cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/launcher/managed-service-process.js

@@ -0,0 +1,108 @@
+import path from 'node:path';
+const SAFE_INHERITED_ENVIRONMENT = [
+    'ComSpec',
+    'LANG',
+    'LC_ALL',
+    'LC_CTYPE',
+    'OS',
+    'PATH',
+    'PATHEXT',
+    'SystemRoot',
+    'TEMP',
+    'TMP',
+    'TMPDIR',
+    'TZ',
+    'WINDIR',
+];
+function exited(child) {
+    return child.exitCode !== null || child.signalCode !== null;
+}
+async function waitForExit(child, timeoutMs) {
+    if (exited(child))
+        return true;
+    return await new Promise(resolve => {
+        const finish = (value) => {
+            clearTimeout(timeout);
+            child.removeListener('exit', onExit);
+            child.removeListener('close', onExit);
+            resolve(value);
+        };
+        const onExit = () => finish(true);
+        const timeout = setTimeout(() => finish(false), timeoutMs);
+        child.once('exit', onExit);
+        child.once('close', onExit);
+    });
+}
+export async function terminateManagedServiceChild(child, timeouts = { gracefulMs: 2_000, forceMs: 1_000 }) {
+    if (child.pid === undefined || exited(child))
+        return;
+    child.kill('SIGTERM');
+    if (await waitForExit(child, timeouts.gracefulMs))
+        return;
+    child.kill('SIGKILL');
+    if (!await waitForExit(child, timeouts.forceMs))
+        throw new Error('managed service child did not exit after SIGKILL');
+}
+export async function runManagedServiceChildAction(input) {
+    if (input.signal?.aborted)
+        throw input.signal.reason ?? new Error('cancelled');
+    const child = input.spawn(input.executable, [...input.arguments], {
+        cwd: input.cwd,
+        env: input.environment,
+        stdio: 'ignore',
+    });
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        const cleanup = () => {
+            clearTimeout(timeout);
+            input.signal?.removeEventListener('abort', abort);
+            child.removeListener('error', error);
+            child.removeListener('exit', exit);
+        };
+        const fail = (reason) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            void terminateManagedServiceChild(child, input.terminationTimeouts).then(() => reject(reason), cleanupError => reject(new AggregateError([reason, cleanupError], 'managed service child cleanup failed')));
+        };
+        const error = (reason) => fail(reason);
+        const exit = (code) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            resolve(code ?? -1);
+        };
+        const abort = () => fail(input.signal?.reason ?? new Error('cancelled'));
+        const timeout = setTimeout(() => fail(new Error('managed service child timed out')), input.timeoutMs);
+        input.signal?.addEventListener('abort', abort, { once: true });
+        child.once('error', error);
+        child.once('exit', exit);
+        if (input.signal?.aborted)
+            abort();
+    });
+}
+export function managedServiceHome(homeDir, pluginId, serviceId) {
+    return path.join(homeDir, 'managed-services', pluginId, serviceId);
+}
+export function managedServiceGenerationDirectory(serviceHome, serviceGeneration) {
+    return path.join(serviceHome, serviceGeneration);
+}
+export function managedServiceEnvironment(serviceHome, base = process.env, declared = {}) {
+    const environment = {};
+    for (const key of SAFE_INHERITED_ENVIRONMENT) {
+        if (base[key] !== undefined)
+            environment[key] = base[key];
+    }
+    for (const [key, value] of Object.entries(base)) {
+        if (key.startsWith('LC_') && value !== undefined)
+            environment[key] = value;
+    }
+    Object.assign(environment, declared);
+    environment.HOME = serviceHome;
+    if (process.platform === 'win32')
+        environment.USERPROFILE = serviceHome;
+    return environment;
+}
+//# sourceMappingURL=managed-service-process.js.map

package/dist/src/launcher/managed-service-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-process.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-process.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,MAAM,0BAA0B,GAAG;IACjC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,MAAM;IACN,SAAS;IACT,YAAY;IACZ,MAAM;IACN,KAAK;IACL,QAAQ;IACR,IAAI;IACJ,QAAQ;CACA,CAAA;AAOV,SAAS,MAAM,CAAC,KAAmB;IACjC,OAAO,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAA;AAC7D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,SAAiB;IAC/D,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC9B,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QACjC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;YACtC,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACpC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACrC,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAA;QAC1D,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAmB,EACnB,WAAmD,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE;IAExF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC;QAAE,OAAM;IACpD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrB,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAM;IACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrB,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KASlD;IACC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE;QAChE,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,WAAW;QACtB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACjD,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YACpC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACpC,CAAC,CAAA;QACD,MAAM,IAAI,GAAG,CAAC,MAAe,EAAQ,EAAE;YACrC