@farmslot/agent-runtime 0.8.1 → 0.10.0

package/dist/native/review-sandbox.test.js

@@ -0,0 +1,40 @@
+import assert from 'node:assert/strict';
+import { execFile } from 'node:child_process';
+import { mkdir, mkdtemp, readFile, realpath, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { promisify } from 'node:util';
+import { hostReviewSandboxAvailable, reviewProcessSandbox } from './review-sandbox.js';
+const exec = promisify(execFile);
+test('host review sandbox protects source, shared git metadata and unrelated files while reports stay writable', { skip: !hostReviewSandboxAvailable() }, async () => {
+    const root = await realpath(await mkdtemp(join(tmpdir(), 'review-permissions-')));
+    const source = join(root, 'source'), output = join(root, 'reports'), metadata = join(root, 'git'), other = join(root, 'other');
+    try {
+        for (const dir of [source, output, metadata, other])
+            await mkdir(dir);
+        for (const dir of [source, metadata, other])
+            await writeFile(join(dir, 'file'), 'original');
+        const { sandbox } = await reviewProcessSandbox({ readOnlyRoots: [source, metadata], writableRoots: [output] }, []);
+        const program = `const fs=require('node:fs');const roots=JSON.parse(process.argv[1]);const results={};for(const [name,root]of Object.entries(roots)){try{fs.writeFileSync(root+'/file','changed');results[name]=true;}catch(e){if(!['EPERM','EACCES'].includes(e.code))throw e;results[name]=false;}}console.log(JSON.stringify(results));`;
+        const result = await exec(sandbox.executable, [
+            ...sandbox.args,
+            process.execPath,
+            '-e',
+            program,
+            JSON.stringify({ source, metadata, other, output }),
+        ]);
+        assert.deepEqual(JSON.parse(result.stdout), {
+            source: false,
+            metadata: false,
+            other: false,
+            output: true,
+        });
+        assert.equal(await readFile(join(source, 'file'), 'utf8'), 'original');
+        assert.equal(await readFile(join(output, 'file'), 'utf8'), 'changed');
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=review-sandbox.test.js.map

package/dist/native/review-sandbox.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.test.js","sourceRoot":"","sources":["../../src/native/review-sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEvF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,IAAI,CACF,0GAA0G,EAC1G,EAAE,IAAI,EAAE,CAAC,0BAA0B,EAAE,EAAE,EACvC,KAAK,IAAI,EAAE;IACT,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACjC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAC9B,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAC5B,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACtE,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,CAC5C,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,EAC9D,EAAE,CACH,CAAC;QACF,MAAM,OAAO,GAAG,2TAA2T,CAAC;QAC5U,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;YAC5C,GAAG,OAAO,CAAC,IAAI;YACf,OAAO,CAAC,QAAQ;YAChB,IAAI;YACJ,OAAO;YACP,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/native/service.d.ts

@@ -0,0 +1,7 @@
+import type { NativeSessionClient } from './client.js';
+export declare class NativeSessionMethodError extends Error {
+    readonly code: 'INVALID_PARAMS' | 'NATIVE_SESSION_ERROR';
+    constructor(code: 'INVALID_PARAMS' | 'NATIVE_SESSION_ERROR', message: string);
+}
+export declare function routeNativeSession(client: NativeSessionClient, principal: string, method: string, value: unknown): Promise<unknown>;
+//# sourceMappingURL=service.d.ts.map

package/dist/native/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/native/service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAKvD,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,sBAAsB;gBAA/C,IAAI,EAAE,gBAAgB,GAAG,sBAAsB,EACxD,OAAO,EAAE,MAAM;CAKlB;AASD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAyJlB"}

