@0xmaxma/claude-gateway 2.0.5 → 2.0.7

package/dist/safemode/external-owners.js

@@ -0,0 +1,229 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalOwnerFound = void 0;
+exports.assertNoExternalNativeOwner = assertNoExternalNativeOwner;
+exports.findExternalNativeOwners = findExternalNativeOwners;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+function vanished(error) {
+    return ['ENOENT', 'ESRCH'].includes(error.code || '');
+}
+class ExternalOwnerFound extends Error {
+    constructor(pid) {
+        super(`Busy: external native CLI process ${pid} may own this conversation. Close it before resuming; safemode will not stop an unmanaged process.`);
+        this.pid = pid;
+    }
+}
+exports.ExternalOwnerFound = ExternalOwnerFound;
+function busy(pid) {
+    throw new ExternalOwnerFound(pid);
+}
+function startTime(pid) {
+    try {
+        const stat = fs_1.default.readFileSync(`/proc/${pid}/stat`, 'utf8');
+        const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+        return fields[0] === 'Z' ? undefined : fields[19];
+    }
+    catch (error) {
+        if (vanished(error))
+            return undefined;
+        throw error;
+    }
+}
+function nativeName(value, cli) {
+    const base = path_1.default.basename(value).toLowerCase();
+    return cli === 'claude' ? /^(claude|claude\.exe)$/.test(base) : /^(codex|codex\.exe)$/.test(base);
+}
+/**
+ * A conservative preflight, NOT a cross-process lock. Native Claude --resume can
+ * bypass safemode's lock. Recheck immediately before spawn and while running.
+ * Native Codex versions with writer locks enforce their own atomic exclusion.
+ * Only process/registry metadata is inspected; never auth, prompts or histories.
+ */
+function inspectExternalNativeOwner(options) {
+    if (process.platform !== 'linux') {
+        throw new Error('Safemode cannot verify external native session ownership on this platform (Linux /proc is required).');
+    }
+    const ignored = new Set([process.pid, ...(options.ignorePids || [])]);
+    // A native launcher can spawn its actual CLI; all verified managed descendants
+    // share that managed ownership and must not be mistaken for external clients.
+    const parents = new Map();
+    for (const entry of fs_1.default.readdirSync('/proc')) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        try {
+            const stat = fs_1.default.readFileSync(`/proc/${entry}/stat`, 'utf8');
+            parents.set(Number(entry), Number(stat.slice(stat.lastIndexOf(')') + 2).split(' ')[1]));
+        }
+        catch (error) {
+            if (!vanished(error))
+                throw error;
+        }
+    }
+    // Only child roots supplied explicitly, never every descendant of this supervisor.
+    const managed = new Set(options.ignorePids || []);
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const [pid, parent] of parents)
+            if (managed.has(parent) && !managed.has(pid)) {
+                managed.add(pid);
+                changed = true;
+            }
+    }
+    for (const pid of managed)
+        ignored.add(pid);
+    const env = options.env || process.env;
+    const home = env.HOME || os_1.default.homedir();
+    const nativeHome = options.cli === 'claude'
+        ? env.CLAUDE_CONFIG_DIR || path_1.default.join(home, '.claude')
+        : env.CODEX_HOME || path_1.default.join(home, '.codex');
+    const knownRegistry = new Map();
+    if (options.cli === 'claude') {
+        const registry = path_1.default.join(nativeHome, 'sessions');
+        let files = [];
+        try {
+            files = fs_1.default.readdirSync(registry);
+        }
+        catch (error) {
+            if (!vanished(error))
+                throw new Error('Cannot verify external Claude session ownership: registry is unreadable.');
+        }
+        for (const file of files) {
+            if (!/^\d+\.json$/.test(file))
+                continue;
+            const pid = Number(file.slice(0, -5));
+            if (ignored.has(pid))
+                continue;
+            const liveStart = startTime(pid);
+            if (!liveStart)
+                continue;
+            let record;
+            try {
+                record = JSON.parse(fs_1.default.readFileSync(path_1.default.join(registry, file), 'utf8'));
+            }
+            catch (error) {
+                if (vanished(error))
+                    continue;
+                throw new Error(`Cannot verify external Claude session ownership for process ${pid}: registry is unreadable.`);
+            }
+            if (record.pid !== pid)
+                throw new Error(`Cannot verify external Claude session ownership for process ${pid}: registry PID mismatch.`);
+            // Older registries lacking a start identity cannot disprove a live owner.
