@mono-agent/agent-app 0.9.0 → 0.10.0

package/dist/launchd.d.ts

@@ -50,6 +50,8 @@ export declare function escapeXml(value: string): string;
  * process.env. Only the explicit, non-secret operational allowlist is restored.
  */
 export declare function buildPlistXml(input: PlistInput): string;
+/** Exact argv persisted by the managed LaunchAgent producer. */
+export declare function buildLaunchdProgramArguments(input: PlistInput): readonly string[];
 /**
  * PATH for the background worker: the launching shell's PATH (so the user's
  * toolchain is reachable) plus Homebrew/usr-local in case launchd started from

package/dist/launchd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAEpF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAA+B,GAAG,YAAY,CAUlG;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAkDvD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAY5F;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mBAAmB,IAAI,eAAe,CAmBrD;AAED,sEAAsE;AACtE,wBAAsB,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEpG;AAED,sEAAsE;AACtE,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKzE;AAED,8FAA8F;AAC9F,wBAAsB,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAEjH;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAE3G"}
+{"version":3,"file":"launchd.d.ts","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAEpF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAW7D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAA+B,GAAG,YAAY,CAUlG;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CA0CvD;AAED,gEAAgE;AAChE,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,CA0BjF;AAYD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAY5F;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mBAAmB,IAAI,eAAe,CAmBrD;AAED,sEAAsE;AACtE,wBAAsB,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEpG;AAED,sEAAsE;AACtE,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKzE;AAED,8FAA8F;AAC9F,wBAAsB,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAEjH;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAE3G"}

package/dist/launchd.js

@@ -51,23 +51,15 @@ export function escapeXml(value) {
  * process.env. Only the explicit, non-secret operational allowlist is restored.
  */
 export function buildPlistXml(input) {
-    const environmentArguments = Object.entries(input.environment)
-        .sort(([left], [right]) => left.localeCompare(right))
-        .map(([key, value]) => `${key}=${value}`);
-    const programArguments = [
-        "/usr/bin/env",
-        "-i",
-        ...environmentArguments,
-        input.nodePath,
-        input.cliPath,
-        "start",
-        "--foreground",
-        "--config",
-        input.configPath,
-        ...(input.envFile === undefined ? [] : ["--env-file", input.envFile]),
-        "--expected-background-snapshot",
-        input.expectedBackgroundSnapshot,
-    ];
+    const programArguments = buildLaunchdProgramArguments(input);
+    for (const [name, value] of [
+        ["launchd label", input.label],
+        ["working directory", input.cwd],
+        ["stdout path", input.stdoutPath],
+        ["stderr path", input.stderrPath],
+    ]) {
+        assertControlFree(value, name);
+    }
     const argsXml = programArguments.map((arg) => `    <string>${escapeXml(arg)}</string>`).join("\n");
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -100,6 +92,43 @@ ${argsXml}
 </plist>
 `;
 }
+/** Exact argv persisted by the managed LaunchAgent producer. */
+export function buildLaunchdProgramArguments(input) {
+    const environmentArguments = Object.entries(input.environment)
+        .sort(([left], [right]) => compareCodeUnits(left, right))
+        .map(([key, value]) => {
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/u.test(key)) {
+            throw new Error("Launchd environment names must use the portable identifier grammar.");
+        }
+        assertControlFree(value, `launchd environment ${key}`);
+        return `${key}=${value}`;
+    });
+    const arguments_ = [
+        "/usr/bin/env",
+        "-i",
+        ...environmentArguments,
+        input.nodePath,
+        input.cliPath,
+        "start",
+        "--foreground",
+        "--config",
+        input.configPath,
+        ...(input.envFile === undefined ? [] : ["--env-file", input.envFile]),
+        "--expected-background-snapshot",
