agl 1.0.17 → 21.0.2

package/dist_ts/classes.passkeymanager.d.ts

@@ -0,0 +1,34 @@
+import { type IAuthenticationBeginOptions, type IAuthenticationBeginResult, type IAuthenticationFinishOptions, type IAuthenticationResult, type IPasskeyManagerOptions, type ISetupBeginOptions, type ISetupBeginResult, type ISetupFinishOptions } from './interfaces.auth.js';
+export declare class PasskeyManager {
+    private readonly store;
+    private readonly relyingPartyName;
+    private readonly webAuthn;
+    private readonly now;
+    private readonly setupAttemptLimit;
+    private readonly setupAttemptWindowMs;
+    private readonly authenticationAttemptLimitPerPeer;
+    private readonly authenticationAttemptWindowMs;
+    private readonly maxActiveSetupCeremonies;
+    private readonly maxActiveAuthenticationCeremonies;
+    private readonly setupAttemptTimestamps;
+    private readonly authenticationVerificationAttemptTimestamps;
+    private readonly authenticationAttemptTimestampsByPeer;
+    private ceremonyCreationTail;
+    constructor(optionsArg: IPasskeyManagerOptions);
+    getAuthState(): Promise<{
+        state: 'setupRequired' | 'ready';
+        setupCodeExpired: boolean;
+    }>;
+    beginSetup(optionsArg: ISetupBeginOptions): Promise<ISetupBeginResult>;
+    finishSetup(optionsArg: ISetupFinishOptions): Promise<IAuthenticationResult>;
+    preflightSetupFinish(optionsArg: ISetupFinishOptions): Promise<void>;
+    beginAuthentication(optionsArg: IAuthenticationBeginOptions): Promise<IAuthenticationBeginResult>;
+    finishAuthentication(optionsArg: IAuthenticationFinishOptions): Promise<IAuthenticationResult>;
+    preflightAuthenticationFinish(optionsArg: IAuthenticationFinishOptions): Promise<void>;
+    private currentTime;
+    private recordSetupAttempt;
+    private recordAuthenticationAttempt;
+    private assertCeremonyCapacity;
+    private assertConfiguredOrigin;
+    private withCeremonyCreationLock;
+}

package/dist_ts/classes.passkeymanager.js

@@ -0,0 +1,456 @@
+import * as plugins from './plugins.js';
+import { AuthError, } from './interfaces.auth.js';
+const setupCeremonyLifetimeMs = 5 * 60 * 1000;
+const authenticationCeremonyLifetimeMs = 2 * 60 * 1000;
+const maxAuthenticationVerificationAttemptsPerWindow = 128;
+const base64Url32BytePattern = /^[A-Za-z0-9_-]{43}$/;
+const defaultWebAuthn = {
+    generateRegistrationOptions: plugins.simplewebauthnServer.generateRegistrationOptions,
+    verifyRegistrationResponse: plugins.simplewebauthnServer.verifyRegistrationResponse,
+    generateAuthenticationOptions: plugins.simplewebauthnServer.generateAuthenticationOptions,
+    verifyAuthenticationResponse: plugins.simplewebauthnServer.verifyAuthenticationResponse,
+};
+const requirePositiveLimit = (valueArg, labelArg, maximumArg = 10_000) => {
+    if (!Number.isSafeInteger(valueArg) || valueArg < 1 || valueArg > maximumArg) {
+        throw new Error(`${labelArg} must be a positive safe integer no greater than ${maximumArg}.`);
+    }
+    return valueArg;
+};
+const requirePeerId = (peerIdArg) => {
+    if (typeof peerIdArg !== 'string'
+        || peerIdArg.length === 0
+        || peerIdArg.length > 512
+        || peerIdArg.trim() !== peerIdArg) {
+        throw new AuthError('peer_mismatch', 'The connection identity is malformed.');
+    }
+    return peerIdArg;
+};
+const requireOrigin = (originArg) => {
+    if (typeof originArg !== 'string' || originArg.length === 0 || originArg.length > 2048) {
+        throw new AuthError('origin_mismatch', 'The request origin is malformed.');
+    }
+    try {
+        const origin = new URL(originArg);
+        if (origin.origin !== originArg
+            || (origin.protocol !== 'http:' && origin.protocol !== 'https:')
+            || origin.username.length > 0
+            || origin.password.length > 0
+            || origin.pathname !== '/'
+            || origin.search.length > 0
+            || origin.hash.length > 0) {
+            throw new Error('not an origin');
+        }
+    }
+    catch {
+        throw new AuthError('origin_mismatch', 'The request origin is malformed.');
+    }
+    return originArg;
+};
+const requireCeremonyId = (ceremonyIdArg) => {
+    if (typeof ceremonyIdArg !== 'string' || !base64Url32BytePattern.test(ceremonyIdArg)) {
