@signetai/connector-hermes-agent 0.228.7 → 0.229.4

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAqCtH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAmqCD,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IAEpC,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;gBAEpC,MAAM,CAAC,EAAE,qBAAqB;IAK1C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAKrB,aAAa,IAAI,MAAM;IAKjB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,aAAa,CAAC;IAyLvF,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IA4D3C,WAAW,IAAI,OAAO;IAShB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAU7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAuB,MAAM,wBAAwB,CAAC;AAqCtH,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAs7CD,qBAAa,oBAAqB,SAAQ,aAAa;IACtD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,SAAS,kBAAkB;IAEpC,YAAY,IAAI,MAAM;IAItB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB;gBAEpC,MAAM,CAAC,EAAE,qBAAqB;IAK1C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAKrB,aAAa,IAAI,MAAM;IAKjB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,aAAa,CAAC;IAyLvF,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IA4D3C,WAAW,IAAI,OAAO;IAShB,QAAQ,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAU7C;AAED,wBAAsB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwG9B;AAED,wBAAgB,eAAe,IAAI,oBAAoB,CAEtD;AAED,eAAe,oBAAoB,CAAC"}

package/dist/index.js

@@ -35209,7 +35209,10 @@ ${content}`);
   async inspectHealth() {
     try {
       if (this.isInstalled()) {
-        return { status: "unknown", message: "Integration detected; runtime health has not been verified." };
+        return {
+          status: "unknown",
+          message: "Signet integration files are installed. This connector does not check runtime health."
+        };
       }
       if (this.isDetected()) {
         return { status: "degraded", message: "Harness detected; Signet integration is not configured." };
@@ -35217,7 +35220,7 @@ ${content}`);
       return { status: "unhealthy", message: "Signet integration is not installed." };
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
-      return { status: "unhealthy", message: `Health inspection failed: ${message}` };
+      return { status: "unknown", message: `Health inspection failed: ${message}` };
     }
   }
   getRecoveryCapabilities() {
@@ -35317,14 +35320,17 @@ function closeDirectory(fd) {
 }
 var SECURE_REMOVAL_CHANGED_STATUS = 75;
 var SECURE_REMOVAL_SCRIPT = [
-  "import os, sys",
+  "import ctypes, os, secrets, stat, sys",
   "expected_dev = int(sys.argv[1])",
   "expected_ino = int(sys.argv[2])",
   "operation = sys.argv[3]",
   "name = sys.argv[4]",
   "expected_parent = sys.argv[5]",
-  "descriptor_root = sys.argv[6]",
-  "if os.path.realpath(os.path.join(descriptor_root, '3')) != expected_parent:",
+  "expected_parent_stat = os.stat(expected_parent, follow_symlinks=False)",
+  "if os.path.realpath(expected_parent) != expected_parent:",
+  "    raise SystemExit(75)",
+  "opened_parent_stat = os.fstat(3)",
+  "if (opened_parent_stat.st_dev, opened_parent_stat.st_ino) != (expected_parent_stat.st_dev, expected_parent_stat.st_ino):",
   "    raise SystemExit(75)",
   "try:",
   "    current = os.stat(name, dir_fd=3, follow_symlinks=False)",
@@ -35332,15 +35338,186 @@ var SECURE_REMOVAL_SCRIPT = [
   "    raise SystemExit(75)",
   "if current.st_dev != expected_dev or current.st_ino != expected_ino:",
   "    raise SystemExit(75)",
+  "if operation == 'verify':",
+  "    raise SystemExit(0)",
+  "if operation not in ('directory', 'file'):",
+  "    raise SystemExit(76)",
+  "libc = ctypes.CDLL(None, use_errno=True)",
+  "if sys.platform == 'darwin':",
+  "    rename_function = getattr(libc, 'renameatx_np', None)",
