agents-bridge 0.3.10 → 0.3.12

package/dist/agents/model-control-files.js

@@ -1,9 +1,11 @@
 import { constants } from 'node:fs';
-import { lstat, mkdir, open, realpath, rename, unlink } from 'node:fs/promises';
+import { link, lstat, mkdir, open, realpath, rename, unlink } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { randomUUID } from 'node:crypto';
+import { AGENTS_STATE_DIR } from '../config/paths.js';
 import { ensureWindowsModelControlSecurity, sameWindowsModelControlPath } from './windows-model-control-security.js';
 const MAX_MODEL_CONTROL_FILE_BYTES = 64 * 1024;
+const pendingFileOperations = new Map();
 function expectedUid() {
     return typeof process.geteuid === 'function' ? process.geteuid() : typeof process.getuid === 'function' ? process.getuid() : undefined;
 }
@@ -12,6 +14,25 @@ function expectedUid() {
 export function createModelControlFileAccess({ platform = process.platform, windowsSecurity = ensureWindowsModelControlSecurity, } = {}) {
     const windows = platform === 'win32';
     const noFollow = windows ? 0 : constants.O_NOFOLLOW;
+    // Serialize only the same file, including the short exclusive-publish link
+    // window. Independent Agent files still run concurrently; no global IO lock.
+    async function withFileLock(path, operation) {
+        const key = (windows ? 'win32:' + resolve(path).toLowerCase() : 'posix:' + resolve(path));
+        const previous = pendingFileOperations.get(key) ?? Promise.resolve();
+        let release;
+        const gate = new Promise(resolveGate => { release = resolveGate; });
+        const tail = previous.then(() => gate);
+        pendingFileOperations.set(key, tail);
+        await previous;
+        try {
+            return await operation();
+        }
+        finally {
+            release();
+            if (pendingFileOperations.get(key) === tail)
+                pendingFileOperations.delete(key);
+        }
+    }
     async function ensureSecureModelControlDirectory(path) {
         const directory = resolve(path);
         await mkdir(directory, { recursive: true, mode: 0o700 });
@@ -26,8 +47,12 @@ export function createModelControlFileAccess({ platform = process.platform, wind
         const canonical = await realpath(directory);
         if (windows ? !sameWindowsModelControlPath(canonical, directory) : canonical !== directory)
             throw new Error('INSECURE_MODEL_CONTROL_DIRECTORY_PATH');
-        if (windows)
-            await windowsSecurity(directory);
+        if (windows) {
+            // Only this Bridge's direct per-Agent runtime directory is owned by us.
+            // The generic file helper must never rewrite an arbitrary parent's ACL.
+            const privateDirectory = sameWindowsModelControlPath(dirname(directory), resolve(AGENTS_STATE_DIR()));
+            await windowsSecurity(directory, 'directory', privateDirectory);
+        }
     }
     async function validateOpenFile(file, path) {
         const info = await file.stat();
@@ -47,7 +72,7 @@ export function createModelControlFileAccess({ platform = process.platform, wind
             const canonical = await realpath(path);
             if (!sameWindowsModelControlPath(canonical, resolve(path)))
                 throw new Error('INSECURE_MODEL_CONTROL_FILE_PATH');
-            await windowsSecurity(path);
+            await windowsSecurity(path, 'file');
         }
     }
     async function openExisting(path) {
@@ -60,12 +85,12 @@ export function createModelControlFileAccess({ platform = process.platform, wind
         }
         return open(path, constants.O_RDONLY | noFollow);
     }
-    async function readSecureModelControlFile(path) {
+    async function readSecureModelControlFileBuffer(path) {
         await ensureSecureModelControlDirectory(dirname(path));
         const file = await openExisting(path);
         try {
             await validateOpenFile(file, path);
-            return await file.readFile('utf8');
+            return await file.readFile();
         }
         finally {
             await file.close();
@@ -88,19 +113,29 @@ export function createModelControlFileAccess({ platform = process.platform, wind
         if (Buffer.byteLength(contents, 'utf8') > MAX_MODEL_CONTROL_FILE_BYTES)
             throw new Error('MODEL_CONTROL_FILE_TOO_LARGE');
         await ensureSecureModelControlDirectory(dirname(path));
-        const file = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | noFollow, 0o600);
+        // Do not expose an empty final .device while preparing its Windows ACL.
+        // Only fully written, fsynced private content is published. link() fails
+        // with EEXIST instead of replacing an existing device identity.
+        const temporaryPath = `${path}.${randomUUID()}.create.tmp`;
+        const file = await open(temporaryPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | noFollow, 0o600);
         try {
-            await validateOpenFile(file, path);
+            await validateOpenFile(file, temporaryPath);
             await file.writeFile(contents);
-            await validateOpenFile(file, path);
+            await validateOpenFile(file, temporaryPath);
             await file.sync();
         }
         catch (error) {
             await file.close().catch(() => undefined);
-            await unlink(path).catch(() => undefined);
+            await unlink(temporaryPath).catch(() => undefined);
             throw error;
         }
         await file.close();
+        try {
+            await link(temporaryPath, path);
+        }
+        finally {
+            await unlink(temporaryPath);
+        }
         await syncDirectory(dirname(path));
     }
     async function writeSecureModelControlFile(path, contents) {
@@ -143,7 +178,13 @@ export function createModelControlFileAccess({ platform = process.platform, wind
         }
         await syncDirectory(dirname(path));
     }
-    return { ensureSecureModelControlDirectory, readSecureModelControlFile, createSecureModelControlFile, writeSecureModelControlFile };
+    return {
+        ensureSecureModelControlDirectory,
+        readSecureModelControlFileBuffer: (path) => withFileLock(path, () => readSecureModelControlFileBuffer(path)),
+        readSecureModelControlFile: (path) => withFileLock(path, async () => (await readSecureModelControlFileBuffer(path)).toString('utf8')),
+        createSecureModelControlFile: (path, contents) => withFileLock(path, () => createSecureModelControlFile(path, contents)),
+        writeSecureModelControlFile: (path, contents) => withFileLock(path, () => writeSecureModelControlFile(path, contents)),
+    };
 }
-export const { ensureSecureModelControlDirectory, readSecureModelControlFile, createSecureModelControlFile, writeSecureModelControlFile, } = createModelControlFileAccess();
+export const { ensureSecureModelControlDirectory, readSecureModelControlFile, readSecureModelControlFileBuffer, createSecureModelControlFile, writeSecureModelControlFile, } = createModelControlFileAccess();
 //# sourceMappingURL=model-control-files.js.map

