@with-logic/elwood 0.2.1 → 0.2.2

package/dist/runtime/probe/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/runtime/probe/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA2CjE;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC;IACjF,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,gEAAgE;AAChE,MAAM,WAAW;IACE,OAAO,GAAG,CAAC,IAAI,YAAY,EAAE,EAAE,IAAI,YAAY,EAAE,CAAU,CAAC;IAE7E,IAAI,CAAC,IAAuB;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,MAAqB;QAC5C,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAiB,CAAC;YACnD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,IAAI,MAAM,CAAC,UAAU;oBAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YAC7C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,CAAC,4CAA4C;IAC3D,CAAC;IAED,IAAI;QACF,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO;QACL,qFAAqF;QACrF,qFAAqF;QACrF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,gBAAgB;IACpB,IAAI,CAAC,IAAuB;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAiB;QACrB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACL,oBAAoB;IACtB,CAAC;CACF"}

package/dist/runtime/{probe-cleanup.d.ts → probe/cleanup.d.ts}

@@ -4,7 +4,7 @@
  * a reissued group id is never signaled, and a surviving updater group retains exclusion.
  */
 import type { ChildProcess } from "node:child_process";
-import { type ReapErrorCode } from "../core/warnings/reasons.ts";
+import { type ReapErrorCode } from "../../core/warnings/reasons.ts";
 /**
  * Unconfirmed cleanup names both the reason and the group still outstanding; confirmed
  * cleanup names neither. Both fields are optional because `CommandResult` intersects this
@@ -31,4 +31,4 @@ export declare function processGroupGone(processGroupId: number): boolean;
  */
 export declare function waitForProbeGroups(processGroupIds: readonly number[]): Promise<readonly number[]>;
 export declare function abortProbe(child: ChildProcess): Promise<ProbeCleanup>;
-//# sourceMappingURL=probe-cleanup.d.ts.map
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/runtime/probe/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/cleanup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,gCAAgC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,GAAG,WAAW,CAAC;IACxD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC,CAAC;AASF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAW5B;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAqC3E"}

package/dist/runtime/{probe-cleanup.js → probe/cleanup.js}

@@ -1,6 +1,6 @@
 import { setTimeout as delay } from "node:timers/promises";
-import { errnoCode } from "../core/errors.js";
-import { boundedErrorToken, isReapErrorCode, } from "../core/warnings/reasons.js";
+import { errnoCode } from "../../core/errors.js";
+import { boundedErrorToken, isReapErrorCode, } from "../../core/warnings/reasons.js";
 const cleanupWindowMs = 1_000;
 const leaderFallbackAfterMs = 500;
 const cleanupRetryMs = 25;
@@ -136,4 +136,4 @@ function reapRetained() {
         retryTimer = undefined;
     }
 }
-//# sourceMappingURL=probe-cleanup.js.map
+//# sourceMappingURL=cleanup.js.map

