ttsc 0.31.0 → 0.31.2

package/lib/internal/runtimeExecutableIdentity.d.ts

@@ -1,20 +1,29 @@
+import { PluginContentIdentities } from "../plugin/internal/source/PluginContentIdentities";
 /**
  * Fingerprint an absolute executable's spelling, target and actual bytes.
  *
  * A changed link, file, or read failure yields no reusable identity. Metadata
- * brackets the streamed read; it is not used to reuse an earlier content hash.
- * Concurrent writes that evade every filesystem observation remain outside this
- * snapshot guarantee.
+ * brackets the streamed read. Concurrent writes that evade every filesystem
+ * observation remain outside this snapshot guarantee.
  *
- * @evidence contracts/common.md#principled-implementation The identity joins lexical-link metadata, the selected physical file metadata and SHA-256 of that opened file; matching metadata alone cannot authorize reuse after bytes change. Descriptor and pathname observations must still agree after reading.
- * @evidence contracts/common.md#clear-and-simple-design This one native owner supplies the same content proof to runtime capability and plugin caches; callers decide whether their other inputs permit reuse.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Supported Node filesystem and crypto APIs inspect the actual candidate; no fixture identity, foreign mutation or metadata-only shortcut substitutes for content.
- * @evidence contracts/common.md#meaningful-documentation Native prose explains absolute-path scope, failure meaning, hash freshness and the remaining concurrent-mutation limitation, with separate prose and tags.
- * @evidence contracts/portability.md#os-neutral-implementation Node native realpath and bigint stat preserve link/target identity on supported hosts; absolute paths use native platform semantics, and unreadable or non-regular targets cannot be reused.
- * @evidence contracts/performance.md#efficient-algorithms A sequential read hashes B bytes with one 64 KiB buffer instead of a complete executable allocation. Native path/realpath/stat observations and serialized physical spelling/metadata add text/lookup costs; B and spelling lengths have no quota here. Returned identity storage includes the physical path as well as the fixed-length digest.
- *
- * @evidenceExclude contracts/performance.md#reuse-equivalent-work This operation establishes whether later work is equivalent; retaining a digest by metadata would reproduce the stale-byte defect it must prevent.
+ * With a record store, the bytes of an unchanged executable are proven from its
+ * metadata instead of streamed again (`PluginContentIdentities`, #1723): the
+ * recorded digest stands only while the physical file's identity, size and both
+ * stamps match the record and its modification stamp is separable from a
+ * reference the store minted. A plugin load asks for this identity several
+ * times, and every launch is a new process, so streaming an 85 MB runtime each
+ * time cost about 0.9 s per launch. Without a store, or when that proof is
+ * unavailable, the file is streamed as before.
  *
- * @evidence contracts/performance.md#bound-retention-and-release-resources One descriptor and one fixed buffer belong to this synchronous call; finally attempts closure after read/observation failures as well as success. A close failure returns no identity but cannot confirm native release. Returned path/metadata/digest text transfers to the caller and no helper history survives. Opt-in opened/closed/close-failed observations carry one trace-only call id and actual descriptor, PID/thread and already observed physical identity. The existing finally performs the single close; no observer retries it or converts an unavailable identity to success. An observed close is release of this Node descriptor, not proof that an OS image lock or another actor has released the executable.
+ * @param runtime The executable, absolute.
+ * @param identities Optional record store of the caller's plugin cache.
+ * @evidence contracts/common.md#principled-implementation The identity joins lexical-link metadata, the selected physical file metadata and the SHA-256 of that file's bytes, streamed under metadata brackets or proven by a record whose separable signature still matches; descriptor and pathname observations must still agree after a read.
+ * @evidence contracts/common.md#clear-and-simple-design This one native owner supplies the same identity to runtime capability and plugin caches; the record store owns metadata reuse and a private helper owns the bracketed stream.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Metadata alone never stands for bytes: reuse needs a record written under unchanged separable metadata around an actual read, which a same-tick rewrite or restored timestamps cannot satisfy because change time and the minted reference move.
+ * @evidence contracts/common.md#meaningful-documentation Native prose explains absolute-path scope, failure meaning, the record proof and the remaining concurrent-mutation limitation, with separate prose and tags.
+ * @evidence contracts/portability.md#os-neutral-implementation Node native realpath and bigint stat preserve link/target identity on supported hosts; absolute paths use native platform semantics, and unreadable or non-regular targets cannot be reused.
+ * @evidence contracts/performance.md#efficient-algorithms A proven record costs three stats and one small file read; otherwise a sequential read hashes B bytes with one 64 KiB buffer instead of a complete executable allocation. Native path/realpath/stat observations and serialized metadata add text/lookup costs.
+ * @evidence contracts/performance.md#reuse-equivalent-work Processes share an executable digest only through the record store's separable-signature proof; without a store every call streams the file.
