,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,KAAK,WAAW,CAAA;CACxE;AA2CD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,YAAY,CAAA;AAqD5C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAU,MAAM,KAAG,CAAC,IAAI,EAAE,MAAM,KAAK,cAAc,CAAC,QAAQ,GAAG,SACF,CAAA;AAE9F;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG,OAS1C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,4BAI3B,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,YAAY,GACvB,UAAU,cAAc,KACvB,KAAK,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAMrE,CAAA;AA+DD;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1C,wFAAwF;IACxF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAgCD;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,aAAa,KAAG,MAKpB,CAAA;AAEtC;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,cAAc,GAAI,UAAU,iBAAiB,KAAG,MAW5D,CAAA;AAuCD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,EAAE,MAA0B,CAAA;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,UAAU,aAAa,KAAG,MAoD3D,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa,EAAE,MAA4B,CAAA;AAExD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,MAAyB,CAAA;AAElD;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,KAAG,MAC2C,CAAA;AAExF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,OAAO;AACjB,4EAA4E;AAC1E,aAAa;AACf,2EAA2E;GACzE,UAAU;AACZ,qDAAqD;GACnD,WAAW;AACb,kFAAkF;GAChF,mBAAmB;AACrB,iEAAiE;GAC/D,gBAAgB;AAClB,mFAAmF;GACjF,UAAU;AACZ,2EAA2E;GACzE,cAAc;AAChB,oEAAoE;GAClE,mBAAmB;AACrB,8EAA8E;GAC5E,qBAAqB;AACvB,4EAA4E;GAC1E,aAAa,CAAA;AAkBjB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,MAAM,GACd;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAA;CACzB,GACC;IACA,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAA;IAC5C,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;IACtB,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAuDH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,IAAI,GACf,UAAU,OAAO,KAChB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,wBAAwB,EAAE,aAAa,CAAC,aAAa,CA+BvG,CAAA;AAyBJ;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,wBAEnB,CAAA;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,MAAM,GAAI,SAAS,aAAa,CAAC,MAAM,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAmBtE,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,KAAK,GAAI,UAAU,OAAO,KAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAS5F,CAAA"}

package/dist/cjs/ProcessReaper.js

@@ -52,7 +52,7 @@ var ProcessLedger = __toESM(require("@smthrs/kernel/ProcessLedger"), 1);
 var Effect = __toESM(require("effect/Effect"), 1);
 var Layer = __toESM(require("effect/Layer"), 1);
 var Metric = __toESM(require("effect/Metric"), 1);
-var import_ChildProcessSpawner = require("effect/unstable/process/ChildProcessSpawner");
+var import_ChildProcessSpawner = require("effect/process/ChildProcessSpawner");
 var import_node_child_process = require("node:child_process");
 var import_node_os = require("node:os");
 var import_node_path = require("node:path");