@farmslot/agent-runtime 0.8.1 → 0.10.0

package/dist/native/worker-history.d.ts

@@ -0,0 +1,16 @@
+import type { NativeCommandReceipt, NativeSessionEvent, NativeSessionInfo, NativeSessionReadResult } from '@farmslot/protocol';
+/** Rebuilt from durable journal ordering, including lease claims made by cancellation. */
+export declare class NativeWorkerHistory {
+    private windows;
+    private currentLease?;
+    private sequence;
+    private commands;
+    assertNewLease(leaseId: string): void;
+    observe(entry: {
+        info?: NativeSessionInfo;
+        event?: NativeSessionEvent;
+        commands?: NativeCommandReceipt[];
+    }): void;
+    read(leaseId: string, allEvents: NativeSessionEvent[], pending: NativeSessionEvent[], after?: number, limit?: number): NativeSessionReadResult;
+}
+//# sourceMappingURL=worker-history.d.ts.map

package/dist/native/worker-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-history.d.ts","sourceRoot":"","sources":["../../src/native/worker-history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAS5B,0FAA0F;AAC1F,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,QAAQ,CAA2C;IAE3D,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIrC,OAAO,CAAC,KAAK,EAAE;QACb,IAAI,CAAC,EAAE,iBAAiB,CAAC;QACzB,KAAK,CAAC,EAAE,kBAAkB,CAAC;QAC3B,QAAQ,CAAC,EAAE,oBAAoB,EAAE,CAAC;KACnC,GAAG,IAAI;IAuBR,IAAI,CACF,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,kBAAkB,EAAE,EAC/B,OAAO,EAAE,kBAAkB,EAAE,EAC7B,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,SAAM,GACV,uBAAuB;CAuC3B"}

package/dist/native/worker-history.js

@@ -0,0 +1,77 @@
+/** Rebuilt from durable journal ordering, including lease claims made by cancellation. */
+export class NativeWorkerHistory {
+    constructor() {
+        this.windows = new Map();
+        this.sequence = 0;
+        this.commands = new Map();
+    }
+    assertNewLease(leaseId) {
+        if (this.windows.has(leaseId))
+            throw new Error('Native worker task lease cannot be reused');
+    }
+    observe(entry) {
+        const lease = entry.info?.workerLeaseId;
+        if (entry.info && lease !== this.currentLease) {
+            const previous = this.currentLease && this.windows.get(this.currentLease);
+            if (previous) {
+                previous.endAt = this.sequence;
+                previous.commands = [...this.commands.values()].map((command) => ({ ...command }));
+            }
+            if (lease) {
+                if (this.windows.has(lease))
+                    throw new Error('Native worker task lease cannot be reused');
+                this.windows.set(lease, { startAfter: this.sequence, info: structuredClone(entry.info) });
+            }
+            this.currentLease = lease;
+        }
+        if (entry.info && lease)
+            this.windows.get(lease).info = structuredClone(entry.info);
+        for (const command of entry.commands ?? []) {
+            // Journal commands also carry private prompt text. Never retain it in public receipts.
+            const { generation, commandId, state, submitted, accepted, outcome } = command;
+            this.commands.set(commandId, { generation, commandId, state, submitted, accepted, outcome });
+        }
+        if (entry.event)
+            this.sequence = entry.event.sequence;
+    }
+    read(leaseId, allEvents, pending, after, limit = 200) {
+        const window = this.windows.get(leaseId);
+        if (!window)
+            throw new Error('Native worker history lease is unknown');
+        const endAt = window.endAt ?? this.sequence;
+        const cursor = after ?? window.startAfter;
+        if (!Number.isSafeInteger(cursor) || cursor < window.startAfter || cursor > endAt)
+            throw new Error('Invalid native worker history cursor');
+        if (!Number.isSafeInteger(limit) || limit < 1 || limit > 500)
+            throw new Error('Invalid native event limit');
+        const scopedEvents = allEvents.slice(window.startAfter, endAt);
+        const submitted = new Set(scopedEvents
+            .filter((event) => event.type === 'command.submitted')
+            .map((event) => event.commandId));
+        const events = [];
+        let bytes = 0;
+        for (const event of allEvents.slice(cursor, Math.min(cursor + limit, endAt))) {
+            const size = Buffer.byteLength(JSON.stringify(event));
+            if (events.length && bytes + size > 2 * 1024 * 1024)
+                break;
+            events.push(event);
+            bytes += size;
+        }
+        const released = window.endAt !== undefined;
+        return {
+            session: structuredClone(window.info),
+            events,
+            cursor: cursor + events.length,
+            hasMore: cursor + events.length < endAt,
+            commands: (window.commands ?? [...this.commands.values()])
+                .filter((command) => submitted.has(command.commandId))
+                .slice(-100)
+                .map((command) => ({ ...command })),
+            pendingRequests: released
+                ? []
+                : pending.filter((event) => event.sequence > window.startAfter),
+            scope: { leaseId, startAfter: window.startAfter, endAt, released },
+        };
+    }
+}
+//# sourceMappingURL=worker-history.js.map