+  "    rename_flags = 4",
+  "elif sys.platform.startswith('linux'):",
+  "    rename_function = getattr(libc, 'renameat2', None)",
+  "    rename_flags = 1",
+  "else:",
+  "    rename_function = None",
+  "    rename_flags = 0",
+  "if rename_function is None:",
+  "    raise OSError('exclusive descriptor-relative rename is unavailable')",
+  "rename_function.argtypes = [ctypes.c_int, ctypes.c_char_p, ctypes.c_int, ctypes.c_char_p, ctypes.c_uint]",
+  "rename_function.restype = ctypes.c_int",
+  "def rename_exclusive(source_fd, source_name, destination_fd, destination_name):",
+  "    result = rename_function(source_fd, os.fsencode(source_name), destination_fd, os.fsencode(destination_name), rename_flags)",
+  "    if result != 0:",
+  "        error = ctypes.get_errno()",
+  "        raise OSError(error, os.strerror(error), source_name)",
+  "quarantine = None",
+  "for attempt in range(8):",
+  "    candidate = '.signet-remove-' + secrets.token_hex(16)",
+  "    try:",
+  "        os.mkdir(candidate, 0o700, dir_fd=3)",
+  "        quarantine = candidate",
+  "        break",
+  "    except FileExistsError:",
+  "        pass",
+  "if quarantine is None:",
+  "    raise OSError('could not allocate a private removal directory')",
+  "quarantine_fd = os.open(quarantine, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=3)",
+  "changed = False",
+  "entry_moved = False",
+  "try:",
+  "    os.fchmod(quarantine_fd, 0o700)",
+  "    try:",
+  "        rename_exclusive(3, name, quarantine_fd, 'entry')",
+  "        entry_moved = True",
+  "    except FileNotFoundError:",
+  "        changed = True",
+  "    if not changed:",
+  "        moved = os.stat('entry', dir_fd=quarantine_fd, follow_symlinks=False)",
+  "        if moved.st_dev != expected_dev or moved.st_ino != expected_ino:",
+  "            try:",
+  "                rename_exclusive(quarantine_fd, 'entry', 3, name)",
+  "                entry_moved = False",
+  "            except OSError as restore_error:",
+  "                print(f'recovery entry retained at {expected_parent}/{quarantine}/entry: {restore_error}', file=sys.stderr)",
+  "            changed = True",
+  "        elif operation == 'directory':",
+  "            if not stat.S_ISDIR(moved.st_mode):",
+  "                try:",
+  "                    rename_exclusive(quarantine_fd, 'entry', 3, name)",
+  "                    entry_moved = False",
+  "                except OSError as restore_error:",
+  "                    print(f'recovery entry retained at {expected_parent}/{quarantine}/entry: {restore_error}', file=sys.stderr)",
+  "                changed = True",
+  "            else:",
+  "                os.rmdir('entry', dir_fd=quarantine_fd)",
+  "                entry_moved = False",
+  "        elif stat.S_ISDIR(moved.st_mode):",
+  "            try:",
+  "                rename_exclusive(quarantine_fd, 'entry', 3, name)",
+  "                entry_moved = False",
+  "            except OSError as restore_error:",
+  "                print(f'recovery entry retained at {expected_parent}/{quarantine}/entry: {restore_error}', file=sys.stderr)",
+  "            changed = True",
+  "        else:",
+  "            os.unlink('entry', dir_fd=quarantine_fd)",
+  "            entry_moved = False",
+  "except Exception as error:",
+  "    if entry_moved:",
+  "        print(f'recovery entry retained at {expected_parent}/{quarantine}/entry: {error}', file=sys.stderr)",
+  "    else:",
+  "        try:",
+  "            os.rmdir(quarantine, dir_fd=3)",
+  "        except OSError:",
+  "            pass",
+  "    raise",
+  "finally:",
+  "    os.close(quarantine_fd)",
+  "if changed:",
+  "    try:",
