@farmslot/agent-runtime 0.8.1 → 0.10.0

package/dist/native/process.js

@@ -0,0 +1,246 @@
+import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { createInterface } from 'node:readline';
+import { NativeProcessTree } from './process-tree.js';
+// Wait for the host's durable process registration before executing the native binary.
+// Reading one byte leaves all subsequent native JSON on stdin untouched.
+const registeredLaunch = `
+const fs = require('node:fs');
+const { spawn } = require('node:child_process');
+if (fs.readSync(0, Buffer.alloc(1), 0, 1, null) !== 1) process.exit(1);
+const child = spawn(process.argv[2], process.argv.slice(3), { stdio: 'inherit' });
+child.on('error', error => { process.stderr.write(error.message); process.exit(1); });
+process.on('SIGTERM', () => child.kill('SIGTERM'));
+child.on('exit', (code, signal) => {
+  if (signal) { process.removeAllListeners(signal); process.kill(process.pid, signal); }
+  else process.exit(code ?? 1);
+});
+`;
+/** JSON framing only. Human-readable stderr never supplies session state. */
+export class JsonLineProcess {
+    constructor(executable, args, options, onMessage, onExit) {
+        this.onExit = onExit;
+        this.nextId = 0;
+        this.closed = false;
+        this.finished = new Promise((resolve) => {
+            this.finish = resolve;
+        });
+        this.cleanupStarted = false;
+        this.closing = false;
+        this.pending = new Map();
+        const identity = `farmslot-native-${randomUUID()}`;
+        this.child = spawn(process.execPath, [
+            '-e',
+            registeredLaunch,
+            '--',
+            identity,
+            ...(options.processSandbox
+                ? [options.processSandbox.executable, ...options.processSandbox.args]
+                : []),
+            executable,
+            ...args,
+        ], {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: 'pipe',
+            detached: true,
+        });
+        this.child.stderr.resume();
+        const lines = createInterface({ input: this.child.stdout });
+        lines.on('line', (line) => {
+            if (this.closed)
+                return;
+            let message;
+            try {
+                if (Buffer.byteLength(line) > 1024 * 1024)
+                    throw new Error('Native event exceeds 1 MiB');
+                const decoded = JSON.parse(line);
+                if (!decoded || typeof decoded !== 'object' || Array.isArray(decoded)) {
+                    throw new Error('Native protocol messages must be objects');
+                }
+                message = decoded;
+            }
+            catch (error) {
+                this.fail(new Error('Native runner emitted invalid JSON', { cause: error }));
+                this.beginStop();
+                return;
+            }
+            if (typeof message.id === 'number' && !message.method && this.pending.has(message.id)) {
+                const request = this.pending.get(message.id);
+                clearTimeout(request.timer);
+                this.pending.delete(message.id);
+                if (message.error)
+                    request.reject(new Error(JSON.stringify(message.error)));
+                else
+                    request.resolve(message.result);
+            }
+            else {
+                try {
+                    onMessage(message);
+                }
+                catch (error) {
+                    // A malformed runner event terminates its own session, not the gateway.
+                    this.fail(new Error('Native runner protocol event failed', { cause: error }));
+                    this.beginStop();
+                }
+            }
+        });
+        this.child.on('error', (error) => {
+            this.fail(error);
+            this.beginCleanup();
+        });
+        this.child.on('exit', (code, signal) => {
+            this.fail(this.failure ??
+                // Native signal handlers may return the conventional 128 + SIGTERM exit code.
+                (this.closing &&
+                    (code === 0 || code === 143 || signal === 'SIGTERM' || signal === 'SIGKILL')
+                    ? undefined
+                    : new Error(`Native runner exited: code=${code}, signal=${signal}`)));
+            // Do not await close: descendants can retain inherited stdio after the runner exits.
+            this.beginCleanup();
+        });
+        this.child.stdin.on('error', (error) => {
+            this.fail(error);
+            this.beginStop();
+        });
+        try {
+            if (this.child.pid) {
+                this.tree = new NativeProcessTree(this.child.pid);
+                this.stopObservingTree = this.tree.observe((error) => {
+                    // Loss of process ownership evidence fails this session and its cleanup claim.
+                    this.beginCleanup(new Error('Native process census failed', { cause: error }));
