ttsc 0.30.4 → 0.31.1

package/lib/internal/serializeCompilerError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializeCompilerError.js","sourceRoot":"","sources":["../../src/internal/serializeCompilerError.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,gCAAuC,KAAc;IACnD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAIP,EAAE,CAAC;IACT,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,OAAe,EAAW,EAAE;QAC5D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC7C,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzB,IAAI,MAA2C,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC3B,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAE,CAAC,KAAK,CAAC;gBACpE,CAAC,CAAC,EAAE,CAAC;QACT,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAClD,IAAI,MAA0C,CAAC;QAC/C,IAAI,OAAgB,CAAC;QACrB,IAAI,WAAW,GAAG,MAAM,CAAC;QACzB,IAAI,YAAY,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,UAAU,CAAC,CAAC;YAC1E,IACE,CAAC,OAAO;gBACR,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBACrB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;oBAClD,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;wBAChB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAC3B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,EACtC,CAAC;gBACD,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;oBACpB,UAAU,EAAE,QAAQ;oBACpB,eAAe,EAAE,WAAW;iBAC7B,CAAC,CAAC;gBACH,YAAY,GAAG,GAAG,OAAO,kBAAkB,CAAC;YAC9C,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,wEAAwE;gBACxE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAc,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;oBACzB,OAAO,EAAE,cAAc,CAAC,KAAc,EAAE,SAAS,CAAC,IAAI,EAAE;oBACxD,IAAI,EAAE,cAAc,CAAC,KAAc,EAAE,MAAM,CAAC,IAAI,OAAO;oBACvD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAC9D,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,IACE,CAAC,UAAU,CAAC,UAAU;gBACtB,CAAC,CACC,OAAO;oBACP,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC9D;gBAED,SAAS;YACX,MAAM,KAAK,GACT,OAAO,IAAI,UAAU;gBACnB,CAAC,CAAC,QAAQ,CACN,UAAU,CAAC,KAAK,EAChB,GAAG,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CACrE;gBACH,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;YACjC,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,EAAE;gBACtC,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,IAAI;gBAChB,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,KAAY,EAAE,GAAW;IAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAU,CAAC;IACtC,IAAI,OAAO,GAAkB,KAAK,CAAC;IACnC,OAAO,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,SAAS;YAC1B,OAAO,OAAO,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;gBAClE,CAAC,CAAC,UAAU,CAAC,KAAK;gBAClB,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAkB,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/internal/spawnSyncResilient.d.ts

@@ -1,8 +1,5 @@
 import { type SpawnSyncOptions, spawnSync } from "node:child_process";
-export interface SpawnSyncOutputFiles {
-    stderr: string;
-    stdout: string;
-}
+import type { SpawnSyncOutputFiles } from "./SpawnSyncOutputFiles";
 /**
  * Spawn synchronously, retrying POSIX EBADF failures without high source FDs.
  *
@@ -10,11 +7,25 @@ export interface SpawnSyncOutputFiles {
  * process with many unrelated watchers can therefore make Node-created pipes or
  * file-backed stdio fail before the executable starts. The ordinary path is
  * unchanged. An EBADF retry starts a Node broker with inherited descriptors
- * 0..2; that clean child opens the capture files on low descriptors and spawns
- * the original command without a shell.
+ * 0..2; that child opens its own capture files and attempts to spawn the
+ * original command without a shell. Fresh initialization reduces inherited
+ * descriptor pressure but does not prove a numeric descriptor ceiling or
+ * successful recovery.
+ *
+ * Broker callers supply file-backed output and no stdin input or shell mode. It
+ * does not reconstruct arbitrary spawn stdio contracts. Opt-in private tracing
+ * observes this actual attempt and any broker/target separately; it adds
+ * metadata/output-byte sink work without changing results.
+ *
+ * @evidence contracts/common.md#principled-implementation Ordinary spawning is retained; only POSIX EBADF with explicit capture paths selects one isolated broker retry. That error class permits the retry but does not prove descriptor height was the original cause or guarantee retry success.
+ * @evidence contracts/common.md#clear-and-simple-design This operation selects between the ordinary path and one broker owner; file capture and output reconstruction remain the callers' responsibility.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The retry targets the supported descriptor-limit failure class without converting an ordinary command failure into fabricated success; it neither patches spawn nor substitutes target output.
+ * @evidence contracts/common.md#meaningful-documentation Native paragraphs explain the POSIX descriptor constraint and the supported file-output/no-input/no-shell broker scope, with separated acknowledgments.
+ * @evidence contracts/portability.md#os-neutral-implementation Native executable/argv are passed to Node spawning; only POSIX EBADF invokes the isolated broker and Windows retains its supported ordinary spawning path.
+ * @evidence contracts/performance.md#efficient-algorithms One ordinary spawn copies A argument references and delegates argument/environment/native launch work. Error-message classification adds text cost; one admitted failure can add broker option/argv serialization, report IO/parsing and target spawning. Enabled private tracing additionally serializes metadata/returned output and writes its budgeted sink. No retry loop is introduced, and input/output/native costs are not bounded by two owner calls.
+ *
+ * @evidenceExclude contracts/performance.md#reuse-equivalent-work Arbitrary command execution has external effects, so matching commands and arguments cannot authorize sharing completed results.
+ *
+ * @evidence contracts/performance.md#bound-retention-and-release-resources Synchronous spawn owns completion; timeout sends its configured kill signal but does not guarantee immediate exit. The broker owns its report lifecycle, capture files remain caller-owned and returned results transfer to the caller. Forced broker termination does not establish that every target descendant released inherited resources.
  */
 export declare function spawnSyncResilient(command: string, args: readonly string[], options: SpawnSyncOptions, output?: SpawnSyncOutputFiles): ReturnType<typeof spawnSync>;
-/** Launch through a shell-free child broker that owns only low descriptors. */
-export declare function spawnSyncWithLowDescriptors(command: string, args: readonly string[], options: SpawnSyncOptions, output: SpawnSyncOutputFiles): ReturnType<typeof spawnSync>;
-/** Whether libuv rejected process stdio because a source descriptor was high. */
-export declare function isSpawnSyncFdExhaustion(error: Error | undefined): boolean;

