nawabari 0.9.2 → 0.10.2

package/dist/domain/runtime-provider-tgrep.js

@@ -0,0 +1,537 @@
+import fs from "node:fs";
+import path from "node:path";
+import { DomainError, failure, success } from "./errors.js";
+import { createRuntimeFile, inspectRuntimeFile } from "./runtime-file-identity.js";
+import { CANONICAL_EXECUTABLE_ROOT, compileRuntimeExecutableProjection, runtimeExecutableProviderKey, } from "./runtime-executable-projection.js";
+import { projectSessionRuntimeProjection, STRICT_RUNTIME_POLICY, } from "./runtime-projection.js";
+import { TGREP_BACKEND_EVIDENCE, TGREP_BACKEND_PROVIDER, TGREP_BACKEND_REQUIREMENT, TGREP_NIX_INSTALLABLE, TGREP_NIXPKGS_REF, TGREP_RUNTIME_MATERIALIZATION_CONTRACT_ID, TGREP_RUNTIME_MATERIALIZATION_SCHEMA_VERSION, } from "./tgrep-runtime-materialization.js";
+/** Versioned identity for the public projected rg adapter. */
+export const TGREP_RG_PROVIDER_CONTRACT_ID = "nawabari.tgrep-rg-provider.v1";
+export const TGREP_RG_PROVIDER_SCHEMA_VERSION = 1;
+export const TGREP_RG_COMPATIBILITY_CONTRACT_ID = "nawabari.tgrep-rg-compatibility.v1";
+export const TGREP_RG_COMPATIBILITY_SCHEMA_VERSION = 1;
+/** The only public name supplied by this provider. There is deliberately no grep alias. */
+export const TGREP_RG_ENTRYPOINT_NAME = "rg";
+export const TGREP_RG_ADAPTER_TARGET = "/runtime/tgrep-rg-adapter/rg";
+export const TGREP_RG_PROVIDER = Object.freeze({
+    id: "tgrep-rg-provider",
+    requirement_id: TGREP_BACKEND_REQUIREMENT.id,
+});
+const supported = (id, rg, backend = rg, value = "none", conflict_group) => Object.freeze({
+    id,
+    status: "supported",
+    rg: Object.freeze([...rg]),
+    backend: Object.freeze([...backend]),
+    value,
+    ...(conflict_group === undefined ? {} : { conflict_group }),
+});
+const rejected = (id, rg) => Object.freeze({
+    id,
+    status: "rejected",
+    rg: Object.freeze([...rg]),
+    backend: Object.freeze([]),
+    value: "none",
+});
+/**
+ * Closed compatibility authority. Every supported spelling has one canonical
+ * backend transformation; all other spellings are rejected before spawn.
+ */
+export const TGREP_RG_COMPATIBILITY_MATRIX = Object.freeze([
+    supported("pattern-and-paths", ["<PATTERN>", "<PATH>..."], ["--", "<PATTERN>", "<PATH>..."]),
+    supported("files-mode", ["--files"]),
+    supported("ignore-case", ["-i", "--ignore-case"], ["--ignore-case"], "none", "case-mode"),
+    supported("case-sensitive", ["-s", "--case-sensitive"], ["--case-sensitive"], "none", "case-mode"),
+    supported("smart-case", ["-S", "--smart-case"], ["--smart-case"], "none", "case-mode"),
+    supported("fixed-strings", ["-F", "--fixed-strings"], ["--fixed-strings"]),
+    supported("word-regexp", ["-w", "--word-regexp"], ["--word-regexp"]),
+    supported("invert-match", ["-v", "--invert-match"], ["--invert-match"]),
+    supported("with-filename", ["-H", "--with-filename"], ["--with-filename"], "none", "filename-mode"),
+    supported("no-filename", ["-I", "--no-filename"], ["--no-filename"], "none", "filename-mode"),
+    supported("line-number", ["-n", "--line-number"], ["--line-number"], "none", "line-number-mode"),
+    supported("no-line-number", ["-N", "--no-line-number"], ["--no-line-number"], "none", "line-number-mode"),
+    supported("glob", ["-g", "--glob"], ["--glob"], "required"),
+    supported("iglob", ["--iglob"], ["--iglob"], "required"),
+    supported("hidden", ["--hidden"]),
+    supported("no-ignore", ["--no-ignore"]),
+    supported("no-messages", ["--no-messages"]),
+    supported("files-with-matches", ["-l", "--files-with-matches"], ["--files-with-matches"], "none", "file-result-mode"),
+    supported("files-without-match", ["--files-without-match"], ["--files-without-match"], "none", "file-result-mode"),
+    supported("count", ["-c", "--count"], ["--count"]),
+    supported("only-matching", ["-o", "--only-matching"], ["--only-matching"]),
+    supported("max-count", ["-m", "--max-count"], ["--max-count"], "required"),
+    supported("quiet", ["-q", "--quiet"], ["--quiet"]),
+    supported("max-depth", ["--max-depth"], ["--max-depth"], "required"),
+    rejected("unsupported-engine-and-rewrite", ["-P", "--pcre2", "--engine", "-r", "--replace"]),
+    rejected("unsupported-encoding-and-binary", ["-E", "--encoding", "--no-encoding", "-a", "--text", "--binary"]),
+    rejected("unsupported-output-rewrite", ["--json", "--vimgrep", "--color", "--colors", "--column", "--byte-offset"]),
+    rejected("unsupported-type-and-discovery", [
+        "-t",
+        "--type",
+        "--type-list",
+        "--type-add",
+        "--type-clear",
+        "--follow",
+        "-L",
+        "-u",
+        "--unrestricted",
+    ]),
+    rejected("unsupported-index-and-runtime-control", ["--index-path", "--no-index", "--stats", "--debug", "--trace"]),
+    rejected("unsupported-stdin", ["-"]),
+]);
