pi-daddy 0.22.0 → 0.23.0

package/dist/effect-profile-runtime.js

@@ -0,0 +1,51 @@
+import { createHash } from "node:crypto";
+import { lstat, readFile, realpath } from "node:fs/promises";
+export const DIGEST_PROFILE = "linux-bwrap-digest-v1";
+export const DIGEST_WORKER = `const b=Buffer.from(process.argv[1],'base64');if(b.length>16384)process.exit(90);process.stdout.write(JSON.stringify({bytes:b.length,sha256:require('node:crypto').createHash('sha256').update(b).digest('hex')})+'\\n');`;
+function executableDetails(path, st) {
+    return { path, regular: st.isFile(), mode: (st.mode & 0o7777).toString(8), size: st.size,
+        predicates: { notRegular: !st.isFile(), writable: (st.mode & 0o022) !== 0, oversize: st.size > 256 * 1024 * 1024 } };
+}
+/** Read-only independent observations; no installation, admission or namespace qualification. */
+export async function inspectDigestPrerequisites() {
+    const observations = [];
+    for (const requested of [process.execPath, "/usr/bin/bwrap", "/usr/bin/prlimit"]) {
+        try {
+            const path = requested === process.execPath ? await realpath(requested) : requested;
+            const details = executableDetails(path, await lstat(path));
+            observations.push({ requested, ...details, conforms: !Object.values(details.predicates).some(Boolean) });
+        }
+        catch (error) {
+            observations.push({ requested, conforms: false, error: { code: error.code ?? null, message: String(error) } });
+        }
+    }
+    return { version: "digest-prerequisites-v1", platform: process.platform, nodeVersion: process.version, execPath: process.execPath,
+        conforms: process.platform === "linux" && observations.every(o => o.conforms), observations, qualification: "not-assessed" };
+}
+export async function digestRuntime() {
+    if (process.platform !== "linux")
+        throw new Error("Linux user/mount/PID/network namespaces required");
+    const node = await realpath(process.execPath), fingerprints = {};
+    for (const path of [node, "/usr/bin/bwrap", "/usr/bin/prlimit"]) {
+        const st = await lstat(path);
+        if (!st.isFile() || (st.mode & 0o022) !== 0 || st.size > 256 * 1024 * 1024) {
+            const details = executableDetails(path, st), code = details.predicates.notRegular ? "RUNTIME_NOT_REGULAR" : details.predicates.writable ? "RUNTIME_WRITABLE" : "RUNTIME_TOO_LARGE";
+            throw Object.assign(new Error("unsupported mutable runtime executable"), { code, path, details });
+        }
+        fingerprints[path] = createHash("sha256").update(await readFile(path)).digest("hex");
+    }
+    return Object.freeze({ node, fingerprints: Object.freeze(fingerprints) });
+}
+/** Internal fixed boundary builder. No user command/environment/workspace/destination interface. */
+export function digestNamespaceArgs(runtime, code, args, fixture) {
+    return ["--unshare-all", "--die-with-parent", "--new-session", "--cap-drop", "ALL",
+        "--ro-bind", "/usr", "/usr", "--ro-bind", "/lib", "/lib", "--ro-bind", "/lib64", "/lib64",
+        "--dir", "/runtime", "--ro-bind", runtime.node, "/runtime/node",
+        ...(fixture ? ["--ro-bind", fixture, "/input"] : []),
+        "--proc", "/proc", "--dev", "/dev", "--clearenv", "--chdir", "/", "--",
+        "/usr/bin/prlimit", "--cpu=2:2", "--nofile=64:64", "--", "/runtime/node",
+        // No arbitrary code enters the production worker. Permission flags are additional tripwires,
+        // not a claim that Node's permission model is a hostile-JavaScript sandbox.
+        ...(fixture ? [] : ["--permission"]), "--max-old-space-size=32", "-e", code, ...args];
+}
+//# sourceMappingURL=effect-profile-runtime.js.map

package/dist/effect-profile-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effect-profile-runtime.js","sourceRoot":"","sources":["../src/effect-profile-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAgC,CAAC;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,2NAA2N,CAAC;AAEzP,SAAS,iBAAiB,CAAC,IAAY,EAAE,EAAqD;IAC5F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;QACtF,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;AACzH,CAAC;AACD,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,YAAY,GAAG,EAAE,CAAC;IACxB,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YAAC,MAAM,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAG,KAA+B,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;IAChK,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC/H,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AACjI,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,GAA2B,EAAE,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACnL,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAc,EAAE,OAAgB;IACxG,OAAO,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK;QAChF,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ;QACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe;QAC/D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI;QACtE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe;QACxE,6FAA6F;QAC7F,4EAA4E;QAC5E,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AAC1F,CAAC"}

package/dist/effect-profile.d.ts

@@ -0,0 +1,40 @@
+import { type ChildRunResult } from "./run-child.ts";
+import { type AttemptDemand, type GovernedBudgetBinding } from "./resource-budget.ts";
+import { type IntentAdmission } from "./intent-control.ts";
+import { DIGEST_PROFILE } from "./effect-profile-runtime.ts";
+export { DIGEST_PROFILE } from "./effect-profile-runtime.ts";
+export interface DigestProfile {
+    readonly profile: typeof DIGEST_PROFILE;
+    readonly bindingDigest: string;
+    readonly runtimeDigest: string;
+}
+export declare class EffectProfileUnavailableError extends Error {
+    constructor(message: string);
+}
+export declare const isDigestProfile: (value: unknown) => value is DigestProfile;
+/** Actual bounded native probes, not an executable-presence flag. Trusted fixture code only. */
+export declare function prepareDigestProfile(binding: GovernedBudgetBinding): Promise<Readonly<DigestProfile>>;
+export interface DigestAttempt {
+    attempt: Omit<AttemptDemand, "inputBytes" | "inputDigest">;
+    bytes: Uint8Array;
+    intent?: IntentAdmission;
+}
+/** A fixed, useful non-shell operation: hash at most 16 KiB. No writable destinations or provider calls.
