@1mcp/agent 0.38.1 → 0.39.0-beta.0

package/build/core/server/runtimeReplacementConfig.d.ts

@@ -0,0 +1,295 @@
+import type { ServeOptions } from '../../commands/serve/serve.js';
+import { z } from 'zod';
+export declare const explicitLaunchInputsSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    values: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strict>;
+export type ExplicitLaunchInputs = z.infer<typeof explicitLaunchInputsSchema>;
+/** Reparse the original invocation with no defaults, retaining explicit ONE_MCP values too. */
+export declare function captureExplicitLaunchInputs(rawArgv: string[]): ExplicitLaunchInputs;
+export declare const runtimeReplacementSnapshotSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    runtimeScope: z.ZodString;
+    configFilePath: z.ZodString;
+    mcpConfig: z.ZodObject<{
+        version: z.ZodOptional<z.ZodString>;
+        serverDefaults: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        mcpServers: z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodOptional<z.ZodEnum<{
+                stdio: "stdio";
+                http: "http";
+                sse: "sse";
+                streamableHttp: "streamableHttp";
+            }>>;
+            protocolVersion: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                auto: "auto";
+                "2026-07-28": "2026-07-28";
+            }>>;
+            disabled: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>>;
+            disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            instructionOverride: z.ZodOptional<z.ZodString>;
+            toolDescriptionOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodString]>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stderr: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                pipe: "pipe";
+                overlapped: "overlapped";
+                ignore: "ignore";
+                inherit: "inherit";
+            }>, z.ZodNumber]>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            template: z.ZodOptional<z.ZodObject<{
+                shareable: z.ZodOptional<z.ZodBoolean>;
+                maxInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                perClient: z.ZodOptional<z.ZodBoolean>;
+                extractionOptions: z.ZodOptional<z.ZodObject<{
+                    includeOptional: z.ZodOptional<z.ZodBoolean>;
+                    includeEnvironment: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        mcpTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodOptional<z.ZodEnum<{
+                stdio: "stdio";
+                http: "http";
+                sse: "sse";
+                streamableHttp: "streamableHttp";
+            }>>;
+            protocolVersion: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                auto: "auto";
+                "2026-07-28": "2026-07-28";
+            }>>;
+            disabled: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>>;
+            disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            instructionOverride: z.ZodOptional<z.ZodString>;
+            toolDescriptionOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodString]>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stderr: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                pipe: "pipe";
+                overlapped: "overlapped";
+                ignore: "ignore";
+                inherit: "inherit";
+            }>, z.ZodNumber]>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            template: z.ZodOptional<z.ZodObject<{
+                shareable: z.ZodOptional<z.ZodBoolean>;
+                maxInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                perClient: z.ZodOptional<z.ZodBoolean>;
+                extractionOptions: z.ZodOptional<z.ZodObject<{
+                    includeOptional: z.ZodOptional<z.ZodBoolean>;
+                    includeEnvironment: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>>;
+        templateSettings: z.ZodOptional<z.ZodObject<{
+            validateOnReload: z.ZodOptional<z.ZodBoolean>;
+            failureMode: z.ZodOptional<z.ZodEnum<{
+                strict: "strict";
+                graceful: "graceful";
+            }>>;
+            cacheContext: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        instructionTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            initialization: z.ZodString;
+            cli: z.ZodString;
+        }, z.core.$strip>>>;
