@fitlab-ai/agent-infra 0.10.0 → 0.11.1

package/templates/.agents/skills/review-plan/SKILL.en.md

@@ -83,7 +83,7 @@ Create `.agents/workspace/active/{task-id}/{review-artifact}`.
 
 ### 6. Update Task Status
 
-After the report, submit each new finding with `agent-infra-internal task-ledger {task-id} finding-upsert --stage plan --review-artifact {review-artifact} --ordinal {n} --severity {blocker|major|minor} --evidence {review-artifact}#{anchor}`; submit prior-response dispositions with `finding-review --id {ledger-id} --status {confirmed|closed|open|needs-human-decision} --evidence {evidence}`. Do not scan ids or edit ledger rows. After all ledger writes, make the initial call to `agent-infra-internal task-review {task-id} finalize-summary --stage plan --artifact {review-artifact} {execution-flag}`; after a failure, follow `.agents/rules/local-artifact-repair.md` to decide whether to edit and rerun, and never treat an error type or `changed=false` as automatic authorization.
+After the report, call `agent-infra-internal task-review {task-id} preflight --stage plan --artifact {review-artifact} {execution-flag}` before any ledger write. On failure, follow `.agents/rules/local-artifact-repair.md`; on success, bind `{recovery-id}` from the response. Only after preflight passes, submit each new finding with `agent-infra-internal task-ledger {task-id} finding-upsert --stage plan --review-artifact {review-artifact} --ordinal {n} --severity {blocker|major|minor} --evidence {review-artifact}#{anchor}` or prior-response dispositions with `finding-review --id {ledger-id} --status {confirmed|closed|open|needs-human-decision} --evidence {evidence}`. Do not scan ids or edit ledger rows. After all ledger writes, call `agent-infra-internal task-review {task-id} finalize-summary --stage plan --artifact {review-artifact} --recovery-id {recovery-id} {execution-flag}`; never treat an error type or `changed=false` as automatic authorization.
 
 Bind and reuse this structured mapping from that one response:
 

package/templates/.agents/skills/review-plan/SKILL.zh-CN.md

@@ -86,7 +86,7 @@ agent-infra-internal task-artifact {task-id} init --family review-plan --artifac
 
 ### 6. 更新任务状态
 
-报告完成后，新 finding 逐条调用 `agent-infra-internal task-ledger {task-id} finding-upsert --stage plan --review-artifact {review-artifact} --ordinal {n} --severity {blocker|major|minor} --evidence {review-artifact}#{anchor}`；复核上一轮响应时调用 `finding-review --id {ledger-id} --status {confirmed|closed|open|needs-human-decision} --evidence {相称证据}`。不得扫描编号或手写账本行。全部账本写入完成后首次调用 `agent-infra-internal task-review {task-id} finalize-summary --stage plan --artifact {review-artifact} {execution-flag}`；失败后是否继续编辑并重跑，必须遵循 `.agents/rules/local-artifact-repair.md`，不能把失败类型或 `changed=false` 当作自动授权。
+报告完成后，先调用 `agent-infra-internal task-review {task-id} preflight --stage plan --artifact {review-artifact} {execution-flag}`，不得先写入账本。失败后是否继续编辑并重跑，必须遵循 `.agents/rules/local-artifact-repair.md`；通过时从返回值绑定 `{recovery-id}`。只有 preflight 通过后，才逐条调用 `agent-infra-internal task-ledger {task-id} finding-upsert --stage plan --review-artifact {review-artifact} --ordinal {n} --severity {blocker|major|minor} --evidence {review-artifact}#{anchor}`，或复核上一轮响应时调用 `finding-review --id {ledger-id} --status {confirmed|closed|open|needs-human-decision} --evidence {相称证据}`。不得扫描编号或手写账本行。全部账本写入完成后调用 `agent-infra-internal task-review {task-id} finalize-summary --stage plan --artifact {review-artifact} --recovery-id {recovery-id} {execution-flag}`；不能把失败类型或 `changed=false` 当作自动授权。
 
