dsh-cliworker-now 0.0.0-stage → 0.7.7

package/lib/types/shared/types.js

@@ -0,0 +1,147 @@
+export const EFFORTS = [
+    'default',
+    'none',
+    'minimal',
+    'low',
+    'medium',
+    'high',
+    'xhigh',
+    'max',
+    'ultra',
+];
+export const CLI_IDS = [
+    'antigravity',
+    'codex',
+    'claude',
+    'kimi',
+    'mimo',
+    'zcode',
+    'grok',
+    'omp',
+    'pi',
+    'hermes',
+    'opencode',
+];
+export const RETIRED_HARNESS_NOTICE = '外部 Harness CLI 入口已移除；历史记录仅供查看。请新建 Hermes Agent 任务。';
+export const isRetiredCli = (cli) => cli === 'harness';
+export const CLI_LABELS = {
+    antigravity: 'Antigravity',
+    codex: 'Codex',
+    claude: 'Claude Code',
+    kimi: 'Kimi',
+    mimo: 'MiMo',
+    zcode: 'ZCode',
+    grok: 'Grok Build',
+    omp: 'OMP',
+    pi: 'Pi',
+    hermes: 'Hermes Agent',
+    harness: 'Harness（已移除）',
+    opencode: 'OpenCode',
+};
+/** Short CLI stems used for automatic Worker names; protocol IDs remain unchanged. */
+export const CLI_SHORT_NAMES = {
+    antigravity: 'agy',
+    codex: 'codex',
+    claude: 'claude',
+    kimi: 'kimi',
+    mimo: 'mimo',
+    zcode: 'zcode',
+    grok: 'grok',
+    omp: 'omp',
+    pi: 'pi',
+    hermes: 'hermes',
+    harness: 'harness',
+    opencode: 'opencode',
+};
+export const cliOf = (preference) => preference.cli ?? 'antigravity';
+export const effortLabel = (effort) => effort === 'default' ? '默认' : effort.charAt(0).toUpperCase() + effort.slice(1);
+export const LEGACY_ACCOUNT_RECORD_NOTICE = '此历史任务缺少账号记录，请新建任务';
+/** Stable, non-mutating name for histories created before named workers. */
+export const workerName = (worker) => worker.agentName || `智能体-${worker.id.slice(0, 6)}`;
+export const active = (status) => status === 'queued' || status === 'running' || status === 'stopping';
+/** Fold repeated step updates without duplicating streamed text or the final response. */
+export function foldEvents(events, endedRun) {
+    const rows = [];
+    const steps = new Map();
+    const markEnded = (runId, status) => {
+        for (const row of rows) {
+            if (row.kind === 'tool' &&
+                row.id.startsWith(runId + ':') &&
+                ['ACTIVE', 'RUNNING', 'PENDING', 'QUEUED', 'IN_PROGRESS'].includes(row.state ?? ''))
+                row.runStatus = status;
+        }
+    };
+    for (const event of events) {
+        if (event.kind === 'status') {
+            const terminal = event.state ?? event.text;
+            if (terminal === 'completed' || terminal === 'failed' || terminal === 'interrupted')
+                markEnded(event.runId, terminal);
+        }
+        if (event.kind === 'result') {
+            const lastAssistant = rows.findLast((row) => row.kind === 'assistant' && row.id.startsWith(event.runId + ':'));
+            if (lastAssistant) {
+                // agy may repeat all earlier response steps in its final response.
+                // Strip only exact earlier prefixes, leaving interleaved tool rows intact.
+                let finalText = event.text.trimStart();
+                const earlier = rows.filter((row) => row !== lastAssistant && row.kind === 'assistant' && row.id.startsWith(event.runId + ':'));
+                for (const row of earlier) {
+                    const prefix = row.text.trim();
+                    if (!prefix)
+                        continue;
+                    if (finalText.startsWith(prefix))
+                        finalText = finalText.slice(prefix.length).trimStart();
+                    else
+                        break;
+                }
+                if (event.text)
+                    lastAssistant.text = finalText;
+                continue;
+            }
+        }
+        const key = event.step === undefined
+            ? `${event.runId}:event:${event.seq}`
+            : `${event.runId}:${event.kind}:${event.step}`;
+        const existing = steps.get(key);
+        if (existing) {
+            if (event.kind === 'assistant')
+                existing.text += event.text;
+            else if (event.text)
+                existing.text = event.text;
+            if (event.state)
+                existing.state = event.state;
+            if (event.detail)
+                existing.detail = event.detail;
+        }
+        else {
+            const row = {
+                id: key,
+                kind: event.kind === 'result' ? 'assistant' : event.kind,
+                text: event.text,
+                time: event.time,
+                state: event.state,
+                detail: event.detail,
+            };
+            steps.set(key, row);
+            rows.push(row);
+        }
+    }
+    // Use full persisted events before pagination. Duration includes admission/queue time.
