@songsid/agend 2.3.4-beta.5 → 2.3.5-alpha.2

package/dist/local-pane-endpoint.js

@@ -0,0 +1,189 @@
+/** Main-loop-owned local Windows relay. Process death detaches; terminal ownership is never inferred from a PID. */
+import { randomUUID } from "node:crypto";
+import { PaneStdioFramer, paneStdioInput, paneStdioOutput, PANE_STDIO_LIMIT } from "./runtime-pane-stdio-protocol.js";
+import { validateRuntimePaneShutdown } from "./runtime-pane-protocol.js";
+export class LocalPaneEndpoint {
+    options;
+    machineId = "local";
+    attachment = randomUUID();
+    child;
+    connected = false;
+    stopped = false;
+    mcpPending = 0;
+    cleanupOnly = false;
+    lastLease = 0;
+    pending = new Map();
+    listeners = new Set();
+    interval;
+    hostBootId;
+    constructor(options) {
+        this.options = options;
+    }
+    static async open(options) {
+        const endpoint = new LocalPaneEndpoint(options);
+        options.admit();
+        const child = await options.launch();
+        endpoint.child = child;
+        try {
+            options.admit();
+            await endpoint.attach(child);
+            options.admit();
+            return endpoint;
+        }
+        catch (error) {
+            endpoint.stop();
+            throw error;
+        }
+    }
+    online() { if (this.stopped || !this.connected || performance.now() - this.lastLease >= 15_000)
+        return false; if (this.cleanupOnly)
+        return true; try {
+        this.options.admit();
+        return true;
+    }
+    catch {
+        return false;
+    } }
+    /** Irreversible transport drain: only exact snapshot/close RPC remains; no new helper work or input. */
+    beginCleanup() { this.cleanupOnly = true; }
+    epoch() { return this.online() ? this.attachment : null; }
+    version(provider) { return this.options.version(provider); }
+    subscribe(listener) { this.listeners.add(listener); return () => this.listeners.delete(listener); }
+    send(value) {
+        if (this.stopped || !this.child?.stdin?.writable)
+            throw Error("Local pane relay is disconnected");
+        const frame = JSON.stringify(paneStdioInput(value)) + "\n";
+        if (Buffer.byteLength(frame) > PANE_STDIO_LIMIT + 1 || this.child.stdin.writableLength + Buffer.byteLength(frame) > PANE_STDIO_LIMIT * 2)
+            throw Error("Local pane relay backpressure");
+        this.child.stdin.write(frame);
+    }
+    attach(child) {
+        return new Promise((resolve, reject) => {
+            if (!child.stdin || !child.stdout) {
+                reject(Error("Local pane relay streams are unavailable"));
+                return;
+            }
+            const framer = new PaneStdioFramer();
+            let ready = false;
+            const timer = setTimeout(() => { reject(Error("Local pane relay startup unconfirmed")); this.stop(); }, 125_000);
+            timer.unref();
+            const lost = () => { clearTimeout(timer); if (!ready)
+                reject(Error("Local pane relay startup unconfirmed")); this.stop(); };
+            child.once("error", lost);
+            child.once("exit", lost);
+            child.stdout?.once("end", lost);
+            child.stdout?.once("close", lost);
+            child.stdin?.on("error", lost);
+            let told = 0;
+            child.stderr?.setEncoding?.("utf8");
+            child.stderr?.on("data", (part) => { if (told >= 8_192 || !this.options.diagnostic)
+                return; const text = String(part).replace(/[\p{Cc}\p{Cf}]+/gu, " ").trim().slice(0, 8_192 - told); told += text.length; if (text)
+                try {
+                    this.options.diagnostic(text);
+                }
+                catch { /* a diagnostic never affects the relay */ } });
+            child.stdout?.on("data", (bytes) => {
+                try {
+                    framer.feed(bytes, raw => {
+                        const value = paneStdioOutput(raw);
+                        if (value.epoch !== this.attachment)
+                            throw Error("Local pane relay epoch differs");
+                        if (!ready) {
+                            if (value.type !== "hello")
+                                throw Error("Local pane relay not ready");
+                            this.hostBootId = value.hostBootId;
+                            ready = true;
+                            clearTimeout(timer);
+                            this.connected = true;
+                            this.lastLease = performance.now();
+                            this.lease();