+const OPTION_SPECS = TGREP_RG_COMPATIBILITY_MATRIX.filter((entry) => entry.status === "supported" && entry.id !== "pattern-and-paths");
+const MAX_ADAPTER_BYTES = 16 * 1024 * 1024;
+class AdapterContentConflict extends Error {
+    constructor() {
+        super("the existing rg adapter artifact conflicts with the pinned materialization");
+    }
+}
+const OPTION_BY_SPELLING = new Map(OPTION_SPECS.flatMap((entry) => entry.rg.map((spelling) => [spelling, entry])));
+function providerError(message, details = {}) {
+    return new DomainError("INVALID_ARGUMENT", message, {
+        provider: TGREP_RG_ENTRYPOINT_NAME,
+        compatibility_contract: TGREP_RG_COMPATIBILITY_CONTRACT_ID,
+        ...details,
+    });
+}
+function sourceIsCanonical(value) {
+    return (value.length > 0 &&
+        path.posix.isAbsolute(value) &&
+        !value.includes("\0") &&
+        path.posix.normalize(value) === value &&
+        value !== "/" &&
+        value !== CANONICAL_EXECUTABLE_ROOT &&
+        !value.startsWith(`${CANONICAL_EXECUTABLE_ROOT}/`));
+}
+function unsupportedOption(option, argv) {
+    return failure(providerError(`Projected rg rejects unsupported option '${option}' before invoking the pinned backend.`, {
+        option,
+        argv: [...argv],
+        supported: OPTION_SPECS.flatMap((entry) => entry.rg),
+        action: "remove the option or use only the closed compatibility subset",
+    }));
+}
+function missingOptionValue(option, argv) {
+    return failure(providerError(`Projected rg option '${option}' requires a value; the backend was not invoked.`, {
+        option,
+        argv: [...argv],
+    }));
+}
+function incompatibleOptions(left, right, argv) {
+    return failure(providerError(`Projected rg options '${left}' and '${right}' cannot be combined; the backend was not invoked.`, {
+        options: [left, right],
+        argv: [...argv],
+    }));
+}
+function isRepositoryRelativePath(value) {
+    if (value.length === 0 || path.posix.isAbsolute(value))
+        return false;
+    const normalized = path.posix.normalize(value);
+    return normalized !== ".." && !normalized.startsWith("../");
+}
+function validateRepositoryPaths(positionals, filesMode, argv) {
+    const paths = filesMode ? positionals : positionals.slice(1);
+    const invalid = paths.find((value) => !isRepositoryRelativePath(value));
+    if (invalid === undefined)
+        return success(null);
+    return failure(providerError(`Projected rg requires repository-relative paths; '${invalid}' is not allowed`, {
+        path: invalid,
+        argv: [...argv],
+        action: "use a path below the session worktree",
+    }));
+}
+/** Translate one raw rg argv using only the closed compatibility matrix. */
+export function translateTgrepRgArguments(argv) {
+    const options = [];
+    const beforeDelimiter = [];
+    const afterDelimiter = [];
+    const seenGroups = new Map();
+    const seenOptions = new Set();
+    let delimiter = false;
+    let filesMode = false;
+    for (let index = 0; index < argv.length; index += 1) {
+        const token = argv[index];
+        if (delimiter) {
+            afterDelimiter.push(token);
+            continue;
+        }
+        if (token === "--") {
+            delimiter = true;
+            continue;
+        }
+        if (token === "-")
+            return unsupportedOption(token, argv);
+        if (!token.startsWith("-") || token === "") {
+            beforeDelimiter.push(token);
+            continue;
+        }
+        const equal = token.indexOf("=");
+        const spelling = equal === -1 ? token : token.slice(0, equal);
+        const inlineValue = equal === -1 ? null : token.slice(equal + 1);
+        const spec = OPTION_BY_SPELLING.get(spelling);
+        if (spec === undefined || spec.status !== "supported")
+            return unsupportedOption(spelling, argv);
+        if (inlineValue !== null && spec.value === "none") {
+            return failure(providerError(`Projected rg option '${spelling}' does not accept an inline value; the backend was not invoked.`, {
+                option: spelling,
+                argv: [...argv],
+            }));
+        }
+        if (spec.conflict_group !== undefined) {
+            const prior = seenGroups.get(spec.conflict_group);
+            if (prior !== undefined && prior.id !== spec.id)
+                return incompatibleOptions(prior.spelling, spelling, argv);
+            seenGroups.set(spec.conflict_group, { id: spec.id, spelling });
+        }
+        if (spec.id === "files-mode" && beforeDelimiter.length > 0) {
+            return failure(providerError("Projected rg --files must appear before search paths; the backend was not invoked.", {
+                option: "--files",
+                argv: [...argv],
+            }));
+        }
+        seenOptions.add(spec.id);
+        if (spec.id === "files-mode")
+            filesMode = true;
+        options.push(...spec.backend);
+        if (spec.value === "required") {
