@runweave/server-linux-x64 0.1.23 → 0.1.25

package/payload/backend/activity-sqlite-worker.cjs

@@ -11993,7 +11993,7 @@ var activityEventSchema = external_exports.object({
 
 // backend/src/activity/security/crypto.ts
 var import_node_crypto = __toESM(require("node:crypto"), 1);
-var import_node_child_process2 = require("node:child_process");
+var import_node_child_process3 = require("node:child_process");
 var import_node_fs2 = require("node:fs");
 var import_node_path = __toESM(require("node:path"), 1);
 
@@ -12013,9 +12013,9 @@ var ConfigurationError = class extends Error {
 
 // packages/config-node/src/windows-permissions.ts
 var import_node_child_process = require("node:child_process");
-function assertWindowsPrivatePath(file) {
-  if (process.platform !== "win32") return;
-  const script = `
+var import_node_util = require("node:util");
+var executeFile = (0, import_node_util.promisify)(import_node_child_process.execFile);
+var script = `
 $ErrorActionPreference = 'Stop'
 try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
@@ -12033,6 +12033,27 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
   [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+function checkFailure(file, startedAt, cause) {
+  const error = cause;
+  const timedOut = error.code === "ETIMEDOUT" || error.killed === true && error.signal === "SIGTERM" && error.code == null;
+  return new ConfigurationError(
+    timedOut ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+    [
+      file,
+      `exit=${error.status ?? "none"}`,
+      `signal=${error.signal ?? "none"}`,
+      `code=${error.code ?? "none"}`,
+      `elapsedMs=${Math.round(performance.now() - startedAt)}`
+    ]
+  );
+}
+function assertResult(file, result) {
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+}
+function assertWindowsPrivatePath(file) {
+  if (process.platform !== "win32") return;
   const startedAt = performance.now();
   let result;
   try {
@@ -12045,21 +12066,9 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
       windowsHide: true
     }).trim();
   } catch (cause) {
-    const error = cause;
-    throw new ConfigurationError(
-      error.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
-      [
-        file,
-        `exit=${error.status ?? "none"}`,
-        `signal=${error.signal ?? "none"}`,
-        `code=${error.code ?? "none"}`,
-        `elapsedMs=${Math.round(performance.now() - startedAt)}`
-      ]
-    );
+    throw checkFailure(file, startedAt, cause);
   }
-  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
-  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
-  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+  assertResult(file, result);
 }
 
 // packages/config-node/src/context.ts
@@ -12068,7 +12077,10 @@ var invocationGlobals = globalThis;
 var invocationArguments = invocationGlobals[invocationArgumentsKey] ??= new import_node_async_hooks.AsyncLocalStorage();
 
 // packages/config-node/src/platform.ts
+var import_node_child_process2 = require("node:child_process");
 var import_node_fs = require("node:fs");
+var import_node_util2 = require("node:util");
+var executeFile2 = (0, import_node_util2.promisify)(import_node_child_process2.execFile);
 function syncDirectory(directory) {
   if (process.platform === "win32") return;
   const fd = (0, import_node_fs.openSync)(directory, "r");
@@ -12337,7 +12349,7 @@ function decodeKey(encoded) {
   return key;
 }
 function readKeychainKey(keychainPath) {
-  const result = (0, import_node_child_process2.spawnSync)(
+  const result = (0, import_node_child_process3.spawnSync)(
     "/usr/bin/security",
     [
       "find-generic-password",
@@ -12358,7 +12370,7 @@ function readKeychainKey(keychainPath) {
   return encoded ? decodeKey(encoded) : null;
 }
 function resolveDefaultKeychainPath() {
-  const result = (0, import_node_child_process2.spawnSync)(
+  const result = (0, import_node_child_process3.spawnSync)(
     "/usr/bin/security",
     ["default-keychain", "-d", "user"],
     { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }
@@ -12371,7 +12383,7 @@ function resolveDefaultKeychainPath() {
 }
 function createKeychainKey(keychainPath) {
   const key = import_node_crypto.default.randomBytes(KEY_BYTES);
-  const result = (0, import_node_child_process2.spawnSync)(
+  const result = (0, import_node_child_process3.spawnSync)(
     "/usr/bin/security",
     [
       "add-generic-password",

