@farmslot/agent-runtime 0.9.0 → 0.11.0

package/dist/native/worker-history.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-history.test.js","sourceRoot":"","sources":["../../src/native/worker-history.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAA2B,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEvF,MAAM,IAAI,GAAsB;IAC9B,EAAE,EAAE,UAAU,EAAE;IAChB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,OAAO;IACf,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,OAAO;IACzB,eAAe,EAAE,OAAO;IACxB,gBAAgB,EAAE,SAAS;IAC3B,GAAG,EAAE,MAAM;IACX,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,UAAU,EAAE;IAC3B,KAAK,EAAE,QAAQ;IACf,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE;QACZ,KAAK,EAAE,CAAC,SAAS,CAAC;QAClB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;KACb;CACF,CAAC;AACF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAwB,EAAE,CAAC,CAAC;IACrD,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;CACf,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAsB,EAAE,CAAC,CAAC;IAC1E,SAAS,EAAE,IAAI,CAAC,EAAE;IAClB,QAAQ;IACR,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,mBAAmB;IACzB,SAAS;IACT,IAAI,EAAE,SAAS;CAChB,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;IAC7E,KAAK,MAAM,OAAO,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACrD,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CACpD,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YACrE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;YAC9F,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iGAAiG,EAAE,GAAG,EAAE;IAC3G,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAc,CAAC;IAClC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5D,4FAA4F;IAC5F,OAAO,CAAC,OAAO,CAAC;QACd,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE;QAC7D,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAChC,CAAC,CAAC;IACH,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,qCAAqC,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC/B,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;KACjE,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,CACd,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CACP,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,KAAK,MAAM,YAAY,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAuB;gBACjC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;aACpC,CAAC;YACF,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,UAAU,CAAC,EAChC,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI;gBACJ,OAAO,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE;gBACjE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBAC3B,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aAC/D,CAAC,GAAG,IAAI,CACV,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,YAAY;gBACd,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;;gBACrF,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAc,EAAE,MAAM,CAAC,CAAC;YAC5F,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,CAAC;YAC3E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE;gBAChC,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,aAAc,CAAC,EACpE,WAAW,CACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG;YACb,eAAe,EAAE,OAAO;YACxB,KAAK,CAAC,IAAI;gBACR,KAAK,EAAE,CAAC;gBACR,OAAO;oBACL,OAAO,EAAE;wBACP,GAAG,IAAI;wBACP,GAAG,EAAE,IAAI;wBACT,KAAK,EAAE,MAAM;wBACb,aAAa,EAAE,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa;qBACxE;iBACF,CAAC;YACJ,CAAC;SACgC,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QACxD,MAAM,MAAM,CAAC,OAAO,CAClB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAC5E,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG;YACb,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,SAAS;gBACpB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,aAAa;aAC5B;SACF,CAAC;QACF,KAAK,GAAG,CAAC,CAAC;QACV,MAAM,CAAC,SAAS,CACd,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAClF,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAC3C,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvB,KAAK,GAAG,CAAC,CAAC;QACV,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,MAAM,CAAC,OAAO,CAClB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,EAC5E,aAAa,CACd,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/native/worker-launch.d.ts

