@songsid/agend 2.3.4-beta.7 → 2.3.5-alpha.3

package/dist/local-pane-endpoint.d.ts

@@ -0,0 +1,46 @@
+import type { ChildProcess } from "node:child_process";
+import type { NativeMachineEndpoint } from "./native-pane-manager.js";
+import type { RuntimeCoordinatorEvent } from "./runtime-coordinator.js";
+import { type RuntimePaneRequest } from "./runtime-pane-protocol.js";
+import type { PaneMcpBody } from "./runtime-pane-mcp-protocol.js";
+export interface LocalPaneOptions {
+    scope: string;
+    admit(): void;
+    maxAgents(): number;
+    version(provider: string): string | null;
+    launch(): Promise<ChildProcess>;
+    mcp(body: PaneMcpBody, current: () => boolean): Promise<unknown>;
+    /** S-35: the relay's own stderr (bounded) — it was discarded, so a relay that exited at once left no trace. */
+    diagnostic?(text: string): void;
+}
+export declare class LocalPaneEndpoint implements NativeMachineEndpoint {
+    private options;
+    readonly machineId = "local";
+    private readonly attachment;
+    private child;
+    private connected;
+    private stopped;
+    private mcpPending;
+    private cleanupOnly;
+    private lastLease;
+    private pending;
+    private listeners;
+    private interval;
+    private hostBootId;
+    private constructor();
+    static open(options: LocalPaneOptions): Promise<LocalPaneEndpoint>;
+    online(): boolean;
+    /** Irreversible transport drain: only exact snapshot/close RPC remains; no new helper work or input. */
+    beginCleanup(): void;
+    epoch(): string | null;
+    version(provider: string): string | null;
+    subscribe(listener: (event: RuntimeCoordinatorEvent) => void): () => void;
+    private send;
+    private attach;
+    private lease;
+    call(request: RuntimePaneRequest): Promise<unknown>;
+    /** Explicit switch-off only. The host independently refuses while any launch or outcome remains unconfirmed. */
+    shutdownHost(): Promise<void>;
+    /** Only close stdio; never signal a Windows process or close a terminal here. */
+    stop(): void;
+}

package/dist/local-pane-endpoint.js

@@ -0,0 +1,189 @@
+/** Main-loop-owned local Windows relay. Process death detaches; terminal ownership is never inferred from a PID. */
+import { randomUUID } from "node:crypto";
+import { PaneStdioFramer, paneStdioInput, paneStdioOutput, PANE_STDIO_LIMIT } from "./runtime-pane-stdio-protocol.js";
+import { validateRuntimePaneShutdown } from "./runtime-pane-protocol.js";
+export class LocalPaneEndpoint {
+    options;
+    machineId = "local";
+    attachment = randomUUID();
+    child;
+    connected = false;
+    stopped = false;
+    mcpPending = 0;
+    cleanupOnly = false;
+    lastLease = 0;
+    pending = new Map();
+    listeners = new Set();
+    interval;
+    hostBootId;
+    constructor(options) {
+        this.options = options;
+    }
+    static async open(options) {
+        const endpoint = new LocalPaneEndpoint(options);
+        options.admit();
+        const child = await options.launch();
+        endpoint.child = child;
+        try {
+            options.admit();
+            await endpoint.attach(child);
+            options.admit();
+            return endpoint;
+        }
+        catch (error) {
+            endpoint.stop();
+            throw error;
+        }
+    }
+    online() { if (this.stopped || !this.connected || performance.now() - this.lastLease >= 15_000)
+        return false; if (this.cleanupOnly)
+        return true; try {
+        this.options.admit();
+        return true;
+    }
+    catch {
+        return false;
+    } }
+    /** Irreversible transport drain: only exact snapshot/close RPC remains; no new helper work or input. */
+    beginCleanup() { this.cleanupOnly = true; }
+    epoch() { return this.online() ? this.attachment : null; }
+    version(provider) { return this.options.version(provider); }
+    subscribe(listener) { this.listeners.add(listener); return () => this.listeners.delete(listener); }
+    send(value) {
+        if (this.stopped || !this.child?.stdin?.writable)
+            throw Error("Local pane relay is disconnected");
+        const frame = JSON.stringify(paneStdioInput(value)) + "\n";
+        if (Buffer.byteLength(frame) > PANE_STDIO_LIMIT + 1 || this.child.stdin.writableLength + Buffer.byteLength(frame) > PANE_STDIO_LIMIT * 2)
+            throw Error("Local pane relay backpressure");
+        this.child.stdin.write(frame);
+    }
+    attach(child) {
+        return new Promise((resolve, reject) => {
+            if (!child.stdin || !child.stdout) {
+                reject(Error("Local pane relay streams are unavailable"));
+                return;
+            }
+            const framer = new PaneStdioFramer();
+            let ready = false;
+            const timer = setTimeout(() => { reject(Error("Local pane relay startup unconfirmed")); this.stop(); }, 125_000);
+            timer.unref();
+            const lost = () => { clearTimeout(timer); if (!ready)
+                reject(Error("Local pane relay startup unconfirmed")); this.stop(); };
+            child.once("error", lost);
+            child.once("exit", lost);
+            child.stdout?.once("end", lost);
+            child.stdout?.once("close", lost);
+            child.stdin?.on("error", lost);
+            let told = 0;
+            child.stderr?.setEncoding?.("utf8");
+            child.stderr?.on("data", (part) => { if (told >= 8_192 || !this.options.diagnostic)
+                return; const text = String(part).replace(/[\p{Cc}\p{Cf}]+/gu, " ").trim().slice(0, 8_192 - told); told += text.length; if (text)
+                try {
+                    this.options.diagnostic(text);
+                }
+                catch { /* a diagnostic never affects the relay */ } });
+            child.stdout?.on("data", (bytes) => {
+                try {
+                    framer.feed(bytes, raw => {
+                        const value = paneStdioOutput(raw);
+                        if (value.epoch !== this.attachment)
+                            throw Error("Local pane relay epoch differs");
+                        if (!ready) {
