chainlesschain 0.166.83 → 0.166.85

package/src/assets/web-panel/assets/{usePersonalDataHub-BYF1L_8x.js → usePersonalDataHub-wv7Q0uNE.js}

@@ -1 +1 @@
-import{u as v}from"./index-Be12HoCS.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};
+import{u as v}from"./index-09YzRb6Z.js";import{u as _}from"./useShellMode-CgR0wCYM.js";function d(r){if(!r)return r;if(r.error)throw new Error(r.error);return r.result!==void 0?r.result:r}async function p(r,s={},e=!0){try{if(e!==!0||!r||typeof r.sendRaw!="function")return{status:"unavailable",path:null};const a=await r.sendRaw({type:"fs.openDirectory",title:s.title},6e4);if(a&&(a.ok===!1||a.error))return{status:"unavailable",path:null};const t=a&&a.result!==void 0?a.result:a;return t&&(t.ok===!1||t.error||t.unsupported===!0)?{status:"unavailable",path:null}:t&&t.canceled===!0?{status:"cancelled",path:null}:t&&typeof t.path=="string"&&t.path.length>0?{status:"selected",path:t.path}:{status:"unavailable",path:null}}catch{return{status:"unavailable",path:null}}}function b(r,s,e,a,t){return typeof r.onMessage!="function"||typeof r.sendRaw!="function"?r.sendRaw({type:s,...e},t).then(d):new Promise((n,u)=>{const l=typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():`${Date.now()}-${Math.random().toString(36).slice(2)}`,w=`${s}.event`,m=`${s}.end`;let c=!1,h=()=>{};const o=(i,f)=>{if(!c){c=!0,clearTimeout(g);try{h()}catch{}i(f)}},g=setTimeout(()=>{o(u,new Error(`stream timeout (${t}ms): ${s}`))},t),y=r.onMessage(i=>{if(!(c||!i)&&!(i.id!==l&&i.requestId!==l)){if(i.type===w){if(typeof a=="function")try{a(i.event||i)}catch{}return}if(i.type===m){o(n,d(i));return}i.type==="error"&&o(u,new Error(i.message||"stream error"))}});h=typeof y=="function"?y:()=>{},Promise.resolve(r.sendRaw({id:l,type:s,...e},t)).catch(()=>{})})}function k(){const r=v(),s=_(),e=(a,t={},n=3e4)=>r.sendRaw({type:a,...t},n).then(d);return{async health(){return await e("personal-data-hub.health",{},8e3)},async stats(){return await e("personal-data-hub.stats",{},8e3)},async listAdapters(){return await e("personal-data-hub.list-adapters",{},5e3)},async pickFile(a={}){try{const t=await r.sendRaw({type:"fs.openDialog",title:a.title,filters:a.filters},6e4),n=t&&t.result!==void 0?t.result:t,u=n&&typeof n.path=="string"?n.path:n&&typeof n.filePath=="string"?n.filePath:null;return n&&n.canceled!==!0&&u?u:null}catch{return null}},async pickDirectoryResult(a={}){return await p(r,a,s.isEmbedded)},async pickDirectory(a={}){const t=await p(r,a,s.isEmbedded);return t.status==="selected"?t.path:null},async adapterReadiness(a){return await e("personal-data-hub.adapter-readiness",Number.isInteger(a)?{timeoutMs:a}:{},15e3)},async syncAdapter(a,t={}){return await e("personal-data-hub.sync-adapter",{name:a,options:t},6e5)},async syncAll(a={}){return await e("personal-data-hub.sync-all",{options:a},6e5)},async registerMock({name:a="mock",count:t=20,seed:n=1}={}){return await e("personal-data-hub.register-mock",{name:a,count:t,seed:n})},async unregister(a){return await e("personal-data-hub.unregister",{name:a})},async ask(a,t={}){return await e("personal-data-hub.ask",{question:a,options:t},18e4)},async queryEvents(a={}){return await e("personal-data-hub.query-events",a,1e4)},async recentAudit(a={}){return await e("personal-data-hub.recent-audit",a,1e4)},async searchEvents(a={}){return await e("personal-data-hub.search-events",a,15e3)},async facetCounts(a={}){return await e("personal-data-hub.facet-counts",a,1e4)},async testEmailAuth(a){return await e("personal-data-hub.test-email-auth",{account:a},3e4)},async registerEmail(a,t={}){return await e("personal-data-hub.register-email",{account:a,opts:t},15e3)},async unregisterEmail(a){return await e("personal-data-hub.unregister-email",{email:a},5e3)},async listEmailAccounts(){return await e("personal-data-hub.list-email-accounts",{},5e3)},async activateEmail(a){return await e("personal-data-hub.activate-email",{email:a},5e3)},async