+  "        os.rmdir(quarantine, dir_fd=3)",
+  "    except OSError:",
+  "        pass",
+  "    raise SystemExit(75)",
+  "os.rmdir(quarantine, dir_fd=3)"
+].join(`
+`);
+var SECURE_CREATE_DIRECTORIES_SCRIPT = [
+  "import os, sys",
+  "expected = os.stat(sys.argv[1], follow_symlinks=False)",
+  "opened = os.fstat(3)",
+  "if (opened.st_dev, opened.st_ino) != (expected.st_dev, expected.st_ino):",
+  "    raise SystemExit(75)",
+  "fd = os.dup(3)",
+  "try:",
+  "    for name in sys.argv[2:]:",
+  "        try:",
+  "            os.mkdir(name, dir_fd=fd)",
+  "        except FileExistsError:",
+  "            pass",
+  "        entry = os.stat(name, dir_fd=fd, follow_symlinks=False)",
+  "        child = os.open(name, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=fd)",
+  "        opened = os.fstat(child)",
+  "        if (entry.st_dev, entry.st_ino) != (opened.st_dev, opened.st_ino):",
+  "            os.close(child)",
+  "            raise SystemExit(75)",
+  "        os.close(fd)",
+  "        fd = child",
+  "finally:",
+  "    os.close(fd)"
+].join(`
+`);
+var SECURE_WRITE_FILE_SCRIPT = [
+  "import os, stat, sys",
+  "expected = os.stat(sys.argv[1], follow_symlinks=False)",
+  "opened = os.fstat(3)",
+  "if (opened.st_dev, opened.st_ino) != (expected.st_dev, expected.st_ino):",
+  "    raise SystemExit(75)",
+  "fd = os.dup(3)",
+  "try:",
+  "    for name in sys.argv[2:-1]:",
+  "        entry = os.stat(name, dir_fd=fd, follow_symlinks=False)",
+  "        child = os.open(name, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=fd)",
+  "        opened = os.fstat(child)",
+  "        if (entry.st_dev, entry.st_ino) != (opened.st_dev, opened.st_ino):",
+  "            os.close(child)",
+  "            raise SystemExit(75)",
+  "        os.close(fd)",
+  "        fd = child",
+  "    name = sys.argv[-1]",
+  "    try:",
+  "        entry = os.stat(name, dir_fd=fd, follow_symlinks=False)",
+  "        if not stat.S_ISREG(entry.st_mode):",
+  "            raise SystemExit(76)",
+  "        flags = os.O_WRONLY | os.O_NOFOLLOW",
+  "    except FileNotFoundError:",
+  "        entry = None",
+  "        flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL | os.O_NOFOLLOW",
+  "    file_fd = os.open(name, flags, 0o666, dir_fd=fd)",
+  "    try:",
+  "        opened = os.fstat(file_fd)",
+  "        if entry is not None and (entry.st_dev, entry.st_ino) != (opened.st_dev, opened.st_ino):",
+  "            raise SystemExit(75)",
+  "        os.ftruncate(file_fd, 0)",
+  "        view = memoryview(sys.stdin.buffer.read())",
+  "        while view:",
+  "            written = os.write(file_fd, view)",
+  "            view = view[written:]",
+  "    finally:",
+  "        os.close(file_fd)",
+  "finally:",
+  "    os.close(fd)"
+].join(`
+`);
+var SECURE_READ_FILE_SCRIPT = [
+  "import os, stat, sys",
   "try:",
-  "    if operation == 'directory':",
-  "        os.rmdir(name, dir_fd=3)",
-  "    elif operation == 'file':",
-  "        os.unlink(name, dir_fd=3)",
-  "    elif operation != 'verify':",
-  "        raise SystemExit(76)",
+  "    fd = os.open(sys.argv[-1], os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK, dir_fd=3)",
   "except FileNotFoundError:",
-  "    raise SystemExit(75)"
+  "    raise SystemExit(0)",
+  "try:",
+  "    if not stat.S_ISREG(os.fstat(fd).st_mode):",
+  "        raise SystemExit(0)",
+  "    content = bytearray()",
+  "    while len(content) <= 65536:",
+  "        chunk = os.read(fd, min(4096, 65537 - len(content)))",
+  "        if not chunk:",
+  "            break",
+  "        content.extend(chunk)",
+  "    if len(content) <= 65536:",
+  "        sys.stdout.buffer.write(content)",
+  "finally:",