+ * The opaque profile is bound to one budget. A claimed profile name/receipt cannot authorize a launch. */
+export declare function runDigestProfile(profile: DigestProfile, request: DigestAttempt, signal?: AbortSignal): Promise<Readonly<{
+    attemptId: string;
+    output: ChildRunResult;
+    digest: string | null;
+}>>;
+export type FixedDigestOperation = "digest" | "hold";
+export interface ReservedDigestRun {
+    readonly started: Promise<"spawned" | "settled-without-spawn">;
+    run(signal?: AbortSignal): ReturnType<typeof runDigestProfile>;
+}
+/** Atomic all-attempt admission; only minted closures hold the original permits. No caller-supplied permit. */
+export declare function reserveDigestProfileBatch(profile: DigestProfile, requests: readonly {
+    attempt: DigestAttempt["attempt"];
+    bytes: Uint8Array;
+    operation: FixedDigestOperation;
+}[]): Promise<readonly ReservedDigestRun[]>;
+//# sourceMappingURL=effect-profile.d.ts.map

package/dist/effect-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effect-profile.d.ts","sourceRoot":"","sources":["../src/effect-profile.ts"],"names":[],"mappings":"AAGA,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAG/D,OAAO,EAA6C,KAAK,aAAa,EAAuB,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAyE,MAAM,6BAA6B,CAAC;AACpI,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,cAAc,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAC1I,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAC5B;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,aAAoG,CAAC;AAU/J,gGAAgG;AAChG,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAqB3G;AAED,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,aAAa,CAAC,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE;AAC1I;0GAC0G;AAC1G,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7H,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAClE,CAAC,CAAC,CAiBF;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,MAAM,CAAC;AACrD,MAAM,WAAW,iBAAiB;IAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,GAAG,uBAAuB,CAAC,CAAC;IAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAA;CAAE;AACrK,+GAA+G;AAC/G,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS;IAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,oBAAoB,CAAA;CAAE,EAAE,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAoB7N"}

package/dist/effect-profile.js

@@ -0,0 +1,152 @@
+import { createHash } from "node:crypto";
+import { mkdtemp, mkdir, readlink, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { runChild } from "./run-child.js";
+import { runWithFinalizers } from "./finalization.js";
+import { beginExecutionRetention, retentionConfigurationDigest } from "./execution-retention.js";
+import { openResourceBudget, resourceBindingDigest } from "./resource-budget.js";
+import { intentKey } from "./intent-control.js";
+import { DIGEST_PROFILE, DIGEST_WORKER, digestNamespaceArgs, digestRuntime } from "./effect-profile-runtime.js";
+export { DIGEST_PROFILE } from "./effect-profile-runtime.js";
+export class EffectProfileUnavailableError extends Error {
+    constructor(message) { super(message); this.name = "EffectProfileUnavailableError"; }
+}
+const profiles = new WeakMap();
+export const isDigestProfile = (value) => typeof value === "object" && value !== null && profiles.has(value);
+const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
+function requireClean(result) {
+    if (result.code !== 0 || result.spawnError || result.aborted || result.timedOut || result.truncated)
+        throw new EffectProfileUnavailableError(`fixed native profile failed: ${result.spawnError ?? result.text ?? result.code}`);
+}
+const child = (runtime, code, args, fixture, signal) => runChild({
+    command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, code, args, fixture), cwd: "/", env: {},
+    timeoutMs: 3000, killGraceMs: 50, hardDeadlineAt: Date.now() + 3500, maxOutputBytes: 4096, signal,
+});
+/** Actual bounded native probes, not an executable-presence flag. Trusted fixture code only. */
+export async function prepareDigestProfile(binding) {
+    const budget = openResourceBudget(binding);
+    await budget.inspect(); // Required admission state failures remain failures, not an unavailable fallback.