package/lib/internal/spawnSyncResilient.js

@@ -1,14 +1,11 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.spawnSyncResilient = spawnSyncResilient;
-exports.spawnSyncWithLowDescriptors = spawnSyncWithLowDescriptors;
-exports.isSpawnSyncFdExhaustion = isSpawnSyncFdExhaustion;
 const node_child_process_1 = require("node:child_process");
-const node_fs_1 = __importDefault(require("node:fs"));
-let nextBrokerResult = 0;
+const E2ETrace_1 = require("./E2ETrace");
+const OwnedSynchronousProcess_1 = require("./OwnedSynchronousProcess");
+const isSpawnSyncFdExhaustion_1 = require("./isSpawnSyncFdExhaustion");
+const spawnSyncWithLowDescriptors_1 = require("./spawnSyncWithLowDescriptors");
 /**
  * Spawn synchronously, retrying POSIX EBADF failures without high source FDs.
  *
@@ -16,151 +13,38 @@ let nextBrokerResult = 0;
  * process with many unrelated watchers can therefore make Node-created pipes or
  * file-backed stdio fail before the executable starts. The ordinary path is
  * unchanged. An EBADF retry starts a Node broker with inherited descriptors
- * 0..2; that clean child opens the capture files on low descriptors and spawns
- * the original command without a shell.
+ * 0..2; that child opens its own capture files and attempts to spawn the
+ * original command without a shell. Fresh initialization reduces inherited
+ * descriptor pressure but does not prove a numeric descriptor ceiling or
+ * successful recovery.
+ *
+ * Broker callers supply file-backed output and no stdin input or shell mode. It
+ * does not reconstruct arbitrary spawn stdio contracts. Opt-in private tracing
+ * observes this actual attempt and any broker/target separately; it adds
+ * metadata/output-byte sink work without changing results.
+ *
+ * @evidence contracts/common.md#principled-implementation Ordinary spawning is retained; only POSIX EBADF with explicit capture paths selects one isolated broker retry. That error class permits the retry but does not prove descriptor height was the original cause or guarantee retry success.
+ * @evidence contracts/common.md#clear-and-simple-design This operation selects between the ordinary path and one broker owner; file capture and output reconstruction remain the callers' responsibility.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The retry targets the supported descriptor-limit failure class without converting an ordinary command failure into fabricated success; it neither patches spawn nor substitutes target output.
+ * @evidence contracts/common.md#meaningful-documentation Native paragraphs explain the POSIX descriptor constraint and the supported file-output/no-input/no-shell broker scope, with separated acknowledgments.
+ * @evidence contracts/portability.md#os-neutral-implementation Native executable/argv are passed to Node spawning; only POSIX EBADF invokes the isolated broker and Windows retains its supported ordinary spawning path.
+ * @evidence contracts/performance.md#efficient-algorithms One ordinary spawn copies A argument references and delegates argument/environment/native launch work. Error-message classification adds text cost; one admitted failure can add broker option/argv serialization, report IO/parsing and target spawning. Enabled private tracing additionally serializes metadata/returned output and writes its budgeted sink. No retry loop is introduced, and input/output/native costs are not bounded by two owner calls.
+ *
+ * @evidenceExclude contracts/performance.md#reuse-equivalent-work Arbitrary command execution has external effects, so matching commands and arguments cannot authorize sharing completed results.
+ *
+ * @evidence contracts/performance.md#bound-retention-and-release-resources Synchronous spawn owns completion; timeout sends its configured kill signal but does not guarantee immediate exit. The broker owns its report lifecycle, capture files remain caller-owned and returned results transfer to the caller. Forced broker termination does not establish that every target descendant released inherited resources.
  */
 function spawnSyncResilient(command, args, options, output) {
-    const result = (0, node_child_process_1.spawnSync)(command, [...args], options);
+    const nativeArgs = [...args];
+    const trace = E2ETrace_1.E2ETrace.begin(command, nativeArgs, options, "spawnSyncResilient");
+    const result = OwnedSynchronousProcess_1.OwnedSynchronousProcess.launch(command, nativeArgs, options) ??
+        (0, node_child_process_1.spawnSync)(command, nativeArgs, options);
+    E2ETrace_1.E2ETrace.result(trace, result);
     if (output === undefined ||
         process.platform === "win32" ||
-        !isSpawnSyncFdExhaustion(result.error)) {
+        !(0, isSpawnSyncFdExhaustion_1.isSpawnSyncFdExhaustion)(result.error)) {
         return result;
     }
-    return spawnSyncWithLowDescriptors(command, args, options, output);
-}
-/** Launch through a shell-free child broker that owns only low descriptors. */
