@1mcp/agent 0.38.2 → 0.39.0-beta.0

package/build/core/server/runtimeLaunchIpc.js

@@ -0,0 +1,146 @@
+import { randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { runtimeReplacementSnapshotSchema } from './runtimeReplacementConfig.js';
+export const launchBootstrapSchema = z
+    .object({
+    type: z.literal('runtime-bootstrap'),
+    nonce: z.string().uuid(),
+    claimId: z.string().uuid().optional(),
+    digest: z.string().regex(/^[a-f0-9]{64}$/),
+    snapshot: runtimeReplacementSnapshotSchema,
+    options: z.record(z.string(), z.unknown()),
+})
+    .strict();
+/** The IPC descriptor belongs to the child we spawned, never a PID discovered on disk. */
+export function sendChild(child, message) {
+    if (!child.connected)
+        throw new Error('Runtime private launch channel disconnected');
+    child.send(message, (error) => {
+        if (error)
+            child.emit('runtime-ipc-error', error);
+    });
+}
+/** Losing a coordinator must not crash a healthy supervisor or worker through an unhandled IPC error. */
+export function sendRuntimeParent(message) {
+    if (!process.connected || !process.send)
+        return;
+    try {
+        process.send(message, () => { });
+    }
+    catch {
+        /* The disconnect handler owns lifecycle policy. */
+    }
+}
+export function receiveRuntimeBootstrap() {
+    if (!process.send)
+        throw new Error('Cooperative bootstrap requires a private parent channel');
+    return new Promise((resolve, reject) => {
+        const finish = (error, value) => {
+            clearTimeout(timer);
+            process.off('message', receive);
+            process.off('disconnect', disconnect);
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const receive = (message) => {
+            const parsed = launchBootstrapSchema.safeParse(message);
+            if (!parsed.success) {
+                finish(new Error('Invalid private runtime bootstrap'));
+                return;
+            }
+            finish(undefined, parsed.data);
+        };
+        const disconnect = () => finish(new Error('Launcher disconnected before authorization'));
+        const timer = setTimeout(() => finish(new Error('Runtime bootstrap timed out')), 30_000);
+        process.on('message', receive);
+        process.once('disconnect', disconnect);
+        sendRuntimeParent({ type: 'runtime-hello' });
+    });
+}
+export function waitForChildActivation(child, bootstrap) {
+    return new Promise((resolve, reject) => {
+        const finish = (error, message) => {
+            clearTimeout(timer);
+            child.off('message', receive);
+            child.off('exit', exit);
+            child.off('error', fail);
+            child.off('runtime-ipc-error', fail);
+            if (error)
+                reject(error);
+            else
+                resolve(message);
+        };
+        const fail = (error) => finish(error);
+        const exit = () => finish(new Error('Runtime child exited before activation'));
+        let sent = false;
+        const receive = (message) => {
+            if (!message || typeof message !== 'object' || !('type' in message))
+                return;
+            if (message.type === 'runtime-hello' && !sent) {
+                sent = true;
+                try {
+                    sendChild(child, bootstrap);
+                }
+                catch (error) {
+                    finish(error);
+                }
+                return;
+            }
+            if (message.type === 'runtime-failed') {
+                finish(new Error('Runtime activation failed; inspect serve --status and the runtime log'));
+                return;
+            }
+            if (message.type === 'runtime-activated') {
+                if (child.exitCode !== null || child.signalCode !== null) {
+                    exit();
+                    return;
+                }
+                finish(undefined, message);
+            }
+        };
+        const timer = setTimeout(() => finish(new Error('Runtime activation timed out; inspect status before recovery')), 60_000);
+        child.on('message', receive);
+        child.once('exit', exit);
+        child.once('error', fail);
+        child.once('runtime-ipc-error', fail);
+    });
+}
+const replySchema = z.object({
+    type: z.literal('runtime-reply'),
+    id: z.string().uuid(),
+    value: z.unknown(),
+    error: z.string().optional(),
+});
+export function requestWorker(child, action) {
+    const id = randomUUID();
+    return new Promise((resolve, reject) => {
+        const finish = (error, value) => {
+            clearTimeout(timer);
+            child.off('message', receive);
+            child.off('exit', exit);
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const receive = (message) => {
+            const parsed = replySchema.safeParse(message);
+            if (!parsed.success || parsed.data.id !== id)
+                return;
+            finish(parsed.data.error ? new Error(parsed.data.error) : undefined, parsed.data.value);
+        };
+        const exit = () => finish(new Error('Runtime worker exited during control operation'));
+        const timer = setTimeout(() => finish(new Error('Runtime worker control timed out; ownership retained')), 4000);
+        child.on('message', receive);
+        child.once('exit', exit);
+        try {
+            sendChild(child, { type: 'runtime-request', id, action });
+        }
+        catch (error) {
+            finish(error);
+        }
+    });
+}
+//# sourceMappingURL=runtimeLaunchIpc.js.map

