pi-daddy 0.28.0 → 0.32.0

package/dist/effect-profile-runtime.js

@@ -1,51 +0,0 @@
-import { createHash } from "node:crypto";
-import { lstat, readFile, realpath } from "node:fs/promises";
-export const DIGEST_PROFILE = "linux-bwrap-digest-v1";
-export const DIGEST_WORKER = `const b=Buffer.from(process.argv[1],'base64');if(b.length>16384)process.exit(90);process.stdout.write(JSON.stringify({bytes:b.length,sha256:require('node:crypto').createHash('sha256').update(b).digest('hex')})+'\\n');`;
-function executableDetails(path, st) {
-    return { path, regular: st.isFile(), mode: (st.mode & 0o7777).toString(8), size: st.size,
-        predicates: { notRegular: !st.isFile(), writable: (st.mode & 0o022) !== 0, oversize: st.size > 256 * 1024 * 1024 } };
-}
-/** Read-only independent observations; no installation, admission or namespace qualification. */
-export async function inspectDigestPrerequisites() {
-    const observations = [];
-    for (const requested of [process.execPath, "/usr/bin/bwrap", "/usr/bin/prlimit"]) {
-        try {
-            const path = requested === process.execPath ? await realpath(requested) : requested;
-            const details = executableDetails(path, await lstat(path));
-            observations.push({ requested, ...details, conforms: !Object.values(details.predicates).some(Boolean) });
-        }
-        catch (error) {
-            observations.push({ requested, conforms: false, error: { code: error.code ?? null, message: String(error) } });
-        }
-    }
-    return { version: "digest-prerequisites-v1", platform: process.platform, nodeVersion: process.version, execPath: process.execPath,
-        conforms: process.platform === "linux" && observations.every(o => o.conforms), observations, qualification: "not-assessed" };
-}
-export async function digestRuntime() {
-    if (process.platform !== "linux")
-        throw new Error("Linux user/mount/PID/network namespaces required");
-    const node = await realpath(process.execPath), fingerprints = {};
-    for (const path of [node, "/usr/bin/bwrap", "/usr/bin/prlimit"]) {
-        const st = await lstat(path);
-        if (!st.isFile() || (st.mode & 0o022) !== 0 || st.size > 256 * 1024 * 1024) {
-            const details = executableDetails(path, st), code = details.predicates.notRegular ? "RUNTIME_NOT_REGULAR" : details.predicates.writable ? "RUNTIME_WRITABLE" : "RUNTIME_TOO_LARGE";
-            throw Object.assign(new Error("unsupported mutable runtime executable"), { code, path, details });
-        }
-        fingerprints[path] = createHash("sha256").update(await readFile(path)).digest("hex");
-    }
-    return Object.freeze({ node, fingerprints: Object.freeze(fingerprints) });
-}
-/** Internal fixed boundary builder. No user command/environment/workspace/destination interface. */
-export function digestNamespaceArgs(runtime, code, args, fixture) {
-    return ["--unshare-all", "--die-with-parent", "--new-session", "--cap-drop", "ALL",
-        "--ro-bind", "/usr", "/usr", "--ro-bind", "/lib", "/lib", "--ro-bind", "/lib64", "/lib64",
-        "--dir", "/runtime", "--ro-bind", runtime.node, "/runtime/node",
-        ...(fixture ? ["--ro-bind", fixture, "/input"] : []),
-        "--proc", "/proc", "--dev", "/dev", "--clearenv", "--chdir", "/", "--",
-        "/usr/bin/prlimit", "--cpu=2:2", "--nofile=64:64", "--", "/runtime/node",
-        // No arbitrary code enters the production worker. Permission flags are additional tripwires,
-        // not a claim that Node's permission model is a hostile-JavaScript sandbox.
