@farmslot/adapter-web 0.10.5 → 0.10.7

package/CHANGELOG.md

@@ -6,6 +6,14 @@ All notable changes to `@farmslot/adapter-web` are tracked here.
 
 - Active-development baseline; add user-facing changes here before release or package publication.
 
+## 0.10.7 - 2026-10-15
+
+- Disable macOS code-signing clones across isolated browser launches, merging existing disabled features; let profile cleanup locks retain live owners without a probe-age timeout.
+
+## 0.10.6 - 2026-10-15
+
+- Use the operator-wait runtime and protocol dependency set.
+
 ## 0.10.5 - 2026-10-15
 
 - Consume the plain `ProjectRuntime` and `ActionCatalog` contracts.

package/dist/browser-resolver.d.cts

@@ -113,10 +113,11 @@ export function resolveBrowser({ env, cft, probe, cachePath, chromeCandidates, e
     extensionLoading: string;
     schemaVersion: number;
 }>;
-export function withProbeLock(cachePath: any, key: any, fn: any, { waitMs, beforeClaim, readStartTime }?: {
+export function withProbeLock(cachePath: any, key: any, fn: any, { waitMs, beforeClaim, readStartTime, keepLiveOwner }?: {
     waitMs?: number | undefined;
     beforeClaim?: null | undefined;
     readStartTime?: typeof startTimeOf | undefined;
+    keepLiveOwner?: boolean | undefined;
 }): Promise<any>;
 export function readManagedChromePolicy({ platform, plists, exists, readKey, extensionName, }?: {
     platform?: NodeJS.Platform | undefined;

package/dist/chrome-args.d.cts

@@ -6,6 +6,14 @@ export function clearDetachedLaunchUnproven(profile: any): void;
 export function clearValidationPortQuarantine(port: any, profile: any, lease: any): void;
 export function createRuntimeIdentityNonce(): string;
 export function detachedLaunchUnprovenPath(profile: any): string;
+/**
+ * Chrome's macOS clone manager runs after startup, regardless of spawn method.
+ * Merge feature switches: Chromium honors only the last --disable-features.
+ * @param {string[]} args
+ * @param {string} [platform]
+ * @returns {string[]}
+ */
+export function disableMacCodeSignClone(args: string[], platform?: string): string[];
 export function hasDetachedLaunchUnproven(profile: any): boolean;
 export function isolatedProfileArgs(platform?: NodeJS.Platform): string[];
 export function markDetachedLaunchUnproven(profile: any): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@farmslot/adapter-web",
-  "version": "0.10.5",
+  "version": "0.10.7",
   "description": "Web platform adapter for Farmslot recipes: resolve and launch an isolated Chromium, own its CDP port, load unpacked extensions, and keep macOS focus.",
   "type": "commonjs",
   "exports": {
@@ -83,9 +83,9 @@
     "prepublishOnly": "node ../../scripts/quality/check-farmslot-package-readiness.mjs --publish --packages @farmslot/adapter-web"
   },
   "dependencies": {
-    "@farmslot/adapter-sdk": "0.15.0",
-    "@farmslot/protocol": "0.47.0",
-    "@farmslot/recipe-runner": "0.37.0",
+    "@farmslot/adapter-sdk": "0.15.1",
+    "@farmslot/protocol": "0.48.0",
+    "@farmslot/recipe-runner": "0.37.1",
     "ws": "^8.18.0"
   },
   "devDependencies": {

package/src/browser-resolver.cjs

@@ -38,6 +38,7 @@ const path = require('node:path');
 const { createRequire } = require('node:module');
 
 const cdp = require('./browser-cdp.cjs');
+const { disableMacCodeSignClone } = require('./chrome-args.cjs');
 