+    const timing = new Map();
+    for (const event of events) {
+        const run = timing.get(event.runId) ?? {};
+        if (event.kind === 'user' && !run.runStartedAt)
+            run.runStartedAt = event.time;
+        if (event.kind === 'status' &&
+            ['completed', 'failed', 'interrupted'].includes(event.state ?? event.text)) {
+            run.runEndedAt = event.time;
+            run.runOutcome = (event.state ?? event.text);
+        }
+        timing.set(event.runId, run);
+    }
+    for (const row of rows)
+        Object.assign(row, timing.get(row.id.split(':')[0]));
+    if (endedRun)
+        markEnded(endedRun.runId, endedRun.status);
+    return rows;
+}
+//# sourceMappingURL=types.js.map

package/lib/types/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/types.ts"],"names":[],"mappings":"AACA,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,SAAS;IACT,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;CACC,CAAA;AACV,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,aAAa;IACb,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,IAAI;IACJ,QAAQ;IACR,UAAU;CACF,CAAA;AAIV,MAAM,CAAC,MAAM,sBAAsB,GACjC,oDAAoD,CAAA;AACtD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAU,EAAoB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAA;AAC/E,MAAM,CAAC,MAAM,UAAU,GAA0B;IAC/C,WAAW,EAAE,aAAa;IAC1B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,aAAa;IACrB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,UAAU;CACrB,CAAA;AACD,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAA0B;IACpD,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,EAAE,EAAE,IAAI;IACR,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACrB,CAAA;AACD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,UAAsB,EAAS,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,aAAa,CAAA;AACvF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,EAAE,CAC5C,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAChF,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAA;AA4D/D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AA+CxG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,EAAE,CAC7C,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,CAAA;AAEtE,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CACxB,MAA8B,EAC9B,QAAkD;IAElD,MAAM,IAAI,GAAmB,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC7C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,MAAoB,EAAE,EAAE;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IACE,GAAG,CAAC,IAAI,KAAK,MAAM;gBACnB,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC;gBAC9B,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAEnF,GAAG,CAAC,SAAS,GAAG,MAAM,CAAA;QAC1B,CAAC;IACH,CAAC,CAAA;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAA;YAC1C,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,aAAa;gBACjF,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CACjC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAC1E,CAAA;YACD,IAAI,aAAa,EAAE,CAAC;gBAClB,mEAAmE;gBACnE,2EAA2E;gBAC3E,IAAI,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;gBACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CACzB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CACnG,CAAA;gBACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;oBAC9B,IAAI,CAAC,MAAM;wBAAE,SAAQ;oBACrB,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;wBAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAA;;wBACnF,MAAK;gBACZ,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI;oBAAE,aAAa,CAAC,IAAI,GAAG,SAAS,CAAA;gBAC9C,SAAQ;YACV,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GACP,KAAK,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,UAAU,KAAK,CAAC,GAAG,EAAE;YACrC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAA;QAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAA;iBACtD,IAAI,KAAK,CAAC,IAAI;gBAAE,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YAC/C,IAAI,KAAK,CAAC,KAAK;gBAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YAC7C,IAAI,KAAK,CAAC,MAAM;gBAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAiB;gBACxB,EAAE,EAAE,GAAG;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACxD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAA;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YACnB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,uFAAuF;IACvF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqF,CAAA;IAC3G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY;YAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAA;QAC7E,IACE,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,EAC1E,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAA;YAC3B,GAAG,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAiB,CAAA;QAC9D,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC9B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;IAC7E,IAAI,QAAQ;QAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IACxD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/lib/windows-account-bootstrap.ps1

@@ -0,0 +1,44 @@
+param(
+  [Parameter(Mandatory=$true)][string]$Directory,
+  [Parameter(Mandatory=$true)][string]$RuntimePath,
+  [Parameter(Mandatory=$true)][string]$LaunchPath,
+  [Parameter(Mandatory=$true)][string]$ArgumentsBase64
+)
+$ErrorActionPreference = 'Stop'
+# A console-subsystem root is necessary: Electron's GUI executable can attach
+# to a different parent console even with ELECTRON_RUN_AS_NODE. Do not run any
+# native CLI until this exact PowerShell root and its console belong to the Job.