eventDetail(a){return await e("personal-data-hub.event-detail",{eventId:a},5e3)},async syncAdapterStream(a,t={},n){return await b(r,"personal-data-hub.sync-adapter-stream",{name:a,options:t},n,6e5)},async syncAllStream(a={},t){return await b(r,"personal-data-hub.sync-all-stream",{options:a},t,9e5)},async registerAlipay(a,t={}){return await e("personal-data-hub.register-alipay",{account:a,opts:t},15e3)},async unregisterAlipay(a){return await e("personal-data-hub.unregister-alipay",{email:a},5e3)},async listAlipayAccounts(){return await e("personal-data-hub.list-alipay-accounts",{},5e3)},async activateAlipay(a){return await e("personal-data-hub.activate-alipay",{email:a},5e3)},async importAlipayBill({zipPath:a,csvPath:t,zipPassword:n}={}){return await e("personal-data-hub.import-alipay-bill",{zipPath:a,csvPath:t,zipPassword:n},3e5)},async reviewQueueList(a=50){return await e("personal-data-hub.review-queue-list",{limit:a},5e3)},async reviewDecision(a,t){return await e("personal-data-hub.review-decision",{reviewId:a,decision:t},5e3)},async manualMerge(a,t){return await e("personal-data-hub.manual-merge",{aId:a,bId:t},5e3)},async manualUnmerge(a){return await e("personal-data-hub.manual-unmerge",{personId:a},5e3)},async resolverDrain(a=50){return await e("personal-data-hub.resolver-drain",{limit:a},18e4)},async resolverStats(){return await e("personal-data-hub.resolver-stats",{},5e3)},async skillsList(){return await e("personal-data-hub.skills-list",{},5e3)},async runSkill(a,t={}){return await e("personal-data-hub.run-skill",{name:a,options:t},12e4)},async openAichatLogin(a,t={}){return await e("personal-data-hub.aichat-open-login",{vendor:a,opts:t},1e4)},async probeAichatCookies(a,t){return await e("personal-data-hub.aichat-probe-cookies",{vendor:a,cookieHeader:t},1e4)},async registerAichatVendor(a,t,n={}){return await e("personal-data-hub.aichat-register-vendor",{vendor:a,cookies:t,opts:n},3e4)},async rotateAichatLogin(a){return await e("personal-data-hub.aichat-rotate-login",{vendor:a},1e4)},async listAichatAccounts(){return await e("personal-data-hub.list-aichat-accounts",{},5e3)},async unregisterAichat(a){return await e("personal-data-hub.unregister-aichat",{vendor:a},5e3)},async aichatHealthCheckOnce(){return await e("personal-data-hub.aichat-health-check-once",{},3e4)},async probeWechatEnv(){return await e("personal-data-hub.wechat-env-probe",{},15e3)},async registerWechat({account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l}={}){return await e("personal-data-hub.register-wechat",{account:a,dbPath:t,wechatDataPath:n,fridaOpts:u,keyProviderOverride:l},45e3)},async listWechatAccounts(){return await e("personal-data-hub.list-wechat-accounts",{},5e3)},async activateWechat(a,t={}){return await e("personal-data-hub.activate-wechat",{uin:a,fridaOpts:t.fridaOpts,keyProviderOverride:t.keyProviderOverride},45e3)},async unregisterWechat(a){return await e("personal-data-hub.unregister-wechat",{uin:a},5e3)},async bilibiliAdbSync(a={}){return await e("personal-data-hub.bilibili-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bilibiliAdbDoctor(){return await e("personal-data-hub.bilibili-adb-doctor",{},15e3)},async weiboAdbSync(a={}){return await e("personal-data-hub.weibo-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async xhsAdbSync(a={}){return await e("personal-data-hub.xhs-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)},async toutiaoAdbSync(a={}){return await e("personal-data-hub.toutiao-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},9e4)},async kuaishouAdbSync(a={}){return await e("personal-data-hub.kuaishou-adb-sync",{limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},12e4)},async bridgeDoctor(){return await e("personal-data-hub.bridge-doctor",{},6e4)},async douyinAdbSync(a={}){return await e("personal-data-hub.douyin-adb-sync",{uid:a.uid,limits:a.limits,stagingDir:a.stagingDir,displayName:a.displayName},6e4)}}}export{k as u};