package/payload/backend/build-info.json

@@ -1,8 +1,8 @@
 {
   "version": "0.1.0",
-  "buildId": "20261113T105753582Z-8b24b10d",
-  "sourceRevision": "8b24b10d13faec90c70785bcef6727c594a01e9f",
+  "buildId": "20261114T102132909Z-78b0f7b5",
+  "sourceRevision": "78b0f7b532bb517209422c1a67c856a547b9268b",
   "sourceDirty": false,
-  "builtAt": "2026-11-13T10:57:53.582Z",
-  "contentSha256": "98e23271c2b09fb529706d54713d346dde151ad6284beb06c5e866a9ccf6ca82"
+  "builtAt": "2026-11-14T10:21:32.909Z",
+  "contentSha256": "0170b90d815f3a949a52598d49f7e2b3127665b306c12cfebac557de972ed171"
 }

package/payload/backend/dev-resources/control.cjs

@@ -7322,12 +7322,12 @@ var require_dist = __commonJS({
 var import_promises13 = __toESM(require("node:fs/promises"), 1);
 var import_node_path30 = __toESM(require("node:path"), 1);
 var import_node_os17 = __toESM(require("node:os"), 1);
-var import_node_child_process10 = require("node:child_process");
-var import_node_util6 = require("node:util");
+var import_node_child_process11 = require("node:child_process");
+var import_node_util9 = require("node:util");
 var import_node_url = require("node:url");
 
 // scripts/dev-session/beta-pool/projection.mjs
-var import_node_fs17 = require("node:fs");
+var import_node_fs18 = require("node:fs");
 var import_promises12 = __toESM(require("node:fs/promises"), 1);
 var import_node_os16 = __toESM(require("node:os"), 1);
 var import_node_path29 = __toESM(require("node:path"), 1);
@@ -7493,8 +7493,8 @@ function publicManifest(manifest) {
 }
 
 // scripts/dev-session/services/index.mjs
-var import_node_child_process8 = require("node:child_process");
-var import_node_util4 = require("node:util");
+var import_node_child_process9 = require("node:child_process");
+var import_node_util7 = require("node:util");
 
 // scripts/dev-session/registry.mjs
 var import_node_crypto = require("node:crypto");
@@ -7874,9 +7874,10 @@ async function releaseSessionPortLeases(root, ports, sessionId) {
 
 // scripts/dev-session/services/runtime.mjs
 var import_node_child_process5 = require("node:child_process");
+var import_node_fs15 = require("node:fs");
 var import_promises5 = require("node:fs/promises");
 var import_node_path19 = __toESM(require("node:path"), 1);
-var import_node_util2 = require("node:util");
+var import_node_util4 = require("node:util");
 