package/dist/agents/model-control-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-control-files.js","sourceRoot":"","sources":["../../src/agents/model-control-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC/E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AAEpH,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAA;AAE9C,SAAS,WAAW;IAClB,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACxI,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,UAAU,4BAA4B,CAAC,EAC3C,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,eAAe,GAAG,iCAAiC,MACkC,EAAE;IACvF,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAA;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAA;IAEnD,KAAK,UAAU,iCAAiC,CAAC,IAAY;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAChH,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QACpJ,IAAI,OAAO;YAAE,MAAM,eAAe,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,IAAsC,EAAE,IAAY;QAClF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAChG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QAC3G,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAClG,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC7F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC3K,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC/G,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,IAAY;QACtC,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,UAAU,0BAA0B,CAAC,IAAY;QACpD,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,IAAY;QACvC,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACrG,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACpE,CAAC;IAED,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,QAAgB;QACxE,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvH,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC1G,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC9B,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,UAAU,2BAA2B,CAAC,IAAY,EAAE,QAAgB;QACvE,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvH,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAC3C,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAA;QACnH,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC9B,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QACzC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;QACjF,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,OAAO,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,CAAA;AACrI,CAAC;AAED,MAAM,CAAC,MAAM,EACX,iCAAiC,EAAE,0BAA0B,EAC7D,4BAA4B,EAAE,2BAA2B,GAC1D,GAAG,4BAA4B,EAAE,CAAA"}
+{"version":3,"file":"model-control-files.js","sourceRoot":"","sources":["../../src/agents/model-control-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,iCAAiC,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AAEpH,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAA;AAC9C,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAyB,CAAA;AAE9D,SAAS,WAAW;IAClB,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACxI,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,UAAU,4BAA4B,CAAC,EAC3C,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAC3B,eAAe,GAAG,iCAAiC,MAC0F,EAAE;IAC/I,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAA;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAA;IAEnD,2EAA2E;IAC3E,6EAA6E;IAC7E,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,SAA2B;QACtE,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACzF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;QACpE,IAAI,OAAoB,CAAA;QACxB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,WAAW,CAAC,EAAE,GAAG,OAAO,GAAG,WAAW,CAAA,CAAC,CAAC,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACtC,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QACpC,MAAM,QAAQ,CAAA;QACd,IAAI,CAAC;YAAC,OAAO,MAAM,SAAS,EAAE,CAAA;QAAC,CAAC;gBACxB,CAAC;YACP,OAAO,EAAE,CAAA;YACT,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IAED,KAAK,UAAU,iCAAiC,CAAC,IAAY;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAChH,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QACnG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC3C,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QACpJ,IAAI,OAAO,EAAE,CAAC;YACZ,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAA;YACrG,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,IAAsC,EAAE,IAAY;QAClF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAChG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;QACzB,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;QAC3G,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QAClG,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC7F,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC3K,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAC/G,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,IAAY;QACtC,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAClD,CAAC;IAED,KAAK,UAAU,gCAAgC,CAAC,IAAY;QAC1D,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,OAAO,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC9B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,IAAY;QACvC,qEAAqE;QACrE,oEAAoE;QACpE,IAAI,OAAO;YAAE,OAAM;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACrG,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IACpE,CAAC;IAED,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,QAAgB;QACxE,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvH,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,wEAAwE;QACxE,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,aAAa,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAA;QACnH,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC9B,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;gBAC/B,CAAC;YAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;QAAC,CAAC;QACvC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,KAAK,UAAU,2BAA2B,CAAC,IAAY,EAAE,QAAgB;QACvE,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,4BAA4B;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACvH,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAC3C,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAA;QACnH,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAC9B,MAAM,gBAAgB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAC3C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QACzC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAA;QAAC,CAAC;QACjF,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAED,OAAO;QACL,iCAAiC;QACjC,gCAAgC,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC;QACpH,0BAA0B,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7I,4BAA4B,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxI,2BAA2B,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;KACvI,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,EACX,iCAAiC,EAAE,0BAA0B,EAAE,gCAAgC,EAC/F,4BAA4B,EAAE,2BAA2B,GAC1D,GAAG,4BAA4B,EAAE,CAAA"}

