@farmslot/agent-runtime 0.9.0 → 0.10.0

package/dist/native/process.js

@@ -29,7 +29,17 @@ export class JsonLineProcess {
         this.closing = false;
         this.pending = new Map();
         const identity = `farmslot-native-${randomUUID()}`;
-        this.child = spawn(process.execPath, ['-e', registeredLaunch, '--', identity, executable, ...args], {
+        this.child = spawn(process.execPath, [
+            '-e',
+            registeredLaunch,
+            '--',
+            identity,
+            ...(options.processSandbox
+                ? [options.processSandbox.executable, ...options.processSandbox.args]
+                : []),
+            executable,
+            ...args,
+        ], {
             cwd: options.cwd,
             env: options.env,
             stdio: 'pipe',
@@ -96,19 +106,20 @@ export class JsonLineProcess {
         try {
             if (this.child.pid) {
                 this.tree = new NativeProcessTree(this.child.pid);
-                this.treeTimer = setInterval(() => {
-                    try {
-                        this.tree.capture();
-                    }
-                    catch (error) {
-                        // Loss of process ownership evidence fails this session and its cleanup claim.
-                        this.beginCleanup(new Error('Native process census failed', { cause: error }));
-                    }
-                }, 100);
-                this.treeTimer.unref();
+                this.stopObservingTree = this.tree.observe((error) => {
+                    // Loss of process ownership evidence fails this session and its cleanup claim.
+                    this.beginCleanup(new Error('Native process census failed', { cause: error }));
+                });
                 options.onSpawn?.(this.child.pid, identity);
             }
             this.child.stdin.write('\n');
+            if (options.signal) {
+                const abort = () => this.beginStop();
+                options.signal.addEventListener('abort', abort, { once: true });
+                this.stopObservingAbort = () => options.signal.removeEventListener('abort', abort);
+                if (options.signal.aborted)
+                    abort();
+            }
         }
         catch (error) {
             this.fail(error instanceof Error ? error : new Error(String(error)));
@@ -177,7 +188,7 @@ export class JsonLineProcess {
         this.cleanupStarted = true;
         this.cleanupError = error;
         this.fail(error);
-        clearInterval(this.treeTimer);
+        this.stopObservingTree?.();
         clearTimeout(this.stopTimer);
         void this.cleanGroup().then(() => this.settle(), (cleanupError) => {
             this.cleanupError = new Error(`Native child cleanup failed: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`, { cause: cleanupError });
@@ -185,6 +196,7 @@ export class JsonLineProcess {
         });
     }
     settle() {
+        this.stopObservingAbort?.();
         // Detach host pipe handles even when cleanup failed and a descendant retained them.
         this.child.stdin.destroy();
         this.child.stdout.destroy();
@@ -210,13 +222,24 @@ export class JsonLineProcess {
             this.child.kill('SIGKILL');
             throw new Error('Native process ownership could not be established');
         }
-        this.tree.stop();
+        let stopError;
+        try {
+            this.tree.stop();
+        }
+        catch (error) {
+            // A group can disappear while shutdown snapshots are being taken. Accept
+            // cleanup only after fresh OS evidence proves every tracked process and
+            // the original group are absent; otherwise retain the stop failure.
+            stopError = error;
+        }
         const deadline = Date.now() + 3_000;
         while (Date.now() < deadline) {
             if (this.tree.empty() && (this.child.exitCode !== null || this.child.signalCode !== null))
                 return;
             await new Promise((resolve) => setTimeout(resolve, 20));
         }
+        if (stopError)
+            throw stopError;
         throw new Error('Native child processes did not stop');
     }
 }