+                });
+                options.onSpawn?.(this.child.pid, identity);
+            }
+            this.child.stdin.write('\n');
+            if (options.signal) {
+                const abort = () => this.beginStop();
+                options.signal.addEventListener('abort', abort, { once: true });
+                this.stopObservingAbort = () => options.signal.removeEventListener('abort', abort);
+                if (options.signal.aborted)
+                    abort();
+            }
+        }
+        catch (error) {
+            this.fail(error instanceof Error ? error : new Error(String(error)));
+            this.beginCleanup();
+            throw error;
+        }
+    }
+    fail(error) {
+        this.failure ??= error;
+        if (this.closed)
+            return;
+        this.closed = true;
+        for (const request of this.pending.values()) {
+            clearTimeout(request.timer);
+            request.reject(error ?? new Error('Native runner closed'));
+        }
+        this.pending.clear();
+    }
+    write(message) {
+        if (this.closed)
+            throw new Error('Native runner is closed');
+        this.child.stdin.write(`${JSON.stringify(message)}\n`);
+    }
+    request(method, params) {
+        const id = ++this.nextId;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new Error(`Native request timed out: ${method}; acceptance is unknown`));
+            }, 30_000);
+            this.pending.set(id, { resolve, reject, timer });
+            try {
+                this.write({ id, method, params });
+            }
+            catch (error) {
+                clearTimeout(timer);
+                this.pending.delete(id);
+                reject(error);
+            }
+        });
+    }
+    close() {
+        this.beginStop();
+        return (this.closePromise ??= this.finished.then(() => {
+            if (this.cleanupError)
+                throw this.cleanupError;
+        }));
+    }
+    beginStop() {
+        if (this.closing || this.cleanupStarted)
+            return;
+        this.closing = true;
+        this.fail(undefined);
+        try {
+            this.tree?.terminate();
+            this.stopTimer = setTimeout(() => this.beginCleanup(), 3_000);
+        }
+        catch (error) {
+            this.beginCleanup(new Error('Native termination failed', { cause: error }));
+        }
+    }
+    /** Internal completion never rejects; callers of close receive any cleanup failure. */
+    beginCleanup(error) {
+        if (this.cleanupStarted)
+            return;
+        this.cleanupStarted = true;
+        this.cleanupError = error;
+        this.fail(error);
+        this.stopObservingTree?.();
+        clearTimeout(this.stopTimer);
+        void this.cleanGroup().then(() => this.settle(), (cleanupError) => {
+            this.cleanupError = new Error(`Native child cleanup failed: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`, { cause: cleanupError });
+            this.settle();
+        });
+    }
+    settle() {
+        this.stopObservingAbort?.();
+        // Detach host pipe handles even when cleanup failed and a descendant retained them.
+        this.child.stdin.destroy();
+        this.child.stdout.destroy();
+        this.child.stderr.destroy();
+        try {
+            this.onExit(this.cleanupError ?? this.failure, !this.cleanupError);
+        }
+        catch (error) {
+            // The owner could not record completion. Surface that failure to close's caller.
+            this.cleanupError = new Error('Native process completion could not be recorded', {
+                cause: error,
+            });
+        }
+        finally {
+            this.finish();
+        }
+    }
+    async cleanGroup() {
+        if (!this.child.pid)
+            return;
+        if (!this.tree) {
+            // The launch gate is still closed, so no native descendants have started.
+            this.child.kill('SIGKILL');
+            throw new Error('Native process ownership could not be established');
+        }
+        let stopError;
+        try {
+            this.tree.stop();
+        }
+        catch (error) {
+            // A group can disappear while shutdown snapshots are being taken. Accept
+            // cleanup only after fresh OS evidence proves every tracked process and
+            // the original group are absent; otherwise retain the stop failure.
+            stopError = error;
+        }
+        const deadline = Date.now() + 3_000;
+        while (Date.now() < deadline) {
+            if (this.tree.empty() && (this.child.exitCode !== null || this.child.signalCode !== null))
+                return;
+            await new Promise((resolve) => setTimeout(resolve, 20));
+        }
+        if (stopError)
+            throw stopError;
+        throw new Error('Native child processes did not stop');
+    }
+}
+//# sourceMappingURL=process.js.map

