pi-daddy 0.22.0 → 0.24.0

package/dist/producer-ipc.js

@@ -0,0 +1,143 @@
+import { Readable } from "node:stream";
+import { createHash } from "node:crypto";
+import { performance } from "node:perf_hooks";
+import { claimResourcePermit } from "./resource-budget.js";
+import { digestRuntime, digestNamespaceArgs } from "./effect-profile-runtime.js";
+import { runChild } from "./run-child.js";
+import { ipcShape, ipcReferences, producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, producerIpcFrame, PRODUCER_IPC_LIMITS as LIMITS } from "./producer-ipc-contract.js";
+export { producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, PRODUCER_IPC_LIMITS } from "./producer-ipc-contract.js";
+const hosts = new WeakMap();
+/** Trusted host-only capability constructor, NOT approval/entitlement discovery. */
+export function createProducerIpcHost(input) {
+    ipcShape(input, ["owner", "binding", "exchange"]);
+    if (typeof input.exchange !== "function")
+        throw new TypeError("original host exchange required");
+    const port = Object.freeze({ binding: producerIpcBinding(input.binding) });
+    hosts.set(port, { owner: input.owner, exchange: input.exchange, used: false });
+    return port;
+}
+// This is a separate fixed model-free emitter, not a new operation on linux-bwrap-digest-v1.
+const WORKER = "/* producer-ipc-v1 */process.stdout.write(Buffer.from(process.argv[1],'base64'));";
+function deferred() { let resolve; const promise = new Promise(r => { resolve = r; }); return { promise, resolve }; }
+export async function startProducerIpc(input) {
+    ipcShape(input, ["owner", "permit", "binding", "host", "signal", "timeoutMs"]);
+    const binding = producerIpcBinding(input.binding), host = hosts.get(input.host);
+    if (!host || host.used || host.owner !== input.owner || producerIpcBindingDigest(input.host.binding) !== producerIpcBindingDigest(binding))
+        throw Error("original unused host with exact owner/charter/invocation required");
+    if (!(input.signal instanceof AbortSignal) || !Number.isSafeInteger(input.timeoutMs) || input.timeoutMs < 50 || input.timeoutMs > LIMITS.maxElapsedMs)
+        throw new TypeError("bounded original cancellation/deadline required");
+    const permit = claimResourcePermit(input.owner, input.permit, binding.budgetDigest, producerIpcDemand(binding));
+    host.used = true;
+    const caller = input.signal, deadline = performance.now() + input.timeoutMs, abort = new AbortController(), signal = AbortSignal.any([caller, abort.signal]);
+    const started = deferred(), readiness = deferred(), result = deferred();
+    let outcome = "pending", reason = null, child = null;
+    let childState = "pending", hostState = "not-called", settlement = "pending";
+    let references = null, frameSha256 = null, frames, timer;
+    const inspect = () => Object.freeze({ binding, outcome, reason, child: child ? Object.freeze({ ...child }) : null, childState, hostState, frameSha256, references, settlement, acceptance: "not-assessed" });
+    const latch = (next, why) => {
+        if (outcome !== "pending")
+            return;
+        outcome = next;
+        reason = why;
+        clearTimeout(timer);
+        caller.removeEventListener("abort", cancel);
+        result.resolve(inspect());
+    };
+    const cancel = () => { latch("cancelled", "CANCELLED"); abort.abort(); frames?.destroy(); };
+    const expire = () => { latch("timed-out", "DEADLINE"); abort.abort(); frames?.destroy(); };
+    const current = () => { if (outcome !== "pending")
+        return false; if (caller.aborted)
+        cancel();
+    else if (performance.now() >= deadline)
+        expire(); return outcome === "pending"; };
+    timer = setTimeout(expire, input.timeoutMs);
+    caller.addEventListener("abort", cancel, { once: true });
+    if (caller.aborted)
+        cancel();
+    let stdout = Buffer.alloc(0), overflow = false, eof = false, spawned = false;
+    const childPromise = (async () => {
+        try {
+            await permit.admission;
+        }
+        catch {
+            latch("failed", "ADMISSION_FAILED");
+            return null;
+        }
+        if (!current())
+            return null;
+        try {
+            const runtime = await digestRuntime();
+            if (!current())
+                return null;