 从该次返回值绑定并复用以下结构化映射：
 

package/templates/.agents/skills/review-plan/config/verify.en.json

@@ -27,16 +27,7 @@
       "expected_action_pattern": "(Review Plan|Plan Review) \\(Round \\d+\\)"
     },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_status_label": "status: pending-design-work",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": true,
-      "verify_issue_fields": false,
-      "verify_milestone": true,
-      "expected_status_label_key": "pendingDesignWork",
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/templates/.agents/skills/review-plan/config/verify.zh-CN.json

@@ -27,16 +27,7 @@
       "expected_action_pattern": "(Review Plan|Plan Review) \\(Round \\d+\\)"
     },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_status_label": "status: pending-design-work",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": true,
-      "verify_issue_fields": false,
-      "verify_milestone": true,
-      "expected_status_label_key": "pendingDesignWork",
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/templates/.agents/skills/review-plan/reference/report-template.en.md

@@ -4,6 +4,8 @@
 
 Use this template when writing `review-plan.md` or `review-plan-r{N}.md`.
 
+> The `Review Input` field provides reader-facing traceability. Lifecycle identity uses the input frozen by `review-plan.started` and the completion receipt; it is not parsed from this report body.
+
 ## Output Template
 
 ```markdown

package/templates/.agents/skills/review-plan/reference/report-template.zh-CN.md

@@ -4,6 +4,8 @@
 
 编写 `review-plan.md` 或 `review-plan-r{N}.md` 时使用本模板。
 
+> “审查输入”字段用于读者追溯。生命周期身份以 `review-plan.started` 冻结的输入和完成 receipt 为准，不从本报告正文解析。
+
 ## 输出模板
 
 ```markdown

package/templates/.agents/skills/review-pr/config/verify.en.json

@@ -24,14 +24,7 @@
       "expected_action_pattern": "Review PR \\(Round \\d+\\)"
     },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": false,
-      "verify_issue_fields": false,
-      "verify_milestone": false,
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/templates/.agents/skills/review-pr/config/verify.zh-CN.json

@@ -24,14 +24,7 @@
       "expected_action_pattern": "Review PR \\(Round \\d+\\)"
     },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": false,
-      "verify_issue_fields": false,
-      "verify_milestone": false,
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/templates/.agents/skills/run-manual-validation/config/verify.en.json

@@ -2,24 +2,49 @@
   "skill": "run-manual-validation",
   "checks": {
     "task-meta": {
-      "required_fields": ["id", "type", "workflow", "status", "created_at", "updated_at", "agent_infra_version", "current_step", "assigned_to"]
+      "required_fields": [
+        "id",
+        "type",
+        "workflow",
+        "status",
+        "created_at",
+        "updated_at",
+        "agent_infra_version",
+        "current_step",
+        "assigned_to"
+      ]
     },
     "artifact": {
       "file_pattern": "validation-run.md|validation-run-r{N}.md",
-      "required_sections": ["Input Mode", "State Check", "Validation Target", "Discovered Items", "Mode Decision", "Command Summary", "Structured Evidence", "Per-item Results", "Cleanup and Recovery", "Remaining Coverage", "Raw Evidence"],
-      "required_patterns": ["^\\$ "]
+      "required_sections": [
+        "Input Mode",
+        "State Check",
+        "Validation Target",
+        "Discovered Items",
+        "Mode Decision",
+        "Command Summary",
+        "Structured Evidence",
+        "Per-item Results",
+        "Cleanup and Recovery",
+        "Remaining Coverage",
+        "Raw Evidence"
+      ],
+      "required_patterns": [
+        "^\\$ "
+      ]
+    },
+    "activity-log": {
+      "expected_action_pattern": "Run Manual Validation \\(Round \\d+\\)"
+    },
+    "review-ledger": {
+      "stage_scope": [
+        "analysis",
+        "plan",
+        "code"
+      ]
     },
-    "activity-log": { "expected_action_pattern": "Run Manual Validation \\(Round \\d+\\)" },
-    "review-ledger": { "stage_scope": ["analysis", "plan", "code"] },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": true,
-      "verify_issue_fields": false,
-      "verify_milestone": true,
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/templates/.agents/skills/run-manual-validation/config/verify.zh-CN.json

