openmeld 0.3.263 → 0.3.264

package/dist/{process-channel-DILzf1ek.js → process-channel-B6Y2-Xau.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { t as ExecutionHostError } from "./channel-7iF6DSp4.js";
+import { t as ExecutionHostError } from "./channel-D-a2qCEW.js";
 //#region src/local-service/execution-host/process-channel.ts
 function childExecutionHostChannel(child) {
 	return {
@@ -61,4 +61,4 @@ function parentExecutionHostChannel() {
 //#endregion
 export { parentExecutionHostChannel as n, childExecutionHostChannel as t };
 
-//# sourceMappingURL=process-channel-DILzf1ek.js.map
+//# sourceMappingURL=process-channel-B6Y2-Xau.js.map

package/dist/{process-channel-DILzf1ek.js.map → process-channel-B6Y2-Xau.js.map}

@@ -1 +1 @@
-{"version":3,"file":"process-channel-DILzf1ek.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}
+{"version":3,"file":"process-channel-B6Y2-Xau.js","names":[],"sources":["../src/local-service/execution-host/process-channel.ts"],"sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport type { ExecutionHostChannel } from \"./channel\";\nimport { ExecutionHostError } from \"./channel\";\n\n// Use inherited Node-compatible IPC with JSON serialization. Provider stdout is\n// not a protocol channel; ordinary logs cannot become control messages.\nexport function childExecutionHostChannel(\n  child: ChildProcess\n): ExecutionHostChannel {\n  return {\n    connected: () => child.connected,\n    send: (message, completed) => {\n      child.send(message, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      child.on(\"message\", listener);\n      return () => {\n        child.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      let observed = false;\n      const finish = (error?: Error) => {\n        if (!observed) {\n          observed = true;\n          listener(error);\n        }\n      };\n      const exited = (code: number | null, signal: NodeJS.Signals | null) => {\n        finish(\n          new Error(`Host process exited (${signal ?? code ?? \"unknown\"})`)\n        );\n      };\n      child.on(\"disconnect\", finish);\n      child.on(\"exit\", exited);\n      // Spawn/send failures must not become unhandled EventEmitter errors.\n      child.on(\"error\", finish);\n      return () => {\n        child.off(\"disconnect\", finish);\n        child.off(\"exit\", exited);\n        child.off(\"error\", finish);\n      };\n    },\n  };\n}\n\nexport function parentExecutionHostChannel(): ExecutionHostChannel {\n  const send = process.send?.bind(process);\n  if (!(send && process.connected)) {\n    throw new ExecutionHostError(\n      \"host.inherited_channel_required\",\n      \"The execution host requires its supervisor's inherited IPC channel.\"\n    );\n  }\n  return {\n    connected: () => process.connected === true,\n    send: (message, completed) => {\n      send(message, undefined, undefined, (error) => completed(error ?? null));\n    },\n    onMessage: (listener) => {\n      process.on(\"message\", listener);\n      return () => {\n        process.off(\"message\", listener);\n      };\n    },\n    onDisconnect: (listener) => {\n      process.on(\"disconnect\", listener);\n      return () => {\n        