package/dist/native/process.js.map

@@ -1 +1 @@
-{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/native/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,uFAAuF;AACvF,yEAAyE;AACzE,MAAM,gBAAgB,GAAG;;;;;;;;;;;CAWxB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,OAAO,eAAe;IAoB1B,YACE,UAAkB,EAClB,IAAc,EACd,OAIC,EACD,SAAqD,EACpC,MAAmE;QAAnE,WAAM,GAAN,MAAM,CAA6D;QA3B9E,WAAM,GAAG,CAAC,CAAC;QAGX,WAAM,GAAG,KAAK,CAAC;QAEf,aAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEK,mBAAc,GAAG,KAAK,CAAC;QAEvB,YAAO,GAAG,KAAK,CAAC;QAEhB,YAAO,GAAG,IAAI,GAAG,EAGtB,CAAC;QAaF,MAAM,QAAQ,GAAG,mBAAmB,UAAU,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,KAAK,CAChB,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAC7D;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,OAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACzF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,OAAkC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC;gBAC9C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;oBACvE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,wEAAwE;oBACxE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,OAAO;gBACV,8EAA8E;gBAC9E,CAAC,IAAI,CAAC,OAAO;oBACb,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC;oBAC1E,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC,CACzE,CAAC;YACF,qFAAqF;YACrF,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;oBAChC,IAAI,CAAC;wBACH,IAAI,CAAC,IAAK,CAAC,OAAO,EAAE,CAAC;oBACvB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,+EAA+E;wBAC/E,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC,EAAE,GAAG,CAAC,CAAC;gBACR,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAwB;QACnC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAgB;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,MAAe;QACrC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,yBAAyB,CAAC,CAAC,CAAC;YAClF,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,KAAK;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACpD,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,YAAY,CAAC,KAAa;QAChC,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,CAAC,YAAqB,EAAE,EAAE;YACxB,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAC3B,gCAAgC,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAC7G,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,MAAM;QACZ,oFAAoF;QACpF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iFAAiF;YACjF,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAAC,iDAAiD,EAAE;gBAC/E,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;gBACvF,OAAO;YACT,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/native/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGtD,uFAAuF;AACvF,yEAAyE;AACzE,MAAM,gBAAgB,GAAG;;;;;;;;;;;CAWxB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,OAAO,eAAe;IAqB1B,YACE,UAAkB,EAClB,IAAc,EACd,OAMC,EACD,SAAqD,EACpC,MAAmE;QAAnE,WAAM,GAAN,MAAM,CAA6D;QA9B9E,WAAM,GAAG,CAAC,CAAC;QAIX,WAAM,GAAG,KAAK,CAAC;QAEf,aAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QAEK,mBAAc,GAAG,KAAK,CAAC;QAEvB,YAAO,GAAG,KAAK,CAAC;QAEhB,YAAO,GAAG,IAAI,GAAG,EAGtB,CAAC;QAeF,MAAM,QAAQ,GAAG,mBAAmB,UAAU,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,KAAK,CAChB,OAAO,CAAC,QAAQ,EAChB;YACE,IAAI;YACJ,gBAAgB;YAChB,IAAI;YACJ,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,cAAc;gBACxB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC;gBACrE,CAAC,CAAC,EAAE,CAAC;YACP,UAAU;YACV,GAAG,IAAI;SACR,EACD;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,IAAI;SACf,CACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,IAAI,OAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACzF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,GAAG,OAAkC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC7E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAE,CAAC;gBAC9C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;oBACvE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,SAAS,CAAC,OAAO,CAAC,CAAC;gBACrB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,wEAAwE;oBACxE,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CACP,IAAI,CAAC,OAAO;gBACV,8EAA8E;gBAC9E,CAAC,IAAI,CAAC,OAAO;oBACb,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC;oBAC1E,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC,CACzE,CAAC;YACF,qFAAqF;YACrF,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACnD,+EAA+E;oBAC/E,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,KAAK,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAwB;QACnC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAgB;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,MAAe;QACrC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,yBAAyB,CAAC,CAAC,CAAC;YAClF,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAGD,KAAK;QACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACpD,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,YAAY,CAAC,KAAa;QAChC,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC3B,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,CAAC,YAAqB,EAAE,EAAE;YACxB,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAC3B,gCAAgC,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAC7G,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;YACF,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC5B,oFAAoF;QACpF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iFAAiF;YACjF,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAAC,iDAAiD,EAAE;gBAC/E,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,0EAA0E;YAC1E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,SAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,wEAAwE;YACxE,oEAAoE;YACpE,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;gBACvF,OAAO;YACT,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/native/process.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=process.test.d.ts.map

package/dist/native/process.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.test.d.ts","sourceRoot":"","sources":["../../src/native/process.test.ts"],"names":[],"mappings":""}

