@timurproko/a1 0.1.0

package/dist/src/foundation/protocol/messages.js

@@ -0,0 +1,99 @@
+import { createHash } from "node:crypto";
+export const CONTROL_ENVELOPE = "addone-control-envelope";
+export const CONTROL_ENVELOPE_REVISION = 1;
+export const REQUIRED_CONTROL_FEATURES = [
+    "handshake.features.v1",
+    "snapshot.revision.v1",
+    "commands.request-identity.v1",
+    "generation.lifecycle.v1",
+    "terminal.foreground-lease.v1",
+];
+export const OPTIONAL_CONTROL_FEATURES = [
+    "messages.unknown-additive-ignore.v1",
+    "snapshot.resynchronize.v1",
+];
+export const GENERATED_CONTRACT_DIGEST = createHash("sha256").update(JSON.stringify({
+    envelope: CONTROL_ENVELOPE,
+    revision: CONTROL_ENVELOPE_REVISION,
+    required: [...REQUIRED_CONTROL_FEATURES].sort(),
+    optional: [...OPTIONAL_CONTROL_FEATURES].sort(),
+})).digest("hex");
+export const MAX_CONTROL_FRAME_BYTES = 4 * 1024 * 1024;
+export function localControlHello(releaseId) {
+    return {
+        envelope: CONTROL_ENVELOPE,
+        envelopeRevision: CONTROL_ENVELOPE_REVISION,
+        requiredFeatures: REQUIRED_CONTROL_FEATURES,
+        optionalFeatures: OPTIONAL_CONTROL_FEATURES,
+        contractDigest: GENERATED_CONTRACT_DIGEST,
+        ...(releaseId ? { releaseId } : {}),
+    };
+}
+export function negotiateControlFeatures(client, server = localControlHello()) {
+    if (client.envelope !== server.envelope || client.envelopeRevision !== server.envelopeRevision) {
+        return {
+            ok: false,
+            negotiatedFeatures: [],
+            missingFromClient: [],
+            missingFromServer: [],
+            diagnostic: `control envelope mismatch: client ${client.envelope}/${client.envelopeRevision}; server ${server.envelope}/${server.envelopeRevision}`,
+        };
+    }
+    const clientFeatures = new Set([...client.requiredFeatures, ...client.optionalFeatures]);
+    const serverFeatures = new Set([...server.requiredFeatures, ...server.optionalFeatures]);
+    const missingFromClient = server.requiredFeatures.filter(feature => !clientFeatures.has(feature));
+    const missingFromServer = client.requiredFeatures.filter(feature => !serverFeatures.has(feature));
+    const negotiatedFeatures = [...clientFeatures].filter(feature => serverFeatures.has(feature)).sort();
+    return {
+        ok: missingFromClient.length === 0 && missingFromServer.length === 0,
+        negotiatedFeatures,
+        missingFromClient,
+        missingFromServer,
+        diagnostic: missingFromClient.length === 0 && missingFromServer.length === 0
+            ? `control features negotiated (${negotiatedFeatures.join(", ")}); contract client=${client.contractDigest} server=${server.contractDigest}`
+            : `required control features unavailable; client missing [${missingFromClient.join(", ")}], server missing [${missingFromServer.join(", ")}]; contract client=${client.contractDigest} server=${server.contractDigest}`,
+    };
+}
+export function encodeFrame(message) {
+    return `${JSON.stringify(message)}\n`;
+}
+export class LineFrameDecoder {
+    #buffer = "";
+    push(chunk) {
+        this.#buffer += typeof chunk === "string" ? chunk : chunk.toString("utf8");
+        if (Buffer.byteLength(this.#buffer, "utf8") > MAX_CONTROL_FRAME_BYTES) {
+            this.#buffer = "";
+            throw new Error("control frame exceeds maximum size");
+        }
+        const messages = [];
+        let newline = this.#buffer.indexOf("\n");
+        while (newline >= 0) {
+            const line = this.#buffer.slice(0, newline);
+            this.#buffer = this.#buffer.slice(newline + 1);
+            if (line.length > 0)
+                messages.push(JSON.parse(line));
+            newline = this.#buffer.indexOf("\n");
+        }
+        return messages;
+    }
+}
+export function isControlHello(value) {
+    if (!isRecord(value) || value.type !== "client-hello" || typeof value.clientId !== "string")
+        return false;
+    return value.envelope === CONTROL_ENVELOPE
+        && value.envelopeRevision === CONTROL_ENVELOPE_REVISION
+        && isStringArray(value.requiredFeatures)
+        && isStringArray(value.optionalFeatures)
+        && typeof value.contractDigest === "string"
+        && (value.releaseId === undefined || typeof value.releaseId === "string");
+}
+export function isCommandMessage(value) {
+    return isRecord(value) && value.type === "command" && isRecord(value.command) && typeof value.command.type === "string";
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every(item => typeof item === "string" && item.length > 0);