@@ -2,24 +2,49 @@
   "skill": "run-manual-validation",
   "checks": {
     "task-meta": {
-      "required_fields": ["id", "type", "workflow", "status", "created_at", "updated_at", "agent_infra_version", "current_step", "assigned_to"]
+      "required_fields": [
+        "id",
+        "type",
+        "workflow",
+        "status",
+        "created_at",
+        "updated_at",
+        "agent_infra_version",
+        "current_step",
+        "assigned_to"
+      ]
     },
     "artifact": {
       "file_pattern": "validation-run.md|validation-run-r{N}.md",
-      "required_sections": ["输入模式", "状态核对", "验证目标", "发现清单", "模式判定", "命令摘要", "结构化证据", "逐项结果", "清理与恢复", "尚未覆盖", "证据原文"],
-      "required_patterns": ["^\\$ "]
+      "required_sections": [
+        "输入模式",
+        "状态核对",
+        "验证目标",
+        "发现清单",
+        "模式判定",
+        "命令摘要",
+        "结构化证据",
+        "逐项结果",
+        "清理与恢复",
+        "尚未覆盖",
+        "证据原文"
+      ],
+      "required_patterns": [
+        "^\\$ "
+      ]
+    },
+    "activity-log": {
+      "expected_action_pattern": "Run Manual Validation \\(Round \\d+\\)"
+    },
+    "review-ledger": {
+      "stage_scope": [
+        "analysis",
+        "plan",
+        "code"
+      ]
     },
-    "activity-log": { "expected_action_pattern": "Run Manual Validation \\(Round \\d+\\)" },
-    "review-ledger": { "stage_scope": ["analysis", "plan", "code"] },
     "platform-sync": {
-      "when": "platform_issue_identity_exists",
-      "expected_comment_marker": "<!-- sync-issue:{task-id}:{artifact-stem} -->",
-      "verify_comment_content": true,
-      "verify_task_comment_content": true,
-      "verify_issue_type": true,
-      "verify_issue_fields": false,
-      "verify_milestone": true,
-      "expected_comment_marker_key": "artifact"
+      "when": "platform_issue_identity_exists"
     }
   }
 }

package/dist/lib/host-control/audit.js

@@ -1,19 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-export const HOST_CONTROL_AUDIT_FILE = 'audit.ndjson';
-export function hostControlAuditPath(endpoint) {
-    return path.join(path.dirname(endpoint), HOST_CONTROL_AUDIT_FILE);
-}
-export function appendHostControlAudit(endpoint, entry, at = Date.now()) {
-    const filePath = hostControlAuditPath(endpoint);
-    const descriptor = fs.openSync(filePath, 'a', 0o600);
-    try {
-        fs.fchmodSync(descriptor, 0o600);
-        fs.writeFileSync(descriptor, `${JSON.stringify({ version: 1, at, ...entry })}\n`, 'utf8');
-        fs.fsyncSync(descriptor);
-    }
-    finally {
-        fs.closeSync(descriptor);
-    }
-}
-//# sourceMappingURL=audit.js.map

