@xioflow/kernel 0.3.0 → 0.5.0

package/dist/supervisor/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/supervisor/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAa,qBAAqB,EAAwC,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAmB,MAAM,mBAAmB,CAAC;AAG3F;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,OAAwB;IAC3E,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,YAA6C,CAAC;IAClD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC;YAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,WAAW,GAAG,YAAY,CAAC,sBAAsB,CAAC;IACpD,CAAC;IAED,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAExD,MAAM,EAAE,GAAc;QACpB,EAAE,EAAE,OAAO,CAAC,IAAI;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY,OAAO,CAAC,UAAU,EAAE;QACtC,gBAAgB,EAAE,UAAU,CAAC;YAC3B,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,WAAW;YACX,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;SAC3C,CAAC;QACF,iBAAiB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACjE,aAAa,EAAE,WAAW;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,mBAAmB;KAC5B,CAAC;IACF,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GACV,SAAS,KAAK,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1G,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,CACpE,yBAAyB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CACvE,CAAC;QAEF,IAAI,MAA+B,CAAC;QACpC,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACjC,MAAM,GAAG;gBACP,IAAI,EAAE,UAAU;gBAChB,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,eAAe,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;gBACzE,QAAQ;gBACR,iBAAiB;gBACjB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;YACF,MAAM,CAAC,QAAQ,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,MAAM,CAAC,QAAQ,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,MAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,IAAI,EAAE,EAAE,YAAY,EAAE,mBAAmB,QAAQ,EAAE,EAAE,CAAC;AAC9G,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,MAAuB,EAAE,WAAqB,EAAE,IAAY;IACxF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI;YAAE,SAAS;QAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,WAAW,GACf,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACzC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC7C,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;oBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAClC,OAAO,QAAQ,KAAK,CAAC,CAAC,IAAI,IAAI,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;gBACxD,CAAC,CAAC,CAAC;YACL,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,qBAAqB,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,0BAA0B,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC3G,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAChC,MAAuB,EACvB,QAAqB,EACrB,WAAqB,EACrB,YAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1H,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,2BAA2B,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC;IAEtH,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAI,CAAC,CAAC,OAAe,EAAE,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,WAAY,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,EAAE,aAAa,IAAI,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAyC,EACzC,WAA0B;IAE1B,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AACvE,CAAC"}

package/dist/supervisor/service.d.ts

@@ -0,0 +1,24 @@
+import { ExecutionDomain } from '../domain.js';
+import { PlatformDriver } from '../driver/types.js';
+import { ServiceSpec, ServiceHandle } from '../types.js';
+import { ProcessSupervisor } from './supervisor.js';
+export declare class ServiceSupervisor {
+    private domain;
+    private driver;
+    private supervisor;
+    private activeServices;
+    constructor(domain: ExecutionDomain, driver: PlatformDriver, supervisor: ProcessSupervisor);
+    startService(spec: ServiceSpec): Promise<ServiceHandle>;
+    private spawnInstance;
+    private setupReadiness;
+    private handleInstanceExit;
+    stopService(serviceId: string, graceMs?: number): Promise<void>;
+    /**
+     * 显式停止的唯一终态写入点：只有驱动确认整组已停且观测到根进程退出，才记录实例结果并释放 service 租约；
+     * 否则实例记为 indeterminate、租约保留，等待人工裁决（与 ProcessSupervisor 的 No premature release 一致）。
+     */
+    private finalizeStop;
+    close(): void;
+    private computeServiceFingerprint;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/supervisor/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/supervisor/service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,cAAc,EAA2C,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EACL,WAAW,EACX,aAAa,EAKd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA8BpD,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,UAAU;IALpB,OAAO,CAAC,cAAc,CAA0C;IAEhE,YACU,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,cAAc,EACtB,UAAU,EAAE,iBAAiB,EACnC;IAES,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAyGnE;YAEa,aAAa;IAoG3B,OAAO,CAAC,cAAc;YAyFR,kBAAkB;IAiKnB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,MAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAoDjF;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY;IAoEb,KAAK,IAAI,IAAI,CAWnB;IAED,OAAO,CAAC,yBAAyB;CAWlC"}