+}
+//# sourceMappingURL=messages.js.map

package/dist/src/foundation/protocol/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../../src/foundation/protocol/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAkC,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AACpD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,uBAAuB;IACvB,sBAAsB;IACtB,8BAA8B;IAC9B,yBAAyB;IACzB,8BAA8B;CACtB,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,qCAAqC;IACrC,2BAA2B;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IAClF,QAAQ,EAAE,gBAAgB;IAC1B,QAAQ,EAAE,yBAAyB;IACnC,QAAQ,EAAE,CAAC,GAAG,yBAAyB,CAAC,CAAC,IAAI,EAAE;IAC/C,QAAQ,EAAE,CAAC,GAAG,yBAAyB,CAAC,CAAC,IAAI,EAAE;CAChD,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAmCvD,MAAM,UAAU,iBAAiB,CAAC,SAAkB;IAClD,OAAO;QACL,QAAQ,EAAE,gBAAgB;QAC1B,gBAAgB,EAAE,yBAAyB;QAC3C,gBAAgB,EAAE,yBAAyB;QAC3C,gBAAgB,EAAE,yBAAyB;QAC3C,cAAc,EAAE,yBAAyB;QACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAoB,EAAE,SAAuB,iBAAiB,EAAE;IACvG,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,kBAAkB,EAAE,EAAE;YACtB,iBAAiB,EAAE,EAAE;YACrB,iBAAiB,EAAE,EAAE;YACrB,UAAU,EAAE,qCAAqC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,YAAY,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE;SACpJ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,gBAAgB,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,kBAAkB,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrG,OAAO;QACL,EAAE,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QACpE,kBAAkB;QAClB,iBAAiB;QACjB,iBAAiB;QACjB,UAAU,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAC1E,CAAC,CAAC,gCAAgC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,cAAc,WAAW,MAAM,CAAC,cAAc,EAAE;YAC5I,CAAC,CAAC,0DAA0D,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,cAAc,WAAW,MAAM,CAAC,cAAc,EAAE;KAC1N,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAA0E;IACpG,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,OAAO,gBAAgB;IAC3B,OAAO,GAAG,EAAE,CAAC;IAEb,IAAI,CAAC,KAAsB;QACzB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,uBAAuB,EAAE,CAAC;YACtE,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,OAAO,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1G,OAAO,KAAK,CAAC,QAAQ,KAAK,gBAAgB;WACrC,KAAK,CAAC,gBAAgB,KAAK,yBAAyB;WACpD,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC;WACrC,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC;WACrC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;WACxC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC1H,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/dist/src/foundation/release/bootstrap.d.ts

@@ -0,0 +1,30 @@
+import { type OwnershipProbe } from "./cohort-selection.js";
+import { type SupervisorEndpointMetadata } from "./cohort-state.js";
+import { type LaunchProfileId } from "../lifecycle/index.js";
+import { cleanupProvenIdleOwner } from "./process-cleanup.js";
+import { type MaterializedRelease } from "./release-store.js";
+export interface BootstrapOptions {
+    readonly packageRoot: string;
+    readonly launchIntent?: {
+        readonly kind: "interactive";
+        readonly profile: {
+            readonly id: LaunchProfileId;
+        };
+    };
+    readonly environment?: NodeJS.ProcessEnv;
+    readonly output?: Pick<NodeJS.WriteStream, "write">;
+}
+export declare function runBootstrap(options: BootstrapOptions): Promise<number>;
+export declare function certifyMaterializedRelease(release: MaterializedRelease, dataDir: string): Promise<string>;
+export declare function startSupervisor(release: MaterializedRelease, environment: NodeJS.ProcessEnv): Promise<void>;
+export declare function releaseEnvironment(environment: NodeJS.ProcessEnv, release: MaterializedRelease): NodeJS.ProcessEnv;
+export declare function waitForVerifiedEndpoint(path: string, release: MaterializedRelease, timeoutMs: number): Promise<void>;
+export declare function readEndpointMetadata(path: string): Promise<SupervisorEndpointMetadata | null>;
+export declare function probeOwnership(metadata: SupervisorEndpointMetadata): Promise<OwnershipProbe>;
+export declare function releaseVerifiedIdleOwner(metadata: SupervisorEndpointMetadata, dataDir: string, operations?: {
+    readonly waitForExit?: typeof waitForProcessExit;
+    readonly cleanup?: typeof cleanupProvenIdleOwner;
+}): Promise<boolean>;
+export declare function waitForProcessExit(pid: number, timeoutMs: number): Promise<void>;
+export declare function removeEndpointArtifacts(metadataPath: string, endpoint: string): Promise<void>;
