harnery 0.40.0 → 0.42.0

package/dist/core/servers/net.js

@@ -0,0 +1,270 @@
+/**
+ * Local socket and process observation for the server registry.
+ *
+ * Linux reads procfs directly (no `ss`/`lsof` dependency, works under WSL).
+ * macOS shells out to `lsof` and `ps`. Other platforms report `unsupported`
+ * so callers can say the scan did not run rather than implying it found
+ * nothing.
+ */
+import { spawnSync } from "node:child_process";
+import { readdirSync, readFileSync, readlinkSync } from "node:fs";
+export function scanSupport() {
+    if (process.platform === "linux")
+        return "procfs";
+    if (process.platform === "darwin")
+        return "lsof";
+    return "unsupported";
+}
+/** Parse `/proc/net/tcp` or `/proc/net/tcp6` content. */
+export function parseProcNetTcp(content) {
+    const rows = [];
+    for (const line of content.split("\n").slice(1)) {
+        const fields = line.trim().split(/\s+/);
+        if (fields.length < 10)
+            continue;
+        const [address, portHex] = (fields[1] ?? "").split(":");
+        if (!address || !portHex)
+            continue;
+        rows.push({
+            localAddress: decodeProcAddress(address),
+            localPort: Number.parseInt(portHex, 16),
+            state: fields[3] ?? "",
+            inode: fields[9] ?? "",
+        });
+    }
+    return rows;
+}
+function decodeProcAddress(hex) {
+    if (hex.length === 8) {
+        const bytes = hex.match(/../g)?.map((pair) => Number.parseInt(pair, 16)) ?? [];
+        return bytes.reverse().join(".");
+    }
+    if (/^0+$/.test(hex))
+        return "::";
+    if (hex === "00000000000000000000000001000000")
+        return "::1";
+    if (hex.startsWith("0000000000000000FFFF0000"))
+        return decodeProcAddress(hex.slice(24));
+    return `ipv6:${hex.toLowerCase()}`;
+}
+function readProcSockets() {
+    const rows = [];
+    for (const file of ["/proc/net/tcp", "/proc/net/tcp6"]) {
+        try {
+            rows.push(...parseProcNetTcp(readFileSync(file, "utf8")));
+        }
+        catch {
+            // tcp6 is absent on IPv6-disabled kernels.
+        }
+    }
+    return rows;
+}
+/** Map socket inodes to the pids holding them (only processes we may read). */
+function socketOwners(inodes) {
+    const owners = new Map();
+    if (inodes.size === 0)
+        return owners;
+    let entries;
+    try {
+        entries = readdirSync("/proc");
+    }
+    catch {
+        return owners;
+    }
+    for (const entry of entries) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        let fds;
+        try {
+            fds = readdirSync(`/proc/${entry}/fd`);
+        }
+        catch {
+            continue;
+        }
+        for (const fd of fds) {
+            let target;
+            try {
+                target = readlinkSync(`/proc/${entry}/fd/${fd}`);
+            }
+            catch {
+                continue;
+            }
+            const match = /^socket:\[(\d+)\]$/.exec(target);
+            if (match?.[1] && inodes.has(match[1]) && !owners.has(match[1])) {
+                owners.set(match[1], Number(entry));
+            }
+        }
+        if (owners.size === inodes.size)
+            break;
+    }
+    return owners;
+}
+/** Listening TCP sockets whose owning process this user can see. */
+export function listListeningSockets() {
+    const support = scanSupport();
+    if (support === "procfs") {
+        const listening = readProcSockets().filter((row) => row.state === "0A");
+        const owners = socketOwners(new Set(listening.map((row) => row.inode)));
+        const seen = new Set();
+        const sockets = [];
+        for (const row of listening) {
+            const pid = owners.get(row.inode);
+            if (!pid)
+                continue;
+            const key = `${pid}:${row.localPort}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            sockets.push({ pid, port: row.localPort, address: row.localAddress });
+        }
+        return sockets.sort((a, b) => a.port - b.port);
+    }
+    if (support === "lsof")
+        return lsofListeningSockets();
+    return [];
+}
+/**
+ * Every listening TCP port on this machine, including ports whose owner this
+ * user cannot see (containers, other users). Used to avoid port collisions.
+ */
+export function listListeningPorts() {
+    const support = scanSupport();
+    if (support === "procfs")
+        return new Set(readProcSockets()
+            .filter((row) => row.state === "0A")
+            .map((row) => row.localPort));
+    if (support === "lsof")
+        return new Set(listListeningSockets().map((socket) => socket.port));
+    return new Set();
+}
+/** Parse `lsof -Fpn` output for listening sockets. */
+export function parseLsofListen(output) {
+    const sockets = [];
+    const seen = new Set();
+    let pid = 0;
+    for (const line of output.split("\n")) {
+        if (line.startsWith("p"))
+            pid = Number(line.slice(1));