package/dist/supervisor/service.js

@@ -0,0 +1,588 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { PassThrough } from 'node:stream';
+import { setupStreamDrainer } from './drainer.js';
+export class ServiceSupervisor {
+    domain;
+    driver;
+    supervisor;
+    activeServices = new Map();
+    constructor(domain, driver, supervisor) {
+        this.domain = domain;
+        this.driver = driver;
+        this.supervisor = supervisor;
+    }
+    async startService(spec) {
+        const existing = this.activeServices.get(spec.serviceId);
+        if (existing) {
+            if (existing.status === 'starting' || existing.status === 'running') {
+                return existing.handle;
+            }
+            throw new Error(`Service "${spec.serviceId}" is already finalized with status "${existing.status}"`);
+        }
+        // 验证所属 Run（N3 契约）
+        const store = this.domain.getStore();
+        const callingRun = store.getRun(spec.runId);
+        if (!callingRun) {
+            throw new Error(`Run "${spec.runId}" is not registered in domain "${this.domain.domainId}".`);
+        }
+        if (callingRun.status === 'succeeded' ||
+            callingRun.status === 'failed' ||
+            callingRun.status === 'cancelled' ||
+            callingRun.status === 'indeterminate') {
+            throw new Error(`Cannot start service "${spec.serviceId}" for Run "${spec.runId}" because the Run is already finalized with status "${callingRun.status}".`);
+        }
+        // 申请 service 级独占资源租约 (重启间隙保持租约不被其他 op 抢占，ARCHITECTURE §3.8 / 裁决 7)
+        const serviceLeaseHolder = `service:${spec.serviceId}`;
+        if (spec.requiredResources && spec.requiredResources.length > 0) {
+            this.domain.allocateResources(serviceLeaseHolder, spec.requiredResources, 0);
+        }
+        const stdinStream = new PassThrough();
+        const stdoutStream = new PassThrough();
+        let readyResolve;
+        let readyReject;
+        const readyPromise = new Promise((resolve, reject) => {
+            readyResolve = resolve;
+            readyReject = reject;
+        });
+        let stopResolve;
+        const stopPromise = new Promise((resolve) => {
+            stopResolve = resolve;
+        });
+        let instanceExitResolve;
+        const onInstanceExit = new Promise((resolve) => {
+            instanceExitResolve = resolve;
+        });
+        const state = {
+            serviceId: spec.serviceId,
+            runId: spec.runId,
+            spec,
+            status: 'starting',
+            attemptCount: 0,
+            currentInstanceIndex: 1,
+            currentOpId: `${spec.serviceId}#1`,
+            currentProcessHandle: null,
+            stdinStream,
+            stdoutStream,
+            readyResolve,
+            readyReject,
+            readyPromise,
+            stopResolve,
+            stopPromise,
+            stopRequested: false,
+            restartTimer: null,
+            instanceExitResolve,
+            onInstanceExit,
+            handle: null,
+            instanceStartedAt: Date.now(),
+        };
+        state.handle = {
+            serviceId: spec.serviceId,
+            runId: spec.runId,
+            stdin: stdinStream,
+            stdout: stdoutStream,
+            ready: readyPromise,
+            stop: (graceMs) => this.stopService(spec.serviceId, graceMs),
+            get onInstanceExit() {
+                return state.onInstanceExit;
+            },
+            get currentInstanceOpId() {
+                return state.currentOpId;
+            },
+        };
+        this.activeServices.set(spec.serviceId, state);
+        try {
+            await this.spawnInstance(state, 1);
+        }
+        catch (err) {
+            state.status = 'failed';
+            if (spec.requiredResources && spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, spec.requiredResources);
+            }
+            this.activeServices.delete(spec.serviceId);
+            throw err;
+        }
+        return state.handle;
+    }
+    async spawnInstance(state, instanceIndex) {
+        state.currentInstanceIndex = instanceIndex;
+        state.currentOpId = `${state.serviceId}#${instanceIndex}`;
+        state.instanceStartedAt = Date.now();
+        state.pendingInstanceResult = undefined;
+        // 更新 onInstanceExit 为当前实例的 promise
+        state.onInstanceExit = new Promise((resolve) => {
+            state.instanceExitResolve = resolve;
+        });
+        const store = this.domain.getStore();
