local-commander-agent-linux-x64 0.3.47 → 0.3.49

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent-linux-x64",
-  "version": "0.3.47",
+  "version": "0.3.49",
   "description": "Local Commander runtime for Linux x64. Installed automatically by local-commander-agent; run npx local-commander-agent@latest instead.",
   "os": [
     "linux"

package/runtime/agent.mjs

@@ -27945,11 +27945,16 @@ var WindowsPrivateStore = class _WindowsPrivateStore {
     if (process.platform !== "win32") for (const name2 of ["owner-key.json", "owner-key.dat", "owner-key.lock"]) approved.add(name2);
     if (names.length && !names.includes(MARKER)) throw fail2("STORE_DIRECTORY_UNKNOWN");
     const memoryFile = (name2) => name2 === "host-memory.json" || /^host-memory\.json\.[1-9][0-9]{0,9}\.tmp$/.test(name2);
-    if (names.some((name2) => !approved.has(name2) && !memoryFile(name2))) throw fail2("STORE_DIRECTORY_UNKNOWN");
+    const switchFile = (name2) => name2 === "screenshot-acceptance-enabled" || name2 === "screenshot-disabled-by-owner";
+    if (names.some((name2) => !approved.has(name2) && !memoryFile(name2) && !switchFile(name2))) throw fail2("STORE_DIRECTORY_UNKNOWN");
     for (const name2 of names.filter(memoryFile)) {
       const stat2 = await lstat4(path10.join(absolute2, name2));
       if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > 32768) throw fail2("STORE_DIRECTORY_INVALID");
     }
+    for (const name2 of names.filter(switchFile)) {
+      const stat2 = await lstat4(path10.join(absolute2, name2));
+      if (!stat2.isFile() || stat2.isSymbolicLink() || stat2.size > 4096) throw fail2("STORE_DIRECTORY_INVALID");
+    }
     for (const name2 of ["agent-process.json", "optimization", ".local-commander"]) {
       if (!names.includes(name2)) continue;
       const filename = path10.join(absolute2, name2), stat2 = await lstat4(filename);
@@ -31113,7 +31118,7 @@ var NativeTools = class {
     if (call.name === "command_run") {
       if (!["win32", "linux", "darwin"].includes(process.platform)) fail3("COMMAND_NOT_ALLOWED");
       const cwd2 = await resolve(call.args.cwd, true), program = await this.resolveProgram(call.args.command, workspace2, call.args.args);
-      const claims2 = writeClaim(cwd2);
+      const claims2 = call.args.cwd === void 0 ? [{ path: cwd2, namespace: "process", mode: "read" }] : writeClaim(cwd2);
       return { call, claims: claims2, execution: { ...program, cwd: cwd2 }, run: async (signal, onStarted, onOutput, onSupervisor) => {
         let r;
         try {
@@ -31381,7 +31386,10 @@ var NativeScheduler = class {
     } catch {
     }
   }
-  schedule(id2, claims, deadlineAt, run2, signal) {
+  /** lockWaitMs: how long a job may wait behind a conflicting claim before it is refused with
+   * RESOURCE_LOCKED (proved not started), so the caller hears back inside its relay window
+   * instead of timing out (#504). Waiting only for a free slot still lasts until the deadline. */
+  schedule(id2, claims, deadlineAt, run2, signal, lockWaitMs) {
     if (!this.accepting) return Promise.reject(Error("AGENT_PAUSED"));
     if (!id2 || id2.length > 100 || this.active.has(id2) || this.waiting.some((j) => j.id === id2)) return Promise.reject(Error("DUPLICATE_SCHEDULED_EXECUTION"));
     if (!Array.isArray(claims) || !claims.length || claims.length > 32 || claims.some((c) => !c || !path19.isAbsolute(c.path) || !["read", "write"].includes(c.mode))) return Promise.reject(Error("INVALID_RESOURCE_CLAIM"));
@@ -31402,6 +31410,12 @@ var NativeScheduler = class {
       };
       job.aborted = () => remove("CANCELLED_BEFORE_ACCEPTANCE");
       job.timer = setTimeout(() => remove("ADMISSION_DEADLINE_EXPIRED"), Math.min(2147483647, Math.max(1, deadline - Date.now())));
+      if (lockWaitMs !== void 0 && Number.isFinite(lockWaitMs) && lockWaitMs >= 0) {
+        const lockIn = Math.min(lockWaitMs, deadline - Date.now() - 1e3);
+        if (lockIn > 0) job.lockTimer = setTimeout(() => {
+          if (this.lockBlocked(job)) remove("RESOURCE_LOCKED");
+        }, lockIn);
+      }
       signal?.addEventListener("abort", job.aborted, { once: true });
       this.waiting.push(job);
       this.observe({ kind: "queued", executionId: id2, deadlineAt: deadline });
@@ -31410,8 +31424,21 @@ var NativeScheduler = class {
   }
   cleanup(job) {
     clearTimeout(job.timer);
+    clearTimeout(job.lockTimer);
     if (job.aborted) job.signal?.removeEventListener("abort", job.aborted);
   }
+  /** True when a waiting job is held by a conflicting claim: a running job, or an earlier conflicting
+   * waiter that is itself lock-blocked. A wait that is only for a free slot is never a lock. */
+  lockBlocked(job) {
+    const index = this.waiting.indexOf(job);
+    if (index < 0) return false;
+    const blocked2 = [];
+    for (let i = 0; i <= index; i++) {
+      const current2 = this.waiting[i];
+      blocked2[i] = [...this.active.values()].some((claims) => claimsConflict(claims, current2.claims)) || this.waiting.slice(0, i).some((older, j) => blocked2[j] === true && claimsConflict(older.claims, current2.claims));
+    }
+    return blocked2[index] === true;
+  }
   pump() {
     for (let i = 0; i < this.waiting.length && this.active.size < this.safeSlots; ) {
       const job = this.waiting[i];
@@ -32114,6 +32141,7 @@ var knownCodes = /* @__PURE__ */ new Set([
   "WORKSPACE_CHANGED",
   "WORKSPACE_UNAVAILABLE",
   "RESOURCE_BUSY",
+  "RESOURCE_LOCKED",
   "AGENT_PAUSED",
   "CANCELLED_BEFORE_ACCEPTANCE",
   "ADMISSION_DEADLINE_EXPIRED",
@@ -32128,6 +32156,7 @@ var knownCodes = /* @__PURE__ */ new Set([
   "SCREEN_ENCODER_UNAVAILABLE",
   "SCREEN_RECORDING_PERMISSION_REQUIRED"
 ]);
+var LOCK_WAIT_MS = 2e4;
 function safeCode(error62) {
   const code = error62 instanceof NativeToolError ? error62.code : error62 instanceof Error ? error62.message : "";
   return knownCodes.has(code) || /^GUARD_[A-Z_]{1,30}$/.test(code) ? code : "TOOL_FAILED";
@@ -32339,7 +32368,7 @@ var NativeRuntime = class {
         const final = await this.options.journal.finish(binding2.executionId, image === void 0 ? journalOutput : { ...journalOutput, stdout: screenshotMetadata(image) }, resultCode);
         const outbound = await outboundResult(runnable.call, journalResult(final.result, resultCode), binding2, this.optionalTelemetry, this.options.efficiencyLedger);
         this.send({ type: "result", version: 1, binding: binding2, result: image === void 0 ? outbound : { ...outbound, stdout: image } });
-      }, abort.signal);
+      }, abort.signal, LOCK_WAIT_MS);
       context.task = work.catch(async (error62) => {
         if (!context.accepted) {
           if (context.guardPermit) await this.options.guard.rejected(context.guardPermit, safeCode(error62)).catch(() => {
@@ -48992,7 +49021,7 @@ var NativeEventBuffer = class {
 
