local-commander-agent 0.3.53 → 0.3.54

package/bin/network-package.mjs

@@ -1,38 +1,38 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { createHash } from "node:crypto";
-
-const HASH=/^[a-f0-9]{64}$/;
-/** Signed bundles may be set up during install; an unsigned pilot only by an explicit owner command. */
-export function implicitSetupAllowed(manifest){return manifest?.signed===true;}
-const FILES=["JobHost.exe","libcronet.dll","sing-box.exe","wintun.dll","sing-box.LICENSE","wintun.LICENSE"];
-async function plainDirectory(directory) {
-  const stat=await fs.lstat(directory);
-  if(!stat.isDirectory()||stat.isSymbolicLink()||(await fs.realpath(directory)).toLowerCase()!==path.resolve(directory).toLowerCase())throw Error("NETWORK_BUNDLE_DIRECTORY_INVALID");
-}
-async function bytes(file,max) {
-  const stat=await fs.lstat(file);
-  if(!stat.isFile()||stat.isSymbolicLink()||stat.size<1||stat.size>max)throw Error("NETWORK_BUNDLE_FILE_INVALID");
-  return fs.readFile(file);
-}
-export async function inspectNetworkBundle(directory) {
-  try {await plainDirectory(directory);}catch(error){if(error.code==="ENOENT")return null;throw error;}
-  const manifest=JSON.parse((await bytes(path.join(directory,"manifest.json"),8192)).toString("utf8"));
-  if(manifest.schemaVersion!==1||manifest.configured!==true||!(manifest.signed===true||manifest.signing==="unsigned-pilot")||!HASH.test(manifest.bundleId)||!HASH.test(manifest.helperSha256)||
-    !manifest.files||typeof manifest.files!=="object"||Array.isArray(manifest.files)||Object.keys(manifest.files).sort().join()!==[...FILES].sort().join())throw Error("NETWORK_BUNDLE_NOT_DEPLOYABLE");
-  const names=[...FILES,"NetworkService.exe","manifest.json"];
-  if((await fs.readdir(directory)).sort().join()!==names.sort().join())throw Error("NETWORK_BUNDLE_ALLOWLIST_FAILED");
-  for(const name of [...FILES,"NetworkService.exe"]){const expected=name==="NetworkService.exe"?manifest.helperSha256:manifest.files[name];
-    if(!HASH.test(expected)||createHash("sha256").update(await bytes(path.join(directory,name),128*1024*1024)).digest("hex")!==expected)throw Error("NETWORK_BUNDLE_DIGEST_MISMATCH");}
-  return {bundleId:manifest.bundleId,files:names,manifest};
-}
-export async function copyNetworkBundle(source,destination) {
-  const bundle=await inspectNetworkBundle(source);if(!bundle)return false;
-  if(path.resolve(source).toLowerCase()===path.resolve(destination).toLowerCase())return true;
-  const exists=await fs.lstat(destination).catch(e=>{if(e.code!=="ENOENT")throw e;return null;});
-  if(exists){const previous=await inspectNetworkBundle(destination);if(previous?.bundleId===bundle.bundleId&&previous.manifest.helperSha256===bundle.manifest.helperSha256)return true;throw Error("NETWORK_BUNDLE_DESTINATION_CONFLICT");}
-  await fs.mkdir(destination,{recursive:false,mode:0o700});
-  try{for(const name of bundle.files)await fs.copyFile(path.join(source,name),path.join(destination,name),fs.constants.COPYFILE_EXCL);await inspectNetworkBundle(destination);}
-  catch(error){for(const name of bundle.files)await fs.rm(path.join(destination,name),{force:true}).catch(()=>{});await fs.rmdir(destination).catch(()=>{});throw error;}
-  return true;
-}
+import fs from "node:fs/promises";
+import path from "node:path";
+import { createHash } from "node:crypto";
+
+const HASH=/^[a-f0-9]{64}$/;
+/** Signed bundles may be set up during install; an unsigned pilot only by an explicit owner command. */
+export function implicitSetupAllowed(manifest){return manifest?.signed===true;}
+const FILES=["JobHost.exe","libcronet.dll","sing-box.exe","wintun.dll","sing-box.LICENSE","wintun.LICENSE"];
+async function plainDirectory(directory) {
+  const stat=await fs.lstat(directory);
+  if(!stat.isDirectory()||stat.isSymbolicLink()||(await fs.realpath(directory)).toLowerCase()!==path.resolve(directory).toLowerCase())throw Error("NETWORK_BUNDLE_DIRECTORY_INVALID");
+}
+async function bytes(file,max) {
+  const stat=await fs.lstat(file);
+  if(!stat.isFile()||stat.isSymbolicLink()||stat.size<1||stat.size>max)throw Error("NETWORK_BUNDLE_FILE_INVALID");
+  return fs.readFile(file);
+}
+export async function inspectNetworkBundle(directory) {
+  try {await plainDirectory(directory);}catch(error){if(error.code==="ENOENT")return null;throw error;}
+  const manifest=JSON.parse((await bytes(path.join(directory,"manifest.json"),8192)).toString("utf8"));
+  if(manifest.schemaVersion!==1||manifest.configured!==true||!(manifest.signed===true||manifest.signing==="unsigned-pilot")||!HASH.test(manifest.bundleId)||!HASH.test(manifest.helperSha256)||
+    !manifest.files||typeof manifest.files!=="object"||Array.isArray(manifest.files)||Object.keys(manifest.files).sort().join()!==[...FILES].sort().join())throw Error("NETWORK_BUNDLE_NOT_DEPLOYABLE");
+  const names=[...FILES,"NetworkService.exe","manifest.json"];
+  if((await fs.readdir(directory)).sort().join()!==names.sort().join())throw Error("NETWORK_BUNDLE_ALLOWLIST_FAILED");
+  for(const name of [...FILES,"NetworkService.exe"]){const expected=name==="NetworkService.exe"?manifest.helperSha256:manifest.files[name];