package/dist/runtime/probe/cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.js","sourceRoot":"","sources":["../../../src/runtime/probe/cleanup.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACL,iBAAiB,EACjB,eAAe,GAEhB,MAAM,gCAAgC,CAAC;AAaxC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;AACxC,IAAI,UAAsD,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,eAAkC;IAElC,sFAAsF;IACtF,oFAAoF;IACpF,uEAAuE;IACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IACrD,IAAI,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAmB;IAClD,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,cAAc,GAAG,KAAK,CAAC,GAAI,CAAC;IAClC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACvB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IACxB,qFAAqF;IACrF,mFAAmF;IACnF,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAC9C,wFAAwF;QACxF,oFAAoF;QACpF,oFAAoF;QACpF,oFAAoF;QACpF,8DAA8D;QAC9D,IAAI,SAAS,IAAI,eAAe,EAAE,CAAC;YACjC,IAAI,gBAAgB,CAAC,cAAc,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChD,MAAM;QACR,CAAC;QACD,oEAAoE;QACpE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;YAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,0FAA0F;IAC1F,sFAAsF;IACtF,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,KAAK,WAAW,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1D,UAAU,CAAC,KAAK,EAAE,CAAC;IACnB,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,SAAS,IAAI,WAAW;QACjD,qBAAqB,EAAE,cAAc;KACtC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,WAAW;IACf,SAAS,CAAmC;IACpC,kBAAkB,GAAG,KAAK,CAAC;IAC3B,YAAY,GAAG,KAAK,CAAC;IACrB,KAAK,CAA2B;IACvB,cAAc,CAAS;IACxC,YAAY,KAAmB,EAAE,cAAsB;QACrD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,gBAAgB,GAAG,IAAI;QAC1B,IAAI,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,uFAAuF;QACvF,uFAAuF;QACvF,4EAA4E;QAC5E,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;YACxB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,EAChE,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3F,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC9C,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YAC3D,iFAAiF;YACjF,8EAA8E;YAC9E,6EAA6E;YAC7E,IAAI,gBAAgB;gBAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,SAAS,YAAY;IACnB,KAAK,MAAM,MAAM,IAAI,QAAQ;QAAE,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,UAAU,GAAG,SAAS,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/runtime/probe/directory-key.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Internal directory-keyed probe caching, with identity compared at read boundaries.
+ * Supports the probe implementation of PRD §9.2; directory keys are an implementation detail.
+ */
+import { type ProbeCache } from "../probe-cache.ts";
+/** A probe answer, and whether its before/after directory identities matched. */
+export type DirectoryRead<T> = {
+    readonly value: T;
+    readonly sameDirectory: boolean;
+};
+declare const directoryCacheBrand: unique symbol;
+/** Only the factory can supply the cache's required boundary-identity admission rule. */
+export type DirectoryProbeCache<T> = ProbeCache<DirectoryRead<T>> & {
+    readonly [directoryCacheBrand]: true;
+};
+/** Keeps matching-boundary results only; a caller may further restrict successful values. */
+export declare function createDirectoryProbeCache<T>(maxSettledSuccesses: number, succeeded?: (value: T) => boolean): DirectoryProbeCache<T>;
+/**
+ * `cwd`'s answer from `cache`, else `read()`'s, keyed by path and filesystem identity.
+ * The factory refuses retention when identities observed before and after the read differ.
+ * The checks compare two snapshots; a replacement restored before the final snapshot
+ * can escape detection.
+ */
+export declare function readInDirectory<T>(cache: DirectoryProbeCache<T>, cwd: string, read: () => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=directory-key.d.ts.map

package/dist/runtime/probe/directory-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-key.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/directory-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAgBtE,iFAAiF;AACjF,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;IAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtF,QAAA,MAAM,mBAAmB,eAAgC,CAAC;AAE1D,yFAAyF;AACzF,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG;IAClE,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAC;CACtC,CAAC;AAEF,6FAA6F;AAC7F,wBAAgB,yBAAyB,CAAC,CAAC,EACzC,mBAAmB,EAAE,MAAM,EAC3B,SAAS,GAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAoB,GAC5C,mBAAmB,CAAC,CAAC,CAAC,CAQxB;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/runtime/probe/directory-key.js

@@ -0,0 +1,46 @@
+/**
+ * Internal directory-keyed probe caching, with identity compared at read boundaries.
+ * Supports the probe implementation of PRD §9.2; directory keys are an implementation detail.
+ */
+import { stat } from "node:fs/promises";
+import { createProbeCache } from "../probe-cache.js";
+/**
+ * `cwd` and which directory it names (device and inode), so a directory deleted and made again
+ * at the same path is probed again rather than answered from the old one's result. None for a
+ * path that can't be checked.
+ */
+async function directoryKey(cwd) {
+    try {
+        const { dev, ino } = await stat(cwd, { bigint: true });
+        return `${dev}:${ino}:${cwd}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+const directoryCacheBrand = Symbol("DirectoryProbeCache");
+/** Keeps matching-boundary results only; a caller may further restrict successful values. */
+export function createDirectoryProbeCache(maxSettledSuccesses, succeeded = () => true) {
+    return {
+        ...createProbeCache(maxSettledSuccesses, (read) => read.sameDirectory && succeeded(read.value)),
+        [directoryCacheBrand]: true,
+    };
+}
+/**
+ * `cwd`'s answer from `cache`, else `read()`'s, keyed by path and filesystem identity.
+ * The factory refuses retention when identities observed before and after the read differ.
+ * The checks compare two snapshots; a replacement restored before the final snapshot
+ * can escape detection.
+ */
+export async function readInDirectory(cache, cwd, read) {
+    const key = await directoryKey(cwd);
+    // A directory that can't be identified is read, but its answer is neither shared nor kept.
+    if (key === undefined)
+        return read();
+    const { value } = await cache.get(key, async () => {
+        const value = await read();
+        return { value, sameDirectory: (await directoryKey(cwd)) === key };
+    });
+    return value;
+}
+//# sourceMappingURL=directory-key.js.map

