@runweave/server-linux-x64 0.1.23 → 0.1.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runweave/server-linux-x64",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "license": "MIT",
   "repository": {
     "type": "git",

package/payload/app-server/build-info.json

@@ -1,8 +1,8 @@
 {
   "version": "0.1.0",
-  "buildId": "20261113T105754315Z-8b24b10d",
-  "sourceRevision": "8b24b10d13faec90c70785bcef6727c594a01e9f",
+  "buildId": "20261114T102133393Z-78b0f7b5",
+  "sourceRevision": "78b0f7b532bb517209422c1a67c856a547b9268b",
   "sourceDirty": false,
-  "builtAt": "2026-11-13T10:57:54.315Z",
-  "contentSha256": "49ca1d7c30bc8b763f1ef58454384de9f6c0e81aeefaeb97088cd662b3d58b11"
+  "builtAt": "2026-11-14T10:21:33.393Z",
+  "contentSha256": "3c7cf9b63fc7918b9bea717d6f0c45b0b29b857209b1a05512804fe0e0c9104a"
 }

package/payload/app-server/index.cjs

@@ -1,4 +1,4 @@
-/* runweave:build-info */var __RUNWEAVE_BUILD_INFO__={"version":"0.1.0","buildId":"20261113T105754315Z-8b24b10d","sourceRevision":"8b24b10d13faec90c70785bcef6727c594a01e9f","sourceDirty":false,"builtAt":"2026-11-13T10:57:54.315Z","contentSha256":"49ca1d7c30bc8b763f1ef58454384de9f6c0e81aeefaeb97088cd662b3d58b11"};
+/* runweave:build-info */var __RUNWEAVE_BUILD_INFO__={"version":"0.1.0","buildId":"20261114T102133393Z-78b0f7b5","sourceRevision":"78b0f7b532bb517209422c1a67c856a547b9268b","sourceDirty":false,"builtAt":"2026-11-14T10:21:33.393Z","contentSha256":"3c7cf9b63fc7918b9bea717d6f0c45b0b29b857209b1a05512804fe0e0c9104a"};
 const __IMPORT_META_URL__ = require('url').pathToFileURL(__filename).href;
 "use strict";
 var __create = Object.create;
@@ -34980,7 +34980,10 @@ function configurationPathSegment(key) {
 }
 
 // packages/config-node/src/platform.ts
+var import_node_child_process = require("node:child_process");
 var import_node_fs4 = require("node:fs");
+var import_node_util = require("node:util");
+var executeFile = (0, import_node_util.promisify)(import_node_child_process.execFile);
 function syncDirectory(directory) {
   if (process.platform === "win32") return;
   const fd = (0, import_node_fs4.openSync)(directory, "r");
@@ -35019,10 +35022,10 @@ var import_node_path4 = __toESM(require("node:path"), 1);
 var import_node_fs5 = require("node:fs");
 
 // packages/config-node/src/windows-permissions.ts
-var import_node_child_process = require("node:child_process");
-function assertWindowsPrivatePath(file) {
-  if (process.platform !== "win32") return;
-  const script = `
+var import_node_child_process2 = require("node:child_process");
+var import_node_util2 = require("node:util");
+var executeFile2 = (0, import_node_util2.promisify)(import_node_child_process2.execFile);
+var script = `
 $ErrorActionPreference = 'Stop'
 try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
@@ -35040,10 +35043,31 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
   [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+function checkFailure(file, startedAt, cause) {
+  const error = cause;
+  const timedOut = error.code === "ETIMEDOUT" || error.killed === true && error.signal === "SIGTERM" && error.code == null;
+  return new ConfigurationError(
+    timedOut ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+    [
+      file,
+      `exit=${error.status ?? "none"}`,
+      `signal=${error.signal ?? "none"}`,
+      `code=${error.code ?? "none"}`,
+      `elapsedMs=${Math.round(performance.now() - startedAt)}`
+    ]
+  );
+}
+function assertResult(file, result) {
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+}
+function assertWindowsPrivatePath(file) {
+  if (process.platform !== "win32") return;
   const startedAt = performance.now();
   let result;
   try {
-    result = (0, import_node_child_process.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+    result = (0, import_node_child_process2.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
       env: { ...process.env, RUNWEAVE_PRIVATE_PATH: file },
       stdio: ["ignore", "pipe", "pipe"],
       encoding: "utf8",
@@ -35052,34 +35076,31 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
       windowsHide: true
     }).trim();
   } catch (cause) {
-    const error = cause;
-    throw new ConfigurationError(
-      error.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
-      [
-        file,
-        `exit=${error.status ?? "none"}`,
-        `signal=${error.signal ?? "none"}`,
-        `code=${error.code ?? "none"}`,
-        `elapsedMs=${Math.round(performance.now() - startedAt)}`
-      ]
-    );
+    throw checkFailure(file, startedAt, cause);
   }
-  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
-  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
-  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+  assertResult(file, result);
 }
 