package/dist/native/worker-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-history.js","sourceRoot":"","sources":["../../src/native/worker-history.ts"],"names":[],"mappings":"AAcA,0FAA0F;AAC1F,MAAM,OAAO,mBAAmB;IAAhC;QACU,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;QAE1C,aAAQ,GAAG,CAAC,CAAC;QACb,aAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IA8E7D,CAAC;IA5EC,cAAc,CAAC,OAAe;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,CAAC,KAIP;QACC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;QACxC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1E,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC/B,QAAQ,CAAC,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC1F,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC3C,uFAAuF;YACvF,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxD,CAAC;IAED,IAAI,CACF,OAAe,EACf,SAA+B,EAC/B,OAA6B,EAC7B,KAAc,EACd,KAAK,GAAG,GAAG;QAEX,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;QAC5C,MAAM,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,GAAG,KAAK;YAC/E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,YAAY;aACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC;aACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CACnC,CAAC;QACF,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM;YAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,MAAM;YACN,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM;YAC9B,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK;YACvC,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;iBACvD,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;iBACrD,KAAK,CAAC,CAAC,GAAG,CAAC;iBACX,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACrC,eAAe,EAAE,QAAQ;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;YACjE,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE;SACnE,CAAC;IACJ,CAAC;CACF"}

package/dist/native/worker-history.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker-history.test.d.ts.map

package/dist/native/worker-history.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-history.test.d.ts","sourceRoot":"","sources":["../../src/native/worker-history.test.ts"],"names":[],"mappings":""}