package/dist/native/service.js

@@ -0,0 +1,151 @@
+import { Methods, } from '@farmslot/protocol';
+import { NATIVE_PROFILE_METHODS, routeNativeProfile } from './profile-service.js';
+import { nativeWorkspaceChanges, nativeWorkspaceDiff, nativeWorkspaceList } from './workspace.js';
+import { readWorkspaceText } from './workspace-files.js';
+export class NativeSessionMethodError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'NativeSessionMethodError';
+    }
+}
+function string(params, key) {
+    const value = params[key];
+    if (typeof value !== 'string' || !value.trim())
+        throw new NativeSessionMethodError('INVALID_PARAMS', `${key} must be a nonempty string`);
+    return value;
+}
+export async function routeNativeSession(client, principal, method, value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Expected native session parameters');
+    const p = value;
+    if ('launch' in p)
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Worker launch settings are supplied by run dispatch');
+    if (p.executionNodeId !== undefined && p.executionNodeId !== client.executionNodeId)
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Native session targets another execution node');
+    try {
+        if (NATIVE_PROFILE_METHODS.includes(method))
+            return await routeNativeProfile(client, principal, method, p);
+        switch (method) {
+            case Methods.NATIVE_SESSION_WORKSPACE_LIST:
+            case Methods.NATIVE_SESSION_WORKSPACE_READ:
+            case Methods.NATIVE_SESSION_WORKSPACE_CHANGES:
+            case Methods.NATIVE_SESSION_WORKSPACE_DIFF: {
+                const sessionId = string(p, 'sessionId');
+                const inspect = async () => {
+                    const { session } = await client.read(principal, sessionId, undefined, 1);
+                    if (session.workerManaged) {
+                        const worker = p.worker;
+                        if (!worker || typeof worker !== 'object' || Array.isArray(worker))
+                            throw new Error('Worker workspace requires its pinned run context');
+                        const target = worker;
+                        if (session.workerLeaseId !== target.leaseId ||
+                            session.generation !== target.generation ||
+                            ['closed', 'failed', 'closing'].includes(session.state))
+                            throw new Error('Current workspace is unavailable for a closed or transferred worker');
+                    }
+                    else if (p.worker !== undefined)
+                        throw new Error('Worker workspace target is not a worker');
+                    return session;
+                };
+                const session = await inspect();
+                let result;
+                if (method === Methods.NATIVE_SESSION_WORKSPACE_CHANGES)
+                    result = await nativeWorkspaceChanges(session.cwd);
+                else {
+                    const path = string(p, 'path');
+                    if (method === Methods.NATIVE_SESSION_WORKSPACE_LIST)
+                        result = await nativeWorkspaceList(session.cwd, path);
+                    else if (method === Methods.NATIVE_SESSION_WORKSPACE_DIFF)
+                        result = { path, diff: await nativeWorkspaceDiff(session.cwd, path) };
+                    else
+                        result = { path, content: await readWorkspaceText(session.cwd, path) };
+                }
+                // File reads await the OS. Refuse their result if a handoff won during that await.
+                if (session.workerManaged)
+                    await inspect();
+                return result;
+            }
+            case Methods.NATIVE_SESSION_CREATE:
+            case Methods.NATIVE_SESSION_ENSURE: {
+                const params = {
+                    runner: string(p, 'runner'),
+                    cwd: string(p, 'cwd'),
+                };
+                if (p.model !== undefined)
+                    params.model = string(p, 'model');
+                if (p.profileId !== undefined)
+                    params.profileId = string(p, 'profileId');
+                if (p.accountContextId !== undefined)
+                    params.accountContextId = string(p, 'accountContextId');
+                if (p.mode !== undefined) {
+                    if (p.mode !== 'default' && p.mode !== 'plan')
+                        throw new NativeSessionMethodError('INVALID_PARAMS', 'Unknown native interaction mode');
+                    params.mode = p.mode;
+                }
+                if (method === Methods.NATIVE_SESSION_ENSURE) {
+                    if (p.resumeSessionId !== undefined)
+                        throw new NativeSessionMethodError('INVALID_PARAMS', 'Reserved sessionId is not for resume');
+                    return {
+                        session: await client.ensure(principal, {
+                            ...params,
+                            sessionId: string(p, 'sessionId'),
+                        }),
+                    };
+                }
+                if (p.resumeSessionId !== undefined)
+                    params.resumeSessionId = string(p, 'resumeSessionId');
+                return { session: await client.create(principal, params) };
+            }
+            case Methods.NATIVE_SESSION_LIST:
+                return { sessions: await client.list(principal) };
+            case Methods.NATIVE_SESSION_READ:
+                if (p.limit !== undefined && typeof p.limit !== 'number')
+                    throw new NativeSessionMethodError('INVALID_PARAMS', 'limit must be an integer');
+                if (p.after !== undefined && typeof p.after !== 'number')
+                    throw new NativeSessionMethodError('INVALID_PARAMS', 'after must be an integer');
+                return await client.read(principal, string(p, 'sessionId'), p.after, p.limit);
+            case Methods.NATIVE_SESSION_SEND: {
+                const commandId = string(p, 'commandId');
+                return await client.send(principal, string(p, 'sessionId'), commandId, string(p, 'text'));
+            }
+            case Methods.NATIVE_SESSION_RESPOND: {
+                const response = {};
+                if (p.decision !== undefined) {
+                    if (p.decision !== 'approve' && p.decision !== 'deny')
+                        throw new NativeSessionMethodError('INVALID_PARAMS', 'Unknown approval decision');
+                    response.decision = p.decision;
+                }
+                if (p.answers !== undefined) {
+                    if (!p.answers ||
+                        typeof p.answers !== 'object' ||
+                        Array.isArray(p.answers) ||
+                        !Object.values(p.answers).every((answers) => Array.isArray(answers) && answers.every((answer) => typeof answer === 'string')))
+                        throw new NativeSessionMethodError('INVALID_PARAMS', 'answers must map question IDs to string arrays');
