@agent-vm/agent-vm 0.0.78 → 0.0.80

package/dist/operations/mcp-portal-live-validation.js

@@ -17,15 +17,26 @@ function profileNamespaces(profile) {
         ...profile.enabledNamespaces,
         ...Object.keys(profile.enabledToolsByNamespace),
         ...Object.keys(profile.hiddenToolsByNamespace),
+        ...Object.keys(profile.approval.callPoliciesByNamespace),
         ...profile.approval.allowWithoutApprovalTools.map((tool) => tool.namespace),
         ...profile.approval.alwaysAskTools.map((tool) => tool.namespace),
         ...profile.approval.writeTools.map((tool) => tool.namespace),
     ])).toSorted();
 }
+function selectorToolNames(selector) {
+    return selector.allow === '*' ? selector.deny : [...selector.allow, ...selector.deny];
+}
 function profileToolNamesForNamespace(profile, namespace) {
+    const callPolicy = profile.approval.callPoliciesByNamespace[namespace];
     return Array.from(new Set([
         ...(profile.enabledToolsByNamespace[namespace] ?? []),
         ...(profile.hiddenToolsByNamespace[namespace] ?? []),
+        ...(callPolicy === undefined
+            ? []
+            : [
+                ...selectorToolNames(callPolicy.requiresApproval),
+                ...selectorToolNames(callPolicy.withoutApproval),
+            ]),
         ...profile.approval.allowWithoutApprovalTools
             .filter((tool) => tool.namespace === namespace)
             .map((tool) => tool.toolName),