+        publishedInstructionTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            initialization: z.ZodString;
+            cli: z.ZodString;
+        }, z.core.$strip>>>;
+        activeInstructionTemplate: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    appConfig: z.ZodObject<{
+        transport: z.ZodOptional<z.ZodEnum<{
+            stdio: "stdio";
+            http: "http";
+            sse: "sse";
+        }>>;
+        port: z.ZodOptional<z.ZodNumber>;
+        host: z.ZodOptional<z.ZodString>;
+        logLevel: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            debug: "debug";
+            info: "info";
+            warn: "warn";
+        }>>;
+        logFile: z.ZodOptional<z.ZodString>;
+        logging: z.ZodOptional<z.ZodObject<{
+            file: z.ZodOptional<z.ZodString>;
+            level: z.ZodOptional<z.ZodEnum<{
+                error: "error";
+                debug: "debug";
+                info: "info";
+                warn: "warn";
+            }>>;
+            maxSize: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            maxFiles: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        auth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            sessionTtl: z.ZodOptional<z.ZodNumber>;
+            rateLimitWindow: z.ZodOptional<z.ZodNumber>;
+            rateLimitMax: z.ZodOptional<z.ZodNumber>;
+            trustProxy: z.ZodOptional<z.ZodString>;
+            enableScopeValidation: z.ZodOptional<z.ZodBoolean>;
+            enableEnhancedSecurity: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        asyncLoading: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            minServers: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            batchNotifications: z.ZodOptional<z.ZodBoolean>;
+            batchDelay: z.ZodOptional<z.ZodNumber>;
+            maxConcurrentLoads: z.ZodOptional<z.ZodNumber>;
+            maxRetries: z.ZodOptional<z.ZodNumber>;
+            retryDelay: z.ZodOptional<z.ZodNumber>;
+            backgroundRetry: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                interval: z.ZodOptional<z.ZodNumber>;
+                maxServersPerCycle: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        lazyLoading: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            mode: z.ZodOptional<z.ZodEnum<{
+                full: "full";
+                metatool: "metatool";
+                hybrid: "hybrid";
+            }>>;
+            cacheMaxEntries: z.ZodOptional<z.ZodNumber>;
+            inlineCatalog: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        configReload: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            debounce: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        admin: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                login: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                    maxFailedAttempts: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                status: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                sensitive: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            audit: z.ZodOptional<z.ZodObject<{
+                retentionDays: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        health: z.ZodOptional<z.ZodObject<{
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                windowSeconds: z.ZodOptional<z.ZodNumber>;
+                maxRequests: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        templateSettings: z.ZodOptional<z.ZodObject<{
+            pool: z.ZodOptional<z.ZodObject<{
+                maxInstancesPerTemplate: z.ZodOptional<z.ZodNumber>;
+                maxTotalInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                cleanupInterval: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        templateContext: z.ZodOptional<z.ZodObject<{
+            trust: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                verified: "verified";
+                disabled: "disabled";
+            }>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    runtimeEnvironment: z.ZodRecord<z.ZodString, z.ZodString>;
+    parentEnvironment: z.ZodRecord<z.ZodString, z.ZodString>;
+    explicitInputs: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        values: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RuntimeReplacementSnapshot = z.infer<typeof runtimeReplacementSnapshotSchema>;
+export interface PreparedRuntimeReplacementConfig {