+        input.expectedBackgroundSnapshot,
+    ];
+    for (const argument of arguments_)
+        assertControlFree(argument, "launchd program argument");
+    return arguments_;
+}
+function assertControlFree(value, label) {
+    if (/[\u0000-\u001f\u007f]/u.test(value)) {
+        throw new Error(`${label} must not contain control characters.`);
+    }
+}
+function compareCodeUnits(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
 /**
  * PATH for the background worker: the launching shell's PATH (so the user's
  * toolchain is reachable) plus Homebrew/usr-local in case launchd started from

package/dist/launchd.js.map

@@ -1 +1 @@
-{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AA4CzD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,aAAa,GAAG,gEAAgE,CAAC;AACvF,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACvC,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC5B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,OAAe,oBAAoB,EAAE;IAClF,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO;QACL,eAAe;QACf,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,GAAG,KAAK,QAAQ,CAAC;QACrD,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,UAAU,CAAC;QAC/C,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,UAAU,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;SAC3D,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG;QACvB,cAAc;QACd,IAAI;QACJ,GAAG,oBAAoB;QACvB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,OAAO;QACb,OAAO;QACP,cAAc;QACd,UAAU;QACV,KAAK,CAAC,UAAU;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,gCAAgC;QAChC,KAAK,CAAC,0BAA0B;KACjC,CAAC;IACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnG,OAAO;;;;;YAKG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;;;EAGhC,OAAO;;;YAGG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;;;;;;;;;YASpB,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;;YAE3B,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;;;;;;;CAOtC,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0C,OAAO,CAAC,GAAG;IAClF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,OAAO,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,GAAW;IACtD,OAAO,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,IAAI,OAAO,CAAkB,CAAC,cAAc,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACjC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAuB,EAAE,KAAa,EAAE,GAAW;IAChF,OAAO,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAuB,EACvB,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACtE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAuB,EAAE,SAAiB,EAAE,GAAW;IACrF,OAAO,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAuB,EAAE,KAAa,EAAE,GAAW;IAC/E,OAAO,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../src/launchd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AA4CzD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,aAAa,GAAG,gEAAgE,CAAC;AACvF,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACvC,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC5B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,OAAe,oBAAoB,EAAE;IAClF,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO;QACL,eAAe;QACf,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,GAAG,KAAK,QAAQ,CAAC;QACrD,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,UAAU,CAAC;QAC/C,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,UAAU,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK;SACT,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;SACtB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC;SACxB,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC;QAC9B,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC;QAChC,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC;QACjC,CAAC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC;KACzB,EAAE,CAAC;QACX,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnG,OAAO;;;;;YAKG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;;;EAGhC,OAAO;;;YAGG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;;;;;;;;;YASpB,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;;YAE3B,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;;;;;;;CAOtC,CAAC;AACF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,4BAA4B,CAAC,KAAiB;IAC5D,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;SAC3D,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IACL,MAAM,UAAU,GAAG;QACjB,cAAc;QACd,IAAI;QACJ,GAAG,oBAAoB;QACvB,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,OAAO;QACb,OAAO;QACP,cAAc;QACd,UAAU;QACV,KAAK,CAAC,UAAU;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,gCAAgC;QAChC,KAAK,CAAC,0BAA0B;KACjC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,UAAU;QAAE,iBAAiB,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAC3F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa;IACrD,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0C,OAAO,CAAC,GAAG;IAClF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,OAAO,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,GAAW;IACtD,OAAO,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,IAAI,OAAO,CAAkB,CAAC,cAAc,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACjC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAuB,EAAE,KAAa,EAAE,GAAW;IAChF,OAAO,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAuB,EACvB,KAAa,EACb,GAAW;IAEX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACtE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAuB,EAAE,SAAiB,EAAE,GAAW;IACrF,OAAO,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAuB,EAAE,KAAa,EAAE,GAAW;IAC/E,OAAO,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/managed-runtime-packages.js

@@ -24,7 +24,7 @@ export async function resolveConfiguredManagedRuntimePackages(input) {
     const appBase = import.meta.url;
     const cwdBase = pathToFileURL(join(cwd, "package.json")).href;
     const resolved = await Promise.all([...requirements]
-        .sort(([left], [right]) => left.localeCompare(right))
+        .sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
         .map(async ([packageName, allowCwdFallback]) => ({
         packageName,
         packageSource: await resolveInstalledPackageRoot(packageName, allowCwdFallback ? [cwdBase, appBase] : [appBase]),

package/dist/managed-runtime-packages.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-runtime-packages.js","sourceRoot":"","sources":["../src/managed-runtime-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAQrE,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAyC;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC;QACrD,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;KACzE,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAChD,KAAK,MAAM,WAAW,IAAI,eAAe;QAAE,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,aAAa,EAAE,CAAC;QAC7C,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAChC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,WAAW;QACX,aAAa,EAAE,MAAM,2BAA2B,CAC9C,WAAW,EACX,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAClD;KACF,CAAC,CAAC,CAAC,CAAC;IACP,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,WAAmB,EACnB,KAAwB;IAExB,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,WAAW,SAAS,IAAI,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAuB,CAAC;YACtF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,WAAW,GAAG,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,sDAAsD,WAAW,IAAI;QACrE,GAAG,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI;QACzE,wFAAwF,CACzF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"managed-runtime-packages.js","sourceRoot":"","sources":["../src/managed-runtime-packages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAQrE,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAyC;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,mCAAmC,CAAC,KAAK,CAAC,UAAU,CAAC;QACrD,iBAAiB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;KACzE,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IAChD,KAAK,MAAM,WAAW,IAAI,eAAe;QAAE,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,aAAa,EAAE,CAAC;QAC7C,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAChC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,YAAY,CAAC;SACjD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACnE,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,WAAW;QACX,aAAa,EAAE,MAAM,2BAA2B,CAC9C,WAAW,EACX,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAClD;KACF,CAAC,CAAC,CAAC,CAAC;IACP,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,WAAmB,EACnB,KAAwB;IAExB,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,WAAW,SAAS,IAAI,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAuB,CAAC;YACtF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,WAAW,GAAG,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,sDAAsD,WAAW,IAAI;QACrE,GAAG,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI;QACzE,wFAAwF,CACzF,CAAC;AACJ,CAAC"}