+                            if (value.type !== "hello")
+                                throw Error("Local pane relay not ready");
+                            this.hostBootId = value.hostBootId;
+                            ready = true;
+                            clearTimeout(timer);
+                            this.connected = true;
+                            this.lastLease = performance.now();
+                            this.lease();
+                            this.interval = setInterval(() => this.lease(), 5000);
+                            this.interval.unref();
+                            resolve();
+                            return;
+                        }
+                        if (value.type === "hello")
+                            throw Error("Duplicate local pane hello");
+                        if (value.type === "output") {
+                            for (const listener of this.listeners)
+                                listener({ type: "pane", machineId: "local", pane: value.snapshot });
+                            return;
+                        }
+                        if (value.type === "response") {
+                            const row = this.pending.get(value.id);
+                            if (!row)
+                                return;
+                            this.pending.delete(value.id);
+                            clearTimeout(row.timer);
+                            if (value.ok)
+                                row.resolve(value.result);
+                            else
+                                row.reject(Error("Local pane operation unconfirmed; inspect its owned receipt"));
+                            return;
+                        }
+                        if (this.cleanupOnly) {
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: false });
+                            return;
+                        }
+                        if (this.mcpPending >= 32)
+                            throw Error("Local pane MCP backlog");
+                        this.mcpPending++;
+                        const current = () => !this.cleanupOnly && this.online();
+                        void this.options.mcp(value.body, current).then(result => { if (current())
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: true, result }); }, () => { if (current())
+                            this.send({ type: "mcp.result", epoch: this.attachment, id: value.id, ok: false }); }).catch(() => this.stop()).finally(() => { this.mcpPending--; });
+                    });
+                }
+                catch {
+                    lost();
+                }
+            });
+            try {
+                this.send({ type: "init", scope: this.options.scope, epoch: this.attachment, maxAgents: this.options.maxAgents() });
+            }
+            catch (error) {
+                clearTimeout(timer);
+                reject(error);
+                this.stop();
+            }
+        });
+    }
+    lease() { if (this.stopped)
+        return; if (!this.online()) {
+        this.stop();
+        return;
+    } this.lastLease = performance.now(); try {
+        this.send({ type: "lease", epoch: this.attachment, online: this.online(), maxAgents: this.options.maxAgents() });
+    }
+    catch {
+        this.stop();
+    } }
+    call(request) {
+        if (this.cleanupOnly && !["snapshot", "close", "list", "shutdown"].includes(request.action))
+            return Promise.reject(Error("Local pane relay only permits owned cleanup"));
+        if (!this.online() || this.pending.size >= 64)
+            return Promise.reject(Error("Local pane relay unavailable or busy"));
+        return new Promise((resolve, reject) => { const id = randomUUID(), timer = setTimeout(() => { this.pending.delete(id); reject(Error("Local pane result unconfirmed; input was not replayed")); }, 125_000); timer.unref(); this.pending.set(id, { resolve, reject, timer }); try {
+            this.send({ type: "request", epoch: this.attachment, id, request });
+        }
+        catch (error) {
+            clearTimeout(timer);
+            this.pending.delete(id);
+            reject(error);
+        } });
+    }
+    /** Explicit switch-off only. The host independently refuses while any launch or outcome remains unconfirmed. */
+    async shutdownHost() {
+        if (!this.cleanupOnly || !this.hostBootId)
+            throw Error("Local pane host shutdown lacks a cleanup owner");
+        validateRuntimePaneShutdown(await this.call({ action: "shutdown", hostBootId: this.hostBootId }), this.hostBootId);
+    }
+    /** Only close stdio; never signal a Windows process or close a terminal here. */
+    stop() { if (this.stopped)
+        return; this.stopped = true; this.connected = false; clearInterval(this.interval); this.child?.stdin?.end(); this.child?.stdout?.destroy(); this.child?.stderr?.destroy(); for (const row of this.pending.values()) {
+        clearTimeout(row.timer);
+        row.reject(Error("Local pane relay detached; process state is retained"));
+    } this.pending.clear(); for (const listener of this.listeners)
+        listener({ type: "machine", machineId: "local" }); this.listeners.clear(); }
+}
+//# sourceMappingURL=local-pane-endpoint.js.map