 // scripts/beta/state.mjs
 var import_promises3 = __toESM(require("node:fs/promises"), 1);
@@ -8405,6 +8406,7 @@ __export(src_exports, {
   assertOwnedPath: () => assertOwnedPath,
   assertPrivateDescriptor: () => assertPrivateDescriptor,
   assertPrivateDirectory: () => assertPrivateDirectory,
+  assertPrivateDirectoryAsync: () => assertPrivateDirectoryAsync,
   assertWindowsPrivatePath: () => assertWindowsPrivatePath,
   backupMigrationSources: () => backupMigrationSources,
   canonicalPath: () => canonicalPath,
@@ -8428,12 +8430,14 @@ __export(src_exports, {
   prepareInitialConfiguration: () => prepareInitialConfiguration,
   prepareMigration: () => prepareMigration,
   processStartIdentity: () => processStartIdentity,
+  processStartIdentityAsync: () => processStartIdentityAsync,
   readInitialAuthFile: () => readInitialAuthFile,
   readInstalledRuntimeBuild: () => readInstalledRuntimeBuild,
   readLocalRuntimeStatusReport: () => readLocalRuntimeStatusReport,
   readNativeHostRuntimeStatusReport: () => readNativeHostRuntimeStatusReport,
   readNativeHostSharingEnabled: () => readNativeHostSharingEnabled,
   readPrivateFile: () => readPrivateFile,
+  readPrivateFileAsync: () => readPrivateFileAsync,
   readResearchMcpInstallation: () => readResearchMcpInstallation,
   redactConfiguration: () => redactConfiguration,
   registerStableConfigurationRoot: () => registerStableConfigurationRoot,
@@ -8479,9 +8483,9 @@ var import_node_fs3 = require("node:fs");
 
 // packages/config-node/src/windows-permissions.ts
 var import_node_child_process2 = require("node:child_process");
-function assertWindowsPrivatePath(file) {
-  if (process.platform !== "win32") return;
-  const script = `
+var import_node_util = require("node:util");
+var executeFile = (0, import_node_util.promisify)(import_node_child_process2.execFile);
+var script = `
 $ErrorActionPreference = 'Stop'
 try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
@@ -8499,6 +8503,27 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
   [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+function checkFailure(file, startedAt, cause) {
+  const error = cause;
+  const timedOut = error.code === "ETIMEDOUT" || error.killed === true && error.signal === "SIGTERM" && error.code == null;
+  return new ConfigurationError(
+    timedOut ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+    [
+      file,
+      `exit=${error.status ?? "none"}`,
+      `signal=${error.signal ?? "none"}`,
+      `code=${error.code ?? "none"}`,
+      `elapsedMs=${Math.round(performance.now() - startedAt)}`
+    ]
+  );
+}
+function assertResult(file, result) {
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+}
+function assertWindowsPrivatePath(file) {
+  if (process.platform !== "win32") return;
   const startedAt = performance.now();
   let result;
   try {
@@ -8511,40 +8536,80 @@ foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.Security
       windowsHide: true
     }).trim();
   } catch (cause) {
-    const error = cause;
-    throw new ConfigurationError(
-      error.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
-      [
-        file,
-        `exit=${error.status ?? "none"}`,
-        `signal=${error.signal ?? "none"}`,
-        `code=${error.code ?? "none"}`,
-        `elapsedMs=${Math.round(performance.now() - startedAt)}`
-      ]
-    );
+    throw checkFailure(file, startedAt, cause);
   }
-  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
-  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
-  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
+  assertResult(file, result);
+}
+async function assertWindowsPrivatePathAsync(file) {
+  if (process.platform !== "win32") return;
+  const startedAt = performance.now();
+  let result;
+  try {
+    const { stdout } = await executeFile("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+      env: { ...process.env, RUNWEAVE_PRIVATE_PATH: file },
+      encoding: "utf8",
+      maxBuffer: 64 * 1024,
+      timeout: 1e4,
+      windowsHide: true
+    });
+    result = stdout.trim();
+  } catch (cause) {
+    throw checkFailure(file, startedAt, cause);
+  }
+  assertResult(file, result);
 }
 