package/dist/operations/mcp-portal-live-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-portal-live-validation.js","sourceRoot":"","sources":["../../src/operations/mcp-portal-live-validation.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GAGvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAInE,OAAO,EAEN,0BAA0B,GAC1B,MAAM,+BAA+B,CAAC;AAUvC,SAAS,wBAAwB,CAAC,MAAmB;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,MAAmB,EACnB,cAA8B;IAE9B,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiC;IAC3D,OAAO,KAAK,CAAC,IAAI,CAChB,IAAI,GAAG,CAAC;QACP,GAAG,OAAO,CAAC,iBAAiB;QAC5B,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;QAC/C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAC9C,GAAG,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3E,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;KAC5D,CAAC,CACF,CAAC,QAAQ,EAAE,CAAC;AACd,CAAC;AAED,SAAS,4BAA4B,CACpC,OAAiC,EACjC,SAAiB;IAEjB,OAAO,KAAK,CAAC,IAAI,CAChB,IAAI,GAAG,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpD,GAAG,OAAO,CAAC,QAAQ,CAAC,yBAAyB;aAC3C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc;aAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU;aAC5B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC9B,CAAC,CACF,CAAC,QAAQ,EAAE,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAmD;IAC/E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,2BAA2B,SAAS,CAAC,OAAO,aAAa,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,aAAa,SAAS,CAAC,IAAI,QAAQ,SAAS,CAAC,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,OAAO;QACN,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,YAAY,EAAE;QAChE,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,OAAO,CAAC,IAAI;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAc;IACxD,OAAO;QACN;YACC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC;YACzB,IAAI,EAAE,YAAY,MAAM,SAAS;YACjC,EAAE,EAAE,KAAK;SACT;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACA,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAC1E,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACX,CAAC;YACD,OAAO;gBACN;oBACC,IAAI,EAAE,UAAU,OAAO,cAAc,KAAK,CAAC,OAAO,wBAAwB,KAAK,CAAC,SAAS,WAAW,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC9K,IAAI,EAAE,0BAA0B,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE;oBAC5E,EAAE,EAAE,KAAK;iBACuB;aACjC,CAAC;QACH,CAAC,CACD,CAAC;QACF,OAAO;YACN;gBACC,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;gBACpE,IAAI,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE;gBACnD,EAAE,EAAE,IAAI;aACR;YACD,GAAG,iBAAiB;SACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN;gBACC,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC;gBACnC,IAAI,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE;gBACnD,EAAE,EAAE,KAAK;aACT;SACD,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,OAA0C,EAC1C,IAAsB;IAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,SAAoD,CAAC;IACzD,IAAI,YAA6D,CAAC;IAClE,IAAI,OAA2D,CAAC;IAChE,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7F,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YACvD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,GAAG,MAAM,sBAAsB,CAAC;YACtC,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;SAC5F,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,IAAI,eAAiD,CAAC;IACtD,IAAI,CAAC;QACJ,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;YAClF,MAAM,OAAO,GAAG,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBACvD,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACrC,OAAO,EAAE,CAAC;gBACX,CAAC;gBACD,OAAO;oBACN;wBACC,IAAI,EAAE,UAAU,OAAO,cAAc,KAAK,CAAC,OAAO,+BAA+B,SAAS,oEAAoE;wBAC9J,IAAI,EAAE,8BAA8B,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,SAAS,EAAE;wBACrE,EAAE,EAAE,KAAK;qBACuB;iBACjC,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,oBAAoB,GAAG,CAAC,GAAG,gBAAgB,CAAC;SAChD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SAC1D,QAAQ,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,8BAA8B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,YAAY,IAAI,CAAC,EAAE,EAAE,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7C,oBAAoB,CAAC,GAAG,CACvB,KAAK,EAAE,SAAS,EAAE,EAAE,CACnB,MAAM,0BAA0B,CAAC;YAChC,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACH,CACD,CAAC;QACF,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACV,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAA0C;IAE1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAC1F,CAAC;IACF,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"mcp-portal-live-validation.js","sourceRoot":"","sources":["../../src/operations/mcp-portal-live-validation.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACN,aAAa,EACb,mBAAmB,EAEnB,uBAAuB,GAGvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAInE,OAAO,EAEN,0BAA0B,GAC1B,MAAM,+BAA+B,CAAC;AAUvC,SAAS,wBAAwB,CAAC,MAAmB;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,MAAmB,EACnB,cAA8B;IAE9B,OAAO,MAAM,cAAc,CAAC,OAAO,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAiC;IAC3D,OAAO,KAAK,CAAC,IAAI,CAChB,IAAI,GAAG,CAAC;QACP,GAAG,OAAO,CAAC,iBAAiB;QAC5B,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;QAC/C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;QAC9C,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACxD,GAAG,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3E,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;KAC5D,CAAC,CACF,CAAC,QAAQ,EAAE,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA4B;IACtD,OAAO,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,4BAA4B,CACpC,OAAiC,EACjC,SAAiB;IAEjB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,IAAI,CAChB,IAAI,GAAG,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpD,GAAG,CAAC,UAAU,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACA,GAAG,iBAAiB,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBACjD,GAAG,iBAAiB,CAAC,UAAU,CAAC,eAAe,CAAC;aAChD,CAAC;QACJ,GAAG,OAAO,CAAC,QAAQ,CAAC,yBAAyB;aAC3C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc;aAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU;aAC5B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC9B,CAAC,CACF,CAAC,QAAQ,EAAE,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAmD;IAC/E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,2BAA2B,SAAS,CAAC,OAAO,aAAa,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,aAAa,SAAS,CAAC,IAAI,QAAQ,SAAS,CAAC,GAAG,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAgB,CAAC,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,OAAO;QACN,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,YAAY,EAAE;QAChE,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,OAAO,CAAC,IAAI;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAc;IACxD,OAAO;QACN;YACC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC;YACzB,IAAI,EAAE,YAAY,MAAM,SAAS;YACjC,EAAE,EAAE,KAAK;SACT;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACA,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrE,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAC1E,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACX,CAAC;YACD,OAAO;gBACN;oBACC,IAAI,EAAE,UAAU,OAAO,cAAc,KAAK,CAAC,OAAO,wBAAwB,KAAK,CAAC,SAAS,WAAW,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBAC9K,IAAI,EAAE,0BAA0B,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE;oBAC5E,EAAE,EAAE,KAAK;iBACuB;aACjC,CAAC;QACH,CAAC,CACD,CAAC;QACF,OAAO;YACN;gBACC,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;gBACpE,IAAI,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE;gBACnD,EAAE,EAAE,IAAI;aACR;YACD,GAAG,iBAAiB;SACpB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN;gBACC,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC;gBACnC,IAAI,EAAE,YAAY,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,EAAE;gBACnD,EAAE,EAAE,KAAK;aACT;SACD,CAAC;IACH,CAAC;AACF,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,OAA0C,EAC1C,IAAsB;IAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,SAAoD,CAAC;IACzD,IAAI,YAA6D,CAAC;IAClE,IAAI,OAA2D,CAAC;IAChE,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7F,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YACvD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;SACpE,CAAC,CAAC;QACH,OAAO,GAAG,MAAM,sBAAsB,CAAC;YACtC,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;SAC5F,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5E,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,IAAI,eAAiD,CAAC;IACtD,IAAI,CAAC;QACJ,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;YAClF,MAAM,OAAO,GAAG,uBAAuB,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACrE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;gBACvD,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACrC,OAAO,EAAE,CAAC;gBACX,CAAC;gBACD,OAAO;oBACN;wBACC,IAAI,EAAE,UAAU,OAAO,cAAc,KAAK,CAAC,OAAO,+BAA+B,SAAS,oEAAoE;wBAC9J,IAAI,EAAE,8BAA8B,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,SAAS,EAAE;wBACrE,EAAE,EAAE,KAAK;qBACuB;iBACjC,CAAC;YACH,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,oBAAoB,GAAG,CAAC,GAAG,gBAAgB,CAAC;SAChD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SAC1D,QAAQ,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,8BAA8B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,YAAY,IAAI,CAAC,EAAE,EAAE,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7C,oBAAoB,CAAC,GAAG,CACvB,KAAK,EAAE,SAAS,EAAE,EAAE,CACnB,MAAM,0BAA0B,CAAC;YAChC,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,EAAE;SACf,CAAC,CACH,CACD,CAAC;QACF,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACV,MAAM,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAA0C;IAE1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAC1F,CAAC;IACF,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/shared/managed-vm-process.d.ts