package/dist/native/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/native/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,uFAAuF;AACvF,yEAAyE;AACzE,MAAM,gBAAgB,GAAG;;;;;;;;;;;CAWxB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,OAAO,eAAe;IAqB1B,YACE,UAAkB,EAClB,IAAc,EACd,OAMC,EACD,SAAqD,EACpC,MAAmE;QAAnE,WAAM,GAAN,MAAM,CAA6D;QA9B9E,WAAM,GAAG,CAAC,CAAC;QAIX,WAAM,GAAG,KAAK,CAAC;QAEf,aAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEK,mBAAc,GAAG,KAAK,CAAC;QAEvB,YAAO,GAAG,KAAK,CAAC;QAEhB,YAAO,GAAG,IAAI,GAAG,EAGtB,CAAC;QAeF,MAAM,QAAQ,GAAG,mBAAmB,UAAU,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,KAAK,CAChB,OAAO,CAAC,QAAQ,EAChB;YACE,IAAI;YACJ,gBAAgB;YAChB,IAAI;YACJ,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,cAAc;gBACxB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC;gBACrE,CAAC,CAAC,EAAE,CAAC;YACP,UAAU;YACV,GAAG,IAAI;SACR,EACD;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,OAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACzF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,OAAkC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC;gBAC9C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;oBACvE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,wEAAwE;oBACxE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,OAAO;gBACV,8EAA8E;gBAC9E,CAAC,IAAI,CAAC,OAAO;oBACb,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC;oBAC1E,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC,CACzE,CAAC;YACF,qFAAqF;YACrF,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACnD,+EAA+E;oBAC/E,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,KAAK,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAwB;QACnC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAgB;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,MAAe;QACrC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,yBAAyB,CAAC,CAAC,CAAC;YAClF,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,KAAK;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACpD,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,YAAY,CAAC,KAAa;QAChC,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC3B,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,CAAC,YAAqB,EAAE,EAAE;YACxB,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAC3B,gCAAgC,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAC7G,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5B,oFAAoF;QACpF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iFAAiF;YACjF,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAAC,iDAAiD,EAAE;gBAC/E,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,wEAAwE;YACxE,oEAAoE;YACpE,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;gBACvF,OAAO;YACT,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/native/process.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=process.test.d.ts.map

package/dist/native/process.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.test.d.ts","sourceRoot":"","sources":["../../src/native/process.test.ts"],"names":[],"mappings":""}

package/dist/native/process.test.js

@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { JsonLineProcess } from './process.js';
+import { NativeProcessTree } from './process-tree.js';
+test('aborting startup rejects pending protocol work and confirms process cleanup', async () => {
+    const abort = new AbortController();
+    let stopped = false;
+    const child = new JsonLineProcess(process.execPath, ['-e', 'setInterval(()=>{},1000)'], { cwd: process.cwd(), signal: abort.signal }, () => { }, (_error, confirmed) => {
+        stopped = confirmed;
+    });
+    const pending = assert.rejects(child.request('initialize', {}), /closed/);
+    abort.abort();
+    await pending;
+    await child.close();
+    assert.equal(stopped, true);
+});
+test('a shutdown race is resolved only by fresh process absence after the child exits', async (t) => {
+    let ready;
+    const started = new Promise((resolve) => {
+        ready = resolve;
+    });
+    let exited;
+    const original = NativeProcessTree.prototype.stop;
+    t.mock.method(NativeProcessTree.prototype, 'stop', function () {
+        original.call(this);
+        throw new Error('Shutdown observation raced process exit');
+    });
+    const child = new JsonLineProcess(process.execPath, ['-e', 'process.stdout.write(JSON.stringify({ready:true})+"\\n");setInterval(()=>{},1000);'], { cwd: process.cwd() }, () => ready(), (error, stopped) => {
+        exited = { error, stopped };
+    });
+    await started;
+    await child.close();
+    assert.equal(exited?.stopped, true);
+    assert.equal(exited?.error, undefined);
+});
+test('a stop error cannot become successful cleanup while process absence remains unverified', async (t) => {
+    let ready;
+    const started = new Promise((resolve) => {
+        ready = resolve;
+    });
+    let stopped;
+    const original = NativeProcessTree.prototype.stop;
+    t.mock.method(NativeProcessTree.prototype, 'stop', function () {
+        original.call(this);
+        throw new Error('Owned process cleanup unconfirmed');
+    });
+    // The actual child is stopped, but this negative withholds the OS absence proof.
+    t.mock.method(NativeProcessTree.prototype, 'empty', () => false);
+    const child = new JsonLineProcess(process.execPath, ['-e', 'process.stdout.write(JSON.stringify({ready:true})+"\\n");setInterval(()=>{},1000);'], { cwd: process.cwd() }, () => ready(), (_error, confirmed) => {
+        stopped = confirmed;
+    });
+    await started;
+    await assert.rejects(child.close(), /Owned process cleanup unconfirmed/);
+    assert.equal(stopped, false);
+});
+//# sourceMappingURL=process.test.js.map