+        else if (line.startsWith("n") && pid > 0) {
+            const match = /^(.*):(\d+)$/.exec(line.slice(1));
+            if (!match?.[2])
+                continue;
+            const port = Number(match[2]);
+            const key = `${pid}:${port}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            sockets.push({ pid, port, address: (match[1] ?? "").replace(/^\[|\]$/g, "") });
+        }
+    }
+    return sockets.sort((a, b) => a.port - b.port);
+}
+/**
+ * Count established server-side connections per local port. A browser tab
+ * holding a live-reload socket or keep-alive connection counts as activity.
+ */
+export function establishedConnectionCounts(ports) {
+    const counts = new Map();
+    const wanted = new Set(ports.filter((port) => Number.isInteger(port) && port > 0));
+    if (wanted.size === 0)
+        return counts;
+    const support = scanSupport();
+    if (support === "procfs") {
+        for (const row of readProcSockets()) {
+            // 01 ESTABLISHED; 03 SYN_RECV, where a deferred-accept server parks a
+            // connected client until its first bytes arrive.
+            if ((row.state !== "01" && row.state !== "03") || !wanted.has(row.localPort))
+                continue;
+            counts.set(row.localPort, (counts.get(row.localPort) ?? 0) + 1);
+        }
+        return counts;
+    }
+    if (support === "lsof")
+        return lsofConnectionCounts(wanted);
+    return counts;
+}
+/** Listening sockets via `lsof` (the macOS path; also runs wherever lsof exists). */
+export function lsofListeningSockets() {
+    return parseLsofListen(run("lsof", ["-nP", "-iTCP", "-sTCP:LISTEN", "-Fpn"]));
+}
+/** Server-side established connections per wanted local port, via `lsof`. */
+export function lsofConnectionCounts(wanted) {
+    const counts = new Map();
+    const output = run("lsof", ["-nP", "-iTCP", "-sTCP:ESTABLISHED", "-Fn"]);
+    for (const line of output.split("\n")) {
+        const match = /^n.*?:(\d+)->/.exec(line);
+        const port = match?.[1] ? Number(match[1]) : 0;
+        if (wanted.has(port))
+            counts.set(port, (counts.get(port) ?? 0) + 1);
+    }
+    return counts;
+}
+/** Parent, command line, and working directory via `ps` and `lsof` (the macOS path). */
+export function psProcessInfo(pid) {
+    const ps = run("ps", ["-o", "ppid=,command=", "-p", String(pid)]).trim();
+    if (!ps)
+        return null;
+    const match = /^(\d+)\s+(.*)$/.exec(ps);
+    const cwdLine = run("lsof", ["-a", "-p", String(pid), "-d", "cwd", "-Fn"])
+        .split("\n")
+        .find((line) => line.startsWith("n"));
+    return {
+        pid,
+        ppid: match?.[1] ? Number(match[1]) : null,
+        command: match?.[2] ?? ps,
+        cwd: cwdLine ? cwdLine.slice(1) : null,
+    };
+}
+export function readProcessInfo(pid) {
+    if (process.platform === "linux") {
+        try {
+            const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+            const afterComm = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+            const ppid = Number(afterComm[1]);
+            const command = readFileSync(`/proc/${pid}/cmdline`, "utf8").split("\0").join(" ").trim();
+            let cwd = null;
+            try {
+                cwd = readlinkSync(`/proc/${pid}/cwd`);
+            }
+            catch {
+                cwd = null;
+            }
+            return { pid, ppid: Number.isInteger(ppid) ? ppid : null, command, cwd };
+        }
+        catch {
+            return null;
+        }
+    }
+    if (process.platform === "darwin")
+        return psProcessInfo(pid);
+    return null;
+}
+/** Parse `ps -o etime=` output (`[[dd-]hh:]mm:ss`) into seconds. */
+export function parseElapsed(value) {
+    const match = /^\s*(?:(\d+)-)?(?:(\d+):)?(\d+):(\d+)\s*$/.exec(value);
+    if (!match)
+        return null;
+    const [, days, hours, minutes, seconds] = match;
+    return (Number(days ?? 0) * 86_400 + Number(hours ?? 0) * 3_600 + Number(minutes) * 60 + Number(seconds));
+}
+/** When a process started, from its elapsed run time; null when unavailable. */
+export function processStartedAt(pid, now = Date.now()) {
+    if (process.platform !== "linux" && process.platform !== "darwin")
+        return null;
+    const elapsed = parseElapsed(run("ps", ["-o", "etime=", "-p", String(pid)]));
+    return elapsed === null ? null : new Date(now - elapsed * 1_000).toISOString();
+}
+/** The pid followed by its ancestors, nearest first (bounded). */
+export function ancestry(pid, maxHops = 32) {
+    const chain = [];
+    let current = pid;
+    while (current && current > 1 && chain.length < maxHops && !chain.includes(current)) {
+        chain.push(current);
+        current = readProcessInfo(current)?.ppid ?? null;
+    }
+    return chain;
+}
+function run(command, args) {
+    const result = spawnSync(command, args, { encoding: "utf8", timeout: 10_000 });
+    return result.status === 0 || result.stdout ? (result.stdout ?? "") : "";
+}

