@0xmaxma/claude-gateway 2.0.6 → 2.0.7

package/dist/safemode/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/safemode/context.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,gDAgBC;AA4HD,wCAyFC;AAzPD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AACzC,+BAAiC;AACjC,mCAAgD;AAChD,0CAA2C;AAC3C,8CAAgD;AAChD,oDAAgF;AAChF,mDAAyD;AACzD,6CAAuG;AAEvG,MAAM,GAAG,GAAG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC;AAChC,MAAM,UAAU,GAAG,+CAA+C,CAAC;AACnE,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5B,MAAM,MAAM,GAAG,CAAC,eAAe,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,qBAAqB;IACrG,qBAAqB,EAAE,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe;IAClG,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAE7C,2FAA2F;AAC3F,SAAgB,kBAAkB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC1D,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,eAAe,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,uFAAuF;QACvF,IAAI,CAAC;YAAC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;QAChK,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,+BAA+B,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,yHAAyH,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,mDAAmD,EAAE,EAAE,CAAC,EAAE;YACnU,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,kBAAkB,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,OAAO,IAAA,mBAAU,EAAC,IAAI,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG;YAC7H,yEAAyE,CAAC,IAAI,CAAC,GAAG,CAAC;gBACjF,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAI,GAAG,KAAK;IAC7C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,4BAA4B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAY,EAAE,KAAc;IAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjG,CAAC;AAED;mFACmF;AACnF,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,SAAmB;IACnE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACxH,yEAAyE;QACzE,sFAAsF;QACtF,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxG,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpI,IAAI,CAAC,GAAG,CAAC,MAAM;oBAAE,SAAS;gBAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpG,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,KAAK,WAAW,MAAM,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;YACrI,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;QAC1D,CAAC;QACD,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,MAAM;YAC1E,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,2DAA2D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5K,MAAM,SAAS,GAA6B,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7F,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM;gBAClE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,mBAAmB,KAAK,+BAA+B,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChJ,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,IAAI,kDAAkD,IAAI,0BAA0B,IAAI,mBAAmB,IAAI,aAAa,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1M,MAAM,OAAO,GAAa,EAAE,CAAC;YAAC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC1D,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;gBACzG,MAAM,GAAG,GAAG,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACzH,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAC,CAAC;YACpI,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAc,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,SAAS,UAAU,KAAK,IAAI,MAAM,+BAA+B,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;gBACzH,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,IAAI,IAAI,GAAG,SAAS;oBAAE,MAAM;gBAC5B,SAAS,IAAI,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YACrB,IAAI,SAAS,GAAG,IAAI;gBAAE,MAAM;QAC9B,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,2IAA2I,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9L,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IAAC,IAAI,OAAO,GAAG,CAAC,CAAC;IAC/B,SAAS,KAAK,CAAC,GAAW;QACxB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACnE,IAAI,EAAE,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACtJ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;iBAC/D,IAAI,IAAI,CAAC,cAAc,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;iBACzE,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;;gBACtD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,QAAgB,EAAE,eAAwB;IACzF,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,IAAI,CAAC,kDAAkD,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACnI,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,WAAW,GAAG,gBAAgB,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,iBAAiB,CAAC,WAAW,CAAC;YAAE,OAAO,WAAW,CAAC;IAChH,CAAC;IAAC,MAAM,CAAC,CAAC,6DAA6D,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,EAAE,CAAC;IAC5G,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAClI,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACnJ,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACtH,IAAI,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACzK,2EAA2E;QAC3E,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,WAAW,aAAa,IAAA,mBAAU,GAAE,EAAE,CAAC,CAAC;QACtG,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/H,OAAO,WAAW,CAAC;IACrB,CAAC;YAAS,CAAC;QAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACrE,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,UAAmB,EAAE,aAAa,GAAG,EAAE;IAC7F,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAA,mBAAU,GAAE,EAAE,CAAC,CAAC,CAAC;IACvI,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,gFAAgF;IAChF,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3M,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAA,kCAAqB,GAAE,CAAC;IACzC,MAAM,cAAc,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,IAAA,wBAAU,EAAC,cAAc,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3K,IAAI,QAAQ,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IAC3I,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC;IAC3J,MAAM,QAAQ,GAAG,OAAO,IAAI,IAAA,qCAAwB,GAAE,CAAC;IACvD,mFAAmF;IACnF,aAAa,CAAC,WAAW,EAAE,iBAAiB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjJ,MAAM,UAAU,GAAG,IAAA,wBAAU,EAAC,UAAU,IAAI,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5J,IAAI,CAAC;QAAC,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3G,MAAM,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACzH,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,CAAC;YAC9F,MAAM,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;QACvD,CAAC;QACD,aAAa,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,oDAAoD,EAAE,IAAI,EAAE,CAAC,CAAC;IACpH,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IACrD,MAAM,IAAI,GAAG,mDAAmD,CAAC;IACjE,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACjE,IAAI,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM;QAAE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACtF,CAAC;QACJ,IAAI,CAAC;YAAC,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;YAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,+CAA+C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACxR,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,+IAA+I,CAAC,CAAC;IACjL,MAAM,aAAa,GAAwC,EAAE,CAAC;IAC9D,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAA,8BAAkB,EAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACtG,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACxG,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,KAAK,MAAM,QAAQ,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACxD,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;wBAAE,SAAS;oBAC3C,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAAC,SAAS,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,CAAC;gBACrG,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,wCAAwC,KAAK,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAAC,CAAC;YAC3F,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBAAC,cAAc,EAAE,CAAC;gBAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;;gBAC/D,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC;QACpI,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc;YAAE,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAAC,CAAC;IAC5D,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACxD,4FAA4F;IAC5F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAA,6BAAe,EAAC,EAAE,MAAM,EAAE,IAAA,2BAAa,EAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3J,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACxE,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,OAAO,KAAK,GAAG,IAAI,EAAE,CAAC;oBAAC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,KAAK,CAAC,IAAI;wBAAE,MAAM;oBAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;oBAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,CAAC;QAAC,CAAC;QAC7N,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IAAC,MAAM,CAAC;QAAC,aAAa,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAAC,CAAC;IACjF,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC3E,MAAM,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,uGAAuG,CAAC,CAAC;QAAC,CAAC;QAC9H,IAAI,OAAO,CAAC,gBAAgB,KAAK,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;IAC/J,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,mHAAmH,CAAC,CAAC;QAChI,IAAI,OAAO,EAAE,cAAc,IAAI,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,cAAc,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;gBAC7G,KAAK,CAAC,IAAI,CAAC,mKAAmK,CAAC,CAAC;YAClL,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,aAAa,CAAC,WAAW,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/L,MAAM,MAAM,GAAG,oUAAoU,aAAa,aAAa,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,26CAA26C,CAAC;IAC/0D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC"}