@@ -0,0 +1,33 @@
+export declare function isProcessAlive(pid: number): boolean;
+export declare function readProcessCommand(pid: number): Promise<string | null>;
+export interface ProcessIdentity {
+    readonly lstart: string;
+    readonly command: string;
+}
+export declare function readProcessIdentity(pid: number): Promise<ProcessIdentity | null>;
+export declare function parseProcessIdentityOutput(line: string): ProcessIdentity | null;
+export declare function isManagedVmProcess(command: string): boolean;
+export declare function processIdentityMatches(recorded: ProcessIdentity, current: ProcessIdentity): boolean;
+export declare function killProcess(pid: number, signal: NodeJS.Signals): void;
+export declare function isNoSuchProcessError(error: unknown): boolean;
+export declare function sleep(delayMs: number): Promise<void>;
+export declare function waitForExit(options: {
+    readonly pid: number;
+    readonly processIsAlive: (pid: number) => boolean;
+    readonly sleep: (delayMs: number) => Promise<void>;
+    readonly timeoutMs: number;
+}): Promise<boolean>;
+export interface ManagedVmKillDependencies {
+    readonly isProcessAlive: (pid: number) => boolean;
+    readonly killProcess: (pid: number, signal: NodeJS.Signals) => void;
+    readonly readProcessCommand: (pid: number) => Promise<string | null>;
+    readonly readProcessIdentity?: (pid: number) => Promise<ProcessIdentity | null>;
+    readonly sleep: (delayMs: number) => Promise<void>;
+}
+export declare function killOrphanedManagedVmProcess(options: {
+    readonly contextLabel: string;
+    readonly dependencies: ManagedVmKillDependencies;
+    readonly pid: number;
+    readonly recordedIdentity?: ProcessIdentity;
+}): Promise<number | null>;
+//# sourceMappingURL=managed-vm-process.d.ts.map

package/dist/shared/managed-vm-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-vm-process.d.ts","sourceRoot":"","sources":["../../src/shared/managed-vm-process.ts"],"names":[],"mappings":"AAKA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAenD;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW5E;AASD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAwBtF;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAW/E;AA6BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,GACtB,OAAO,CAET;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAerE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE5D;AAED,wBAAsB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC,OAAO,CAAC,CAUnB;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACpE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAChF,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AA+DD,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;CAC5C,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuEzB"}

