@wjarka/cezarion 0.15.1 → 0.16.0

package/dist/preview/session.js

@@ -0,0 +1,347 @@
+import { normalizePreviewUrl } from './url.js';
+const QUALITY = 60;
+const DEFAULT_VIEWPORT = { w: 1280, h: 800 };
+/** A started stream with no frame after this long is restarted: Chromium can stay silent after back-to-back restarts on a page that no longer changes. */
+const FIRST_FRAME_WAIT_MS = 500;
+const FIRST_FRAME_RETRIES = 5;
+/**
+ * Page activity (a click, a key, a navigation, a load step) with no frame after it this long restarts
+ * the stream. Chromium can paint once and then go silent, so the pane kept the first frame for good,
+ * and a first paint after the first-frame retries never reached it (#870).
+ */
+const ACTIVITY_FRAME_WAIT_MS = 1000;
+/** Input that can change what the page shows. A pointer move alone is too frequent to count. */
+const ACTIVE_MOUSE = new Set(['mousePressed', 'mouseReleased', 'mouseWheel']);
+/**
+ * The pixel size of a JPEG frame, from its first baseline/progressive SOF segment; undefined when
+ * the bytes are not a JPEG this can read. Screencast metadata is no help: it can report the
+ * requested size for a frame captured before the page resized.
+ */
+function jpegSize(base64) {
+    const bytes = Buffer.from(base64, 'base64');
+    if (bytes.length < 4 || bytes[0] !== 0xff || bytes[1] !== 0xd8)
+        return undefined;
+    let at = 2;
+    while (at + 4 <= bytes.length) {
+        if (bytes[at] !== 0xff)
+            return undefined;
+        const marker = bytes[at + 1];
+        if (marker === 0xff) {
+            at += 1;
+            continue;
+        }
+        if (marker >= 0xc0 && marker <= 0xcf && marker !== 0xc4 && marker !== 0xc8 && marker !== 0xcc) {
+            return at + 9 <= bytes.length ? { h: bytes.readUInt16BE(at + 5), w: bytes.readUInt16BE(at + 7) } : undefined;
+        }
+        at += 2 + bytes.readUInt16BE(at + 2);
+    }
+    return undefined;
+}
+/**
+ * Runs in every page. Popups open in the same tab (there is one page to stream), and the cursor
+ * shape is reported through the `__cursor` binding because screencast frames carry no cursor.
+ */
+export const INJECT = `(() => {
+  window.open = (u) => { if (u) location.href = u; return null; };
+  document.addEventListener('click', (e) => {
+    const a = e.target.closest && e.target.closest('a[target]');
+    if (a && a.target !== '_self') a.target = '_self';
+  }, true);
+  let last = '';
+  document.addEventListener('mousemove', (e) => {
+    const c = getComputedStyle(e.target).cursor;
+    if (c !== last) { last = c; window.__cursor && window.__cursor(c); }
+  }, true);
+})();`;
+function originOf(url) {
+    try {
+        return url ? new URL(url).origin : '';
+    }
+    catch {
+        return '';
+    }
+}
+export class PreviewSession {
+    cdp;
+    opts;
+    /** The page's current top-level URL, as Chromium last reported it. */
+    url;
+    viewer;
+    /** The frame sent to the viewer and not yet acked. */
+    pending;
+    /** The newest frame that arrived while one was in flight. */
+    held;
+    announced = false;
+    viewport = DEFAULT_VIEWPORT;
+    /** Viewport changes and screencast stops run one at a time: overlapping stop/start pairs can leave Chromium without a first frame. */
+    queue = Promise.resolve();
+    /** The size the running screencast was started at; unset while stopped. */
+    streaming;
+    watchdog;
+    silentStarts = 0;
+    /** The top-level frame, so a subframe's load steps do not count as page activity. */
+    mainFrameId;
+    constructor(cdp, opts) {
+        this.cdp = cdp;
+        this.opts = opts;
+        cdp.on('Page.screencastFrame', frame => this.onFrame(frame));
+        cdp.on('Page.frameNavigated', ({ frame }) => {
+            if (frame.parentId)
+                return;
+            this.mainFrameId = frame.id;
+            this.url = frame.url;
+            this.tell({ t: 'url', url: frame.url });
+            this.expectFrame();
+        });
+        cdp.on('Page.navigatedWithinDocument', ({ frameId, url }) => {
+            if (!this.isMainFrame(frameId))
+                return;
+            this.url = url;
+            this.tell({ t: 'url', url });
+            this.expectFrame();
+        });
+        // The page's load steps, first paint among them: the moment a page that painted late has something to show.
+        cdp.on('Page.lifecycleEvent', ({ frameId }) => {
+            if (this.isMainFrame(frameId))
+                this.expectFrame();
+        });
+        cdp.on('Page.javascriptDialogOpening', dialog => this.tell({
+            t: 'dialog',
+            type: dialog.type,
+            message: dialog.message,
+            ...(dialog.type === 'prompt' ? { defaultPrompt: dialog.defaultPrompt ?? '' } : {}),
+            origin: originOf(dialog.url ?? this.url),
+        }));
+        cdp.on('Runtime.bindingCalled', ({ name, payload }) => {
+            if (name === '__cursor')
+                this.tell({ t: 'cursor', cursor: payload });
+        });
+    }
+    /** Prepares the page: events, the cursor binding and the injected script, as the prototype did. */
+    static async create(cdp, opts = {}) {
+        const session = new PreviewSession(cdp, opts);