process.off(\"disconnect\", listener);\n      };\n    },\n  };\n}\n"],"mappings":";;;;AAMA,SAAgB,0BACd,OACsB;CACtB,OAAO;EACL,iBAAiB,MAAM;EACvB,OAAO,SAAS,cAAc;GAC5B,MAAM,KAAK,UAAU,UAAU,UAAU,SAAS,IAAI,CAAC;EACzD;EACA,YAAY,aAAa;GACvB,MAAM,GAAG,WAAW,QAAQ;GAC5B,aAAa;IACX,MAAM,IAAI,WAAW,QAAQ;GAC/B;EACF;EACA,eAAe,aAAa;GAC1B,IAAI,WAAW;GACf,MAAM,UAAU,UAAkB;IAChC,IAAI,CAAC,UAAU;KACb,WAAW;KACX,SAAS,KAAK;IAChB;GACF;GACA,MAAM,UAAU,MAAqB,WAAkC;IACrE,uBACE,IAAI,MAAM,wBAAwB,UAAU,QAAQ,UAAU,EAAE,CAClE;GACF;GACA,MAAM,GAAG,cAAc,MAAM;GAC7B,MAAM,GAAG,QAAQ,MAAM;GAEvB,MAAM,GAAG,SAAS,MAAM;GACxB,aAAa;IACX,MAAM,IAAI,cAAc,MAAM;IAC9B,MAAM,IAAI,QAAQ,MAAM;IACxB,MAAM,IAAI,SAAS,MAAM;GAC3B;EACF;CACF;AACF;AAEA,SAAgB,6BAAmD;CACjE,MAAM,OAAO,QAAQ,MAAM,KAAK,OAAO;CACvC,IAAI,EAAE,QAAQ,QAAQ,YACpB,MAAM,IAAI,mBACR,mCACA,qEACF;CAEF,OAAO;EACL,iBAAiB,QAAQ,cAAc;EACvC,OAAO,SAAS,cAAc;GAC5B,KAAK,SAAS,KAAA,GAAW,KAAA,IAAY,UAAU,UAAU,SAAS,IAAI,CAAC;EACzE;EACA,YAAY,aAAa;GACvB,QAAQ,GAAG,WAAW,QAAQ;GAC9B,aAAa;IACX,QAAQ,IAAI,WAAW,QAAQ;GACjC;EACF;EACA,eAAe,aAAa;GAC1B,QAAQ,GAAG,cAAc,QAAQ;GACjC,aAAa;IACX,QAAQ,IAAI,cAAc,QAAQ;GACpC;EACF;CACF;AACF"}

package/dist/{process-identity-D_VPVruT.js → process-identity-DCYUeRGI.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { Pa as windowsNativeProcessRequestSchema, wF as WINDOWS_PROCESS_HELPER_FILENAME } from "./dist-YSbIHBnl.js";
+import { Pa as windowsNativeProcessRequestSchema, TF as WINDOWS_PROCESS_HELPER_FILENAME } from "./dist-BOBe5eOZ.js";
 import { n as normalizeCommandEnvironment } from "./process-environment-BWSFeUu6.js";
 import { win32 } from "node:path";
 import { execFile, execFileSync, spawn } from "node:child_process";
@@ -169,4 +169,4 @@ function isNodeError(error, code) {
 //#endregion
 export { activateWindowsManagedCommand as a, readWindowsProcessStartFileTime as c, WINDOWS_NATIVE_PROCESS_REQUEST_ENV as d, resolveWindowsNativeProcessHelper as f, readProcessStartIdentity as i, resolveWindowsPowerShellPath as l, isPreciseProcessStartIdentity as n, powerShellEncodedArguments as o, isProcessIdentityAlive as r, pruneWindowsBinaryBundle as s, CURRENT_PROCESS_START_IDENTITY as t, startWindowsIdleSleepBlocker as u };
 
-//# sourceMappingURL=process-identity-D_VPVruT.js.map
+//# sourceMappingURL=process-identity-DCYUeRGI.js.map

package/dist/{process-identity-D_VPVruT.js.map → process-identity-DCYUeRGI.js.map}

@@ -1 +1 @@
-{"version":3,"file":"process-identity-D_VPVruT.js","names":[],"sources":["../../../runtime/adapters/core/dist/windows-native-process.js","../../../runtime/adapters/core/dist/windows-system.js","../src/system/process-identity.ts"],"sourcesContent":["import { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { WINDOWS_PROCESS_HELPER_FILENAME } from \"@openmeld/schemas\";\nexport const WINDOWS_NATIVE_PROCESS_REQUEST_ENV = \"OPENMELD_NATIVE_JOB_REQUEST\";\nexport function resolveWindowsNativeProcessHelper() {\n    const binary = typeof __OPENMELD_DISTRIBUTION__ !== \"undefined\" &&\n        __OPENMELD_DISTRIBUTION__ === \"binary\";\n    return binary\n        ? join(dirname(process.execPath), WINDOWS_PROCESS_HELPER_FILENAME)\n        : fileURLToPath(\n        // Both src/ (workspace tests) and dist/ (installed code) share this\n        // package-owned build output. Never search another installation.