package/dist/lib/host-control/client.js

@@ -1,142 +0,0 @@
-import net from 'node:net';
-import { randomUUID } from 'node:crypto';
-import { inspectHostControlEndpoint, resolveHostControlEndpoint } from './path.js';
-export const HOST_CONTROL_MAX_REQUEST_BYTES = 64 * 1024;
-export const HOST_CONTROL_COMMANDS = Object.freeze([
-    'task-lifecycle', 'task-orchestration', 'task-finalization',
-    'task-artifact', 'task-review', 'task-event', 'task-ledger',
-    'task-invalidation', 'task-warning'
-]);
-export const HOST_CONTROL_TEST_ENVIRONMENT_KEYS = Object.freeze([
-    'TZ', 'AGENT_INFRA_GH_BIN', 'AGENT_INFRA_GH_ARGS_JSON', 'GH_FAKE_PR_PATH', 'GH_FAKE_ARGS_PATH'
-]);
-export class HostControlClientError extends Error {
-    code;
-    retryable;
-    changed;
-    constructor(code, message, retryable = false, submitted = false) {
-        super(`${code}: ${message}`);
-        this.name = 'HostControlClientError';
-        this.code = code;
-        this.retryable = retryable && !submitted;
-        this.changed = submitted ? null : false;
-    }
-}
-function reject(message) {
-    throw new HostControlClientError('HOST_CONTROL_REQUEST_INVALID', message);
-}
-export function validateHostControlRequest(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        reject('request must be an object');
-    const request = value;
-    if (Object.keys(request).sort().join(',') !== 'generation,id,operation,payload,scope,taskId,version'
-        || request.version !== 1 || typeof request.id !== 'string' || !/^[a-f0-9-]{16,64}$/u.test(request.id)
-        || (request.taskId !== null && (typeof request.taskId !== 'string' || !/^TASK-\d{8}-\d{6}$/u.test(request.taskId)))
-        || (request.generation !== null && (typeof request.generation !== 'string' || !request.generation))
-        || request.scope !== 'host-command' || !HOST_CONTROL_COMMANDS.includes(request.operation))
-        reject('request schema is invalid');
-    const payload = request.payload;
-    if (!payload || typeof payload !== 'object' || Array.isArray(payload)
-        || !['args,environment,workingDirectory', 'args,workingDirectory'].includes(Object.keys(payload).sort().join(','))
-        || !Array.isArray(payload.args) || payload.args.length > 128
-        || !payload.args.every((arg) => typeof arg === 'string' && !/[\r\n]/u.test(arg))
-        || typeof payload.workingDirectory !== 'string' || !payload.workingDirectory.startsWith('/'))
-        reject('host-command payload is invalid');
-    if (payload.environment !== undefined) {
-        if (!payload.environment || typeof payload.environment !== 'object' || Array.isArray(payload.environment))
-            reject('host-command environment is invalid');
-        for (const [key, value] of Object.entries(payload.environment)) {
-            if (!HOST_CONTROL_TEST_ENVIRONMENT_KEYS.includes(key)
-                || typeof value !== 'string' || /[\r\n]/u.test(value))
-                reject('host-command environment is invalid');
-        }
-    }
-    return request;
-}
-export function hostControlRequestForCommand(command, args, workingDirectory, environment = {}) {
-    if (!HOST_CONTROL_COMMANDS.includes(command))
-        reject('host-command is unsupported');
-    const taskArg = args[0];
-    const taskId = taskArg && /^TASK-\d{8}-\d{6}$/u.test(taskArg) ? taskArg : null;
-    return validateHostControlRequest({
-        version: 1,
-        id: randomUUID(),
-        taskId,
-        generation: null,
-        operation: command,
-        scope: 'host-command',
-        payload: {
-            workingDirectory,
-            args: [...args],
-            ...(Object.keys(environment).length > 0 ? { environment } : {})
-        }
-    });
-}
-function parseResponse(value, id) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        throw new HostControlClientError('HOST_CONTROL_RESPONSE_INVALID', 'response must be an object');
-    const response = value;
-    if (Object.keys(response).sort().join(',') !== 'error,exitCode,id,status,stderr,stdout,version'
-        || response.version !== 1 || response.id !== id
-        || !['completed', 'rejected', 'unknown'].includes(response.status)
-        || !Number.isSafeInteger(response.exitCode)
-        || typeof response.stdout !== 'string' || typeof response.stderr !== 'string'
-        || (response.error !== null && (!response.error || typeof response.error !== 'object'))) {
-        throw new HostControlClientError('HOST_CONTROL_RESPONSE_INVALID', 'response schema is invalid');
-    }
-    return response;
-}
-export async function requestHostControl(params) {
-    const request = validateHostControlRequest(params.request);
-    const endpoint = params.endpoint ?? resolveHostControlEndpoint();
-    const inspection = inspectHostControlEndpoint(endpoint, { uid: process.getuid?.() });
-    if (!inspection.ok)
-        throw new HostControlClientError(inspection.code ?? 'HOST_CONTROL_UNAVAILABLE', 'fixed host-control endpoint is unavailable', true);
-    const encoded = `${JSON.stringify(request)}\n`;
-    if (Buffer.byteLength(encoded, 'utf8') > HOST_CONTROL_MAX_REQUEST_BYTES)
-        throw new HostControlClientError('HOST_CONTROL_REQUEST_TOO_LARGE', 'request exceeds the control limit');
-    const timeoutMs = params.timeoutMs ?? 30_000;
-    return await new Promise((resolve, rejectPromise) => {
-        const socket = net.createConnection(endpoint);
-        let output = '';
-        let settled = false;
-        let submitted = false;
-        const failure = (code, message, retryable = false) => new HostControlClientError(code, message, retryable, submitted);
-        const finish = (error, response) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            socket.destroy();
-            if (error)
-                rejectPromise(error);
-            else
-                resolve(response);
-        };
-        const timer = setTimeout(() => finish(failure('HOST_CONTROL_TIMEOUT', 'host-control did not respond; inspect task state before retrying', true)), timeoutMs);
-        socket.setEncoding('utf8');
-        socket.on('connect', () => { submitted = true; socket.end(encoded); });
-        socket.on('data', (chunk) => {
-            output += chunk;
-            if (Buffer.byteLength(output, 'utf8') > HOST_CONTROL_MAX_REQUEST_BYTES) {
-                finish(failure('HOST_CONTROL_RESPONSE_TOO_LARGE', 'host-control response exceeds the control limit'));
-                return;
-            }
-            const newline = output.indexOf('\n');
-            if (newline < 0)
-                return;
-            try {
-                finish(undefined, parseResponse(JSON.parse(output.slice(0, newline)), request.id));
-            }
-            catch (error) {
-                finish(failure('HOST_CONTROL_RESPONSE_INVALID', String(error)));
-            }
-        });
-        socket.on('error', (error) => finish(failure('HOST_CONTROL_UNAVAILABLE', error.message, true)));
-        socket.on('close', () => {
-            if (!settled)
-                finish(failure('HOST_CONTROL_RESPONSE_INVALID', 'host-control closed without a response'));
-        });
-    });
-}
-//# sourceMappingURL=client.js.map