+$pidFile=Join-Path $Directory 'pid'
+[System.IO.File]::WriteAllText(($pidFile+'.tmp'),[string]$PID)
+[System.IO.File]::Move(($pidFile+'.tmp'),$pidFile)
+[Console]::Out.Write(([char]27).ToString()+'[0m')
+$until=[DateTime]::UtcNow.AddSeconds(15)
+while (!(Test-Path -LiteralPath (Join-Path $Directory 'ready'))) {
+  if ([DateTime]::UtcNow -ge $until) { exit 1 }
+  Start-Sleep -Milliseconds 20
+}
+if (!(Test-Path -LiteralPath (Join-Path $Directory 'cancel')) -and !(Test-Path -LiteralPath (Join-Path $Directory 'stop'))) {
+  try {
+    # PowerShell's native pipeline may background a GUI executable or convert
+    # stderr to an error. Start the fixed helper without redirection and wait.
+    # Only fixed paths plus Base64 JSON are quoted here; CLI argv stays data.
+    $quote = { param([string]$Value) '"' + [regex]::Replace([regex]::Replace($Value, '(\\*)"', '$1$1\"'), '(\\+)$', '$1$1') + '"' }
+    $start = New-Object System.Diagnostics.ProcessStartInfo
+    $start.FileName = $RuntimePath
+    $start.Arguments = ((& $quote $LaunchPath), (& $quote $Directory), (& $quote $ArgumentsBase64)) -join ' '
+    $start.UseShellExecute = $false
+    $start.RedirectStandardInput = $false
+    $start.RedirectStandardOutput = $false
+    $start.RedirectStandardError = $false
+    $start.CreateNoWindow = $false
+    $runtime = [System.Diagnostics.Process]::Start($start)
+    try { $runtime.WaitForExit() } finally { $runtime.Dispose() }
+    if (!(Test-Path -LiteralPath (Join-Path $Directory 'exit'))) {
+      [System.IO.File]::WriteAllText((Join-Path $Directory 'exit'),'{"exitCode":1,"signal":null}')
+    }
+  } catch {
+    [System.IO.File]::WriteAllText((Join-Path $Directory 'exit'),'{"exitCode":1,"signal":null}')
+  }
+}
+# Host owns disposal, including native exit and startup cancellation paths.
+while ($true) { Start-Sleep -Milliseconds 1000 }

package/lib/windows-account-launch.mjs

@@ -0,0 +1,47 @@
+// Windows account PTY bootstrap. No native CLI runs until its process has been
+// assigned to the separate lifecycle Job owner; no task sandbox is applied.
+import { accountInput } from './windows-account-stdio.mjs'
+import { fileURLToPath } from 'node:url'
+import { spawnNativeProcess } from './native-spawn.mjs'
+import { writeFileSync, existsSync } from 'node:fs'
+import { join } from 'node:path'
+import { setTimeout as delay } from 'node:timers/promises'
+import { nativeLaunchArgv } from './native-launch.mjs'
+process.umask(0o077)
+const [directory, encoded] = process.argv.slice(2)
+let requested
+try { requested = JSON.parse(Buffer.from(encoded, 'base64').toString('utf8')) } catch { process.exit(1) }
+if (!directory || !Array.isArray(requested) || !requested.length || requested.some(value => typeof value !== 'string')) process.exit(1)
+// This exact plugin wrapper only sets umask and delegates an argv array. This
+// helper already does both; avoid another GUI runtime losing console stdin.
+if (requested[0] === process.execPath && requested[1] === fileURLToPath(new URL('./private-launch.mjs', import.meta.url)))
+  requested = requested.slice(2)
+const until = Date.now() + 15_000
+while (!existsSync(join(directory, 'ready'))) {
+  if (Date.now() >= until) process.exit(1)
+  await delay(20)
+}
+// Keep ConPTY alive after the native command exits so Host can dispose its
+// native worker before closing the entire Job. Only the exit code is exposed.