+        const inputFingerprint = this.computeServiceFingerprint(state.spec);
+        // 1. [意图登记] SQLite 写入 Operation (status: intent_registered, kind: service)
+        const op = {
+            id: state.currentOpId,
+            runId: state.runId,
+            kind: 'service',
+            name: `service-instance-${state.serviceId}-${instanceIndex}`,
+            inputFingerprint,
+            requiredResources: state.spec.requiredResources ?? [],
+            status: 'intent_registered',
+        };
+        store.registerOperationIntent(op, this.domain.domainId);
+        // 2. 写入 journal 事件
+        if (instanceIndex === 1) {
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_STARTED',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    instanceIndex,
+                    opId: state.currentOpId,
+                    spec: {
+                        serviceId: state.spec.serviceId,
+                        command: journalSafeCommand(state.spec.command),
+                        restart: state.spec.restart,
+                        readiness: state.spec.readiness,
+                    },
+                },
+                timestamp: new Date().toISOString(),
+            });
+        }
+        // 3. 驱动启动受管进程
+        const commandWithStream = {
+            ...state.spec.command,
+            stdinMode: 'stream',
+        };
+        const processHandle = await this.driver.spawn(commandWithStream);
+        state.currentProcessHandle = processHandle;
+        // 4. [登记执行身份] 推进为 active
+        store.updateOperationStatus(state.currentOpId, 'active', processHandle.identity);
+        // 5. 放行门管道
+        if (processHandle.releaseGate) {
+            processHandle.releaseGate();
+        }
+        // 6. 连接 stdin/stdout 管道
+        if (processHandle.stdin) {
+            state.stdinStream.pipe(processHandle.stdin, { end: false });
+        }
+        // 直通消费 stdout，内核内存不保留 Head+Tail (ARCHITECTURE §3.8 / 契约 #50)
+        processHandle.stdout.pipe(state.stdoutStream, { end: false });
+        // 7. 消费 stderr 按 B3 有界上限排空并转储
+        const maxStderrBytes = state.spec.maxStderrBytes ?? 10 * 1024 * 1024;
+        let stderrSpillPath;
+        if (state.spec.artifactsDir) {
+            try {
+                fs.mkdirSync(state.spec.artifactsDir, { recursive: true });
+            }
+            catch { }
+            stderrSpillPath = path.join(state.spec.artifactsDir, `${state.currentOpId}.stderr.log`);
+        }
+        const stderrDrainer = setupStreamDrainer(processHandle.stderr, maxStderrBytes, stderrSpillPath);
+        state.currentStderrDrainer = stderrDrainer;
+        // 8. 处理就绪探测 (仅在第 1 次启动时)
+        if (instanceIndex === 1) {
+            this.setupReadiness(state, processHandle);
+        }
+        // 9. 监听退出事件
+        const exitPromise = processHandle.onRootExit ?? processHandle.onExit;
+        exitPromise.then((exitResult) => {
+            this.handleInstanceExit(state, instanceIndex, exitResult).catch(() => { });
+        });
+    }
+    setupReadiness(state, processHandle) {
+        const store = this.domain.getStore();
+        const readiness = state.spec.readiness;
+        if (!readiness || readiness === 'spawned') {
+            state.status = 'running';
+            const readyAt = new Date().toISOString();
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_READY',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    instanceIndex: 1,
+                    opId: state.currentOpId,
+                    readyAt,
+                },
+                timestamp: readyAt,
+            });
+            state.readyResolve({
+                serviceId: state.serviceId,
+                instanceIndex: 1,
+                readyAt,
+            });
+            return;
+        }
+        if (typeof readiness === 'object' && readiness.stdoutLine) {
+            const regex = readiness.stdoutLine;
+            const timeoutMs = readiness.timeoutMs ?? 5000;
+            let matched = false;
+            const onData = (chunk) => {
+                if (matched)
+                    return;
+                const text = chunk.toString();
+                const lines = text.split('\n');
+                for (const line of lines) {
+                    if (regex.test(line)) {
+                        matched = true;
+                        processHandle.stdout.off('data', onData);
+                        if (timer)
+                            clearTimeout(timer);
+                        state.status = 'running';
+                        const readyAt = new Date().toISOString();
+                        store.recordEventAndTransitionState({
+                            domainId: this.domain.domainId,
+                            runId: state.runId,
+                            operationId: state.currentOpId,