+  "    os.close(fd)"
 ].join(`
 `);
 function getPythonCandidates() {
@@ -35355,6 +35532,30 @@ function getPythonCandidates() {
     { command: "python", args: [] }
   ];
 }
+function runSecureFilesystemOperation(fd, rootPath, script, args, input) {
+  if (DESCRIPTOR_ROOT3 === null)
+    throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
+  const errors = [];
+  for (const candidate of getPythonCandidates()) {
+    const result = spawnSyncHidden(candidate.command, [...candidate.args, "-c", script, rootPath, ...args], {
+      encoding: "utf-8",
+      input: input === undefined ? undefined : Buffer.from(input),
+      stdio: [input === undefined ? "ignore" : "pipe", "pipe", "pipe", fd],
+      timeout: 5000
+    });
+    if (result.error) {
+      errors.push(`${candidate.command}: ${result.error.message}`);
+      continue;
+    }
+    if (result.status === 0)
+      return result.stdout;
+    if (result.status === 75)
+      throw new Error("Hermes directory entry changed during secure write");
+    const detail = result.stderr.trim();
+    errors.push(`${candidate.command}: ${detail || `exited ${result.status ?? "without a status"}`}`);
+  }
+  throw new Error(`${DESCRIPTOR_WRITE_UNAVAILABLE_ERROR}: ${errors.join("; ") || "No Python interpreter found"}`);
+}
 function runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expectedIno, operation) {
   if (DESCRIPTOR_ROOT3 === null)
     throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
@@ -35368,8 +35569,7 @@ function runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expect
       String(expectedIno),
       operation,
       name,
-      parentPath,
-      DESCRIPTOR_ROOT3
+      parentPath
     ], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe", parentFd],
@@ -35382,9 +35582,11 @@ function runSecureEntryOperation(parentFd, parentPath, name, expectedDev, expect
     if (result.status === 0)
       return;
     if (result.status === SECURE_REMOVAL_CHANGED_STATUS) {
-      throw new Error(`Hermes directory entry changed during secure removal: ${name}`);
+      const detail = result.stderr.trim();
+      throw new Error(`Hermes directory entry changed during secure removal: ${name}${detail ? ` (${detail})` : ""}`);
     }
-    errors.push(`${candidate.command}: exited ${result.status ?? "without a status"}`);
+    const detail = result.stderr.trim();
+    errors.push(`${candidate.command}: ${detail || `exited ${result.status ?? "without a status"}`}`);
   }
   throw new Error(`${DESCRIPTOR_WRITE_UNAVAILABLE_ERROR}: ${errors.join("; ") || "No Python interpreter found"}`);
 }
@@ -35397,6 +35599,12 @@ function removeEntryNoFollow(parentFd, parentPath, name, expectedDev, expectedIn
 function sameStatIdentity(left, right) {
   return left.dev === right.dev && left.ino === right.ino;
 }
+function assertDescriptorPathIdentity(fd, path, message) {
+  const pathStat = lstatSync(path);
+  if (realpathSync3(path) !== path || pathStat.isSymbolicLink() || !sameStatIdentity(fstatSync3(fd), pathStat)) {
+    throw new Error(message);
+  }
+}
 function ensureContainedDirectory(directory, targetRoot) {
   const safeDirectory = resolveContainedWritePath(directory, targetRoot);
   if (!DESCRIPTOR_WRITES_SUPPORTED) {
@@ -35420,6 +35628,15 @@ function ensureContainedDirectory(directory, targetRoot) {
   if (existingReal !== existing) {
     throw new Error(`Hermes target directory is symlinked and cannot be used for writes: ${directory}`);
   }
+  if (process.platform === "darwin") {
+    const fd = openDirectoryNoFollow(existing);
+    try {
+      runSecureFilesystemOperation(fd, existingReal, SECURE_CREATE_DIRECTORIES_SCRIPT, missing);
+    } finally {
+      closeDirectory(fd);
+    }
