@tiangong-lca/cli 0.1.8 → 0.1.10

package/dist/src/lib/runtime/exec-command.js

@@ -0,0 +1,83 @@
+import { parseArgs } from 'node:util';
+import { CliError } from '../errors.js';
+import { loadTrustedRuntimeManifest } from './manifest.js';
+import { executeRuntimeLaunch } from './execute.js';
+export async function runRuntimeExecCommand(args, fetchImpl, env = process.env, run = executeRuntimeLaunch) {
+    const separator = args.indexOf('--'), options = separator < 0 ? args : args.slice(0, separator), argv = separator < 0 ? [] : args.slice(separator + 1);
+    let flags;
+    try {
+        flags = parseArgs({
+            args: options,
+            strict: true,
+            allowPositionals: false,
+            options: {
+                help: { type: 'boolean', short: 'h' },
+                manifest: { type: 'string' },
+                'manifest-sha256': { type: 'string' },
+                'cache-dir': { type: 'string' },
+                entry: { type: 'string' },
+                cwd: { type: 'string' },
+                lease: { type: 'string' },
+                'lease-owner': { type: 'string' },
+            },
+        }).values;
+    }
+    catch {
+        throw new CliError('Invalid runtime exec arguments.', {
+            code: 'RUNTIME_ARGUMENT_INVALID',
+            exitCode: 2,
+        });
+    }
+    if (flags.help)
+        return {
+            exitCode: 0,
+            stdout: 'Usage: tiangong-lca runtime exec --manifest <file> --manifest-sha256 <trusted-sha256> --entry <id> --cwd <work-directory> [--cache-dir <dir>] [--lease <id> --lease-owner <owner>] -- <application argv>\n',
+            stderr: '',
+        };
+    if (!flags.manifest ||
+        !flags['manifest-sha256'] ||
+        !flags.entry ||
+        !flags.cwd ||
+        Boolean(flags.lease) !== Boolean(flags['lease-owner']))
+        throw new CliError('Runtime exec requires manifest, trust digest, entry and explicit work directory.', { code: 'RUNTIME_ARGUMENT_INVALID', exitCode: 2 });
+    const value = loadTrustedRuntimeManifest(flags.manifest, flags['manifest-sha256']);
+    const abort = new AbortController();
+    const stop = () => abort.abort();
+    process.once('SIGINT', stop);
+    process.once('SIGTERM', stop);
+    try {
+        const result = await run(value, {
+            cacheDir: flags['cache-dir'],
+            entry: flags.entry,
+            cwd: flags.cwd,
+            argv,
+            env,
+            fetchImpl,
+            signal: abort.signal,
+            ...(flags.lease ? { lease: { id: flags.lease, owner: flags['lease-owner'] } } : {}),
+        });
+        return {
+            exitCode: abort.signal.aborted
+                ? 130
+                : result.error
+                    ? 1
+                    : (result.status ?? (result.signal ? 130 : 1)),
+            stdout: result.stdout,
+            stderr: result.stderr,
+        };
+    }
+    catch (error) {
+        if (abort.signal.aborted)
+            return {
+                exitCode: 130,
+                stdout: '',
+                stderr: 'Runtime execution interrupted; application recovery must preserve existing attempts.\n',
+            };
+        throw error;
+    }
+    finally {
+        process.removeListener('SIGINT', stop);
+        process.removeListener('SIGTERM', stop);
+    }
+}
+//# sourceMappingURL=exec-command.js.map

package/dist/src/lib/runtime/exec-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-command.js","sourceRoot":"","sources":["../../../../src/lib/runtime/exec-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAc,EACd,SAAqB,EACrB,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,GAAG,GAAgC,oBAAoB;IAEvD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAClC,OAAO,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EACzD,IAAI,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,SAAS,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,KAAK;YACvB,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;gBACrC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACrC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACvB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;SACF,CAAC,CAAC,MAAM,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE;YACpD,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,IAAI;QACZ,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EACJ,4MAA4M;YAC9M,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,IACE,CAAC,KAAK,CAAC,QAAQ;QACf,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACzB,CAAC,KAAK,CAAC,KAAK;QACZ,CAAC,KAAK,CAAC,GAAG;QACV,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAEtD,MAAM,IAAI,QAAQ,CAChB,kFAAkF,EAClF,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAClD,CAAC;IACJ,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE;YAC9B,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI;YACJ,GAAG;YACH,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO;gBAC5B,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,MAAM,CAAC,KAAK;oBACZ,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YACtB,OAAO;gBACL,QAAQ,EAAE,GAAG;gBACb,MAAM,EAAE,EAAE;gBACV,MAAM,EACJ,wFAAwF;aAC3F,CAAC;QACJ,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC","sourcesContent":["import { parseArgs } from 'node:util';\nimport { CliError } from '../errors.js';\nimport type { FetchLike } from '../http.js';\nimport { loadTrustedRuntimeManifest } from './manifest.js';\nimport { executeRuntimeLaunch } from './execute.js';\nexport async function runRuntimeExecCommand(\n  args: string[],\n  fetchImpl?: FetchLike,\n  env: NodeJS.ProcessEnv = process.env,\n  run: typeof executeRuntimeLaunch = executeRuntimeLaunch,\n): Promise<{ exitCode: number; stdout: string; stderr: string }> {\n  const separator = args.indexOf('--'),\n    options = separator < 0 ? args : args.slice(0, separator),\n    argv = separator < 0 ? [] : args.slice(separator + 1);\n  let flags;\n  try {\n    flags = parseArgs({\n      args: options,\n      strict: true,\n      allowPositionals: false,\n      options: {\n        help: { type: 'boolean', short: 'h' },\n        manifest: { type: 'string' },\n        'manifest-sha256': { type: 'string' },\n        'cache-dir': { type: 'string' },\n        entry: { type: 'string' },\n        cwd: { type: 'string' },\n        lease: { type: 'string' },\n        'lease-owner': { type: 'string' },\n      },\n    }).values;\n  } catch {\n    throw new CliError('Invalid runtime exec arguments.', {\n      code: 'RUNTIME_ARGUMENT_INVALID',\n      exitCode: 2,\n    });\n  }\n  if (flags.help)\n    return {\n      exitCode: 0,\n      stdout:\n        'Usage: tiangong-lca runtime exec --manifest <file> --manifest-sha256 <trusted-sha256> --entry <id> --cwd <work-directory> [--cache-dir <dir>] [--lease <id> --lease-owner <owner>] -- <application argv>\\n',\n      stderr: '',\n    };\n  if (\n    !flags.manifest ||\n    !flags['manifest-sha256'] ||\n    !flags.entry ||\n    !flags.cwd ||\n    Boolean(flags.lease) !== Boolean(flags['lease-owner'])\n  )\n    throw new CliError(\n      'Runtime exec requires manifest, trust digest, entry and explicit work directory.',\n      { code: 'RUNTIME_ARGUMENT_INVALID', exitCode: 2 },\n    );\n  const value = loadTrustedRuntimeManifest(flags.manifest, flags['manifest-sha256']);\n  const abort = new AbortController();\n  const stop = () => abort.abort();\n  process.once('SIGINT', stop);\n  process.once('SIGTERM', stop);\n  try {\n    const result = await run(value, {\n      cacheDir: flags['cache-dir'],\n      entry: flags.entry,\n      cwd: flags.cwd,\n      argv,\n      env,\n      fetchImpl,\n      signal: abort.signal,\n      ...(flags.lease ? { lease: { id: flags.lease, owner: flags['lease-owner']! } } : {}),\n    });\n    return {\n      exitCode: abort.signal.aborted\n        ? 130\n        : result.error\n          ? 1\n          : (result.status ?? (result.signal ? 130 : 1)),\n      stdout: result.stdout,\n      stderr: result.stderr,\n    };\n  } catch (error) {\n    if (abort.signal.aborted)\n      return {\n        exitCode: 130,\n        stdout: '',\n        stderr:\n          'Runtime execution interrupted; application recovery must preserve existing attempts.\\n',\n      };\n    throw error;\n  } finally {\n    process.removeListener('SIGINT', stop);\n    process.removeListener('SIGTERM', stop);\n  }\n}\n"]}

