@memoraone/mcp 0.1.66 → 0.1.68

package/dist/daemon.cjs

@@ -232,6 +232,7 @@ function formatMissingInitializeWorkspaceError(options) {
 
 // src/socketPaths.ts
 var BASE_DIR = process.env.MEMORAONE_MCP_LOCK_DIR || path4.join(os2.homedir(), ".memoraone-mcp");
+var WINDOWS_PIPE_PREFIX = "\\\\.\\pipe\\memoraone-";
 var HASH_SOCKET_FILENAME_RE = new RegExp(
   `^mcp-[0-9a-f]{${BINDING_SOCKET_HASH_LENGTH}}\\.sock$`,
   "i"
@@ -316,6 +317,10 @@ function getBindingSocketFilename(binding, env2 = process.env, ideTypeOverride)
   return `mcp-${hash}.sock`;
 }
 function getBindingSocketPath(binding, env2 = process.env, ideTypeOverride) {
+  if (process.platform === "win32") {
+    const filename = getBindingSocketFilename(binding, env2, ideTypeOverride);
+    return `${WINDOWS_PIPE_PREFIX}${filename.slice(0, -".sock".length)}`;
+  }
   return path4.join(BASE_DIR, getBindingSocketFilename(binding, env2, ideTypeOverride));
 }
 function ensureBaseDir() {
@@ -805,12 +810,18 @@ async function readLinuxDeviceId() {
   throw new Error("[memoraone-mcp] Unable to read Linux machine-id");
 }
 async function readWindowsDeviceId() {
-  const { stdout } = await execFileAsync("reg", [
-    "query",
-    "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
-    "/v",
-    "MachineGuid"
-  ]);
+  const { stdout } = await execFileAsync(
+    "reg",
+    [
+      "query",
+      "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
+      "/v",
+      "MachineGuid"
+    ],
+    {
+      windowsHide: true
+    }
+  );
   const match = stdout.match(/MachineGuid\s+REG_SZ\s+(.+)/i);
   if (!match?.[1]) {
     throw new Error("[memoraone-mcp] Unable to read Windows MachineGuid");
@@ -4137,35 +4148,74 @@ var WINDOWS_LIST_PROCESSES_PS = [
   "  [Console]::Error.WriteLine([string]$_)",
   "  exit 1",
   "}",
-  "$currentIdentity = [string][System.Security.Principal.WindowsIdentity]::GetCurrent().Name",
-  "if ([string]::IsNullOrWhiteSpace($currentIdentity)) {",
-  '  throw "Unable to determine the current Windows identity."',
-  "}",
-  "$systemDirectory = [System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::System)",
-  "if ([string]::IsNullOrWhiteSpace($systemDirectory)) {",
-  '  throw "Unable to determine the Windows system directory."',
+  "$currentIdentity = [System.Security.Principal.WindowsIdentity]::GetCurrent()",
+  "$currentUserSid = [string]$currentIdentity.User.Value",
+  "if ([string]::IsNullOrWhiteSpace($currentUserSid)) {",
+  '  throw "Unable to determine the current Windows identity SID."',
   "}",
-  '$tasklistPath = [System.IO.Path]::Combine($systemDirectory, "tasklist.exe")',
-  '$tasklistArgs = @("/FI", "USERNAME eq $currentIdentity", "/FO", "CSV", "/NH")',
-  "$tasklistRows = @(& $tasklistPath $tasklistArgs)",
-  "$tasklistExitCode = $LASTEXITCODE",
-  "if ($tasklistExitCode -ne 0) {",
-  '  throw "tasklist.exe failed with exit code $tasklistExitCode."',
+  "$ownerLookupSource = @'",
+  "using System;",
+  "using System.Collections.Generic;",
+  "using System.Runtime.InteropServices;",
+  "using System.Security.Principal;",
+  "",
+  "public static class MemoraOneProcessOwner {",
+  "  private const uint ProcessQueryLimitedInformation = 0x1000;",
+  "  private const uint TokenQuery = 0x0008;",
+  "  private const int TokenUser = 1;",
+  "",
+  '  [DllImport("kernel32.dll", SetLastError = true)]',