+ * @evidence contracts/performance.md#bound-retention-and-release-resources One descriptor and one fixed buffer belong to a streamed read; finally attempts closure after read/observation failures as well as success. A close failure returns no identity but cannot confirm native release. Opt-in opened/closed/close-failed observations carry one trace-only call id and actual descriptor, PID/thread and already observed physical identity. Records belong to the single-file collector.
  */
-export declare function runtimeExecutableIdentity(runtime: string): string | undefined;
+export declare function runtimeExecutableIdentity(runtime: string, identities?: PluginContentIdentities.Store): string | undefined;

package/lib/internal/runtimeExecutableIdentity.js

@@ -8,55 +8,41 @@ const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const node_path_1 = __importDefault(require("node:path"));
 const node_worker_threads_1 = require("node:worker_threads");
+const PluginContentIdentities_1 = require("../plugin/internal/source/PluginContentIdentities");
 const E2ETrace_1 = require("./E2ETrace");
 /**
  * Fingerprint an absolute executable's spelling, target and actual bytes.
  *
  * A changed link, file, or read failure yields no reusable identity. Metadata
- * brackets the streamed read; it is not used to reuse an earlier content hash.
- * Concurrent writes that evade every filesystem observation remain outside this
- * snapshot guarantee.
+ * brackets the streamed read. Concurrent writes that evade every filesystem
+ * observation remain outside this snapshot guarantee.
  *
- * @evidence contracts/common.md#principled-implementation The identity joins lexical-link metadata, the selected physical file metadata and SHA-256 of that opened file; matching metadata alone cannot authorize reuse after bytes change. Descriptor and pathname observations must still agree after reading.
- * @evidence contracts/common.md#clear-and-simple-design This one native owner supplies the same content proof to runtime capability and plugin caches; callers decide whether their other inputs permit reuse.
- * @evidence contracts/common.md#prohibited-implementation-shortcuts Supported Node filesystem and crypto APIs inspect the actual candidate; no fixture identity, foreign mutation or metadata-only shortcut substitutes for content.
- * @evidence contracts/common.md#meaningful-documentation Native prose explains absolute-path scope, failure meaning, hash freshness and the remaining concurrent-mutation limitation, with separate prose and tags.
- * @evidence contracts/portability.md#os-neutral-implementation Node native realpath and bigint stat preserve link/target identity on supported hosts; absolute paths use native platform semantics, and unreadable or non-regular targets cannot be reused.
- * @evidence contracts/performance.md#efficient-algorithms A sequential read hashes B bytes with one 64 KiB buffer instead of a complete executable allocation. Native path/realpath/stat observations and serialized physical spelling/metadata add text/lookup costs; B and spelling lengths have no quota here. Returned identity storage includes the physical path as well as the fixed-length digest.
- *
- * @evidenceExclude contracts/performance.md#reuse-equivalent-work This operation establishes whether later work is equivalent; retaining a digest by metadata would reproduce the stale-byte defect it must prevent.
+ * With a record store, the bytes of an unchanged executable are proven from its
+ * metadata instead of streamed again (`PluginContentIdentities`, #1723): the
+ * recorded digest stands only while the physical file's identity, size and both
+ * stamps match the record and its modification stamp is separable from a
+ * reference the store minted. A plugin load asks for this identity several
+ * times, and every launch is a new process, so streaming an 85 MB runtime each
+ * time cost about 0.9 s per launch. Without a store, or when that proof is
+ * unavailable, the file is streamed as before.
  *
- * @evidence contracts/performance.md#bound-retention-and-release-resources One descriptor and one fixed buffer belong to this synchronous call; finally attempts closure after read/observation failures as well as success. A close failure returns no identity but cannot confirm native release. Returned path/metadata/digest text transfers to the caller and no helper history survives. Opt-in opened/closed/close-failed observations carry one trace-only call id and actual descriptor, PID/thread and already observed physical identity. The existing finally performs the single close; no observer retries it or converts an unavailable identity to success. An observed close is release of this Node descriptor, not proof that an OS image lock or another actor has released the executable.
+ * @param runtime The executable, absolute.
+ * @param identities Optional record store of the caller's plugin cache.
+ * @evidence contracts/common.md#principled-implementation The identity joins lexical-link metadata, the selected physical file metadata and the SHA-256 of that file's bytes, streamed under metadata brackets or proven by a record whose separable signature still matches; descriptor and pathname observations must still agree after a read.
+ * @evidence contracts/common.md#clear-and-simple-design This one native owner supplies the same identity to runtime capability and plugin caches; the record store owns metadata reuse and a private helper owns the bracketed stream.
+ * @evidence contracts/common.md#prohibited-implementation-shortcuts Metadata alone never stands for bytes: reuse needs a record written under unchanged separable metadata around an actual read, which a same-tick rewrite or restored timestamps cannot satisfy because change time and the minted reference move.
+ * @evidence contracts/common.md#meaningful-documentation Native prose explains absolute-path scope, failure meaning, the record proof and the remaining concurrent-mutation limitation, with separate prose and tags.