 // packages/config-node/src/private-file.ts
-function assertPrivateDirectory(directory2) {
+function privateDirectoryStat(directory2) {
   const stat = (0, import_node_fs3.lstatSync)(directory2);
   if (!stat.isDirectory() || stat.isSymbolicLink() || process.platform !== "win32" && stat.mode & 63 || typeof process.getuid === "function" && stat.uid !== process.getuid()) throw new ConfigurationError("CONFIG_ROOT_PERMISSIONS_INVALID");
-  assertWindowsPrivatePath(directory2);
+  return stat;
 }
-function assertPrivateDescriptor(fd, maxBytes = 1024 * 1024, file) {
+function privateDescriptorStat(fd, maxBytes) {
   const stat = (0, import_node_fs3.fstatSync)(fd);
   if (!stat.isFile() || stat.nlink !== 1) throw new ConfigurationError("CONFIG_FILE_NOT_PRIVATE_REGULAR");
   if (typeof process.getuid === "function" && stat.uid !== process.getuid()) throw new ConfigurationError("CONFIG_FILE_OWNER_MISMATCH");
   if (process.platform !== "win32" && stat.mode & 63) throw new ConfigurationError("CONFIG_FILE_PERMISSIONS_INVALID");
+  if (stat.size > maxBytes) throw new ConfigurationError("CONFIG_FILE_TOO_LARGE");
+  return stat;
+}
+function assertPrivateDirectory(directory2) {
+  privateDirectoryStat(directory2);
+  assertWindowsPrivatePath(directory2);
+}
+function assertPrivateDescriptor(fd, maxBytes = 1024 * 1024, file) {
+  const stat = privateDescriptorStat(fd, Infinity);
   if (process.platform === "win32") {
     if (!file) throw new ConfigurationError("CONFIG_PRIVATE_PATH_REQUIRED");
     assertWindowsPrivatePath(file);
   }
   if (stat.size > maxBytes) throw new ConfigurationError("CONFIG_FILE_TOO_LARGE");
 }
+function assertUnchangedPath(file, before) {
+  const after = (0, import_node_fs3.lstatSync)(file);
+  if (after.isSymbolicLink() || before.dev !== after.dev || before.ino !== after.ino || before.ctimeMs !== after.ctimeMs)
+    throw new ConfigurationError("CONFIG_PRIVATE_PATH_CHANGED", [file]);
+}
+async function assertPrivateDirectoryAsync(directory2) {
+  const before = privateDirectoryStat(directory2);
+  await assertWindowsPrivatePathAsync(directory2);
+  privateDirectoryStat(directory2);
+  assertUnchangedPath(directory2, before);
+}
+async function readPrivateFileAsync(file, maxBytes = 1024 * 1024) {
+  const fd = (0, import_node_fs3.openSync)(file, import_node_fs3.constants.O_RDONLY | import_node_fs3.constants.O_NOFOLLOW);
+  try {
+    const before = privateDescriptorStat(fd, maxBytes);
+    await assertWindowsPrivatePathAsync(file);
+    assertUnchangedPath(file, before);
+    privateDescriptorStat(fd, maxBytes);
+    const source = (0, import_node_fs3.readFileSync)(fd, "utf8");
+    if (Buffer.byteLength(source) > maxBytes) throw new ConfigurationError("CONFIG_FILE_TOO_LARGE");
+    return source;
+  } finally {
+    (0, import_node_fs3.closeSync)(fd);
+  }
+}
 function readPrivateFile(file, maxBytes = 1024 * 1024) {
   const fd = (0, import_node_fs3.openSync)(file, import_node_fs3.constants.O_RDONLY | import_node_fs3.constants.O_NOFOLLOW);
   try {
@@ -8632,6 +8697,8 @@ function assertOwnedPath(context, value) {
 // packages/config-node/src/platform.ts
 var import_node_child_process3 = require("node:child_process");
 var import_node_fs5 = require("node:fs");
+var import_node_util2 = require("node:util");
+var executeFile2 = (0, import_node_util2.promisify)(import_node_child_process3.execFile);
 function processStartIdentity(pid) {
   if (!Number.isSafeInteger(pid) || pid < 1) return null;
   try {
@@ -8644,6 +8711,19 @@ function processStartIdentity(pid) {
     return null;
   }
 }
+async function processStartIdentityAsync(pid) {
+  if (!Number.isSafeInteger(pid) || pid < 1) return null;
+  try {
+    const { stdout } = await executeFile2(
+      process.platform === "win32" ? "powershell.exe" : "ps",
+      process.platform === "win32" ? ["-NoProfile", "-NonInteractive", "-Command", `[Diagnostics.Process]::GetProcessById(${pid}).StartTime.ToUniversalTime().Ticks`] : ["-p", String(pid), "-o", "lstart="],
+      { encoding: "utf8", timeout: 5e3, windowsHide: true }
+    );
+    return stdout.trim() || null;
+  } catch {
+    return null;
+  }
+}
 function syncDirectory(directory2) {
   if (process.platform === "win32") return;
   const fd = (0, import_node_fs5.openSync)(directory2, "r");
@@ -10112,14 +10192,14 @@ function prepareInitialConfiguration(context, auth) {
 // packages/config-node/src/research-mcp.ts
 var import_node_fs11 = require("node:fs");
 var import_node_path14 = __toESM(require("node:path"), 1);
-function researchMcpHome() {
-  return import_node_path14.default.join(resolveConfigurationContext().configRoot, "research-mcp");
+function researchMcpHome(context = resolveConfigurationContext()) {
+  return import_node_path14.default.join(context.configRoot, "research-mcp");
 }
-function readResearchMcpInstallation() {
-  const file = import_node_path14.default.join(researchMcpHome(), "installation.json");
+function readResearchMcpInstallation(context = resolveConfigurationContext()) {
+  const file = import_node_path14.default.join(researchMcpHome(context), "installation.json");
   if (!(0, import_node_fs11.existsSync)(file)) return null;
   const value = JSON.parse(readPrivateFile(file));
-  if (value.version !== 1 || value.instanceId !== resolveConfigurationContext().instanceId || typeof value.enabled !== "boolean" || !Number.isInteger(value.port) || value.port < 1 || value.port > 65535 || ![value.entry, value.node, value.cwd].every((v) => typeof v === "string" && import_node_path14.default.isAbsolute(v)) || typeof value.sourceRevision !== "string" || typeof value.releaseId !== "string" || !Number.isFinite(value.installedAt) || value.tunnel !== null && (!value.tunnel || !/^[a-zA-Z0-9_-]+$/.test(value.tunnel.profile) || ![value.tunnel.executable, value.tunnel.profileDir, value.tunnel.healthFile].every((v) => typeof v === "string" && import_node_path14.default.isAbsolute(v)))) {
+  if (value.version !== 1 || value.instanceId !== context.instanceId || typeof value.enabled !== "boolean" || !Number.isInteger(value.port) || value.port < 1 || value.port > 65535 || ![value.entry, value.node, value.cwd].every((v) => typeof v === "string" && import_node_path14.default.isAbsolute(v)) || typeof value.sourceRevision !== "string" || typeof value.releaseId !== "string" || !Number.isFinite(value.installedAt) || value.tunnel !== null && (!value.tunnel || !/^[a-zA-Z0-9_-]+$/.test(value.tunnel.profile) || ![value.tunnel.executable, value.tunnel.profileDir, value.tunnel.healthFile].every((v) => typeof v === "string" && import_node_path14.default.isAbsolute(v)))) {
     throw new Error("Invalid research MCP installation identity");
   }
   return value;
@@ -10391,8 +10471,8 @@ var import_node_fs14 = require("node:fs");
 var import_promises4 = __toESM(require("node:fs/promises"), 1);
 var import_node_path17 = __toESM(require("node:path"), 1);
 var import_node_child_process4 = require("node:child_process");
-var import_node_util = require("node:util");
-var execFileAsync = (0, import_node_util.promisify)(import_node_child_process4.execFile);
+var import_node_util3 = require("node:util");
+var execFileAsync = (0, import_node_util3.promisify)(import_node_child_process4.execFile);
 var FILE_NAME = "backend-health-binding.json";
 async function readBackendHealthAuth(profileDir) {
   let handle;
@@ -10616,7 +10696,7 @@ function isCanonicalLoopbackEndpoint(endpoint) {
 }
 
 // scripts/dev-session/services/runtime.mjs
-var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process5.execFile);
+var execFileAsync2 = (0, import_node_util4.promisify)(import_node_child_process5.execFile);
 function isProcessLive2(pid) {
   try {
     process.kill(pid, 0);
@@ -10627,6 +10707,20 @@ function isProcessLive2(pid) {
 }
 function readProcessSignature2(pid) {
   try {
+    if (process.platform === "linux") {
+      const readBirth = () => {
+        const stat = (0, import_node_fs15.readFileSync)(`/proc/${pid}/stat`, "utf8");
+        const fields = stat.slice(stat.lastIndexOf(")") + 1).trim().split(/\s+/);
+        return fields[0] !== "Z" && /^\d+$/.test(fields[19] ?? "") ? fields[19] : "";
+      };
+      const bootId = (0, import_node_fs15.readFileSync)("/proc/sys/kernel/random/boot_id", "utf8").trim();
+      const startTicks = readBirth();
+      const command = (0, import_node_fs15.readFileSync)(`/proc/${pid}/cmdline`);
+      if (!bootId || !startTicks || !command.length || readBirth() !== startTicks) {
+        return "";
+      }
+      return `linux:${bootId}:${startTicks}:${command.toString("base64")}`;
+    }
     return (0, import_node_child_process5.execFileSync)(
       "ps",
       ["-p", String(pid), "-o", "lstart=", "-o", "command="],
@@ -10972,13 +11066,18 @@ async function stopOwnedProcess(processInfo) {
   return { outcome: "forced" };
 }
 