package/dist/safemode/external-owners.d.ts

@@ -0,0 +1,19 @@
+import type { SafemodeCli } from './native';
+export interface ExternalOwnerOptions {
+    cli: SafemodeCli;
+    nativeSessionId?: string;
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    /** Only native children whose ownership has already been verified by safemode. */
+    ignorePids?: number[];
+}
+export declare class ExternalOwnerFound extends Error {
+    readonly pid: number;
+    constructor(pid: number);
+}
+export declare function assertNoExternalNativeOwner(options: ExternalOwnerOptions): void;
+/** Minimal ownership evidence only; never expose native argv or transcript text. */
+export declare function findExternalNativeOwners(options: ExternalOwnerOptions): Array<{
+    pid: number;
+}>;
+//# sourceMappingURL=external-owners.d.ts.map

package/dist/safemode/external-owners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-owners.d.ts","sourceRoot":"","sources":["../../src/safemode/external-owners.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,WAAW,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAKD,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CACjC;AA2ID,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAE/E;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAY9F"}

package/dist/safemode/external-owners.js

@@ -0,0 +1,229 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalOwnerFound = void 0;
+exports.assertNoExternalNativeOwner = assertNoExternalNativeOwner;
+exports.findExternalNativeOwners = findExternalNativeOwners;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+function vanished(error) {
+    return ['ENOENT', 'ESRCH'].includes(error.code || '');
+}
+class ExternalOwnerFound extends Error {
+    constructor(pid) {
+        super(`Busy: external native CLI process ${pid} may own this conversation. Close it before resuming; safemode will not stop an unmanaged process.`);
+        this.pid = pid;
+    }
+}
+exports.ExternalOwnerFound = ExternalOwnerFound;
+function busy(pid) {
+    throw new ExternalOwnerFound(pid);
+}
+function startTime(pid) {
+    try {
+        const stat = fs_1.default.readFileSync(`/proc/${pid}/stat`, 'utf8');
+        const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+        return fields[0] === 'Z' ? undefined : fields[19];
+    }
+    catch (error) {
+        if (vanished(error))
+            return undefined;
+        throw error;
+    }
+}
+function nativeName(value, cli) {
+    const base = path_1.default.basename(value).toLowerCase();
+    return cli === 'claude' ? /^(claude|claude\.exe)$/.test(base) : /^(codex|codex\.exe)$/.test(base);
+}
+/**
+ * A conservative preflight, NOT a cross-process lock. Native Claude --resume can
+ * bypass safemode's lock. Recheck immediately before spawn and while running.
+ * Native Codex versions with writer locks enforce their own atomic exclusion.
+ * Only process/registry metadata is inspected; never auth, prompts or histories.
+ */
+function inspectExternalNativeOwner(options) {
+    if (process.platform !== 'linux') {
+        throw new Error('Safemode cannot verify external native session ownership on this platform (Linux /proc is required).');
+    }
+    const ignored = new Set([process.pid, ...(options.ignorePids || [])]);
+    // A native launcher can spawn its actual CLI; all verified managed descendants
+    // share that managed ownership and must not be mistaken for external clients.
+    const parents = new Map();
+    for (const entry of fs_1.default.readdirSync('/proc')) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        try {
+            const stat = fs_1.default.readFileSync(`/proc/${entry}/stat`, 'utf8');
+            parents.set(Number(entry), Number(stat.slice(stat.lastIndexOf(')') + 2).split(' ')[1]));
+        }
+        catch (error) {
+            if (!vanished(error))
+                throw error;
+        }
+    }
+    // Only child roots supplied explicitly, never every descendant of this supervisor.
+    const managed = new Set(options.ignorePids || []);
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const [pid, parent] of parents)
+            if (managed.has(parent) && !managed.has(pid)) {
+                managed.add(pid);
+                changed = true;
+            }
+    }
+    for (const pid of managed)
+        ignored.add(pid);
+    const env = options.env || process.env;
+    const home = env.HOME || os_1.default.homedir();
+    const nativeHome = options.cli === 'claude'
+        ? env.CLAUDE_CONFIG_DIR || path_1.default.join(home, '.claude')
+        : env.CODEX_HOME || path_1.default.join(home, '.codex');
+    const knownRegistry = new Map();
+    if (options.cli === 'claude') {
+        const registry = path_1.default.join(nativeHome, 'sessions');
+        let files = [];
+        try {
+            files = fs_1.default.readdirSync(registry);
+        }
+        catch (error) {
+            if (!vanished(error))
+                throw new Error('Cannot verify external Claude session ownership: registry is unreadable.');
+        }
+        for (const file of files) {
+            if (!/^\d+\.json$/.test(file))
+                continue;
+            const pid = Number(file.slice(0, -5));
+            if (ignored.has(pid))
+                continue;
+            const liveStart = startTime(pid);
+            if (!liveStart)
+                continue;
+            let record;
+            try {
+                record = JSON.parse(fs_1.default.readFileSync(path_1.default.join(registry, file), 'utf8'));
+            }
+            catch (error) {
+                if (vanished(error))
+                    continue;
+                throw new Error(`Cannot verify external Claude session ownership for process ${pid}: registry is unreadable.`);
+            }
+            if (record.pid !== pid)
+                throw new Error(`Cannot verify external Claude session ownership for process ${pid}: registry PID mismatch.`);
+            // Older registries lacking a start identity cannot disprove a live owner.