package/src/assets/web-panel/assets/{vnode-6c2GVkT-.js → vnode-DVOVfAqC.js}

@@ -1 +1 @@
-import{N as i,h as a,w as l}from"./index-Be12HoCS.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};
+import{N as i,h as a,w as l}from"./index-09YzRb6Z.js";import{a7 as o,k as g,C as d,F as f,A as p}from"./vendor-Bn1JzzAn.js";function c(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0,s=arguments.length>3&&arguments[3]!==void 0?arguments[3]:!1,u=e;if(Array.isArray(e)&&(u=i(e)[0]),!u)return null;const n=o(u,r,s);return n.props=t?a(a({},n.props),r):n.props,l(typeof n.props.class!="object","class must be string"),n}function V(e){let r=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:!0;return e.map(s=>c(s,r,t))}function v(e,r,t){p(o(e,a({},r)),t)}const m=e=>(e||[]).some(r=>g(r)?!(r.type===d||r.type===f&&!m(r.children)):!0)?e:null;function h(e,r,t,s){var u;const n=(u=e[r])===null||u===void 0?void 0:u.call(e,t);return m(n)?n:s?.()}export{h as a,V as b,c,v as t};

package/src/assets/web-panel/assets/{zoom-BYAY6QeD.js → zoom-B5tebZuT.js}

@@ -1,4 +1,4 @@
-import{K as o}from"./index-Be12HoCS.js";import{i as f}from"./motion-bn_fWhQV.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
+import{K as o}from"./index-09YzRb6Z.js";import{i as f}from"./motion-CTItLW4-.js";const c=new o("antZoomIn",{"0%":{transform:"scale(0.2)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),y=new o("antZoomOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.2)",opacity:0}}),a=new o("antZoomBigIn",{"0%":{transform:"scale(0.8)",opacity:0},"100%":{transform:"scale(1)",opacity:1}}),s=new o("antZoomBigOut",{"0%":{transform:"scale(1)"},"100%":{transform:"scale(0.8)",opacity:0}}),g=new o("antZoomUpIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 0%"}}),O=new o("antZoomUpOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 0%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 0%",opacity:0}}),l=new o("antZoomLeftIn",{"0%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"0% 50%"}}),u=new o("antZoomLeftOut",{"0%":{transform:"scale(1)",transformOrigin:"0% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"0% 50%",opacity:0}}),p=new o("antZoomRightIn",{"0%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"100% 50%"}}),z=new o("antZoomRightOut",{"0%":{transform:"scale(1)",transformOrigin:"100% 50%"},"100%":{transform:"scale(0.8)",transformOrigin:"100% 50%",opacity:0}}),K=new o("antZoomDownIn",{"0%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0},"100%":{transform:"scale(1)",transformOrigin:"50% 100%"}}),w=new o("antZoomDownOut",{"0%":{transform:"scale(1)",transformOrigin:"50% 100%"},"100%":{transform:"scale(0.8)",transformOrigin:"50% 100%",opacity:0}}),I={zoom:{inKeyframes:c,outKeyframes:y},"zoom-big":{inKeyframes:a,outKeyframes:s},"zoom-big-fast":{inKeyframes:a,outKeyframes:s},"zoom-left":{inKeyframes:l,outKeyframes:u},"zoom-right":{inKeyframes:p,outKeyframes:z},"zoom-up":{inKeyframes:g,outKeyframes:O},"zoom-down":{inKeyframes:K,outKeyframes:w}},h=(n,r)=>{const{antCls:m}=n,t=`${m}-${r}`,{inKeyframes:i,outKeyframes:e}=I[r];return[f(t,i,e,r==="zoom-big-fast"?n.motionDurationFast:n.motionDurationMid),{[`
         ${t}-enter,
         ${t}-appear
       `]:{transform:"scale(0)",opacity:0,animationTimingFunction:n.motionEaseOutCirc,"&-prepare":{transform:"none"}},[`${t}-leave`]:{animationTimingFunction:n.motionEaseInOutCirc}}]};export{h as i,c as z};

package/src/assets/web-panel/index.html

@@ -8,7 +8,7 @@
     // Injected by web-ui-server.js at serve time
     window.__CC_CONFIG__ = __CC_CONFIG_PLACEHOLDER__;
   </script>
-  <script type="module" crossorigin src="./assets/index-Be12HoCS.js"></script>
+  <script type="module" crossorigin src="./assets/index-09YzRb6Z.js"></script>
   <link rel="modulepreload" crossorigin href="./assets/vendor-Bn1JzzAn.js">
   <link rel="modulepreload" crossorigin href="./assets/icons-DG5UD-6K.js">
   <link rel="stylesheet" crossorigin href="./assets/index-Cq93VfoF.css">

package/src/commands/permissions.js

@@ -29,6 +29,23 @@ const KIND_COLOR = {
 const RUNTIME_ADVISORY =
   "permission rules are enforced by Agent Core; scoped rules are refreshed before every tool call, while managed host policy and ApprovalGate still apply.";
 