package/dist/shared/managed-vm-process.js

@@ -0,0 +1,248 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && 'code' in error) {
+            if (error.code === 'EPERM') {
+                return true;
+            }
+            if (error.code === 'ESRCH') {
+                return false;
+            }
+        }
+        throw error;
+    }
+}
+export async function readProcessCommand(pid) {
+    try {
+        const { stdout } = await execFileAsync('ps', ['-p', String(pid), '-o', 'command=']);
+        const command = stdout.trim();
+        return command.length > 0 ? command : null;
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && 'code' in error && error.code === 1) {
+            return null;
+        }
+        throw error;
+    }
+}
+export async function readProcessIdentity(pid) {
+    try {
+        // `lstart` and `command` are separated by whitespace by default. Use a
+        // custom delimiter via two separate columns so we can split safely.
+        // macOS + Linux both support `-o lstart=,command=`.
+        const { stdout } = await execFileAsync('ps', [
+            '-p',
+            String(pid),
+            '-o',
+            'lstart=',
+            '-o',
+            'command=',
+        ]);
+        const trimmed = stdout.trim();
+        if (trimmed.length === 0) {
+            return null;
+        }
+        return parseProcessIdentityOutput(trimmed);
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && 'code' in error && error.code === 1) {
+            return null;
+        }
+        throw error;
+    }
+}
+export function parseProcessIdentityOutput(line) {
+    const splitIndex = findLstartCommandBoundary(line.trim());
+    if (splitIndex === null) {
+        return null;
+    }
+    const lstart = line.slice(0, splitIndex).trim();
+    const command = line.slice(splitIndex).trim();
+    if (lstart.length === 0 || command.length === 0) {
+        return null;
+    }
+    return { command, lstart };
+}
+function findLstartCommandBoundary(line) {
+    // `lstart` is "Day Mon DD HH:MM:SS YYYY" — exactly five
+    // whitespace-separated tokens. Find the end of the fifth token; everything
+    // after is `command`.
+    let tokenCount = 0;
+    let inToken = false;
+    for (let index = 0; index < line.length; index += 1) {
+        const character = line[index];
+        const isSpace = character === ' ' || character === '\t';
+        if (!isSpace && !inToken) {
+            inToken = true;
+        }
+        else if (isSpace && inToken) {
+            inToken = false;
+            tokenCount += 1;
+            if (tokenCount === 5) {
+                return index;
+            }
+        }
+    }
+    return null;
+}
+// Gateway VMs and Tool VMs are both backed by the same Gondolin runtime
+// (qemu-system on the QEMU backend or krun on the libkrun backend). Cleanup
+// flows MUST verify the recorded host PID still maps to one of these process
+// commands before signaling, so a recycled PID belonging to an unrelated
+// program is never killed by mistake.
+export function isManagedVmProcess(command) {
+    return /\b(qemu-system|krun)\b/u.test(command);
+}
+export function processIdentityMatches(recorded, current) {
+    return recorded.lstart === current.lstart && recorded.command === current.command;
+}
+export function killProcess(pid, signal) {
+    try {
+        process.kill(pid, signal);
+    }
+    catch (error) {
+        if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'ESRCH') {
+            return;
+        }
+        if (typeof error === 'object' && error !== null && 'code' in error && error.code === 'EPERM') {
+            throw new Error(`Permission denied while sending ${signal} to managed VM pid ${pid}. The process is still running and may require elevated privileges to terminate.`, { cause: error });
+        }
+        throw error;
+    }
+}
+export function isNoSuchProcessError(error) {
+    return typeof error === 'object' && error !== null && 'code' in error && error.code === 'ESRCH';
+}
+export async function sleep(delayMs) {
+    await new Promise((resolve) => setTimeout(resolve, delayMs));
+}
+export async function waitForExit(options) {
+    const deadline = Date.now() + options.timeoutMs;
+    while (Date.now() < deadline) {
+        if (!options.processIsAlive(options.pid)) {
+            return true;
+        }
+        // oxlint-disable-next-line no-await-in-loop -- polling loop must wait between liveness checks
+        await options.sleep(100);
+    }
+    return !options.processIsAlive(options.pid);
+}
+// Re-verify the recorded process identity (lstart + command) immediately before
+// sending a signal. Returns `null` if the process is gone (signal not needed),