\n        new URL(`../dist/windows/${WINDOWS_PROCESS_HELPER_FILENAME}`, import.meta.url));\n}\n","import { execFile, execFileSync, spawn } from \"node:child_process\";\nimport { win32 } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { windowsNativeProcessRequestSchema } from \"@openmeld/schemas\";\nimport { normalizeCommandEnvironment } from \"./process-environment.js\";\nimport { resolveWindowsNativeProcessHelper, WINDOWS_NATIVE_PROCESS_REQUEST_ENV, } from \"./windows-native-process.js\";\nexport function resolveWindowsPowerShellPath(env = process.env) {\n    const source = normalizeCommandEnvironment(env, \"win32\");\n    const root = source.SystemRoot ?? source.WINDIR;\n    if (!(root && win32.isAbsolute(root))) {\n        throw new Error(\"Windows system directory is unavailable.\");\n    }\n    return win32.join(root, \"System32\", \"WindowsPowerShell\", \"v1.0\", \"powershell.exe\");\n}\nexport function powerShellEncodedArguments(script) {\n    return [\n        \"-NoLogo\",\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-EncodedCommand\",\n        Buffer.from(script, \"utf16le\").toString(\"base64\"),\n    ];\n}\nconst FILE_TIME_PATTERN = /^\\d{10,20}$/u;\n// Keep native identity reads bounded; an unavailable identity fails admission.\nconst PROCESS_IDENTITY_TIMEOUT_MS = 15_000;\nlet currentProcessFileTime;\nexport async function activateWindowsManagedCommand(binDirectory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"activate-managed-command\",\n        binDirectory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"activated\" && result !== \"already_active\") {\n        throw new Error(\"Windows returned an invalid command activation receipt.\");\n    }\n    return result;\n}\n/** Kernel sharing rules keep a live CLI and its helper together during pruning. */\nexport async function pruneWindowsBinaryBundle(directory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"prune-binary-bundle\",\n        directory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"removed\" &&\n        result !== \"absent\" &&\n        result !== \"in_use\" &&\n        result !== \"unrecognized\") {\n        throw new Error(\"Windows returned an invalid managed-version cleanup receipt.\");\n    }\n    return result;\n}\n/** An opened process handle binds the observation to the actual instance, not a reused PID. */\nexport function readWindowsProcessStartFileTime(pid) {\n    if (!(Number.isSafeInteger(pid) && pid > 0)) {\n        return null;\n    }\n    if (pid === process.pid && currentProcessFileTime) {\n        return currentProcessFileTime;\n    }\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"identity\",\n        pid,\n    });\n    try {\n        const output = execFileSync(resolveWindowsNativeProcessHelper(), [], {\n            env: {\n                ...process.env,\n                [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n            },\n            encoding: \"utf8\",\n            windowsHide: true,\n            timeout: PROCESS_IDENTITY_TIMEOUT_MS,\n            maxBuffer: 1024,\n            stdio: [\"ignore\", \"pipe\", \"ignore\"],\n        }).trim();\n        if (!FILE_TIME_PATTERN.test(output)) {\n            return null;\n        }\n        if (pid === process.pid) {\n            currentProcessFileTime = output;\n        }\n        return output;\n    }\n    catch {\n        return null;\n    }\n}\nexport function startWindowsIdleSleepBlocker() {\n    return spawn(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(windowsNativeProcessRequestSchema.parse({\n                operation: \"prevent-idle-sleep\",\n            }))).toString(\"base64\"),\n        },\n        windowsHide: true,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readWindowsProcessStartFileTime } from \"@openmeld/adapter-core/windows-system\";\n\nconst WINDOWS_PROCESS_IDENTITY_PATTERN = /^win32:\\d{10,20}$/u;\n\nexport function isPreciseProcessStartIdentity(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    ((value.startsWith(\"ps:\") && value.length > 3) ||\n      WINDOWS_PROCESS_IDENTITY_PATTERN.test(value))\n  );\n}\n\nexport const CURRENT_PROCESS_START_IDENTITY =\n  readProcessStartIdentity(process.pid) ??\n  `fallback:${process.pid}:${Math.floor(Date.now() - process.uptime() * 1000)}`;\n\nexport function isProcessIdentityAlive(\n  input: { ownerPid: number; ownerProcessStartedAt: string },\n  platform: NodeJS.Platform = process.platform\n): boolean {\n  if (!isProcessAlive(input.ownerPid)) {\n    return false;\n  }\n  const observedIdentity = readProcessStartIdentity(input.ownerPid, platform);\n  if (\n    isPreciseProcessStartIdentity(observedIdentity) &&\n    isPreciseProcessStartIdentity(input.ownerProcessStartedAt) &&\n    observedIdentity.split(\":\", 1)[0] ===\n      input.ownerProcessStartedAt.split(\":\", 1)[0]\n  ) {\n    return observedIdentity === input.ownerProcessStartedAt;\n  }\n  // Fail closed when a live process cannot be identified precisely. A caller\n  // may recover only after it can prove that the transition owner has exited.\n  return true;\n}\n\nexport function readProcessStartIdentity(\n  pid: number,\n  platform: NodeJS.Platform = process.platform\n): string | null {\n  if (!(Number.isSafeInteger(pid) && pid > 0)) {\n    return null;\n  }\n  if (platform === \"win32\") {\n    const created = readWindowsProcessStartFileTime(pid);\n    return created === null ? null : `win32:${created}`;\n  }\n  try {\n    const output = execFileSync(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 1000,\n      windowsHide: true,\n    }).trim();\n    return output.length > 0 ? `ps:${output}` : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !isNodeError(error, \"ESRCH\");\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error instanceof Error && \"code\" in error && String(error.code) === code\n  );\n}\n"],"mappings":";;;;;;;;;AAGA,MAAa,qCAAqC;AAClD,SAAgB,oCAAoC;CAGhD,OAEM,cAGF,IAAI,IAAI,mBAAmB,mCAAmC,OAAO,KAAK,GAAG,CAAC;AACtF;;;ACPA,SAAgB,6BAA6B,MAAM,QAAQ,KAAK;CAC5D,MAAM,SAAS,4BAA4B,KAAK,OAAO;CACvD,MAAM,OAAO,OAAO,cAAc,OAAO;CACzC,IAAI,EAAE,QAAQ,MAAM,WAAW,IAAI,IAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE9D,OAAO,MAAM,KAAK,MAAM,YAAY,qBAAqB,QAAQ,gBAAgB;AACrF;AACA,SAAgB,2BAA2B,QAAQ;CAC/C,OAAO;EACH;EACA;EACA;EACA;EACA,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,QAAQ;CACpD;AACJ;AACA,MAAM,oBAAoB;AAE1B,MAAM,8BAA8B;AACpC,IAAI;AACJ,eAAsB,8BAA8B,cAAc;CAC9D,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,eAAe,WAAW,kBACrC,MAAM,IAAI,MAAM,yDAAyD;CAE7E,OAAO;AACX;;AAEA,eAAsB,yBAAyB,WAAW;CACtD,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,aACX,WAAW,YACX,WAAW,YACX,WAAW,gBACX,MAAM,IAAI,MAAM,8DAA8D;CAElF,OAAO;AACX;;AAEA,SAAgB,gCAAgC,KAAK;CACjD,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACrC,OAAO;CAEX,IAAI,QAAQ,QAAQ,OAAO,wBACvB,OAAO;CAEX,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,IAAI;EACA,MAAM,SAAS,aAAa,kCAAkC,GAAG,CAAC,GAAG;GACjE,KAAK;IACD,GAAG,QAAQ;KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;GACxG;GACA,UAAU;GACV,aAAa;GACb,SAAS;GACT,WAAW;GACX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACtC,CAAC,CAAC,CAAC,KAAK;EACR,IAAI,CAAC,kBAAkB,KAAK,MAAM,GAC9B,OAAO;EAEX,IAAI,QAAQ,QAAQ,KAChB,yBAAyB;EAE7B,OAAO;CACX,QACM;EACF,OAAO;CACX;AACJ;AACA,SAAgB,+BAA+B;CAC3C,OAAO,MAAM,kCAAkC,GAAG,CAAC,GAAG;EAClD,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,kCAAkC,MAAM,EACrG,WAAW,qBACf,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ;EAC1B;EACA,aAAa;EACb,OAAO;GAAC;GAAQ;GAAQ;EAAM;CAClC,CAAC;AACL;;;ACrHA,MAAM,mCAAmC;AAEzC,SAAgB,8BAA8B,OAAiC;CAC7E,OACE,OAAO,UAAU,aACf,MAAM,WAAW,KAAK,KAAK,MAAM,SAAS,KAC1C,iCAAiC,KAAK,KAAK;AAEjD;AAEA,MAAa,iCACX,yBAAyB,QAAQ,GAAG,KACpC,YAAY,QAAQ,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,QAAQ,OAAO,IAAI,GAAI;AAE5E,SAAgB,uBACd,OACA,WAA4B,QAAQ,UAC3B;CACT,IAAI,CAAC,eAAe,MAAM,QAAQ,GAChC,OAAO;CAET,MAAM,mBAAmB,yBAAyB,MAAM,UAAU,QAAQ;CAC1E,IACE,8BAA8B,gBAAgB,KAC9C,8BAA8B,MAAM,qBAAqB,KACzD,iBAAiB,MAAM,KAAK,CAAC,CAAC,CAAC,OAC7B,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC,CAAC,IAE5C,OAAO,qBAAqB,MAAM;CAIpC,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,WAA4B,QAAQ,UACrB;CACf,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACvC,OAAO;CAET,IAAI,aAAa,SAAS;EACxB,MAAM,UAAU,gCAAgC,GAAG;EACnD,OAAO,YAAY,OAAO,OAAO,SAAS;CAC5C;CACA,IAAI;EACF,MAAM,SAAS,aAAa,MAAM;GAAC;GAAM;GAAW;GAAM,OAAO,GAAG;EAAC,GAAG;GACtE,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,aAAa;EACf,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,OAAO,SAAS,IAAI,MAAM,WAAW;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,KAAsB;CAC5C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,CAAC,YAAY,OAAO,OAAO;CACpC;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,iBAAiB,SAAS,UAAU,SAAS,OAAO,MAAM,IAAI,MAAM;AAExE"}
+{"version":3,"file":"process-identity-DCYUeRGI.js","names":[],"sources":["../../../runtime/adapters/core/dist/windows-native-process.js","../../../runtime/adapters/core/dist/windows-system.js","../src/system/process-identity.ts"],"sourcesContent":["import { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { WINDOWS_PROCESS_HELPER_FILENAME } from \"@openmeld/schemas\";\nexport const WINDOWS_NATIVE_PROCESS_REQUEST_ENV = \"OPENMELD_NATIVE_JOB_REQUEST\";\nexport function resolveWindowsNativeProcessHelper() {\n    const binary = typeof __OPENMELD_DISTRIBUTION__ !== \"undefined\" &&\n        __OPENMELD_DISTRIBUTION__ === \"binary\";\n    return binary\n        ? join(dirname(process.execPath), WINDOWS_PROCESS_HELPER_FILENAME)\n        : fileURLToPath(\n        // Both src/ (workspace tests) and dist/ (installed code) share this\n        // package-owned build output. Never search another installation.