@code-yeongyu/senpi 2026.9.18 → 2026.9.19-2

package/dist/modes/rpc/host-launch-spec.js

@@ -0,0 +1,183 @@
+/**
+ * The file a client hands `senpi host`: what the daemon should be started with, and whether this
+ * machine may act on it at all.
+ *
+ * A launch spec is the one input that decides what code a long-lived, machine-wide daemon LOADS, so
+ * it is a trust boundary rather than a convenience format. Four properties are proven before any
+ * process is started, and each maps to a refusal a caller can branch on:
+ *
+ *   - `launch_spec_insecure` - the file is not owned by this uid, or it is group/world writable.
+ *     Anyone who can rewrite the spec can choose the daemon's extensions.
+ *   - `launch_spec_path_escape` - an extension path leaves the spec directory's tree, lexically or
+ *     through a symlink. The spec directory is the profile; a path outside it is somebody else's.
+ *   - `launch_spec_env_denied` - an `env` key outside `^(SENPI|OMO|PI)_[A-Z0-9_]+$`. The spec may
+ *     add to the brand's own lane and nothing else; it may never set `PATH` for a daemon.
+ *   - `launch_spec_missing_extension` - a listed extension does not exist. Failing here is the
+ *     point: a daemon that booted with half a profile would serve every client with half a profile.
+ *
+ * The spec is deliberately a FILE, never stdin or an argv blob: those cannot be owner-checked, and
+ * the directory holding the file is what the extension paths are resolved against.
+ */
+import { readFile, realpath, stat } from "node:fs/promises";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { isSessionRuntimeKind } from "../../cli/args.js";
+/** Keys a spec's `env` may carry: the brand's own lane, and nothing that steers process startup. */
+const SPEC_ENV_NAME = /^(SENPI|OMO|PI)_[A-Z0-9_]+$/u;
+/** A spec that may not be acted on, naming the property that failed and the path that failed it. */
+export class HostLaunchSpecError extends Error {
+    constructor(reason, detail) {
+        super(`${reason}: ${detail}`);
+        this.name = "HostLaunchSpecError";
+        this.reason = reason;
+        this.detail = detail;
+    }
+}
+/** What an ensure without a spec launches: the daemon defaults, no extensions, no extra env. */
+export const DEFAULT_HOST_LAUNCH_SPEC = {
+    hostArgs: [],
+    policy: {},
+    env: {},
+};
+/**
+ * Reads, trusts and resolves one launch spec. Every failure is a `HostLaunchSpecError`; nothing is
+ * started, and no daemon state is written, until this has returned.
+ */
+export async function loadHostLaunchSpec(specPath, platform = process.platform) {
+    const absolute = resolve(specPath);
+    await assertTrustedFile(absolute, platform);
+    const spec = parseHostLaunchSpec(await readSpecText(absolute));
+    const env = trustedEnv(spec.env);
+    const extensions = await resolveExtensions(spec.core.extensions, dirname(absolute));
+    return {
+        hostArgs: [
+            "--session-runtime",
+            spec.core.session_runtime,
+            ...extensions.flatMap((path) => ["--extension", path]),
+        ],
+        policy: {
+            ...(spec.tunables?.idleExitMs !== undefined && { idleExitMs: spec.tunables.idleExitMs }),
+            ...(spec.tunables?.coldStart !== undefined && { coldStart: spec.tunables.coldStart }),
+        },
+        env,
+    };
+}
+/** Parses the document. A boundary: everything past it is typed and nothing re-validates it. */
+export function parseHostLaunchSpec(text) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (error) {
+        throw new HostLaunchSpecError("launch_spec_invalid", error instanceof Error ? error.message : "not JSON");
+    }
+    if (!isRecord(parsed))
+        throw new HostLaunchSpecError("launch_spec_invalid", "the spec is not a JSON object");
+    if (parsed.spec_version !== 1) {
+        throw new HostLaunchSpecError("launch_spec_invalid", `unsupported spec_version ${String(parsed.spec_version)}`);
+    }
+    const core = parsed.core;
+    if (!isRecord(core))
+        throw new HostLaunchSpecError("launch_spec_invalid", "core must be an object");
+    if (typeof core.session_runtime !== "string" || !isSessionRuntimeKind(core.session_runtime)) {
+        throw new HostLaunchSpecError("launch_spec_invalid", "core.session_runtime must be in-process or worker");
+    }
+    // A daemon that is not multi-session cannot serve a second client, so a spec asking for one is a
+    // client bug rather than a configuration: it is refused instead of quietly upgraded.