package/build/core/server/runtimeLaunchIpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeLaunchIpc.js","sourceRoot":"","sources":["../../../src/core/server/runtimeLaunchIpc.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAC;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,gCAAgC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CAAC,KAAmB,EAAE,OAAgB;IAC7D,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,OAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;QACtC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO;IAChD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC9F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAA8B,EAAE,EAAE;YAC/D,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACtC,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,KAAM,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACvC,iBAAiB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAmB,EAAE,SAAiC;IAC3F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAiB,EAAE,EAAE;YAClD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC/E,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE;YACnC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;gBAAE,OAAO;YAC5E,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9C,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC;oBACH,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAc,CAAC,CAAC;gBACzB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC,CAAC;gBAC3F,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBACzD,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC,EACvF,MAAM,CACP,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AACH,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,MAAqC;IACtF,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAAe,EAAE,EAAE;YAChD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1F,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChH,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAc,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/core/server/runtimeLifecycle.d.ts

@@ -65,5 +65,7 @@ export declare function probeLoadingSummary(info: ServerPidInfo, timeoutMs?: num
  * @param configDir Resolved configuration directory for the Runtime Scope
  * @param readinessProbe Optional reachability check (defaults to `/health/ready`)
  */
-export declare function discoverScopedRuntime(configDir: string, readinessProbe?: ReadinessProbe): Promise<ScopedRuntime>;
+export declare function discoverScopedRuntime(configDir: string, readinessProbe?: ReadinessProbe, options?: {
+    cleanupStale?: boolean;
+}): Promise<ScopedRuntime>;
 //# sourceMappingURL=runtimeLifecycle.d.ts.map

package/build/core/server/runtimeLifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeLifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,aAAa,EACd,MAAM,oCAAoC,CAAC;AAO5C;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,+EAA+E;IAC/E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAOvE;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAiB3F,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,SAAO,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,cAA+B,GAC9C,OAAO,CAAC,aAAa,CAAC,CA+CxB"}
+{"version":3,"file":"runtimeLifecycle.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,aAAa,EACd,MAAM,oCAAoC,CAAC;AAO5C;;;;;;;;GAQG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,+EAA+E;IAC/E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAOvE;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAS5F;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAiB3F,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,SAAO,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,cAA+B,EAC/C,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,OAAO,CAAC,aAAa,CAAC,CA6CxB"}