package/dist/native/worker-history.test.js

@@ -0,0 +1,195 @@
+import assert from 'node:assert/strict';
+import { randomUUID } from 'node:crypto';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { NativeSessionManager } from './manager.js';
+import { routeNativeSession } from './service.js';
+import { NativeWorkerHistory } from './worker-history.js';
+import { nativeWorkerLaunchDigest } from './worker-launch.js';
+const info = {
+    id: randomUUID(),
+    generation: 'generation',
+    hostPid: 123,
+    runner: 'codex',
+    nativeSessionId: 'conversation',
+    ownerPrincipalId: 'owner',
+    executionNodeId: 'local',
+    accountContextId: 'account',
+    cwd: '/tmp',
+    executable: '/bin/false',
+    version: '1',
+    mode: 'default',
+    accountMode: 'native',
+    workerManaged: true,
+    workerLeaseId: randomUUID(),
+    state: 'closed',
+    processStopped: true,
+    capabilities: {
+        modes: ['default'],
+        streaming: true,
+        tools: true,
+        approvals: true,
+        questions: true,
+        interrupt: true,
+        resume: true,
+    },
+};
+const receipt = (id) => ({
+    generation: 'generation',
+    commandId: id,
+    state: 'completed',
+    submitted: true,
+    accepted: true,
+});
+const event = (sequence, commandId) => ({
+    sessionId: info.id,
+    sequence,
+    generation: info.generation,
+    at: 'now',
+    type: 'command.submitted',
+    commandId,
+    text: commandId,
+});
+test('scoped task history preserves version-based recovery restrictions', () => {
+    for (const version of ['2.1.78 (Claude Code)', '2.1.269 (Claude Code)']) {
+        const root = mkdtempSync(join(tmpdir(), 'native-history-version-'));
+        try {
+            const saved = { ...info, runner: 'claude', version };
+            writeFileSync(join(root, `${info.id}.journal`), JSON.stringify({ info: saved, context: {} }) + '\n');
+            const manager = new NativeSessionManager(root);
+            const expected = manager.read('owner', info.id).session.capabilities;
+            const actual = manager.readWorker('owner', info.id, info.workerLeaseId).session.capabilities;
+            assert.deepEqual(actual, expected);
+            assert.equal(actual.resume, version.startsWith('2.1.269'));
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    }
+});
+test('lease windows freeze metadata and receipts, filter before last100, and keep absolute pagination', () => {
+    const history = new NativeWorkerHistory();
+    const first = info.workerLeaseId;
+    const next = randomUUID();
+    history.observe({ info: { ...info, state: 'idle' } });
+    const events = [event(1, 'original')];
+    history.observe({ event: events[0], commands: [{ ...receipt('original'), state: 'unknown' }] });
+    history.observe({ info: { ...info, workerLeaseId: next } });
+    // A resumed successor can update global receipts without rewriting the prior task snapshot.
+    history.observe({
+        info: { ...info, workerLeaseId: next, generation: 'resumed' },
+        commands: [receipt('original')],
+    });
+    for (let sequence = 2; sequence <= 105; sequence++) {
+        events.push(event(sequence, `next-${sequence}`));
+        history.observe({ event: events.at(-1), commands: [receipt(`next-${sequence}`)] });
+    }
+    const prior = history.read(first, events, [events[104]]);
+    assert.deepEqual(prior.scope, { leaseId: first, startAfter: 0, endAt: 1, released: true });
+    assert.equal(prior.session.state, 'idle', 'Task release is not process closure');
+    assert.equal(prior.session.generation, 'generation');
+    assert.deepEqual(prior.commands, [
+        { ...receipt('original'), state: 'unknown', outcome: undefined },
+    ]);
+    assert.deepEqual(prior.pendingRequests, []);
+    assert.deepEqual(prior.events, [events[0]]);
+    const page = history.read(next, events, [], undefined, 2);
+    assert.deepEqual(page.events.map((item) => item.sequence), [2, 3]);
+    assert.equal(page.cursor, 3);
+    assert.equal(page.hasMore, true);
+    assert.equal(page.commands.length, 100);
+    assert.equal(page.commands[0].commandId, 'next-6');
+    assert.equal(page.session.generation, 'resumed');
+    assert.throws(() => history.read(next, events, [], 0), /cursor/);
+    assert.throws(() => history.read(first, events, [], 2), /cursor/);
+    assert.throws(() => history.read('unknown', events, []), /unknown/);
+});
+test('both worker transfer and cancellation lease claim retain the same history across host reload', async () => {
+    for (const cancellation of [false, true]) {
+        const root = mkdtempSync(join(tmpdir(), 'native-history-'));
+        try {
+            const next = randomUUID();
+            const launch = {
+                leaseId: next,
+                safetyTier: 'full-auto',
+                environment: { set: {}, unset: [] },
+            };
+            writeFileSync(join(root, `${info.id}.journal`), JSON.stringify({
+                info,
+                context: { workerLaunchDigest: nativeWorkerLaunchDigest(launch) },
+                event: event(1, 'original'),
+                commands: [{ ...receipt('original'), text: 'private prompt' }],
+            }) + '\n');
+            const manager = new NativeSessionManager(root);
+            if (cancellation)
+                await manager.cancelWorker('owner', info.id, next, info.generation, info.workerLeaseId);
+            else
+                manager.transferWorker('owner', info.id, info.generation, info.workerLeaseId, launch);
+            const expected = manager.readWorker('owner', info.id, info.workerLeaseId);
+            assert.equal(expected.scope?.released, true);
+            assert.equal(expected.scope.endAt, 1);
+            assert.equal(expected.commands.length, 1);
+            assert.equal('text' in expected.commands[0], false);
+            const loaded = new NativeSessionManager(root);
+            assert.deepEqual(loaded.readWorker('owner', info.id, info.workerLeaseId), expected);
+            const successor = loaded.readWorker('owner', info.id, next);
+            assert.deepEqual(successor.scope, {
+                leaseId: next,
+                startAfter: 1,
+                endAt: 1,
+                released: false,
+            });
+            assert.deepEqual(successor.events, []);
+            assert.deepEqual(successor.commands, []);
+            assert.throws(() => loaded.readWorker('other-owner', info.id, info.workerLeaseId), /principal/);
+        }
+        finally {
+            rmSync(root, { recursive: true, force: true });
+        }
+    }
+});
+test('worker workspace reads require a pin and refuse results when the lease transfers during the read', async () => {
+    const root = mkdtempSync(join(tmpdir(), 'native-history-files-'));
+    try {
+        writeFileSync(join(root, 'file.txt'), 'task file');
+        let calls = 0;
+        let transfer = false;
+        const client = {
+            executionNodeId: 'local',
+            async read() {
+                calls++;
+                return {
+                    session: {
+                        ...info,
+                        cwd: root,
+                        state: 'idle',
+                        workerLeaseId: transfer && calls > 1 ? 'successor' : info.workerLeaseId,
+                    },
+                };
+            },
+        };
+        const params = { sessionId: info.id, path: 'file.txt' };
+        await assert.rejects(routeNativeSession(client, 'owner', 'native.session.workspace.read', params), /pinned/);
+        const pinned = {
+            ...params,
+            worker: {
+                runId: 'run',
+                contextId: 'context',
+                generation: info.generation,
+                leaseId: info.workerLeaseId,
+            },
+        };
+        calls = 0;
+        assert.deepEqual(await routeNativeSession(client, 'owner', 'native.session.workspace.read', pinned), { path: 'file.txt', content: 'task file' });
+        assert.equal(calls, 2);
+        calls = 0;
+        transfer = true;
+        await assert.rejects(routeNativeSession(client, 'owner', 'native.session.workspace.read', pinned), /transferred/);
+    }
+    finally {
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=worker-history.test.js.map