+            const value = inlineValue ?? argv[index + 1];
+            if (value === undefined || value.length === 0 || (inlineValue === null && value.startsWith("-"))) {
+                return missingOptionValue(spelling, argv);
+            }
+            if (inlineValue === null)
+                index += 1;
+            options.push(value);
+        }
+    }
+    const positionals = [...beforeDelimiter, ...afterDelimiter];
+    if (positionals.includes("-"))
+        return unsupportedOption("-", argv);
+    if (filesMode) {
+        const searchOnlyOption = [
+            "ignore-case",
+            "case-sensitive",
+            "smart-case",
+            "fixed-strings",
+            "word-regexp",
+            "invert-match",
+            "with-filename",
+            "no-filename",
+            "line-number",
+            "no-line-number",
+            "files-with-matches",
+            "files-without-match",
+            "count",
+            "only-matching",
+            "max-count",
+            "quiet",
+        ].find((id) => seenOptions.has(id));
+        if (searchOnlyOption !== undefined) {
+            const option = OPTION_SPECS.find((entry) => entry.id === searchOnlyOption)?.rg[0] ?? searchOnlyOption;
+            return incompatibleOptions("--files", option, argv);
+        }
+        const paths = validateRepositoryPaths(positionals, true, argv);
+        if (!paths.ok)
+            return paths;
+        return success({ argv: [...options, "--", ...positionals], options, positionals, files_mode: true });
+    }
+    if (positionals.length === 0) {
+        return failure(providerError("Projected rg requires a pattern before invoking the pinned backend.", {
+            argv: [...argv],
+            action: "provide <PATTERN> and optional <PATH> values",
+        }));
+    }
+    const paths = validateRepositoryPaths(positionals, false, argv);
+    if (!paths.ok)
+        return paths;
+    return success({ argv: [...options, "--", ...positionals], options, positionals, files_mode: false });
+}
+function materializationError(message, details = {}) {
+    return failure(new DomainError("RUNTIME_MATERIALIZATION_MISSING", message, {
+        requirement_id: TGREP_BACKEND_REQUIREMENT.id,
+        requirement_kind: TGREP_BACKEND_REQUIREMENT.kind,
+        ...details,
+    }));
+}
+function exactNodeSource(materialization) {
+    const nodePackage = materialization.closure.packages.find((candidate) => candidate.requirement_id === "node-runtime");
+    if (nodePackage === undefined) {
+        return materializationError("The rg adapter requires the selected exact node-runtime materialization.");
+    }
+    const source = path.posix.join(nodePackage.root, "bin", "node");
+    const projected = materialization.closure.projection.filesystem.some((entry) => entry.source === nodePackage.root && entry.target === nodePackage.root);
+    if (!projected || !sourceIsCanonical(source)) {
+        return materializationError("The selected node-runtime executable is not in the exact strict closure projection.", {
+            node_source: source,
+        });
+    }
+    try {
+        const inspected = inspectRuntimeFile(source, (_descriptor, stat) => {
+            if ((stat.mode & 73n) === 0n)
+                throw new Error("not executable");
+            return undefined;
+        });
+        const resolved = inspected.source;
+        const inClosure = materialization.closure.store_paths.some((storePath) => resolved === storePath || resolved.startsWith(`${storePath}/`));
+        if (!inClosure) {
+            return materializationError("The selected node-runtime executable is not a regular executable file.", {
+                node_source: source,
+                ...(inClosure ? {} : { resolved_source: resolved }),
+            });
+        }
+    }
+    catch {
+        return materializationError("The selected node-runtime executable is unavailable.", { node_source: source });
+    }
+    if (/\s/u.test(source)) {
+        return materializationError("The selected node-runtime executable cannot be used as a shebang path.", {
+            node_source: source,
+        });
+    }
+    return success(source);
+}
+function canonicalArtifactRoot(root) {
+    if (!sourceIsCanonical(root)) {
+        return materializationError("The rg adapter artifact root must be a canonical absolute directory.", {
+            artifact_root: root,
+        });
+    }
+    try {
+        fs.mkdirSync(root, { recursive: true, mode: 0o755 });
+        if (!fs.lstatSync(root).isDirectory() || fs.realpathSync.native(root) !== root) {
+            return materializationError("The rg adapter artifact root is not a canonical directory.", {
+                artifact_root: root,
+            });
+        }
+    }
+    catch {
+        return materializationError("The rg adapter artifact root is unavailable.", { artifact_root: root });
+    }
