@0xmaxma/claude-gateway 2.0.5 → 2.0.7

package/dist/safemode/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/safemode/params.ts"],"names":[],"mappings":";;AAGA,8CAsBC;AAGD,kDA4BC;AAtDD,6EAA6E;AAC7E,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,IAAI,CAAC;YAC/E,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,IAAI,IAAI,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,EAAE,CAAC;;gBAAM,IAAI,IAAI,EAAE,CAAC;QAChD,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;aAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YAAC,IAAI,IAAI,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAgB,mBAAmB,CAAC,GAAgB,EAAE,IAAc;IAClE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,QAA4B,CAAC;IACjC,IAAI,WAA+B,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,KAAK,OAAO;QAC/B,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;QAClU,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,UAAU,CAAC,CAAC;IAC3I,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO;QAChC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC;QAC9J,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvO,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QAC1N,IAAI,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;QAC7K,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3E,IAAI,QAAQ,IAAI,CAAC,EAAE,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChL,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5B,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACzH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/dist/safemode/provenance.d.ts

@@ -0,0 +1,45 @@
+export interface BuildProvenance {
+    schemaVersion: 1;
+    packageVersion: string;
+    builtAt: string;
+    commit: string | null;
+    tag: string | null;
+    dirty: boolean | null;
+}
+export interface RuntimeProvenance {
+    schemaVersion: 1;
+    pid: number;
+    startedAt: string;
+    executablePath: string;
+    entrypoint: string | null;
+    packageRoot: string;
+    packageVersion: string | null;
+    configPath: string | null;
+    port: number | null;
+    /** Linux kernel start ticks distinguish a still-running process from PID reuse. */
+    processStartTicks: string | null;
+    build: BuildProvenance | null;
+    checkoutAtStartup: {
+        commit: string | null;
+        branch: string | null;
+        dirty: boolean | null;
+    } | null;
+    installKind: 'git-checkout' | 'package';
+    sourceConfidence: 'exact-build' | 'modified-build' | 'unknown';
+}
+export declare function processStartTicks(pid: number): string | null;
+export declare function defaultRuntimeProvenancePath(): string;
+/** Capture once at startup. A later git checkout must never rewrite this evidence. */
+export declare function captureRuntimeProvenance(options?: {
+    packageRoot?: string;
+    pid?: number;
+    startedAt?: string;
+    configPath?: string;
+    port?: number;
+}): RuntimeProvenance;
+/** Private local evidence survives shutdown for post-mortem diagnosis. */
+export declare function writeRuntimeProvenance(record: RuntimeProvenance, filePath?: string): void;
+export declare function readRuntimeProvenance(filePath?: string): RuntimeProvenance | null;
+/** Callers must label dead records as last-run evidence, never the current runtime. */
+export declare function isRecordedRuntimeAlive(record: RuntimeProvenance): boolean;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/safemode/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/safemode/provenance.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACvB;AACD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,CAAC,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,WAAW,EAAE,cAAc,GAAG,SAAS,CAAC;IACxC,gBAAgB,EAAE,aAAa,GAAG,gBAAgB,GAAG,SAAS,CAAC;CAChE;AAqBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5D;AACD,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AACD,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,OAAO,GAAE;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvF,GAAG,iBAAiB,CAwBzB;AACD,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,SAAiC,GAAG,IAAI,CASjH;AACD,wBAAgB,qBAAqB,CAAC,QAAQ,SAAiC,GAAG,iBAAiB,GAAG,IAAI,CAQzG;AACD,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAMzE"}

package/dist/safemode/provenance.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processStartTicks = processStartTicks;
+exports.defaultRuntimeProvenancePath = defaultRuntimeProvenancePath;
+exports.captureRuntimeProvenance = captureRuntimeProvenance;
+exports.writeRuntimeProvenance = writeRuntimeProvenance;
+exports.readRuntimeProvenance = readRuntimeProvenance;
+exports.isRecordedRuntimeAlive = isRecordedRuntimeAlive;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
+const manager_1 = require("../cli/manager");
+function git(root, args) {
+    try {