@@ -0,0 +1,72 @@
+import type { NativeSessionCreateParams, NativeSessionInfo, SafetyTier } from '@farmslot/protocol';
+/** Private gateway/node/host contract. Public session RPCs never accept this environment. */
+export interface NativeWorkerLaunch {
+    leaseId: string;
+    executable?: string;
+    accountLabel?: string;
+    environment: {
+        set: Record<string, string>;
+        unset: string[];
+    };
+    effort?: string;
+    safetyTier: SafetyTier;
+    filesystemPolicy?: NativeWorkerFilesystemPolicy;
+}
+/** Source stays readable; tools may write only the separate task/output roots. */
+export interface NativeWorkerFilesystemPolicy {
+    readOnlyRoots: string[];
+    writableRoots: string[];
+}
+export declare function validateNativeWorkerFilesystemPolicy(value: unknown): NativeWorkerFilesystemPolicy;
+export declare const NATIVE_WORKER_STATE = "native.worker.state";
+export declare const NATIVE_WORKER_ENSURE = "native.worker.ensure";
+export declare const NATIVE_WORKER_RESUME = "native.worker.resume";
+export declare const NATIVE_WORKER_SEND = "native.worker.send";
+export declare const NATIVE_WORKER_RESPOND = "native.worker.respond";
+export declare const NATIVE_WORKER_CLOSE = "native.worker.close";
+export declare const NATIVE_WORKER_INTERRUPT = "native.worker.interrupt";
+export declare const NATIVE_WORKER_TRANSFER = "native.worker.transfer";
+export declare const NATIVE_WORKER_CANCEL = "native.worker.cancel";
+export declare const NATIVE_WORKER_READ = "native.worker.read";
+export declare const NATIVE_WORKER_METHODS: readonly string[];
+export interface NativeWorkerTarget {
+    sessionId: string;
+    executionNodeId?: string;
+    generation: string;
+    leaseId: string;
+}
+export interface NativeWorkerCancelTarget extends Omit<NativeWorkerTarget, 'generation'> {
+    generation?: string;
+    /** Cancelling a reserved successor may still find the source lease on the host. */
+    sourceLeaseId?: string;
+    /** Fence this durable recovery operation even if its launch has not reached the host. */
+    resumeCommandId?: string;
+}
+export type NativeWorkerCancelResult = {
+    sessionId: string;
+    leaseId: string;
+    generation?: string;
+} & ({
+    cancelled: true;
+    session?: NativeSessionInfo;
+} | {
+    cancelled: false;
+    reason: 'generation-changed';
+    generation: string;
+    session?: undefined;
+});
+export interface NativeWorkerResumeParams extends NativeSessionCreateParams {
+    sessionId: string;
+    resumeSessionId: string;
+    generation: string;
+    commandId: string;
+    /** Explicit same-host parking relocation, fenced by the old generation and saved launch digest. */
+    relocation?: {
+        fromCwd: string;
+    };
+}
+export declare function decodeNativeWorkerLaunch(value: unknown): NativeWorkerLaunch;
+/** Journals compare launch settings without retaining project environment values. */
+export declare function nativeWorkerLaunchDigest(launch: NativeWorkerLaunch): string;
+export declare function nativeWorkerEnvironment(launch: NativeWorkerLaunch): NodeJS.ProcessEnv;
+//# sourceMappingURL=worker-launch.d.ts.map

package/dist/native/worker-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.d.ts","sourceRoot":"","sources":["../../src/native/worker-launch.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnG,6FAA6F;AAC7F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;IACvB,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;CACjD;AAED,kFAAkF;AAClF,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,4BAA4B,CAyBjG;AAED,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AACjE,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAWlD,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yFAAyF;IACzF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,CACA;IAAE,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAChD;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,CAAA;CAAE,CAC9F,CAAC;AAEF,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAQD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAwD3E;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAgB3E;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAiBrF"}

