@0xmaxma/claude-gateway 2.0.6 → 2.0.7

package/dist/safemode/params.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.splitNativeParams = splitNativeParams;
+exports.inspectNativeParams = inspectNativeParams;
+/** Quoting only: no shell expansion, substitution, globbing or execution. */
+function splitNativeParams(text) {
+    if (!text.trim() || text.length > 100000 || text.includes('\0'))
+        throw new Error('Invalid --params value');
+    const args = [];
+    let word = '', quote = '', started = false;
+    for (let i = 0; i < text.length; i++) {
+        const ch = text[i];
+        if (ch === '\\' && quote !== "'") {
+            if (++i === text.length)
+                throw new Error('Unfinished escape in --params');
+            const next = text[i];
+            if (quote === '"' && !['"', '\\', '$', '`', '\n'].includes(next))
+                word += '\\';
+            if (next !== '\n')
+                word += next;
+            started = true;
+        }
+        else if (quote) {
+            if (ch === quote)
+                quote = '';
+            else
+                word += ch;
+        }
+        else if (ch === '"' || ch === "'") {
+            quote = ch;
+            started = true;
+        }
+        else if (/\s/.test(ch)) {
+            if (started) {
+                args.push(word);
+                word = '';
+                started = false;
+            }
+        }
+        else {
+            word += ch;
+            started = true;
+        }
+    }
+    if (quote)
+        throw new Error('Unclosed quote in --params');
+    if (started)
+        args.push(word);
+    return args;
+}
+/** Identity/lifecycle switches remain owned by safemode; other options pass through. */
+function inspectNativeParams(cli, args) {
+    const remaining = [];
+    let resumeId;
+    let resumeIndex;
+    const forbidden = cli === 'codex'
+        ? ['exec', 'e', 'review', 'fork', 'app-server', 'exec-server', 'login', 'logout', 'mcp', 'plugin', 'agents', 'queue', 'archive', 'delete', 'unarchive', 'migrate-rollouts', 'remote-control', 'completion', 'update', 'doctor', 'sandbox', 'debug', 'apply', 'a', 'cloud', 'features', 'help', '--last', '--remote', '--cd', '-C']
+        : ['--print', '-p', '--continue', '-c', '--fork-session', '--session-id', '--resume-session-at', '--no-session-persistence', '--remote'];
+    const valueFlags = cli === 'codex'
+        ? ['-c', '--config', '-m', '--model', '-p', '--profile', '-s', '--sandbox', '-a', '--ask-for-approval', '--enable', '--disable', '--image', '-i', '--add-dir']
+        : ['--model', '--permission-mode', '--tools', '--allowedTools', '--disallowedTools', '--mcp-config', '--settings', '--setting-sources', '--system-prompt', '--append-system-prompt', '--add-dir', '--agent', '--agents', '--effort'];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i], flag = arg.split('=')[0];
+        if ((cli === 'claude' && /^-[rcp].+/.test(arg) && !arg.startsWith('-r=')) || (cli === 'codex' && /^-C.+/.test(arg)))
+            throw new Error('Use explicit lifecycle flags; combined short switches are unsupported in --params');
+        if (arg === '--' || forbidden.includes(flag))
+            throw new Error('Native lifecycle, workspace and remote switches are not supported in --params; use --prompt for prompt text');
+        if ((cli === 'codex' && arg === 'resume') || (cli === 'claude' && ['--resume', '-r'].includes(flag))) {
+            const id = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : args[++i];
+            if (resumeId || !id || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(id))
+                throw new Error('Native resume requires exactly one explicit session UUID');
+            resumeId = id.toLowerCase();
+            resumeIndex = remaining.length;
+        }
+        else {
+            remaining.push(arg);
+            if (valueFlags.includes(arg)) {
+                if (args[i + 1] === undefined || args[i + 1].startsWith('-'))
+                    throw new Error('Missing native option value in --params');
+                remaining.push(args[++i]);
+            }
+        }
+    }
+    return { args: remaining, resumeId, ...(resumeIndex !== undefined ? { resumeIndex } : {}) };
+}
+//# sourceMappingURL=params.js.map