package/dist/lib/host-control/command.js

@@ -1,49 +0,0 @@
-import { spawn } from 'node:child_process';
-import fs from 'node:fs';
-import { fileURLToPath } from 'node:url';
-import { readHostControlWorkerToken, resolveHostControlEndpoint } from './path.js';
-export async function dispatchHostControlCommand(request) {
-    const { payload } = request;
-    const compiledEntry = fileURLToPath(new URL('../../bin/internal-cli.js', import.meta.url));
-    const sourceEntry = fileURLToPath(new URL('../../bin/internal-cli.ts', import.meta.url));
-    const entry = fs.existsSync(compiledEntry) ? compiledEntry : sourceEntry;
-    const payloadEnvironment = payload.environment ?? {};
-    const env = { ...process.env, ...payloadEnvironment };
-    for (const key of Object.keys(env)) {
-        if (key.startsWith('AGENT_INFRA_CONTROL_')
-            || key === 'AGENT_INFRA_TASK_ID'
-            || key === 'AGENT_INFRA_RUNTIME_DIR'
-            || key === 'AGENT_INFRA_EXECUTOR_MANIFEST'
-            || key === 'AGENT_INFRA_HOST_CONTROL_SOCKET') {
-            delete env[key];
-        }
-    }
-    delete env.NODE_OPTIONS;
-    delete env.NODE_PATH;
-    delete env.AGENT_INFRA_HOST_CONTROL_WORKER;
-    delete env.AGENT_INFRA_HOST_CONTROL_WORKER_TOKEN;
-    env.AGENT_INFRA_HOST_CONTROL_WORKER = '1';
-    env.AGENT_INFRA_HOST_CONTROL_WORKER_TOKEN = readHostControlWorkerToken(process.env.AGENT_INFRA_TEST_HOST_CONTROL_ENDPOINT ?? resolveHostControlEndpoint());
-    return await new Promise((resolve, reject) => {
-        const runtimeArgs = entry.endsWith('.ts') ? ['--experimental-strip-types', '--no-warnings', entry] : [entry];
-        const child = spawn(process.execPath, [...runtimeArgs, request.operation, ...payload.args], {
-            cwd: payload.workingDirectory,
-            env,
-            stdio: ['ignore', 'pipe', 'pipe']
-        });
-        let stdout = '';
-        let stderr = '';
-        child.stdout.setEncoding('utf8');
-        child.stderr.setEncoding('utf8');
-        child.stdout.on('data', (chunk) => { stdout += chunk; });
-        child.stderr.on('data', (chunk) => { stderr += chunk; });
-        child.once('error', reject);
-        child.once('close', (code, signal) => {
-            if (signal)
-                reject(new Error(`HOST_CONTROL_WORKER_TERMINATED: ${signal}`));
-            else
-                resolve({ stdout, stderr, exitCode: code ?? 1 });
-        });
-    });
-}
-//# sourceMappingURL=command.js.map