package/dist/src/lib/runtime/execute.d.ts

@@ -0,0 +1,11 @@
+import { executeFoundryCommandSpec, type FoundryCommandSpecSpawnResult } from '../../command-spec.js';
+import { type RuntimeManagerOptions } from './manager.js';
+import type { TrustedRuntimeManifest } from './manifest-types.js';
+export declare function runtimeChildEnvironment(source: NodeJS.ProcessEnv, mode: 'isolated' | 'cli-auth'): NodeJS.ProcessEnv;
+export type RuntimeExecutionOptions = RuntimeManagerOptions & {
+    entry: string;
+    cwd: string;
+    argv: readonly string[];
+    env?: Record<string, string | undefined>;
+};
+export declare function executeRuntimeLaunch(value: TrustedRuntimeManifest, options: RuntimeExecutionOptions, spawnImpl?: Parameters<typeof executeFoundryCommandSpec>[1]['spawnImpl']): Promise<FoundryCommandSpecSpawnResult>;

package/dist/src/lib/runtime/execute.js

@@ -0,0 +1,125 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { createFoundryCommandSpec, executeFoundryCommandSpec, } from '../../command-spec.js';
+import { ensureRuntimeComponents, inspectRuntimeComponents, } from './manager.js';
+import { spawnRuntimeProcess } from './process.js';
+import { acquireRuntimeLease, releaseRuntimeLease } from './leases.js';
+import { cachePath, defaultRuntimeCache, openRuntimeCache } from './storage.js';
+import { assertTrustedManifest, componentKey } from './manifest.js';
+import { inspectRuntimeHost } from './host.js';
+import { runtimeError } from './files.js';
+const systemKeys = [
+    'PATH',
+    'Path',
+    'PATHEXT',
+    'SystemRoot',
+    'SYSTEMROOT',
+    'WINDIR',
+    'ComSpec',
+    'COMSPEC',
+    'HOME',
+    'USERPROFILE',
+    'APPDATA',
+    'LOCALAPPDATA',
+    'XDG_CONFIG_HOME',
+    'XDG_CACHE_HOME',
+    'TMPDIR',
+    'TEMP',
+    'TMP',
+    'LANG',
+    'LC_ALL',
+    'TZ',
+];
+const authKeys = [
+    'TIANGONG_LCA_API_BASE_URL',
+    'TIANGONG_LCA_SUPABASE_PUBLISHABLE_KEY',
+    'TIANGONG_LCA_OAUTH_CLIENT_ID',
+    'TIANGONG_LCA_OAUTH_REDIRECT_URI',
+    'TIANGONG_LCA_REGION',
+    'TIANGONG_LCA_AUTH_MODE',
+    'TIANGONG_LCA_SESSION_FILE',
+    'TIANGONG_LCA_DISABLE_SESSION_CACHE',
+    'TIANGONG_LCA_FORCE_REAUTH',
+    'TIANGONG_LCA_ACCESS_TOKEN',
+];
+export function runtimeChildEnvironment(source, mode) {
+    const env = {};
+    for (const key of [...systemKeys, ...(mode === 'cli-auth' ? authKeys : [])])
+        if (source[key] !== undefined)
+            env[key] = source[key];
+    return env;
+}
+export async function executeRuntimeLaunch(value, options, spawnImpl) {
+    assertTrustedManifest(value);
+    const host = options.host ?? inspectRuntimeHost();
+    const launch = value.manifest.launches.find((item) => item.id === options.entry && item.platform === host.platform);
+    if (!launch)
+        runtimeError('RUNTIME_LAUNCH_UNKNOWN', 'Selected runtime entry is not declared for this host.');
+    if (options.argv.length > 512 ||
+        options.argv.some((arg) => typeof arg !== 'string' ||
+            arg.includes('\0') ||
+            arg.length > 32768 ||
+            /^--(?:username|password|api-key|access-token|refresh-token|authorization-code|oauth-code)(?:=|$)/iu.test(arg)))
+        runtimeError('RUNTIME_LAUNCH_ARGUMENT', 'Runtime argv must be bounded and contain no credential arguments.');
+    if (!path.isAbsolute(options.cwd) || !fs.statSync(options.cwd).isDirectory())
+        runtimeError('RUNTIME_LAUNCH_CWD', 'Runtime launch requires an explicit existing work directory.');
+    const cwd = fs.realpathSync(options.cwd), cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);
+    const relative = path.relative(cache, cwd);
+    if (relative === '' ||
+        (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative)) ||
+        /\/(?:\.agents|\.codex)\/skills(?:\/|$)/u.test(cwd.split(path.sep).join('/')))
+        runtimeError('RUNTIME_LAUNCH_CWD', 'A runtime cache or installed skill cannot be used as the work directory.');
+    const lease = { id: `execution-${randomUUID()}`, owner: `runtime-execution:${process.pid}` };
+    let drain;
+    try {
+        await ensureRuntimeComponents(value, { ...options, cacheDir: cache, host, lease });
+        if (options.lease)
+            await acquireRuntimeLease(cache, options.lease.id, options.lease.owner, value.manifest.components
+                .filter((item) => item.platform === host.platform)
+                .map(componentKey));
+        if (inspectRuntimeComponents(value, { ...options, cacheDir: cache, host }).status !== 'ready')
+            runtimeError('RUNTIME_LAUNCH_CHANGED', 'Runtime changed before launch.');
+        const artifact = (ref) => {
+            const component = value.manifest.components.find((item) => item.id === ref.component && item.platform === host.platform);
+            const file = component.files.find((item) => item.path === ref.path);
+            const filePath = cachePath(cache, `components/${componentKey(component)}/root/${ref.path}`);
+            return {
+                role: `runtime:${ref.component}:${ref.path}`,
+                path: filePath,
+                bytes: file.bytes,
+                sha256: file.sha256,
+            };
+        };
+        const program = artifact(launch.executable);
+        const references = launch.argv
+            .filter((arg) => 'component' in arg)
+            .map(artifact);
+        const argv = launch.argv
+            .map((arg) => ('literal' in arg ? arg.literal : artifact(arg).path))
+            .concat([...options.argv]);
+        const spec = createFoundryCommandSpec({
+            executable: program.path,
+            argv,
+            binding: { artifacts: [program, ...references] },
+        });
+        const result = await executeFoundryCommandSpec(spec, {
+            cwd,
+            env: runtimeChildEnvironment(options.env ?? process.env, launch.environment),
+            signal: options.signal,
+            maxBuffer: 16 * 1024 * 1024,
+            resolveArtifactPath: (file) => file,
+            spawnImpl: (executable, argv, childOptions) => {
+                drain = (spawnImpl ?? spawnRuntimeProcess)(executable, argv, childOptions);
+                return drain;
+            },
+        });
+        return result;
+    }
+    finally {
+        await drain?.catch(() => undefined);
+        if (fs.existsSync(cachePath(cache, '.runtime-cache.json')))
+            await releaseRuntimeLease(cache, lease.id, lease.owner);
+    }
+}
+//# sourceMappingURL=execute.js.map