+        await cdp.send('Page.enable');
+        await cdp.send('Page.setLifecycleEventsEnabled', { enabled: true });
+        await cdp.send('Runtime.enable');
+        await cdp.send('Runtime.addBinding', { name: '__cursor' });
+        await cdp.send('Page.addScriptToEvaluateOnNewDocument', { source: INJECT });
+        return session;
+    }
+    /** Makes `viewer` the one the page streams to and starts the screencast at the current viewport. */
+    attach(viewer) {
+        this.viewer = viewer;
+        this.announced = false;
+        // A new viewer needs its own first frame, so its stream always restarts, whatever the size.
+        this.streaming = undefined;
+        this.silentStarts = 0;
+        void this.setViewport(this.viewport.w, this.viewport.h).catch(() => { });
+    }
+    detach(viewer) {
+        if (this.viewer !== viewer)
+            return;
+        this.viewer = undefined;
+        this.releaseFrames();
+        this.streaming = undefined;
+        this.disarmWatchdog();
+        this.enqueue(async () => {
+            await this.cdp.send('Page.stopScreencast').catch(() => { });
+        });
+    }
+    async navigate(url) {
+        this.announced = false;
+        this.expectFrame();
+        await this.cdp.send('Page.navigate', { url });
+    }
+    close() {
+        this.viewer = undefined;
+        this.disarmWatchdog();
+        this.cdp.close();
+    }
+    /** The whole browser-facing surface. Everything else in CDP stays unreachable. */
+    async handle(msg) {
+        switch (msg.t) {
+            case 'resize':
+                return this.setViewport(msg.w, msg.h);
+            case 'ack': {
+                if (this.pending === undefined)
+                    return;
+                const acked = this.pending;
+                this.pending = undefined;
+                const held = this.held;
+                this.held = undefined;
+                if (held)
+                    this.sendFrame(held);
+                return this.ackFrame(acked);
+            }
+            case 'mouse':
+                if (ACTIVE_MOUSE.has(msg.type))
+                    this.expectFrame();
+                await this.cdp.send('Input.dispatchMouseEvent', {
+                    type: msg.type,
+                    x: msg.x,
+                    y: msg.y,
+                    button: msg.button ?? 'none',
+                    buttons: msg.buttons ?? 0,
+                    clickCount: msg.clickCount ?? 0,
+                    deltaX: msg.deltaX ?? 0,
+                    deltaY: msg.deltaY ?? 0,
+                    modifiers: msg.modifiers ?? 0,
+                });
+                return;
+            case 'key':
+                if (msg.type !== 'keyUp')
+                    this.expectFrame();
+                await this.cdp.send('Input.dispatchKeyEvent', {
+                    type: msg.type,
+                    key: msg.key ?? '',
+                    code: msg.code ?? '',
+                    ...(msg.type === 'keyUp' ? {} : { text: msg.text ?? '' }),
+                    modifiers: msg.modifiers ?? 0,
+                    windowsVirtualKeyCode: msg.vk ?? 0,
+                    ...(msg.commands ? { commands: msg.commands } : {}),
+                });
+                return;
+            case 'insertText':
+                this.expectFrame();
+                await this.cdp.send('Input.insertText', { text: msg.text });
+                return;
+            case 'nav':
+                return this.navigate(normalizePreviewUrl(msg.url));
+            case 'reload':
+                this.expectFrame();
+                await this.cdp.send('Page.reload', { ignoreCache: msg.ignoreCache ?? false });
+                return;
+            case 'back':
+            case 'forward': {
+                this.expectFrame();
+                const { currentIndex, entries } = await this.cdp.send('Page.getNavigationHistory');
+                const entry = entries[currentIndex + (msg.t === 'back' ? -1 : 1)];
+                if (entry)
+                    await this.cdp.send('Page.navigateToHistoryEntry', { entryId: entry.id });
+                return;
+            }
+            case 'dialogResult':
+                await this.cdp.send('Page.handleJavaScriptDialog', { accept: msg.accept, promptText: msg.text ?? '' });
+                return;
+            default:
+                // Server and lifecycle messages belong to the host.
+                return;
+        }
+    }
+    enqueue(job) {
+        const run = this.queue.then(job);
+        this.queue = run.catch(() => { });
+        return run;
+    }
+    setViewport(w, h) {
+        // Recorded now, so an attach that follows queued resizes starts at the newest size.
+        this.viewport = { w, h };
+        return this.enqueue(() => this.applyViewport(w, h));
+    }
+    async applyViewport(w, h) {
+        // The pane repeats its size at every loading step; a stream already at this size has nothing to redo.
+        if (this.streaming?.w === w && this.streaming.h === h)
+            return;
+        await this.cdp.send('Emulation.setDeviceMetricsOverride', { width: w, height: h, deviceScaleFactor: 1, mobile: false });
+        if (!this.viewer)
+            return;
+        this.streaming = undefined;