+        return (0, child_process_1.execFileSync)('git', ['-C', root, ...args], {
+            encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000, maxBuffer: 1024 * 1024,
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function readJson(file) {
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function isObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function validBuild(value) {
+    return isObject(value) && value.schemaVersion === 1 && typeof value.packageVersion === 'string'
+        && typeof value.builtAt === 'string' && Number.isFinite(Date.parse(value.builtAt))
+        && (value.commit === null || (typeof value.commit === 'string' && /^[a-f0-9]{40,64}$/.test(value.commit)))
+        && (value.tag === null || typeof value.tag === 'string')
+        && (value.dirty === null || typeof value.dirty === 'boolean');
+}
+function processStartTicks(pid) {
+    try {
+        const stat = fs.readFileSync(`/proc/${pid}/stat`, 'utf8');
+        return stat.slice(stat.lastIndexOf(')') + 2).split(' ')[19] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function defaultRuntimeProvenancePath() {
+    return path.join(path.dirname((0, manager_1.defaultPidfilePath)()), 'runtime-provenance.json');
+}
+/** Capture once at startup. A later git checkout must never rewrite this evidence. */
+function captureRuntimeProvenance(options = {}) {
+    const packageRoot = path.resolve(options.packageRoot ?? path.join(__dirname, '..', '..'));
+    const pkg = readJson(path.join(packageRoot, 'package.json'));
+    const manifest = readJson(path.join(packageRoot, 'dist', 'build-provenance.json'));
+    const build = validBuild(manifest) ? manifest : null;
+    const top = git(packageRoot, ['rev-parse', '--show-toplevel']);
+    let checkout = false;
+    try {
+        checkout = top !== null && fs.realpathSync(top) === fs.realpathSync(packageRoot);
+    }
+    catch { /* Missing checkout. */ }
+    const status = checkout ? git(packageRoot, ['status', '--porcelain', '--untracked-files=normal']) : null;
+    const pid = options.pid ?? process.pid;
+    const packageVersion = isObject(pkg) && typeof pkg.version === 'string' ? pkg.version : null;
+    return {
+        schemaVersion: 1, pid, startedAt: options.startedAt ?? new Date(Date.now() - process.uptime() * 1000).toISOString(),
+        executablePath: process.execPath, entrypoint: process.argv[1] ? path.resolve(process.argv[1]) : null,
+        packageRoot, packageVersion, configPath: options.configPath ? path.resolve(options.configPath) : null,
+        port: options.port ?? null, processStartTicks: processStartTicks(pid), build,
+        checkoutAtStartup: checkout ? {
+            commit: git(packageRoot, ['rev-parse', 'HEAD']), branch: git(packageRoot, ['symbolic-ref', '--short', '-q', 'HEAD']),
+            dirty: status === null ? null : status.length > 0,
+        } : null,
+        installKind: checkout ? 'git-checkout' : 'package',
+        sourceConfidence: build?.commit && build.packageVersion === packageVersion
+            ? (build.dirty === false ? 'exact-build' : build.dirty === true ? 'modified-build' : 'unknown') : 'unknown',
+    };
+}
+/** Private local evidence survives shutdown for post-mortem diagnosis. */
+function writeRuntimeProvenance(record, filePath = defaultRuntimeProvenancePath()) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+    const temporary = `${filePath}.${(0, crypto_1.randomUUID)()}.tmp`;
+    try {
+        fs.writeFileSync(temporary, JSON.stringify(record, null, 2) + '\n', { mode: 0o600, flag: 'wx' });
+        fs.renameSync(temporary, filePath);
+    }
+    finally {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* Renamed or creation failed. */ }
+    }
+}
+function readRuntimeProvenance(filePath = defaultRuntimeProvenancePath()) {
+    const record = readJson(filePath);
+    if (!isObject(record) || record.schemaVersion !== 1 || !Number.isInteger(record.pid) || record.pid <= 0
+        || typeof record.startedAt !== 'string' || !Number.isFinite(Date.parse(record.startedAt))
+        || typeof record.packageRoot !== 'string' || !path.isAbsolute(record.packageRoot)
+        || typeof record.executablePath !== 'string' || (record.build !== null && !validBuild(record.build))
+        || !['exact-build', 'modified-build', 'unknown'].includes(String(record.sourceConfidence)))
+        return null;
+    return record;
+}
+/** Callers must label dead records as last-run evidence, never the current runtime. */
+function isRecordedRuntimeAlive(record) {
+    try {
+        process.kill(record.pid, 0);
+    }
+    catch (error) {
+        if (error.code !== 'EPERM')
+            return false;
+    }
+    const ticks = processStartTicks(record.pid);
+    return record.processStartTicks !== null && ticks !== null && ticks === record.processStartTicks;
+}
+//# sourceMappingURL=provenance.js.map