+setInterval(() => {}, 1000)
+const recordExit = (code, signal) => {
+  const exitCode = Number.isInteger(code) ? code : 1
+  writeFileSync(join(directory, 'exit'), JSON.stringify({ exitCode, signal: signal ?? null }), { mode: 0o600 })
+}
+if (!existsSync(join(directory, 'cancel')) && !existsSync(join(directory, 'stop'))) {
+  try {
+    const [executable, ...argv] = nativeLaunchArgv(requested)
+    // Node-based CLI account UIs also need their own Electron stdin restored.
+    // This fixed preload is scoped to that child, never NODE_OPTIONS or Host.
+    if (executable === process.execPath && process.versions.electron)
+      argv.unshift('--import', new URL('./windows-account-stdio.mjs', import.meta.url).href)
+    // Keep the existing ConPTY handles; a GUI-subsystem parent must not cause
+    // the native CLI to present an additional Windows console window.
+    const child = spawnNativeProcess(executable, argv, { env: process.env, stdio: [accountInput, 1, 2] })
+    child.once('error', () => { process.stderr.write('CLI launch failed\r\n') })
+    child.once('close', recordExit)
+  } catch {
+    process.stderr.write('CLI launch failed\r\n')
+    recordExit(1)
+  }
+}

package/lib/windows-account-owner.ps1

@@ -0,0 +1,137 @@
+param([Parameter(Mandatory=$true)][string]$Directory, [Parameter(Mandatory=$true)][int]$HostProcessId)
+$ErrorActionPreference = 'Stop'
+# Fixed process ownership only: no resource, privilege, network, or filesystem limits.
+Add-Type -TypeDefinition @'
+using System;
+using System.Diagnostics;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+public sealed class CwnAccountJob : IDisposable {
+ [StructLayout(LayoutKind.Sequential)] struct BasicLimits { public long ProcessTime, JobTime; public uint Flags; public UIntPtr MinWorking, MaxWorking; public uint ActiveLimit; public UIntPtr Affinity; public uint Priority, Scheduling; }
+ [StructLayout(LayoutKind.Sequential)] struct Io { public ulong ReadOps, WriteOps, OtherOps, ReadBytes, WriteBytes, OtherBytes; }
+ [StructLayout(LayoutKind.Sequential)] struct ExtendedLimits { public BasicLimits Basic; public Io Io; public UIntPtr ProcessMemory, JobMemory, PeakProcessMemory, PeakJobMemory; }
+ [StructLayout(LayoutKind.Sequential)] struct Accounting { public long User, Kernel, PeriodUser, PeriodKernel; public uint PageFaults, TotalProcesses, ActiveProcesses, TerminatedProcesses; }
+ [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr CreateJobObject(IntPtr attr, string name);
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool SetInformationJobObject(IntPtr job, int kind, ref ExtendedLimits limits, uint size);
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool QueryInformationJobObject(IntPtr job, int kind, out Accounting info, uint size, IntPtr length);
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool AssignProcessToJobObject(IntPtr job, IntPtr process);
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool TerminateJobObject(IntPtr job, uint code);
+ [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
+ [DllImport("kernel32.dll")] static extern bool FreeConsole();
+ [DllImport("kernel32.dll", SetLastError=true)] static extern bool AttachConsole(uint pid);
+ [DllImport("kernel32.dll")] static extern IntPtr GetConsoleWindow();
+ [DllImport("user32.dll", SetLastError=true)] static extern uint GetWindowThreadProcessId(IntPtr window, out uint pid);
+ [DllImport("kernel32.dll", CharSet=CharSet.Unicode, SetLastError=true)] static extern IntPtr GetModuleHandle(string name);
+ [DllImport("kernel32.dll", SetLastError=true)] static extern IntPtr GetProcAddress(IntPtr module, IntPtr ordinal);