package/dist/runtime/probe/directory-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-key.js","sourceRoot":"","sources":["../../../src/runtime/probe/directory-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AAEtE;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAKD,MAAM,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAO1D,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CACvC,mBAA2B,EAC3B,YAAmC,GAAG,EAAE,CAAC,IAAI;IAE7C,OAAO;QACL,GAAG,gBAAgB,CACjB,mBAAmB,EACnB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CACtD;QACD,CAAC,mBAAmB,CAAC,EAAE,IAAI;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA6B,EAC7B,GAAW,EACX,IAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,2FAA2F;IAC3F,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/runtime/probe/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Bounded one-shot subprocess probe used by the command-runner seam.
+ * Implements PRD §9.2 bounded probe runtime/output (C-PERF-01, C-PERF-03, C-PERF-05,
+ * C-PERF-07): a misbehaving CLI on PATH must not hang or flood memory during a `--version`,
+ * `update`, or `--help` probe, a slow login-shell profile is bounded separately from the CLI
+ * it launches, and only a few probes run at once. A probe the e2e home guard stops (PRD §12,
+ * C-E2E-24) is a login-shell failure carrying only the guard's fixed reason.
+ */
+import type { CommandOptions, CommandResult } from "../seams.ts";
+/** The probe command's own default bound, from the shell's start line (C-PERF-03). */
+export declare const probeCommandTimeoutMs = 15000;
+/**
+ * The login shell's default bound, from spawn to its start line (C-PERF-05). Loading the
+ * user's interactive profile took 7-19 s at 16 concurrent probes on a loaded host.
+ */
+export declare const probeLaunchTimeoutMs = 60000;
+/** Overrides each phase's bound. A direct test command never writes the start line, so it hits `launchMs`. */
+export declare function setProbeTimeoutsForTests(bounds: {
+    readonly commandMs: number;
+    readonly launchMs: number;
+}): void;
+export declare function resetProbeTimeoutsForTests(): void;
+/** Runs one probe once a probe slot is free; its bounds start when it spawns (C-PERF-07). */
+export declare function runProbe(command: string, args: readonly string[], options?: CommandOptions): Promise<CommandResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/probe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgBjE,sFAAsF;AACtF,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAC5C;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAI3C,8GAA8G;AAC9G,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GAAG,IAAI,CAGP;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD;AAED,6FAA6F;AAC7F,wBAAgB,QAAQ,CACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAExB"}