-        ...(fixture ? [] : ["--permission"]), "--max-old-space-size=32", "-e", code, ...args];
-}
-//# sourceMappingURL=effect-profile-runtime.js.map

package/dist/effect-profile-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"effect-profile-runtime.js","sourceRoot":"","sources":["../src/effect-profile-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAgC,CAAC;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,2NAA2N,CAAC;AAEzP,SAAS,iBAAiB,CAAC,IAAY,EAAE,EAAqD;IAC5F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI;QACtF,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;AACzH,CAAC;AACD,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,YAAY,GAAG,EAAE,CAAC;IACxB,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YAAC,MAAM,IAAI,GAAG,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvK,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAG,KAA+B,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;IAChK,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC/H,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AACjI,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,GAA2B,EAAE,CAAC;IACzF,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC;YACnL,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAc,EAAE,OAAgB;IACxG,OAAO,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK;QAChF,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ;QACzF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe;QAC/D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI;QACtE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe;QACxE,6FAA6F;QAC7F,4EAA4E;QAC5E,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AAC1F,CAAC"}

package/dist/effect-profile.d.ts

@@ -1,40 +0,0 @@
-import { type ChildRunResult } from "./run-child.ts";
-import { type AttemptDemand, type GovernedBudgetBinding } from "./resource-budget.ts";
-import { type IntentAdmission } from "./intent-control.ts";
-import { DIGEST_PROFILE } from "./effect-profile-runtime.ts";
-export { DIGEST_PROFILE } from "./effect-profile-runtime.ts";
-export interface DigestProfile {
-    readonly profile: typeof DIGEST_PROFILE;
-    readonly bindingDigest: string;
-    readonly runtimeDigest: string;
-}
-export declare class EffectProfileUnavailableError extends Error {
-    constructor(message: string);
-}
-export declare const isDigestProfile: (value: unknown) => value is DigestProfile;
-/** Actual bounded native probes, not an executable-presence flag. Trusted fixture code only. */
-export declare function prepareDigestProfile(binding: GovernedBudgetBinding): Promise<Readonly<DigestProfile>>;
-export interface DigestAttempt {
-    attempt: Omit<AttemptDemand, "inputBytes" | "inputDigest">;
-    bytes: Uint8Array;
-    intent?: IntentAdmission;
-}
-/** A fixed, useful non-shell operation: hash at most 16 KiB. No writable destinations or provider calls.
- * The opaque profile is bound to one budget. A claimed profile name/receipt cannot authorize a launch. */
-export declare function runDigestProfile(profile: DigestProfile, request: DigestAttempt, signal?: AbortSignal): Promise<Readonly<{
-    attemptId: string;
-    output: ChildRunResult;
-    digest: string | null;
-}>>;
-export type FixedDigestOperation = "digest" | "hold";
-export interface ReservedDigestRun {
-    readonly started: Promise<"spawned" | "settled-without-spawn">;
-    run(signal?: AbortSignal): ReturnType<typeof runDigestProfile>;
-}
-/** Atomic all-attempt admission; only minted closures hold the original permits. No caller-supplied permit. */
-export declare function reserveDigestProfileBatch(profile: DigestProfile, requests: readonly {
-    attempt: DigestAttempt["attempt"];
-    bytes: Uint8Array;
-    operation: FixedDigestOperation;
-}[]): Promise<readonly ReservedDigestRun[]>;
-//# sourceMappingURL=effect-profile.d.ts.map

package/dist/effect-profile.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"effect-profile.d.ts","sourceRoot":"","sources":["../src/effect-profile.ts"],"names":[],"mappings":"AAGA,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAG/D,OAAO,EAA6C,KAAK,aAAa,EAAuB,KAAK,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAyE,MAAM,6BAA6B,CAAC;AACpI,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,cAAc,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAC1I,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAC5B;AAED,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,aAAoG,CAAC;AAU/J,gGAAgG;AAChG,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAqB3G;AAED,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,aAAa,CAAC,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,eAAe,CAAA;CAAE;AAC1I;0GAC0G;AAC1G,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7H,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAClE,CAAC,CAAC,CAiBF;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,MAAM,CAAC;AACrD,MAAM,WAAW,iBAAiB;IAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,GAAG,uBAAuB,CAAC,CAAC;IAAC,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAA;CAAE;AACrK,+GAA+G;AAC/G,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS;IAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,oBAAoB,CAAA;CAAE,EAAE,GAAG,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAoB7N"}