+    if(!HASH.test(expected)||createHash("sha256").update(await bytes(path.join(directory,name),128*1024*1024)).digest("hex")!==expected)throw Error("NETWORK_BUNDLE_DIGEST_MISMATCH");}
+  return {bundleId:manifest.bundleId,files:names,manifest};
+}
+export async function copyNetworkBundle(source,destination) {
+  const bundle=await inspectNetworkBundle(source);if(!bundle)return false;
+  if(path.resolve(source).toLowerCase()===path.resolve(destination).toLowerCase())return true;
+  const exists=await fs.lstat(destination).catch(e=>{if(e.code!=="ENOENT")throw e;return null;});
+  if(exists){const previous=await inspectNetworkBundle(destination);if(previous?.bundleId===bundle.bundleId&&previous.manifest.helperSha256===bundle.manifest.helperSha256)return true;throw Error("NETWORK_BUNDLE_DESTINATION_CONFLICT");}
+  await fs.mkdir(destination,{recursive:false,mode:0o700});
+  try{for(const name of bundle.files)await fs.copyFile(path.join(source,name),path.join(destination,name),fs.constants.COPYFILE_EXCL);await inspectNetworkBundle(destination);}
+  catch(error){for(const name of bundle.files)await fs.rm(path.join(destination,name),{force:true}).catch(()=>{});await fs.rmdir(destination).catch(()=>{});throw error;}
+  return true;
+}

package/bin/posix.mjs

@@ -1,84 +1,84 @@
-// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
-// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
-// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
-import { constants } from "node:fs";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { createRequire } from "node:module";
-
-const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
-// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
-const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
-  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
-const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
-
-function fail(code) { const error = new Error(code); error.code = code; throw error; }
-
-export function posixHelp() {
-  return [
-    "Local Commander",
-    "",
-    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
-    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
-    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
-    "  npx local-commander-agent@latest uninstall [--purge-state]",
-    ""
-  ].join("\n");
-}
-
-// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
-// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
-async function screenshotCommand(args) {
-  const action = args[0] || "status";
-  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
-  const folder = await fs.lstat(state).catch(() => null);
-  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
-  const file = path.join(state, "screenshot-disabled-by-owner");
-  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
-    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
-  if (action === "on") await fs.rm(file, { force: true });
-  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
-  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
-}
-
-export async function runPosix(argv, version) {
-  const name = PACKAGES[process.platform + "-" + process.arch];
-  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
-  const command = argv[0] || "bootstrap", args = argv.slice(1);
-  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
-  if (command === "screenshot") { await screenshotCommand(args); return; }
-  const lifecycle = COMMANDS[command];
-  if (!lifecycle) fail("ARGUMENT_INVALID");
-  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
-  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
-
-  let packageJson;
-  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
-  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
-  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
-  const source = path.join(path.dirname(packageJson), "runtime");
-  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
-  const files = Object.keys(manifest?.files ?? {});
-  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
-
-  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
-  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
-  try {
-    await fs.chmod(stage, 0o700);
-    for (const file of [...files, "manifest.json"]) {
-      const target = path.join(stage, file);
-      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
-      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
-    }
-    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
-    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
-    if (result.error) throw result.error;
-    process.exitCode = result.status ?? 1;
-  } finally {
-    await fs.rm(stage, { recursive: true, force: true });
-  }
-}
+// macOS and Linux: the runtime ships in a per-platform package (an optional dependency, so npm installs only the
+// matching one). Its lifecycle accepts only a private, owner-only artifact directory, so the files are copied from the
+// npx cache into a fresh private directory and the lifecycle installs from there into its own versions directory.
