@xemahq/xema 0.14.0 → 0.15.0

package/dist/runtime/license/registry-credential.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseRegistryCredentials = exports.RegistryAuthOutcome = exports.LICENSE_REGISTRY_USERNAME = exports.LICENSE_REGISTRY_HOSTS = void 0;
+exports.authenticateLicenseRegistries = authenticateLicenseRegistries;
+exports.isBlockingAuthOutcome = isBlockingAuthOutcome;
+exports.hasLicenseGatedHost = hasLicenseGatedHost;
+exports.LICENSE_REGISTRY_HOSTS = new Set([
+    'registry.xema.dev',
+]);
+exports.LICENSE_REGISTRY_USERNAME = 'license';
+var RegistryAuthOutcome;
+(function (RegistryAuthOutcome) {
+    RegistryAuthOutcome["NotLicenseGated"] = "not-license-gated";
+    RegistryAuthOutcome["Authenticated"] = "authenticated";
+    RegistryAuthOutcome["Rejected"] = "rejected";
+    RegistryAuthOutcome["Unavailable"] = "unavailable";
+})(RegistryAuthOutcome || (exports.RegistryAuthOutcome = RegistryAuthOutcome = {}));
+class LicenseRegistryCredentials {
+    token;
+    static fromResolution(resolution) {
+        return new LicenseRegistryCredentials(resolution.ok ? resolution.token : null);
+    }
+    constructor(token) {
+        this.token = token;
+    }
+    secretFor(host) {
+        if (!exports.LICENSE_REGISTRY_HOSTS.has(host)) {
+            return null;
+        }
+        return this.token;
+    }
+}
+exports.LicenseRegistryCredentials = LicenseRegistryCredentials;
+async function authenticateLicenseRegistries(hosts, credentials, docker) {
+    const results = [];
+    for (const host of dedupe(hosts)) {
+        if (!exports.LICENSE_REGISTRY_HOSTS.has(host)) {
+            results.push({
+                host,
+                outcome: RegistryAuthOutcome.NotLicenseGated,
+                detail: '',
+                remediation: '',
+            });
+            continue;
+        }
+        const secret = credentials.secretFor(host);
+        if (secret === null) {
+            results.push({
+                host,
+                outcome: RegistryAuthOutcome.Unavailable,
+                detail: '',
+                remediation: `${host} authenticates with your Xema license, and no license could be verified ` +
+                    'on this machine. Run `xema doctor` — it reports exactly why — then apply a ' +
+                    'license with `xema license apply <file>`.',
+            });
+            continue;
+        }
+        try {
+            await docker.login(host, exports.LICENSE_REGISTRY_USERNAME, secret);
+            results.push({
+                host,
+                outcome: RegistryAuthOutcome.Authenticated,
+                detail: '',
+                remediation: '',
+            });
+        }
+        catch (err) {
+            results.push({
+                host,
+                outcome: RegistryAuthOutcome.Rejected,
+                detail: (err instanceof Error ? err.message : String(err)).trim(),
+                remediation: `${host} refused your Xema license. A license that is expired past its grace ` +
+                    'window, revoked, or not entitled to this distribution cannot pull images. ' +
+                    'Run `xema doctor` for the license state, and apply a renewed license with ' +
+                    '`xema license apply <file>`.',
+            });
+        }
+    }
+    return results;
+}
+const BLOCKING_AUTH_OUTCOMES = new Set([
+    RegistryAuthOutcome.Rejected,
+    RegistryAuthOutcome.Unavailable,
+]);
+function isBlockingAuthOutcome(outcome) {
+    return BLOCKING_AUTH_OUTCOMES.has(outcome);
+}
+function hasLicenseGatedHost(hosts) {
+    return hosts.some((host) => exports.LICENSE_REGISTRY_HOSTS.has(host));
+}
+function dedupe(values) {
+    return [...new Set(values)];
+}
+//# sourceMappingURL=registry-credential.js.map