-function spawnSyncWithLowDescriptors(command, args, options, output) {
-    const report = `${output.stdout}.ttsc-result-${process.pid}-${nextBrokerResult++}`;
-    const targetOptions = JSON.stringify({
-        ...(options.argv0 === undefined ? {} : { argv0: options.argv0 }),
-        ...(options.gid === undefined ? {} : { gid: options.gid }),
-        ...(options.killSignal === undefined
-            ? {}
-            : { killSignal: options.killSignal }),
-        ...(options.timeout === undefined ? {} : { timeout: options.timeout }),
-        ...(options.uid === undefined ? {} : { uid: options.uid }),
-    });
-    const brokerTimeout = options.timeout === undefined ? undefined : options.timeout + 5_000;
-    try {
-        const broker = (0, node_child_process_1.spawnSync)(process.execPath, [
-            "-e",
-            LOW_DESCRIPTOR_BROKER_SOURCE,
-            "--",
-            report,
-            output.stdout,
-            output.stderr,
-            targetOptions,
-            command,
-            ...args,
-        ], {
-            cwd: options.cwd,
-            encoding: undefined,
-            env: options.env,
-            input: undefined,
-            killSignal: options.killSignal,
-            shell: false,
-            stdio: [0, 1, 2],
-            timeout: brokerTimeout,
-            windowsHide: true,
-        });
-        if (broker.error !== undefined)
-            return broker;
-        if (broker.status !== 0) {
-            return brokerProtocolFailure(broker, `exited with status ${String(broker.status)}`);
-        }
-        let parsed;
-        try {
-            parsed = JSON.parse(node_fs_1.default.readFileSync(report, "utf8"));
-        }
-        catch (error) {
-            return brokerProtocolFailure(broker, error instanceof Error ? error.message : String(error));
-        }
-        return {
-            ...broker,
-            ...(parsed.error === undefined
-                ? { error: undefined }
-                : { error: deserializeSpawnError(parsed.error) }),
-            pid: parsed.pid,
-            signal: parsed.signal,
-            status: parsed.status,
-        };
-    }
-    finally {
-        try {
-            node_fs_1.default.rmSync(report, { force: true });
-        }
-        catch {
-            // The capture owner removes the containing directory after reading it.
-        }
-    }
-}
-/** Whether libuv rejected process stdio because a source descriptor was high. */
-function isSpawnSyncFdExhaustion(error) {
-    const code = error?.code;
-    return code === "EBADF" || error?.message.includes("EBADF") === true;
-}
-function deserializeSpawnError(serialized) {
-    const error = new Error(serialized.message);
-    if (serialized.name !== undefined)
-        error.name = serialized.name;
-    if (serialized.code !== undefined)
-        error.code = serialized.code;
-    if (serialized.errno !== undefined)
-        error.errno = serialized.errno;
-    if (serialized.path !== undefined)
-        error.path = serialized.path;
-    if (serialized.spawnargs !== undefined)
-        error.spawnargs = serialized.spawnargs;
-    if (serialized.syscall !== undefined)
-        error.syscall = serialized.syscall;
-    return error;
-}
-function brokerProtocolFailure(broker, reason) {
-    const error = new Error(`ttsc: low-descriptor spawn broker failed: ${reason}`);
-    error.code = "EIO";
-    return { ...broker, error, signal: null, status: null };
-}
-const LOW_DESCRIPTOR_BROKER_SOURCE = String.raw `
-const childProcess = require("node:child_process");
-const fs = require("node:fs");
-const [report, stdout, stderr, encodedOptions, command, ...args] = process.argv.slice(1);
-const options = JSON.parse(encodedOptions);
-let stdoutFd;
-let stderrFd;
-let result;
-try {
-  stdoutFd = fs.openSync(stdout, "w");
-  stderrFd = stderr === stdout ? stdoutFd : fs.openSync(stderr, "w");
-  result = childProcess.spawnSync(command, args, {
-    ...options,
-    shell: false,
-    stdio: ["ignore", stdoutFd, stderrFd],
-  });
-} catch (error) {
-  result = { error, pid: 0, signal: null, status: null };
-} finally {
-  if (stderrFd !== undefined && stderrFd !== stdoutFd) {
-    try { fs.closeSync(stderrFd); } catch {}
-  }
-  if (stdoutFd !== undefined) {
-    try { fs.closeSync(stdoutFd); } catch {}
-  }
+    return (0, spawnSyncWithLowDescriptors_1.spawnSyncWithLowDescriptors)(command, args, options, output);
 }
-const sourceError = result.error;
-const error = sourceError === undefined ? undefined : {
-  code: sourceError.code,
-  errno: sourceError.errno,
-  message: sourceError.message,
-  name: sourceError.name,
-  path: sourceError.path,
-  spawnargs: sourceError.spawnargs,
-  syscall: sourceError.syscall,
-};
-fs.writeFileSync(report, JSON.stringify({
-  ...(error === undefined ? {} : { error }),
-  pid: result.pid,
-  signal: result.signal,
-  status: result.status,
-}));
-`;
 //# sourceMappingURL=spawnSyncResilient.js.map