package/dist/native/process.test.js

@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { JsonLineProcess } from './process.js';
+import { NativeProcessTree } from './process-tree.js';
+test('aborting startup rejects pending protocol work and confirms process cleanup', async () => {
+    const abort = new AbortController();
+    let stopped = false;
+    const child = new JsonLineProcess(process.execPath, ['-e', 'setInterval(()=>{},1000)'], { cwd: process.cwd(), signal: abort.signal }, () => { }, (_error, confirmed) => {
+        stopped = confirmed;
+    });
+    const pending = assert.rejects(child.request('initialize', {}), /closed/);
+    abort.abort();
+    await pending;
+    await child.close();
+    assert.equal(stopped, true);
+});
+test('a shutdown race is resolved only by fresh process absence after the child exits', async (t) => {
+    let ready;
+    const started = new Promise((resolve) => {
+        ready = resolve;
+    });
+    let exited;
+    const original = NativeProcessTree.prototype.stop;
+    t.mock.method(NativeProcessTree.prototype, 'stop', function () {
+        original.call(this);
+        throw new Error('Shutdown observation raced process exit');
+    });
+    const child = new JsonLineProcess(process.execPath, ['-e', 'process.stdout.write(JSON.stringify({ready:true})+"\\n");setInterval(()=>{},1000);'], { cwd: process.cwd() }, () => ready(), (error, stopped) => {
+        exited = { error, stopped };
+    });
+    await started;
+    await child.close();
+    assert.equal(exited?.stopped, true);
+    assert.equal(exited?.error, undefined);
+});
+test('a stop error cannot become successful cleanup while process absence remains unverified', async (t) => {
+    let ready;
+    const started = new Promise((resolve) => {
+        ready = resolve;
+    });
+    let stopped;
+    const original = NativeProcessTree.prototype.stop;
+    t.mock.method(NativeProcessTree.prototype, 'stop', function () {
+        original.call(this);
+        throw new Error('Owned process cleanup unconfirmed');
+    });
+    // The actual child is stopped, but this negative withholds the OS absence proof.
+    t.mock.method(NativeProcessTree.prototype, 'empty', () => false);
+    const child = new JsonLineProcess(process.execPath, ['-e', 'process.stdout.write(JSON.stringify({ready:true})+"\\n");setInterval(()=>{},1000);'], { cwd: process.cwd() }, () => ready(), (_error, confirmed) => {
+        stopped = confirmed;
+    });
+    await started;
+    await assert.rejects(child.close(), /Owned process cleanup unconfirmed/);
+    assert.equal(stopped, false);
+});
+//# sourceMappingURL=process.test.js.map

package/dist/native/process.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.test.js","sourceRoot":"","sources":["../../src/native/process.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAClC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5C,GAAG,EAAE,GAAE,CAAC,EACR,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE;QACpB,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1E,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,OAAO,CAAC;IACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAClG,IAAI,KAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,MAAuD,CAAC;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE;QACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,oFAAoF,CAAC,EAC5F,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,EACb,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACjB,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC,CACF,CAAC;IACF,MAAM,OAAO,CAAC;IACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACzG,IAAI,KAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,GAAG,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,IAAI,OAA4B,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE;QACjD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,iFAAiF;IACjF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,eAAe,CAC/B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,oFAAoF,CAAC,EAC5F,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EACtB,GAAG,EAAE,CAAC,KAAK,EAAE,EACb,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE;QACpB,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CACF,CAAC;IACF,MAAM,OAAO,CAAC;IACd,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,mCAAmC,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC"}

package/dist/native/profile-service.d.ts

@@ -0,0 +1,5 @@
+import type { NativeSessionClient } from './client.js';
+export declare const NATIVE_PROFILE_METHODS: readonly string[];
+/** Called only after execution-node ownership is authorized, using that node's environment. */
+export declare function routeNativeProfile(client: NativeSessionClient, owner: string, method: string, params: Record<string, unknown>): Promise<unknown>;
+//# sourceMappingURL=profile-service.d.ts.map

package/dist/native/profile-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.d.ts","sourceRoot":"","sources":["../../src/native/profile-service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvD,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAKnD,CAAC;AAgBF,+FAA+F;AAC/F,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,OAAO,CAAC,CA6DlB"}