package/dist/safemode/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../src/safemode/params.ts"],"names":[],"mappings":";;AAGA,8CAsBC;AAGD,kDA4BC;AAtDD,6EAA6E;AAC7E,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,IAAI,CAAC;YAC/E,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,IAAI,IAAI,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,EAAE,CAAC;;gBAAM,IAAI,IAAI,EAAE,CAAC;QAChD,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;aAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YAAC,IAAI,IAAI,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACzD,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAgB,mBAAmB,CAAC,GAAgB,EAAE,IAAc;IAClE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,QAA4B,CAAC;IACjC,IAAI,WAA+B,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,KAAK,OAAO;QAC/B,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;QAClU,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,UAAU,CAAC,CAAC;IAC3I,MAAM,UAAU,GAAG,GAAG,KAAK,OAAO;QAChC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC;QAC9J,CAAC,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvO,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QAC1N,IAAI,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6GAA6G,CAAC,CAAC;QAC7K,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrG,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3E,IAAI,QAAQ,IAAI,CAAC,EAAE,IAAI,CAAC,iEAAiE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChL,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC5B,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACzH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/dist/safemode/provenance.d.ts

@@ -0,0 +1,45 @@
+export interface BuildProvenance {
+    schemaVersion: 1;
+    packageVersion: string;
+    builtAt: string;
+    commit: string | null;
+    tag: string | null;
+    dirty: boolean | null;
+}
+export interface RuntimeProvenance {
+    schemaVersion: 1;
+    pid: number;
+    startedAt: string;
+    executablePath: string;
+    entrypoint: string | null;
+    packageRoot: string;
+    packageVersion: string | null;
+    configPath: string | null;
+    port: number | null;
+    /** Linux kernel start ticks distinguish a still-running process from PID reuse. */
+    processStartTicks: string | null;
+    build: BuildProvenance | null;
+    checkoutAtStartup: {
+        commit: string | null;
+        branch: string | null;
+        dirty: boolean | null;
+    } | null;
+    installKind: 'git-checkout' | 'package';
+    sourceConfidence: 'exact-build' | 'modified-build' | 'unknown';
+}
+export declare function processStartTicks(pid: number): string | null;
+export declare function defaultRuntimeProvenancePath(): string;
+/** Capture once at startup. A later git checkout must never rewrite this evidence. */
+export declare function captureRuntimeProvenance(options?: {
+    packageRoot?: string;
+    pid?: number;
+    startedAt?: string;
+    configPath?: string;
+    port?: number;
+}): RuntimeProvenance;
+/** Private local evidence survives shutdown for post-mortem diagnosis. */
+export declare function writeRuntimeProvenance(record: RuntimeProvenance, filePath?: string): void;
+export declare function readRuntimeProvenance(filePath?: string): RuntimeProvenance | null;
+/** Callers must label dead records as last-run evidence, never the current runtime. */
+export declare function isRecordedRuntimeAlive(record: RuntimeProvenance): boolean;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/safemode/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/safemode/provenance.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACvB;AACD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,CAAC,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,mFAAmF;IACnF,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAClG,WAAW,EAAE,cAAc,GAAG,SAAS,CAAC;IACxC,gBAAgB,EAAE,aAAa,GAAG,gBAAgB,GAAG,SAAS,CAAC;CAChE;AAqBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5D;AACD,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AACD,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,OAAO,GAAE;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvF,GAAG,iBAAiB,CAwBzB;AACD,0EAA0E;AAC1E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,SAAiC,GAAG,IAAI,CASjH;AACD,wBAAgB,qBAAqB,CAAC,QAAQ,SAAiC,GAAG,iBAAiB,GAAG,IAAI,CAQzG;AACD,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAMzE"}