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/src/foundation/release/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/foundation/release/bootstrap.ts"],"names":[],"mappings":"AAKA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAoB,KAAK,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAA6C,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExG,OAAO,EAAE,sBAAsB,EAAkB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAoG,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhK,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAA;SAAE,CAAA;KAAE,CAAC;IAC7G,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACrD;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqF7E;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAU/G;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAajH;AAeD,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAAC,UAAU,CAOlH;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ1H;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAanG;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,0BAA0B,GAAG,OAAO,CAAC,cAAc,CAAC,CAUlG;AAoDD,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,0BAA0B,EACpC,OAAO,EAAE,MAAM,EACf,UAAU,GAAE;IACV,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,sBAAsB,CAAC;CAC7C,GACL,OAAO,CAAC,OAAO,CAAC,CAWlB;AAyBD,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtF;AAED,wBAAsB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnG"}

package/dist/src/foundation/release/bootstrap.js

@@ -0,0 +1,283 @@
+import { spawn } from "node:child_process";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { connect } from "node:net";
+import { platform } from "node:os";
+import { resolve } from "node:path";
+import { selectCohortLaunch } from "./cohort-selection.js";
+import { CohortStateStore } from "./cohort-state.js";
+import { assertLaunchProfileId, resolveAddOnePaths } from "../lifecycle/index.js";
+import { encodeFrame, LineFrameDecoder } from "../protocol/index.js";
+import { cleanupProvenIdleOwner, processIsAlive } from "./process-cleanup.js";
+import { materializeRelease, readMaterializedRelease, resolveReleaseEntryPoint, verifyMaterializedRelease } from "./release-store.js";
+export async function runBootstrap(options) {
+    const environment = { ...(options.environment ?? process.env) };
+    const launchProfileId = options.launchIntent?.profile.id ?? "addone";
+    assertLaunchProfileId(launchProfileId);
+    environment.ADDONE_LAUNCH_PROFILE = launchProfileId;
+    const output = options.output ?? process.stderr;
+    const paths = resolveAddOnePaths(environment);
+    await mkdir(paths.runtimeDir, { recursive: true, mode: 0o700 });
+    const candidate = await materializeRelease(options.packageRoot, paths.dataDir);
+    const stateStore = new CohortStateStore(paths.dataDir);
+    await stateStore.recordCandidate(candidate);
+    let state = await stateStore.read();
+    if (!state.references.active) {
+        const diagnosticsPath = await certifyMaterializedRelease(candidate, paths.dataDir);
+        await stateStore.approve(candidate.releaseId, diagnosticsPath);
+        await stateStore.activate(candidate.releaseId);
+        state = await stateStore.read();
+    }
+    const endpoint = await readEndpointMetadata(paths.endpointMetadataPath);
+    const probe = endpoint ? await probeOwnership(endpoint) : "dead";
+    let decision = selectCohortLaunch(candidate, state, endpoint, probe);
+    if (decision.action === "blocked") {
+        await stateStore.blockPending(decision.reason, endpoint?.ownership.liveGenerationIds ?? []);
+        output.write(`AddOne startup is blocked to preserve uncertain live ownership: ${decision.reason}\n`);
+        return 1;
+    }
+    if (decision.action === "clean-stale-owner" && endpoint) {
+        const diagnostics = await cleanupProvenIdleOwner(endpoint);
+        await writeFile(resolve(paths.dataDir, `cleanup-${Date.now()}.json`), JSON.stringify(diagnostics, null, 2));
+        if (!diagnostics.terminated)
+            throw new Error(`could not safely clean stale AddOne supervisor ${endpoint.pid}`);
+        await removeEndpointArtifacts(paths.endpointMetadataPath, paths.endpoint);
+        decision = selectCohortLaunch(candidate, await stateStore.read(), null, "dead");
+    }
+    else if (endpoint && probe === "dead") {
+        await removeEndpointArtifacts(paths.endpointMetadataPath, paths.endpoint);
+    }
+    if (decision.action === "launch-retained-ui") {
+        const retained = await verifyMaterializedRelease(decision.releaseRoot, undefined, resolve(paths.dataDir, "releases"));