package/dist/safemode/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/safemode/provenance.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,8CAKC;AACD,oEAEC;AAED,4DA0BC;AAED,wDASC;AACD,sDAQC;AAED,wDAMC;AAnHD,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAoC;AACpC,iDAA6C;AAC7C,4CAAoD;AA2BpD,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc;IACvC,IAAI,CAAC;QACH,OAAO,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;SAC7F,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AACD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClF,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;WAC1F,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;WAC/E,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;WACvG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC;WACrD,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAClE,CAAC;AACD,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AACD,SAAgB,4BAA4B;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAA,4BAAkB,GAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAClF,CAAC;AACD,sFAAsF;AACtF,SAAgB,wBAAwB,CAAC,UAErC,EAAE;IACJ,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,OAAO;QACL,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACnH,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACpG,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QACrG,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK;QAC5E,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpH,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;SAClD,CAAC,CAAC,CAAC,IAAI;QACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAClD,gBAAgB,EAAE,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YACxE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9G,CAAC;AACJ,CAAC;AACD,0EAA0E;AAC1E,SAAgB,sBAAsB,CAAC,MAAyB,EAAE,QAAQ,GAAG,4BAA4B,EAAE;IACzG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,IAAA,mBAAU,GAAE,MAAM,CAAC;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AACD,SAAgB,qBAAqB,CAAC,QAAQ,GAAG,4BAA4B,EAAE;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAK,MAAM,CAAC,GAAc,IAAI,CAAC;WAC9G,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;WACtF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;WAC9E,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;WACjG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1G,OAAO,MAAsC,CAAC;AAChD,CAAC;AACD,uFAAuF;AACvF,SAAgB,sBAAsB,CAAC,MAAyB;IAC9D,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClD,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,iBAAiB,CAAC;AACnG,CAAC"}

package/dist/safemode/runner.d.ts

@@ -0,0 +1,17 @@
+import { SafemodeStore, SafemodeSession, Owner } from './store';
+export interface RunOptions {
+    agentId?: string;
+    noBootstrap?: boolean;
+    nativeArgs?: string[];
+    nativeResumeIndex?: number;
+    mode: 'interactive' | 'headless';
+    prompt?: string;
+    requestId?: string;
+    configPath?: string;
+}
+export declare function controlPath(store: SafemodeStore, id: string): string;
+export declare function stopSession(store: SafemodeStore, id: string, expectedOwner?: Owner): Promise<void>;
+export declare function recoverSession(store: SafemodeStore, id: string): void;
+export declare function getRequest(store: SafemodeStore, id: string, requestId: string): SafemodeSession['lastRequest'];
+export declare function runSession(store: SafemodeStore, session: SafemodeSession, options: RunOptions): Promise<number>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/safemode/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/safemode/runner.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAqB,MAAM,SAAS,CAAC;AAKnF,MAAM,WAAW,UAAU;IAAG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AAEtN,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAGpE;AACD,wBAAsB,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxG;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAarE;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,CAG9G;AACD,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAuNrH"}

package/dist/safemode/runner.js

@@ -0,0 +1,398 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.controlPath = controlPath;
+exports.stopSession = stopSession;
+exports.recoverSession = recoverSession;
+exports.getRequest = getRequest;
+exports.runSession = runSession;
+const codex_auth_1 = require("../session/codex-auth");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const net = __importStar(require("net"));
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+const store_1 = require("./store");
+const native_1 = require("./native");
+const context_1 = require("./context");
+const external_owners_1 = require("./external-owners");
+const STOP_TIMEOUT = 15000;
+function controlPath(store, id) {
+    // A bounded socket path also supports long HOME paths on macOS/Linux.
