niceeval 0.16.3-canary.99 → 0.17.0

package/dist/run/host/lifecycle-adapter.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle-adapter.js","sourceRoot":"","sources":["lifecycle-adapter.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,qCAAqC;AACrC,yCAAoC;AACpC,mCAA0C;AAE1C,6DAAkE;AAClE,kDAAsK;AAEtK,yCAA8D;AAgB9D,SAAS,WAAW,CAAC,GAAW;IAC5B,OAAO,IAAA,mBAAO,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AACD,SAAS,cAAc,CAAC,IAAY;IAChC,OAAO,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,aAAa,CAAC,KAAa,EAAE,KAAc;IAChD,IAAI,KAAK,YAAY,yBAAc;QAC/B,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,YAAY,6BAAiB,IAAI,KAAK,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,OAA0C,CAAC;YAChE,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO,KAAK,qBAAqB,YAAY,CAAC,MAAM,kCAAkC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,eAAe,OAAO,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC3O,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;gBACtC,KAAK;aACR,CAAC,CAAC;QACP,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,eAAe,OAAO,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrK,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO,KAAK,qBAAqB,KAAK,CAAC,YAAY,CAAC,MAAM,kCAAkC,YAAY,GAAG;gBACpH,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,IAAI,yBAAc,CAAC;QACtB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,wBAAwB;QACtF,KAAK;KACR,CAAC,CAAC;AACP,CAAC;AACD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACjD,IAAI,KAAK,YAAY,0BAAe;QAChC,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,0BAAe,CAAC;gBACvB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;gBACtC,KAAK;aACR,CAAC,CAAC;QACP,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACjF,OAAO,IAAI,0BAAe,CAAC;gBACvB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,OAAO,KAAK,kDAAkD;gBACvE,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,IAAI,0BAAe,CAAC;QACvB,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,0BAA0B;QACxF,KAAK;KACR,CAAC,CAAC;AACP,CAAC;AACY,QAAA,yBAAyB,GAAwB,MAAM,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAGpB,EAAE,EAAE;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;gBAClC,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;aACzC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,eAAM,CAAC,OAAO,CAAC,iBAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,mCAAwB,EAAC,IAAI,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;oBACzC,SAAS,EAAE,QAAQ;oBACnB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;iBACzC,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;oBACzC,SAAS,EAAE,QAAQ;oBACnB,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,OAAO,KAAK,mCAAmC;iBAC3D,CAAC,CAAC,CAAC;YACR,CAAC;YACD,KAAK,CAAC,CAAC,IAAA,4BAAiB,EAAC,IAAI,EAAE;gBAC3B,KAAK;gBACL,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,SAAS,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;gBAClC,eAAe,EAAE,iBAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK;aACvD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAGrB,EAAE,EAAE;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;gBACnC,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;aACzC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,eAAM,CAAC,OAAO,CAAC,iBAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,mCAAwB,EAAC,IAAI,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;iBACzC,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,OAAO,KAAK,eAAe,GAAG,CAAC,KAAK,GAAG;iBACnD,CAAC,CAAC,CAAC;YACR,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,sCAA2B,EAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACtE,IAAI,WAAW,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,OAAO,KAAK,gDAAgD;iBACxE,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,OAAO,KAAK,yDAAyD;iBACjF,CAAC,CAAC,CAAC;YACR,CAAC;YACD,KAAK,CAAC,CAAC,IAAA,6BAAkB,EAAC,IAAI,EAAE;gBAC5B,KAAK;gBACL,wBAAwB,EAAE,GAAG,CAAC,gBAAgB;gBAC9C,wBAAwB,EAAE,eAAe,IAAA,wBAAU,GAAE,EAAE;gBACvD,WAAW,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;gBACpC,QAAQ,EAAE;oBACN,IAAI,EAAE,mCAAmC;oBACzC,QAAQ,EAAE,WAAW,CAAC,gBAAgB;oBACtC,UAAU,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;iBACtC;gBACD,eAAe,EAAE,iBAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK;aACvD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,aAAsB,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;CACJ,CAAC,CAAC;AACU,QAAA,8BAA8B,GAAwB,MAAM,CAAC,MAAM,CAAC;IAC7E,MAAM,EAAE,CAAC,EAAE,KAAK,EAGf,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,OAAO,KAAK,wEAAwE;KAChG,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,EAAE,KAAK,EAGhB,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;QAClC,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,OAAO,KAAK,0EAA0E;KAClG,CAAC,CAAC;CACN,CAAC,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { DateTime, Effect } from \"effect\";\nimport type { ProjectStateDatabase } from \"../../record/sqlite/project-state-database.ts\";\nimport { SqliteRecordError } from \"../../record/sqlite/errors.ts\";\nimport { currentPublicationCutoff, deleteRunResource, observeRunWriterTermination, readRunResource, recoverRunResource, RunStorageError, } from \"../storage/index.ts\";\nimport type { RunDeleteReceipt, RunRecoverReceipt, } from \"./types.ts\";\nimport { RunDeleteError, RunRecoverError, } from \"./types.ts\";\n/**\n * Narrow wiring seam for the Run-owned SQLite adapter. The current Record\n * runtime cannot yet delete terminal Runs or fence and recover an active\n * writer, so the public Host fails closed instead of rebranding `clean`.\n */\nexport interface RunLifecycleAdapter {\n    readonly delete: (request: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.Effect<RunDeleteReceipt, RunDeleteError, ProjectStateDatabase>;\n    readonly recover: (request: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.Effect<RunRecoverReceipt, RunRecoverError, ProjectStateDatabase>;\n}\nfunction storageRoot(cwd: string): string {\n    return resolve(cwd, \".niceeval\");\n}\nfunction databaseExists(root: string): boolean {\n    return existsSync(resolve(root, \"record.sqlite\"));\n}\nfunction deleteFailure(runId: string, cause: unknown): RunDeleteError {\n    if (cause instanceof RunDeleteError)\n        return cause;\n    if (cause instanceof SqliteRecordError && cause.cause instanceof Error && cause.cause.name === \"run-delete-reference-conflict\") {\n        const details = Reflect.get(cause.cause, \"details\");\n        if (Array.isArray(details)) {\n            const dependencies = details as RunStorageError[\"dependencies\"];\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-referenced\",\n                message: `Run ${runId} is referenced by ${dependencies.length} published Attempt binding(s): ${dependencies.map((dependency) => `${dependency.dependentRunId}/${dependency.dependentSlotId} -> ${dependency.attemptLocator}`).join(\", \")}.`,\n                cause,\n            });\n        }\n    }\n    if (cause instanceof RunStorageError) {\n        if (cause.code === \"run-not-found\") {\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n                cause,\n            });\n        }\n        if (cause.code === \"run-delete-reference-conflict\") {\n            const dependencies = cause.dependencies.map((dependency) => `${dependency.dependentRunId}/${dependency.dependentSlotId} -> ${dependency.attemptLocator}`).join(\", \");\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-referenced\",\n                message: `Run ${runId} is referenced by ${cause.dependencies.length} published Attempt binding(s): ${dependencies}.