+    return;
+  }
   let fd = openDirectoryNoFollow(existing);
   let expected = existingReal;
   try {
@@ -35456,6 +35673,24 @@ function writeContainedFile(targetPath, content, targetRoot) {
   }
   const rootPath = resolvePath(targetRoot);
   ensureContainedDirectory(dirname4(safePath), targetRoot);
+  if (process.platform === "darwin") {
+    const relativePath = relative2(rootPath, safePath);
+    if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
+      throw new Error(`Hermes target file escapes validated root: ${targetPath}`);
+    }
+    const components = relativePath.split(sep2);
+    const fileName = components.pop();
+    if (!fileName || components.some((component) => component === "" || component === "." || component === "..")) {
+      throw new Error(`Hermes target file has an invalid relative path: ${targetPath}`);
+    }
+    const fd = openDirectoryNoFollow(rootPath);
+    try {
+      runSecureFilesystemOperation(fd, rootPath, SECURE_WRITE_FILE_SCRIPT, [...components, fileName], content);
+    } finally {
+      closeDirectory(fd);
+    }
+    return;
+  }
   const relativePath = relative2(rootPath, safePath);
   if (!relativePath || relativePath.startsWith("..") || isAbsolute2(relativePath)) {
     throw new Error(`Hermes target file escapes validated root: ${targetPath}`);
@@ -35576,19 +35811,28 @@ function resolveContainedWritePath(targetPath, targetRoot) {
   return candidate;
 }
 function removeDirectoryContentsNoFollow(directoryFd, expectedDirectoryPath) {
-  if (realpathSync3(descriptorPath(directoryFd)) !== expectedDirectoryPath) {
-    throw new Error(`Hermes target directory changed during secure removal: ${expectedDirectoryPath}`);
-  }
-  for (const entry of readdirSync(descriptorPath(directoryFd), { withFileTypes: true })) {
-    const childPath = join5(descriptorPath(directoryFd), entry.name);
+  assertDescriptorPathIdentity(directoryFd, expectedDirectoryPath, `Hermes target directory changed during secure removal: ${expectedDirectoryPath}`);
+  const directoryEntriesPath = process.platform === "darwin" ? expectedDirectoryPath : descriptorPath(directoryFd);
+  const entries = readdirSync(directoryEntriesPath, { withFileTypes: true });
+  entries.sort((left, right) => {
+    if (left.name === INSTALL_MARKER_FILE)
+      return 1;
+    if (right.name === INSTALL_MARKER_FILE)
+      return -1;
+    if (left.name < right.name)
+      return -1;
+    if (left.name > right.name)
+      return 1;
+    return 0;
+  });
+  for (const entry of entries) {
+    const childPath = process.platform === "darwin" ? join5(expectedDirectoryPath, entry.name) : join5(descriptorPath(directoryFd), entry.name);
     const expectedChildPath = join5(expectedDirectoryPath, entry.name);
     if (entry.isDirectory() && !entry.isSymbolicLink()) {
       const childFd = openDirectoryNoFollow(childPath);
       try {
         const childIdentity = fstatSync3(childFd);
-        if (realpathSync3(descriptorPath(childFd)) !== expectedChildPath) {
-          throw new Error(`Hermes target directory changed during secure removal: ${expectedChildPath}`);
-        }
+        assertDescriptorPathIdentity(childFd, expectedChildPath, `Hermes target directory changed during secure removal: ${expectedChildPath}`);
         assertEntryIdentityNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity.dev, childIdentity.ino);
         removeDirectoryContentsNoFollow(childFd, expectedChildPath);
         removeEntryNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity.dev, childIdentity.ino, true);
@@ -35601,7 +35845,7 @@ function removeDirectoryContentsNoFollow(directoryFd, expectedDirectoryPath) {
