@mono-agent/agent-app 0.19.1 → 0.20.0

package/dist/background-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"background-runtime.d.ts","sourceRoot":"","sources":["../src/background-runtime.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAM5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAgB3F,MAAM,MAAM,8BAA8B,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;IAC1D,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,mFAAmF;IACnF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wCAAwC;IACvD,yEAAyE;IACzE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,uFAAuF;IACvF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mFAAmF;IACnF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,gGAAgG;AAChG,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0GAA0G;IAC1G,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;CAC1E;AAED,qFAAqF;AACrF,MAAM,WAAW,wCAAwC;IACvD,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;CAC1E;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,EAAE,2CAA2C,CAAC;IAC7D,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,uCAAuC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACxE,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,8DAA8D;IAC9D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,sBAAsB,CAAC;CAC5D;AAuKD,wBAAgB,mCAAmC,IAAI,4BAA4B,CASlF;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,IAAI,CAUN;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,6BAA6B,EACpC,IAAI,GAAE,4BAAoE,GACzE,OAAO,CAAC,wBAAwB,CAAC,CA6NnC;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CACvD,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CAgBvC;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,gCAAgC,CAAC,CAgE3C;AA6DD;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,KAAK,EAAE,yCAAyC,EAChD,IAAI,GAAE,wCAA6C,GAClD,OAAO,CAAC,OAAO,CAAC,CAiFlB;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,wCAAwC,EAC/C,IAAI,GAAE,uCAA4C,GACjD,OAAO,CAAC,mCAAmC,CAAC,CAyF9C"}
+{"version":3,"file":"background-runtime.d.ts","sourceRoot":"","sources":["../src/background-runtime.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAM5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAmB3F,MAAM,MAAM,8BAA8B,GAAG,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;IAC1D,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gCAAgC;IAC/C,mFAAmF;IACnF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wCAAwC;IACvD,yEAAyE;IACzE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,uFAAuF;IACvF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mFAAmF;IACnF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,gGAAgG;AAChG,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,0GAA0G;IAC1G,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;CAC1E;AAED,qFAAqF;AACrF,MAAM,WAAW,wCAAwC;IACvD,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,qDAAqD;IACrD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;CAC1E;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,MAAM,EAAE,2CAA2C,CAAC;IAC7D,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,UAAU,uCAAuC;IAC/C,yEAAyE;IACzE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACxE,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,8DAA8D;IAC9D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,sBAAsB,CAAC;CAC5D;AAwKD,wBAAgB,mCAAmC,IAAI,4BAA4B,CASlF;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,IAAI,CAUN;AAED;;;;;GAKG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,6BAA6B,EACpC,IAAI,GAAE,4BAAoE,GACzE,OAAO,CAAC,wBAAwB,CAAC,CA6NnC;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CACvD,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,4BAA4B,CAAC,CAgBvC;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,gCAAgC,CAAC,CAsE3C;AAUD;;;;;GAKG;AACH,wBAAsB,wCAAwC,CAC5D,KAAK,EAAE,yCAAyC,EAChD,IAAI,GAAE,wCAA6C,GAClD,OAAO,CAAC,OAAO,CAAC,CAiFlB;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,wCAAwC,EAC/C,IAAI,GAAE,uCAA4C,GACjD,OAAO,CAAC,mCAAmC,CAAC,CAyF9C"}