package/dist/agents/model-device-secret.d.ts

@@ -0,0 +1,10 @@
+/** Metadata only: callers must never log the credential or a derived hash. */
+export declare function inspectModelDeviceSecret(raw: Buffer): {
+    bytes: number;
+    encoding: string;
+    characters: number;
+    reason: string;
+    valid: boolean;
+};
+export declare function parseModelDeviceSecret(raw: Buffer): string;
+//# sourceMappingURL=model-device-secret.d.ts.map

package/dist/agents/model-device-secret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-device-secret.d.ts","sourceRoot":"","sources":["../../src/agents/model-device-secret.ts"],"names":[],"mappings":"AAwBA,8EAA8E;AAC9E,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM;;;;;;EAOnD;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1D"}

package/dist/agents/model-device-secret.js

@@ -0,0 +1,47 @@
+const validSecret = (value) => /^[a-f0-9]{64}$/.test(value);
+function decodedSecret(raw) {
+    let encoding = 'utf8';
+    // Accept UTF-16 only when there is an explicit BOM or an unambiguous ASCII
+    // NUL pattern. Never strip arbitrary NULs or repair/rotate corrupt secrets.
+    if (raw.length >= 2 && raw[0] === 0xff && raw[1] === 0xfe)
+        encoding = 'utf16le';
+    else if (raw.length >= 2 && raw[0] === 0xfe && raw[1] === 0xff)
+        encoding = 'utf16be';
+    else if (raw.length >= 128 && raw.length % 2 === 0) {
+        const isAscii16 = (little) => {
+            for (let i = 0; i < raw.length; i += 2) {
+                if (raw[i + (little ? 1 : 0)] !== 0 || raw[i + (little ? 0 : 1)] > 0x7f)
+                    return false;
+            }
+            return true;
+        };
+        if (isAscii16(true))
+            encoding = 'utf16le';
+        else if (isAscii16(false))
+            encoding = 'utf16be';
+    }
+    try {
+        const label = encoding === 'utf8' ? 'utf-8' : encoding === 'utf16le' ? 'utf-16le' : 'utf-16be';
+        return { text: new TextDecoder(label, { fatal: true }).decode(raw).trim(), encoding, validEncoding: true };
+    }
+    catch {
+        return { text: '', encoding, validEncoding: false };
+    }
+}
+/** Metadata only: callers must never log the credential or a derived hash. */
+export function inspectModelDeviceSecret(raw) {
+    const decoded = decodedSecret(raw);
+    const reason = !decoded.validEncoding ? 'invalid_encoding'
+        : decoded.text.length === 0 ? 'empty'
+            : decoded.text.length !== 64 ? 'invalid_length'
+                : !validSecret(decoded.text) ? 'invalid_hex' : 'valid';
+    return { bytes: raw.length, encoding: decoded.encoding, characters: decoded.text.length, reason, valid: reason === 'valid' };
+}
+export function parseModelDeviceSecret(raw) {
+    const metadata = inspectModelDeviceSecret(raw);
+    if (!metadata.valid) {
+        throw new Error(`INVALID_MODEL_DEVICE_SECRET: reason=${metadata.reason} bytes=${metadata.bytes} encoding=${metadata.encoding} characters=${metadata.characters}; existing file preserved, no identity reset`);
+    }
+    return decodedSecret(raw).text;
+}
+//# sourceMappingURL=model-device-secret.js.map

package/dist/agents/model-device-secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-device-secret.js","sourceRoot":"","sources":["../../src/agents/model-device-secret.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAEnE,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,QAAQ,GAAG,SAAS,CAAA;SAC1E,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,QAAQ,GAAG,SAAS,CAAA;SAC/E,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,CAAC,MAAe,EAAE,EAAE;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;oBAAE,OAAO,KAAK,CAAA;YACvF,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QACD,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAA;aACpC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,QAAQ,GAAG,SAAS,CAAA;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAA;QAC9F,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IAC5G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAA;IAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB;QACxD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO;YACrC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB;gBAC/C,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAA;IACxD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,EAAE,CAAA;AAC9H,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,UAAU,QAAQ,CAAC,KAAK,aAAa,QAAQ,CAAC,QAAQ,eAAe,QAAQ,CAAC,UAAU,8CAA8C,CAAC,CAAA;IAC/M,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC"}

