@xemahq/contracts 0.27.0 → 0.29.0

package/dist/process-topology/lib/resolve-process-topology.js

@@ -1,24 +1,47 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ProcessTopologyViolationCode = void 0;
+exports.deriveProcessMemberFacts = deriveProcessMemberFacts;
 exports.isExactVersion = isExactVersion;
 exports.resolveProcessTopology = resolveProcessTopology;
 exports.assertProcessTopology = assertProcessTopology;
-exports.oneProcessPerComponent = oneProcessPerComponent;
 const biome_1 = require("../../biome");
 const process_topology_1 = require("./process-topology");
 var ProcessTopologyViolationCode;
 (function (ProcessTopologyViolationCode) {
     ProcessTopologyViolationCode["UnknownMember"] = "unknown-member";
-    ProcessTopologyViolationCode["MemberNotComposable"] = "member-not-composable";
-    ProcessTopologyViolationCode["MixedTrustClasses"] = "mixed-trust-classes";
-    ProcessTopologyViolationCode["MissingTrustClass"] = "missing-trust-class";
-    ProcessTopologyViolationCode["SingletonScaled"] = "singleton-scaled";
+    ProcessTopologyViolationCode["NotAService"] = "not-a-service";
+    ProcessTopologyViolationCode["RuntimeScheduled"] = "runtime-scheduled";
     ProcessTopologyViolationCode["InvocationOnlyMember"] = "invocation-only-member";
-    ProcessTopologyViolationCode["UnplacedComponent"] = "unplaced-component";
+    ProcessTopologyViolationCode["SingletonScaled"] = "singleton-scaled";
+    ProcessTopologyViolationCode["ExclusiveShared"] = "exclusive-shared";
     ProcessTopologyViolationCode["FloatingMemberVersion"] = "floating-member-version";
     ProcessTopologyViolationCode["KernelMajorDisagreement"] = "kernel-major-disagreement";
+    ProcessTopologyViolationCode["MixedBuildSources"] = "mixed-build-sources";
+    ProcessTopologyViolationCode["MixedTrustDomains"] = "mixed-trust-domains";
+    ProcessTopologyViolationCode["ForeignCodeBesideCustody"] = "foreign-code-beside-custody";
+    ProcessTopologyViolationCode["ForeignCodeBesideGovernedEgress"] = "foreign-code-beside-governed-egress";
 })(ProcessTopologyViolationCode || (exports.ProcessTopologyViolationCode = ProcessTopologyViolationCode = {}));
+function deriveProcessMemberFacts(component, context) {
+    return {
+        biomeId: context.biomeId,
+        componentKey: component.key,
+        componentKind: component.kind,
+        ...(component.scheduler === undefined
+            ? {}
+            : { scheduler: component.scheduler }),
+        scalingMode: component.requirements.scaling.mode,
+        ...(component.processFacts === undefined
+            ? {}
+            : { processFacts: component.processFacts }),
+        origin: context.origin,
+        version: context.version,
+        buildSource: context.buildSource,
+        ...(context.kernelMajor === undefined
+            ? {}
+            : { kernelMajor: context.kernelMajor }),
+    };
+}
 const EXACT_VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 function isExactVersion(value) {
     return EXACT_VERSION.test(value);
@@ -27,67 +50,85 @@ const REPLICABLE_SCALING_MODES = new Set([
     biome_1.BiomeScalingMode.Horizontal,
     biome_1.BiomeScalingMode.Partitioned,
 ]);
+function isForeignCode(facts) {
+    return (facts.origin !== biome_1.BiomeOrigin.FirstParty ||
+        facts.processFacts?.foreignCodeExecution === true);
+}
+function buildSourceKey(source) {
+    return `${source.repository}@${source.commit}`;
+}
+function summarise(groups) {
+    return [...groups.entries()]
+        .map(([key, members]) => `${key} (${members.join(', ')})`)
+        .sort()
+        .join(' and ');
+}
+function group(map, key, member) {
+    const members = map.get(key) ?? [];
+    members.push(member);
+    map.set(key, members);
+}
 function resolveProcessTopology(input) {
     const violations = [];
     const facts = new Map();
-    for (const component of input.composableComponents) {
+    for (const member of input.memberFacts) {
         facts.set((0, process_topology_1.processMemberKey)({
-            biomeId: component.biomeId,
-            componentKey: component.componentKey,
-        }), component);
+            biomeId: member.biomeId,
+            componentKey: member.componentKey,
+        }), member);
     }
-    const placed = new Set();
+    const policy = input.topology.trustPolicy;
     for (const process of input.topology.processes) {
-        const trustClasses = new Map();
+        const domains = new Map();
+        const buildSources = new Map();
         const kernelMajors = new Map();
+        const custody = [];
+        const egress = [];
+        const foreign = [];