+  "  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, int processId);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool OpenProcessToken(IntPtr processHandle, uint desiredAccess, out IntPtr tokenHandle);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool GetTokenInformation(IntPtr tokenHandle, int tokenInformationClass, IntPtr tokenInformation, int tokenInformationLength, out int returnLength);",
+  '  [DllImport("kernel32.dll")]',
+  "  private static extern bool CloseHandle(IntPtr handle);",
+  "",
+  "  public static int[] OwnedProcessIds(int[] processIds, string currentSid) {",
+  "    var expectedSid = new SecurityIdentifier(currentSid);",
+  "    var owned = new List<int>();",
+  "    foreach (int processId in processIds) {",
+  "      IntPtr processHandle = OpenProcess(ProcessQueryLimitedInformation, false, processId);",
+  "      if (processHandle == IntPtr.Zero) continue;",
+  "      try {",
+  "        IntPtr tokenHandle;",
+  "        if (!OpenProcessToken(processHandle, TokenQuery, out tokenHandle)) continue;",
+  "        try {",
+  "          int tokenLength;",
+  "          GetTokenInformation(tokenHandle, TokenUser, IntPtr.Zero, 0, out tokenLength);",
+  "          if (tokenLength <= 0) continue;",
+  "          IntPtr tokenBuffer = Marshal.AllocHGlobal(tokenLength);",
+  "          try {",
+  "            if (!GetTokenInformation(tokenHandle, TokenUser, tokenBuffer, tokenLength, out tokenLength)) continue;",
+  "            IntPtr sidPointer = Marshal.ReadIntPtr(tokenBuffer);",
+  "            if (expectedSid.Equals(new SecurityIdentifier(sidPointer))) owned.Add(processId);",
+  "          } finally {",
+  "            Marshal.FreeHGlobal(tokenBuffer);",
+  "          }",
+  "        } finally {",
+  "          CloseHandle(tokenHandle);",
+  "        }",
+  "      } finally {",
+  "        CloseHandle(processHandle);",
+  "      }",
+  "    }",
+  "    return owned.ToArray();",
+  "  }",
   "}",
+  "'@",
+  "Add-Type -TypeDefinition $ownerLookupSource -Language CSharp",
+  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
+  "$processIds = [int[]]@($processes | ForEach-Object { [int]$_.ProcessId })",
+  "$ownedProcessIds = [MemoraOneProcessOwner]::OwnedProcessIds($processIds, $currentUserSid)",
   '$currentUserPids = New-Object "System.Collections.Generic.HashSet[int]"',
-  "foreach ($tasklistRow in $tasklistRows) {",
-  "  if ([string]::IsNullOrWhiteSpace([string]$tasklistRow)) { continue }",
-  '  $task = $tasklistRow | ConvertFrom-Csv -Header "ImageName","ProcessId","SessionName","SessionNumber","MemoryUsage"',
-  "  $taskPid = 0",
-  "  if ($null -eq $task -or -not [int]::TryParse([string]$task.ProcessId, [ref]$taskPid) -or $taskPid -le 0) {",
-  '    throw "tasklist.exe returned an invalid process row."',
-  "  }",
-  "  $null = $currentUserPids.Add($taskPid)",
+  "foreach ($ownedProcessId in $ownedProcessIds) {",
+  "  $null = $currentUserPids.Add([int]$ownedProcessId)",
   "}",
   "if (-not $currentUserPids.Contains([int]$PID)) {",
-  '  throw "tasklist.exe results did not include the running PowerShell process."',
+  '  throw "Process token results did not include the running PowerShell process."',
   "}",
-  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
   "foreach ($proc in $processes) {",
   "  if ($null -eq $proc.ProcessId) { continue }",
   "  $procId = [int]$proc.ProcessId",