+const SETTINGS_SOURCE_ERROR_CODES = new Set([
+  "CC_SETTINGS_SOURCE_INVALID",
+  "CC_SETTINGS_SOURCE_UNAVAILABLE",
+  "CC_SETTINGS_SOURCE_TOO_LARGE",
+  "CC_SETTINGS_SOURCE_UNSAFE",
+  "CC_SETTINGS_SOURCE_CHANGED",
+]);
+
+function formatAuthorityReadError(error) {
+  if (SETTINGS_SOURCE_ERROR_CODES.has(error?.code)) {
+    // Source failures can retain parser or filesystem details in their cause.
+    // Expose only the stable category and the reader's generic diagnosis.
+    return `[${error.code}] Settings source observation is unavailable`;
+  }
+  return error.message;
+}
+
 const DURATION_UNITS = Object.freeze({
   s: 1000,
   m: 60 * 1000,
@@ -244,7 +261,11 @@ export function registerPermissionsCommand(program) {
           logger.log(chalk.dim(`  authority: ${scoped.file}`));
         }
       } catch (err) {
-        logger.error(chalk.red(`permissions list failed: ${err.message}`));
+        logger.error(
+          chalk.red(
+            `permissions list failed: ${formatAuthorityReadError(err)}`,
+          ),
+        );
         process.exitCode = 1;
       }
     });
@@ -446,7 +467,11 @@ export function registerPermissionsCommand(program) {
           );
         }
       } catch (err) {
-        logger.error(chalk.red(`permissions test failed: ${err.message}`));
+        logger.error(
+          chalk.red(
+            `permissions test failed: ${formatAuthorityReadError(err)}`,
+          ),
+        );
         process.exitCode = 1;
       }
     });

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.85",
+      "cliVersions": ["0.166.85"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.85: preserve durable state at capacity and revision limits",
+          "body": "- Reject oversized memory commits and reconciliation before replacing durable\n  data; bound reads even if the backing file grows during the read.\n- Refuse exhausted memory and scoped permission revisions before mutation,\n  preserving safe integer identities, idempotent revocation, and stale CAS.\n- Include pending packaged-build, settings observation, and disabled background\n  IPC lifetime fixes since the previous CLI release.\n- Pair VS Code `0.37.130` image draft recovery and JetBrains `0.4.147` with this\n  CLI only after complete exact-commit CI and public npm verification."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.84",
+      "cliVersions": ["0.166.84"],
+      "date": null,
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.84: revoke scoped permissions before durable writes",
+          "body": "- Begin synchronous shell revocation before official workspace-scoped permission\n  additions or revocations are persisted in the same runtime. Restoring the\n  effective rules does not restore an earlier execution permit.\n- Reject reentrant reads and writes during notification, retain fixed storage\n  targets, and keep uncertain persistence outcomes unavailable. Duplicate\n  revocations preserve the existing bytes and authority revision.\n- Combine settings and scoped permission revisions through the existing shell\n  lifecycle; reject stale approvals and late success receipts, close running\n  proxies and containers, and remove both subscriptions after completion.\n- Pair VS Code `0.37.126` and JetBrains `0.4.146` with CLI `0.166.84` after\n  complete exact-commit CLI and IDE validation. Cross-process notifications and\n  arbitrary external edits remain outside this in-process guarantee."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.83",

package/src/lib/background-interaction-resolver.js

@@ -265,6 +265,10 @@ export function createBackgroundInteractionClient(options = {}) {
     close(reason = "Background interaction channel closed") {
       if (closed) return;
       closed = true;
+      // A disabled client never acquired this channel. It may belong to an
+      // embedding host (including a test runner), which still needs it alive
+      // to finish its own IPC protocol after this headless invocation returns.
+      if (!enabled) return;
       removeMessageListener();
       for (const entry of [...pending.values()]) {
         settle(

package/src/lib/context-memory-kernel/durable-memory-port.js

@@ -1,11 +1,13 @@
 import {
   closeSync,
+  constants,
   existsSync,
+  fstatSync,
   fsyncSync,
   lstatSync,
   mkdirSync,
   openSync,
-  readFileSync,
+  readSync,
   renameSync,
   rmSync,
   writeFileSync,
@@ -124,6 +126,55 @@ function initializeState() {
   return state;
 }
 