+        if (decision.recordPending && endpoint) {
+            await stateStore.blockPending("candidate activation deferred by live non-resumable generations", endpoint.ownership.nonResumableGenerationIds);
+        }
+        const code = await launchUi(retained, environment);
+        if (decision.recordPending)
+            await activatePendingAfterBlockerExit(candidate, stateStore, paths, environment);
+        return code;
+    }
+    if (decision.action === "replace-idle-cohort" && endpoint) {
+        const diagnosticsPath = await certifyMaterializedRelease(candidate, paths.dataDir);
+        await stateStore.approve(candidate.releaseId, diagnosticsPath);
+        const released = await requestIdleOwnershipRelease(endpoint, candidate.releaseId, 2_000);
+        if (!released) {
+            await stateStore.blockPending("idle supervisor did not verify ownership release", endpoint.ownership.liveGenerationIds);
+            output.write("AddOne could not verify idle cohort ownership release; the retained release remains selected.\n");
+            return 1;
+        }
+        if (!await releaseVerifiedIdleOwner(endpoint, paths.dataDir)) {
+            await stateStore.blockPending("idle supervisor acknowledged release but did not terminate", endpoint.ownership.liveGenerationIds);
+            output.write("AddOne could not complete bounded idle cohort shutdown; the candidate remains pending.\n");
+            return 1;
+        }
+        await removeEndpointArtifacts(paths.endpointMetadataPath, paths.endpoint);
+        await stateStore.activate(candidate.releaseId);
+        decision = { action: "activate-candidate", releaseId: candidate.releaseId, releaseRoot: candidate.releaseRoot, reason: "idle cohort released ownership" };
+    }
+    let selected;
+    if (decision.action === "activate-candidate") {
+        const current = await stateStore.read();
+        if (current.releases[candidate.releaseId]?.approval !== "approved") {
+            const diagnosticsPath = await certifyMaterializedRelease(candidate, paths.dataDir);
+            await stateStore.approve(candidate.releaseId, diagnosticsPath);
+        }
+        if ((await stateStore.read()).references.active !== candidate.releaseId)
+            await stateStore.activate(candidate.releaseId);
+        selected = candidate;
+    }
+    else {
+        selected = await readMaterializedRelease(decision.releaseRoot);
+    }
+    await startSupervisor(selected, environment);
+    await waitForVerifiedEndpoint(paths.endpointMetadataPath, selected, 8_000);
+    return await launchUi(selected, environment);
+}
+export async function certifyMaterializedRelease(release, dataDir) {
+    await verifyMaterializedRelease(release.releaseRoot, release, resolve(dataDir, "releases"));
+    const path = resolve(dataDir, `certification-${release.releaseId}.json`);
+    await writeFile(path, JSON.stringify({
+        releaseId: release.releaseId,
+        contentDigest: release.contentDigest,
+        verifiedAt: new Date().toISOString(),
+        checks: [{ id: "immutable-content", passed: true }],
+    }, null, 2), { mode: 0o600 });
+    return path;
+}
+export async function startSupervisor(release, environment) {
+    const entry = await resolveReleaseEntryPoint(release, "bin/addone-supervisor.js");
+    const child = spawn(process.execPath, [entry], {
+        detached: true,
+        env: releaseEnvironment(environment, release),
+        stdio: "ignore",
+        windowsHide: true,
+    });
+    await new Promise((resolvePromise, rejectPromise) => {
+        child.once("spawn", resolvePromise);
+        child.once("error", rejectPromise);
+    });
+    child.unref();
+}
+async function launchUi(release, environment) {
+    const entry = await resolveReleaseEntryPoint(release, "bin/addone-ui.js");
+    return await new Promise((resolvePromise, rejectPromise) => {
+        const child = spawn(process.execPath, [entry], {
+            env: releaseEnvironment(environment, release),
+            stdio: "inherit",
+            windowsHide: false,
+        });
+        child.once("error", rejectPromise);
+        child.once("close", (code, signal) => resolvePromise(code ?? (signal ? 1 : 0)));
+    });
+}
+export function releaseEnvironment(environment, release) {
+    return {
+        ...environment,
+        ADDONE_RELEASE_ID: release.releaseId,
+        ADDONE_RELEASE_ROOT: release.releaseRoot,
+        ADDONE_RELEASE_DIGEST: release.contentDigest,
+    };
+}