package/dist/effect-profile.js

@@ -1,152 +0,0 @@
-import { createHash } from "node:crypto";
-import { mkdtemp, mkdir, readlink, rm, writeFile } from "node:fs/promises";
-import { join } from "node:path";
-import { runChild } from "./run-child.js";
-import { runWithFinalizers } from "./finalization.js";
-import { beginExecutionRetention, retentionConfigurationDigest } from "./execution-retention.js";
-import { openResourceBudget, resourceBindingDigest } from "./resource-budget.js";
-import { intentKey } from "./intent-control.js";
-import { DIGEST_PROFILE, DIGEST_WORKER, digestNamespaceArgs, digestRuntime } from "./effect-profile-runtime.js";
-export { DIGEST_PROFILE } from "./effect-profile-runtime.js";
-export class EffectProfileUnavailableError extends Error {
-    constructor(message) { super(message); this.name = "EffectProfileUnavailableError"; }
-}
-const profiles = new WeakMap();
-export const isDigestProfile = (value) => typeof value === "object" && value !== null && profiles.has(value);
-const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
-function requireClean(result) {
-    if (result.code !== 0 || result.spawnError || result.aborted || result.timedOut || result.truncated)
-        throw new EffectProfileUnavailableError(`fixed native profile failed: ${result.spawnError ?? result.text ?? result.code}`);
-}
-const child = (runtime, code, args, fixture, signal) => runChild({
-    command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, code, args, fixture), cwd: "/", env: {},
-    timeoutMs: 3000, killGraceMs: 50, hardDeadlineAt: Date.now() + 3500, maxOutputBytes: 4096, signal,
-});
-/** Actual bounded native probes, not an executable-presence flag. Trusted fixture code only. */
-export async function prepareDigestProfile(binding) {
-    const budget = openResourceBudget(binding);
-    await budget.inspect(); // Required admission state failures remain failures, not an unavailable fallback.
-    const runtime = await digestRuntime();
-    const root = await mkdtemp(join(budget.binding.directory, "profile-probe-")), input = join(root, "input");
-    return runWithFinalizers(async () => {
-        await mkdir(input, { mode: 0o700 });
-        await writeFile(join(input, "allowed"), "owned-readable", { mode: 0o600 });
-        await writeFile(join(root, "outside"), "owned-outside", { mode: 0o600 });
-        const net = await readlink("/proc/self/ns/net");
-        const code = `const fs=require('node:fs');let failures=0;for(const fn of [()=>fs.readFileSync(${JSON.stringify(join(root, "outside"))}),()=>fs.writeFileSync('/input/denied','bad')]){try{fn()}catch(e){if(['ENOENT','EROFS'].includes(e.code))failures++}}if(failures!==2||fs.readFileSync('/input/allowed','utf8')!=='owned-readable'||fs.readlinkSync('/proc/self/ns/net')===${JSON.stringify(net)})process.exit(91);console.log('boundary-ok');`;
-        const boundary = await child(runtime, code, [], input);
-        requireClean(boundary);
-        if (boundary.text.trim() !== "boundary-ok")
-            throw new EffectProfileUnavailableError("native boundary probe did not establish its expected observations");
-        const permission = await child(runtime, `try{require('node:child_process').spawnSync('/runtime/node',['-e','process.exit(92)']);process.exit(93)}catch(e){if(e.code!=='ERR_ACCESS_DENIED')process.exit(94);console.log('descendant-denied')}`, []);
-        requireClean(permission);
-        if (permission.text.trim() !== "descendant-denied")
-            throw new EffectProfileUnavailableError("descendant tripwire unavailable");
-        const sample = await child(runtime, DIGEST_WORKER, [Buffer.from("fixture").toString("base64")]);
-        requireClean(sample);
-        if (sample.text !== JSON.stringify({ bytes: 7, sha256: hash("fixture") }) + "\n")
-            throw new EffectProfileUnavailableError("fixed worker probe mismatch");
-        const result = Object.freeze({ profile: DIGEST_PROFILE, bindingDigest: resourceBindingDigest(budget.binding), runtimeDigest: retentionConfigurationDigest(runtime) });
-        profiles.set(result, { runtime, budget });
-        return result;
-    }, [{ label: "profile probe cleanup failed", run: () => rm(root, { recursive: true, force: true }) }]);
-}
-/** A fixed, useful non-shell operation: hash at most 16 KiB. No writable destinations or provider calls.
