@1mcp/agent 0.38.1 → 0.38.2

package/build/core/server/legacyRuntimeRecovery.js

@@ -0,0 +1,209 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { getBackgroundLaunchConfigPath, readBackgroundLaunchConfig } from './backgroundLaunchConfig.js';
+import { getBackgroundSupervisorStatePath, } from './backgroundRuntimeSupervisorState.js';
+import { getPidFilePath } from './pidFileManager.js';
+import { readProcessEvidence } from './processEvidence.js';
+/** Evidence is operation-local, never a replacement for persisted modern identity. */
+export function processEvidenceMatches(expected, observed) {
+    return observed !== undefined && isDeepStrictEqual(expected, observed);
+}
+/** Read-only proof for the narrow, identity-less, supervised legacy shape. */
+export function verifyLegacyRuntimeOwner(configDir, owner, supervisorState, pidInfo, dependencies = {}) {
+    try {
+        if (!owner || !supervisorState || !pidInfo)
+            return undefined;
+        if (!isLegacySupervisedPair(owner, supervisorState, pidInfo))
+            return undefined;
+        const scope = fs.realpathSync(configDir);
+        if (!path.isAbsolute(pidInfo.configDir) || fs.realpathSync(pidInfo.configDir) !== scope)
+            return undefined;
+        const readEvidence = dependencies.readEvidence ?? readProcessEvidence;
+        const caller = readEvidence(process.pid);
+        const supervisor = readEvidence(owner.pid);
+        const worker = readEvidence(pidInfo.pid);
+        if (!caller || !supervisor || !worker)
+            return undefined;
+        const participants = [caller, supervisor, worker];
+        if (participants.some((evidence) => evidence.exited))
+            return undefined;
+        if (worker.ppid !== supervisor.pid)
+            return undefined;
+        if (!participants.every((evidence) => belongsToCaller(evidence, caller)))
+            return undefined;
+        const files = [
+            path.join(scope, 'runtime.owner', 'owner.json'),
+            getBackgroundSupervisorStatePath(scope),
+            getPidFilePath(scope),
+            getBackgroundLaunchConfigPath(scope),
+        ];
+        const before = snapshotFiles(scope, files, caller.uid);
+        if (!isDeepStrictEqual(JSON.parse(before[1].content), owner))
+            return undefined;
+        if (!isDeepStrictEqual(JSON.parse(before[2].content), supervisorState))
+            return undefined;
+        if (!isDeepStrictEqual(JSON.parse(before[3].content), pidInfo))
+            return undefined;
+        if (readBackgroundLaunchConfig(files[3]).claimId !== owner.claimId)
+            return undefined;
+        // Namespace equality alone does not exclude a chroot in the same mount namespace.
+        for (const evidence of participants) {
+            for (const file of [scope, ...files]) {
+                const local = fs.statSync(file);
+                const remote = fs.statSync(`/proc/${evidence.pid}/root${file}`);
+                if (local.dev !== remote.dev || local.ino !== remote.ino)
+                    return undefined;
+            }
+        }
+        const supervisorArgs = invocationArgs(supervisor);
+        const workerArgs = invocationArgs(worker);
+        if (!supervisorArgs || !workerArgs)
+            return undefined;
+        if (supervisor.executable !== worker.executable)
+            return undefined;
+        if (invocationPrefix(supervisor, supervisorArgs) !== invocationPrefix(worker, workerArgs))
+            return undefined;
+        if (!hasSupervisorRole(supervisorArgs))
+            return undefined;
+        if (!hasWorkerClaim(workerArgs, owner.claimId, files[3]))
+            return undefined;
+        for (const args of [supervisorArgs, workerArgs]) {
+            const scopes = values(args, 'config-dir');
+            if (scopes.length > 1)
+                return undefined;
+            if (scopes.length === 1 && !isScopePath(scopes[0], scope))
+                return undefined;
+            if (args.some((arg) => /^(--(stop|restart|status|background)(=|$)|--$)/.test(arg)))
+                return undefined;
+        }
+        if (!isDeepStrictEqual(before, snapshotFiles(scope, files, caller.uid)))
+            return undefined;
+        if (!processEvidenceMatches(caller, readEvidence(process.pid)))
+            return undefined;
+        if (!processEvidenceMatches(supervisor, readEvidence(owner.pid)))
+            return undefined;
+        if (!processEvidenceMatches(worker, readEvidence(pidInfo.pid)))
+            return undefined;