package/build/core/server/runtimeLifecycle.js

@@ -2,7 +2,7 @@ import fs from 'node:fs';
 import { cleanupPidFileIfMatches, getPidFilePath, PidFileReadError, readPidFile, } from './pidFileManager.js';
 import logger from '../../logger/logger.js';
 import { z } from 'zod';
-import { inspectProcessIdentity } from './processIdentity.js';
+import { inspectProcessIdentity, processIdentityRecoveryMessage } from './processIdentity.js';
 /** Derive the runtime base URL (strip a trailing `/mcp`) from a recorded URL. */
 function baseUrlOf(url) {
     return url.replace(/\/mcp\/?$/, '');
@@ -69,7 +69,7 @@ export async function probeLoadingSummary(info, timeoutMs = 3000) {
  * @param configDir Resolved configuration directory for the Runtime Scope
  * @param readinessProbe Optional reachability check (defaults to `/health/ready`)
  */
-export async function discoverScopedRuntime(configDir, readinessProbe = probeReadiness) {
+export async function discoverScopedRuntime(configDir, readinessProbe = probeReadiness, options = {}) {
     let info;
     try {
         info = readPidFile(configDir);
@@ -95,15 +95,14 @@ export async function discoverScopedRuntime(configDir, readinessProbe = probeRea
         return {
             status: 'error',
             info: null,
-            error: `Cannot verify process identity for Runtime Scope PID ${info.pid}; lifecycle metadata was retained.` +
-                (!info.processIdentity
-                    ? ' A legacy PID record alone cannot establish recovery authority. Stop the original runtime using its original CLI or service manager; verify all scope participants have stopped before manual metadata cleanup.'
-                    : ''),
+            error: processIdentityRecoveryMessage(info.pid, info.processIdentity),
         };
     }
     if (identityStatus === 'dead') {
-        logger.warn(`PID file points to dead process (PID: ${info.pid}); removing stale PID file`);
-        cleanupPidFileIfMatches(configDir, info);
+        if (options.cleanupStale !== false) {
+            logger.warn(`PID file points to dead process (PID: ${info.pid}); removing stale PID file`);
+            cleanupPidFileIfMatches(configDir, info);
+        }
         return { status: 'not-running', info: null };
     }
     // Tier 2: alive but unreachable → retain the PID file, report not-usable.

package/build/core/server/runtimeLifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeLifecycle.js","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AA0C9D,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,SAAS,GAAG,IAAI;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;YAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,yEAAyE;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,0EAA0E;YAC1E,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,iBAAiC,cAAc;IAE/C,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI;YACV,KAAK,EACH,wDAAwD,IAAI,CAAC,GAAG,oCAAoC;gBACpG,CAAC,CAAC,IAAI,CAAC,eAAe;oBACpB,CAAC,CAAC,iNAAiN;oBACnN,CAAC,CAAC,EAAE,CAAC;SACV,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,GAAG,4BAA4B,CAAC,CAAC;QAC3F,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"runtimeLifecycle.js","sourceRoot":"","sources":["../../../src/core/server/runtimeLifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,cAAc,EACd,gBAAgB,EAChB,WAAW,GAEZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AA0C9F,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAmB,EAAE,SAAS,GAAG,IAAI;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAsBD,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAClD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAmB,EACnB,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;YAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,yEAAyE;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,0EAA0E;YAC1E,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC;YAC3B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;YACzB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,iBAAiC,cAAc,EAC/C,UAAsC,EAAE;IAExC,IAAI,IAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kEAAkE,EAAE,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,8BAA8B,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,GAAG,4BAA4B,CAAC,CAAC;YAC3F,uBAAuB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/build/core/server/runtimeReplacementConfig.d.ts