package/lib/internal/spawnSyncResilient.js.map

@@ -1 +1 @@
-{"version":3,"file":"spawnSyncResilient.js","sourceRoot":"","sources":["../../src/internal/spawnSyncResilient.ts"],"names":[],"mappings":";;;;;;;;AAAA,2DAAsE;AACtE,sDAAyB;AAwBzB,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB;;;;;;;;;GASG;AACH,4BACE,OAAe,EACf,IAAuB,EACvB,OAAyB,EACzB,MAA6B;IAE7B,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,IACE,MAAM,KAAK,SAAS;QACpB,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,EACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,2BAA2B,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED,+EAA+E;AAC/E,qCACE,OAAe,EACf,IAAuB,EACvB,OAAyB,EACzB,MAA4B;IAE5B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,gBAAgB,OAAO,CAAC,GAAG,IAAI,gBAAgB,EAAE,EAAE,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,aAAa,GACjB,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,8BAAS,EACtB,OAAO,CAAC,QAAQ,EAChB;YACE,IAAI;YACJ,4BAA4B;YAC5B,IAAI;YACJ,MAAM;YACN,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,MAAM;YACb,aAAa;YACb,OAAO;YACP,GAAG,IAAI;SACR,EACD;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,IAAI;SAClB,CACF,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,qBAAqB,CAC1B,MAAM,EACN,sBAAsB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,qBAAqB,CAC1B,MAAM,EACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;gBACtB,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,iBAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,iCAAwC,KAAwB;IAC9D,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,OAAO,IAAI,KAAK,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAgC;IAC7D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAGzC,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IACnE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;QACpC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACzC,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAoC,EACpC,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,6CAA6C,MAAM,EAAE,CAC7B,CAAC;IAC3B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IACnB,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,4BAA4B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0C9C,CAAC"}
+{"version":3,"file":"spawnSyncResilient.js","sourceRoot":"","sources":["../../src/internal/spawnSyncResilient.ts"],"names":[],"mappings":";;;AAAA,2DAAsE;AAEtE,yCAAsC;AACtC,uEAAoE;AAEpE,uEAAoE;AACpE,+EAA4E;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,4BACE,OAAe,EACf,IAAuB,EACvB,OAAyB,EACzB,MAA6B;IAE7B,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,mBAAQ,CAAC,KAAK,CAC1B,OAAO,EACP,UAAU,EACV,OAAO,EACP,oBAAoB,CACrB,CAAC;IACF,MAAM,MAAM,GACV,iDAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC;QAC5D,IAAA,8BAAS,EAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,mBAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/B,IACE,MAAM,KAAK,SAAS;QACpB,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,CAAC,IAAA,iDAAuB,EAAC,MAAM,CAAC,KAAK,CAAC,EACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAA,yDAA2B,EAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC"}

package/lib/internal/spawnSyncWithLowDescriptors.d.ts

@@ -0,0 +1,30 @@
+import { type SpawnSyncOptions, spawnSync } from "node:child_process";
+import type { SpawnSyncOutputFiles } from "./SpawnSyncOutputFiles";
+/**
+ * Launch through a fresh shell-free child broker with inherited stdio 0..2.
+ *
+ * The caller owns stdout/stderr capture files and reconstructs their contents;
+ * this operation returns command status and errors through a private report.
+ * Its supported broker mode ignores stdin and uses no shell. It does not
+ * reproduce arbitrary spawn input or stdio modes. Native initialization or
+ * inherited preloads can still allocate descriptors; low numeric descriptor
+ * values and successful target launch are not guaranteed. Parsed JSON report
+ * fields are trusted after syntax parsing rather than structurally validated.
+ * Enabled private tracing observes the broker and target as separate actual
+ * primitives, loading the same private observer in the broker. Its root travels
+ * in private broker arguments without altering the target environment. Trace
+ * loading/write failures leave missing evidence while target results remain
+ * unchanged; optional observation adds native IO and metadata/output work.
+ *
+ * @evidence contracts/common.md#principled-implementation A fresh Node child inherits only descriptors zero through two, opens owned capture files itself and launches the actual argv; its private status report preserves target exit and native error information rather than broker status alone.
+ * @evidence contracts/common.md#clear-and-simple-design One broker boundary separates descriptor acquisition from the already loaded parent; caller-owned capture remains external and the private result file carries only status/error metadata.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The isolated broker addresses actual POSIX source-descriptor limits without patching spawn or inventing compiler output; unreadable or syntactically invalid JSON reports become protocol errors, while parsed field shapes are trusted; no shell quoting workaround is introduced.
+ * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish command results from file-backed output and state no-input/no-shell support, with separate acknowledgment tags.
+ * @evidence contracts/portability.md#os-neutral-implementation Supported POSIX fallback passes executable and argv without shell syntax; Node opens captures inside the broker. cwd/env configure that broker; argv0, uid/gid, killSignal and timeout are forwarded to its target. Other arbitrary spawn modes are not reconstructed.
+ * @evidence contracts/performance.md#efficient-algorithms One broker is attempted and, if its initialization succeeds, it attempts one target. Option/argv/report serialization, report UTF-8 read/JSON parsing and native/env/path work scale with their inputs. Target output remains in caller capture files; temporary report/metadata text and native work have no adapter quota.
+ *
+ * @evidenceExclude contracts/performance.md#reuse-equivalent-work Command spawning and file output have external effects; this owner cannot share them solely because command and argv match.
+ *
+ * @evidence contracts/performance.md#bound-retention-and-release-resources Child descriptor closure and parent report removal are attempted in finally; failures are suppressed and capture-owner directory cleanup is also best effort. Omitted timeout leaves the broker unbounded; a supplied timeout adds five seconds to its broker option, including timeout zero becoming five seconds here. A timeout signal need not end the process immediately, and forced broker termination does not join every target descendant.
+ */
+export declare function spawnSyncWithLowDescriptors(command: string, args: readonly string[], options: SpawnSyncOptions, output: SpawnSyncOutputFiles): ReturnType<typeof spawnSync>;