+            if (record.procStart !== undefined && String(record.procStart) !== liveStart)
+                continue;
+            knownRegistry.set(pid, record);
+            if (options.nativeSessionId ? record.sessionId === options.nativeSessionId : record.cwd === options.cwd)
+                busy(pid);
+        }
+    }
+    for (const entry of fs_1.default.readdirSync('/proc')) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        const pid = Number(entry);
+        if (ignored.has(pid))
+            continue;
+        const root = `/proc/${pid}`;
+        try {
+            if (typeof process.getuid === 'function' && fs_1.default.statSync(root).uid !== process.getuid())
+                continue;
+            if (!startTime(pid))
+                continue;
+            const argv = fs_1.default.readFileSync(path_1.default.join(root, 'cmdline'), 'utf8').split('\0').filter(Boolean);
+            // Filter before opening exe/environ/fds: unrelated same-user services can
+            // deliberately make those files unreadable (e.g. non-dumpable daemons).
+            const candidate = [argv[0] || '', argv[1] || ''].some(value => nativeName(value, options.cli));
+            if (!candidate)
+                continue;
+            // Native homes are distinct stores, so the same UUID in another home is
+            // not this conversation. Extract only these three routing keys; never
+            // return, log or include process environment/arguments in errors.
+            const routing = {};
+            for (const field of fs_1.default.readFileSync(path_1.default.join(root, 'environ'), 'utf8').split('\0')) {
+                const equals = field.indexOf('=');
+                if (equals < 0)
+                    continue;
+                const key = field.slice(0, equals);
+                if (['HOME', 'CLAUDE_CONFIG_DIR', 'CODEX_HOME'].includes(key))
+                    routing[key] = field.slice(equals + 1);
+            }
+            const processHome = options.cli === 'claude'
+                ? routing.CLAUDE_CONFIG_DIR || (routing.HOME ? path_1.default.join(routing.HOME, '.claude') : undefined)
+                : routing.CODEX_HOME || (routing.HOME ? path_1.default.join(routing.HOME, '.codex') : undefined);
+            if (processHome && path_1.default.resolve(processHome) !== path_1.default.resolve(nativeHome))
+                continue;
+            if (!processHome)
+                throw new Error(`Cannot verify external native session ownership for process ${pid}: native home is unknown.`);
+            const record = knownRegistry.get(pid);
+            if (record && options.nativeSessionId && record.sessionId)
+                continue;
+            const cwd = fs_1.default.readlinkSync(path_1.default.join(root, 'cwd'));
+            if (cwd === options.cwd)
+                busy(pid);
+            if (options.nativeSessionId) {
+                for (let i = 0; i < argv.length; i++) {
+                    if (['--resume', '-r', '--session-id', 'resume'].includes(argv[i]) && argv[i + 1] === options.nativeSessionId)
+                        busy(pid);
+                    if (argv[i] === `--resume=${options.nativeSessionId}` || argv[i] === `--session-id=${options.nativeSessionId}`)
+                        busy(pid);
+                }
+                // Codex app-server and resume picker need no UUID in argv. A live file
+                // descriptor proves access even when the CLI holds a kernel writer lock.
+                for (const fd of fs_1.default.readdirSync(path_1.default.join(root, 'fd'))) {
+                    let target;
+                    try {
+                        target = fs_1.default.readlinkSync(path_1.default.join(root, 'fd', fd)).replace(/ \(deleted\)$/, '');
+                    }
+                    catch (error) {
+                        if (vanished(error))
+                            continue;
+                        throw error;
+                    }
+                    const name = path_1.default.basename(target);
+                    if ((target.startsWith(path_1.default.join(nativeHome, 'thread-writer-locks') + path_1.default.sep) && name === `${options.nativeSessionId}.lock`)
+                        || (target.startsWith(path_1.default.join(nativeHome, 'sessions') + path_1.default.sep) && name.endsWith(`-${options.nativeSessionId}.jsonl`)))
+                        busy(pid);
+                }
+                // Claude can switch conversations without changing argv. An unregistered
+                // live Claude in this user context cannot be ruled out safely.