+    snapshot: RuntimeReplacementSnapshot;
+    digest: string;
+    effectiveOptions: Partial<ServeOptions>;
+}
+/** Read current files once. Errors deliberately omit source text and secret-bearing values. */
+export declare function prepareRuntimeReplacementConfig(input: {
+    configFilePath: string;
+    runtimeScope: string;
+    previousExplicitInputs: ExplicitLaunchInputs;
+    invocationExplicitInputs: ExplicitLaunchInputs;
+}): PreparedRuntimeReplacementConfig;
+export declare function digestRuntimeReplacementConfig(snapshot: RuntimeReplacementSnapshot): string;
+/** Call only on a private parent/child IPC payload, before any configuration managers initialize. */
+export declare function installRuntimeReplacementConfig(input: unknown, expectedDigest: string, runtimeScope: string): RuntimeReplacementSnapshot;
+/** Release the frozen source only after the owning supervisor records activation. */
+export declare function activateRuntimeReplacementConfig(expectedDigest: string): void;
+//# sourceMappingURL=runtimeReplacementConfig.d.ts.map

package/build/core/server/runtimeReplacementConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeReplacementConfig.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeReplacementConfig.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAajE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,0BAA0B;;;kBAK5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAuB9E,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAoBnF;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CACzC;AAgCD,+FAA+F;AAC/F,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,oBAAoB,CAAC;IAC7C,wBAAwB,EAAE,oBAAoB,CAAC;CAChD,GAAG,gCAAgC,CA2DnC;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,CAE3F;AAID,qGAAqG;AACrG,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GACnB,0BAA0B,CAmB5B;AAED,qFAAqF;AACrF,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAI7E"}

package/build/core/server/runtimeReplacementConfig.js

@@ -0,0 +1,187 @@
+import { createHash } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveAsyncLoadingOptions } from '../../commands/serve/asyncLoadingOptions.js';
+import { serverOptions } from '../../commands/serve/index.js';
+import { mergeGlobalAndServerConfig } from '../../config/mcpConfigMerge.js';
+import { getRuntimeParentEnvironment, installFrozenRuntimeBootstrap, releaseFrozenRuntimeBootstrap, } from '../../config/runtimeBootstrap.js';
+import { loadRuntimeScopeEnvironment } from '../../config/runtimeScopeEnv.js';
+import { applicationConfigSchema, mcpServerConfigSchema, transportConfigSchema } from '../types/transport.js';
+import { globalOptions } from '../../globalOptions.js';
+import { parse as parseToml } from 'smol-toml';
+import yargs from 'yargs';
+import { z } from 'zod';
+const launchValueSchema = z.union([z.string(), z.number().finite(), z.boolean(), z.array(z.string())]);
+export const explicitLaunchInputsSchema = z
+    .object({
+    version: z.literal(1),
+    values: z.record(z.string(), launchValueSchema),
+})
+    .strict();
+const excludedOptions = new Set([
+    'status',
+    'background',
+    'stop',
+    'restart',
+    'background-bootstrap',
+    'runtime-owner-claim-id',
+    'background-launch-config',
+    'cooperative-bootstrap',
+    'drain-timeout',
+]);
+const launchOptions = Object.fromEntries(Object.entries({ ...globalOptions, ...serverOptions })
+    .filter(([key]) => !excludedOptions.has(key))
+    .map(([key, option]) => {
+    const withoutDefault = { ...option };
+    delete withoutDefault.default;
+    return [key, withoutDefault];
+}));
+/** Reparse the original invocation with no defaults, retaining explicit ONE_MCP values too. */
+export function captureExplicitLaunchInputs(rawArgv) {
+    const parsed = yargs(rawArgv)
+        .options(launchOptions)
+        .env('ONE_MCP')
+        .exitProcess(false)
+        .fail(() => {
+        throw new Error('Invalid explicit runtime launch options');
+    })
+        .help(false)
+        .version(false)
+        .parseSync();
+    const values = Object.fromEntries(Object.keys(launchOptions)
+        .filter((key) => parsed[key] !== undefined)
+        .map((key) => [key, parsed[key]]));
+    for (const key of ['config', 'config-dir']) {
+        if (typeof values[key] === 'string')
+            values[key] = path.resolve(values[key]);
+    }
+    return validateExplicitInputs(explicitLaunchInputsSchema.parse({ version: 1, values }));
+}
+export const runtimeReplacementSnapshotSchema = z