package/dist/native/worker-launch.js

@@ -0,0 +1,134 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { delimiter, isAbsolute, join, relative, sep } from 'node:path';
+export function validateNativeWorkerFilesystemPolicy(value) {
+    const policy = object(value);
+    if (Object.keys(policy).some((key) => !['readOnlyRoots', 'writableRoots'].includes(key)))
+        throw new Error('Unsupported native worker filesystem policy field');
+    for (const name of ['readOnlyRoots', 'writableRoots']) {
+        const roots = policy[name];
+        if (!Array.isArray(roots) ||
+            !roots.length ||
+            roots.some((root) => typeof root !== 'string' || !isAbsolute(root) || root.includes('\0')))
+            throw new Error('Native worker filesystem roots must be nonempty absolute paths');
+    }
+    const result = policy;
+    const within = (root, file) => {
+        const child = relative(root, file);
+        return child === '' || (child !== '..' && !child.startsWith(`..${sep}`) && !isAbsolute(child));
+    };
+    if (result.readOnlyRoots.some((source) => result.writableRoots.some((output) => within(source, output) || within(output, source))))
+        throw new Error('Native worker source and writable roots must not overlap');
+    return result;
+}
+export const NATIVE_WORKER_STATE = 'native.worker.state';
+export const NATIVE_WORKER_ENSURE = 'native.worker.ensure';
+export const NATIVE_WORKER_RESUME = 'native.worker.resume';
+export const NATIVE_WORKER_SEND = 'native.worker.send';
+export const NATIVE_WORKER_RESPOND = 'native.worker.respond';
+export const NATIVE_WORKER_CLOSE = 'native.worker.close';
+export const NATIVE_WORKER_INTERRUPT = 'native.worker.interrupt';
+export const NATIVE_WORKER_TRANSFER = 'native.worker.transfer';
+export const NATIVE_WORKER_CANCEL = 'native.worker.cancel';
+export const NATIVE_WORKER_READ = 'native.worker.read';
+export const NATIVE_WORKER_METHODS = [
+    NATIVE_WORKER_READ,
+    NATIVE_WORKER_STATE,
+    NATIVE_WORKER_ENSURE,
+    NATIVE_WORKER_RESUME,
+    NATIVE_WORKER_SEND,
+    NATIVE_WORKER_RESPOND,
+    NATIVE_WORKER_CLOSE,
+    NATIVE_WORKER_INTERRUPT,
+    NATIVE_WORKER_TRANSFER,
+    NATIVE_WORKER_CANCEL,
+];
+function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Invalid native worker launch object');
+    return value;
+}
+export function decodeNativeWorkerLaunch(value) {
+    const launch = object(value);
+    if (Object.keys(launch).some((key) => ![
+        'leaseId',
+        'executable',
+        'accountLabel',
+        'environment',
+        'effort',
+        'safetyTier',
+        'filesystemPolicy',
+    ].includes(key)))
+        throw new Error('Unsupported native worker launch field');
+    if (!['sandboxed', 'full-auto', 'dangerous'].includes(String(launch.safetyTier)))
+        throw new Error('Invalid native worker safety tier');
+    if (typeof launch.leaseId !== 'string' ||
+        !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(launch.leaseId))
+        throw new Error('Native worker leaseId must be a lowercase UUID');
+    for (const key of ['executable', 'accountLabel', 'effort'])
+        if (launch[key] !== undefined && (typeof launch[key] !== 'string' || !launch[key].trim()))
+            throw new Error(`Invalid native worker ${key}`);
+    if (typeof launch.effort === 'string' && !/^[a-z][a-z0-9_-]*$/.test(launch.effort))
+        throw new Error('Invalid native worker effort');
+    const environment = object(launch.environment);
+    if (Object.keys(environment).some((key) => !['set', 'unset'].includes(key)))
+        throw new Error('Unsupported native worker environment field');
+    const set = object(environment.set);
+    const unset = environment.unset;
+    const validName = (name) => typeof name === 'string' && /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
+    if (!Array.isArray(unset) ||
+        !unset.every(validName) ||
+        !Object.keys(set).every(validName) ||
+        !Object.values(set).every((item) => typeof item === 'string' && !item.includes('\0')))
+        throw new Error('Invalid native worker environment mutation');
+    return {
+        leaseId: launch.leaseId,
+        ...(typeof launch.executable === 'string' ? { executable: launch.executable } : {}),
+        ...(typeof launch.accountLabel === 'string' ? { accountLabel: launch.accountLabel } : {}),
+        ...(typeof launch.effort === 'string' ? { effort: launch.effort } : {}),
+        safetyTier: launch.safetyTier,
+        ...(launch.filesystemPolicy === undefined
+            ? {}
+            : {
+                filesystemPolicy: validateNativeWorkerFilesystemPolicy(launch.filesystemPolicy),
+            }),
+        environment: { set: set, unset },
+    };
+}
+/** Journals compare launch settings without retaining project environment values. */
+export function nativeWorkerLaunchDigest(launch) {
+    return createHash('sha256')
+        .update(JSON.stringify({
+        executable: launch.executable,
+        accountLabel: launch.accountLabel,
+        safetyTier: launch.safetyTier,
+        effort: launch.effort,
+        ...(launch.filesystemPolicy ? { filesystemPolicy: launch.filesystemPolicy } : {}),
+        environment: {
+            set: Object.entries(launch.environment.set).sort(([a], [b]) => a.localeCompare(b)),
+            unset: [...new Set(launch.environment.unset)].sort(),
+        },
+    }))
+        .digest('hex');
+}
+export function nativeWorkerEnvironment(launch) {
+    const unset = new Set(launch.environment.unset);
+    // Object.fromEntries treats names as data, including names matching Object.prototype keys.
+    const env = Object.fromEntries([
+        ...Object.entries(process.env).filter(([key]) => !unset.has(key)),
+        ...Object.entries(launch.environment.set),
+    ]);
+    env.DISABLE_OMC = '1';
+    env.DISABLE_OMX = '1';
+    const shims = join(env.ASDF_DATA_DIR ?? join(env.HOME ?? homedir(), '.asdf'), 'shims');
+    if (existsSync(shims))
+        env.PATH = `${shims}${delimiter}${env.PATH ?? ''}`;
+    delete env.CLAUDECODE;
+    // Workers do not need control-plane credentials, including configured overrides.
+    delete env.FARMSLOT_NODE_TOKEN;
+    delete env.FARMSLOT_GATEWAY_TOKEN;
+    delete env.FARMSLOT_GATEWAY_PASSWORD;
+    return env;
+}
+//# sourceMappingURL=worker-launch.js.map