- * The opaque profile is bound to one budget. A claimed profile name/receipt cannot authorize a launch. */
-export async function runDigestProfile(profile, request, signal) {
-    const prepared = profiles.get(profile);
-    if (!prepared || profile.profile !== DIGEST_PROFILE)
-        throw new EffectProfileUnavailableError("unsupported or unprobed effect profile; no launch");
-    const requestKeys = ["attempt", "bytes", ...(request && Object.hasOwn(request, "intent") ? ["intent"] : [])];
-    if (!request || typeof request !== "object" || Reflect.ownKeys(request).length !== requestKeys.length ||
-        !requestKeys.every(k => { const d = Object.getOwnPropertyDescriptor(request, k); return d && d.enumerable && Object.hasOwn(d, "value"); }) ||
-        !(request.bytes instanceof Uint8Array) || request.bytes.byteLength > 16384)
-        throw new TypeError("bounded byte-only request required; no destination, code, money or workspace override");
-    const bytes = Buffer.from(request.bytes), inputDigest = hash(bytes);
-    const selectedIntent = Object.hasOwn(request, "intent") ? JSON.parse(intentKey(request.intent)) : undefined;
-    const descriptors = Object.getOwnPropertyDescriptors(request.attempt);
-    const keys = ["attemptId", "orderId", "experimentId", "kind", "parentAttemptId"];
-    if (Reflect.ownKeys(request.attempt).length !== keys.length || keys.some(k => !descriptors[k]?.enumerable || !Object.hasOwn(descriptors[k], "value")))
-        throw new TypeError("closed attempt identity required");
-    const attempt = Object.fromEntries(keys.map(k => [k, descriptors[k].value]));
-    if (signal?.aborted)
-        throw new EffectProfileUnavailableError("cancelled before reservation/launch");
-    if (retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
-        throw new EffectProfileUnavailableError("runtime changed since the native profile probe");
-    const permit = await prepared.budget.reserve({ ...attempt, inputBytes: bytes.length, inputDigest }, selectedIntent);
-    return executeReserved(profile, prepared.runtime, attempt, bytes, permit, "digest", signal);
-}
-/** Atomic all-attempt admission; only minted closures hold the original permits. No caller-supplied permit. */
-export async function reserveDigestProfileBatch(profile, requests) {
-    const prepared = profiles.get(profile);
-    if (!prepared || !Array.isArray(requests) || !requests.length || requests.length > 32 || Reflect.ownKeys(requests).length !== requests.length + 1 || Array.from({ length: requests.length }, (_, i) => Object.getOwnPropertyDescriptor(requests, String(i))).some(d => !d?.enumerable || !Object.hasOwn(d, "value")))
-        throw new EffectProfileUnavailableError("probed profile and bounded batch required");
-    const detached = requests.map(r => {
-        const descriptors = r && Object.getOwnPropertyDescriptors(r);
-        if (!descriptors || Reflect.ownKeys(r).length !== 3 || ["attempt", "bytes", "operation"].some(k => !descriptors[k]?.enumerable || !Object.hasOwn(descriptors[k], "value")))
-            throw new TypeError("closed data variant required");
-        if (!r || !["digest", "hold"].includes(r.operation) || !(r.bytes instanceof Uint8Array) || r.bytes.length > 16384 || Object.keys(r).sort().join() !== "attempt,bytes,operation")
-            throw new TypeError("fixed byte-only variant required");
-        return { attempt: JSON.parse(intentKey(r.attempt)), bytes: Buffer.from(r.bytes), operation: r.operation };
-    });
-    if (retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
-        throw new EffectProfileUnavailableError("runtime changed before batch");
