livedesk 0.1.593 → 0.1.595

package/electron/electron-builder.win-dev.yml

@@ -1,5 +1,5 @@
 extends: file:packages/livedesk/electron/electron-builder.win.yml
-artifactName: VuvoDesk-${version}-dev-${arch}.${ext}
+artifactName: VuvoDesk-${version}-dev-${arch}.${ext}
 directories:
   output: dist/desktop-dev
 extraMetadata:

package/electron/icon.svg

@@ -1,11 +1,11 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024" fill="none">
-  <rect x="24" y="24" width="976" height="976" rx="220" fill="#111827"/>
-  <g transform="translate(192 192) scale(22.8571428571)">
-    <rect x="2.5" y="4" width="14" height="9" rx="1.5" stroke="#F8FAFC" stroke-width="1.7" opacity="0.42"/>
-    <path d="M7 16v1.5h5" stroke="#F8FAFC" stroke-width="1.7" stroke-linecap="round" opacity="0.42"/>
-    <rect x="10.5" y="2.5" width="14" height="9" rx="1.5" stroke="#F8FAFC" stroke-width="1.7" opacity="0.62"/>
-    <path d="M15 14.5V16h5" stroke="#F8FAFC" stroke-width="1.7" stroke-linecap="round" opacity="0.62"/>
-    <rect x="6.5" y="8.5" width="15" height="10" rx="1.7" fill="#F8FAFC" fill-opacity="0.12" stroke="#F8FAFC" stroke-width="1.9"/>
-    <path d="M12 21v1.5H9.5M16 21v1.5h2.5M9.5 22.5h9" stroke="#F8FAFC" stroke-width="1.9" stroke-linecap="round"/>
-  </g>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="1024" height="1024" viewBox="0 0 1024 1024" fill="none">
+  <rect x="24" y="24" width="976" height="976" rx="220" fill="#111827"/>
+  <g transform="translate(192 192) scale(22.8571428571)">
+    <rect x="2.5" y="4" width="14" height="9" rx="1.5" stroke="#F8FAFC" stroke-width="1.7" opacity="0.42"/>
+    <path d="M7 16v1.5h5" stroke="#F8FAFC" stroke-width="1.7" stroke-linecap="round" opacity="0.42"/>
+    <rect x="10.5" y="2.5" width="14" height="9" rx="1.5" stroke="#F8FAFC" stroke-width="1.7" opacity="0.62"/>
+    <path d="M15 14.5V16h5" stroke="#F8FAFC" stroke-width="1.7" stroke-linecap="round" opacity="0.62"/>
+    <rect x="6.5" y="8.5" width="15" height="10" rx="1.7" fill="#F8FAFC" fill-opacity="0.12" stroke="#F8FAFC" stroke-width="1.9"/>
+    <path d="M12 21v1.5H9.5M16 21v1.5h2.5M9.5 22.5h9" stroke="#F8FAFC" stroke-width="1.9" stroke-linecap="round"/>
+  </g>
+</svg>

package/electron/main.mjs

@@ -53,8 +53,8 @@ import { createDesktopClipboardOwner } from './desktop-clipboard-owner.mjs';
 // warm-idle process baseline instead of retaining a hidden utility process.