package/dist/lib/host-control/path.js

@@ -1,160 +0,0 @@
-import fs from 'node:fs';
-import { randomBytes } from 'node:crypto';
-import os from 'node:os';
-import path from 'node:path';
-export const HOST_CONTROL_DIRECTORY_MODE = 0o700;
-export const HOST_CONTROL_SOCKET_MODE = 0o600;
-export const HOST_CONTROL_WORKER_TOKEN_MODE = 0o600;
-function currentPlatform() {
-    if (process.platform === 'linux' || process.platform === 'darwin')
-        return process.platform;
-    return 'unsupported';
-}
-function validUid(uid) {
-    const resolved = uid ?? process.getuid?.();
-    if (!Number.isInteger(resolved) || resolved === undefined || resolved < 0) {
-        throw new Error('HOST_CONTROL_ENDPOINT_INVALID: uid is unavailable');
-    }
-    return resolved;
-}
-function validUsername(username) {
-    const resolved = username ?? os.userInfo({ encoding: 'utf8' }).username;
-    if (!/^[A-Za-z0-9._-]+$/u.test(resolved)) {
-        throw new Error('HOST_CONTROL_ENDPOINT_INVALID: username is invalid');
-    }
-    return resolved;
-}
-export function resolveHostControlEndpoint(options = {}) {
-    const platform = options.platform ?? currentPlatform();
-    if (platform === 'linux')
-        return `/run/user/${validUid(options.uid)}/agent-infra/host-control.sock`;
-    if (platform === 'darwin')
-        return path.posix.join('/Users', validUsername(options.username), 'Library', 'Application Support', 'agent-infra', 'run', 'host-control.sock');
-    throw new Error('HOST_CONTROL_UNSUPPORTED_PLATFORM');
-}
-export function hostControlWorkerTokenPath(endpoint) {
-    return `${endpoint}.worker-token`;
-}
-function assertWorkerTokenFile(tokenPath, uid = process.getuid?.()) {
-    const stat = fs.lstatSync(tokenPath);
-    if (stat.isSymbolicLink() || !stat.isFile())
-        throw new Error('HOST_CONTROL_WORKER_TOKEN_INVALID');
-    if ((stat.mode & 0o777) !== HOST_CONTROL_WORKER_TOKEN_MODE)
-        throw new Error('HOST_CONTROL_WORKER_TOKEN_MODE_INVALID');
-    if (uid !== undefined && stat.uid !== uid)
-        throw new Error('HOST_CONTROL_WORKER_TOKEN_OWNER_INVALID');
-    const token = fs.readFileSync(tokenPath, 'utf8').trim();
-    if (!/^[a-f0-9]{64}$/u.test(token))
-        throw new Error('HOST_CONTROL_WORKER_TOKEN_INVALID');
-    return token;
-}
-export function ensureHostControlWorkerToken(endpoint, uid = process.getuid?.()) {
-    const tokenPath = hostControlWorkerTokenPath(endpoint);
-    try {
-        return assertWorkerTokenFile(tokenPath, uid);
-    }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-    }
-    const token = randomBytes(32).toString('hex');
-    try {
-        const fd = fs.openSync(tokenPath, 'wx', HOST_CONTROL_WORKER_TOKEN_MODE);
-        try {
-            fs.writeFileSync(fd, `${token}\n`, 'utf8');
-            fs.fchmodSync(fd, HOST_CONTROL_WORKER_TOKEN_MODE);
-            if (uid !== undefined && process.getuid?.() === uid)
-                fs.fchownSync(fd, uid, process.getgid?.() ?? -1);
-        }
-        finally {
-            fs.closeSync(fd);
-        }
-    }
-    catch (error) {
-        if (error.code !== 'EEXIST')
-            throw error;
-    }
-    return assertWorkerTokenFile(tokenPath, uid);
-}
-export function readHostControlWorkerToken(endpoint, uid = process.getuid?.()) {
-    return assertWorkerTokenFile(hostControlWorkerTokenPath(endpoint), uid);