package/dist/agents/platform-spawn.d.ts

@@ -0,0 +1,2 @@
+export declare const spawn: typeof import("child_process").spawn;
+//# sourceMappingURL=platform-spawn.d.ts.map

package/dist/agents/platform-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-spawn.d.ts","sourceRoot":"","sources":["../../src/agents/platform-spawn.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,KAAK,sCAAmB,CAAA"}

package/dist/agents/platform-spawn.js

@@ -0,0 +1,4 @@
+import crossSpawn from 'cross-spawn';
+// Retain Node's overloads/stream types and cross-spawn's Windows shim escaping.
+export const spawn = crossSpawn.spawn;
+//# sourceMappingURL=platform-spawn.js.map

package/dist/agents/platform-spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-spawn.js","sourceRoot":"","sources":["../../src/agents/platform-spawn.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,aAAa,CAAA;AAEpC,gFAAgF;AAChF,MAAM,CAAC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA"}

package/dist/agents/process-tree.d.ts

@@ -0,0 +1,4 @@
+import { type ChildProcess } from 'node:child_process';
+export declare function terminateProcess(pid: number, signal?: NodeJS.Signals, platform?: NodeJS.Platform): Promise<void>;
+export declare function terminateChildProcess(child: ChildProcess): void;
+//# sourceMappingURL=process-tree.d.ts.map

package/dist/agents/process-tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.d.ts","sourceRoot":"","sources":["../../src/agents/process-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAGhE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,OAAmB,EAAE,QAAQ,kBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5H;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAM/D"}

package/dist/agents/process-tree.js

@@ -0,0 +1,46 @@
+import { execFile } from 'node:child_process';
+import { win32 } from 'node:path';
+export function terminateProcess(pid, signal = 'SIGTERM', platform = process.platform) {
+    if (!Number.isSafeInteger(pid) || pid <= 0)
+        return Promise.reject(new Error('Invalid owned process id'));
+    if (platform !== 'win32') {
+        try {
+            process.kill(pid, signal);
+            return Promise.resolve();
+        }
+        catch (error) {
+            return Promise.reject(error);
+        }
+    }
+    // Node kills only the cmd.exe shim on Windows; taskkill /T also stops the
+    // owned CLI descendant. Never pass a process name, wildcard, or a shell.
+    return new Promise((resolve, reject) => {
+        execFile(win32.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'taskkill.exe'), ['/PID', String(pid), '/T', '/F'], { windowsHide: true }, error => {
+            if (!error) {
+                resolve();
+                return;
+            }
+            try {
+                process.kill(pid, 0);
+            }
+            catch (gone) {
+                reject(gone);
+                return;
+            }
+            reject(error);
+        });
+    });
+}
+export function terminateChildProcess(child) {
+    if (child.exitCode !== null || child.signalCode !== null)
+        return;
+    if (process.platform !== 'win32' || !child.pid) {
+        child.kill();
+        return;
+    }
+    void terminateProcess(child.pid).catch(() => {
+        if (child.exitCode === null && child.signalCode === null)
+            child.kill();
+    });
+}
+//# sourceMappingURL=process-tree.js.map

package/dist/agents/process-tree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-tree.js","sourceRoot":"","sources":["../../src/agents/process-tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAqB,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAEjC,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAyB,SAAS,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC3G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;IACxG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;IAC5G,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE;YAC1J,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,OAAM;YAAC,CAAC;YACjC,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAM;IAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,OAAM;IAAC,CAAC;IACxE,KAAK,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,EAAE,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/agents/trusted-launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-launcher.d.ts","sourceRoot":"","sources":["../../src/agents/trusted-launcher.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CACxB,GAAG,YAAY,CAoBf"}
+{"version":3,"file":"trusted-launcher.d.ts","sourceRoot":"","sources":["../../src/agents/trusted-launcher.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CACxB,GAAG,YAAY,CAuBf"}