+                    response.answers = p.answers;
+                }
+                if (Boolean(response.decision) === Boolean(response.answers))
+                    throw new NativeSessionMethodError('INVALID_PARAMS', 'Supply either a decision or answers');
+                await client.respond(principal, string(p, 'sessionId'), string(p, 'requestId'), response);
+                return { responded: true };
+            }
+            case Methods.NATIVE_SESSION_INTERRUPT:
+                await client.interrupt(principal, string(p, 'sessionId'));
+                return { interrupted: true };
+            case Methods.NATIVE_SESSION_CLOSE:
+                await client.close(principal, string(p, 'sessionId'));
+                return {
+                    closed: true,
+                    session: (await client.read(principal, string(p, 'sessionId'))).session,
+                };
+            default:
+                throw new Error('Unknown native session method');
+        }
+    }
+    catch (error) {
+        if (error instanceof NativeSessionMethodError)
+            throw error;
+        throw new NativeSessionMethodError('NATIVE_SESSION_ERROR', error.message);
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/native/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/native/service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,GAGR,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YACW,IAA+C,EACxD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAA2C;QAIxD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED,SAAS,MAAM,CAAC,MAA+B,EAAE,GAAW;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAC5C,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,GAAG,GAAG,4BAA4B,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA2B,EAC3B,SAAiB,EACjB,MAAc,EACd,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,QAAQ,IAAI,CAAC;QACf,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,qDAAqD,CACtD,CAAC;IACJ,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QACjF,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,+CAA+C,CAChD,CAAC;IACJ,IAAI,CAAC;QACH,IAAI,sBAAsB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACzC,OAAO,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,6BAA6B,CAAC;YAC3C,KAAK,OAAO,CAAC,6BAA6B,CAAC;YAC3C,KAAK,OAAO,CAAC,gCAAgC,CAAC;YAC9C,KAAK,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;oBACzB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;oBAC1E,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;wBAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;wBACxB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;4BAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;wBACtE,MAAM,MAAM,GAAG,MAAiC,CAAC;wBACjD,IACE,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO;4BACxC,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;4BACxC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;4BAEvD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;oBACN,CAAC;yBAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;wBAC/B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAC7D,OAAO,OAAO,CAAC;gBACjB,CAAC,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;gBAChC,IAAI,MAAe,CAAC;gBACpB,IAAI,MAAM,KAAK,OAAO,CAAC,gCAAgC;oBACrD,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;qBAChD,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBAC/B,IAAI,MAAM,KAAK,OAAO,CAAC,6BAA6B;wBAClD,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;yBACnD,IAAI,MAAM,KAAK,OAAO,CAAC,6BAA6B;wBACvD,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;;wBACnE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC9E,CAAC;gBACD,mFAAmF;gBACnF,IAAI,OAAO,CAAC,aAAa;oBAAE,MAAM,OAAO,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,KAAK,OAAO,CAAC,qBAAqB,CAAC;YACnC,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBACnC,MAAM,MAAM,GAA8B;oBACxC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC;oBAC3B,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC;iBACtB,CAAC;gBACF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC7D,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;oBAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBACzE,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS;oBAClC,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;wBAC3C,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;oBAC1F,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBACvB,CAAC;gBACD,IAAI,MAAM,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;oBAC7C,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;wBACjC,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,sCAAsC,CACvC,CAAC;oBACJ,OAAO;wBACL,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;4BACtC,GAAG,MAAM;4BACT,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC;yBAClC,CAAC;qBACH,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;oBAAE,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,CAAC;YACD,KAAK,OAAO,CAAC,mBAAmB;gBAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,KAAK,OAAO,CAAC,mBAAmB;gBAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;oBACtD,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;gBACnF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;oBACtD,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;gBACnF,OAAO,MAAM,MAAM,CAAC,IAAI,CACtB,SAAS,EACT,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,EACtB,CAAC,CAAC,KAA2B,EAC7B,CAAC,CAAC,KAA2B,CAC9B,CAAC;YACJ,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBACjC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBACzC,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5F,CAAC;YACD,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAA0B,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;wBACnD,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;oBACpF,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC5B,IACE,CAAC,CAAC,CAAC,OAAO;wBACV,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;wBAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;wBACxB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAC7B,CAAC,OAAO,EAAE,EAAE,CACV,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAClF;wBAED,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,gDAAgD,CACjD,CAAC;oBACJ,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,OAAmC,CAAC;gBAC3D,CAAC;gBACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC1D,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;gBACJ,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC1F,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC7B,CAAC;YACD,KAAK,OAAO,CAAC,wBAAwB;gBACnC,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC1D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC/B,KAAK,OAAO,CAAC,oBAAoB;gBAC/B,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;gBACtD,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO;iBACxE,CAAC;YACJ;gBACE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAAE,MAAM,KAAK,CAAC;QAC3D,MAAM,IAAI,wBAAwB,CAAC,sBAAsB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/native/storage.d.ts