package/dist/native/worker-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.js","sourceRoot":"","sources":["../../src/native/worker-launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAqBvE,MAAM,UAAU,oCAAoC,CAAC,KAAc;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,CAAC,KAAK,CAAC,MAAM;YACb,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAE1F,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,MAAiD,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,IACE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACnC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CACxF;QAED,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB,oBAAoB;CACrB,CAAC;AAiCF,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IACE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,CAAC,GAAG,EAAE,EAAE,CACN,CAAC;QACC,SAAS;QACT,YAAY;QACZ,cAAc;QACd,aAAa;QACb,QAAQ;QACR,YAAY;QACZ,kBAAkB;KACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAClB;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAErE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAU;QACjE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IAChC,MAAM,SAAS,GAAG,CAAC,IAAa,EAAkB,EAAE,CAClD,OAAO,IAAI,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QACvB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAErF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,UAAU,EAAE,MAAM,CAAC,UAAwB;QAC3C,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,gBAAgB,EAAE,oCAAoC,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAChF,CAAC;QACN,WAAW,EAAE,EAAE,GAAG,EAAE,GAA6B,EAAE,KAAK,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,WAAW,EAAE;YACX,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAClF,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;SACrD;KACF,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAChD,2FAA2F;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC;KAC1C,CAAC,CAAC;IACH,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;IACtB,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1E,OAAO,GAAG,CAAC,UAAU,CAAC;IACtB,iFAAiF;IACjF,OAAO,GAAG,CAAC,mBAAmB,CAAC;IAC/B,OAAO,GAAG,CAAC,sBAAsB,CAAC;IAClC,OAAO,GAAG,CAAC,yBAAyB,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/native/worker-launch.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker-launch.test.d.ts.map

package/dist/native/worker-launch.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.test.d.ts","sourceRoot":"","sources":["../../src/native/worker-launch.test.ts"],"names":[],"mappings":""}

package/dist/native/worker-launch.test.js

@@ -0,0 +1,61 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { nativeWorkerEnvironment } from './worker-launch.js';
+test('worker environments remove inherited and configured control-plane credentials', () => {
+    const originalEnvironment = process.env;
+    const credentials = {
+        FARMSLOT_NODE_TOKEN: 'synthetic-node-token',
+        FARMSLOT_GATEWAY_TOKEN: 'synthetic-gateway-token',
+        FARMSLOT_GATEWAY_PASSWORD: 'synthetic-gateway-password',
+    };
+    try {
+        // Replace the environment rather than reading any real credential values.
+        process.env = { ...credentials, CODEX_LB_API_KEY: 'synthetic-runner-key' };
+        for (const set of [{}, credentials]) {
+            const env = nativeWorkerEnvironment({
+                leaseId: 'fixture-lease',
+                safetyTier: 'sandboxed',
+                environment: { set, unset: [] },
+            });
+            for (const name of Object.keys(credentials))
+                assert.equal(Object.hasOwn(env, name), false);
+            assert.equal(env.CODEX_LB_API_KEY, 'synthetic-runner-key');
+            assert.equal(env.DISABLE_OMC, '1');
+            assert.equal(env.DISABLE_OMX, '1');
+        }
+        assert.deepEqual(credentials, {
+            FARMSLOT_NODE_TOKEN: 'synthetic-node-token',
+            FARMSLOT_GATEWAY_TOKEN: 'synthetic-gateway-token',
+            FARMSLOT_GATEWAY_PASSWORD: 'synthetic-gateway-password',
+        });
+    }
+    finally {
+        process.env = originalEnvironment;
+    }
+});
+test('filesystem launch contract rejects overlapping source grants and binds grants into its digest', async () => {
+    const { decodeNativeWorkerLaunch, nativeWorkerLaunchDigest, validateNativeWorkerFilesystemPolicy, } = await import('./worker-launch.js');
+    const launch = {
+        leaseId: '10000000-0000-4000-8000-000000000001',
+        safetyTier: 'sandboxed',
+        environment: { set: {}, unset: [] },
+        filesystemPolicy: { readOnlyRoots: ['/repo'], writableRoots: ['/task', '/output'] },
+    };
+    const decoded = decodeNativeWorkerLaunch(launch);
+    assert.deepEqual(decoded.filesystemPolicy, launch.filesystemPolicy);
+    assert.notEqual(nativeWorkerLaunchDigest(decoded), nativeWorkerLaunchDigest({ ...decoded, filesystemPolicy: undefined }));
+    assert.notEqual(nativeWorkerLaunchDigest(decoded), nativeWorkerLaunchDigest({
+        ...decoded,
+        filesystemPolicy: { ...launch.filesystemPolicy, writableRoots: ['/other'] },
+    }));
+    for (const writableRoots of [['/'], ['/repo'], ['/repo/output'], ['/repo/../repo']]) {
+        assert.throws(() => validateNativeWorkerFilesystemPolicy({ ...launch.filesystemPolicy, writableRoots }), /overlap/);
+    }
+    for (const invalid of [
+        {},
+        { ...launch.filesystemPolicy, writableRoots: ['relative'] },
+        { ...launch.filesystemPolicy, writableRoots: [] },
+    ])
+        assert.throws(() => validateNativeWorkerFilesystemPolicy(invalid), /absolute paths/);
+});
+//# sourceMappingURL=worker-launch.test.js.map