+        throw new AuthError('ceremony_invalid', 'The WebAuthn ceremony identifier is malformed.');
+    }
+    return ceremonyIdArg;
+};
+const randomBase64Url = () => plugins.crypto.randomBytes(32).toString('base64url');
+const base64UrlValuesEqual = (leftArg, rightArg) => {
+    if (!base64Url32BytePattern.test(leftArg) || !base64Url32BytePattern.test(rightArg)) {
+        return false;
+    }
+    const left = Buffer.from(leftArg, 'base64url');
+    const right = Buffer.from(rightArg, 'base64url');
+    return left.byteLength === right.byteLength && plugins.crypto.timingSafeEqual(left, right);
+};
+export class PasskeyManager {
+    store;
+    relyingPartyName;
+    webAuthn;
+    now;
+    setupAttemptLimit;
+    setupAttemptWindowMs;
+    authenticationAttemptLimitPerPeer;
+    authenticationAttemptWindowMs;
+    maxActiveSetupCeremonies;
+    maxActiveAuthenticationCeremonies;
+    setupAttemptTimestamps = [];
+    authenticationVerificationAttemptTimestamps = [];
+    authenticationAttemptTimestampsByPeer = new Map();
+    ceremonyCreationTail = Promise.resolve();
+    constructor(optionsArg) {
+        this.store = optionsArg.store;
+        this.relyingPartyName = optionsArg.relyingPartyName ?? 'Agent Gateway Layer';
+        if (this.relyingPartyName.trim().length === 0 || this.relyingPartyName.length > 128) {
+            throw new Error('relyingPartyName must contain 1-128 characters.');
+        }
+        this.webAuthn = optionsArg.webAuthn ?? defaultWebAuthn;
+        this.now = optionsArg.now ?? (() => new Date());
+        this.setupAttemptLimit = requirePositiveLimit(optionsArg.setupAttemptLimit ?? 10, 'setupAttemptLimit');
+        this.setupAttemptWindowMs = requirePositiveLimit(optionsArg.setupAttemptWindowMs ?? 60_000, 'setupAttemptWindowMs', 24 * 60 * 60 * 1000);
+        this.authenticationAttemptLimitPerPeer = requirePositiveLimit(optionsArg.authenticationAttemptLimitPerPeer ?? 6, 'authenticationAttemptLimitPerPeer');
+        this.authenticationAttemptWindowMs = requirePositiveLimit(optionsArg.authenticationAttemptWindowMs ?? 60_000, 'authenticationAttemptWindowMs', 24 * 60 * 60 * 1000);
+        this.maxActiveSetupCeremonies = requirePositiveLimit(optionsArg.maxActiveSetupCeremonies ?? 16, 'maxActiveSetupCeremonies');
+        this.maxActiveAuthenticationCeremonies = requirePositiveLimit(optionsArg.maxActiveAuthenticationCeremonies ?? 64, 'maxActiveAuthenticationCeremonies');
+    }
+    async getAuthState() {
+        const state = await this.store.getState();
+        return {
+            state: state.authState,
+            setupCodeExpired: state.setup !== null
+                && state.setup.expiresAt.getTime() <= this.currentTime().getTime(),
+        };
+    }
+    async beginSetup(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        return this.withCeremonyCreationLock(async () => {
+            const now = this.currentTime();
+            await this.assertCeremonyCapacity('setup', now);
+            const state = await this.store.getState();
+            this.assertConfiguredOrigin(origin, state.config.publicOrigin);
+            // the attempt budget must burn BEFORE the code is checked — a limiter
+            // that only counts correct codes throttles the legitimate operator and
+            // leaves guessing unmetered
+            this.recordSetupAttempt(now);
+            await this.store.assertSetupAuthority(optionsArg.setupCode, undefined, now);
+            if (!state.setup) {
+                throw new AuthError('setup_unavailable', 'Passkey setup is no longer available.');
+            }
+            const registrationOptions = await this.webAuthn.generateRegistrationOptions({
+                rpName: this.relyingPartyName,
+                rpID: state.config.rpId,
+                userName: 'agl',
+                userDisplayName: 'agl',
+                userID: Buffer.from(state.webauthnUserId, 'base64url'),
+                timeout: setupCeremonyLifetimeMs,
+                attestationType: 'none',
+                excludeCredentials: [],
+                authenticatorSelection: {
+                    residentKey: 'required',
+                    requireResidentKey: true,
+                    userVerification: 'required',
+                },
+            });
+            const ceremonyId = randomBase64Url();