+            if (record.procStart !== undefined && String(record.procStart) !== liveStart)
+                continue;
+            knownRegistry.set(pid, record);
+            if (options.nativeSessionId ? record.sessionId === options.nativeSessionId : record.cwd === options.cwd)
+                busy(pid);
+        }
+    }
+    for (const entry of fs_1.default.readdirSync('/proc')) {
+        if (!/^\d+$/.test(entry))
+            continue;
+        const pid = Number(entry);
+        if (ignored.has(pid))
+            continue;
+        const root = `/proc/${pid}`;
+        try {
+            if (typeof process.getuid === 'function' && fs_1.default.statSync(root).uid !== process.getuid())
+                continue;
+            if (!startTime(pid))
+                continue;
+            const argv = fs_1.default.readFileSync(path_1.default.join(root, 'cmdline'), 'utf8').split('\0').filter(Boolean);
+            // Filter before opening exe/environ/fds: unrelated same-user services can
+            // deliberately make those files unreadable (e.g. non-dumpable daemons).
+            const candidate = [argv[0] || '', argv[1] || ''].some(value => nativeName(value, options.cli));
+            if (!candidate)
+                continue;
+            // Native homes are distinct stores, so the same UUID in another home is
+            // not this conversation. Extract only these three routing keys; never
+            // return, log or include process environment/arguments in errors.
+            const routing = {};
+            for (const field of fs_1.default.readFileSync(path_1.default.join(root, 'environ'), 'utf8').split('\0')) {
+                const equals = field.indexOf('=');
+                if (equals < 0)
+                    continue;
+                const key = field.slice(0, equals);
+                if (['HOME', 'CLAUDE_CONFIG_DIR', 'CODEX_HOME'].includes(key))
+                    routing[key] = field.slice(equals + 1);
+            }
+            const processHome = options.cli === 'claude'
+                ? routing.CLAUDE_CONFIG_DIR || (routing.HOME ? path_1.default.join(routing.HOME, '.claude') : undefined)
+                : routing.CODEX_HOME || (routing.HOME ? path_1.default.join(routing.HOME, '.codex') : undefined);
+            if (processHome && path_1.default.resolve(processHome) !== path_1.default.resolve(nativeHome))
+                continue;
+            if (!processHome)
+                throw new Error(`Cannot verify external native session ownership for process ${pid}: native home is unknown.`);
+            const record = knownRegistry.get(pid);
+            if (record && options.nativeSessionId && record.sessionId)
+                continue;
+            const cwd = fs_1.default.readlinkSync(path_1.default.join(root, 'cwd'));
+            if (cwd === options.cwd)
+                busy(pid);
+            if (options.nativeSessionId) {
+                for (let i = 0; i < argv.length; i++) {
+                    if (['--resume', '-r', '--session-id', 'resume'].includes(argv[i]) && argv[i + 1] === options.nativeSessionId)
+                        busy(pid);
+                    if (argv[i] === `--resume=${options.nativeSessionId}` || argv[i] === `--session-id=${options.nativeSessionId}`)
+                        busy(pid);
+                }
+                // Codex app-server and resume picker need no UUID in argv. A live file
+                // descriptor proves access even when the CLI holds a kernel writer lock.
+                for (const fd of fs_1.default.readdirSync(path_1.default.join(root, 'fd'))) {
+                    let target;
+                    try {
+                        target = fs_1.default.readlinkSync(path_1.default.join(root, 'fd', fd)).replace(/ \(deleted\)$/, '');
+                    }
+                    catch (error) {
+                        if (vanished(error))
+                            continue;
+                        throw error;
+                    }
+                    const name = path_1.default.basename(target);
+                    if ((target.startsWith(path_1.default.join(nativeHome, 'thread-writer-locks') + path_1.default.sep) && name === `${options.nativeSessionId}.lock`)
+                        || (target.startsWith(path_1.default.join(nativeHome, 'sessions') + path_1.default.sep) && name.endsWith(`-${options.nativeSessionId}.jsonl`)))
+                        busy(pid);
+                }
+                // Claude can switch conversations without changing argv. An unregistered
+                // live Claude in this user context cannot be ruled out safely.
+                if (options.cli === 'claude' && !record) {
+                    throw new Error(`Cannot verify external Claude session ownership for process ${pid}: no current native session registration. Close it before resuming.`);
+                }
+            }
+        }
+        catch (error) {
+            if (vanished(error))
+                continue;
+            if (error.code === 'EACCES' || error.code === 'EPERM') {
+                throw new Error(`Cannot verify external native session ownership for process ${pid}: process metadata is inaccessible.`);
+            }
+            throw error;
+        }
+    }
+}
+function assertNoExternalNativeOwner(options) {
+    inspectExternalNativeOwner(options);
+}
+/** Minimal ownership evidence only; never expose native argv or transcript text. */
+function findExternalNativeOwners(options) {
+    const owners = [];
+    const ignored = [...(options.ignorePids || [])];
+    for (let count = 0; count < 64; count++) {
+        try {
+            inspectExternalNativeOwner({ ...options, ignorePids: ignored });
+            return owners;
+        }
+        catch (error) {
+            if (!(error instanceof ExternalOwnerFound))
+                throw error;
+            owners.push({ pid: error.pid });
+            ignored.push(error.pid);
+        }
+    }
+    throw new Error('Too many external native owners to verify safely.');
+}
+//# sourceMappingURL=external-owners.js.map