+    const runtime = await digestRuntime();
+    const root = await mkdtemp(join(budget.binding.directory, "profile-probe-")), input = join(root, "input");
+    return runWithFinalizers(async () => {
+        await mkdir(input, { mode: 0o700 });
+        await writeFile(join(input, "allowed"), "owned-readable", { mode: 0o600 });
+        await writeFile(join(root, "outside"), "owned-outside", { mode: 0o600 });
+        const net = await readlink("/proc/self/ns/net");
+        const code = `const fs=require('node:fs');let failures=0;for(const fn of [()=>fs.readFileSync(${JSON.stringify(join(root, "outside"))}),()=>fs.writeFileSync('/input/denied','bad')]){try{fn()}catch(e){if(['ENOENT','EROFS'].includes(e.code))failures++}}if(failures!==2||fs.readFileSync('/input/allowed','utf8')!=='owned-readable'||fs.readlinkSync('/proc/self/ns/net')===${JSON.stringify(net)})process.exit(91);console.log('boundary-ok');`;
+        const boundary = await child(runtime, code, [], input);
+        requireClean(boundary);
+        if (boundary.text.trim() !== "boundary-ok")
+            throw new EffectProfileUnavailableError("native boundary probe did not establish its expected observations");
+        const permission = await child(runtime, `try{require('node:child_process').spawnSync('/runtime/node',['-e','process.exit(92)']);process.exit(93)}catch(e){if(e.code!=='ERR_ACCESS_DENIED')process.exit(94);console.log('descendant-denied')}`, []);
+        requireClean(permission);
+        if (permission.text.trim() !== "descendant-denied")
+            throw new EffectProfileUnavailableError("descendant tripwire unavailable");
+        const sample = await child(runtime, DIGEST_WORKER, [Buffer.from("fixture").toString("base64")]);
+        requireClean(sample);
+        if (sample.text !== JSON.stringify({ bytes: 7, sha256: hash("fixture") }) + "\n")
+            throw new EffectProfileUnavailableError("fixed worker probe mismatch");
+        const result = Object.freeze({ profile: DIGEST_PROFILE, bindingDigest: resourceBindingDigest(budget.binding), runtimeDigest: retentionConfigurationDigest(runtime) });
+        profiles.set(result, { runtime, budget });
+        return result;
+    }, [{ label: "profile probe cleanup failed", run: () => rm(root, { recursive: true, force: true }) }]);
+}
+/** A fixed, useful non-shell operation: hash at most 16 KiB. No writable destinations or provider calls.
+ * The opaque profile is bound to one budget. A claimed profile name/receipt cannot authorize a launch. */
+export async function runDigestProfile(profile, request, signal) {
+    const prepared = profiles.get(profile);
+    if (!prepared || profile.profile !== DIGEST_PROFILE)
+        throw new EffectProfileUnavailableError("unsupported or unprobed effect profile; no launch");
+    const requestKeys = ["attempt", "bytes", ...(request && Object.hasOwn(request, "intent") ? ["intent"] : [])];
+    if (!request || typeof request !== "object" || Reflect.ownKeys(request).length !== requestKeys.length ||
+        !requestKeys.every(k => { const d = Object.getOwnPropertyDescriptor(request, k); return d && d.enumerable && Object.hasOwn(d, "value"); }) ||
+        !(request.bytes instanceof Uint8Array) || request.bytes.byteLength > 16384)
+        throw new TypeError("bounded byte-only request required; no destination, code, money or workspace override");
+    const bytes = Buffer.from(request.bytes), inputDigest = hash(bytes);
+    const selectedIntent = Object.hasOwn(request, "intent") ? JSON.parse(intentKey(request.intent)) : undefined;
+    const descriptors = Object.getOwnPropertyDescriptors(request.attempt);
+    const keys = ["attemptId", "orderId", "experimentId", "kind", "parentAttemptId"];
+    if (Reflect.ownKeys(request.attempt).length !== keys.length || keys.some(k => !descriptors[k]?.enumerable || !Object.hasOwn(descriptors[k], "value")))
+        throw new TypeError("closed attempt identity required");
+    const attempt = Object.fromEntries(keys.map(k => [k, descriptors[k].value]));
+    if (signal?.aborted)
+        throw new EffectProfileUnavailableError("cancelled before reservation/launch");
+    if (retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
+        throw new EffectProfileUnavailableError("runtime changed since the native profile probe");
+    const permit = await prepared.budget.reserve({ ...attempt, inputBytes: bytes.length, inputDigest }, selectedIntent);
+    return executeReserved(profile, prepared.runtime, attempt, bytes, permit, "digest", signal);
+}
+/** Atomic all-attempt admission; only minted closures hold the original permits. No caller-supplied permit. */
+export async function reserveDigestProfileBatch(profile, requests) {
+    const prepared = profiles.get(profile);