+        return { supervisor, worker };
+    }
+    catch {
+        // Missing, inaccessible, or malformed evidence never grants signal authority.
+        return undefined;
+    }
+}
+function isLegacySupervisedPair(owner, state, info) {
+    if (owner.kind !== 'background-supervisor')
+        return false;
+    const identities = [owner.processIdentity, state.supervisorIdentity, state.runtimeIdentity, info.processIdentity];
+    if (identities.some((identity) => identity !== undefined))
+        return false;
+    if (owner.pid !== state.supervisorPid)
+        return false;
+    if (info.pid !== state.runtimePid)
+        return false;
+    if (owner.pid === info.pid)
+        return false;
+    return /^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(owner.claimId);
+}
+function belongsToCaller(evidence, caller) {
+    if (evidence.uid !== caller.uid)
+        return false;
+    if (evidence.realUid !== caller.uid)
+        return false;
+    return isDeepStrictEqual(evidence.context, caller.context);
+}
+function invocationPrefix(evidence, args) {
+    return evidence.argv.slice(0, evidence.argv.length - args.length).join('\0');
+}
+function hasSupervisorRole(args) {
+    if (values(args, 'background-bootstrap').join() !== 'true')
+        return false;
+    if (values(args, 'runtime-owner-claim-id').length !== 0)
+        return false;
+    return values(args, 'background-launch-config').length === 0;
+}
+function hasWorkerClaim(args, claimId, launchConfig) {
+    if (values(args, 'background-bootstrap').length !== 0)
+        return false;
+    if (!isSingleValue(args, 'runtime-owner-claim-id', claimId))
+        return false;
+    return isSingleValue(args, 'background-launch-config', launchConfig);
+}
+function isScopePath(candidate, scope) {
+    if (!path.isAbsolute(candidate))
+        return false;
+    return fs.realpathSync(candidate) === scope;
+}
+function isInspectableMetadata(file, scope, stat, uid) {
+    if (stat.isSymbolicLink())
+        return false;
+    if (stat.uid !== uid)
+        return false;
+    const expectedType = file === scope ? stat.isDirectory() : stat.isFile();
+    if (!expectedType)
+        return false;
+    if ((stat.mode & 0o022) !== 0)
+        return false;
+    if (stat.size > 1024 * 1024)
+        return false;
+    return fs.realpathSync(file) === file;
+}
+function snapshotFiles(scope, files, uid) {
+    return [scope, ...files].map((file) => {
+        const stat = fs.lstatSync(file);
+        if (!isInspectableMetadata(file, scope, stat, uid)) {
+            throw new Error('Unverifiable legacy metadata');
+        }
+        return {
+            dev: stat.dev,
+            ino: stat.ino,
+            size: stat.size,
+            mtime: stat.mtimeMs,
+            ctime: stat.ctimeMs,
+            content: file === scope ? '' : fs.readFileSync(file, 'utf8'),
+        };
+    });
+}
+function invocationArgs(evidence) {
+    if (!path.isAbsolute(evidence.executable))
+        return undefined;
+    const executable = path.basename(evidence.executable);
+    let serveIndex;
+    if (/^node(?:js)?$/.test(executable)) {
+        const script = evidence.argv[1];
+        if (!script || !path.isAbsolute(script) || !/[/\\]build[/\\]index\.(?:c|m)?js$/.test(script))
+            return undefined;
+        if (fs.realpathSync(script) !== script || !fs.statSync(script).isFile())
+            return undefined;
+        const manifest = JSON.parse(fs.readFileSync(path.resolve(path.dirname(script), '..', 'package.json'), 'utf8'));
+        if (typeof manifest !== 'object' || manifest === null || !('name' in manifest) || manifest.name !== '@1mcp/agent')
+            return undefined;
+        serveIndex = 2;
+    }
+    else {
+        if (!/^1mcp(?:-[a-z0-9_-]+)?$/i.test(executable))
+            return undefined;
+        serveIndex = 1;
+    }
+    if (evidence.argv[serveIndex] !== 'serve')
+        return undefined;
+    return evidence.argv.slice(serveIndex + 1);
+}
+function values(args, name) {
+    const result = [];
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === `--${name}`) {
+            result.push(name === 'background-bootstrap' ? 'true' : (args[i + 1] ?? ''));
+        }
+        else if (args[i].startsWith(`--${name}=`)) {
+            result.push(args[i].slice(name.length + 3));
+        }
+    }
+    return result;
+}
+function isSingleValue(args, name, expected) {
+    const observed = values(args, name);
+    return observed.length === 1 && observed[0] === expected;
+}
+//# sourceMappingURL=legacyRuntimeRecovery.js.map