package/dist/runtime/license/registry-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-credential.js","sourceRoot":"","sources":["../../../src/runtime/license/registry-credential.ts"],"names":[],"mappings":";;;AAyGA,sEAmDC;AAQD,sDAEC;AAQD,kDAEC;AApJY,QAAA,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,mBAAmB;CACpB,CAAC,CAAC;AAQU,QAAA,yBAAyB,GAAG,SAAS,CAAC;AAGnD,IAAY,mBAoBX;AApBD,WAAY,mBAAmB;IAM7B,4DAAqC,CAAA;IAErC,sDAA+B,CAAA;IAK/B,4CAAqB,CAAA;IAMrB,kDAA2B,CAAA;AAC7B,CAAC,EApBW,mBAAmB,mCAAnB,mBAAmB,QAoB9B;AAmBD,MAAa,0BAA0B;IAMR;IAJ7B,MAAM,CAAC,cAAc,CAAC,UAA6B;QACjD,OAAO,IAAI,0BAA0B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;IAED,YAA6B,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IAAG,CAAC;IAErD,SAAS,CAAC,IAAY;QACpB,IAAI,CAAC,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAdD,gEAcC;AAWM,KAAK,UAAU,6BAA6B,CACjD,KAAwB,EACxB,WAAuC,EACvC,MAAiB;IAEjB,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,mBAAmB,CAAC,eAAe;gBAC5C,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,mBAAmB,CAAC,WAAW;gBACxC,MAAM,EAAE,EAAE;gBACV,WAAW,EACT,GAAG,IAAI,0EAA0E;oBACjF,6EAA6E;oBAC7E,2CAA2C;aAC9C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iCAAyB,EAAE,MAAM,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,mBAAmB,CAAC,aAAa;gBAC1C,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,OAAO,EAAE,mBAAmB,CAAC,QAAQ;gBACrC,MAAM,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;gBACjE,WAAW,EACT,GAAG,IAAI,uEAAuE;oBAC9E,4EAA4E;oBAC5E,4EAA4E;oBAC5E,8BAA8B;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAGD,MAAM,sBAAsB,GAAqC,IAAI,GAAG,CAAC;IACvE,mBAAmB,CAAC,QAAQ;IAC5B,mBAAmB,CAAC,WAAW;CAChC,CAAC,CAAC;AAEH,SAAgB,qBAAqB,CAAC,OAA4B;IAChE,OAAO,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAQD,SAAgB,mBAAmB,CAAC,KAAwB;IAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB;IACvC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/runtime/license/resolve-license.d.ts

@@ -0,0 +1,30 @@
+import { LicenseVerificationFailureCode, type LicenseState, type LicenseTrustStore, type VerifiedLicense } from '@xemahq/license-verifier';
+import { type LicenseClockStore } from './license-clock';
+import { CredentialResolver } from '../sources/credentials';
+export declare enum LicenseSource {
+    Customer = "customer",
+    EmbeddedOpenSource = "embedded-open-source"
+}
+export interface LicenseResolutionSuccess {
+    readonly ok: true;
+    readonly source: LicenseSource;
+    readonly license: VerifiedLicense;
+    readonly state: LicenseState;
+    readonly token: string;
+}
+export interface LicenseResolutionFailure {
+    readonly ok: false;
+    readonly source: LicenseSource;
+    readonly code: LicenseVerificationFailureCode;
+    readonly message: string;
+    readonly remediation: string;
+}
+export type LicenseResolution = LicenseResolutionSuccess | LicenseResolutionFailure;
+export interface ResolveLicenseOptions {
+    readonly credentials?: CredentialResolver;
+    readonly trustStore?: LicenseTrustStore;
+    readonly clock?: LicenseClockStore;
+    readonly now?: number;
+}
+export declare function resolveEffectiveLicense(opts?: ResolveLicenseOptions): LicenseResolution;
+//# sourceMappingURL=resolve-license.d.ts.map

package/dist/runtime/license/resolve-license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-license.d.ts","sourceRoot":"","sources":["../../../src/runtime/license/resolve-license.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,8BAA8B,EAG9B,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEhF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAkB5D,oBAAY,aAAa;IAEvB,QAAQ,aAAa;IAErB,kBAAkB,yBAAyB;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAS7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAE9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,wBAAwB,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAM1C,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAExC,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAEnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,uBAAuB,CACrC,IAAI,GAAE,qBAA0B,GAC/B,iBAAiB,CA4BnB"}