+    if (!prepared || !Array.isArray(requests) || !requests.length || requests.length > 32 || Reflect.ownKeys(requests).length !== requests.length + 1 || Array.from({ length: requests.length }, (_, i) => Object.getOwnPropertyDescriptor(requests, String(i))).some(d => !d?.enumerable || !Object.hasOwn(d, "value")))
+        throw new EffectProfileUnavailableError("probed profile and bounded batch required");
+    const detached = requests.map(r => {
+        const descriptors = r && Object.getOwnPropertyDescriptors(r);
+        if (!descriptors || Reflect.ownKeys(r).length !== 3 || ["attempt", "bytes", "operation"].some(k => !descriptors[k]?.enumerable || !Object.hasOwn(descriptors[k], "value")))
+            throw new TypeError("closed data variant required");
+        if (!r || !["digest", "hold"].includes(r.operation) || !(r.bytes instanceof Uint8Array) || r.bytes.length > 16384 || Object.keys(r).sort().join() !== "attempt,bytes,operation")
+            throw new TypeError("fixed byte-only variant required");
+        return { attempt: JSON.parse(intentKey(r.attempt)), bytes: Buffer.from(r.bytes), operation: r.operation };
+    });
+    if (retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
+        throw new EffectProfileUnavailableError("runtime changed before batch");
+    const permits = await prepared.budget.reserveBatch(detached.map(r => ({ ...r.attempt, inputBytes: r.bytes.length, inputDigest: hash(r.bytes) })));
+    return Object.freeze(detached.map((r, i) => {
+        let used = false, resolveStarted;
+        const started = { promise: new Promise(resolve => { resolveStarted = resolve; }), resolve: (value) => resolveStarted(value) };
+        return Object.freeze({ started: started.promise, async run(signal) {
+                if (used)
+                    throw new Error("reserved execution already consumed; no replay");
+                used = true;
+                try {
+                    return await executeReserved(profile, prepared.runtime, r.attempt, r.bytes, permits[i], r.operation, signal, () => started.resolve("spawned"));
+                }
+                finally {
+                    started.resolve("settled-without-spawn");
+                } // Settled-without-spawn also unblocks waiters; never a spawn/identity claim.
+            } });
+    }));
+}
+async function executeReserved(profile, runtime, attempt, bytes, permit, operation, signal, started) {
+    const inputDigest = hash(bytes), code = operation === "digest" ? DIGEST_WORKER : "setInterval(()=>{},1000);";
+    // From this point every outcome costs the full reservation. No posthoc result refunds resources.
+    const retention = beginExecutionRetention({ executionId: attempt.attemptId, parentExecutionId: attempt.parentAttemptId,
+        childId: "digest", toolCallId: null, executor: "process", taskDigest: inputDigest, definitionDigest: hash(code),
+        configurationDigest: retentionConfigurationDigest({ profile: profile.profile, binding: profile.bindingDigest, runtime: profile.runtimeDigest }), workspaceId: null });
+    let output;
+    let outcome = "failed";
+    let accountingFailed = false, spawned = false, exitObserved = false;
+    return runWithFinalizers(async () => {
+        if (!signal?.aborted && retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
+            throw new EffectProfileUnavailableError("runtime changed after admission");
+        output = await runChild({ command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, code, [bytes.toString("base64")]),
+            cwd: "/", env: {}, signal, timeoutMs: 3000, killGraceMs: 50, hardDeadlineAt: Date.now() + 3500, maxOutputBytes: 4096,
+            onSpawn: pid => { spawned = true; retention.native({ pid }); started?.(); }, onObservation: (stream, data) => retention.capture(stream, data) });
+        exitObserved = output.code !== null || Boolean(output.signal);
+        if (spawned && !exitObserved)
+            throw new Error("owned executor exit unknown; reservation retained");
+        const completed = output.code === 0 && !output.aborted && !output.spawnError && !output.timedOut && !output.truncated;
+        if (completed && output.text !== JSON.stringify({ bytes: bytes.length, sha256: inputDigest }) + "\n")
+            throw new Error("fixed worker result mismatch");
+        outcome = output.aborted && (!spawned || Boolean(output.signal)) ? "cancelled" : completed ? "completed" : "failed";
+        retention.capture("result", Buffer.from(output.text), true);
+        return Object.freeze({ attemptId: attempt.attemptId, output, digest: completed ? inputDigest : null });
+    }, [{ label: "required resource settlement failed", run: async () => {
+                // Only this live controller, after executor settlement, releases a slot. Cleanup failure still rejects.
+                // Crashes/lost controllers keep their slots; reopening has no expiry, receipt-credit or reclaim API.