@@ -0,0 +1,11 @@
+/** Drop only an incomplete final write before any recovery reader or writer proceeds. */
+export declare function readJournal(path: string): string[];
+export declare function privateDirectory(path: string): void;
+export declare function durableWrite(path: string, value: unknown): void;
+export declare function readJson<T>(path: string): T;
+export declare function alive(pid: number): boolean;
+export declare function signalGroup(pid: number, signal: NodeJS.Signals): void;
+/** Structured process argv evidence, never runner stdout or a terminal rendering. */
+export declare function matchesProcess(pid: number, identity: string): boolean;
+export declare function appendDurable(path: string, value: unknown): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/native/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/native/storage.ts"],"names":[],"mappings":"AAcA,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAalD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAKnD;AACD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAgB/D;AACD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAM3C;AACD,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ1C;AACD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAOrE;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAcrE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAQhE"}

package/dist/native/storage.js

@@ -0,0 +1,102 @@
+import { execFileSync } from 'node:child_process';
+import { closeSync, fsyncSync, ftruncateSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, writeFileSync, } from 'node:fs';
+import { dirname } from 'node:path';
+/** Drop only an incomplete final write before any recovery reader or writer proceeds. */
+export function readJournal(path) {
+    const fd = openSync(path, 'r+');
+    try {
+        const bytes = readFileSync(fd);
+        const end = bytes.lastIndexOf(10) + 1;
+        if (end < bytes.length) {
+            ftruncateSync(fd, end);
+            fsyncSync(fd);
+        }
+        return bytes.subarray(0, end).toString().split('\n').filter(Boolean);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function privateDirectory(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    const stat = lstatSync(path);
+    if (!stat.isDirectory() || stat.uid !== process.getuid?.() || (stat.mode & 0o077) !== 0)
+        throw new Error(`Native state directory must be owned by this OS user with mode 0700: ${path}`);
+}
+export function durableWrite(path, value) {
+    const temp = `${path}.${process.pid}.tmp`;
+    const fd = openSync(temp, 'w', 0o600);
+    try {
+        writeFileSync(fd, JSON.stringify(value));
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(temp, path);
+    const directory = openSync(dirname(path), 'r');
+    try {
+        fsyncSync(directory);
+    }
+    finally {
+        closeSync(directory);
+    }
+}
+export function readJson(path) {
+    const stat = lstatSync(path);
+    if (!stat.isFile() || stat.uid !== process.getuid?.() || (stat.mode & 0o077) !== 0)
+        throw new Error('Native state file must be private and owned by this OS user');
+    // Only trusted, private runtime files use this decoder. IPC validates its input separately.
+    return JSON.parse(readFileSync(path, 'utf8'));
+}
+export function alive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ESRCH')
+            return false;
+        throw error;
+    }
+}
+export function signalGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch (error) {
+        // A group that already exited is the requested stopped outcome.
+        if (error.code !== 'ESRCH')
+            throw error;
+    }
+}
+/** Structured process argv evidence, never runner stdout or a terminal rendering. */
+export function matchesProcess(pid, identity) {
+    if (!alive(pid))
+        return false;
+    try {
+        const argv = execFileSync('ps', ['-p', String(pid), '-o', 'command='], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 1_000,
+        });
+        return argv.split(/\s+/).includes(identity);
+    }
+    catch (error) {
+        // The process may exit between the liveness and argv reads. No signal is needed then.
+        if (!alive(pid))
+            return false;
+        throw error;
+    }
+}
+export function appendDurable(path, value) {
+    const fd = openSync(path, 'a', 0o600);
+    try {
+        writeFileSync(fd, `${JSON.stringify(value)}\n`);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/native/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/native/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,yFAAyF;AACzF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACvB,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACvB,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,wEAAwE,IAAI,EAAE,CAAC,CAAC;AACpG,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAc;IACvD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AACD,MAAM,UAAU,QAAQ,CAAI,IAAY;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,4FAA4F;IAC5F,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,MAAsB;IAC7D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gEAAgE;QAChE,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IACrE,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAgB;IAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE;YACrE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sFAAsF;QACtF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,aAAa,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/native/supervisor.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/native/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/native/supervisor.ts"],"names":[],"mappings":""}