package/dist/local-pane-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-pane-endpoint.js","sourceRoot":"","sources":["../src/local-pane-endpoint.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,eAAe,EAAC,cAAc,EAAC,eAAe,EAAC,gBAAgB,EAAsB,MAAM,kCAAkC,CAAC;AACvI,OAAO,EAAE,2BAA2B,EAA2B,MAAM,4BAA4B,CAAC;AASlG,MAAM,OAAO,iBAAiB;IAID,OAAO;IAH1B,SAAS,GAAC,OAAO,CAAC;IAAiB,UAAU,GAAC,UAAU,EAAE,CAAC;IAAQ,KAAK,CAAwB;IAAQ,SAAS,GAAC,KAAK,CAAC;IAAQ,OAAO,GAAC,KAAK,CAAC;IAAQ,UAAU,GAAC,CAAC,CAAC;IAAQ,WAAW,GAAC,KAAK,CAAC;IAAQ,SAAS,GAAC,CAAC,CAAC;IAClN,OAAO,GAAC,IAAI,GAAG,EAAkB,CAAC;IAAQ,SAAS,GAAC,IAAI,GAAG,EAAyC,CAAC;IAAQ,QAAQ,CAA0C;IAC/J,UAAU,CAAkB;IACpC,YAA4B,OAAwB;uBAAxB,OAAO;IAAmB,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAwB;QACzC,MAAM,QAAQ,GAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAAA,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,KAAK,GAAC,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAAA,QAAQ,CAAC,KAAK,GAAC,KAAK,CAAC;QACtH,IAAG,CAAC;YAAA,OAAO,CAAC,KAAK,EAAE,CAAC;YAAA,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,OAAO,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO,QAAQ,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAA,MAAM,KAAK,CAAC;QAAA,CAAC;IAC7H,CAAC;IACD,MAAM,KAAW,IAAG,IAAI,CAAC,OAAO,IAAE,CAAC,IAAI,CAAC,SAAS,IAAE,WAAW,CAAC,GAAG,EAAE,GAAC,IAAI,CAAC,SAAS,IAAE,MAAM;QAAC,OAAO,KAAK,CAAC,CAAA,IAAG,IAAI,CAAC,WAAW;QAAC,OAAO,IAAI,CAAC,CAAA,IAAG,CAAC;QAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC;IACpM,wGAAwG;IACxG,YAAY,KAAQ,IAAI,CAAC,WAAW,GAAC,IAAI,CAAC,CAAA,CAAC;IAC3C,KAAK,KAAe,OAAO,IAAI,CAAC,MAAM,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC,UAAU,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,CAAC;IAC/D,OAAO,CAAC,QAAe,IAAc,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA,CAAC;IAC5E,SAAS,CAAC,QAA8C,IAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA,OAAM,GAAE,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA,CAAC;IACnI,IAAI,CAAC,KAAoB;QAChC,IAAG,IAAI,CAAC,OAAO,IAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ;YAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAAA,MAAM,KAAK,GAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,GAAC,IAAI,CAAC;QACrJ,IAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC,IAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC;YAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxM,CAAC;IACO,MAAM,CAAC,KAAkB;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;YACpC,IAAG,CAAC,KAAK,CAAC,KAAK,IAAE,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClG,MAAM,MAAM,GAAC,IAAI,eAAe,EAAE,CAAC;YAAA,IAAI,KAAK,GAAC,KAAK,CAAC;YAAA,MAAM,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC,EAAC,OAAO,CAAC,CAAC;YAAA,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1K,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK;gBAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YAAA,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;YACjQ,IAAI,IAAI,GAAC,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,IAAkB,EAAC,EAAE,GAAC,IAAG,IAAI,IAAE,KAAK,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;gBAAC,OAAO,CAAA,MAAM,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,KAAK,GAAC,IAAI,CAAC,CAAC,CAAA,IAAI,IAAE,IAAI,CAAC,MAAM,CAAC,CAAA,IAAG,IAAI;gBAAC,IAAG,CAAC;oBAAA,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,0CAA0C,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC;YACnV,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAC,CAAC,KAAY,EAAC,EAAE;gBAAC,IAAG,CAAC;oBAAA,MAAM,CAAC,IAAI,CAAC,KAAK,EAAC,GAAG,CAAA,EAAE;wBACnE,MAAM,KAAK,GAAC,eAAe,CAAC,GAAG,CAAC,CAAC;wBAAA,IAAG,KAAK,CAAC,KAAK,KAAG,IAAI,CAAC,UAAU;4BAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;wBAChH,IAAG,CAAC,KAAK,EAAC,CAAC;4BAAA,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO;gCAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;4BAAA,IAAI,CAAC,UAAU,GAAC,KAAK,CAAC,UAAU,CAAC;4BAAA,KAAK,GAAC,IAAI,CAAC;4BAAA,YAAY,CAAC,KAAK,CAAC,CAAC;4BAAA,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC;4BAAA,IAAI,CAAC,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC;4BAAA,IAAI,CAAC,KAAK,EAAE,CAAC;4BAAA,IAAI,CAAC,QAAQ,GAAC,WAAW,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,KAAK,EAAE,EAAC,IAAI,CAAC,CAAC;4BAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;4BAAA,OAAO,EAAE,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACxS,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO;4BAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;wBAClE,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;4BAAA,KAAI,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;gCAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,IAAI,EAAC,KAAK,CAAC,QAAQ,EAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACrI,IAAG,KAAK,CAAC,IAAI,KAAG,UAAU,EAAC,CAAC;4BAAA,MAAM,GAAG,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;4BAAA,IAAG,CAAC,GAAG;gCAAC,OAAO;4BAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;4BAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;4BAAA,IAAG,KAAK,CAAC,EAAE;gCAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;;gCAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBAC1Q,IAAG,IAAI,CAAC,WAAW,EAAC,CAAC;4BAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC;4BAAA,OAAO;wBAAA,CAAC;wBACvG,IAAG,IAAI,CAAC,UAAU,IAAE,EAAE;4BAAC,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;wBAAA,IAAI,CAAC,UAAU,EAAE,CAAC;wBAAA,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,CAAC,IAAI,CAAC,WAAW,IAAE,IAAI,CAAC,MAAM,EAAE,CAAC;wBAClI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,GAAC,IAAG,OAAO,EAAE;4BAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,IAAI,EAAC,MAAM,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC,GAAE,EAAE,GAAC,IAAG,OAAO,EAAE;4BAAC,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,YAAY,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;oBAChT,CAAC,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC;oBAAA,IAAI,EAAE,CAAC;gBAAA,CAAC;YAAA,CAAC,CAAC,CAAC;YACrB,IAAG,CAAC;gBAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,SAAS,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAC,CAAC,CAAC;YAAA,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBAAA,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,IAAI,CAAC,IAAI,EAAE,CAAC;YAAA,CAAC;QAC7K,CAAC,CAAC,CAAC;IACJ,CAAC;IACO,KAAK,KAAQ,IAAG,IAAI,CAAC,OAAO;QAAC,OAAO,CAAA,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAC,CAAC;QAAA,IAAI,CAAC,IAAI,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC,CAAA,IAAI,CAAC,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAA,IAAG,CAAC;QAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAE,EAAC,SAAS,EAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,IAAI,CAAC,IAAI,EAAE,CAAC;IAAA,CAAC,CAAA,CAAC;IACrP,IAAI,CAAC,OAA0B;QAC9B,IAAG,IAAI,CAAC,WAAW,IAAE,CAAC,CAAC,UAAU,EAAC,OAAO,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;QAClK,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAE,EAAE;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC9G,