-    const permits = await prepared.budget.reserveBatch(detached.map(r => ({ ...r.attempt, inputBytes: r.bytes.length, inputDigest: hash(r.bytes) })));
-    return Object.freeze(detached.map((r, i) => {
-        let used = false, resolveStarted;
-        const started = { promise: new Promise(resolve => { resolveStarted = resolve; }), resolve: (value) => resolveStarted(value) };
-        return Object.freeze({ started: started.promise, async run(signal) {
-                if (used)
-                    throw new Error("reserved execution already consumed; no replay");
-                used = true;
-                try {
-                    return await executeReserved(profile, prepared.runtime, r.attempt, r.bytes, permits[i], r.operation, signal, () => started.resolve("spawned"));
-                }
-                finally {
-                    started.resolve("settled-without-spawn");
-                } // Settled-without-spawn also unblocks waiters; never a spawn/identity claim.
-            } });
-    }));
-}
-async function executeReserved(profile, runtime, attempt, bytes, permit, operation, signal, started) {
-    const inputDigest = hash(bytes), code = operation === "digest" ? DIGEST_WORKER : "setInterval(()=>{},1000);";
-    // From this point every outcome costs the full reservation. No posthoc result refunds resources.
-    const retention = beginExecutionRetention({ executionId: attempt.attemptId, parentExecutionId: attempt.parentAttemptId,
-        childId: "digest", toolCallId: null, executor: "process", taskDigest: inputDigest, definitionDigest: hash(code),
-        configurationDigest: retentionConfigurationDigest({ profile: profile.profile, binding: profile.bindingDigest, runtime: profile.runtimeDigest }), workspaceId: null });
-    let output;
-    let outcome = "failed";
-    let accountingFailed = false, spawned = false, exitObserved = false;
-    return runWithFinalizers(async () => {
-        if (!signal?.aborted && retentionConfigurationDigest(await digestRuntime()) !== profile.runtimeDigest)
-            throw new EffectProfileUnavailableError("runtime changed after admission");
-        output = await runChild({ command: "/usr/bin/bwrap", args: digestNamespaceArgs(runtime, code, [bytes.toString("base64")]),
-            cwd: "/", env: {}, signal, timeoutMs: 3000, killGraceMs: 50, hardDeadlineAt: Date.now() + 3500, maxOutputBytes: 4096,
-            onSpawn: pid => { spawned = true; retention.native({ pid }); started?.(); }, onObservation: (stream, data) => retention.capture(stream, data) });
-        exitObserved = output.code !== null || Boolean(output.signal);
-        if (spawned && !exitObserved)
-            throw new Error("owned executor exit unknown; reservation retained");
-        const completed = output.code === 0 && !output.aborted && !output.spawnError && !output.timedOut && !output.truncated;
-        if (completed && output.text !== JSON.stringify({ bytes: bytes.length, sha256: inputDigest }) + "\n")
-            throw new Error("fixed worker result mismatch");
-        outcome = output.aborted && (!spawned || Boolean(output.signal)) ? "cancelled" : completed ? "completed" : "failed";
-        retention.capture("result", Buffer.from(output.text), true);
-        return Object.freeze({ attemptId: attempt.attemptId, output, digest: completed ? inputDigest : null });
-    }, [{ label: "required resource settlement failed", run: async () => {
-                // Only this live controller, after executor settlement, releases a slot. Cleanup failure still rejects.
-                // Crashes/lost controllers keep their slots; reopening has no expiry, receipt-credit or reclaim API.