package/dist/core/servers/tunnels.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Tunnels as registry services.
+ *
+ * `tunnel up` and `tunnel reload` register the instance; `tunnel down`
+ * removes it. Tunnels started before the registry existed are adopted the next
+ * time the registry is read, so a long-lived tunnel never shows as an
+ * unregistered listener.
+ */
+import { type TunnelState } from "../../lib/tunnel/state.js";
+import type { RegisterServerInput } from "./index.js";
+export declare function tunnelServerId(name: string): string;
+/** The registry input for one tunnel instance. */
+export declare function tunnelServerInput(state: TunnelState, coordRoot: string): RegisterServerInput;
+//# sourceMappingURL=tunnels.d.ts.map

package/dist/core/servers/tunnels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnels.d.ts","sourceRoot":"","sources":["../../../src/core/servers/tunnels.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,kDAAkD;AAClD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,mBAAmB,CAmB5F"}

package/dist/core/servers/tunnels.js

@@ -0,0 +1,33 @@
+/**
+ * Tunnels as registry services.
+ *
+ * `tunnel up` and `tunnel reload` register the instance; `tunnel down`
+ * removes it. Tunnels started before the registry existed are adopted the next
+ * time the registry is read, so a long-lived tunnel never shows as an
+ * unregistered listener.
+ */
+import { resolve } from "node:path";
+import { gateLogFile } from "../../lib/tunnel/state.js";
+import { resolveBinName } from "../config.js";
+export function tunnelServerId(name) {
+    return `tunnel-${name.toLowerCase().replace(/[^a-z0-9._-]+/g, "-")}`;
+}
+/** The registry input for one tunnel instance. */
+export function tunnelServerInput(state, coordRoot) {
+    const helpers = [state.cloudflared_pid, state.provider_pid].filter((pid) => typeof pid === "number" && pid > 0);
+    return {
+        id: tunnelServerId(state.name),
+        kind: "service",
+        type: "tunnel",
+        label: `Tunnel ${state.name} → ${state.target}${state.vhost ? ` (${state.vhost})` : ""}`,
+        url: state.url,
+        port: state.gate_port,
+        pid: state.gate_pid,
+        ...(helpers.length ? { pids: helpers } : {}),
+        log: resolve(coordRoot, ".cache", "tunnel", gateLogFile(state.name)),
+        cwd: coordRoot,
+        stop_argv: [resolveBinName(coordRoot), "tunnel", "down", "--name", state.name],
+        started_at: state.started_at,
+        owner: null,
+    };
+}

package/dist/core/storage/atomic-json.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atomic-json.d.ts","sourceRoot":"","sources":["../../../src/core/storage/atomic-json.ts"],"names":[],"mappings":"AAGA,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAUzE"}
+{"version":3,"file":"atomic-json.d.ts","sourceRoot":"","sources":["../../../src/core/storage/atomic-json.ts"],"names":[],"mappings":"AAIA,qFAAqF;AACrF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAazE"}

package/dist/core/storage/atomic-json.js

@@ -1,12 +1,16 @@
 import { chmodSync, mkdirSync, renameSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
+import { stateDirMode, stateFileMode } from "./modes.js";
 /** Write one private JSON projection without exposing a partial frame to readers. */
 export function writePrivateJsonAtomic(path, value) {
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    mkdirSync(dirname(path), { recursive: true, mode: stateDirMode() });
     const temporary = `${path}.tmp.${process.pid}.${Date.now()}`;
-    writeFileSync(temporary, `${JSON.stringify(value)}\n`, { encoding: "utf8", mode: 0o600 });
+    writeFileSync(temporary, `${JSON.stringify(value)}\n`, {
+        encoding: "utf8",
+        mode: stateFileMode(),
+    });
     try {
-        chmodSync(temporary, 0o600);
+        chmodSync(temporary, stateFileMode());
     }
     catch {
         // Windows does not expose POSIX modes. The atomic write still applies.