+                            this.interval = setInterval(() => this.lease(), 5000);
+                            this.interval.unref();
+                            resolve();
+                            return;
+                        }
+                        if (value.type === "hello")
+                            throw Error("Duplicate local pane hello");
+                        if (value.type === "output") {
+                            for (const listener of this.listeners)
+                                listener({ type: "pane", machineId: "local", pane: value.snapshot });
+                            return;
+                        }
+                        if (value.type === "response") {
+                            const row = this.pending.get(value.id);
+                            if (!row)
+                                return;
+                            this.pending.delete(value.id);
+                            clearTimeout(row.timer);
+                            if (value.ok)
+                                row.resolve(value.result);
+                            else
+                                row.reject(Error("Local pane operation unconfirmed; inspect its owned receipt"));
+                            return;
+                        }
+                        if (this.cleanupOnly) {
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: false });
+                            return;
+                        }
+                        if (this.mcpPending >= 32)
+                            throw Error("Local pane MCP backlog");
+                        this.mcpPending++;
+                        const current = () => !this.cleanupOnly && this.online();
+                        void this.options.mcp(value.body, current).then(result => { if (current())
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: true, result }); }, () => { if (current())
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: false }); }).catch(() => this.stop()).finally(() => { this.mcpPending--; });
+                    });
+                }
+                catch {
+                    lost();
+                }
+            });
+            try {
+                this.send({ type: "init", scope: this.options.scope, epoch: this.attachment, maxAgents: this.options.maxAgents() });
+            }
+            catch (error) {
+                clearTimeout(timer);
+                reject(error);
+                this.stop();
+            }
+        });
+    }
+    lease() { if (this.stopped)
+        return; if (!this.online()) {
+        this.stop();
+        return;
+    } this.lastLease = performance.now(); try {
+        this.send({ type: "lease", epoch: this.attachment, online: this.online(), maxAgents: this.options.maxAgents() });
+    }
+    catch {
+        this.stop();
+    } }
+    call(request) {
+        if (this.cleanupOnly && !["snapshot", "close", "list", "shutdown"].includes(request.action))
+            return Promise.reject(Error("Local pane relay only permits owned cleanup"));
+        if (!this.online() || this.pending.size >= 64)
+            return Promise.reject(Error("Local pane relay unavailable or busy"));
+        return new Promise((resolve, reject) => { const id = randomUUID(), timer = setTimeout(() => { this.pending.delete(id); reject(Error("Local pane result unconfirmed; input was not replayed")); }, 125_000); timer.unref(); this.pending.set(id, { resolve, reject, timer }); try {
+            this.send({ type: "request", epoch: this.attachment, id, request });
+        }
+        catch (error) {
+            clearTimeout(timer);
+            this.pending.delete(id);
+            reject(error);
+        } });
+    }
+    /** Explicit switch-off only. The host independently refuses while any launch or outcome remains unconfirmed. */
+    async shutdownHost() {
+        if (!this.cleanupOnly || !this.hostBootId)
+            throw Error("Local pane host shutdown lacks a cleanup owner");
+        validateRuntimePaneShutdown(await this.call({ action: "shutdown", hostBootId: this.hostBootId }), this.hostBootId);
+    }
+    /** Only close stdio; never signal a Windows process or close a terminal here. */
+    stop() { if (this.stopped)
+        return; this.stopped = true; this.connected = false; clearInterval(this.interval); this.child?.stdin?.end(); this.child?.stdout?.destroy(); this.child?.stderr?.destroy(); for (const row of this.pending.values()) {
+        clearTimeout(row.timer);
+        row.reject(Error("Local pane relay detached; process state is retained"));
+    } this.pending.clear(); for (const listener of this.listeners)