+                            type: 'SERVICE_READY',
+                            payload: {
+                                serviceId: state.serviceId,
+                                runId: state.runId,
+                                instanceIndex: 1,
+                                opId: state.currentOpId,
+                                readyAt,
+                                matchedLine: line,
+                            },
+                            timestamp: readyAt,
+                        });
+                        state.readyResolve({
+                            serviceId: state.serviceId,
+                            instanceIndex: 1,
+                            readyAt,
+                            matchedLine: line,
+                        });
+                        break;
+                    }
+                }
+            };
+            processHandle.stdout.on('data', onData);
+            const timer = setTimeout(() => {
+                if (!matched) {
+                    matched = true;
+                    processHandle.stdout.off('data', onData);
+                    // 不能先把 status 置为 failed：stopService 会把 failed 当作已终结直接返回，进程就泄漏了。
+                    // 记下失败原因，由停止流水线在确认停止后把终态记为 failed。
+                    state.failureReason = 'readiness_timeout';
+                    const err = new Error(`Service "${state.serviceId}" readiness check timed out after ${timeoutMs}ms`);
+                    state.readyReject(err);
+                    this.stopService(state.serviceId, 500).catch(() => { });
+                }
+            }, timeoutMs);
+        }
+    }
+    async handleInstanceExit(state, instanceIndex, exitResult) {
+        const exitedIdentity = state.currentProcessHandle?.identity;
+        // 释放管道连接
+        if (state.currentProcessHandle?.stdin) {
+            try {
+                state.stdinStream.unpipe(state.currentProcessHandle.stdin);
+            }
+            catch { }
+        }
+        if (state.currentProcessHandle?.stdout) {
+            try {
+                state.currentProcessHandle.stdout.unpipe(state.stdoutStream);
+            }
+            catch { }
+        }
+        state.currentStderrDrainer?.forceFinalize();
+        const stderrData = state.currentStderrDrainer?.getResult();
+        const store = this.domain.getStore();
+        const serviceLeaseHolder = `service:${state.serviceId}`;
+        // 身份核验走驱动真实结论，不再写死 is_original_process；驱动核验失败时如实记为 cannot_determine
+        let identityVerification = 'cannot_determine';
+        if (exitedIdentity) {
+            try {
+                identityVerification = await this.driver.verifyIdentity(exitedIdentity);
+            }
+            catch {
+                identityVerification = 'cannot_determine';
+            }
+        }
+        // 更新当前 operation 结果
+        const op = store.getOperation(state.currentOpId);
+        if (op) {
+            const isSuccess = exitResult.exitCode === 0 && exitResult.signal === null;
+            const isTruncated = stderrData?.isTruncated ?? false;
+            const result = {
+                kind: 'process',
+                status: isSuccess ? 'succeeded' : 'failed',
+                exitCode: exitResult.exitCode,
+                signal: exitResult.signal,
+                stdout: '',
+                stderr: stderrData?.content ?? '',
+                isTruncated,
+                stderrTruncated: isTruncated,
+                stderrRef: !stderrData?.spillError ? stderrData?.outputRef : undefined,
+                outputRef: !stderrData?.spillError ? stderrData?.outputRef : undefined,
+                stderrBytes: stderrData?.bytesSeen ?? 0,
+                stderrHash: !stderrData?.spillError ? stderrData?.outputHash : undefined,
+                outputHash: !stderrData?.spillError ? stderrData?.outputHash : undefined,
+                durationMs: Date.now() - state.instanceStartedAt,
+                completedAt: new Date().toISOString(),
+                identityVerification,
+                ...(stderrData?.spillError ? { spillError: stderrData.spillError, stderrSpillError: stderrData.spillError } : {}),
+            };
+            if (state.stopRequested) {
+                // 显式停止：根进程退出不等于整组已停，结果交给 stopService 在拿到驱动停止结论后落盘
+                state.pendingInstanceResult = result;
+            }
+            else {
+                store.recordOperationResult(state.currentOpId, result);
+            }
+        }
+        state.instanceExitResolve?.(exitResult);
+        // 1. 如果是显式请求停止：终态、事件与租约统一由 stopService → finalizeStop 处理
+        if (state.stopRequested) {
+            return;
+        }
+        // 2. 如果 domain 已关闭
+        if (this.domain.isClosed()) {
+            state.status = 'stopped';
+            if (state.spec.requiredResources && state.spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, state.spec.requiredResources);