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,EAAE,CAAA;YACT,KAAK,4BAA4B,CAAC,KAAK,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC,IAAI,CACtE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EACpB,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,sCAAsC,CAAC,CAAC,CAC3G,CAAA;QACH,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,CAAC,MAAa,EAAQ,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAQ,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,EAAE,CAAA;YACT,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;QACrB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;QAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QACrG,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACxB,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,QAAgB,EAChB,SAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,WAAmB,EAAE,iBAAyB;IAC9F,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,WAAmB,EACnB,OAA0B,OAAO,CAAC,GAAG,EACrC,WAA8B,EAAE;IAEhC,MAAM,WAAW,GAAsB,EAAE,CAAA;IACzC,KAAK,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC5E,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACpC,WAAW,CAAC,IAAI,GAAG,WAAW,CAAA;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,WAAW,CAAC,WAAW,GAAG,WAAW,CAAA;IACvE,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/src/launcher/managed-service-runtime-broker.d.ts

@@ -0,0 +1,18 @@
+import type { ManagedServiceBoundClientV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { ManagedServiceClientState, ManagedServiceRecord } from './managed-service-runtime-record.js';
+export declare class ManagedServiceRuntimeBroker {
+    private readonly records;
+    private readonly registrations;
+    private readonly fetch;
+    constructor(records: Map<string, ManagedServiceRecord>, registrations: Map<string, ManagedServiceRecord>, fetch: typeof globalThis.fetch);
+    boundClient(state: ManagedServiceClientState): ManagedServiceBoundClientV1;
+    private acquire;
+    private currentLease;
+    private invoke;
+    private authorizationHeaders;
+    private materialize;
+    private materializationCurrent;
+    private release;
+    private releaseHandle;
+}
+//# sourceMappingURL=managed-service-runtime-broker.d.ts.map

package/dist/src/launcher/managed-service-runtime-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-broker.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-broker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,2BAA2B,EAO5B,MAAM,8CAA8C,CAAA;AACrD,OAAO,KAAK,EACV,yBAAyB,EAGzB,oBAAoB,EACrB,MAAM,qCAAqC,CAAA;AAe5C,qBAAa,2BAA2B;IAEpC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAFL,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAC1C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAChD,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK;IAGjD,WAAW,CAAC,KAAK,EAAE,yBAAyB,GAAG,2BAA2B;YAyB5D,OAAO;IA0BrB,OAAO,CAAC,YAAY;YAeN,MAAM;IA2EpB,OAAO,CAAC,oBAAoB;YAUd,WAAW;IAuGzB,OAAO,CAAC,sBAAsB;IAgB9B,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,aAAa;CAWtB"}

package/dist/src/launcher/managed-service-runtime-broker.js

@@ -0,0 +1,274 @@
+import { projectManagedServiceRecord } from './managed-service-runtime-record.js';
+import { assertManagedMaterializationOverlap, assertManagedSafeValue, managedBindingCurrent, managedFailure, managedHandle, managedIdentityKey, managedPointerValue, readManagedResponseBody, } from './managed-service-runtime-support.js';
+const MAX_BODY_BYTES = 1024 * 1024;
+export class ManagedServiceRuntimeBroker {
+    records;
+    registrations;
+    fetch;
+    constructor(records, registrations, fetch) {
+        this.records = records;
+        this.registrations = registrations;
+        this.fetch = fetch;
+    }
+    boundClient(state) {
+        return Object.freeze({
+            acquire: async (identity, options) => await this.acquire(state, identity, options?.signal),
+            invoke: async (lease, operationId, value, options) => await this.invoke(state, lease, operationId, value, options?.signal),
+            materialize: async (request, options) => await this.materialize(state, request, options?.signal),
+            release: (lease) => this.release(state, lease),
+            dispose: () => {
+                if (!state.active)
+                    return;
+                state.active = false;
+                for (const leaseHandle of [...state.leases])
+                    this.releaseHandle(state, leaseHandle);
+            },
+        });
+    }
+    async acquire(client, identity, signal) {
+        if (!client.active)
+            return managedFailure('stale-generation', 'stale-generation', false);
+        if (signal?.aborted)
+            return managedFailure('cancelled', 'cancelled', true);
+        const record = this.records.get(managedIdentityKey(identity));
+        if (record === undefined || record.disposed)
+            return managedFailure('unavailable', 'stale-generation', true);
+        if (record.state !== 'ready' || record.brokerHandle === undefined) {
+            return managedFailure('unavailable', 'health-check-failed', true);
+        }
+        const grant = record.access.declaration.consumerGrants.find(item => item.pluginId === client.pluginId);
+        if (grant === undefined)
+            return managedFailure('unavailable', 'unsupported', false);
+        const leaseHandle = managedHandle('msl');
+        const lease = Object.freeze({
+            leaseHandle,
+            binding: record.binding,
+            brokerHandle: record.brokerHandle,
+            operations: Object.freeze([...grant.operations]),
+        });