`,\n                cause,\n            });\n        }\n    }\n    return new RunDeleteError({\n        operation: \"delete\",\n        code: \"run-delete-failed\",\n        message: cause instanceof Error ? cause.message : `Run ${runId} could not be deleted.`,\n        cause,\n    });\n}\nfunction recoverFailure(runId: string, cause: unknown): RunRecoverError {\n    if (cause instanceof RunRecoverError)\n        return cause;\n    if (cause instanceof RunStorageError) {\n        if (cause.code === \"run-not-found\") {\n            return new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n                cause,\n            });\n        }\n        if (cause.code === \"run-not-active\" || cause.code === \"writer-generation-mismatch\") {\n            return new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-recover-failed\",\n                message: `Run ${runId} changed before recovery could fence its writer.`,\n                cause,\n            });\n        }\n    }\n    return new RunRecoverError({\n        operation: \"recover\",\n        code: \"run-recover-failed\",\n        message: cause instanceof Error ? cause.message : `Run ${runId} could not be recovered.`,\n        cause,\n    });\n}\nexport const sqliteRunLifecycleAdapter: RunLifecycleAdapter = Object.freeze({\n    delete: ({ cwd, runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => {\n        const root = storageRoot(cwd);\n        if (!databaseExists(root)) {\n            return Effect.fail(new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n            }));\n        }\n        return Effect.flatMap(DateTime.now, (now) => Effect.gen(function* () {\n            const cutoff = yield* currentPublicationCutoff(root);\n            const run = yield* readRunResource(root, runId, cutoff);\n            if (run === undefined) {\n                return yield* Effect.fail(new RunDeleteError({\n                    operation: \"delete\",\n                    code: \"run-not-found\",\n                    message: `Run ${runId} was not found.`,\n                }));\n            }\n            if (run.state === \"active\") {\n                return yield* Effect.fail(new RunDeleteError({\n                    operation: \"delete\",\n                    code: \"run-active\",\n                    message: `Run ${runId} is active and cannot be deleted.`,\n                }));\n            }\n            yield* deleteRunResource(root, {\n                runId,\n                expectedState: run.state,\n                deletedAt: DateTime.formatIso(now),\n                deadlineEpochMs: DateTime.toEpochMillis(now) + 30000,\n            });\n            return Object.freeze({ runId, state: \"deleted\" as const });\n        }).pipe(Effect.mapError((cause) => deleteFailure(runId, cause))));\n    },\n    recover: ({ cwd, runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => {\n        const root = storageRoot(cwd);\n        if (!databaseExists(root)) {\n            return Effect.fail(new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n            }));\n        }\n        return Effect.flatMap(DateTime.now, (now) => Effect.gen(function* () {\n            const cutoff = yield* currentPublicationCutoff(root);\n            const run = yield* readRunResource(root, runId, cutoff);\n            if (run === undefined) {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-not-found\",\n                    message: `Run ${runId} was not found.`,\n                }));\n            }\n            if (run.state !== \"active\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-terminal\",\n                    message: `Run ${runId} is already ${run.state}.`,\n                }));\n            }\n            const observation = observeRunWriterTermination(run.writerGeneration);\n            if (observation.state === \"active\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-owner-active\",\n                    message: `Run ${runId} still has a live writer; recovery is refused.`,\n                }));\n            }\n            if (observation.state === \"unproven\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-owner-termination-unproven\",\n                    message: `Run ${runId} recovery requires verified owner-termination evidence.`,\n                }));\n            }\n            yield* recoverRunResource(root, {\n                runId,\n                expectedWriterGeneration: run.writerGeneration,\n                recoveryWriterGeneration: `recovery-v1:${randomUUID()}`,\n                completedAt: DateTime.formatIso(now),\n                evidence: {\n                    kind: \"local-linux-process-terminated-v1\",\n                    identity: observation.evidenceIdentity,\n                    observedAt: DateTime.formatIso(now),\n                },\n                deadlineEpochMs: DateTime.toEpochMillis(now) + 30000,\n            });\n            return Object.freeze({ runId, state: \"interrupted\" as const });\n        }).pipe(Effect.mapError((cause) => recoverFailure(runId, cause))));\n    },\n});\nexport const unavailableRunLifecycleAdapter: RunLifecycleAdapter = Object.freeze({\n    delete: ({ runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.fail(new RunDeleteError({\n        operation: \"delete\",\n        code: \"run-lifecycle-adapter-unavailable\",\n        message: `Run ${runId} cannot be deleted because the Run lifecycle adapter is not installed.`,\n    })),\n    recover: ({ runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.fail(new RunRecoverError({\n        operation: \"recover\",\n        code: \"run-lifecycle-adapter-unavailable\",\n        message: `Run ${runId} cannot be recovered because the Run lifecycle adapter is not installed.`,\n    })),\n});\n"]}
+{"version":3,"file":"lifecycle-adapter.js","sourceRoot":"","sources":["lifecycle-adapter.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,qCAAqC;AACrC,yCAAoC;AACpC,mCAA0C;AAE1C,6DAAkE;AAClE,kDAAsK;AAEtK,yCAA8D;AAgB9D,SAAS,WAAW,CAAC,GAAW;IAC5B,OAAO,IAAA,mBAAO,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AACD,SAAS,cAAc,CAAC,IAAY;IAChC,OAAO,IAAA,oBAAU,EAAC,IAAA,mBAAO,EAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,SAAS,aAAa,CAAC,KAAa,EAAE,KAAc;IAChD,IAAI,KAAK,YAAY,yBAAc;QAC/B,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,YAAY,6BAAiB,IAAI,KAAK,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;QAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,OAA0C,CAAC;YAChE,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO,KAAK,qBAAqB,YAAY,CAAC,MAAM,kCAAkC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,eAAe,OAAO,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBAC3O,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;gBACtC,KAAK;aACR,CAAC,CAAC;QACP,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,eAAe,OAAO,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrK,OAAO,IAAI,yBAAc,CAAC;gBACtB,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO,KAAK,qBAAqB,KAAK,CAAC,YAAY,CAAC,MAAM,kCAAkC,YAAY,GAAG;gBACpH,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,IAAI,yBAAc,CAAC;QACtB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,wBAAwB;QACtF,KAAK;KACR,CAAC,CAAC;AACP,CAAC;AACD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACjD,IAAI,KAAK,YAAY,0BAAe;QAChC,OAAO,KAAK,CAAC;IACjB,IAAI,KAAK,YAAY,0BAAe,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,0BAAe,CAAC;gBACvB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;gBACtC,KAAK;aACR,CAAC,CAAC;QACP,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACjF,OAAO,IAAI,0BAAe,CAAC;gBACvB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,OAAO,KAAK,kDAAkD;gBACvE,KAAK;aACR,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,IAAI,0BAAe,CAAC;QACvB,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,0BAA0B;QACxF,KAAK;KACR,CAAC,CAAC;AACP,CAAC;AACY,QAAA,yBAAyB,GAAwB,MAAM,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAGpB,EAAE,EAAE;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;gBAClC,SAAS,EAAE,QAAQ;gBACnB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;aACzC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,eAAM,CAAC,OAAO,CAAC,iBAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,mCAAwB,EAAC,IAAI,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;oBACzC,SAAS,EAAE,QAAQ;oBACnB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;iBACzC,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;oBACzC,SAAS,EAAE,QAAQ;oBACnB,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,OAAO,KAAK,mCAAmC;iBAC3D,CAAC,CAAC,CAAC;YACR,CAAC;YACD,KAAK,CAAC,CAAC,IAAA,4BAAiB,EAAC,IAAI,EAAE;gBAC3B,KAAK;gBACL,aAAa,EAAE,GAAG,CAAC,KAAK;gBACxB,SAAS,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;gBAClC,eAAe,EAAE,iBAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK;aACvD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAGrB,EAAE,EAAE;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;gBACnC,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;aACzC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,eAAM,CAAC,OAAO,CAAC,iBAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,mCAAwB,EAAC,IAAI,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAe,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,OAAO,KAAK,iBAAiB;iBACzC,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,OAAO,KAAK,eAAe,GAAG,CAAC,KAAK,GAAG;iBACnD,CAAC,CAAC,CAAC;YACR,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,sCAA2B,EAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACtE,IAAI,WAAW,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,OAAO,KAAK,gDAAgD;iBACxE,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,WAAW,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;oBAC1C,SAAS,EAAE,SAAS;oBACpB,IAAI,EAAE,gCAAgC;oBACtC,OAAO,EAAE,OAAO,KAAK,yDAAyD;iBACjF,CAAC,CAAC,CAAC;YACR,CAAC;YACD,KAAK,CAAC,CAAC,IAAA,6BAAkB,EAAC,IAAI,EAAE;gBAC5B,KAAK;gBACL,wBAAwB,EAAE,GAAG,CAAC,gBAAgB;gBAC9C,wBAAwB,EAAE,eAAe,IAAA,wBAAU,GAAE,EAAE;gBACvD,WAAW,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;gBACpC,QAAQ,EAAE;oBACN,IAAI,EAAE,WAAW,CAAC,YAAY;oBAC9B,QAAQ,EAAE,WAAW,CAAC,gBAAgB;oBACtC,UAAU,EAAE,iBAAQ,CAAC,SAAS,CAAC,GAAG,CAAC;iBACtC;gBACD,eAAe,EAAE,iBAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK;aACvD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,aAAsB,EAAE,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;CACJ,CAAC,CAAC;AACU,QAAA,8BAA8B,GAAwB,MAAM,CAAC,MAAM,CAAC;IAC7E,MAAM,EAAE,CAAC,EAAE,KAAK,EAGf,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,yBAAc,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,OAAO,KAAK,wEAAwE;KAChG,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,EAAE,KAAK,EAGhB,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAAe,CAAC;QAClC,SAAS,EAAE,SAAS;QACpB,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,OAAO,KAAK,0EAA0E;KAClG,CAAC,CAAC;CACN,CAAC,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { resolve } from \"node:path\";\nimport { DateTime, Effect } from \"effect\";\nimport type { ProjectStateDatabase } from \"../../record/sqlite/project-state-database.ts\";\nimport { SqliteRecordError } from \"../../record/sqlite/errors.ts\";\nimport { currentPublicationCutoff, deleteRunResource, observeRunWriterTermination, readRunResource, recoverRunResource, RunStorageError, } from \"../storage/index.ts\";\nimport type { RunDeleteReceipt, RunRecoverReceipt, } from \"./types.ts\";\nimport { RunDeleteError, RunRecoverError, } from \"./types.ts\";\n/**\n * Narrow wiring seam for the Run-owned SQLite adapter. The current Record\n * runtime cannot yet delete terminal Runs or fence and recover an active\n * writer, so the public Host fails closed instead of rebranding `clean`.\n */\nexport interface RunLifecycleAdapter {\n    readonly delete: (request: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.Effect<RunDeleteReceipt, RunDeleteError, ProjectStateDatabase>;\n    readonly recover: (request: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.Effect<RunRecoverReceipt, RunRecoverError, ProjectStateDatabase>;\n}\nfunction storageRoot(cwd: string): string {\n    return resolve(cwd, \".niceeval\");\n}\nfunction databaseExists(root: string): boolean {\n    return existsSync(resolve(root, \"record.sqlite\"));\n}\nfunction deleteFailure(runId: string, cause: unknown): RunDeleteError {\n    if (cause instanceof RunDeleteError)\n        return cause;\n    if (cause instanceof SqliteRecordError && cause.cause instanceof Error && cause.cause.name === \"run-delete-reference-conflict\") {\n        const details = Reflect.get(cause.cause, \"details\");\n        if (Array.isArray(details)) {\n            const dependencies = details as RunStorageError[\"dependencies\"];\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-referenced\",\n                message: `Run ${runId} is referenced by ${dependencies.length} published Attempt binding(s): ${dependencies.map((dependency) => `${dependency.dependentRunId}/${dependency.dependentSlotId} -> ${dependency.attemptLocator}`).join(\", \")}.`,\n                cause,\n            });\n        }\n    }\n    if (cause instanceof RunStorageError) {\n        if (cause.code === \"run-not-found\") {\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n                cause,\n            });\n        }\n        if (cause.code === \"run-delete-reference-conflict\") {\n            const dependencies = cause.dependencies.map((dependency) => `${dependency.dependentRunId}/${dependency.dependentSlotId} -> ${dependency.attemptLocator}`).join(\", \");\n            return new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-referenced\",\n                message: `Run ${runId} is referenced by ${cause.dependencies.length} published Attempt binding(s): ${dependencies}.`,\n                cause,\n            });\n        }\n    }\n    return new RunDeleteError({\n        operation: \"delete\",\n        code: \"run-delete-failed\",\n        message: cause instanceof Error ? cause.message : `Run ${runId} could not be deleted.`,\n        cause,\n    });\n}\nfunction recoverFailure(runId: string, cause: unknown): RunRecoverError {\n    if (cause instanceof RunRecoverError)\n        return cause;\n    if (cause instanceof RunStorageError) {\n        if (cause.code === \"run-not-found\") {\n            return new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n                cause,\n            });\n        }\n        if (cause.code === \"run-not-active\" || cause.code === \"writer-generation-mismatch\") {\n            return new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-recover-failed\",\n                message: `Run ${runId} changed before recovery could fence its writer.