@@ -0,0 +1,295 @@
+import type { ServeOptions } from '../../commands/serve/serve.js';
+import { z } from 'zod';
+export declare const explicitLaunchInputsSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    values: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+}, z.core.$strict>;
+export type ExplicitLaunchInputs = z.infer<typeof explicitLaunchInputsSchema>;
+/** Reparse the original invocation with no defaults, retaining explicit ONE_MCP values too. */
+export declare function captureExplicitLaunchInputs(rawArgv: string[]): ExplicitLaunchInputs;
+export declare const runtimeReplacementSnapshotSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    runtimeScope: z.ZodString;
+    configFilePath: z.ZodString;
+    mcpConfig: z.ZodObject<{
+        version: z.ZodOptional<z.ZodString>;
+        serverDefaults: z.ZodOptional<z.ZodObject<{
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        mcpServers: z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodOptional<z.ZodEnum<{
+                stdio: "stdio";
+                http: "http";
+                sse: "sse";
+                streamableHttp: "streamableHttp";
+            }>>;
+            protocolVersion: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                auto: "auto";
+                "2026-07-28": "2026-07-28";
+            }>>;
+            disabled: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>>;
+            disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            instructionOverride: z.ZodOptional<z.ZodString>;
+            toolDescriptionOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodString]>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stderr: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                pipe: "pipe";
+                overlapped: "overlapped";
+                ignore: "ignore";
+                inherit: "inherit";
+            }>, z.ZodNumber]>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            template: z.ZodOptional<z.ZodObject<{
+                shareable: z.ZodOptional<z.ZodBoolean>;
+                maxInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                perClient: z.ZodOptional<z.ZodBoolean>;
+                extractionOptions: z.ZodOptional<z.ZodObject<{
+                    includeOptional: z.ZodOptional<z.ZodBoolean>;
+                    includeEnvironment: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        mcpTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodOptional<z.ZodEnum<{
+                stdio: "stdio";
+                http: "http";
+                sse: "sse";
+                streamableHttp: "streamableHttp";
+            }>>;
+            protocolVersion: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                auto: "auto";
+                "2026-07-28": "2026-07-28";
+            }>>;
+            disabled: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodString]>>;
+            disabledTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            instructionOverride: z.ZodOptional<z.ZodString>;
+            toolDescriptionOverrides: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            connectionTimeout: z.ZodOptional<z.ZodNumber>;
+            requestTimeout: z.ZodOptional<z.ZodNumber>;
+            tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            oauth: z.ZodOptional<z.ZodObject<{
+                clientId: z.ZodOptional<z.ZodString>;
+                clientSecret: z.ZodOptional<z.ZodString>;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                autoRegister: z.ZodOptional<z.ZodBoolean>;
+                redirectUrl: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            url: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodString]>>;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            command: z.ZodOptional<z.ZodString>;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            stderr: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                pipe: "pipe";
+                overlapped: "overlapped";
+                ignore: "ignore";
+                inherit: "inherit";
+            }>, z.ZodNumber]>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodUnion<readonly [z.ZodRecord<z.ZodString, z.ZodString>, z.ZodArray<z.ZodString>]>>;
+            inheritParentEnv: z.ZodOptional<z.ZodBoolean>;
+            envFilter: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            restartOnExit: z.ZodOptional<z.ZodBoolean>;
+            maxRestarts: z.ZodOptional<z.ZodNumber>;
+            restartDelay: z.ZodOptional<z.ZodNumber>;
+            template: z.ZodOptional<z.ZodObject<{
+                shareable: z.ZodOptional<z.ZodBoolean>;
+                maxInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                perClient: z.ZodOptional<z.ZodBoolean>;
+                extractionOptions: z.ZodOptional<z.ZodObject<{
+                    includeOptional: z.ZodOptional<z.ZodBoolean>;
+                    includeEnvironment: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>>;
+        templateSettings: z.ZodOptional<z.ZodObject<{
+            validateOnReload: z.ZodOptional<z.ZodBoolean>;
+            failureMode: z.ZodOptional<z.ZodEnum<{
+                strict: "strict";
+                graceful: "graceful";
+            }>>;
+            cacheContext: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        instructionTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            initialization: z.ZodString;
+            cli: z.ZodString;
+        }, z.core.$strip>>>;
+        publishedInstructionTemplates: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            initialization: z.ZodString;
+            cli: z.ZodString;
+        }, z.core.$strip>>>;
+        activeInstructionTemplate: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    appConfig: z.ZodObject<{
+        transport: z.ZodOptional<z.ZodEnum<{
+            stdio: "stdio";
+            http: "http";
+            sse: "sse";
+        }>>;
+        port: z.ZodOptional<z.ZodNumber>;
+        host: z.ZodOptional<z.ZodString>;
+        logLevel: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            debug: "debug";