package/dist/core/storage/builtins.js

@@ -369,6 +369,7 @@ function cacheFamilies() {
         ["pid-map-cache", ".harnery/pid-map", "active native process observations"],
         ["remote-presence-cache", ".harnery/presence/remote", "presence relay observations"],
         ["event-v3-live-display", ".harnery/live/v3", "Event Ledger V3 canonical events"],
+        ["local-server-registry", ".harnery/servers", "running local server processes"],
     ];
     return [
         ...definitions.map(([id, root, source]) => family({

package/dist/core/storage/durable-history.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-history.d.ts","sourceRoot":"","sources":["../../../src/core/storage/durable-history.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,8BAA8B,EAAG,4BAAqC,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACxD,wEAAwE;IACxE,UAAU,CAAC,EAAE,uBAAuB,CAAC;CACtC;AAED,MAAM,MAAM,uBAAuB,GAAG,CACpC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GACnC,sBAAsB,GACtB,eAAe,GACf,0BAA0B,GAC1B,yBAAyB,GACzB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,8BAA8B,CAAC;IAC9C,OAAO,EAAE,QAAQ,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC;CACX;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CA+B7B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAQR;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CA8B7B;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAC,CAAC,EAC1D,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,CAAC,CAcH;AAED,wBAAuB,oBAAoB,CAAC,CAAC,EAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,cAAc,CAAC,CAAC,CAAC,CAYnB;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,CAAC,EAAE,CAgBL;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,CAAC,EAAE,CAgB/F;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,CAAC,EAAE,CAwBL;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAqB/D"}
+{"version":3,"file":"durable-history.d.ts","sourceRoot":"","sources":["../../../src/core/storage/durable-history.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,8BAA8B,EAAG,4BAAqC,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,2BAA2B,KAAK,IAAI,CAAC;IACxD,wEAAwE;IACxE,UAAU,CAAC,EAAE,uBAAuB,CAAC;CACtC;AAED,MAAM,MAAM,uBAAuB,GAAG,CACpC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,KACX,MAAM,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GACnC,sBAAsB,GACtB,eAAe,GACf,0BAA0B,GAC1B,yBAAyB,GACzB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,8BAA8B,CAAC;IAC9C,OAAO,EAAE,QAAQ,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC;CACX;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CA+B7B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,EACf,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,MAAM,CAQR;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CA8B7B;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAC,CAAC,EAC1D,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,CAAC,CAcH;AAED,wBAAuB,oBAAoB,CAAC,CAAC,EAC3C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,cAAc,CAAC,CAAC,CAAC,CAYnB;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,yBAAyB,GACjC,CAAC,EAAE,CAgBL;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,GAAG,CAAC,EAAE,CAgB/F;AAED,wBAAgB,0BAA0B,CAAC,CAAC,EAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,CAAC,EAAE,CAwBL;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACrC,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAqB/D"}