package/dist/runtime/license/resolve-license.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LicenseSource = void 0;
+exports.resolveEffectiveLicense = resolveEffectiveLicense;
+const license_verifier_1 = require("@xemahq/license-verifier");
+const license_clock_1 = require("./license-clock");
+const license_store_1 = require("./license-store");
+const credentials_1 = require("../sources/credentials");
+var LicenseSource;
+(function (LicenseSource) {
+    LicenseSource["Customer"] = "customer";
+    LicenseSource["EmbeddedOpenSource"] = "embedded-open-source";
+})(LicenseSource || (exports.LicenseSource = LicenseSource = {}));
+function resolveEffectiveLicense(opts = {}) {
+    const credentials = opts.credentials ?? new credentials_1.CredentialResolver();
+    const customer = (0, license_store_1.readCustomerLicense)(credentials);
+    const source = customer === undefined ? LicenseSource.EmbeddedOpenSource : LicenseSource.Customer;
+    const token = customer ?? (0, license_verifier_1.getEmbeddedOssLicense)();
+    const trustStore = opts.trustStore ?? (0, license_verifier_1.getProductionLicenseTrustStore)();
+    const verified = (0, license_verifier_1.verifyLicense)(token, { trustStore });
+    if (!verified.ok) {
+        return {
+            ok: false,
+            source,
+            code: verified.code,
+            message: verified.message,
+            remediation: remediationFor(verified.code, source),
+        };
+    }
+    const clock = opts.clock ?? new license_clock_1.FileLicenseClockStore();
+    const highestObservedTimeMs = clock.read();
+    const state = (0, license_verifier_1.resolveLicenseState)(verified, {
+        ...(opts.now !== undefined ? { now: opts.now } : {}),
+        ...(highestObservedTimeMs !== null ? { highestObservedTimeMs } : {}),
+    });
+    clock.observe(state.evaluatedAtMs);
+    return { ok: true, source, license: verified, state, token };
+}
+function remediationFor(code, source) {
+    const supplied = source === LicenseSource.Customer
+        ? `The license came from ${license_store_1.LICENSE_STORE_DESCRIPTION}. Replace it with \`xema license apply <file>\`.`
+        : 'This is the open-source license compiled into the CLI, not one you supplied.';
+    switch (code) {
+        case license_verifier_1.LicenseVerificationFailureCode.TrustStoreEmpty:
+            return ('This build of the Xema CLI carries NO license verification keys — its license ' +
+                `material was never provisioned (\`isLicenseMaterialProvisioned()\` is ${String((0, license_verifier_1.isLicenseMaterialProvisioned)())}), so it can verify no license at all, including its own. ` +
+                'Install a released @xemahq/xema build; a source checkout must first run the ' +
+                'signing ceremony documented in @xemahq/license-verifier.');
+        case license_verifier_1.LicenseVerificationFailureCode.UnknownKeyId:
+            return ('The license was signed by a key this CLI build does not trust — either it was ' +
+                'issued after this build shipped, or it is not a Xema license. Upgrade the CLI ' +
+                `(\`npm i -g @xemahq/xema\`). ${supplied}`);
+        case license_verifier_1.LicenseVerificationFailureCode.InvalidSignature:
+            return ('The license signature does not verify: the token was altered in transit or on ' +
+                `disk. Re-copy it verbatim from your Xema account. ${supplied}`);
+        case license_verifier_1.LicenseVerificationFailureCode.MalformedToken:
+        case license_verifier_1.LicenseVerificationFailureCode.MalformedHeader:
+        case license_verifier_1.LicenseVerificationFailureCode.MalformedClaims:
+            return ('The stored value is not a well-formed Xema license. Copy the whole single-line ' +
+                `token, with no wrapping or truncation. ${supplied}`);
+        case license_verifier_1.LicenseVerificationFailureCode.UnsupportedClaimsVersion:
+            return ('The license uses a claim format newer than this CLI understands. Upgrade the ' +
+                `CLI (\`npm i -g @xemahq/xema\`). ${supplied}`);
+        case license_verifier_1.LicenseVerificationFailureCode.IssuerMismatch:
+            return ('The license names an issuer that is not the Xema licensing authority, so it is ' +
+                `refused. ${supplied}`);
+        default: {
+            const exhaustive = code;
+            throw new TypeError(`unhandled license verification failure ${String(exhaustive)}`);
+        }
+    }
+}
+//# sourceMappingURL=resolve-license.js.map