-                try {
-                    if (spawned && !exitObserved)
-                        throw new Error("owned executor exit unknown; no settlement credit");
-                    await permit.settle(outcome);
-                }
-                catch (error) {
-                    accountingFailed = true;
-                    throw error;
-                }
-            } }, { label: "retention observation failed", run: () => {
-                retention.finish({ code: output?.code ?? null, signal: output?.signal ?? null, timedOut: output?.timedOut ?? false,
-                    aborted: output?.aborted ?? Boolean(signal?.aborted), truncated: output?.truncated ?? false, failed: outcome !== "completed" || accountingFailed });
-            } }]);
-}
-//# sourceMappingURL=effect-profile.js.map

package/dist/effect-profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"effect-profile.js","sourceRoot":"","sources":["../src/effect-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAuB,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAuE,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAE,SAAS,EAAwB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAsB,MAAM,6BAA6B,CAAC;AACpI,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC,CAAC,CAAC;CAC9F;AACD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA4F,CAAC;AACzH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAsB,CAAC,CAAC;AAC/J,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9F,SAAS,YAAY,CAAC,MAAsB;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,6BAA6B,CAAC,gCAAgC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAClO,CAAC;AACD,MAAM,KAAK,GAAG,CAAC,OAAsB,EAAE,IAAY,EAAE,IAAc,EAAE,OAAgB,EAAE,MAAoB,EAAE,EAAE,CAAC,QAAQ,CAAC;IACvH,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACrG,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;CAClG,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IACvE,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,kFAAkF;IAC1G,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1G,OAAO,iBAAiB,CAAC,KAAK,IAAI,EAAE;QAClC,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,mFAAmF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,6OAA6O,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,+CAA+C,CAAC;QACrb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,aAAa;YAAE,MAAM,IAAI,6BAA6B,CAAC,mEAAmE,CAAC,CAAC;QACzJ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,qMAAqM,EAAE,EAAE,CAAC,CAAC;QACnP,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,mBAAmB;YAAE,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAC/H,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtH,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,6BAA6B,CAAC,6BAA6B,CAAC,CAAC;QACzJ,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtK,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,CAAC;AAGD;0GAC0G;AAC1G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAsB,EAAE,OAAsB,EAAE,MAAoB;IAGzG,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc;QAAE,MAAM,IAAI,6BAA6B,CAAC,mDAAmD,CAAC,CAAC;IAClJ,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7G,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACnG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,CAAC,CAAC,OAAO,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,uFAAuF,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,cAAc,GAAgC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzI,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC/M,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAA6B,CAAC;IACzG,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,6BAA6B,CAAC,qCAAqC,CAAC,CAAC;IACpG,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,6BAA6B,CAAC,gDAAgD,CAAC,CAAC;IAC7K,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpH,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAID,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAsB,EAAE,QAA8G;IACpL,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,6BAA6B,CAAC,2CAA2C,CAAC,CAAC;IAC3Y,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAChC,MAAM,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QAChO,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,yBAAyB;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACzO,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAA6B,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACxI,CAAC,CAAC,CAAC;IACH,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,6BAA6B,CAAC,8BAA8B,CAAC,CAAC;IAC3J,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClJ,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzC,IAAI,IAAI,GAAG,KAAK,EAAE,cAAqE,CAAC;QACxF,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,CAAsC,OAAO,CAAC,EAAE,GAAG,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,KAA0C,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACxM,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,MAAoB;gBAC7E,IAAI,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC;gBACzF,IAAI,CAAC;oBAAC,OAAO,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAC,CAAC;wBAC/I,CAAC;oBAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;gBAAC,CAAC,CAAC,6EAA6E;YACrI,CAAC,EAAE,CAAC,CAAC;IACP,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,OAAsB,EAAE,OAAiC,EAAE,KAAa,EAAE,MAAsB,EAAE,SAA+B,EAAE,MAAoB,EAAE,OAAoB;IAClO,