+import { constants } from "node:fs";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+
+const PACKAGES = { "darwin-arm64": "local-commander-agent-darwin-arm64", "linux-x64": "local-commander-agent-linux-x64", "linux-arm64": "local-commander-agent-linux-arm64" };
+// npm command -> lifecycle command. The default (`npx local-commander-agent@latest`) is setup, as on Windows.
+const COMMANDS = { bootstrap: "setup", install: "setup", setup: "setup", update: "update", pair: "pair", access: "access", "configure-access": "access",
+  start: "start", stop: "stop", status: "status", rollback: "rollback", uninstall: "uninstall" };
+const EXECUTABLES = new Set(["node", "posix-host", "owner-store"]);
+
+function fail(code) { const error = new Error(code); error.code = code; throw error; }
+
+export function posixHelp() {
+  return [
+    "Local Commander",
+    "",
+    "  npx local-commander-agent@latest            set up this computer, pair it and choose access",
+    "  npx local-commander-agent@latest update     install this version, keeping pairing and access",
+    "  npx local-commander-agent@latest status|start|stop|pair|access|rollback",
+    "  npx local-commander-agent@latest uninstall [--purge-state]",
+    ""
+  ].join("\n");
+}
+
+// Owner opt-out for take_screenshot under Full Access (#486): a marker in the installed service agent's state folder
+// (the service runs without XDG_DATA_HOME). No runtime staging is needed; the agent checks it on each capture.
+async function screenshotCommand(args) {
+  const action = args[0] || "status";
+  if (args.length > 1 || !["status", "on", "off"].includes(action)) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+  const state = path.join(os.homedir(), process.platform === "darwin" ? "Library/Application Support" : ".local/share", "LocalCommander", "Agent");
+  const folder = await fs.lstat(state).catch(() => null);
+  if (!folder?.isDirectory() || folder.uid !== process.getuid()) fail("AGENT_NOT_INSTALLED");
+  const file = path.join(state, "screenshot-disabled-by-owner");
+  if (action === "off") await fs.open(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600)
+    .then(handle => handle.close(), error => { if (error?.code !== "EEXIST") throw error; });
+  if (action === "on") await fs.rm(file, { force: true });
+  const off = await fs.lstat(file).then(() => true, error => error?.code !== "ENOENT");
+  process.stdout.write(JSON.stringify({ screenshot: off ? "off" : "on" }) + "\n");
+}
+
+export async function runPosix(argv, version) {
+  const name = PACKAGES[process.platform + "-" + process.arch];
+  if (!name) fail(process.platform === "darwin" ? "MACOS_APPLE_SILICON_REQUIRED" : process.platform === "linux" ? "LINUX_X64_OR_ARM64_REQUIRED" : "PLATFORM_UNSUPPORTED");
+  const command = argv[0] || "bootstrap", args = argv.slice(1);
+  if (command === "-h" || command === "--help" || command === "help") { process.stdout.write(posixHelp()); return; }
+  if (command === "screenshot") { await screenshotCommand(args); return; }
+  const lifecycle = COMMANDS[command];
+  if (!lifecycle) fail("ARGUMENT_INVALID");
+  if (lifecycle === "uninstall" ? args.length > 1 || (args.length === 1 && args[0] !== "--purge-state") : args.length) fail("ARGUMENT_INVALID");
+  if (typeof process.getuid === "function" && process.getuid() === 0) fail("POSIX_OWNER_REQUIRED");
+
+  let packageJson;
+  try { packageJson = createRequire(import.meta.url).resolve(name + "/package.json"); } catch { fail("PLATFORM_PACKAGE_MISSING"); }
+  const meta = JSON.parse(await fs.readFile(packageJson, "utf8"));
+  if (meta.name !== name || meta.version !== version) fail("PLATFORM_PACKAGE_MISMATCH");
+  const source = path.join(path.dirname(packageJson), "runtime");
+  const manifest = JSON.parse(await fs.readFile(path.join(source, "manifest.json"), "utf8"));
+  const files = Object.keys(manifest?.files ?? {});
+  if (manifest?.platform !== process.platform || manifest?.arch !== process.arch || !files.length || files.some(file => !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(file))) fail("PLATFORM_PACKAGE_INVALID");
+
+  // Canonical parent: on macOS os.tmpdir() is under /var, a symlink to /private/var, and the lifecycle rejects aliases.