package/dist/native/worker-history.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-history.test.js","sourceRoot":"","sources":["../../src/native/worker-history.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAA2B,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,MAAM,IAAI,GAAsB;IAC9B,EAAE,EAAE,UAAU,EAAE;IAChB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,OAAO;IACf,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,OAAO;IACzB,eAAe,EAAE,OAAO;IACxB,gBAAgB,EAAE,SAAS;IAC3B,GAAG,EAAE,MAAM;IACX,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,UAAU,EAAE;IAC3B,KAAK,EAAE,QAAQ;IACf,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE;QACZ,KAAK,EAAE,CAAC,SAAS,CAAC;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;KACb;CACF,CAAC;AACF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAwB,EAAE,CAAC,CAAC;IACrD,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;CACf,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAsB,EAAE,CAAC,CAAC;IAC1E,SAAS,EAAE,IAAI,CAAC,EAAE;IAClB,QAAQ;IACR,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,mBAAmB;IACzB,SAAS;IACT,IAAI,EAAE,SAAS;CAChB,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,KAAK,MAAM,OAAO,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACrD,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CACpD,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YAC9F,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iGAAiG,EAAE,GAAG,EAAE;IAC3G,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAc,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,4FAA4F;IAC5F,OAAO,CAAC,OAAO,CAAC;QACd,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE;QAC7D,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAChC,CAAC,CAAC;IACH,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC/B,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;KACjE,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,CACd,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,KAAK,MAAM,YAAY,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAuB;gBACjC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aACpC,CAAC;YACF,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI;gBACJ,OAAO,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE;gBACjE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBAC3B,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aAC/D,CAAC,GAAG,IAAI,CACV,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,YAAY;gBACd,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;;gBACrF,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAc,EAAE,MAAM,CAAC,CAAC;YAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC;YAC3E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,EACpE,WAAW,CACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG;YACb,eAAe,EAAE,OAAO;YACxB,KAAK,CAAC,IAAI;gBACR,KAAK,EAAE,CAAC;gBACR,OAAO;oBACL,OAAO,EAAE;wBACP,GAAG,IAAI;wBACP,GAAG,EAAE,IAAI;wBACT,KAAK,EAAE,MAAM;wBACb,aAAa,EAAE,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa;qBACxE;iBACF,CAAC;YACJ,CAAC;SACgC,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACxD,MAAM,MAAM,CAAC,OAAO,CAClB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAC5E,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG;YACb,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,aAAa;aAC5B;SACF,CAAC;QACF,KAAK,GAAG,CAAC,CAAC;QACV,MAAM,CAAC,SAAS,CACd,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAClF,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAC3C,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvB,KAAK,GAAG,CAAC,CAAC;QACV,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,MAAM,CAAC,OAAO,CAClB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAC5E,aAAa,CACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/native/worker-launch.d.ts