`,\n                cause,\n            });\n        }\n    }\n    return new RunRecoverError({\n        operation: \"recover\",\n        code: \"run-recover-failed\",\n        message: cause instanceof Error ? cause.message : `Run ${runId} could not be recovered.`,\n        cause,\n    });\n}\nexport const sqliteRunLifecycleAdapter: RunLifecycleAdapter = Object.freeze({\n    delete: ({ cwd, runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => {\n        const root = storageRoot(cwd);\n        if (!databaseExists(root)) {\n            return Effect.fail(new RunDeleteError({\n                operation: \"delete\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n            }));\n        }\n        return Effect.flatMap(DateTime.now, (now) => Effect.gen(function* () {\n            const cutoff = yield* currentPublicationCutoff(root);\n            const run = yield* readRunResource(root, runId, cutoff);\n            if (run === undefined) {\n                return yield* Effect.fail(new RunDeleteError({\n                    operation: \"delete\",\n                    code: \"run-not-found\",\n                    message: `Run ${runId} was not found.`,\n                }));\n            }\n            if (run.state === \"active\") {\n                return yield* Effect.fail(new RunDeleteError({\n                    operation: \"delete\",\n                    code: \"run-active\",\n                    message: `Run ${runId} is active and cannot be deleted.`,\n                }));\n            }\n            yield* deleteRunResource(root, {\n                runId,\n                expectedState: run.state,\n                deletedAt: DateTime.formatIso(now),\n                deadlineEpochMs: DateTime.toEpochMillis(now) + 30000,\n            });\n            return Object.freeze({ runId, state: \"deleted\" as const });\n        }).pipe(Effect.mapError((cause) => deleteFailure(runId, cause))));\n    },\n    recover: ({ cwd, runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => {\n        const root = storageRoot(cwd);\n        if (!databaseExists(root)) {\n            return Effect.fail(new RunRecoverError({\n                operation: \"recover\",\n                code: \"run-not-found\",\n                message: `Run ${runId} was not found.`,\n            }));\n        }\n        return Effect.flatMap(DateTime.now, (now) => Effect.gen(function* () {\n            const cutoff = yield* currentPublicationCutoff(root);\n            const run = yield* readRunResource(root, runId, cutoff);\n            if (run === undefined) {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-not-found\",\n                    message: `Run ${runId} was not found.`,\n                }));\n            }\n            if (run.state !== \"active\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-terminal\",\n                    message: `Run ${runId} is already ${run.state}.`,\n                }));\n            }\n            const observation = observeRunWriterTermination(run.writerGeneration);\n            if (observation.state === \"active\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-owner-active\",\n                    message: `Run ${runId} still has a live writer; recovery is refused.`,\n                }));\n            }\n            if (observation.state === \"unproven\") {\n                return yield* Effect.fail(new RunRecoverError({\n                    operation: \"recover\",\n                    code: \"run-owner-termination-unproven\",\n                    message: `Run ${runId} recovery requires verified owner-termination evidence.`,\n                }));\n            }\n            yield* recoverRunResource(root, {\n                runId,\n                expectedWriterGeneration: run.writerGeneration,\n                recoveryWriterGeneration: `recovery-v1:${randomUUID()}`,\n                completedAt: DateTime.formatIso(now),\n                evidence: {\n                    kind: observation.evidenceKind,\n                    identity: observation.evidenceIdentity,\n                    observedAt: DateTime.formatIso(now),\n                },\n                deadlineEpochMs: DateTime.toEpochMillis(now) + 30000,\n            });\n            return Object.freeze({ runId, state: \"interrupted\" as const });\n        }).pipe(Effect.mapError((cause) => recoverFailure(runId, cause))));\n    },\n});\nexport const unavailableRunLifecycleAdapter: RunLifecycleAdapter = Object.freeze({\n    delete: ({ runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.fail(new RunDeleteError({\n        operation: \"delete\",\n        code: \"run-lifecycle-adapter-unavailable\",\n        message: `Run ${runId} cannot be deleted because the Run lifecycle adapter is not installed.`,\n    })),\n    recover: ({ runId }: {\n        readonly cwd: string;\n        readonly runId: string;\n    }) => Effect.fail(new RunRecoverError({\n        operation: \"recover\",\n        code: \"run-lifecycle-adapter-unavailable\",\n        message: `Run ${runId} cannot be recovered because the Run lifecycle adapter is not installed.`,\n    })),\n});\n"]}

package/dist/run/storage/owner-identity.cjs

@@ -3,9 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createRunWriterGeneration = createRunWriterGeneration;
 exports.observeRunWriterTermination = observeRunWriterTermination;
 const node_fs_1 = require("node:fs");
+const node_child_process_1 = require("node:child_process");
 const effect_1 = require("effect");
 const VERIFIED_WRITER_PREFIX = "local-linux-process-v1:";
+const DARWIN_WRITER_PREFIX = "local-darwin-process-v1:";
 const OPAQUE_WRITER_PREFIX = "opaque-writer-v1:";
+const DARWIN_PROCESS_DOMAIN = "darwin-host";
 const VerifiedWriterIdentitySchema = effect_1.Schema.Struct({
     machineId: effect_1.Schema.String,
     bootId: effect_1.Schema.String,
@@ -45,14 +48,65 @@ function linuxProcessStart(pid) {
     }
     return processStart;
 }
+function darwinCommand(command, args) {
+    return (0, node_child_process_1.execFileSync)(command, args, {
+        encoding: "utf8",
+        env: { ...process.env, LC_ALL: "C", TZ: "UTC" },
+        timeout: 5000,
+        maxBuffer: 1024 * 1024,
+        stdio: ["ignore", "pipe", "pipe"],
+    }).trim();
+}
+function darwinUuid(value) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu.test(value)) {
+        throw new Error("Darwin system identity is malformed");
+    }
+    return value.toLowerCase();
+}
+function darwinMachineId() {
+    const platform = darwinCommand("/usr/sbin/ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"]);
+    const matches = [...platform.matchAll(/"IOPlatformUUID"\s*=\s*"([^"]+)"/gu)];
+    if (matches.length !== 1)
+        throw new Error("Darwin platform identity is unavailable");
+    return darwinUuid(matches[0][1]);
+}
+function darwinBootId() {
+    return darwinUuid(darwinCommand("/usr/sbin/sysctl", ["-n", "kern.bootsessionuuid"]));
+}
+/** ps lstart reads the kernel process start time, rendered to seconds in a fixed locale/zone. */
+function darwinProcessStart(pid) {
+    let value;
+    try {
+        value = darwinCommand("/bin/ps", ["-p", String(pid), "-o", "lstart="]);
+    }
+    catch (cause) {
+        const failure = cause;
+        // ps exits 1 without diagnostics when the requested pid does not exist.
+        // Permission, launch, timeout, signal and parse failures cannot prove termination.