package/lib/internal/spawnSyncWithLowDescriptors.js

@@ -0,0 +1,194 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.spawnSyncWithLowDescriptors = spawnSyncWithLowDescriptors;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const E2ETrace_1 = require("./E2ETrace");
+const OwnedSynchronousProcess_1 = require("./OwnedSynchronousProcess");
+/**
+ * Launch through a fresh shell-free child broker with inherited stdio 0..2.
+ *
+ * The caller owns stdout/stderr capture files and reconstructs their contents;
+ * this operation returns command status and errors through a private report.
+ * Its supported broker mode ignores stdin and uses no shell. It does not
+ * reproduce arbitrary spawn input or stdio modes. Native initialization or
+ * inherited preloads can still allocate descriptors; low numeric descriptor
+ * values and successful target launch are not guaranteed. Parsed JSON report
+ * fields are trusted after syntax parsing rather than structurally validated.
+ * Enabled private tracing observes the broker and target as separate actual
+ * primitives, loading the same private observer in the broker. Its root travels
+ * in private broker arguments without altering the target environment. Trace
+ * loading/write failures leave missing evidence while target results remain
+ * unchanged; optional observation adds native IO and metadata/output work.
+ *
+ * @evidence contracts/common.md#principled-implementation A fresh Node child inherits only descriptors zero through two, opens owned capture files itself and launches the actual argv; its private status report preserves target exit and native error information rather than broker status alone.
+ * @evidence contracts/common.md#clear-and-simple-design One broker boundary separates descriptor acquisition from the already loaded parent; caller-owned capture remains external and the private result file carries only status/error metadata.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The isolated broker addresses actual POSIX source-descriptor limits without patching spawn or inventing compiler output; unreadable or syntactically invalid JSON reports become protocol errors, while parsed field shapes are trusted; no shell quoting workaround is introduced.
+ * @evidence contracts/common.md#meaningful-documentation Native paragraphs distinguish command results from file-backed output and state no-input/no-shell support, with separate acknowledgment tags.
+ * @evidence contracts/portability.md#os-neutral-implementation Supported POSIX fallback passes executable and argv without shell syntax; Node opens captures inside the broker. cwd/env configure that broker; argv0, uid/gid, killSignal and timeout are forwarded to its target. Other arbitrary spawn modes are not reconstructed.
+ * @evidence contracts/performance.md#efficient-algorithms One broker is attempted and, if its initialization succeeds, it attempts one target. Option/argv/report serialization, report UTF-8 read/JSON parsing and native/env/path work scale with their inputs. Target output remains in caller capture files; temporary report/metadata text and native work have no adapter quota.
+ *
+ * @evidenceExclude contracts/performance.md#reuse-equivalent-work Command spawning and file output have external effects; this owner cannot share them solely because command and argv match.
+ *
+ * @evidence contracts/performance.md#bound-retention-and-release-resources Child descriptor closure and parent report removal are attempted in finally; failures are suppressed and capture-owner directory cleanup is also best effort. Omitted timeout leaves the broker unbounded; a supplied timeout adds five seconds to its broker option, including timeout zero becoming five seconds here. A timeout signal need not end the process immediately, and forced broker termination does not join every target descendant.
+ */
+function spawnSyncWithLowDescriptors(command, args, options, output) {
+    const report = `${output.stdout}.ttsc-result-${process.pid}-${nextBrokerResult++}`;
+    const targetOptions = JSON.stringify({
+        ...(options.argv0 === undefined ? {} : { argv0: options.argv0 }),
+        ...(options.gid === undefined ? {} : { gid: options.gid }),
+        ...(options.killSignal === undefined
+            ? {}
+            : { killSignal: options.killSignal }),
+        ...(options.timeout === undefined ? {} : { timeout: options.timeout }),
+        ...(options.uid === undefined ? {} : { uid: options.uid }),
+    });
+    const brokerTimeout = options.timeout === undefined ? undefined : options.timeout + 5_000;
+    // Only an enabled observer needs the private compiled helper path. Failure
+    // to load the observer leaves missing evidence, not a different command.
+    let traceModule = "";
+    if (process.env.TTSC_E2E_TRACE) {
+        try {
+            traceModule = require.resolve("./E2ETrace");