 app.commandLine.appendSwitch('disable-features', 'AudioServiceOutOfProcess');
 
-const APP_NAME = 'VuvoDesk Desktop';
-const DESKTOP_STARTUP_ENTRY_NAME = 'LiveDesk Desktop';
+const APP_NAME = 'VuvoDesk Desktop';
+const DESKTOP_STARTUP_ENTRY_NAME = 'LiveDesk Desktop';
 const appWindowTitle = () => `${APP_NAME} · ${app.getVersion()}`;
 const LOCAL_RUNTIME_PORT = Number(process.env.LIVEDESK_LOCAL_RUNTIME_PORT || 5179);
 const LOCAL_RUNTIME_URL = `http://127.0.0.1:${Number.isInteger(LOCAL_RUNTIME_PORT) && LOCAL_RUNTIME_PORT > 0 ? LOCAL_RUNTIME_PORT : 5179}/`;
@@ -78,11 +78,11 @@ const SUPABASE_URL = DESKTOP_AUTH_CONFIG.supabaseUrl;
 const SUPABASE_PUBLISHABLE_KEY = DESKTOP_AUTH_CONFIG.publishableKey;
 const OAUTH_REDIRECT_URI = DESKTOP_AUTH_CONFIG.oauthRedirectUri;
 const OAUTH_PENDING_TTL_MS = 10 * 60 * 1000;
-const LEGACY_STARTUP_ENTRY_NAMES = ['LiveDesk Client.vbs', 'LiveDesk Client.cmd', 'LiveDesk Desktop.vbs'];
+const LEGACY_STARTUP_ENTRY_NAMES = ['LiveDesk Client.vbs', 'LiveDesk Client.cmd', 'LiveDesk Desktop.vbs'];
 const configuredStateRoot = process.env.LIVEDESK_DESKTOP_STATE_DIR || process.env.LIVEDESK_STATE_DIR || '';
 const stateRoot = configuredStateRoot
   ? resolve(configuredStateRoot)
-  : join(process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local'), 'LiveDesk');
+  : join(process.env.LOCALAPPDATA || join(homedir(), 'AppData', 'Local'), 'LiveDesk');
 const logDir = join(stateRoot, 'logs');
 const logPath = join(logDir, 'desktop.log');
 const authSessionPath = join(stateRoot, 'auth-session.json');
@@ -1187,7 +1187,7 @@ function createTray() {
     { label: 'About VuvoDesk', click: () => { void dialog.showMessageBox(mainWindow, { type: 'info', title: APP_NAME, message: APP_NAME, detail: `Version ${app.getVersion()}\nOne VuvoDesk runtime with Hub and Client roles.` }); } },
     { label: 'Open logs', click: () => { void shell.openPath(logDir); } },
     { type: 'separator' },
-    { label: 'Start with Windows', type: 'checkbox', checked: app.getLoginItemSettings().openAtLogin, click: item => app.setLoginItemSettings({ openAtLogin: item.checked, name: DESKTOP_STARTUP_ENTRY_NAME }) },
+    { label: 'Start with Windows', type: 'checkbox', checked: app.getLoginItemSettings().openAtLogin, click: item => app.setLoginItemSettings({ openAtLogin: item.checked, name: DESKTOP_STARTUP_ENTRY_NAME }) },
     { label: 'Quit VuvoDesk', click: () => { app.quit(); } }
   ]);
   tray.setContextMenu(menu);

package/electron/runtime-process-owner.mjs

@@ -1,287 +1,287 @@
-export const DEFAULT_RUNTIME_STOP_TIMEOUT_MS = 12_000;
-export const DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS = 4_000;
-export const DEFAULT_RUNTIME_COOPERATIVE_REQUEST_MS = 1_000;
-export const DEFAULT_RUNTIME_TREE_POLL_MS = 50;
-
-let runtimeStopOwnerSequence = 0;
-
-function positiveInteger(value, fallback = 0) {
-  const number = Number(value);
-  return Number.isInteger(number) && number > 0 ? number : fallback;
-}
-
-function currentTime(now) {
-  return Number(typeof now === 'function' ? now() : Date.now());
-}
-
-function childHasExited(child) {
-  return (child?.exitCode !== null && child?.exitCode !== undefined)
-    || (child?.signalCode !== null && child?.signalCode !== undefined);
-}
-
-/**
- * Bind an intentional stop to one immutable ChildProcess owner. The marker is
- * deliberately stored on the child rather than in supervisor-global state so
- * a late terminal event from an old runtime cannot suppress recovery for its
- * replacement.