+        if (failure.status === 1 && failure.signal == null && failure.stdout === "" && failure.stderr === "") {
+            return undefined;
+        }
+        throw cause;
+    }
+    if (!/^[A-Z][a-z]{2} [A-Z][a-z]{2} +\d{1,2} \d{2}:\d{2}:\d{2} \d{4}$/u.test(value) ||
+        !Number.isFinite(Date.parse(`${value} UTC`))) {
+        throw new Error("Darwin process start identity is malformed");
+    }
+    return value;
+}
+function verifiedPrefix() {
+    return process.platform === "linux" ? VERIFIED_WRITER_PREFIX
+        : process.platform === "darwin" ? DARWIN_WRITER_PREFIX : undefined;
+}
 function encodeVerified(identity) {
-    return `${VERIFIED_WRITER_PREFIX}${Buffer.from(JSON.stringify(identity), "utf8").toString("base64url")}`;
+    return `${verifiedPrefix()}${Buffer.from(JSON.stringify(identity), "utf8").toString("base64url")}`;
 }
 function decodeVerified(value) {
-    if (!value.startsWith(VERIFIED_WRITER_PREFIX))
+    const prefix = verifiedPrefix();
+    if (prefix === undefined || !value.startsWith(prefix))
         return undefined;
     try {
-        const encoded = value.slice(VERIFIED_WRITER_PREFIX.length);
+        const encoded = value.slice(prefix.length);
         const decoded = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
         const identity = effect_1.Schema.decodeUnknownSync(VerifiedWriterIdentitySchema)(decoded);
         if (identity.machineId.length === 0
@@ -68,18 +122,19 @@ function decodeVerified(value) {
         return undefined;
     }
 }
-/** Creates recoverable evidence when Linux exposes a stable machine/process identity. */
+/** Seals recoverable evidence only when every platform identity can be observed. */
 function createRunWriterGeneration(generation) {
-    if (process.platform !== "linux")
+    if (verifiedPrefix() === undefined)
         return `${OPAQUE_WRITER_PREFIX}${generation}`;
     try {
-        const processStart = linuxProcessStart(process.pid);
+        const darwin = process.platform === "darwin";
+        const processStart = darwin ? darwinProcessStart(process.pid) : linuxProcessStart(process.pid);
         if (processStart === undefined)
             return `${OPAQUE_WRITER_PREFIX}${generation}`;
         return encodeVerified({
-            machineId: nonEmptyFile("/etc/machine-id"),
-            bootId: nonEmptyFile("/proc/sys/kernel/random/boot_id"),
-            pidNamespace: (0, node_fs_1.readlinkSync)("/proc/self/ns/pid"),
+            machineId: darwin ? darwinMachineId() : nonEmptyFile("/etc/machine-id"),
+            bootId: darwin ? darwinBootId() : nonEmptyFile("/proc/sys/kernel/random/boot_id"),
+            pidNamespace: darwin ? DARWIN_PROCESS_DOMAIN : (0, node_fs_1.readlinkSync)("/proc/self/ns/pid"),
             pid: process.pid,
             processStart,
             generation,
@@ -92,21 +147,28 @@ function createRunWriterGeneration(generation) {
 /** Verifies termination without treating age, permission failures, or a foreign host as evidence. */
 function observeRunWriterTermination(writerGeneration) {
     const identity = decodeVerified(writerGeneration);
-    if (identity === undefined || process.platform !== "linux")
+    if (identity === undefined)
         return { state: "unproven" };
     try {
-        if (nonEmptyFile("/etc/machine-id") !== identity.machineId)
+        const darwin = process.platform === "darwin";
+        const machineId = darwin ? darwinMachineId() : nonEmptyFile("/etc/machine-id");
+        if (machineId !== identity.machineId)
             return { state: "unproven" };
-        if ((0, node_fs_1.readlinkSync)("/proc/self/ns/pid") !== identity.pidNamespace)
+        const pidNamespace = darwin ? DARWIN_PROCESS_DOMAIN : (0, node_fs_1.readlinkSync)("/proc/self/ns/pid");
+        if (pidNamespace !== identity.pidNamespace)
             return { state: "unproven" };
-        const currentBootId = nonEmptyFile("/proc/sys/kernel/random/boot_id");
+        const currentBootId = darwin ? darwinBootId() : nonEmptyFile("/proc/sys/kernel/random/boot_id");
+        const terminated = () => ({
+            state: "terminated", evidenceIdentity: writerGeneration,
+            evidenceKind: darwin ? "local-darwin-process-terminated-v1" : "local-linux-process-terminated-v1",
+        });
         if (currentBootId !== identity.bootId) {
-            return { state: "terminated", evidenceIdentity: writerGeneration };
+            return terminated();
         }
-        const currentProcessStart = linuxProcessStart(identity.pid);
+        const currentProcessStart = darwin ? darwinProcessStart(identity.pid) : linuxProcessStart(identity.pid);
         if (currentProcessStart === identity.processStart)
             return { state: "active" };
-        return { state: "terminated", evidenceIdentity: writerGeneration };
+        return terminated();
     }
     catch {
         return { state: "unproven" };

package/dist/run/storage/owner-identity.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"owner-identity.js","sourceRoot":"","sources":["owner-identity.ts"],"names":[],"mappings":";;AA6EA,8DAmBC;AAED,kEAqBC;AAvHD,qCAAqD;AACrD,mCAAgC;AAChC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACjD,MAAM,4BAA4B,GAAG,eAAM,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,eAAM,CAAC,MAAM;IACxB,MAAM,EAAE,eAAM,CAAC,MAAM;IACrB,YAAY,EAAE,eAAM,CAAC,MAAM;IAC3B,GAAG,EAAE,eAAM,CAAC,GAAG;IACf,YAAY,EAAE,eAAM,CAAC,MAAM;IAC3B,UAAU,EAAE,eAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AAWH,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,iBAAiB,CAAC,GAAW;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,IAAA,sBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAClD,OAAO,SAAS,CAAC;QACrB,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;QAC/C,OAAO,SAAS,CAAC;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AACD,SAAS,cAAc,CAAC,QAAgC;IACpD,OAAO,GAAG,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC7G,CAAC;AACD,SAAS,cAAc,CAAC,KAAa;IACjC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,sBAAsB,CAAC;QACzC,OAAO,SAAS,CAAC;IACrB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,eAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;eAC5B,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;eAC5B,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;eAClC,QAAQ,CAAC,GAAG,GAAG,CAAC;eAChB,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;eAClC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YACnC,OAAO,SAAS,CAAC;QACrB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AACD,yFAAyF;AACzF,SAAgB,yBAAyB,CAAC,UAAkB;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;IAClD,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,SAAS;YAC1B,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;QAClD,OAAO,cAAc,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,iBAAiB,CAAC;YAC1C,MAAM,EAAE,YAAY,CAAC,iCAAiC,CAAC;YACvD,YAAY,EAAE,IAAA,sBAAY,EAAC,mBAAmB,CAAC;YAC/C,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,YAAY;YACZ,UAAU;SACb,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC;QACH,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;AACL,CAAC;AACD,qGAAqG;AACrG,SAAgB,2BAA2B,CAAC,gBAAwB;IAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,IAAI,YAAY,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,SAAS;YACtD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjC,IAAI,IAAA,sBAAY,EAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,YAAY;YAC3D,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,YAAY,CAAC,iCAAiC,CAAC,CAAC;QACtE,IAAI,aAAa,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,mBAAmB,KAAK,QAAQ,CAAC,YAAY;YAC7C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;AACL,CAAC","sourcesContent":["import { readFileSync, readlinkSync } from \"node:fs\";\nimport { Schema } from \"effect\";\nconst VERIFIED_WRITER_PREFIX = \"local-linux-process-v1:\";\nconst OPAQUE_WRITER_PREFIX = \"opaque-writer-v1:\";\nconst VerifiedWriterIdentitySchema = Schema.Struct({\n    machineId: Schema.String,\n    bootId: Schema.String,\n    pidNamespace: Schema.String,\n    pid: Schema.Int,\n    processStart: Schema.String,\n    generation: Schema.String,\n});\nexport interface VerifiedWriterIdentity extends Schema.Schema.Type<typeof VerifiedWriterIdentitySchema> {\n}\nexport type WriterTerminationObservation = {\n    readonly state: \"terminated\";\n    readonly evidenceIdentity: string;\n} | {\n    readonly state: \"active\";\n} | {\n    readonly state: \"unproven\";\n};\nfunction nonEmptyFile(path: string): string {\n    const value = readFileSync(path, \"utf8\").trim();\n    if (value.length === 0)\n        throw new Error(`${path} did not contain an identity`);\n    return value;\n}\nfunction linuxProcessStart(pid: number): string | undefined {\n    let raw: string;\n    try {\n        raw = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n    }\n    catch (cause) {\n        if ((cause as NodeJS.ErrnoException).code === \"ENOENT\")\n            return undefined;\n        throw cause;\n    }\n    const closing = raw.lastIndexOf(\")\");\n    if (closing < 0 || raw[closing + 1] !== \" \")\n        throw new Error(\"Linux process identity is malformed\");\n    const fields = raw.slice(closing + 2).trim().split(/\\s+/u);\n    const state = fields[0];\n    if (state === \"Z\" || state === \"X\" || state === \"x\")\n        return undefined;\n    if (state === undefined || !/^[A-Za-z]$/u.test(state))\n        throw new Error(\"Linux process state is malformed\");\n    const processStart = fields[19];\n    if (processStart === undefined || !/^\\d+$/u.test(processStart)) {\n        throw new Error(\"Linux process start identity is malformed\");\n    }\n    return processStart;\n}\nfunction encodeVerified(identity: VerifiedWriterIdentity): string {\n    return `${VERIFIED_WRITER_PREFIX}${Buffer.from(JSON.stringify(identity), \"utf8\").toString(\"base64url\")}`;\n}\nfunction decodeVerified(value: string): VerifiedWriterIdentity | undefined {\n    if (!value.startsWith(VERIFIED_WRITER_PREFIX))\n        return undefined;\n    try {\n        const encoded = value.slice(VERIFIED_WRITER_PREFIX.length);\n        const decoded: unknown = JSON.parse(Buffer.from(encoded, \"base64url\").toString(\"utf8\"));\n        const identity = Schema.decodeUnknownSync(VerifiedWriterIdentitySchema)(decoded);\n        if (identity.machineId.length === 0\n            || identity.bootId.length === 0\n            || identity.pidNamespace.length === 0\n            || identity.pid < 1\n            || identity.processStart.length === 0\n            || identity.generation.length === 0)\n            return undefined;\n        return identity;\n    }\n    catch {\n        return undefined;\n    }\n}\n/** Creates recoverable evidence when Linux exposes a stable machine/process identity. */\nexport function createRunWriterGeneration(generation: string): string {\n    if (process.platform !== \"linux\")\n        return `${OPAQUE_WRITER_PREFIX}${generation}`;\n    try {\n        const processStart = linuxProcessStart(process.pid);\n        if (processStart === undefined)\n            return `${OPAQUE_WRITER_PREFIX}${generation}`;\n        return encodeVerified({\n            machineId: nonEmptyFile(\"/etc/machine-id\"),\n            bootId: nonEmptyFile(\"/proc/sys/kernel/random/boot_id\"),\n            pidNamespace: readlinkSync(\"/proc/self/ns/pid\"),\n            pid: process.pid,\n            processStart,\n            generation,\n        });\n    }\n    catch {\n        return `${OPAQUE_WRITER_PREFIX}${generation}`;\n    }\n}\n/** Verifies termination without treating age, permission failures, or a foreign host as evidence. */\nexport function observeRunWriterTermination(writerGeneration: string): WriterTerminationObservation {\n    const identity = decodeVerified(writerGeneration);\n    if (identity === undefined || process.platform !== \"linux\")\n        return { state: \"unproven\" };\n    try {\n        if (nonEmptyFile(\"/etc/machine-id\") !== identity.machineId)\n            return { state: \"unproven\" };\n        if (readlinkSync(\"/proc/self/ns/pid\") !== identity.pidNamespace)\n            return { state: \"unproven\" };\n        const currentBootId = nonEmptyFile(\"/proc/sys/kernel/random/boot_id\");\n        if (currentBootId !== identity.bootId) {\n            return { state: \"terminated\", evidenceIdentity: writerGeneration };\n        }\n        const currentProcessStart = linuxProcessStart(identity.pid);\n        if (currentProcessStart === identity.processStart)\n            return { state: \"active\" };\n        return { state: \"terminated\", evidenceIdentity: writerGeneration };\n    }\n    catch {\n        return { state: \"unproven\" };\n    }\n}\n"]}
+{"version":3,"file":"owner-identity.js","sourceRoot":"","sources":["owner-identity.ts"],"names":[],"mappings":";;AAyIA,8DAoBC;AAED,kEA4BC;AA3LD,qCAAqD;AACrD,2DAAkD;AAClD,mCAAgC;AAChC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AACxD,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACjD,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAC5C,MAAM,4BAA4B,GAAG,eAAM,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,eAAM,CAAC,MAAM;IACxB,MAAM,EAAE,eAAM,CAAC,MAAM;IACrB,YAAY,EAAE,eAAM,CAAC,MAAM;IAC3B,GAAG,EAAE,eAAM,CAAC,GAAG;IACf,YAAY,EAAE,eAAM,CAAC,MAAM;IAC3B,UAAU,EAAE,eAAM,CAAC,MAAM;CAC5B,CAAC,CAAC;AAYH,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,iBAAiB,CAAC,GAAW;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,IAAA,sBAAY,EAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAClD,OAAO,SAAS,CAAC;QACrB,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;QAC/C,OAAO,SAAS,CAAC;IACrB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AACD,SAAS,aAAa,CAAC,OAAe,EAAE,IAAuB;IAC3D,OAAO,IAAA,iCAAY,EAAC,OAAO,EAAE,IAAI,EAAE;QAC/B,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE;QAC/C,