+        record.leases.set(leaseHandle, { client, lease });
+        client.leases.add(leaseHandle);
+        return { status: 'ready', projection: projectManagedServiceRecord(record), lease };
+    }
+    currentLease(client, lease) {
+        const record = this.registrations.get(lease.binding.registrationHandle);
+        const state = record?.leases.get(lease.leaseHandle);
+        if (!client.active || record === undefined || state?.client !== client || !client.leases.has(lease.leaseHandle)
+            || !managedBindingCurrent(lease.binding, record.binding, record.disposed)
+            || !managedBindingCurrent(state.lease.binding, record.binding, record.disposed)
+            || lease.brokerHandle !== state.lease.brokerHandle || state.lease.brokerHandle !== record.brokerHandle)
+            return undefined;
+        return { record, state };
+    }
+    async invoke(client, lease, operationId, value, signal) {
+        const acquired = this.currentLease(client, lease);
+        if (acquired === undefined)
+            return managedFailure('stale-generation', 'stale-generation', false);
+        const { record, state } = acquired;
+        if (!state.lease.operations.includes(operationId))
+            return managedFailure('unavailable', 'unsupported', false);
+        const operation = record.definition.operations.find(item => item.operationId === operationId);
+        if (operation === undefined || record.origin === undefined) {
+            return managedFailure('unavailable', 'unsupported', false);
+        }
+        try {
+            if (operation.requestSchema !== undefined)
+                await record.schemas.validate(operation.requestSchema, value);
+            if (this.currentLease(client, lease)?.state !== state) {
+                return managedFailure('stale-generation', 'stale-generation', false);
+            }
+            const timeout = AbortSignal.timeout(operation.timeoutMs);
+            const operationSignal = signal === undefined
+                ? record.lifecycle.signal
+                : AbortSignal.any([record.lifecycle.signal, signal]);
+            const url = new URL(operation.path, record.origin);
+            if (value !== undefined && operation.requestEncoding === 'query') {
+                if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+                    throw new Error('managed service query operation requires an object');
+                }
+                for (const [key, item] of Object.entries(value)) {
+                    if (typeof item === 'string' || typeof item === 'number' || typeof item === 'boolean') {
+                        url.searchParams.set(key, String(item));
+                    }
+                    else {
+                        throw new Error('managed service query values must be scalar');
+                    }
+                }
+            }
+            const useBody = value !== undefined && operation.requestEncoding !== 'query';
+            const response = await this.fetch(url, {
+                method: operation.method,
+                headers: {
+                    ...this.authorizationHeaders(record, operation.httpAuthentication),
+                    ...(useBody ? { 'Content-Type': 'application/json' } : {}),
+                },
+                ...(useBody ? { body: JSON.stringify(value) } : {}),
+                signal: AbortSignal.any([operationSignal, timeout]),
+            });
+            if (!response.ok)
+                throw new Error('managed service operation failed');
+            const bytes = await readManagedResponseBody(response, MAX_BODY_BYTES);
+            const parsed = JSON.parse(new TextDecoder().decode(bytes));
+            assertManagedSafeValue(parsed);
+            await record.schemas.validate(operation.responseSchema, parsed);
+            if (this.currentLease(client, lease)?.state !== state) {
+                return managedFailure('stale-generation', 'stale-generation', false);
+            }
+            const invocationHandle = managedHandle('msi');
+            const safe = structuredClone(parsed);
+            record.invocations.set(invocationHandle, { leaseHandle: lease.leaseHandle, value: safe });
+            return Object.freeze({
+                status: 'accepted',
+                invocationHandle,
+                operationId,
+                responseSchema: operation.responseSchema,
+                value: safe,
+            });
+        }
+        catch {
+            if (record.disposed)
+                return managedFailure('stale-generation', 'disposed', false);
+            return managedFailure(signal?.aborted ? 'cancelled' : 'failed', signal?.aborted ? 'cancelled' : 'health-check-failed', true);
+        }
+    }
+    authorizationHeaders(record, authentication = record.definition.httpAuthentication) {
+        if (authentication.mode === 'none')
+            return {};
+        const value = record.secrets.get(authentication.slot);
+        if (value === undefined)
+            throw new Error('managed service authorization is unavailable');
+        return { Authorization: `${authentication.scheme} ${value}` };
+    }
+    async materialize(client, request, signal) {
+        if (!client.active)
+            return managedFailure('stale-generation', 'stale-generation', false);
+        if (signal?.aborted)
+            return managedFailure('cancelled', 'cancelled', true);
+        const target = this.registrations.get(request.target.registrationHandle);
+        if (target === undefined || !managedBindingCurrent(request.target, target.binding, target.disposed)