+        await this.cdp.send('Page.stopScreencast').catch(() => { });
+        // A restarted screencast numbers its frames afresh; the old in-flight frame will never be acked.
+        this.pending = undefined;
+        this.held = undefined;
+        // Set before the start: its first frame can beat the command's reply, and is judged against this size.
+        this.streaming = { w, h };
+        try {
+            await this.cdp.send('Page.startScreencast', { format: 'jpeg', quality: QUALITY, maxWidth: w, maxHeight: h, everyNthFrame: 1 });
+        }
+        catch (error) {
+            this.streaming = undefined;
+            throw error;
+        }
+        this.armWatchdog();
+    }
+    /**
+     * Something happened that should paint: wait for a frame, and restart the stream if none comes.
+     * Each activity gets its own few tries, so a stream the start retries gave up on recovers on the
+     * next click or load step. A frame at the viewport size disarms it, as after a start.
+     */
+    expectFrame() {
+        if (!this.viewer)
+            return;
+        this.silentStarts = 0;
+        // Mid-restart, the start arms its own watchdog, now with fresh tries.
+        if (this.streaming)
+            this.armWatchdog(ACTIVITY_FRAME_WAIT_MS);
+    }
+    isMainFrame(frameId) {
+        return frameId === undefined || this.mainFrameId === undefined || frameId === this.mainFrameId;
+    }
+    /** No frame, or none at the viewport size, since the last start or activity: start again, a few times, then wait for the next activity. */
+    armWatchdog(waitMs = FIRST_FRAME_WAIT_MS) {
+        this.disarmWatchdog();
+        this.watchdog = setTimeout(() => {
+            if (!this.viewer || !this.streaming || this.silentStarts >= FIRST_FRAME_RETRIES)
+                return;
+            this.silentStarts += 1;
+            this.streaming = undefined;
+            void this.setViewport(this.viewport.w, this.viewport.h).catch(() => { });
+        }, waitMs);
+        this.watchdog.unref?.();
+    }
+    disarmWatchdog() {
+        clearTimeout(this.watchdog);
+        this.watchdog = undefined;
+    }
+    /** One frame in flight per viewer. A newer frame replaces a held one, so the last visual state always arrives. */
+    onFrame(frame) {
+        // A frame the size of the viewport settles the stream. Chromium can capture one before the page
+        // has resized (646x362 for a 646x787 viewport) and send nothing after it on a static page; the
+        // viewer still gets that frame, and the watchdog starts the stream again to replace it.
+        const size = jpegSize(frame.data);
+        const stale = size !== undefined && this.streaming !== undefined && (size.w !== this.streaming.w || size.h !== this.streaming.h);
+        if (stale) {
+            this.armWatchdog();
+        }
+        else {
+            this.silentStarts = 0;
+            this.disarmWatchdog();
+        }
+        if (!this.viewer)
+            return void this.ackFrame(frame.sessionId);
+        if (this.pending !== undefined) {
+            if (this.held)
+                void this.ackFrame(this.held.sessionId);
+            this.held = frame;
+            return;
+        }
+        this.sendFrame(frame);
+    }
+    sendFrame(frame) {
+        const viewer = this.viewer;
+        if (!viewer)
+            return void this.ackFrame(frame.sessionId);
+        this.pending = frame.sessionId;
+        if (!this.announced) {
+            this.announced = true;
+            this.opts.onFirstFrame?.(viewer);
+        }
+        viewer.sendFrame(Buffer.from(frame.data, 'base64'));
+    }
+    /** Frames owed to a viewer that left: ack them so Chromium does not stall. */
+    releaseFrames() {
+        if (this.pending !== undefined)
+            void this.ackFrame(this.pending);
+        if (this.held)
+            void this.ackFrame(this.held.sessionId);
+        this.pending = undefined;
+        this.held = undefined;
+    }
+    ackFrame(sessionId) {
+        return this.cdp.send('Page.screencastFrameAck', { sessionId }).then(() => { }, () => { });
+    }
+    tell(msg) {
+        this.viewer?.send(msg);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/preview/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/preview/session.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAiB/C,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;AAC7C,0JAA0J;AAC1J,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B;;;;GAIG;AACH,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,gGAAgG;AAChG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AAE9E;;;;GAIG;AACH,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjF,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,EAAE,IAAI,CAAC,CAAC;YACR,SAAS;QACX,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9F,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/G,CAAC;QACD,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;;;;;;;;;;;MAWhB,CAAC;AAKP,SAAS,QAAQ,CAAC,GAAuB;IACvC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,cAAc;IAqBN,GAAG;IACH,IAAI;IArBvB,sEAAsE;IACtE,GAAG,CAAU;IAEL,MAAM,CAAU;IACxB,sDAAsD;IAC9C,OAAO,CAAU;IACzB,6DAA6D;IACrD,IAAI,CAAmB;IACvB,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,gBAAgB,CAAC;IACpC,sIAAsI;IAC9H,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,2EAA2E;IACnE,SAAS,CAA4B;IACrC,QAAQ,CAAiC;IACzC,YAAY,GAAG,CAAC,CAAC;IACzB,qFAAqF;IAC7E,WAAW,CAAU;IAE7B,YACmB,GAAQ,EACR,IAAiD;mBADjD,GAAG;oBACH,IAAI;QAErB,GAAG,CAAC,EAAE,CAAkB,sBAAsB,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,EAAE,CAA6D,qBAAqB,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACtG,IAAI,KAAK,CAAC,QAAQ;gBAAE,OAAO;YAC3B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAoC,8BAA8B,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;YAC7F,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,OAAO;YACvC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,4GAA4G;QAC5G,GAAG,CAAC,EAAE,CAAqC,qBAAqB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAChF,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAgB,8BAA8B,EAAE,MAAM,CAAC,EAAE,CAC7D,IAAI,CAAC,IAAI,CAAC;YACR,CAAC,EAAE,QAAQ;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;SACzC,CAAC,CACH,CAAC;QACF,GAAG,CAAC,EAAE,CAAoC,uBAAuB,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YACvF,IAAI,IAAI,KAAK,UAAU;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAQ,EAAE,IAAI,GAAgD,EAAE;QAClF,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,oGAAoG;IACpG,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,4FAA4F;QAC5F,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,MAAM,CAAC,GAAyB;QACpC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;YACd,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,KAAK,KAAK,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;oBAAE,OAAO;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACvB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,IAAI,IAAI;oBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,OAAO;gBACV,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBAC9C,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,CAAC,EAAE,GAAG,CAAC,CAAC;oBACR,CAAC,EAAE,GAAG,CAAC,CAAC;oBACR,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM;oBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC;oBACzB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC;oBACvB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC;oBACvB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC;iBAC9B,CAAC,CAAC;gBACH,OAAO;YACT,KAAK,KAAK;gBACR,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;oBAAE,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;oBAC5C,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;oBAClB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;oBACpB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;oBACzD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC;oBAC7B,qBAAqB,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC;oBAClC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpD,CAAC,CAAC;gBACH,OAAO;YACT,KAAK,YAAY;gBACf,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,KAAK,QAAQ;gBACX,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC9E,OAAO;YACT,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAA2D,2BAA2B,CAAC,CAAC;gBAC7I,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClE,IAAI,KAAK;oBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,KAAK,cAAc;gBACjB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT;gBACE,oDAAoD;gBACpD,OAAO;QACX,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAwB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,WAAW,CAAC,CAAS,EAAE,CAAS;QACtC,oFAAoF;QACpF,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,CAAS,EAAE,CAAS;QAC9C,sGAAsG;QACtG,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO;QAC9D,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxH,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3D,iGAAiG;QACjG,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,uGAAuG;QACvG,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACK,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,sEAAsE;QACtE,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC;IAEO,WAAW,CAAC,OAA2B;QAC7C,OAAO,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW,CAAC;IACjG,CAAC;IAED,2IAA2I;IACnI,WAAW,CAAC,MAAM,GAAG,mBAAmB;QAC9C,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,IAAI,mBAAmB;gBAAE,OAAO;YACxF,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1E,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1B,CAAC;IAEO,cAAc;QACpB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,kHAAkH;IAC1G,OAAO,CAAC,KAAsB;QACpC,gGAAgG;QAChG,+FAA+F;QAC/F,wFAAwF;QACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjI,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAEO,SAAS,CAAC,KAAsB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,8EAA8E;IACtE,aAAa;QACnB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IACxB,CAAC;IAEO,QAAQ,CAAC,SAAiB;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IAEO,IAAI,CAAC,GAAyB;QACpC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/preview/url.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The preview URL bar's one rule (#781, spec 2026-10-02-live-preview-v1): a bare port means the
+ * host's localhost, an address without a scheme means `http://`, and only http(s) reaches Chromium.
+ * `javascript:`, `file:`, `chrome:` and `data:` would turn the URL bar into a way past the page.
+ */
+export declare function normalizePreviewUrl(input: string): string;