+        listener({ type: "machine", machineId: "local" }); this.listeners.clear(); }
+}
+//# sourceMappingURL=local-pane-endpoint.js.map

package/dist/local-pane-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-pane-endpoint.js","sourceRoot":"","sources":["../src/local-pane-endpoint.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,eAAe,EAAC,cAAc,EAAC,eAAe,EAAC,gBAAgB,EAAsB,MAAM,kCAAkC,CAAC;AACvI,OAAO,EAAE,2BAA2B,EAA2B,MAAM,4BAA4B,CAAC;AASlG,MAAM,OAAO,iBAAiB;IAID,OAAO;IAH1B,SAAS,GAAC,OAAO,CAAC;IAAiB,UAAU,GAAC,UAAU,EAAE,CAAC;IAAQ,KAAK,CAAwB;IAAQ,SAAS,GAAC,KAAK,CAAC;IAAQ,OAAO,GAAC,KAAK,CAAC;IAAQ,UAAU,GAAC,CAAC,CAAC;IAAQ,WAAW,GAAC,KAAK,CAAC;IAAQ,SAAS,GAAC,CAAC,CAAC;IAClN,OAAO,GAAC,IAAI,GAAG,EAAkB,CAAC;IAAQ,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IAAQ,QAAQ,CAA0C;IAC/J,UAAU,CAAkB;IACpC,YAA4B,OAAwB;uBAAxB,OAAO;IAAmB,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAwB;QACzC,MAAM,QAAQ,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,KAAK,GAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAAA,QAAQ,CAAC,KAAK,GAAC,KAAK,CAAC;QACtH,IAAG,CAAC;YAAA,OAAO,CAAC,KAAK,EAAE,CAAC;YAAA,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,OAAO,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO,QAAQ,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAC7H,CAAC;IACD,MAAM,KAAW,IAAG,IAAI,CAAC,OAAO,IAAE,CAAC,IAAI,CAAC,SAAS,IAAE,WAAW,CAAC,GAAG,EAAE,GAAC,IAAI,CAAC,SAAS,IAAE,MAAM;QAAC,OAAO,KAAK,CAAC,CAAA,IAAG,IAAI,CAAC,WAAW;QAAC,OAAO,IAAI,CAAC,CAAA,IAAG,CAAC;QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC;IACpM,wGAAwG;IACxG,YAAY,KAAQ,IAAI,CAAC,WAAW,GAAC,IAAI,CAAC,CAAA,CAAC;IAC3C,KAAK,KAAe,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,CAAC;IAC/D,OAAO,CAAC,QAAe,IAAc,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA,CAAC;IAC5E,SAAS,CAAC,QAA8C,IAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA,OAAM,GAAE,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA,CAAC;IACnI,IAAI,CAAC,KAAoB;QAChC,IAAG,IAAI,CAAC,OAAO,IAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAAA,MAAM,KAAK,GAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,GAAC,IAAI,CAAC;QACrJ,IAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC,IAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC;YAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxM,CAAC;IACO,MAAM,CAAC,KAAkB;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;YACpC,IAAG,CAAC,KAAK,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClG,MAAM,MAAM,GAAC,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,KAAK,CAAC;YAAA,MAAM,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC,EAAC,OAAO,CAAC,CAAC;YAAA,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1K,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;gBAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YACjQ,IAAI,IAAI,GAAC,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,IAAkB,EAAC,EAAE,GAAC,IAAG,IAAI,IAAE,KAAK,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;gBAAC,OAAO,CAAA,MAAM,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,KAAK,GAAC,IAAI,CAAC,CAAC,CAAA,IAAI,IAAE,IAAI,CAAC,MAAM,CAAC,CAAA,IAAG,IAAI;gBAAC,IAAG,CAAC;oBAAA,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,0CAA0C,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC;YACnV,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE;gBAAC,IAAG,CAAC;oBAAA,MAAM,CAAC,IAAI,CAAC,KAAK,EAAC,GAAG,CAAA,EAAE;wBACnE,MAAM,KAAK,GAAC,eAAe,CAAC,GAAG,CAAC,CAAC;wBAAA,IAAG,KAAK,CAAC,KAAK,KAAG,IAAI,CAAC,UAAU;4BAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;wBAChH,IAAG,CAAC,KAAK,EAAC,CAAC;4BAAA,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO;gCAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;4BAAA,IAAI,CAAC,UAAU,GAAC,KAAK,CAAC,UAAU,CAAC;4BAAA,KAAK,GAAC,IAAI,CAAC;4BAAA,YAAY,CAAC,KAAK,CAAC,CAAC;4BAAA,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC;4BAAA,IAAI,CAAC,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC;4BAAA,IAAI,CAAC,KAAK,EAAE,CAAC;4BAAA,IAAI,CAAC,QAAQ,GAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,KAAK,EAAE,EAAC,IAAI,CAAC,CAAC;4BAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;4BAAA,OAAO,EAAE,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACxS,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO;4BAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;wBAClE,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;4BAAA,KAAI,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;gCAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,IAAI,EAAC,KAAK,CAAC,QAAQ,EAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACrI,IAAG,KAAK,CAAC,IAAI,KAAG,UAAU,EAAC,CAAC;4BAAA