+            const expiresAt = new Date(Math.min(now.getTime() + setupCeremonyLifetimeMs, state.setup.expiresAt.getTime()));
+            const ceremony = {
+                id: ceremonyId,
+                kind: 'setup',
+                state: 'pending',
+                peerId,
+                challenge: registrationOptions.challenge,
+                origin,
+                rpId: state.config.rpId,
+                userId: state.webauthnUserId,
+                setupGeneration: state.setup.generation,
+                setupHash: state.setup.hash,
+                createdAt: now,
+                expiresAt,
+            };
+            await this.store.createCeremony(ceremony);
+            return { ceremonyId, options: registrationOptions };
+        });
+    }
+    async finishSetup(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        const ceremonyId = requireCeremonyId(optionsArg.ceremonyId);
+        const now = this.currentTime();
+        const stateBefore = await this.store.getState();
+        this.assertConfiguredOrigin(origin, stateBefore.config.publicOrigin);
+        // burn the attempt budget BEFORE consuming the ceremony: an exhausted
+        // budget must reject without destroying a still-valid ceremony, otherwise
+        // the user's authenticator keeps a credential the store never accepted
+        this.recordSetupAttempt(now);
+        const ceremony = await this.store.consumeCeremony({
+            ceremonyId,
+            kind: 'setup',
+            peerId,
+            origin,
+            rpId: stateBefore.config.rpId,
+            userId: stateBefore.webauthnUserId,
+            now,
+        });
+        if (ceremony.kind !== 'setup'
+            || typeof ceremony.setupGeneration !== 'string'
+            || typeof ceremony.setupHash !== 'string') {
+            throw new AuthError('ceremony_invalid', 'The WebAuthn ceremony has the wrong kind.');
+        }
+        const setupCeremony = {
+            ...ceremony,
+            kind: 'setup',
+            setupGeneration: ceremony.setupGeneration,
+            setupHash: ceremony.setupHash,
+        };
+        await this.store.assertSetupAuthority(optionsArg.setupCode, setupCeremony, now);
+        let verification;
+        try {
+            verification = await this.webAuthn.verifyRegistrationResponse({
+                response: optionsArg.response,
+                expectedChallenge: ceremony.challenge,
+                expectedOrigin: ceremony.origin,
+                expectedRPID: ceremony.rpId,
+                requireUserPresence: true,
+                requireUserVerification: true,
+            });
+        }
+        catch (errorArg) {
+            throw new AuthError('verification_failed', 'Passkey registration verification failed.', {
+                cause: errorArg,
+            });
+        }
+        if (!verification.verified
+            || !verification.registrationInfo.userVerified
+            || verification.registrationInfo.credential.id !== optionsArg.response.id) {
+            throw new AuthError('verification_failed', 'Passkey registration verification failed.');
+        }
+        const verifiedCredential = verification.registrationInfo.credential;
+        const storedCredential = {
+            id: verifiedCredential.id,
+            publicKey: Buffer.from(verifiedCredential.publicKey).toString('base64url'),
+            counter: verifiedCredential.counter,
+            transports: [...(verifiedCredential.transports ?? optionsArg.response.response.transports ?? [])],
+            deviceType: verification.registrationInfo.credentialDeviceType,
+            backedUp: verification.registrationInfo.credentialBackedUp,
+            createdAt: now,
+            counterUpdateId: randomBase64Url(),
+        };
+        await this.store.commitFirstCredential(setupCeremony, storedCredential);
+        return { authenticated: true, credentialId: storedCredential.id };
+    }
+    async preflightSetupFinish(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        const ceremonyId = requireCeremonyId(optionsArg.ceremonyId);
+        const now = this.currentTime();
+        const state = await this.store.getState();
+        this.assertConfiguredOrigin(origin, state.config.publicOrigin);
+        const ceremony = await this.store.assertPendingCeremony({
+            ceremonyId,