+    return success(root);
+}
+function renderAdapterSource(nodeSource, backendSource) {
+    const specs = JSON.stringify(OPTION_SPECS);
+    const contract = JSON.stringify(TGREP_RG_COMPATIBILITY_CONTRACT_ID);
+    const backend = JSON.stringify(backendSource);
+    return `#!${nodeSource}
+import { spawn } from "node:child_process";
+import { posix } from "node:path";
+
+const CONTRACT = ${contract};
+const BACKEND = ${backend};
+const SPECS = ${specs};
+const BY_SPELLING = new Map(SPECS.flatMap((spec) => spec.rg.map((spelling) => [spelling, spec])));
+
+function reject(message, details = {}) {
+  const suffix = details.option === undefined ? "" : \` Option: \${details.option}.\`;
+  process.stderr.write(\`Projected rg rejected argv before backend execution (\${CONTRACT}): \${message}.\${suffix}\\n\`);
+  process.exitCode = 2;
+  return null;
+}
+
+function isRepositoryRelativePath(value) {
+  if (value.length === 0 || posix.isAbsolute(value)) return false;
+  const normalized = posix.normalize(value);
+  return normalized !== ".." && !normalized.startsWith("../");
+}
+
+function translate(argv) {
+  const options = [], before = [], after = [], groups = new Map(), seen = new Set();
+  let delimiter = false, filesMode = false;
+  for (let index = 0; index < argv.length; index += 1) {
+    const token = argv[index];
+    if (delimiter) { after.push(token); continue; }
+    if (token === "--") { delimiter = true; continue; }
+    if (token === "-") return reject("stdin search is unsupported", { option: token });
+    if (!token.startsWith("-") || token === "") { before.push(token); continue; }
+    const equal = token.indexOf("=");
+    const spelling = equal === -1 ? token : token.slice(0, equal);
+    const inlineValue = equal === -1 ? null : token.slice(equal + 1);
+    const spec = BY_SPELLING.get(spelling);
+    if (spec === undefined) return reject(\`unsupported option '\${spelling}'\`, { option: spelling });
+    if (inlineValue !== null && spec.value === "none") return reject(\`option '\${spelling}' does not accept an inline value\`, { option: spelling });
+    if (spec.conflict_group !== undefined) {
+      const prior = groups.get(spec.conflict_group);
+      if (prior !== undefined && prior.id !== spec.id) return reject(\`options '\${prior.spelling}' and '\${spelling}' are incompatible\`, { option: spelling });
+      groups.set(spec.conflict_group, { id: spec.id, spelling });
+    }
+    if (spec.id === "files-mode" && before.length > 0) return reject("--files must precede search paths", { option: "--files" });
+    seen.add(spec.id);
+    if (spec.id === "files-mode") filesMode = true;
+    options.push(...spec.backend);
+    if (spec.value === "required") {
+      const value = inlineValue ?? argv[index + 1];
+      if (value === undefined || value.length === 0 || (inlineValue === null && value.startsWith("-"))) return reject(\`option '\${spelling}' requires a value\`, { option: spelling });
+      if (inlineValue === null) index += 1;
+      options.push(value);
+    }
+  }
+  const positionals = [...before, ...after];
+  if (positionals.includes("-")) return reject("stdin search is unsupported", { option: "-" });
+  if (filesMode) {
+    const searchOnly = ["ignore-case", "case-sensitive", "smart-case", "fixed-strings", "word-regexp", "invert-match", "with-filename", "no-filename", "line-number", "no-line-number", "files-with-matches", "files-without-match", "count", "only-matching", "max-count", "quiet"].find((id) => seen.has(id));
+    if (searchOnly !== undefined) return reject(\`--files cannot be combined with '\${searchOnly}'\`, { option: "--files" });
+  }
+  if (!filesMode && positionals.length === 0) return reject("a search pattern is required");
+  const paths = filesMode ? positionals : positionals.slice(1);
+  const invalidPath = paths.find((value) => !isRepositoryRelativePath(value));
+  if (invalidPath !== undefined)
+    return reject(\`repository-relative paths only; '\${invalidPath}' is not allowed\`);
+  return [...options, "--", ...positionals];
+}
+
+const translated = translate(process.argv.slice(2));
+if (translated !== null && process.exitCode !== 2) {
+  const child = spawn(BACKEND, translated, { shell: false, stdio: "inherit" });
+  let spawnFailed = false;
+  child.once("error", (error) => {
+    spawnFailed = true;
+    process.stderr.write(\`Projected rg could not start its pinned backend: \${error.message.slice(0, 200)}\\n\`);
+    process.exitCode = 127;
+  });
+  child.once("close", (code, signal) => {
+    if (spawnFailed) return;
+    if (signal !== null) {
+      process.kill(process.pid, signal);
+      return;
+    }
+    process.exitCode = code ?? 1;
+  });
+}
+`;
+}
+/**
+ * Generate the concrete launcher artifact and feed it into #293's existing
+ * filesystem/executable projection. The supplied #308 materialization is the
+ * sole source of the tgrep backend and is never re-resolved here.