package/dist/src/lib/runtime/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../../src/lib/runtime/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAE1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,MAAM,UAAU,GAAG;IACjB,MAAM;IACN,MAAM;IACN,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,aAAa;IACb,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,QAAQ;IACR,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,IAAI;CACI,CAAC;AACX,MAAM,QAAQ,GAAG;IACf,2BAA2B;IAC3B,uCAAuC;IACvC,8BAA8B;IAC9B,iCAAiC;IACjC,qBAAqB;IACrB,wBAAwB;IACxB,2BAA2B;IAC3B,oCAAoC;IACpC,2BAA2B;IAC3B,2BAA2B;CACnB,CAAC;AACX,MAAM,UAAU,uBAAuB,CACrC,MAAyB,EACzB,IAA6B;IAE7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA6B,EAC7B,OAAgC,EAChC,SAAwE;IAExE,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CACvE,CAAC;IACF,IAAI,CAAC,MAAM;QACT,YAAY,CAAC,wBAAwB,EAAE,uDAAuD,CAAC,CAAC;IAClG,IACE,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;QACzB,OAAO,CAAC,IAAI,CAAC,IAAI,CACf,CAAC,GAAG,EAAE,EAAE,CACN,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,GAAG,CAAC,MAAM,GAAG,KAAK;YAClB,oGAAoG,CAAC,IAAI,CACvG,GAAG,CACJ,CACJ;QAED,YAAY,CACV,yBAAyB,EACzB,mEAAmE,CACpE,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;QAC1E,YAAY,CACV,oBAAoB,EACpB,8DAA8D,CAC/D,CAAC;IACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EACtC,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,IACE,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1F,yCAAyC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7E,YAAY,CACV,oBAAoB,EACpB,0EAA0E,CAC3E,CAAC;IACJ,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,aAAa,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IAC7F,IAAI,KAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK;YACf,MAAM,mBAAmB,CACvB,KAAK,EACL,OAAO,CAAC,KAAK,CAAC,EAAE,EAChB,OAAO,CAAC,KAAK,CAAC,KAAK,EACnB,KAAK,CAAC,QAAQ,CAAC,UAAU;iBACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC;iBACjD,GAAG,CAAC,YAAY,CAAC,CACrB,CAAC;QACJ,IAAI,wBAAwB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,OAAO;YAC3F,YAAY,CAAC,wBAAwB,EAAE,gCAAgC,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,CAAC,GAAkB,EAAE,EAAE;YACtC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CACtE,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAE,CAAC;YACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,cAAc,YAAY,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5F,OAAO;gBACL,IAAI,EAAE,WAAW,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI;aAC3B,MAAM,CAAC,CAAC,GAAG,EAAwB,EAAE,CAAC,WAAW,IAAI,GAAG,CAAC;aACzD,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;aACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;aACnE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,UAAU,EAAE,OAAO,CAAC,IAAI;YACxB,IAAI;YACJ,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,IAAI,EAAE;YACnD,GAAG;YACH,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;YAC5E,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;YACnC,SAAS,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;gBAC5C,KAAK,GAAG,CAAC,SAAS,IAAI,mBAAmB,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;gBAC3E,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACxD,MAAM,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport {\n  createFoundryCommandSpec,\n  executeFoundryCommandSpec,\n  type FoundryCommandSpecSpawnResult,\n} from '../../command-spec.js';\nimport {\n  ensureRuntimeComponents,\n  inspectRuntimeComponents,\n  type RuntimeManagerOptions,\n} from './manager.js';\nimport { spawnRuntimeProcess } from './process.js';\nimport { acquireRuntimeLease, releaseRuntimeLease } from './leases.js';\nimport { cachePath, defaultRuntimeCache, openRuntimeCache } from './storage.js';\nimport { assertTrustedManifest, componentKey } from './manifest.js';\nimport { inspectRuntimeHost } from './host.js';\nimport { runtimeError } from './files.js';\nimport type { TrustedRuntimeManifest, ComponentPath } from './manifest-types.js';\n\nconst systemKeys = [\n  'PATH',\n  'Path',\n  'PATHEXT',\n  'SystemRoot',\n  'SYSTEMROOT',\n  'WINDIR',\n  'ComSpec',\n  'COMSPEC',\n  'HOME',\n  'USERPROFILE',\n  'APPDATA',\n  'LOCALAPPDATA',\n  'XDG_CONFIG_HOME',\n  'XDG_CACHE_HOME',\n  'TMPDIR',\n  'TEMP',\n  'TMP',\n  'LANG',\n  'LC_ALL',\n  'TZ',\n] as const;\nconst authKeys = [\n  'TIANGONG_LCA_API_BASE_URL',\n  'TIANGONG_LCA_SUPABASE_PUBLISHABLE_KEY',\n  'TIANGONG_LCA_OAUTH_CLIENT_ID',\n  'TIANGONG_LCA_OAUTH_REDIRECT_URI',\n  'TIANGONG_LCA_REGION',\n  'TIANGONG_LCA_AUTH_MODE',\n  'TIANGONG_LCA_SESSION_FILE',\n  'TIANGONG_LCA_DISABLE_SESSION_CACHE',\n  'TIANGONG_LCA_FORCE_REAUTH',\n  'TIANGONG_LCA_ACCESS_TOKEN',\n] as const;\nexport function runtimeChildEnvironment(\n  source: NodeJS.ProcessEnv,\n  mode: 'isolated' | 'cli-auth',\n): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = {};\n  for (const key of [...systemKeys, ...