package/dist/native/supervisor.js

@@ -0,0 +1,215 @@
+import { fork } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { existsSync, mkdirSync, readdirSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { socketDirectory } from './ipc.js';
+import { NativeProcessTree } from './process-tree.js';
+import { alive, appendDurable, durableWrite, matchesProcess, privateDirectory, readJournal, readJson, signalGroup, } from './storage.js';
+const root = process.argv[2];
+process.umask(0o077);
+privateDirectory(root);
+const lock = join(root, 'lock');
+// Serializes stale-lock reclamation as well as first start. A torn claim fails closed.
+const claim = join(root, 'claim');
+try {
+    mkdirSync(claim, { mode: 0o700 });
+}
+catch (error) {
+    if (error.code === 'EEXIST')
+        process.exit(0);
+    throw error;
+}
+let acquired = false;
+try {
+    let occupied = false;
+    if (existsSync(lock)) {
+        const previous = readJson(join(lock, 'owner.json'));
+        occupied = alive(previous.pid);
+        if (!occupied) {
+            const previousHost = existsSync(join(root, 'worker.json'))
+                ? readJson(join(root, 'worker.json'))
+                : undefined;
+            if (previousHost && alive(previousHost.pid))
+                throw new Error('Native host survived its supervisor; refusing competing ownership');
+            const cleanupPath = join(root, 'cleanup.json');
+            if (existsSync(cleanupPath) && readJson(cleanupPath).state !== 'complete')
+                throw new Error('Previous native cleanup is unresolved; verify owned processes before recovery');
+            rmSync(lock, { recursive: true });
+        }
+    }
+    if (!occupied) {
+        mkdirSync(lock, { mode: 0o700 });
+        durableWrite(join(lock, 'owner.json'), { pid: process.pid });
+        acquired = true;
+    }
+}
+finally {
+    rmSync(claim, { recursive: true });
+}
+if (!acquired)
+    process.exit(0);
+rmSync(join(root, 'ready.json'), { force: true });
+const socket = join(socketDirectory(root), 's');
+privateDirectory(socketDirectory(root));
+durableWrite(join(root, 'host.json'), {
+    supportsEnsure: true,
+    supportsWorkers: true,
+    supportsWorkerResumeFence: true,
+    supportsWorkerRelocation: true,
+    supportsProfiles: true,
+    executionNodeId: process.env.FARMSLOT_NATIVE_EXECUTION_NODE_ID ?? 'local',
+    pid: process.pid,
+    token: randomBytes(32).toString('hex'),
+    socket,
+});
+const extension = import.meta.url.endsWith('.ts') ? 'ts' : 'js';
+const child = fork(fileURLToPath(new URL(`./host.${extension}`, import.meta.url)), [root], {
+    stdio: ['ignore', 'inherit', 'inherit', 'ipc'],
+});
+let tree;
+let stopObservingTree;
+let hostReleased = false;
+let stopping = false;
+let settled = false;
+let failure;
+function stopHost(error) {
+    if (error !== undefined) {
+        failure = error instanceof Error ? error.message : String(error);
+        process.stderr.write(`Native supervisor stopping host: ${failure}\n`);
+    }
+    if (stopping)
+        return;
+    stopping = true;
+    stopObservingTree?.();
+    try {
+        rmSync(join(root, 'ready.json'), { force: true });
+    }
+    catch (error) {
+        // Stopping the child still takes precedence; cleanup retries the readiness removal.
+        failure = `${failure ?? 'Native stop'}; readiness removal: ${error.message}`;
+    }
+    if (child.pid)
+        child.kill(error === undefined ? 'SIGTERM' : 'SIGKILL');
+}
+// Register failure handlers before any post-fork filesystem or process probes.
+child.on('message', (message) => {
+    if (message !== 'ready' || stopping)
+        return;
+    try {
+        durableWrite(join(root, 'ready.json'), { pid: child.pid });
+    }
+    catch (error) {
+        stopHost(error);
+    }
+});
+child.on('error', (error) => {
+    if (stopping) {
+        // A failed stop keeps the owner alive and readiness withdrawn. Never release its lock.
+        durableWrite(join(root, 'cleanup.json'), {
+            hostPid: child.pid,
+            state: 'unknown',
+            error: error.message,
+        });
+        process.stderr.write(`Native host stop failed: ${error.message}\n`);
+    }
+    else
+        stopHost(error);
+});
+function settle() {