package/build/core/server/legacyRuntimeRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyRuntimeRecovery.js","sourceRoot":"","sources":["../../../src/core/server/legacyRuntimeRecovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAEL,gCAAgC,GACjC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAwB,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAGjF,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,QAAyB,EAAE,QAAqC;IACrG,OAAO,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,KAAyC,EACzC,eAAiD,EACjD,OAA6B,EAC7B,eAA8D,EAAE;IAEhE,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC7D,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAE/E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAC1G,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,mBAAmB,CAAC;QACtE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACvE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAE3F,MAAM,KAAK,GAAG;YACZ,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY,CAAC;YAC/C,gCAAgC,CAAC,KAAK,CAAC;YACvC,cAAc,CAAC,KAAK,CAAC;YACrB,6BAA6B,CAAC,KAAK,CAAC;SACrC,CAAC;QACF,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACjF,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAErF,kFAAkF;QAClF,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,QAAQ,CAAC,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;oBAAE,OAAO,SAAS,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QACrD,IAAI,UAAU,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,CAAC,KAAK,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5G,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QACzD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAE3E,KAAK,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC5E,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;QACvG,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1F,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACjF,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACnF,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACjF,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAkC,EAClC,KAAgC,EAChC,IAAmB;IAEnB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClH,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,wEAAwE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB,EAAE,MAAuB;IACzE,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAyB,EAAE,IAAc;IACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc;IACvC,IAAI,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACzE,IAAI,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,OAAe,EAAE,YAAoB;IAC3E,IAAI,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,wBAAwB,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,aAAa,CAAC,IAAI,EAAE,0BAA0B,EAAE,YAAY,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,KAAa;IACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa,EAAE,IAAc,EAAE,GAAW;IACrF,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACzE,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAe,EAAE,GAAW;IAChE,OAAO,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,OAAO,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,QAAyB;IAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/G,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1F,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAClC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAClF,CAAC;QACF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;YAC/G,OAAO,SAAS,CAAC;QACnB,UAAU,GAAG,CAAC,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QACnE,UAAU,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,IAAc,EAAE,IAAY;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,IAAc,EAAE,IAAY,EAAE,QAAgB;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AAC3D,CAAC"}

package/build/core/server/processEvidence.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+declare const evidenceShape: z.ZodObject<{
+    pid: z.ZodNumber;
+    ppid: z.ZodNumber;
+    uid: z.ZodNumber;
+    realUid: z.ZodNumber;
+    executable: z.ZodString;
+    argv: z.ZodArray<z.ZodString>;
+    exited: z.ZodOptional<z.ZodLiteral<true>>;
+    birth: z.ZodString;
+    context: z.ZodObject<{
+        platform: z.ZodLiteral<"linux">;
+        bootId: z.ZodString;
+        pidNamespace: z.ZodString;
+        mountNamespace: z.ZodOptional<z.ZodString>;
+        userNamespace: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ProcessEvidence = z.infer<typeof evidenceShape>;
+/** Capture exact procfs evidence on Linux; other platforms use guided legacy recovery. */
+export declare function readProcessEvidence(pid: number): ProcessEvidence | undefined;
+export {};
+//# sourceMappingURL=processEvidence.d.ts.map