package/dist/native/worker-launch.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-launch.test.js","sourceRoot":"","sources":["../../src/native/worker-launch.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,IAAI,CAAC,+EAA+E,EAAE,GAAG,EAAE;IACzF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,WAAW,GAAG;QAClB,mBAAmB,EAAE,sBAAsB;QAC3C,sBAAsB,EAAE,yBAAyB;QACjD,yBAAyB,EAAE,4BAA4B;KACxD,CAAC;IACF,IAAI,CAAC;QACH,0EAA0E;QAC1E,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;QAC3E,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,uBAAuB,CAAC;gBAClC,OAAO,EAAE,eAAe;gBACxB,UAAU,EAAE,WAAW;gBACvB,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;aAChC,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC3F,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YAC5B,mBAAmB,EAAE,sBAAsB;YAC3C,sBAAsB,EAAE,yBAAyB;YACjD,yBAAyB,EAAE,4BAA4B;SACxD,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,EACJ,wBAAwB,EACxB,wBAAwB,EACxB,oCAAoC,GACrC,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,sCAAsC;QAC/C,UAAU,EAAE,WAAW;QACvB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,gBAAgB,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;KACpF,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACpE,MAAM,CAAC,QAAQ,CACb,wBAAwB,CAAC,OAAO,CAAC,EACjC,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,QAAQ,CACb,wBAAwB,CAAC,OAAO,CAAC,EACjC,wBAAwB,CAAC;QACvB,GAAG,OAAO;QACV,gBAAgB,EAAE,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE;KAC5E,CAAC,CACH,CAAC;IACF,KAAK,MAAM,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,oCAAoC,CAAC,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,EACzF,SAAS,CACV,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI;QACpB,EAAE;QACF,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE;QAC3D,EAAE,GAAG,MAAM,CAAC,gBAAgB,EAAE,aAAa,EAAE,EAAE,EAAE;KAClD;QACC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC,CAAC,CAAC"}

package/dist/native/worker-relocation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker-relocation.test.d.ts.map

package/dist/native/worker-relocation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-relocation.test.d.ts","sourceRoot":"","sources":["../../src/native/worker-relocation.test.ts"],"names":[],"mappings":""}