package/dist/runtime/probe/index.js

@@ -0,0 +1,153 @@
+/**
+ * Bounded one-shot subprocess probe used by the command-runner seam.
+ * Implements PRD §9.2 bounded probe runtime/output (C-PERF-01, C-PERF-03, C-PERF-05,
+ * C-PERF-07): a misbehaving CLI on PATH must not hang or flood memory during a `--version`,
+ * `update`, or `--help` probe, a slow login-shell profile is bounded separately from the CLI
+ * it launches, and only a few probes run at once. A probe the e2e home guard stops (PRD §12,
+ * C-E2E-24) is a login-shell failure carrying only the guard's fixed reason.
+ */
+import { spawn } from "node:child_process";
+import { exitStatus } from "../exit-status.js";
+import { homeGuardStopMarker, homeGuardStopped, watchForStopMarker } from "../home-guard/index.js";
+import { CappedBuffer } from "./capped-buffer.js";
+import { abortProbe } from "./cleanup.js";
+import { ProbeCommandLookup } from "./lookup.js";
+import { commandTimedOut, guardStopped, launchTimedOut, mapError, overflow, shellExited, } from "./results.js";
+import { withProbeSlot } from "./slots.js";
+import { announcesStart, ProbeStart, probeControlFd } from "./start.js";
+/** The probe command's own default bound, from the shell's start line (C-PERF-03). */
+export const probeCommandTimeoutMs = 15_000;
+/**
+ * The login shell's default bound, from spawn to its start line (C-PERF-05). Loading the
+ * user's interactive profile took 7-19 s at 16 concurrent probes on a loaded host.
+ */
+export const probeLaunchTimeoutMs = 60_000;
+let commandTimeoutMs = probeCommandTimeoutMs;
+let launchTimeoutMs = probeLaunchTimeoutMs;
+/** Overrides each phase's bound. A direct test command never writes the start line, so it hits `launchMs`. */
+export function setProbeTimeoutsForTests(bounds) {
+    commandTimeoutMs = bounds.commandMs;
+    launchTimeoutMs = bounds.launchMs;
+}
+export function resetProbeTimeoutsForTests() {
+    commandTimeoutMs = probeCommandTimeoutMs;
+    launchTimeoutMs = probeLaunchTimeoutMs;
+}
+/** Runs one probe once a probe slot is free; its bounds start when it spawns (C-PERF-07). */
+export function runProbe(command, args, options = {}) {
+    return withProbeSlot(() => spawnProbe(command, args, options));
+}
+function spawnProbe(command, args, options) {
+    return new Promise((resolve) => {
+        // Probe shells are interactive so they load the same user PATH as the PTY launch. Give
+        // them a fresh session: an interactive shell otherwise enables job control on Elwood's
+        // controlling terminal and can leave its short-lived command's process group in the
+        // foreground, causing headed cleanup to stop on SIGTTOU before restoring terminal modes.
+        // A fourth pipe carries only the probe shell's start line, unless the shell closed it.
+        const child = spawn(command, [...args], {
+            cwd: options.cwd,
+            detached: true,
+            stdio: ["pipe", "pipe", "pipe", "pipe"],
+        });
+        const out = new CappedBuffer();
+        const err = new CappedBuffer();
+        // Node exposes the extra `pipe` in `stdio` as a Readable.
+        const control = child.stdio[probeControlFd];
+        let settled = false;
+        // Kill only when WE abort the probe (timeout/overflow); a normal exit or
+        // spawn failure needs no signal (C-PERF-03).
+        const settle = (result, kill = false) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            control.off("data", onControl); // a settled probe arms no command bound
+            // The result already owns the decoded text. An unresolved probe's reaper retains the
+            // child and its listeners, and through them these captures, so the chunks are dropped
+            // here rather than left for the reaper to outlive. The listeners themselves stay: a
+            // late `close` still has to find `settled` already true, which is the guard below.
+            out.release();
+            err.release();
+            if (!kill) {
+                resolve(result);
+                return;
+            }
+            void abortProbe(child).then((cleanup) => resolve({
+                ...result,
+                error: { ...result.error, ...cleanup },
+            }));
+        };
+        const captured = () => [
+            lookup.stripFromStdout(start.stripFromStdout(out.text())),
+            err.text(),
+        ];
+        // Each phase's bound aborts the probe with its own typed timeout, for its length, when it
+        // expires.
+        const boundBy = (ms, timedOut) => {
+            const bound = setTimeout(() => settle(timedOut(ms, ...captured()), true), ms);
+            bound.unref?.();
+            return bound;
+        };
+        const onData = (buffer) => (chunk) => {
+            buffer.append(chunk);
+            if (out.overflowed || err.overflowed)
+                settle(overflow(...captured()), true);
+        };
+        const start = new ProbeStart();
+        const lookup = new ProbeCommandLookup();
+        const expectsStartLine = announcesStart(args);
+        // A shell that closed the control descriptor writes the start line on stdout (start.ts).
+        // Watched before capture, so a chunk that both starts the command and overflows the cap
+        // has its bound cleared by the overflow's settle rather than armed after it.
+        child.stdout.on("data", (chunk) => {
+            lookup.feed("stdout", chunk);
+            onStart("stdout", chunk);
+        });
+        child.stdout.on("data", onData(out));
+        child.stderr.on("data", onData(err));
+        // The start line ends the login shell's launch phase: the command's own bound begins
+        // there, so the user's profile load is never charged to the CLI (C-PERF-05).
+        function onStart(channel, chunk) {
+            if (!start.feed(channel, chunk))
+                return;
+            clearTimeout(timer);
+            timer = boundBy(commandTimeoutMs, commandTimedOut);
+        }
+        // After the start line, the control descriptor carries only the e2e home guard's stop
+        // line, which no profile's redirection of stdout can hide (PRD §12).
+        const guardStop = watchForStopMarker();
+        const onControl = (chunk) => {
+            lookup.feed("control", chunk);
+            guardStop.feed(chunk);
+            onStart("control", chunk);
+        };
+        control.on("data", onControl);
+        // Spawn failure (e.g. ENOENT) fires `error` and not `close`. Node's spawn
+        // `error` always carries a `code`, which preflight maps to `*_not_found`.
+        child.on("error", (e) => {
+            const [stdout, stderr] = captured();
+            settle({ status: null, stdout, stderr, error: mapError(e) });
+        });
+        child.on("close", (code, signal) => {
+            const [stdout, stderr] = captured();
+            // A shell that exits without announcing its command never ran it (an rc file that
+            // `exec`s another program, say): its status says nothing about the CLI (C-PERF-05).
+            if (expectsStartLine && !start.started)
+                settle(shellExited(code, stdout, stderr));
+            // The e2e home guard runs after the start line but stops the shell before the command.
+            else if (expectsStartLine &&
+                homeGuardStopped(code, () => hasHomeGuardStopMarker(stdout, guardStop)))
+                settle(guardStopped(stdout, stderr));
+            // A signal death reads as a shell reports it, 128+n.
+            else
+                settle({ status: exitStatus(code, signal), stdout, stderr, ...lookup.result(code) });
+        });
+        // The launch phase runs from spawn until the shell's start line (C-PERF-05).
+        let timer = boundBy(launchTimeoutMs, launchTimedOut);
+    });
+}
+/** Whether the guard's stop line reached the control descriptor or, from a shell that closed it, stdout. */
+function hasHomeGuardStopMarker(stdout, stopWatcher) {
+    return stopWatcher.seen || stdout.includes(homeGuardStopMarker);
+}
+//# sourceMappingURL=index.js.map