+    .object({
+    version: z.literal(1),
+    runtimeScope: z.string().min(1),
+    configFilePath: z.string().min(1),
+    mcpConfig: mcpServerConfigSchema,
+    appConfig: applicationConfigSchema,
+    runtimeEnvironment: z.record(z.string(), z.string()),
+    parentEnvironment: z.record(z.string(), z.string()),
+    explicitInputs: explicitLaunchInputsSchema,
+})
+    .strict();
+const authNumeric = applicationConfigSchema.shape.auth.unwrap().shape;
+const explicitNumericOptionsSchema = z.object({
+    port: applicationConfigSchema.shape.port,
+    'session-ttl': authNumeric.sessionTtl,
+    'rate-limit-window': authNumeric.rateLimitWindow,
+    'rate-limit-max': authNumeric.rateLimitMax,
+    'lazy-cache-max-entries': applicationConfigSchema.shape.lazyLoading.unwrap().shape.cacheMaxEntries,
+    'config-reload-debounce': applicationConfigSchema.shape.configReload.unwrap().shape.debounce,
+    'lazy-cache-ttl': z.number().int().nonnegative().optional(),
+    'lazy-fallback-timeout': z.number().int().positive().optional(),
+    'session-persist-requests': z.number().int().nonnegative().optional(),
+    'session-persist-interval': z.number().nonnegative().optional(),
+    'session-background-flush': z.number().nonnegative().optional(),
+});
+function validateExplicitInputs(input) {
+    const result = explicitLaunchInputsSchema.parse(input);
+    for (const key of Object.keys(result.values)) {
+        if (!Object.hasOwn(launchOptions, key))
+            throw new Error('Unsupported explicit runtime launch option');
+        const option = launchOptions[key];
+        const value = result.values[key];
+        if (option.type && typeof value !== option.type)
+            throw new Error('Invalid explicit runtime launch option');
+        if (option.choices && !option.choices.includes(value))
+            throw new Error('Invalid explicit runtime launch option');
+    }
+    explicitNumericOptionsSchema.parse(result.values);
+    resolveAsyncLoadingOptions(result.values, undefined, () => undefined);
+    return result;
+}
+/** Read current files once. Errors deliberately omit source text and secret-bearing values. */
+export function prepareRuntimeReplacementConfig(input) {
+    try {
+        const previous = validateExplicitInputs(input.previousExplicitInputs);
+        const invocation = validateExplicitInputs(input.invocationExplicitInputs);
+        const explicitInputs = { version: 1, values: { ...previous.values, ...invocation.values } };
+        const explicitConfig = explicitInputs.values.config;
+        const configFilePath = path.resolve(typeof explicitConfig === 'string' ? explicitConfig : input.configFilePath);
+        const runtimeScope = path.resolve(input.runtimeScope);
+        const canonicalScope = fs.realpathSync.native(runtimeScope);
+        if (fs.realpathSync.native(path.dirname(configFilePath)) !== canonicalScope)
+            throw new Error('Runtime scope mismatch');
+        for (const values of [previous.values, invocation.values]) {
+            if (typeof values.config === 'string' &&
+                fs.realpathSync.native(path.dirname(path.resolve(values.config))) !== canonicalScope)
+                throw new Error('Runtime config scope changed');
+            if (typeof values['config-dir'] === 'string' &&
+                fs.realpathSync.native(path.resolve(values['config-dir'])) !== canonicalScope)
+                throw new Error('Runtime scope changed');
+        }
+        const tomlPath = path.join(path.dirname(configFilePath), 'config.toml');
+        const mcpConfig = mcpServerConfigSchema.parse(JSON.parse(fs.readFileSync(configFilePath, 'utf8')));
+        // Validate merged configurations as well as individual declared values.
+        for (const config of Object.values({ ...mcpConfig.mcpServers, ...mcpConfig.mcpTemplates })) {
+            transportConfigSchema.parse(mergeGlobalAndServerConfig(mcpConfig.serverDefaults, config));
+        }
+        let appConfig = {};
+        try {
+            appConfig = applicationConfigSchema.parse(parseToml(fs.readFileSync(tomlPath, 'utf8')));
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const snapshot = runtimeReplacementSnapshotSchema.parse({
+            version: 1,
+            runtimeScope,
+            configFilePath,
+            mcpConfig,
+            appConfig,
+            explicitInputs,
+            runtimeEnvironment: loadRuntimeScopeEnvironment(configFilePath),
+            parentEnvironment: Object.fromEntries(Object.entries(getRuntimeParentEnvironment()).filter((entry) => entry[1] !== undefined)),