+ * @evidence contracts/portability.md#os-neutral-implementation Node native realpath and bigint stat preserve link/target identity on supported hosts; absolute paths use native platform semantics, and unreadable or non-regular targets cannot be reused.
+ * @evidence contracts/performance.md#efficient-algorithms A proven record costs three stats and one small file read; otherwise a sequential read hashes B bytes with one 64 KiB buffer instead of a complete executable allocation. Native path/realpath/stat observations and serialized metadata add text/lookup costs.
+ * @evidence contracts/performance.md#reuse-equivalent-work Processes share an executable digest only through the record store's separable-signature proof; without a store every call streams the file.
+ * @evidence contracts/performance.md#bound-retention-and-release-resources One descriptor and one fixed buffer belong to a streamed read; finally attempts closure after read/observation failures as well as success. A close failure returns no identity but cannot confirm native release. Opt-in opened/closed/close-failed observations carry one trace-only call id and actual descriptor, PID/thread and already observed physical identity. Records belong to the single-file collector.
  */
-function runtimeExecutableIdentity(runtime) {
+function runtimeExecutableIdentity(runtime, identities) {
     if (!node_path_1.default.isAbsolute(runtime))
         return undefined;
     const startedAt = new Date().toISOString();
-    let descriptor;
-    let traceLease;
     let stage = "lexical-stat";
-    const unavailable = (reason, expected, observed, observations) => {
-        E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-unavailable", {
-            runtime,
-            stage,
-            reason,
-            expected,
-            observed,
-            expectedAtimeNs: observations === undefined
-                ? undefined
-                : String(observations.before.atimeNs),
-            observedAtimeNs: observations === undefined
-                ? undefined
-                : String(observations.after.atimeNs),
-            expectedBirthtimeNs: observations === undefined
-                ? undefined
-                : String(observations.before.birthtimeNs),
-            observedBirthtimeNs: observations === undefined
-                ? undefined
-                : String(observations.after.birthtimeNs),
-        });
-        return undefined;
-    };
+    let refused;
     try {
         const lexical = node_fs_1.default.lstatSync(runtime, { bigint: true });
         stage = "physical-realpath";
@@ -64,68 +50,23 @@ function runtimeExecutableIdentity(runtime) {
         stage = "physical-stat";
         const physical = node_fs_1.default.statSync(physicalPath, { bigint: true });
         if (!physical.isFile())
-            return unavailable("not-regular", undefined, fileIdentity(physical));
-        stage = "open";
-        descriptor = node_fs_1.default.openSync(physicalPath, "r");
-        if (process.env.TTSC_E2E_TRACE) {
-            traceLease = {
-                callId: String(++identityTraceOrdinal),
-                runtime,
-                physicalPath,
-                descriptor,
-                pid: process.pid,
-                threadId: node_worker_threads_1.threadId,
-                dev: String(physical.dev),
-                ino: String(physical.ino),
-            };
-            E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-opened", traceLease);
-        }
-        stage = "opened-stat";
-        const opened = node_fs_1.default.fstatSync(descriptor, { bigint: true });
-        if (fileIdentity(opened) !== fileIdentity(physical))
-            return unavailable("opened-file-changed", fileIdentity(physical), fileIdentity(opened));
-        const hash = node_crypto_1.default.createHash("sha256");
-        const buffer = Buffer.allocUnsafe(64 * 1024);
-        let remaining = opened.size;
-        stage = "read";
-        while (remaining > 0n) {
-            const requested = remaining > BigInt(buffer.length) ? buffer.length : Number(remaining);
-            const length = node_fs_1.default.readSync(descriptor, buffer, 0, requested, null);
-            if (length === 0)
-                return unavailable("premature-eof", String(opened.size), String(opened.size - remaining));
-            hash.update(buffer.subarray(0, length));
-            remaining -= BigInt(length);
-        }
-        stage = "post-read-opened-stat";
-        const afterOpened = node_fs_1.default.fstatSync(descriptor, { bigint: true });
-        if (fileIdentity(afterOpened) !== fileIdentity(opened))
-            return unavailable("opened-file-changed-during-read", fileIdentity(opened), fileIdentity(afterOpened), { before: opened, after: afterOpened });
-        stage = "post-read-realpath";
-        const afterPath = node_fs_1.default.realpathSync.native(runtime);
-        if (afterPath !== physicalPath)
-            return unavailable("physical-target-changed", physicalPath, afterPath);
-        stage = "post-read-lexical-stat";
-        const afterLexical = node_fs_1.default.lstatSync(runtime, { bigint: true });
-        if (fileIdentity(afterLexical) !== fileIdentity(lexical))
-            return unavailable("lexical-file-changed-during-read", fileIdentity(lexical), fileIdentity(afterLexical));
-        stage = "post-read-physical-stat";
-        const afterPhysical = node_fs_1.default.statSync(physicalPath, { bigint: true });