+                if (options.cli === 'claude' && !record) {
+                    throw new Error(`Cannot verify external Claude session ownership for process ${pid}: no current native session registration. Close it before resuming.`);
+                }
+            }
+        }
+        catch (error) {
+            if (vanished(error))
+                continue;
+            if (error.code === 'EACCES' || error.code === 'EPERM') {
+                throw new Error(`Cannot verify external native session ownership for process ${pid}: process metadata is inaccessible.`);
+            }
+            throw error;
+        }
+    }
+}
+function assertNoExternalNativeOwner(options) {
+    inspectExternalNativeOwner(options);
+}
+/** Minimal ownership evidence only; never expose native argv or transcript text. */
+function findExternalNativeOwners(options) {
+    const owners = [];
+    const ignored = [...(options.ignorePids || [])];
+    for (let count = 0; count < 64; count++) {
+        try {
+            inspectExternalNativeOwner({ ...options, ignorePids: ignored });
+            return owners;
+        }
+        catch (error) {
+            if (!(error instanceof ExternalOwnerFound))
+                throw error;
+            owners.push({ pid: error.pid });
+            ignored.push(error.pid);
+        }
+    }
+    throw new Error('Too many external native owners to verify safely.');
+}
+//# sourceMappingURL=external-owners.js.map

package/dist/safemode/external-owners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-owners.js","sourceRoot":"","sources":["../../src/safemode/external-owners.ts"],"names":[],"mappings":";;;;;;AA8JA,kEAEC;AAGD,4DAYC;AA/KD,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAYxB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AACD,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAqB,GAAW;QAAI,KAAK,CAAC,qCAAqC,GAAG,oGAAoG,CAAC,CAAC;QAAnK,QAAG,GAAH,GAAG,CAAQ;IAAyJ,CAAC;CAC3L;AAFD,gDAEC;AACD,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzE,CAAC;AACD,SAAS,UAAU,CAAC,KAAa,EAAE,GAAgB;IACjD,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,OAA6B;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACxD,CAAC;IACD,mFAAmF;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,YAAE,CAAC,OAAO,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ;QACzC,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrD,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAgD,CAAC;IAC9E,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,KAAK,GAAG,YAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QACpH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,IAAI,MAA8E,CAAC;YACnF,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAChF,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC9B,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,2BAA2B,CAAC,CAAC;YACjH,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,0BAA0B,CAAC,CAAC;YACtI,0EAA0E;YAC1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS;gBAAE,SAAS;YACvF,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;gBAAE,SAAS;YACjG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7F,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,wEAAwE;YACxE,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,GAAG,CAAC;oBAAE,SAAS;gBACzB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ;gBAC1C,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9F,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzF,IAAI,WAAW,IAAI,cAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,SAAS;YACpF,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,2BAA2B,CAAC,CAAC;YACjI,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,MAAM,IAAI,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YACpE,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpD,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,eAAe;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;oBACzH,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB,OAAO,CAAC,eAAe,EAAE;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5H,CAAC;gBACD,uEAAuE;gBACvE,yEAAyE;gBACzE,KAAK,MAAM,EAAE,IAAI,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBACvD,IAAI,MAAc,CAAC;oBACnB,IAAI,CAAC;wBAAC,MAAM,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;oBAAC,CAAC;oBACzF,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;4BAAE,SAAS;wBAAC,MAAM,KAAK,CAAC;oBAAC,CAAC;oBAC7D,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,OAAO,CAAC,eAAe,OAAO,CAAC;2BACvH,CAAC,MAAM,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,eAAe,QAAQ,CAAC,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5I,CAAC;gBACD,yEAAyE;gBACzE,+DAA+D;gBAC/D,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,qEAAqE,CAAC,CAAC;gBAC3J,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5G,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,qCAAqC,CAAC,CAAC;YAC3H,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAA6B;IACvE,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,SAAgB,wBAAwB,CAAC,OAA6B;IACpE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YAAC,0BAA0B,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACvF,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC"}

package/dist/safemode/native.d.ts

@@ -0,0 +1,38 @@
+export type SafemodeCli = 'claude' | 'codex';
+export interface NativeOptions {
+    cli: SafemodeCli;
+    mode: 'interactive' | 'headless';
+    cwd: string;
+    prompt?: string;
+    context?: string;
+    model?: string;
+    nativeSessionId?: string;
+    resume?: boolean;
+    nativeArgs?: string[];
+    nativeResumeIndex?: number;
+    env?: NodeJS.ProcessEnv;
+}
+export interface NativeInvocation {
+    command: string;
+    args: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    nativeSessionId?: string;
+}
+/** Only credentials used by the selected native provider belong in its environment. */
+export declare function nativeEnvironment(cli: SafemodeCli, source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Args are passed directly to spawn, never evaluated by a shell. */
+export declare function buildNativeInvocation(options: NativeOptions): NativeInvocation;
+/** Only authoritative init events identify a conversation; arbitrary tool JSON cannot. */
+export declare function extractNativeSessionId(cli: SafemodeCli, line: string): string | undefined;
+/**
+ * Codex interactive has no --session-id. Match the persisted session_meta to the
+ * dedicated safemode cwd and launch time, never `resume --last` or global history.