package/dist/safemode/external-owners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-owners.js","sourceRoot":"","sources":["../../src/safemode/external-owners.ts"],"names":[],"mappings":";;;;;;AA8JA,kEAEC;AAGD,4DAYC;AA/KD,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAYxB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AACD,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAqB,GAAW;QAAI,KAAK,CAAC,qCAAqC,GAAG,oGAAoG,CAAC,CAAC;QAAnK,QAAG,GAAH,GAAG,CAAQ;IAAyJ,CAAC;CAC3L;AAFD,gDAEC;AACD,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzE,CAAC;AACD,SAAS,UAAU,CAAC,KAAa,EAAE,GAAgB;IACjD,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,OAA6B;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACxD,CAAC;IACD,mFAAmF;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,YAAE,CAAC,OAAO,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ;QACzC,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrD,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAgD,CAAC;IAC9E,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,KAAK,GAAG,YAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QACpH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,IAAI,MAA8E,CAAC;YACnF,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAChF,OAAO,KAAK,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC9B,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,2BAA2B,CAAC,CAAC;YACjH,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,0BAA0B,CAAC,CAAC;YACtI,0EAA0E;YAC1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,SAAS;gBAAE,SAAS;YACvF,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;gBAAE,SAAS;YACjG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7F,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,SAAS;gBAAE,SAAS;YACzB,wEAAwE;YACxE,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,MAAM,GAAG,CAAC;oBAAE,SAAS;gBACzB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ;gBAC1C,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9F,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACzF,IAAI,WAAW,IAAI,cAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,cAAI,CAAC,OAAO,CAAC,UAAU,CAAC;gBAAE,SAAS;YACpF,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,2BAA2B,CAAC,CAAC;YACjI,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,MAAM,IAAI,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YACpE,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACpD,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACrC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,eAAe;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;oBACzH,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,gBAAgB,OAAO,CAAC,eAAe,EAAE;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5H,CAAC;gBACD,uEAAuE;gBACvE,yEAAyE;gBACzE,KAAK,MAAM,EAAE,IAAI,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBACvD,IAAI,MAAc,CAAC;oBACnB,IAAI,CAAC;wBAAC,MAAM,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;oBAAC,CAAC;oBACzF,OAAO,KAAK,EAAE,CAAC;wBAAC,IAAI,QAAQ,CAAC,KAAK,CAAC;4BAAE,SAAS;wBAAC,MAAM,KAAK,CAAC;oBAAC,CAAC;oBAC7D,MAAM,IAAI,GAAG,cAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACnC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qBAAqB,CAAC,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,OAAO,CAAC,eAAe,OAAO,CAAC;2BACvH,CAAC,MAAM,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,cAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,eAAe,QAAQ,CAAC,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5I,CAAC;gBACD,yEAAyE;gBACzE,+DAA+D;gBAC/D,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,qEAAqE,CAAC,CAAC;gBAC3J,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5G,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,qCAAqC,CAAC,CAAC;YAC3H,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAA6B;IACvE,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,SAAgB,wBAAwB,CAAC,OAA6B;IACpE,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YAAC,0BAA0B,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACvF,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;gBAAE,MAAM,KAAK,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC"}