+    if (settled)
+        return;
+    settled = true;
+    void cleanup().then(() => process.exit(1), (error) => {
+        durableWrite(join(root, 'cleanup.json'), {
+            hostPid: child.pid,
+            state: 'unknown',
+            error: error.message,
+            observedProcesses: tree?.snapshot(),
+        });
+        process.stderr.write(`Native cleanup failed: ${error.message}\n`);
+        process.exit(1);
+    });
+}
+child.once('exit', settle);
+// Spawn failure may emit close without exit; no PID means no host was released.
+child.once('close', () => {
+    if (!child.pid)
+        settle();
+});
+for (const signal of ['SIGTERM', 'SIGINT'])
+    process.on(signal, () => stopHost());
+try {
+    durableWrite(join(root, 'worker.json'), { pid: child.pid });
+    durableWrite(join(root, 'cleanup.json'), { hostPid: child.pid, state: 'pending' });
+    if (!child.pid)
+        throw new Error('Native host did not obtain a process identity');
+    tree = new NativeProcessTree(child.pid);
+    stopObservingTree = tree.observe(stopHost);
+    child.send('start', (error) => {
+        if (error)
+            stopHost(error);
+    });
+    hostReleased = true;
+}
+catch (error) {
+    stopHost(error);
+}
+async function cleanup() {
+    stopObservingTree?.();
+    const errors = [];
+    const attempt = (operation) => {
+        try {
+            operation();
+        }
+        catch (error) {
+            errors.push(error);
+        }
+    };
+    attempt(() => rmSync(join(root, 'ready.json'), { force: true }));
+    if (tree)
+        attempt(() => tree.stop());
+    else if (hostReleased)
+        errors.push(new Error('Released native host has no process census'));
+    const sessions = join(root, 'sessions');
+    const records = [];
+    // A census failure must not skip the independently recorded runner groups.
+    if (existsSync(sessions))
+        for (const name of readdirSync(sessions).filter((name) => name.endsWith('.journal'))) {
+            attempt(() => {
+                const path = join(sessions, name);
+                for (const line of readJournal(path).reverse()) {
+                    const entry = JSON.parse(line);
+                    if (!entry.info)
+                        continue;
+                    const info = entry.info;
+                    if (info.hostPid === child.pid && info.processPid && !info.processStopped) {
+                        records.push({ path, info });
+                        if (info.processIdentity && matchesProcess(info.processPid, info.processIdentity))
+                            signalGroup(info.processPid, 'SIGKILL');
+                    }
+                    break;
+                }
+            });
+        }
+    const stopped = () => (!tree || tree.empty()) && records.every(({ info }) => !alive(-info.processPid));
+    const deadline = Date.now() + 5_000;
+    let confirmedStopped = stopped();
+    while (!confirmedStopped && Date.now() < deadline) {
+        await new Promise((resolve) => setTimeout(resolve, 25));
+        confirmedStopped = stopped();
+    }
+    if (!confirmedStopped)
+        errors.push(new Error('Native descendants remain alive; replacement owner is blocked'));
+    if (errors.length)
+        throw new AggregateError(errors, `Native cleanup is unconfirmed: ${errors.map((error) => (error instanceof Error ? error.message : String(error))).join('; ')}`);
+    for (const { path, info } of records)
+        appendDurable(path, { info: { ...info, processStopped: true } });
+    durableWrite(join(root, 'cleanup.json'), {
+        hostPid: child.pid,
+        state: 'complete',
+        ...(failure ? { error: failure } : {}),
+    });
+    rmSync(lock, { recursive: true });