package/dist/memory-command.d.ts

@@ -6,9 +6,15 @@ export interface RunMemoryCommandInput {
     readonly json: boolean;
     readonly strict: boolean;
     readonly limit?: number;
+    readonly idsFile?: string;
+    readonly reason?: string;
+    readonly planPath?: string;
+    readonly backupPath?: string;
 }
 export declare function runMemoryCommand(input: RunMemoryCommandInput): Promise<number>;
 type ReplayAdoptionFailureCode = "replay_adoption_usage" | "replay_adoption_config_invalid" | "replay_adoption_requires_bujo" | "replay_adoption_agent_running" | "replay_adoption_failed";
 export declare function writeReplayAdoptionCliFailure(json: boolean, code: ReplayAdoptionFailureCode): void;
+export type MemoryForgetFailureCode = "forget_requires_bujo" | "forget_usage" | "forget_config_invalid" | "forget_prepare_failed" | "forget_apply_failed" | "forget_apply_failed_recovered" | "forget_apply_recovery_failed" | "forget_restore_failed";
+export declare function writeMemoryForgetFailure(json: boolean, operation: string, code: MemoryForgetFailureCode, recovered?: boolean, backupPath?: string): void;
 export {};
 //# sourceMappingURL=memory-command.d.ts.map

package/dist/memory-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-command.d.ts","sourceRoot":"","sources":["../src/memory-command.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAoBD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2EpF;AA2FD,KAAK,yBAAyB,GAC1B,uBAAuB,GACvB,gCAAgC,GAChC,+BAA+B,GAC/B,+BAA+B,GAC/B,wBAAwB,CAAC;AAU7B,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,GAAG,IAAI,CAalG"}
+{"version":3,"file":"memory-command.d.ts","sourceRoot":"","sources":["../src/memory-command.ts"],"names":[],"mappings":"AA6DA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAkCD,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqFpF;AAiHD,KAAK,yBAAyB,GAC1B,uBAAuB,GACvB,gCAAgC,GAChC,+BAA+B,GAC/B,+BAA+B,GAC/B,wBAAwB,CAAC;AAU7B,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,GAAG,IAAI,CAalG;AAuCD,MAAM,MAAM,uBAAuB,GAC/B,sBAAsB,GACtB,cAAc,GACd,uBAAuB,GACvB,uBAAuB,GACvB,qBAAqB,GACrB,+BAA+B,GAC/B,8BAA8B,GAC9B,uBAAuB,CAAC;AAiU5B,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,uBAAuB,EAC7B,SAAS,UAAQ,EACjB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAkBN"}

package/dist/memory-command.js

@@ -1,5 +1,7 @@
-import { readdir, readFile, realpath, stat } from "node:fs/promises";
-import { basename, isAbsolute, join, relative, resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, mkdir, open as openFile, readFile, readdir, realpath, rm, stat, writeFile, } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { resolveSupermemoryContainer } from "@mono-agent/config";
 import { listTraceSources } from "@mono-agent/observability";
 import { isAppCoreConfigError, loadAppCoreConfig, resolveAppTraceRegistryDir, resolveGlobalTraceRegistryDir, } from "./app-config.js";
@@ -12,6 +14,10 @@ const INTAKE_ID_RE = /^[a-f0-9]{64}$/u;
 const INTAKE_REASON_RE = /^[a-z0-9][a-z0-9_-]{0,63}$/u;
 const MEMORY_HEALTH_SCHEMA_VERSION = 1;
 const REPLAY_ADOPTION_SCHEMA_VERSION = 1;
+const MEMORY_FORGET_SCHEMA_VERSION = 1;
+const MAX_FORGET_IDS = 32;
+const MAX_FORGET_PLAN_BYTES = 1024 * 1024;
+const MEMORY_ID_RE = /^[A-Za-z0-9][A-Za-z0-9:._-]{0,127}$/u;
 const EMPTY_HEALTH_COUNTS = Object.freeze({
     pending: 0,
     due: 0,
@@ -29,6 +35,10 @@ export async function runMemoryCommand(input) {
             writeReplayAdoptionCliFailure(input.json, "replay_adoption_usage");
             return 2;
         }
+        if (input.positionals[0] === "forget") {
+            writeMemoryForgetFailure(input.json, input.positionals[1] ?? "unknown", "forget_usage");
+            return 2;
+        }
         process.stderr.write(ui.errorLine(usageError));
         return 2;
     }
@@ -48,6 +58,10 @@ export async function runMemoryCommand(input) {
             writeReplayAdoptionCliFailure(input.json, "replay_adoption_requires_bujo");
             return 1;
         }
+        if (subcommand === "forget") {
+            writeMemoryForgetFailure(input.json, rest[0] ?? "unknown", "forget_requires_bujo");
+            return 1;
+        }
         writeNoMemory(context.configPath, input.json);