@@ -4252,7 +4302,8 @@ async function listProcessCommandLineRows(deps = {}) {
     const { file, args } = windowsProcessListInvocation();
     const { stdout: stdout2 } = await execFileImpl(file, args, {
       maxBuffer: PROCESS_LIST_MAX_BUFFER,
-      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS
+      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS,
+      windowsHide: true
     });
     return parseWindowsProcessJsonLines(stdoutToString(stdout2));
   }
@@ -8258,7 +8309,6 @@ function buildMemoraoneAntigravityMcpServer(options) {
       environment,
       apiUrl: options.apiUrl ?? (environment === "local" ? DEV_API_URL : void 0)
     }),
-    MEMORAONE_IDE_TYPE: "antigravity",
     [MEMORAONE_WORKSPACE_ROOT_ENV]: path36.resolve(options.workspaceRoot)
   };
   if (environment === "local" || options.devMode) {
@@ -12629,7 +12679,12 @@ function inferIdeType(params, options = {}) {
   const env2 = options.env ?? process.env;
   const argv = (options.argv ?? process.argv).join(" ").toLowerCase();
   const hasExplicitConfigOption = Object.prototype.hasOwnProperty.call(options, "configIdeType");
-  const explicitHint = hasExplicitConfigOption ? options.configIdeType : resolveIdeTypeFromEnv(env2) ?? config2.ideType;
+  const explicitIdentity = resolveIdeTypeFromEnv(env2) ?? parseIdeType(
+    hasExplicitConfigOption ? options.configIdeType : config2.ideType
+  );
+  if (explicitIdentity) {
+    return explicitIdentity;
+  }
   const fromClientInfo = mapReliableClientInfoName(params?.clientInfo?.name);
   if (fromClientInfo) {
     return fromClientInfo;
@@ -12638,9 +12693,6 @@ function inferIdeType(params, options = {}) {
   if (fromHost) {
     return fromHost;
   }
-  if (explicitHint) {
-    return explicitHint;
-  }
   const clientInfoName = String(params?.clientInfo?.name ?? "").toLowerCase();
   const clientInfoVersion = String(params?.clientInfo?.version ?? "").toLowerCase();
   const termProgram = String(env2.TERM_PROGRAM ?? "").toLowerCase();

package/dist/gateway.cjs

@@ -89,6 +89,7 @@ function formatMissingInitializeWorkspaceError(options) {
 
 // src/socketPaths.ts
 var BASE_DIR = process.env.MEMORAONE_MCP_LOCK_DIR || path2.join(os.homedir(), ".memoraone-mcp");
+var WINDOWS_PIPE_PREFIX = "\\\\.\\pipe\\memoraone-";
 var HASH_SOCKET_FILENAME_RE = new RegExp(
   `^mcp-[0-9a-f]{${BINDING_SOCKET_HASH_LENGTH}}\\.sock$`,
   "i"
@@ -166,6 +167,10 @@ function getBindingSocketFilename(binding, env2 = process.env, ideTypeOverride)
   return `mcp-${hash}.sock`;
 }
 function getBindingSocketPath(binding, env2 = process.env, ideTypeOverride) {
+  if (process.platform === "win32") {
+    const filename = getBindingSocketFilename(binding, env2, ideTypeOverride);
+    return `${WINDOWS_PIPE_PREFIX}${filename.slice(0, -".sock".length)}`;
+  }
   return path2.join(BASE_DIR, getBindingSocketFilename(binding, env2, ideTypeOverride));
 }
 function ensureBaseDir() {
@@ -1103,12 +1108,18 @@ async function readLinuxDeviceId() {
   throw new Error("[memoraone-mcp] Unable to read Linux machine-id");
 }
 async function readWindowsDeviceId() {
-  const { stdout } = await execFileAsync("reg", [
-    "query",
-    "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
-    "/v",
-    "MachineGuid"
-  ]);
+  const { stdout } = await execFileAsync(
+    "reg",
+    [
+      "query",