+    return path.join(store.root, `${path.basename(store.dir(id))}.sock`);
+}
+async function stopSession(store, id, expectedOwner) {
+    const current = store.owner(id);
+    if (!current)
+        return;
+    const expected = expectedOwner ?? current;
+    if (current.token !== expected.token)
+        throw new Error('Busy: safemode owner changed; stop request refused');
+    await new Promise((resolve, reject) => {
+        const socket = net.createConnection(controlPath(store, id));
+        const timer = setTimeout(() => { socket.destroy(); reject(new Error('Owner did not stop; no replacement was launched')); }, STOP_TIMEOUT);
+        let response = '';
+        socket.on('connect', () => socket.write(JSON.stringify({ action: 'stop', ownerToken: expected.token }) + '\n'));
+        socket.on('data', chunk => { response += chunk.toString(); });
+        socket.on('error', () => { clearTimeout(timer); reject(new Error('Owner cannot be reached; use safemode recover only after its processes exit')); });
+        socket.on('end', () => { clearTimeout(timer); response.trim() === 'stopped' ? resolve() : reject(new Error(response.trim() === 'owner-changed' ? 'Busy: safemode owner changed; stop request refused' : 'Owner refused to stop')); });
+    });
+}
+function recoverSession(store, id) {
+    // Serialize recovery with an exclusive file. A claimant never deletes this
+    // marker; acquire checks it, so it cannot claim while recovery removes state.
+    const recovery = path.join(store.dir(id), 'recovering');
+    const fd = fs.openSync(recovery, 'wx', 0o600);
+    try {
+        const owner = store.owner(id);
+        if (owner?.launching)
+            throw new Error('Native launch outcome is unknown; verify its processes manually before repairing ownership');
+        if (owner && ((0, store_1.alive)(owner.pid) || (0, store_1.alive)(owner.childPid)))
+            throw new Error('Owner or native CLI is still alive; recovery refused');
+        store.recoverRename(id);
+        if (owner)
+            store.release(id, owner);
+        fs.rmSync(controlPath(store, id), { force: true });
+    }
+    finally {
+        fs.closeSync(fd);
+        fs.unlinkSync(recovery);
+    }
+}
+function requestFile(store, id, requestId) {
+    if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(requestId))
+        throw new Error('Invalid request ID');
+    return path.join(store.dir(id), 'requests', `${requestId}.json`);
+}
+function getRequest(store, id, requestId) {
+    const file = requestFile(store, id, requestId);
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return undefined;
+        throw e;
+    }
+}
+async function runSession(store, session, options) {
+    if (options.nativeArgs !== undefined && options.mode !== 'interactive')
+        throw new Error('Native params are interactive-only');
+    if (options.noBootstrap && (!session.nativeSessionId || session.nativeStarted === false))
+        throw new Error('--no-bootstrap requires an existing native conversation');
+    const owner = store.acquire(session.id, options.mode);
+    const workspace = path.join(store.dir(session.id), 'workspace');
+    let server;
+    let stopping = false;
+    let child;
+    let childClosed = false;
+    let completion;
+    const stopClients = new Set();
+    const stop = () => {
+        stopping = true;
+        if (options.mode === 'interactive')
+            process.stderr.write('\nSafemode is stopping for an external stop/takeover request.\n');
+        child?.kill('SIGTERM');
+    };
+    let discovery;
+    let ownershipMonitor;
+    let ownershipError;
+    let ownershipWarningSent = false;
+    let request;
+    let exitCode = 1;
+    const startedAt = Date.now();
+    try {
+        // Read current state only after exclusive ownership, avoiding stale saves.