,MAAM,GAAG,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;4BAAA,IAAG,CAAC,GAAG;gCAAC,OAAO;4BAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;4BAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;4BAAA,IAAG,KAAK,CAAC,EAAE;gCAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;;gCAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBAC1Q,IAAG,IAAI,CAAC,WAAW,EAAC,CAAC;4BAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACvG,IAAG,IAAI,CAAC,UAAU,IAAE,EAAE;4BAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;wBAAA,IAAI,CAAC,UAAU,EAAE,CAAC;wBAAA,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,CAAC,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,MAAM,EAAE,CAAC;wBAClI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,GAAC,IAAG,OAAO,EAAE;4BAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,IAAI,EAAC,MAAM,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC,GAAE,EAAE,GAAC,IAAG,OAAO,EAAE;4BAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;oBAChT,CAAC,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC;oBAAA,IAAI,EAAE,CAAC;gBAAA,CAAC;YAAA,CAAC,CAAC,CAAC;YACrB,IAAG,CAAC;gBAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,SAAS,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAC,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBAAA,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,IAAI,CAAC,IAAI,EAAE,CAAC;YAAA,CAAC;QAC7K,CAAC,CAAC,CAAC;IACJ,CAAC;IACO,KAAK,KAAQ,IAAG,IAAI,CAAC,OAAO;QAAC,OAAO,CAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAC,CAAC;QAAA,IAAI,CAAC,IAAI,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC,CAAA,IAAI,CAAC,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAA,IAAG,CAAC;QAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAE,EAAC,SAAS,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,IAAI,CAAC,IAAI,EAAE,CAAC;IAAA,CAAC,CAAA,CAAC;IACrP,IAAI,CAAC,OAA0B;QAC9B,IAAG,IAAI,CAAC,WAAW,IAAE,CAAC,CAAC,UAAU,EAAC,OAAO,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;QAClK,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAE,EAAE;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC9G,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,OAAO,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,IAAG,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,OAAO,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAA,CAAC,CAAC,CAAC;IACpY,CAAC;IACD,gHAAgH;IAChH,KAAK,CAAC,YAAY;QACjB,IAAG,CAAC,IAAI,CAAC,WAAW,IAAE,CAAC,IAAI,CAAC,UAAU;YAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACrG,2BAA2B,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,UAAU,EAAC,IAAI,CAAC,UAAU,EAAC,CAAC,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9G,CAAC;IACD,iFAAiF;IACjF,IAAI,KAAQ,IAAG,IAAI,CAAC,OAAO;QAAC,OAAO,CAAA,IAAI,CAAC,OAAO,GAAC,IAAI,CAAC,CAAA,IAAI,CAAC,SAAS,GAAC,KAAK,CAAC,CAAA,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,CAAC;QAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;IAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA,KAAI,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;QAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC;CACtc"}

package/dist/local-pane-launcher.d.ts

@@ -0,0 +1,2 @@
+export declare const localPaneScope: (home: string) => string;
+export declare function launchLocalPaneRelay(home: string, admit?: () => void): Promise<import("node:child_process").ChildProcessWithoutNullStreams>;

package/dist/local-pane-launcher.js

@@ -0,0 +1,38 @@
+/** Stage only the verified shipped code bundle. Never enumerate a provider home or copy login material. */
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, writeFile, rm } from "node:fs/promises";
+import { dirname, join, win32 } from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+import { execFile, spawn } from "./child-process.js";
+import { createRuntimeBundle } from "./runtime-bundle.js";
+import { admitLocalWindowsCli } from "./windows-cli.js";
+import { nativeCliEnvironment, validWindowsDirectory } from "./windows-cli-worker.js";
+const exec = promisify(execFile);
+export const localPaneScope = (home) => createHash("sha256").update(home).digest("hex");
+export async function launchLocalPaneRelay(home, admit = admitLocalWindowsCli) {
+    admit();
+    if (process.platform !== "linux" && process.platform !== "win32")
+        throw Error("Local Windows panes require Windows or WSL");
+    const code = dirname(fileURLToPath(import.meta.url)), powershell = process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : "/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe";