+export async function waitForVerifiedEndpoint(path, release, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const metadata = await readEndpointMetadata(path);
+        if (metadata && metadata.releaseId === release.releaseId && await probeOwnership(metadata) === "live-verified")
+            return;
+        await new Promise(resolvePromise => setTimeout(resolvePromise, 40));
+    }
+    throw new Error(`AddOne supervisor did not publish verified endpoint metadata within ${timeoutMs}ms`);
+}
+export async function readEndpointMetadata(path) {
+    try {
+        const value = JSON.parse(await readFile(path, "utf8"));
+        if (!value || typeof value.supervisorId !== "string" || typeof value.endpoint !== "string" || !Number.isSafeInteger(value.pid)
+            || typeof value.pidStartIdentity !== "string" || typeof value.bootNonce !== "string" || typeof value.releaseId !== "string"
+            || typeof value.releaseRoot !== "string" || typeof value.contentDigest !== "string" || !value.ownership
+            || !Array.isArray(value.ownership.liveGenerationIds) || !Array.isArray(value.ownership.nonResumableGenerationIds)) {
+            return null;
+        }
+        return value;
+    }
+    catch {
+        return null;
+    }
+}
+export async function probeOwnership(metadata) {
+    if (!processIsAlive(metadata.pid))
+        return "dead";
+    const identity = await requestIdentity(metadata.endpoint, 500);
+    if (!identity)
+        return "unresponsive";
+    return identity.supervisorId === metadata.supervisorId
+        && identity.bootNonce === metadata.bootNonce
+        && identity.pidStartIdentity === metadata.pidStartIdentity
+        && identity.releaseId === metadata.releaseId
+        ? "live-verified"
+        : "identity-mismatch";
+}
+async function requestIdentity(endpoint, timeoutMs) {
+    return await new Promise(resolvePromise => {
+        const socket = connect(endpoint);
+        const decoder = new LineFrameDecoder();
+        let settled = false;
+        const finish = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            resolvePromise(value);
+        };
+        socket.once("error", () => finish(null));
+        socket.once("connect", () => socket.write(encodeFrame({ type: "identity-probe" })));
+        socket.on("data", chunk => {
+            try {
+                const message = decoder.push(chunk)[0];
+                if (message?.type === "identity" && typeof message.supervisorId === "string" && typeof message.bootNonce === "string"
+                    && typeof message.pidStartIdentity === "string" && typeof message.releaseId === "string") {
+                    finish({ supervisorId: message.supervisorId, bootNonce: message.bootNonce, pidStartIdentity: message.pidStartIdentity, releaseId: message.releaseId });
+                }
+            }
+            catch {
+                finish(null);
+            }
+        });
+        setTimeout(() => finish(null), timeoutMs).unref();
+    });
+}
+async function activatePendingAfterBlockerExit(candidate, stateStore, paths, environment) {
+    const deadline = Date.now() + 2_000;
+    let endpoint = null;
+    while (Date.now() < deadline) {
+        endpoint = await readEndpointMetadata(paths.endpointMetadataPath);
+        if (!endpoint || endpoint.ownership.liveGenerationIds.length === 0)
+            break;
+        await new Promise(resolvePromise => setTimeout(resolvePromise, 40));
+    }
+    if (!endpoint || endpoint.ownership.liveGenerationIds.length > 0 || await probeOwnership(endpoint) !== "live-verified")
+        return;
+    const diagnosticsPath = await certifyMaterializedRelease(candidate, paths.dataDir);
+    await stateStore.approve(candidate.releaseId, diagnosticsPath);
+    if (!await requestIdleOwnershipRelease(endpoint, candidate.releaseId, 2_000))
+        return;
+    if (!await releaseVerifiedIdleOwner(endpoint, paths.dataDir))
+        return;
+    await removeEndpointArtifacts(paths.endpointMetadataPath, paths.endpoint);
+    await stateStore.activate(candidate.releaseId);
+    await startSupervisor(candidate, environment);
+    await waitForVerifiedEndpoint(paths.endpointMetadataPath, candidate, 8_000);
+}
+export async function releaseVerifiedIdleOwner(metadata, dataDir, operations = {}) {
+    try {
+        await (operations.waitForExit ?? waitForProcessExit)(metadata.pid, 3_000);
+        return true;
+    }
+    catch {
+        // The authenticated idle-release handshake authorizes bounded cleanup of
+        // this exact boot when a native handle outlives graceful shutdown.