 const SCHEMA_VERSION = 2;
 const LOAD_EXTENSION = 'load-extension';
@@ -445,14 +446,15 @@ const { START_TIME_SLACK_MS } = cdp;
 function ticketFree(
   dir,
   number,
-  { nowMs = Date.now(), budgetMs = 30000, readStartTime = startTimeOf } = {},
+  { nowMs = Date.now(), budgetMs = 30000, readStartTime = startTimeOf, keepLiveOwner = false } = {},
 ) {
   if (number === 0 || fs.existsSync(path.join(dir, `${number}.released`))) return true;
   const ticket = readTicket(path.join(dir, String(number)));
   if (!ticket) return true;
   const { holder } = ticket;
   if (holder && Number.isInteger(holder.pid) && Number.isFinite(holder.at)) {
-    if (!pidAlive(holder.pid) || nowMs - holder.at > PROBE_LOCK_STALE_MS) return true;
+    if (!pidAlive(holder.pid) || (!keepLiveOwner && nowMs - holder.at > PROBE_LOCK_STALE_MS))
+      return true;
     if (typeof holder.started !== 'string' || holder.pid === process.pid || budgetMs <= 0)
       return false;
     const started = readStartTime(holder.pid, budgetMs);
@@ -491,11 +493,13 @@ function newestTicket(dir) {
 // the next one. The directory grows by two small files per probe; a crashed
 // holder's unreleased ticket stays, judged free once its holder is gone.
 // `beforeClaim` and `readStartTime` are test seams.
+// keepLiveOwner is used by profile deletion: an old but still-live cleanup
+// owner cannot be displaced while removing a large directory.
 async function withProbeLock(
   cachePath,
   key,
   fn,
-  { waitMs = 150000, beforeClaim = null, readStartTime = startTimeOf } = {},
+  { waitMs = 150000, beforeClaim = null, readStartTime = startTimeOf, keepLiveOwner = false } = {},
 ) {
   const dir = `${cachePath}.${key.slice(0, 16)}.locks`;
   fs.mkdirSync(dir, { recursive: true });
@@ -505,7 +509,9 @@ async function withProbeLock(
   let fd = null;
   for (;;) {
     const newest = newestTicket(dir);
-    if (ticketFree(dir, newest, { budgetMs: deadline - Date.now(), readStartTime })) {
+    if (
+      ticketFree(dir, newest, { budgetMs: deadline - Date.now(), readStartTime, keepLiveOwner })
+    ) {
       if (beforeClaim) await beforeClaim(newest);
       if (Date.now() > deadline) throw timedOut();
       try {
@@ -675,7 +681,7 @@ async function probeLaunch(
     // window. Like the launchers, it keeps a window behind the operator's apps
     // rendering.
     const backgroundWindow = display === HEADFUL;
-    const args = [
+    const args = disableMacCodeSignClone([
       ...(display === HEADLESS ? ['--headless=new'] : ['--window-size=480,360']),
       `--user-data-dir=${profile}`,
       '--no-first-run',
@@ -687,7 +693,7 @@ async function probeLaunch(
       '--remote-debugging-address=127.0.0.1',
       `--remote-debugging-port=${port}`,
       backgroundWindow ? '--no-startup-window' : 'about:blank',
-    ];
+    ]);
     if (method === LAUNCH_SERVICES) {
       execFileSync('open', ['-g', '-n', '-a', appBundleFor(executable), '--args', ...args], {
         stdio: 'ignore',