+            return Object.freeze(await runChild({ command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, WORKER, [producerIpcFrame(binding).toString("base64")]), env: {}, cwd: "/", signal,
+                timeoutMs: LIMITS.childMs, killGraceMs: LIMITS.graceMs, hardDeadlineAt: Date.now() + LIMITS.childMs + 500, maxOutputBytes: LIMITS.frameBytes,
+                onSpawn: () => { spawned = true; started.resolve("spawned"); }, onStreamEnd: s => { if (s === "stdout")
+                    eof = true; },
+                onObservation: (s, b) => { if (s !== "stdout" || overflow)
+                    return; if (stdout.length + b.length > LIMITS.frameBytes) {
+                    overflow = true;
+                    return;
+                } stdout = Buffer.concat([stdout, Buffer.from(b)]); } }));
+        }
+        catch {
+            latch("failed", "RUNTIME_FAILED");
+            return null;
+        }
+    })();
+    const completion = (async () => {
+        child = await childPromise;
+        childState = spawned ? (child ? "settled" : "unknown") : "not-spawned";
+        started.resolve("not-spawned");
+        if (childState === "unknown") {
+            readiness.resolve("not-ready");
+            settlement = "failed-or-unknown";
+            return inspect();
+        }
+        if (current()) {
+            if (!child || child.code !== 0 || child.aborted || child.timedOut || child.truncated || child.spawnError || child.signal)
+                latch("failed", "CHILD_FAILED");
+            else if (!eof || overflow || !stdout.equals(producerIpcFrame(binding)))
+                latch("failed", "FRAME_INVALID");
+            else {
+                frameSha256 = createHash("sha256").update(stdout).digest("hex");
+                readiness.resolve("frame-ready");
+                // Replay ONLY exact bytes from the original completed pipe; never reconstruct a host-authored frame.
+                frames = Readable.from([Buffer.from(stdout)]);
+                try {
+                    if (current()) {
+                        hostState = "pending";
+                        references = ipcReferences(await host.exchange(frames, Object.freeze({ binding, signal })));
+                        if (!frames.readableEnded)
+                            throw Error("original host frame not consumed");
+                        hostState = "acknowledged";
+                        if (current())
+                            latch("completed", null);
+                    }
+                }
+                catch {
+                    hostState = "failed";
+                    if (current())
+                        latch("failed", "HOST_FAILED");
+                }
+                finally {
+                    frames.destroy();
+                }
+            }
+        }
+        readiness.resolve("not-ready");
+        // Observation timeout never reaches here until the ORIGINAL child and invoked host have acknowledged.
+        const terminal = inspect().outcome;
+        try {
+            await permit.settle(terminal === "completed" ? "completed" : terminal === "cancelled" ? "cancelled" : "failed");
+            settlement = "acknowledged";
+        }
+        catch {
+            settlement = "failed-or-unknown";
+        }
+        clearTimeout(timer);
+        caller.removeEventListener("abort", cancel);
+        return inspect();
+    })();
+    return Object.freeze({ started: started.promise, readiness: readiness.promise, child: childPromise, result: result.promise, completion, inspect });
+}
+//# sourceMappingURL=producer-ipc.js.map

package/dist/producer-ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer-ipc.js","sourceRoot":"","sources":["../src/producer-ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAgD,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAuB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,IAAI,MAAM,EAAuD,MAAM,4BAA4B,CAAC;AAC5O,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,mBAAmB,EAAuD,MAAM,4BAA4B,CAAC;AAKvL,MAAM,KAAK,GAAG,IAAI,OAAO,EAA6B,CAAC;AACvD,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,KAA6E;IACjH,QAAQ,CAAC,KAAK,EAAC,CAAC,OAAO,EAAC,SAAS,EAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,IAAG,OAAO,KAAK,CAAC,QAAQ,KAAG,UAAU;QAAC,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;IACtE