+ * Read only today's/newer date directories and a bounded first line per rollout.
+ */
+export declare function discoverCodexSession(options: {
+    cwd: string;
+    startedAt: number | string;
+    codexHome?: string;
+}): string | undefined;
+//# sourceMappingURL=native.d.ts.map

package/dist/safemode/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/safemode/native.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AACD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAW9G;AAoBD,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAkE9E;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQzF;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CA0CjI"}

package/dist/safemode/native.js

@@ -0,0 +1,220 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nativeEnvironment = nativeEnvironment;
+exports.buildNativeInvocation = buildNativeInvocation;
+exports.extractNativeSessionId = extractNativeSessionId;
+exports.discoverCodexSession = discoverCodexSession;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
+const claude_bin_1 = require("../session/claude-bin");
+const codex_policy_1 = require("../session/codex-policy");
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Only credentials used by the selected native provider belong in its environment. */
+function nativeEnvironment(cli, source = process.env) {
+    const env = {};
+    const common = /^(HOME|USER|LOGNAME|PATH|SHELL|TERM|COLORTERM|TERM_PROGRAM|TERM_PROGRAM_VERSION|COLORFGBG|NO_COLOR|FORCE_COLOR|CLICOLOR|CLICOLOR_FORCE|TMUX|TMUX_PANE|LANG|LC_[A-Z_]+|TZ|TMPDIR|TEMP|TMP|XDG_CONFIG_HOME|XDG_CACHE_HOME|XDG_DATA_HOME|XDG_RUNTIME_DIR|DBUS_SESSION_BUS_ADDRESS|HTTP_PROXY|HTTPS_PROXY|ALL_PROXY|NO_PROXY|http_proxy|https_proxy|all_proxy|no_proxy|SSL_CERT_FILE|SSL_CERT_DIR|NODE_EXTRA_CA_CERTS)$/;
+    const provider = cli === 'claude'
+        ? /^(CLAUDE_CONFIG_DIR|ANTHROPIC_API_KEY|ANTHROPIC_AUTH_TOKEN|ANTHROPIC_BASE_URL|ANTHROPIC_MODEL|CLAUDE_CODE_OAUTH_TOKEN|CLAUDE_CODE_USE_BEDROCK|CLAUDE_CODE_USE_VERTEX|CLAUDE_CODE_USE_FOUNDRY|AWS_[A-Z_]+|GOOGLE_APPLICATION_CREDENTIALS|ANTHROPIC_VERTEX_PROJECT_ID|CLOUD_ML_REGION|ANTHROPIC_FOUNDRY_[A-Z_]+)$/
+        : /^(CODEX_HOME|CODEX_ACCESS_TOKEN|OPENAI_API_KEY|OPENAI_BASE_URL|OPENAI_ORG_ID|OPENAI_PROJECT_ID)$/;
+    for (const [key, value] of Object.entries(source)) {
+        if (value !== undefined && (common.test(key) || provider.test(key)))
+            env[key] = value;
+    }
+    // Never propagate gateway leases, SDK nesting, shell injection or GitHub credentials.
+    return env;
+}
+function disabledCodexServers(command, cwd, env) {
+    // Empty TOML tables merge with user config; setting mcp_servers={} is NOT isolation.
+    // Listing parses configuration only and never starts an MCP server.