package/dist/preview/url.js

@@ -0,0 +1,17 @@
+/**
+ * The preview URL bar's one rule (#781, spec 2026-10-02-live-preview-v1): a bare port means the
+ * host's localhost, an address without a scheme means `http://`, and only http(s) reaches Chromium.
+ * `javascript:`, `file:`, `chrome:` and `data:` would turn the URL bar into a way past the page.
+ */
+export function normalizePreviewUrl(input) {
+    const text = input.trim();
+    if (/^\d+$/.test(text))
+        return new URL(`http://localhost:${text}/`).href;
+    // `localhost:5173/x` parses as scheme `localhost:`; a host followed by a port is an address, not a scheme.
+    const hasScheme = /^[a-z][a-z0-9+.-]*:/i.test(text) && !/^[a-z0-9.-]+:\d+(?:[/?#]|$)/i.test(text);
+    const url = new URL(hasScheme ? text : `http://${text}`);
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        throw new Error('only http(s)');
+    return url.href;
+}
+//# sourceMappingURL=url.js.map

package/dist/preview/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/preview/url.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACzE,2GAA2G;IAC3G,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3F,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC"}

package/dist/runs/agent-tmpdir-removal.d.ts

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+declare const identitySchema: z.ZodObject<{
+    path: z.ZodString;
+    dev: z.ZodNumber;
+    ino: z.ZodNumber;
+    birthtimeMs: z.ZodNumber;
+}, z.core.$strict>;
+export type FallbackRemoval = z.infer<typeof identitySchema>;
+/** A recursive rm can remove the owner marker before failing to remove its directory.
+ * This private checkpoint preserves that already-verified authority across retry/restart,
+ * bound to the exact directory incarnation, never a replacement at the same pathname. */
+export declare function readFallbackRemovals(local: string): FallbackRemoval[];
+export declare function fallbackIdentity(path: string): FallbackRemoval;
+export declare function checkpointFallbackRemoval(local: string, path: string, records: FallbackRemoval[]): void;
+export {};