+            kind: 'setup',
+            peerId,
+            origin,
+            rpId: state.config.rpId,
+            userId: state.webauthnUserId,
+            now,
+        });
+        if (ceremony.kind !== 'setup'
+            || typeof ceremony.setupGeneration !== 'string'
+            || typeof ceremony.setupHash !== 'string') {
+            throw new AuthError('ceremony_invalid', 'The WebAuthn ceremony has the wrong kind.');
+        }
+        // preflight is the first place a wrong code arrives in the controller
+        // flow, so it must burn the attempt budget too
+        this.recordSetupAttempt(now);
+        await this.store.assertSetupAuthority(optionsArg.setupCode, {
+            ...ceremony,
+            kind: 'setup',
+            setupGeneration: ceremony.setupGeneration,
+            setupHash: ceremony.setupHash,
+        }, now);
+    }
+    async beginAuthentication(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        return this.withCeremonyCreationLock(async () => {
+            const now = this.currentTime();
+            await this.assertCeremonyCapacity('authentication', now);
+            const state = await this.store.getState();
+            this.assertConfiguredOrigin(origin, state.config.publicOrigin);
+            if (state.authState !== 'ready' || state.credentials.length === 0) {
+                throw new AuthError('setup_unavailable', 'Passkey authentication is not configured.');
+            }
+            this.recordAuthenticationAttempt(now, peerId, false);
+            const authenticationOptions = await this.webAuthn.generateAuthenticationOptions({
+                rpID: state.config.rpId,
+                timeout: authenticationCeremonyLifetimeMs,
+                userVerification: 'required',
+            });
+            const ceremonyId = randomBase64Url();
+            const ceremony = {
+                id: ceremonyId,
+                kind: 'authentication',
+                state: 'pending',
+                peerId,
+                challenge: authenticationOptions.challenge,
+                origin,
+                rpId: state.config.rpId,
+                userId: state.webauthnUserId,
+                createdAt: now,
+                expiresAt: new Date(now.getTime() + authenticationCeremonyLifetimeMs),
+            };
+            await this.store.createCeremony(ceremony);
+            return { ceremonyId, options: authenticationOptions };
+        });
+    }
+    async finishAuthentication(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        const ceremonyId = requireCeremonyId(optionsArg.ceremonyId);
+        const now = this.currentTime();
+        const state = await this.store.getState();
+        this.assertConfiguredOrigin(origin, state.config.publicOrigin);
+        const ceremony = await this.store.consumeCeremony({
+            ceremonyId,
+            kind: 'authentication',
+            peerId,
+            origin,
+            rpId: state.config.rpId,
+            userId: state.webauthnUserId,
+            now,
+        });
+        if (state.authState !== 'ready' || state.credentials.length === 0) {
+            throw new AuthError('setup_unavailable', 'Passkey authentication is not configured.');
+        }
+        const userHandle = optionsArg.response.response.userHandle;
+        if (typeof userHandle !== 'string'
+            || !base64UrlValuesEqual(userHandle, state.webauthnUserId)) {
+            throw new AuthError('verification_failed', 'The passkey user handle is invalid.');
+        }
+        const credential = state.credentials.find((entry) => entry.id === optionsArg.response.id);
+        if (!credential) {
+            throw new AuthError('credential_not_found', 'The passkey credential is unknown.');
+        }
+        this.recordAuthenticationAttempt(now, peerId, true);
+        let verification;
+        try {
+            verification = await this.webAuthn.verifyAuthenticationResponse({
+                response: optionsArg.response,
+                expectedChallenge: ceremony.challenge,
+                expectedOrigin: ceremony.origin,
+                expectedRPID: ceremony.rpId,
+                credential: {
+                    id: credential.id,
+                    publicKey: Buffer.from(credential.publicKey, 'base64url'),