package/dist/native/profile-service.js

@@ -0,0 +1,76 @@
+import { Methods, } from '@farmslot/protocol';
+import { addNativeProfile, inspectNativeProfile, listNativeProfiles, nativeProfileEnvironment, removeNativeProfile, } from './account-profiles.js';
+import { nativeRunnerDefinitions } from './registry.js';
+export const NATIVE_PROFILE_METHODS = [
+    Methods.NATIVE_PROFILE_LIST,
+    Methods.NATIVE_PROFILE_ADD,
+    Methods.NATIVE_PROFILE_STATUS,
+    Methods.NATIVE_PROFILE_REMOVE,
+];
+function string(params, name) {
+    if (typeof params[name] !== 'string' || !params[name].trim())
+        throw new Error(`${name} must be a nonempty string`);
+    return params[name];
+}
+function quote(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+function sessionStopped(session) {
+    return (['closed', 'failed'].includes(session.state) &&
+        (!session.processPid || session.processStopped === true));
+}
+/** Called only after execution-node ownership is authorized, using that node's environment. */
+export async function routeNativeProfile(client, owner, method, params) {
+    if (Object.keys(params).some((key) => !['executionNodeId', 'profileId', 'runner', 'directory', 'accountContextId'].includes(key)))
+        throw new Error('Native profiles accept native directories, not credentials or environment overrides');
+    if (method === Methods.NATIVE_PROFILE_LIST)
+        return { profiles: listNativeProfiles() };
+    const id = string(params, 'profileId');
+    if (method === Methods.NATIVE_PROFILE_ADD)
+        return {
+            profile: await addNativeProfile({
+                profileId: id,
+                runner: string(params, 'runner'),
+                ...(params.directory !== undefined ? { directory: string(params, 'directory') } : {}),
+            }),
+        };
+    if (method === Methods.NATIVE_PROFILE_STATUS)
+        return inspectNativeProfile(id, async (profile) => {
+            const definition = nativeRunnerDefinitions[profile.runner];
+            const account = await definition.account.observe({
+                cwd: profile.directory,
+                executable: definition.binary,
+                env: nativeProfileEnvironment(profile),
+            });
+            const loginCommand = [
+                'env',
+                ...definition.account.unset.flatMap((name) => ['-u', name]),
+                ...Object.entries(definition.account.environment(profile.directory)).map(([key, value]) => `${key}=${value}`),
+                account.executable ?? definition.binary,
+                ...definition.account.loginArgs,
+            ]
+                .map(quote)
+                .join(' ');
+            return { profile, account, loginCommand };
+        });
+    if (method === Methods.NATIVE_PROFILE_REMOVE) {
+        await removeNativeProfile(id, string(params, 'accountContextId'), async (profile) => {
+            const sessions = (await client.list(owner)).filter((session) => session.profileId === profile.id);
+            if (sessions.some((session) => session.workerManaged && !sessionStopped(session)))
+                throw new Error('Stop this profile’s worker runs before removing the profile');
+            for (const session of sessions) {
+                // Retirement blocks new launches. A stopped worker needs no standalone
+                // close request, which correctly requires its separate task controls.
+                if (session.workerManaged)
+                    continue;
+                await client.close(owner, session.id);
+                const stopped = (await client.read(owner, session.id, undefined, 1)).session;
+                if (!sessionStopped(stopped))
+                    throw new Error('Native profile process cleanup is not confirmed');
+            }
+        });
+        return { removed: true };
+    }
+    throw new Error('Unknown native profile method');
+}
+//# sourceMappingURL=profile-service.js.map

package/dist/native/profile-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-service.js","sourceRoot":"","sources":["../../src/native/profile-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,GAGR,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,OAAO,CAAC,mBAAmB;IAC3B,OAAO,CAAC,kBAAkB;IAC1B,OAAO,CAAC,qBAAqB;IAC7B,OAAO,CAAC,qBAAqB;CAC9B,CAAC;AACF,SAAS,MAAM,CAAC,MAA+B,EAAE,IAAY;IAC3D,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AACD,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AACD,SAAS,cAAc,CAAC,OAA0B;IAChD,OAAO,CACL,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA2B,EAC3B,KAAa,EACb,MAAc,EACd,MAA+B;IAE/B,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC7F;QAED,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;IACJ,IAAI,MAAM,KAAK,OAAO,CAAC,mBAAmB;QAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,OAAO,CAAC,kBAAkB;QACvC,OAAO;YACL,OAAO,EAAE,MAAM,gBAAgB,CAAC;gBAC9B,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAChC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC;SACH,CAAC;IACJ,IAAI,MAAM,KAAK,OAAO,CAAC,qBAAqB;QAC1C,OAAO,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAsC,EAAE;YACpF,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/C,GAAG,EAAE,OAAO,CAAC,SAAS;gBACtB,UAAU,EAAE,UAAU,CAAC,MAAM;gBAC7B,GAAG,EAAE,wBAAwB,CAAC,OAAO,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,YAAY,GAAG;gBACnB,KAAK;gBACL,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3D,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CACtE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CACpC;gBACD,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM;gBACvC,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS;aAChC;iBACE,GAAG,CAAC,KAAK,CAAC;iBACV,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,IAAI,MAAM,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC7C,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAClF,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAChD,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAC9C,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,uEAAuE;gBACvE,sEAAsE;gBACtE,IAAI,OAAO,CAAC,aAAa;oBAAE,SAAS;gBACpC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC"}