+function storeLimit(reason) {
+  const error = new Error(`Context/Memory store limit reached: ${reason}`);
+  error.code = "CONTEXT_MEMORY_STORE_LIMIT";
+  return error;
+}
+
+function advanceRevision(state) {
+  if (state.storeRevision >= Number.MAX_SAFE_INTEGER) {
+    throw storeLimit("store revision is exhausted");
+  }
+  state.storeRevision += 1;
+}
+
+function readBoundedState(filePath, maxStoreBytes) {
+  const descriptor = openSync(
+    filePath,
+    constants.O_RDONLY |
+      (constants.O_NOFOLLOW || 0) |
+      (constants.O_NONBLOCK || 0),
+  );
+  try {
+    const stat = fstatSync(descriptor);
+    if (!stat.isFile()) {
+      throw corruptStore(filePath, "authority path is not a regular file");
+    }
+    if (stat.size > maxStoreBytes) {
+      throw corruptStore(filePath, "store exceeds its configured byte limit");
+    }
+    // Bound reads even when a non-cooperating writer grows the opened file.
+    // The extra byte distinguishes an exact-limit file from an oversized one.
+    const chunks = [];
+    let total = 0;
+    while (true) {
+      const chunk = Buffer.allocUnsafe(
+        Math.min(64 * 1024, maxStoreBytes - total + 1),
+      );
+      const count = readSync(descriptor, chunk, 0, chunk.length, null);
+      if (count === 0) return Buffer.concat(chunks, total);
+      total += count;
+      if (total > maxStoreBytes) {
+        throw corruptStore(filePath, "store exceeds its configured byte limit");
+      }
+      chunks.push(chunk.subarray(0, count));
+    }
+  } finally {
+    closeSync(descriptor);
+  }
+}
+
 function syncDirectory(directory) {
   if (process.platform === "win32") return;
   const descriptor = openSync(directory, "r");
@@ -134,13 +185,16 @@ function syncDirectory(directory) {
   }
 }
 
-function writeState(filePath, state) {
-  const directory = dirname(filePath);
-  mkdirSync(directory, { recursive: true, mode: 0o700 });
+function writeState(filePath, state, maxStoreBytes) {
   const output = cloneCanonical(state);
   delete output.digest;
   output.digest = stateDigest(output);
   const bytes = `${JSON.stringify(output)}\n`;
+  if (Buffer.byteLength(bytes, "utf8") > maxStoreBytes) {
+    throw storeLimit("store exceeds its configured byte limit");
+  }
+  const directory = dirname(filePath);
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
   const temporary = join(
     directory,
     `.${filePath.split(/[\\/]/u).at(-1)}.${process.pid}.${randomUUID()}.tmp`,
@@ -172,6 +226,11 @@ export class DurableJsonMemoryPort {
     maxEvents = DEFAULT_MAX_EVENTS,
     lockObserver = null,
   } = {}) {
+    for (const [name, value] of Object.entries({ maxStoreBytes, maxEvents })) {
+      if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new TypeError(`${name} must be a positive safe integer`);
+      }
+    }
     this.name = "cli-context-memory-authority";
     this.filePath = filePath;
     this.maxStoreBytes = maxStoreBytes;
@@ -183,13 +242,7 @@ export class DurableJsonMemoryPort {
   _readUnlocked() {
     assertRegularFile(this.filePath);
     if (!existsSync(this.filePath)) return initializeState();
-    const bytes = readFileSync(this.filePath);
-    if (bytes.length > this.maxStoreBytes) {
-      throw corruptStore(
-        this.filePath,
-        "store exceeds its configured byte limit",
-      );
-    }
+    const bytes = readBoundedState(this.filePath, this.maxStoreBytes);
     try {
       return normalizeState(JSON.parse(bytes.toString("utf8")), this.filePath);
     } catch (error) {
@@ -278,8 +331,8 @@ export class DurableJsonMemoryPort {
         state.reconciliations[reconciliation.requestId] =
           cloneCanonical(reconciliation);
       }
-      state.storeRevision += 1;
-      writeState(this.filePath, state);
+      advanceRevision(state);
+      writeState(this.filePath, state, this.maxStoreBytes);
       return {
         ok: true,
         revision: normalized.revision,
@@ -303,8 +356,8 @@ export class DurableJsonMemoryPort {
     return this._locked(() => {
       const state = this._readUnlocked();
       state.reconciliations[operation.requestId] = cloneCanonical(operation);
-      state.storeRevision += 1;
-      writeState(this.filePath, state);
+      advanceRevision(state);
+      writeState(this.filePath, state, this.maxStoreBytes);
       return { ok: true, storeRevision: state.storeRevision };
     });
   }

package/src/lib/packer/pack-update-applier.js

@@ -207,7 +207,7 @@ export async function scheduleReplace(ctx = {}) {
       : null;
 
     if (platform === "win32") {
-      return scheduleWindowsTransaction({
+      return await scheduleWindowsTransaction({
         operation: "update",
         resolvedNewPath,
         layout,
@@ -681,7 +681,7 @@ function rollbackFailedPosixUpdate(ctx) {
   }
 }
 