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,OAAO,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,IAAG,CAAC;YAAA,IAAI,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,KAAK,EAAC,IAAI,CAAC,UAAU,EAAC,EAAE,EAAC,OAAO,EAAC,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC,CAAA,CAAC,CAAC,CAAC;IACpY,CAAC;IACD,gHAAgH;IAChH,KAAK,CAAC,YAAY;QACjB,IAAG,CAAC,IAAI,CAAC,WAAW,IAAE,CAAC,IAAI,CAAC,UAAU;YAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACrG,2BAA2B,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,UAAU,EAAC,IAAI,CAAC,UAAU,EAAC,CAAC,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9G,CAAC;IACD,iFAAiF;IACjF,IAAI,KAAQ,IAAG,IAAI,CAAC,OAAO;QAAC,OAAO,CAAA,IAAI,CAAC,OAAO,GAAC,IAAI,CAAC,CAAA,IAAI,CAAC,SAAS,GAAC,KAAK,CAAC,CAAA,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA,KAAI,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAC,CAAC;QAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;IAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA,KAAI,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;QAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,SAAS,EAAC,OAAO,EAAC,CAAC,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC;CACtc"}

package/dist/local-pane-launcher.d.ts

@@ -0,0 +1,2 @@
+export declare const localPaneScope: (home: string) => string;
+export declare function launchLocalPaneRelay(home: string, admit?: () => void): Promise<import("node:child_process").ChildProcessWithoutNullStreams>;

package/dist/local-pane-launcher.js

@@ -0,0 +1,38 @@
+/** Stage only the verified shipped code bundle. Never enumerate a provider home or copy login material. */
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, writeFile, rm } from "node:fs/promises";
+import { dirname, join, win32 } from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+import { execFile, spawn } from "./child-process.js";
+import { createRuntimeBundle } from "./runtime-bundle.js";
+import { admitLocalWindowsCli } from "./windows-cli.js";
+import { nativeCliEnvironment, validWindowsDirectory } from "./windows-cli-worker.js";
+const exec = promisify(execFile);
+export const localPaneScope = (home) => createHash("sha256").update(home).digest("hex");
+export async function launchLocalPaneRelay(home, admit = admitLocalWindowsCli) {
+    admit();
+    if (process.platform !== "linux" && process.platform !== "win32")
+        throw Error("Local Windows panes require Windows or WSL");
+    const code = dirname(fileURLToPath(import.meta.url)), powershell = process.platform === "win32" ? join(process.env.SystemRoot || "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe") : "/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe";
+    const convert = async (path, direction) => process.platform === "win32" ? path : String((await exec("wslpath", [direction, path], { timeout: 5000, maxBuffer: 8192, encoding: "utf8" })).stdout).trim();
+    await mkdir(home, { recursive: true, mode: 0o700 });
+    const temporary = await mkdtemp(join(home, "pane-code-"));
+    try {
+        const bundle = createRuntimeBundle(), archive = join(temporary, "runtime.zip");
+        await writeFile(archive, bundle.bytes, { mode: 0o600 });
+        const [script, zip] = await Promise.all([convert(join(code, "local-pane-stage.ps1"), "-w"), convert(archive, "-w")]);
+        admit();
+        const staged = await exec(powershell, ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", script, "-Archive", zip, "-Sha256", bundle.sha256, "-Scope", localPaneScope(home)], { env: nativeCliEnvironment(), timeout: 120_000, maxBuffer: 8192, encoding: "utf8", windowsHide: true });
+        const value = JSON.parse(String(staged.stdout).trim());
+        if (!value || Object.keys(value).sort().join(",") !== "node,relay" || !validWindowsDirectory(value.node) || !validWindowsDirectory(value.relay) || win32.basename(value.node).toLowerCase() !== "node.exe" || win32.basename(value.relay) !== "runtime-pane-stdio.js")
+            throw Error("Staged Windows pane code could not be verified");
+        const node = await convert(value.node, "-u");
+        admit();
+        return spawn(node, [value.relay], { env: nativeCliEnvironment(), shell: false, windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=local-pane-launcher.js.map

package/dist/local-pane-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-pane-launcher.js","sourceRoot":"","sources":["../src/local-pane-launcher.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,EAAE,EAAC,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAC,OAAO,EAAC,IAAI,EAAC,KAAK,EAAC,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,SAAS,EAAC,MAAM,WAAW,CAAC;AACpC,OAAO,EAAC,QAAQ,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAC,mBAAmB,EAAC,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAC,oBAAoB,EAAC,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAC,oBAAoB,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AACnF,MAAM,IAAI,GAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,cAAc,GAAC,CAAC,IAAW,EAAQ,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAW,EAAC,KAAK,GAAU,oBAAoB;IACzF,KAAK,EAAE,CAAC;IAAA,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,IAAE,OAAO,CAAC,QAAQ,KAAG,OAAO;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,GAAC,OAAO,CAAC,QAAQ,KAAG,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAE,aAAa,EAAC,UAAU,EAAC,mBAAmB,EAAC,MAAM,EAAC,gBAAgB,CAAC,CAAA,CAAC,CAAA,+DAA+D,CAAC;IAC5P,MAAM,OAAO,GAAC,KAAK,EAAC,IAAW,EAAC,SAAmB,EAAC,EAAE,CAAA,OAAO,CAAC,QAAQ,KAAG,OAAO,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAC,CAAC,SAAS,EAAC,IAAI,CAAC,EAAC,EAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnM,MAAM,KAAK,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,MAAM,SAAS,GAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,YAAY,CAAC,CAAC,CAAC;IACrG,IAAG,CAAC;QACH,MAAM,MAAM,GAAC,mBAAmB,EAAE,EAAC,OAAO,GAAC,IAAI,CAAC,SAAS,EAAC,aAAa,CAAC,CAAC;QAAA,MAAM,SAAS,CAAC,OAAO,EAAC,MAAM,CAAC,KAAK,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,EAAC,GAAG,CAAC,GAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAC,sBAAsB,CAAC,EAAC,IAAI,CAAC,EAAC,OAAO,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