package/dist/native/process.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.test.js","sourceRoot":"","sources":["../../src/native/process.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAClC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5C,GAAG,EAAE,GAAE,CAAC,EACR,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE;QACpB,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1E,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,OAAO,CAAC;IACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAClG,IAAI,KAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,MAAuD,CAAC;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE;QACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,oFAAoF,CAAC,EAC5F,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,EACb,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACjB,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC,CACF,CAAC;IACF,MAAM,OAAO,CAAC;IACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzG,IAAI,KAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,OAA4B,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE;QACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,iFAAiF;IACjF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,oFAAoF,CAAC,EAC5F,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,EACb,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE;QACpB,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CACF,CAAC;IACF,MAAM,OAAO,CAAC;IACd,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,mCAAmC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC"}

package/dist/native/profile-service.d.ts

@@ -0,0 +1,5 @@
+import type { NativeSessionClient } from './client.js';
+export declare const NATIVE_PROFILE_METHODS: readonly string[];
+/** Called only after execution-node ownership is authorized, using that node's environment. */
+export declare function routeNativeProfile(client: NativeSessionClient, owner: string, method: string, params: Record<string, unknown>): Promise<unknown>;
+//# sourceMappingURL=profile-service.d.ts.map

package/dist/native/profile-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.d.ts","sourceRoot":"","sources":["../../src/native/profile-service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAKnD,CAAC;AAgBF,+FAA+F;AAC/F,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,OAAO,CAAC,CA6DlB"}

package/dist/native/profile-service.js

@@ -0,0 +1,76 @@
+import { Methods, } from '@farmslot/protocol';
+import { addNativeProfile, inspectNativeProfile, listNativeProfiles, nativeProfileEnvironment, removeNativeProfile, } from './account-profiles.js';
+import { nativeRunnerDefinitions } from './registry.js';
+export const NATIVE_PROFILE_METHODS = [
+    Methods.NATIVE_PROFILE_LIST,
+    Methods.NATIVE_PROFILE_ADD,
+    Methods.NATIVE_PROFILE_STATUS,
+    Methods.NATIVE_PROFILE_REMOVE,
+];
+function string(params, name) {
+    if (typeof params[name] !== 'string' || !params[name].trim())
+        throw new Error(`${name} must be a nonempty string`);
+    return params[name];
+}
+function quote(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function sessionStopped(session) {
+    return (['closed', 'failed'].includes(session.state) &&
+        (!session.processPid || session.processStopped === true));
+}
+/** Called only after execution-node ownership is authorized, using that node's environment. */
+export async function routeNativeProfile(client, owner, method, params) {
+    if (Object.keys(params).some((key) => !['executionNodeId', 'profileId', 'runner', 'directory', 'accountContextId'].includes(key)))
+        throw new Error('Native profiles accept native directories, not credentials or environment overrides');
+    if (method === Methods.NATIVE_PROFILE_LIST)
+        return { profiles: listNativeProfiles() };
+    const id = string(params, 'profileId');
+    if (method === Methods.NATIVE_PROFILE_ADD)
+        return {
+            profile: await addNativeProfile({
+                profileId: id,
+                runner: string(params, 'runner'),
+                ...(params.directory !== undefined ? { directory: string(params, 'directory') } : {}),
+            }),
+        };
+    if (method === Methods.NATIVE_PROFILE_STATUS)
+        return inspectNativeProfile(id, async (profile) => {
+            const definition = nativeRunnerDefinitions[profile.runner];
+            const account = await definition.account.observe({
+                cwd: profile.directory,
+                executable: definition.binary,
+                env: nativeProfileEnvironment(profile),
+            });
+            const loginCommand = [
+                'env',
+                ...definition.account.unset.flatMap((name) => ['-u', name]),
+                ...Object.entries(definition.account.environment(profile.directory)).map(([key, value]) => `${key}=${value}`),
+                account.executable ?? definition.binary,
+                ...definition.account.loginArgs,
+            ]
+                .map(quote)
+                .join(' ');
+            return { profile, account, loginCommand };
+        });
+    if (method === Methods.NATIVE_PROFILE_REMOVE) {
+        await removeNativeProfile(id, string(params, 'accountContextId'), async (profile) => {
+            const sessions = (await client.list(owner)).filter((session) => session.profileId === profile.id);
+            if (sessions.some((session) => session.workerManaged && !sessionStopped(session)))
+                throw new Error('Stop this profile’s worker runs before removing the profile');
+            for (const session of sessions) {
+                // Retirement blocks new launches. A stopped worker needs no standalone
+                // close request, which correctly requires its separate task controls.
+                if (session.workerManaged)
+                    continue;
+                await client.close(owner, session.id);
+                const stopped = (await client.read(owner, session.id, undefined, 1)).session;
+                if (!sessionStopped(stopped))
+                    throw new Error('Native profile process cleanup is not confirmed');
+            }
+        });
+        return { removed: true };
+    }
+    throw new Error('Unknown native profile method');
+}
+//# sourceMappingURL=profile-service.js.map