-function scheduleWindowsTransaction(ctx) {
+async function scheduleWindowsTransaction(ctx) {
   const {
     operation,
     resolvedNewPath,
@@ -771,26 +771,39 @@ function scheduleWindowsTransaction(ctx) {
 
     let ready = false;
     let childError = null;
+    let childExited = false;
+    const onChildExit = () => {
+      childExited = true;
+    };
+    const hasChildFailed = () =>
+      Boolean(childError) ||
+      childExited ||
+      child.exitCode != null ||
+      child.signalCode != null;
     if (typeof child.once === "function") {
       // Native spawn failures are normally emitted asynchronously. Attach
-      // before the synchronous readiness wait so both the no-ready and the
+      // before yielding for readiness so both the no-ready and the
       // post-transfer paths always consume the ChildProcess error event.
       child.once("error", (error) => {
         childError = error;
       });
+      child.once("exit", onChildExit);
     }
     try {
       ready =
         Boolean(
-          waitForReadyImpl({
+          await waitForReadyImpl({
             readyPath,
             transactionId,
             timeoutMs: WINDOWS_SIDECAR_READY_TIMEOUT_MS,
             child,
+            hasChildFailed,
           }),
-        ) && !childError;
+        ) && !hasChildFailed();
     } catch {
       ready = false;
+    } finally {
+      child.removeListener?.("exit", onChildExit);
     }
     if (!ready) {
       try {
@@ -1982,7 +1995,7 @@ export async function rollbackLastKnownGood(ctx = {}) {
       : null;
 
     if (platform === "win32") {
-      const result = scheduleWindowsTransaction({
+      const result = await scheduleWindowsTransaction({
         operation: "rescue",
         resolvedNewPath: rescueStagingPath,
         layout,
@@ -2752,10 +2765,15 @@ function restartVerifiedExecutable(targetPath, restart, spawnImpl) {
   }
 }
 
-function waitForWindowsSidecarReady({ readyPath, transactionId, timeoutMs }) {
+async function waitForWindowsSidecarReady({
+  readyPath,
+  transactionId,
+  timeoutMs,
+  hasChildFailed,
+}) {
   const deadline = Date.now() + timeoutMs;
-  const waitCell = new Int32Array(new SharedArrayBuffer(4));
   while (Date.now() < deadline) {
+    if (hasChildFailed()) return false;
     const stat = lstatOrNull(readyPath);
     if (stat) {
       try {
@@ -2769,7 +2787,8 @@ function waitForWindowsSidecarReady({ readyPath, transactionId, timeoutMs }) {
         return false;
       }
     }
-    Atomics.wait(waitCell, 0, 0, 25);
+    // Yield so native spawn errors and early exits can abort the handshake.
+    await new Promise((resolve) => setTimeout(resolve, 25));
   }
   return false;
 }