+            info: "info";
+            warn: "warn";
+        }>>;
+        logFile: z.ZodOptional<z.ZodString>;
+        logging: z.ZodOptional<z.ZodObject<{
+            file: z.ZodOptional<z.ZodString>;
+            level: z.ZodOptional<z.ZodEnum<{
+                error: "error";
+                debug: "debug";
+                info: "info";
+                warn: "warn";
+            }>>;
+            maxSize: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+            maxFiles: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        auth: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            sessionTtl: z.ZodOptional<z.ZodNumber>;
+            rateLimitWindow: z.ZodOptional<z.ZodNumber>;
+            rateLimitMax: z.ZodOptional<z.ZodNumber>;
+            trustProxy: z.ZodOptional<z.ZodString>;
+            enableScopeValidation: z.ZodOptional<z.ZodBoolean>;
+            enableEnhancedSecurity: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        asyncLoading: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            minServers: z.ZodOptional<z.ZodNumber>;
+            timeout: z.ZodOptional<z.ZodNumber>;
+            batchNotifications: z.ZodOptional<z.ZodBoolean>;
+            batchDelay: z.ZodOptional<z.ZodNumber>;
+            maxConcurrentLoads: z.ZodOptional<z.ZodNumber>;
+            maxRetries: z.ZodOptional<z.ZodNumber>;
+            retryDelay: z.ZodOptional<z.ZodNumber>;
+            backgroundRetry: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodOptional<z.ZodBoolean>;
+                interval: z.ZodOptional<z.ZodNumber>;
+                maxServersPerCycle: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        lazyLoading: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            mode: z.ZodOptional<z.ZodEnum<{
+                full: "full";
+                metatool: "metatool";
+                hybrid: "hybrid";
+            }>>;
+            cacheMaxEntries: z.ZodOptional<z.ZodNumber>;
+            inlineCatalog: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        configReload: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            debounce: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        admin: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                login: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                    maxFailedAttempts: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                status: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+                sensitive: z.ZodOptional<z.ZodObject<{
+                    windowSeconds: z.ZodOptional<z.ZodNumber>;
+                    maxRequests: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            audit: z.ZodOptional<z.ZodObject<{
+                retentionDays: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        health: z.ZodOptional<z.ZodObject<{
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                windowSeconds: z.ZodOptional<z.ZodNumber>;
+                maxRequests: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        templateSettings: z.ZodOptional<z.ZodObject<{
+            pool: z.ZodOptional<z.ZodObject<{
+                maxInstancesPerTemplate: z.ZodOptional<z.ZodNumber>;
+                maxTotalInstances: z.ZodOptional<z.ZodNumber>;
+                idleTimeout: z.ZodOptional<z.ZodNumber>;
+                cleanupInterval: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        templateContext: z.ZodOptional<z.ZodObject<{
+            trust: z.ZodOptional<z.ZodEnum<{
+                legacy: "legacy";
+                verified: "verified";
+                disabled: "disabled";
+            }>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    runtimeEnvironment: z.ZodRecord<z.ZodString, z.ZodString>;
+    parentEnvironment: z.ZodRecord<z.ZodString, z.ZodString>;
+    explicitInputs: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        values: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RuntimeReplacementSnapshot = z.infer<typeof runtimeReplacementSnapshotSchema>;
+export interface PreparedRuntimeReplacementConfig {
+    snapshot: RuntimeReplacementSnapshot;
+    digest: string;
+    effectiveOptions: Partial<ServeOptions>;
+}
+/** Read current files once. Errors deliberately omit source text and secret-bearing values. */
+export declare function prepareRuntimeReplacementConfig(input: {
+    configFilePath: string;
+    runtimeScope: string;
+    previousExplicitInputs: ExplicitLaunchInputs;
+    invocationExplicitInputs: ExplicitLaunchInputs;
+}): PreparedRuntimeReplacementConfig;
+export declare function digestRuntimeReplacementConfig(snapshot: RuntimeReplacementSnapshot): string;
+/** Call only on a private parent/child IPC payload, before any configuration managers initialize. */
+export declare function installRuntimeReplacementConfig(input: unknown, expectedDigest: string, runtimeScope: string): RuntimeReplacementSnapshot;
+/** Release the frozen source only after the owning supervisor records activation. */
+export declare function activateRuntimeReplacementConfig(expectedDigest: string): void;
+//# sourceMappingURL=runtimeReplacementConfig.d.ts.map

package/build/core/server/runtimeReplacementConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeReplacementConfig.d.ts","sourceRoot":"","sources":["../../../src/core/server/runtimeReplacementConfig.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAajE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,0BAA0B;;;kBAK5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAuB9E,+FAA+F;AAC/F,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAoBnF;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAWlC,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,0BAA0B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CACzC;AAgCD,+FAA+F;AAC/F,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,oBAAoB,CAAC;IAC7C,wBAAwB,EAAE,oBAAoB,CAAC;CAChD,GAAG,gCAAgC,CA2DnC;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,0BAA0B,GAAG,MAAM,CAE3F;AAID,qGAAqG;AACrG,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,GACnB,0BAA0B,CAmB5B;AAED,qFAAqF;AACrF,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAI7E"}