(mode === 'cli-auth' ? authKeys : [])])\n    if (source[key] !== undefined) env[key] = source[key];\n  return env;\n}\nexport type RuntimeExecutionOptions = RuntimeManagerOptions & {\n  entry: string;\n  cwd: string;\n  argv: readonly string[];\n  env?: Record<string, string | undefined>;\n};\nexport async function executeRuntimeLaunch(\n  value: TrustedRuntimeManifest,\n  options: RuntimeExecutionOptions,\n  spawnImpl?: Parameters<typeof executeFoundryCommandSpec>[1]['spawnImpl'],\n): Promise<FoundryCommandSpecSpawnResult> {\n  assertTrustedManifest(value);\n  const host = options.host ?? inspectRuntimeHost();\n  const launch = value.manifest.launches.find(\n    (item) => item.id === options.entry && item.platform === host.platform,\n  );\n  if (!launch)\n    runtimeError('RUNTIME_LAUNCH_UNKNOWN', 'Selected runtime entry is not declared for this host.');\n  if (\n    options.argv.length > 512 ||\n    options.argv.some(\n      (arg) =>\n        typeof arg !== 'string' ||\n        arg.includes('\\0') ||\n        arg.length > 32768 ||\n        /^--(?:username|password|api-key|access-token|refresh-token|authorization-code|oauth-code)(?:=|$)/iu.test(\n          arg,\n        ),\n    )\n  )\n    runtimeError(\n      'RUNTIME_LAUNCH_ARGUMENT',\n      'Runtime argv must be bounded and contain no credential arguments.',\n    );\n  if (!path.isAbsolute(options.cwd) || !fs.statSync(options.cwd).isDirectory())\n    runtimeError(\n      'RUNTIME_LAUNCH_CWD',\n      'Runtime launch requires an explicit existing work directory.',\n    );\n  const cwd = fs.realpathSync(options.cwd),\n    cache = openRuntimeCache(options.cacheDir ?? defaultRuntimeCache(), false);\n  const relative = path.relative(cache, cwd);\n  if (\n    relative === '' ||\n    (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative)) ||\n    /\\/(?:\\.agents|\\.codex)\\/skills(?:\\/|$)/u.test(cwd.split(path.sep).join('/'))\n  )\n    runtimeError(\n      'RUNTIME_LAUNCH_CWD',\n      'A runtime cache or installed skill cannot be used as the work directory.',\n    );\n  const lease = { id: `execution-${randomUUID()}`, owner: `runtime-execution:${process.pid}` };\n  let drain: Promise<FoundryCommandSpecSpawnResult> | undefined;\n  try {\n    await ensureRuntimeComponents(value, { ...options, cacheDir: cache, host, lease });\n    if (options.lease)\n      await acquireRuntimeLease(\n        cache,\n        options.lease.id,\n        options.lease.owner,\n        value.manifest.components\n          .filter((item) => item.platform === host.platform)\n          .map(componentKey),\n      );\n    if (inspectRuntimeComponents(value, { ...options, cacheDir: cache, host }).status !== 'ready')\n      runtimeError('RUNTIME_LAUNCH_CHANGED', 'Runtime changed before launch.');\n    const artifact = (ref: ComponentPath) => {\n      const component = value.manifest.components.find(\n        (item) => item.id === ref.component && item.platform === host.platform,\n      )!;\n      const file = component.files.find((item) => item.path === ref.path)!;\n      const filePath = cachePath(cache, `components/${componentKey(component)}/root/${ref.path}`);\n      return {\n        role: `runtime:${ref.component}:${ref.path}`,\n        path: filePath,\n        bytes: file.bytes,\n        sha256: file.sha256,\n      };\n    };\n    const program = artifact(launch.executable);\n    const references = launch.argv\n      .filter((arg): arg is ComponentPath => 'component' in arg)\n      .map(artifact);\n    const argv = launch.argv\n      .map((arg) => ('literal' in arg ? arg.literal : artifact(arg).path))\n      .concat([...options.argv]);\n    const spec = createFoundryCommandSpec({\n      executable: program.path,\n      argv,\n      binding: { artifacts: [program, ...references] },\n    });\n    const result = await executeFoundryCommandSpec(spec, {\n      cwd,\n      env: runtimeChildEnvironment(options.env ?? process.env, launch.environment),\n      signal: options.signal,\n      maxBuffer: 16 * 1024 * 1024,\n      resolveArtifactPath: (file) => file,\n      spawnImpl: (executable, argv, childOptions) => {\n        drain = (spawnImpl ?? spawnRuntimeProcess)(executable, argv, childOptions);\n        return drain;\n      },\n    });\n    return result;\n  } finally {\n    await drain?.catch(() => undefined);\n    if (fs.existsSync(cachePath(cache, '.runtime-cache.json')))\n      await releaseRuntimeLease(cache, lease.id, lease.owner);\n  }\n}\n"]}