+            || target.access.owner.pluginId !== client.pluginId
+            || target.access.owner.pluginGeneration !== client.pluginGeneration)
+            return managedFailure('stale-generation', 'stale-generation', false);
+        const sourceLeases = new Map();
+        for (const source of request.sources) {
+            if (sourceLeases.has(source.source))
+                return managedFailure('failed', 'materialization-failed', false);
+            const record = this.registrations.get(source.lease.binding.registrationHandle);
+            const lease = record?.leases.get(source.lease.leaseHandle);
+            if (record === undefined || !managedBindingCurrent(source.lease.binding, record.binding, record.disposed)
+                || lease?.client !== client || !managedBindingCurrent(lease.lease.binding, record.binding, record.disposed))
+                return managedFailure('stale-generation', 'stale-generation', false);
+            sourceLeases.set(source.source, { record, lease });
+        }
+        try {
+            const values = [];
+            for (const binding of request.bindings) {
+                const targetBinding = target.definition.protectedBindings.find(item => item.slot === binding.targetSlot);
+                if (targetBinding === undefined || targetBinding.source !== 'composition') {
+                    throw new Error('invalid target slot');
+                }
+                if (targetBinding.target === 'environment' && binding.targetPointer !== undefined) {
+                    throw new Error('invalid target pointer');
+                }
+                const pointer = targetBinding.target === 'configuration'
+                    ? `${targetBinding.pointer}${binding.targetPointer ?? ''}`
+                    : undefined;
+                let value;
+                if (binding.source.kind === 'safe-literal')
+                    value = structuredClone(binding.source.value);
+                else {
+                    const source = sourceLeases.get(binding.source.source);
+                    if (source === undefined)
+                        throw new Error('unknown materialization source');
+                    if (binding.source.kind === 'source-origin') {
+                        if (source.record.origin === undefined)
+                            throw new Error('source is not ready');
+                        const originId = binding.source.origin;
+                        const declared = source.record.definition.compositionOrigins?.find(origin => origin.id === originId);
+                        if (declared === undefined)
+                            throw new Error('source composition origin is not declared');
+                        value = new URL(declared.path, source.record.origin).href.replace(/\/$/u, '');
+                    }
+                    else if (binding.source.kind === 'source-authorization') {
+                        if (source.record.definition.httpAuthentication.mode === 'none') {
+                            throw new Error('source has no authorization');
+                        }
+                        const secret = source.record.secrets.get(source.record.definition.httpAuthentication.slot);
+                        if (secret === undefined)
+                            throw new Error('source authorization is unavailable');
+                        value = secret;
+                    }
+                    else {
+                        const invocation = source.record.invocations.get(binding.source.invocationHandle);
+                        if (invocation === undefined || invocation.leaseHandle !== source.lease.lease.leaseHandle) {
+                            throw new Error('invocation is not owned by source lease');
+                        }
+                        value = managedPointerValue(invocation.value, binding.source.pointer);
+                    }
+                }
+                assertManagedSafeValue(value);
+                if (binding.source.kind === 'safe-literal' && targetBinding.valueSchema !== undefined) {
+                    await target.schemas.validate(targetBinding.valueSchema, value);
+                }
+                const candidate = {
+                    slot: binding.targetSlot,
+                    pointer,
+                    value: structuredClone(value),
+                    safeLiteral: binding.source.kind === 'safe-literal',
+                };
+                for (const existing of values)
+                    assertManagedMaterializationOverlap(existing, candidate);
+                values.push(candidate);
+            }
+            if (!this.materializationCurrent(client, target, request, sourceLeases)) {
+                return managedFailure('stale-generation', 'stale-generation', false);
+            }
+            values.sort((left, right) => (left.pointer?.split('/').length ?? 0) - (right.pointer?.split('/').length ?? 0));
+            const materialization = Object.freeze({
+                handle: managedHandle('msm'),
+                revision: request.revision,
+                values: Object.freeze(values.map(value => Object.freeze(value))),
+                sources: Object.freeze([...sourceLeases.entries()].map(([source, item]) => Object.freeze({ source, binding: item.record.binding }))),
+            });
+            target.materializations.set(materialization.handle, materialization);
+            return Object.freeze({
+                status: 'accepted',
+                materializationHandle: materialization.handle,
+                target: target.binding,