+    let servers;
+    try {
+        servers = JSON.parse((0, child_process_1.execFileSync)(command, ['mcp', 'list', '--json'], {
+            cwd, env, encoding: 'utf8', timeout: 10000, maxBuffer: 1024 * 1024,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        }));
+    }
+    catch {
+        throw new Error('Cannot inspect Codex MCP configuration safely. Check `codex mcp list --json` before starting safemode.');
+    }
+    if (!Array.isArray(servers) || servers.some(server => typeof server?.name !== 'string')) {
+        throw new Error('Unsupported Codex MCP configuration output; safemode did not launch.');
+    }
+    return servers.flatMap(server => ['-c', `mcp_servers.${JSON.stringify(server.name)}.enabled=false`]);
+}
+/** Args are passed directly to spawn, never evaluated by a shell. */
+function buildNativeInvocation(options) {
+    if (options.nativeArgs !== undefined && options.mode !== 'interactive')
+        throw new Error('Native params are interactive-only');
+    if (options.resume && !options.nativeSessionId)
+        throw new Error('Native session ID is required to resume.');
+    if (options.nativeSessionId && !UUID.test(options.nativeSessionId))
+        throw new Error('Invalid native session ID.');
+    let env = nativeEnvironment(options.cli, options.env);
+    let model = options.model && options.model !== 'inherit' ? options.model : undefined;
+    if (options.cli === 'claude' && options.mode === 'headless') {
+        // --restricted excludes settings customizations. Preserve only native auth
+        // environment and model preference, never hooks, commands or permission grants.
+        let nativeModel;
+        try {
+            const settings = JSON.parse(fs_1.default.readFileSync(path_1.default.join(env.CLAUDE_CONFIG_DIR || path_1.default.join(env.HOME || os_1.default.homedir(), '.claude'), 'settings.json'), 'utf8'));
+            const auth = {};
+            if (settings.env && typeof settings.env === 'object') {
+                for (const [key, value] of Object.entries(settings.env)) {
+                    if (/^(ANTHROPIC_|CLAUDE_CODE_(OAUTH_TOKEN|USE_)|AWS_|GOOGLE_APPLICATION_CREDENTIALS$|CLOUD_ML_REGION$)/.test(key) && typeof value === 'string')
+                        auth[key] = value;
+                }
+            }
+            env = { ...nativeEnvironment('claude', auth), ...env };
+            if (typeof settings.model === 'string' && settings.model.trim())
+                nativeModel = settings.model;
+        }
+        catch { /* No explicit native settings: CLI chooses its own defaults/auth. */ }
+        if (!model)
+            model = env.ANTHROPIC_MODEL || nativeModel;
+    }
+    const prompt = [options.context, options.prompt].filter(Boolean).join('\n\n');
+    if (options.nativeArgs !== undefined) {
+        // Explicit operator options replace interactive defaults, never headless restrictions.
+        const args = [...options.nativeArgs];
+        let prefix = 0;
+        if (model && !args.some(a => a === '--model' || a === '-m' || a.startsWith('--model=') || a.startsWith('-m='))) {
+            args.unshift('--model', model);
+            prefix = 2;
+        }
+        const nativeSessionId = options.nativeSessionId || (options.cli === 'claude' ? (0, crypto_1.randomUUID)() : undefined);
+        if (options.cli === 'claude')
+            args.push(options.resume ? '--resume' : '--session-id', nativeSessionId);
+        else if (options.resume)
+            args.splice(prefix + (options.nativeResumeIndex ?? 0), 0, 'resume', nativeSessionId);
+        if (options.cli === 'codex')
+            args.push('--cd', options.cwd);
+        if (prompt)
+            args.push('--', prompt);
+        const command = options.cli === 'claude' ? options.env?.CLAUDE_BIN || process.env.CLAUDE_BIN || (0, claude_bin_1.resolveClaudeBin)(env).bin : options.env?.CODEX_BIN || process.env.CODEX_BIN || 'codex';
+        return { command, args, env, cwd: options.cwd, nativeSessionId };
+    }
+    if (options.cli === 'claude') {
+        const command = options.env?.CLAUDE_BIN || process.env.CLAUDE_BIN || (0, claude_bin_1.resolveClaudeBin)(env).bin;
+        const nativeSessionId = options.nativeSessionId || (0, crypto_1.randomUUID)();
+        const args = ['--safe-mode', '--strict-mcp-config', '--permission-mode', options.mode === 'headless' ? 'dontAsk' : 'manual'];
+        if (options.mode === 'headless')
+            args.push('--restricted', '--print', '--output-format', 'stream-json', '--verbose', '--tools', 'Read,Glob,Grep');
+        args.push(options.resume ? '--resume' : '--session-id', nativeSessionId);
+        if (model)
+            args.push('--model', model);
+        if (prompt)