+                    counter: credential.counter,
+                    transports: [...credential.transports],
+                },
+                requireUserVerification: true,
+                advancedFIDOConfig: {
+                    userVerification: 'required',
+                },
+            });
+        }
+        catch (errorArg) {
+            throw new AuthError('verification_failed', 'Passkey authentication verification failed.', {
+                cause: errorArg,
+            });
+        }
+        if (!verification.verified
+            || !verification.authenticationInfo.userVerified
+            || verification.authenticationInfo.credentialID !== credential.id
+            || verification.authenticationInfo.origin !== ceremony.origin
+            || verification.authenticationInfo.rpID !== ceremony.rpId) {
+            throw new AuthError('verification_failed', 'Passkey authentication verification failed.');
+        }
+        await this.store.updateCounter(credential.id, credential.counter, verification.authenticationInfo.newCounter);
+        return { authenticated: true, credentialId: credential.id };
+    }
+    async preflightAuthenticationFinish(optionsArg) {
+        const peerId = requirePeerId(optionsArg.peerId);
+        const origin = requireOrigin(optionsArg.origin);
+        const ceremonyId = requireCeremonyId(optionsArg.ceremonyId);
+        const now = this.currentTime();
+        const state = await this.store.getState();
+        this.assertConfiguredOrigin(origin, state.config.publicOrigin);
+        if (state.authState !== 'ready' || state.credentials.length === 0) {
+            throw new AuthError('setup_unavailable', 'Passkey authentication is not configured.');
+        }
+        const userHandle = optionsArg.response.response.userHandle;
+        if (typeof userHandle !== 'string'
+            || !base64UrlValuesEqual(userHandle, state.webauthnUserId)) {
+            throw new AuthError('verification_failed', 'The passkey user handle is invalid.');
+        }
+        if (!state.credentials.some((entry) => entry.id === optionsArg.response.id)) {
+            throw new AuthError('credential_not_found', 'The passkey credential is unknown.');
+        }
+        await this.store.assertPendingCeremony({
+            ceremonyId,
+            kind: 'authentication',
+            peerId,
+            origin,
+            rpId: state.config.rpId,
+            userId: state.webauthnUserId,
+            now,
+        });
+    }
+    currentTime() {
+        const now = this.now();
+        if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {
+            throw new Error('The PasskeyManager clock returned an invalid Date.');
+        }
+        return new Date(now);
+    }
+    recordSetupAttempt(nowArg) {
+        const cutoff = nowArg.getTime() - this.setupAttemptWindowMs;
+        while (this.setupAttemptTimestamps.length > 0
+            && this.setupAttemptTimestamps[0] <= cutoff) {
+            this.setupAttemptTimestamps.shift();
+        }
+        if (this.setupAttemptTimestamps.length >= this.setupAttemptLimit) {
+            throw new AuthError('rate_limited', 'Too many setup attempts. Try again later.');
+        }
+        this.setupAttemptTimestamps.push(nowArg.getTime());
+    }
+    recordAuthenticationAttempt(nowArg, peerIdArg, includeGlobalVerificationLimitArg) {
+        const now = nowArg.getTime();
+        const cutoff = now - this.authenticationAttemptWindowMs;
+        while (this.authenticationVerificationAttemptTimestamps.length > 0
+            && this.authenticationVerificationAttemptTimestamps[0] <= cutoff) {
+            this.authenticationVerificationAttemptTimestamps.shift();
+        }
+        for (const [peerId, timestamps] of this.authenticationAttemptTimestampsByPeer) {
+            while (timestamps.length > 0 && timestamps[0] <= cutoff)
+                timestamps.shift();
+            if (timestamps.length === 0)
+                this.authenticationAttemptTimestampsByPeer.delete(peerId);
+        }
+        const peerTimestamps = this.authenticationAttemptTimestampsByPeer.get(peerIdArg) ?? [];
+        if (peerTimestamps.length >= this.authenticationAttemptLimitPerPeer) {
+            throw new AuthError('rate_limited', 'Too many authentication attempts. Try again later.');
+        }