-        if (fileIdentity(afterPhysical) !== fileIdentity(physical))
-            return unavailable("physical-file-changed-during-read", fileIdentity(physical), fileIdentity(afterPhysical));
-        const digest = hash.digest("hex");
-        E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-observed", {
-            runtime,
-            physicalPath,
-            startedAt,
-            finishedAt: new Date().toISOString(),
-            lexical: fileIdentity(lexical),
-            physical: fileIdentity(physical),
-            digest,
-            openedAtimeNs: String(opened.atimeNs),
-            afterOpenedAtimeNs: String(afterOpened.atimeNs),
-            openedBirthtimeNs: String(opened.birthtimeNs),
-            afterOpenedBirthtimeNs: String(afterOpened.birthtimeNs),
-        });
+            return unavailable(runtime, {
+                stage,
+                reason: "not-regular",
+                observed: fileIdentity(physical),
+            });
+        const read = () => {
+            const streamed = streamDigest(runtime, physicalPath, physical, lexical, {
+                startedAt,
+            });
+            if (typeof streamed === "string")
+                return streamed;
+            refused = streamed;
+            throw new Error(streamed.reason);
+        };
+        const digest = identities === undefined
+            ? read()
+            : PluginContentIdentities_1.PluginContentIdentities.digest(identities, "executable", physicalPath, (references) => PluginContentIdentities_1.PluginContentIdentities.fileObservation(references, physicalPath), read);
         return [
             physicalPath,
             fileIdentity(lexical),
@@ -134,7 +75,48 @@ function runtimeExecutableIdentity(runtime) {
         ].join("\0");
     }
     catch (error) {
-        return unavailable("filesystem-error", undefined, error instanceof Error ? error.message : String(error));
+        return unavailable(runtime, refused ?? {
+            stage,
+            reason: "filesystem-error",
+            observed: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+function unavailable(runtime, failure) {
+    E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-unavailable", {
+        runtime,
+        stage: failure.stage,
+        reason: failure.reason,
+        expected: failure.expected,
+        observed: failure.observed,
+        expectedAtimeNs: failure.observations === undefined
+            ? undefined
+            : String(failure.observations.before.atimeNs),
+        observedAtimeNs: failure.observations === undefined
+            ? undefined
+            : String(failure.observations.after.atimeNs),
+        expectedBirthtimeNs: failure.observations === undefined
+            ? undefined
+            : String(failure.observations.before.birthtimeNs),
+        observedBirthtimeNs: failure.observations === undefined
+            ? undefined
+            : String(failure.observations.after.birthtimeNs),
+    });
+    return undefined;
+}
+/**
+ * Stream the physical file's bytes between metadata observations of the open
+ * descriptor, the physical path and the lexical spelling, returning the digest
+ * or what moved. The descriptor is closed in finally; a failed close refuses
+ * the identity.
+ */
+function streamDigest(runtime, physicalPath, physical, lexical, timing) {
+    let stage = "open";
+    let descriptor;
+    let traceLease;
+    let result;
+    try {
+        result = observe();
     }
     finally {
         if (descriptor !== undefined) {
@@ -149,11 +131,119 @@ function runtimeExecutableIdentity(runtime) {
                         ...traceLease,
                         error: error instanceof Error ? error.message : String(error),
                     });
-                stage = "close";
-                return unavailable("descriptor-close-error", undefined, error instanceof Error ? error.message : String(error));
+                // A digest whose descriptor could not be closed is refused, as before.
+                result = {
+                    stage: "close",
+                    reason: "descriptor-close-error",
+                    observed: error instanceof Error ? error.message : String(error),
+                };
             }
         }
     }
+    return result;
+    function observe() {
+        try {
+            descriptor = node_fs_1.default.openSync(physicalPath, "r");
+            if (process.env.TTSC_E2E_TRACE) {
+                traceLease = {
+                    callId: String(++identityTraceOrdinal),
+                    runtime,
+                    physicalPath,
+                    descriptor,
+                    pid: process.pid,
+                    threadId: node_worker_threads_1.threadId,
+                    dev: String(physical.dev),
+                    ino: String(physical.ino),
+                };
+                E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-opened", traceLease);
+            }
+            stage = "opened-stat";
+            const opened = node_fs_1.default.fstatSync(descriptor, { bigint: true });
+            if (fileIdentity(opened) !== fileIdentity(physical))
+                return {
+                    stage,
+                    reason: "opened-file-changed",
+                    expected: fileIdentity(physical),
+                    observed: fileIdentity(opened),
+                };