- */
-export function claimRuntimeIntentionalStop(child, token = '') {
-  if (!child || typeof child !== 'object') {
-    throw new TypeError('claimRuntimeIntentionalStop requires a runtime child.');
-  }
-  if (child.livedeskRuntimeIntentionalStopOwner) {
-    return child.livedeskRuntimeIntentionalStopOwner;
-  }
-  runtimeStopOwnerSequence += 1;
-  const owner = Object.freeze({
-    token: String(token || `runtime-stop-${positiveInteger(child.pid)}-${runtimeStopOwnerSequence}`)
-  });
-  Object.defineProperty(child, 'livedeskRuntimeIntentionalStopOwner', {
-    value: owner,
-    enumerable: false,
-    configurable: false,
-    writable: false
-  });
-  return owner;
-}
-
-export function hasRuntimeIntentionalStop(child) {
-  return Boolean(child?.livedeskRuntimeIntentionalStopOwner?.token);
-}
-
-export function shouldRestartOwnedRuntimeAfterExit(child, {
-  isQuitting = false
-} = {}) {
-  return !isQuitting && !hasRuntimeIntentionalStop(child);
-}
-
-/**
- * Install exactly one descendant-drain operation for a child. Concurrent
- * stop, terminal-event, quit, and update paths receive the same promise and
- * the first absolute deadline. A rejected bounded attempt is removed so an
- * explicit later retry can make another bounded attempt without allowing a
- * replacement in between.
- */
-export function getOrCreateRuntimeDrainPromise(child, {
-  deadline,
-  drain
-} = {}) {
-  if (!child || typeof child !== 'object') {
-    throw new TypeError('getOrCreateRuntimeDrainPromise requires a runtime child.');
-  }
-  if (typeof drain !== 'function') {
-    throw new TypeError('getOrCreateRuntimeDrainPromise requires a drain operation.');
-  }
-  if (child.livedeskRuntimeTreeDrainPromise) {
-    return child.livedeskRuntimeTreeDrainPromise;
-  }
-  const boundDeadline = Number(deadline || 0);
-  if (!Number.isFinite(boundDeadline) || boundDeadline <= 0) {
-    throw new TypeError('getOrCreateRuntimeDrainPromise requires an absolute deadline.');
-  }
-  child.livedeskRuntimeTreeDrainDeadline = boundDeadline;
-  const operation = Promise.resolve().then(() => drain(boundDeadline));
-  child.livedeskRuntimeTreeDrainPromise = operation;
-  operation.catch(() => {
-    if (child.livedeskRuntimeTreeDrainPromise === operation) {
-      child.livedeskRuntimeTreeDrainPromise = null;
-      child.livedeskRuntimeTreeDrainDeadline = 0;
-    }
-  });
-  return operation;
-}
-
-export function remainingRuntimeDeadlineMs(deadline, now = Date.now) {
-  return Math.max(0, Number(deadline || 0) - currentTime(now));
-}
-
-export function isOwnedUnixRuntimeGroupAlive(
-  child,
-  platform = process.platform,
-  signalProcess = (pid, signal) => process.kill(pid, signal)
-) {
-  const processId = positiveInteger(child?.pid);
-  if (platform === 'win32'
-    || child?.livedeskOwnsProcessGroup !== true
-    || processId <= 1) {
-    return false;
-  }
-  try {
-    signalProcess(-processId, 0);
-    return true;
-  } catch (error) {
-    if (error?.code === 'ESRCH') return false;
-    // EPERM proves that the process group still exists. Every other inspection
-    // failure is unknown and therefore remains fail-closed.