+    if (core.multi_session !== true) {
+        throw new HostLaunchSpecError("launch_spec_invalid", "core.multi_session must be true");
+    }
+    if (!Array.isArray(core.extensions) || !core.extensions.every((entry) => typeof entry === "string")) {
+        throw new HostLaunchSpecError("launch_spec_invalid", "core.extensions must be an array of strings");
+    }
+    const tunables = parsedTunables(parsed.tunables);
+    return {
+        spec_version: 1,
+        core: { session_runtime: core.session_runtime, multi_session: true, extensions: core.extensions },
+        ...(tunables && { tunables }),
+        ...(isRecord(parsed.env) && { env: parsedEnv(parsed.env) }),
+    };
+}
+async function readSpecText(absolute) {
+    try {
+        return await readFile(absolute, "utf8");
+    }
+    catch (error) {
+        throw new HostLaunchSpecError("launch_spec_unreadable", error instanceof Error ? error.message : absolute);
+    }
+}
+/**
+ * Ownership and permissions of the spec file. win32 has neither a comparable uid nor POSIX mode
+ * bits on this path, so the check is POSIX-only and says so rather than pretending to pass.
+ */
+async function assertTrustedFile(absolute, platform) {
+    if (platform === "win32")
+        return;
+    const stats = await stat(absolute).catch((error) => {
+        throw new HostLaunchSpecError("launch_spec_unreadable", error instanceof Error ? error.message : absolute);
+    });
+    const uid = process.getuid?.();
+    if (uid !== undefined && stats.uid !== uid) {
+        throw new HostLaunchSpecError("launch_spec_insecure", `${absolute} is owned by uid ${stats.uid}, not ${uid}`);
+    }
+    if ((stats.mode & 0o022) !== 0) {
+        throw new HostLaunchSpecError("launch_spec_insecure", `${absolute} is group/world writable (mode ${(stats.mode & 0o777).toString(8)})`);
+    }
+}
+function trustedEnv(env) {
+    for (const name of Object.keys(env ?? {})) {
+        if (!SPEC_ENV_NAME.test(name)) {
+            throw new HostLaunchSpecError("launch_spec_env_denied", `${name} is outside ${SPEC_ENV_NAME.source}`);
+        }
+    }
+    return env ?? {};
+}
+/** Resolves each listed extension inside the spec's own directory, or refuses to start at all. */
+async function resolveExtensions(extensions, specDir) {
+    const rootReal = await realpath(specDir).catch(() => specDir);
+    const resolved = [];
+    for (const entry of extensions) {
+        const target = resolve(specDir, entry);
+        if (escapes(specDir, target)) {
+            throw new HostLaunchSpecError("launch_spec_path_escape", `${entry} resolves outside ${specDir}`);
+        }
+        const real = await realpath(target).catch(() => undefined);
+        if (real === undefined) {
+            throw new HostLaunchSpecError("launch_spec_missing_extension", `${target} does not exist`);
+        }
+        // A path that is lexically inside the tree can still LEAD outside it through a symlink, and
+        // the daemon would load whatever it points at.
+        if (escapes(rootReal, real)) {
+            throw new HostLaunchSpecError("launch_spec_path_escape", `${entry} links outside ${specDir}`);
+        }
+        resolved.push(real);
+    }
+    return resolved;
+}
+function escapes(root, target) {
+    const step = relative(root, target);
+    return step.startsWith("..") || isAbsolute(step);
+}
+function parsedTunables(value) {
+    if (!isRecord(value))
+        return undefined;
+    const idleExitMs = value.idleExitMs;
+    const coldStart = value.coldStart;
+    return {
+        ...(typeof idleExitMs === "number" && Number.isFinite(idleExitMs) && idleExitMs > 0 && { idleExitMs }),
+        ...((coldStart === "transient" || coldStart === "persistent") && { coldStart }),
+    };
+}
+function parsedEnv(value) {
+    const env = {};
+    for (const [name, entry] of Object.entries(value)) {
+        if (typeof entry !== "string") {
+            throw new HostLaunchSpecError("launch_spec_invalid", `env.${name} must be a string`);
+        }
+        env[name] = entry;
+    }
+    return env;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=host-launch-spec.js.map