package/dist/native/registry.d.ts

@@ -0,0 +1,20 @@
+import type { NativeAccountObservation, NativeAccountProbeOptions } from './account-types.js';
+import type { NativeAdapter } from './types.js';
+export interface NativeRunnerDefinition {
+    adapter: NativeAdapter;
+    binary: string;
+    supportsWorkers?: boolean;
+    supportsReadOnlyWorkspace?: boolean;
+    reviewRuntimeRoots?: (environment: NodeJS.ProcessEnv) => string[];
+    /** Default for new standalone conversations; worker launch settings stay authoritative. */
+    defaultEffort?: string;
+    account: {
+        environment(directory: string, base?: NodeJS.ProcessEnv): Record<string, string>;
+        unset: readonly string[];
+        loginArgs: readonly string[];
+        observe(options: NativeAccountProbeOptions): Promise<NativeAccountObservation>;
+    };
+}
+/** Native profile mechanics stay with the runner definition, not client workflows. */
+export declare const nativeRunnerDefinitions: Record<string, NativeRunnerDefinition>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/native/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/native/registry.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAM9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;IAClE,2FAA2F;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE;QACP,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QACzB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7B,OAAO,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;KAChF,CAAC;CACH;AAED,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CA2E1E,CAAC"}

package/dist/native/registry.js

@@ -0,0 +1,89 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { claudeProfileEnvironment, observeClaudeAccount } from './account-claude.js';
+import { observeCodexAccount } from './account-codex.js';
+import { cursorProfileEnvironment, observeCursorAccount } from './account-cursor.js';
+import { observeGrokAccount } from './account-grok.js';
+import { claudeNativeAdapter } from './claude.js';
+import { codexNativeAdapter } from './codex.js';
+import { cursorNativeAdapter } from './cursor.js';
+import { grokNativeAdapter } from './grok.js';
+import { hostReviewSandboxAvailable } from './review-sandbox.js';
+/** Native profile mechanics stay with the runner definition, not client workflows. */
+export const nativeRunnerDefinitions = {
+    codex: {
+        adapter: codexNativeAdapter,
+        binary: 'codex',
+        supportsWorkers: true,
+        supportsReadOnlyWorkspace: true,
+        defaultEffort: 'low',
+        account: {
+            environment: (directory) => ({ CODEX_HOME: directory }),
+            unset: ['OPENAI_API_KEY', 'CODEX_API_KEY'],
+            loginArgs: ['login'],
+            observe: observeCodexAccount,
+        },
+    },
+    claude: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [env.CLAUDE_CONFIG_DIR ?? join(env.HOME ?? homedir(), '.claude')],
+        adapter: claudeNativeAdapter,
+        binary: 'claude',
+        supportsWorkers: true,
+        account: {
+            environment: claudeProfileEnvironment,
+            unset: [
+                'ANTHROPIC_API_KEY',
+                'ANTHROPIC_AUTH_TOKEN',
+                'CLAUDE_CODE_OAUTH_TOKEN',
+                'CLAUDE_CONFIG_DIR',
+                'CLAUDE_SECURESTORAGE_CONFIG_DIR',
+            ],
+            loginArgs: ['auth', 'login'],
+            observe: observeClaudeAccount,
+        },
+    },
+    cursor: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [
+            join(env.HOME ?? homedir(), '.cursor'),
+            join(env.HOME ?? homedir(), 'Library/Caches/cursor-compile-cache'),
+            join(env.HOME ?? homedir(), 'Library/Application Support/Cursor'),
+            // cursor-agent locks chats under /tmp/cursor-agent-persist-<uid> (realpath
+            // /private/tmp/...). Denying that mkdir kills the tmux reviewer in seconds.
+            ...(typeof process.getuid === 'function'
+                ? [join('/tmp', `cursor-agent-persist-${process.getuid()}`)]
+                : []),
+        ],
+        adapter: cursorNativeAdapter,
+        binary: 'cursor-agent',
+        supportsWorkers: true,
+        account: {
+            environment: cursorProfileEnvironment,
+            unset: [
+                'CURSOR_API_KEY',
+                'CURSOR_AUTH_TOKEN',
+                'CURSOR_CONFIG_DIR',
+                'CURSOR_DATA_DIR',
+                'XDG_CONFIG_HOME',
+                'XDG_DATA_HOME',
+            ],
+            loginArgs: ['login'],
+            observe: observeCursorAccount,
+        },
+    },
+    grok: {
+        supportsReadOnlyWorkspace: hostReviewSandboxAvailable(),
+        reviewRuntimeRoots: (env) => [env.GROK_HOME ?? join(env.HOME ?? homedir(), '.grok')],
+        adapter: grokNativeAdapter,
+        binary: 'grok',
+        supportsWorkers: true,
+        account: {
+            environment: (directory) => ({ GROK_HOME: directory }),
+            unset: ['GROK_API_KEY', 'XAI_API_KEY'],
+            loginArgs: ['login'],
+            observe: observeGrokAccount,
+        },
+    },
+};
+//# sourceMappingURL=registry.js.map