@@ -0,0 +1,72 @@
+import type { NativeSessionCreateParams, NativeSessionInfo, SafetyTier } from '@farmslot/protocol';
+/** Private gateway/node/host contract. Public session RPCs never accept this environment. */
+export interface NativeWorkerLaunch {
+    leaseId: string;
+    executable?: string;
+    accountLabel?: string;
+    environment: {
+        set: Record<string, string>;
+        unset: string[];
+    };
+    effort?: string;
+    safetyTier: SafetyTier;
+    filesystemPolicy?: NativeWorkerFilesystemPolicy;
+}
+/** Source stays readable; tools may write only the separate task/output roots. */
+export interface NativeWorkerFilesystemPolicy {
+    readOnlyRoots: string[];
+    writableRoots: string[];
+}
+export declare function validateNativeWorkerFilesystemPolicy(value: unknown): NativeWorkerFilesystemPolicy;
+export declare const NATIVE_WORKER_STATE = "native.worker.state";
+export declare const NATIVE_WORKER_ENSURE = "native.worker.ensure";
+export declare const NATIVE_WORKER_RESUME = "native.worker.resume";
+export declare const NATIVE_WORKER_SEND = "native.worker.send";
+export declare const NATIVE_WORKER_RESPOND = "native.worker.respond";
+export declare const NATIVE_WORKER_CLOSE = "native.worker.close";
+export declare const NATIVE_WORKER_INTERRUPT = "native.worker.interrupt";
+export declare const NATIVE_WORKER_TRANSFER = "native.worker.transfer";
+export declare const NATIVE_WORKER_CANCEL = "native.worker.cancel";
+export declare const NATIVE_WORKER_READ = "native.worker.read";
+export declare const NATIVE_WORKER_METHODS: readonly string[];
+export interface NativeWorkerTarget {
+    sessionId: string;
+    executionNodeId?: string;
+    generation: string;
+    leaseId: string;
+}
+export interface NativeWorkerCancelTarget extends Omit<NativeWorkerTarget, 'generation'> {
+    generation?: string;
+    /** Cancelling a reserved successor may still find the source lease on the host. */
+    sourceLeaseId?: string;
+    /** Fence this durable recovery operation even if its launch has not reached the host. */
+    resumeCommandId?: string;
+}
+export type NativeWorkerCancelResult = {
+    sessionId: string;
+    leaseId: string;
+    generation?: string;
+} & ({
+    cancelled: true;
+    session?: NativeSessionInfo;
+} | {
+    cancelled: false;
+    reason: 'generation-changed';
+    generation: string;
+    session?: undefined;
+});
+export interface NativeWorkerResumeParams extends NativeSessionCreateParams {
+    sessionId: string;
+    resumeSessionId: string;
+    generation: string;
+    commandId: string;
+    /** Explicit same-host parking relocation, fenced by the old generation and saved launch digest. */
+    relocation?: {
+        fromCwd: string;
+    };
+}
+export declare function decodeNativeWorkerLaunch(value: unknown): NativeWorkerLaunch;
+/** Journals compare launch settings without retaining project environment values. */
+export declare function nativeWorkerLaunchDigest(launch: NativeWorkerLaunch): string;
+export declare function nativeWorkerEnvironment(launch: NativeWorkerLaunch): NodeJS.ProcessEnv;
+//# sourceMappingURL=worker-launch.d.ts.map

package/dist/native/worker-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.d.ts","sourceRoot":"","sources":["../../src/native/worker-launch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnG,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;CACjD;AAED,kFAAkF;AAClF,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,CAyBjG;AAED,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AACjE,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAWlD,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,CACA;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAChD;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE,CAC9F,CAAC;AAEF,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAQD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAwD3E;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAgB3E;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAiBrF"}