package/dist/runtime/license/resolve-license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-license.js","sourceRoot":"","sources":["../../../src/runtime/license/resolve-license.ts"],"names":[],"mappings":";;;AAmFA,0DA8BC;AAjHD,+DAUkC;AAGlC,mDAAgF;AAChF,mDAAiF;AACjF,wDAA4D;AAkB5D,IAAY,aAKX;AALD,WAAY,aAAa;IAEvB,sCAAqB,CAAA;IAErB,4DAA2C,CAAA;AAC7C,CAAC,EALW,aAAa,6BAAb,aAAa,QAKxB;AA6CD,SAAgB,uBAAuB,CACrC,OAA8B,EAAE;IAEhC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,gCAAkB,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAA,mCAAmB,EAAC,WAAW,CAAC,CAAC;IAClD,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC;IACrF,MAAM,KAAK,GAAG,QAAQ,IAAI,IAAA,wCAAqB,GAAE,CAAC;IAElD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAA,iDAA8B,GAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAA,gCAAa,EAAC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM;YACN,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,qCAAqB,EAAE,CAAC;IACxD,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAA,sCAAmB,EAAC,QAAQ,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,qBAAqB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAEnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC/D,CAAC;AAaD,SAAS,cAAc,CACrB,IAAoC,EACpC,MAAqB;IAErB,MAAM,QAAQ,GACZ,MAAM,KAAK,aAAa,CAAC,QAAQ;QAC/B,CAAC,CAAC,yBAAyB,yCAAyB,kDAAkD;QACtG,CAAC,CAAC,8EAA8E,CAAC;IAErF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iDAA8B,CAAC,eAAe;YACjD,OAAO,CACL,gFAAgF;gBAChF,yEAAyE,MAAM,CAC7E,IAAA,+CAA4B,GAAE,CAC/B,4DAA4D;gBAC7D,8EAA8E;gBAC9E,0DAA0D,CAC3D,CAAC;QACJ,KAAK,iDAA8B,CAAC,YAAY;YAC9C,OAAO,CACL,gFAAgF;gBAChF,gFAAgF;gBAChF,gCAAgC,QAAQ,EAAE,CAC3C,CAAC;QACJ,KAAK,iDAA8B,CAAC,gBAAgB;YAClD,OAAO,CACL,gFAAgF;gBAChF,qDAAqD,QAAQ,EAAE,CAChE,CAAC;QACJ,KAAK,iDAA8B,CAAC,cAAc,CAAC;QACnD,KAAK,iDAA8B,CAAC,eAAe,CAAC;QACpD,KAAK,iDAA8B,CAAC,eAAe;YACjD,OAAO,CACL,iFAAiF;gBACjF,0CAA0C,QAAQ,EAAE,CACrD,CAAC;QACJ,KAAK,iDAA8B,CAAC,wBAAwB;YAC1D,OAAO,CACL,+EAA+E;gBAC/E,oCAAoC,QAAQ,EAAE,CAC/C,CAAC;QACJ,KAAK,iDAA8B,CAAC,cAAc;YAChD,OAAO,CACL,iFAAiF;gBACjF,YAAY,QAAQ,EAAE,CACvB,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,SAAS,CAAC,0CAA0C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/runtime/license/store-license.d.ts

@@ -0,0 +1,18 @@
+import { type LicenseResolutionSuccess, type ResolveLicenseOptions } from './resolve-license';
+import type { LicenseVerificationFailureCode } from '@xemahq/license-verifier';
+export interface StoreLicenseSuccess {
+    readonly ok: true;
+    readonly resolution: LicenseResolutionSuccess;
+}
+export interface StoreLicenseFailure {
+    readonly ok: false;
+    readonly code: LicenseVerificationFailureCode;
+    readonly message: string;
+    readonly remediation: string;
+}
+export type StoreLicenseResult = StoreLicenseSuccess | StoreLicenseFailure;
+export interface StoreLicenseOptions extends ResolveLicenseOptions {
+    readonly credentialsFile?: string;
+}
+export declare function storeCustomerLicense(token: string, opts?: StoreLicenseOptions): StoreLicenseResult;
+//# sourceMappingURL=store-license.d.ts.map