     removeEntryNoFollow(directoryFd, expectedDirectoryPath, entry.name, childIdentity.dev, childIdentity.ino, false);
   }
 }
-function removeContainedDirectory(targetPath, targetRoot, targetKind) {
+function removeContainedDirectory(targetPath, targetRoot, targetKind, unownedTargetBehavior) {
   if (!DESCRIPTOR_WRITES_SUPPORTED)
     throw new Error(DESCRIPTOR_WRITE_UNAVAILABLE_ERROR);
   const safeTargetDir = resolveContainedWritePath(targetPath, targetRoot);
@@ -35619,12 +35863,11 @@ function removeContainedDirectory(targetPath, targetRoot, targetKind) {
   try {
     let expected = rootPath;
     for (const component of components) {
-      const childFd = openDirectoryNoFollow(join5(descriptorPath(parentFd), component));
+      const childPath = process.platform === "darwin" ? join5(expected, component) : join5(descriptorPath(parentFd), component);
+      const childFd = openDirectoryNoFollow(childPath);
       try {
         expected = join5(expected, component);
-        if (realpathSync3(descriptorPath(childFd)) !== expected) {
-          throw new Error(`Hermes target directory changed during secure removal: ${targetPath}`);
-        }
+        assertDescriptorPathIdentity(childFd, expected, `Hermes target directory changed during secure removal: ${targetPath}`);
       } catch (error) {
         closeDirectory(childFd);
         throw error;
@@ -35632,21 +35875,22 @@ function removeContainedDirectory(targetPath, targetRoot, targetKind) {
       closeDirectory(parentFd);
       parentFd = childFd;
     }
-    const targetEntryPath = join5(descriptorPath(parentFd), targetName);
+    const expectedTarget = join5(expected, targetName);
+    const targetEntryPath = process.platform === "darwin" ? expectedTarget : join5(descriptorPath(parentFd), targetName);
     const targetFd = openDirectoryNoFollow(targetEntryPath);
     try {
       const targetIdentity = fstatSync3(targetFd);
-      const expectedTarget = join5(expected, targetName);
-      if (realpathSync3(descriptorPath(targetFd)) !== expectedTarget) {
-        throw new Error(`Hermes target directory changed during secure removal: ${targetPath}`);
-      }
-      const marker = readInstallMarkerFromDirectory(targetFd);
+      assertDescriptorPathIdentity(targetFd, expectedTarget, `Hermes target directory changed during secure removal: ${targetPath}`);
+      const marker = readInstallMarkerFromDirectory(targetFd, expectedTarget);
       if (marker === null || marker.targetKind !== targetKind) {
+        if (unownedTargetBehavior === "skip")
+          return false;
         throw new Error(`Refusing to uninstall unowned Hermes plugin path: ${targetPath} (missing or invalid ${INSTALL_MARKER_FILE})`);
       }
       assertEntryIdentityNoFollow(parentFd, expected, targetName, targetIdentity.dev, targetIdentity.ino);
       removeDirectoryContentsNoFollow(targetFd, expectedTarget);
       removeEntryNoFollow(parentFd, expected, targetName, targetIdentity.dev, targetIdentity.ino, true);
+      return true;
     } finally {
       closeDirectory(targetFd);
     }
@@ -35672,12 +35916,11 @@ function removeContainedFile(targetPath, targetRoot) {
   try {
     let expected = rootPath;
     for (const component of components) {
-      const childFd = openDirectoryNoFollow(join5(descriptorPath(parentFd), component));
+      const childPath = process.platform === "darwin" ? join5(expected, component) : join5(descriptorPath(parentFd), component);
+      const childFd = openDirectoryNoFollow(childPath);
       try {
         expected = join5(expected, component);
-        if (realpathSync3(descriptorPath(childFd)) !== expected) {
-          throw new Error(`Hermes target file changed during secure removal: ${targetPath}`);
-        }