package/dist/native/worker-launch.js

@@ -0,0 +1,134 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { delimiter, isAbsolute, join, relative, sep } from 'node:path';
+export function validateNativeWorkerFilesystemPolicy(value) {
+    const policy = object(value);
+    if (Object.keys(policy).some((key) => !['readOnlyRoots', 'writableRoots'].includes(key)))
+        throw new Error('Unsupported native worker filesystem policy field');
+    for (const name of ['readOnlyRoots', 'writableRoots']) {
+        const roots = policy[name];
+        if (!Array.isArray(roots) ||
+            !roots.length ||
+            roots.some((root) => typeof root !== 'string' || !isAbsolute(root) || root.includes('\0')))
+            throw new Error('Native worker filesystem roots must be nonempty absolute paths');
+    }
+    const result = policy;
+    const within = (root, file) => {
+        const child = relative(root, file);
+        return child === '' || (child !== '..' && !child.startsWith(`..${sep}`) && !isAbsolute(child));
+    };
+    if (result.readOnlyRoots.some((source) => result.writableRoots.some((output) => within(source, output) || within(output, source))))
+        throw new Error('Native worker source and writable roots must not overlap');
+    return result;
+}
+export const NATIVE_WORKER_STATE = 'native.worker.state';
+export const NATIVE_WORKER_ENSURE = 'native.worker.ensure';
+export const NATIVE_WORKER_RESUME = 'native.worker.resume';
+export const NATIVE_WORKER_SEND = 'native.worker.send';
+export const NATIVE_WORKER_RESPOND = 'native.worker.respond';
+export const NATIVE_WORKER_CLOSE = 'native.worker.close';
+export const NATIVE_WORKER_INTERRUPT = 'native.worker.interrupt';
+export const NATIVE_WORKER_TRANSFER = 'native.worker.transfer';
+export const NATIVE_WORKER_CANCEL = 'native.worker.cancel';
+export const NATIVE_WORKER_READ = 'native.worker.read';
+export const NATIVE_WORKER_METHODS = [
+    NATIVE_WORKER_READ,
+    NATIVE_WORKER_STATE,
+    NATIVE_WORKER_ENSURE,
+    NATIVE_WORKER_RESUME,
+    NATIVE_WORKER_SEND,
+    NATIVE_WORKER_RESPOND,
+    NATIVE_WORKER_CLOSE,
+    NATIVE_WORKER_INTERRUPT,
+    NATIVE_WORKER_TRANSFER,
+    NATIVE_WORKER_CANCEL,
+];
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid native worker launch object');
+    return value;
+}
+export function decodeNativeWorkerLaunch(value) {
+    const launch = object(value);
+    if (Object.keys(launch).some((key) => ![
+        'leaseId',
+        'executable',
+        'accountLabel',
+        'environment',
+        'effort',
+        'safetyTier',
+        'filesystemPolicy',
+    ].includes(key)))
+        throw new Error('Unsupported native worker launch field');
+    if (!['sandboxed', 'full-auto', 'dangerous'].includes(String(launch.safetyTier)))
+        throw new Error('Invalid native worker safety tier');
+    if (typeof launch.leaseId !== 'string' ||
+        !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(launch.leaseId))
+        throw new Error('Native worker leaseId must be a lowercase UUID');
+    for (const key of ['executable', 'accountLabel', 'effort'])
+        if (launch[key] !== undefined && (typeof launch[key] !== 'string' || !launch[key].trim()))
+            throw new Error(`Invalid native worker ${key}`);
+    if (typeof launch.effort === 'string' && !/^[a-z][a-z0-9_-]*$/.test(launch.effort))
+        throw new Error('Invalid native worker effort');
+    const environment = object(launch.environment);
+    if (Object.keys(environment).some((key) => !['set', 'unset'].includes(key)))
+        throw new Error('Unsupported native worker environment field');
+    const set = object(environment.set);
+    const unset = environment.unset;
+    const validName = (name) => typeof name === 'string' && /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
+    if (!Array.isArray(unset) ||
+        !unset.every(validName) ||
+        !Object.keys(set).every(validName) ||
+        !Object.values(set).every((item) => typeof item === 'string' && !item.includes('\0')))
+        throw new Error('Invalid native worker environment mutation');
+    return {
+        leaseId: launch.leaseId,
+        ...(typeof launch.executable === 'string' ? { executable: launch.executable } : {}),
+        ...(typeof launch.accountLabel === 'string' ? { accountLabel: launch.accountLabel } : {}),
+        ...(typeof launch.effort === 'string' ? { effort: launch.effort } : {}),
+        safetyTier: launch.safetyTier,
+        ...(launch.filesystemPolicy === undefined
+            ? {}
+            : {
+                filesystemPolicy: validateNativeWorkerFilesystemPolicy(launch.filesystemPolicy),
+            }),
+        environment: { set: set, unset },
+    };
+}
+/** Journals compare launch settings without retaining project environment values. */
+export function nativeWorkerLaunchDigest(launch) {
+    return createHash('sha256')
+        .update(JSON.stringify({
+        executable: launch.executable,
+        accountLabel: launch.accountLabel,
+        safetyTier: launch.safetyTier,
+        effort: launch.effort,
+        ...(launch.filesystemPolicy ? { filesystemPolicy: launch.filesystemPolicy } : {}),
+        environment: {
+            set: Object.entries(launch.environment.set).sort(([a], [b]) => a.localeCompare(b)),
+            unset: [...new Set(launch.environment.unset)].sort(),
+        },
+    }))
+        .digest('hex');
+}
+export function nativeWorkerEnvironment(launch) {
+    const unset = new Set(launch.environment.unset);
+    // Object.fromEntries treats names as data, including names matching Object.prototype keys.
+    const env = Object.fromEntries([
+        ...Object.entries(process.env).filter(([key]) => !unset.has(key)),
+        ...Object.entries(launch.environment.set),
+    ]);
+    env.DISABLE_OMC = '1';
+    env.DISABLE_OMX = '1';
+    const shims = join(env.ASDF_DATA_DIR ?? join(env.HOME ?? homedir(), '.asdf'), 'shims');
+    if (existsSync(shims))
+        env.PATH = `${shims}${delimiter}${env.PATH ?? ''}`;
+    delete env.CLAUDECODE;
+    // Workers do not need control-plane credentials, including configured overrides.
+    delete env.FARMSLOT_NODE_TOKEN;
+    delete env.FARMSLOT_GATEWAY_TOKEN;
+    delete env.FARMSLOT_GATEWAY_PASSWORD;
+    return env;
+}
+//# sourceMappingURL=worker-launch.js.map