package/dist/modes/rpc/host-launch-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-launch-spec.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-launch-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAA2B,MAAM,mBAAmB,CAAC;AAGlF,oGAAoG;AACpG,MAAM,aAAa,GAAG,8BAA8B,CAAC;AA0BrD,oGAAoG;AACpG,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI7C,YAAY,MAA6B,EAAE,MAAc;QACxD,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAUD,gGAAgG;AAChG,MAAM,CAAC,MAAM,wBAAwB,GAA2B;IAC/D,QAAQ,EAAE,EAAE;IACZ,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,EAAE;CACP,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAAgB,EAChB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO;QACN,QAAQ,EAAE;YACT,mBAAmB;YACnB,IAAI,CAAC,IAAI,CAAC,eAAe;YACzB,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;SACtD;QACD,MAAM,EAAE;YACP,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;SACrF;QACD,GAAG;KACH,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,4BAA4B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC;IACpG,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,mDAAmD,CAAC,CAAC;IAC3G,CAAC;IACD,iGAAiG;IACjG,qFAAqF;IACrF,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,6CAA6C,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO;QACN,YAAY,EAAE,CAAC;QACf,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;QACjG,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;KAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,CAAC;QACJ,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5G,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAyB;IAC3E,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO;IACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC3D,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,GAAG,QAAQ,oBAAoB,KAAK,CAAC,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAC5B,sBAAsB,EACtB,GAAG,QAAQ,kCAAkC,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAChF,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,GAAiD;IACpE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,GAAG,IAAI,eAAe,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,CAAC;IACF,CAAC;IACD,OAAO,GAAG,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,iBAAiB,CAAC,UAA6B,EAAE,OAAe;IAC9E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,GAAG,KAAK,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,mBAAmB,CAAC,+BAA+B,EAAE,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAC5F,CAAC;QACD,4FAA4F;QAC5F,+CAA+C;QAC/C,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,GAAG,KAAK,kBAAkB,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,OAAO;QACN,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QACtG,GAAG,CAAC,CAAC,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;KAC/E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B;IAChD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;QACtF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The file a client hands `senpi host`: what the daemon should be started with, and whether this\n * machine may act on it at all.\n *\n * A launch spec is the one input that decides what code a long-lived, machine-wide daemon LOADS, so\n * it is a trust boundary rather than a convenience format. Four properties are proven before any\n * process is started, and each maps to a refusal a caller can branch on:\n *\n *   - `launch_spec_insecure` - the file is not owned by this uid, or it is group/world writable.\n *     Anyone who can rewrite the spec can choose the daemon's extensions.\n *   - `launch_spec_path_escape` - an extension path leaves the spec directory's tree, lexically or\n *     through a symlink. The spec directory is the profile; a path outside it is somebody else's.\n *   - `launch_spec_env_denied` - an `env` key outside `^(SENPI|OMO|PI)_[A-Z0-9_]+$`. The spec may\n *     add to the brand's own lane and nothing else; it may never set `PATH` for a daemon.\n *   - `launch_spec_missing_extension` - a listed extension does not exist. Failing here is the\n *     point: a daemon that booted with half a profile would serve every client with half a profile.\n *\n * The spec is deliberately a FILE, never stdin or an argv blob: those cannot be owner-checked, and\n * the directory holding the file is what the extension paths are resolved against.\n */\nimport { readFile, realpath, stat } from \"node:fs/promises\";\nimport { dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport { isSessionRuntimeKind, type SessionRuntimeKind } from \"../../cli/args.ts\";\nimport type { HostColdStart, HostLifecyclePolicyInput } from \"./host-lifecycle.ts\";\n\n/** Keys a spec's `env` may carry: the brand's own lane, and nothing that steers process startup. */\nconst SPEC_ENV_NAME = /^(SENPI|OMO|PI)_[A-Z0-9_]+$/u;\n\nexport interface HostLaunchSpecCore {\n\treadonly session_runtime: SessionRuntimeKind;\n\t/** A daemon serves many clients at once; a spec that says otherwise is refused, not honoured. */\n\treadonly multi_session: true;\n\t/** Extension paths, relative to the directory holding the spec file. */\n\treadonly extensions: readonly string[];\n}\n\n/** The document itself, as a client writes it. */\nexport interface HostLaunchSpec {\n\treadonly spec_version: 1;\n\treadonly core: HostLaunchSpecCore;\n\treadonly tunables?: { readonly idleExitMs?: number; readonly coldStart?: HostColdStart };\n\treadonly env?: Readonly<Record<string, string>>;\n}\n\nexport type HostLaunchSpecRefusal =\n\t| \"launch_spec_unreadable\"\n\t| \"launch_spec_invalid\"\n\t| \"launch_spec_insecure\"\n\t| \"launch_spec_path_escape\"\n\t| \"launch_spec_env_denied\"\n\t| \"launch_spec_missing_extension\";\n\n/** A spec that may not be acted on, naming the property that failed and the path that failed it. */\nexport class HostLaunchSpecError extends Error {\n\treadonly reason: HostLaunchSpecRefusal;\n\treadonly detail: string;\n\n\tconstructor(reason: HostLaunchSpecRefusal, detail: string) {\n\t\tsuper(`${reason}: ${detail}`);\n\t\tthis.name = \"HostLaunchSpecError\";\n\t\tthis.reason = reason;\n\t\tthis.detail = detail;\n\t}\n}\n\n/** A trusted spec, in the shape the ensure/handoff entry points take. */\nexport interface ResolvedHostLaunchSpec {\n\t/** Host CLI arguments: the session runtime and one absolute `--extension` per listed path. */\n\treadonly hostArgs: readonly string[];\n\treadonly policy: HostLifecyclePolicyInput;\n\treadonly env: Readonly<Record<string, string>>;\n}\n\n/** What an ensure without a spec launches: the daemon defaults, no extensions, no extra env. */\nexport const DEFAULT_HOST_LAUNCH_SPEC: ResolvedHostLaunchSpec = {\n\thostArgs: [],\n\tpolicy: {},\n\tenv: {},\n};\n\n/**\n * Reads, trusts and resolves one launch spec. Every failure is a `HostLaunchSpecError`; nothing is\n * started, and no daemon state is written, until this has returned.\n */\nexport async function loadHostLaunchSpec(\n\tspecPath: string,\n\tplatform: NodeJS.Platform = process.platform,\n): Promise<ResolvedHostLaunchSpec> {\n\tconst absolute = resolve(specPath);\n\tawait assertTrustedFile(absolute, platform);\n\tconst spec = parseHostLaunchSpec(await readSpecText(absolute));\n\tconst env = trustedEnv(spec.env);\n\tconst extensions = await resolveExtensions(spec.core.extensions, dirname(absolute));\n\treturn {\n\t\thostArgs: [\n\t\t\t\"--session-runtime\",\n\t\t\tspec.core.session_runtime,\n\t\t\t...extensions.flatMap((path) => [\"--extension\", path]),\n\t\t],\n\t\tpolicy: {\n\t\t\t...(spec.tunables?.idleExitMs !== undefined && { idleExitMs: spec.tunables.idleExitMs }),\n\t\t\t...(spec.tunables?.coldStart !== undefined && { coldStart: spec.tunables.coldStart }),\n\t\t},\n\t\tenv,\n\t};\n}\n\n/** Parses the document. A boundary: everything past it is typed and nothing re-validates it. */\nexport function parseHostLaunchSpec(text: string): HostLaunchSpec {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(text);\n\t} catch (error: unknown) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", error instanceof Error ? error.message : \"not JSON\");\n\t}\n\tif (!isRecord(parsed)) throw new HostLaunchSpecError(\"launch_spec_invalid\", \"the spec is not a JSON object\");\n\tif (parsed.spec_version !== 1) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", `unsupported spec_version ${String(parsed.spec_version)}`);\n\t}\n\tconst core = parsed.core;\n\tif (!isRecord(core)) throw new HostLaunchSpecError(\"launch_spec_invalid\", \"core must be an object\");\n\tif (typeof core.session_runtime !== \"string\" || !isSessionRuntimeKind(core.session_runtime)) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", \"core.session_runtime must be in-process or worker\");\n\t}\n\t// A daemon that is not multi-session cannot serve a second client, so a spec asking for one is a\n\t// client bug rather than a configuration: it is refused instead of quietly upgraded.\n\tif (core.multi_session !== true) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", \"core.multi_session must be true\");\n\t}\n\tif (!Array.isArray(core.extensions) || !core.extensions.every((entry) => typeof entry === \"string\")) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", \"core.extensions must be an array of strings\");\n\t}\n\tconst tunables = parsedTunables(parsed.tunables);\n\treturn {\n\t\tspec_version: 1,\n\t\tcore: { session_runtime: core.session_runtime, multi_session: true, extensions: core.extensions },\n\t\t...(tunables && { tunables }),\n\t\t...(isRecord(parsed.env) && { env: parsedEnv(parsed.env) }),\n\t};\n}\n\nasync function readSpecText(absolute: string): Promise<string> {\n\ttry {\n\t\treturn await readFile(absolute, \"utf8\");\n\t} catch (error: unknown) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_unreadable\", error instanceof Error ? error.message : absolute);\n\t}\n}\n\n/**\n * Ownership and permissions of the spec file. win32 has neither a comparable uid nor POSIX mode\n * bits on this path, so the check is POSIX-only and says so rather than pretending to pass.