package/dist/native/worker-relocation.test.js

@@ -0,0 +1,110 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { chmodSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { NativeSessionClient } from './client.js';
+import { decodeRequest } from './ipc.js';
+import { NativeSessionManager } from './manager.js';
+import { NATIVE_WORKER_RESUME } from './worker-launch.js';
+const executable = `#!/usr/bin/env node
+if(process.argv.includes('--version')) { console.log('fixture 1'); process.exit(0); }
+const send=m=>process.stdout.write(JSON.stringify(m)+'\\n');
+require('node:readline').createInterface({input:process.stdin}).on('line',line=>{
+ const m=JSON.parse(line);
+ if(m.method==='initialize')send({id:m.id,result:{}});
+ if(m.method==='thread/start'||m.method==='thread/resume')send({id:m.id,result:{thread:{id:m.params.threadId||'saved-conversation'}}});
+});
+`;
+test('worker relocation preserves lease/account and requires an explicit sibling-worktree move', async () => {
+    const root = mkdtempSync(join(tmpdir(), 'native-relocation-'));
+    const source = join(root, 'source');
+    const target = join(root, 'target');
+    const unrelated = join(root, 'unrelated');
+    const binary = join(root, 'codex');
+    writeFileSync(binary, executable);
+    chmodSync(binary, 0o700);
+    const git = (args, cwd = root) => execFileSync('git', args, { cwd, stdio: 'pipe' });
+    git(['init', source]);
+    git([
+        '-c',
+        'user.name=Fixture',
+        '-c',
+        'user.email=fixture@example.invalid',
+        'commit',
+        '--allow-empty',
+        '-m',
+        'test: initialize fixture',
+    ], source);
+    git(['worktree', 'add', '-b', 'target', target], source);
+    git(['init', unrelated]);
+    const manager = new NativeSessionManager(join(root, 'state'));
+    const launch = {
+        leaseId: randomUUID(),
+        executable: binary,
+        accountLabel: 'original',
+        safetyTier: 'full-auto',
+        environment: { set: { CODEX_HOME: join(root, 'account') }, unset: [] },
+    };
+    let sessionId;
+    try {
+        const before = await manager.ensure('owner', { sessionId: randomUUID(), runner: 'codex', cwd: source }, launch);
+        sessionId = before.id;
+        const params = {
+            sessionId: before.id,
+            resumeSessionId: before.nativeSessionId,
+            runner: 'codex',
+            cwd: target,
+            generation: before.generation,
+            commandId: randomUUID(),
+        };
+        await assert.rejects(manager.resumeWorker('owner', { ...params, relocation: { fromCwd: source } }, launch), /Close the current/);
+        await manager.closeWorker('owner', before.id, before.generation, launch.leaseId);
+        await assert.rejects(manager.resumeWorker('owner', params, launch), /working directory/);
+        await assert.rejects(manager.resumeWorker('owner', { ...params, relocation: { fromCwd: unrelated } }, launch), /exact previous workspace/);
+        await assert.rejects(manager.resumeWorker('owner', { ...params, cwd: unrelated, relocation: { fromCwd: source } }, launch), /sibling worktrees/);
+        await assert.rejects(manager.resumeWorker('owner', { ...params, relocation: { fromCwd: source } }, { ...launch, accountLabel: 'other' }), /account execution context/);
+        const cancelledCommand = randomUUID();
+        await manager.cancelWorker('owner', before.id, launch.leaseId, before.generation, undefined, cancelledCommand);
+        await assert.rejects(manager.resumeWorker('owner', { ...params, commandId: cancelledCommand, relocation: { fromCwd: source } }, launch), /cancelled before launch/);
+        const next = await manager.resumeWorker('owner', { ...params, relocation: { fromCwd: source } }, launch);
+        assert.equal(next.id, before.id);
+        assert.equal(next.nativeSessionId, before.nativeSessionId);
+        assert.equal(next.workerLeaseId, launch.leaseId);
+        assert.equal(next.cwd, target);
+        assert.notEqual(next.generation, before.generation);
+        await assert.rejects(manager.resumeWorker('owner', { ...params, relocation: { fromCwd: source } }, launch), /generation|lease/i);
+    }
+    finally {
+        if (sessionId)
+            await manager.close('owner', sessionId);
+        rmSync(root, { recursive: true, force: true });
+    }
+});
+test('private state routing separates owners and IPC preserves explicit relocation', () => {
+    const client = new NativeSessionClient('/private/native-state');
+    const sessionId = randomUUID();
+    assert.notEqual(client.workerStateDirectory('one', sessionId), client.workerStateDirectory('two', sessionId));
+    assert.ok(client.workerStateDirectory('one', sessionId).startsWith('/private/native-state/workers/'));
+    const request = decodeRequest({
+        method: NATIVE_WORKER_RESUME,
+        owner: 'owner',
+        params: {
+            sessionId,
+            runner: 'codex',
+            cwd: '/target',
+            generation: 'generation',
+            commandId: 'command',
+            resumeSessionId: 'saved',
+            relocation: { fromCwd: '/source' },
+        },
+        launch: { leaseId: randomUUID(), safetyTier: 'full-auto', environment: { set: {}, unset: [] } },
+    });
+    assert.equal(request.method, NATIVE_WORKER_RESUME);
+    if (request.method !== NATIVE_WORKER_RESUME)
+        throw new Error('Wrong request');
+    assert.deepEqual(request.params.relocation, { fromCwd: '/source' });
+});
+//# sourceMappingURL=worker-relocation.test.js.map

package/dist/native/worker-relocation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-relocation.test.js","sourceRoot":"","sources":["../../src/native/worker-relocation.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAA2B,MAAM,oBAAoB,CAAC;AAEnF,MAAM,UAAU,GAAG;;;;;;;;CAQlB,CAAC;AAEF,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9F,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtB,GAAG,CACD;QACE,IAAI;QACJ,mBAAmB;QACnB,IAAI;QACJ,oCAAoC;QACpC,QAAQ;QACR,eAAe;QACf,IAAI;QACJ,0BAA0B;KAC3B,EACD,MAAM,CACP,CAAC;IACF,GAAG,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAuB;QACjC,OAAO,EAAE,UAAU,EAAE;QACrB,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,UAAU;QACxB,UAAU,EAAE,WAAW;QACvB,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KACvE,CAAC;IACF,IAAI,SAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CACjC,OAAO,EACP,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EACzD,MAAM,CACP,CAAC;QACF,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG;YACb,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,MAAM;YACX,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,UAAU,EAAE;SACxB,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EACrF,mBAAmB,CACpB,CAAC;QACF,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,EACxF,0BAA0B,CAC3B,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAClB,OAAO,EACP,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAC9D,MAAM,CACP,EACD,mBAAmB,CACpB,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAClB,OAAO,EACP,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAC9C,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CACrC,EACD,2BAA2B,CAC5B,CAAC;QACF,MAAM,gBAAgB,GAAG,UAAU,EAAE,CAAC;QACtC,MAAM,OAAO,CAAC,YAAY,CACxB,OAAO,EACP,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,UAAU,EACjB,SAAS,EACT,gBAAgB,CACjB,CAAC;QACF,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAClB,OAAO,EACP,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAC3E,MAAM,CACP,EACD,yBAAyB,CAC1B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CACrC,OAAO,EACP,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAC9C,MAAM,CACP,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,OAAO,CAClB,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EACrF,mBAAmB,CACpB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,SAAS;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,CAAC,QAAQ,CACb,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,EAC7C,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAC9C,CAAC;IACF,MAAM,CAAC,EAAE,CACP,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAC3F,CAAC;IACF,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,MAAM,EAAE,oBAAoB;QAC5B,KAAK,EAAE,OAAO;QACd,MAAM,EAAE;YACN,SAAS;YACT,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,SAAS;YACd,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,SAAS;YACpB,eAAe,EAAE,OAAO;YACxB,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;SACnC;QACD,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;KAChG,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9E,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC"}