package/dist/core/storage/durable-history.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { closeSync, existsSync, constants as fsConstants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, readSync, realpathSync, renameSync, rmSync, statSync, writeSync, } from "node:fs";
 import { open, rename, rm } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, relative } from "node:path";
+import { stateDirMode, stateFileMode } from "./modes.js";
 export const HARNERY_DURABLE_HISTORY_SCHEMA = "harnery.durable-history/v1";
 export function appendDurableHistoryRecord(objectDir, record, options) {
     validateOptions(options);
@@ -174,7 +175,7 @@ export async function rewriteCrashSafeJsonlFile(path, records, maxRecordBytes, f
     rejectExistingSymlink(path);
     const temp = `${path}.rewrite-${process.pid}`;
     await withLeaseAsync(`${path}.lease`, async () => {
-        const handle = await open(temp, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag(), 0o600);
+        const handle = await open(temp, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag(), stateFileMode());
         try {
             await writeAll(handle, Buffer.from(body, "utf8"));
             await handle.sync();
@@ -220,7 +221,7 @@ export function durableHistoryPaths(objectDir) {
 function appendAndSync(path, line, fault, writer = nativeWriteSync) {
     const parent = captureDirectoryIdentity(dirname(path));
     rejectExistingSymlink(path);
-    const fd = openSync(path, fsConstants.O_RDWR | fsConstants.O_APPEND | fsConstants.O_CREAT | noFollowFlag(), 0o600);
+    const fd = openSync(path, fsConstants.O_RDWR | fsConstants.O_APPEND | fsConstants.O_CREAT | noFollowFlag(), stateFileMode());
     try {
         assertOpenFileIdentity(path, fd, parent);
         assertCompleteTail(fd, path);
@@ -235,7 +236,7 @@ function appendAndSync(path, line, fault, writer = nativeWriteSync) {
     }
 }
 function ensurePrivateDirectory(path) {
-    mkdirSync(path, { recursive: true, mode: 0o700 });
+    mkdirSync(path, { recursive: true, mode: stateDirMode() });
     return captureDirectoryIdentity(path);
 }
 function regularFileBytes(path) {
@@ -395,7 +396,7 @@ function acquireLease(lease) {
         };
         let claimed;
         try {
-            mkdirSync(lease, { mode: 0o700 });
+            mkdirSync(lease, { mode: stateDirMode() });
             assertDirectoryWithinParent(lease, parent);
             claimed = captureDirectoryIdentity(lease);
             writeOwner(join(lease, "owner.json"), owner);
@@ -421,7 +422,7 @@ function acquireLease(lease) {
 }
 function writeOwner(path, owner) {
     const parent = captureDirectoryIdentity(dirname(path));
-    const fd = openSync(path, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag(), 0o600);
+    const fd = openSync(path, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag(), stateFileMode());
     try {
         assertOpenFileIdentity(path, fd, parent);
         writeAllSync(fd, Buffer.from(`${JSON.stringify(owner)}\n`, "utf8"), nativeWriteSync);

package/dist/core/storage/maintenance-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance-providers.d.ts","sourceRoot":"","sources":["../../../src/core/storage/maintenance-providers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAGhF,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAGhC,MAAM,kBAAkB,CAAC;AAI1B,eAAO,MAAM,gCAAgC,EAAE,wBAI7C,CAAC;AAEH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,OAAO,CAAC;IAClB,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAClD;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,2BAA2B,GACpC,SAAS,0BAA0B,EAAE,CAMvC;AAED,mFAAmF;AACnF,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,qBAAqB,GAC7B,SAAS,0BAA0B,EAAE,CAYvC;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,2BAA2B,GACpC,+BAA+B,CAMjC;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,+BAA+B,EAC5C,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAAO,GAC9D,OAAO,CAAC,iCAAiC,CAAC,CAS5C"}
+{"version":3,"file":"maintenance-providers.d.ts","sourceRoot":"","sources":["../../../src/core/storage/maintenance-providers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAGhF,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAGhC,MAAM,kBAAkB,CAAC;AAK1B,eAAO,MAAM,gCAAgC,EAAE,wBAI7C,CAAC;AAEH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,IAAI,OAAO,CAAC;IACnB,MAAM,IAAI,OAAO,CAAC;IAClB,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAClD;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,2BAA2B,GACpC,SAAS,0BAA0B,EAAE,CAMvC;AAED,mFAAmF;AACnF,wBAAgB,uCAAuC,CACrD,OAAO,EAAE,qBAAqB,GAC7B,SAAS,0BAA0B,EAAE,CAYvC;AAED,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,2BAA2B,GACpC,+BAA+B,CAMjC;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,WAAW,EAAE,+BAA+B,EAC5C,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAAO,GAC9D,OAAO,CAAC,iCAAiC,CAAC,CAS5C"}

package/dist/core/storage/maintenance-providers.js

@@ -5,6 +5,7 @@ import { createStorageCatalog } from "./catalog.js";
 import { HARNERY_STRUCTURED_LOG_PROVIDER_ID } from "./contract.js";
 import { createStructuredLogRetentionProvider } from "./log-retention.js";
 import { HARNERY_MAINTENANCE_CURSOR_SCHEMA, readMaintenanceTransaction, runAutomaticMaintenanceSlice, } from "./maintenance.js";
+import { stateFileMode } from "./modes.js";
 const STALE_RUNNING_CLAIM_MS = 10 * 60 * 1_000;
 export const SESSION_START_MAINTENANCE_BUDGET = Object.freeze({
     max_duration_ms: 250,
@@ -133,7 +134,7 @@ function recoverInterruptedDailyClaim(coordRoot, now) {
 }
 function atomicCursor(path, cursor) {
     const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
-    writeFileSync(temporary, `${JSON.stringify(cursor, null, 2)}\n`, { mode: 0o600 });
+    writeFileSync(temporary, `${JSON.stringify(cursor, null, 2)}\n`, { mode: stateFileMode() });
     renameSync(temporary, path);
 }
 function disabledResult() {