\n        new URL(`../dist/windows/${WINDOWS_PROCESS_HELPER_FILENAME}`, import.meta.url));\n}\n","import { execFile, execFileSync, spawn } from \"node:child_process\";\nimport { win32 } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { windowsNativeProcessRequestSchema } from \"@openmeld/schemas\";\nimport { normalizeCommandEnvironment } from \"./process-environment.js\";\nimport { resolveWindowsNativeProcessHelper, WINDOWS_NATIVE_PROCESS_REQUEST_ENV, } from \"./windows-native-process.js\";\nexport function resolveWindowsPowerShellPath(env = process.env) {\n    const source = normalizeCommandEnvironment(env, \"win32\");\n    const root = source.SystemRoot ?? source.WINDIR;\n    if (!(root && win32.isAbsolute(root))) {\n        throw new Error(\"Windows system directory is unavailable.\");\n    }\n    return win32.join(root, \"System32\", \"WindowsPowerShell\", \"v1.0\", \"powershell.exe\");\n}\nexport function powerShellEncodedArguments(script) {\n    return [\n        \"-NoLogo\",\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-EncodedCommand\",\n        Buffer.from(script, \"utf16le\").toString(\"base64\"),\n    ];\n}\nconst FILE_TIME_PATTERN = /^\\d{10,20}$/u;\n// Keep native identity reads bounded; an unavailable identity fails admission.\nconst PROCESS_IDENTITY_TIMEOUT_MS = 15_000;\nlet currentProcessFileTime;\nexport async function activateWindowsManagedCommand(binDirectory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"activate-managed-command\",\n        binDirectory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"activated\" && result !== \"already_active\") {\n        throw new Error(\"Windows returned an invalid command activation receipt.\");\n    }\n    return result;\n}\n/** Kernel sharing rules keep a live CLI and its helper together during pruning. */\nexport async function pruneWindowsBinaryBundle(directory) {\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"prune-binary-bundle\",\n        directory,\n    });\n    const { stdout } = await promisify(execFile)(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n        },\n        encoding: \"utf8\",\n        windowsHide: true,\n        timeout: 15_000,\n        maxBuffer: 4096,\n    });\n    const result = stdout.trim();\n    if (result !== \"removed\" &&\n        result !== \"absent\" &&\n        result !== \"in_use\" &&\n        result !== \"unrecognized\") {\n        throw new Error(\"Windows returned an invalid managed-version cleanup receipt.\");\n    }\n    return result;\n}\n/** An opened process handle binds the observation to the actual instance, not a reused PID. */\nexport function readWindowsProcessStartFileTime(pid) {\n    if (!