+    const convert = async (path, direction) => process.platform === "win32" ? path : String((await exec("wslpath", [direction, path], { timeout: 5000, maxBuffer: 8192, encoding: "utf8" })).stdout).trim();
+    await mkdir(home, { recursive: true, mode: 0o700 });
+    const temporary = await mkdtemp(join(home, "pane-code-"));
+    try {
+        const bundle = createRuntimeBundle(), archive = join(temporary, "runtime.zip");
+        await writeFile(archive, bundle.bytes, { mode: 0o600 });
+        const [script, zip] = await Promise.all([convert(join(code, "local-pane-stage.ps1"), "-w"), convert(archive, "-w")]);
+        admit();
+        const staged = await exec(powershell, ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", script, "-Archive", zip, "-Sha256", bundle.sha256, "-Scope", localPaneScope(home)], { env: nativeCliEnvironment(), timeout: 120_000, maxBuffer: 8192, encoding: "utf8", windowsHide: true });
+        const value = JSON.parse(String(staged.stdout).trim());
+        if (!value || Object.keys(value).sort().join(",") !== "node,relay" || !validWindowsDirectory(value.node) || !validWindowsDirectory(value.relay) || win32.basename(value.node).toLowerCase() !== "node.exe" || win32.basename(value.relay) !== "runtime-pane-stdio.js")
+            throw Error("Staged Windows pane code could not be verified");
+        const node = await convert(value.node, "-u");
+        admit();
+        return spawn(node, [value.relay], { env: nativeCliEnvironment(), shell: false, windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=local-pane-launcher.js.map

package/dist/local-pane-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-pane-launcher.js","sourceRoot":"","sources":["../src/local-pane-launcher.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,KAAK,EAAC,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,SAAS,EAAC,MAAM,WAAW,CAAC;AACpC,OAAO,EAAC,QAAQ,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAC,mBAAmB,EAAC,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAC,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAC,oBAAoB,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AACnF,MAAM,IAAI,GAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAC,CAAC,IAAW,EAAQ,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAW,EAAC,KAAK,GAAU,oBAAoB;IACzF,KAAK,EAAE,CAAC;IAAA,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,IAAE,OAAO,CAAC,QAAQ,KAAG,OAAO;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,GAAC,OAAO,CAAC,QAAQ,KAAG,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAE,aAAa,EAAC,UAAU,EAAC,mBAAmB,EAAC,MAAM,EAAC,gBAAgB,CAAC,CAAA,CAAC,CAAA,+DAA+D,CAAC;IAC5P,MAAM,OAAO,GAAC,KAAK,EAAC,IAAW,EAAC,SAAmB,EAAC,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,OAAO,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAC,CAAC,SAAS,EAAC,IAAI,CAAC,EAAC,EAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnM,MAAM,KAAK,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,MAAM,SAAS,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,YAAY,CAAC,CAAC,CAAC;IACrG,IAAG,CAAC;QACH,MAAM,MAAM,GAAC,mBAAmB,EAAE,EAAC,OAAO,GAAC,IAAI,CAAC,SAAS,EAAC,aAAa,CAAC,CAAC;QAAA,MAAM,SAAS,CAAC,OAAO,EAAC,MAAM,CAAC,KAAK,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,EAAC,GAAG,CAAC,GAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,sBAAsB,CAAC,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QACtH,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,UAAU,EAAC,CAAC,YAAY,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,UAAU,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAC,EAAC,GAAG,EAAC,oBAAoB,EAAE,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,IAAI,EAAC,CAAC,CAAC;QAClR,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAG,CAAC,KAAK,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,YAAY,IAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAG,UAAU,IAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAG,uBAAuB;YAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnT,MAAM,IAAI,GAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC,IAAI,EAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAC,GAAG,EAAC,oBAAoB,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC;IAC3K,CAAC;YAAO,CAAC;QAAA,MAAM,EAAE,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,CAAC;AAC3D,CAAC"}

package/dist/local-pane-stage.ps1

@@ -0,0 +1,101 @@
+param(
+ [Parameter(Mandatory=$true)][string]$Archive,
+ [Parameter(Mandatory=$true)][ValidatePattern('^[a-f0-9]{64}$')][string]$Sha256,
+ [Parameter(Mandatory=$true)][ValidatePattern('^[a-f0-9]{64}$')][string]$Scope
+)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)
+function Real-Directory([string]$Path) {