+// otherwise either resolves to the matching identity or throws to refuse the
+// signal because PID was reused by an unrelated process.
+async function verifyIdentityBeforeSignal(options) {
+    if (options.recordedIdentity !== undefined && options.readProcessIdentity !== undefined) {
+        const currentIdentity = await options.readProcessIdentity(options.pid);
+        if (currentIdentity === null) {
+            return { proceed: false };
+        }
+        if (!processIdentityMatches(options.recordedIdentity, currentIdentity)) {
+            throw new Error(`${options.contextLabel} refusing ${options.currentSignalLabel} to pid ${options.pid}: process identity changed (recorded ${JSON.stringify(options.recordedIdentity)}, current ${JSON.stringify(currentIdentity)}). PID was likely reused.`);
+        }
+        if (!isManagedVmProcess(currentIdentity.command)) {
+            throw new Error(`${options.contextLabel} refusing ${options.currentSignalLabel} to pid ${options.pid}: current command is not a managed VM process: ${currentIdentity.command}.`);
+        }
+        return { proceed: true };
+    }
+    // No recorded identity (legacy record) → fall back to the looser command-
+    // only check at the SIGTERM point. Subsequent signals trust the first
+    // check. This is the pre-identity behavior.
+    const command = await options.readProcessCommand(options.pid);
+    if (command === null) {
+        return { proceed: false };
+    }
+    if (!isManagedVmProcess(command)) {
+        throw new Error(`${options.contextLabel} points at unexpected live process ${options.pid}: ${command}.`);
+    }
+    return { proceed: true };
+}
+// Generic "kill an orphaned managed VM process" with a SIGTERM→2s→SIGKILL→2s
+// bounded sequence (total ≤ 4 s). The caller is responsible for owning the
+// runtime record (read + fence-check + delete after this returns).
+//
+// Strong PID identity defense: if `recordedIdentity` is supplied, the live
+// process identity (ps `lstart` + `command`) is re-read IMMEDIATELY before
+// each signal and must match exactly. This makes PID reuse during the
+// read-record → signal window detectable; we refuse rather than killing the
+// wrong process.
+//
+// Returns the PID that was signalled, or null if it was already dead before
+// the first signal landed.
+//
+// Throws if:
+//   - the recorded PID is alive but its identity does not match (PID reused)
+//   - the recorded PID is alive but its command is NOT a managed VM process
+//   - the process survives both SIGTERM and SIGKILL (a stuck D-state QEMU)
+export async function killOrphanedManagedVmProcess(options) {
+    const { contextLabel, dependencies, pid, recordedIdentity } = options;
+    if (!dependencies.isProcessAlive(pid)) {
+        return null;
+    }
+    const beforeTerm = await verifyIdentityBeforeSignal({
+        contextLabel,
+        currentSignalLabel: 'SIGTERM',
+        pid,
+        readProcessCommand: dependencies.readProcessCommand,
+        ...(dependencies.readProcessIdentity !== undefined
+            ? { readProcessIdentity: dependencies.readProcessIdentity }
+            : {}),
+        ...(recordedIdentity !== undefined ? { recordedIdentity } : {}),
+    });
+    if (!beforeTerm.proceed) {
+        return null;
+    }
+    try {
+        dependencies.killProcess(pid, 'SIGTERM');
+    }
+    catch (error) {
+        if (!isNoSuchProcessError(error)) {
+            throw error;
+        }
+    }
+    if (await waitForExit({
+        pid,
+        processIsAlive: dependencies.isProcessAlive,
+        sleep: dependencies.sleep,
+        timeoutMs: 2_000,
+    })) {
+        return pid;
+    }
+    const beforeKill = await verifyIdentityBeforeSignal({
+        contextLabel,
+        currentSignalLabel: 'SIGKILL',
+        pid,
+        readProcessCommand: dependencies.readProcessCommand,
+        ...(dependencies.readProcessIdentity !== undefined
+            ? { readProcessIdentity: dependencies.readProcessIdentity }
+            : {}),
+        ...(recordedIdentity !== undefined ? { recordedIdentity } : {}),
+    });
+    if (!beforeKill.proceed) {
+        return pid;
+    }
+    try {
+        dependencies.killProcess(pid, 'SIGKILL');
+    }
+    catch (error) {
+        if (!isNoSuchProcessError(error)) {
+            throw error;
+        }
+    }
+    if (await waitForExit({
+        pid,
+        processIsAlive: dependencies.isProcessAlive,
+        sleep: dependencies.sleep,
+        timeoutMs: 2_000,
+    })) {
+        return pid;
+    }
+    throw new Error(`Failed to terminate orphaned managed VM process ${pid} (${contextLabel}).`);
+}
+//# sourceMappingURL=managed-vm-process.js.map