+  const stage = await fs.mkdtemp(path.join(await fs.realpath(os.tmpdir()), "local-commander-"));
+  try {
+    await fs.chmod(stage, 0o700);
+    for (const file of [...files, "manifest.json"]) {
+      const target = path.join(stage, file);
+      await fs.copyFile(path.join(source, file), target, constants.COPYFILE_EXCL);
+      await fs.chmod(target, EXECUTABLES.has(file) ? 0o700 : 0o600);
+    }
+    // The lifecycle verifies every file against the manifest, then copies them into its own versions directory.
+    const result = spawnSync(path.join(stage, "node"), [path.join(stage, "lifecycle.mjs"), lifecycle, ...args], { stdio: "inherit" });
+    if (result.error) throw result.error;
+    process.exitCode = result.status ?? 1;
+  } finally {
+    await fs.rm(stage, { recursive: true, force: true });
+  }
+}

package/package.json

@@ -1,57 +1,57 @@
-{
-  "name": "local-commander-agent",
-  "version": "0.3.53",
-  "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
-  "type": "module",
-  "bin": {
-    "localcommander": "bin/localcommander.mjs"
-  },
-  "os": [
-    "win32",
-    "darwin",
-    "linux"
-  ],
-  "cpu": [
-    "x64",
-    "arm64"
-  ],
-  "optionalDependencies": {
-    "local-commander-agent-darwin-arm64": "0.3.53",
-    "local-commander-agent-linux-arm64": "0.3.53",
-    "local-commander-agent-linux-x64": "0.3.53"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "files": [
-    "bin/",
-    "runtime/",
-    "README.md",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "prepack": "node ../../scripts/build-npm-agent.mjs",
-    "prepublishOnly": "node ../../scripts/check-npm-publish-auth.mjs && node ../../scripts/verify-npm-agent.mjs"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
-  "keywords": [
-    "mcp",
-    "local",
-    "agent",
-    "chatgpt",
-    "claude",
-    "windows",
-    "macos",
-    "linux"
-  ],
-  "localCommander": {
-    "controlPlaneOrigin": "https://localcmd.app"
-  },
-  "homepage": "https://localcmd.app",
-  "bugs": {
-    "url": "https://localcmd.app/support",
-    "email": "peter.mamrukov@localcmd.app"
-  }
-}
+{
+  "name": "local-commander-agent",
+  "version": "0.3.54",
+  "description": "Computer companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
+  "type": "module",
+  "bin": {
+    "localcommander": "bin/localcommander.mjs"
+  },
+  "os": [
+    "win32",
+    "darwin",
+    "linux"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "optionalDependencies": {
+    "local-commander-agent-darwin-arm64": "0.3.54",
+    "local-commander-agent-linux-arm64": "0.3.54",
+    "local-commander-agent-linux-x64": "0.3.54"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "files": [
+    "bin/",
+    "runtime/",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "prepack": "node ../../scripts/build-npm-agent.mjs",
+    "prepublishOnly": "node ../../scripts/check-npm-publish-auth.mjs && node ../../scripts/verify-npm-agent.mjs"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "local",
+    "agent",
+    "chatgpt",
+    "claude",
+    "windows",
+    "macos",
+    "linux"
+  ],
+  "localCommander": {
+    "controlPlaneOrigin": "https://localcmd.app"
+  },
+  "homepage": "https://localcmd.app",
+  "bugs": {
+    "url": "https://localcmd.app/support",
+    "email": "peter.mamrukov@localcmd.app"
+  }
+}

package/runtime/agent.mjs

@@ -27137,11 +27137,13 @@ var NativeJournal = class _NativeJournal {
   }
   /** The journal lock is only taken over once the previous agent process has exited, so its in-process work is gone.