package/dist/native/worker-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.js","sourceRoot":"","sources":["../../src/native/worker-launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAqBvE,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,CAAC,KAAK,CAAC,MAAM;YACb,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE1F,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,MAAiD,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,IACE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACnC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxF;QAED,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACrB,CAAC;AAiCF,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,CAAC;QACC,SAAS;QACT,YAAY;QACZ,cAAc;QACd,aAAa;QACb,QAAQ;QACR,YAAY;QACZ,kBAAkB;KACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAClB;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAErE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAU;QACjE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE,CAClD,OAAO,IAAI,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACvB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,UAAU,EAAE,MAAM,CAAC,UAAwB;QAC3C,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,gBAAgB,EAAE,oCAAoC,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAChF,CAAC;QACN,WAAW,EAAE,EAAE,GAAG,EAAE,GAA6B,EAAE,KAAK,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,WAAW,EAAE;YACX,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAClF,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;SACrD;KACF,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,2FAA2F;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC;KAC1C,CAAC,CAAC;IACH,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;IACtB,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1E,OAAO,GAAG,CAAC,UAAU,CAAC;IACtB,iFAAiF;IACjF,OAAO,GAAG,CAAC,mBAAmB,CAAC;IAC/B,OAAO,GAAG,CAAC,sBAAsB,CAAC;IAClC,OAAO,GAAG,CAAC,yBAAyB,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/native/worker-launch.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker-launch.test.d.ts.map

package/dist/native/worker-launch.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.test.d.ts","sourceRoot":"","sources":["../../src/native/worker-launch.test.ts"],"names":[],"mappings":""}