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/native/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/native/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,KAAK,EACL,aAAa,EACb,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,QAAQ,EACR,WAAW,GACZ,MAAM,cAAc,CAAC;AAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;AAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrB,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,uFAAuF;AACvF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,IAAI,CAAC;IACH,SAAS,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACpC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,CAAC;AACd,CAAC;AACD,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,CAAC;IACH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,QAAQ,CAAkB,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrE,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACxD,CAAC,CAAC,QAAQ,CAAkB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACtD,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC/C,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAoB,WAAW,CAAC,CAAC,KAAK,KAAK,UAAU;gBAC1F,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;YACJ,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;AACH,CAAC;QAAS,CAAC;IACT,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACrC,CAAC;AACD,IAAI,CAAC,QAAQ;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AACxC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;IACpC,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI;IACrB,yBAAyB,EAAE,IAAI;IAC/B,wBAAwB,EAAE,IAAI;IAC9B,gBAAgB,EAAE,IAAI;IACtB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,OAAO;IACzE,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACtC,MAAM;CACP,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE;IACzF,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC/C,CAAC,CAAC;AACH,IAAI,IAAmC,CAAC;AACxC,IAAI,iBAA2C,CAAC;AAChD,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,OAA2B,CAAC;AAEhC,SAAS,QAAQ,CAAC,KAAe;IAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,iBAAiB,EAAE,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oFAAoF;QACpF,OAAO,GAAG,GAAG,OAAO,IAAI,aAAa,wBAAyB,KAAe,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACzE,CAAC;AAED,+EAA+E;AAC/E,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;IAC9B,IAAI,OAAO,KAAK,OAAO,IAAI,QAAQ;QAAE,OAAO;IAC5C,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;IAC1B,IAAI,QAAQ,EAAE,CAAC;QACb,uFAAuF;QACvF,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK,CAAC,OAAO;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACtE,CAAC;;QAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AACH,SAAS,MAAM;IACb,IAAI,OAAO;QAAE,OAAO;IACpB,OAAO,GAAG,IAAI,CAAC;IACf,KAAK,OAAO,EAAE,CAAC,IAAI,CACjB,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EACrB,CAAC,KAAY,EAAE,EAAE;QACf,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE;YACvC,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CACF,CAAC;AACJ,CAAC;AACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3B,gFAAgF;AAChF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;IACvB,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU;IAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAE1F,IAAI,CAAC;IACH,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5D,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACjF,IAAI,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,KAAK;YAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,iBAAiB,EAAE,EAAE,CAAC;IACtB,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,CAAC,SAAqB,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SACjC,IAAI,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,2EAA2E;IAC3E,IAAI,UAAU,CAAC,QAAQ,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,CAAC,GAAG,EAAE;gBACX,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAClC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAE5B,CAAC;oBACF,IAAI,CAAC,KAAK,CAAC,IAAI;wBAAE,SAAS;oBAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;wBAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC7B,IAAI,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC;4BAC/E,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBAC5C,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACpC,IAAI,gBAAgB,GAAG,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,gBAAgB,GAAG,OAAO,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,gBAAgB;QACnB,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM;QACf,MAAM,IAAI,cAAc,CACtB,MAAM,EACN,kCAAkC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/H,CAAC;IACJ,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO;QAClC,aAAa,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE;QACvC,OAAO,EAAE,KAAK,CAAC,GAAG;QAClB,KAAK,EAAE,UAAU;QACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpC,CAAC"}