package/dist/safemode/provenance.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processStartTicks = processStartTicks;
+exports.defaultRuntimeProvenancePath = defaultRuntimeProvenancePath;
+exports.captureRuntimeProvenance = captureRuntimeProvenance;
+exports.writeRuntimeProvenance = writeRuntimeProvenance;
+exports.readRuntimeProvenance = readRuntimeProvenance;
+exports.isRecordedRuntimeAlive = isRecordedRuntimeAlive;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const child_process_1 = require("child_process");
+const manager_1 = require("../cli/manager");
+function git(root, args) {
+    try {
+        return (0, child_process_1.execFileSync)('git', ['-C', root, ...args], {
+            encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000, maxBuffer: 1024 * 1024,
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function readJson(file) {
+    try {
+        return JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+function isObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function validBuild(value) {
+    return isObject(value) && value.schemaVersion === 1 && typeof value.packageVersion === 'string'
+        && typeof value.builtAt === 'string' && Number.isFinite(Date.parse(value.builtAt))
+        && (value.commit === null || (typeof value.commit === 'string' && /^[a-f0-9]{40,64}$/.test(value.commit)))
+        && (value.tag === null || typeof value.tag === 'string')
+        && (value.dirty === null || typeof value.dirty === 'boolean');
+}
+function processStartTicks(pid) {
+    try {
+        const stat = fs.readFileSync(`/proc/${pid}/stat`, 'utf8');
+        return stat.slice(stat.lastIndexOf(')') + 2).split(' ')[19] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function defaultRuntimeProvenancePath() {
+    return path.join(path.dirname((0, manager_1.defaultPidfilePath)()), 'runtime-provenance.json');
+}
+/** Capture once at startup. A later git checkout must never rewrite this evidence. */
+function captureRuntimeProvenance(options = {}) {
+    const packageRoot = path.resolve(options.packageRoot ?? path.join(__dirname, '..', '..'));
+    const pkg = readJson(path.join(packageRoot, 'package.json'));
+    const manifest = readJson(path.join(packageRoot, 'dist', 'build-provenance.json'));
+    const build = validBuild(manifest) ? manifest : null;
+    const top = git(packageRoot, ['rev-parse', '--show-toplevel']);
+    let checkout = false;
+    try {
+        checkout = top !== null && fs.realpathSync(top) === fs.realpathSync(packageRoot);
+    }
+    catch { /* Missing checkout. */ }
+    const status = checkout ? git(packageRoot, ['status', '--porcelain', '--untracked-files=normal']) : null;
+    const pid = options.pid ?? process.pid;
+    const packageVersion = isObject(pkg) && typeof pkg.version === 'string' ? pkg.version : null;
+    return {
+        schemaVersion: 1, pid, startedAt: options.startedAt ?? new Date(Date.now() - process.uptime() * 1000).toISOString(),
+        executablePath: process.execPath, entrypoint: process.argv[1] ? path.resolve(process.argv[1]) : null,
+        packageRoot, packageVersion, configPath: options.configPath ? path.resolve(options.configPath) : null,
+        port: options.port ?? null, processStartTicks: processStartTicks(pid), build,
+        checkoutAtStartup: checkout ? {
+            commit: git(packageRoot, ['rev-parse', 'HEAD']), branch: git(packageRoot, ['symbolic-ref', '--short', '-q', 'HEAD']),
+            dirty: status === null ? null : status.length > 0,
+        } : null,
+        installKind: checkout ? 'git-checkout' : 'package',
+        sourceConfidence: build?.commit && build.packageVersion === packageVersion
+            ? (build.dirty === false ? 'exact-build' : build.dirty === true ? 'modified-build' : 'unknown') : 'unknown',
+    };
+}
+/** Private local evidence survives shutdown for post-mortem diagnosis. */
+function writeRuntimeProvenance(record, filePath = defaultRuntimeProvenancePath()) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+    const temporary = `${filePath}.${(0, crypto_1.randomUUID)()}.tmp`;
+    try {
+        fs.writeFileSync(temporary, JSON.stringify(record, null, 2) + '\n', { mode: 0o600, flag: 'wx' });
+        fs.renameSync(temporary, filePath);
+    }
+    finally {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* Renamed or creation failed. */ }
+    }
+}
+function readRuntimeProvenance(filePath = defaultRuntimeProvenancePath()) {
+    const record = readJson(filePath);
+    if (!isObject(record) || record.schemaVersion !== 1 || !Number.isInteger(record.pid) || record.pid <= 0
+        || typeof record.startedAt !== 'string' || !Number.isFinite(Date.parse(record.startedAt))
+        || typeof record.packageRoot !== 'string' || !path.isAbsolute(record.packageRoot)
+        || typeof record.executablePath !== 'string' || (record.build !== null && !validBuild(record.build))
+        || !['exact-build', 'modified-build', 'unknown'].includes(String(record.sourceConfidence)))
+        return null;
+    return record;
+}
+/** Callers must label dead records as last-run evidence, never the current runtime. */
+function isRecordedRuntimeAlive(record) {
+    try {
+        process.kill(record.pid, 0);
+    }
+    catch (error) {
+        if (error.code !== 'EPERM')
+            return false;
+    }
+    const ticks = processStartTicks(record.pid);
+    return record.processStartTicks !== null && ticks !== null && ticks === record.processStartTicks;
+}
+//# sourceMappingURL=provenance.js.map