+ */
+export function materializeTgrepRgProvider(materialization, options) {
+    if (!options || typeof options.artifact_root !== "string") {
+        return materializationError("The rg provider requires an explicit artifact root.");
+    }
+    const policy = materialization.projection.policy;
+    if (policy.mode !== STRICT_RUNTIME_POLICY.mode ||
+        policy.host_visibility !== STRICT_RUNTIME_POLICY.host_visibility ||
+        policy.compatibility !== STRICT_RUNTIME_POLICY.compatibility ||
+        policy.unrestricted_host_fallback !== STRICT_RUNTIME_POLICY.unrestricted_host_fallback ||
+        materialization.projection.executables.length !== 0) {
+        return materializationError("The rg provider requires the strict #308 runtime materialization policy.");
+    }
+    if (materialization.contract_id !== TGREP_RUNTIME_MATERIALIZATION_CONTRACT_ID ||
+        materialization.schema_version !== TGREP_RUNTIME_MATERIALIZATION_SCHEMA_VERSION ||
+        materialization.backend !== "tgrep" ||
+        materialization.nixpkgs_ref !== TGREP_NIXPKGS_REF ||
+        materialization.nix_installable !== TGREP_NIX_INSTALLABLE ||
+        materialization.provider.id !== TGREP_BACKEND_PROVIDER.id ||
+        materialization.provider.requirement_id !== TGREP_BACKEND_PROVIDER.requirement_id ||
+        materialization.evidence.version !== TGREP_BACKEND_EVIDENCE.version ||
+        materialization.evidence.help_sha256 !== TGREP_BACKEND_EVIDENCE.help_sha256 ||
+        materialization.evidence.help_bytes !== TGREP_BACKEND_EVIDENCE.help_bytes) {
+        return materializationError("The supplied tgrep materialization is not the exact #308 artifact/evidence.");
+    }
+    const backendSource = materialization.executable_source;
+    if (materialization.executable_target !== backendSource ||
+        materialization.provider_materialization.source !== backendSource ||
+        materialization.provider_materialization.provider.id !== TGREP_BACKEND_PROVIDER.id ||
+        materialization.provider_materialization.provider.requirement_id !== TGREP_BACKEND_PROVIDER.requirement_id) {
+        return materializationError("The supplied tgrep provider materialization is not internally consistent.");
+    }
+    if (!sourceIsCanonical(backendSource)) {
+        return materializationError("The supplied tgrep executable source is not canonical or is recursion-prone.", {
+            backend_source: backendSource,
+        });
+    }
+    const tgrepPackage = materialization.closure.packages.find((candidate) => candidate.requirement_id === TGREP_BACKEND_REQUIREMENT.id);
+    if (tgrepPackage === undefined ||
+        backendSource !== path.posix.join(tgrepPackage.root, "bin", "tgrep") ||
+        !tgrepPackage.closure.every((storePath) => materialization.projection.filesystem.some((entry) => entry.source === storePath && entry.target === storePath))) {
+        return materializationError("The supplied tgrep executable is not backed by the exact #308 closure projection.");
+    }
+    const node = exactNodeSource(materialization);
+    if (!node.ok)
+        return node;
+    const artifactRoot = canonicalArtifactRoot(options.artifact_root);
+    if (!artifactRoot.ok)
+        return artifactRoot;
+    const adapterSource = path.join(artifactRoot.value, TGREP_RG_ENTRYPOINT_NAME);
+    const content = renderAdapterSource(node.value, backendSource);
+    try {
+        try {
+            inspectRuntimeFile(adapterSource, (descriptor, stat) => {
+                if (stat.size > BigInt(MAX_ADAPTER_BYTES))
+                    throw new Error("the adapter exceeds the bounded size");
+                if (fs.readFileSync(descriptor, "utf8") !== content)
+                    throw new AdapterContentConflict();
+                fs.fchmodSync(descriptor, 0o755);
+                return undefined;
+            }, { requireCanonicalPath: true });
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            createRuntimeFile(adapterSource, (descriptor) => {
+                fs.writeFileSync(descriptor, content, { encoding: "utf8" });
+                fs.fchmodSync(descriptor, 0o755);
+                return undefined;
+            });
+        }
+    }
+    catch (error) {
+        if (error instanceof AdapterContentConflict) {
+            return materializationError("The existing rg adapter artifact conflicts with the pinned materialization.", {
+                adapter_source: adapterSource,
+            });
+        }
+        return materializationError("The rg adapter artifact could not be materialized.", {
+            adapter_source: adapterSource,
+        });
+    }
+    const projection = projectSessionRuntimeProjection({
+        ...materialization.projection,
+        filesystem: [
+            ...materialization.projection.filesystem,
+            {
+                source: adapterSource,
+                target: TGREP_RG_ADAPTER_TARGET,
+                access_mode: "read-only",
+                provenance: "package",
+            },
+        ],
+        executables: [
+            {
+                name: TGREP_RG_ENTRYPOINT_NAME,
+                target: TGREP_RG_ADAPTER_TARGET,
+                provider: TGREP_RG_PROVIDER,
+                provenance: "package",
+            },
+        ],
+    });
+    if (!projection.ok)
+        return failure(projection.error);
+    const providerMaterialization = Object.freeze({
+        provider: TGREP_RG_PROVIDER,
+        source: adapterSource,
+    });
+    // Exercise the same #293 materialization input used by consumers before
+    // returning the artifact, so a malformed provider cannot escape this API.