-    return true;
-  }
-}
-
-export function signalOwnedRuntimeTree(
-  child,
-  signal,
-  platform = process.platform,
-  signalProcess = (pid, requestedSignal) => process.kill(pid, requestedSignal)
-) {
-  const processId = positiveInteger(child?.pid);
-  if (platform !== 'win32'
-    && child?.livedeskOwnsProcessGroup === true
-    && processId > 1) {
-    try {
-      signalProcess(-processId, signal);
-      return true;
-    } catch (error) {
-      if (error?.code === 'ESRCH') return false;
-      throw error;
-    }
-  }
-  if (!child || childHasExited(child)) return false;
-  child.kill(signal);
-  return true;
-}
-
-export async function waitForOwnedRuntimeTreeExit(child, {
-  deadline,
-  platform = process.platform,
-  now = Date.now,
-  wait = milliseconds => new Promise(resolveWait => setTimeout(resolveWait, milliseconds)),
-  pollMs = DEFAULT_RUNTIME_TREE_POLL_MS,
-  signalProcess = (pid, signal) => process.kill(pid, signal)
-} = {}) {
-  const treeIsStopped = () => {
-    const rootStopped = childHasExited(child);
-    if (platform === 'win32' || child?.livedeskOwnsProcessGroup !== true) {
-      return rootStopped;
-    }
-    return rootStopped && !isOwnedUnixRuntimeGroupAlive(child, platform, signalProcess);
-  };
-  if (treeIsStopped()) return true;
-  const boundedPollMs = Math.max(10, positiveInteger(pollMs, DEFAULT_RUNTIME_TREE_POLL_MS));
-  while (remainingRuntimeDeadlineMs(deadline, now) > 0) {
-    await wait(Math.min(boundedPollMs, remainingRuntimeDeadlineMs(deadline, now)));
-    if (treeIsStopped()) return true;
-  }
-  return treeIsStopped();
-}
-
-export async function terminateOwnedUnixRuntimeTree(child, {
-  deadline,
-  platform = process.platform,
-  now = Date.now,
-  wait,
-  pollMs = DEFAULT_RUNTIME_TREE_POLL_MS,
-  forcedCleanupReserveMs = DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS,
-  signalProcess = (pid, signal) => process.kill(pid, signal)
-} = {}) {
-  if (platform === 'win32') {
-    throw new Error('terminateOwnedUnixRuntimeTree cannot own a Windows process tree.');
-  }
-  const waitOptions = { deadline, platform, now, wait, pollMs, signalProcess };
-  if (await waitForOwnedRuntimeTreeExit(child, {
-    ...waitOptions,
-    deadline: currentTime(now)
-  })) {
-    return true;
-  }
-
-  try {
-    signalOwnedRuntimeTree(child, 'SIGTERM', platform, signalProcess);
-  } catch {
-    // The exact group may reject TERM transiently. KILL still owns the bounded
-    // terminal fallback below.
-  }
-  const remainingAtTerm = remainingRuntimeDeadlineMs(deadline, now);
-  const reserveMs = Math.min(
-    Math.max(100, positiveInteger(
-      forcedCleanupReserveMs,
-      DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS
-    )),
-    Math.max(100, Math.floor(remainingAtTerm / 2))
-  );
-  const gracefulDeadline = Math.max(
-    currentTime(now),
-    Number(deadline || 0) - reserveMs
-  );
-  if (await waitForOwnedRuntimeTreeExit(child, {
-    ...waitOptions,
-    deadline: gracefulDeadline
-  })) {
-    return true;
-  }
-
-  try {
-    signalOwnedRuntimeTree(child, 'SIGKILL', platform, signalProcess);
-  } catch {
-    // Absence proof below remains authoritative. A rejected KILL is never
-    // reported as successful merely because the signal call returned.