+ [UnmanagedFunctionPointer(CallingConvention.Winapi)] delegate uint RealWindowOwner(IntPtr window);
+ IntPtr job; Process root;
+ public CwnAccountJob() { job=CreateJobObject(IntPtr.Zero,null); if(job==IntPtr.Zero) throw new Win32Exception(Marshal.GetLastWin32Error()); var l=new ExtendedLimits(); l.Basic.Flags=0x2000; if(!SetInformationJobObject(job,9,ref l,(uint)Marshal.SizeOf(l))) { var error=Marshal.GetLastWin32Error(); Dispose(); throw new Win32Exception(error); } }
+ public void Attach(int pid, DateTime receiptTime, DateTime earliest) { root=Process.GetProcessById(pid); var handle=root.Handle; var started=root.StartTime.ToUniversalTime(); if(started>receiptTime || started<earliest) throw new Exception("process identity changed"); if(!AssignProcessToJobObject(job,handle)) throw new Win32Exception(Marshal.GetLastWin32Error()); }
+ public static int ConsoleOwner(int pid) {
+  FreeConsole(); if(!AttachConsole((uint)pid)) throw new Win32Exception(Marshal.GetLastWin32Error());
+  try {
+   var window=GetConsoleWindow(); uint owner;
+   if(window==IntPtr.Zero || GetWindowThreadProcessId(window,out owner)==0 || owner==0) throw new Exception("console owner unavailable");
+   // Modern ConPTY gives its message-only window to the root client, not
+   // conhost: microsoft/terminal#14196. Resolve this same HWND's real owner
+   // using the maintainer's dynamic API from discussion #16447. The ordinal
+   // is not a stable public API; absence or an invalid result fails closed.
+   if(owner==(uint)pid) {
+    var module=GetModuleHandle("user32.dll");
+    var address=module==IntPtr.Zero?IntPtr.Zero:GetProcAddress(module,new IntPtr(2712));
+    if(address==IntPtr.Zero) throw new Exception("real console owner unavailable");
+    var getOwner=(RealWindowOwner)Marshal.GetDelegateForFunctionPointer(address,typeof(RealWindowOwner));
+    owner=getOwner(window);
+   }
+   if(owner==0 || owner>(uint)Int32.MaxValue || owner==(uint)pid) throw new Exception("console owner unavailable");
+   return (int)owner;
+  } finally { FreeConsole(); }
+ }
+ public string ConsoleIdentityReason { get; private set; }
+ public string ConsoleImageKind { get; private set; }
+ public bool ConsoleImageDevicePrefix { get; private set; }
+ public void AttachConsoleHost(int pid, DateTime latest, DateTime earliest) {
+  using(var p=Process.GetProcessById(pid)) {
+   var handle=p.Handle; var started=p.StartTime.ToUniversalTime();
+   var expected=System.IO.Path.Combine(Environment.GetFolderPath(Environment.SpecialFolder.System),"conhost.exe");
+   if(started>latest) { ConsoleIdentityReason="after-receipt"; throw new Exception("console identity changed"); }
+   if(started<earliest) { ConsoleIdentityReason="before-directory"; throw new Exception("console identity changed"); }
+   var image=p.MainModule.FileName; var leaf=System.IO.Path.GetFileName(image);
+   ConsoleImageKind=String.Equals(leaf,"conhost.exe",StringComparison.OrdinalIgnoreCase)?"conhost.exe":String.Equals(leaf,"openconsole.exe",StringComparison.OrdinalIgnoreCase)?"openconsole.exe":"other";
+   ConsoleImageDevicePrefix=image!=null && (image.StartsWith(@"\\?\") || image.StartsWith(@"\??\"));
+   if(!String.Equals(image,expected,StringComparison.OrdinalIgnoreCase)) { ConsoleIdentityReason="wrong-image"; throw new Exception("console identity changed"); }
+   if(!AssignProcessToJobObject(job,handle)) throw new Win32Exception(Marshal.GetLastWin32Error());
+  }
+ }
+ public bool RootExited { get { return root.HasExited; } }
+ public void Stop() { if(!TerminateJobObject(job,143)) throw new Win32Exception(Marshal.GetLastWin32Error()); }