+                revision: materialization.revision,
+                sources: materialization.sources,
+            });
+        }
+        catch {
+            return managedFailure('failed', 'materialization-failed', false);
+        }
+    }
+    materializationCurrent(client, target, request, sources) {
+        return client.active
+            && managedBindingCurrent(request.target, target.binding, target.disposed)
+            && target.access.owner.pluginId === client.pluginId
+            && target.access.owner.pluginGeneration === client.pluginGeneration
+            && [...sources.values()].every(({ record, lease }) => record.leases.get(lease.lease.leaseHandle) === lease
+                && managedBindingCurrent(lease.lease.binding, record.binding, record.disposed));
+    }
+    release(client, lease) {
+        const record = this.registrations.get(lease.binding.registrationHandle);
+        if (record?.leases.get(lease.leaseHandle)?.client !== client)
+            return;
+        this.releaseHandle(client, lease.leaseHandle);
+    }
+    releaseHandle(client, leaseHandle) {
+        client.leases.delete(leaseHandle);
+        for (const record of this.records.values()) {
+            if (record.leases.get(leaseHandle)?.client !== client)
+                continue;
+            record.leases.delete(leaseHandle);
+            for (const [invocationHandle, invocation] of record.invocations) {
+                if (invocation.leaseHandle === leaseHandle)
+                    record.invocations.delete(invocationHandle);
+            }
+            break;
+        }
+    }
+}
+//# sourceMappingURL=managed-service-runtime-broker.js.map

package/dist/src/launcher/managed-service-runtime-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-broker.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-broker.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,EACL,mCAAmC,EACnC,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,sCAAsC,CAAA;AAE7C,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAA;AAElC,MAAM,OAAO,2BAA2B;IAEnB;IACA;IACA;IAHnB,YACmB,OAA0C,EAC1C,aAAgD,EAChD,KAA8B;QAF9B,YAAO,GAAP,OAAO,CAAmC;QAC1C,kBAAa,GAAb,aAAa,CAAmC;QAChD,UAAK,GAAL,KAAK,CAAyB;IAC9C,CAAC;IAEJ,WAAW,CAAC,KAAgC;QAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,KAAK,EACZ,QAAkC,EAClC,OAA2C,EAC3C,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;YACzD,MAAM,EAAE,KAAK,EACX,KAA4B,EAC5B,WAAmB,EACnB,KAAiC,EACjC,OAA2C,EAC3C,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;YACzE,WAAW,EAAE,KAAK,EAChB,OAA+C,EAC/C,OAA2C,EAC3C,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;YAC5D,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;YACrE,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,OAAM;gBACzB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAA;gBACpB,KAAK,MAAM,WAAW,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YACrF,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAiC,EACjC,QAAkC,EAClC,MAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;QACxF,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,cAAc,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAA;QAC3G,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAClE,OAAO,cAAc,CAAC,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAA;QACtG,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,CAAA;QACnF,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAoB,CAAA;QAC3D,MAAM,KAAK,GAA0B,MAAM,CAAC,MAAM,CAAC;YACjD,WAAW;YACX,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;SACjD,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;IACpF,CAAC;IAEO,YAAY,CAClB,MAAiC,EACjC,KAA4B;QAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACnD,IACE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;eACxG,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;eACtE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;eAC5E,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;YACtG,OAAO,SAAS,CAAA;QAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,MAAiC,EACjC,KAA4B,EAC5B,WAAmB,EACnB,KAAiC,EACjC,MAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;QAChG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,CAAA;QAC7G,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;QAC7F,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,cAAc,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS;gBAAE,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;YACxG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;gBACtD,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACxD,MAAM,eAAe,GAAG,MAAM,KAAK,SAAS;gBAC1C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM;gBACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,KAAK,OAAO,EAAE,CAAC;gBACjE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;gBACvE,CAAC;gBACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;wBACtF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;oBACzC,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;oBAChE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,KAAK,OAAO,CAAA;YAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO,EAAE;oBACP,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,kBAAkB,CAAC;oBAClE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D;gBACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;aACpD,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAA;YACrE,sBAAsB,CAAC,MAAM,CAAC,CAAA;YAC9B,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;YAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;gBACtD,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAoB,CAAA;YAChE,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;YACpC