package/build/core/server/processEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processEvidence.d.ts","sourceRoot":"","sources":["../../../src/core/server/processEvidence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,QAAA,MAAM,aAAa;;;;;;;;;;;;;;;;iBAsBjB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAqE5D,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAU5E"}

package/build/core/server/processEvidence.js

@@ -0,0 +1,114 @@
+import fs from 'node:fs';
+import { z } from 'zod';
+const integer = z.number().int().nonnegative().max(2147483647);
+const evidenceShape = z.object({
+    pid: integer.positive(),
+    ppid: integer,
+    uid: z.number().int().nonnegative(),
+    realUid: z.number().int().nonnegative(),
+    executable: z.string(),
+    argv: z.array(z.string()).max(65536),
+    exited: z.literal(true).optional(),
+    birth: z.string().regex(/^\d+(?:\.\d+)?$/),
+    context: z.object({
+        platform: z.literal('linux'),
+        bootId: z.string().min(1),
+        pidNamespace: z.string().regex(/^pid:\[\d+\]$/),
+        mountNamespace: z
+            .string()
+            .regex(/^mnt:\[\d+\]$/)
+            .optional(),
+        userNamespace: z
+            .string()
+            .regex(/^user:\[\d+\]$/)
+            .optional(),
+    }),
+});
+const evidenceSchema = evidenceShape.refine(hasCompleteEvidence);
+function hasCompleteEvidence(value) {
+    if (value.exited)
+        return value.executable === '' && value.argv.length === 0;
+    if (!value.executable.startsWith('/'))
+        return false;
+    if (value.argv.length === 0)
+        return false;
+    return !!(value.context.mountNamespace && value.context.userNamespace);
+}
+const MAX_BYTES = 4 * 1024 * 1024;
+function readBounded(filename, limit) {
+    const fd = fs.openSync(filename, 'r');
+    try {
+        const buffer = Buffer.alloc(limit + 1);
+        let length = 0;
+        while (length <= limit) {
+            const count = fs.readSync(fd, buffer, length, buffer.length - length, null);
+            if (!count)
+                return new TextDecoder('utf-8', { fatal: true }).decode(buffer.subarray(0, length));
+            length += count;
+        }
+        throw new Error('Process evidence exceeds limit');
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+}
+function readExitedNamespace(filename) {
+    try {
+        return fs.readlinkSync(filename);
+    }
+    catch {
+        return undefined;
+    }
+}
+function linuxSnapshot(pid) {
+    const base = `/proc/${pid}`;
+    const stat = readBounded(`${base}/stat`, 16384);
+    const end = stat.lastIndexOf(')');
+    if (!stat.startsWith(`${pid} (`) || end < 0)
+        throw new Error('Malformed process stat');
+    const fields = stat
+        .slice(end + 2)
+        .trim()
+        .split(/\s+/);
+    const exited = fields[0] === 'Z' || fields[0] === 'X';
+    const status = readBounded(`${base}/status`, 65536);
+    const uid = /^Uid:\s+(\d+)\s+(\d+)\s+\d+\s+\d+$/m.exec(status);
+    const cmdline = exited ? '' : readBounded(`${base}/cmdline`, MAX_BYTES);
+    if (!uid)
+        throw new Error('Missing process evidence');
+    if (!exited && !cmdline.endsWith('\0'))
+        throw new Error('Missing process evidence');
+    return evidenceSchema.parse({
+        pid,
+        ppid: Number(fields[1]),
+        uid: Number(uid[2]),
+        realUid: Number(uid[1]),
+        executable: exited ? '' : fs.readlinkSync(`${base}/exe`),
+        argv: exited ? [] : cmdline.slice(0, -1).split('\0'),
+        ...(exited ? { exited: true } : {}),
+        birth: fields[19],
+        context: {
+            platform: 'linux',
+            bootId: readBounded('/proc/sys/kernel/random/boot_id', 128).trim(),
+            pidNamespace: fs.readlinkSync(`${base}/ns/pid`),
+            mountNamespace: exited ? readExitedNamespace(`${base}/ns/mnt`) : fs.readlinkSync(`${base}/ns/mnt`),
+            userNamespace: exited ? readExitedNamespace(`${base}/ns/user`) : fs.readlinkSync(`${base}/ns/user`),
+        },
+    });
+}
+/** Capture exact procfs evidence on Linux; other platforms use guided legacy recovery. */
+export function readProcessEvidence(pid) {
+    if (process.platform !== 'linux')
+        return undefined;
+    if (!Number.isSafeInteger(pid) || pid <= 0 || pid > 2147483647)
+        return undefined;
+    try {
+        const before = linuxSnapshot(pid);
+        const after = linuxSnapshot(pid);
+        return JSON.stringify(before) === JSON.stringify(after) ? after : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=processEvidence.js.map