QACtH,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,UAAU,EAAC,CAAC,YAAY,EAAC,iBAAiB,EAAC,kBAAkB,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,UAAU,EAAC,GAAG,EAAC,SAAS,EAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAC,EAAC,GAAG,EAAC,oBAAoB,EAAE,EAAC,OAAO,EAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,WAAW,EAAC,IAAI,EAAC,CAAC,CAAC;QAClR,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAG,CAAC,KAAK,IAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,YAAY,IAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAG,UAAU,IAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAG,uBAAuB;YAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnT,MAAM,IAAI,GAAC,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAA,KAAK,EAAE,CAAC;QAAA,OAAO,KAAK,CAAC,IAAI,EAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAC,EAAC,GAAG,EAAC,oBAAoB,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,WAAW,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,EAAC,CAAC,CAAC;IAC3K,CAAC;YAAO,CAAC;QAAA,MAAM,EAAE,CAAC,SAAS,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,CAAC;AAC3D,CAAC"}

package/dist/local-pane-stage.ps1

@@ -0,0 +1,101 @@
+param(
+ [Parameter(Mandatory=$true)][string]$Archive,
+ [Parameter(Mandatory=$true)][ValidatePattern('^[a-f0-9]{64}$')][string]$Sha256,
+ [Parameter(Mandatory=$true)][ValidatePattern('^[a-f0-9]{64}$')][string]$Scope
+)
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)
+function Real-Directory([string]$Path) {
+ $entry = Get-Item -LiteralPath $Path -Force
+ if (-not $entry.PSIsContainer -or ($entry.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Unsafe pane code directory' }
+}
+function Private-Directory([string]$Path) {
+ [IO.Directory]::CreateDirectory($Path) | Out-Null
+ Real-Directory $Path
+ $user = [Security.Principal.WindowsIdentity]::GetCurrent().User
+ $acl = [Security.AccessControl.DirectorySecurity]::new()
+ $directory = [IO.DirectoryInfo]::new($Path)
+ if ($directory.GetAccessControl([Security.AccessControl.AccessControlSections]::Owner).GetOwner([Security.Principal.SecurityIdentifier]).Value -ne $user.Value) { throw 'Pane code directory has a different owner' }
+ $acl.SetAccessRuleProtection($true,$false)
+ foreach ($sid in @($user,[Security.Principal.SecurityIdentifier]::new('S-1-5-18'))) {
+  $acl.AddAccessRule([Security.AccessControl.FileSystemAccessRule]::new($sid,'FullControl','ContainerInherit,ObjectInherit','None','Allow'))
+ }
+ $directory.SetAccessControl($acl)
+}
+if (-not $env:LOCALAPPDATA -or -not [IO.Path]::IsPathRooted($env:LOCALAPPDATA)) { throw 'Windows local application-data directory is unavailable' }
+$parent = [IO.Path]::GetFullPath($env:LOCALAPPDATA)
+for ($walk = Get-Item -LiteralPath $parent -Force; $walk; $walk = $walk.Parent) { Real-Directory $walk.FullName }
+foreach ($leaf in @('AgEnD','p',$Scope.Substring(0,16),'b')) { $parent = Join-Path $parent $leaf; Private-Directory $parent }
+$destination = Join-Path $parent $Sha256.Substring(0,16)
+$temporary = Join-Path $parent ([Guid]::NewGuid().ToString('N'))
+$archiveEntry = Get-Item -LiteralPath $Archive -Force
+if ($archiveEntry.PSIsContainer -or ($archiveEntry.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $archiveEntry.Length -gt 8388608) { throw 'Unsafe pane code archive' }
+$bytes = [IO.File]::ReadAllBytes($Archive)
+$hash = [Security.Cryptography.SHA256]::Create()
+function Digest([byte[]]$Value) { return [BitConverter]::ToString($hash.ComputeHash($Value)).Replace('-','').ToLowerInvariant() }
+if ((Digest $bytes) -cne $Sha256) { throw 'Pane code archive checksum differs' }
+Add-Type -AssemblyName System.IO.Compression
+$memory = [IO.MemoryStream]::new($bytes,$false)
+$zip = [IO.Compression.ZipArchive]::new($memory,[IO.Compression.ZipArchiveMode]::Read)
+$exists = Test-Path -LiteralPath $destination
+if ($exists) {
+ Real-Directory $destination
+ $marker = Get-Item -LiteralPath (Join-Path $destination 'bundle.sha256') -Force
+ if ($marker.PSIsContainer -or ($marker.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $marker.Length -ne 64 -or [IO.File]::ReadAllText($marker.FullName) -cne $Sha256) { throw 'Staged pane bundle identity differs' }
+} else { Private-Directory $temporary }
+try {
+ $seen = [Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ $total = 0
+ if ($zip.Entries.Count -gt 512) { throw 'Pane code archive has too many entries' }
+ foreach ($entry in $zip.Entries) {
+  if ($entry.FullName -notmatch '^agend-runtime/[A-Za-z0-9_@./-]+$' -or $entry.FullName.Contains('..') -or $entry.FullName.EndsWith('/') -or -not $seen.Add($entry.FullName) -or $entry.Length -gt 2097152) { throw 'Unsafe pane code archive entry' }
+  $total += $entry.Length
+  if ($total -gt 8388608) { throw 'Pane code archive is too large' }
+  $stream = $entry.Open(); $content = [IO.MemoryStream]::new()
+  try { $buffer = [byte[]]::new(65536); while (($count = $stream.Read($buffer,0,$buffer.Length)) -gt 0) { if ($content.Length + $count -gt 2097152) { throw 'Pane code entry exceeded its limit' }; $content.Write($buffer,0,$count) }; $data = $content.ToArray() } finally { $stream.Dispose(); $content.Dispose() }
+  $base = if ($exists) { $destination } else { $temporary }
+  $file = Join-Path $base $entry.FullName.Replace('/','\')
+  if ($exists) {
+   for ($walk = Get-Item -LiteralPath ([IO.Path]::GetDirectoryName($file)) -Force; $walk.FullName -ne $base; $walk = $walk.Parent) { Real-Directory $walk.FullName }
+   $onDisk = Get-Item -LiteralPath $file -Force
+   if ($onDisk.PSIsContainer -or ($onDisk.Attributes -band [IO.FileAttributes]::ReparsePoint) -or $onDisk.Length -ne $data.Length -or (Digest ([IO.File]::ReadAllBytes($file))) -cne (Digest $data)) { throw 'Staged pane code changed; no files were overwritten' }
+  } else {
+   [IO.Directory]::CreateDirectory([IO.Path]::GetDirectoryName($file)) | Out-Null
+   [IO.File]::WriteAllBytes($file,$data)
+  }
+ }
+ if (-not $seen.Contains('agend-runtime/dist/runtime-pane-stdio.js')) { throw 'Pane relay module is missing' }
+ # Verify the complete tree before executing it: unlisted package.json or JS can change Node resolution.