+      "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
+      "/v",
+      "MachineGuid"
+    ],
+    {
+      windowsHide: true
+    }
+  );
   const match = stdout.match(/MachineGuid\s+REG_SZ\s+(.+)/i);
   if (!match?.[1]) {
     throw new Error("[memoraone-mcp] Unable to read Windows MachineGuid");
@@ -1887,10 +1898,11 @@ async function parseGatewayWorkspaceRoot(wsRaw) {
   if (trimmed.includes("\0")) {
     return fail("malformed_ws", "ws query parameter is malformed");
   }
-  if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  const isAbsoluteFilesystemPath = path12.isAbsolute(trimmed);
+  if (!isAbsoluteFilesystemPath && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
     return fail("malformed_ws", "ws must be an absolute filesystem path");
   }
-  if (!path12.isAbsolute(trimmed)) {
+  if (!isAbsoluteFilesystemPath) {
     return fail("non_absolute", "ws must be an absolute workspace root");
   }
   const workspaceRoot = path12.resolve(trimmed);
@@ -3401,35 +3413,74 @@ var WINDOWS_LIST_PROCESSES_PS = [
   "  [Console]::Error.WriteLine([string]$_)",
   "  exit 1",
   "}",
-  "$currentIdentity = [string][System.Security.Principal.WindowsIdentity]::GetCurrent().Name",
-  "if ([string]::IsNullOrWhiteSpace($currentIdentity)) {",
-  '  throw "Unable to determine the current Windows identity."',
-  "}",
-  "$systemDirectory = [System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::System)",
-  "if ([string]::IsNullOrWhiteSpace($systemDirectory)) {",
-  '  throw "Unable to determine the Windows system directory."',
+  "$currentIdentity = [System.Security.Principal.WindowsIdentity]::GetCurrent()",
+  "$currentUserSid = [string]$currentIdentity.User.Value",
+  "if ([string]::IsNullOrWhiteSpace($currentUserSid)) {",
+  '  throw "Unable to determine the current Windows identity SID."',
   "}",
-  '$tasklistPath = [System.IO.Path]::Combine($systemDirectory, "tasklist.exe")',
-  '$tasklistArgs = @("/FI", "USERNAME eq $currentIdentity", "/FO", "CSV", "/NH")',
-  "$tasklistRows = @(& $tasklistPath $tasklistArgs)",
-  "$tasklistExitCode = $LASTEXITCODE",
-  "if ($tasklistExitCode -ne 0) {",
-  '  throw "tasklist.exe failed with exit code $tasklistExitCode."',
+  "$ownerLookupSource = @'",
+  "using System;",
+  "using System.Collections.Generic;",
+  "using System.Runtime.InteropServices;",
+  "using System.Security.Principal;",
+  "",
+  "public static class MemoraOneProcessOwner {",
+  "  private const uint ProcessQueryLimitedInformation = 0x1000;",
+  "  private const uint TokenQuery = 0x0008;",
+  "  private const int TokenUser = 1;",
+  "",
+  '  [DllImport("kernel32.dll", SetLastError = true)]',
+  "  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, int processId);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool OpenProcessToken(IntPtr processHandle, uint desiredAccess, out IntPtr tokenHandle);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool GetTokenInformation(IntPtr tokenHandle, int tokenInformationClass, IntPtr tokenInformation, int tokenInformationLength, out int returnLength);",
+  '  [DllImport("kernel32.dll")]',
+  "  private static extern bool CloseHandle(IntPtr handle);",
+  "",
+  "  public static int[] OwnedProcessIds(int[] processIds, string currentSid) {",
+  "    var expectedSid = new SecurityIdentifier(currentSid);",
+  "    var owned = new List<int>();",