\n */\nasync function assertTrustedFile(absolute: string, platform: NodeJS.Platform): Promise<void> {\n\tif (platform === \"win32\") return;\n\tconst stats = await stat(absolute).catch((error: unknown) => {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_unreadable\", error instanceof Error ? error.message : absolute);\n\t});\n\tconst uid = process.getuid?.();\n\tif (uid !== undefined && stats.uid !== uid) {\n\t\tthrow new HostLaunchSpecError(\"launch_spec_insecure\", `${absolute} is owned by uid ${stats.uid}, not ${uid}`);\n\t}\n\tif ((stats.mode & 0o022) !== 0) {\n\t\tthrow new HostLaunchSpecError(\n\t\t\t\"launch_spec_insecure\",\n\t\t\t`${absolute} is group/world writable (mode ${(stats.mode & 0o777).toString(8)})`,\n\t\t);\n\t}\n}\n\nfunction trustedEnv(env: Readonly<Record<string, string>> | undefined): Readonly<Record<string, string>> {\n\tfor (const name of Object.keys(env ?? {})) {\n\t\tif (!SPEC_ENV_NAME.test(name)) {\n\t\t\tthrow new HostLaunchSpecError(\"launch_spec_env_denied\", `${name} is outside ${SPEC_ENV_NAME.source}`);\n\t\t}\n\t}\n\treturn env ?? {};\n}\n\n/** Resolves each listed extension inside the spec's own directory, or refuses to start at all. */\nasync function resolveExtensions(extensions: readonly string[], specDir: string): Promise<string[]> {\n\tconst rootReal = await realpath(specDir).catch(() => specDir);\n\tconst resolved: string[] = [];\n\tfor (const entry of extensions) {\n\t\tconst target = resolve(specDir, entry);\n\t\tif (escapes(specDir, target)) {\n\t\t\tthrow new HostLaunchSpecError(\"launch_spec_path_escape\", `${entry} resolves outside ${specDir}`);\n\t\t}\n\t\tconst real = await realpath(target).catch(() => undefined);\n\t\tif (real === undefined) {\n\t\t\tthrow new HostLaunchSpecError(\"launch_spec_missing_extension\", `${target} does not exist`);\n\t\t}\n\t\t// A path that is lexically inside the tree can still LEAD outside it through a symlink, and\n\t\t// the daemon would load whatever it points at.\n\t\tif (escapes(rootReal, real)) {\n\t\t\tthrow new HostLaunchSpecError(\"launch_spec_path_escape\", `${entry} links outside ${specDir}`);\n\t\t}\n\t\tresolved.push(real);\n\t}\n\treturn resolved;\n}\n\nfunction escapes(root: string, target: string): boolean {\n\tconst step = relative(root, target);\n\treturn step.startsWith(\"..\") || isAbsolute(step);\n}\n\nfunction parsedTunables(value: unknown): HostLaunchSpec[\"tunables\"] | undefined {\n\tif (!isRecord(value)) return undefined;\n\tconst idleExitMs = value.idleExitMs;\n\tconst coldStart = value.coldStart;\n\treturn {\n\t\t...(typeof idleExitMs === \"number\" && Number.isFinite(idleExitMs) && idleExitMs > 0 && { idleExitMs }),\n\t\t...((coldStart === \"transient\" || coldStart === \"persistent\") && { coldStart }),\n\t};\n}\n\nfunction parsedEnv(value: Record<string, unknown>): Record<string, string> {\n\tconst env: Record<string, string> = {};\n\tfor (const [name, entry] of Object.entries(value)) {\n\t\tif (typeof entry !== \"string\") {\n\t\t\tthrow new HostLaunchSpecError(\"launch_spec_invalid\", `env.${name} must be a string`);\n\t\t}\n\t\tenv[name] = entry;\n\t}\n\treturn env;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/modes/rpc/host-launch.d.ts

@@ -15,7 +15,9 @@ export declare const PINNED_HOST_CLIENT_CAPABILITIES: readonly ["extension_event
  * `--internal-rpc-host-supervisor` route that main() dispatches before argument parsing.
  * Exported for tests.
  */
-export declare function defaultHostLaunch(supervisorArgs: readonly string[], compiled?: boolean): {
+export declare function defaultHostLaunch(supervisorArgs: readonly string[], compiled?: boolean, 
+/** Null stands for a bundled layout, where no standalone sibling program exists. */
+sibling?: string | null): {
     command: string;
     args: string[];
 };

package/dist/modes/rpc/host-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-launch.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-launch.ts"],"names":[],"mappings":"AAcA;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,qDAAwE,CAAC;AAErH;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAChC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,QAAQ,GAAE,OAAqB,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAMrC"}
+{"version":3,"file":"host-launch.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-launch.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,qDAAwE,CAAC;AAErH;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAChC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,QAAQ,GAAE,OAAqB;AAC/B,oFAAoF;AACpF,OAAO,GAAE,MAAM,GAAG,IAA8C,GAC9D;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAarC"}

package/dist/modes/rpc/host-launch.js

@@ -6,11 +6,12 @@
  * handoff - build the same command here, so a rebranded binary, a compiled standalone and a
  * source checkout all agree on one re-entry route.