package/dist/native/types.d.ts

@@ -0,0 +1,36 @@
+import type { NativeSessionCapabilities, NativeSessionEvent, NativeSessionResponse, SafetyTier } from '@farmslot/protocol';
+import type { NativeProcessSandbox } from './review-sandbox.js';
+import type { NativeWorkerFilesystemPolicy } from './worker-launch.js';
+export type NativeEventInput = Omit<NativeSessionEvent, 'sequence' | 'at' | 'sessionId' | 'generation'>;
+export interface NativeAdapterOptions {
+    cwd: string;
+    onSpawn?: (pid: number, identity: string) => void;
+    signal?: AbortSignal;
+    executable: string;
+    model?: string;
+    mode?: 'default' | 'plan';
+    resumeSessionId?: string;
+    env?: NodeJS.ProcessEnv;
+    effort?: string;
+    safetyTier?: SafetyTier;
+    filesystemPolicy?: NativeWorkerFilesystemPolicy;
+    processSandbox?: NativeProcessSandbox;
+}
+export interface NativeAdapterSession {
+    nativeSessionId: string;
+    capabilities?: NativeSessionCapabilities;
+    send(text: string, commandId: string): Promise<void>;
+    respond(requestId: string, response: NativeSessionResponse): Promise<void>;
+    interrupt(): Promise<void>;
+    close(): Promise<void>;
+}
+export interface NativeAdapter {
+    capabilities: NativeSessionCapabilities;
+    /** A missing capability is unsupported, never a request for advisory prompt restrictions. */
+    filesystemPolicyUnavailableReason?: (version: string) => string | undefined;
+    /** Compatibility policy based on the native executable's version metadata. */
+    workspaceResumeUnavailableReason?: (version: string) => string | undefined;
+    resumeUnavailableReason?: (version: string) => string | undefined;
+    start(options: NativeAdapterOptions, emit: (event: NativeEventInput) => void): Promise<NativeAdapterSession>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/native/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/native/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,EACX,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,kBAAkB,EAClB,UAAU,GAAG,IAAI,GAAG,WAAW,GAAG,YAAY,CAC/C,CAAC;AACF,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AACD,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AACD,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,yBAAyB,CAAC;IACxC,6FAA6F;IAC7F,iCAAiC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5E,8EAA8E;IAC9E,gCAAgC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC3E,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAClE,KAAK,CACH,OAAO,EAAE,oBAAoB,EAC7B,IAAI,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC"}

package/dist/native/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/native/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/native/types.ts"],"names":[],"mappings":""}