+            args.push('--', prompt);
+        return { command, args, env, cwd: options.cwd, nativeSessionId };
+    }
+    const command = options.env?.CODEX_BIN || process.env.CODEX_BIN || 'codex';
+    const args = [
+        ...(0, codex_policy_1.codexPolicyArgs)(),
+        '-c', 'shell_environment_policy.inherit="none"',
+        '-c', 'shell_environment_policy.set={}',
+        '-c', 'sandbox_mode="read-only"',
+        '-c', `approval_policy="${options.mode === 'headless' ? 'never' : 'on-request'}"`,
+        ...disabledCodexServers(command, options.cwd, env),
+    ];
+    if (model)
+        args.push('--model', model);
+    if (options.mode === 'headless') {
+        args.push('exec', '--cd', options.cwd, '--json', '--ignore-rules', '--skip-git-repo-check');
+        if (options.resume)
+            args.push('resume', options.nativeSessionId);
+    }
+    else {
+        if (options.resume)
+            args.push('resume', options.nativeSessionId);
+        args.push('--cd', options.cwd);
+    }
+    if (prompt)
+        args.push('--', prompt);
+    return { command, args, env, cwd: options.cwd, nativeSessionId: options.nativeSessionId };
+}
+/** Only authoritative init events identify a conversation; arbitrary tool JSON cannot. */
+function extractNativeSessionId(cli, line) {
+    try {
+        const event = JSON.parse(line);
+        const id = cli === 'codex'
+            ? event.type === 'thread.started' ? event.thread_id : undefined
+            : event.type === 'system' && event.subtype === 'init' ? event.session_id : undefined;
+        return typeof id === 'string' && UUID.test(id) ? id : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Codex interactive has no --session-id. Match the persisted session_meta to the
+ * dedicated safemode cwd and launch time, never `resume --last` or global history.
+ * Read only today's/newer date directories and a bounded first line per rollout.
+ */
+function discoverCodexSession(options) {
+    const start = typeof options.startedAt === 'number' ? options.startedAt : Date.parse(options.startedAt);
+    if (!Number.isFinite(start))
+        throw new Error('Invalid session start time.');
+    const root = path_1.default.join(options.codexHome || process.env.CODEX_HOME || path_1.default.join(os_1.default.homedir(), '.codex'), 'sessions');
+    const day = new Date(start).toISOString().slice(0, 10).replace(/-/g, '/');
+    const ids = new Set();
+    const readDirs = (dir) => {
+        try {
+            return fs_1.default.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return [];
+        }
+    };
+    let inspected = 0;
+    for (const year of readDirs(root).filter(e => e.isDirectory() && /^\d{4}$/.test(e.name))) {
+        for (const month of readDirs(path_1.default.join(root, year.name)).filter(e => e.isDirectory() && /^\d{2}$/.test(e.name))) {
+            for (const date of readDirs(path_1.default.join(root, year.name, month.name)).filter(e => e.isDirectory() && /^\d{2}$/.test(e.name))) {
+                const relative = `${year.name}/${month.name}/${date.name}`;
+                if (relative < day)
+                    continue;
+                for (const file of readDirs(path_1.default.join(root, relative))) {
+                    if (!file.isFile() || !file.name.endsWith('.jsonl'))
+                        continue;
+                    if (++inspected > 5000)
+                        throw new Error('Too many Codex rollouts to identify safemode session safely.');
+                    let fd;
+                    try {
+                        fd = fs_1.default.openSync(path_1.default.join(root, relative, file.name), 'r');
+                        const buffer = Buffer.alloc(65536);
+                        const bytes = fs_1.default.readSync(fd, buffer, 0, buffer.length, 0);
+                        const text = buffer.toString('utf8', 0, bytes);
+                        const newline = text.indexOf('\n');
+                        if (newline === -1 && bytes === buffer.length)
+                            continue;
+                        const event = JSON.parse(newline === -1 ? text : text.slice(0, newline));
+                        const meta = event.payload;
+                        if (event.type !== 'session_meta' || !meta || meta.cwd !== options.cwd || !UUID.test(meta.id || ''))
+                            continue;
+                        if (Date.parse(meta.timestamp || event.timestamp) < start)
+                            continue;
+                        if (!Number.isFinite(Date.parse(meta.timestamp || event.timestamp)))
+                            continue;
+                        // Child investigations are separate native conversations.