         return 0;
     }
@@ -90,9 +104,11 @@ export async function runMemoryCommand(input) {
             return await runIndexTransition(context, "rollback", input.json);
         case "adopt-replay":
             return await runReplayAdoption(context, input.json);
+        case "forget":
+            return await runMemoryForget(context, rest, input);
         default:
             process.stderr.write(ui.errorLine(`Unknown memory subcommand \`${subcommand}\`.`));
-            process.stderr.write(ui.hint("Expected stats, today, show <date>, search <query>, top, audit, inspect [id], retry [id], resolve <id> <reason>, rebuild, rollback, or adopt-replay."));
+            process.stderr.write(ui.hint("Expected stats, today, show <date>, search <query>, top, audit, inspect [id], retry [id], resolve <id> <reason>, rebuild, rollback, adopt-replay, or forget prepare|apply|restore."));
             return 2;
     }
 }
@@ -137,6 +153,28 @@ function memoryCommandUsageError(input) {
             return INTAKE_REASON_RE.test(rest[1] ?? "")
                 ? undefined
                 : "memory resolve reason must be a 1-64 character lowercase slug.";
+        case "forget": {
+            const operation = rest[0];
+            if (rest.length !== 1 || (operation !== "prepare" && operation !== "apply" && operation !== "restore")) {
+                return "Usage: mono-agent memory forget prepare|apply|restore with the required operation flags.";
+            }
+            if (operation === "prepare") {
+                return input.idsFile !== undefined && input.reason !== undefined && input.planPath !== undefined
+                    && input.backupPath === undefined && INTAKE_REASON_RE.test(input.reason)
+                    ? undefined
+                    : "Usage: mono-agent memory forget prepare --ids-file <file> --reason <lowercase-slug> --plan <file>.";
+            }
+            if (operation === "apply") {
+                return input.planPath !== undefined && input.idsFile === undefined && input.reason === undefined
+                    && input.backupPath === undefined
+                    ? undefined
+                    : "Usage: mono-agent memory forget apply --plan <file>.";
+            }
+            return input.backupPath !== undefined && input.idsFile === undefined && input.reason === undefined
+                && input.planPath === undefined
+                ? undefined
+                : "Usage: mono-agent memory forget restore --backup <dir>.";
+        }
         default:
             return undefined;
     }
@@ -226,6 +264,324 @@ function publicReplayAdoptionResult(result) {
 function isSafeAggregateCount(value) {
     return Number.isSafeInteger(value) && value >= 0;
 }
+class MemoryForgetOperationError extends Error {
+    code;
+    recovered;
+    backupPath;
+    constructor(code, recovered = false, backupPath) {
+        super(code);
+        this.code = code;
+        this.recovered = recovered;
+        this.backupPath = backupPath;
+    }
+}
+const MEMORY_FORGET_FAILURE_MESSAGES = Object.freeze({
+    forget_requires_bujo: "Memory forget requires a configured built-in BuJo store with embeddings.",
+    forget_usage: "Memory forget arguments are invalid.",
+    forget_config_invalid: "Memory forget requires a valid private configuration.",
+    forget_prepare_failed: "Forget-plan preparation failed without changing the memory store.",
+    forget_apply_failed: "Forget-plan application failed before a recoverable backup was available.",
+    forget_apply_failed_recovered: "Forget-plan application failed and the complete pre-apply backup was restored.",
+    forget_apply_recovery_failed: "Forget-plan application failed and automatic recovery could not be verified; keep the agent stopped and restore the reported backup manually.",
+    forget_restore_failed: "Backup restore was refused or failed; the current memory store was not intentionally overwritten.",
+});
+async function runMemoryForget(context, rest, input) {
+    const operation = rest[0];
+    const memory = context.config.memory;
+    if (memory === undefined || (memory.backend ?? "bujo") === "supermemory"
+        || memory.mode !== "bujo" || memory.embeddings === undefined) {
+        writeMemoryForgetFailure(input.json, operation, "forget_requires_bujo");
+        return 1;