+        const diagnostics = await (operations.cleanup ?? cleanupProvenIdleOwner)(metadata);
+        await writeFile(resolve(dataDir, `cleanup-${Date.now()}.json`), JSON.stringify(diagnostics, null, 2));
+        return diagnostics.terminated;
+    }
+}
+async function requestIdleOwnershipRelease(metadata, candidateReleaseId, timeoutMs) {
+    return await new Promise(resolvePromise => {
+        const socket = connect(metadata.endpoint);
+        const decoder = new LineFrameDecoder();
+        let settled = false;
+        const finish = (released) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            resolvePromise(released);
+        };
+        socket.once("error", () => finish(false));
+        socket.once("connect", () => socket.write(encodeFrame({ type: "release-idle-ownership", bootNonce: metadata.bootNonce, candidateReleaseId })));
+        socket.on("data", chunk => {
+            try {
+                const message = decoder.push(chunk)[0];
+                if (message?.type === "release-ownership-result")
+                    finish(message.released === true);
+            }
+            catch {
+                finish(false);
+            }
+        });
+        setTimeout(() => finish(false), timeoutMs).unref();
+    });
+}
+export async function waitForProcessExit(pid, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (!processIsAlive(pid))
+            return;
+        await new Promise(resolvePromise => setTimeout(resolvePromise, 25));
+    }
+    throw new Error(`AddOne supervisor ${pid} did not release process ownership within ${timeoutMs}ms`);
+}
+export async function removeEndpointArtifacts(metadataPath, endpoint) {
+    await rm(metadataPath, { force: true });
+    if (platform() !== "win32")
+        await rm(endpoint, { force: true });
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/src/foundation/release/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../../src/foundation/release/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAuB,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAmC,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAwB,MAAM,uBAAuB,CAAC;AACxG,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,yBAAyB,EAA4B,MAAM,oBAAoB,CAAC;AAShK,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,WAAW,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,QAAQ,CAAC;IACrE,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACvC,WAAW,CAAC,qBAAqB,GAAG,eAAe,CAAC;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,IAAI,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAErE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,mEAAmE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACrG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,mBAAmB,IAAI,QAAQ,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,WAAW,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/G,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1E,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClF,CAAC;SAAM,IAAI,QAAQ,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QACtH,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,EAAE,CAAC;YACvC,MAAM,UAAU,CAAC,YAAY,CAAC,iEAAiE,EAAE,QAAQ,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,aAAa;YAAE,MAAM,+BAA+B,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,QAAQ,EAAE,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,UAAU,CAAC,YAAY,CAAC,kDAAkD,EAAE,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YACxH,MAAM,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;YAChH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,UAAU,CAAC,YAAY,CAAC,4DAA4D,EAAE,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAClI,MAAM,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;YACzG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,QAAQ,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC5J,CAAC;IAED,IAAI,QAA6B,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnE,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACnF,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS;YAAE,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACxH,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3E,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA4B,EAAE,OAAe;IAC5F,MAAM,yBAAyB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,iBAAiB,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;IACzE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KACpD,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA4B,EAAE,WAA8B;IAChG,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;QAC7C,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC;QAC7C,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAA4B,EAAE,WAA8B;IAClF,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC1E,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;YAC7C,GAAG,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC;YAC7C,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAA8B,EAAE,OAA4B;IAC7F,OAAO;QACL,GAAG,WAAW;QACd,iBAAiB,EAAE,OAAO,CAAC,SAAS;QACpC,mBAAmB,EAAE,OAAO