package/dist/safemode/native.d.ts

@@ -0,0 +1,38 @@
+export type SafemodeCli = 'claude' | 'codex';
+export interface NativeOptions {
+    cli: SafemodeCli;
+    mode: 'interactive' | 'headless';
+    cwd: string;
+    prompt?: string;
+    context?: string;
+    model?: string;
+    nativeSessionId?: string;
+    resume?: boolean;
+    nativeArgs?: string[];
+    nativeResumeIndex?: number;
+    env?: NodeJS.ProcessEnv;
+}
+export interface NativeInvocation {
+    command: string;
+    args: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    nativeSessionId?: string;
+}
+/** Only credentials used by the selected native provider belong in its environment. */
+export declare function nativeEnvironment(cli: SafemodeCli, source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Args are passed directly to spawn, never evaluated by a shell. */
+export declare function buildNativeInvocation(options: NativeOptions): NativeInvocation;
+/** Only authoritative init events identify a conversation; arbitrary tool JSON cannot. */
+export declare function extractNativeSessionId(cli: SafemodeCli, line: string): string | undefined;
+/**
+ * Codex interactive has no --session-id. Match the persisted session_meta to the
+ * dedicated safemode cwd and launch time, never `resume --last` or global history.
+ * Read only today's/newer date directories and a bounded first line per rollout.
+ */
+export declare function discoverCodexSession(options: {
+    cwd: string;
+    startedAt: number | string;
+    codexHome?: string;
+}): string | undefined;
+//# sourceMappingURL=native.d.ts.map

package/dist/safemode/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/safemode/native.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC7C,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AACD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAW9G;AAoBD,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAkE9E;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQzF;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,SAAS,CA0CjI"}