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2BAA2B,CAAC;IAC7G,iGAAiG;IACjG,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe;QACpH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC;QAC/G,mBAAmB,EAAE,4BAA4B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACxK,IAAI,MAAkC,CAAC;IACvC,IAAI,OAAO,GAAyC,QAAQ,CAAC;IAC7D,IAAI,gBAAgB,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,YAAY,GAAG,KAAK,CAAC;IACpE,OAAO,iBAAiB,CAAC,KAAK,IAAI,EAAE;QAClC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,4BAA4B,CAAC,MAAM,aAAa,EAAE,CAAC,KAAK,OAAO,CAAC,aAAa;YAAE,MAAM,IAAI,6BAA6B,CAAC,iCAAiC,CAAC,CAAC;QAClL,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvH,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI;YACpH,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnJ,YAAY,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,OAAO,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACtH,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtJ,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpH,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;gBAClE,wGAAwG;gBACxG,qGAAqG;gBACrG,IAAI,CAAC;oBAAC,IAAI,OAAO,IAAI,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;oBAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,gBAAgB,GAAG,IAAI,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YACnM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,GAAG,EAAE;gBACtD,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;oBAChH,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,WAAW,IAAI,gBAAgB,EAAE,CAAC,CAAC;YACxJ,CAAC,EAAE,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/execution-id.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-id.d.ts","sourceRoot":"","sources":["../src/execution-id.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,MAAM,MAAM,WAAW,GAAG,QAAQ,MAAM,EAAE,CAAC;AAI3C,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAgB,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAErG"}

package/dist/execution-id.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-id.js","sourceRoot":"","sources":["../src/execution-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,eAAe,GAAG,iFAAiF,CAAC;AAE1G,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAK,GAAG,aAAa;IACrE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;AAC7F,CAAC"}

package/dist/execution-retention.d.ts

@@ -1,90 +0,0 @@
-import { type NativeSessionObservation, type NativeSessionManager } from "./native-session.ts";
-export { buildExecutionRetentionManifest, parseExecutionRetentionManifest, RETENTION_SCHEMA } from "./retention-contract.ts";
-export { ENV_NATIVE_SESSION_ROOT, readNativeSession, parseNativeSessionBytes, type NativeSessionObservation, type NativeSessionManager } from "./native-session.ts";
-/** Operator-owned archive boundary; never a model-facing parameter or an authority source. */
-export declare const ENV_EXECUTION_ARCHIVE = "PI_GRANTS_EXECUTION_ARCHIVE";
-export declare const RETENTION_VERSION = "2.0";
-export interface RetentionIdentity {
-    executionId: string;
-    parentExecutionId: string | null;
-    childId: string;
-    toolCallId: string | null;
-    executor: "process" | "herdr" | "check";
-    taskDigest: string | null;
-    definitionDigest: string | null;
-    configurationDigest: string;
-    workspaceId: string | null;
-}
-export interface RetainedContent {
-    status: "retained" | "missing";
-    path: string | null;
-    sha256: string | null;
-    bytes: number | null;
-}
-export interface ExecutionRetentionManifest {
-    version: "2.0";
-    archiveId: string;
-    identity: RetentionIdentity;
-    native: {
-        pid: number | null;
-        paneId: string | null;
-        agentName: string | null;
-        tabId: string | null;
-        sessionId: string | null;
-        sessionPath: string | null;
-        branchLeafId: string | null;
-    };
-    nativeSession: NativeSessionObservation;
-    state: "running" | "terminal";
-    outcome: {
-        code: number | null;
-        signal: string | null;
-        timedOut: boolean;
-        aborted: boolean;
-        truncated: boolean;
-        failed: boolean;
-    } | null;
-    content: Record<"stdout" | "stderr" | "paneSnapshot" | "checkReceipt" | "result" | "session", RetainedContent>;
-    coverage: {
-        complete: false;
-        losses: string[];
-    };
-    /** Retention is observation, never a work-v4 acceptance decision. */
-    acceptance: "not-assessed";
-}
-export interface RetentionStatus {
-    manifestPath: string | null;
-    status: "disabled" | "pending" | "retained" | "lost";
-}
-/** Original live status only; drains admitted observations, not producer completeness or fsync. */
-export declare function drainExecutionRetention(status: RetentionStatus): Promise<RetentionStatus>;
-/** Hash only an explicitly selected configuration. Callers must not pass environment/auth objects. */
-export declare const retentionConfigurationDigest: (configuration: unknown) => string;
-/**
- * A bounded, coalescing observation queue. No worker-control path awaits publication. A failed or stalled
- * archive never changes required ledger/lease semantics. `flush` is exclusively for external archival at
- * quiescence; it is NOT called by the spawner. Missing terminal publication means incomplete observation.