+        assertDescriptorPathIdentity(childFd, expected, `Hermes target file changed during secure removal: ${targetPath}`);
       } catch (error) {
         closeDirectory(childFd);
         throw error;
@@ -35685,7 +35928,8 @@ function removeContainedFile(targetPath, targetRoot) {
       closeDirectory(parentFd);
       parentFd = childFd;
     }
-    const targetFile = lstatSync(join5(descriptorPath(parentFd), fileName));
+    const filePath = process.platform === "darwin" ? join5(expected, fileName) : join5(descriptorPath(parentFd), fileName);
+    const targetFile = lstatSync(filePath);
     removeEntryNoFollow(parentFd, expected, fileName, targetFile.dev, targetFile.ino, false);
   } finally {
     closeDirectory(parentFd);
@@ -35716,10 +35960,11 @@ function installPlugin(targetDir, targetKind, targetRoot) {
   written.push(writeInstallMarker(writeDir, targetKind, targetRoot));
   return written;
 }
-function uninstallPlugin(targetDir, targetKind, targetRoot) {
+function uninstallPlugin(targetDir, targetKind, targetRoot, unownedTargetBehavior = "throw") {
   if (!pathEntryExists(targetDir))
     return [];
-  removeContainedDirectory(targetDir, targetRoot, targetKind);
+  if (!removeContainedDirectory(targetDir, targetRoot, targetKind, unownedTargetBehavior))
+    return [];
   return [targetDir];
 }
 function getConfigCandidates(hermesHome, targetRoot) {
@@ -36085,10 +36330,17 @@ function readInstallMarker(targetDir) {
     return null;
   }
 }
-function readInstallMarkerFromDirectory(directoryFd) {
+function readInstallMarkerFromDirectory(directoryFd, directoryPath) {
   let markerFd;
   try {
-    markerFd = openSync(join5(descriptorPath(directoryFd), INSTALL_MARKER_FILE), constants.O_RDONLY | constants.O_NOFOLLOW);
+    if (process.platform === "darwin") {
+      const content = runSecureFilesystemOperation(directoryFd, directoryPath, SECURE_READ_FILE_SCRIPT, [
+        INSTALL_MARKER_FILE
+      ]);
+      return parseInstallMarker(content);
+    }
+    const markerPath = join5(descriptorPath(directoryFd), INSTALL_MARKER_FILE);
+    markerFd = openSync(markerPath, constants.O_RDONLY | constants.O_NOFOLLOW);
     return parseInstallMarker(readFileSync2(markerFd, "utf-8"));
   } catch {
     return null;
@@ -36472,11 +36724,12 @@ ${key}=${value}
     const userPluginTarget = getUserPluginTargetDir(hermesHome);
     const targetRoot = hermesHome;
     const safeUserPluginTarget = resolveContainedWritePath(userPluginTarget, targetRoot);
-    const marker = readInstallMarker(safeUserPluginTarget);
-    if (!pathEntryExists(safeUserPluginTarget) || marker === null || marker.targetKind !== "user") {
+    if (!pathEntryExists(safeUserPluginTarget)) {
       return { filesRemoved, configsPatched };
     }
-    const userPluginRemoved = uninstallPlugin(userPluginTarget, "user", targetRoot);
+    const userPluginRemoved = uninstallPlugin(userPluginTarget, "user", targetRoot, "skip");
+    if (userPluginRemoved.length === 0)
+      return { filesRemoved, configsPatched };
     filesRemoved.push(...userPluginRemoved);
     const providerConfig = restoreOrClearProvider(hermesHome, targetRoot);
     if (providerConfig.configPath) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/connector-hermes-agent",
-  "version": "0.228.7",
+  "version": "0.229.4",
   "description": "Signet connector for Hermes Agent — installs Signet as a pluggable memory provider",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,8 +25,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@signetai/connector-base": "0.228.7",
-    "@signetai/core": "0.228.7"
+    "@signetai/connector-base": "0.229.4",
+    "@signetai/core": "0.229.4"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",