package/dist/src/lib/runtime/files.d.ts

@@ -0,0 +1,7 @@
+import type { RuntimeFileFact } from './types.js';
+export declare function runtimeError(code: string, message: string): never;
+export declare function contentHash(value: unknown): string;
+/** Hash one descriptor without loading the whole executable or following a selected symlink. */
+export declare function hashRuntimeFile(file: string, label: string): RuntimeFileFact;
+export declare function assertInventoryBudget(count: number, bytes: number): void;
+export declare function listRuntimeFiles(root: string): readonly RuntimeFileFact[];

package/dist/src/lib/runtime/files.js

@@ -0,0 +1,91 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { CliError } from '../errors.js';
+export function runtimeError(code, message) {
+    throw new CliError(message, { code, exitCode: 69 });
+}
+export function contentHash(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+/** Hash one descriptor without loading the whole executable or following a selected symlink. */
+export function hashRuntimeFile(file, label) {
+    const before = fs.lstatSync(file, { bigint: true });
+    if (before.isSymbolicLink() || !before.isFile() || before.size > 512 * 1024 * 1024) {
+        runtimeError('RUNTIME_FILE_INVALID', 'Runtime files must be bounded regular files.');
+    }
+    const fd = fs.openSync(file, 'r');
+    try {
+        const opened = fs.fstatSync(fd, { bigint: true });
+        if (opened.dev !== before.dev || opened.ino !== before.ino || opened.size !== before.size) {
+            runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file changed before it could be inspected.');
+        }
+        const hash = createHash('sha256');
+        const buffer = Buffer.allocUnsafe(1024 * 1024);
+        let bytes = 0;
+        while (true) {
+            const read = fs.readSync(fd, buffer, 0, buffer.length, null);
+            if (read === 0)
+                break;
+            bytes += read;
+            if (bytes > before.size)
+                runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file grew during inspection.');
+            hash.update(buffer.subarray(0, read));
+        }
+        const after = fs.fstatSync(fd, { bigint: true });
+        const selected = fs.lstatSync(file, { bigint: true });
+        if (BigInt(bytes) !== before.size ||
+            after.size !== before.size ||
+            after.mtimeNs !== before.mtimeNs ||
+            selected.dev !== before.dev ||
+            selected.ino !== before.ino ||
+            selected.isSymbolicLink() ||
+            !selected.isFile()) {
+            runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file changed during inspection.');
+        }
+        return Object.freeze({ path: label, bytes, sha256: hash.digest('hex') });
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+export function assertInventoryBudget(count, bytes) {
+    if (count > 50_000 || bytes > 2 * 1024 * 1024 * 1024) {
+        runtimeError('RUNTIME_INVENTORY_LIMIT', 'Runtime inventory exceeds its bounded file or byte budget.');
+    }
+}
+export function listRuntimeFiles(root) {
+    const files = [
+        hashRuntimeFile(path.join(root, 'package.json'), 'package.json'),
+    ];
+    let totalBytes = files[0].bytes;
+    const directoryPath = (relative) => {
+        const directory = path.join(root, relative);
+        const stat = fs.lstatSync(directory);
+        if (stat.isSymbolicLink() || !stat.isDirectory())
+            runtimeError('RUNTIME_DIRECTORY_INVALID', 'Runtime directories cannot be symlinks.');
+        return directory;
+    };
+    // The initial subtree skips this container; inspect it before following dist/src.
+    directoryPath('dist');
+    const walk = (relative) => {
+        const directory = directoryPath(relative);
+        for (const name of fs.readdirSync(directory).sort()) {
+            const item = `${relative}/${name}`;
+            const file = path.join(root, item);
+            const child = fs.lstatSync(file);
+            if (child.isDirectory())
+                walk(item);
+            else {
+                const fact = hashRuntimeFile(file, item);
+                files.push(fact);
+                totalBytes += fact.bytes;
+                assertInventoryBudget(files.length, totalBytes);
+            }
+        }
+    };
+    for (const directory of ['bin', 'dist/src', 'assets'])
+        walk(directory);
+    return Object.freeze(files.sort((left, right) => (left.path < right.path ? -1 : 1)));
+}
+//# sourceMappingURL=files.js.map