+        });
+        return {
+            snapshot,
+            digest: digestRuntimeReplacementConfig(snapshot),
+            effectiveOptions: { ...explicitInputs.values },
+        };
+    }
+    catch {
+        throw new Error('Runtime replacement configuration is invalid; correct the selected scope configuration before retrying');
+    }
+}
+export function digestRuntimeReplacementConfig(snapshot) {
+    return createHash('sha256').update(JSON.stringify(snapshot)).digest('hex');
+}
+let installedDigest;
+/** Call only on a private parent/child IPC payload, before any configuration managers initialize. */
+export function installRuntimeReplacementConfig(input, expectedDigest, runtimeScope) {
+    let snapshot;
+    try {
+        snapshot = runtimeReplacementSnapshotSchema.parse(input);
+    }
+    catch {
+        throw new Error('Invalid runtime replacement bootstrap');
+    }
+    if (snapshot.runtimeScope !== path.resolve(runtimeScope) ||
+        snapshot.configFilePath !== path.resolve(snapshot.configFilePath)) {
+        throw new Error('Runtime replacement bootstrap scope mismatch');
+    }
+    if (digestRuntimeReplacementConfig(snapshot) !== expectedDigest)
+        throw new Error('Runtime replacement bootstrap digest mismatch');
+    validateExplicitInputs(snapshot.explicitInputs);
+    installFrozenRuntimeBootstrap(snapshot);
+    installedDigest = expectedDigest;
+    return snapshot;
+}
+/** Release the frozen source only after the owning supervisor records activation. */
+export function activateRuntimeReplacementConfig(expectedDigest) {
+    if (installedDigest !== expectedDigest)
+        throw new Error('Runtime replacement activation digest mismatch');
+    installedDigest = undefined;
+    releaseFrozenRuntimeBootstrap();
+}
+//# sourceMappingURL=runtimeReplacementConfig.js.map

package/build/core/server/runtimeReplacementConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeReplacementConfig.js","sourceRoot":"","sources":["../../../src/core/server/runtimeReplacementConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAuB,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACvG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,SAAS;IACT,sBAAsB;IACtB,wBAAwB;IACxB,0BAA0B;IAC1B,uBAAuB;IACvB,eAAe;CAChB,CAAC,CAAC;AACH,MAAM,aAAa,GAA4B,MAAM,CAAC,WAAW,CAC/D,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,aAAa,EAAE,CAAC;KACnD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE;IACrB,MAAM,cAAc,GAAY,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,OAAO,cAAc,CAAC,OAAO,CAAC;IAC9B,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AAC/B,CAAC,CAAC,CACL,CAAC;AAEF,+FAA+F;AAC/F,MAAM,UAAU,2BAA2B,CAAC,OAAiB;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC;SAC1B,OAAO,CAAC,aAAa,CAAC;SACtB,GAAG,CAAC,SAAS,CAAC;SACd,WAAW,CAAC,KAAK,CAAC;SAClB,IAAI,CAAC,GAAG,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,OAAO,CAAC,KAAK,CAAC;SACd,SAAS,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CACpC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC3C,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,sBAAsB,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC9C,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,qBAAqB;IAChC,SAAS,EAAE,uBAAuB;IAClC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACnD,cAAc,EAAE,0BAA0B;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AASZ,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC;AACtE,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,IAAI;IACxC,aAAa,EAAE,WAAW,CAAC,UAAU;IACrC,mBAAmB,EAAE,WAAW,CAAC,eAAe;IAChD,gBAAgB,EAAE,WAAW,CAAC,YAAY;IAC1C,wBAAwB,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe;IAClG,wBAAwB,EAAE,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ;IAC5F,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/D,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrE,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/D,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAChE,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,KAA2B;IACzD,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtG,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,KAAK,KAAK,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC3G,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAe,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,0BAA0B,CAAC,MAAM,CAAC,MAA+B,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC1E,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QACrG,