package/dist/agents/trusted-launcher.js

@@ -1,17 +1,21 @@
 import { createHash, randomUUID } from 'node:crypto';
-import { basename, relative, resolve } from 'node:path';
+import { basename, relative, resolve, sep } from 'node:path';
 export function resolveTrustedSpawn(input) {
     const cwd = resolve(input.cwd ?? process.cwd());
     const launcherSocket = process.env.RUNTIME_LAUNCHER_SOCKET;
     if (!launcherSocket) {
-        return { command: input.command, args: input.args, cwd, env: input.env ?? process.env, shell: process.platform === 'win32' };
+        // Consumers use cross-spawn for Windows npm shims. Enabling shell here
+        // would bypass its escaping and break paths/user arguments containing spaces.
+        return { command: input.command, args: input.args, cwd, env: input.env ?? process.env, shell: false };
     }
+    if (process.platform === 'win32')
+        throw new Error('TRUSTED_RUNTIME_LAUNCHER_REQUIRES_LINUX');
     const profile = profileForCommand(input.command);
     if (!profile)
         throw new Error('CLI executable is not authorized by the trusted launcher');
     const workspace = resolve(process.env.WORKSPACE_ROOT ?? '/workspace');
     const cwdRel = relative(workspace, cwd) || '.';
-    if (cwdRel === '..' || cwdRel.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)) {
+    if (cwdRel === '..' || cwdRel.startsWith(`..${sep}`)) {
         throw new Error('CLI working directory is outside the trusted workspace');
     }
     return {

package/dist/agents/trusted-launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-launcher.js","sourceRoot":"","sources":["../../src/agents/trusted-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAUvD,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAA;IAC9H,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,CAAA;IAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,uBAAuB;QACvE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9F,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,wBAAwB,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;QACxD,KAAK,EAAE,KAAK;KACb,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAyB,EAAE;IACrE,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACjD,IAAI,CAAC,cAAc;QAAE,OAAO,UAAU,EAAE,CAAA;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAC5C,MAAM,QAAQ,GAAG,SAAS;QACxB,CAAC,CAAC,GAAG,OAAO,KAAK,cAAc,KAAK,SAAS,EAAE;QAC/C,CAAC,CAAC,GAAG,OAAO,KAAK,cAAc,EAAE,CAAA;IACnC,OAAO,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,QAAQ,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,KAAK,OAAO,CAAC,CAAC,OAAO,UAAU,CAAA;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,WAAW,CAAA;QACjC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc,EAAE,SAA4B,EAAE;IAC9E,MAAM,GAAG,GAAsB;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,8BAA8B;QACpC,uBAAuB,EAAE,MAAM;KAChC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACvF,IAAI,MAAM,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"trusted-launcher.js","sourceRoot":"","sources":["../../src/agents/trusted-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAU5D,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAA;IAC1D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,uEAAuE;QACvE,8EAA8E;QAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5F,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IACzF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,CAAA;IAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,uBAAuB;QACvE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9F,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,wBAAwB,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;QACxD,KAAK,EAAE,KAAK;KACb,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAyB,EAAE;IACrE,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACjD,IAAI,CAAC,cAAc;QAAE,OAAO,UAAU,EAAE,CAAA;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAC5C,MAAM,QAAQ,GAAG,SAAS;QACxB,CAAC,CAAC,GAAG,OAAO,KAAK,cAAc,KAAK,SAAS,EAAE;QAC/C,CAAC,CAAC,GAAG,OAAO,KAAK,cAAc,EAAE,CAAA;IACnC,OAAO,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,QAAQ,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,KAAK,OAAO,CAAC,CAAC,OAAO,UAAU,CAAA;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,WAAW,CAAA;QACjC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAc,EAAE,SAA4B,EAAE;IAC9E,MAAM,GAAG,GAAsB;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,8BAA8B;QACpC,uBAAuB,EAAE,MAAM;KAChC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACvF,IAAI,MAAM,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/agents/windows-model-control-security.d.ts

@@ -1,4 +1,12 @@
 export declare function sameWindowsModelControlPath(left: string, right: string): boolean;
-export declare function validateWindowsModelControlAcl(value: unknown): void;
-export declare function ensureWindowsModelControlSecurity(path: string): Promise<void>;
+export declare function validateWindowsModelControlAcl(value: unknown, kind?: 'directory' | 'file'): void;
+type AclTarget = {
+    path: string;
+    kind: 'directory' | 'file';
+    privateDirectory: boolean;
+};
+/** Coalesce simultaneous checks, never reuse an ACL result or skip a target. */
+export declare function createWindowsModelControlSecurity(runBatch?: (targets: AclTarget[]) => Promise<unknown>): (path: string, kind?: "directory" | "file", privateDirectory?: boolean) => Promise<void>;
+export declare const ensureWindowsModelControlSecurity: (path: string, kind?: "directory" | "file", privateDirectory?: boolean) => Promise<void>;
+export {};
 //# sourceMappingURL=windows-model-control-security.d.ts.map