+    }
+    try {
+        const bujo = await loadBujoModule();
+        const root = bujo.resolveExplicitMemoryForgetRoot(resolve(context.cwd, memory.path));
+        if (operation === "prepare") {
+            const result = await prepareMemoryForgetPlan(context, root, input);
+            write(input.json, result, () => renderMemoryForgetResult(result));
+            return 0;
+        }
+        if (operation === "apply") {
+            const result = await applyMemoryForgetPlan(context, root, input.planPath);
+            write(input.json, result, () => renderMemoryForgetResult(result));
+            return 0;
+        }
+        const result = await restoreMemoryForgetBackup(context, root, input.backupPath);
+        write(input.json, result, () => renderMemoryForgetResult(result));
+        return 0;
+    }
+    catch (error) {
+        const failure = error instanceof MemoryForgetOperationError
+            ? error
+            : new MemoryForgetOperationError(operation === "prepare"
+                ? "forget_prepare_failed"
+                : operation === "restore"
+                    ? "forget_restore_failed"
+                    : "forget_apply_failed");
+        writeMemoryForgetFailure(input.json, operation, failure.code, failure.recovered, failure.backupPath);
+        return 1;
+    }
+}
+async function prepareMemoryForgetPlan(context, root, input) {
+    const idsFile = resolve(context.cwd, input.idsFile);
+    const planPath = await canonicalProspectivePath(resolve(context.cwd, input.planPath));
+    if (isSameOrUnderDirectory(root, planPath)) {
+        throw new MemoryForgetOperationError("forget_prepare_failed");
+    }
+    const memoryIds = await readMemoryIds(idsFile);
+    const bujo = await loadBujoModule();
+    bujo.previewCanonicalExplicitForgetMemories(root, memoryIds);
+    const payload = {
+        schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+        operation: "forget",
+        rootFingerprint: memoryRootFingerprint(root),
+        sourceFingerprint: bujo.readBujoCanonicalSourceFingerprint(root),
+        reason: input.reason,
+        createdAt: new Date().toISOString(),
+        memoryIds,
+    };
+    const plan = { ...payload, planDigest: memoryForgetPlanDigest(payload) };
+    await writePrivateJsonExclusive(planPath, plan);
+    return {
+        schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+        operation: "forget-prepare",
+        status: "prepared",
+        count: memoryIds.length,
+        planPath,
+        planDigest: plan.planDigest,
+    };
+}
+async function applyMemoryForgetPlan(context, root, rawPlanPath) {
+    const planPath = resolve(context.cwd, rawPlanPath);
+    const canonicalPlanPath = await canonicalProspectivePath(planPath);
+    if (isSameOrUnderDirectory(root, canonicalPlanPath)) {
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+    const plan = await readMemoryForgetPlan(planPath);
+    const bujo = await loadBujoModule();
+    if (plan.rootFingerprint !== memoryRootFingerprint(root)) {
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+    // Preserve the user-facing same-config diagnostic; the package transaction
+    // independently enforces the authoritative shared-root writer lease.
+    await assertNoLiveConfiguredAgent(context.configPath, await memoryRegistryDirs(context));
+    const settings = previewRecallSettings(context.config);
+    if (settings === undefined || "supermemory" in settings || settings.embeddings === undefined) {
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+    const { createMemoryEmbeddingProvider } = await loadMemoryRecallModule();
+    const embeddings = await createMemoryEmbeddingProvider(settings.embeddings);
+    try {
+        const result = await bujo.applyExplicitMemoryForget({
+            root,
+            ids: plan.memoryIds,
+            expectedRootFingerprint: plan.rootFingerprint,
+            expectedSourceFingerprint: plan.sourceFingerprint,
+            planDigest: plan.planDigest,
+            embeddings,
+            dimension: settings.embeddings.dim ?? 768,
+        });
+        return {
+            schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+            operation: "forget-apply",
+            status: "applied",
+            count: result.forgotten,
+            sourceFingerprint: result.sourceFingerprint,