+  "    foreach (int processId in processIds) {",
+  "      IntPtr processHandle = OpenProcess(ProcessQueryLimitedInformation, false, processId);",
+  "      if (processHandle == IntPtr.Zero) continue;",
+  "      try {",
+  "        IntPtr tokenHandle;",
+  "        if (!OpenProcessToken(processHandle, TokenQuery, out tokenHandle)) continue;",
+  "        try {",
+  "          int tokenLength;",
+  "          GetTokenInformation(tokenHandle, TokenUser, IntPtr.Zero, 0, out tokenLength);",
+  "          if (tokenLength <= 0) continue;",
+  "          IntPtr tokenBuffer = Marshal.AllocHGlobal(tokenLength);",
+  "          try {",
+  "            if (!GetTokenInformation(tokenHandle, TokenUser, tokenBuffer, tokenLength, out tokenLength)) continue;",
+  "            IntPtr sidPointer = Marshal.ReadIntPtr(tokenBuffer);",
+  "            if (expectedSid.Equals(new SecurityIdentifier(sidPointer))) owned.Add(processId);",
+  "          } finally {",
+  "            Marshal.FreeHGlobal(tokenBuffer);",
+  "          }",
+  "        } finally {",
+  "          CloseHandle(tokenHandle);",
+  "        }",
+  "      } finally {",
+  "        CloseHandle(processHandle);",
+  "      }",
+  "    }",
+  "    return owned.ToArray();",
+  "  }",
   "}",
+  "'@",
+  "Add-Type -TypeDefinition $ownerLookupSource -Language CSharp",
+  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
+  "$processIds = [int[]]@($processes | ForEach-Object { [int]$_.ProcessId })",
+  "$ownedProcessIds = [MemoraOneProcessOwner]::OwnedProcessIds($processIds, $currentUserSid)",
   '$currentUserPids = New-Object "System.Collections.Generic.HashSet[int]"',
-  "foreach ($tasklistRow in $tasklistRows) {",
-  "  if ([string]::IsNullOrWhiteSpace([string]$tasklistRow)) { continue }",
-  '  $task = $tasklistRow | ConvertFrom-Csv -Header "ImageName","ProcessId","SessionName","SessionNumber","MemoryUsage"',
-  "  $taskPid = 0",
-  "  if ($null -eq $task -or -not [int]::TryParse([string]$task.ProcessId, [ref]$taskPid) -or $taskPid -le 0) {",
-  '    throw "tasklist.exe returned an invalid process row."',
-  "  }",
-  "  $null = $currentUserPids.Add($taskPid)",
+  "foreach ($ownedProcessId in $ownedProcessIds) {",
+  "  $null = $currentUserPids.Add([int]$ownedProcessId)",
   "}",
   "if (-not $currentUserPids.Contains([int]$PID)) {",
-  '  throw "tasklist.exe results did not include the running PowerShell process."',
+  '  throw "Process token results did not include the running PowerShell process."',
   "}",
-  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
   "foreach ($proc in $processes) {",
   "  if ($null -eq $proc.ProcessId) { continue }",
   "  $procId = [int]$proc.ProcessId",
@@ -3516,7 +3567,8 @@ async function listProcessCommandLineRows(deps = {}) {
     const { file, args } = windowsProcessListInvocation();
     const { stdout: stdout2 } = await execFileImpl(file, args, {
       maxBuffer: PROCESS_LIST_MAX_BUFFER,
-      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS
+      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS,
+      windowsHide: true
     });
     return parseWindowsProcessJsonLines(stdoutToString(stdout2));
   }
@@ -7522,7 +7574,6 @@ function buildMemoraoneAntigravityMcpServer(options) {
       environment,
       apiUrl: options.apiUrl ?? (environment === "local" ? DEV_API_URL : void 0)
     }),
-    MEMORAONE_IDE_TYPE: "antigravity",