+            }
+            return;
+        }
+        // 3. 如果进程正常以 0 退出，不重启
+        if (exitResult.exitCode === 0 && exitResult.signal === null) {
+            state.status = 'stopped';
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_STOPPED',
+                payload: { serviceId: state.serviceId, runId: state.runId, reason: 'exit' },
+                timestamp: new Date().toISOString(),
+            });
+            if (state.spec.requiredResources && state.spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, state.spec.requiredResources);
+            }
+            state.stdoutStream.end();
+            return;
+        }
+        // 4. 异常退出：评估重启策略 (ARCHITECTURE §3.8 / D19)
+        const restart = state.spec.restart;
+        const shouldRestart = restart &&
+            restart !== 'never' &&
+            restart.policy === 'on-failure' &&
+            state.attemptCount < restart.maxRestarts;
+        if (shouldRestart) {
+            state.attemptCount++;
+            const newInstanceIndex = state.attemptCount + 1;
+            const newOpId = `${state.serviceId}#${newInstanceIndex}`;
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_RESTARTED',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    newInstanceIndex,
+                    newOpId,
+                    exitCode: exitResult.exitCode,
+                    signal: exitResult.signal,
+                    attempt: state.attemptCount,
+                },
+                timestamp: new Date().toISOString(),
+            });
+            // 重启间隙租约保持在 service 名下，不释放
+            state.restartTimer = setTimeout(async () => {
+                state.restartTimer = null;
+                if (state.stopRequested || this.domain.isClosed())
+                    return;
+                await this.spawnInstance(state, newInstanceIndex);
+            }, restart.backoffMs);
+        }
+        else {
+            // 超过重启上限或 restart: never
+            state.status = 'failed';
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_FAILED',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    maxRestartsExceeded: restart !== 'never' && state.attemptCount >= (restart?.maxRestarts ?? 0),
+                    exitCode: exitResult.exitCode,
+                    signal: exitResult.signal,
+                },
+                timestamp: new Date().toISOString(),
+            });
+            if (state.spec.requiredResources && state.spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, state.spec.requiredResources);
+            }
+            state.stdoutStream.end();
+        }
+    }
+    async stopService(serviceId, graceMs = 2000) {
+        const state = this.activeServices.get(serviceId);
+        if (!state)
+            return;
+        if (state.status === 'stopped' || state.status === 'failed')
+            return state.stopPromise;
+        // 停止流水线已在进行（例如 readiness 超时触发的停止）：加入同一个结果，避免重复终态写入
+        if (state.status === 'stopping')
+            return state.stopPromise;
+        state.stopRequested = true;
+        state.status = 'stopping';
+        if (state.restartTimer) {
+            clearTimeout(state.restartTimer);
+            state.restartTimer = null;
+            state.status = 'stopped';
+            const serviceLeaseHolder = `service:${state.serviceId}`;
+            if (state.spec.requiredResources && state.spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, state.spec.requiredResources);
+            }
+            const store = this.domain.getStore();
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_STOPPED',
+                payload: { serviceId: state.serviceId, runId: state.runId, reason: 'stopped' },
+                timestamp: new Date().toISOString(),
+            });
+            state.stdoutStream.end();
+            state.stopResolve();
+            return state.stopPromise;
+        }
+        if (state.currentProcessHandle) {
+            let stopRes;
+            try {
+                stopRes = await this.driver.terminate(state.currentProcessHandle.identity, graceMs);
+            }
+            catch (err) {
+                stopRes = { stopped: 'cannot_determine', scope: 'unknown', errorDetails: err?.message ?? String(err) };
+            }
+            // 有界等待根进程退出事实：停止未确认时根进程可能仍活着，不能无限挂起调用方
+            const rootExitBoundMs = 1000;
+            const rootExited = await Promise.race([
+                state.onInstanceExit.then(() => true),
+                new Promise((resolve) => setTimeout(() => resolve(false), rootExitBoundMs)),
+            ]);
+            this.finalizeStop(state, stopRes, rootExited);
+        }
+        else {
+            state.status = 'stopped';
+            state.stopResolve();
+        }
+        return state.stopPromise;