+        const shared = process.members.length > 1;
         for (const member of process.members) {
             const key = (0, process_topology_1.processMemberKey)(member);
-            placed.add(key);
             const component = facts.get(key);
             if (component === undefined) {
                 violations.push({
                     code: ProcessTopologyViolationCode.UnknownMember,
                     process: process.name,
                     member: key,
-                    message: `process "${process.name}" names member "${key}", which is not a ` +
-                        `composable component of distribution "${input.topology.distributionId}". ` +
-                        `Either the component does not exist, or it does not declare composed execution.`,
+                    message: `process "${process.name}" names member "${key}", for which no ` +
+                        `component facts were supplied from distribution ` +
+                        `"${input.topology.distributionId}". Either the component does not ` +
+                        `exist in the edition, or the caller did not read its facts — and ` +
+                        `"could not check" is not "passed".`,
                 });
                 continue;
             }
-            if (!component.executionModes.includes(biome_1.BiomeComponentExecutionMode.Composed)) {
+            if (component.componentKind !== biome_1.BiomeComponentKind.Service) {
                 violations.push({
-                    code: ProcessTopologyViolationCode.MemberNotComposable,
+                    code: ProcessTopologyViolationCode.NotAService,
                     process: process.name,
                     member: key,
-                    message: `"${key}" does not declare "${biome_1.BiomeComponentExecutionMode.Composed}" ` +
-                        `execution, so it cannot be loaded into process "${process.name}". ` +
-                        `A component runs in its own process unless its author says it tolerates a shared one.`,
+                    message: `"${key}" is a ${component.componentKind} component, so it cannot be ` +
+                        `a member of process "${process.name}". Only services are composed; ` +
+                        `a ${component.componentKind} keeps the process its kind gives it.`,
                 });
             }
-            if (component.compositionTrustClass === undefined) {
+            else if (component.scheduler === biome_1.BiomeComponentScheduler.Runtime) {
                 violations.push({
-                    code: ProcessTopologyViolationCode.MissingTrustClass,
+                    code: ProcessTopologyViolationCode.RuntimeScheduled,
                     process: process.name,
                     member: key,
-                    message: `"${key}" declares no compositionTrustClass, so what may share its ` +
-                        `heap is unknown. An unclassified component is REFUSED rather than ` +
-                        `defaulted — defaulting would silently admit custody code into a product heap.`,
+                    message: `"${key}" is runtime-scheduled — the runtime plane launches its ` +
+                        `instances on demand — so it is not a standing workload and cannot ` +
+                        `be a member of process "${process.name}".`,
                 });
             }
-            else {
-                const members = trustClasses.get(component.compositionTrustClass) ?? [];
-                members.push(key);
-                trustClasses.set(component.compositionTrustClass, members);
-            }
             if (component.scalingMode === biome_1.BiomeScalingMode.InvocationOnly) {
                 violations.push({
                     code: ProcessTopologyViolationCode.InvocationOnlyMember,
                     process: process.name,
                     member: key,
                     message: `"${key}" is invocation-only, so nothing rosters it as a standing ` +
-                        `workload and it cannot be a member of process "${process.name}". ` +
-                        `An invocation-only component is launched per invocation by the runner plane.`,
+                        `workload and it cannot be a member of process "${process.name}".`,
                 });
             }
             else if (process.replicas.max > 1 &&
@@ -98,9 +139,18 @@ function resolveProcessTopology(input) {
                     member: key,
                     message: `"${key}" declares scaling.mode "${component.scalingMode}", so process ` +
                         `"${process.name}" may run at most one replica — it declares ` +