+            const hash = node_crypto_1.default.createHash("sha256");
+            const buffer = Buffer.allocUnsafe(64 * 1024);
+            let remaining = opened.size;
+            stage = "read";
+            while (remaining > 0n) {
+                const requested = remaining > BigInt(buffer.length) ? buffer.length : Number(remaining);
+                const length = node_fs_1.default.readSync(descriptor, buffer, 0, requested, null);
+                if (length === 0)
+                    return {
+                        stage,
+                        reason: "premature-eof",
+                        expected: String(opened.size),
+                        observed: String(opened.size - remaining),
+                    };
+                hash.update(buffer.subarray(0, length));
+                remaining -= BigInt(length);
+            }
+            stage = "post-read-opened-stat";
+            const afterOpened = node_fs_1.default.fstatSync(descriptor, { bigint: true });
+            if (fileIdentity(afterOpened) !== fileIdentity(opened))
+                return {
+                    stage,
+                    reason: "opened-file-changed-during-read",
+                    expected: fileIdentity(opened),
+                    observed: fileIdentity(afterOpened),
+                    observations: { before: opened, after: afterOpened },
+                };
+            stage = "post-read-realpath";
+            const afterPath = node_fs_1.default.realpathSync.native(runtime);
+            if (afterPath !== physicalPath)
+                return {
+                    stage,
+                    reason: "physical-target-changed",
+                    expected: physicalPath,
+                    observed: afterPath,
+                };
+            stage = "post-read-lexical-stat";
+            const afterLexical = node_fs_1.default.lstatSync(runtime, { bigint: true });
+            if (fileIdentity(afterLexical) !== fileIdentity(lexical))
+                return {
+                    stage,
+                    reason: "lexical-file-changed-during-read",
+                    expected: fileIdentity(lexical),
+                    observed: fileIdentity(afterLexical),
+                };
+            stage = "post-read-physical-stat";
+            const afterPhysical = node_fs_1.default.statSync(physicalPath, { bigint: true });
+            if (fileIdentity(afterPhysical) !== fileIdentity(physical))
+                return {
+                    stage,
+                    reason: "physical-file-changed-during-read",
+                    expected: fileIdentity(physical),
+                    observed: fileIdentity(afterPhysical),
+                };
+            const digest = hash.digest("hex");
+            E2ETrace_1.E2ETrace.capabilityResolution("runtime-executable-identity-observed", {
+                runtime,
+                physicalPath,
+                startedAt: timing.startedAt,
+                finishedAt: new Date().toISOString(),
+                lexical: fileIdentity(lexical),
+                physical: fileIdentity(physical),
+                digest,
+                openedAtimeNs: String(opened.atimeNs),
+                afterOpenedAtimeNs: String(afterOpened.atimeNs),
+                openedBirthtimeNs: String(opened.birthtimeNs),
+                afterOpenedBirthtimeNs: String(afterOpened.birthtimeNs),
+            });
+            return digest;
+        }
+        catch (error) {
+            return {
+                stage,
+                reason: "filesystem-error",
+                observed: error instanceof Error ? error.message : String(error),
+            };
+        }
+    }
 }
 // Trace-only ordinal distinguishes sequential uses of a reused descriptor.
 let identityTraceOrdinal = 0;

package/lib/internal/runtimeExecutableIdentity.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeExecutableIdentity.js","sourceRoot":"","sources":["../../src/internal/runtimeExecutableIdentity.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAiC;AACjC,sDAAyB;AACzB,0DAA6B;AAC7B,6DAA+C;AAE/C,yCAAsC;AAEtC;;;;;;;;;;;;;;;;;;GAkBG;AACH,mCAA0C,OAAe;IACvD,IAAI,CAAC,mBAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,UAA8B,CAAC;IACnC,IAAI,UAAiE,CAAC;IACtE,IAAI,KAAK,GAAG,cAAc,CAAC;IAC3B,MAAM,WAAW,GAAG,CAClB,MAAc,EACd,QAAiB,EACjB,QAAiB,EACjB,YAAgE,EAChE,EAAE;QACF,mBAAQ,CAAC,oBAAoB,CAAC,yCAAyC,EAAE;YACvE,OAAO;YACP,KAAK;YACL,MAAM;YACN,QAAQ;YACR,QAAQ;YACR,eAAe,EACb,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,eAAe,EACb,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;YACxC,mBAAmB,EACjB,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7C,mBAAmB,EACjB,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;SAC7C,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,KAAK,GAAG,mBAAmB,CAAC;QAC5B,MAAM,YAAY,GAAG,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,KAAK,GAAG,eAAe,CAAC;QACxB,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YACpB,OAAO,WAAW,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,KAAK,GAAG,MAAM,CAAC;QACf,UAAU,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,UAAU,GAAG;gBACX,MAAM,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC;gBACtC,OAAO;gBACP,YAAY;gBACZ,UAAU;gBACV,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAR,8BAAQ;gBACR,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzB,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;aAC1B,CAAC;YACF,mBAAQ,CAAC,oBAAoB,CAC3B,oCAAoC,EACpC,UAAU