package/dist/native/worker-service.d.ts

@@ -0,0 +1,4 @@
+import type { NativeSessionClient } from './client.js';
+/** Private execution-node operation. The gateway derives launch settings from its run/slot config. */
+export declare function routeNativeWorkerSession(client: NativeSessionClient, owner: string, method: string, value: unknown): Promise<unknown>;
+//# sourceMappingURL=worker-service.d.ts.map

package/dist/native/worker-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-service.d.ts","sourceRoot":"","sources":["../../src/native/worker-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAgBvD,sGAAsG;AACtG,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CA8FlB"}

package/dist/native/worker-service.js

@@ -0,0 +1,85 @@
+import { decodeRequest } from './ipc.js';
+import { NativeSessionMethodError } from './service.js';
+import { NATIVE_WORKER_CANCEL, NATIVE_WORKER_CLOSE, NATIVE_WORKER_ENSURE, NATIVE_WORKER_INTERRUPT, NATIVE_WORKER_READ, NATIVE_WORKER_RESPOND, NATIVE_WORKER_RESUME, NATIVE_WORKER_SEND, NATIVE_WORKER_STATE, NATIVE_WORKER_TRANSFER, } from './worker-launch.js';
+/** Private execution-node operation. The gateway derives launch settings from its run/slot config. */
+export async function routeNativeWorkerSession(client, owner, method, value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Expected native worker parameters');
+    const params = value;
+    if (params.executionNodeId !== undefined && params.executionNodeId !== client.executionNodeId)
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Native worker targets another execution node');
+    if (method === NATIVE_WORKER_STATE) {
+        if (typeof params.sessionId !== 'string' ||
+            !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(params.sessionId))
+            throw new NativeSessionMethodError('INVALID_PARAMS', 'Expected a reserved worker session ID');
+        return { stateDirectory: client.prepareWorkerState(owner, params.sessionId) };
+    }
+    let request;
+    try {
+        request = decodeRequest({
+            method,
+            owner,
+            params,
+            launch: params.launch,
+            id: params.sessionId,
+            generation: params.generation,
+            leaseId: params.leaseId,
+            sourceLeaseId: params.sourceLeaseId,
+            resumeCommandId: params.resumeCommandId,
+            commandId: params.commandId,
+            text: params.text,
+            requestId: params.requestId,
+            response: params.response,
+            after: params.after,
+            limit: params.limit,
+        });
+    }
+    catch (error) {
+        throw new NativeSessionMethodError('INVALID_PARAMS', error.message);
+    }
+    try {
+        if (request.method === NATIVE_WORKER_READ)
+            return await client.readWorker(owner, request.id, request.leaseId, request.after, request.limit);
+        if (request.method === NATIVE_WORKER_RESPOND) {
+            await client.respondWorker(owner, { sessionId: request.id, generation: request.generation, leaseId: request.leaseId }, request.requestId, request.response);
+            return { responded: true };
+        }
+        if (request.method === NATIVE_WORKER_CANCEL)
+            return await client.cancelWorker(owner, {
+                sessionId: request.id,
+                generation: request.generation,
+                leaseId: request.leaseId,
+                sourceLeaseId: request.sourceLeaseId,
+                resumeCommandId: request.resumeCommandId,
+            });
+        if (request.method === NATIVE_WORKER_ENSURE)
+            return { session: await client.ensureWorker(owner, request.params, request.launch) };
+        if (request.method === NATIVE_WORKER_RESUME)
+            return { session: await client.resumeWorker(owner, request.params, request.launch) };
+        if (request.method === NATIVE_WORKER_SEND ||
+            request.method === NATIVE_WORKER_CLOSE ||
+            request.method === NATIVE_WORKER_INTERRUPT ||
+            request.method === NATIVE_WORKER_TRANSFER) {
+            const target = {
+                sessionId: request.id,
+                generation: request.generation,
+                leaseId: request.leaseId,
+            };
+            if (request.method === NATIVE_WORKER_SEND)
+                return await client.sendWorker(owner, target, request.commandId, request.text);
+            if (request.method === NATIVE_WORKER_CLOSE)
+                return { closed: true, session: await client.closeWorker(owner, target) };
+            if (request.method === NATIVE_WORKER_TRANSFER)
+                return { session: await client.transferWorker(owner, target, request.launch) };
+            await client.interruptWorker(owner, target);
+            return { interrupted: true };
+        }
+        throw new NativeSessionMethodError('INVALID_PARAMS', 'Unknown native worker operation');
+    }
+    catch (error) {
+        if (error instanceof NativeSessionMethodError)
+            throw error;
+        throw new NativeSessionMethodError('NATIVE_SESSION_ERROR', error.message);
+    }
+}
+//# sourceMappingURL=worker-service.js.map