package/dist/runs/agent-tmpdir-removal.js

@@ -0,0 +1,60 @@
+import { randomUUID } from 'node:crypto';
+import { closeSync, constants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readSync, realpathSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+const identitySchema = z.object({ path: z.string(), dev: z.number(), ino: z.number(), birthtimeMs: z.number() }).strict();
+const removalsSchema = z.array(identitySchema).max(32);
+const FILE = '.cez-fallback-removal.json';
+/** A recursive rm can remove the owner marker before failing to remove its directory.
+ * This private checkpoint preserves that already-verified authority across retry/restart,
+ * bound to the exact directory incarnation, never a replacement at the same pathname. */
+export function readFallbackRemovals(local) {
+    let fd;
+    try {
+        fd = openSync(join(local, FILE), constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > 16384 || (stat.mode & 0o077))
+            throw Error('Unsafe fallback removal checkpoint');
+        const buffer = Buffer.alloc(16385), count = readSync(fd, buffer, 0, buffer.length, 0);
+        return removalsSchema.parse(JSON.parse(buffer.subarray(0, count).toString('utf8')));
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function fallbackIdentity(path) {
+    const stat = lstatSync(path);
+    if (!stat.isDirectory() || realpathSync(path) !== resolve(path))
+        throw Error('Unsafe fallback directory');
+    return { path, dev: stat.dev, ino: stat.ino, birthtimeMs: stat.birthtimeMs };
+}
+export function checkpointFallbackRemoval(local, path, records) {
+    const identity = fallbackIdentity(path);
+    const next = removalsSchema.parse([...records.filter(record => record.path !== path), identity]);
+    mkdirSync(local, { recursive: true });
+    if (!lstatSync(local).isDirectory() || realpathSync(local) !== resolve(local))
+        throw Error('Unsafe fallback pointer directory');
+    const target = join(local, FILE), temporary = `${target}.${randomUUID()}.tmp`;
+    const fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        try {
+            writeFileSync(fd, JSON.stringify(next));
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        renameSync(temporary, target);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+//# sourceMappingURL=agent-tmpdir-removal.js.map

package/dist/runs/agent-tmpdir-removal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tmpdir-removal.js","sourceRoot":"","sources":["../../src/runs/agent-tmpdir-removal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChK,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1H,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEvD,MAAM,IAAI,GAAG,4BAA4B,CAAC;AAE1C;;yFAEyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAC3G,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1G,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAE,IAAY,EAAE,OAA0B;IAC/F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjG,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,MAAM,CAAC;IAC9E,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACxH,IAAI,CAAC;QACH,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC1F,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC"}

package/dist/runs/agent-tmpdir.d.ts

@@ -61,8 +61,19 @@ export declare function agentTmpDirEnabled(env?: NodeJS.ProcessEnv): boolean;
  * actually take.
  */
 export declare function agentTmpEnv(dataDir: string, runId: string, env?: NodeJS.ProcessEnv): Record<string, string>;
-/** Every place a run's scratch may live: the local directory and each OS-root fallback. */
+/** False includes malformed/unreadable pointers and foreign ownership, never just a missing
+ * path in a best-effort list. Call before resource reuse/deletion and preserve the evidence. */
+export declare function agentTmpDirOwnershipProven(dataDir: string, runId: string): boolean;
+/** Every candidate path, including readable pointers whose ownership is still uncertain. */
 export declare function agentTmpDirLocations(dataDir: string, runId: string): string[];
+/** A clear scan of a partial list cannot settle legacy execution. Completeness is distinct
+ * from ownership: neither this list nor a known reboot authorizes resource deletion/reuse. */
+export declare function agentTmpDirLocationEvidence(dataDir: string, runId: string): {
+    paths: string[];
+    complete: boolean;
+};
+/** Only ENOENT proves cleanup finished. Permission/read errors retain the durable intent. */
+export declare function agentTmpDirMayExist(dataDir: string, runId: string): boolean;
 /**
  * Reap one task's directory after terminal completion or history deletion.
  * Session close alone is not completion: a live task's Continue must retain