package/dist/shared/managed-vm-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-vm-process.js","sourceRoot":"","sources":["../../src/shared/managed-vm-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,IAAI,CAAC;YACb,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IACnD,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACpD,IAAI,CAAC;QACJ,uEAAuE;QACvE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE;YAC5C,IAAI;YACJ,MAAM,CAAC,GAAG,CAAC;YACX,IAAI;YACJ,SAAS;YACT,IAAI;YACJ,UAAU;SACV,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACtD,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC9C,wDAAwD;IACxD,2EAA2E;IAC3E,sBAAsB;IACtB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,CAAC;QACxD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YAC/B,OAAO,GAAG,KAAK,CAAC;YAChB,UAAU,IAAI,CAAC,CAAC;YAChB,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,sCAAsC;AACtC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IACjD,OAAO,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACrC,QAAyB,EACzB,OAAwB;IAExB,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAsB;IAC9D,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9F,OAAO;QACR,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,sBAAsB,GAAG,kFAAkF,EACpJ,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AACjG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAe;IAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAKjC;IACA,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACb,CAAC;QACD,8FAA8F;QAC9F,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAUD,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,yDAAyD;AACzD,KAAK,UAAU,0BAA0B,CAAC,OAOzC;IACA,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACzF,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,gBAAgB,EAAE,eAAe,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,CAAC,YAAY,aAAa,OAAO,CAAC,kBAAkB,WAAW,OAAO,CAAC,GAAG,wCAAwC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,2BAA2B,CAC3O,CAAC;QACH,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,CAAC,YAAY,aAAa,OAAO,CAAC,kBAAkB,WAAW,OAAO,CAAC,GAAG,kDAAkD,eAAe,CAAC,OAAO,GAAG,CAChK,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,4CAA4C;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,CAAC,YAAY,sCAAsC,OAAO,CAAC,GAAG,KAAK,OAAO,GAAG,CACvF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,mEAAmE;AACnE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,iBAAiB;AACjB,EAAE;AACF,4EAA4E;AAC5E,2BAA2B;AAC3B,EAAE;AACF,aAAa;AACb,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAKlD;IACA,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IACtE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC;QACnD,YAAY;QACZ,kBAAkB,EAAE,SAAS;QAC7B,GAAG;QACH,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;QACnD,GAAG,CAAC,YAAY,CAAC,mBAAmB,KAAK,SAAS;YACjD,CAAC,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,mBAAmB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IACD,IACC,MAAM,WAAW,CAAC;QACjB,GAAG;QACH,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,SAAS,EAAE,KAAK;KAChB,CAAC,EACD,CAAC;QACF,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC;QACnD,YAAY;QACZ,kBAAkB,EAAE,SAAS;QAC7B,GAAG;QACH,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;QACnD,GAAG,CAAC,YAAY,CAAC,mBAAmB,KAAK,SAAS;YACjD,CAAC,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,mBAAmB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACJ,YAAY,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IACD,IACC,MAAM,WAAW,CAAC;QACjB,GAAG;QACH,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,SAAS,EAAE,KAAK;KAChB,CAAC,EACD,CAAC;QACF,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mDAAmD,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC;AAC9F,CAAC"}