-}
-export function removeHostControlWorkerToken(endpoint) {
-    try {
-        fs.unlinkSync(hostControlWorkerTokenPath(endpoint));
-    }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-    }
-}
-export function inspectHostControlEndpoint(endpoint, expected = {}) {
-    let endpointStat;
-    let parentStat;
-    try {
-        endpointStat = fs.lstatSync(endpoint);
-        parentStat = fs.lstatSync(path.dirname(endpoint));
-    }
-    catch {
-        return { ok: false, code: 'HOST_CONTROL_ENDPOINT_MISSING' };
-    }
-    if (endpointStat.isSymbolicLink())
-        return { ok: false, code: 'HOST_CONTROL_ENDPOINT_SYMLINK' };
-    if (!endpointStat.isSocket())
-        return { ok: false, code: 'HOST_CONTROL_ENDPOINT_NOT_SOCKET' };
-    if (!parentStat.isDirectory() || parentStat.isSymbolicLink()) {
-        return { ok: false, code: 'HOST_CONTROL_PARENT_INVALID' };
-    }
-    let ancestor = path.dirname(endpoint);
-    while (true) {
-        let stat;
-        try {
-            stat = fs.lstatSync(ancestor);
-        }
-        catch {
-            return { ok: false, code: 'HOST_CONTROL_PARENT_INVALID' };
-        }
-        if (!stat.isDirectory() || stat.isSymbolicLink())
-            return { ok: false, code: 'HOST_CONTROL_PARENT_INVALID' };
-        const next = path.dirname(ancestor);
-        if (next === ancestor)
-            break;
-        ancestor = next;
-    }
-    const mode = endpointStat.mode & 0o777;
-    const parentMode = parentStat.mode & 0o777;
-    if (mode !== HOST_CONTROL_SOCKET_MODE)
-        return { ok: false, code: 'HOST_CONTROL_ENDPOINT_MODE_INVALID', ownerUid: endpointStat.uid, mode, parentMode };
-    if (parentMode !== HOST_CONTROL_DIRECTORY_MODE)
-        return { ok: false, code: 'HOST_CONTROL_PARENT_MODE_INVALID', ownerUid: endpointStat.uid, mode, parentMode };
-    if (expected.uid !== undefined && endpointStat.uid !== expected.uid) {
-        return { ok: false, code: 'HOST_CONTROL_ENDPOINT_OWNER_INVALID', ownerUid: endpointStat.uid, mode, parentMode };
-    }
-    if (expected.uid !== undefined && parentStat.uid !== expected.uid) {
-        return { ok: false, code: 'HOST_CONTROL_PARENT_OWNER_INVALID', ownerUid: parentStat.uid, mode, parentMode };
-    }
-    return { ok: true, code: null, ownerUid: endpointStat.uid, mode, parentMode };
-}
-export function prepareHostControlDirectory(endpoint, uid = process.getuid?.()) {
-    const directory = path.dirname(endpoint);
-    const segments = path.resolve(directory).split(path.sep);
-    let current = path.isAbsolute(directory) ? path.sep : '';
-    for (const segment of segments.filter(Boolean)) {
-        current = path.join(current, segment);
-        try {
-            const stat = fs.lstatSync(current);
-            if (!stat.isDirectory() || stat.isSymbolicLink())
-                throw new Error('HOST_CONTROL_PARENT_INVALID');
-        }
-        catch (error) {
-            if (error.code !== 'ENOENT')
-                throw error;
-        }
-    }
-    fs.mkdirSync(directory, { recursive: true, mode: HOST_CONTROL_DIRECTORY_MODE });
-    fs.chmodSync(directory, HOST_CONTROL_DIRECTORY_MODE);
-    if (uid !== undefined && process.getuid?.() === uid)
-        fs.chownSync(directory, uid, process.getgid?.() ?? -1);
-    return directory;
-}
-//# sourceMappingURL=path.js.map