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AACrF,CAAC;AAuBD,6FAA6F;AAC7F,MAAM,MAAM,GAAG,mFAAmF,CAAC;AACnG,SAAS,QAAQ,KAAQ,IAAI,OAAwB,CAAC,CAAA,MAAM,OAAO,GAAC,IAAI,OAAO,CAAI,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,OAAO,EAAC,OAAO,EAAC,OAAO,EAAC,CAAC,CAAC,CAAC;AAC/H,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA6H;IAClK,QAAQ,CAAC,KAAK,EAAC,CAAC,OAAO,EAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,WAAW,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,GAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAG,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAG,KAAK,CAAC,KAAK,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAG,wBAAwB,CAAC,OAAO,CAAC;QAAC,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvN,IAAG,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAC,EAAE,IAAI,KAAK,CAAC,SAAS,GAAC,MAAM,CAAC,YAAY;QAAC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACxN,MAAM,MAAM,GAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,OAAO,CAAC,YAAY,EAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAAA,IAAI,CAAC,IAAI,GAAC,IAAI,CAAC;IAC1H,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAC,WAAW,CAAC,GAAG,EAAE,GAAC,KAAK,CAAC,SAAS,EAAE,KAAK,GAAC,IAAI,eAAe,EAAE,EAAE,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAClJ,MAAM,OAAO,GAAC,QAAQ,EAA2B,EAAE,SAAS,GAAC,QAAQ,EAA6B,EAAE,MAAM,GAAC,QAAQ,EAAuB,CAAC;IAC3I,IAAI,OAAO,GAAgC,SAAS,EAAE,MAAM,GAA+B,IAAI,EAAE,KAAK,GAAqB,IAAI,CAAC;IAChI,IAAI,UAAU,GAAmC,SAAS,EAAC,SAAS,GAAkC,YAAY,EAAC,UAAU,GAAmC,SAAS,CAAC;IAC1K,IAAI,UAAU,GAAsC,IAAI,EAAC,WAAW,GAAa,IAAI,EAAC,MAAyB,EAAC,KAA8B,CAAC;IAC/I,MAAM,OAAO,GAAC,GAAsB,EAAE,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,KAAK,CAAA,CAAC,CAAA,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,KAAK,EAAC,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,UAAU,EAAC,SAAS,EAAC,WAAW,EAAC,UAAU,EAAC,UAAU,EAAC,UAAU,EAAC,cAAc,EAAC,CAAC,CAAC;IAC1M,MAAM,KAAK,GAAC,CAAC,IAAsD,EAAC,GAAiC,EAAC,EAAE;QACtG,IAAG,OAAO,KAAG,SAAS;YAAC,OAAO;QAAA,OAAO,GAAC,IAAI,CAAC;QAAA,MAAM,GAAC,GAAG,CAAC;QAAA,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QAAA,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,KAAK,CAAC,WAAW,EAAC,WAAW,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;IACnF,MAAM,MAAM,GAAC,GAAE,EAAE,GAAC,KAAK,CAAC,WAAW,EAAC,UAAU,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;IAClF,MAAM,OAAO,GAAC,GAAE,EAAE,GAAC,IAAG,OAAO,KAAG,SAAS;QAAC,OAAO,KAAK,CAAC,CAAA,IAAG,MAAM,CAAC,OAAO;QAAC,MAAM,EAAE,CAAC;SAAK,IAAG,WAAW,CAAC,GAAG,EAAE,IAAE,QAAQ;QAAC,MAAM,EAAE,CAAC,CAAA,OAAO,OAAO,KAAG,SAAS,CAAC,CAAA,CAAC,CAAC;IAC5J,KAAK,GAAC,UAAU,CAAC,MAAM,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,MAAM,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,IAAG,MAAM,CAAC,OAAO;QAAC,MAAM,EAAE,CAAC;IACxH,IAAI,MAAM,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,QAAQ,GAAC,KAAK,EAAC,GAAG,GAAC,KAAK,EAAC,OAAO,GAAC,KAAK,CAAC;IAClE,MAAM,YAAY,GAAC,CAAC,KAAK,IAAE,EAAE;QAC3B,IAAI,CAAC;YAAA,MAAM,MAAM,CAAC,SAAS,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,KAAK,CAAC,QAAQ,EAAC,kBAAkB,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;QACrF,IAAG,CAAC,OAAO,EAAE;YAAC,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAC,MAAM,aAAa,EAAE,CAAC;YACpC,IAAG,CAAC,OAAO,EAAE;gBAAC,OAAO,IAAI,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAC,OAAO,EAAC,gBAAgB,EAAC,IAAI,EAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,EAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,GAAG,EAAC,MAAM;gBACzK,SAAS,EAAC,MAAM,CAAC,OAAO,EAAC,WAAW,EAAC,MAAM,CAAC,OAAO,EAAC,cAAc,EAAC,IAAI,CAAC,GAAG,EAAE,GAAC,MAAM,CAAC,OAAO,GAAC,GAAG,EAAC,cAAc,EAAC,MAAM,CAAC,UAAU;gBACjI,OAAO,EAAC,GAAE,EAAE,GAAC,OAAO,GAAC,IAAI,CAAC,CAAA,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,EAAC,WAAW,EAAC,CAAC,CAAA,EAAE,GAAC,IAAG,CAAC,KAAG,QAAQ;oBAAC,GAAG,GAAC,IAAI,CAAC,CAAA,CAAC;gBACjG,aAAa,EAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,GAAC,IAAG,CAAC,KAAG,QAAQ,IAAE,QAAQ;oBAAC,OAAO,CAAA,IAAG,MAAM,CAAC,MAAM,GAAC,CAAC,CAAC,MAAM,GAAC,MAAM,CAAC,UAAU,EAAC,CAAC;oBAAA,QAAQ,GAAC,IAAI,CAAC;oBAAA,OAAO;gBAAA,CAAC,CAAA,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,CAAC;QACjL,CAAC;QAAC,MAAM,CAAC;YAAA,KAAK,CAAC,QAAQ,EAAC,gBAAgB,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC;QAAA,CAAC;IACzD,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,UAAU,GAAC,CAAC,KAAK,IAAE,EAAE;QACzB,KAAK,GAAC,MAAM,YAAY,CAAC;QAAA,UAAU,GAAC,OAAO,CAAA,CAAC,CAAA,CAAC,KAAK,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC,CAAA,aAAa,CAAC;QAAA,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACrH,IAAG,UAAU,KAAG,SAAS,EAAC,CAAC;YAAA,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAA,UAAU,GAAC,mBAAmB,CAAC;YAAA,OAAO,OAAO,EAAE,CAAC;QAAA,CAAC;QAC3G,IAAG,OAAO,EAAE,EAAE,CAAC;YACb,IAAG,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAG,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM;gBAAC,KAAK,CAAC,QAAQ,EAAC,cAAc,CAAC,CAAC;iBAChJ,IAAG,CAAC,GAAG,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAAC,KAAK,CAAC,QAAQ,EAAC,eAAe,CAAC,CAAC;iBACjG,CAAC;gBACJ,WAAW,GAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC/F,qGAAqG;gBACrG,MAAM,GAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC5C,IAAI,CAAC;oBACH,IAAG,OAAO,EAAE,EAAE,CAAC;wBACb,SAAS,GAAC,SAAS,CAAC;wBAAA,UAAU,GAAC,aAAa,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,CAAC;wBAC1G,IAAG,CAAC,MAAM,CAAC,aAAa;4BAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;wBACzE,SAAS,GAAC,cAAc,CAAC;wBAAA,IAAG,OAAO,EAAE;4BAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,CAAC;oBAChE,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC;oBAAA,SAAS,GAAC,QAAQ,CAAC;oBAAA,IAAG,OAAO,EAAE;wBAAC,KAAK,CAAC,QAAQ,EAAC,aAAa,CAAC,CAAC;gBAAA,CAAC;wBAC9D,CAAC;oBAAA,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAA,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,sGAAsG;QACtG,MAAM,QAAQ,GAAC,OAAO,EAAE,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC;YAAA,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAG,WAAW,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,KAAG,WAAW,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,QAAQ,CAAC,CAAC;YAAA,UAAU,GAAC,cAAc,CAAC;QAAA,CAAC;QACpI,MAAM,CAAC;YAAA,UAAU,GAAC,mBAAmB,CAAC;QAAA,CAAC;QACvC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,MAAM,CAAC,CAAC;QAAA,OAAO,OAAO,EAAE,CAAC;IAClF,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,SAAS,EAAC,SAAS,CAAC,OAAO,EAAC,KAAK,EAAC,YAAY,EAAC,MAAM,EAAC,MAAM,CAAC,OAAO,EAAC,UAAU,EAAC,OAAO,EAAC,CAAC,CAAC;AAC1I,CAAC"}

package/dist/resource-budget.d.ts

@@ -0,0 +1,334 @@
+import { readIntentWork } from "./intent-application.ts";
+import { type WorkIntentBinding, type IntentRequest, type IntentAdmission } from "./intent-control.ts";
+import { type DispatchAuthority, type DispatchRequest } from "./dispatch-control.ts";
+export interface ResourceLimits {
+    maxAttempts: number;
+    maxInputBytes: number;
+    maxConcurrent: number;
+}
+export interface BudgetBinding<V extends "1.0" | "2.0" | "3.0" | "4.0" = "1.0"> {
+    version: V;
+    directory: string;
+    device: string;
+    inode: string;
+    journalDevice: string;
+    journalInode: string;
+    authorityDigest: string;
+    limits: ResourceLimits;
+    intent?: V extends "3.0" ? WorkIntentBinding : never;
+}
+export type DispatchBudgetBinding = BudgetBinding<"2.0">;
+export type ExperimentBudgetBinding = BudgetBinding<"4.0">;
+export type GovernedBudgetBinding = BudgetBinding<"1.0" | "2.0" | "3.0" | "4.0">;
+export type IntentBudgetBinding = BudgetBinding<"3.0"> & {
+    intent: WorkIntentBinding;
+};
+export interface AttemptDemand {
+    attemptId: string;
+    orderId: string;
+    experimentId: string;
+    kind: "primary" | "retry" | "shadow" | "descendant";
+    parentAttemptId: string | null;
+    inputBytes: number;
+    inputDigest: string;
+}
+interface Reservation extends AttemptDemand {
+    intent?: IntentAdmission;
+    owner: string;
+    state: "reserved" | "settled";
+    outcome: string | null;
+}
+export interface BudgetSnapshot {
+    attempts: number;
+    inputBytes: number;
+    active: number;
+    reservations: readonly Readonly<Reservation>[];
+}
+export interface ResourcePermit {
+    readonly attemptId: string;
+    settle(outcome: "completed" | "failed" | "cancelled"): Promise<void>;
+}
+/** Exclusive original-permit handoff for the separate opt-in IPC route. No mint/recovery API. */
+export declare function claimResourcePermit(owner: object, permit: ResourcePermit, bindingDigest: string, expected: AttemptDemand): Readonly<{
+    admission: Promise<void>;
+    settle: (outcome: "completed" | "failed" | "cancelled") => Promise<void>;
+}>;
+export declare class ResourceAdmissionError extends Error {