-                        `replicas.max ${process.replicas.max}. ` +
-                        `"Leader-elected" is singleton plus a kernel-state lease, not a scaling mode: ` +
-                        `a component that elects still runs one instance of its scheduled work.`,
+                        `replicas.max ${process.replicas.max}. "Leader-elected" is singleton ` +
+                        `plus a kernel-state lease, not a scaling mode.`,
+                });
+            }
+            const exclusive = component.processFacts?.exclusive;
+            if (exclusive !== undefined && shared) {
+                violations.push({
+                    code: ProcessTopologyViolationCode.ExclusiveShared,
+                    process: process.name,
+                    member: key,
+                    message: `"${key}" declares a process-global constraint ("${exclusive.reason}"), ` +
+                        `so it cannot share process "${process.name}" with any other member.`,
                 });
             }
             if (!isExactVersion(component.version)) {
@@ -110,59 +160,71 @@ function resolveProcessTopology(input) {
                     member: key,
                     message: `"${key}" resolves to "${component.version}", which is not an exact ` +
                         `version. A floating range would decide what shares a heap at install ` +
-                        `time, so two installs of one edition could differ and "which code was ` +
-                        `in that heap" would be unanswerable after the fact.`,
+                        `time, so two installs of one edition could differ.`,
                 });
             }
+            group(domains, (0, process_topology_1.resolveTrustDomain)(component.biomeId, component.origin, policy), key);
+            group(buildSources, buildSourceKey(component.buildSource), key);
             if (component.kernelMajor !== undefined) {
-                const members = kernelMajors.get(component.kernelMajor) ?? [];
-                members.push(key);
-                kernelMajors.set(component.kernelMajor, members);
+                group(kernelMajors, String(component.kernelMajor), key);
             }
+            if (component.processFacts?.credentialCustody === true)
+                custody.push(key);
+            if (component.processFacts?.governedEgressEdge === true)
+                egress.push(key);
+            if (isForeignCode(component))
+                foreign.push(key);
         }
-        if (trustClasses.size > 1) {
-            const summary = [...trustClasses.entries()]
-                .map(([trustClass, members]) => `${trustClass} (${members.join(', ')})`)
-                .sort()
-                .join(' and ');
+        if (domains.size > 1) {
             violations.push({
-                code: ProcessTopologyViolationCode.MixedTrustClasses,
+                code: ProcessTopologyViolationCode.MixedTrustDomains,
                 process: process.name,
-                message: `process "${process.name}" mixes trust classes: ${summary}. ` +
-                    `A process contains components of exactly ONE class — composing two ` +
-                    `merges their blast radius into one heap, one uid and one set of ambient ` +
-                    `credentials. Declare more processes; a distribution may always isolate ` +
-                    `MORE, never less.`,
+                message: `process "${process.name}" mixes trust domains: ${summarise(domains)}. ` +
+                    `One process is ONE security boundary, so its members must be one ` +
+                    `domain. To co-locate them deliberately, assign their biomes to one ` +
+                    `domain in the deployment's trustPolicy; otherwise declare more processes.`,
+            });
+        }
+        const foreignOnly = (keys) => foreign.filter((key) => !keys.includes(key));
+        if (custody.length > 0 && foreignOnly(custody).length > 0) {
+            violations.push({
+                code: ProcessTopologyViolationCode.ForeignCodeBesideCustody,
+                process: process.name,
+                message: `process "${process.name}" places foreign code (${foreignOnly(custody).join(', ')}) ` +
+                    `beside credential-custody material (${custody.join(', ')}). Code in the ` +
+                    `same heap can read the keys; no trust policy can admit this.`,
+            });
+        }
+        if (egress.length > 0 && foreignOnly(egress).length > 0) {
+            violations.push({
+                code: ProcessTopologyViolationCode.ForeignCodeBesideGovernedEgress,