-  }
-  return waitForOwnedRuntimeTreeExit(child, waitOptions);
-}
-
-export async function waitForPromiseBeforeDeadline(
-  promise,
-  deadline,
-  label = 'runtime-shutdown-deadline',
-  now = Date.now
-) {
-  const remainingMs = remainingRuntimeDeadlineMs(deadline, now);
-  if (remainingMs <= 0) {
-    throw new Error(label);
-  }
-  let timer;
-  const timeout = new Promise((_, reject) => {
-    timer = setTimeout(() => reject(new Error(label)), remainingMs);
-  });
-  try {
-    return await Promise.race([Promise.resolve(promise), timeout]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-
-export async function fetchBeforeRuntimeDeadline(
-  fetchImpl,
-  url,
-  init,
-  {
-    deadline,
-    maxDurationMs = DEFAULT_RUNTIME_COOPERATIVE_REQUEST_MS,
-    now = Date.now,
-    label = 'runtime-shutdown-http-deadline',
-    consumeResponse = null
-  } = {}
-) {
-  if (typeof fetchImpl !== 'function') {
-    throw new TypeError('fetchBeforeRuntimeDeadline requires fetch.');
-  }
-  const remainingMs = remainingRuntimeDeadlineMs(deadline, now);
-  if (remainingMs <= 0) throw new Error(label);
-  const durationMs = Math.max(
-    1,
-    Math.min(remainingMs, positiveInteger(maxDurationMs, remainingMs))
-  );
-  const controller = new AbortController();
-  const upstreamSignal = init?.signal;
-  const forwardAbort = () => controller.abort(upstreamSignal?.reason);
-  if (upstreamSignal?.aborted) {
-    forwardAbort();
-  } else {
-    upstreamSignal?.addEventListener?.('abort', forwardAbort, { once: true });
-  }
-  const timer = setTimeout(
-    () => controller.abort(new Error(label)),
-    durationMs
-  );
-  try {
-    const response = await fetchImpl(
-      url,
-      { ...(init || {}), signal: controller.signal }
-    );
-    return typeof consumeResponse === 'function'
-      ? await consumeResponse(response)
-      : response;
-  } finally {
-    clearTimeout(timer);
-    upstreamSignal?.removeEventListener?.('abort', forwardAbort);
-  }
-}
+export const DEFAULT_RUNTIME_STOP_TIMEOUT_MS = 12_000;
+export const DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS = 4_000;
+export const DEFAULT_RUNTIME_COOPERATIVE_REQUEST_MS = 1_000;
+export const DEFAULT_RUNTIME_TREE_POLL_MS = 50;
+
+let runtimeStopOwnerSequence = 0;
+
+function positiveInteger(value, fallback = 0) {
+  const number = Number(value);
+  return Number.isInteger(number) && number > 0 ? number : fallback;
+}
+
+function currentTime(now) {
+  return Number(typeof now === 'function' ? now() : Date.now());
+}
+
+function childHasExited(child) {
+  return (child?.exitCode !== null && child?.exitCode !== undefined)
+    || (child?.signalCode !== null && child?.signalCode !== undefined);
+}
+
+/**
+ * Bind an intentional stop to one immutable ChildProcess owner. The marker is
+ * deliberately stored on the child rather than in supervisor-global state so
+ * a late terminal event from an old runtime cannot suppress recovery for its
+ * replacement.
+ */
+export function claimRuntimeIntentionalStop(child, token = '') {
+  if (!child || typeof child !== 'object') {
+    throw new TypeError('claimRuntimeIntentionalStop requires a runtime child.');
+  }
+  if (child.livedeskRuntimeIntentionalStopOwner) {
+    return child.livedeskRuntimeIntentionalStopOwner;
+  }
+  runtimeStopOwnerSequence += 1;
+  const owner = Object.freeze({
+    token: String(token || `runtime-stop-${positiveInteger(child.pid)}-${runtimeStopOwnerSequence}`)
+  });
+  Object.defineProperty(child, 'livedeskRuntimeIntentionalStopOwner', {
+    value: owner,
+    enumerable: false,
+    configurable: false,
+    writable: false
+  });
+  return owner;
+}
+
+export function hasRuntimeIntentionalStop(child) {
+  return Boolean(child?.livedeskRuntimeIntentionalStopOwner?.token);
+}
+
+export function shouldRestartOwnedRuntimeAfterExit(child, {
+  isQuitting = false
+} = {}) {
+  return !isQuitting && !hasRuntimeIntentionalStop(child);
+}
+
+/**
+ * Install exactly one descendant-drain operation for a child. Concurrent
+ * stop, terminal-event, quit, and update paths receive the same promise and
+ * the first absolute deadline. A rejected bounded attempt is removed so an
+ * explicit later retry can make another bounded attempt without allowing a
+ * replacement in between.