(Number.isSafeInteger(pid) && pid > 0)) {\n        return null;\n    }\n    if (pid === process.pid && currentProcessFileTime) {\n        return currentProcessFileTime;\n    }\n    const request = windowsNativeProcessRequestSchema.parse({\n        operation: \"identity\",\n        pid,\n    });\n    try {\n        const output = execFileSync(resolveWindowsNativeProcessHelper(), [], {\n            env: {\n                ...process.env,\n                [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(request), \"utf8\").toString(\"base64\"),\n            },\n            encoding: \"utf8\",\n            windowsHide: true,\n            timeout: PROCESS_IDENTITY_TIMEOUT_MS,\n            maxBuffer: 1024,\n            stdio: [\"ignore\", \"pipe\", \"ignore\"],\n        }).trim();\n        if (!FILE_TIME_PATTERN.test(output)) {\n            return null;\n        }\n        if (pid === process.pid) {\n            currentProcessFileTime = output;\n        }\n        return output;\n    }\n    catch {\n        return null;\n    }\n}\nexport function startWindowsIdleSleepBlocker() {\n    return spawn(resolveWindowsNativeProcessHelper(), [], {\n        env: {\n            ...process.env,\n            [WINDOWS_NATIVE_PROCESS_REQUEST_ENV]: Buffer.from(JSON.stringify(windowsNativeProcessRequestSchema.parse({\n                operation: \"prevent-idle-sleep\",\n            }))).toString(\"base64\"),\n        },\n        windowsHide: true,\n        stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readWindowsProcessStartFileTime } from \"@openmeld/adapter-core/windows-system\";\n\nconst WINDOWS_PROCESS_IDENTITY_PATTERN = /^win32:\\d{10,20}$/u;\n\nexport function isPreciseProcessStartIdentity(value: unknown): value is string {\n  return (\n    typeof value === \"string\" &&\n    ((value.startsWith(\"ps:\") && value.length > 3) ||\n      WINDOWS_PROCESS_IDENTITY_PATTERN.test(value))\n  );\n}\n\nexport const CURRENT_PROCESS_START_IDENTITY =\n  readProcessStartIdentity(process.pid) ??\n  `fallback:${process.pid}:${Math.floor(Date.now() - process.uptime() * 1000)}`;\n\nexport function isProcessIdentityAlive(\n  input: { ownerPid: number; ownerProcessStartedAt: string },\n  platform: NodeJS.Platform = process.platform\n): boolean {\n  if (!isProcessAlive(input.ownerPid)) {\n    return false;\n  }\n  const observedIdentity = readProcessStartIdentity(input.ownerPid, platform);\n  if (\n    isPreciseProcessStartIdentity(observedIdentity) &&\n    isPreciseProcessStartIdentity(input.ownerProcessStartedAt) &&\n    observedIdentity.split(\":\", 1)[0] ===\n      input.ownerProcessStartedAt.split(\":\", 1)[0]\n  ) {\n    return observedIdentity === input.ownerProcessStartedAt;\n  }\n  // Fail closed when a live process cannot be identified precisely. A caller\n  // may recover only after it can prove that the transition owner has exited.\n  return true;\n}\n\nexport function readProcessStartIdentity(\n  pid: number,\n  platform: NodeJS.Platform = process.platform\n): string | null {\n  if (!(Number.isSafeInteger(pid) && pid > 0)) {\n    return null;\n  }\n  if (platform === \"win32\") {\n    const created = readWindowsProcessStartFileTime(pid);\n    return created === null ? null : `win32:${created}`;\n  }\n  try {\n    const output = execFileSync(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      encoding: \"utf8\",\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      timeout: 1000,\n      windowsHide: true,\n    }).trim();\n    return output.length > 0 ? `ps:${output}` : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return !isNodeError(error, \"ESRCH\");\n  }\n}\n\nfunction