-// scripts/dev-session/services/beta.mjs
+// scripts/dev-session/services/dedicated.mjs
 var import_node_child_process7 = require("node:child_process");
-var import_node_util3 = require("node:util");
-var execFileAsync3 = (0, import_node_util3.promisify)(import_node_child_process7.execFile);
+var import_node_util5 = require("node:util");
+var execFileAsync3 = (0, import_node_util5.promisify)(import_node_child_process7.execFile);
+
+// scripts/dev-session/services/beta.mjs
+var import_node_child_process8 = require("node:child_process");
+var import_node_util6 = require("node:util");
+var execFileAsync4 = (0, import_node_util6.promisify)(import_node_child_process8.execFile);
 
 // scripts/dev-session/services/index.mjs
-var execFileAsync4 = (0, import_node_util4.promisify)(import_node_child_process8.execFile);
+var execFileAsync5 = (0, import_node_util7.promisify)(import_node_child_process9.execFile);
 async function assertSessionServicesStoppable(services) {
   const inspection = await inspectSessionServices(services);
   const staleOwnedServices = [
@@ -11013,7 +11112,7 @@ async function stopSessionServices(services, { identityVerified = false, stopBet
     if (service?.ownership === "dedicated") {
       if (service.betaControl) {
         if (stopBetaControl) await stopBetaControl(service);
-        else await execFileAsync4(service.betaControl.command, service.betaControl.args, {
+        else await execFileAsync5(service.betaControl.command, service.betaControl.args, {
           cwd: service.betaControl.cwd,
           encoding: "utf8"
         });
@@ -11073,7 +11172,7 @@ async function cleanupStaleSessionServices(services, { serviceNames = null, stop
     }
     if (originalService.betaControl) {
       if (stopBetaControl) await stopBetaControl(originalService);
-      else await execFileAsync4(
+      else await execFileAsync5(
         originalService.betaControl.command,
         originalService.betaControl.args,
         {
@@ -11150,7 +11249,7 @@ var import_node_path24 = __toESM(require("node:path"), 1);
 