package/dist/safemode/native.js

@@ -0,0 +1,220 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nativeEnvironment = nativeEnvironment;
+exports.buildNativeInvocation = buildNativeInvocation;
+exports.extractNativeSessionId = extractNativeSessionId;
+exports.discoverCodexSession = discoverCodexSession;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
+const claude_bin_1 = require("../session/claude-bin");
+const codex_policy_1 = require("../session/codex-policy");
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Only credentials used by the selected native provider belong in its environment. */
+function nativeEnvironment(cli, source = process.env) {
+    const env = {};
+    const common = /^(HOME|USER|LOGNAME|PATH|SHELL|TERM|COLORTERM|TERM_PROGRAM|TERM_PROGRAM_VERSION|COLORFGBG|NO_COLOR|FORCE_COLOR|CLICOLOR|CLICOLOR_FORCE|TMUX|TMUX_PANE|LANG|LC_[A-Z_]+|TZ|TMPDIR|TEMP|TMP|XDG_CONFIG_HOME|XDG_CACHE_HOME|XDG_DATA_HOME|XDG_RUNTIME_DIR|DBUS_SESSION_BUS_ADDRESS|HTTP_PROXY|HTTPS_PROXY|ALL_PROXY|NO_PROXY|http_proxy|https_proxy|all_proxy|no_proxy|SSL_CERT_FILE|SSL_CERT_DIR|NODE_EXTRA_CA_CERTS)$/;
+    const provider = cli === 'claude'
+        ? /^(CLAUDE_CONFIG_DIR|ANTHROPIC_API_KEY|ANTHROPIC_AUTH_TOKEN|ANTHROPIC_BASE_URL|ANTHROPIC_MODEL|CLAUDE_CODE_OAUTH_TOKEN|CLAUDE_CODE_USE_BEDROCK|CLAUDE_CODE_USE_VERTEX|CLAUDE_CODE_USE_FOUNDRY|AWS_[A-Z_]+|GOOGLE_APPLICATION_CREDENTIALS|ANTHROPIC_VERTEX_PROJECT_ID|CLOUD_ML_REGION|ANTHROPIC_FOUNDRY_[A-Z_]+)$/
+        : /^(CODEX_HOME|CODEX_ACCESS_TOKEN|OPENAI_API_KEY|OPENAI_BASE_URL|OPENAI_ORG_ID|OPENAI_PROJECT_ID)$/;
+    for (const [key, value] of Object.entries(source)) {
+        if (value !== undefined && (common.test(key) || provider.test(key)))
+            env[key] = value;
+    }
+    // Never propagate gateway leases, SDK nesting, shell injection or GitHub credentials.
+    return env;
+}
+function disabledCodexServers(command, cwd, env) {
+    // Empty TOML tables merge with user config; setting mcp_servers={} is NOT isolation.
+    // Listing parses configuration only and never starts an MCP server.
+    let servers;
+    try {
+        servers = JSON.parse((0, child_process_1.execFileSync)(command, ['mcp', 'list', '--json'], {
+            cwd, env, encoding: 'utf8', timeout: 10000, maxBuffer: 1024 * 1024,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        }));
+    }
+    catch {
+        throw new Error('Cannot inspect Codex MCP configuration safely. Check `codex mcp list --json` before starting safemode.');
+    }
+    if (!Array.isArray(servers) || servers.some(server => typeof server?.name !== 'string')) {
+        throw new Error('Unsupported Codex MCP configuration output; safemode did not launch.');
+    }
+    return servers.flatMap(server => ['-c', `mcp_servers.${JSON.stringify(server.name)}.enabled=false`]);
+}
+/** Args are passed directly to spawn, never evaluated by a shell. */
+function buildNativeInvocation(options) {
+    if (options.nativeArgs !== undefined && options.mode !== 'interactive')
+        throw new Error('Native params are interactive-only');
+    if (options.resume && !options.nativeSessionId)
+        throw new Error('Native session ID is required to resume.');
+    if (options.nativeSessionId && !UUID.test(options.nativeSessionId))
+        throw new Error('Invalid native session ID.');
+    let env = nativeEnvironment(options.cli, options.env);
+    let model = options.model && options.model !== 'inherit' ? options.model : undefined;
+    if (options.cli === 'claude' && options.mode === 'headless') {
+        // --restricted excludes settings customizations. Preserve only native auth
+        // environment and model preference, never hooks, commands or permission grants.
+        let nativeModel;
+        try {
+            const settings = JSON.parse(fs_1.default.readFileSync(path_1.default.join(env.CLAUDE_CONFIG_DIR || path_1.default.join(env.HOME || os_1.default.homedir(), '.claude'), 'settings.json'), 'utf8'));
+            const auth = {};
+            if (settings.env && typeof settings.env === 'object') {
+                for (const [key, value] of Object.entries(settings.env)) {
+                    if (/^(ANTHROPIC_|CLAUDE_CODE_(OAUTH_TOKEN|USE_)|AWS_|GOOGLE_APPLICATION_CREDENTIALS$|CLOUD_ML_REGION$)/.test(key) && typeof value === 'string')
+                        auth[key] = value;
+                }
+            }
+            env = { ...nativeEnvironment('claude', auth), ...env };
+            if (typeof settings.model === 'string' && settings.model.trim())
+                nativeModel = settings.model;
+        }
+        catch { /* No explicit native settings: CLI chooses its own defaults/auth. */ }
+        if (!model)
+            model = env.ANTHROPIC_MODEL || nativeModel;
+    }
+    const prompt = [options.context, options.prompt].filter(Boolean).join('\n\n');
+    if (options.nativeArgs !== undefined) {
+        // Explicit operator options replace interactive defaults, never headless restrictions.
+        const args = [...options.nativeArgs];
+        let prefix = 0;
+        if (model && !args.some(a => a === '--model' || a === '-m' || a.startsWith('--model=') || a.startsWith('-m='))) {
+            args.unshift('--model', model);
+            prefix = 2;
+        }
+        const nativeSessionId = options.nativeSessionId || (options.cli === 'claude' ? (0, crypto_1.randomUUID)() : undefined);
+        if (options.cli === 'claude')
+            args.push(options.resume ? '--resume' : '--session-id', nativeSessionId);
+        else if (options.resume)
+            args.splice(prefix + (options.nativeResumeIndex ?? 0), 0, 'resume', nativeSessionId);
+        if (options.cli === 'codex')
+            args.push('--cd', options.cwd);
+        if (prompt)
+            args.push('--', prompt);
+        const command = options.cli === 'claude' ? options.env?.CLAUDE_BIN || process.env.CLAUDE_BIN || (0, claude_bin_1.resolveClaudeBin)(env).bin : options.env?.CODEX_BIN || process.env.CODEX_BIN || 'codex';
+        return { command, args, env, cwd: options.cwd, nativeSessionId };
+    }