+ $entry = Get-Item -LiteralPath $Path -Force
+ if (-not $entry.PSIsContainer -or ($entry.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Unsafe pane code directory' }
+}
+function Private-Directory([string]$Path) {
+ [IO.Directory]::CreateDirectory($Path) | Out-Null
+ Real-Directory $Path
+ $user = [Security.Principal.WindowsIdentity]::GetCurrent().User
+ $acl = [Security.AccessControl.DirectorySecurity]::new()
+ $directory = [IO.DirectoryInfo]::new($Path)
+ if ($directory.GetAccessControl([Security.AccessControl.AccessControlSections]::Owner).GetOwner([Security.Principal.SecurityIdentifier]).Value -ne $user.Value) { throw 'Pane code directory has a different owner' }
+ $acl.SetAccessRuleProtection($true,$false)
+ foreach ($sid in @($user,[Security.Principal.SecurityIdentifier]::new('S-1-5-18'))) {
+  $acl.AddAccessRule([Security.AccessControl.FileSystemAccessRule]::new($sid,'FullControl','ContainerInherit,ObjectInherit','None','Allow'))
+ }
+ $directory.SetAccessControl($acl)
+}
+if (-not $env:LOCALAPPDATA -or -not [IO.Path]::IsPathRooted($env:LOCALAPPDATA)) { throw 'Windows local application-data directory is unavailable' }
+$parent = [IO.Path]::GetFullPath($env:LOCALAPPDATA)
+for ($walk = Get-Item -LiteralPath $parent -Force; $walk; $walk = $walk.Parent) { Real-Directory $walk.FullName }
+foreach ($leaf in @('AgEnD','p',$Scope.Substring(0,16),'b')) { $parent = Join-Path $parent $leaf; Private-Directory $parent }
+$destination = Join-Path $parent $Sha256.Substring(0,16)
+$temporary = Join-Path $parent ([Guid]::NewGuid().ToString('N'))
+$archiveEntry = Get-Item -LiteralPath $Archive -Force
+if ($archiveEntry.PSIsContainer -or ($archiveEntry.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $archiveEntry.Length -gt 8388608) { throw 'Unsafe pane code archive' }
+$bytes = [IO.File]::ReadAllBytes($Archive)
+$hash = [Security.Cryptography.SHA256]::Create()
+function Digest([byte[]]$Value) { return [BitConverter]::ToString($hash.ComputeHash($Value)).Replace('-','').ToLowerInvariant() }
+if ((Digest $bytes) -cne $Sha256) { throw 'Pane code archive checksum differs' }
+Add-Type -AssemblyName System.IO.Compression
+$memory = [IO.MemoryStream]::new($bytes,$false)
+$zip = [IO.Compression.ZipArchive]::new($memory,[IO.Compression.ZipArchiveMode]::Read)
+$exists = Test-Path -LiteralPath $destination
+if ($exists) {
+ Real-Directory $destination
+ $marker = Get-Item -LiteralPath (Join-Path $destination 'bundle.sha256') -Force
+ if ($marker.PSIsContainer -or ($marker.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $marker.Length -ne 64 -or [IO.File]::ReadAllText($marker.FullName) -cne $Sha256) { throw 'Staged pane bundle identity differs' }
+} else { Private-Directory $temporary }
+try {
+ $seen = [Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ $total = 0
+ if ($zip.Entries.Count -gt 512) { throw 'Pane code archive has too many entries' }
+ foreach ($entry in $zip.Entries) {
+  if ($entry.FullName -notmatch '^agend-runtime/[A-Za-z0-9_@./-]+$' -or $entry.FullName.Contains('..') -or $entry.FullName.EndsWith('/') -or -not $seen.Add($entry.FullName) -or $entry.Length -gt 2097152) { throw 'Unsafe pane code archive entry' }
+  $total += $entry.Length
+  if ($total -gt 8388608) { throw 'Pane code archive is too large' }
+  $stream = $entry.Open(); $content = [IO.MemoryStream]::new()
+  try { $buffer = [byte[]]::new(65536); while (($count = $stream.Read($buffer,0,$buffer.Length)) -gt 0) { if ($content.Length + $count -gt 2097152) { throw 'Pane code entry exceeded its limit' }; $content.Write($buffer,0,$count) }; $data = $content.ToArray() } finally { $stream.Dispose(); $content.Dispose() }
+  $base = if ($exists) { $destination } else { $temporary }
+  $file = Join-Path $base $entry.FullName.Replace('/','\')
+  if ($exists) {
+   for ($walk = Get-Item -LiteralPath ([IO.Path]::GetDirectoryName($file)) -Force; $walk.FullName -ne $base; $walk = $walk.Parent) { Real-Directory $walk.FullName }
+   $onDisk = Get-Item -LiteralPath $file -Force
+   if ($onDisk.PSIsContainer -or ($onDisk.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $onDisk.Length -ne $data.Length -or (Digest ([IO.File]::ReadAllBytes($file))) -cne (Digest $data)) { throw 'Staged pane code changed; no files were overwritten' }
+  } else {
+   [IO.Directory]::CreateDirectory([IO.Path]::GetDirectoryName($file)) | Out-Null
+   [IO.File]::WriteAllBytes($file,$data)
+  }
+ }
+ if (-not $seen.Contains('agend-runtime/dist/runtime-pane-stdio.js')) { throw 'Pane relay module is missing' }
+ # Verify the complete tree before executing it: unlisted package.json or JS can change Node resolution.