+                        if (typeof meta.source === 'object')
+                            continue;
+                        ids.add(meta.id);
+                    }
+                    catch { /* Concurrent append or unrelated/corrupt rollout; retry on next poll. */ }
+                    finally {
+                        if (fd !== undefined)
+                            fs_1.default.closeSync(fd);
+                    }
+                }
+            }
+        }
+    }
+    if (ids.size > 1)
+        throw new Error('Multiple native Codex sessions match this safemode workspace; refusing ambiguous resume.');
+    return [...ids][0];
+}
+//# sourceMappingURL=native.js.map

package/dist/safemode/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/safemode/native.ts"],"names":[],"mappings":";;;;;AAiCA,8CAWC;AAqBD,sDAkEC;AAGD,wDAQC;AAOD,oDA0CC;AA/LD,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,mCAAoC;AACpC,iDAA6C;AAC7C,sDAAyD;AACzD,0DAA0D;AAwB1D,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,uFAAuF;AACvF,SAAgB,iBAAiB,CAAC,GAAgB,EAAE,SAA4B,OAAO,CAAC,GAAG;IACzF,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,qZAAqZ,CAAC;IACra,MAAM,QAAQ,GAAG,GAAG,KAAK,QAAQ;QAC/B,CAAC,CAAC,iTAAiT;QACnT,CAAC,CAAC,kGAAkG,CAAC;IACvG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxF,CAAC;IACD,sFAAsF;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,GAAW,EAAE,GAAsB;IAChF,qFAAqF;IACrF,oEAAoE;IACpE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YACpE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;YACnE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,qEAAqE;AACrE,SAAgB,qBAAqB,CAAC,OAAsB;IAC1D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC9H,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClH,IAAI,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5D,2EAA2E;QAC3E,gFAAgF;QAChF,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1J,MAAM,IAAI,GAAsB,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,GAAG,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,IAAI,oGAAoG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACrK,CAAC;YACH,CAAC;YACD,GAAG,GAAG,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;YACvD,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,uFAAuF;QACvF,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/J,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,mBAAU,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,eAAgB,CAAC,CAAC;aACnG,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAgB,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;QACvL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC;QAC/F,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAA,mBAAU,GAAE,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7H,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAClJ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;IAC3E,MAAM,IAAI,GAAG;QACX,GAAG,IAAA,8BAAe,GAAE;QACpB,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,iCAAiC;QACvC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,oBAAoB,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,GAAG;QACjF,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;KACnD,CAAC;IACF,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAgB,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;AAC5F,CAAC;AAED,0FAA0F;AAC1F,SAAgB,sBAAsB,CAAC,GAAgB,EAAE,IAAY;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,GAAG,KAAK,OAAO;YACxB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/D,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,OAAwE;IAC3G,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAe,EAAE;QAC5C,IAAI,CAAC;YAAC,OAAO,YAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACnF,CAAC,CAAC;IACF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3H,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,QAAQ,GAAG,GAAG;oBAAE,SAAS;gBAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAC9D,IAAI,EAAE,SAAS,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBACxG,IAAI,EAAsB,CAAC;oBAC3B,IAAI,CAAC;wBACH,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;wBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACnC,MAAM,KAAK,GAAG,YAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;wBAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;wBAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACnC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,MAAM;4BAAE,SAAS;wBACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;wBACzE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;4BAAE,SAAS;wBAC9G,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK;4BAAE,SAAS;wBACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;4BAAE,SAAS;wBAC9E,0DAA0D;wBAC1D,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;4BAAE,SAAS;wBAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;4BAC7E,CAAC;wBAAC,IAAI,EAAE,KAAK,SAAS;4BAAE,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9H,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/dist/safemode/params.d.ts