package/dist/runtime/probe/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/probe/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAGnG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,UAAU,EAA0B,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhG,sFAAsF;AACtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,IAAI,gBAAgB,GAAG,qBAAqB,CAAC;AAC7C,IAAI,eAAe,GAAG,oBAAoB,CAAC;AAE3C,8GAA8G;AAC9G,MAAM,UAAU,wBAAwB,CAAC,MAGxC;IACC,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,gBAAgB,GAAG,qBAAqB,CAAC;IACzC,eAAe,GAAG,oBAAoB,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,QAAQ,CACtB,OAAe,EACf,IAAuB,EACvB,UAA0B,EAAE;IAE5B,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CACjB,OAAe,EACf,IAAuB,EACvB,OAAuB;IAEvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,uFAAuF;QACvF,uFAAuF;QACvF,oFAAoF;QACpF,yFAAyF;QACzF,uFAAuF;QACvF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YACtC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,0DAA0D;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAa,CAAC;QACxD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,IAAI,GAAG,KAAK,EAAQ,EAAE;YAC3D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,wCAAwC;YACxE,qFAAqF;YACrF,sFAAsF;YACtF,oFAAoF;YACpF,mFAAmF;YACnF,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,OAAO,CAAC;gBACN,GAAG,MAAM;gBACT,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAM,EAAE,GAAG,OAAO,EAAE;aACxC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,GAAqB,EAAE,CAAC;YACvC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACzD,GAAG,CAAC,IAAI,EAAE;SACX,CAAC;QACF,0FAA0F;QAC1F,WAAW;QACX,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,QAAgC,EAAE,EAAE;YAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9E,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;YACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU;gBAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9C,yFAAyF;QACzF,wFAAwF;QACxF,6EAA6E;QAC7E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,qFAAqF;QACrF,6EAA6E;QAC7E,SAAS,OAAO,CAAC,OAA0B,EAAE,KAAa;YACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBAAE,OAAO;YACxC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,GAAG,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACrD,CAAC;QACD,sFAAsF;QACtF,qEAAqE;QACrE,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAQ,EAAE;YACxC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9B,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9B,0EAA0E;QAC1E,0EAA0E;QAC1E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAwB,EAAE,EAAE;YAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;YACpC,kFAAkF;YAClF,oFAAoF;YACpF,IAAI,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAClF,uFAAuF;iBAClF,IACH,gBAAgB;gBAChB,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAEvE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACvC,qDAAqD;;gBAChD,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,6EAA6E;QAC7E,IAAI,KAAK,GAAG,OAAO,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4GAA4G;AAC5G,SAAS,sBAAsB,CAAC,MAAc,EAAE,WAAgC;IAC9E,OAAO,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAClE,CAAC"}

package/dist/runtime/probe/lookup.d.ts

@@ -0,0 +1,12 @@
+import { type ProbeStartChannel } from "./start.ts";
+/** Called after user not-found handlers are removed and before the private descriptor closes. */
+export declare function commandLookupScript(command: string): string;
+export declare class ProbeCommandLookup {
+    private readonly watchers;
+    feed(channel: ProbeStartChannel, chunk: Buffer): void;
+    stripFromStdout(captured: string): string;
+    result(status: number | null): {
+        readonly commandLookupFailed?: true;
+    };
+}
+//# sourceMappingURL=lookup.d.ts.map

package/dist/runtime/probe/lookup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/lookup.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,iBAAiB,EAAkB,MAAM,YAAY,CAAC;AAKpE,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAGvB;IAEF,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAIzC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG;QAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,IAAI,CAAA;KAAE;CAKvE"}