package/dist/runtime/license/store-license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-license.d.ts","sourceRoot":"","sources":["../../../src/runtime/license/store-license.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAa/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAElB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAE3E,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAEhE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,mBAAwB,GAC7B,kBAAkB,CAiCpB"}

package/dist/runtime/license/store-license.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.storeCustomerLicense = storeCustomerLicense;
+const license_store_1 = require("./license-store");
+const resolve_license_1 = require("./resolve-license");
+const credentials_1 = require("../sources/credentials");
+function storeCustomerLicense(token, opts = {}) {
+    const candidate = (0, resolve_license_1.resolveEffectiveLicense)({
+        ...opts,
+        credentials: new credentials_1.CredentialResolver({ [license_store_1.LICENSE_ENV_VAR]: token }, new Map()),
+    });
+    if (!candidate.ok) {
+        return {
+            ok: false,
+            code: candidate.code,
+            message: candidate.message,
+            remediation: candidate.remediation,
+        };
+    }
+    if (candidate.source !== resolve_license_1.LicenseSource.Customer) {
+        throw new Error('license verification did not read the supplied token; refusing to store it');
+    }
+    (0, credentials_1.writeCredential)(license_store_1.LICENSE_ENV_VAR, token, opts.credentialsFile);
+    return { ok: true, resolution: candidate };
+}
+//# sourceMappingURL=store-license.js.map

package/dist/runtime/license/store-license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-license.js","sourceRoot":"","sources":["../../../src/runtime/license/store-license.ts"],"names":[],"mappings":";;AA0CA,oDAoCC;AA9ED,mDAAkD;AAClD,uDAK2B;AAC3B,wDAA6E;AAmC7E,SAAgB,oBAAoB,CAClC,KAAa,EACb,OAA4B,EAAE;IAO9B,MAAM,SAAS,GAAG,IAAA,yCAAuB,EAAC;QACxC,GAAG,IAAI;QACP,WAAW,EAAE,IAAI,gCAAkB,CACjC,EAAE,CAAC,+BAAe,CAAC,EAAE,KAAK,EAAE,EAC5B,IAAI,GAAG,EAAE,CACV;KACF,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,+BAAa,CAAC,QAAQ,EAAE,CAAC;QAKhD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,IAAA,6BAAe,EAAC,+BAAe,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC"}

package/dist/runtime/lock-loader.d.ts

@@ -1,4 +1,4 @@
-import { type DistributionLock } from '@xemahq/kernel-contracts/distribution';
+import { type DistributionLock, type RuntimeImagePlatform } from '@xemahq/kernel-contracts/distribution';
 import { type ArtifactResolution } from './paths';
 export interface LoadedDistributionLock {
     readonly lock: DistributionLock;
@@ -11,15 +11,12 @@ export interface LoadLockOptions {
 }
 export declare function loadDistributionLock(opts: LoadLockOptions): LoadedDistributionLock;
 export interface ImageEntry {
-    readonly biomeId: string;
-    readonly target: string;
     readonly imageRef: string;
     readonly contentHash: string;
-    readonly repo: string;
-    readonly path: string;
+    readonly requiredPlatforms: readonly RuntimeImagePlatform[];
 }
 export interface LoadedImageLock {
-    readonly imagesByBiome: ReadonlyMap<string, ImageEntry>;
+    readonly imagesByService: ReadonlyMap<string, ImageEntry>;
     readonly resolution: ArtifactResolution;
 }
 export declare function loadImageLock(opts: LoadLockOptions): LoadedImageLock;

package/dist/runtime/lock-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lock-loader.d.ts","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAErG,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAOrG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,eAAe,GAAG,sBAAsB,CASlF;AAOD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAE9B,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CA6BpE"}
+{"version":3,"file":"lock-loader.d.ts","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAE1B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAqD,KAAK,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAOrG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,eAAe,GAAG,sBAAsB,CASlF;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAQ7B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,oBAAoB,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,eAAe;IAQ9B,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAqBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAwBpE"}