package/dist/native/worker-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-service.js","sourceRoot":"","sources":["../../src/native/worker-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA2B,EAC3B,KAAa,EACb,MAAc,EACd,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QAC3F,MAAM,IAAI,wBAAwB,CAChC,gBAAgB,EAChB,8CAA8C,CAC/C,CAAC;IACJ,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YACpC,CAAC,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAEvE,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;QAChG,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,aAAa,CAAC;YACtB,MAAM;YACN,KAAK;YACL,MAAM;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,EAAE,EAAE,MAAM,CAAC,SAAS;YACpB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB;YACvC,OAAO,MAAM,MAAM,CAAC,UAAU,CAC5B,KAAK,EACL,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,KAAK,CACd,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;YAC7C,MAAM,MAAM,CAAC,aAAa,CACxB,KAAK,EACL,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EACnF,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,CACjB,CAAC;YACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB;YACzC,OAAO,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;gBACtC,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,eAAe,EAAE,OAAO,CAAC,eAAe;aACzC,CAAC,CAAC;QACL,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB;YACzC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvF,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB;YACzC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvF,IACE,OAAO,CAAC,MAAM,KAAK,kBAAkB;YACrC,OAAO,CAAC,MAAM,KAAK,mBAAmB;YACtC,OAAO,CAAC,MAAM,KAAK,uBAAuB;YAC1C,OAAO,CAAC,MAAM,KAAK,sBAAsB,EACzC,CAAC;YACD,MAAM,MAAM,GAAG;gBACb,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB;gBACvC,OAAO,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACjF,IAAI,OAAO,CAAC,MAAM,KAAK,mBAAmB;gBACxC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB;gBAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjF,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,IAAI,wBAAwB,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,wBAAwB;YAAE,MAAM,KAAK,CAAC;QAC3D,MAAM,IAAI,wBAAwB,CAAC,sBAAsB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/task-init/discover.d.ts

@@ -0,0 +1,26 @@
+/**
+ * How deep under the tasks root a task directory may sit. Both documented
+ * shapes are depth 2; one extra level covers a grouped flow. The walk stops at
+ * a directory that qualifies, so a task's `artifacts/` (which mirrors task
+ * files) is never mistaken for a task of its own.
+ */
+export declare const TASK_DIR_SEARCH_DEPTH = 3;
+export interface DiscoveredTaskDir {
+    dir: string;
+    /** Latest modification of SIGNAL.json, or null when the task never signalled. */
+    signalMtimeMs: number | null;
+    /** Latest modification of CHECKLIST.md or TASK.md. */
+    checklistMtimeMs: number | null;
+}
+/** Every directory under `tasksRoot` that holds a signal or a checklist. */
+export declare function discoverTaskDirs(tasksRoot: string): DiscoveredTaskDir[];
+/**
+ * The task directory a reader lands on without naming one: the one written to
+ * last, by signal or by checklist. A checklist counts because between
+ * `task init` and the worker's first `mark start` the live task has no signal
+ * yet, and a reader must not fall back to the previous, finished task then.
+ * Equal times prefer the signalled task, then the lexically first path, so two
+ * readers of one checkout never land on different tasks.
+ */
+export declare function latestTaskDir(tasksRoot: string): string | undefined;
+//# sourceMappingURL=discover.d.ts.map

package/dist/task-init/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/task-init/discover.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,iFAAiF;IACjF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAYD,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAqBvE;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUnE"}