     [MEMORAONE_WORKSPACE_ROOT_ENV]: path38.resolve(options.workspaceRoot)
   };
   if (environment === "local" || options.devMode) {
@@ -13726,7 +13777,12 @@ function inferIdeType(params, options = {}) {
   const env2 = options.env ?? process.env;
   const argv = (options.argv ?? process.argv).join(" ").toLowerCase();
   const hasExplicitConfigOption = Object.prototype.hasOwnProperty.call(options, "configIdeType");
-  const explicitHint = hasExplicitConfigOption ? options.configIdeType : resolveIdeTypeFromEnv(env2) ?? config2.ideType;
+  const explicitIdentity = resolveIdeTypeFromEnv(env2) ?? parseIdeType(
+    hasExplicitConfigOption ? options.configIdeType : config2.ideType
+  );
+  if (explicitIdentity) {
+    return explicitIdentity;
+  }
   const fromClientInfo = mapReliableClientInfoName(params?.clientInfo?.name);
   if (fromClientInfo) {
     return fromClientInfo;
@@ -13735,9 +13791,6 @@ function inferIdeType(params, options = {}) {
   if (fromHost) {
     return fromHost;
   }
-  if (explicitHint) {
-    return explicitHint;
-  }
   const clientInfoName = String(params?.clientInfo?.name ?? "").toLowerCase();
   const clientInfoVersion = String(params?.clientInfo?.version ?? "").toLowerCase();
   const termProgram = String(env2.TERM_PROGRAM ?? "").toLowerCase();

package/dist/index.cjs

@@ -110,6 +110,7 @@ function formatMissingInitializeWorkspaceError(options) {
 
 // src/socketPaths.ts
 var BASE_DIR = process.env.MEMORAONE_MCP_LOCK_DIR || path2.join(os.homedir(), ".memoraone-mcp");
+var WINDOWS_PIPE_PREFIX = "\\\\.\\pipe\\memoraone-";
 var HASH_SOCKET_FILENAME_RE = new RegExp(
   `^mcp-[0-9a-f]{${BINDING_SOCKET_HASH_LENGTH}}\\.sock$`,
   "i"
@@ -187,6 +188,10 @@ function getBindingSocketFilename(binding, env2 = process.env, ideTypeOverride)
   return `mcp-${hash}.sock`;
 }
 function getBindingSocketPath(binding, env2 = process.env, ideTypeOverride) {
+  if (process.platform === "win32") {
+    const filename = getBindingSocketFilename(binding, env2, ideTypeOverride);
+    return `${WINDOWS_PIPE_PREFIX}${filename.slice(0, -".sock".length)}`;
+  }
   return path2.join(BASE_DIR, getBindingSocketFilename(binding, env2, ideTypeOverride));
 }
 function isHashSocketFilename(filename) {
@@ -1301,12 +1306,18 @@ async function readLinuxDeviceId() {
   throw new Error("[memoraone-mcp] Unable to read Linux machine-id");
 }
 async function readWindowsDeviceId() {
-  const { stdout } = await execFileAsync("reg", [
-    "query",
-    "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
-    "/v",
-    "MachineGuid"
-  ]);
+  const { stdout } = await execFileAsync(
+    "reg",
+    [
+      "query",
+      "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
+      "/v",
+      "MachineGuid"
+    ],
+    {
+      windowsHide: true
+    }
+  );
   const match = stdout.match(/MachineGuid\s+REG_SZ\s+(.+)/i);
   if (!match?.[1]) {
     throw new Error("[memoraone-mcp] Unable to read Windows MachineGuid");
@@ -4120,35 +4131,74 @@ var WINDOWS_LIST_PROCESSES_PS = [
   "  [Console]::Error.WriteLine([string]$_)",
   "  exit 1",
   "}",
-  "$currentIdentity = [string][System.Security.Principal.WindowsIdentity]::GetCurrent().Name",
-  "if ([string]::IsNullOrWhiteSpace($currentIdentity)) {",
-  '  throw "Unable to determine the current Windows identity."',
-  "}",
-  "$systemDirectory = [System.Environment]::GetFolderPath([System.Environment+SpecialFolder]::System)",