+            backupPath: result.backupPath,
+            planDigest: plan.planDigest,
+        };
+    }
+    catch (error) {
+        if (error instanceof bujo.ExplicitMemoryForgetError) {
+            if (error.code === "apply_failed_recovered") {
+                throw new MemoryForgetOperationError("forget_apply_failed_recovered", true, error.backupPath);
+            }
+            if (error.code === "apply_recovery_failed") {
+                throw new MemoryForgetOperationError("forget_apply_recovery_failed", false, error.backupPath);
+            }
+        }
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+}
+async function restoreMemoryForgetBackup(context, root, rawBackupPath) {
+    const bujo = await loadBujoModule();
+    try {
+        const result = await bujo.restoreExplicitMemoryForget({
+            root,
+            backupPath: resolve(context.cwd, rawBackupPath),
+            expectedRootFingerprint: memoryRootFingerprint(root),
+        });
+        return {
+            schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+            operation: "forget-restore",
+            status: "restored",
+            backupPath: result.backupPath,
+            sourceFingerprint: result.sourceFingerprint,
+            planDigest: result.planDigest,
+        };
+    }
+    catch {
+        throw new MemoryForgetOperationError("forget_restore_failed");
+    }
+}
+async function readMemoryIds(path) {
+    const raw = await readPinnedFile(path, MAX_FORGET_PLAN_BYTES, false);
+    const ids = raw.split(/\r?\n/gu).map((id) => id.trim()).filter((id) => id.length > 0).sort();
+    if (ids.length === 0 || ids.length > MAX_FORGET_IDS || new Set(ids).size !== ids.length
+        || ids.some((id) => !MEMORY_ID_RE.test(id))) {
+        throw new MemoryForgetOperationError("forget_prepare_failed");
+    }
+    return ids;
+}
+function memoryForgetPlanDigest(payload) {
+    return createHash("sha256").update(JSON.stringify(payload)).digest("hex");
+}
+function memoryRootFingerprint(root) {
+    return createHash("sha256").update(root).digest("hex");
+}
+async function readMemoryForgetPlan(path) {
+    const value = await readPrivateJson(path, MAX_FORGET_PLAN_BYTES);
+    if (!isObject(value)
+        || !hasExactKeys(value, [
+            "createdAt",
+            "memoryIds",
+            "operation",
+            "planDigest",
+            "reason",
+            "rootFingerprint",
+            "schemaVersion",
+            "sourceFingerprint",
+        ])
+        || value.schemaVersion !== MEMORY_FORGET_SCHEMA_VERSION
+        || value.operation !== "forget"
+        || !isSha256(value.rootFingerprint)
+        || !isSha256(value.sourceFingerprint)
+        || typeof value.reason !== "string" || !INTAKE_REASON_RE.test(value.reason)
+        || typeof value.createdAt !== "string" || !isCanonicalIso(value.createdAt)
+        || !Array.isArray(value.memoryIds) || value.memoryIds.length === 0
+        || value.memoryIds.length > MAX_FORGET_IDS
+        || value.memoryIds.some((id) => typeof id !== "string" || !MEMORY_ID_RE.test(id))
+        || new Set(value.memoryIds).size !== value.memoryIds.length
+        || typeof value.planDigest !== "string" || !isSha256(value.planDigest)) {
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+    const payload = {
+        schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+        operation: "forget",
+        rootFingerprint: value.rootFingerprint,
+        sourceFingerprint: value.sourceFingerprint,
+        reason: value.reason,
+        createdAt: value.createdAt,
+        memoryIds: value.memoryIds,
+    };
+    if (value.planDigest !== memoryForgetPlanDigest(payload)) {
+        throw new MemoryForgetOperationError("forget_apply_failed");
+    }
+    return { ...payload, planDigest: value.planDigest };
+}
+async function writePrivateJsonExclusive(path, value) {
+    const handle = await openFile(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(value, null, 2)}\n`, "utf8");
+        await handle.sync();
+        const opened = await handle.stat();
+        const current = await lstat(path);
+        assertPinnedFile(opened, current, path, true, MAX_FORGET_PLAN_BYTES);
+    }
+    finally {
+        await handle.close();
+    }
+    await fsyncParentDirectory(path);
+}
+async function readPrivateJson(path, maxBytes) {