package/src/chrome-args.cjs

@@ -38,11 +38,32 @@ function isolatedProfileArgs(platform = process.platform) {
 // Keep requestAnimationFrame, transitions, and input hit testing alive when the
 // slot-owned browser is occluded by the operator's other windows.
 function automationRuntimeArgs() {
-  return [
+  return disableMacCodeSignClone([
     '--disable-background-timer-throttling',
     '--disable-backgrounding-occluded-windows',
     '--disable-renderer-backgrounding',
-  ];
+  ]);
+}
+
+/**
+ * Chrome's macOS clone manager runs after startup, regardless of spawn method.
+ * Merge feature switches: Chromium honors only the last --disable-features.
+ * @param {string[]} args
+ * @param {string} [platform]
+ * @returns {string[]}
+ */
+function disableMacCodeSignClone(args, platform = process.platform) {
+  if (platform !== 'darwin') return args;
+  const disabled = new Set(['MacAppCodeSignClone']);
+  const remaining = [];
+  for (const arg of args) {
+    if (arg.startsWith('--disable-features=')) {
+      for (const feature of arg.slice('--disable-features='.length).split(',')) {
+        if (feature) disabled.add(feature);
+      }
+    } else remaining.push(arg);
+  }
+  return [`--disable-features=${[...disabled].join(',')}`, ...remaining];
 }
 
 function createRuntimeIdentityNonce() {
@@ -353,6 +374,7 @@ module.exports = {
   clearValidationPortQuarantine,
   createRuntimeIdentityNonce,
   detachedLaunchUnprovenPath,
+  disableMacCodeSignClone,
   hasDetachedLaunchUnproven,
   isolatedProfileArgs,
   markDetachedLaunchUnproven,

package/src/launch-browser.cjs

@@ -34,6 +34,7 @@ const {
   clearValidationPortQuarantine,
   createRuntimeIdentityNonce,
   detachedLaunchUnprovenPath,
+  disableMacCodeSignClone,
   hasDetachedLaunchUnproven,
   isolatedProfileArgs,
   markDetachedLaunchUnproven,
@@ -225,7 +226,7 @@ function runLaunch(opts, acquireLock) {
   let owner = null;
   const runtimeNonce = createRuntimeIdentityNonce();
   const startedAt = Date.now();
-  const chromeArgs = [
+  const chromeArgs = disableMacCodeSignClone([
     `--user-data-dir=${profile}`,
     // Debug-port trio (address + port + scoped allow-origins) from the shared module,
     // so the DevTools origin allow-list can never drift away from the port.
@@ -241,7 +242,7 @@ function runLaunch(opts, acquireLock) {
     '--disable-extensions-content-verification',
     '--disable-features=ExtensionContentVerification,DisableLoadExtensionCommandLineSwitch',
     ...extensionLaunchArgs(extensionDir, browser.extensionLoading),
-  ];
+  ]);
   // Initial tab: the caller's URL when provided, else the extension home. The
   // extension home avoids leaving disposable chrome://newtab/ or extensions
   // manager tabs in the operator's slot browser. On macOS the browser starts

package/src/web-dapp/launch.mjs

@@ -45,6 +45,8 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
+import { disableMacCodeSignClone } from '../chrome-args.cjs';
+
 import { hostResolverRules } from './lib/blocked-hosts.mjs';
 import { browserWebSocketUrl, CdpClient } from './lib/cdp-client.mjs';
 import {
@@ -596,6 +598,7 @@ export async function launchWebDappBrowser(
     // when its first window appears. Windows are created over CDP instead, in
     // the background.
     browserArgs.push(launchMethod === LAUNCH_SERVICES ? '--no-startup-window' : 'about:blank');
+    const launchArgs = disableMacCodeSignClone(browserArgs);
 
     started = true;
     // Where this browser's console begins in the slot capture, for
@@ -631,14 +634,14 @@ export async function launchWebDappBrowser(
     }
     const browserPid =
       launchMethod === LAUNCH_SERVICES
-        ? await launchInBackground(application, browserArgs, {
+        ? await launchInBackground(application, launchArgs, {
             runtime,
             cdpPort,
             logFile: path.join(runtime, 'browser.log'),
             pidFile: path.join(runtime, 'browser.pid'),
             timeoutMs: timeouts.browserStartMs,
           })
-        : await spawnDetached(browser.bin, browserArgs, {
+        : await spawnDetached(browser.bin, launchArgs, {
             logFile: path.join(runtime, 'browser.log'),
             pidFile: path.join(runtime, 'browser.pid'),
             env,