+                process: process.name,
+                message: `process "${process.name}" places foreign code (${foreignOnly(egress).join(', ')}) ` +
+                    `beside a governed egress edge (${egress.join(', ')}). Foreign code would ` +
+                    `inherit the edge's network reach and bypass its control from the same ` +
+                    `heap; no trust policy can admit this.`,
+            });
+        }
+        if (buildSources.size > 1) {
+            violations.push({
+                code: ProcessTopologyViolationCode.MixedBuildSources,
+                process: process.name,
+                message: `process "${process.name}" mixes builds: ${summarise(buildSources)}. ` +
+                    `Members of one process share one module graph, and a composed image ` +
+                    `is built from ONE repository at ONE commit — so every member must come ` +
+                    `from the same build.`,
             });
         }
         if (kernelMajors.size > 1) {
-            const summary = [...kernelMajors.entries()]
-                .map(([major, members]) => `${major} (${members.join(', ')})`)
-                .sort()
-                .join(' and ');
             violations.push({
                 code: ProcessTopologyViolationCode.KernelMajorDisagreement,
                 process: process.name,
-                message: `process "${process.name}" mixes kernel majors: ${summary}. ` +
+                message: `process "${process.name}" mixes kernel majors: ${summarise(kernelMajors)}. ` +
                     `Members of one process share one module graph, so they must resolve one ` +
-                    `compatible kernel major. This is refused at resolve time rather than ` +
-                    `discovered at boot.`,
+                    `compatible kernel major.`,
             });
         }
     }
-    for (const component of input.composableComponents) {
-        const key = (0, process_topology_1.processMemberKey)(component);
-        if (placed.has(key))
-            continue;
-        violations.push({
-            code: ProcessTopologyViolationCode.UnplacedComponent,
-            member: key,
-            message: `"${key}" is a composable component of distribution ` +
-                `"${input.topology.distributionId}" and no process contains it. ` +
-                `A topology declares where EVERY composable component runs; an omission ` +
-                `would silently drop a service from the installation.`,
-        });
-    }
     return violations;
 }
 function assertProcessTopology(input) {
@@ -174,18 +236,4 @@ function assertProcessTopology(input) {
         `(${violations.length} violation${violations.length === 1 ? '' : 's'}):\n` +
         lines.join('\n'));
 }
-function oneProcessPerComponent(distributionId, components, listenPort) {
-    return {
-        schemaVersion: 1,
-        distributionId,
-        processes: components.map((component) => ({
-            name: `${component.biomeId}-${component.componentKey}`,
-            members: [
-                { biomeId: component.biomeId, componentKey: component.componentKey },
-            ],
-            replicas: { min: 1, max: 1 },
-            listen: { port: listenPort },
-        })),
-    };
-}
 //# sourceMappingURL=resolve-process-topology.js.map

package/dist/process-topology/lib/resolve-process-topology.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-process-topology.js","sourceRoot":"","sources":["../../../src/process-topology/lib/resolve-process-topology.ts"],"names":[],"mappings":";;;AAsHA,wCAEC;AAYD,wDAmKC;AAWD,sDASC;AAgBD,wDAiBC;AA5VD,uCAIqB;AACrB,yDAA4E;AA0B5E,IAAY,4BAmBX;AAnBD,WAAY,4BAA4B;IAEtC,gEAAgC,CAAA;IAEhC,6EAA6C,CAAA;IAE7C,yEAAyC,CAAA;IAEzC,yEAAyC,CAAA;IAEzC,oEAAoC,CAAA;IAEpC,+EAA+C,CAAA;IAE/C,wEAAwC,CAAA;IAExC,iFAAiD,CAAA;IAEjD,qFAAqD,CAAA;AACvD,CAAC,EAnBW,4BAA4B,4CAA5B,4BAA4B,QAmBvC;AAiED,MAAM,aAAa,GACjB,2HAA2H,CAAC;AAE9H,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAGD,MAAM,wBAAwB,GAAkC,IAAI,GAAG,CAAC;IACtE,wBAAgB,CAAC,UAAU;IAC3B,wBAAgB,CAAC,WAAW;CAC7B,CAAC,CAAC;AAMH,SAAgB,sBAAsB,CACpC,KAAkC;IAElC,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACnD,KAAK,CAAC,GAAG,CACP,IAAA,mCAAgB,EAAC;YACf,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,YAAY,EAAE,SAAS,CAAC,YAAY;SACrC,CAAC,EACF,SAAS,CACV,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEjD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAA,mCAAgB,EAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,aAAa;oBAChD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,mBAAmB,GAAG,oBAAoB;