+    readonly code: "INVALID" | "AUTHORITY_CHANGED" | "DUPLICATE" | "EXHAUSTED" | "OWNERSHIP_LOST" | "DISPATCH_BLOCKED";
+    constructor(code: ResourceAdmissionError["code"], message: string);
+}
+/** Explicit one-time creation, never implicit reset/recovery. Keep this binding outside the mutable journal. */
+type BudgetCreation = {
+    directory: string;
+    authorityDigest: string;
+    limits: ResourceLimits;
+};
+export declare function createResourceBudget(input: BudgetCreation): Promise<Readonly<BudgetBinding>>;
+/** Explicit opt-in v2 journal; old readers refuse rather than ignore control events. */
+export declare function createDispatchBudget(input: BudgetCreation): Promise<Readonly<DispatchBudgetBinding>>;
+export declare function createIntentBudget(input: BudgetCreation, intent: Parameters<typeof readIntentWork>[0]): Promise<Readonly<IntentBudgetBinding>>;
+/** Explicit batch semantics. All queued slots remain conservatively active until original settlement. */
+export declare function createExperimentBudget(input: BudgetCreation): Promise<Readonly<ExperimentBudgetBinding>>;
+/** Host-side arithmetic for this exact independently retained binding. Not a money/CPU/memory cap. */
+export declare function openResourceBudget<T extends GovernedBudgetBinding>(input: T): Readonly<{
+    binding: Readonly<T>;
+    reserveBatch(inputs: readonly AttemptDemand[]): Promise<readonly Readonly<ResourcePermit>[]>;
+    intentControls(input: DispatchAuthority | null): Readonly<{
+        inspect: () => Promise<{
+            readonly dispatchPaused: boolean;
+            readonly nextObligation: {
+                readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                readonly id: string;
+                readonly revision: number;
+                readonly digest: string;
+            } | null;
+            readonly revision: number;
+            readonly selection: {
+                readonly snapshot: {
+                    readonly id: string;
+                    readonly digest: string;
+                };
+                readonly event: {
+                    readonly eventId: string;
+                    readonly digest: string;
+                };
+            };
+            readonly priorities: readonly {
+                readonly obligation: {
+                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                    readonly id: string;
+                    readonly revision: number;
+                    readonly digest: string;
+                };
+                readonly rank: number;
+            }[];
+            readonly records: readonly {
+                readonly requestId: string;
+                readonly digest: string;
+                readonly expectedRevision: number;
+                readonly expectedSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly action: IntentRequest["action"];
+                readonly selection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly priorities: readonly {
+                    readonly obligation: {
+                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                        readonly id: string;
+                        readonly revision: number;
+                        readonly digest: string;
+                    };
+                    readonly rank: number;
+                }[];
+                readonly events: readonly {
+                    readonly eventId: string;
+                    readonly digest: string;
+                }[];
+                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
+                readonly application: "pending-or-unknown" | "applied" | "not-applied";
+                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
+                readonly resultSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                } | null;
+            }[];
+            readonly version: "intent-controller-snapshot-v1";
+            readonly bindingDigest: string;
+            readonly admission: "blocked-pending" | "intent-ready";
+            readonly acceptance: "not-assessed";
+            readonly freshness: "snapshot-unknown";
+        }>;
+        request(input: IntentRequest): Promise<{
+            readonly revision: number;
+            readonly selection: {
+                readonly snapshot: {
+                    readonly id: string;