package/dist/runtime/probe/lookup.js

@@ -0,0 +1,29 @@
+/** Explicit missing-command proof on the existing private probe channels (PRD §9.2, C-PERF-05). */
+import { randomBytes } from "node:crypto";
+import { shellQuote } from "../shell-quote.js";
+import { StreamMarkerWatcher } from "../stream-marker.js";
+import { probeControlFd } from "./start.js";
+const lookupLine = `elwood-probe-lookup-failed-${randomBytes(8).toString("hex")}`;
+const lookupText = `${lookupLine}\n`;
+/** Called after user not-found handlers are removed and before the private descriptor closes. */
+export function commandLookupScript(command) {
+    return `if ! command -v ${shellQuote(command)} >/dev/null 2>&1; then { echo ${lookupLine} >&${probeControlFd}; } 2>/dev/null || echo ${lookupLine}; exit 127; fi; `;
+}
+export class ProbeCommandLookup {
+    watchers = {
+        control: new StreamMarkerWatcher(Buffer.from(lookupText)),
+        stdout: new StreamMarkerWatcher(Buffer.from(lookupText)),
+    };
+    feed(channel, chunk) {
+        this.watchers[channel].feed(chunk);
+    }
+    stripFromStdout(captured) {
+        return this.watchers.stdout.seen ? captured.replace(lookupText, "") : captured;
+    }
+    result(status) {
+        return status === 127 && Object.values(this.watchers).some((watcher) => watcher.seen)
+            ? { commandLookupFailed: true }
+            : {};
+    }
+}
+//# sourceMappingURL=lookup.js.map

package/dist/runtime/probe/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../../src/runtime/probe/lookup.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAA0B,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,UAAU,GAAG,8BAA8B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClF,MAAM,UAAU,GAAG,GAAG,UAAU,IAAI,CAAC;AAErC,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,mBAAmB,UAAU,CAAC,OAAO,CAAC,iCAAiC,UAAU,MAAM,cAAc,2BAA2B,UAAU,kBAAkB,CAAC;AACtK,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,QAAQ,GAA6D;QACpF,OAAO,EAAE,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,EAAE,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;KACzD,CAAC;IAEF,IAAI,CAAC,OAA0B,EAAE,KAAa;QAC5C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,eAAe,CAAC,QAAgB;QAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,CAAC;IAED,MAAM,CAAC,MAAqB;QAC1B,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YACnF,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;CACF"}

package/dist/runtime/probe/named-pipes.d.ts

@@ -0,0 +1,35 @@
+/**
+ * A probe script's output capture: two named pipes in a directory made for that probe alone,
+ * which its command is `exec`ed into (PRD §9.2, C-PERF-03, C-PERF-05).
+ */
+import type { CaptureEvents, ProbeCapture, ProbeChild } from "./capture.ts";
+/** Setup gets its own bound before a probe's shell and command timers can start. */
+export declare const probeOutputSetupTimeoutMs = 60000;
+/** Points the capture at another `mkfifo`, so a test can make one fail; with none, the system's. */
+export declare function setMkfifoForTests(path?: string): void;
+/**
+ * Two named pipes in a directory made for one probe, mode 0700, removed on release. They read
+ * as an ordinary pipe does: anything the command starts that keeps its output open keeps the
+ * probe open, a full pipe blocks its writer, and once Elwood's read ends close, a writer that
+ * remains is stopped by `SIGPIPE` when it next writes; one that stays silent lives on, as it
+ * would on an ordinary pipe. Node has no `mkfifo`, so the system's makes them.
+ */
+export declare class NamedPipeCapture implements ProbeCapture {
+    private readonly dir;
+    private readonly pipes;
+    private poll;
+    private constructor();
+    /** The probe's arguments, its script's output placeholder replaced by the pipes' quoted paths. */
+    args(args: readonly string[]): readonly string[];
+    /**
+     * Bounds the `mkfifo` child, killing and reaping it on expiry. Filesystem operations
+     * outside that child are not timed; setup failures release partial pipes and the directory.
+     */
+    static create(setupTimeoutMs?: number): Promise<NamedPipeCapture>;
+    watch(child: ProbeChild, events: CaptureEvents): void;
+    private read;
+    ended(): boolean;
+    text(): [string, string];
+    release(): void;
+}
+//# sourceMappingURL=named-pipes.d.ts.map

package/dist/runtime/probe/named-pipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"named-pipes.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/named-pipes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AA6B5E,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,MAAqB,GAAG,IAAI,CAEnE;AAsDD;;;;;;GAMG;AACH,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,IAAI,CAA6C;IAEzD,OAAO;IAMP,kGAAkG;IAClG,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE;IAShD;;;OAGG;WACU,MAAM,CAAC,cAAc,SAA4B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAe1F,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI;IAcrD,OAAO,CAAC,IAAI;IAMZ,KAAK,IAAI,OAAO;IAIhB,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;IAIxB,OAAO,IAAI,IAAI;CAKhB"}