wBAClE,yCAAyC,KAAK,CAAC,QAAQ,CAAC,cAAc,KAAK;wBAC3E,iFAAiF;iBACpF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IACE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,mCAA2B,CAAC,QAAQ,CAAC,EACxE,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,mBAAmB;oBACtD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,uBAAuB,mCAA2B,CAAC,QAAQ,IAAI;wBACtE,mDAAmD,OAAO,CAAC,IAAI,KAAK;wBACpE,uFAAuF;iBAC1F,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;gBAClD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,iBAAiB;oBACpD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,6DAA6D;wBACpE,oEAAoE;wBACpE,+EAA+E;iBAClF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,SAAS,CAAC,WAAW,KAAK,wBAAgB,CAAC,cAAc,EAAE,CAAC;gBAC9D,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,oBAAoB;oBACvD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,4DAA4D;wBACnE,kDAAkD,OAAO,CAAC,IAAI,KAAK;wBACnE,8EAA8E;iBACjF,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;gBACxB,CAAC,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EACpD,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,eAAe;oBAClD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,4BAA4B,SAAS,CAAC,WAAW,gBAAgB;wBACxE,IAAI,OAAO,CAAC,IAAI,8CAA8C;wBAC9D,gBAAgB,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;wBACxC,+EAA+E;wBAC/E,wEAAwE;iBAC3E,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,qBAAqB;oBACxD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,kBAAkB,SAAS,CAAC,OAAO,2BAA2B;wBACrE,uEAAuE;wBACvE,wEAAwE;wBACxE,qDAAqD;iBACxD,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;iBACvE,IAAI,EAAE;iBACN,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,iBAAiB;gBACpD,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,OAAO,IAAI;oBAC7D,qEAAqE;oBACrE,0EAA0E;oBAC1E,yEAAyE;oBACzE,mBAAmB;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;iBAC7D,IAAI,EAAE;iBACN,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,uBAAuB;gBAC1D,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,OAAO,IAAI;oBAC7D,0EAA0E;oBAC1E,uEAAuE;oBACvE,qBAAqB;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,IAAA,mCAAgB,EAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,4BAA4B,CAAC,iBAAiB;YACpD,MAAM,EAAE,GAAG;YACX,OAAO,EACL,IAAI,GAAG,8CAA8C;gBACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,gCAAgC;gBACjE,yEAAyE;gBACzE,sDAAsD;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAWD,SAAgB,qBAAqB,CAAC,KAAkC;IACtE,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,CAAC,QAAQ,CAAC,cAAc,eAAe;QAChF,IAAI,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM;QAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACnB,CAAC;AACJ,CAAC;AAgBD,SAAgB,sBAAsB,CACpC,cAAsB,EACtB,UAA+C,EAC/C,UAAkB;IAElB,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,cAAc;QACd,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,YAAY,EAAE;YACtD,OAAO,EAAE;gBACP,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE;aACrE;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC7B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"resolve-process-topology.js","sourceRoot":"","sources":["../../../src/process-topology/lib/resolve-process-topology.ts"],"names":[],"mappings":";;;AAyJA,4DAsBC;AAmBD,wCAEC;AAqCD,wDAiMC;AAMD,sDAWC;AA3bD,uCAOqB;AACrB,yDAI4B;AAuC5B,IAAY,4BAyBX;AAzBD,WAAY,4BAA4B;IAEtC,gEAAgC,CAAA;IAEhC,6DAA6B,CAAA;IAE7B,sEAAsC,CAAA;IAEtC,+EAA+C,CAAA;IAE/C,oEAAoC,CAAA;IAEpC,oEAAoC,CAAA;IAEpC,iFAAiD,CAAA;IAEjD,qFAAqD,CAAA;IAErD,yEAAyC,CAAA;IAEzC,yEAAyC,CAAA;IAEzC,wFAAwD,CAAA;IAExD,uGAAuE,CAAA;AACzE,CAAC,EAzBW,4BAA4B,4CAA5B,4BAA4B,QAyBvC;AA6ED,SAAgB,wBAAwB,CACtC,SAAyB,EACzB,OAA6B;IAE7B,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,YAAY,EAAE,SAAS,CAAC,GAAG;QAC3B,aAAa,EAAE,SAAS,CAAC,IAAI;QAC7B,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;QACvC,WAAW,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI;QAChD,GAAG,CAAC,SAAS,CAAC,YAAY,KAAK,SAAS;YACtC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAgBD,MAAM,aAAa,GACjB,2HAA2H,CAAC;AAE9H,SAAgB,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAGD,MAAM,wBAAwB,GAAkC,IAAI,GAAG,CAAC;IACtE,wBAAgB,CAAC,UAAU;IAC3B,wBAAgB,CAAC,WAAW;CAC7B,CAAC,CAAC;AAGH,SAAS,aAAa,CAAC,KAAyB;IAC9C,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,mBAAW,CAAC,UAAU;QACvC,KAAK,CAAC,YAAY,EAAE,oBAAoB,KAAK,IAAI,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAgC;IACtD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,MAA6B;IAC9C,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;SACzD,IAAI,EAAE;SACN,IAAI,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,KAAK,CAAC,GAA0B,EAAE,GAAW,EAAE,MAAc;IACpE,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACxB,CAAC;AAMD,SAAgB,sBAAsB,CACpC,KAAkC;IAElC,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,KAAK,CAAC,GAAG,CACP,IAAA,mCAAgB,EAAC;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,EACF,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;IAE1C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QACjD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QACjD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAA,mCAAgB,EAAC,MAAM,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,aAAa;oBAChD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,mBAAmB,GAAG,kBAAkB;wBAChE,kDAAkD;wBAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,mCAAmC;wBACpE,mEAAmE;wBACnE,oCAAoC;iBACvC,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAGD,IAAI,SAAS,CAAC,aAAa,KAAK,0BAAkB,CAAC,OAAO,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,WAAW;oBAC9C,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,UAAU,SAAS,CAAC,aAAa,8BAA8B;wBACtE,wBAAwB,OAAO,CAAC,IAAI,iCAAiC;wBACrE,KAAK,SAAS,CAAC,aAAa,uCAAuC;iBACtE,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,SAAS,CAAC,SAAS,KAAK,+BAAuB,CAAC,OAAO,EAAE,CAAC;gBACnE,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,gBAAgB;oBACnD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,0DAA0D;wBACjE,oEAAoE;wBACpE,2BAA2B,OAAO,CAAC,IAAI,IAAI;iBAC9C,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,WAAW,KAAK,wBAAgB,CAAC,cAAc,EAAE,CAAC;gBAC9D,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,oBAAoB;oBACvD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,4DAA4D;wBACnE,kDAAkD,OAAO,CAAC,IAAI,IAAI;iBACrE,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,OAAO,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC;gBACxB,CAAC,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EACpD,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,eAAe;oBAClD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,4BAA4B,SAAS,CAAC,WAAW,gBAAgB;wBACxE,IAAI,OAAO,CAAC,IAAI,8CAA8C;wBAC9D,gBAAgB,OAAO,CAAC,QAAQ,CAAC,GAAG,kCAAkC;wBACtE,gDAAgD;iBACnD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC;YACpD,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,eAAe;oBAClD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,4CAA4C,SAAS,CAAC,MAAM,MAAM;wBACzE,+BAA+B,OAAO,CAAC,IAAI,0BAA0B;iBACxE,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,4BAA4B,CAAC,qBAAqB;oBACxD,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,GAAG;oBACX,OAAO,EACL,IAAI,GAAG,kBAAkB,SAAS,CAAC,OAAO,2BAA2B;wBACrE,uEAAuE;wBACvE,oDAAoD;iBACvD,CAAC,CAAC;YACL,CAAC;YAGD,KAAK,CACH,OAAO,EACP,IAAA,qCAAkB,EAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,GAAG,CACJ,CAAC;YACF,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACxC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,SAAS,CAAC,YAAY,EAAE,iBAAiB,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,SAAS,CAAC,YAAY,EAAE,kBAAkB,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,aAAa,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,iBAAiB;gBACpD,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,SAAS,CAAC,OAAO,CAAC,IAAI;oBACxE,mEAAmE;oBACnE,qEAAqE;oBACrE,2EAA2E;aAC9E,CAAC,CAAC;QACL,CAAC;QAID,MAAM,WAAW,GAAG,CAAC,IAAuB,EAAE,EAAE,CAC9C,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,wBAAwB;gBAC3D,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACrF,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;oBAC1E,8DAA8D;aACjE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,+BAA+B;gBAClE,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpF,kCAAkC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB;oBAC3E,wEAAwE;oBACxE,uCAAuC;aAC1C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,iBAAiB;gBACpD,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,mBAAmB,SAAS,CAAC,YAAY,CAAC,IAAI;oBACtE,sEAAsE;oBACtE,yEAAyE;oBACzE,sBAAsB;aACzB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,4BAA4B,CAAC,uBAAuB;gBAC1D,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EACL,YAAY,OAAO,CAAC,IAAI,0BAA0B,SAAS,CAAC,YAAY,CAAC,IAAI;oBAC7E,0EAA0E;oBAC1E,0BAA0B;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAMD,SAAgB,qBAAqB,CAAC,KAAkC;IACtE,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAC1B,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CAC9D,CAAC;IACF,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,CAAC,QAAQ,CAAC,cAAc,eAAe;QAChF,IAAI,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM;QAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACnB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/contracts",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework/runtime deps.",
   "license": "Apache-2.0",
   "author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",