 // agent/src/native-event-supervisor.ts
 var eventKinds = /* @__PURE__ */ new Set(["queued", "admitted", "released", "queue_rejected", "prepared", "accepted", "running", "result", "not_accepted", "connected", "disconnected", "mailbox_expired"]);
-var codes = /* @__PURE__ */ new Set(["SUCCESS", "EXECUTION_UNKNOWN", "AGENT_RESTARTED", "ADMISSION_DEADLINE_EXPIRED", "CANCELLED_BEFORE_ACCEPTANCE", "RESOURCE_BUSY", "AGENT_PAUSED", "PREPARATION_EXPIRED", "CANCELLED", "TIMEOUT", "USER_PROGRAM_FAILED", "TOOL_FAILED", "MAILBOX_EXPIRED"]);
+var codes = /* @__PURE__ */ new Set(["SUCCESS", "EXECUTION_UNKNOWN", "AGENT_RESTARTED", "ADMISSION_DEADLINE_EXPIRED", "CANCELLED_BEFORE_ACCEPTANCE", "RESOURCE_BUSY", "RESOURCE_LOCKED", "AGENT_PAUSED", "PREPARATION_EXPIRED", "CANCELLED", "TIMEOUT", "USER_PROGRAM_FAILED", "TOOL_FAILED", "MAILBOX_EXPIRED"]);
 var NativeEventSupervisor = class {
   constructor(onChange) {
     this.onChange = onChange;
@@ -50824,7 +50853,7 @@ async function restoreContentAudit(input2, output2, key) {
 }
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.47" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.49" : "0.3.2";
 var NETWORK_PUBLIC_KEY = true ? "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAvmu+81vWtJBQDZNHcAIW\nzCSxpG+R9RBsum2df5mP2cOW+wyUDTpnYquFge1qgI5YYTF96j0xCyXL8B9FeNWs\n939opWNmv53j+CQlS4cEIQhBbZSCu0eC4icsVEzBhvf68MB+E668SOtZBcVTEnyh\n96PTcupxS10rQJBWDinbKBXRC2gvGYeu01rWa/nsrndy4vAYP5t3yQtdOC8e8mr0\n+2Mg2Qhiq+KiTCtDd+L9oXvoLqqJYbzUIveNGha25AWxF1Weblp0gOM87hell5gV\nK7q4ZLUq/wBRGYNmQRdLyV7/WRE1FFPSW21/SBZQ/5aU4UqJU/MjMcrJUrnRKngz\nYKmo0czkxS3N7Q2KVxomgR1AQSuQFKMrboZYKjShADp9RIYUxzs7cYg51Of5PnHh\n6Ax+VevDGfzjMD+yHuyxYZqCtX4OwgolJxz63UQbzKlris+8xb5lLYTbIuz90Pss\nn6HK/F5May25c6oMmS3nh/NsiZopL1OvdtWKTt1L4WlRAgMBAAE=\n-----END PUBLIC KEY-----\n" : "";
 var AI_CONNECTION_SHIPPED = false;
 function processAlive(pid) {