package/dist/core/storage/maintenance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../src/core/storage/maintenance.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAM1D,eAAO,MAAM,sCAAsC,EACjD,4CAAqD,CAAC;AACxD,eAAO,MAAM,kCAAkC,EAAG,wCAAiD,CAAC;AACpG,eAAO,MAAM,iCAAiC,EAAG,uCAAgD,CAAC;AAClG,eAAO,MAAM,mCAAmC,EAAG,6BAAsC,CAAC;AAO1F,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,mCAAmC,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,4BAA4B,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,gGAAgG;IAChG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,4BAA4B,CAAC;QACvC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,wBAAwB,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,8BAA8B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7E,KAAK,CAAC,KAAK,EAAE;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,wBAAwB,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,sCAAsC,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7C,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,OAAO,kCAAkC,CAAC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,0BAA0B,EAAE,wBAIvC,CAAC;AAEH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,QAAQ,EAAE,6BAA6B,EACvC,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,6BAA6B,CAAC,CAoGxC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,iCAAiC,CAAC,EAAE,OAAO,CAAA;CAAE,GACjF,OAAO,CAAC,6BAA6B,CAAC,CAsFxC;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACjF,OAAO,CAAC,iCAAiC,CAAC,CAyE5C;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,6BAA6B,CAM/B;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,6BAA6B,EAAE,CAO9F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,6BAA6B,GACrC,IAAI,CAGN;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,6BAA6B,GAAG,SAAS,CAMhG;AA0cD,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKlB"}
+{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../../../src/core/storage/maintenance.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAO1D,eAAO,MAAM,sCAAsC,EACjD,4CAAqD,CAAC;AACxD,eAAO,MAAM,kCAAkC,EAAG,wCAAiD,CAAC;AACpG,eAAO,MAAM,iCAAiC,EAAG,uCAAgD,CAAC;AAClG,eAAO,MAAM,mCAAmC,EAAG,6BAAsC,CAAC;AAO1F,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,mCAAmC,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,SAAS,4BAA4B,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,gGAAgG;IAChG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,4BAA4B,CAAC;QACvC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,wBAAwB,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,8BAA8B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7E,KAAK,CAAC,KAAK,EAAE;QACX,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,wBAAwB,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC;KACX,GAAG,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,sCAAsC,CAAC;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7C,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,OAAO,kCAAkC,CAAC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iCAAiC;IAChD,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,UAAU,GAAG,aAAa,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,0BAA0B,EAAE,wBAIvC,CAAC;AAEH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,QAAQ,EAAE,6BAA6B,EACvC,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,6BAA6B,CAAC,CAoGxC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,iCAAiC,CAAC,EAAE,OAAO,CAAA;CAAE,GACjF,OAAO,CAAC,6BAA6B,CAAC,CAsFxC;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,qBAAqB,EAC9B,SAAS,EAAE,SAAS,0BAA0B,EAAE,EAChD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACjF,OAAO,CAAC,iCAAiC,CAAC,CAyE5C;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,6BAA6B,CAM/B;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,6BAA6B,EAAE,CAO9F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,6BAA6B,GACrC,IAAI,CAGN;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,6BAA6B,GAAG,SAAS,CAMhG;AA0cD,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKlB"}