+    const compiled = compileRuntimeExecutableProjection(projection.value, new Map([[runtimeExecutableProviderKey(TGREP_RG_PROVIDER), providerMaterialization]]));
+    if (!compiled.ok) {
+        return materializationError("The generated rg provider did not satisfy the canonical executable projection.", {
+            reason: compiled.error.message,
+        });
+    }
+    return success(Object.freeze({
+        contract_id: TGREP_RG_PROVIDER_CONTRACT_ID,
+        schema_version: TGREP_RG_PROVIDER_SCHEMA_VERSION,
+        compatibility_contract_id: TGREP_RG_COMPATIBILITY_CONTRACT_ID,
+        compatibility_schema_version: TGREP_RG_COMPATIBILITY_SCHEMA_VERSION,
+        backend_source: backendSource,
+        node_source: node.value,
+        adapter_source: adapterSource,
+        adapter_target: TGREP_RG_ADAPTER_TARGET,
+        provider: TGREP_RG_PROVIDER,
+        provider_materialization: providerMaterialization,
+        projection: projection.value,
+    }));
+}
+export const materializeTgrepRgRuntime = materializeTgrepRgProvider;
+export const projectTgrepRgRuntime = materializeTgrepRgProvider;
+//# sourceMappingURL=runtime-provider-tgrep.js.map

package/dist/domain/runtime-provider-tgrep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-provider-tgrep.js","sourceRoot":"","sources":["../../src/domain/runtime-provider-tgrep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAsC,MAAM,aAAa,CAAC;AAEhG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,yBAAyB,EACzB,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,+BAA+B,EAC/B,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,yCAAyC,EACzC,4CAA4C,GAE7C,MAAM,oCAAoC,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAAwC,CAAC;AACtF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAC3D,MAAM,CAAC,MAAM,kCAAkC,GAAG,oCAA6C,CAAC;AAChG,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAU,CAAC;AAEhE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAa,CAAC;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAAuC,CAAC;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,mBAAmB;IACvB,cAAc,EAAE,yBAAyB,CAAC,EAAE;CAC7C,CAAC,CAAC;AAWH,MAAM,SAAS,GAAG,CAChB,EAAU,EACV,EAAqB,EACrB,UAA6B,EAAE,EAC/B,QAA6B,MAAM,EACnC,cAAuB,EACI,EAAE,CAC7B,MAAM,CAAC,MAAM,CAAC;IACZ,EAAE;IACF,MAAM,EAAE,WAAoB;IAC5B,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACpC,KAAK;IACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAqB,EAA6B,EAAE,CAChF,MAAM,CAAC,MAAM,CAAC;IACZ,EAAE;IACF,MAAM,EAAE,UAAmB;IAC3B,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAe;CACvB,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAyC,MAAM,CAAC,MAAM,CAAC;IAC/F,SAAS,CAAC,mBAAmB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC5F,SAAS,CAAC,YAAY,EAAE,CAAC,SAAS,CAAC,CAAC;IACpC,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;IACzF,SAAS,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;IAClG,SAAS,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;IACtF,SAAS,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC1E,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;IACpE,SAAS,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;IACvE,SAAS,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC;IACnG,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC;IAC7F,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC;IAChG,SAAS,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC;IACzG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC3D,SAAS,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IACxD,SAAS,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC;IACjC,SAAS,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;IACvC,SAAS,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,CAAC;IAC3C,SAAS,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC;IACrH,SAAS,CAAC,qBAAqB,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC;IAClH,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,SAAS,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC;IAC1E,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;IAC1E,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,SAAS,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;IACpE,QAAQ,CAAC,gCAAgC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5F,QAAQ,CAAC,iCAAiC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9G,QAAQ,CAAC,4BAA4B,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACnH,QAAQ,CAAC,gCAAgC,EAAE;QACzC,IAAI;QACJ,QAAQ;QACR,aAAa;QACb,YAAY;QACZ,cAAc;QACd,UAAU;QACV,IAAI;QACJ,IAAI;QACJ,gBAAgB;KACjB,CAAC;IACF,QAAQ,CAAC,uCAAuC,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClH,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC;CACrC,CAAC,CAAC;AAIH,MAAM,YAAY,GAA0B,6BAA6B,CAAC,MAAM,CAC9E,CAAC,KAAK,EAAyE,EAAE,CAC/E,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,EAAE,KAAK,mBAAmB,CACnE,CAAC;AACF,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,sBAAuB,SAAQ,KAAK;IACxC;QACE,KAAK,CAAC,4EAA4E,CAAC,CAAC;IACtF,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AASnH,SAAS,aAAa,CAAC,OAAe,EAAE,UAAsB,EAAE;IAC9D,OAAO,IAAI,WAAW,CAAC,kBAAkB,EAAE,OAAO,EAAE;QAClD,QAAQ,EAAE,wBAAwB;QAClC,sBAAsB,EAAE,kCAAkC;QAC1D,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CACL,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK;QACrC,KAAK,KAAK,GAAG;QACb,KAAK,KAAK,yBAAyB;QACnC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,yBAAyB,GAAG,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAuB;IAChE,OAAO,OAAO,CACZ,aAAa,CAAC,4CAA4C,MAAM,uCAAuC,EAAE;QACvG,MAAM;QACN,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,+DAA+D;KACxE,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,IAAuB;IACjE,OAAO,OAAO,CACZ,aAAa,CAAC,wBAAwB,MAAM,kDAAkD,EAAE;QAC9F,MAAM;QACN,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAE,IAAuB;IAC/E,OAAO,OAAO,CACZ,aAAa,CAAC,yBAAyB,IAAI,UAAU,KAAK,oDAAoD,EAAE;QAC9G,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAA8B,EAC9B,SAAkB,EAClB,IAAuB;IAEvB,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,OAAO,CACZ,aAAa,CAAC,qDAAqD,OAAO,kBAAkB,EAAE;QAC5F,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,MAAM,EAAE,uCAAuC;KAChD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,yBAAyB,CAAC,IAAuB;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8D,CAAC;IACzF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAW,CAAC;QACpC,IAAI,SAAS,EAAE,CAAC;YACd,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC3C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChG,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAClD,OAAO,OAAO,CACZ,aAAa,CACX,wBAAwB,QAAQ,iEAAiE,EACjG;gBACE,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;aAChB,CACF,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;gBAAE,OAAO,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5G,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,OAAO,OAAO,CACZ,aAAa,CAAC,oFAAoF,EAAE;gBAClG,MAAM,EAAE,SAAS;gBACjB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;aAChB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY;YAAE,SAAS,GAAG,IAAI,CAAC;QAE/C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,WAAW,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACjG,OAAO,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,WAAW,KAAK,IAAI;gBAAE,KAAK,IAAI,CAAC,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,CAAC;IAC5D,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,gBAAgB,GAAG;YACvB,aAAa;YACb,gBAAgB;YAChB,YAAY;YACZ,eAAe;YACf,aAAa;YACb,cAAc;YACd,eAAe;YACf,aAAa;YACb,aAAa;YACb,gBAAgB;YAChB,oBAAoB;YACpB,qBAAqB;YACrB,OAAO;YACP,eAAe;YACf,WAAW;YACX,OAAO;SACR,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC;YACtG,OAAO,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CACZ,aAAa,CAAC,qEAAqE,EAAE;YACnF,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,MAAM,EAAE,8CAA8C;SACvD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,UAAsB,EAAE;IACrE,OAAO,OAAO,CACZ,IAAI,WAAW,CAAC,iCAAiC,EAAE,OAAO,EAAE;QAC1D,cAAc,EAAE,yBAAyB,CAAC,EAAE;QAC5C,gBAAgB,EAAE,yBAAyB,CAAC,IAAI;QAChD,GAAG,OAAO;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,eAA4C;IACnE,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;IACtH,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,oBAAoB,CAAC,0EAA0E,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAClE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,CAClF,CAAC;IACF,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,OAAO,oBAAoB,CAAC,qFAAqF,EAAE;YACjH,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE;YACjE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAC9E,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,oBAAoB,CAAC,wEAAwE,EAAE;gBACpG,WAAW,EAAE,MAAM;gBACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAC,sDAAsD,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO,oBAAoB,CAAC,wEAAwE,EAAE;YACpG,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,oBAAoB,CAAC,sEAAsE,EAAE;YAClG,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/E,OAAO,oBAAoB,CAAC,4DAA4D,EAAE;gBACxF,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAC,8CAA8C,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,aAAqB;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC9C,OAAO,KAAK,UAAU;;;;mBAIL,QAAQ;kBACT,OAAO;gBACT,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+EpB,CAAC;AACF,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,eAA4C,EAC5C,OAAqD;IAErD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC;IACjD,IACE,MAAM,CAAC,IAAI,KAAK,qBAAqB,CAAC,IAAI;QAC1C,MAAM,CAAC,eAAe,KAAK,qBAAqB,CAAC,eAAe;QAChE,MAAM,CAAC,aAAa,KAAK,qBAAqB,CAAC,aAAa;QAC5D,MAAM,CAAC,0BAA0B,KAAK,qBAAqB,CAAC,0BAA0B;QACtF,eAAe,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EACnD,CAAC;QACD,OAAO,oBAAoB,CAAC,0EAA0E,CAAC,CAAC;IAC1G,CAAC;IACD,IACE,eAAe,CAAC,WAAW,KAAK,yCAAyC;QACzE,eAAe,CAAC,cAAc,KAAK,4CAA4C;QAC/E,eAAe,CAAC,OAAO,KAAK,OAAO;QACnC,eAAe,CAAC,WAAW,KAAK,iBAAiB;QACjD,eAAe,CAAC,eAAe,KAAK,qBAAqB;QACzD,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,sBAAsB,CAAC,EAAE;QACzD,eAAe,CAAC,QAAQ,CAAC,cAAc,KAAK,sBAAsB,CAAC,cAAc;QACjF,eAAe,CAAC,QAAQ,CAAC,OAAO,KAAK,sBAAsB,CAAC,OAAO;QACnE,eAAe,CAAC,QAAQ,CAAC,WAAW,KAAK,sBAAsB,CAAC,WAAW;QAC3E,eAAe,CAAC,QAAQ,CAAC,UAAU,KAAK,sBAAsB,CAAC,UAAU,EACzE,CAAC;QACD,OAAO,oBAAoB,CAAC,6EAA6E,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,aAAa,GAAG,eAAe,CAAC,iBAAiB,CAAC;IACxD,IACE,eAAe,CAAC,iBAAiB,KAAK,aAAa;QACnD,eAAe,CAAC,wBAAwB,CAAC,MAAM,KAAK,aAAa;QACjE,eAAe,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,KAAK,sBAAsB,CAAC,EAAE;QAClF,eAAe,CAAC,wBAAwB,CAAC,QAAQ,CAAC,cAAc,KAAK,sBAAsB,CAAC,cAAc,EAC1G,CAAC;QACD,OAAO,oBAAoB,CAAC,2EAA2E,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QACtC,OAAO,oBAAoB,CAAC,8EAA8E,EAAE;YAC1G,cAAc,EAAE,aAAa;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,KAAK,yBAAyB,CAAC,EAAE,CACzE,CAAC;IACF,IACE,YAAY,KAAK,SAAS;QAC1B,aAAa,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;QACpE