+    }
+    /**
+     * 显式停止的唯一终态写入点：只有驱动确认整组已停且观测到根进程退出，才记录实例结果并释放 service 租约；
+     * 否则实例记为 indeterminate、租约保留，等待人工裁决（与 ProcessSupervisor 的 No premature release 一致）。
+     */
+    finalizeStop(state, stopRes, rootExited) {
+        const store = this.domain.getStore();
+        const serviceLeaseHolder = `service:${state.serviceId}`;
+        const pending = state.pendingInstanceResult;
+        state.pendingInstanceResult = undefined;
+        const confirmed = stopRes.stopped === 'confirmed_stopped' && rootExited && pending !== undefined;
+        const now = new Date().toISOString();
+        if (confirmed) {
+            const failed = state.failureReason !== undefined;
+            // 与 ProcessSupervisor 的取消语义一致：显式停止的实例记为 cancelled（被信号终止不是"失败"），
+            // readiness 超时等内核判定的失败记为 failed
+            const finalResult = failed
+                ? { ...pending, status: 'failed' }
+                : { ...pending, status: 'cancelled', terminationReason: 'user_cancelled' };
+            store.recordOperationResult(state.currentOpId, finalResult);
+            state.status = failed ? 'failed' : 'stopped';
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: failed ? 'SERVICE_FAILED' : 'SERVICE_STOPPED',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    reason: failed ? state.failureReason : 'stopped',
+                },
+                timestamp: now,
+            });
+            if (state.spec.requiredResources && state.spec.requiredResources.length > 0) {
+                this.domain.internalReleaseResources(serviceLeaseHolder, state.spec.requiredResources);
+            }
+        }
+        else {
+            const op = store.getOperation(state.currentOpId);
+            if (op && op.status !== 'done') {
+                const indetResult = {
+                    kind: 'indeterminate',
+                    status: 'indeterminate',
+                    reason: `Service "${state.serviceId}" instance ${state.currentOpId} stop could not be confirmed (driver: ${stopRes.stopped}, rootExited: ${rootExited})${stopRes.errorDetails ? `: ${stopRes.errorDetails}` : ''}`,
+                    recoveryGuidance: 'Inspect residual processes manually, then adjudicate the instance operation before releasing the service leases.',
+                    durationMs: Date.now() - state.instanceStartedAt,
+                    completedAt: now,
+                };
+                store.recordOperationResult(state.currentOpId, indetResult, false);
+            }
+            state.status = 'failed';
+            store.recordEventAndTransitionState({
+                domainId: this.domain.domainId,
+                runId: state.runId,
+                operationId: state.currentOpId,
+                type: 'SERVICE_FAILED',
+                payload: {
+                    serviceId: state.serviceId,
+                    runId: state.runId,
+                    reason: 'stop_unconfirmed',
+                    stopped: stopRes.stopped,
+                    rootExited,
+                    ...(stopRes.residualPids ? { residualPids: stopRes.residualPids } : {}),
+                },
+                timestamp: now,
+            });
+            // 租约保留在 service 名下，不释放
+        }
+        state.stdoutStream.end();
+        state.stopResolve();
+    }
+    close() {
+        for (const state of this.activeServices.values()) {
+            if (state.restartTimer) {
+                clearTimeout(state.restartTimer);
+                state.restartTimer = null;
+            }
+            if (state.status === 'starting' || state.status === 'running') {
+                this.stopService(state.serviceId, 500).catch(() => { });
+            }
+        }
+        this.activeServices.clear();
+    }
+    computeServiceFingerprint(spec) {
+        const canonical = {
+            serviceId: spec.serviceId,
+            runId: spec.runId,
+            execPath: spec.command.execPath,
+            args: spec.command.args,
+            cwd: spec.command.cwd,
+            requiredResources: [...(spec.requiredResources || [])].sort(),
+        };
+        return crypto.createHash('sha256').update(JSON.stringify(canonical)).digest('hex');
+    }
+}
+/**
+ * The journal is an audit record on disk: env values, argument values and
+ * stdin can carry credentials (`--api-key …`, `GITHUB_TOKEN=…`), so only their
+ * shape is kept. `inputFingerprint` still identifies the exact command.
+ */
+function journalSafeCommand(command) {
+    return {
+        execPath: command.execPath,
+        cwd: command.cwd,
+        argCount: command.args.length,
+        envKeys: command.envWhiteList ? Object.keys(command.envWhiteList).sort() : undefined,
+        inheritEnv: command.inheritEnv,
+        hasStdin: command.stdin !== undefined,
+    };
+}
+//# sourceMappingURL=service.js.map