package/build/core/server/processEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processEvidence.js","sourceRoot":"","sources":["../../../src/core/server/processEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;IACvB,IAAI,EAAE,OAAO;IACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;QAC/C,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,KAAK,CAAC,eAAe,CAAC;aACtB,QAAQ,EAAE;QACb,aAAa,EAAE,CAAC;aACb,MAAM,EAAE;aACR,KAAK,CAAC,gBAAgB,CAAC;aACvB,QAAQ,EAAE;KACd,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAEjE,SAAS,mBAAmB,CAAC,KAAsB;IACjD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,UAAU,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI;SAChB,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;SACd,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,UAAU,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpF,OAAO,cAAc,CAAC,KAAK,CAAC;QAC1B,GAAG;QACH,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,MAAM,CAAC;QACxD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;YAClE,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,SAAS,CAAC;YAC/C,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,SAAS,CAAC;YAClG,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC;SACpG;KACF,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,UAAU;QAAE,OAAO,SAAS,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/build/core/server/runtimeLifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeLifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,aAAa,EACd,MAAM,oCAAoC,CAAC;AAO5C;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,+EAA+E;IAC/E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAOvE;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAiB3F,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,SAAO,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,cAA+B,GAC9C,OAAO,CAAC,aAAa,CAAC,CA2CxB"}
+{"version":3,"file":"runtimeLifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,aAAa,EACd,MAAM,oCAAoC,CAAC;AAO5C;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,+EAA+E;IAC/E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAOvE;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAiB3F,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,SAAO,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,cAA+B,GAC9C,OAAO,CAAC,aAAa,CAAC,CA+CxB"}

package/build/core/server/runtimeLifecycle.js

@@ -95,7 +95,10 @@ export async function discoverScopedRuntime(configDir, readinessProbe = probeRea
         return {
             status: 'error',
             info: null,
-            error: `Cannot verify process identity for Runtime Scope PID ${info.pid}; lifecycle metadata was retained.`,
+            error: `Cannot verify process identity for Runtime Scope PID ${info.pid}; lifecycle metadata was retained.` +
+                (!info.processIdentity
+                    ? ' A legacy PID record alone cannot establish recovery authority. Stop the original runtime using its original CLI or service manager; verify all scope participants have stopped before manual metadata cleanup.'
+                    : ''),
         };
     }
     if (identityStatus === 'dead') {

package/build/core/server/runtimeLifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeLifecycle.js","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA0C9D,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,SAAS,GAAG,IAAI;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;YAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,yEAAyE;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,0EAA0E;YAC1E,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,iBAAiC,cAAc;IAE/C,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,wDAAwD,IAAI,CAAC,GAAG,oCAAoC;SAC5G,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,GAAG,4BAA4B,CAAC,CAAC;QAC3F,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"runtimeLifecycle.js","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA0C9D,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,SAAS,GAAG,IAAI;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;YAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,yEAAyE;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,0EAA0E;YAC1E,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,iBAAiC,cAAc;IAE/C,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI;YACV,KAAK,EACH,wDAAwD,IAAI,CAAC,GAAG,oCAAoC;gBACpG,CAAC,CAAC,IAAI,CAAC,eAAe;oBACpB,CAAC,CAAC,iNAAiN;oBACnN,CAAC,CAAC,EAAE,CAAC;SACV,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,GAAG,4BAA4B,CAAC,CAAC;QAC3F,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1mcp/agent",
-  "version": "0.38.1",
+  "version": "0.38.2",
   "description": "One MCP server to aggregate them all - A unified Model Context Protocol server implementation",
   "keywords": [
     "mcp",