,CAAC,WAAW;QACxC,qBAAqB,EAAE,OAAO,CAAC,aAAa;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY,EAAE,OAA4B,EAAE,SAAiB;IACzG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,eAAe;YAAE,OAAO;QACvH,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uEAAuE,SAAS,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAA+B,CAAC;QACrF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;eACzH,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;eACxH,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS;eACpG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,yBAAyB,CAAC,EAAE,CAAC;YACpH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAoC;IACvE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ;QAAE,OAAO,cAAc,CAAC;IACrC,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;WACjD,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WACzC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;WACvD,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAC5C,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,mBAAmB,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB;IAChE,OAAO,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAsG,EAAE,EAAE;YACxH,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,cAAc,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAwC,CAAC;gBAC9E,IAAI,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;uBAChH,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC3F,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBACzJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,SAA8B,EAC9B,UAA4B,EAC5B,KAA4C,EAC5C,WAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACpC,IAAI,QAAQ,GAAsC,IAAI,CAAC;IACvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC1E,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,cAAc,CAAC,QAAQ,CAAC,KAAK,eAAe;QAAE,OAAO;IAC/H,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnF,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO;IACrF,IAAI,CAAC,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO;IACrE,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9C,MAAM,uBAAuB,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAoC,EACpC,OAAe,EACf,aAGI,EAAE;IAEN,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,sBAAsB,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtG,OAAO,WAAW,CAAC,UAAU,CAAC;IAChC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,QAAoC,EAAE,kBAA0B,EAAE,SAAiB;IAC5H,OAAO,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,QAAiB,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/I,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAwC,CAAC;gBAC9E,IAAI,OAAO,EAAE,IAAI,KAAK,0BAA0B;oBAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,SAAiB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO;QACjC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,6CAA6C,SAAS,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,YAAoB,EAAE,QAAgB;IAClF,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/foundation/release/cohort-selection.d.ts

@@ -0,0 +1,40 @@
+import type { CohortState, SupervisorEndpointMetadata } from "./cohort-state.js";
+import type { MaterializedRelease } from "./release-store.js";
+export type OwnershipProbe = "live-verified" | "dead" | "unresponsive" | "identity-mismatch";
+export type CohortLaunchDecision = {
+    readonly action: "launch-retained-ui";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+    readonly recordPending: boolean;
+} | {
+    readonly action: "activate-candidate";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+} | {
+    readonly action: "replace-idle-cohort";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+    readonly pid: number;
+} | {
+    readonly action: "start-active";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+} | {
+    readonly action: "clean-stale-owner";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+    readonly pid: number;
+} | {
+    readonly action: "blocked";
+    readonly releaseId: string;
+    readonly releaseRoot: string;
+    readonly reason: string;
+    readonly pid: number | null;
+};
+export declare function selectCohortLaunch(candidate: MaterializedRelease, state: CohortState, endpoint: SupervisorEndpointMetadata | null, probe: OwnershipProbe): CohortLaunchDecision;
+//# sourceMappingURL=cohort-selection.d.ts.map

package/dist/src/foundation/release/cohort-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cohort-selection.d.ts","sourceRoot":"","sources":["../../../../src/foundation/release/cohort-selection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,MAAM,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAE7F,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAC7J;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5H;IAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnJ;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtH;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjJ;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEnJ,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,0BAA0B,GAAG,IAAI,EAC3C,KAAK,EAAE,cAAc,GACpB,oBAAoB,CA6EtB"}