+                    readonly digest: string;
+                };
+                readonly event: {
+                    readonly eventId: string;
+                    readonly digest: string;
+                };
+            };
+            readonly priorities: readonly {
+                readonly obligation: {
+                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                    readonly id: string;
+                    readonly revision: number;
+                    readonly digest: string;
+                };
+                readonly rank: number;
+            }[];
+            readonly records: readonly {
+                readonly requestId: string;
+                readonly digest: string;
+                readonly expectedRevision: number;
+                readonly expectedSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly action: IntentRequest["action"];
+                readonly selection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly priorities: readonly {
+                    readonly obligation: {
+                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                        readonly id: string;
+                        readonly revision: number;
+                        readonly digest: string;
+                    };
+                    readonly rank: number;
+                }[];
+                readonly events: readonly {
+                    readonly eventId: string;
+                    readonly digest: string;
+                }[];
+                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
+                readonly application: "pending-or-unknown" | "applied" | "not-applied";
+                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
+                readonly resultSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                } | null;
+            }[];
+            readonly version: "intent-controller-snapshot-v1";
+            readonly bindingDigest: string;
+            readonly admission: "blocked-pending" | "intent-ready";
+            readonly acceptance: "not-assessed";
+            readonly freshness: "snapshot-unknown";
+        }>;
+        reconcile(input: IntentRequest): Promise<{
+            readonly revision: number;
+            readonly selection: {
+                readonly snapshot: {
+                    readonly id: string;
+                    readonly digest: string;
+                };
+                readonly event: {
+                    readonly eventId: string;
+                    readonly digest: string;
+                };
+            };
+            readonly priorities: readonly {
+                readonly obligation: {
+                    readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                    readonly id: string;
+                    readonly revision: number;
+                    readonly digest: string;
+                };
+                readonly rank: number;
+            }[];
+            readonly records: readonly {
+                readonly requestId: string;
+                readonly digest: string;
+                readonly expectedRevision: number;
+                readonly expectedSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly action: IntentRequest["action"];
+                readonly selection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                };
+                readonly priorities: readonly {
+                    readonly obligation: {
+                        readonly kind: import("./work-ledger-types.ts").RevisionKind;
+                        readonly id: string;
+                        readonly revision: number;
+                        readonly digest: string;
+                    };
+                    readonly rank: number;
+                }[];
+                readonly events: readonly {
+                    readonly eventId: string;
+                    readonly digest: string;
+                }[];
+                readonly decision: "approved" | "authority-unavailable" | "stale" | "busy";
+                readonly application: "pending-or-unknown" | "applied" | "not-applied";
+                readonly outcome: "pending-or-unknown" | "selection-applied" | "priority-applied" | "refused";
+                readonly resultSelection: {
+                    readonly snapshot: {