package/dist/src/lib/runtime/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../../src/lib/runtime/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACnF,YAAY,CAAC,sBAAsB,EAAE,8CAA8C,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YAC1F,YAAY,CAAC,sBAAsB,EAAE,oDAAoD,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7D,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM;YACtB,KAAK,IAAI,IAAI,CAAC;YACd,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI;gBACrB,YAAY,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,IACE,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI;YAC7B,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC3B,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAC3B,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE,EAClB,CAAC;YACD,YAAY,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,KAAa;IAChE,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACrD,YAAY,CACV,yBAAyB,EACzB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAsB;QAC/B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC;KACjE,CAAC;IACF,IAAI,UAAU,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IACjC,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAU,EAAE;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAC9C,YAAY,CAAC,2BAA2B,EAAE,yCAAyC,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,kFAAkF;IAClF,aAAa,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACtC,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;iBAC/B,CAAC;gBACJ,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;gBACzB,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC","sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { createHash } from 'node:crypto';\nimport { CliError } from '../errors.js';\nimport type { RuntimeFileFact } from './types.js';\n\nexport function runtimeError(code: string, message: string): never {\n  throw new CliError(message, { code, exitCode: 69 });\n}\n\nexport function contentHash(value: unknown): string {\n  return createHash('sha256').update(JSON.stringify(value)).digest('hex');\n}\n\n/** Hash one descriptor without loading the whole executable or following a selected symlink. */\nexport function hashRuntimeFile(file: string, label: string): RuntimeFileFact {\n  const before = fs.lstatSync(file, { bigint: true });\n  if (before.isSymbolicLink() || !before.isFile() || before.size > 512 * 1024 * 1024) {\n    runtimeError('RUNTIME_FILE_INVALID', 'Runtime files must be bounded regular files.');\n  }\n  const fd = fs.openSync(file, 'r');\n  try {\n    const opened = fs.fstatSync(fd, { bigint: true });\n    if (opened.dev !== before.dev || opened.ino !== before.ino || opened.size !== before.size) {\n      runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file changed before it could be inspected.');\n    }\n    const hash = createHash('sha256');\n    const buffer = Buffer.allocUnsafe(1024 * 1024);\n    let bytes = 0;\n    while (true) {\n      const read = fs.readSync(fd, buffer, 0, buffer.length, null);\n      if (read === 0) break;\n      bytes += read;\n      if (bytes > before.size)\n        runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file grew during inspection.');\n      hash.update(buffer.subarray(0, read));\n    }\n    const after = fs.fstatSync(fd, { bigint: true });\n    const selected = fs.lstatSync(file, { bigint: true });\n    if (\n      BigInt(bytes) !== before.size ||\n      after.size !== before.size ||\n      after.mtimeNs !== before.mtimeNs ||\n      selected.dev !== before.dev ||\n      selected.ino !== before.ino ||\n      selected.isSymbolicLink() ||\n      !selected.isFile()\n    ) {\n      runtimeError('RUNTIME_FILE_CHANGED', 'Runtime file changed during inspection.');\n    }\n    return Object.freeze({ path: label, bytes, sha256: hash.digest('hex') });\n  } finally {\n    fs.closeSync(fd);\n  }\n}\n\nexport function assertInventoryBudget(count: number, bytes: number): void {\n  if (count > 50_000 || bytes > 2 * 1024 * 1024 * 1024) {\n    runtimeError(\n      'RUNTIME_INVENTORY_LIMIT',\n      'Runtime inventory exceeds its bounded file or byte budget.',\n    );\n  }\n}\n\nexport function listRuntimeFiles(root: string): readonly RuntimeFileFact[] {\n  const files: RuntimeFileFact[] = [\n    hashRuntimeFile(path.join(root, 'package.json'), 'package.json'),\n  ];\n  let totalBytes = files[0]!.bytes;\n  const directoryPath = (relative: string): string => {\n    const directory = path.join(root, relative);\n    const stat = fs.lstatSync(directory);\n    if (stat.isSymbolicLink() || !stat.isDirectory())\n      runtimeError('RUNTIME_DIRECTORY_INVALID', 'Runtime directories cannot be symlinks.');\n    return directory;\n  };\n  // The initial subtree skips this container; inspect it before following dist/src.\n  directoryPath('dist');\n  const walk = (relative: string): void => {\n    const directory = directoryPath(relative);\n    for (const name of fs.readdirSync(directory).sort()) {\n      const item = `${relative}/${name}`;\n      const file = path.join(root, item);\n      const child = fs.lstatSync(file);\n      if (child.isDirectory()) walk(item);\n      else {\n        const fact = hashRuntimeFile(file, item);\n        files.push(fact);\n        totalBytes += fact.bytes;\n        assertInventoryBudget(files.length, totalBytes);\n      }\n    }\n  };\n  for (const directory of ['bin', 'dist/src', 'assets']) walk(directory);\n  return Object.freeze(files.sort((left, right) => (left.path < right.path ? -1 : 1)));\n}\n"]}

package/dist/src/lib/runtime/host.d.ts

@@ -0,0 +1,8 @@
+import type { RuntimeHost, TrustedRuntimeManifest } from './manifest-types.js';
+declare function compareVersions(left: string, right: string): number;
+export declare function inspectRuntimeHost(): RuntimeHost;
+export declare function assertRuntimeHost(value: TrustedRuntimeManifest, host: RuntimeHost): void;
+export declare const runtimeHostInternals: {
+    compareVersions: typeof compareVersions;
+};
+export {};

package/dist/src/lib/runtime/host.js

@@ -0,0 +1,37 @@
+import os from 'node:os';
+import { runtimePlatform } from './descriptor.js';
+import { assertTrustedManifest } from './manifest.js';
+import { runtimeError } from './files.js';
+function compareVersions(left, right) {
+    const a = left.split(/[.-]/u).slice(0, 3).map(Number), b = right.split('.').map(Number);
+    if (a.some((value) => !Number.isSafeInteger(value) || value < 0))
+        return -1;
+    for (let i = 0; i < 3; i++) {
+        const delta = (a[i] ?? 0) - (b[i] ?? 0);
+        if (delta !== 0)
+            return delta;
+    }
+    return 0;
+}
+export function inspectRuntimeHost() {
+    const platform = runtimePlatform(process.platform, process.arch);
+    let glibc = null;
+    if (process.platform === 'linux') {
+        // Project only the ABI header; never serialize a diagnostic report or its environment.
+        const report = process.report.getReport();
+        if (typeof report.header?.glibcVersionRuntime === 'string')
+            glibc = report.header.glibcVersionRuntime;
+    }
+    return Object.freeze({ platform, osRelease: os.release(), glibc });
+}
+export function assertRuntimeHost(value, host) {
+    assertTrustedManifest(value);
+    const minimum = value.manifest.minimum_hosts[host.platform];
+    if (!minimum ||
+        compareVersions(host.osRelease, minimum.os_release) < 0 ||
+        (host.platform.startsWith('linux-') &&
+            (!host.glibc || !minimum.glibc || compareVersions(host.glibc, minimum.glibc) < 0)))
+        runtimeError('RUNTIME_HOST_UNSUPPORTED', 'The selected release does not support this host OS/architecture/ABI.');
+}
+export const runtimeHostInternals = { compareVersions };
+//# sourceMappingURL=host.js.map