 // scripts/dev-session/beta-pool/storage/files.mjs
 var import_node_crypto9 = require("node:crypto");
-var import_node_fs15 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 var import_promises6 = __toESM(require("node:fs/promises"), 1);
 var import_node_path20 = __toESM(require("node:path"), 1);
 function sameFileIdentity2(left, right) {
@@ -11198,7 +11297,7 @@ async function readRegularJson(filePath, allowedRoot) {
   try {
     handle = await import_promises6.default.open(
       filePath,
-      import_node_fs15.constants.O_RDONLY | import_node_fs15.constants.O_NOFOLLOW
+      import_node_fs16.constants.O_RDONLY | import_node_fs16.constants.O_NOFOLLOW
     );
     const before = await handle.stat();
     if (!before.isFile()) {
@@ -11223,7 +11322,7 @@ async function atomicWriteJson2(filePath, value, allowedRoot) {
   );
   const handle = await import_promises6.default.open(
     temporaryPath,
-    import_node_fs15.constants.O_WRONLY | import_node_fs15.constants.O_CREAT | import_node_fs15.constants.O_EXCL | import_node_fs15.constants.O_NOFOLLOW,
+    import_node_fs16.constants.O_WRONLY | import_node_fs16.constants.O_CREAT | import_node_fs16.constants.O_EXCL | import_node_fs16.constants.O_NOFOLLOW,
     384
   );
   try {
@@ -11414,12 +11513,12 @@ async function releaseBetaSlotRecoveryClaim(recoveryClaim, paths) {
 }
 
 // scripts/dev-session/beta-pool/storage/paths.mjs
-var import_node_fs16 = require("node:fs");
+var import_node_fs17 = require("node:fs");
 var import_node_os10 = __toESM(require("node:os"), 1);
 var import_node_path22 = __toESM(require("node:path"), 1);
 function isDirectory(filePath) {
   try {
-    return (0, import_node_fs16.lstatSync)(filePath).isDirectory();
+    return (0, import_node_fs17.lstatSync)(filePath).isDirectory();
   } catch {
     return false;
   }
@@ -12224,11 +12323,11 @@ async function resolveBetaSlotRetentionTargets(homeDir, slotId) {
 
 // scripts/dev-session/beta-pool/storage/index.mjs
 var import_node_crypto11 = require("node:crypto");
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 var import_promises11 = __toESM(require("node:fs/promises"), 1);
 var import_node_os15 = __toESM(require("node:os"), 1);
 var import_node_path28 = __toESM(require("node:path"), 1);
-var import_node_util5 = require("node:util");
+var import_node_util8 = require("node:util");
 
 // scripts/dev-session/beta-pool/metadata.mjs
 var import_node_os14 = __toESM(require("node:os"), 1);
@@ -12314,7 +12413,7 @@ async function recordBetaSlotRecoveryAttempt({
 }
 
 // scripts/dev-session/beta-pool/storage/index.mjs
-var execFileAsync5 = (0, import_node_util5.promisify)(import_node_child_process9.execFile);
+var execFileAsync6 = (0, import_node_util8.promisify)(import_node_child_process10.execFile);
 var MAX_UPDATE_LOGS = 5;
 var MAX_UPDATE_LOG_BYTES = 64 * 1024 * 1024;
 var MIN_PLANNED_WRITE_BYTES = 512 * 1024 * 1024;
@@ -12324,7 +12423,7 @@ async function unregisterApplicationPath(appPath, applicationsDir) {
   if (process.platform !== "darwin" || import_node_path28.default.resolve(applicationsDir) !== "/Applications") {
     return false;
   }
-  return await execFileAsync5(LAUNCH_SERVICES_REGISTER, ["-u", appPath]).then(() => true).catch(() => false);
+  return await execFileAsync6(LAUNCH_SERVICES_REGISTER, ["-u", appPath]).then(() => true).catch(() => false);
 }
 async function calculatePathBytes(targetPath, rejectSymlink = true) {
   const stats = await import_promises11.default.lstat(targetPath).catch((error) => {
@@ -12740,7 +12839,7 @@ async function readManifestObservation(lease) {
   try {
     handle = await import_promises12.default.open(
       lease.ownerManifestPath,
-      import_node_fs17.constants.O_RDONLY | import_node_fs17.constants.O_NOFOLLOW
+      import_node_fs18.constants.O_RDONLY | import_node_fs18.constants.O_NOFOLLOW
     );
     const opened = await handle.stat();
     if (!opened.isFile()) {
@@ -13216,7 +13315,7 @@ function assertExpectedVersion(actual, expected) {
 }
 