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QACpD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAChH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,cAAc;YACzE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBACjC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,cAAc;gBAEpF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,IACE,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ;gBACxC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,cAAc;gBAE7E,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACnG,wEAAwE;QACxE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;YAC3F,qBAAqB,CAAC,KAAK,CAAC,0BAA0B,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAClE,CAAC;QACD,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC;YACtD,OAAO,EAAE,CAAC;YACV,YAAY;YACZ,cAAc;YACd,SAAS;YACT,SAAS;YACT,cAAc;YACd,kBAAkB,EAAE,2BAA2B,CAAC,cAAc,CAAC;YAC/D,iBAAiB,EAAE,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF;SACF,CAAC,CAAC;QACH,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,8BAA8B,CAAC,QAAQ,CAAC;YAChD,gBAAgB,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAA2B;SACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAoC;IACjF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,IAAI,eAAmC,CAAC;AAExC,qGAAqG;AACrG,MAAM,UAAU,+BAA+B,CAC7C,KAAc,EACd,cAAsB,EACtB,YAAoB;IAEpB,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IACE,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACpD,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,8BAA8B,CAAC,QAAQ,CAAC,KAAK,cAAc;QAC7D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,sBAAsB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChD,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACxC,eAAe,GAAG,cAAc,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gCAAgC,CAAC,cAAsB;IACrE,IAAI,eAAe,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1G,eAAe,GAAG,SAAS,CAAC;IAC5B,6BAA6B,EAAE,CAAC;AAClC,CAAC"}

package/build/core/server/runtimeScopeOwnership.d.ts

@@ -8,6 +8,7 @@ export interface RuntimeScopeOwnershipRecord {
     claimedAt: string;
     processIdentity?: ProcessIdentity;
     coordination?: 'flock';
+    cooperative?: true;
 }
 export interface RuntimeScopeOwnership {
     record: RuntimeScopeOwnershipRecord;
@@ -19,6 +20,8 @@ export interface RuntimeScopeStopLock {
 export interface RuntimeScopeClaimant {
     kind: RuntimeScopeClaimantKind;
     pid?: number;
+    /** Never inspect or reclaim existing ownership on cooperative launch. */
+    cooperative?: true;
 }
 export type RuntimeScopeOwnershipFailureReason = 'owned' | 'ambiguous';
 type RuntimeScopeOwnershipIdentity = Pick<RuntimeScopeOwnershipRecord, 'claimId' | 'pid'>;

package/build/core/server/runtimeScopeOwnership.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeScopeOwnership.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeScopeOwnership.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,qCAAqC,CAAC;AAY7C,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,uBAAuB,CAAC;AAExG,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kCAAkC,GAAG,OAAO,GAAG,WAAW,CAAC;AAEvE,KAAK,6BAA6B,GAAG,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;AAE1F,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,kCAAkC;aAC1C,KAAK,EAAE,2BAA2B,GAAG,IAAI;gBAFzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,kCAAkC,EAC1C,KAAK,EAAE,2BAA2B,GAAG,IAAI,EACzD,MAAM,CAAC,EAAE,MAAM;CAMlB;AAsBD,UAAU,qBAAqB;IAC7B,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAgBD,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,oBAAoB,EAC9B,YAAY,GAAE,qBAA0B,GACvC,qBAAqB,CAuEvB;AAED,4EAA4E;AAC5E,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,KAAK,CAAC,EACnE,YAAY,GAAE,qBAA0B,GACvC,oBAAoB,CAyEtB;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,6BAA6B,EACvC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,GACtD,OAAO,CAeT;AAoHD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,wBAAwB,EACtC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,GACtD,2BAA2B,CAoB7B;AA2KD,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,2BAA2B,GAAG,IAAI,CAE/F;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,6BAA6B,GAAG,OAAO,CAMhH"}