+    if (options.cli === 'claude') {
+        const command = options.env?.CLAUDE_BIN || process.env.CLAUDE_BIN || (0, claude_bin_1.resolveClaudeBin)(env).bin;
+        const nativeSessionId = options.nativeSessionId || (0, crypto_1.randomUUID)();
+        const args = ['--safe-mode', '--strict-mcp-config', '--permission-mode', options.mode === 'headless' ? 'dontAsk' : 'manual'];
+        if (options.mode === 'headless')
+            args.push('--restricted', '--print', '--output-format', 'stream-json', '--verbose', '--tools', 'Read,Glob,Grep');
+        args.push(options.resume ? '--resume' : '--session-id', nativeSessionId);
+        if (model)
+            args.push('--model', model);
+        if (prompt)
+            args.push('--', prompt);
+        return { command, args, env, cwd: options.cwd, nativeSessionId };
+    }
+    const command = options.env?.CODEX_BIN || process.env.CODEX_BIN || 'codex';
+    const args = [
+        ...(0, codex_policy_1.codexPolicyArgs)(),
+        '-c', 'shell_environment_policy.inherit="none"',
+        '-c', 'shell_environment_policy.set={}',
+        '-c', 'sandbox_mode="read-only"',
+        '-c', `approval_policy="${options.mode === 'headless' ? 'never' : 'on-request'}"`,
+        ...disabledCodexServers(command, options.cwd, env),
+    ];
+    if (model)
+        args.push('--model', model);
+    if (options.mode === 'headless') {
+        args.push('exec', '--cd', options.cwd, '--json', '--ignore-rules', '--skip-git-repo-check');
+        if (options.resume)
+            args.push('resume', options.nativeSessionId);
+    }
+    else {
+        if (options.resume)
+            args.push('resume', options.nativeSessionId);
+        args.push('--cd', options.cwd);
+    }
+    if (prompt)
+        args.push('--', prompt);
+    return { command, args, env, cwd: options.cwd, nativeSessionId: options.nativeSessionId };
+}
+/** Only authoritative init events identify a conversation; arbitrary tool JSON cannot. */
+function extractNativeSessionId(cli, line) {
+    try {
+        const event = JSON.parse(line);
+        const id = cli === 'codex'
+            ? event.type === 'thread.started' ? event.thread_id : undefined
+            : event.type === 'system' && event.subtype === 'init' ? event.session_id : undefined;
+        return typeof id === 'string' && UUID.test(id) ? id : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Codex interactive has no --session-id. Match the persisted session_meta to the
+ * dedicated safemode cwd and launch time, never `resume --last` or global history.
+ * Read only today's/newer date directories and a bounded first line per rollout.
+ */
+function discoverCodexSession(options) {
+    const start = typeof options.startedAt === 'number' ? options.startedAt : Date.parse(options.startedAt);
+    if (!Number.isFinite(start))
+        throw new Error('Invalid session start time.');
+    const root = path_1.default.join(options.codexHome || process.env.CODEX_HOME || path_1.default.join(os_1.default.homedir(), '.codex'), 'sessions');
+    const day = new Date(start).toISOString().slice(0, 10).replace(/-/g, '/');
+    const ids = new Set();
+    const readDirs = (dir) => {
+        try {
+            return fs_1.default.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return [];
+        }
+    };
+    let inspected = 0;
+    for (const year of readDirs(root).filter(e => e.isDirectory() && /^\d{4}$/.test(e.name))) {
+        for (const month of readDirs(path_1.default.join(root, year.name)).filter(e => e.isDirectory() && /^\d{2}$/.test(e.name))) {
+            for (const date of readDirs(path_1.default.join(root, year.name, month.name)).filter(e => e.isDirectory() && /^\d{2}$/.test(e.name))) {
+                const relative = `${year.name}/${month.name}/${date.name}`;
+                if (relative < day)
+                    continue;
+                for (const file of readDirs(path_1.default.join(root, relative))) {
+                    if (!file.isFile() || !file.name.endsWith('.jsonl'))
+                        continue;
+                    if (++inspected > 5000)
+                        throw new Error('Too many Codex rollouts to identify safemode session safely.');
+                    let fd;
+                    try {
+                        fd = fs_1.default.openSync(path_1.default.join(root, relative, file.name), 'r');
+                        const buffer = Buffer.alloc(65536);
+                        const bytes = fs_1.default.readSync(fd, buffer, 0, buffer.length, 0);
+                        const text = buffer.toString('utf8', 0, bytes);
+                        const newline = text.indexOf('\n');
+                        if (newline === -1 && bytes === buffer.length)
+                            continue;
+                        const event = JSON.parse(newline === -1 ? text : text.slice(0, newline));
+                        const meta = event.payload;
+                        if (event.type !== 'session_meta' || !meta || meta.cwd !== options.cwd || !UUID.test(meta.id || ''))
+                            continue;
+                        if (Date.parse(meta.timestamp || event.timestamp) < start)
+                            continue;
+                        if (!Number.isFinite(Date.parse(meta.timestamp || event.timestamp)))
+                            continue;
+                        // Child investigations are separate native conversations.
+                        if (typeof meta.source === 'object')
+                            continue;
+                        ids.add(meta.id);
+                    }
+                    catch { /* Concurrent append or unrelated/corrupt rollout; retry on next poll. */ }
+                    finally {
+                        if (fd !== undefined)
+                            fs_1.default.closeSync(fd);
+                    }
+                }
+            }
+        }
+    }
+    if (ids.size > 1)
+        throw new Error('Multiple native Codex sessions match this safemode workspace; refusing ambiguous resume.');
+    return [...ids][0];
+}
+//# sourceMappingURL=native.js.map