package/dist/core/storage/maintenance.js

@@ -3,6 +3,7 @@ import { appendFileSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync,
 import { basename, dirname, join, resolve } from "node:path";
 import { acquireNoClobberLease } from "../workflow/workspaces/leases.js";
 import { HARNERY_STRUCTURED_LOG_PROVIDER_ID, } from "./contract.js";
+import { stateDirMode, stateFileMode } from "./modes.js";
 export const HARNERY_MAINTENANCE_TRANSACTION_SCHEMA = "harnery.storage-maintenance-transaction/v1";
 export const HARNERY_MAINTENANCE_RECEIPT_SCHEMA = "harnery.storage-maintenance-receipt/v1";
 export const HARNERY_MAINTENANCE_CURSOR_SCHEMA = "harnery.storage-maintenance-cursor/v1";
@@ -413,7 +414,7 @@ function writeReceipt(coordRoot, transactionId, action, mutation, now) {
         committed_at: now.toISOString(),
     };
     const path = receiptPath(coordRoot, transactionId, action.action_id);
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    mkdirSync(dirname(path), { recursive: true, mode: stateDirMode() });
     writeExclusiveDurable(path, `${JSON.stringify(receipt, null, 2)}\n`);
 }
 function writeTransaction(coordRoot, transaction, replace) {
@@ -434,12 +435,12 @@ function updateTransaction(transaction, now, state, reasonCodes = transaction.re
 }
 function writeRunOutcome(coordRoot, transaction, now) {
     const root = join(resolve(coordRoot), ".harnery", "logs", "storage-maintenance");
-    mkdirSync(root, { recursive: true, mode: 0o700 });
+    mkdirSync(root, { recursive: true, mode: stateDirMode() });
     const active = join(root, "active.jsonl");
     if (existsSync(active) && statSync(active).size > 1_048_576) {
         renameSync(active, join(root, `sealed-${now.toISOString().replaceAll(/[:.]/g, "-")}.jsonl`));
     }
-    appendFileSync(active, `${JSON.stringify({ ts: now.toISOString(), transaction_id: transaction.transaction_id, state: transaction.state, actions: transaction.actions.length, files: transaction.actions.reduce((n, action) => n + action.files, 0), bytes: transaction.actions.reduce((n, action) => n + action.bytes, 0), reason_codes: transaction.reason_codes })}\n`, { encoding: "utf8", mode: 0o600 });
+    appendFileSync(active, `${JSON.stringify({ ts: now.toISOString(), transaction_id: transaction.transaction_id, state: transaction.state, actions: transaction.actions.length, files: transaction.actions.reduce((n, action) => n + action.files, 0), bytes: transaction.actions.reduce((n, action) => n + action.bytes, 0), reason_codes: transaction.reason_codes })}\n`, { encoding: "utf8", mode: stateFileMode() });
 }
 function readDailyCursor(coordRoot) {
     const path = join(resolve(coordRoot), ".harnery", "maintenance", "cursors", "daily.json");
@@ -554,9 +555,9 @@ function readJsonFile(path) {
     return JSON.parse(readFileSync(path, "utf8"));
 }
 function atomicJson(path, value, fsync) {
-    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    mkdirSync(dirname(path), { recursive: true, mode: stateDirMode() });
     const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
-    const fd = openSync(temporary, "wx", 0o600);
+    const fd = openSync(temporary, "wx", stateFileMode());
     try {
         writeFileSync(fd, `${JSON.stringify(value, null, 2)}\n`, "utf8");
         if (fsync)
@@ -568,7 +569,7 @@ function atomicJson(path, value, fsync) {
     renameSync(temporary, path);
 }
 function writeExclusiveDurable(path, value) {
-    const fd = openSync(path, "wx", 0o600);
+    const fd = openSync(path, "wx", stateFileMode());
     try {
         writeFileSync(fd, value, "utf8");
         fsyncSync(fd);

package/dist/core/storage/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/core/storage/metrics.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;CACzC;AAID,qBAAa,qBAAqB;;IAIhC,SAAS,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,SAAI,GAAG,IAAI;IAO3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,IAAI;IAMzC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI;IAUnE,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAI1F,IAAI,IAAI,sBAAsB;CAM/B;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,sBAAsB,EAC7B,GAAG,OAAa,GACf;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAqBhD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAOhF"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/core/storage/metrics.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,KAAK,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;CACzC;AAID,qBAAa,qBAAqB;;IAIhC,SAAS,CAAC,CAAC,SAAS,MAAM,sBAAsB,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,SAAI,GAAG,IAAI;IAO3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,IAAI;IAMzC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI;IAUnE,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI;IAI1F,IAAI,IAAI,sBAAsB;CAM/B;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,sBAAsB,EAC7B,GAAG,OAAa,GACf;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAwBhD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAOhF"}

package/dist/core/storage/metrics.js

@@ -1,5 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { stateFileMode } from "./modes.js";
 const HISTOGRAM_BUCKETS = [1, 2, 5, 10, 25, 50, 100, 250, 500, 1_000, 5_000];
 export class LogMetricsAccumulator {
     #delta = {};
@@ -54,7 +55,10 @@ export function mergeMetricsSidecar(path, delta, now = new Date()) {
     const merged = mergeMetrics(current, delta, now);
     const temporary = `${path}.tmp-${process.pid}-${randomUUID()}`;
     try {
-        writeFileSync(temporary, `${JSON.stringify(merged)}\n`, { encoding: "utf8", mode: 0o600 });
+        writeFileSync(temporary, `${JSON.stringify(merged)}\n`, {
+            encoding: "utf8",
+            mode: stateFileMode(),
+        });
         renameSync(temporary, path);
         return { merged: true, generation_reset: generationReset };
     }