package/dist/safemode/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/safemode/provenance.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,8CAKC;AACD,oEAEC;AAED,4DA0BC;AAED,wDASC;AACD,sDAQC;AAED,wDAMC;AAnHD,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAoC;AACpC,iDAA6C;AAC7C,4CAAoD;AA2BpD,SAAS,GAAG,CAAC,IAAY,EAAE,IAAc;IACvC,IAAI,CAAC;QACH,OAAO,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI;SAC7F,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AACD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClF,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;WAC1F,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;WAC/E,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;WACvG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC;WACrD,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AAClE,CAAC;AACD,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AACD,SAAgB,4BAA4B;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAA,4BAAkB,GAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAClF,CAAC;AACD,sFAAsF;AACtF,SAAgB,wBAAwB,CAAC,UAErC,EAAE;IACJ,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,OAAO;QACL,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACnH,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;QACpG,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;QACrG,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK;QAC5E,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpH,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;SAClD,CAAC,CAAC,CAAC,IAAI;QACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAClD,gBAAgB,EAAE,KAAK,EAAE,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YACxE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9G,CAAC;AACJ,CAAC;AACD,0EAA0E;AAC1E,SAAgB,sBAAsB,CAAC,MAAyB,EAAE,QAAQ,GAAG,4BAA4B,EAAE;IACzG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,IAAA,mBAAU,GAAE,MAAM,CAAC;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AACD,SAAgB,qBAAqB,CAAC,QAAQ,GAAG,4BAA4B,EAAE;IAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAK,MAAM,CAAC,GAAc,IAAI,CAAC;WAC9G,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;WACtF,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;WAC9E,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;WACjG,CAAC,CAAC,aAAa,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1G,OAAO,MAAsC,CAAC;AAChD,CAAC;AACD,uFAAuF;AACvF,SAAgB,sBAAsB,CAAC,MAAyB;IAC9D,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClD,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,iBAAiB,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,iBAAiB,CAAC;AACnG,CAAC"}

package/dist/safemode/runner.d.ts

@@ -0,0 +1,17 @@
+import { SafemodeStore, SafemodeSession, Owner } from './store';
+export interface RunOptions {
+    agentId?: string;
+    noBootstrap?: boolean;
+    nativeArgs?: string[];
+    nativeResumeIndex?: number;
+    mode: 'interactive' | 'headless';
+    prompt?: string;
+    requestId?: string;
+    configPath?: string;
+}
+export declare function controlPath(store: SafemodeStore, id: string): string;
+export declare function stopSession(store: SafemodeStore, id: string, expectedOwner?: Owner): Promise<void>;
+export declare function recoverSession(store: SafemodeStore, id: string): void;
+export declare function getRequest(store: SafemodeStore, id: string, requestId: string): SafemodeSession['lastRequest'];
+export declare function runSession(store: SafemodeStore, session: SafemodeSession, options: RunOptions): Promise<number>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/safemode/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/safemode/runner.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAqB,MAAM,SAAS,CAAC;AAKnF,MAAM,WAAW,UAAU;IAAG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AAEtN,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAGpE;AACD,wBAAsB,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAcxG;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAarE;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CAAC,aAAa,CAAC,CAG9G;AACD,wBAAsB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAuNrH"}