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACzF,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,UAAU;gBAClB,gBAAgB;gBAChB,WAAW;gBACX,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,KAAK,EAAE,IAAI;aACZ,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,cAAc,CAAC,kBAAkB,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;YACjF,OAAO,cAAc,CACnB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EACxC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,EACrD,IAAI,CACL,CAAA;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB,CAC1B,MAA4B,EAC5B,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,kBAAkB;QAErD,IAAI,cAAc,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,CAAA;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACxF,OAAO,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,MAAM,IAAI,KAAK,EAAE,EAAE,CAAA;IAC/D,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAAiC,EACjC,OAA+C,EAC/C,MAAoB;QAEpB,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;QACxF,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;QACxE,IACE,MAAM,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;eAC5F,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;eAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;YACnE,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;QACtE,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6E,CAAA;QACzG,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,cAAc,CAAC,QAAQ,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAA;YACrG,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;YAC1D,IACE,MAAM,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;mBAClG,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;gBAC3G,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;YACtE,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAA2D,EAAE,CAAA;YACzE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;gBACxG,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBAC1E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;gBACxC,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,KAAK,aAAa,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBAClF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;gBAC3C,CAAC;gBACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,KAAK,eAAe;oBACtD,CAAC,CAAC,GAAG,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,EAAkB;oBAC1E,CAAC,CAAC,SAAS,CAAA;gBACb,IAAI,KAAgC,CAAA;gBACpC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc;oBAAE,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;qBACpF,CAAC;oBACJ,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACtD,IAAI,MAAM,KAAK,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;oBAC3E,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;wBAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA;wBACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,CAChE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CACjC,CAAA;wBACD,IAAI,QAAQ,KAAK,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;wBACxF,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;oBAC/E,CAAC;yBAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;wBAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAChE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;wBAChD,CAAC;wBACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA;wBAC1F,IAAI,MAAM,KAAK,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;wBAChF,KAAK,GAAG,MAAM,CAAA;oBAChB,CAAC;yBAAM,CAAC;wBACN,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;wBACjF,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;4BAC1F,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;wBAC5D,CAAC;wBACD,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;oBACvE,CAAC;gBACH,CAAC;gBACD,sBAAsB,CAAC,KAAK,CAAC,CAAA;gBAC7B,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,aAAa,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;oBACtF,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;gBACjE,CAAC;gBACD,MAAM,SAAS,GAAyD;oBACtE,IAAI,EAAE,OAAO,CAAC,UAAU;oBACxB,OAAO;oBACP,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;oBAC7B,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc;iBACpD,CAAA;gBACD,KAAK,MAAM,QAAQ,IAAI,MAAM;oBAAE,mCAAmC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;gBACvF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;gBACxE,OAAO,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAA;YAC9G,MAAM,eAAe,GAAuC,MAAM,CAAC,MAAM,CAAC;gBACxE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAoB;gBAC/C,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChE,OAAO,EAAE,MAAM,CAAC,MAAM,CACpB,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7G;aACF,CAAC,CAAA;YACF,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;YACpE,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,UAAU;gBAClB,qBAAqB,EAAE,eAAe,CAAC,MAAM;gBAC7C,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,QAAQ,EAAE,eAAe,CAAC,QAAQ;gBAClC,OAAO,EAAE,eAAe,CAAC,OAAO;aACjC,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,cAAc,CAAC,QAAQ,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;IAEO,sBAAsB,CAC5B,MAAiC,EACjC,MAA4B,EAC5B,OAA+C,EAC/C,OAAiH;QAEjH,OAAO,MAAM,CAAC,MAAM;eACf,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC;eACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;eAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;eAChE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CACnD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,KAAK;mBACjD,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAC/E,CAAA;IACL,CAAC;IAEO,OAAO,CAAC,MAAiC,EAAE,KAA4B;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvE,IAAI,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM;YAAE,OAAM;QACpE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,CAAC;IAEO,aAAa,CAAC,MAAiC,EAAE,WAAmB;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACjC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM;gBAAE,SAAQ;YAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YACjC,KAAK,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAChE,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW;oBAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;YACzF,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;CACF"}