+{"version":3,"file":"runtimeScopeOwnership.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeScopeOwnership.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,qCAAqC,CAAC;AAY7C,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,uBAAuB,CAAC;AAExG,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,CAAC,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,2BAA2B,CAAC;IACpC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB;AAED,MAAM,MAAM,kCAAkC,GAAG,OAAO,GAAG,WAAW,CAAC;AAEvE,KAAK,6BAA6B,GAAG,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;AAE1F,qBAAa,sBAAuB,SAAQ,KAAK;aAE7B,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,kCAAkC;aAC1C,KAAK,EAAE,2BAA2B,GAAG,IAAI;gBAFzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,kCAAkC,EAC1C,KAAK,EAAE,2BAA2B,GAAG,IAAI,EACzD,MAAM,CAAC,EAAE,MAAM;CAMlB;AAuBD,UAAU,qBAAqB;IAC7B,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAgBD,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,oBAAoB,EAC9B,YAAY,GAAE,qBAA0B,GACvC,qBAAqB,CAqFvB;AAED,4EAA4E;AAC5E,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,GAAG,KAAK,CAAC,EACnE,YAAY,GAAE,qBAA0B,GACvC,oBAAoB,CAyEtB;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,6BAA6B,EACvC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,GACtD,OAAO,CAeT;AAqHD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,wBAAwB,EACtC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAwB,GACtD,2BAA2B,CAoB7B;AA2KD,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,2BAA2B,GAAG,IAAI,CAE/F;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,6BAA6B,GAAG,OAAO,CAMhH"}

package/build/core/server/runtimeScopeOwnership.js

@@ -33,6 +33,7 @@ const runtimeScopeOwnershipRecordSchema = z.object({
     claimedAt: z.string().datetime(),
     processIdentity: processIdentitySchema.optional(),
     coordination: z.literal('flock').optional(),
+    cooperative: z.literal(true).optional(),
 });
 const runtimeScopeStopLockSchema = z.object({
     version: z.literal(1),
@@ -65,7 +66,9 @@ export function claimRuntimeScope(configDir, claimant, dependencies = {}) {
         claimId: createClaimId(),
         kind: claimant.kind,
         claimedAt: now().toISOString(),
-        processIdentity: readProcessIdentity(claimant.pid ?? process.pid),
+        ...(claimant.cooperative
+            ? { cooperative: true }
+            : { processIdentity: readProcessIdentity(claimant.pid ?? process.pid) }),
     };
     fs.mkdirSync(configDir, { recursive: true });
     const candidateDir = `${ownerDir}.${record.claimId}.candidate`;
@@ -76,7 +79,14 @@ export function claimRuntimeScope(configDir, claimant, dependencies = {}) {
     try {
         writeCandidate(candidateDir, OWNER_RECORD_NAME, record);
         for (let attempt = 0; attempt < CLAIM_ATTEMPTS; attempt += 1) {
-            assertNoActiveStopLock(configDir, processAlive);
+            if (claimant.cooperative) {
+                if (fs.existsSync(getRuntimeScopeStopLockPath(configDir))) {
+                    throw new RuntimeScopeOwnedError(ownerDir, 'ambiguous', null, 'stop metadata requires explicit recovery');
+                }
+            }
+            else {
+                assertNoActiveStopLock(configDir, processAlive);
+            }
             try {
                 fs.renameSync(candidateDir, ownerDir);
             }
@@ -88,14 +98,21 @@ export function claimRuntimeScope(configDir, claimant, dependencies = {}) {
                 if (!existing) {
                     continue;
                 }
-                if (!ownerIsDead(existing.record, processAlive, fileLock !== null)) {
+                if (claimant.cooperative || !ownerIsDead(existing.record, processAlive, fileLock !== null)) {
                     throw new RuntimeScopeOwnedError(ownerDir, 'owned', existing.record);
                 }
                 reclaimObservedOwnership(configDir, existing, processAlive, fileLock !== null);
                 continue;
             }
             try {
-                assertNoActiveStopLock(configDir, processAlive);
+                if (claimant.cooperative) {
+                    if (fs.existsSync(getRuntimeScopeStopLockPath(configDir))) {
+                        throw new RuntimeScopeOwnedError(ownerDir, 'ambiguous', null, 'stop metadata requires explicit recovery');
+                    }
+                }
+                else {
+                    assertNoActiveStopLock(configDir, processAlive);
+                }
             }
             catch (error) {
                 releaseRuntimeScopeOwnership(configDir, record);
@@ -217,6 +234,8 @@ export function reclaimStaleRuntimeScopeOwnership(configDir, expected, processAl
     }
 }
 function ownerIsDead(record, processAlive, heldFileLock) {
+    if (record.cooperative)
+        return false;
     return ((heldFileLock && record.coordination === 'flock') ||
         inspectProcessIdentity(record.pid, record.processIdentity, { processAlive }) === 'dead');
 }