+        }
+        catch { }
+    }
+    try {
+        const brokerArgs = [
+            "-e",
+            LOW_DESCRIPTOR_BROKER_SOURCE,
+            "--",
+            report,
+            output.stdout,
+            output.stderr,
+            targetOptions,
+            traceModule,
+            process.env.TTSC_E2E_TRACE ?? "",
+            command,
+            ...args,
+        ];
+        const brokerOptions = {
+            cwd: options.cwd,
+            encoding: undefined,
+            env: options.env,
+            input: undefined,
+            killSignal: options.killSignal,
+            shell: false,
+            stdio: [0, 1, 2],
+            timeout: brokerTimeout,
+            windowsHide: true,
+        };
+        const trace = E2ETrace_1.E2ETrace.begin(process.execPath, brokerArgs, brokerOptions, "low-descriptor-broker");
+        // The target ignores stdin. An owned relay uses that same no-input mode;
+        // ordinary broker initialization retains its inherited stdin contract.
+        const broker = OwnedSynchronousProcess_1.OwnedSynchronousProcess.launch(process.execPath, brokerArgs, {
+            ...brokerOptions,
+            stdio: ["ignore", 1, 2],
+        }) ?? (0, node_child_process_1.spawnSync)(process.execPath, brokerArgs, brokerOptions);
+        E2ETrace_1.E2ETrace.result(trace, broker);
+        if (broker.error !== undefined)
+            return broker;
+        if (broker.status !== 0) {
+            return brokerProtocolFailure(broker, `exited with status ${String(broker.status)}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(node_fs_1.default.readFileSync(report, "utf8"));
+        }
+        catch (error) {
+            return brokerProtocolFailure(broker, error instanceof Error ? error.message : String(error));
+        }
+        return {
+            ...broker,
+            ...(parsed.error === undefined
+                ? { error: undefined }
+                : { error: deserializeSpawnError(parsed.error) }),
+            pid: parsed.pid,
+            signal: parsed.signal,
+            status: parsed.status,
+        };
+    }
+    finally {
+        try {
+            node_fs_1.default.rmSync(report, { force: true });
+        }
+        catch {
+            // The capture owner removes the containing directory after reading it.
+        }
+    }
+}
+let nextBrokerResult = 0;
+function deserializeSpawnError(serialized) {
+    const error = new Error(serialized.message);
+    if (serialized.name !== undefined)
+        error.name = serialized.name;
+    if (serialized.code !== undefined)
+        error.code = serialized.code;
+    if (serialized.errno !== undefined)
+        error.errno = serialized.errno;
+    if (serialized.path !== undefined)
+        error.path = serialized.path;
+    if (serialized.spawnargs !== undefined)
+        error.spawnargs = serialized.spawnargs;
+    if (serialized.syscall !== undefined)
+        error.syscall = serialized.syscall;
+    return error;
+}
+function brokerProtocolFailure(broker, reason) {
+    const error = new Error(`ttsc: low-descriptor spawn broker failed: ${reason}`);
+    error.code = "EIO";
+    return { ...broker, error, signal: null, status: null };
+}
+const LOW_DESCRIPTOR_BROKER_SOURCE = String.raw `
+const childProcess = require("node:child_process");
+const fs = require("node:fs");
+const [report, stdout, stderr, encodedOptions, traceModule, traceRoot, command, ...args] = process.argv.slice(1);
+const options = JSON.parse(encodedOptions);
+let traceObserver;
+if (traceRoot && traceModule) {
+  try { traceObserver = require(traceModule).E2ETrace; } catch {}
+}
+let stdoutFd;
+let stderrFd;
+let result;
+try {
+  stdoutFd = fs.openSync(stdout, "w");
+  stderrFd = stderr === stdout ? stdoutFd : fs.openSync(stderr, "w");
+  const trace = traceObserver?.begin(command, args, options, "low-descriptor-target", traceRoot);
+  result = childProcess.spawnSync(command, args, {
+    ...options,
+    shell: false,
+    stdio: ["ignore", stdoutFd, stderrFd],
+  });
+  traceObserver?.result(trace, result);
+} catch (error) {
+  result = { error, pid: 0, signal: null, status: null };
+} finally {
+  if (stderrFd !== undefined && stderrFd !== stdoutFd) {
+    try { fs.closeSync(stderrFd); } catch {}
+  }
+  if (stdoutFd !== undefined) {
+    try { fs.closeSync(stdoutFd); } catch {}
+  }
+}
+const sourceError = result.error;
+const error = sourceError === undefined ? undefined : {
+  code: sourceError.code,
+  errno: sourceError.errno,
+  message: sourceError.message,
+  name: sourceError.name,
+  path: sourceError.path,
+  spawnargs: sourceError.spawnargs,
+  syscall: sourceError.syscall,
+};
+fs.writeFileSync(report, JSON.stringify({
+  ...(error === undefined ? {} : { error }),
+  pid: result.pid,
+  signal: result.signal,
+  status: result.status,
+}));
+`;
+//# sourceMappingURL=spawnSyncWithLowDescriptors.js.map

package/lib/internal/spawnSyncWithLowDescriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawnSyncWithLowDescriptors.js","sourceRoot":"","sources":["../../src/internal/spawnSyncWithLowDescriptors.ts"],"names":[],"mappings":";;;;;;AAAA,2DAAsE;AACtE,sDAAyB;AAEzB,yCAAsC;AACtC,uEAAoE;AAGpE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qCACE,OAAe,EACf,IAAuB,EACvB,OAAyB,EACzB,MAA4B;IAE5B,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,gBAAgB,OAAO,CAAC,GAAG,IAAI,gBAAgB,EAAE,EAAE,CAAC;IACnF,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;QACnC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,aAAa,GACjB,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;IACtE,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG;YACjB,IAAI;YACJ,4BAA4B;YAC5B,IAAI;YACJ,MAAM;YACN,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,MAAM;YACb,aAAa;YACb,WAAW;YACX,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE;YAChC,OAAO;YACP,GAAG,IAAI;SACR,CAAC;QACF,MAAM,aAAa,GAAqB;YACtC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,IAAI;SAClB,CAAC;QACF,MAAM,KAAK,GAAG,mBAAQ,CAAC,KAAK,CAC1B,OAAO,CAAC,QAAQ,EAChB,UAAU,EACV,aAAa,EACb,uBAAuB,CACxB,CAAC;QACF,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,MAAM,GACV,iDAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE;YAC3D,GAAG,aAAa;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;SACxB,CAAC,IAAI,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,mBAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,qBAAqB,CAC1B,MAAM,EACN,sBAAsB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,qBAAqB,CAC1B,MAAM,EACN,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;gBACtB,CAAC,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,iBAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAmBD,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB,SAAS,qBAAqB,CAAC,UAAgC;IAC7D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAGzC,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IACnE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;QACpC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACzC,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAoC,EACpC,MAAc;IAEd,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,6CAA6C,MAAM,EAAE,CAC7B,CAAC;IAC3B,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IACnB,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,4BAA4B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgD9C,CAAC"}

package/lib/internal/tsconfig.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Public entry of `ttsc/tsconfig`.
+ *
+ * How a `tsconfig.json` is read is decided once, in ttsc: the JSONC grammar,
+ * the resolution of an `extends` specifier by TypeScript-Go's rule, and whether
+ * a plugin entry's path is relative, as ttsc's plugin loader reads it.
+ * `@ttsc/unplugin` reads the same configs to build its membership policy, its
+ * alias overlay, and the snapshot of the config chain, so it imports these
+ * rules rather than copying them. This barrel is the one module path such a
+ * reader imports, so the implementation keeps one declaration per file.
+ */
+export * from "../compiler/internal/project/compilerUsesCaseSensitiveFileNames";
+export * from "../compiler/internal/project/parseJsonc";
+export * from "../compiler/internal/project/resolveTsconfigExtends";
+export * from "../compiler/internal/project/tsconfigExtendsFileCandidates";
+export * from "../plugin/internal/load/isRelativePluginSpecifier";

package/lib/internal/tsconfig.js

@@ -0,0 +1,33 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Public entry of `ttsc/tsconfig`.
+ *
+ * How a `tsconfig.json` is read is decided once, in ttsc: the JSONC grammar,
+ * the resolution of an `extends` specifier by TypeScript-Go's rule, and whether
+ * a plugin entry's path is relative, as ttsc's plugin loader reads it.
+ * `@ttsc/unplugin` reads the same configs to build its membership policy, its
+ * alias overlay, and the snapshot of the config chain, so it imports these
+ * rules rather than copying them. This barrel is the one module path such a
+ * reader imports, so the implementation keeps one declaration per file.
+ */
+__exportStar(require("../compiler/internal/project/compilerUsesCaseSensitiveFileNames"), exports);
+__exportStar(require("../compiler/internal/project/parseJsonc"), exports);
+__exportStar(require("../compiler/internal/project/resolveTsconfigExtends"), exports);
+__exportStar(require("../compiler/internal/project/tsconfigExtendsFileCandidates"), exports);
+__exportStar(require("../plugin/internal/load/isRelativePluginSpecifier"), exports);
+//# sourceMappingURL=tsconfig.js.map

package/lib/internal/tsconfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsconfig.js","sourceRoot":"","sources":["../../src/internal/tsconfig.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;;;;;GAUG;AACH,kGAAgF;AAChF,0EAAwD;AACxD,sFAAoE;AACpE,6FAA2E;AAC3E,oFAAkE"}