  */
-import { dirname, resolve } from "node:path";
+import { existsSync } from "node:fs";
+import { basename, dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { isBunBinary } from "../../config.js";
 import { CUSTOM_UNSUPPORTED_CAPABILITY, EXTENSION_EVENTS_CAPABILITY } from "./custom-capability.js";
-import { INTERNAL_SUPERVISOR_FLAG } from "./host-lifecycle.js";
+import { INTERNAL_SUPERVISOR_FLAG, resolveCliMainPath } from "./host-lifecycle.js";
 /**
  * Every ensured host starts with this installation-wide profile, independent of the first
  * caller. In particular, extension_events must remain available when a terminal client starts
@@ -28,17 +29,35 @@ export const PINNED_HOST_CLIENT_CAPABILITIES = [EXTENSION_EVENTS_CAPABILITY, CUS
  * `--internal-rpc-host-supervisor` route that main() dispatches before argument parsing.
  * Exported for tests.
  */
-export function defaultHostLaunch(supervisorArgs, compiled = isBunBinary) {
+export function defaultHostLaunch(supervisorArgs, compiled = isBunBinary, 
+/** Null stands for a bundled layout, where no standalone sibling program exists. */
+sibling = resolveHostLifecycleEntryPath() ?? null) {
     if (compiled)
         return { command: process.execPath, args: [INTERNAL_SUPERVISOR_FLAG, ...supervisorArgs] };
+    if (sibling !== null)
+        return { command: process.execPath, args: [...process.execArgv, sibling, ...supervisorArgs] };
+    // Bundled, the host-lifecycle entry beside us is a bundler chunk, not the standalone
+    // program the unbundled tree ships: run directly it returns immediately without ever
+    // listening, so ensure saw "exited with code 0 before answering get_protocol_info".
+    // The CLI entry does honour the internal route in every layout, so re-enter it the way
+    // compiled binaries do, taking the entry from the package's declared bin rather than
+    // counting "..", which lands on the package root once this module is bundled.
     return {
         command: process.execPath,
-        args: [...process.execArgv, resolveHostLifecycleEntryPath(), ...supervisorArgs],
+        args: [...process.execArgv, resolveCliMainPath(), INTERNAL_SUPERVISOR_FLAG, ...supervisorArgs],
     };
 }
+/**
+ * The standalone host-lifecycle program beside this module, or undefined when this module
+ * has been bundled - there the neighbour of the same name is an emitted chunk that does not
+ * start a supervisor on its own.
+ */
 function resolveHostLifecycleEntryPath() {
     const modulePath = fileURLToPath(import.meta.url);
+    if (basename(dirname(modulePath)) === "chunks")
+        return undefined;
     const extension = modulePath.endsWith(".ts") ? ".ts" : ".js";
-    return resolve(dirname(modulePath), `host-lifecycle${extension}`);
+    const sibling = resolve(dirname(modulePath), `host-lifecycle${extension}`);
+    return existsSync(sibling) ? sibling : undefined;
 }
 //# sourceMappingURL=host-launch.js.map

package/dist/modes/rpc/host-launch.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-launch.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-launch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,2BAA2B,EAAE,6BAA6B,CAAU,CAAC;AAErH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAChC,cAAiC,EACjC,QAAQ,GAAY,WAAW;IAE/B,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,wBAAwB,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;IACxG,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,6BAA6B,EAAE,EAAE,GAAG,cAAc,CAAC;KAC/E,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B;IACrC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,iBAAiB,SAAS,EAAE,CAAC,CAAC;AACnE,CAAC","sourcesContent":["/**\n * How a client re-enters this engine as a lifecycle supervisor.\n *\n * The supervisor owns the public socket and the idle-exit policy; it spawns the committed RPC\n * socket host itself. Both callers that start one - the ordinary ensure and a generation\n * handoff - build the same command here, so a rebranded binary, a compiled standalone and a\n * source checkout all agree on one re-entry route.\n */\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { isBunBinary } from \"../../config.ts\";\nimport { CUSTOM_UNSUPPORTED_CAPABILITY, EXTENSION_EVENTS_CAPABILITY } from \"./custom-capability.ts\";\nimport { INTERNAL_SUPERVISOR_FLAG } from \"./host-lifecycle.ts\";\n\n/**\n * Every ensured host starts with this installation-wide profile, independent of the first\n * caller. In particular, extension_events must remain available when a terminal client starts\n * the shared host before the desktop connects.\n */\nexport const PINNED_HOST_CLIENT_CAPABILITIES = [EXTENSION_EVENTS_CAPABILITY, CUSTOM_UNSUPPORTED_CAPABILITY] as const;\n\n/**\n * Builds the spawnable supervisor command for one supervisor argv\n * (`--socket <public> [--bind <path>] [--replace <dev>:<ino>] [host cli args...]`).\n *\n * A compiled standalone binary cannot re-enter itself through a script path: bun executables\n * always boot their embedded entrypoint and parse the whole argv as CLI arguments, so\n * `host-lifecycle.ts --socket <path>` dies with \"Unknown option: --socket\" before the host ever\n * answers get_protocol_info. Compiled binaries therefore re-enter through the hidden\n * `--internal-rpc-host-supervisor` route that main() dispatches before argument parsing.