package/dist/src/foundation/release/cohort-selection.js

@@ -0,0 +1,76 @@
+export function selectCohortLaunch(candidate, state, endpoint, probe) {
+    if (endpoint && probe === "live-verified") {
+        const retained = state.releases[endpoint.releaseId];
+        if (!retained || retained.releaseRoot !== endpoint.releaseRoot || retained.contentDigest !== endpoint.contentDigest) {
+            return {
+                action: "blocked",
+                releaseId: endpoint.releaseId,
+                releaseRoot: endpoint.releaseRoot,
+                reason: "live supervisor identity does not match a retained verified release record",
+                pid: endpoint.pid,
+            };
+        }
+        if (endpoint.releaseId !== candidate.releaseId && endpoint.ownership.liveGenerationIds.length === 0) {
+            return {
+                action: "replace-idle-cohort",
+                releaseId: candidate.releaseId,
+                releaseRoot: candidate.releaseRoot,
+                reason: "older cohort is idle and can release ownership for verified candidate activation",
+                pid: endpoint.pid,
+            };
+        }
+        return {
+            action: "launch-retained-ui",
+            releaseId: endpoint.releaseId,
+            releaseRoot: endpoint.releaseRoot,
+            reason: endpoint.releaseId === candidate.releaseId
+                ? "live supervisor already owns the installed release cohort"
+                : "live supervisor owns a non-resumable generation; candidate remains pending",
+            recordPending: endpoint.releaseId !== candidate.releaseId,
+        };
+    }
+    if (endpoint && probe === "unresponsive") {
+        if (endpoint.ownership.liveGenerationIds.length > 0 || endpoint.ownership.nonResumableGenerationIds.length > 0) {
+            return {
+                action: "blocked",
+                releaseId: endpoint.releaseId,
+                releaseRoot: endpoint.releaseRoot,
+                reason: "ownership of live generations is uncertain; preserving the unresponsive supervisor",
+                pid: endpoint.pid,
+            };
+        }
+        return {
+            action: "clean-stale-owner",
+            releaseId: candidate.releaseId,
+            releaseRoot: candidate.releaseRoot,
+            reason: "unresponsive owner has no recorded live generation and is safe for bounded cleanup",
+            pid: endpoint.pid,
+        };
+    }
+    if (endpoint && probe === "identity-mismatch") {
+        return {
+            action: "blocked",
+            releaseId: endpoint.releaseId,
+            releaseRoot: endpoint.releaseRoot,
+            reason: "endpoint handshake, boot nonce, or process start identity did not match durable ownership metadata",
+            pid: endpoint.pid,
+        };
+    }
+    const active = state.references.active ? state.releases[state.references.active] : undefined;
+    const approvedCandidate = state.releases[candidate.releaseId]?.approval === "approved";
+    if (approvedCandidate || !active) {
+        return {
+            action: "activate-candidate",
+            releaseId: candidate.releaseId,
+            releaseRoot: candidate.releaseRoot,
+            reason: approvedCandidate ? "approved candidate can become the active cohort" : "initial verified release can be certified and activated",
+        };
+    }
+    return {
+        action: "start-active",
+        releaseId: active.releaseId,
+        releaseRoot: active.releaseRoot,
+        reason: "candidate is not approved; retaining the active release",
+    };
+}
+//# sourceMappingURL=cohort-selection.js.map

package/dist/src/foundation/release/cohort-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cohort-selection.js","sourceRoot":"","sources":["../../../../src/foundation/release/cohort-selection.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,kBAAkB,CAChC,SAA8B,EAC9B,KAAkB,EAClB,QAA2C,EAC3C,KAAqB;IAErB,IAAI,QAAQ,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;YACpH,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM,EAAE,4EAA4E;gBACpF,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpG,OAAO;gBACL,MAAM,EAAE,qBAAqB;gBAC7B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,MAAM,EAAE,kFAAkF;gBAC1F,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;gBAChD,CAAC,CAAC,2DAA2D;gBAC7D,CAAC,CAAC,4EAA4E;YAChF,aAAa,EAAE,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/G,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM,EAAE,oFAAoF;gBAC5F,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,oFAAoF;YAC5F,GAAG,EAAE,QAAQ,CAAC,GAAG;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,IAAI,KAAK,KAAK,mBAAmB,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,oGAAoG;YAC5G,GAAG,EAAE,QAAQ,CAAC,GAAG;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,KAAK,UAAU,CAAC;IACvF,IAAI,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,yDAAyD;SAC1I,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,yDAAyD;KAClE,CAAC;AACJ,CAAC"}