,CACX,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,aAAa,CAAC;QACtB,MAAM,MAAM,GAAG,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;YACjD,OAAO,WAAW,CAChB,qBAAqB,EACrB,YAAY,CAAC,QAAQ,CAAC,EACtB,YAAY,CAAC,MAAM,CAAC,CACrB,CAAC;QACJ,MAAM,IAAI,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,KAAK,GAAG,MAAM,CAAC;QACf,OAAO,SAAS,GAAG,EAAE,EAAE,CAAC;YACtB,MAAM,SAAS,GACb,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,iBAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,MAAM,KAAK,CAAC;gBACd,OAAO,WAAW,CAChB,eAAe,EACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EACnB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,CAChC,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YACxC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,GAAG,uBAAuB,CAAC;QAChC,MAAM,WAAW,GAAG,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,YAAY,CAAC,WAAW,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC;YACpD,OAAO,WAAW,CAChB,iCAAiC,EACjC,YAAY,CAAC,MAAM,CAAC,EACpB,YAAY,CAAC,WAAW,CAAC,EACzB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CACvC,CAAC;QACJ,KAAK,GAAG,oBAAoB,CAAC;QAC7B,MAAM,SAAS,GAAG,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,YAAY;YAC5B,OAAO,WAAW,CAAC,yBAAyB,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACzE,KAAK,GAAG,wBAAwB,CAAC;QACjC,MAAM,YAAY,GAAG,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC;YACtD,OAAO,WAAW,CAChB,kCAAkC,EAClC,YAAY,CAAC,OAAO,CAAC,EACrB,YAAY,CAAC,YAAY,CAAC,CAC3B,CAAC;QACJ,KAAK,GAAG,yBAAyB,CAAC;QAClC,MAAM,aAAa,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,YAAY,CAAC,aAAa,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;YACxD,OAAO,WAAW,CAChB,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CAAC,EACtB,YAAY,CAAC,aAAa,CAAC,CAC5B,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAQ,CAAC,oBAAoB,CAAC,sCAAsC,EAAE;YACpE,OAAO;YACP,YAAY;YACZ,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;YAC9B,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;YAChC,MAAM;YACN,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACrC,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;YAC/C,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;YAC7C,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC;SACxD,CAAC,CAAC;QACH,OAAO;YACL,YAAY;YACZ,YAAY,CAAC,OAAO,CAAC;YACrB,YAAY,CAAC,QAAQ,CAAC;YACtB,MAAM;SACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAChB,kBAAkB,EAClB,SAAS,EACT,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,iBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACzB,IAAI,UAAU,KAAK,SAAS;oBAC1B,mBAAQ,CAAC,oBAAoB,CAC3B,oCAAoC,EACpC,UAAU,CACX,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,KAAK,SAAS;oBAC1B,mBAAQ,CAAC,oBAAoB,CAC3B,0CAA0C,EAC1C;wBACE,GAAG,UAAU;wBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CACF,CAAC;gBACJ,KAAK,GAAG,OAAO,CAAC;gBAChB,OAAO,WAAW,CAChB,wBAAwB,EACxB,SAAS,EACT,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAoB;IACxC,OAAO;QACL,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,OAAO;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"runtimeExecutableIdentity.js","sourceRoot":"","sources":["../../src/internal/runtimeExecutableIdentity.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAiC;AACjC,sDAAyB;AACzB,0DAA6B;AAC7B,6DAA+C;AAE/C,+FAA4F;AAC5F,yCAAsC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,mCACE,OAAe,EACf,UAA0C;IAE1C,IAAI,CAAC,mBAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,KAAK,GAAG,cAAc,CAAC;IAC3B,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,KAAK,GAAG,mBAAmB,CAAC;QAC5B,MAAM,YAAY,GAAG,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrD,KAAK,GAAG,eAAe,CAAC;QACxB,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YACpB,OAAO,WAAW,CAAC,OAAO,EAAE;gBAC1B,KAAK;gBACL,MAAM,EAAE,aAAa;gBACrB,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;aACjC,CAAC,CAAC;QACL,MAAM,IAAI,GAAG,GAAW,EAAE;YACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE;gBACtE,SAAS;aACV,CAAC,CAAC;YACH,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAClD,OAAO,GAAG,QAAQ,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,MAAM,MAAM,GACV,UAAU,KAAK,SAAS;YACtB,CAAC,CAAC,IAAI,EAAE;YACR,CAAC,CAAC,iDAAuB,CAAC,MAAM,CAC5B,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,CAAC,UAAU,EAAE,EAAE,CACb,iDAAuB,CAAC,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,EACnE,IAAI,CACL,CAAC;QACR,OAAO;YACL,YAAY;YACZ,YAAY,CAAC,OAAO,CAAC;YACrB,YAAY,CAAC,QAAQ,CAAC;YACtB,MAAM;SACP,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAChB,OAAO,EACP,OAAO,IAAI;YACT,KAAK;YACL,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACjE,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAWD,SAAS,WAAW,CAAC,OAAe,EAAE,OAAqB;IACzD,mBAAQ,CAAC,oBAAoB,CAAC,yCAAyC,EAAE;QACvE,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EACb,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC;QACjD,eAAe,EACb,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,mBAAmB,EACjB,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC;QACrD,mBAAmB,EACjB,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;KACrD,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,OAAe,EACf,YAAoB,EACpB,QAAwB,EACxB,OAAuB,EACvB,MAA6B;IAE7B,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,UAA8B,CAAC;IACnC,IAAI,UAAiE,CAAC;IACtE,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,EAAE,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,iBAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACzB,IAAI,UAAU,KAAK,SAAS;oBAC1B,mBAAQ,CAAC,oBAAoB,CAC3B,oCAAoC,EACpC,UAAU,CACX,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,KAAK,SAAS;oBAC1B,mBAAQ,CAAC,oBAAoB,CAC3B,0CAA0C,EAC1C;wBACE,GAAG,UAAU;wBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CACF,CAAC;gBACJ,uEAAuE;gBACvE,MAAM,GAAG;oBACP,KAAK,EAAE,OAAO;oBACd,MAAM,EAAE,wBAAwB;oBAChC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;IAEd,SAAS,OAAO;QACd,IAAI,CAAC;YACH,UAAU,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;gBAC/B,UAAU,GAAG;oBACX,MAAM,EAAE,MAAM,CAAC,EAAE,oBAAoB,CAAC;oBACtC,OAAO;oBACP,YAAY;oBACZ,UAAU;oBACV,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,QAAQ,EAAR,8BAAQ;oBACR,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACzB,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;iBAC1B,CAAC;gBACF,mBAAQ,CAAC,oBAAoB,CAC3B,oCAAoC,EACpC,UAAU,CACX,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,aAAa,CAAC;YACtB,MAAM,MAAM,GAAG,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;gBACjD,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,qBAAqB;oBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;oBAChC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;iBAC/B,CAAC;YACJ,MAAM,IAAI,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC5B,KAAK,GAAG,MAAM,CAAC;YACf,OAAO,SAAS,GAAG,EAAE,EAAE,CAAC;gBACtB,MAAM,SAAS,GACb,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACxE,MAAM,MAAM,GAAG,iBAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAI,MAAM,KAAK,CAAC;oBACd,OAAO;wBACL,KAAK;wBACL,MAAM,EAAE,eAAe;wBACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;wBAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC;qBAC1C,CAAC;gBACJ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACxC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,GAAG,uBAAuB,CAAC;YAChC,MAAM,WAAW,GAAG,iBAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,YAAY,CAAC,WAAW,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC;gBACpD,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,iCAAiC;oBACzC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;oBAC9B,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC;oBACnC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE;iBACrD,CAAC;YACJ,KAAK,GAAG,oBAAoB,CAAC;YAC7B,MAAM,SAAS,GAAG,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,YAAY;gBAC5B,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,yBAAyB;oBACjC,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,SAAS;iBACpB,CAAC;YACJ,KAAK,GAAG,wBAAwB,CAAC;YACjC,MAAM,YAAY,GAAG,iBAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC;gBACtD,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,kCAAkC;oBAC1C,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC;oBAC/B,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC;iBACrC,CAAC;YACJ,KAAK,GAAG,yBAAyB,CAAC;YAClC,MAAM,aAAa,GAAG,iBAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,YAAY,CAAC,aAAa,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC;gBACxD,OAAO;oBACL,KAAK;oBACL,MAAM,EAAE,mCAAmC;oBAC3C,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;oBAChC,QAAQ,EAAE,YAAY,CAAC,aAAa,CAAC;iBACtC,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,mBAAQ,CAAC,oBAAoB,CAAC,sCAAsC,EAAE;gBACpE,OAAO;gBACP,YAAY;gBACZ,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;gBAC9B,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;gBAChC,MAAM;gBACN,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACrC,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;gBAC/C,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7C,sBAAsB,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAoB;IACxC,OAAO;QACL,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,OAAO;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/lib/launcher/internal/runtime/installRuntimeHooks.js

@@ -15,11 +15,13 @@ const runBuild_1 = require("../../../compiler/internal/build/runBuild");
 const readProjectConfig_1 = require("../../../compiler/internal/project/readProjectConfig");
 const resolveOwningProjectConfig_1 = require("../../../compiler/internal/project/resolveOwningProjectConfig");
 const resolveTsgo_1 = require("../../../compiler/internal/resolveTsgo");
+const SidecarEnvironment_1 = require("../../../compiler/internal/sharedHost/SidecarEnvironment");
 const spawnNative_1 = require("../../../compiler/internal/spawnNative");
 const E2ETrace_1 = require("../../../internal/E2ETrace");
 const createCanonicalTempDirectory_1 = require("../../../internal/createCanonicalTempDirectory");
 const runtimeExecutableIdentity_1 = require("../../../internal/runtimeExecutableIdentity");
 const moduleResolutionBaseSelects_1 = require("../../../plugin/internal/load/moduleResolutionBaseSelects");
+const PluginContentIdentities_1 = require("../../../plugin/internal/source/PluginContentIdentities");
 const recordCacheFileUse_1 = require("../../../plugin/internal/source/recordCacheFileUse");
 const buildSingleRootProject_1 = require("../buildSingleRootProject");
 const inlineServedSourceMap_1 = require("../inlineServedSourceMap");
@@ -547,6 +549,17 @@ function observePluginDescriptorInputOnce(record) {
             (record.hash !== undefined && record.hash !== observedHash) ||
             (record.realpath !== undefined && record.realpath !== observedRealpath) ||
             (record.signature !== undefined && record.signature !== afterSignature);
+        // A missing path's signature is its nearest existing ancestor's metadata,
+        // so a write anywhere in that ancestor refuses the proof; the trace names
+        // which observation moved.