package/dist/background-runtime.js

@@ -8,6 +8,8 @@ import { isBackgroundOperationalEnvName, MANAGED_BACKGROUND_WORKER_ENV, } from "
 export { MANAGED_BACKGROUND_WORKER_ENV } from "./background-environment.js";
 import { currentProcessIncarnation, isSameProcessIncarnation as matchesProcessIncarnation, processIncarnationFromJson, } from "./process-incarnation.js";
 import { acquireOwnerPrivateLock } from "./owner-private-lock.js";
+import { decodeManagedRuntimeLaunchProof, encodeManagedRuntimeLaunchProof, } from "./managed-runtime-launch-proof.js";
+import { MANAGED_LAUNCHD_MAINTENANCE_ENTRY_FILE } from "./launchd-maintenance-command.js";
 const PACKAGE_NAME = "@mono-agent/agent-app";
 const LOCK_WAIT_TIMEOUT_MS = 5 * 60_000;
 const LOCK_STALE_AFTER_MS = 5 * 60_000;
@@ -17,8 +19,6 @@ const MAX_RUNTIME_MARKER_BYTES = 16 * 1024;
 const MAX_RUNTIME_REUSE_PROOF_BYTES = 64 * 1024 * 1024;
 const RUNTIME_REUSE_PROOF_SCHEMA = "mono-agent.managed-runtime-reuse-proof.v1";
 const RUNTIME_REUSE_STAT_CONCURRENCY = 64;
-const MANAGED_RUNTIME_LAUNCH_PROOF_SCHEMA = "mono-agent.managed-runtime-launch.v1";
-const MAX_MANAGED_RUNTIME_LAUNCH_PROOF_BYTES = 2 * 1024;
 export function defaultManagedBackgroundRuntimeDeps() {
     return {
         now: () => Date.now(),
@@ -290,6 +290,9 @@ export async function verifyManagedRuntimeLaunch(input) {
     if (!(await verifyManagedRuntimeCliFingerprint(layout, identity.cliSha256))) {
         throw new Error("The managed runtime CLI fingerprint is unstable.");
     }
+    if (!(await verifyManagedRuntimeMaintenanceEntryFingerprint(layout, proof.maintenanceEntrySha256))) {
+        throw new Error("The managed runtime maintenance entry fingerprint is invalid.");
+    }
     if (!(await verifyClosureManifestFingerprint(layout, marker.closureManifestSha256))) {
         throw new Error("The managed runtime closure manifest fingerprint is invalid.");
     }
@@ -301,6 +304,9 @@ export async function verifyManagedRuntimeLaunch(input) {
     if (!(await verifyManagedRuntimeCliFingerprint(layout, identity.cliSha256))) {
         throw new Error("The managed runtime CLI changed during launch verification.");
     }
+    if (!(await verifyManagedRuntimeMaintenanceEntryFingerprint(layout, proof.maintenanceEntrySha256))) {
+        throw new Error("The managed runtime maintenance entry changed during launch verification.");
+    }
     if (!(await verifyClosureManifestFingerprint(layout, marker.closureManifestSha256))) {
         throw new Error("The managed runtime closure manifest changed during launch verification.");
     }
@@ -318,44 +324,6 @@ export async function verifyManagedRuntimeLaunch(input) {
             + `Node ABI ${identity.nodeAbi}; installed ${marker.installedAt}).`,
     };
 }
-function encodeManagedRuntimeLaunchProof(proof) {
-    return Buffer.from(JSON.stringify(proof), "utf8").toString("base64url");
-}
-function decodeManagedRuntimeLaunchProof(encoded) {
-    if (typeof encoded !== "string"
-        || encoded.length === 0
-        || encoded.length > MAX_MANAGED_RUNTIME_LAUNCH_PROOF_BYTES * 2
-        || !/^[0-9A-Za-z_-]+$/u.test(encoded)) {
-        throw new Error("The managed runtime launch proof is malformed.");
-    }
-    let bytes;
-    try {
-        bytes = Buffer.from(encoded, "base64url");
-    }
-    catch {
-        throw new Error("The managed runtime launch proof is malformed.");
-    }
-    if (bytes.length === 0
-        || bytes.length > MAX_MANAGED_RUNTIME_LAUNCH_PROOF_BYTES
-        || bytes.toString("base64url") !== encoded) {
-        throw new Error("The managed runtime launch proof is malformed.");