package/dist/agents/windows-model-control-security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"windows-model-control-security.d.ts","sourceRoot":"","sources":["../../src/agents/windows-model-control-security.ts"],"names":[],"mappings":"AAiCA,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAuBnE;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnF"}
+{"version":3,"file":"windows-model-control-security.d.ts","sourceRoot":"","sources":["../../src/agents/windows-model-control-security.ts"],"names":[],"mappings":"AAiHA,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,WAAW,GAAG,MAAe,GAAG,IAAI,CA+BxG;AAED,KAAK,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAAA;AAiBxF,gFAAgF;AAChF,wBAAgB,iCAAiC,CAAC,QAAQ,GAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,OAAO,CAAgB,IAsC3G,MAAM,MAAM,EAAE,OAAM,WAAW,GAAG,MAAe,EAAE,0BAAwB,KAAG,OAAO,CAAC,IAAI,CAAC,CAQpG;AAED,eAAO,MAAM,iCAAiC,SAV9B,MAAM,SAAQ,WAAW,GAAG,MAAM,iCAAsC,OAAO,CAAC,IAAI,CAUhB,CAAA"}

package/dist/agents/windows-model-control-security.js

@@ -6,14 +6,78 @@ const TRUSTED_SYSTEM_SIDS = new Set(['S-1-5-18', 'S-1-5-32-544']); // SYSTEM, Ad
 // Use SIDs rather than localized account names. Inspect inherited ACEs too; a
 // Unix mode returned by stat on Windows says nothing about the actual DACL.
 const INSPECT_ACL = `
+function Inspect-ControlAcl($target, $kind, $privateDirectory) {
 $ErrorActionPreference = 'Stop'
-$item = Get-Item -LiteralPath $env:AGENTS_BRIDGE_ACL_TARGET -Force
+$ProgressPreference = 'SilentlyContinue'
+[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)
+$item = Get-Item -LiteralPath $target -Force
 $cursor = $item
 while ($null -ne $cursor) {
   if (($cursor.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'MODEL_CONTROL_REPARSE_POINT' }
   if ($cursor -is [IO.DirectoryInfo]) { $cursor = $cursor.Parent } else { $cursor = $cursor.Directory }
 }
-$acl = Get-Acl -LiteralPath $env:AGENTS_BRIDGE_ACL_TARGET
+$acl = $item.GetAccessControl([Security.AccessControl.AccessControlSections]'Access,Owner,Group')
+$current = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier]).Value
+function Set-PrivateControlAccess($existing, $kind) {
+  # Rebuild only the Access section: preserve owner/group/audit unchanged.
+  # preserveInheritance=true retains inherited ACEs in memory, so deleting
+  # only explicit Allow entries cannot reliably privatize an inherited DACL.
+  if ($kind -eq 'directory') {
+    $private = [Security.AccessControl.DirectorySecurity]::new()
+    $inheritance = [Security.AccessControl.InheritanceFlags]'ContainerInherit,ObjectInherit'
+  } else {
+    $private = [Security.AccessControl.FileSecurity]::new()
+    $inheritance = [Security.AccessControl.InheritanceFlags]::None
+  }
+  $private.SetAccessRuleProtection($true, $false)
+  foreach ($rule in @($existing.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier]))) {
+    if ($rule.AccessControlType -eq [Security.AccessControl.AccessControlType]::Deny) {
+      # Materialize inherited denies as explicit rules with the exact access
+      # mask and propagation flags. AccessRuleFactory avoids constructor mask
+      # normalization (notably Synchronize on Deny rules).
+      $deny = $private.AccessRuleFactory($rule.IdentityReference, [int]$rule.FileSystemRights, $false, $rule.InheritanceFlags, $rule.PropagationFlags, [Security.AccessControl.AccessControlType]::Deny)
+      [void]$private.AddAccessRule($deny)
+    }
+  }
+  foreach ($sid in @($current, 'S-1-5-18', 'S-1-5-32-544')) {
+    $identity = [Security.Principal.SecurityIdentifier]::new($sid)
+    $rule = [Security.AccessControl.FileSystemAccessRule]::new($identity, [Security.AccessControl.FileSystemRights]::FullControl, $inheritance, [Security.AccessControl.PropagationFlags]::None, [Security.AccessControl.AccessControlType]::Allow)
+    [void]$private.AddAccessRule($rule)
+  }
+  # Persist the fresh object directly: only AccessRulesModified is set.
+  # Set-Acl copies a complete descriptor and can request SeSecurityPrivilege
+  # even when this operation only needs WRITE_DAC on our own state directory.
+  $item.SetAccessControl($private)
+}
+$repairAttempted = $false
+if ($kind -eq 'directory' -and $privateDirectory -eq $true) {
+  # The caller opts in only for a direct Agent state directory under this
+  # Bridge's agents root. Never repair arbitrary parents or workspaces.
+  if ($item -isnot [IO.DirectoryInfo]) { throw 'MODEL_CONTROL_INVALID_DIRECTORY' }
+  $needsPrivacy = $false
+  foreach ($rule in @($acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier]))) {
+    if ($rule.AccessControlType -eq [Security.AccessControl.AccessControlType]::Allow -and $rule.IdentityReference.Value -notin @($current, 'S-1-5-18', 'S-1-5-32-544') -and ($rule.PropagationFlags -band [Security.AccessControl.PropagationFlags]::InheritOnly) -eq 0 -and (([long]$rule.FileSystemRights -band 4294967295) -band 1609432918) -ne 0) { $needsPrivacy = $true }