package/dist/src/launcher/managed-service-runtime-files.d.ts

@@ -0,0 +1,12 @@
+import type { ManagedServiceRecord } from './managed-service-runtime-record.js';
+export declare function assertManagedServiceEnvironmentBindings(record: ManagedServiceRecord): void;
+export declare function resolveManagedServiceEnvironment(record: ManagedServiceRecord): Promise<void>;
+export declare function declaredManagedRuntimeResource(record: ManagedServiceRecord, relative: `./${string}`, mode?: 'executable' | 'data'): {
+    readonly path: `./${string}`;
+    readonly mode: "executable" | "data";
+    readonly byteLength: number;
+    readonly digest: `sha256:${string}`;
+};
+export declare function readManagedRuntimeResource(record: ManagedServiceRecord, relative: `./${string}`, mode?: 'executable' | 'data', maxBytes?: number): Promise<Buffer>;
+export declare function resolveManagedRuntimeResource(record: ManagedServiceRecord, relative: `./${string}`, mode?: 'executable' | 'data'): Promise<string>;
+//# sourceMappingURL=managed-service-runtime-files.d.ts.map

package/dist/src/launcher/managed-service-runtime-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-files.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-files.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAK/E,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAO1F;AAED,wBAAsB,gCAAgC,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBlG;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,KAAK,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM;;;;;EAU7B;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,KAAK,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,EAC5B,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,KAAK,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,GAC3B,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/src/launcher/managed-service-runtime-files.js

@@ -0,0 +1,62 @@
+import { createHash } from 'node:crypto';
+import { chmod } from 'node:fs/promises';
+import path from 'node:path';
+import { managedServiceResourceMatchesTarget } from './managed-service-package-resources.js';
+import { managedContainedFile, readManagedContainedFile } from './managed-service-runtime-support.js';
+const EXECUTABLE_MODE = 0o500;
+export function assertManagedServiceEnvironmentBindings(record) {
+    const reserved = new Set(process.platform === 'win32' ? ['HOME', 'USERPROFILE'] : ['HOME']);
+    if (record.definition.protectedBindings.some(binding => binding.target === 'environment' && reserved.has(binding.variable)))
+        throw new Error('managed service environment binding targets a Host-owned variable');
+}
+export async function resolveManagedServiceEnvironment(record) {
+    const reserved = new Set(process.platform === 'win32' ? ['HOME', 'USERPROFILE'] : ['HOME']);
+    assertManagedServiceEnvironmentBindings(record);
+    const seen = new Set();
+    for (const declaration of record.definition.environment ?? []) {
+        if (seen.has(declaration.variable) || reserved.has(declaration.variable)) {
+            throw new Error('managed service environment declaration is invalid');
+        }
+        seen.add(declaration.variable);
+        if (record.definition.protectedBindings.some(binding => binding.target === 'environment' && binding.variable === declaration.variable)) {
+            throw new Error('managed service environment declaration is invalid');
+        }
+        const value = declaration.source === 'literal'
+            ? declaration.value
+            : await managedContainedFile(record.serviceHome, declaration.path);
+        if (value.includes('\u0000'))
+            throw new Error('managed service environment declaration is invalid');
+        record.environment[declaration.variable] = value;
+    }
+}
+export function declaredManagedRuntimeResource(record, relative, mode) {
+    const declarations = record.access.runtimeResources
+        ?? record.access.declaration.runtimeResources.filter(resource => managedServiceResourceMatchesTarget(resource));
+    const declaration = declarations
+        .find(resource => resource.path === relative);
+    if (declaration === undefined || (mode !== undefined && declaration.mode !== mode)) {
+        throw new Error('managed service file is undeclared');
+    }
+    return declaration;
+}
+export async function readManagedRuntimeResource(record, relative, mode, maxBytes) {
+    const declaration = declaredManagedRuntimeResource(record, relative, mode);
+    if (maxBytes !== undefined && declaration.byteLength > maxBytes) {
+        throw new Error('managed service file exceeds its use-site bound');
+    }
+    const bytes = await readManagedContainedFile(record.access.artifactDirectory, relative, declaration.byteLength);
+    const digest = `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
+    if (bytes.byteLength !== declaration.byteLength || digest !== declaration.digest) {
+        throw new Error('managed service file failed integrity readback');
+    }
+    return bytes;
+}