\n * Exported for tests.\n */\nexport function defaultHostLaunch(\n\tsupervisorArgs: readonly string[],\n\tcompiled: boolean = isBunBinary,\n): { command: string; args: string[] } {\n\tif (compiled) return { command: process.execPath, args: [INTERNAL_SUPERVISOR_FLAG, ...supervisorArgs] };\n\treturn {\n\t\tcommand: process.execPath,\n\t\targs: [...process.execArgv, resolveHostLifecycleEntryPath(), ...supervisorArgs],\n\t};\n}\n\nfunction resolveHostLifecycleEntryPath(): string {\n\tconst modulePath = fileURLToPath(import.meta.url);\n\tconst extension = modulePath.endsWith(\".ts\") ? \".ts\" : \".js\";\n\treturn resolve(dirname(modulePath), `host-lifecycle${extension}`);\n}\n"]}
+{"version":3,"file":"host-launch.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-launch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEnF;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,2BAA2B,EAAE,6BAA6B,CAAU,CAAC;AAErH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAChC,cAAiC,EACjC,QAAQ,GAAY,WAAW;AAC/B,oFAAoF;AACpF,OAAO,GAAkB,6BAA6B,EAAE,IAAI,IAAI;IAEhE,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,wBAAwB,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;IACxG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;IACpH,qFAAqF;IACrF,qFAAqF;IACrF,oFAAoF;IACpF,uFAAuF;IACvF,qFAAqF;IACrF,8EAA8E;IAC9E,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,EAAE,wBAAwB,EAAE,GAAG,cAAc,CAAC;KAC9F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,6BAA6B;IACrC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAC3E,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC","sourcesContent":["/**\n * How a client re-enters this engine as a lifecycle supervisor.\n *\n * The supervisor owns the public socket and the idle-exit policy; it spawns the committed RPC\n * socket host itself. Both callers that start one - the ordinary ensure and a generation\n * handoff - build the same command here, so a rebranded binary, a compiled standalone and a\n * source checkout all agree on one re-entry route.\n */\nimport { existsSync } from \"node:fs\";\nimport { basename, dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { isBunBinary } from \"../../config.ts\";\nimport { CUSTOM_UNSUPPORTED_CAPABILITY, EXTENSION_EVENTS_CAPABILITY } from \"./custom-capability.ts\";\nimport { INTERNAL_SUPERVISOR_FLAG, resolveCliMainPath } from \"./host-lifecycle.ts\";\n\n/**\n * Every ensured host starts with this installation-wide profile, independent of the first\n * caller. In particular, extension_events must remain available when a terminal client starts\n * the shared host before the desktop connects.\n */\nexport const PINNED_HOST_CLIENT_CAPABILITIES = [EXTENSION_EVENTS_CAPABILITY, CUSTOM_UNSUPPORTED_CAPABILITY] as const;\n\n/**\n * Builds the spawnable supervisor command for one supervisor argv\n * (`--socket <public> [--bind <path>] [--replace <dev>:<ino>] [host cli args...]`).\n *\n * A compiled standalone binary cannot re-enter itself through a script path: bun executables\n * always boot their embedded entrypoint and parse the whole argv as CLI arguments, so\n * `host-lifecycle.ts --socket <path>` dies with \"Unknown option: --socket\" before the host ever\n * answers get_protocol_info. Compiled binaries therefore re-enter through the hidden\n * `--internal-rpc-host-supervisor` route that main() dispatches before argument parsing.\n * Exported for tests.\n */\nexport function defaultHostLaunch(\n\tsupervisorArgs: readonly string[],\n\tcompiled: boolean = isBunBinary,\n\t/** Null stands for a bundled layout, where no standalone sibling program exists. */\n\tsibling: string | null = resolveHostLifecycleEntryPath() ?? null,\n): { command: string; args: string[] } {\n\tif (compiled) return { command: process.execPath, args: [INTERNAL_SUPERVISOR_FLAG, ...supervisorArgs] };\n\tif (sibling !== null) return { command: process.execPath, args: [...process.execArgv, sibling, ...supervisorArgs] };\n\t// Bundled, the host-lifecycle entry beside us is a bundler chunk, not the standalone\n\t// program the unbundled tree ships: run directly it returns immediately without ever\n\t// listening, so ensure saw \"exited with code 0 before answering get_protocol_info\".\n\t// The CLI entry does honour the internal route in every layout, so re-enter it the way\n\t// compiled binaries do, taking the entry from the package's declared bin rather than\n\t// counting \"..\", which lands on the package root once this module is bundled.\n\treturn {\n\t\tcommand: process.execPath,\n\t\targs: [...process.execArgv, resolveCliMainPath(), INTERNAL_SUPERVISOR_FLAG, ...supervisorArgs],\n\t};\n}\n\n/**\n * The standalone host-lifecycle program beside this module, or undefined when this module\n * has been bundled - there the neighbour of the same name is an emitted chunk that does not\n * start a supervisor on its own.\n */\nfunction resolveHostLifecycleEntryPath(): string | undefined {\n\tconst modulePath = fileURLToPath(import.meta.url);\n\tif (basename(dirname(modulePath)) === \"chunks\") return undefined;\n\tconst extension = modulePath.endsWith(\".ts\") ? \".ts\" : \".js\";\n\tconst sibling = resolve(dirname(modulePath), `host-lifecycle${extension}`);\n\treturn existsSync(sibling) ? sibling : undefined;\n}\n"]}