package/dist/native/worker-launch.test.js

@@ -0,0 +1,61 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { nativeWorkerEnvironment } from './worker-launch.js';
+test('worker environments remove inherited and configured control-plane credentials', () => {
+    const originalEnvironment = process.env;
+    const credentials = {
+        FARMSLOT_NODE_TOKEN: 'synthetic-node-token',
+        FARMSLOT_GATEWAY_TOKEN: 'synthetic-gateway-token',
+        FARMSLOT_GATEWAY_PASSWORD: 'synthetic-gateway-password',
+    };
+    try {
+        // Replace the environment rather than reading any real credential values.
+        process.env = { ...credentials, CODEX_LB_API_KEY: 'synthetic-runner-key' };
+        for (const set of [{}, credentials]) {
+            const env = nativeWorkerEnvironment({
+                leaseId: 'fixture-lease',
+                safetyTier: 'sandboxed',
+                environment: { set, unset: [] },
+            });
+            for (const name of Object.keys(credentials))
+                assert.equal(Object.hasOwn(env, name), false);
+            assert.equal(env.CODEX_LB_API_KEY, 'synthetic-runner-key');
+            assert.equal(env.DISABLE_OMC, '1');
+            assert.equal(env.DISABLE_OMX, '1');
+        }
+        assert.deepEqual(credentials, {
+            FARMSLOT_NODE_TOKEN: 'synthetic-node-token',
+            FARMSLOT_GATEWAY_TOKEN: 'synthetic-gateway-token',
+            FARMSLOT_GATEWAY_PASSWORD: 'synthetic-gateway-password',
+        });
+    }
+    finally {
+        process.env = originalEnvironment;
+    }
+});
+test('filesystem launch contract rejects overlapping source grants and binds grants into its digest', async () => {
+    const { decodeNativeWorkerLaunch, nativeWorkerLaunchDigest, validateNativeWorkerFilesystemPolicy, } = await import('./worker-launch.js');
+    const launch = {
+        leaseId: '10000000-0000-4000-8000-000000000001',
+        safetyTier: 'sandboxed',
+        environment: { set: {}, unset: [] },
+        filesystemPolicy: { readOnlyRoots: ['/repo'], writableRoots: ['/task', '/output'] },
+    };
+    const decoded = decodeNativeWorkerLaunch(launch);
+    assert.deepEqual(decoded.filesystemPolicy, launch.filesystemPolicy);
+    assert.notEqual(nativeWorkerLaunchDigest(decoded), nativeWorkerLaunchDigest({ ...decoded, filesystemPolicy: undefined }));
+    assert.notEqual(nativeWorkerLaunchDigest(decoded), nativeWorkerLaunchDigest({
+        ...decoded,
+        filesystemPolicy: { ...launch.filesystemPolicy, writableRoots: ['/other'] },
+    }));
+    for (const writableRoots of [['/'], ['/repo'], ['/repo/output'], ['/repo/../repo']]) {
+        assert.throws(() => validateNativeWorkerFilesystemPolicy({ ...launch.filesystemPolicy, writableRoots }), /overlap/);
+    }
+    for (const invalid of [
+        {},
+        { ...launch.filesystemPolicy, writableRoots: ['relative'] },
+        { ...launch.filesystemPolicy, writableRoots: [] },
+    ])
+        assert.throws(() => validateNativeWorkerFilesystemPolicy(invalid), /absolute paths/);
+});
+//# sourceMappingURL=worker-launch.test.js.map

package/dist/native/worker-launch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.test.js","sourceRoot":"","sources":["../../src/native/worker-launch.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,WAAW,GAAG;QAClB,mBAAmB,EAAE,sBAAsB;QAC3C,sBAAsB,EAAE,yBAAyB;QACjD,yBAAyB,EAAE,4BAA4B;KACxD,CAAC;IACF,IAAI,CAAC;QACH,0EAA0E;QAC1E,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,uBAAuB,CAAC;gBAClC,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;aAChC,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YAC5B,mBAAmB,EAAE,sBAAsB;YAC3C,sBAAsB,EAAE,yBAAyB;YACjD,yBAAyB,EAAE,4BAA4B;SACxD,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,EACJ,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,GACrC,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,sCAAsC;QAC/C,UAAU,EAAE,WAAW;QACvB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,gBAAgB,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;KACpF,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpE,MAAM,CAAC,QAAQ,CACb,wBAAwB,CAAC,OAAO,CAAC,EACjC,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,QAAQ,CACb,wBAAwB,CAAC,OAAO,CAAC,EACjC,wBAAwB,CAAC;QACvB,GAAG,OAAO;QACV,gBAAgB,EAAE,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE;KAC5E,CAAC,CACH,CAAC;IACF,KAAK,MAAM,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,oCAAoC,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,EACzF,SAAS,CACV,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI;QACpB,EAAE;QACF,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE;QAC3D,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,EAAE;KAClD;QACC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC"}

package/dist/native/worker-relocation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker-relocation.test.d.ts.map

package/dist/native/worker-relocation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-relocation.test.d.ts","sourceRoot":"","sources":["../../src/native/worker-relocation.test.ts"],"names":[],"mappings":""}