+        const latest = store.read(session.id);
+        if (options.agentId && latest.agentId !== options.agentId)
+            throw new Error('SAFEMODE_SESSION_NOT_AVAILABLE');
+        session = { ...latest, model: session.model, configPath: options.configPath ?? session.configPath };
+        (0, external_owners_1.assertNoExternalNativeOwner)({ cli: session.cli, nativeSessionId: session.nativeSessionId, cwd: workspace });
+        if (options.requestId) {
+            const promptHash = (0, crypto_1.createHash)('sha256').update(JSON.stringify([options.prompt, session.cli, session.model, ...(options.noBootstrap ? [true] : [])])).digest('hex');
+            const existing = getRequest(store, session.id, options.requestId);
+            if (existing) {
+                if (existing.promptHash !== promptHash)
+                    throw new Error('Request ID was already used with different input');
+                if (existing.status === 'running')
+                    throw new Error('Request outcome is unknown; inspect status before submitting a new request ID');
+                process.connected && process.send?.({ ready: true, sessionId: session.id, requestId: existing.id, duplicate: true });
+                return existing.exitCode ?? 1;
+            }
+            request = { id: options.requestId, promptHash, status: 'running', ownerToken: owner.token };
+            fs.mkdirSync(path.dirname(requestFile(store, session.id, request.id)), { recursive: true, mode: 0o700 });
+            (0, store_1.atomicJson)(requestFile(store, session.id, request.id), request);
+            session.lastRequest = request;
+            store.save(session);
+        }
+        server = net.createServer(socket => {
+            socket.setTimeout(STOP_TIMEOUT, () => socket.destroy());
+            let data = '';
+            socket.on('data', chunk => {
+                data += chunk.toString();
+                if (data.length > 256) {
+                    socket.destroy();
+                    return;
+                }
+                if (!data.endsWith('\n'))
+                    return;
+                try {
+                    const command = JSON.parse(data);
+                    if (command.action !== 'stop' || command.ownerToken !== owner.token) {
+                        socket.end('owner-changed\n');
+                        return;
+                    }
+                    stopClients.add(socket);
+                    stop();
+                }
+                catch {
+                    socket.end('invalid-command\n');
+                }
+            });
+            socket.on('error', () => { });
+            socket.on('close', () => stopClients.delete(socket));
+        });
+        fs.rmSync(controlPath(store, session.id), { force: true });
+        await new Promise((resolve, reject) => { server.once('error', reject); server.listen(controlPath(store, session.id), resolve); });
+        fs.chmodSync(controlPath(store, session.id), 0o600);
+        process.on('SIGTERM', stop);
+        process.on('SIGHUP', stop);
+        process.on('SIGINT', stop);
+        const { prompt: context } = await (0, context_1.prepareContext)(workspace, session.configPath, options.prompt);
+        if (stopping)
+            throw new Error('Stopped before native CLI launch');
+        const invocation = await (0, native_1.buildNativeInvocation)({ cli: session.cli, mode: options.mode, cwd: workspace,
+            nativeArgs: options.nativeArgs, nativeResumeIndex: options.nativeResumeIndex, prompt: options.prompt, context: options.noBootstrap ? undefined : context, model: session.model, nativeSessionId: session.nativeSessionId, resume: !!session.nativeSessionId && session.nativeStarted !== false });
+        if (session.cli === 'codex')
+            invocation.env = await (0, codex_auth_1.codexSafemodeEnvironment)(invocation.command, invocation.env, { nativeArgs: options.nativeArgs });
+        if (stopping)
+            throw new Error('Stopped during native CLI readiness check');
+        if (invocation.nativeSessionId)
+            session.nativeSessionId = invocation.nativeSessionId;
+        store.save(session);
+        process.stderr.write(`Safemode ${session.id.startsWith('starting-') ? 'starting (waiting for native session ID)' : session.name}: ${session.cli}, model ${session.model === 'inherit' ? 'inherited from native CLI' : session.model}\n`);
+        (0, external_owners_1.assertNoExternalNativeOwner)({ cli: session.cli, nativeSessionId: session.nativeSessionId, cwd: workspace, env: invocation.env });
+        owner.launching = true;
+        store.updateOwner(session.id, owner);
+        child = (0, child_process_1.spawn)(invocation.command, invocation.args, { cwd: invocation.cwd, env: invocation.env,
+            stdio: options.mode === 'interactive' ? 'inherit' : ['ignore', 'pipe', 'pipe'] });
+        completion = new Promise(resolve => {
+            let error;
+            child.once('error', value => { error = value; });