package/dist/runtime/probe/named-pipes.js

@@ -0,0 +1,167 @@
+/**
+ * A probe script's output capture: two named pipes in a directory made for that probe alone,
+ * which its command is `exec`ed into (PRD §9.2, C-PERF-03, C-PERF-05).
+ */
+import { execFile } from "node:child_process";
+import { closeSync, constants, openSync, readSync } from "node:fs";
+import { join } from "node:path";
+import { promisify } from "node:util";
+import { shellQuote } from "../shell-quote.js";
+import { CappedBuffer } from "./capped-buffer.js";
+import { makePrivateDirectory, removePrivateDirectory } from "./private-directory.js";
+import { probeOutputRedirect } from "./start.js";
+/**
+ * How often a named pipe is read: a nominal cadence, which a busy event loop can stretch.
+ * macOS's kqueue reports a named pipe's data but never its end, when the last writer closes
+ * it, so the reader polls instead. A full pipe blocks its writer between reads, so the cadence
+ * only delays when Elwood sees output, and its end.
+ */
+const capturePollMs = 25;
+/**
+ * How much of a pipe one read takes. The cap bounds what Elwood keeps, not what it reads: the
+ * read that passes the cap takes up to this much, and the overflow then ends the probe. The
+ * writer is held only by what the pipe itself can buffer.
+ */
+const readChunkBytes = 64 * 1024;
+/** The pipes' mode: only Elwood's user can open them, inside a directory only it can enter. */
+const pipeMode = "600";
+/** The two pipes' names in the probe's directory: the command's stdout, then its stderr. */
+const pipeNames = ["stdout", "stderr"];
+/** The system's `mkfifo`: Node cannot make a named pipe itself. */
+const systemMkfifo = "/usr/bin/mkfifo";
+let mkfifo = systemMkfifo;
+/** Setup gets its own bound before a probe's shell and command timers can start. */
+export const probeOutputSetupTimeoutMs = 60_000;
+/** Points the capture at another `mkfifo`, so a test can make one fail; with none, the system's. */
+export function setMkfifoForTests(path = systemMkfifo) {
+    mkfifo = path;
+}
+const run = promisify(execFile);
+/** A named pipe's read end, and a write end that keeps it open until the command has its own. */
+class NamedPipe {
+    buffer = new CappedBuffer();
+    scratch = Buffer.alloc(readChunkBytes);
+    reader;
+    holder;
+    closed = false;
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    open() {
+        // Without a writer a pipe reads as ended, so Elwood holds one of its own until the probe
+        // exits; the command's `exec` then opens its write end without waiting.
+        this.reader = openSync(this.path, constants.O_RDONLY | constants.O_NONBLOCK);
+        this.holder = openSync(this.path, constants.O_WRONLY | constants.O_NONBLOCK);
+    }
+    /** Lets the pipe end when every other writer has closed it. */
+    letEnd() {
+        if (this.holder !== undefined)
+            closeSync(this.holder);
+        this.holder = undefined;
+    }
+    /** Reads what is waiting, until it is drained, ends, or passes the cap. */
+    read() {
+        while (!(this.closed || this.buffer.overflowed) && this.reader !== undefined) {
+            let length;
+            try {
+                length = readSync(this.reader, this.scratch, 0, this.scratch.length, null);
+            }
+            catch {
+                // `EAGAIN`: a writer remains, but nothing is waiting. A pipe's read fails no other
+                // way, and if one did, the command's bound would still end the probe.
+                return;
+            }
+            if (length === 0)
+                this.closed = true;
+            else
+                this.buffer.append(Buffer.from(this.scratch.subarray(0, length)));
+        }
+    }
+    release() {
+        this.letEnd();
+        if (this.reader !== undefined)
+            closeSync(this.reader);
+        this.reader = undefined;
+        this.buffer.release();
+    }
+}
+/**
+ * Two named pipes in a directory made for one probe, mode 0700, removed on release. They read
+ * as an ordinary pipe does: anything the command starts that keeps its output open keeps the
+ * probe open, a full pipe blocks its writer, and once Elwood's read ends close, a writer that
+ * remains is stopped by `SIGPIPE` when it next writes; one that stays silent lives on, as it
+ * would on an ordinary pipe. Node has no `mkfifo`, so the system's makes them.
+ */
+export class NamedPipeCapture {
+    dir;
+    pipes;
+    poll;
+    constructor(dir) {
+        this.dir = dir;
+        const [stdout, stderr] = pipeNames;
+        this.pipes = [new NamedPipe(join(dir, stdout)), new NamedPipe(join(dir, stderr))];
+    }
+    /** The probe's arguments, its script's output placeholder replaced by the pipes' quoted paths. */
+    args(args) {
+        const [stdout, stderr] = this.pipes.map((pipe) => shellQuote(pipe.path));
+        const redirect = `>${stdout} 2>${stderr}`;
+        const script = args.length - 1;
+        return args.map((arg, index) => index === script ? arg.slice(0, -probeOutputRedirect.length) + redirect : arg);
+    }
+    /**
+     * Bounds the `mkfifo` child, killing and reaping it on expiry. Filesystem operations
+     * outside that child are not timed; setup failures release partial pipes and the directory.
+     */
+    static async create(setupTimeoutMs = probeOutputSetupTimeoutMs) {
+        const capture = new NamedPipeCapture(makePrivateDirectory());
+        try {
+            await run(mkfifo, ["-m", pipeMode, ...capture.pipes.map((pipe) => pipe.path)], {
+                timeout: setupTimeoutMs,
+                killSignal: "SIGKILL",
+            });
+            for (const pipe of capture.pipes)
+                pipe.open();
+            return capture;
+        }
+        catch (error) {
+            capture.release();
+            throw error;
+        }
+    }
+    watch(child, events) {
+        child.stdout.resume(); // read for the start line only, by the runner
+        child.stderr.resume();
+        const read = () => this.read(events);
+        child.once("exit", () => {
+            for (const pipe of this.pipes)
+                pipe.letEnd();
+            read();
+        });
+        // Referenced, unlike the probe's bounds: once the command has exited, a process it started
+        // that still holds a pipe keeps the probe pending, and only this keeps the host alive to
+        // deliver its result. Release clears it however the probe settles.
+        this.poll = setInterval(read, capturePollMs);
+    }
+    read(events) {
+        for (const pipe of this.pipes)
+            pipe.read();
+        if (this.pipes.some((pipe) => pipe.buffer.overflowed))
+            events.overflowed();
+        else if (this.ended())
+            events.ended();
+    }
+    ended() {
+        return this.pipes.every((pipe) => pipe.closed);
+    }
+    text() {
+        return [this.pipes[0].buffer.text(), this.pipes[1].buffer.text()];
+    }
+    release() {
+        clearInterval(this.poll);
+        for (const pipe of this.pipes)
+            pipe.release();
+        removePrivateDirectory(this.dir, pipeNames);
+    }
+}
+//# sourceMappingURL=named-pipes.js.map