package/dist/safemode/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/safemode/native.ts"],"names":[],"mappings":";;;;;AAiCA,8CAWC;AAqBD,sDAkEC;AAGD,wDAQC;AAOD,oDA0CC;AA/LD,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,mCAAoC;AACpC,iDAA6C;AAC7C,sDAAyD;AACzD,0DAA0D;AAwB1D,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,uFAAuF;AACvF,SAAgB,iBAAiB,CAAC,GAAgB,EAAE,SAA4B,OAAO,CAAC,GAAG;IACzF,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,qZAAqZ,CAAC;IACra,MAAM,QAAQ,GAAG,GAAG,KAAK,QAAQ;QAC/B,CAAC,CAAC,iTAAiT;QACnT,CAAC,CAAC,kGAAkG,CAAC;IACvG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxF,CAAC;IACD,sFAAsF;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,GAAW,EAAE,GAAsB;IAChF,qFAAqF;IACrF,oEAAoE;IACpE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YACpE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;YACnE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,qEAAqE;AACrE,SAAgB,qBAAqB,CAAC,OAAsB;IAC1D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC9H,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClH,IAAI,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5D,2EAA2E;QAC3E,gFAAgF;QAChF,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,YAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1J,MAAM,IAAI,GAAsB,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,GAAG,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxD,IAAI,oGAAoG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;wBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACrK,CAAC;YACH,CAAC;YACD,GAAG,GAAG,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;YACvD,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK;YAAE,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,uFAAuF;QACvF,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,GAAG,CAAC,CAAC;QAAC,CAAC;QAC/J,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,mBAAU,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzG,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,eAAgB,CAAC,CAAC;aACnG,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAgB,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;QACvL,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAA,6BAAgB,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC;QAC/F,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAA,mBAAU,GAAE,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7H,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAClJ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QACzE,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC;IAC3E,MAAM,IAAI,GAAG;QACX,GAAG,IAAA,8BAAe,GAAE;QACpB,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,iCAAiC;QACvC,IAAI,EAAE,0BAA0B;QAChC,IAAI,EAAE,oBAAoB,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,GAAG;QACjF,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;KACnD,CAAC;IACF,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;QAC5F,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAgB,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAgB,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;AAC5F,CAAC;AAED,0FAA0F;AAC1F,SAAgB,sBAAsB,CAAC,GAAgB,EAAE,IAAY;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,GAAG,GAAG,KAAK,OAAO;YACxB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/D,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,OAAwE;IAC3G,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;IACrH,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAe,EAAE;QAC5C,IAAI,CAAC;YAAC,OAAO,YAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACnF,CAAC,CAAC;IACF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3H,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,QAAQ,GAAG,GAAG;oBAAE,SAAS;gBAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBAAE,SAAS;oBAC9D,IAAI,EAAE,SAAS,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;oBACxG,IAAI,EAAsB,CAAC;oBAC3B,IAAI,CAAC;wBACH,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;wBAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACnC,MAAM,KAAK,GAAG,YAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;wBAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;wBAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBACnC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,MAAM;4BAAE,SAAS;wBACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;wBACzE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;4BAAE,SAAS;wBAC9G,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK;4BAAE,SAAS;wBACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;4BAAE,SAAS;wBAC9E,0DAA0D;wBAC1D,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;4BAAE,SAAS;wBAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;4BAC7E,CAAC;wBAAC,IAAI,EAAE,KAAK,SAAS;4BAAE,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9H,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/dist/safemode/params.d.ts

@@ -0,0 +1,10 @@
+import type { SafemodeCli } from './native';
+/** Quoting only: no shell expansion, substitution, globbing or execution. */
+export declare function splitNativeParams(text: string): string[];
+/** Identity/lifecycle switches remain owned by safemode; other options pass through. */
+export declare function inspectNativeParams(cli: SafemodeCli, args: string[]): {
+    args: string[];
+    resumeId?: string;
+    resumeIndex?: number;
+};
+//# sourceMappingURL=params.d.ts.map

package/dist/safemode/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../src/safemode/params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAsBxD;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CA4BjI"}