package/dist/native/profile-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.js","sourceRoot":"","sources":["../../src/native/profile-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,GAGR,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,kBAAkB;IAC1B,OAAO,CAAC,qBAAqB;IAC7B,OAAO,CAAC,qBAAqB;CAC9B,CAAC;AACF,SAAS,MAAM,CAAC,MAA+B,EAAE,IAAY;IAC3D,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AACD,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AACD,SAAS,cAAc,CAAC,OAA0B;IAChD,OAAO,CACL,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA2B,EAC3B,KAAa,EACb,MAAc,EACd,MAA+B;IAE/B,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC7F;QAED,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,IAAI,MAAM,KAAK,OAAO,CAAC,mBAAmB;QAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,OAAO,CAAC,kBAAkB;QACvC,OAAO;YACL,OAAO,EAAE,MAAM,gBAAgB,CAAC;gBAC9B,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAChC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC;SACH,CAAC;IACJ,IAAI,MAAM,KAAK,OAAO,CAAC,qBAAqB;QAC1C,OAAO,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAsC,EAAE;YACpF,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/C,GAAG,EAAE,OAAO,CAAC,SAAS;gBACtB,UAAU,EAAE,UAAU,CAAC,MAAM;gBAC7B,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG;gBACnB,KAAK;gBACL,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3D,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CACtE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CACpC;gBACD,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM;gBACvC,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS;aAChC;iBACE,GAAG,CAAC,KAAK,CAAC;iBACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,IAAI,MAAM,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC7C,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAClF,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAC9C,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,uEAAuE;gBACvE,sEAAsE;gBACtE,IAAI,OAAO,CAAC,aAAa;oBAAE,SAAS;gBACpC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC"}

package/dist/native/registry.d.ts

@@ -0,0 +1,20 @@
+import type { NativeAccountObservation, NativeAccountProbeOptions } from './account-types.js';
+import type { NativeAdapter } from './types.js';
+export interface NativeRunnerDefinition {
+    adapter: NativeAdapter;
+    binary: string;
+    supportsWorkers?: boolean;
+    supportsReadOnlyWorkspace?: boolean;
+    reviewRuntimeRoots?: (environment: NodeJS.ProcessEnv) => string[];
+    /** Default for new standalone conversations; worker launch settings stay authoritative. */
+    defaultEffort?: string;
+    account: {
+        environment(directory: string, base?: NodeJS.ProcessEnv): Record<string, string>;
+        unset: readonly string[];
+        loginArgs: readonly string[];
+        observe(options: NativeAccountProbeOptions): Promise<NativeAccountObservation>;
+    };
+}
+/** Native profile mechanics stay with the runner definition, not client workflows. */
+export declare const nativeRunnerDefinitions: Record<string, NativeRunnerDefinition>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/native/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/native/registry.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAM9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;IAClE,2FAA2F;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE;QACP,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;KAChF,CAAC;CACH;AAED,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CA2E1E,CAAC"}