- */
-export declare function beginExecutionRetention(identity: RetentionIdentity, directory?: string | undefined): {
-    /** Read-only native API reference; never derive IDs from the locator or a displayed name. */
-    observeSession: (reference: NonNullable<{
-        source: "herdr-id" | "herdr-path" | "pi-session-file" | "pi-session-manager";
-        value: string;
-        manager?: NativeSessionManager;
-    } | undefined>) => void;
-    observeSessionManager(manager: NativeSessionManager): void;
-    status: () => RetentionStatus;
-    native(value: Partial<Pick<ExecutionRetentionManifest["native"], "pid" | "paneId" | "agentName" | "tabId">>): void;
-    capture(kind: "stdout" | "stderr" | "paneSnapshot" | "checkReceipt" | "result", bytes: Uint8Array, replace?: boolean): void;
-    finish(outcome: NonNullable<ExecutionRetentionManifest["outcome"]>): void;
-    /** Observation-only diagnostic; never establishes successful execution or accepted work. */
-    coverage: () => {
-        complete: false;
-        losses: string[];
-    };
-    flush: () => Promise<RetentionStatus>;
-};
-export type ExecutionRetention = ReturnType<typeof beginExecutionRetention>;
-/** Public consumer check: neither a reference nor a wire status supplies the missing bytes. */
-export declare function verifyRetainedBytes(reference: RetainedContent, bytes?: Uint8Array): "retained" | "missing" | "mismatch";
-//# sourceMappingURL=execution-retention.d.ts.map

package/dist/execution-retention.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-retention.d.ts","sourceRoot":"","sources":["../src/execution-retention.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2C,KAAK,wBAAwB,EAAE,KAAK,oBAAoB,EAA6B,MAAM,qBAAqB,CAAC;AACnK,OAAO,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,KAAK,wBAAwB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEpK,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAKvC,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AACD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AACD,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,KAAK,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAClG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtF,aAAa,EAAE,wBAAwB,CAAC;IACxC,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC;IAC9B,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QACzF,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/G,QAAQ,EAAE;QAAE,QAAQ,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAChD,qEAAqE;IACrE,UAAU,EAAE,cAAc,CAAC;CAC5B;AACD,MAAM,WAAW,eAAe;IAAG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAA;CAAE;AAEtH,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAIzF;AAGD,sGAAsG;AACtG,eAAO,MAAM,4BAA4B,GAAI,eAAe,OAAO,KAAG,MAA+C,CAAC;AAEtH;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,SAAS,qBAAqC;IA2G/G,6FAA6F;gCAnC5D,WAAW;gBA5CpB,UAAU,GAAG,YAAY,GAAG,iBAAiB,GAAG,oBAAoB;eAAS,MAAM;kBAAY,oBAAoB;kBA4C5E;mCAqChC,oBAAoB;kBAOvC,eAAe;kBACb,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC,CAAC;kBAS7F,QAAQ,GAAG,QAAQ,GAAG,cAAc,GAAG,cAAc,GAAG,QAAQ,SAAS,UAAU;oBAgBjF,WAAW,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC;IAUlE,4FAA4F;;;;;iBAnDtE,OAAO,CAAC,eAAe,CAAC;EAuDjD;AACD,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE5E,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAIvH"}