+        if (unstable)
+            E2ETrace_1.E2ETrace.capabilityResolution("plugin-descriptor-input-unstable", {
+                resolved: record.resolved,
+                recordedSignature: record.signature,
+                beforeSignature,
+                afterSignature,
+                hashChanged: record.hash !== undefined && record.hash !== observedHash,
+            });
         return `${JSON.stringify({
             ...record,
             hash: observedHash,
@@ -1189,11 +1202,52 @@ function orphanCacheRoot() {
  * Read afresh at every use, never remembered by path: a long-lived process can
  * lower orphans before and after the compiler at that path is replaced, and an
  * entry lowered by the new one must not be recorded under the old one's key for
- * a later process to adopt.
+ * a later process to adopt. A fresh use proves an unchanged compiler from the
+ * run's plugin cache records (`runtimeRecordStore`), which observe its metadata
+ * again each time.
  */
 function compilerIdentity(binary) {
-    return (0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)(binary) ?? node_crypto_1.default.randomUUID();
+    return ((0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)(binary, runtimeRecordStore()) ??
+        node_crypto_1.default.randomUUID());
+}
+/**
+ * The record store of this run's plugin cache root, or `undefined` without one.
+ *
+ * WARNING (#1726): every ttsx process and every descriptor evaluation streamed
+ * the whole compiler executable (24.5 MB) to key its orphan and dependency
+ * builds, although the bytes had not changed since the last process. The root
+ * is the one a descriptor evaluator's parent load selected
+ * (`TTSC_PLUGIN_RECORD_ROOT`), or the cache root of this run's manifest; a
+ * process with neither streams as before and never selects a root itself.
+ */
+function runtimeRecordStore() {
+    const descriptorRoot = process.env.TTSC_PLUGIN_DESCRIPTOR_LOAD === "1"
+        ? SidecarEnvironment_1.SidecarEnvironment.read(process.env, "TTSC_PLUGIN_RECORD_ROOT")
+        : undefined;
+    const owner = RuntimeManifestRegistry_1.RuntimeManifestRegistry.runtimeManifests().find((candidate) => typeof candidate.orphanCacheDir === "string" &&
+        candidate.orphanCacheDir.length !== 0);
+    const root = descriptorRoot !== undefined && node_path_1.default.isAbsolute(descriptorRoot)
+        ? descriptorRoot
+        : owner === undefined
+            ? undefined
+            : node_path_1.default.dirname(owner.orphanCacheDir);
+    if (root === undefined)
+        return undefined;
+    // One store per root serves the process: its references only grow older,
+    // which can make fewer stamps separable but never more, and each identity
+    // still observes the compiler's metadata afresh.
+    if (runtimeStore?.root !== root)
+        runtimeStore = {
+            root,
+            store: PluginContentIdentities_1.PluginContentIdentities.open({
+                projectRoot: root,
+                cacheDir: root,
+                env: process.env,
+            }),
+        };
+    return runtimeStore.store;
 }
+let runtimeStore;
 /** The version of this ttsc package, which owns the orphan post-processing. */
 function ownPackageVersion() {
     if (ownPackageVersionCache === undefined) {
@@ -1627,7 +1681,7 @@ const failedProjects = new Map();
 function dependencyCachePaths(tsconfig, rootSource) {
     let compilerProof;
     try {
-        compilerProof = (0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)((0, resolveTsgo_1.resolveTsgo)({ cwd: node_path_1.default.dirname(tsconfig) }).binary);
+        compilerProof = (0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)((0, resolveTsgo_1.resolveTsgo)({ cwd: node_path_1.default.dirname(tsconfig) }).binary, runtimeRecordStore());
     }
     catch {
         // An unobservable executable gets a unique, non-reusable generation key.
@@ -1653,7 +1707,7 @@ function assertCompilerStillCurrent(tsconfig, proof) {
     if (proof === undefined)
         return;
     const binary = (0, resolveTsgo_1.resolveTsgo)({ cwd: node_path_1.default.dirname(tsconfig) }).binary;
-    const current = (0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)(binary);
+    const current = (0, runtimeExecutableIdentity_1.runtimeExecutableIdentity)(binary, runtimeRecordStore());
     if (current !== proof) {
         E2ETrace_1.E2ETrace.capabilityResolution("runtime-compiler-publication-refused", {
             tsconfig,