+ public bool Empty { get { Accounting a; if(!QueryInformationJobObject(job,1,out a,(uint)Marshal.SizeOf(typeof(Accounting)),IntPtr.Zero)) throw new Win32Exception(Marshal.GetLastWin32Error()); return a.ActiveProcesses==0; } }
+ public void Dispose() { if(job!=IntPtr.Zero) { CloseHandle(job); job=IntPtr.Zero; } if(root!=null) root.Dispose(); }
+}
+'@
+$job=$null
+$stage='await-bootstrap'
+$consolePid=$null
+$consoleParentPid=$null
+try {
+  $earliest=[System.IO.Directory]::GetCreationTimeUtc($Directory).AddSeconds(-1)
+  $pidFile=Join-Path $Directory 'pid'
+  $stopFile=Join-Path $Directory 'stop'
+  [System.IO.File]::WriteAllText((Join-Path $Directory 'owner-ready'),'owner-ready')
+  $until=[DateTime]::UtcNow.AddSeconds(15)
+  while (!(Test-Path -LiteralPath $pidFile)) {
+    if ([DateTime]::UtcNow -ge $until) { throw 'bootstrap timeout' }
+    Start-Sleep -Milliseconds 20
+  }
+  $childPid=0
+  if (![int]::TryParse([System.IO.File]::ReadAllText($pidFile),[ref]$childPid) -or $childPid -le 0) { throw 'invalid bootstrap receipt' }
+  $stage='create-job'
+  $job=New-Object CwnAccountJob
+  $stage='attach-root'
+  $job.Attach($childPid,[System.IO.File]::GetLastWriteTimeUtc($pidFile),$earliest)
+  # The ConPTY console is a sibling of the bootstrap, created by the Host.
+  # Resolve it through this exact console, then validate parent and creation
+  # identity before adding it; never enumerate/kill processes by image name.
+  $stage='resolve-console'
+  $consolePid=[CwnAccountJob]::ConsoleOwner($childPid)
+  $stage='validate-console-parent'
+  $console=Get-CimInstance Win32_Process -Filter "ProcessId=$consolePid"
+  if ($null -ne $console) { $consoleParentPid=$console.ParentProcessId }
+  if ($null -eq $console -or $console.ParentProcessId -ne $HostProcessId) { throw 'console owner mismatch' }
+  $stage='attach-console'
+  $job.AttachConsoleHost($consolePid,[System.IO.File]::GetLastWriteTimeUtc($pidFile),$earliest)
+  $stage='await-stop'
+  [System.IO.File]::WriteAllText((Join-Path $Directory 'ready'),'ready')
+  while (!$job.RootExited -and !(Test-Path -LiteralPath $stopFile)) { Start-Sleep -Milliseconds 50 }
+  $stage='stop-job'
+  $job.Stop()
+  $stage='confirm-empty'
+  $until=[DateTime]::UtcNow.AddSeconds(8)
+  while (!$job.Empty) {
+    if ([DateTime]::UtcNow -ge $until) { throw 'empty receipt timeout' }
+    Start-Sleep -Milliseconds 20
+  }
+  [System.IO.File]::WriteAllText((Join-Path $Directory 'closed'),'closed')
+  exit 0
+} catch {
+  # Fixed stage and numeric metadata only; no exception text/argv/environment.
+  $failure=@{ stage=$stage; hostPid=$HostProcessId; ownerPid=$PID }
+  if ($null -ne $consolePid) { $failure.consolePid=$consolePid }
+  if ($null -ne $consoleParentPid) { $failure.consoleParentPid=$consoleParentPid }
+  if ($null -ne $job -and $job.ConsoleIdentityReason -in @('before-directory','after-receipt','wrong-image')) {
+    $failure.identityReason=$job.ConsoleIdentityReason
+    if ($job.ConsoleImageKind -in @('conhost.exe','openconsole.exe','other')) {
+      $failure.imageKind=$job.ConsoleImageKind
+      $failure.imageDevicePrefix=$job.ConsoleImageDevicePrefix
+    }
+  }
+  $errorObject=$_.Exception
+  while ($null -ne $errorObject) {
+    if ($errorObject -is [System.ComponentModel.Win32Exception]) { $failure.win32Code=$errorObject.NativeErrorCode; break }
+    $errorObject=$errorObject.InnerException
+  }
+  try { [System.IO.File]::WriteAllText((Join-Path $Directory 'failure'),($failure | ConvertTo-Json -Compress)) } catch {}
+  # Fixed classification only: never emit native exception/context/environment.