package/lib/launcher/internal/PendingResidentCheckWatchChanges.d.ts

@@ -0,0 +1,56 @@
+import { type ResidentCheckWatchChange } from "../../compiler/internal/build/ResidentCheckWatchChange";
+import { type WatchInputChange } from "./watch/WatchInputChange";
+/**
+ * Coalesces filesystem events until the next resident check-watch cycle.
+ *
+ * A full reload dominates every narrower signal. Program invalidation remains
+ * distinct so a project-input module creation/deletion can cold-load the
+ * Program without discarding the selected execution or restarting the sidecar.
+ *
+ * @evidence contracts/common.md#principled-implementation Two path sets preserve changed versus declared external inputs, while reload dominates and clears narrower state; program invalidation remains a separate supported signal.
+ * @evidence contracts/common.md#clear-and-simple-design push folds event precedence and take transfers one deterministic batch then resets; callers own the scheduling and native path identity supplied here.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts The reload/compiler/config distinctions come from watcher protocol semantics rather than an event-count threshold or fixture-specific path.
+ * @evidence contracts/common.md#meaningful-documentation Native class and method paragraphs explain signal dominance, external membership and reset ownership; members receive no checklist tags.
+ * @evidence contracts/performance.md#efficient-algorithms At most two Set insertions retain each event path, including string hashing/equality work. Draining sorts each distinct population with string comparisons and allocates returned references; retained path bytes grow with unique spellings until take or escalation.
+ * @evidenceExclude contracts/performance.md#reuse-equivalent-work This accumulator merges delivery data, not completed or in-flight producer work; the caller owns scheduling checks and the session owns process reuse.
+ * @evidence contracts/performance.md#bound-retention-and-release-resources The pending cycle owns distinct path strings and releases them on take or escalation; population is bounded by distinct events between cycles, without a separate numeric cap if the caller stops draining.
+ * @evidenceExclude contracts/portability.md#os-neutral-implementation Coalesces event paths held as opaque strings; it resolves no path and touches no filesystem.
+ */
+export declare class PendingResidentCheckWatchChanges {
+    private readonly changed;
+    private readonly external;
+    private invalidate;
+    private reload;
+    /**
+     * Fold one filesystem event into the pending cycle.
+     *
+     * A config or plugin change, a compiler-topology change without a path, or an
+     * explicit `reload` escalates to a full reload and discards narrower signals.
+     * Otherwise the path is recorded as changed, and additionally as external
+     * when it is a declared project-rule input.
+     *
+     * @evidence contracts/common.md#principled-implementation Reload precedence is checked before incremental folding, and project events are included in both changed and external sets as required by resident checks.
+     * @evidence contracts/common.md#clear-and-simple-design One method updates the three signal forms and path sets, preserving the take boundary as the sole batch transfer.
+     * @evidence contracts/common.md#prohibited-implementation-shortcuts Compiler events without a path conservatively select the supported full-reload operation instead of inventing a path or retrying a failed assumption.
+     * @evidence contracts/common.md#meaningful-documentation Native paragraphs identify escalation triggers and distinguish changed from external inputs, with prose separated from tags.
+     * @evidence contracts/performance.md#efficient-algorithms Normal events use at most two Set insertions, including path-string hashing and equality; escalation releases both populations rather than rebuilding an event history.
+     * @evidenceExclude contracts/performance.md#reuse-equivalent-work Folding duplicate delivery paths establishes no shared computation result; actual check scheduling and resident reuse belong to consumers.
+     * @evidence contracts/performance.md#bound-retention-and-release-resources This accumulator retains unique paths until take or full reload; no bound independent of the caller's drain rate is imposed.
+     * @evidenceExclude contracts/portability.md#os-neutral-implementation Records event paths as opaque strings in sets and compares only event kinds; it resolves no path and touches no filesystem.
+     */
+    push(change?: WatchInputChange, reload?: boolean): void;
+    /**
+     * Return everything accumulated since the last call, with paths sorted, and
+     * reset to empty.
+     *
+     * @evidence contracts/common.md#principled-implementation Optional fields encode only present signals, sorted arrays transfer set contents, and resetting every flag/set makes the next batch independent.
+     * @evidence contracts/common.md#clear-and-simple-design Batch construction and complete state reset stay in the same synchronous operation, without exposing mutable sets to consumers.
+     * @evidence contracts/common.md#prohibited-implementation-shortcuts Absent fields remain omitted in this watch batch instead of using consumer-specific sentinels; the wire adapter separately selects protocol fields and handles coordinator-only reload.
+     * @evidence contracts/common.md#meaningful-documentation The method documents deterministic path order and destructive drain semantics needed by callers.
+     * @evidence contracts/performance.md#efficient-algorithms Each distinct path population is copied and sorted once, including path-string comparison costs; returned arrays scale with unique references and reset releases the accumulator's ownership.
+     * @evidenceExclude contracts/performance.md#reuse-equivalent-work Draining transfers delivery ownership and resets state; reusing an earlier batch would replay effects rather than share equivalent producer work.
+     * @evidence contracts/performance.md#bound-retention-and-release-resources Ownership of arrays transfers to the caller while the accumulator clears its sets and flags; retaining returned batches is the consumer's responsibility.
+     * @evidenceExclude contracts/portability.md#os-neutral-implementation Draining reads and clears this instance's flags and opaque path sets without resolving filesystem identity or calling a native process API.
+     */
+    take(): ResidentCheckWatchChange;
+}