package/dist/native/registry.js

@@ -0,0 +1,89 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { claudeProfileEnvironment, observeClaudeAccount } from './account-claude.js';
+import { observeCodexAccount } from './account-codex.js';
+import { cursorProfileEnvironment, observeCursorAccount } from './account-cursor.js';
+import { observeGrokAccount } from './account-grok.js';
+import { claudeNativeAdapter } from './claude.js';
+import { codexNativeAdapter } from './codex.js';
+import { cursorNativeAdapter } from './cursor.js';
+import { grokNativeAdapter } from './grok.js';
+import { hostReviewSandboxAvailable } from './review-sandbox.js';
+/** Native profile mechanics stay with the runner definition, not client workflows. */
+export const nativeRunnerDefinitions = {
+    codex: {
+        adapter: codexNativeAdapter,
+        binary: 'codex',
+        supportsWorkers: true,
+        supportsReadOnlyWorkspace: true,
+        defaultEffort: 'low',
+        account: {
+            environment: (directory) => ({ CODEX_HOME: directory }),
+            unset: ['OPENAI_API_KEY', 'CODEX_API_KEY'],
+            loginArgs: ['login'],
+            observe: observeCodexAccount,
+        },
+    },
+    claude: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [env.CLAUDE_CONFIG_DIR ?? join(env.HOME ?? homedir(), '.claude')],
+        adapter: claudeNativeAdapter,
+        binary: 'claude',
+        supportsWorkers: true,
+        account: {
+            environment: claudeProfileEnvironment,
+            unset: [
+                'ANTHROPIC_API_KEY',
+                'ANTHROPIC_AUTH_TOKEN',
+                'CLAUDE_CODE_OAUTH_TOKEN',
+                'CLAUDE_CONFIG_DIR',
+                'CLAUDE_SECURESTORAGE_CONFIG_DIR',
+            ],
+            loginArgs: ['auth', 'login'],
+            observe: observeClaudeAccount,
+        },
+    },
+    cursor: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [
+            join(env.HOME ?? homedir(), '.cursor'),
+            join(env.HOME ?? homedir(), 'Library/Caches/cursor-compile-cache'),
+            join(env.HOME ?? homedir(), 'Library/Application Support/Cursor'),
+            // cursor-agent locks chats under /tmp/cursor-agent-persist-<uid> (realpath
+            // /private/tmp/...). Denying that mkdir kills the tmux reviewer in seconds.
+            ...(typeof process.getuid === 'function'
+                ? [join('/tmp', `cursor-agent-persist-${process.getuid()}`)]
+                : []),
+        ],
+        adapter: cursorNativeAdapter,
+        binary: 'cursor-agent',
+        supportsWorkers: true,
+        account: {
+            environment: cursorProfileEnvironment,
+            unset: [
+                'CURSOR_API_KEY',
+                'CURSOR_AUTH_TOKEN',
+                'CURSOR_CONFIG_DIR',
+                'CURSOR_DATA_DIR',
+                'XDG_CONFIG_HOME',
+                'XDG_DATA_HOME',
+            ],
+            loginArgs: ['login'],
+            observe: observeCursorAccount,
+        },
+    },
+    grok: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [env.GROK_HOME ?? join(env.HOME ?? homedir(), '.grok')],
+        adapter: grokNativeAdapter,
+        binary: 'grok',
+        supportsWorkers: true,
+        account: {
+            environment: (directory) => ({ GROK_HOME: directory }),
+            unset: ['GROK_API_KEY', 'XAI_API_KEY'],
+            loginArgs: ['login'],
+            observe: observeGrokAccount,
+        },
+    },
+};
+//# sourceMappingURL=registry.js.map