+ $base = if ($exists) { $destination } else { $temporary }
+ $allowedDirectories = [Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ foreach ($name in $seen) {
+  for ($relative = [IO.Path]::GetDirectoryName($name.Replace('/','\')); $relative; $relative = [IO.Path]::GetDirectoryName($relative)) { [void]$allowedDirectories.Add($relative) }
+ }
+ $pending = [Collections.Generic.Stack[string]]::new(); $pending.Push($base)
+ while ($pending.Count -gt 0) {
+  $directory = $pending.Pop()
+  foreach ($item in Get-ChildItem -LiteralPath $directory -Force) {
+   $relative = $item.FullName.Substring($base.Length + 1)
+   if ($item.Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'Staged pane code contains an unexpected link' }
+   if ($item.PSIsContainer) {
+    if (-not $allowedDirectories.Contains($relative)) { throw 'Staged pane code contains an unexpected directory' }
+    $pending.Push($item.FullName)
+   } elseif (-not $seen.Contains($relative.Replace('\','/')) -and -not ($exists -and $relative -ceq 'bundle.sha256')) { throw 'Staged pane code contains an unexpected file' }
+  }
+ }
+ if (-not $exists) {
+  [IO.File]::WriteAllText((Join-Path $temporary 'bundle.sha256'),$Sha256,[Text.Encoding]::ASCII)
+  # Antivirus may briefly retain handles to freshly written native prebuilds. Never overwrite a live stage.
+  $deadline = [DateTime]::UtcNow.AddSeconds(15)
+  for (;;) {
+   try { [IO.Directory]::Move($temporary,$destination); break }
+   catch { if ((Test-Path -LiteralPath $destination) -or [DateTime]::UtcNow -ge $deadline) { throw 'Pane code staging could not be committed; retry after the pending file operation finishes' }; Start-Sleep -Milliseconds 200 }
+  }
+ }
+ $relay = Join-Path $destination 'agend-runtime\dist\runtime-pane-stdio.js'
+ $node = (Get-Command node.exe -CommandType Application -ErrorAction Stop | Select-Object -First 1).Source
+ [Console]::Write((@{relay=$relay;node=$node} | ConvertTo-Json -Compress))
+} finally {
+ $zip.Dispose(); $memory.Dispose(); $hash.Dispose()
+ if (Test-Path -LiteralPath $temporary) { Remove-Item -LiteralPath $temporary -Recurse -Force }
+}

package/dist/locale.js

@@ -13,6 +13,33 @@ export function detectLocale(fleetConfig) {
     return detectTimezone() === 8 ? "zh-TW" : "en";
 }
 const enMessages = {
+    "general_location.offline": "General’s Windows PC is offline. AgEnD is still running here. Reconnect that PC, or switch General back to this host in Settings. Pending or uncertain requests will not be sent again automatically.",
+    "general_location.offline_short": "General’s Windows PC is offline. AgEnD is still running here. Reconnect that PC, or switch General back to this host in Settings.",
+    "general_location.offline_title": "General’s Windows PC is offline",
+    "general_location.label": "Run General on",
+    "general_location.host": "This AgEnD host",
+    "general_location.windows": "Paired Windows PC",
+    "general_location.confirm_windows": "Run General on {0}? Its current process must stop first. The chat stays here. The host conversation is kept; Windows uses its own conversation. Pending or uncertain input will not be sent to the other conversation.",
+    "general_location.confirm_host": "Run General on this host again? The Windows process must stop first. Its conversation is kept. General resumes this host’s saved conversation, or starts one if this host has none.",
+    "general_location.exit_unconfirmed": "General was not switched: the previous process has not been confirmed stopped. Reconnect its PC or use the existing stopped-process recovery, then try again. No replacement was started.",
+    "general_location.complete": "General now runs on {0}. Its previous conversation is kept.",
+    "general_location.start_failed": "General’s location was saved, but it could not start. Check Needs you and choose Start or switch back. Its previous conversation is kept; no input was replayed.",
+    "general_location.history": "Host and Windows conversations stay separate. Switching does not copy or merge their history.",
+    "general_location.input_not_replayed": "Pending or uncertain input will not be sent to the other conversation.",
+    "native_pane.session_unconfirmed": "Windows Claude's saved conversation could not be checked. This agent is stopped; an administrator can start a new conversation.",
+    "native_pane.refresh_for_session": "This agent needs a new-conversation decision. Refresh this page to choose Start a new conversation.",
+    "native_pane.saved_available": "The saved conversation is available again. Choose Start to resume it.",
+    "native_pane.codex_session_unconfirmed": "Windows Codex's saved conversation could not be checked. This agent is stopped; an administrator can start a new conversation.",