+            child.once('close', code => { childClosed = true; resolve({ code: code ?? 1, error }); });
+        });
+        child.once('spawn', () => {
+            try {
+                session.nativeStarted = true;
+                store.save(session);
+                if (process.connected)
+                    process.send?.({ ready: true, sessionId: session.id.startsWith('starting-') ? null : session.id, requestId: options.requestId });
+            }
+            catch (error) {
+                ownershipError = error.message;
+                child?.kill('SIGTERM');
+            }
+        });
+        owner.childPid = child.pid;
+        owner.launching = false;
+        store.updateOwner(session.id, owner);
+        const captureId = (id) => {
+            if (!id || id === session.nativeSessionId)
+                return;
+            try {
+                if (session.nativeSessionId)
+                    throw new Error('Native CLI returned a different session ID');
+                const identified = { ...session, nativeSessionId: id, nativeStarted: true };
+                store.save(identified);
+                Object.assign(session, identified);
+                process.stderr.write(`Safemode session: ${session.id}\n`);
+            }
+            catch (error) {
+                ownershipError = error.message;
+                child?.kill('SIGTERM');
+            }
+        };
+        if (session.cli === 'codex' && options.mode === 'interactive' && !session.nativeSessionId) {
+            const discover = () => { try {
+                captureId((0, native_1.discoverCodexSession)({ cwd: workspace, startedAt }));
+            }
+            catch { /* Ambiguous discovery must not guess. */ } };
+            discovery = setInterval(discover, 1000);
+        }
+        let buffered = '';
+        let logBytes = 0;
+        const logFile = path.join(store.dir(session.id), 'output.log');
+        if (options.mode === 'headless')
+            fs.writeFileSync(logFile, '', { mode: 0o600 });
+        const maxLogBytes = 5 * 1024 * 1024;
+        const appendOutput = (chunk) => {
+            if (logBytes + chunk.length > maxLogBytes) {
+                // Compact in large batches, retaining the newest output rather than
+                // dropping the final diagnosis once verbose tool events fill the log.
+                const previous = fs.readFileSync(logFile);
+                const tail = Buffer.concat([previous.subarray(-Math.floor(maxLogBytes / 2)), chunk]).subarray(-maxLogBytes);
+                fs.writeFileSync(logFile, tail);
+                logBytes = tail.length;
+            }
+            else {
+                fs.appendFileSync(logFile, chunk);
+                logBytes += chunk.length;
+            }
+        };
+        child.stdout?.on('data', (chunk) => {
+            buffered += chunk.toString();
+            if (buffered.length > 1024 * 1024)
+                buffered = '';
+            let newline;
+            while ((newline = buffered.indexOf('\n')) !== -1) {
+                const line = buffered.slice(0, newline);
+                buffered = buffered.slice(newline + 1);
+                captureId((0, native_1.extractNativeSessionId)(session.cli, line));
+                if (request) {
+                    try {
+                        const event = JSON.parse(line);
+                        const text = session.cli === 'codex'
+                            ? (event.type === 'item.completed' && event.item?.type === 'agent_message' ? event.item.text : undefined)
+                            : (event.type === 'result' ? event.result : undefined);
+                        if (typeof text === 'string') {
+                            if (text.length > 262144) {
+                                request.error = 'SAFEMODE_RESULT_TOO_LARGE';
+                                delete request.result;
+                            }
+                            else if (!request.error)
+                                request.result = text;
+                        }
+                        if (event.type === 'result' && event.is_error)
+                            request.error = 'SAFEMODE_NATIVE_RESULT_ERROR';
+                    }
+                    catch { /* Tool output and stderr are not a final result. */ }
+                }
+            }
+            appendOutput(chunk);
+        });
+        child.stderr?.on('data', (chunk) => {
+            appendOutput(chunk);
+        });
+        ownershipMonitor = setInterval(() => {
+            if (childClosed || ownershipError)
+                return;
+            try {
+                (0, external_owners_1.assertNoExternalNativeOwner)({ cli: session.cli, nativeSessionId: session.nativeSessionId, cwd: workspace,
+                    env: invocation.env, ignorePids: child?.pid ? [child.pid] : [] });
+            }
+            catch (error) {
+                // Startup verification already admitted this owner. Losing visibility
+                // into an unrelated process is not evidence of a competing writer.