package/dist/modes/rpc/host-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle.ts"],"names":[],"mappings":";AA4DA,OAAO,EAGN,KAAK,kBAAkB,EAKvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAcD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,SAAW,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBhE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI7E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAC/C,mBAAmB,CASrB;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,GAC3B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAGtC;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,MAAiB,EAG3D;IAED,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAa/C;CACD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC9C;AAED,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AASzE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CASjG;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CA4CzF;AAQD,0FAA0F;AAC1F,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,OAAqB,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrC;AAWD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAUrD;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmU/E"}
+{"version":3,"file":"host-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle.ts"],"names":[],"mappings":";AA4DA,OAAO,EAGN,KAAK,kBAAkB,EAKvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAErD,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAcD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,SAAW,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBhE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI7E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAC/C,mBAAmB,CASrB;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,GAC3B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAGtC;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,MAAiB,EAG3D;IAED,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAa/C;CACD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC9C;AAED,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AASzE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CASjG;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CA4CzF;AAQD,0FAA0F;AAC1F,wBAAgB,kBAAkB,IAAI,MAAM,CAW3C;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,OAAqB,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrC;AAWD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAUrD;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmU/E"}

package/dist/modes/rpc/host-lifecycle.js

@@ -39,7 +39,7 @@
  */
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import { realpathSync, writeSync } from "node:fs";
+import { existsSync, readFileSync, realpathSync, writeSync } from "node:fs";
 import { access, chmod, mkdir, readFile, rename, rm, unlink, writeFile } from "node:fs/promises";
 import { createConnection, createServer } from "node:net";
 import { tmpdir } from "node:os";
@@ -248,7 +248,41 @@ function parseSocketIdentity(value) {
 export function resolveCliMainPath() {
     const modulePath = fileURLToPath(import.meta.url);
     const extension = modulePath.endsWith(".ts") ? ".ts" : ".js";
-    return resolve(dirname(modulePath), "..", "..", `cli-main${extension}`);
+    const unbundled = resolve(dirname(modulePath), "..", "..", `cli-main${extension}`);
+    if (existsSync(unbundled))
+        return unbundled;
+    // Bundled, ".." twice reaches the PACKAGE ROOT rather than dist/, naming a cli-main that
+    // was never emitted. Take the entry from the package's own declared bin instead of
+    // counting directories: it is the one statement of where the CLI lives that holds in
+    // every layout. Falls back to the old path when nothing is declared, so a caller that
+    // was working keeps working.
+    return resolveDeclaredCliEntry(modulePath) ?? unbundled;
+}
+/** The CLI entry declared by the nearest enclosing package.json, when it exists on disk. */
+function resolveDeclaredCliEntry(modulePath) {
+    let dir = dirname(modulePath);
+    for (let depth = 0; depth < 8; depth += 1) {
+        const manifestPath = resolve(dir, "package.json");
+        if (existsSync(manifestPath)) {
+            try {
+                const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+                const declared = manifest.bin;
+                const candidates = typeof declared === "string" ? [declared] : Object.values(declared ?? {});
+                for (const candidate of candidates) {
+                    const entry = resolve(dir, candidate);
+                    if (existsSync(entry))
+                        return entry;
+                }
+            }
+            catch { }
+            return undefined;
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return undefined;
+        dir = parent;
+    }
+    return undefined;
 }
 /**
  * Resolves the host child spawn. Explicit child commands (desktop launchers)