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC,IAAI,EAAE,CAAC;AACd,CAAC;AACD,SAAS,UAAU,CAAC,KAAa;IAC7B,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC/B,CAAC;AACD,SAAS,eAAe;IACpB,MAAM,QAAQ,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,YAAY;IACjB,OAAO,UAAU,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AACD,iGAAiG;AACjG,SAAS,kBAAkB,CAAC,GAAW;IACnC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACD,KAAK,GAAG,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,KAKf,CAAC;QACF,wEAAwE;QACxE,mFAAmF;QACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACnG,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9E,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,cAAc;IACnB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB;QACxD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AACD,SAAS,cAAc,CAAC,QAAgC;IACpD,OAAO,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvG,CAAC;AACD,SAAS,cAAc,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,OAAO,SAAS,CAAC;IACrB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,eAAM,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;eAC5B,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;eAC5B,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;eAClC,QAAQ,CAAC,GAAG,GAAG,CAAC;eAChB,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;eAClC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YACnC,OAAO,SAAS,CAAC;QACrB,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AACD,oFAAoF;AACpF,SAAgB,yBAAyB,CAAC,UAAkB;IACxD,IAAI,cAAc,EAAE,KAAK,SAAS;QAC9B,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;IAClD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/F,IAAI,YAAY,KAAK,SAAS;YAC1B,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;QAClD,OAAO,cAAc,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC;YACvE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,iCAAiC,CAAC;YACjF,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,mBAAmB,CAAC;YAChF,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,YAAY;YACZ,UAAU;SACb,CAAC,CAAC;IACP,CAAC;IACD,MAAM,CAAC;QACH,OAAO,GAAG,oBAAoB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;AACL,CAAC;AACD,qGAAqG;AACrG,SAAgB,2BAA2B,CAAC,gBAAwB;IAChE,MAAM,QAAQ,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS;QACtB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QAC/E,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS;YAChC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,mBAAmB,CAAC,CAAC;QACxF,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY;YACtC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC;QAChG,MAAM,UAAU,GAAG,GAAiC,EAAE,CAAC,CAAC;YACpD,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB;YACvD,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,mCAAmC;SACpG,CAAC,CAAC;QACH,IAAI,aAAa,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,UAAU,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACxG,IAAI,mBAAmB,KAAK,QAAQ,CAAC,YAAY;YAC7C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC/B,OAAO,UAAU,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;AACL,CAAC","sourcesContent":["import { readFileSync, readlinkSync } from \"node:fs\";\nimport { execFileSync } from \"node:child_process\";\nimport { Schema } from \"effect\";\nconst VERIFIED_WRITER_PREFIX = \"local-linux-process-v1:\";\nconst DARWIN_WRITER_PREFIX = \"local-darwin-process-v1:\";\nconst OPAQUE_WRITER_PREFIX = \"opaque-writer-v1:\";\nconst DARWIN_PROCESS_DOMAIN = \"darwin-host\";\nconst VerifiedWriterIdentitySchema = Schema.Struct({\n    machineId: Schema.String,\n    bootId: Schema.String,\n    pidNamespace: Schema.String,\n    pid: Schema.Int,\n    processStart: Schema.String,\n    generation: Schema.String,\n});\nexport interface VerifiedWriterIdentity extends Schema.Schema.Type<typeof VerifiedWriterIdentitySchema> {\n}\nexport type WriterTerminationObservation = {\n    readonly state: \"terminated\";\n    readonly evidenceIdentity: string;\n    readonly evidenceKind: string;\n} | {\n    readonly state: \"active\";\n} | {\n    readonly state: \"unproven\";\n};\nfunction nonEmptyFile(path: string): string {\n    const value = readFileSync(path, \"utf8\").trim();\n    if (value.length === 0)\n        throw new Error(`${path} did not contain an identity`);\n    return value;\n}\nfunction linuxProcessStart(pid: number): string | undefined {\n    let raw: string;\n    try {\n        raw = readFileSync(`/proc/${pid}/stat`, \"utf8\");\n    }\n    catch (cause) {\n        if ((cause as NodeJS.ErrnoException).code === \"ENOENT\")\n            return undefined;\n        throw cause;\n    }\n    const closing = raw.lastIndexOf(\")\");\n    if (closing < 0 || raw[closing + 1] !== \" \")\n        throw new Error(\"Linux process identity is malformed\");\n    const fields = raw.slice(closing + 2).trim().split(/\\s+/u);\n    const state = fields[0];\n    if (state === \"Z\" || state === \"X\" || state === \"x\")\n        return undefined;\n    if (state === undefined || !/^[A-Za-z]$/u.test(state))\n        throw new Error(\"Linux process state is malformed\");\n    const processStart = fields[19];\n    if (processStart === undefined || !/^\\d+$/u.test(processStart)) {\n        throw new Error(\"Linux process start identity is malformed\");\n    }\n    return processStart;\n}\nfunction darwinCommand(command: string, args: readonly string[]): string {\n    return execFileSync(command, args, {\n        encoding: \"utf8\",\n        env: { ...process.env, LC_ALL: \"C\", TZ: \"UTC\" },\n        timeout: 5000,\n        maxBuffer: 1024 * 1024,\n        stdio: [\"ignore\", \"pipe\", \"pipe\"],\n    }).trim();\n}\nfunction darwinUuid(value: string): string {\n    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu.test(value)) {\n        throw new Error(\"Darwin system identity is malformed\");\n    }\n    return value.toLowerCase();\n}\nfunction darwinMachineId(): string {\n    const platform = darwinCommand(\"/usr/sbin/ioreg\", [\"-rd1\", \"-c\", \"IOPlatformExpertDevice\"]);\n    const matches = [...platform.matchAll(/\"IOPlatformUUID\"\\s*=\\s*\"([^\"]+)\"/gu)];\n    if (matches.length !== 1)\n        throw new Error(\"Darwin platform identity is unavailable\");\n    return darwinUuid(matches[0]![1]!);\n}\nfunction darwinBootId(): string {\n    return darwinUuid(darwinCommand(\"/usr/sbin/sysctl\", [\"-n\", \"kern.bootsessionuuid\"]));\n}\n/** ps lstart reads the kernel process start time, rendered to seconds in a fixed locale/zone. */\nfunction darwinProcessStart(pid: number): string | undefined {\n    let value: string;\n    try {\n        value = darwinCommand(\"/bin/ps\", [\"-p\", String(pid), \"-o\", \"lstart=\"]);\n    }\n    catch (cause) {\n        const failure = cause as {\n            status?: number;\n            signal?: string | null;\n            stdout?: string;\n            stderr?: string;\n        };\n        // ps exits 1 without diagnostics when the requested pid does not exist.