package/src/lib/packer/pkg-config-generator.js

@@ -20,6 +20,104 @@
 import fs from "node:fs";
 import { createRequire } from "node:module";
 import path from "node:path";
+import { linuxSubreaperTargetArchitectures } from "./pkg-targets.js";
+import {
+  LINUX_SUBREAPER_SOURCE_DIGEST,
+  MAX_SUBREAPER_IMAGE_BYTES,
+  MAX_SUBREAPER_MANIFEST_BYTES,
+  subreaperDigest,
+  validateLinuxSubreaperArtifact,
+} from "../process-execution-broker/linux-subreaper-artifact.js";
+
+function linuxSubreaperAssets(cliRoot, targets) {
+  const architectures = linuxSubreaperTargetArchitectures(targets);
+  if (!architectures.length) return [];
+  const root = fs.realpathSync(cliRoot);
+  const assets = [];
+  function read(relative, maximum) {
+    const file = path.join(root, relative);
+    let directory = path.dirname(file);
+    while (directory !== root) {
+      const stat = fs.lstatSync(directory);
+      if (stat.isSymbolicLink() || !stat.isDirectory())
+        throw new Error("Invalid standalone Linux helper directory");
+      directory = path.dirname(directory);
+    }
+    const before = fs.lstatSync(file, { bigint: true });
+    if (
+      !before.isFile() ||
+      before.isSymbolicLink() ||
+      before.nlink !== 1n ||
+      before.size < 1n ||
+      before.size > BigInt(maximum)
+    )
+      throw new Error("Invalid standalone Linux helper asset");
+    const fd = fs.openSync(
+      file,
+      fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW || 0),
+    );
+    try {
+      const opened = fs.fstatSync(fd, { bigint: true });
+      if (
+        opened.dev !== before.dev ||
+        opened.ino !== before.ino ||
+        opened.size !== before.size
+      )
+        throw new Error("Standalone Linux helper asset changed");
+      const bytes = Buffer.alloc(Number(opened.size));
+      let offset = 0;
+      while (offset < bytes.length) {
+        const count = fs.readSync(
+          fd,
+          bytes,
+          offset,
+          bytes.length - offset,
+          offset,
+        );
+        if (count <= 0) throw new Error("Short standalone Linux helper asset");
+        offset += count;
+      }
+      const after = fs.fstatSync(fd, { bigint: true });
+      if (
+        after.size !== before.size ||
+        after.mtimeNs !== before.mtimeNs ||
+        after.ctimeNs !== before.ctimeNs ||
+        after.nlink !== 1n
+      )
+        throw new Error("Standalone Linux helper asset changed");
+      assets.push(file);
+      return bytes;
+    } finally {
+      fs.closeSync(fd);
+    }
+  }
+  try {
+    const source = read(
+      "src/lib/process-execution-broker/linux-subreaper-supervisor.c",
+      128 * 1024,
+    );
+    if (
+      subreaperDigest(
+        Buffer.from(source.toString("utf8").replace(/\r\n/g, "\n")),
+      ) !== LINUX_SUBREAPER_SOURCE_DIGEST
+    )
+      throw new Error("Standalone Linux helper source digest mismatch");
+    for (const arch of architectures) {
+      const directory = `src/assets/linux-subreaper/linux-${arch}`;
+      validateLinuxSubreaperArtifact(
+        read(`${directory}/manifest.json`, MAX_SUBREAPER_MANIFEST_BYTES),
+        read(`${directory}/supervisor`, MAX_SUBREAPER_IMAGE_BYTES),
+        { arch },
+      );
+    }
+    return assets.map(posixify);
+  } catch (cause) {
+    throw new Error(
+      "Standalone Linux targets require valid precompiled process supervision assets for every target architecture",
+      { cause },
+    );
+  }
+}
 
 function capsuleBuilderAssets(cliRoot) {
   const requireFromCli = createRequire(path.join(cliRoot, "package.json"));
@@ -108,6 +206,13 @@ export function generatePkgConfig(ctx) {
     updatePublicKey = null,
   } = ctx;
 
+  // pkg silently turns an empty target list into a host build. Require an
+  // explicit target so asset admission and the emitted build cannot diverge.
+  if (!Array.isArray(targets) || targets.length === 0)
+    throw new Error(
+      "Standalone builds require at least one explicit pkg target",
+    );
+
   const bakedTokenMode =
     typeof runtime.token === "string" ? runtime.token : "auto";
   const bakedHost =
@@ -432,6 +537,7 @@ export function generatePkgConfig(ctx) {
     `${posixify(cliRoot)}/src/lib/process-execution-broker/macos-mcp-launcher-protocol.json`,
     `${posixify(cliRoot)}/install/install.ps1`,
     ...capsuleBuilderAssets(cliRoot).map(posixify),
+    ...linuxSubreaperAssets(cliRoot, targets),
   ];
   if (prebuildsDir) assets.push(`${posixify(prebuildsDir)}/**/*`);
   // Project mode: bundle the collected .chainlesschain/ snapshot as an asset.
@@ -450,8 +556,8 @@ export function generatePkgConfig(ctx) {
         `${posixify(cliRoot)}/src/**/*.js`,
         `${posixify(cliRoot)}/src/**/*.cjs`,
         `${posixify(cliRoot)}/bin/**/*.js`,
-      ],
-      assets,
+      ].map((pattern) => pkgRelativePath(pkgConfigDir, pattern)),
+      assets: assets.map((pattern) => pkgRelativePath(pkgConfigDir, pattern)),
       targets,
       outputPath: path.dirname(outputPath),
       compress: compress ? "GZip" : "None",
@@ -476,3 +582,14 @@ export function generatePkgConfig(ctx) {
 function posixify(p) {
   return p.replace(/\\/g, "/");
 }
+
+function pkgRelativePath(directory, pattern) {
+  // pkg's walker joins every pattern to its config directory, even when the
+  // pattern is absolute. Emit relative globs so assets are actually embedded.
+  const relative = path.relative(directory, pattern);
+  if (path.isAbsolute(relative) || path.win32.isAbsolute(relative))
+    throw new Error(
+      "Standalone build assets and temporary config must be on the same filesystem drive",
+    );
+  return posixify(relative);
+}