+                try {
+                    if (spawned && !exitObserved)
+                        throw new Error("owned executor exit unknown; no settlement credit");
+                    await permit.settle(outcome);
+                }
+                catch (error) {
+                    accountingFailed = true;
+                    throw error;
+                }
+            } }, { label: "retention observation failed", run: () => {
+                retention.finish({ code: output?.code ?? null, signal: output?.signal ?? null, timedOut: output?.timedOut ?? false,
+                    aborted: output?.aborted ?? Boolean(signal?.aborted), truncated: output?.truncated ?? false, failed: outcome !== "completed" || accountingFailed });
+            } }]);
+}
+//# sourceMappingURL=effect-profile.js.map

package/dist/effect-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effect-profile.js","sourceRoot":"","sources":["../src/effect-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAuB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAuE,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAE,SAAS,EAAwB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAsB,MAAM,6BAA6B,CAAC;AACpI,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC,CAAC,CAAC;CAC9F;AACD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA4F,CAAC;AACzH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAsB,CAAC,CAAC;AAC/J,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9F,SAAS,YAAY,CAAC,MAAsB;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,6BAA6B,CAAC,gCAAgC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClO,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAc,EAAE,OAAgB,EAAE,MAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC;IACvH,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACrG,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;CAClG,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IACvE,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,kFAAkF;IAC1G,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1G,OAAO,iBAAiB,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,mFAAmF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,6OAA6O,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,+CAA+C,CAAC;QACrb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,aAAa;YAAE,MAAM,IAAI,6BAA6B,CAAC,mEAAmE,CAAC,CAAC;QACzJ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,qMAAqM,EAAE,EAAE,CAAC,CAAC;QACnP,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,mBAAmB;YAAE,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAC/H,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtH,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,CAAC;QACzJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtK,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAGD;0GAC0G;AAC1G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAsB,EAAE,OAAsB,EAAE,MAAoB;IAGzG,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc;QAAE,MAAM,IAAI,6BAA6B,CAAC,mDAAmD,CAAC,CAAC;IAClJ,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7G,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACnG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,CAAC,CAAC,OAAO,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,uFAAuF,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,cAAc,GAAgC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzI,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/M,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAA6B,CAAC;IACzG,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,6BAA6B,CAAC,qCAAqC,CAAC,CAAC;IACpG,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,6BAA6B,CAAC,gDAAgD,CAAC,CAAC;IAC7K,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpH,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAID,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAsB,EAAE,QAA8G;IACpL,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,6BAA6B,CAAC,2CAA2C,CAAC,CAAC;IAC3Y,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAChC,MAAM,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAChO,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,yBAAyB;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACzO,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAA6B,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACxI,CAAC,CAAC,CAAC;IACH,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,6BAA6B,CAAC,8BAA8B,CAAC,CAAC;IAC3J,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClJ,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzC,IAAI,IAAI,GAAG,KAAK,EAAE,cAAqE,CAAC;QACxF,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,CAAsC,OAAO,CAAC,EAAE,GAAG,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAA0C,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACxM,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAoB;gBAC7E,IAAI,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC;gBACzF,IAAI,CAAC;oBAAC,OAAO,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAC,CAAC;wBAC/I,CAAC;oBAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;gBAAC,CAAC,CAAC,6EAA6E;YACrI,CAAC,EAAE,CAAC,CAAC;IACP,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,OAAsB,EAAE,OAAiC,EAAE,KAAa,EAAE,MAAsB,EAAE,SAA+B,EAAE,MAAoB,EAAE,OAAoB;IAClO,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC7G,iGAAiG;IACjG,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe;QACpH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC;QAC/G,mBAAmB,EAAE,4BAA4B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACxK,IAAI,MAAkC,CAAC;IACvC,IAAI,OAAO,GAAyC,QAAQ,CAAC;IAC7D,IAAI,gBAAgB,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC;IACpE,OAAO,iBAAiB,CAAC,KAAK,IAAI,EAAE;QAClC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;YAAE,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAClL,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvH,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI;YACpH,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnJ,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACtH,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtJ,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpH,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;gBAClE,wGAAwG;gBACxG,qGAAqG;gBACrG,IAAI,CAAC;oBAAC,IAAI,OAAO,IAAI,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,gBAAgB,GAAG,IAAI,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YACnM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,GAAG,EAAE;gBACtD,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;oBAChH,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,WAAW,IAAI,gBAAgB,EAAE,CAAC,CAAC;YACxJ,CAAC,EAAE,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/execution-retention.d.ts

@@ -0,0 +1,90 @@
+import { type NativeSessionObservation, type NativeSessionManager } from "./native-session.ts";
+export { buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA } from "./retention-contract.ts";
+export { ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes, type NativeSessionObservation, type NativeSessionManager } from "./native-session.ts";
+/** Operator-owned archive boundary; never a model-facing parameter or an authority source. */
+export declare const ENV_EXECUTION_ARCHIVE = "PI_GRANTS_EXECUTION_ARCHIVE";
+export declare const RETENTION_VERSION = "2.0";
+export interface RetentionIdentity {
+    executionId: string;
+    parentExecutionId: string | null;
+    childId: string;
+    toolCallId: string | null;
+    executor: "process" | "herdr" | "check";
+    taskDigest: string | null;
+    definitionDigest: string | null;
+    configurationDigest: string;
+    workspaceId: string | null;
+}
+export interface RetainedContent {
+    status: "retained" | "missing";
+    path: string | null;
+    sha256: string | null;
+    bytes: number | null;
+}
+export interface ExecutionRetentionManifest {
+    version: "2.0";
+    archiveId: string;
+    identity: RetentionIdentity;
+    native: {
+        pid: number | null;
+        paneId: string | null;
+        agentName: string | null;
+        tabId: string | null;
+        sessionId: string | null;
+        sessionPath: string | null;
+        branchLeafId: string | null;
+    };
+    nativeSession: NativeSessionObservation;
+    state: "running" | "terminal";
+    outcome: {
+        code: number | null;
+        signal: string | null;
+        timedOut: boolean;
+        aborted: boolean;
+        truncated: boolean;
+        failed: boolean;
+    } | null;
+    content: Record<"stdout" | "stderr" | "paneSnapshot" | "checkReceipt" | "result" | "session", RetainedContent>;
+    coverage: {
+        complete: false;
+        losses: string[];
+    };
+    /** Retention is observation, never a work-v4 acceptance decision. */
+    acceptance: "not-assessed";
+}
+export interface RetentionStatus {
+    manifestPath: string | null;
+    status: "disabled" | "pending" | "retained" | "lost";
+}
+/** Original live status only; drains admitted observations, not producer completeness or fsync. */
+export declare function drainExecutionRetention(status: RetentionStatus): Promise<RetentionStatus>;
+/** Hash only an explicitly selected configuration. Callers must not pass environment/auth objects. */
+export declare const retentionConfigurationDigest: (configuration: unknown) => string;
+/**
+ * A bounded, coalescing observation queue. No worker-control path awaits publication. A failed or stalled
+ * archive never changes required ledger/lease semantics. `flush` is exclusively for external archival at
+ * quiescence; it is NOT called by the spawner. Missing terminal publication means incomplete observation.