+  }
+  if ($needsPrivacy) {
+    if ($owner -ne $current) { throw 'MODEL_CONTROL_UNTRUSTED_DIRECTORY_OWNER' }
+    $repairAttempted = $true
+    Set-PrivateControlAccess $acl 'directory'
+    $acl = $item.GetAccessControl([Security.AccessControl.AccessControlSections]'Access,Owner,Group')
+  }
+}
+if ($kind -eq 'file') {
+  if ($item -isnot [IO.FileInfo] -or $owner -notin @($current, 'S-1-5-18', 'S-1-5-32-544')) { throw 'MODEL_CONTROL_UNTRUSTED_OWNER' }
+  $needsPrivacy = $false
+  foreach ($rule in @($acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier]))) {
+    if ($rule.AccessControlType -eq [Security.AccessControl.AccessControlType]::Allow -and $rule.IdentityReference.Value -notin @($current, 'S-1-5-18', 'S-1-5-32-544') -and [long]$rule.FileSystemRights -ne 0) { $needsPrivacy = $true }
+  }
+  if ($needsPrivacy) {
+    $repairAttempted = $true
+    Set-PrivateControlAccess $acl 'file'
+    $acl = $item.GetAccessControl([Security.AccessControl.AccessControlSections]'Access,Owner,Group')
+  }
+}
 $rules = @($acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier]) | ForEach-Object {
   @{
     sid = $_.IdentityReference.Value
@@ -26,13 +90,29 @@ $rules = @($acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentif
   currentSid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
   ownerSid = $acl.GetOwner([Security.Principal.SecurityIdentifier]).Value
   rules = $rules
-} | ConvertTo-Json -Depth 4 -Compress
+  repairAttempted = $repairAttempted
+}
+}
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+[Console]::OutputEncoding = [Text.UTF8Encoding]::new($false)
+$requests = @(ConvertFrom-Json -InputObject $env:AGENTS_BRIDGE_ACL_REQUESTS)
+$results = @(foreach ($request in $requests) {
+  try {
+    $snapshot = Inspect-ControlAcl $request.path $request.kind $request.privateDirectory
+    @{ index = $request.index; ok = $true; snapshot = $snapshot }
+  } catch {
+    # Only the Node side's fixed marker allowlist may reach logs.
+    @{ index = $request.index; ok = $false; error = $_.Exception.Message }
+  }
+})
+ConvertTo-Json -InputObject $results -Depth 8 -Compress
 `;
 export function sameWindowsModelControlPath(left, right) {
     return win32.normalize(left).toLowerCase() === win32.normalize(right).toLowerCase();
 }
-export function validateWindowsModelControlAcl(value) {
-    const invalid = () => new Error('INSECURE_MODEL_CONTROL_WINDOWS_ACL');
+export function validateWindowsModelControlAcl(value, kind = 'file') {
+    const invalid = (detail = 'invalid ACL data') => new Error(`INSECURE_MODEL_CONTROL_WINDOWS_ACL: ${kind}: ${detail}`);
     if (!value || typeof value !== 'object')
         throw invalid();
     const acl = value;
@@ -41,7 +121,7 @@ export function validateWindowsModelControlAcl(value) {
         throw invalid();
     const trusted = new Set([acl.currentSid, ...TRUSTED_SYSTEM_SIDS]);
     if (!trusted.has(acl.ownerSid))
-        throw invalid();
+        throw invalid(`untrusted owner ${acl.ownerSid}`);
     let effectiveAllow = false;
     for (const entry of acl.rules) {
         if (!entry || typeof entry !== 'object')
@@ -49,13 +129,21 @@ export function validateWindowsModelControlAcl(value) {
         const rule = entry;
         if (typeof rule.sid !== 'string' || typeof rule.allow !== 'boolean'
             || typeof rule.inheritOnly !== 'boolean' || typeof rule.rights !== 'number'
-            || !Number.isSafeInteger(rule.rights) || rule.rights < 0)
+            || !Number.isSafeInteger(rule.rights) || rule.rights < -0x80000000 || rule.rights > 0xffffffff)
             throw invalid();
         if (!rule.allow || rule.rights === 0)
             continue;
         // Inherit-only grants still expose newly created state/temporary files.
-        if (!trusted.has(rule.sid) && !(rule.sid === 'S-1-3-0' && rule.inheritOnly))
-            throw invalid();
+        if (!trusted.has(rule.sid) && !(rule.sid === 'S-1-3-0' && rule.inheritOnly)) {
+            // Match the POSIX directory policy: listing/traversal is safe; creating,
+            // replacing, deleting or changing permissions is not. Inherited file
+            // grants are removed by the private-file policy before accessing bytes.
+            // ReadData/ReadEA/Execute/ReadAttributes/ReadControl/Synchronize plus
+            // GenericRead/GenericExecute. Reject unknown rights as well as writes.
+            const outsideReadRights = (rule.rights >>> 0) & ~0xa01200a9;
+            if (kind === 'file' || (!rule.inheritOnly && outsideReadRights !== 0))
+                throw invalid(`unsafe allow ${rule.sid} rights=${rule.rights}`);
+        }
         if (!rule.inheritOnly)
             effectiveAllow = true;