+  [Console]::Error.WriteLine('Windows account process ownership failed')
+  exit 2
+} finally { if ($null -ne $job) { $job.Dispose() } }

package/lib/windows-account-stdio.mjs

@@ -0,0 +1,19 @@
+// Imported only by the Windows account-terminal runtime and its Electron CLI
+// child. Electron attaches stdout/stderr to the parent console, but its GUI
+// executable can leave fd 0 mapped to NUL. Reopen this already-owned console;
+// do not redirect stdin for task processes or change the shared Host.
+import { openSync, closeSync } from 'node:fs'
+import { isatty, ReadStream } from 'node:tty'
+export let accountInput = 0
+if (process.platform === 'win32' && !isatty(0)) {
+  try {
+    accountInput = openSync('\\\\.\\CONIN$', 'r+')
+    if (!isatty(accountInput)) throw new Error('not a console')
+    const input = new ReadStream(accountInput)
+    Object.defineProperty(process, 'stdin', { value: input, configurable: true })
+    process.once('exit', () => { try { closeSync(accountInput) } catch {} })
+  } catch {
+    if (accountInput) { try { closeSync(accountInput) } catch {} }
+    throw new Error('Windows account console input unavailable')
+  }
+}

package/lib/windows-agy-account.ps1

@@ -0,0 +1,81 @@
+# Read only Antigravity's own native Windows credential. Never emit its blob.
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+try {
+  Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+public static class CwnAgyCredential {
+  [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Credential {
+    public uint Flags, Type;
+    public string TargetName, Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public uint CredentialBlobSize;
+    public IntPtr CredentialBlob;
+    public uint Persist, AttributeCount;
+    public IntPtr Attributes;
+    public string TargetAlias, UserName;
+  }
+  [DllImport("advapi32.dll", CharSet=CharSet.Unicode, SetLastError=true)]
+  static extern bool CredRead(string target, uint type, uint flags, out IntPtr value);
+  [DllImport("advapi32.dll")] static extern void CredFree(IntPtr value);
+  public static string Read() {
+    IntPtr value;
+    if (!CredRead("gemini:antigravity", 1, 0, out value)) {
+      if (Marshal.GetLastWin32Error() == 1168) return null;
+      throw new Exception("Credential store unavailable");
+    }
+    byte[] bytes = null;
+    try {
+      var credential = (Credential)Marshal.PtrToStructure(value, typeof(Credential));
+      if (credential.CredentialBlobSize > 65536) throw new Exception("Invalid credential");
+      bytes = new byte[credential.CredentialBlobSize];
+      Marshal.Copy(credential.CredentialBlob, bytes, 0, bytes.Length);
+      return bytes.Length > 1 && bytes[1] == 0
+        ? new UnicodeEncoding(false, false, true).GetString(bytes)
+        : new UTF8Encoding(false, true).GetString(bytes);
+    } finally {
+      if (bytes != null) Array.Clear(bytes, 0, bytes.Length);
+      CredFree(value);
+    }
+  }
+}
+'@
+  $raw = [CwnAgyCredential]::Read()
+  if ($null -eq $raw) { @{ state = 'unconfigured' } | ConvertTo-Json -Compress; exit 0 }
+  $account = $raw | ConvertFrom-Json
+  $raw = $null
+  if ($account.auth_method -ne 'consumer' -or -not $account.token) {
+    @{ state = 'unknown' } | ConvertTo-Json -Compress; exit 0
+  }
+  $active = $false
+  if ($account.token.access_token -is [string] -and $account.token.access_token.Trim()) {
+    try { $active = [DateTimeOffset]::Parse($account.token.expiry) -gt [DateTimeOffset]::UtcNow } catch {}
+  }
+  $refreshable = $account.token.refresh_token -is [string] -and $account.token.refresh_token.Trim().Length -gt 0
+  if (-not $active -and -not $refreshable) {
+    @{ state = 'unauthenticated' } | ConvertTo-Json -Compress; exit 0
+  }
+  $result = @{ state = 'authenticated' }
+  if ($account.id_token -is [string] -and $account.id_token.Length -le 32768 -and $account.id_token -match '^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$') {
+    $encoded = $account.id_token.Split('.')[1].Replace('-','+').Replace('_','/')
+    $encoded = $encoded.PadRight($encoded.Length + ((4 - $encoded.Length % 4) % 4), '=')
+    $bytes = [Convert]::FromBase64String($encoded)
+    try { $claims = [Text.Encoding]::UTF8.GetString($bytes) | ConvertFrom-Json }
+    finally { [Array]::Clear($bytes, 0, $bytes.Length) }
+    if ($claims.iss -in @('accounts.google.com', 'https://accounts.google.com') -and $claims.sub -is [string] -and $claims.sub -match '^[A-Za-z0-9_-]{6,128}$') {
+      $hash = [Security.Cryptography.SHA256]::Create()
+      $principal = [Text.Encoding]::UTF8.GetBytes('google:' + $claims.sub)
+      try { $result.principalHash = ([BitConverter]::ToString($hash.ComputeHash($principal))).Replace('-','').ToLowerInvariant() }
+      finally { [Array]::Clear($principal, 0, $principal.Length); $hash.Dispose() }
+      if ($claims.email -is [string] -and $claims.email.Length -le 254 -and $claims.email -match '^[^\s<>@]+@[^\s<>@]+\.[^\s<>@]+$') { $result.email = $claims.email }
+    }
+  }
+  $account = $null; $claims = $null
+  $result | ConvertTo-Json -Compress
+} catch {
+  # Neither exception strings nor credential fragments cross the process boundary.