 // packages/config-node/src/private-file.ts
-function assertPrivateDirectory(directory) {
+function privateDirectoryStat(directory) {
   const stat3 = (0, import_node_fs5.lstatSync)(directory);
   if (!stat3.isDirectory() || stat3.isSymbolicLink() || process.platform !== "win32" && stat3.mode & 63 || typeof process.getuid === "function" && stat3.uid !== process.getuid()) throw new ConfigurationError("CONFIG_ROOT_PERMISSIONS_INVALID");
-  assertWindowsPrivatePath(directory);
+  return stat3;
 }
-function assertPrivateDescriptor(fd, maxBytes = 1024 * 1024, file) {
+function privateDescriptorStat(fd, maxBytes) {
   const stat3 = (0, import_node_fs5.fstatSync)(fd);
   if (!stat3.isFile() || stat3.nlink !== 1) throw new ConfigurationError("CONFIG_FILE_NOT_PRIVATE_REGULAR");
   if (typeof process.getuid === "function" && stat3.uid !== process.getuid()) throw new ConfigurationError("CONFIG_FILE_OWNER_MISMATCH");
   if (process.platform !== "win32" && stat3.mode & 63) throw new ConfigurationError("CONFIG_FILE_PERMISSIONS_INVALID");
+  if (stat3.size > maxBytes) throw new ConfigurationError("CONFIG_FILE_TOO_LARGE");
+  return stat3;
+}
+function assertPrivateDirectory(directory) {
+  privateDirectoryStat(directory);
+  assertWindowsPrivatePath(directory);
+}
+function assertPrivateDescriptor(fd, maxBytes = 1024 * 1024, file) {
+  const stat3 = privateDescriptorStat(fd, Infinity);
   if (process.platform === "win32") {
     if (!file) throw new ConfigurationError("CONFIG_PRIVATE_PATH_REQUIRED");
     assertWindowsPrivatePath(file);
@@ -37307,7 +37328,7 @@ var CodexQuotaService = class {
 };
 
 // app-server/src/codex/client.ts
-var import_node_child_process2 = require("node:child_process");
+var import_node_child_process3 = require("node:child_process");
 var import_node_fs11 = require("node:fs");
 var import_node_os5 = __toESM(require("node:os"), 1);
 var import_node_path18 = __toESM(require("node:path"), 1);
@@ -37569,7 +37590,7 @@ var CodexAppServerClient = class {
     this.stdoutBuffer = "";
     this.stderrBuffer = "";
     const launchPlan = resolveCodexLaunchPlan(process.env);
-    this.child = (0, import_node_child_process2.spawn)(launchPlan.command, launchPlan.args, {
+    this.child = (0, import_node_child_process3.spawn)(launchPlan.command, launchPlan.args, {
       env: buildCodexProcessEnv(process.env, launchPlan),
       stdio: ["pipe", "pipe", "pipe"]
     });