     }
@@ -64,23 +152,70 @@ export function validateWindowsModelControlAcl(value) {
     if (!effectiveAllow)
         throw invalid();
 }
-export async function ensureWindowsModelControlSecurity(path) {
+const unavailable = () => new Error('MODEL_CONTROL_WINDOWS_ACL_UNAVAILABLE: Windows PowerShell ACL inspection failed');
+const SAFE_MARKERS = ['MODEL_CONTROL_UNTRUSTED_DIRECTORY_OWNER', 'MODEL_CONTROL_UNTRUSTED_OWNER', 'MODEL_CONTROL_REPARSE_POINT', 'MODEL_CONTROL_INVALID_DIRECTORY'];
+async function inspectBatch(targets) {
     const executable = win32.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
-    let snapshot;
-    try {
-        const { stdout } = await execute(executable, [
-            '-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(INSPECT_ACL, 'utf16le').toString('base64'),
-        ], {
-            env: { ...process.env, AGENTS_BRIDGE_ACL_TARGET: path },
-            windowsHide: true, timeout: 10_000, maxBuffer: 128 * 1024,
-        });
-        snapshot = JSON.parse(stdout.replace(/^\uFEFF/, '').trim());
-    }
-    catch {
-        // Do not include shell output, environment, or a control-file path in logs.
-        // Fail closed if PowerShell/ACL inspection is unavailable.
-        throw new Error('MODEL_CONTROL_WINDOWS_ACL_UNAVAILABLE: Windows PowerShell ACL inspection failed');
+    const { stdout } = await execute(executable, [
+        '-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(INSPECT_ACL, 'utf16le').toString('base64'),
+    ], {
+        env: { ...process.env, AGENTS_BRIDGE_ACL_REQUESTS: JSON.stringify(targets.map((target, index) => ({ ...target, index }))) },
+        // One short-lived process, at most three independently checked targets.
+        windowsHide: true, timeout: 10_000 * targets.length, maxBuffer: 384 * 1024,
+    });
+    return JSON.parse(stdout.replace(/^\uFEFF/, '').trim());
+}
+/** Coalesce simultaneous checks, never reuse an ACL result or skip a target. */
+export function createWindowsModelControlSecurity(runBatch = inspectBatch) {
+    const queue = [];
+    let draining = false;
+    async function drain() {
+        while (queue.length) {
+            // Filesystem callbacks for three Agents need not arrive in the same
+            // event-loop turn. A bounded10ms collection window amortizes process
+            // startup without caching results or waiting indefinitely for peers.
+            if (queue.length < 3)
+                await new Promise(resolve => setTimeout(resolve, 10));
+            const batch = queue.splice(0, 3);
+            try {
+                const raw = await runBatch(batch.map(({ path, kind, privateDirectory }) => ({ path, kind, privateDirectory })));
+                // Validate correlation/completeness before settling any request.
+                if (!Array.isArray(raw) || raw.length !== batch.length || raw.some((entry, index) => !entry || entry.index !== index || typeof entry.ok !== 'boolean' ||
+                    (!entry.ok && typeof entry.error !== 'string')))
+                    throw unavailable();
+                const results = raw;
+                batch.forEach((target, index) => {
+                    const result = results[index];
+                    if (!result.ok) {
+                        const marker = SAFE_MARKERS.find(marker => result.error.includes(marker));
+                        target.reject(marker ? new Error(marker) : unavailable());
+                        return;
+                    }
+                    try {
+                        validateWindowsModelControlAcl(result.snapshot, target.kind);
+                        target.resolve();
+                    }
+                    catch (error) {
+                        const attempted = result.snapshot?.repairAttempted === true;
+                        target.reject(new Error(`${error.message}; privateDirectory=${target.privateDirectory} repairAttempted=${attempted}`));
+                    }
+                });
+            }
+            catch {
+                // Never surface shell output, paths, environment or credentials.
+                batch.forEach(target => target.reject(unavailable()));
+            }
+        }
+        draining = false;
     }
-    validateWindowsModelControlAcl(snapshot);
+    return (path, kind = 'file', privateDirectory = false) => new Promise((resolve, reject) => {
+        queue.push({ path, kind, privateDirectory, resolve, reject });
+        if (!draining) {
+            draining = true;
+            // Only one bounded PowerShell process is active at a time.
+            setImmediate(() => { void drain(); });
+        }
+    });
 }
+export const ensureWindowsModelControlSecurity = createWindowsModelControlSecurity();
 //# sourceMappingURL=windows-model-control-security.js.map