+ */
+export function getOrCreateRuntimeDrainPromise(child, {
+  deadline,
+  drain
+} = {}) {
+  if (!child || typeof child !== 'object') {
+    throw new TypeError('getOrCreateRuntimeDrainPromise requires a runtime child.');
+  }
+  if (typeof drain !== 'function') {
+    throw new TypeError('getOrCreateRuntimeDrainPromise requires a drain operation.');
+  }
+  if (child.livedeskRuntimeTreeDrainPromise) {
+    return child.livedeskRuntimeTreeDrainPromise;
+  }
+  const boundDeadline = Number(deadline || 0);
+  if (!Number.isFinite(boundDeadline) || boundDeadline <= 0) {
+    throw new TypeError('getOrCreateRuntimeDrainPromise requires an absolute deadline.');
+  }
+  child.livedeskRuntimeTreeDrainDeadline = boundDeadline;
+  const operation = Promise.resolve().then(() => drain(boundDeadline));
+  child.livedeskRuntimeTreeDrainPromise = operation;
+  operation.catch(() => {
+    if (child.livedeskRuntimeTreeDrainPromise === operation) {
+      child.livedeskRuntimeTreeDrainPromise = null;
+      child.livedeskRuntimeTreeDrainDeadline = 0;
+    }
+  });
+  return operation;
+}
+
+export function remainingRuntimeDeadlineMs(deadline, now = Date.now) {
+  return Math.max(0, Number(deadline || 0) - currentTime(now));
+}
+
+export function isOwnedUnixRuntimeGroupAlive(
+  child,
+  platform = process.platform,
+  signalProcess = (pid, signal) => process.kill(pid, signal)
+) {
+  const processId = positiveInteger(child?.pid);
+  if (platform === 'win32'
+    || child?.livedeskOwnsProcessGroup !== true
+    || processId <= 1) {
+    return false;
+  }
+  try {
+    signalProcess(-processId, 0);
+    return true;
+  } catch (error) {
+    if (error?.code === 'ESRCH') return false;
+    // EPERM proves that the process group still exists. Every other inspection
+    // failure is unknown and therefore remains fail-closed.
+    return true;
+  }
+}
+
+export function signalOwnedRuntimeTree(
+  child,
+  signal,
+  platform = process.platform,
+  signalProcess = (pid, requestedSignal) => process.kill(pid, requestedSignal)
+) {
+  const processId = positiveInteger(child?.pid);
+  if (platform !== 'win32'
+    && child?.livedeskOwnsProcessGroup === true
+    && processId > 1) {
+    try {
+      signalProcess(-processId, signal);
+      return true;
+    } catch (error) {
+      if (error?.code === 'ESRCH') return false;
+      throw error;
+    }
+  }
+  if (!child || childHasExited(child)) return false;
+  child.kill(signal);
+  return true;
+}
+
+export async function waitForOwnedRuntimeTreeExit(child, {
+  deadline,
+  platform = process.platform,
+  now = Date.now,
+  wait = milliseconds => new Promise(resolveWait => setTimeout(resolveWait, milliseconds)),
+  pollMs = DEFAULT_RUNTIME_TREE_POLL_MS,
+  signalProcess = (pid, signal) => process.kill(pid, signal)
+} = {}) {
+  const treeIsStopped = () => {
+    const rootStopped = childHasExited(child);
+    if (platform === 'win32' || child?.livedeskOwnsProcessGroup !== true) {
+      return rootStopped;
+    }
+    return rootStopped && !isOwnedUnixRuntimeGroupAlive(child, platform, signalProcess);
+  };
+  if (treeIsStopped()) return true;
+  const boundedPollMs = Math.max(10, positiveInteger(pollMs, DEFAULT_RUNTIME_TREE_POLL_MS));
+  while (remainingRuntimeDeadlineMs(deadline, now) > 0) {
+    await wait(Math.min(boundedPollMs, remainingRuntimeDeadlineMs(deadline, now)));
+    if (treeIsStopped()) return true;
+  }
+  return treeIsStopped();
+}
+
+export async function terminateOwnedUnixRuntimeTree(child, {
+  deadline,
+  platform = process.platform,
+  now = Date.now,
+  wait,
+  pollMs = DEFAULT_RUNTIME_TREE_POLL_MS,
+  forcedCleanupReserveMs = DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS,
+  signalProcess = (pid, signal) => process.kill(pid, signal)
+} = {}) {
+  if (platform === 'win32') {
+    throw new Error('terminateOwnedUnixRuntimeTree cannot own a Windows process tree.');
+  }
+  const waitOptions = { deadline, platform, now, wait, pollMs, signalProcess };
+  if (await waitForOwnedRuntimeTreeExit(child, {
+    ...waitOptions,
+    deadline: currentTime(now)
+  })) {
+    return true;
+  }
+
+  try {
+    signalOwnedRuntimeTree(child, 'SIGTERM', platform, signalProcess);
+  } catch {
+    // The exact group may reject TERM transiently. KILL still owns the bounded
+    // terminal fallback below.