+                        readonly id: string;
+                        readonly digest: string;
+                    };
+                    readonly event: {
+                        readonly eventId: string;
+                        readonly digest: string;
+                    };
+                } | null;
+            }[];
+            readonly version: "intent-controller-snapshot-v1";
+            readonly bindingDigest: string;
+            readonly admission: "blocked-pending" | "intent-ready";
+            readonly acceptance: "not-assessed";
+            readonly freshness: "snapshot-unknown";
+        }>;
+    }>;
+    controls(input: DispatchAuthority | null): Readonly<{
+        inspect: () => Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
+        reconcile(requestId: string): Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
+        request(input: DispatchRequest): Promise<Readonly<import("./dispatch-control.ts").DispatchSnapshot>>;
+    }>;
+    /** Explicit control-path synchronization; unlike inspect, this takes the existing journal lock. */
+    controlSnapshot(): Promise<Readonly<BudgetSnapshot>>;
+    inspect(): Promise<Readonly<BudgetSnapshot>>;
+    reserve(input: AttemptDemand, selection?: IntentAdmission): Promise<Readonly<ResourcePermit>>;
+}>;
+export declare function resourceBindingDigest(b: GovernedBudgetBinding): string;
+export {};
+//# sourceMappingURL=resource-budget.d.ts.map

package/dist/resource-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-budget.d.ts","sourceRoot":"","sources":["../src/resource-budget.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,cAAc,EAAoE,MAAM,yBAAyB,CAAC;AAC9I,OAAO,EACL,KAAK,iBAAiB,EAAoB,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAElH,OAAO,EACL,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAsB,MAAM,uBAAuB,CAAC;AAElG,MAAM,WAAW,cAAc;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AACrG,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK;IAC5E,OAAO,EAAE,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAC7D,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,SAAS,KAAK,GAAG,iBAAiB,GAAG,KAAK,CAAC;CACpJ;AACD,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AACzD,MAAM,MAAM,uBAAuB,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AAC3D,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;AACjF,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG;IAAE,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AACvF,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACzD,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,CAAC;IACpD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;CACzE;AACD,UAAU,WAAY,SAAQ,aAAa;IAAG,MAAM,CAAC,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAC9I,MAAM,WAAW,cAAc;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;CAAE;AACxI,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAGpI,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,KAAK,EAAC,MAAM,EAAE,MAAM,EAAC,cAAc,EAAE,aAAa,EAAC,MAAM,EAAE,QAAQ,EAAC,aAAa;;sBAJvC,WAAW,GAAG,QAAQ,GAAG,WAAW,KAAG,OAAO,CAAC,IAAI,CAAC;GAUjI;AACD,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,mBAAmB,GAAG,WAAW,GAAG,WAAW,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;gBACvG,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAGlE;AAoCD,gHAAgH;AAChH,KAAK,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC;AAC7F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAuC;AACpI,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAuC;AAC5I,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAEpJ;AACD,yGAAyG;AACzG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAuC;AA2BhJ,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,qBAAqB,EAAE,KAAK,EAAE,CAAC;;yBAuG7C,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,SAAS,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;0BAgB5E,iBAAiB,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAmBrB,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAmBX,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAOxB,iBAAiB,GAAG,IAAI;;6BAYT,MAAM;uBAIZ,eAAe;;IAmBxC,mGAAmG;uBAC1E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;eAGzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;mBAI7B,aAAa,cAAc,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;GAoBtG;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAA6C"}