package/dist/native/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/native/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAmBjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,KAAK,EAAE;QACL,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,OAAO;QACf,eAAe,EAAE,IAAI;QACrB,yBAAyB,EAAE,IAAI;QAC/B,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACvD,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;YAC1C,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,mBAAmB;SAC7B;KACF;IACD,MAAM,EAAE;QACN,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9F,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,QAAQ;QAChB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,wBAAwB;YACrC,KAAK,EAAE;gBACL,mBAAmB;gBACnB,sBAAsB;gBACtB,yBAAyB;gBACzB,mBAAmB;gBACnB,iCAAiC;aAClC;YACD,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC5B,OAAO,EAAE,oBAAoB;SAC9B;KACF;IACD,MAAM,EAAE;QACN,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,qCAAqC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,oCAAoC,CAAC;YACjE,2EAA2E;YAC3E,4EAA4E;YAC5E,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACtC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR;QACD,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,cAAc;QACtB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,wBAAwB;YACrC,KAAK,EAAE;gBACL,gBAAgB;gBAChB,mBAAmB;gBACnB,mBAAmB;gBACnB,iBAAiB;gBACjB,iBAAiB;gBACjB,eAAe;aAChB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,oBAAoB;SAC9B;KACF;IACD,IAAI,EAAE;QACJ,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QACpF,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,MAAM;QACd,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YACtD,KAAK,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;YACtC,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,kBAAkB;SAC5B;KACF;CACF,CAAC"}

package/dist/native/registry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.test.d.ts.map

package/dist/native/registry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.d.ts","sourceRoot":"","sources":["../../src/native/registry.test.ts"],"names":[],"mappings":""}

package/dist/native/registry.test.js

@@ -0,0 +1,13 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+import { nativeRunnerDefinitions } from './registry.js';
+test('cursor review sandbox includes the persist lock directory', () => {
+    const roots = nativeRunnerDefinitions.cursor.reviewRuntimeRoots?.({ HOME: '/Users/x' }) ?? [];
+    assert.ok(roots.some((root) => root.endsWith('/.cursor')));
+    assert.ok(roots.some((root) => root.includes('Application Support/Cursor')));
+    if (typeof process.getuid === 'function') {
+        assert.ok(roots.includes(join('/tmp', `cursor-agent-persist-${process.getuid()}`)));
+    }
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/native/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../src/native/registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/native/review-sandbox.d.ts

@@ -0,0 +1,12 @@
+import type { NativeWorkerFilesystemPolicy } from './worker-launch.js';
+export interface NativeProcessSandbox {
+    executable: string;
+    args: string[];
+}
+export declare const hostReviewSandboxAvailable: () => boolean;
+/** Shared with terminal review launches; trust settings cannot weaken source protection. */
+export declare const reviewProcessSandbox: (policy: NativeWorkerFilesystemPolicy, runtimeRoots: string[]) => Promise<{
+    sandbox: NativeProcessSandbox;
+    temporaryDirectory: string;
+}>;
+//# sourceMappingURL=review-sandbox.d.ts.map

package/dist/native/review-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.d.ts","sourceRoot":"","sources":["../../src/native/review-sandbox.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAQD,eAAO,MAAM,0BAA0B,QANxB,OAMmD,CAAC;AACnE,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,WANrB,4BAA4B,gBACtB,MAAM,EAAE,KACrB,OAAO,CAAC;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAIhB,CAAC"}

package/dist/native/review-sandbox.js

@@ -0,0 +1,6 @@
+import { createRequire } from 'node:module';
+const implementation = createRequire(import.meta.url)('../../scripts/review-filesystem.cjs');
+export const hostReviewSandboxAvailable = implementation.available;
+/** Shared with terminal review launches; trust settings cannot weaken source protection. */
+export const reviewProcessSandbox = implementation.sandbox;
+//# sourceMappingURL=review-sandbox.js.map

package/dist/native/review-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.js","sourceRoot":"","sources":["../../src/native/review-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQ5C,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,qCAAqC,CAM1F,CAAC;AACF,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,SAAS,CAAC;AACnE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,OAAO,CAAC"}

package/dist/native/review-sandbox.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=review-sandbox.test.d.ts.map

package/dist/native/review-sandbox.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.test.d.ts","sourceRoot":"","sources":["../../src/native/review-sandbox.test.ts"],"names":[],"mappings":""}