+ */
+export declare function beginExecutionRetention(identity: RetentionIdentity, directory?: string | undefined): {
+    /** Read-only native API reference; never derive IDs from the locator or a displayed name. */
+    observeSession: (reference: NonNullable<{
+        source: "herdr-id" | "herdr-path" | "pi-session-file" | "pi-session-manager";
+        value: string;
+        manager?: NativeSessionManager;
+    } | undefined>) => void;
+    observeSessionManager(manager: NativeSessionManager): void;
+    status: () => RetentionStatus;
+    native(value: Partial<Pick<ExecutionRetentionManifest["native"], "pid" | "paneId" | "agentName" | "tabId">>): void;
+    capture(kind: "stdout" | "stderr" | "paneSnapshot" | "checkReceipt" | "result", bytes: Uint8Array, replace?: boolean): void;
+    finish(outcome: NonNullable<ExecutionRetentionManifest["outcome"]>): void;
+    /** Observation-only diagnostic; never establishes successful execution or accepted work. */
+    coverage: () => {
+        complete: false;
+        losses: string[];
+    };
+    flush: () => Promise<RetentionStatus>;
+};
+export type ExecutionRetention = ReturnType<typeof beginExecutionRetention>;
+/** Public consumer check: neither a reference nor a wire status supplies the missing bytes. */
+export declare function verifyRetainedBytes(reference: RetainedContent, bytes?: Uint8Array): "retained" | "missing" | "mismatch";
+//# sourceMappingURL=execution-retention.d.ts.map

package/dist/execution-retention.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-retention.d.ts","sourceRoot":"","sources":["../src/execution-retention.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2C,KAAK,wBAAwB,EAAE,KAAK,oBAAoB,EAA6B,MAAM,qBAAqB,CAAC;AACnK,OAAO,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,KAAK,wBAAwB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEpK,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAKvC,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AACD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AACD,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,KAAK,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAClG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtF,aAAa,EAAE,wBAAwB,CAAC;IACxC,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC;IAC9B,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QACzF,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/G,QAAQ,EAAE;QAAE,QAAQ,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChD,qEAAqE;IACrE,UAAU,EAAE,cAAc,CAAC;CAC5B;AACD,MAAM,WAAW,eAAe;IAAG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAA;CAAE;AAEtH,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAIzF;AAGD,sGAAsG;AACtG,eAAO,MAAM,4BAA4B,GAAI,eAAe,OAAO,KAAG,MAA+C,CAAC;AAEtH;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,SAAS,qBAAqC;IA2G/G,6FAA6F;gCAnC5D,WAAW;gBA5CpB,UAAU,GAAG,YAAY,GAAG,iBAAiB,GAAG,oBAAoB;eAAS,MAAM;kBAAY,oBAAoB;kBA4C5E;mCAqChC,oBAAoB;kBAOvC,eAAe;kBACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC,CAAC;kBAS7F,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,SAAS,UAAU;oBAgBjF,WAAW,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAUlE,4FAA4F;;;;;iBAnDtE,OAAO,CAAC,eAAe,CAAC;EAuDjD;AACD,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE5E,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAIvH"}

package/dist/execution-retention.js

@@ -0,0 +1,247 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, writeFile, rename } from "node:fs/promises";
+import { isAbsolute, join } from "node:path";
+import { buildExecutionRetentionManifest } from "./retention-contract.js";
+import { missingNativeSession, readNativeSession } from "./native-session.js";
+export { buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA } from "./retention-contract.js";
+export { ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes } from "./native-session.js";
+/** Operator-owned archive boundary; never a model-facing parameter or an authority source. */
+export const ENV_EXECUTION_ARCHIVE = "PI_GRANTS_EXECUTION_ARCHIVE";
+export const RETENTION_VERSION = "2.0";
+const LIMIT = 1024 * 1024;
+const MAX_ACTIVE = 32;
+let active = 0;
+const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
+const drains = new WeakMap();
+/** Original live status only; drains admitted observations, not producer completeness or fsync. */
+export function drainExecutionRetention(status) {
+    const drain = drains.get(status);
+    if (!drain)
+        return Promise.reject(new TypeError("original live retention status required"));
+    return drain();
+}
+const missing = () => ({ status: "missing", path: null, sha256: null, bytes: null });
+/** Hash only an explicitly selected configuration. Callers must not pass environment/auth objects. */
+export const retentionConfigurationDigest = (configuration) => digest(JSON.stringify(configuration));
+/**
+ * A bounded, coalescing observation queue. No worker-control path awaits publication. A failed or stalled
+ * archive never changes required ledger/lease semantics. `flush` is exclusively for external archival at
+ * quiescence; it is NOT called by the spawner. Missing terminal publication means incomplete observation.