package/dist/runtime/probe/named-pipes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"named-pipes.js","sourceRoot":"","sources":["../../../src/runtime/probe/named-pipes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB;;;;GAIG;AACH,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB,4FAA4F;AAC5F,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEhD,mEAAmE;AACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,IAAI,MAAM,GAAG,YAAY,CAAC;AAE1B,oFAAoF;AACpF,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,oGAAoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,OAAe,YAAY;IAC3D,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC,iGAAiG;AACjG,MAAM,SAAS;IACJ,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IACpB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChD,MAAM,CAAqB;IAC3B,MAAM,CAAqB;IACnC,MAAM,GAAG,KAAK,CAAC;IACN,IAAI,CAAS;IAEtB,YAAY,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI;QACF,yFAAyF;QACzF,wEAAwE;QACxE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC;IAED,+DAA+D;IAC/D,MAAM;QACJ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;IAED,2EAA2E;IAC3E,IAAI;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7E,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,mFAAmF;gBACnF,sEAAsE;gBACtE,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;;gBAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IACV,GAAG,CAAS;IACZ,KAAK,CAAkC;IAChD,IAAI,CAA6C;IAEzD,YAAoB,GAAW;QAC7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,kGAAkG;IAClG,IAAI,CAAC,IAAuB;QAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,MAAM,MAAM,MAAM,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAC7B,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAC9E,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,yBAAyB;QAC5D,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;gBAC7E,OAAO,EAAE,cAAc;gBACvB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAiB,EAAE,MAAqB;QAC5C,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,8CAA8C;QACrE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7C,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,2FAA2F;QAC3F,yFAAyF;QACzF,mEAAmE;QACnE,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC/C,CAAC;IAEO,IAAI,CAAC,MAAqB;QAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,UAAU,EAAE,CAAC;aACtE,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO;QACL,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9C,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/runtime/probe/private-directory.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A directory made for one probe's output, mode 0700 under the system temp directory, and its
+ * removal however the probe ends (PRD §9.2, C-PERF-05).
+ */
+/** Makes a probe's private directory; `mkdtemp` makes it mode 0700. */
+export declare function makePrivateDirectory(): string;
+/**
+ * Removes a probe's private directory, which holds at most `entries`, as the probe settles: an
+ * unlink each and an `rmdir`, done at once. A directory the command changed, by what it made, locked,
+ * or removed there, is removed off the event loop instead, however large a tree it left. Never
+ * throws.
+ */
+export declare function removePrivateDirectory(dir: string, entries: readonly string[]): void;
+//# sourceMappingURL=private-directory.d.ts.map

package/dist/runtime/probe/private-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-directory.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/private-directory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,uEAAuE;AACvE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAQpF"}