 // scripts/dev-resources/snapshot.mjs
-var exec = (0, import_node_util6.promisify)(import_node_child_process10.execFile);
+var exec = (0, import_node_util9.promisify)(import_node_child_process11.execFile);
 var pythonEntry = (0, import_node_url.fileURLToPath)(
   new URL("../ios-simulators/monitor.py", __IMPORT_META_URL__)
 );
@@ -13506,7 +13605,7 @@ async function inspectResources({ generation, backendPid }) {
 }
 
 // scripts/dev-resources/operations.mjs
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var import_node_os21 = __toESM(require("node:os"), 1);
 
 // scripts/dev-session/services/beta-start-recovery.mjs
@@ -13782,12 +13881,12 @@ async function finalizeBetaSlotRelease(options) {
 
 // scripts/dev-session/beta-pool/recovery/index.mjs
 var import_node_crypto14 = require("node:crypto");
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var import_promises14 = __toESM(require("node:fs/promises"), 1);
 var import_node_os19 = __toESM(require("node:os"), 1);
 var import_node_path32 = __toESM(require("node:path"), 1);
-var import_node_util7 = require("node:util");
-var execFileAsync6 = (0, import_node_util7.promisify)(import_node_child_process11.execFile);
+var import_node_util10 = require("node:util");
+var execFileAsync7 = (0, import_node_util10.promisify)(import_node_child_process12.execFile);
 function sleep(milliseconds) {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
@@ -13865,7 +13964,7 @@ async function stopRecordedDedicatedServices(manifest, lease, homeDir, stopBetaC
     await stopBetaControl(manifest);
   } else if (await import_promises14.default.lstat(controlScript).catch(() => null)) {
     try {
-      await execFileAsync6(
+      await execFileAsync7(
         process.execPath,
         [
           controlScript,
@@ -14258,7 +14357,7 @@ async function recoverBetaPoolSlot({
 }
 
 // scripts/beta/operations.mjs
-var import_node_fs18 = require("node:fs");
+var import_node_fs19 = require("node:fs");
 var import_promises15 = __toESM(require("node:fs/promises"), 1);
 var import_node_path33 = __toESM(require("node:path"), 1);
 async function withBetaLock(paths, operation) {
@@ -14390,7 +14489,7 @@ async function quitBeta(paths) {
 }
 async function runAppServerCli(paths, command, sourceRevision = null) {
   const cliEntry = paths.controlCliPath;
-  if (!(0, import_node_fs18.existsSync)(cliEntry)) {
+  if (!(0, import_node_fs19.existsSync)(cliEntry)) {
     return { ok: false, code: 1, stderr: `missing CLI build: ${cliEntry}` };
   }
   return await runCapture(
@@ -14865,7 +14964,7 @@ async function releaseSimulator(request, context) {
   if (resource.release.action !== request.action)
     conflict("\u6E05\u7406\u6761\u4EF6\u5DF2\u53D8\u5316\uFF0C\u8BF7\u5237\u65B0\u540E\u91CD\u65B0\u786E\u8BA4");
   return await new Promise((resolve, reject) => {
-    const child = (0, import_node_child_process12.spawn)("python3", ["-B", pythonEntry, "release"], {
+    const child = (0, import_node_child_process13.spawn)("python3", ["-B", pythonEntry, "release"], {
       stdio: ["pipe", "pipe", "ignore"]
     });
     let stdout = "";