package/dist/src/lib/runtime/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../../../src/lib/runtime/host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EACnD,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,uFAAuF;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAoD,CAAC;QAC5F,IAAI,OAAO,MAAM,CAAC,MAAM,EAAE,mBAAmB,KAAK,QAAQ;YACxD,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAA6B,EAAE,IAAiB;IAChF,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IACE,CAAC,OAAO;QACR,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QACvD,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAEpF,YAAY,CACV,0BAA0B,EAC1B,sEAAsE,CACvE,CAAC;AACN,CAAC;AACD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,eAAe,EAAE,CAAC","sourcesContent":["import os from 'node:os';\nimport { runtimePlatform } from './descriptor.js';\nimport { assertTrustedManifest } from './manifest.js';\nimport { runtimeError } from './files.js';\nimport type { RuntimeHost, TrustedRuntimeManifest } from './manifest-types.js';\n\nfunction compareVersions(left: string, right: string): number {\n  const a = left.split(/[.-]/u).slice(0, 3).map(Number),\n    b = right.split('.').map(Number);\n  if (a.some((value) => !Number.isSafeInteger(value) || value < 0)) return -1;\n  for (let i = 0; i < 3; i++) {\n    const delta = (a[i] ?? 0) - (b[i] ?? 0);\n    if (delta !== 0) return delta;\n  }\n  return 0;\n}\nexport function inspectRuntimeHost(): RuntimeHost {\n  const platform = runtimePlatform(process.platform, process.arch);\n  let glibc: string | null = null;\n  if (process.platform === 'linux') {\n    // Project only the ABI header; never serialize a diagnostic report or its environment.\n    const report = process.report.getReport() as { header?: { glibcVersionRuntime?: unknown } };\n    if (typeof report.header?.glibcVersionRuntime === 'string')\n      glibc = report.header.glibcVersionRuntime;\n  }\n  return Object.freeze({ platform, osRelease: os.release(), glibc });\n}\nexport function assertRuntimeHost(value: TrustedRuntimeManifest, host: RuntimeHost): void {\n  assertTrustedManifest(value);\n  const minimum = value.manifest.minimum_hosts[host.platform];\n  if (\n    !minimum ||\n    compareVersions(host.osRelease, minimum.os_release) < 0 ||\n    (host.platform.startsWith('linux-') &&\n      (!host.glibc || !minimum.glibc || compareVersions(host.glibc, minimum.glibc) < 0))\n  )\n    runtimeError(\n      'RUNTIME_HOST_UNSUPPORTED',\n      'The selected release does not support this host OS/architecture/ABI.',\n    );\n}\nexport const runtimeHostInternals = { compareVersions };\n"]}

package/dist/src/lib/runtime/leases.d.ts

@@ -0,0 +1,12 @@
+export type RuntimeLease = Readonly<{
+    schema: 'tiangong-lca.runtime-lease.v1';
+    id: string;
+    owner: string;
+    components: readonly string[];
+}>;
+export declare function runtimeLeaseKey(id: string): string;
+export declare function withRuntimeLeaseLock<T>(root: string, operation: () => Promise<T> | T): Promise<T>;
+export declare function readRuntimeLease(root: string, key: string): RuntimeLease;
+export declare function acquireRuntimeLease(root: string, id: string, owner: string, components: readonly string[]): Promise<RuntimeLease>;
+export declare function releaseRuntimeLease(root: string, id: string, owner: string): Promise<boolean>;
+export declare function leasedRuntimeKeys(root: string): Set<string>;

package/dist/src/lib/runtime/leases.js

@@ -0,0 +1,72 @@
+import fs from 'node:fs';
+import { withBatchRunLock } from '../../batch.js';
+import { contentHash, runtimeError } from './files.js';
+import { array, exact, record, sha, text, unique } from './manifest-values.js';
+import { cachePath, readCacheJson, writeOnce } from './storage.js';
+export function runtimeLeaseKey(id) {
+    return contentHash(text(id, 'lease id', 256));
+}
+export async function withRuntimeLeaseLock(root, operation) {
+    return withBatchRunLock({
+        runPath: cachePath(root, 'locks/leases.json'),
+        identity: { schema: 'runtime-lease-lock.v1' },
+        reason: 'Runtime component lease mutation',
+    }, operation);
+}
+export function readRuntimeLease(root, key) {
+    sha(key);
+    const value = record(readCacheJson(root, `leases/${key}.json`), 'lease');
+    exact(value, ['schema', 'id', 'owner', 'components'], 'lease');
+    if (value.schema !== 'tiangong-lca.runtime-lease.v1')
+        runtimeError('RUNTIME_LEASE_INVALID', 'Unknown runtime lease schema.');
+    const id = text(value.id, 'lease id', 256), owner = text(value.owner, 'lease owner', 4096), components = array(value.components, 128, 1).map(sha);
+    unique(components, 'lease component');
+    if (runtimeLeaseKey(id) !== key)
+        runtimeError('RUNTIME_LEASE_INVALID', 'Runtime lease identity changed.');
+    return { schema: 'tiangong-lca.runtime-lease.v1', id, owner, components };
+}
+export async function acquireRuntimeLease(root, id, owner, components) {
+    const lease = {
+        schema: 'tiangong-lca.runtime-lease.v1',
+        id: text(id, 'lease id', 256),
+        owner: text(owner, 'lease owner', 4096),
+        components: [...components].sort(),
+    };
+    array(components, 128, 1).forEach(sha);
+    unique(components, 'lease component');
+    return withRuntimeLeaseLock(root, () => {
+        const key = runtimeLeaseKey(id), file = cachePath(root, `leases/${key}.json`);
+        if (fs.existsSync(file) && contentHash(readRuntimeLease(root, key)) !== contentHash(lease))
+            runtimeError('RUNTIME_LEASE_CONFLICT', 'Existing lease pins another owner or component set; release it explicitly before replacement.');
+        writeOnce(root, `leases/${key}.json`, Buffer.from(JSON.stringify(lease) + '\n'));
+        return Object.freeze(lease);
+    });
+}
+export async function releaseRuntimeLease(root, id, owner) {
+    return withRuntimeLeaseLock(root, () => {
+        const key = runtimeLeaseKey(id), file = cachePath(root, `leases/${key}.json`);
+        if (!fs.existsSync(file))
+            return false;
+        if (readRuntimeLease(root, key).owner !== owner)
+            runtimeError('RUNTIME_LEASE_OWNER', 'Only the same explicit lease owner can release a runtime pin.');
+        fs.unlinkSync(file);
+        return true;
+    });
+}
+export function leasedRuntimeKeys(root) {
+    const directory = cachePath(root, 'leases');
+    if (!fs.existsSync(directory))
+        return new Set();
+    const names = fs.readdirSync(directory);
+    if (names.length > 10_000)
+        runtimeError('RUNTIME_LEASE_LIMIT', 'Lease inventory exceeds its bound.');
+    const keys = new Set();
+    for (const name of names) {
+        if (!/^[0-9a-f]{64}\.json$/u.test(name))
+            runtimeError('RUNTIME_LEASE_INVALID', 'Unknown lease record prevents cache pruning.');
+        for (const key of readRuntimeLease(root, name.slice(0, -5)).components)
+            keys.add(key);
+    }
+    return keys;
+}
+//# sourceMappingURL=leases.js.map