package/dist/core/storage/modes.d.ts

@@ -0,0 +1,17 @@
+/** The sharing mode for this process, resolved once. Tests reset it with `resetStorageSharing`. */
+export declare function stateSharing(): "private" | "group";
+export declare function resetStorageSharing(): void;
+/**
+ * Mode for a directory of project state. Group mode includes setgid: Harnery chmods directories
+ * after creating them, and a plain 0770 would clear the bit, so files made inside would take the
+ * writer's own group instead of the project's, and other users could not read them.
+ */
+export declare function stateDirMode(): number;
+/** Mode for a file of project state. */
+export declare function stateFileMode(): number;
+/**
+ * True when a state file or directory is readable or writable by someone it should not be: anyone
+ * but the owner in private mode, anyone outside the owner and group in group mode.
+ */
+export declare function stateModeTooOpen(mode: number): boolean;
+//# sourceMappingURL=modes.d.ts.map

package/dist/core/storage/modes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modes.d.ts","sourceRoot":"","sources":["../../../src/core/storage/modes.ts"],"names":[],"mappings":"AAgBA,mGAAmG;AACnG,wBAAgB,YAAY,IAAI,SAAS,GAAG,OAAO,CASlD;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wCAAwC;AACxC,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD"}

package/dist/core/storage/modes.js

@@ -0,0 +1,47 @@
+/**
+ * The permission modes for everything Harnery writes as project state under `.harnery/`.
+ *
+ * `private` (the default) is owner-only: 0700 directories and 0600 files, exactly as before this
+ * module existed. `group` is for a project several Unix users share through one group, such as a
+ * workspace that several people's agents work in at once: 2770 (setgid) and 0660, with nothing ever granted
+ * to other users. Every state write takes its mode from here, and every integrity check that
+ * rejects a loosely permissioned file asks `stateModeTooOpen`, so the two cannot disagree.
+ *
+ * Personal state outside the project (browser cookies, sessions, pacing ledgers in the user's home)
+ * is not project state and stays owner-only regardless.
+ */
+import { storageSharing } from "../config.js";
+let resolved;
+/** The sharing mode for this process, resolved once. Tests reset it with `resetStorageSharing`. */
+export function stateSharing() {
+    if (resolved === undefined) {
+        resolved = storageSharing();
+        // A umask that strips group bits would quietly turn every group file back into an owner-only
+        // one, and the next user's write would fail. Keep the process's other-bits mask as it was.
+        if (resolved === "group" && typeof process.umask === "function")
+            process.umask(process.umask() & ~0o070);
+    }
+    return resolved;
+}
+export function resetStorageSharing() {
+    resolved = undefined;
+}
+/**
+ * Mode for a directory of project state. Group mode includes setgid: Harnery chmods directories
+ * after creating them, and a plain 0770 would clear the bit, so files made inside would take the
+ * writer's own group instead of the project's, and other users could not read them.
+ */
+export function stateDirMode() {
+    return stateSharing() === "group" ? 0o2770 : 0o700;
+}
+/** Mode for a file of project state. */
+export function stateFileMode() {
+    return stateSharing() === "group" ? 0o660 : 0o600;
+}
+/**
+ * True when a state file or directory is readable or writable by someone it should not be: anyone
+ * but the owner in private mode, anyone outside the owner and group in group mode.
+ */
+export function stateModeTooOpen(mode) {
+    return (mode & (stateSharing() === "group" ? 0o007 : 0o077)) !== 0;
+}

package/dist/core/storage/process-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-log.d.ts","sourceRoot":"","sources":["../../../src/core/storage/process-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AAgBzE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,MAAM,CAcnF;AAED,qBAAa,gBAAgB;;gBAIf,OAAO,EAAE,uBAAuB;IAa5C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAuB1B,eAAe,IAAI,IAAI;IAKvB,KAAK,IAAI,IAAI;IACb,KAAK,IAAI,IAAI;CAWd;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,YAAY,CAqBlF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAgBrF"}
+{"version":3,"file":"process-log.d.ts","sourceRoot":"","sources":["../../../src/core/storage/process-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AAiBzE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,MAAM,CAcnF;AAED,qBAAa,gBAAgB;;gBAIf,OAAO,EAAE,uBAAuB;IAa5C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAuB1B,eAAe,IAAI,IAAI;IAKvB,KAAK,IAAI,IAAI;IACb,KAAK,IAAI,IAAI;CAWd;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,YAAY,CAqBlF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAgBrF"}