+    "native_pane.codex_fresh_started": "Windows Codex had no saved conversation for this agent (its first turn never finished), so a new conversation was started.",
+    "native_pane.fresh_started": "Windows Claude had no saved conversation for this agent (its first turn never finished), so a new conversation was started.",
+    "native_pane.host_upgrade": "The Windows pane host uses an older adapter. Stop its Windows agents, restart Windows, then choose Start. Saved conversations are kept.",
+    "native_pane.exit_unconfirmed": "The previous Windows pane exit is unconfirmed. Stop its Windows processes, then use the administrator recovery action. The saved conversation is kept; no input was replayed.",
+    "native_pane.no_pin": "The original conversation is not proven; recovery cannot start a fresh conversation.",
+    "native_pane.changed": "The held native launch changed; refresh before recovery.",
+    "native_pane.authority_expired": "Native recovery authority expired.",
+    "native_pane.still_running": "This Windows pane is still running; stop it before recovery.",
+    "native_pane.scope": "Native recovery lacks an exact retained host receipt.",
+    "native_pane.unavailable": "Persistent pane recovery is unavailable.",
     "setup.admin.cancelled": "Setup cancelled; no admin selected.",
     "setup.discord_admin.connecting": "Connecting to Discord to detect your account…",
     "setup.discord_admin.wait": "Send a message in server {0}, or DM @{1}. Waiting up to 30 seconds…",
@@ -126,6 +153,17 @@ const enMessages = {
     "web_auth.refusal_not_admin_session": "it is not an admin's session.",
     "web_auth.refusal_no_account": "it was not signed in as an account.",
     "web_auth.refusal_host_sign_in": "it holds no authority of this computer's admin now (sign in again on this computer with agend web --code).",
+    "web_auth.refusal_outside_sign_in": "it signed in from outside, and connections from outside are off now or its authorization has ended (sign in again with a new code).",
+    // #3008: connections from outside (a web-only fleet's Notices; the leader's approved wording, cid-alpha3-design).
+    "outside.notice_signed_in": "Signed in from outside: {0}.",
+    "outside.notice_paused": "Sign-in from outside is paused for {0} after {1} wrong codes.",
+    "outside.notice_ended": "The outside link has ended ({0}). Turn it on again on the AgEnD computer, in Settings → Access & security.",
+    "outside.reason_expired": "its time ran out",
+    "outside.reason_failed": "it could not be reopened",
+    "outside.duration_minutes": "{0} minutes",
+    "outside.duration_minute": "1 minute",
+    "outside.duration_hours": "{0} hours",
+    "outside.duration_hour": "1 hour",
     "web_auth.refusal_not_session": "it is not a signed-in browser.",
     "web_auth.refusal_other_namespace": "it belongs to another connection.",
     "web_auth.refusal_not_authorized": "it is not authorized.",
@@ -273,6 +311,9 @@ const enMessages = {
     "config_history.history_checksum": "stored checksum mismatch",
     "config_history.history_invalid": "stored copy no longer valid",
     "login.browser_cleanup_failed": "Sign-in cleanup could not be confirmed. Close the AgEnD-owned login process and restart AgEnD before retrying.",
+    "needs.reason.general_windows_offline": "General’s Windows PC is offline",
+    "needs.reason.general_location_hold": "Run General on",
+    "needs.reason.native_pane_hold": "Windows agent needs attention",
     "needs.reason.crashed": "Crashed",
     "needs.reason.delivery_uncertain": "Could not confirm delivery",
     "needs.reason.delivery_failed": "Delivery failed",
@@ -1374,6 +1415,7 @@ const enMessages = {
     "settings_confirm.source.web_session": "web dashboard",
     "settings_confirm.source.public_link": "public link",
     "settings_confirm.source.setup_session": "setup",
+    "settings_confirm.source.agent_request": "an agent's request",
     "settings_confirm.confirm_button": "Confirm",
     "settings_confirm.reject_button": "Reject",
     "settings_confirm.no_longer_pending": "Settings confirmation is no longer pending.",
@@ -1487,9 +1529,37 @@ const enMessages = {
     "settings_confirm.cli_interactive": "Interactive confirmation required; --yes explicitly confirms the printed diff.",
     "settings_confirm.web_verified_label": "{0} (web-verified)",
     "settings_confirm.host_operator_label": "This computer's admin",
+    "settings_confirm.web_owner_required": "Only this fleet's owner, signed in on the AgEnD computer itself, can decide an agent's request here.",
     "settings_confirm.host_operator": "host operator",