package/dist/src/lib/runtime/leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.js","sourceRoot":"","sources":["../../../../src/lib/runtime/leases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAQnE,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,SAA+B;IAE/B,OAAO,gBAAgB,CACrB;QACE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAC7C,QAAQ,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE;QAC7C,MAAM,EAAE,kCAAkC;KAC3C,EACD,SAAS,CACV,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACxD,GAAG,CAAC,GAAG,CAAC,CAAC;IACT,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,+BAA+B;QAClD,YAAY,CAAC,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;IACzE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EACxC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,EAC9C,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACtC,IAAI,eAAe,CAAC,EAAE,CAAC,KAAK,GAAG;QAC7B,YAAY,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,+BAA+B,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC5E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,EAAU,EACV,KAAa,EACb,UAA6B;IAE7B,MAAM,KAAK,GAAiB;QAC1B,MAAM,EAAE,+BAA+B;QACvC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC;QACvC,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;KACnC,CAAC;IACF,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACtC,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,EAC7B,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC;YACxF,YAAY,CACV,wBAAwB,EACxB,+FAA+F,CAChG,CAAC;QACJ,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACjF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,EAAU,EACV,KAAa;IAEb,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,EAC7B,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,KAAK;YAC7C,YAAY,CACV,qBAAqB,EACrB,+DAA+D,CAChE,CAAC;QACJ,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QACvB,YAAY,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,YAAY,CAAC,uBAAuB,EAAE,8CAA8C,CAAC,CAAC;QACxF,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import fs from 'node:fs';\nimport { withBatchRunLock } from '../../batch.js';\nimport { contentHash, runtimeError } from './files.js';\nimport { array, exact, record, sha, text, unique } from './manifest-values.js';\nimport { cachePath, readCacheJson, writeOnce } from './storage.js';\n\nexport type RuntimeLease = Readonly<{\n  schema: 'tiangong-lca.runtime-lease.v1';\n  id: string;\n  owner: string;\n  components: readonly string[];\n}>;\nexport function runtimeLeaseKey(id: string): string {\n  return contentHash(text(id, 'lease id', 256));\n}\nexport async function withRuntimeLeaseLock<T>(\n  root: string,\n  operation: () => Promise<T> | T,\n): Promise<T> {\n  return withBatchRunLock(\n    {\n      runPath: cachePath(root, 'locks/leases.json'),\n      identity: { schema: 'runtime-lease-lock.v1' },\n      reason: 'Runtime component lease mutation',\n    },\n    operation,\n  );\n}\nexport function readRuntimeLease(root: string, key: string): RuntimeLease {\n  sha(key);\n  const value = record(readCacheJson(root, `leases/${key}.json`), 'lease');\n  exact(value, ['schema', 'id', 'owner', 'components'], 'lease');\n  if (value.schema !== 'tiangong-lca.runtime-lease.v1')\n    runtimeError('RUNTIME_LEASE_INVALID', 'Unknown runtime lease schema.');\n  const id = text(value.id, 'lease id', 256),\n    owner = text(value.owner, 'lease owner', 4096),\n    components = array(value.components, 128, 1).map(sha);\n  unique(components, 'lease component');\n  if (runtimeLeaseKey(id) !== key)\n    runtimeError('RUNTIME_LEASE_INVALID', 'Runtime lease identity changed.');\n  return { schema: 'tiangong-lca.runtime-lease.v1', id, owner, components };\n}\nexport async function acquireRuntimeLease(\n  root: string,\n  id: string,\n  owner: string,\n  components: readonly string[],\n): Promise<RuntimeLease> {\n  const lease: RuntimeLease = {\n    schema: 'tiangong-lca.runtime-lease.v1',\n    id: text(id, 'lease id', 256),\n    owner: text(owner, 'lease owner', 4096),\n    components: [...components].sort(),\n  };\n  array(components, 128, 1).forEach(sha);\n  unique(components, 'lease component');\n  return withRuntimeLeaseLock(root, () => {\n    const key = runtimeLeaseKey(id),\n      file = cachePath(root, `leases/${key}.json`);\n    if (fs.existsSync(file) && contentHash(readRuntimeLease(root, key)) !== contentHash(lease))\n      runtimeError(\n        'RUNTIME_LEASE_CONFLICT',\n        'Existing lease pins another owner or component set; release it explicitly before replacement.',\n      );\n    writeOnce(root, `leases/${key}.json`, Buffer.from(JSON.stringify(lease) + '\\n'));\n    return Object.freeze(lease);\n  });\n}\nexport async function releaseRuntimeLease(\n  root: string,\n  id: string,\n  owner: string,\n): Promise<boolean> {\n  return withRuntimeLeaseLock(root, () => {\n    const key = runtimeLeaseKey(id),\n      file = cachePath(root, `leases/${key}.json`);\n    if (!fs.existsSync(file)) return false;\n    if (readRuntimeLease(root, key).owner !== owner)\n      runtimeError(\n        'RUNTIME_LEASE_OWNER',\n        'Only the same explicit lease owner can release a runtime pin.',\n      );\n    fs.unlinkSync(file);\n    return true;\n  });\n}\nexport function leasedRuntimeKeys(root: string): Set<string> {\n  const directory = cachePath(root, 'leases');\n  if (!fs.existsSync(directory)) return new Set();\n  const names = fs.readdirSync(directory);\n  if (names.length > 10_000)\n    runtimeError('RUNTIME_LEASE_LIMIT', 'Lease inventory exceeds its bound.');\n  const keys = new Set<string>();\n  for (const name of names) {\n    if (!/^[0-9a-f]{64}\\.json$/u.test(name))\n      runtimeError('RUNTIME_LEASE_INVALID', 'Unknown lease record prevents cache pruning.');\n    for (const key of readRuntimeLease(root, name.slice(0, -5)).components) keys.add(key);\n  }\n  return keys;\n}\n"]}

package/dist/src/lib/runtime/managed-command.d.ts

@@ -0,0 +1,6 @@
+import type { FetchLike } from '../http.js';
+export declare function runManagedRuntimeCommand(operation: string, args: string[], fetchImpl?: FetchLike): Promise<{
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}>;