+    return JSON.parse(await readPinnedFile(path, maxBytes, true));
+}
+async function readPinnedFile(path, maxBytes, ownerPrivate) {
+    const before = await lstat(path);
+    const handle = await openFile(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const opened = await handle.stat();
+        assertPinnedFile(before, opened, path, ownerPrivate, maxBytes);
+        const content = await handle.readFile("utf8");
+        const after = await handle.stat();
+        const current = await lstat(path);
+        assertPinnedFile(opened, after, path, ownerPrivate, maxBytes);
+        assertPinnedFile(opened, current, path, ownerPrivate, maxBytes);
+        if (opened.size !== after.size || opened.mtimeMs !== after.mtimeMs || opened.ctimeMs !== after.ctimeMs) {
+            throw new Error("private artifact changed while it was read");
+        }
+        return content;
+    }
+    finally {
+        await handle.close();
+    }
+}
+function assertPinnedFile(expected, actual, path, ownerPrivate, maxBytes) {
+    const uid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (!actual.isFile() || actual.isSymbolicLink() || actual.nlink !== 1 || actual.size > maxBytes
+        || expected.dev !== actual.dev || expected.ino !== actual.ino
+        || (ownerPrivate && (actual.mode & 0o077) !== 0)
+        || (uid !== undefined && actual.uid !== uid)) {
+        throw new Error(`private artifact is unsafe: ${path}`);
+    }
+}
+async function fsyncParentDirectory(path) {
+    const handle = await openFile(dirname(path), constants.O_RDONLY);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function canonicalProspectivePath(path) {
+    const parent = await realpath(dirname(path));
+    return join(parent, basename(path));
+}
+function isSameOrUnderDirectory(parent, child) {
+    return parent === child || isUnderDirectory(parent, child);
+}
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasExactKeys(value, keys) {
+    return JSON.stringify(Object.keys(value).sort()) === JSON.stringify([...keys].sort());
+}
+function isSha256(value) {
+    return typeof value === "string" && /^[a-f0-9]{64}$/u.test(value);
+}
+function isCanonicalIso(value) {
+    const timestamp = Date.parse(value);
+    return Number.isFinite(timestamp) && new Date(timestamp).toISOString() === value;
+}
+export function writeMemoryForgetFailure(json, operation, code, recovered = false, backupPath) {
+    const safeOperation = operation === "prepare" || operation === "apply" || operation === "restore"
+        ? operation
+        : "unknown";
+    const result = {
+        schemaVersion: MEMORY_FORGET_SCHEMA_VERSION,
+        operation: `forget-${safeOperation}`,
+        status: "failed",
+        code,
+        message: MEMORY_FORGET_FAILURE_MESSAGES[code],
+        ...(recovered ? { recovered: true } : {}),
+        ...(backupPath === undefined ? {} : { backupPath }),
+    };
+    if (json) {
+        write(true, result, () => "");
+        return;
+    }
+    process.stderr.write(ui.errorLine(`[${code}] ${result.message}`));
+}
+function renderMemoryForgetResult(result) {
+    return `${ui.banner("mono-agent memory", result.operation)}\n${ui.keyValue([
+        ["status", result.status],
+        ...(result.count === undefined ? [] : [["count", String(result.count)]]),
+        ...(result.planPath === undefined ? [] : [["plan", result.planPath]]),
+        ...(result.backupPath === undefined ? [] : [["backup", result.backupPath]]),
+        ...(result.sourceFingerprint === undefined ? [] : [["source fingerprint", result.sourceFingerprint]]),
+    ])}\n`;
+}
 function notConfiguredHealthReport(now = new Date()) {
     return {
         schemaVersion: MEMORY_HEALTH_SCHEMA_VERSION,
@@ -571,6 +927,10 @@ async function loadMemoryCommandContext(input) {
             writeReplayAdoptionCliFailure(input.json, "replay_adoption_config_invalid");
             return { code: 1 };
         }
+        if (input.positionals[0] === "forget") {
+            writeMemoryForgetFailure(input.json, input.positionals[1] ?? "unknown", "forget_config_invalid");
+            return { code: 1 };
+        }
         if (isAppCoreConfigError(error)) {
             process.stderr.write(ui.errorLine(error.message));
             process.stderr.write(ui.hint(`Fix ${configPath}, then re-run \`mono-agent memory\`.`));