 };
 const zhTWMessages = {
+    "general_location.offline": "General 所在的 Windows 電腦已離線。AgEnD 仍在這台主機運作。請重新連線那台電腦，或到設定把 General 切回這台主機。待處理或結果不明的請求不會自動重送。",
+    "general_location.offline_short": "General 所在的 Windows 電腦已離線。AgEnD 仍在這台主機運作。請重新連線那台電腦，或到設定把 General 切回這台主機。",
+    "general_location.offline_title": "General 所在的 Windows 電腦已離線",
+    "general_location.label": "General 執行位置",
+    "general_location.host": "這台 AgEnD 主機",
+    "general_location.windows": "已配對的 Windows 電腦",
+    "general_location.confirm_windows": "要讓 General 在 {0} 執行嗎？必須先停止目前的程序。聊天位置不變。主機上的對話會保留，Windows 使用自己的對話。待處理或結果不明的輸入不會送到另一段對話。",
+    "general_location.confirm_host": "要讓 General 回到這台主機執行嗎？必須先停止 Windows 程序，其對話會保留。General 會繼續這台主機儲存的對話；若主機沒有既有對話，才開啟新對話。",
+    "general_location.exit_unconfirmed": "General 尚未切換：還無法確認前一個程序已停止。請重新連線那台電腦，或完成現有的程序停止復原，再重試。沒有啟動替代程序。",
+    "general_location.complete": "General 現在於 {0} 執行。先前的對話已保留。",
+    "general_location.start_failed": "General 的執行位置已儲存，但未能啟動。請查看「等你處理」，選擇啟動或切回原位置。先前的對話已保留，沒有重送輸入。",
+    "general_location.history": "主機與 Windows 各自保留對話，切換時不會複製或合併對話紀錄。",
+    "general_location.input_not_replayed": "待處理或結果不明的輸入不會送到另一段對話。",
+    "native_pane.session_unconfirmed": "無法確認 Windows Claude 已儲存的對話。這個代理已停止，管理員可以開始新對話。",
+    "native_pane.refresh_for_session": "這個代理需要由你決定是否開始新對話。請重新整理頁面，再按「開始新對話」。",
+    "native_pane.saved_available": "已儲存的對話現在可以使用了。請選擇「啟動」繼續原對話。",
+    "native_pane.codex_session_unconfirmed": "無法確認 Windows Codex 已儲存的對話。這個代理已停止，管理員可以開始新對話。",
+    "native_pane.codex_fresh_started": "Windows Codex 沒有這個代理已儲存的對話（第一輪還沒完成就中斷），所以開了新對話。",
+    "native_pane.fresh_started": "Windows Claude 沒有這個代理已儲存的對話（第一輪還沒完成就中斷），所以開了新對話。",
+    "native_pane.host_upgrade": "Windows 終端主機仍使用舊版轉接器。請先停止這台電腦的 Windows 代理，重新啟動 Windows，再按「啟動」。已儲存的對話會保留。",
+    "native_pane.exit_unconfirmed": "無法確認上一個 Windows 終端是否已結束。請先停止這個代理的 Windows 程序，再由管理員復原。已儲存的對話會保留，也不會重送舊輸入。",
+    "native_pane.no_pin": "尚無法確認原本的對話；復原不會另開新對話。",
+    "native_pane.changed": "保留的 Windows 終端已變更，請重新整理後再復原。",
+    "native_pane.authority_expired": "Windows 終端復原的授權已失效。",
+    "native_pane.still_running": "這個 Windows 終端仍在執行，請先停止再復原。",
+    "native_pane.scope": "Windows 終端復原缺少身分相符的保留收據。",
+    "native_pane.unavailable": "目前無法復原持續執行的 Windows 終端。",
     "setup.admin.cancelled": "設定已取消，未選取管理員。",
     "setup.discord_admin.connecting": "正在連線到 Discord，以偵測你的帳號…",
     "setup.discord_admin.wait": "請在伺服器 {0} 發一則訊息，或私訊 @{1}。最多等待 30 秒…",
@@ -1602,6 +1672,16 @@ const zhTWMessages = {
     "web_auth.refusal_not_admin_session": "它不是管理者的 session。",
     "web_auth.refusal_no_account": "它不是用帳號登入的。",
     "web_auth.refusal_host_sign_in": "它目前沒有這台電腦管理者的授權（請在這台電腦上執行 agend web --code 重新登入）。",
+    "web_auth.refusal_outside_sign_in": "它是從外面登入的，而從外面連線現在已關閉或授權已結束（請用新的代碼重新登入）。",
+    "outside.notice_signed_in": "有人從外面登入：{0}。",
+    "outside.notice_paused": "從外面登入連錯 {1} 次，已暫停 {0}。",
+    "outside.notice_ended": "從外面連線的連結已結束（{0}）。請在 AgEnD 電腦上，到「設定 → 存取與安全」重新開啟。",
+    "outside.reason_expired": "時間已到",
+    "outside.reason_failed": "無法重新開啟",
+    "outside.duration_minutes": "{0} 分鐘",
+    "outside.duration_minute": "1 分鐘",
+    "outside.duration_hours": "{0} 小時",
+    "outside.duration_hour": "1 小時",
     "web_auth.refusal_not_session": "它不是已登入的瀏覽器。",
     "web_auth.refusal_other_namespace": "它屬於另一個連線。",
     "web_auth.refusal_not_authorized": "它尚未授權。",
@@ -1749,6 +1829,9 @@ const zhTWMessages = {
     "config_history.history_checksum": "儲存副本的校驗碼不符",
     "config_history.history_invalid": "儲存的副本已不再有效",
     "login.browser_cleanup_failed": "無法確認登入程序已關閉。請先關閉 AgEnD 的登入程序，重新啟動 AgEnD 後再試。",
+    "needs.reason.general_windows_offline": "General 所在的 Windows 電腦已離線",
+    "needs.reason.general_location_hold": "General 執行位置",
+    "needs.reason.native_pane_hold": "Windows 代理需要處理",
     "needs.reason.crashed": "已崩潰",
     "needs.reason.delivery_uncertain": "無法確認是否送達",
     "needs.reason.delivery_failed": "傳送失敗",
@@ -2848,6 +2931,7 @@ const zhTWMessages = {
     "settings_confirm.source.web_session": "網頁儀表板",
     "settings_confirm.source.public_link": "公開連結",
     "settings_confirm.source.setup_session": "設定精靈",
+    "settings_confirm.source.agent_request": "代理人的請求",
     "settings_confirm.confirm_button": "確認",
     "settings_confirm.reject_button": "拒絕",
     "settings_confirm.no_longer_pending": "這個設定確認已不在等待中。",
@@ -2961,6 +3045,7 @@ const zhTWMessages = {
     "settings_confirm.cli_interactive": "需要互動確認；--yes 表示明確確認上面列出的差異。",
     "settings_confirm.web_verified_label": "{0}（網頁驗證）",
     "settings_confirm.host_operator_label": "這台電腦的管理者",
+    "settings_confirm.web_owner_required": "只有在 AgEnD 這台電腦上登入的 fleet 擁有者，才能在這裡決定 agent 的請求。",
     "settings_confirm.host_operator": "主機操作者",
 };
 const messages = {