@@ -0,0 +1,10 @@
+import type { SafemodeCli } from './native';
+/** Quoting only: no shell expansion, substitution, globbing or execution. */
+export declare function splitNativeParams(text: string): string[];
+/** Identity/lifecycle switches remain owned by safemode; other options pass through. */
+export declare function inspectNativeParams(cli: SafemodeCli, args: string[]): {
+    args: string[];
+    resumeId?: string;
+    resumeIndex?: number;
+};
+//# sourceMappingURL=params.d.ts.map

package/dist/safemode/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/safemode/params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAsBxD;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CA4BjI"}

package/dist/safemode/params.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.splitNativeParams = splitNativeParams;
+exports.inspectNativeParams = inspectNativeParams;
+/** Quoting only: no shell expansion, substitution, globbing or execution. */
+function splitNativeParams(text) {
+    if (!text.trim() || text.length > 100000 || text.includes('\0'))
+        throw new Error('Invalid --params value');
+    const args = [];
+    let word = '', quote = '', started = false;
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        if (ch === '\\' && quote !== "'") {
+            if (++i === text.length)
+                throw new Error('Unfinished escape in --params');
+            const next = text[i];
+            if (quote === '"' && !['"', '\\', '$', '`', '\n'].includes(next))
+                word += '\\';
+            if (next !== '\n')
+                word += next;
+            started = true;
+        }
+        else if (quote) {
+            if (ch === quote)
+                quote = '';
+            else
+                word += ch;
+        }
+        else if (ch === '"' || ch === "'") {
+            quote = ch;
+            started = true;
+        }
+        else if (/\s/.test(ch)) {
+            if (started) {
+                args.push(word);
+                word = '';
+                started = false;
+            }
+        }
+        else {
+            word += ch;
+            started = true;
+        }
+    }
+    if (quote)
+        throw new Error('Unclosed quote in --params');
+    if (started)
+        args.push(word);
+    return args;
+}
+/** Identity/lifecycle switches remain owned by safemode; other options pass through. */
+function inspectNativeParams(cli, args) {
+    const remaining = [];
+    let resumeId;
+    let resumeIndex;
+    const forbidden = cli === 'codex'
+        ? ['exec', 'e', 'review', 'fork', 'app-server', 'exec-server', 'login', 'logout', 'mcp', 'plugin', 'agents', 'queue', 'archive', 'delete', 'unarchive', 'migrate-rollouts', 'remote-control', 'completion', 'update', 'doctor', 'sandbox', 'debug', 'apply', 'a', 'cloud', 'features', 'help', '--last', '--remote', '--cd', '-C']
+        : ['--print', '-p', '--continue', '-c', '--fork-session', '--session-id', '--resume-session-at', '--no-session-persistence', '--remote'];
+    const valueFlags = cli === 'codex'
+        ? ['-c', '--config', '-m', '--model', '-p', '--profile', '-s', '--sandbox', '-a', '--ask-for-approval', '--enable', '--disable', '--image', '-i', '--add-dir']
+        : ['--model', '--permission-mode', '--tools', '--allowedTools', '--disallowedTools', '--mcp-config', '--settings', '--setting-sources', '--system-prompt', '--append-system-prompt', '--add-dir', '--agent', '--agents', '--effort'];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i], flag = arg.split('=')[0];
+        if ((cli === 'claude' && /^-[rcp].+/.test(arg) && !arg.startsWith('-r=')) || (cli === 'codex' && /^-C.+/.test(arg)))
+            throw new Error('Use explicit lifecycle flags; combined short switches are unsupported in --params');
+        if (arg === '--' || forbidden.includes(flag))
+            throw new Error('Native lifecycle, workspace and remote switches are not supported in --params; use --prompt for prompt text');
+        if ((cli === 'codex' && arg === 'resume') || (cli === 'claude' && ['--resume', '-r'].includes(flag))) {
+            const id = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : args[++i];
+            if (resumeId || !id || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id))
+                throw new Error('Native resume requires exactly one explicit session UUID');
+            resumeId = id.toLowerCase();
+            resumeIndex = remaining.length;
+        }
+        else {
+            remaining.push(arg);
+            if (valueFlags.includes(arg)) {
+                if (args[i + 1] === undefined || args[i + 1].startsWith('-'))
+                    throw new Error('Missing native option value in --params');
+                remaining.push(args[++i]);
+            }
+        }
+    }
+    return { args: remaining, resumeId, ...(resumeIndex !== undefined ? { resumeIndex } : {}) };
+}
+//# sourceMappingURL=params.js.map