+ */
+export function beginExecutionRetention(identity, directory = process.env[ENV_EXECUTION_ARCHIVE]) {
+    const archiveId = randomUUID();
+    const valid = Boolean(directory && isAbsolute(directory) && !directory.split(/[\\/]/).includes(".pi"));
+    const admitted = valid && active < MAX_ACTIVE;
+    const root = admitted ? join(directory, archiveId) : null;
+    const manifestPath = root ? join(root, "manifest.json") : null;
+    let status = !directory ? "disabled" : admitted ? "pending" : "lost";
+    const manifest = {
+        version: RETENTION_VERSION, archiveId, identity: {
+            executionId: identity.executionId, parentExecutionId: identity.parentExecutionId, childId: identity.childId,
+            toolCallId: identity.toolCallId, executor: identity.executor, taskDigest: identity.taskDigest,
+            definitionDigest: identity.definitionDigest, configurationDigest: identity.configurationDigest, workspaceId: identity.workspaceId,
+        },
+        native: { pid: null, paneId: null, agentName: null, tabId: null, sessionId: null, sessionPath: null, branchLeafId: null },
+        nativeSession: missingNativeSession(),
+        state: "running", outcome: null,
+        content: { stdout: missing(), stderr: missing(), paneSnapshot: missing(), checkReceipt: missing(), result: missing(), session: missing() },
+        coverage: { complete: false, losses: ["native-session-content-unavailable", "active-branch-unknown"] },
+        acceptance: "not-assessed",
+    };
+    const buffers = new Map();
+    const written = new Set();
+    let total = 0;
+    let dirty = false;
+    let running;
+    let finished = false;
+    let released = false;
+    let nativeTask;
+    let nextNative;
+    let pinnedSessionId;
+    let pinnedFile;
+    const loss = (reason) => { if (!manifest.coverage.losses.includes(reason))
+        manifest.coverage.losses.push(reason); };
+    const release = () => { if (admitted && !released) {
+        active--;
+        released = true;
+    } };
+    if (admitted)
+        active++;
+    else if (directory)
+        loss("archive-unavailable-or-capacity-exceeded");
+    const publish = async () => {
+        try {
+            await mkdir(root, { recursive: true, mode: 0o700 });
+            while (dirty) {
+                dirty = false;
+                // Detached checkpoint: asynchronous I/O cannot mix later outcome/content into this generation.
+                const checkpoint = JSON.parse(JSON.stringify(manifest));
+                const contents = [...buffers];
+                for (const [kind, bytes] of contents) {
+                    const sha256 = digest(bytes);
+                    const name = `${kind}-${sha256}.bin`;
+                    if (!written.has(name)) {
+                        await writeFile(join(root, name), bytes, { flag: "wx", mode: 0o600 });
+                        written.add(name);
+                    }
+                    checkpoint.content[kind] = { status: "retained", path: name, sha256, bytes: bytes.length };
+                }
+                await writeFile(join(root, "manifest.pending"), JSON.stringify(buildExecutionRetentionManifest(checkpoint)) + "\n", { mode: 0o600 });
+                await rename(join(root, "manifest.pending"), manifestPath);
+                status = "retained";
+            }
+        }
+        catch {
+            status = "lost";
+            loss("archive-write-failed");
+            buffers.clear();
+            release();
+        }
+        finally {
+            running = undefined;
+            if (finished && !nativeTask) {
+                buffers.clear();
+                release();
+            }
+        }
+    };
+    const schedule = () => {
+        if (!admitted || status === "lost" || released)
+            return;
+        dirty = true;
+        status = "pending";
+        if (!running)
+            running = Promise.resolve().then(publish);
+    };
+    const observeSession = (reference) => {
+        if (finished || !admitted || released || status === "lost")
+            return;
+        if (nextNative && (nextNative.source !== reference.source || nextNative.value !== reference.value))
+            loss("native-session-reference-coalesced");
+        nextNative = { source: reference.source, value: reference.value, ...(reference.manager ? { manager: reference.manager } : {}) };
+        if (nativeTask)
+            return;
+        nativeTask = Promise.resolve().then(async () => {
+            while (nextNative) {
+                const current = nextNative;
+                nextNative = undefined;
+                const captured = current.source === "herdr-id"
+                    ? { observation: { ...missingNativeSession(), source: current.source, status: "missing",
+                            sessionId: current.value, reason: "native-session-path-unavailable" } }
+                    : await readNativeSession({ path: current.value, source: current.source, manager: current.manager, expectedSessionId: pinnedSessionId, expectedFile: pinnedFile });
+                if (captured.observation.sessionId && captured.fileIdentity)
+                    pinnedFile ??= captured.fileIdentity;
+                let observation = captured.observation;