+        if (includeGlobalVerificationLimitArg
+            && this.authenticationVerificationAttemptTimestamps.length
+                >= maxAuthenticationVerificationAttemptsPerWindow) {
+            throw new AuthError('rate_limited', 'Too many passkey verification attempts. Try again later.');
+        }
+        if (peerTimestamps.length === 0
+            && this.authenticationAttemptTimestampsByPeer.size
+                >= this.maxActiveAuthenticationCeremonies * 2) {
+            throw new AuthError('rate_limited', 'Too many authentication peers. Try again later.');
+        }
+        if (includeGlobalVerificationLimitArg) {
+            this.authenticationVerificationAttemptTimestamps.push(now);
+        }
+        peerTimestamps.push(now);
+        this.authenticationAttemptTimestampsByPeer.set(peerIdArg, peerTimestamps);
+    }
+    async assertCeremonyCapacity(kindArg, nowArg) {
+        const maximum = kindArg === 'setup'
+            ? this.maxActiveSetupCeremonies
+            : this.maxActiveAuthenticationCeremonies;
+        const active = await this.store.countActiveCeremonies(kindArg, nowArg);
+        if (active >= maximum) {
+            throw new AuthError('ceremony_limit', `Too many active ${kindArg} ceremonies.`);
+        }
+    }
+    assertConfiguredOrigin(actualArg, expectedArg) {
+        if (actualArg !== expectedArg) {
+            throw new AuthError('origin_mismatch', 'The request origin is not trusted.');
+        }
+    }
+    async withCeremonyCreationLock(functionArg) {
+        const previous = this.ceremonyCreationTail;
+        let release;
+        this.ceremonyCreationTail = new Promise((resolve) => {
+            release = resolve;
+        });
+        await previous;
+        try {
+            return await functionArg();
+        }
+        finally {
+            release();
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/classes.processinspection.d.ts

@@ -0,0 +1,50 @@
+export interface IControllerProcessIdentity {
+    pid: number;
+    processGroupId: number;
+    processGroupLeader: boolean;
+    arguments: string[];
+    argumentsTruncated?: boolean;
+    fingerprint: string;
+}
+export interface IControllerProcessCandidate {
+    identity: IControllerProcessIdentity;
+    command: '__serve' | 'foreground';
+    port: number;
+}
+export interface IControllerDataWriterProcessCandidate {
+    kind: 'controller' | 'temp-password' | 'flex-child';
+    identity: IControllerProcessIdentity;
+}
+export declare const readControllerProcessIdentity: (pidArg: number) => Promise<IControllerProcessIdentity | null>;
+export declare const readProcessGroupMemberPids: (processGroupIdArg: number) => Promise<number[]>;
+export declare const processIdentityHasFileArgument: (identityArg: IControllerProcessIdentity, filePathArg: string, optionsArg?: {
+    allowMissingAbsolutePath?: boolean;
+}) => Promise<boolean>;
+export declare const processIdentityHasCliCommand: (identityArg: IControllerProcessIdentity, cliPathArg: string, commandArg: "__serve" | "__upgrade-worker" | "upgrade" | "start" | "foreground" | "temp-password", optionsArg?: {
+    allowMissingAbsolutePath?: boolean;
+}) => Promise<boolean>;
+export declare const listControllerProcessesForCli: (cliPathArg: string) => Promise<IControllerProcessCandidate[]>;
+export declare const listControllerDataWriterProcessesForCli: (cliPathArg: string, optionsArg?: {
+    includeInstalledPackagePaths?: boolean;
+}) => Promise<IControllerDataWriterProcessCandidate[]>;
+export declare const listControllerDataWriterProcessesForCliPaths: (cliPathsArg: readonly string[], optionsArg?: {
+    includeInstalledPackagePaths?: boolean;
+}) => Promise<IControllerDataWriterProcessCandidate[]>;
+export declare const inspectControllerProcess: (optionsArg: {
+    pid: number;
+    cliPath: string;
+    port: number;
+    expectedProcessGroupId?: number;
+    expectedFingerprint?: string;
+    command: "__serve" | "foreground";
+}) => Promise<IControllerProcessIdentity | null>;
+export declare const signalVerifiedControllerProcess: (optionsArg: {
+    pid: number;
+    cliPath: string;
+    port: number;
+    expectedProcessGroupId: number;
+    expectedFingerprint: string;
+    signal: NodeJS.Signals;
+    signalProcessGroup: boolean;
+    command: "__serve" | "foreground";
+}) => Promise<void>;