+export async function resolveManagedRuntimeResource(record, relative, mode) {
+    const declaration = declaredManagedRuntimeResource(record, relative, mode);
+    await readManagedRuntimeResource(record, relative, mode);
+    const file = path.join(record.access.artifactDirectory, relative.slice(2));
+    if (declaration.mode === 'executable' && process.platform !== 'win32')
+        await chmod(file, EXECUTABLE_MODE);
+    return file;
+}
+//# sourceMappingURL=managed-service-runtime-files.js.map

package/dist/src/launcher/managed-service-runtime-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-files.js","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAA;AAE5F,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAErG,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B,MAAM,UAAU,uCAAuC,CAAC,MAA4B;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3F,IACE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACjD,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CACnE;QACD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,MAA4B;IACjF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3F,uCAAuC,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC9B,IACE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACjD,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,CAC9E,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,KAAK,SAAS;YAC5C,CAAC,CAAC,WAAW,CAAC,KAAK;YACnB,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAA;QACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACnG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA4B,EAC5B,QAAuB,EACvB,IAA4B;IAE5B,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB;WAC9C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,mCAAmC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjH,MAAM,WAAW,GAAG,YAAY;SAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IAC/C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA4B,EAC5B,QAAuB,EACvB,IAA4B,EAC5B,QAAiB;IAEjB,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1E,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAA;IAC/G,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAW,CAAA;IACpF,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,IAAI,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAA4B,EAC5B,QAAuB,EACvB,IAA4B;IAE5B,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1E,MAAM,0BAA0B,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,IAAI,WAAW,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IACzG,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/src/launcher/managed-service-runtime-process.d.ts

@@ -0,0 +1,26 @@
+import type { ManagedServiceDefinitionV1 } from '@cordisx/protocol/managed-service-runtime/v1';
+import type { ChildProcess, spawn as nodeSpawn } from 'node:child_process';
+import type { ManagedServiceRecord } from './managed-service-runtime-record.js';
+import type { ManagedServiceChildTerminationTimeouts } from './managed-service-process.js';
+export interface ManagedServiceRuntimeProcessOptions {
+    readonly fetch: typeof globalThis.fetch;
+    readonly spawn: typeof nodeSpawn;
+    readonly childTerminationTimeouts?: ManagedServiceChildTerminationTimeouts;
+    readonly invalidateExitedChild: (record: ManagedServiceRecord, child: ChildProcess) => void;
+}
+export declare class ManagedServiceRuntimeProcess {
+    private readonly options;
+    constructor(options: ManagedServiceRuntimeProcessOptions);
+    writeConfiguration(record: ManagedServiceRecord): Promise<string | undefined>;
+    discoverExisting(record: ManagedServiceRecord, signal?: AbortSignal): Promise<string | undefined>;
+    launch(record: ManagedServiceRecord, configurationPath: string | undefined, signal: AbortSignal): Promise<string>;
+    resolveExecutable(record: ManagedServiceRecord, executable: ManagedServiceDefinitionV1['launch']['executable']): Promise<string>;
+    healthy(record: ManagedServiceRecord, origin: string, signal?: AbortSignal): Promise<boolean>;
+    ensureServiceHome(record: ManagedServiceRecord): Promise<void>;
+    removeGenerationDirectory(record: ManagedServiceRecord): Promise<void>;
+    private serializeAssignedLoopback;
+    private readRestrictedPort;
+    private authorizationHeaders;
+    private assertActive;
+}
+//# sourceMappingURL=managed-service-runtime-process.d.ts.map

package/dist/src/launcher/managed-service-runtime-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-service-runtime-process.d.ts","sourceRoot":"","sources":["../../../src/launcher/managed-service-runtime-process.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAA;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAU1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAE/E,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAA;AAU1F,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,SAAS,CAAA;IAChC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,sCAAsC,CAAA;IAC1E,QAAQ,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;CAC5F;AAED,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,mCAAmC;IAEnE,kBAAkB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA0B7E,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IASjG,MAAM,CACV,MAAM,EAAE,oBAAoB,EAC5B,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC;IA0DZ,iBAAiB,CACrB,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAC7D,OAAO,CAAC,MAAM,CAAC;IAOZ,OAAO,CAAC,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAY7F,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D,yBAAyB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5E,OAAO,CAAC,yBAAyB;YAYnB,kBAAkB;IAehC,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,YAAY;CAGrB"}