+ $base = if ($exists) { $destination } else { $temporary }
+ $allowedDirectories = [Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ foreach ($name in $seen) {
+  for ($relative = [IO.Path]::GetDirectoryName($name.Replace('/','\')); $relative; $relative = [IO.Path]::GetDirectoryName($relative)) { [void]$allowedDirectories.Add($relative) }
+ }
+ $pending = [Collections.Generic.Stack[string]]::new(); $pending.Push($base)
+ while ($pending.Count -gt 0) {
+  $directory = $pending.Pop()
+  foreach ($item in Get-ChildItem -LiteralPath $directory -Force) {
+   $relative = $item.FullName.Substring($base.Length + 1)
+   if ($item.Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'Staged pane code contains an unexpected link' }
+   if ($item.PSIsContainer) {
+    if (-not $allowedDirectories.Contains($relative)) { throw 'Staged pane code contains an unexpected directory' }
+    $pending.Push($item.FullName)
+   } elseif (-not $seen.Contains($relative.Replace('\','/')) -and -not ($exists -and $relative -ceq 'bundle.sha256')) { throw 'Staged pane code contains an unexpected file' }
+  }
+ }
+ if (-not $exists) {
+  [IO.File]::WriteAllText((Join-Path $temporary 'bundle.sha256'),$Sha256,[Text.Encoding]::ASCII)
+  # Antivirus may briefly retain handles to freshly written native prebuilds. Never overwrite a live stage.
+  $deadline = [DateTime]::UtcNow.AddSeconds(15)
+  for (;;) {
+   try { [IO.Directory]::Move($temporary,$destination); break }
+   catch { if ((Test-Path -LiteralPath $destination) -or [DateTime]::UtcNow -ge $deadline) { throw 'Pane code staging could not be committed; retry after the pending file operation finishes' }; Start-Sleep -Milliseconds 200 }
+  }
+ }
+ $relay = Join-Path $destination 'agend-runtime\dist\runtime-pane-stdio.js'
+ $node = (Get-Command node.exe -CommandType Application -ErrorAction Stop | Select-Object -First 1).Source
+ [Console]::Write((@{relay=$relay;node=$node} | ConvertTo-Json -Compress))
+} finally {
+ $zip.Dispose(); $memory.Dispose(); $hash.Dispose()
+ if (Test-Path -LiteralPath $temporary) { Remove-Item -LiteralPath $temporary -Recurse -Force }
+}

package/dist/locale.js

@@ -13,6 +13,20 @@ export function detectLocale(fleetConfig) {
     return detectTimezone() === 8 ? "zh-TW" : "en";
 }
 const enMessages = {
+    "native_pane.session_unconfirmed": "Windows Claude's saved conversation could not be checked. This agent is stopped; an administrator can start a new conversation.",
+    "native_pane.refresh_for_session": "This agent needs a new-conversation decision. Refresh this page to choose Start a new conversation.",
+    "native_pane.saved_available": "The saved conversation is available again. Choose Start to resume it.",
+    "native_pane.codex_session_unconfirmed": "Windows Codex's saved conversation could not be checked. This agent is stopped; an administrator can start a new conversation.",
+    "native_pane.codex_fresh_started": "Windows Codex had no saved conversation for this agent (its first turn never finished), so a new conversation was started.",
+    "native_pane.fresh_started": "Windows Claude had no saved conversation for this agent (its first turn never finished), so a new conversation was started.",
+    "native_pane.host_upgrade": "The Windows pane host uses an older adapter. Stop its Windows agents, restart Windows, then choose Start. Saved conversations are kept.",
+    "native_pane.exit_unconfirmed": "The previous Windows pane exit is unconfirmed. Stop its Windows processes, then use the administrator recovery action. The saved conversation is kept; no input was replayed.",
+    "native_pane.no_pin": "The original conversation is not proven; recovery cannot start a fresh conversation.",
+    "native_pane.changed": "The held native launch changed; refresh before recovery.",
+    "native_pane.authority_expired": "Native recovery authority expired.",
+    "native_pane.still_running": "This Windows pane is still running; stop it before recovery.",
+    "native_pane.scope": "Native recovery lacks an exact retained host receipt.",
+    "native_pane.unavailable": "Persistent pane recovery is unavailable.",
     "setup.admin.cancelled": "Setup cancelled; no admin selected.",