+  }
+  const remainingAtTerm = remainingRuntimeDeadlineMs(deadline, now);
+  const reserveMs = Math.min(
+    Math.max(100, positiveInteger(
+      forcedCleanupReserveMs,
+      DEFAULT_RUNTIME_FORCED_CLEANUP_RESERVE_MS
+    )),
+    Math.max(100, Math.floor(remainingAtTerm / 2))
+  );
+  const gracefulDeadline = Math.max(
+    currentTime(now),
+    Number(deadline || 0) - reserveMs
+  );
+  if (await waitForOwnedRuntimeTreeExit(child, {
+    ...waitOptions,
+    deadline: gracefulDeadline
+  })) {
+    return true;
+  }
+
+  try {
+    signalOwnedRuntimeTree(child, 'SIGKILL', platform, signalProcess);
+  } catch {
+    // Absence proof below remains authoritative. A rejected KILL is never
+    // reported as successful merely because the signal call returned.
+  }
+  return waitForOwnedRuntimeTreeExit(child, waitOptions);
+}
+
+export async function waitForPromiseBeforeDeadline(
+  promise,
+  deadline,
+  label = 'runtime-shutdown-deadline',
+  now = Date.now
+) {
+  const remainingMs = remainingRuntimeDeadlineMs(deadline, now);
+  if (remainingMs <= 0) {
+    throw new Error(label);
+  }
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new Error(label)), remainingMs);
+  });
+  try {
+    return await Promise.race([Promise.resolve(promise), timeout]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+export async function fetchBeforeRuntimeDeadline(
+  fetchImpl,
+  url,
+  init,
+  {
+    deadline,
+    maxDurationMs = DEFAULT_RUNTIME_COOPERATIVE_REQUEST_MS,
+    now = Date.now,
+    label = 'runtime-shutdown-http-deadline',
+    consumeResponse = null
+  } = {}
+) {
+  if (typeof fetchImpl !== 'function') {
+    throw new TypeError('fetchBeforeRuntimeDeadline requires fetch.');
+  }
+  const remainingMs = remainingRuntimeDeadlineMs(deadline, now);
+  if (remainingMs <= 0) throw new Error(label);
+  const durationMs = Math.max(
+    1,
+    Math.min(remainingMs, positiveInteger(maxDurationMs, remainingMs))
+  );
+  const controller = new AbortController();
+  const upstreamSignal = init?.signal;
+  const forwardAbort = () => controller.abort(upstreamSignal?.reason);
+  if (upstreamSignal?.aborted) {
+    forwardAbort();
+  } else {
+    upstreamSignal?.addEventListener?.('abort', forwardAbort, { once: true });
+  }
+  const timer = setTimeout(
+    () => controller.abort(new Error(label)),
+    durationMs
+  );
+  try {
+    const response = await fetchImpl(
+      url,
+      { ...(init || {}), signal: controller.signal }
+    );
+    return typeof consumeResponse === 'function'
+      ? await consumeResponse(response)
+      : response;
+  } finally {
+    clearTimeout(timer);
+    upstreamSignal?.removeEventListener?.('abort', forwardAbort);
+  }
+}

package/hub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.50",
+  "version": "0.1.50",
   "description": "VuvoDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@ffmpeg-installer/ffmpeg": "^1.1.0",
-    "@livedesk/runtime-core": "0.1.6",
+    "@livedesk/runtime-core": "0.1.6",
     "@openai/codex-sdk": "0.145.0",
     "cors": "^2.8.5",
     "express": "^4.21.2",