package/runtime/manifest.json

@@ -1,17 +1,17 @@
 {
-  "version": "0.3.47",
+  "version": "0.3.49",
   "experimental": true,
   "platform": "linux",
   "arch": "x64",
   "node": "v22.23.3",
-  "source": "df3c7268691268bf4d9c7ad1fd0225cfd3e4e25f",
-  "sourceTreeSha256": "55d2835bd5fd435a09d78cb5bb890b69c37127c6fac02077d2c2280642e596dc",
+  "source": "c473bc0482280326f04aae47f14ad36ffb6a848f",
+  "sourceTreeSha256": "321301eb91adbbe3cd81cce7a68ff1713a13a5df7dcf31071ab8df98a2189d2e",
   "qualification": "unqualified",
   "lifecycleVersion": 1,
   "packaging": "npm platform package runtime",
   "files": {
     "NODE-LICENSE.txt": "c738ae413cf561f174e34f6961f8ca458aae2369a73640dda6234c629b98bcc4",
-    "agent.mjs": "54343afee2c12f7a4b4ac46e3bebe1ee2fde4af58305b22a286b64773faab453",
+    "agent.mjs": "466cdcf16ffe5e7e639fef07a87faba8ea6f91e28ed9512cb03a228ed4e5cfd1",
     "job-host.mjs": "54ab42fa00a53dfd4df6c93fd9e6692d5e03a0870aba8bf501f398905694b72d",
     "lifecycle.mjs": "ebed6bac75115ef1df34aff9fef211c9f710a524b2b614115b6bc80ef57b464b",
     "node": "fde6a4bf8d0562f7751d1a2d6cb9b417c4cfe107bbcb0aa3e9a24e125e348f48",