package/dist/native/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/native/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAmBjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,KAAK,EAAE;QACL,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,OAAO;QACf,eAAe,EAAE,IAAI;QACrB,yBAAyB,EAAE,IAAI;QAC/B,aAAa,EAAE,KAAK;QACpB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YACvD,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;YAC1C,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,mBAAmB;SAC7B;KACF;IACD,MAAM,EAAE;QACN,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9F,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,QAAQ;QAChB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,wBAAwB;YACrC,KAAK,EAAE;gBACL,mBAAmB;gBACnB,sBAAsB;gBACtB,yBAAyB;gBACzB,mBAAmB;gBACnB,iCAAiC;aAClC;YACD,SAAS,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YAC5B,OAAO,EAAE,oBAAoB;SAC9B;KACF;IACD,MAAM,EAAE;QACN,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,qCAAqC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,oCAAoC,CAAC;YACjE,2EAA2E;YAC3E,4EAA4E;YAC5E,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;gBACtC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR;QACD,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,cAAc;QACtB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,wBAAwB;YACrC,KAAK,EAAE;gBACL,gBAAgB;gBAChB,mBAAmB;gBACnB,mBAAmB;gBACnB,iBAAiB;gBACjB,iBAAiB;gBACjB,eAAe;aAChB;YACD,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,oBAAoB;SAC9B;KACF;IACD,IAAI,EAAE;QACJ,yBAAyB,EAAE,0BAA0B,EAAE;QACvD,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QACpF,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,MAAM;QACd,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YACtD,KAAK,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;YACtC,SAAS,EAAE,CAAC,OAAO,CAAC;YACpB,OAAO,EAAE,kBAAkB;SAC5B;KACF;CACF,CAAC"}

package/dist/native/registry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.test.d.ts.map

package/dist/native/registry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.d.ts","sourceRoot":"","sources":["../../src/native/registry.test.ts"],"names":[],"mappings":""}

package/dist/native/registry.test.js

@@ -0,0 +1,13 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+import { nativeRunnerDefinitions } from './registry.js';
+test('cursor review sandbox includes the persist lock directory', () => {
+    const roots = nativeRunnerDefinitions.cursor.reviewRuntimeRoots?.({ HOME: '/Users/x' }) ?? [];
+    assert.ok(roots.some((root) => root.endsWith('/.cursor')));
+    assert.ok(roots.some((root) => root.includes('Application Support/Cursor')));
+    if (typeof process.getuid === 'function') {
+        assert.ok(roots.includes(join('/tmp', `cursor-agent-persist-${process.getuid()}`)));
+    }
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/native/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../src/native/registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/native/review-sandbox.d.ts

@@ -0,0 +1,12 @@
+import type { NativeWorkerFilesystemPolicy } from './worker-launch.js';
+export interface NativeProcessSandbox {
+    executable: string;
+    args: string[];
+}
+export declare const hostReviewSandboxAvailable: () => boolean;
+/** Shared with terminal review launches; trust settings cannot weaken source protection. */
+export declare const reviewProcessSandbox: (policy: NativeWorkerFilesystemPolicy, runtimeRoots: string[]) => Promise<{
+    sandbox: NativeProcessSandbox;
+    temporaryDirectory: string;
+}>;
+//# sourceMappingURL=review-sandbox.d.ts.map