package/dist/shared/port-owner.d.ts

@@ -0,0 +1,18 @@
+export interface PortOwner {
+    readonly command: string;
+    readonly pid: number;
+}
+export interface ExecFileOutput {
+    readonly stderr: string;
+    readonly stdout: string;
+}
+export type ExecFileFunction = (file: string, args: readonly string[]) => Promise<ExecFileOutput>;
+export interface ReadTcpListenPortOwnerDependencies {
+    readonly execFile?: ExecFileFunction;
+}
+export declare class PortOwnerDependencyError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare function parseLsofPortOwnerOutput(output: string): PortOwner | null;
+export declare function readTcpListenPortOwner(port: number, dependencies?: ReadTcpListenPortOwnerDependencies): Promise<PortOwner | null>;
+//# sourceMappingURL=port-owner.d.ts.map

package/dist/shared/port-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-owner.d.ts","sourceRoot":"","sources":["../../src/shared/port-owner.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAElG,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,qBAAa,wBAAyB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAI1D;AAUD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAmBzE;AAED,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,MAAM,EACZ,YAAY,GAAE,kCAAuC,GACnD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAwB3B"}

package/dist/shared/port-owner.js

@@ -0,0 +1,60 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+export class PortOwnerDependencyError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PortOwnerDependencyError';
+    }
+}
+function errorCode(error) {
+    if (typeof error !== 'object' || error === null || !('code' in error)) {
+        return undefined;
+    }
+    const code = error.code;
+    return typeof code === 'string' || typeof code === 'number' ? code : undefined;
+}
+export function parseLsofPortOwnerOutput(output) {
+    const lines = output
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    const pidLine = lines.find((line) => line.startsWith('p'));
+    const commandLine = lines.find((line) => line.startsWith('c'));
+    if (!pidLine || !commandLine) {
+        return null;
+    }
+    const pid = Number.parseInt(pidLine.slice(1), 10);
+    if (!Number.isInteger(pid) || pid <= 0) {
+        return null;
+    }
+    const command = commandLine.slice(1);
+    if (command.length === 0) {
+        return null;
+    }
+    return { command, pid };
+}
+export async function readTcpListenPortOwner(port, dependencies = {}) {
+    const runExecFile = dependencies.execFile ?? execFileAsync;
+    try {
+        const { stdout } = await runExecFile('lsof', [
+            '-nP',
+            `-iTCP:${String(port)}`,
+            '-sTCP:LISTEN',
+            '-F',
+            'pc',
+        ]);
+        return parseLsofPortOwnerOutput(stdout);
+    }
+    catch (error) {
+        const code = errorCode(error);
+        if (code === 1) {
+            return null;
+        }
+        if (code === 'ENOENT') {
+            throw new PortOwnerDependencyError(`Tool VM/gateway recovery requires 'lsof' on PATH to verify TCP listener ownership for port ${String(port)}.`, { cause: error });
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=port-owner.js.map

package/dist/shared/port-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"port-owner.js","sourceRoot":"","sources":["../../src/shared/port-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAkB1C,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAClD,YAAmB,OAAe,EAAE,OAAsB;QACzD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACxC,CAAC;CACD;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACtD,MAAM,KAAK,GAAG,MAAM;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,IAAY,EACZ,eAAmD,EAAE;IAErD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,IAAI,aAAa,CAAC;IAC3D,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE;YAC5C,KAAK;YACL,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE;YACvB,cAAc;YACd,IAAI;YACJ,IAAI;SACJ,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,wBAAwB,CACjC,8FAA8F,MAAM,CAAC,IAAI,CAAC,GAAG,EAC7G,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-vm/agent-vm",
-  "version": "0.0.78",
+  "version": "0.0.80",
   "description": "Controller CLI and HTTP server for sandboxed VM coding agents.",
   "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
   "bugs": {
@@ -40,16 +40,16 @@
     "jsonc-parser": "^3.3.1",
     "tasuku": "^2.3.0",
     "zod": "^4.4.3",
-    "@agent-vm/agent-vm-worker": "0.0.78",
-    "@agent-vm/gondolin-adapter": "0.0.78",
-    "@agent-vm/gateway-interface": "0.0.78",
-    "@agent-vm/openclaw-gateway": "0.0.78",
-    "@agent-vm/openclaw-mcp-portal-plugin": "0.0.78",
-    "@agent-vm/secret-management": "0.0.78",
-    "@agent-vm/worker-gateway": "0.0.78",
-    "@agent-vm/config-contracts": "0.0.78",
-    "@agent-vm/mcp-portal": "0.0.78",
-    "@agent-vm/openclaw-agent-vm-plugin": "0.0.78"
+    "@agent-vm/agent-vm-worker": "0.0.80",
+    "@agent-vm/gondolin-adapter": "0.0.80",
+    "@agent-vm/gateway-interface": "0.0.80",
+    "@agent-vm/mcp-portal": "0.0.80",
+    "@agent-vm/config-contracts": "0.0.80",
+    "@agent-vm/openclaw-agent-vm-plugin": "0.0.80",
+    "@agent-vm/openclaw-gateway": "0.0.80",
+    "@agent-vm/secret-management": "0.0.80",
+    "@agent-vm/openclaw-mcp-portal-plugin": "0.0.80",
+    "@agent-vm/worker-gateway": "0.0.80"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json",