package/dist/runtime/lock-loader.js

@@ -17,29 +17,35 @@ function loadDistributionLock(opts) {
 }
 function loadImageLock(opts) {
     const resolution = (0, paths_1.resolveImageLockPath)({ edition: opts.edition, explicit: opts.explicit });
-    const raw = readJson(resolution.path);
-    if (!Array.isArray(raw.images)) {
-        throw new Error(`Invalid images.lock.json at ${resolution.path}: missing images[] array.`);
-    }
-    const imagesByBiome = new Map();
-    for (const entry of raw.images) {
-        if (typeof entry.biomeId !== 'string' ||
-            typeof entry.imageRef !== 'string' ||
-            typeof entry.contentHash !== 'string') {
-            throw new Error(`Invalid images.lock.json at ${resolution.path}: an images[] entry is missing biomeId/imageRef/contentHash.`);
+    const lock = (0, distribution_1.parseImageLock)(readJson(resolution.path));
+    const subjectsByKey = new Map();
+    const imagesByService = new Map();
+    for (const subject of lock.subjects) {
+        subjectsByKey.set(subjectKey(subject.kind, subject.id), subject);
+        if (subject.kind === distribution_1.RuntimeImageSubjectKind.Service) {
+            imagesByService.set(subject.id, toImageEntry(subject));
         }
-        if (entry.target === 'server') {
-            imagesByBiome.set(entry.biomeId, {
-                biomeId: entry.biomeId,
-                target: entry.target,
-                imageRef: entry.imageRef,
-                contentHash: entry.contentHash,
-                repo: typeof entry.repo === 'string' ? entry.repo : '',
-                path: typeof entry.path === 'string' ? entry.path : '',
-            });
+    }
+    for (const binding of lock.platformServiceBindings) {
+        const subject = subjectsByKey.get(subjectKey(binding.subjectKind, binding.subjectId));
+        if (subject === undefined) {
+            throw new Error(`Invariant violated reading ${resolution.path}: platform service ` +
+                `"${binding.platformService}" binds the ${binding.subjectKind} subject ` +
+                `"${binding.subjectId}", which the validated lock does not declare.`);
         }
+        imagesByService.set(binding.platformService, toImageEntry(subject));
     }
-    return { imagesByBiome, resolution };
+    return { imagesByService, resolution };
+}
+function subjectKey(kind, id) {
+    return `${kind}:${id}`;
+}
+function toImageEntry(subject) {
+    return {
+        imageRef: subject.imageRef,
+        contentHash: subject.contentHash,
+        requiredPlatforms: subject.requiredPlatforms,
+    };
 }
 function readJson(path) {
     let text;

package/dist/runtime/lock-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"lock-loader.js","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":";;AAsBA,oDASC;AAsBD,sCA6BC;AAlFD,qCAAuC;AAEvC,wEAAqG;AAErG,mCAAqG;AAkBrG,SAAgB,oBAAoB,CAAC,IAAqB;IACxD,MAAM,UAAU,GAAG,IAAA,mCAA2B,EAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAA,oCAAqB,EAAC,GAAG,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAsBD,SAAgB,aAAa,CAAC,IAAqB;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAoB,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAyB,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,IAAI,2BAA2B,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAgD,EAAE,CAAC;QACzE,IACE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAClC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+BAA+B,UAAU,CAAC,IAAI,8DAA8D,CAC7G,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACtD,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"lock-loader.js","sourceRoot":"","sources":["../../src/runtime/lock-loader.ts"],"names":[],"mappings":";;AA6BA,oDASC;AAoDD,sCAwBC;AAlHD,qCAAuC;AAEvC,wEAO+C;AAE/C,mCAAqG;AAkBrG,SAAgB,oBAAoB,CAAC,IAAqB;IACxD,MAAM,UAAU,GAAG,IAAA,mCAA2B,EAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAA,oCAAqB,EAAC,GAAG,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAoDD,SAAgB,aAAa,CAAC,IAAqB;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAoB,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAEvD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC7D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,IAAI,KAAK,sCAAuB,CAAC,OAAO,EAAE,CAAC;YACrD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACtF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,8BAA8B,UAAU,CAAC,IAAI,qBAAqB;gBAChE,IAAI,OAAO,CAAC,eAAe,eAAe,OAAO,CAAC,WAAW,WAAW;gBACxE,IAAI,OAAO,CAAC,SAAS,+CAA+C,CACvE,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B,EAAE,EAAU;IAC3D,OAAO,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,OAA4B;IAChD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/runtime/native-process-group.d.ts