package/dist/native/review-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.d.ts","sourceRoot":"","sources":["../../src/native/review-sandbox.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAQD,eAAO,MAAM,0BAA0B,QANxB,OAMmD,CAAC;AACnE,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,WANrB,4BAA4B,gBACtB,MAAM,EAAE,KACrB,OAAO,CAAC;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAIhB,CAAC"}

package/dist/native/review-sandbox.js

@@ -0,0 +1,6 @@
+import { createRequire } from 'node:module';
+const implementation = createRequire(import.meta.url)('../../scripts/review-filesystem.cjs');
+export const hostReviewSandboxAvailable = implementation.available;
+/** Shared with terminal review launches; trust settings cannot weaken source protection. */
+export const reviewProcessSandbox = implementation.sandbox;
+//# sourceMappingURL=review-sandbox.js.map

package/dist/native/review-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.js","sourceRoot":"","sources":["../../src/native/review-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAQ5C,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,qCAAqC,CAM1F,CAAC;AACF,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,SAAS,CAAC;AACnE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,OAAO,CAAC"}

package/dist/native/review-sandbox.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=review-sandbox.test.d.ts.map

package/dist/native/review-sandbox.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.test.d.ts","sourceRoot":"","sources":["../../src/native/review-sandbox.test.ts"],"names":[],"mappings":""}

package/dist/native/review-sandbox.test.js

@@ -0,0 +1,40 @@
+import assert from 'node:assert/strict';
+import { execFile } from 'node:child_process';
+import { mkdir, mkdtemp, readFile, realpath, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { promisify } from 'node:util';
+import { hostReviewSandboxAvailable, reviewProcessSandbox } from './review-sandbox.js';
+const exec = promisify(execFile);
+test('host review sandbox protects source, shared git metadata and unrelated files while reports stay writable', { skip: !hostReviewSandboxAvailable() }, async () => {
+    const root = await realpath(await mkdtemp(join(tmpdir(), 'review-permissions-')));
+    const source = join(root, 'source'), output = join(root, 'reports'), metadata = join(root, 'git'), other = join(root, 'other');
+    try {
+        for (const dir of [source, output, metadata, other])
+            await mkdir(dir);
+        for (const dir of [source, metadata, other])
+            await writeFile(join(dir, 'file'), 'original');
+        const { sandbox } = await reviewProcessSandbox({ readOnlyRoots: [source, metadata], writableRoots: [output] }, []);
+        const program = `const fs=require('node:fs');const roots=JSON.parse(process.argv[1]);const results={};for(const [name,root]of Object.entries(roots)){try{fs.writeFileSync(root+'/file','changed');results[name]=true;}catch(e){if(!['EPERM','EACCES'].includes(e.code))throw e;results[name]=false;}}console.log(JSON.stringify(results));`;
+        const result = await exec(sandbox.executable, [
+            ...sandbox.args,
+            process.execPath,
+            '-e',
+            program,
+            JSON.stringify({ source, metadata, other, output }),
+        ]);
+        assert.deepEqual(JSON.parse(result.stdout), {
+            source: false,
+            metadata: false,
+            other: false,
+            output: true,
+        });
+        assert.equal(await readFile(join(source, 'file'), 'utf8'), 'original');
+        assert.equal(await readFile(join(output, 'file'), 'utf8'), 'changed');
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=review-sandbox.test.js.map

package/dist/native/review-sandbox.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-sandbox.test.js","sourceRoot":"","sources":["../../src/native/review-sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEvF,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,IAAI,CACF,0GAA0G,EAC1G,EAAE,IAAI,EAAE,CAAC,0BAA0B,EAAE,EAAE,EACvC,KAAK,IAAI,EAAE;IACT,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACjC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAC9B,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAC5B,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACtE,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,oBAAoB,CAC5C,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,EAC9D,EAAE,CACH,CAAC;QACF,MAAM,OAAO,GAAG,2TAA2T,CAAC;QAC5U,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;YAC5C,GAAG,OAAO,CAAC,IAAI;YACf,OAAO,CAAC,QAAQ;YAChB,IAAI;YACJ,OAAO;YACP,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/native/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/native/service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAIvD,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,sBAAsB;gBAA/C,IAAI,EAAE,gBAAgB,GAAG,sBAAsB,EACxD,OAAO,EAAE,MAAM;CAKlB;AASD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAqHlB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/native/service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAKvD,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,sBAAsB;gBAA/C,IAAI,EAAE,gBAAgB,GAAG,sBAAsB,EACxD,OAAO,EAAE,MAAM;CAKlB;AASD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAyJlB"}