     "setup.discord_admin.connecting": "Connecting to Discord to detect your account…",
     "setup.discord_admin.wait": "Send a message in server {0}, or DM @{1}. Waiting up to 30 seconds…",
@@ -273,6 +287,7 @@ const enMessages = {
     "config_history.history_checksum": "stored checksum mismatch",
     "config_history.history_invalid": "stored copy no longer valid",
     "login.browser_cleanup_failed": "Sign-in cleanup could not be confirmed. Close the AgEnD-owned login process and restart AgEnD before retrying.",
+    "needs.reason.native_pane_hold": "Windows agent needs attention",
     "needs.reason.crashed": "Crashed",
     "needs.reason.delivery_uncertain": "Could not confirm delivery",
     "needs.reason.delivery_failed": "Delivery failed",
@@ -1370,6 +1385,7 @@ const enMessages = {
     "settings_confirm.source.web_session": "web dashboard",
     "settings_confirm.source.public_link": "public link",
     "settings_confirm.source.setup_session": "setup",
+    "settings_confirm.source.agent_request": "an agent's request",
     "settings_confirm.confirm_button": "Confirm",
     "settings_confirm.reject_button": "Reject",
     "settings_confirm.no_longer_pending": "Settings confirmation is no longer pending.",
@@ -1483,9 +1499,24 @@ const enMessages = {
     "settings_confirm.cli_interactive": "Interactive confirmation required; --yes explicitly confirms the printed diff.",
     "settings_confirm.web_verified_label": "{0} (web-verified)",
     "settings_confirm.host_operator_label": "This computer's admin",
+    "settings_confirm.web_owner_required": "Only this fleet's owner, signed in on the AgEnD computer itself, can decide an agent's request here.",
     "settings_confirm.host_operator": "host operator",
 };
 const zhTWMessages = {
+    "native_pane.session_unconfirmed": "無法確認 Windows Claude 已儲存的對話。這個代理已停止，管理員可以開始新對話。",
+    "native_pane.refresh_for_session": "這個代理需要由你決定是否開始新對話。請重新整理頁面，再按「開始新對話」。",
+    "native_pane.saved_available": "已儲存的對話現在可以使用了。請選擇「啟動」繼續原對話。",
+    "native_pane.codex_session_unconfirmed": "無法確認 Windows Codex 已儲存的對話。這個代理已停止，管理員可以開始新對話。",
+    "native_pane.codex_fresh_started": "Windows Codex 沒有這個代理已儲存的對話（第一輪還沒完成就中斷），所以開了新對話。",
+    "native_pane.fresh_started": "Windows Claude 沒有這個代理已儲存的對話（第一輪還沒完成就中斷），所以開了新對話。",
+    "native_pane.host_upgrade": "Windows 終端主機仍使用舊版轉接器。請先停止這台電腦的 Windows 代理，重新啟動 Windows，再按「啟動」。已儲存的對話會保留。",
+    "native_pane.exit_unconfirmed": "無法確認上一個 Windows 終端是否已結束。請先停止這個代理的 Windows 程序，再由管理員復原。已儲存的對話會保留，也不會重送舊輸入。",
+    "native_pane.no_pin": "尚無法確認原本的對話；復原不會另開新對話。",
+    "native_pane.changed": "保留的 Windows 終端已變更，請重新整理後再復原。",
+    "native_pane.authority_expired": "Windows 終端復原的授權已失效。",
+    "native_pane.still_running": "這個 Windows 終端仍在執行，請先停止再復原。",
+    "native_pane.scope": "Windows 終端復原缺少身分相符的保留收據。",
+    "native_pane.unavailable": "目前無法復原持續執行的 Windows 終端。",
     "setup.admin.cancelled": "設定已取消，未選取管理員。",
     "setup.discord_admin.connecting": "正在連線到 Discord，以偵測你的帳號…",
     "setup.discord_admin.wait": "請在伺服器 {0} 發一則訊息，或私訊 @{1}。最多等待 30 秒…",
@@ -1745,6 +1776,7 @@ const zhTWMessages = {
     "config_history.history_checksum": "儲存副本的校驗碼不符",
     "config_history.history_invalid": "儲存的副本已不再有效",
     "login.browser_cleanup_failed": "無法確認登入程序已關閉。請先關閉 AgEnD 的登入程序，重新啟動 AgEnD 後再試。",
+    "needs.reason.native_pane_hold": "Windows 代理需要處理",
     "needs.reason.crashed": "已崩潰",
     "needs.reason.delivery_uncertain": "無法確認是否送達",
     "needs.reason.delivery_failed": "傳送失敗",
@@ -2840,6 +2872,7 @@ const zhTWMessages = {
     "settings_confirm.source.web_session": "網頁儀表板",
     "settings_confirm.source.public_link": "公開連結",
     "settings_confirm.source.setup_session": "設定精靈",
+    "settings_confirm.source.agent_request": "代理人的請求",
     "settings_confirm.confirm_button": "確認",
     "settings_confirm.reject_button": "拒絕",
     "settings_confirm.no_longer_pending": "這個設定確認已不在等待中。",
@@ -2953,6 +2986,7 @@ const zhTWMessages = {
     "settings_confirm.cli_interactive": "需要互動確認；--yes 表示明確確認上面列出的差異。",
     "settings_confirm.web_verified_label": "{0}（網頁驗證）",
     "settings_confirm.host_operator_label": "這台電腦的管理者",
+    "settings_confirm.web_owner_required": "只有在 AgEnD 這台電腦上登入的 fleet 擁有者，才能在這裡決定 agent 的請求。",
     "settings_confirm.host_operator": "主機操作者",
 };
 const messages = {