@@ -0,0 +1,46 @@
+export interface ProcessGroupMember {
+    readonly pid: number;
+    readonly processGroupId: number;
+}
+export interface ProcessIdentity {
+    readonly pid: number;
+    readonly processFingerprint: string;
+}
+export interface OwnedProcessGroup {
+    readonly processGroupId: number;
+    readonly members: readonly ProcessIdentity[];
+}
+export declare class OwnedProcessGroupLifecycle {
+    private readonly gracefulWaitMs;
+    private readonly verificationWaitMs;
+    private readonly control;
+    private readonly fingerprint;
+    private ownedGroup;
+    private closePromise;
+    constructor(ownedGroup: OwnedProcessGroup, gracefulWaitMs: number, verificationWaitMs: number, control?: AsyncProcessGroupControl, fingerprint?: (pid: number) => string);
+    refresh(): void;
+    close(): Promise<void>;
+}
+export interface AsyncProcessGroupControl {
+    readonly members: (processGroupId: number) => Promise<readonly number[]>;
+    readonly signal: (processGroupId: number, signal: NodeJS.Signals) => void | Promise<void>;
+    readonly wait: (milliseconds: number) => Promise<void>;
+}
+export interface SyncProcessGroupControl {
+    readonly members: (processGroupId: number) => readonly number[];
+    readonly signal: (processGroupId: number, signal: NodeJS.Signals) => void;
+    readonly wait: (milliseconds: number) => void;
+}
+export declare function assertNativeProcessGroupsSupported(platform?: NodeJS.Platform): void;
+export declare function parseProcessGroupTable(output: string): ProcessGroupMember[];
+export declare function processGroupIdForPid(pid: number): number;
+export declare function captureProcessFingerprint(pid: number): string;
+export declare function captureProcessFingerprintAsync(pid: number): Promise<string>;
+export declare function captureOwnedProcessGroup(leaderPid: number): OwnedProcessGroup;
+export declare function refreshOwnedProcessGroup(ownedGroup: OwnedProcessGroup): OwnedProcessGroup;
+export declare function processGroupMembers(processGroupId: number): number[];
+export declare function processGroupMembersAsync(processGroupId: number): Promise<number[]>;
+export declare function terminateProcessGroup(processGroupId: number, gracefulWaitMs: number, verificationWaitMs: number, control?: AsyncProcessGroupControl): Promise<void>;
+export declare function terminateOwnedProcessGroup(ownedGroup: OwnedProcessGroup, gracefulWaitMs: number, verificationWaitMs: number, control?: AsyncProcessGroupControl, fingerprint?: (pid: number) => string): Promise<void>;
+export declare function terminateProcessGroupSync(processGroupId: number, gracefulWaitMs: number, verificationWaitMs: number, control?: SyncProcessGroupControl): boolean;
+//# sourceMappingURL=native-process-group.d.ts.map

package/dist/runtime/native-process-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-process-group.d.ts","sourceRoot":"","sources":["../../src/runtime/native-process-group.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C;AAED,qBAAa,0BAA0B;IAMnC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAR9B,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,YAAY,CAA4B;gBAG9C,UAAU,EAAE,iBAAiB,EACZ,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,wBAA8C,EACvD,WAAW,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MACpB;IAKtB,OAAO,IAAI,IAAI;IAOf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAU9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,CAAC,OAAO,KACnB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,CACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,CAAC,OAAO,KACnB,IAAI,CAAC;IACV,QAAQ,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/C;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,IAAI,CAON;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAwB3E;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmBxD;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAa7D;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,CAiB7E;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,iBAAiB,GAC5B,iBAAiB,CAcnB;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE,CAWpE;AAED,wBAAsB,wBAAwB,CAC5C,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,EAAE,CAAC,CAOnB;AAED,wBAAsB,qBAAqB,CACzC,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,wBAA8C,GACtD,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,iBAAiB,EAC7B,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,wBAA8C,EACvD,WAAW,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAkC,GAC/D,OAAO,CAAC,IAAI,CAAC,CAuDf;AAED,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,GAAE,uBAA4C,GACpD,OAAO,CAqBT"}