\n        // Permission, launch, timeout, signal and parse failures cannot prove termination.\n        if (failure.status === 1 && failure.signal == null && failure.stdout === \"\" && failure.stderr === \"\") {\n            return undefined;\n        }\n        throw cause;\n    }\n    if (!/^[A-Z][a-z]{2} [A-Z][a-z]{2} +\\d{1,2} \\d{2}:\\d{2}:\\d{2} \\d{4}$/u.test(value) ||\n        !Number.isFinite(Date.parse(`${value} UTC`))) {\n        throw new Error(\"Darwin process start identity is malformed\");\n    }\n    return value;\n}\nfunction verifiedPrefix(): string | undefined {\n    return process.platform === \"linux\" ? VERIFIED_WRITER_PREFIX\n        : process.platform === \"darwin\" ? DARWIN_WRITER_PREFIX : undefined;\n}\nfunction encodeVerified(identity: VerifiedWriterIdentity): string {\n    return `${verifiedPrefix()}${Buffer.from(JSON.stringify(identity), \"utf8\").toString(\"base64url\")}`;\n}\nfunction decodeVerified(value: string): VerifiedWriterIdentity | undefined {\n    const prefix = verifiedPrefix();\n    if (prefix === undefined || !value.startsWith(prefix))\n        return undefined;\n    try {\n        const encoded = value.slice(prefix.length);\n        const decoded: unknown = JSON.parse(Buffer.from(encoded, \"base64url\").toString(\"utf8\"));\n        const identity = Schema.decodeUnknownSync(VerifiedWriterIdentitySchema)(decoded);\n        if (identity.machineId.length === 0\n            || identity.bootId.length === 0\n            || identity.pidNamespace.length === 0\n            || identity.pid < 1\n            || identity.processStart.length === 0\n            || identity.generation.length === 0)\n            return undefined;\n        return identity;\n    }\n    catch {\n        return undefined;\n    }\n}\n/** Seals recoverable evidence only when every platform identity can be observed. */\nexport function createRunWriterGeneration(generation: string): string {\n    if (verifiedPrefix() === undefined)\n        return `${OPAQUE_WRITER_PREFIX}${generation}`;\n    try {\n        const darwin = process.platform === \"darwin\";\n        const processStart = darwin ? darwinProcessStart(process.pid) : linuxProcessStart(process.pid);\n        if (processStart === undefined)\n            return `${OPAQUE_WRITER_PREFIX}${generation}`;\n        return encodeVerified({\n            machineId: darwin ? darwinMachineId() : nonEmptyFile(\"/etc/machine-id\"),\n            bootId: darwin ? darwinBootId() : nonEmptyFile(\"/proc/sys/kernel/random/boot_id\"),\n            pidNamespace: darwin ? DARWIN_PROCESS_DOMAIN : readlinkSync(\"/proc/self/ns/pid\"),\n            pid: process.pid,\n            processStart,\n            generation,\n        });\n    }\n    catch {\n        return `${OPAQUE_WRITER_PREFIX}${generation}`;\n    }\n}\n/** Verifies termination without treating age, permission failures, or a foreign host as evidence. */\nexport function observeRunWriterTermination(writerGeneration: string): WriterTerminationObservation {\n    const identity = decodeVerified(writerGeneration);\n    if (identity === undefined)\n        return { state: \"unproven\" };\n    try {\n        const darwin = process.platform === \"darwin\";\n        const machineId = darwin ? darwinMachineId() : nonEmptyFile(\"/etc/machine-id\");\n        if (machineId !== identity.machineId)\n            return { state: \"unproven\" };\n        const pidNamespace = darwin ? DARWIN_PROCESS_DOMAIN : readlinkSync(\"/proc/self/ns/pid\");\n        if (pidNamespace !== identity.pidNamespace)\n            return { state: \"unproven\" };\n        const currentBootId = darwin ? darwinBootId() : nonEmptyFile(\"/proc/sys/kernel/random/boot_id\");\n        const terminated = (): WriterTerminationObservation => ({\n            state: \"terminated\", evidenceIdentity: writerGeneration,\n            evidenceKind: darwin ? \"local-darwin-process-terminated-v1\" : \"local-linux-process-terminated-v1\",\n        });\n        if (currentBootId !== identity.bootId) {\n            return terminated();\n        }\n        const currentProcessStart = darwin ? darwinProcessStart(identity.pid) : linuxProcessStart(identity.pid);\n        if (currentProcessStart === identity.processStart)\n            return { state: \"active\" };\n        return terminated();\n    }\n    catch {\n        return { state: \"unproven\" };\n    }\n}\n"]}

package/dist/run/storage/owner-identity.d.cts

@@ -12,12 +12,13 @@ export interface VerifiedWriterIdentity extends Schema.Schema.Type<typeof Verifi
 export type WriterTerminationObservation = {
     readonly state: "terminated";
     readonly evidenceIdentity: string;
+    readonly evidenceKind: string;
 } | {
     readonly state: "active";
 } | {
     readonly state: "unproven";
 };
-/** Creates recoverable evidence when Linux exposes a stable machine/process identity. */
+/** Seals recoverable evidence only when every platform identity can be observed. */
 export declare function createRunWriterGeneration(generation: string): string;
 /** Verifies termination without treating age, permission failures, or a foreign host as evidence. */
 export declare function observeRunWriterTermination(writerGeneration: string): WriterTerminationObservation;

package/dist/run/storage/owner-identity.d.mts

@@ -12,12 +12,13 @@ export interface VerifiedWriterIdentity extends Schema.Schema.Type<typeof Verifi
 export type WriterTerminationObservation = {
     readonly state: "terminated";
     readonly evidenceIdentity: string;
+    readonly evidenceKind: string;
 } | {
     readonly state: "active";
 } | {
     readonly state: "unproven";
 };
-/** Creates recoverable evidence when Linux exposes a stable machine/process identity. */
+/** Seals recoverable evidence only when every platform identity can be observed. */
 export declare function createRunWriterGeneration(generation: string): string;
 /** Verifies termination without treating age, permission failures, or a foreign host as evidence. */
 export declare function observeRunWriterTermination(writerGeneration: string): WriterTerminationObservation;

package/dist/run/storage/owner-identity.d.ts

@@ -12,12 +12,13 @@ export interface VerifiedWriterIdentity extends Schema.Schema.Type<typeof Verifi
 export type WriterTerminationObservation = {
     readonly state: "terminated";
     readonly evidenceIdentity: string;
+    readonly evidenceKind: string;
 } | {
     readonly state: "active";
 } | {
     readonly state: "unproven";
 };
-/** Creates recoverable evidence when Linux exposes a stable machine/process identity. */
+/** Seals recoverable evidence only when every platform identity can be observed. */
 export declare function createRunWriterGeneration(generation: string): string;
 /** Verifies termination without treating age, permission failures, or a foreign host as evidence. */
 export declare function observeRunWriterTermination(writerGeneration: string): WriterTerminationObservation;