+                // Keep checking, but stop a live session only on a detected conflict.
+                if (!(error instanceof external_owners_1.ExternalOwnerFound)) {
+                    if (!ownershipWarningSent) {
+                        ownershipWarningSent = true;
+                        const notice = 'Safemode could not inspect other native processes; keeping this session running and continuing ownership checks.\n';
+                        process.stderr.write(notice);
+                        if (options.mode === 'headless')
+                            appendOutput(Buffer.from(notice));
+                    }
+                    return;
+                }
+                ownershipError = error.message;
+                // Only our ChildProcess handle is signalled. External/native owners are
+                // never killed based on PIDs found in registries or /proc.
+                child?.kill('SIGTERM');
+                const notice = `Stopping safemode: ${ownershipError}\n`;
+                process.stderr.write(notice);
+                if (options.mode === 'headless')
+                    appendOutput(Buffer.from(notice));
+            }
+        }, 1000);
+        const result = await completion;
+        exitCode = ownershipError ? 1 : result.code;
+        if (result.error)
+            throw result.error;
+        if (session.cli === 'codex' && !session.nativeSessionId) {
+            try {
+                captureId((0, native_1.discoverCodexSession)({ cwd: workspace, startedAt }));
+            }
+            catch { /* No guessed conversation identity. */ }
+        }
+        return exitCode;
+    }
+    finally {
+        if (child && !childClosed && completion) {
+            child.kill('SIGTERM');
+            await new Promise(resolve => {
+                const timeout = setTimeout(resolve, STOP_TIMEOUT);
+                completion.then(() => { clearTimeout(timeout); resolve(); });
+            });
+        }
+        const canRelease = !child || childClosed;
+        if (discovery)
+            clearInterval(discovery);
+        if (ownershipMonitor)
+            clearInterval(ownershipMonitor);
+        process.removeListener('SIGTERM', stop);
+        process.removeListener('SIGHUP', stop);
+        process.removeListener('SIGINT', stop);
+        if (request) {
+            request.status = !canRelease ? 'running' : exitCode === 0 && !request.error ? 'completed' : 'failed';
+            if (!canRelease)
+                request.error = 'SAFEMODE_CLEANUP_UNCONFIRMED';
+            request.exitCode = exitCode;
+            if (ownershipError)
+                request.error = ownershipError;
+            (0, store_1.atomicJson)(requestFile(store, session.id, request.id), request);
+            session.lastRequest = request;
+            store.save(session);
+        }
+        server?.close();
+        fs.rmSync(controlPath(store, session.id), { force: true });
+        if (canRelease) {
+            try {
+                if (session.nativeSessionId && childClosed && path.basename(store.dir(session.id)) !== session.nativeSessionId) {
+                    (0, external_owners_1.assertNoExternalNativeOwner)({ cli: session.cli, nativeSessionId: session.nativeSessionId, cwd: workspace });
+                    store.alignStorage(session.id, owner);
+                }
+            }
+            catch (error) {
+                process.stderr.write(`Safemode workspace alignment deferred: ${error.message}\n`);
+            }
+            finally {
+                store.release(session.id, owner);
+            }
+        }
+        for (const socket of stopClients)
+            socket.end(canRelease ? 'stopped\n' : 'still-running\n');
+    }
+}
+//# sourceMappingURL=runner.js.map