package/dist/native/service.js

@@ -1,4 +1,5 @@
 import { Methods, } from '@farmslot/protocol';
+import { NATIVE_PROFILE_METHODS, routeNativeProfile } from './profile-service.js';
 import { nativeWorkspaceChanges, nativeWorkspaceDiff, nativeWorkspaceList } from './workspace.js';
 import { readWorkspaceText } from './workspace-files.js';
 export class NativeSessionMethodError extends Error {
@@ -18,23 +19,52 @@ export async function routeNativeSession(client, principal, method, value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         throw new NativeSessionMethodError('INVALID_PARAMS', 'Expected native session parameters');
     const p = value;
+    if ('launch' in p)
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Worker launch settings are supplied by run dispatch');
     if (p.executionNodeId !== undefined && p.executionNodeId !== client.executionNodeId)
         throw new NativeSessionMethodError('INVALID_PARAMS', 'Native session targets another execution node');
     try {
+        if (NATIVE_PROFILE_METHODS.includes(method))
+            return await routeNativeProfile(client, principal, method, p);
         switch (method) {
             case Methods.NATIVE_SESSION_WORKSPACE_LIST:
             case Methods.NATIVE_SESSION_WORKSPACE_READ:
             case Methods.NATIVE_SESSION_WORKSPACE_CHANGES:
             case Methods.NATIVE_SESSION_WORKSPACE_DIFF: {
-                const { session } = await client.read(principal, string(p, 'sessionId'), undefined, 1);
+                const sessionId = string(p, 'sessionId');
+                const inspect = async () => {
+                    const { session } = await client.read(principal, sessionId, undefined, 1);
+                    if (session.workerManaged) {
+                        const worker = p.worker;
+                        if (!worker || typeof worker !== 'object' || Array.isArray(worker))
+                            throw new Error('Worker workspace requires its pinned run context');
+                        const target = worker;
+                        if (session.workerLeaseId !== target.leaseId ||
+                            session.generation !== target.generation ||
+                            ['closed', 'failed', 'closing'].includes(session.state))
+                            throw new Error('Current workspace is unavailable for a closed or transferred worker');
+                    }
+                    else if (p.worker !== undefined)
+                        throw new Error('Worker workspace target is not a worker');
+                    return session;
+                };
+                const session = await inspect();
+                let result;
                 if (method === Methods.NATIVE_SESSION_WORKSPACE_CHANGES)
-                    return await nativeWorkspaceChanges(session.cwd);
-                const path = string(p, 'path');
-                if (method === Methods.NATIVE_SESSION_WORKSPACE_LIST)
-                    return await nativeWorkspaceList(session.cwd, path);
-                if (method === Methods.NATIVE_SESSION_WORKSPACE_DIFF)
-                    return { path, diff: await nativeWorkspaceDiff(session.cwd, path) };
-                return { path, content: await readWorkspaceText(session.cwd, path) };
+                    result = await nativeWorkspaceChanges(session.cwd);
+                else {
+                    const path = string(p, 'path');
+                    if (method === Methods.NATIVE_SESSION_WORKSPACE_LIST)
+                        result = await nativeWorkspaceList(session.cwd, path);
+                    else if (method === Methods.NATIVE_SESSION_WORKSPACE_DIFF)
+                        result = { path, diff: await nativeWorkspaceDiff(session.cwd, path) };
+                    else
+                        result = { path, content: await readWorkspaceText(session.cwd, path) };
+                }
+                // File reads await the OS. Refuse their result if a handoff won during that await.
+                if (session.workerManaged)
+                    await inspect();
+                return result;
             }
             case Methods.NATIVE_SESSION_CREATE:
             case Methods.NATIVE_SESSION_ENSURE: {
@@ -44,6 +74,10 @@ export async function routeNativeSession(client, principal, method, value) {
                 };
                 if (p.model !== undefined)
                     params.model = string(p, 'model');
+                if (p.profileId !== undefined)
+                    params.profileId = string(p, 'profileId');
+                if (p.accountContextId !== undefined)
+                    params.accountContextId = string(p, 'accountContextId');
                 if (p.mode !== undefined) {
                     if (p.mode !== 'default' && p.mode !== 'plan')
                         throw new NativeSessionMethodError('INVALID_PARAMS', 'Unknown native interaction mode');