isNodeError(error: unknown, code: string): boolean {\n  return (\n    error instanceof Error && \"code\" in error && String(error.code) === code\n  );\n}\n"],"mappings":";;;;;;;;;AAGA,MAAa,qCAAqC;AAClD,SAAgB,oCAAoC;CAGhD,OAEM,cAGF,IAAI,IAAI,mBAAmB,mCAAmC,OAAO,KAAK,GAAG,CAAC;AACtF;;;ACPA,SAAgB,6BAA6B,MAAM,QAAQ,KAAK;CAC5D,MAAM,SAAS,4BAA4B,KAAK,OAAO;CACvD,MAAM,OAAO,OAAO,cAAc,OAAO;CACzC,IAAI,EAAE,QAAQ,MAAM,WAAW,IAAI,IAC/B,MAAM,IAAI,MAAM,0CAA0C;CAE9D,OAAO,MAAM,KAAK,MAAM,YAAY,qBAAqB,QAAQ,gBAAgB;AACrF;AACA,SAAgB,2BAA2B,QAAQ;CAC/C,OAAO;EACH;EACA;EACA;EACA;EACA,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,QAAQ;CACpD;AACJ;AACA,MAAM,oBAAoB;AAE1B,MAAM,8BAA8B;AACpC,IAAI;AACJ,eAAsB,8BAA8B,cAAc;CAC9D,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,eAAe,WAAW,kBACrC,MAAM,IAAI,MAAM,yDAAyD;CAE7E,OAAO;AACX;;AAEA,eAAsB,yBAAyB,WAAW;CACtD,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,MAAM,EAAE,WAAW,MAAM,UAAU,QAAQ,CAAC,CAAC,kCAAkC,GAAG,CAAC,GAAG;EAClF,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;EACxG;EACA,UAAU;EACV,aAAa;EACb,SAAS;EACT,WAAW;CACf,CAAC;CACD,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,WAAW,aACX,WAAW,YACX,WAAW,YACX,WAAW,gBACX,MAAM,IAAI,MAAM,8DAA8D;CAElF,OAAO;AACX;;AAEA,SAAgB,gCAAgC,KAAK;CACjD,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACrC,OAAO;CAEX,IAAI,QAAQ,QAAQ,OAAO,wBACvB,OAAO;CAEX,MAAM,UAAU,kCAAkC,MAAM;EACpD,WAAW;EACX;CACJ,CAAC;CACD,IAAI;EACA,MAAM,SAAS,aAAa,kCAAkC,GAAG,CAAC,GAAG;GACjE,KAAK;IACD,GAAG,QAAQ;KACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,QAAQ;GACxG;GACA,UAAU;GACV,aAAa;GACb,SAAS;GACT,WAAW;GACX,OAAO;IAAC;IAAU;IAAQ;GAAQ;EACtC,CAAC,CAAC,CAAC,KAAK;EACR,IAAI,CAAC,kBAAkB,KAAK,MAAM,GAC9B,OAAO;EAEX,IAAI,QAAQ,QAAQ,KAChB,yBAAyB;EAE7B,OAAO;CACX,QACM;EACF,OAAO;CACX;AACJ;AACA,SAAgB,+BAA+B;CAC3C,OAAO,MAAM,kCAAkC,GAAG,CAAC,GAAG;EAClD,KAAK;GACD,GAAG,QAAQ;IACV,qCAAqC,OAAO,KAAK,KAAK,UAAU,kCAAkC,MAAM,EACrG,WAAW,qBACf,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,QAAQ;EAC1B;EACA,aAAa;EACb,OAAO;GAAC;GAAQ;GAAQ;EAAM;CAClC,CAAC;AACL;;;ACrHA,MAAM,mCAAmC;AAEzC,SAAgB,8BAA8B,OAAiC;CAC7E,OACE,OAAO,UAAU,aACf,MAAM,WAAW,KAAK,KAAK,MAAM,SAAS,KAC1C,iCAAiC,KAAK,KAAK;AAEjD;AAEA,MAAa,iCACX,yBAAyB,QAAQ,GAAG,KACpC,YAAY,QAAQ,IAAI,GAAG,KAAK,MAAM,KAAK,IAAI,IAAI,QAAQ,OAAO,IAAI,GAAI;AAE5E,SAAgB,uBACd,OACA,WAA4B,QAAQ,UAC3B;CACT,IAAI,CAAC,eAAe,MAAM,QAAQ,GAChC,OAAO;CAET,MAAM,mBAAmB,yBAAyB,MAAM,UAAU,QAAQ;CAC1E,IACE,8BAA8B,gBAAgB,KAC9C,8BAA8B,MAAM,qBAAqB,KACzD,iBAAiB,MAAM,KAAK,CAAC,CAAC,CAAC,OAC7B,MAAM,sBAAsB,MAAM,KAAK,CAAC,CAAC,CAAC,IAE5C,OAAO,qBAAqB,MAAM;CAIpC,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,WAA4B,QAAQ,UACrB;CACf,IAAI,EAAE,OAAO,cAAc,GAAG,KAAK,MAAM,IACvC,OAAO;CAET,IAAI,aAAa,SAAS;EACxB,MAAM,UAAU,gCAAgC,GAAG;EACnD,OAAO,YAAY,OAAO,OAAO,SAAS;CAC5C;CACA,IAAI;EACF,MAAM,SAAS,aAAa,MAAM;GAAC;GAAM;GAAW;GAAM,OAAO,GAAG;EAAC,GAAG;GACtE,UAAU;GACV,OAAO;IAAC;IAAU;IAAQ;GAAQ;GAClC,SAAS;GACT,aAAa;EACf,CAAC,CAAC,CAAC,KAAK;EACR,OAAO,OAAO,SAAS,IAAI,MAAM,WAAW;CAC9C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,eAAe,KAAsB;CAC5C,IAAI;EACF,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO;CACT,SAAS,OAAO;EACd,OAAO,CAAC,YAAY,OAAO,OAAO;CACpC;AACF;AAEA,SAAS,YAAY,OAAgB,MAAuB;CAC1D,OACE,iBAAiB,SAAS,UAAU,SAAS,OAAO,MAAM,IAAI,MAAM;AAExE"}