-  "if ([string]::IsNullOrWhiteSpace($systemDirectory)) {",
-  '  throw "Unable to determine the Windows system directory."',
+  "$currentIdentity = [System.Security.Principal.WindowsIdentity]::GetCurrent()",
+  "$currentUserSid = [string]$currentIdentity.User.Value",
+  "if ([string]::IsNullOrWhiteSpace($currentUserSid)) {",
+  '  throw "Unable to determine the current Windows identity SID."',
   "}",
-  '$tasklistPath = [System.IO.Path]::Combine($systemDirectory, "tasklist.exe")',
-  '$tasklistArgs = @("/FI", "USERNAME eq $currentIdentity", "/FO", "CSV", "/NH")',
-  "$tasklistRows = @(& $tasklistPath $tasklistArgs)",
-  "$tasklistExitCode = $LASTEXITCODE",
-  "if ($tasklistExitCode -ne 0) {",
-  '  throw "tasklist.exe failed with exit code $tasklistExitCode."',
+  "$ownerLookupSource = @'",
+  "using System;",
+  "using System.Collections.Generic;",
+  "using System.Runtime.InteropServices;",
+  "using System.Security.Principal;",
+  "",
+  "public static class MemoraOneProcessOwner {",
+  "  private const uint ProcessQueryLimitedInformation = 0x1000;",
+  "  private const uint TokenQuery = 0x0008;",
+  "  private const int TokenUser = 1;",
+  "",
+  '  [DllImport("kernel32.dll", SetLastError = true)]',
+  "  private static extern IntPtr OpenProcess(uint access, bool inheritHandle, int processId);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool OpenProcessToken(IntPtr processHandle, uint desiredAccess, out IntPtr tokenHandle);",
+  '  [DllImport("advapi32.dll", SetLastError = true)]',
+  "  private static extern bool GetTokenInformation(IntPtr tokenHandle, int tokenInformationClass, IntPtr tokenInformation, int tokenInformationLength, out int returnLength);",
+  '  [DllImport("kernel32.dll")]',
+  "  private static extern bool CloseHandle(IntPtr handle);",
+  "",
+  "  public static int[] OwnedProcessIds(int[] processIds, string currentSid) {",
+  "    var expectedSid = new SecurityIdentifier(currentSid);",
+  "    var owned = new List<int>();",
+  "    foreach (int processId in processIds) {",
+  "      IntPtr processHandle = OpenProcess(ProcessQueryLimitedInformation, false, processId);",
+  "      if (processHandle == IntPtr.Zero) continue;",
+  "      try {",
+  "        IntPtr tokenHandle;",
+  "        if (!OpenProcessToken(processHandle, TokenQuery, out tokenHandle)) continue;",
+  "        try {",
+  "          int tokenLength;",
+  "          GetTokenInformation(tokenHandle, TokenUser, IntPtr.Zero, 0, out tokenLength);",
+  "          if (tokenLength <= 0) continue;",
+  "          IntPtr tokenBuffer = Marshal.AllocHGlobal(tokenLength);",
+  "          try {",
+  "            if (!GetTokenInformation(tokenHandle, TokenUser, tokenBuffer, tokenLength, out tokenLength)) continue;",
+  "            IntPtr sidPointer = Marshal.ReadIntPtr(tokenBuffer);",
+  "            if (expectedSid.Equals(new SecurityIdentifier(sidPointer))) owned.Add(processId);",
+  "          } finally {",
+  "            Marshal.FreeHGlobal(tokenBuffer);",
+  "          }",
+  "        } finally {",
+  "          CloseHandle(tokenHandle);",
+  "        }",
+  "      } finally {",
+  "        CloseHandle(processHandle);",
+  "      }",
+  "    }",
+  "    return owned.ToArray();",
+  "  }",
   "}",
+  "'@",
+  "Add-Type -TypeDefinition $ownerLookupSource -Language CSharp",