+                if (pinnedSessionId && observation.sessionId && pinnedSessionId !== observation.sessionId) {
+                    observation = { ...missingNativeSession(), source: current.source, status: "changed", reason: "native-session-id-changed" };
+                }
+                if (observation.sessionId)
+                    pinnedSessionId ??= observation.sessionId;
+                manifest.nativeSession = { ...observation };
+                manifest.native.sessionId = observation.sessionId;
+                manifest.native.sessionPath = observation.sessionPath;
+                manifest.native.branchLeafId = observation.branchLeafId;
+                buffers.delete("session");
+                if (captured.bytes && observation === captured.observation)
+                    buffers.set("session", captured.bytes);
+                if (observation.reason)
+                    loss(observation.reason);
+                schedule();
+            }
+        }).catch(() => { loss("native-session-observation-failed"); }).finally(() => { nativeTask = undefined; schedule(); });
+    };
+    const drain = async () => {
+        while (nativeTask || running) {
+            if (nativeTask)
+                await nativeTask;
+            if (running)
+                await running;
+        }
+        return { manifestPath, status };
+    };
+    schedule();
+    return {
+        /** Read-only native API reference; never derive IDs from the locator or a displayed name. */
+        observeSession,
+        observeSessionManager(manager) {
+            try {
+                const value = manager.getSessionFile();
+                if (value)
+                    observeSession({ source: "pi-session-manager", value, manager });
+                else {
+                    loss("native-session-not-persisted");
+                    schedule();
+                }
+            }
+            catch {
+                loss("native-session-manager-unavailable");
+                schedule();
+            }
+        },
+        status: () => { const value = { manifestPath, status }; drains.set(value, drain); return value; },
+        native(value) {
+            if (finished)
+                return;
+            for (const key of ["pid", "paneId", "agentName", "tabId"]) {
+                const item = value[key];
+                if (key === "pid") {
+                    if (typeof item === "number" && Number.isSafeInteger(item) && item > 0)
+                        manifest.native.pid = item;
+                }
+                else if (typeof item === "string" && item.length <= 4096)
+                    manifest.native[key] = item;
+            }
+            schedule();
+        },
+        capture(kind, bytes, replace = false) {
+            if (finished || !admitted || status === "lost")
+                return;
+            const indivisible = kind === "checkReceipt" || kind === "result";
+            if (indivisible)
+                replace = true;
+            const old = buffers.get(kind) ?? Buffer.alloc(0);
+            const available = indivisible ? LIMIT : LIMIT - total + (replace ? old.length : 0);
+            // Receipts and assembled results each have reserved capacity and are never partially published.
+            if (indivisible && bytes.length > available) {
+                loss(`${kind === "checkReceipt" ? "check-receipt" : kind}-not-retained-capacity`);
+                schedule();
+                return;
+            }
+            const kept = Buffer.from(bytes.subarray(0, Math.max(0, available)));
+            if (kept.length !== bytes.length)
+                loss(`${kind}-observation-dropped`);
+            if (kind === "paneSnapshot")
+                loss("pane-snapshot-not-full-transcript");
+            const next = replace ? kept : Buffer.concat([old, kept]);
+            if (!indivisible)
+                total += next.length - old.length;
+            buffers.set(kind, next);
+            schedule();
+        },
+        finish(outcome) {
+            if (finished)
+                return;
+            manifest.outcome = { code: outcome.code, signal: outcome.signal, timedOut: outcome.timedOut,
+                aborted: outcome.aborted, truncated: outcome.truncated, failed: outcome.failed };
+            manifest.state = "terminal";
+            if (outcome.truncated)
+                loss("executor-output-truncated");
+            if (outcome.aborted || outcome.timedOut)
+                loss("execution-interrupted");
+            finished = true;
+            schedule();
+        },
+        /** Observation-only diagnostic; never establishes successful execution or accepted work. */
+        coverage: () => ({ complete: false, losses: [...manifest.coverage.losses] }),
+        flush: drain,
+    };
+}
+/** Public consumer check: neither a reference nor a wire status supplies the missing bytes. */
+export function verifyRetainedBytes(reference, bytes) {
+    if (reference.status !== "retained" || bytes === undefined)
+        return "missing";
+    if (reference.bytes !== bytes.byteLength || reference.sha256 !== digest(bytes))
+        return "mismatch";
+    return "retained";
+}
+//# sourceMappingURL=execution-retention.js.map