+  @{ state = 'unavailable' } | ConvertTo-Json -Compress
+  exit 1
+}

package/lib/windows-hidden-launch.mjs

@@ -0,0 +1,49 @@
+// A GUI-subsystem Electron root avoids Windows Terminal's console delegation.
+// The enclosing Harness Job still owns this root and every native descendant.
+import { Socket } from 'node:net'
+import { forwardNativeStdio, spawnNativeProcess } from './native-spawn.mjs'
+
+// Pinned Harness 0.2.0-rc.2 public control contract. This helper must remain
+// self-contained: an ordinary child does not use the Host's SDK module loader.
+const marker = process.env.DSH_SUBPROCESS_CONTROL
+delete process.env.DSH_SUBPROCESS_CONTROL
+if (marker !== 'pipe') throw new Error('Windows background control channel is unavailable')
+const control = new Socket({ fd: 7, readable: true, writable: true, allowHalfOpen: true })
+let child, sent = false
+function receipt(value) {
+  if (sent) return
+  sent = true
+  control.end(JSON.stringify(value) + '\n', () => control.destroy())
+}
+control.on('error', () => {
+  child?.kill('SIGTERM')
+  process.exitCode = 1
+})
+try {
+  const [encoded, executable, ...argv] = process.argv.slice(2)
+  const restore = JSON.parse(encoded)
+  if (!restore || !Object.hasOwn(restore, 'nodeEnv') ||
+      (restore.nodeEnv !== null && typeof restore.nodeEnv !== 'string') || !executable)
+    throw new Error('Invalid fixed bootstrap arguments')
+  if (restore.privateUmask === true) process.umask(0o077)
+  // ELECTRON_RUN_AS_NODE belongs only to this GUI bootstrap. Preserve the
+  // original target environment, including an explicit deletion of that value.
+  const env = { ...process.env }
+  for (const key of Object.keys(env))
+    if (key.toUpperCase() === 'ELECTRON_RUN_AS_NODE') delete env[key]
+  if (restore.nodeEnv !== null) env.ELECTRON_RUN_AS_NODE = restore.nodeEnv
+  child = spawnNativeProcess(executable, argv, { env, stdio: ['pipe', 'pipe', 'pipe'], detached: false })
+  forwardNativeStdio(child)
+  child.once('error', error => receipt({
+    kind: 'spawn-error',
+    code: ['ENOENT', 'EACCES', 'ENOEXEC', 'EINVAL'].includes(error.code) ? error.code : 'UNKNOWN',
+  }))
+  // A descendant may keep these pipes open after the native parent exits.
+  // Report its actual exit now; keep forwarding bytes until the pipes close.
+  // The Host's original Job remains responsible for the entire process range.
+  child.once('exit', (exitCode, signal) => receipt({ kind: 'exit', exitCode, signal }))
+  for (const signal of ['SIGTERM', 'SIGINT'])
+    process.on(signal, () => child.kill(signal))
+} catch {
+  receipt({ kind: 'spawn-error', code: 'UNKNOWN' })
+}