+  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
+  "$processIds = [int[]]@($processes | ForEach-Object { [int]$_.ProcessId })",
+  "$ownedProcessIds = [MemoraOneProcessOwner]::OwnedProcessIds($processIds, $currentUserSid)",
   '$currentUserPids = New-Object "System.Collections.Generic.HashSet[int]"',
-  "foreach ($tasklistRow in $tasklistRows) {",
-  "  if ([string]::IsNullOrWhiteSpace([string]$tasklistRow)) { continue }",
-  '  $task = $tasklistRow | ConvertFrom-Csv -Header "ImageName","ProcessId","SessionName","SessionNumber","MemoryUsage"',
-  "  $taskPid = 0",
-  "  if ($null -eq $task -or -not [int]::TryParse([string]$task.ProcessId, [ref]$taskPid) -or $taskPid -le 0) {",
-  '    throw "tasklist.exe returned an invalid process row."',
-  "  }",
-  "  $null = $currentUserPids.Add($taskPid)",
+  "foreach ($ownedProcessId in $ownedProcessIds) {",
+  "  $null = $currentUserPids.Add([int]$ownedProcessId)",
   "}",
   "if (-not $currentUserPids.Contains([int]$PID)) {",
-  '  throw "tasklist.exe results did not include the running PowerShell process."',
+  '  throw "Process token results did not include the running PowerShell process."',
   "}",
-  "$processes = @(Get-CimInstance -ClassName Win32_Process -Property ProcessId,CommandLine)",
   "foreach ($proc in $processes) {",
   "  if ($null -eq $proc.ProcessId) { continue }",
   "  $procId = [int]$proc.ProcessId",
@@ -4235,7 +4285,8 @@ async function listProcessCommandLineRows(deps = {}) {
     const { file, args } = windowsProcessListInvocation();
     const { stdout: stdout2 } = await execFileImpl(file, args, {
       maxBuffer: PROCESS_LIST_MAX_BUFFER,
-      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS
+      timeout: WINDOWS_PROCESS_LIST_TIMEOUT_MS,
+      windowsHide: true
     });
     return parseWindowsProcessJsonLines(stdoutToString(stdout2));
   }
@@ -8241,7 +8292,6 @@ function buildMemoraoneAntigravityMcpServer(options) {
       environment,
       apiUrl: options.apiUrl ?? (environment === "local" ? DEV_API_URL : void 0)
     }),
-    MEMORAONE_IDE_TYPE: "antigravity",
     [MEMORAONE_WORKSPACE_ROOT_ENV]: path36.resolve(options.workspaceRoot)
   };
   if (environment === "local" || options.devMode) {
@@ -12612,7 +12662,12 @@ function inferIdeType(params, options = {}) {
   const env2 = options.env ?? process.env;
   const argv = (options.argv ?? process.argv).join(" ").toLowerCase();
   const hasExplicitConfigOption = Object.prototype.hasOwnProperty.call(options, "configIdeType");
-  const explicitHint = hasExplicitConfigOption ? options.configIdeType : resolveIdeTypeFromEnv(env2) ?? config2.ideType;
+  const explicitIdentity = resolveIdeTypeFromEnv(env2) ?? parseIdeType(
+    hasExplicitConfigOption ? options.configIdeType : config2.ideType
+  );
+  if (explicitIdentity) {
+    return explicitIdentity;
+  }
   const fromClientInfo = mapReliableClientInfoName(params?.clientInfo?.name);
   if (fromClientInfo) {
     return fromClientInfo;
@@ -12621,9 +12676,6 @@ function inferIdeType(params, options = {}) {
   if (fromHost) {
     return fromHost;
   }
-  if (explicitHint) {
-    return explicitHint;
-  }
   const clientInfoName = String(params?.clientInfo?.name ?? "").toLowerCase();
   const clientInfoVersion = String(params?.clientInfo?.version ?? "").toLowerCase();
   const termProgram = String(env2.TERM_PROGRAM ?? "").toLowerCase();