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CACxC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAChH,EACD,CAAC;QACD,OAAO,oBAAoB,CAAC,mFAAmF,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,IAAI,CAAC;YACH,kBAAkB,CAChB,aAAa,EACb,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE;gBACnB,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACnG,IAAI,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,OAAO;oBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;gBACxF,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,SAAS,CAAC;YACnB,CAAC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,iBAAiB,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC9C,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC5D,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACjC,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,OAAO,oBAAoB,CAAC,6EAA6E,EAAE;gBACzG,cAAc,EAAE,aAAa;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,oBAAoB,CAAC,oDAAoD,EAAE;YAChF,cAAc,EAAE,aAAa;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,+BAA+B,CAAC;QACjD,GAAG,eAAe,CAAC,UAAU;QAC7B,UAAU,EAAE;YACV,GAAG,eAAe,CAAC,UAAU,CAAC,UAAU;YACxC;gBACE,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,uBAAuB;gBAC/B,WAAW,EAAE,WAAoB;gBACjC,UAAU,EAAE,SAAkB;aAC/B;SACF;QACD,WAAW,EAAE;YACX;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,SAAkB;aAC/B;SACF;KACF,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,uBAAuB,GAA6C,MAAM,CAAC,MAAM,CAAC;QACtF,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,aAAa;KACtB,CAAC,CAAC;IACH,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,kCAAkC,CACjD,UAAU,CAAC,KAAK,EAChB,IAAI,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CACtF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,oBAAoB,CAAC,gFAAgF,EAAE;YAC5G,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CACZ,MAAM,CAAC,MAAM,CAAC;QACZ,WAAW,EAAE,6BAA6B;QAC1C,cAAc,EAAE,gCAAgC;QAChD,yBAAyB,EAAE,kCAAkC;QAC7D,4BAA4B,EAAE,qCAAqC;QACnE,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,IAAI,CAAC,KAAK;QACvB,cAAc,EAAE,aAAa;QAC7B,cAAc,EAAE,uBAAuB;QACvC,QAAQ,EAAE,iBAAiB;QAC3B,wBAAwB,EAAE,uBAAuB;QACjD,UAAU,EAAE,UAAU,CAAC,KAAK;KAC7B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC"}

package/dist/domain/runtime-resolution.d.ts

@@ -0,0 +1,57 @@
+import { type DomainResult } from "./errors.js";
+import { type NixRuntimeClosureOptions } from "./nix-runtime-closure.js";
+import { type ResolvedRuntimeProfile, type RuntimeProfileSelection } from "./runtime-profile.js";
+import { type RuntimePolicy, type RuntimeProfileIdentity, type SessionRuntimeProjection } from "./runtime-projection.js";
+import type { SandboxRuntimeLayout } from "./sandbox.js";
+/** Materializer selected by the host layout, or the explicit compatibility path. */
+export type RuntimeMaterializer = "nix" | "fhs" | "compatibility" | "provided";
+/** Bounded evidence attached to a resolved protected execution request. */
+export type RuntimeResolutionEvidence = Readonly<{
+    readonly policy: RuntimePolicy;
+    readonly profile: RuntimeProfileIdentity;
+    readonly materializer: RuntimeMaterializer;
+}>;
+export type RuntimeResolution = RuntimeResolutionEvidence & Readonly<{
+    readonly projection: SessionRuntimeProjection;
+}>;
+export type RuntimeResolutionFhsOptions = Readonly<{
+    /** Optional bounded ELF search paths forwarded to the canonical FHS resolver. */
+    readonly library_search_paths?: readonly string[];
+}>;
+export type RuntimeResolutionOptions = Readonly<{
+    readonly policy?: RuntimePolicy;
+    /** An already resolved internal profile may be supplied by a caller. */
+    readonly profile?: ResolvedRuntimeProfile;
+    readonly profile_selection?: RuntimeProfileSelection;
+    readonly platform: string;
+    readonly runtime_layout: SandboxRuntimeLayout;
+    readonly nix?: NixRuntimeClosureOptions;
+    readonly fhs?: RuntimeResolutionFhsOptions;
+}>;
+export type RuntimeMaterializerAvailability = Readonly<{
+    readonly selected: RuntimeMaterializer | null;
+    readonly available: readonly RuntimeMaterializer[];
+    readonly strict_ready: boolean;
+    readonly reason: string | null;
+}>;
+export type RuntimeDoctorReport = Readonly<RuntimeMaterializerAvailability & {
+    readonly default_policy: RuntimePolicy;
+    readonly default_profile: RuntimeProfileIdentity;
+    readonly compatibility_available: boolean;
+    readonly compatibility_policy: RuntimePolicy;
+}>;
+/**
+ * Select a materializer from explicit host-layout evidence. The selection is
+ * made once; callers must not retry a failed selected materializer with the
+ * other platform path.
+ */
+export declare function runtimeMaterializerAvailability(platform: string, layout: SandboxRuntimeLayout): RuntimeMaterializerAvailability;
+/** Diagnostic projection of the same deterministic materializer selection. */
+export declare function runtimeDoctorReport(platform: string, layout: SandboxRuntimeLayout): RuntimeDoctorReport;
+/**
+ * Compose the canonical runtime pipeline. This function has no fallback
+ * branch after a strict materializer is selected.
+ */
+export declare function resolveRuntimeProjection(options: RuntimeResolutionOptions): DomainResult<RuntimeResolution>;
+export declare const resolveRuntimeResolution: typeof resolveRuntimeProjection;
+export declare const resolveSessionRuntimeProjection: typeof resolveRuntimeProjection;