package/src/lib/packer/pkg-runner.js

@@ -16,6 +16,10 @@ import path from "node:path";
 import { createRequire } from "node:module";
 import { PackError, EXIT } from "./errors.js";
 import executionBroker from "../process-execution-broker/index.js";
+import {
+  createPackerBuildPolicy,
+  PACKER_BUILD_TIMEOUT_MS,
+} from "../process-execution-broker/packer-build-policy.js";
 
 export const _deps = {
   spawnSync: (...args) => executionBroker.spawnSync(...args),
@@ -55,6 +59,9 @@ export function runPkg(ctx) {
     origin: "packer:pkg",
     scope: "pack",
     policy: "allow",
+    sandboxPolicy: createPackerBuildPolicy("packer:pkg"),
+    timeout: PACKER_BUILD_TIMEOUT_MS,
+    killSignal: "SIGKILL",
     shell: false,
     cwd: path.dirname(pkgConfigFile),
     stdio: "inherit",

package/src/lib/packer/pkg-targets.js

@@ -0,0 +1,83 @@
+// Only resolve the platform/architecture needed to admit helper assets. Loading
+// pkg's config module also loads pkg-fetch, whose Linux host probe runs ldd at
+// import time. Target admission must remain free of subprocess side effects.
+// Keep these token aliases aligned with the installed pkg parser via the
+// differential tests. Linux, Alpine and linuxstatic need the same static ELF.
+// ARM32 hosts require an explicit supported target architecture: unlike pkg,
+// admission never invokes uname to infer a different ABI from the kernel.
+const PLATFORMS = new Set([
+  "alpine",
+  "freebsd",
+  "linux",
+  "linuxstatic",
+  "macos",
+  "win",
+]);
+const ARCHITECTURES = new Set([
+  "x64",
+  "x86",
+  "armv7",
+  "arm64",
+  "ppc64",
+  "s390x",
+  "riscv64",
+  "loong64",
+]);
+const PLATFORM_ALIASES = new Map([
+  ["darwin", "macos"],
+  ["lin", "linux"],
+  ["mac", "macos"],
+  ["osx", "macos"],
+  ["win32", "win"],
+  ["windows", "win"],
+]);
+const ARCHITECTURE_ALIASES = new Map([
+  ["ia32", "x86"],
+  ["x86_64", "x64"],
+]);
+
+export function linuxSubreaperTargetArchitectures(
+  targets,
+  { platform = process.platform, arch = process.arch } = {},
+) {
+  if (
+    !Array.isArray(targets) ||
+    targets.length === 0 ||
+    targets.some(
+      (target) =>
+        typeof target !== "string" || !target.trim().replace(/-/g, ""),
+    )
+  ) {
+    throw new Error("Standalone builds require explicit nonempty pkg targets");
+  }
+  const architectures = new Set();
+  for (const rawTarget of targets) {
+    const target = rawTarget.trim();
+    let targetPlatform = PLATFORM_ALIASES.get(platform) || platform;
+    let targetArch = ARCHITECTURE_ALIASES.get(arch) || arch;
+    if (target !== "host") {
+      for (const token of target.split("-")) {
+        if (!token || token === "latest" || token.startsWith("node")) continue;
+        const resolvedPlatform = PLATFORM_ALIASES.get(token) || token;
+        if (PLATFORMS.has(resolvedPlatform)) {
+          targetPlatform = resolvedPlatform;
+          continue;
+        }
+        const resolvedArch = ARCHITECTURE_ALIASES.get(token) || token;
+        if (ARCHITECTURES.has(resolvedArch)) {
+          targetArch = resolvedArch;
+          continue;
+        }
+        throw new Error(`Unknown token '${token}' in '${target}'`);
+      }
+    }
+    if (!["linux", "alpine", "linuxstatic"].includes(targetPlatform)) continue;
+    if (targetArch !== "x64" && targetArch !== "arm64") {
+      throw new Error(
+        `Unsupported standalone Linux process supervision architecture: ${targetArch}`,
+      );
+    }
+    architectures.add(targetArch);
+  }
+  return [...architectures];
+}