-    }
-    const value = parseJson(bytes, "managed runtime launch proof");
-    if (!isRecord(value) || Object.keys(value).length !== 3) {
-        throw new Error("The managed runtime launch proof has an invalid schema.");
-    }
-    const installedAtMs = typeof value.installedAt === "string" ? Date.parse(value.installedAt) : Number.NaN;
-    if (value.schema !== MANAGED_RUNTIME_LAUNCH_PROOF_SCHEMA
-        || typeof value.markerSha256 !== "string"
-        || !/^[0-9a-f]{64}$/u.test(value.markerSha256)
-        || typeof value.installedAt !== "string"
-        || !Number.isFinite(installedAtMs)
-        || new Date(installedAtMs).toISOString() !== value.installedAt
-        || value.installedAt === PROVISIONAL_RUNTIME_INSTALLED_AT) {
-        throw new Error("The managed runtime launch proof has an invalid schema.");
-    }
-    return value;
-}
 function parseJson(bytes, label) {
     try {
         return JSON.parse(bytes.toString("utf8"));
@@ -1258,6 +1226,7 @@ function runtimeLayout(home, identity, id, nowMs) {
         versionAbiDir,
         installRoot,
         cliPath: join(installRoot, "node_modules", "@mono-agent", "agent-app", "dist", "cli.js"),
+        maintenanceEntryPath: join(installRoot, "node_modules", "@mono-agent", "agent-app", "dist", MANAGED_LAUNCHD_MAINTENANCE_ENTRY_FILE),
         packageJsonPath: join(installRoot, "node_modules", "@mono-agent", "agent-app", "package.json"),
         packageLockPath: join(installRoot, "package-lock.json"),
         closureManifestPath: join(installRoot, ".mono-agent-closure.json"),
@@ -1278,6 +1247,7 @@ function runtimeLayoutForRoot(layout, root) {
         ...layout,
         installRoot: root,
         cliPath: join(root, "node_modules", "@mono-agent", "agent-app", "dist", "cli.js"),
+        maintenanceEntryPath: join(root, "node_modules", "@mono-agent", "agent-app", "dist", MANAGED_LAUNCHD_MAINTENANCE_ENTRY_FILE),
         packageJsonPath: join(root, "node_modules", "@mono-agent", "agent-app", "package.json"),
         packageLockPath: join(root, "package-lock.json"),
         closureManifestPath: join(root, ".mono-agent-closure.json"),
@@ -2218,6 +2188,15 @@ async function verifyManagedRuntimeCliFingerprint(layout, expectedSha256) {
         return false;
     }
 }
+async function verifyManagedRuntimeMaintenanceEntryFingerprint(layout, expectedSha256) {
+    try {
+        const captured = await fingerprintClosureFile(layout.maintenanceEntryPath, `node_modules/@mono-agent/agent-app/dist/${MANAGED_LAUNCHD_MAINTENANCE_ENTRY_FILE}`);
+        return captured.sha256 === expectedSha256;
+    }
+    catch {
+        return false;
+    }
+}
 async function captureRuntimeClosureManifest(layout, deps = {}) {
     const entries = [];
     const proofs = [];
@@ -2455,6 +2434,7 @@ async function runtimeResult(layout, identity, nodePath, verificationMode) {
     if (marker === undefined) {
         throw new Error("The managed runtime marker became invalid before launch proof publication.");
     }
+    const maintenanceEntry = await fingerprintClosureFile(layout.maintenanceEntryPath, `node_modules/@mono-agent/agent-app/dist/${MANAGED_LAUNCHD_MAINTENANCE_ENTRY_FILE}`);
     return {
         cliPath: layout.cliPath,
         nodePath: resolve(nodePath),
@@ -2464,8 +2444,9 @@ async function runtimeResult(layout, identity, nodePath, verificationMode) {
         nodeAbi: identity.nodeAbi,
         verificationMode,
         launchProof: encodeManagedRuntimeLaunchProof({
-            schema: MANAGED_RUNTIME_LAUNCH_PROOF_SCHEMA,
+            schema: "mono-agent.managed-runtime-launch.v2",
             markerSha256: sha256(markerBytes),
+            maintenanceEntrySha256: maintenanceEntry.sha256,
             installedAt: marker.installedAt,
         }),
     };