    * An interrupted entry is AGENT_RESTARTED (stopped, outcome unknown) when it recorded its supervisors and none is
-   * still alive; otherwise, including every entry from an older agent, it stays EXECUTION_UNKNOWN (#194). */
+   * still alive; otherwise, including every entry from an older agent, it stays EXECUTION_UNKNOWN (#194).
+   * Previously reported unknown work gets the same proof check on a later startup, never on a mere reconnect. */
   recoverAfterRestart(liveness) {
     return this.enqueue(async () => {
       let count4 = 0;
-      const interrupted = [...this.entries.values()].filter((e) => ["accepted", "running"].includes(e.state));
+      const retryUnknown = (e) => e.state === "unknown" && e.resultCode === "EXECUTION_UNKNOWN" && !!e.workspaceGrantId && !!e.policyVersion && e.supervisors !== void 0;
+      const interrupted = [...this.entries.values()].filter((e) => ["accepted", "running"].includes(e.state) || retryUnknown(e));
       const pids = [...new Set(interrupted.flatMap((e) => e.supervisors ?? []))];
       const linuxSupervisors = interrupted.flatMap((e) => e.linuxSupervisors ?? []), darwinSupervisors = interrupted.flatMap((e) => e.darwinSupervisors ?? []);
       let live = /* @__PURE__ */ new Set();
@@ -27154,11 +27156,19 @@ var NativeJournal = class _NativeJournal {
       }
       for (const original of this.entries.values()) {
         const stranded = original.state === "prepared";
-        if (!stranded && !["accepted", "running"].includes(original.state)) continue;
+        const retry = retryUnknown(original);
+        if (!stranded && !["accepted", "running"].includes(original.state) && !retry) continue;
         const e = clone2(original);
         e.state = stranded ? "rejected" : "unknown";
         const stopped2 = !!e.supervisors && (e.supervisors.length === 0 || !!live && e.supervisors.every((pid) => !live.has(pid)));
-        if (!stranded && e.workspaceGrantId && e.policyVersion) e.resultCode = stopped2 ? "AGENT_RESTARTED" : "EXECUTION_UNKNOWN";
+        if (retry && !stopped2) continue;
+        if (!stranded && e.workspaceGrantId && e.policyVersion) {
+          e.resultCode = stopped2 ? "AGENT_RESTARTED" : "EXECUTION_UNKNOWN";
+          if (stopped2) {
+            delete e.reportedAt;
+            if (e.result) e.result = { ...e.result, treeTerminated: true };
+          }
+        }
         e.updatedAt = this.now().toISOString();
         const last = e.guardEvents?.at(-1);
         if (last && last.event.phase !== "result") {
@@ -29233,6 +29243,27 @@ async function resolvePosixExecutable(command, searchPath = process.env.PATH ??
 // agent/src/job-supervisor.ts
 import { spawn as spawn4 } from "node:child_process";
 import path16 from "node:path";
+var supervisorFailureCodes = /* @__PURE__ */ new Set([
+  "SUPERVISOR_PLATFORM_UNSUPPORTED",
+  "INVALID_SUPERVISOR_PATH",
+  "INVALID_SUPERVISOR_ARGS",
+  "INVALID_SUPERVISOR_LIMIT",
+  "SUPERVISOR_INPUT_LIMIT",
+  "SUPERVISOR_CONTROL_CLOSED",
+  "SUPERVISOR_START_FAILED",
+  "SUPERVISOR_DIAGNOSTIC_FAILURE",
+  "SUPERVISOR_PROTOCOL_INVALID",
+  "SUPERVISOR_PROTOCOL_LIMIT",
+  "SUPERVISOR_EXECUTION_UNKNOWN",
+  "SUPERVISOR_DEADLINE_EXCEEDED"
+]);
+var nativeFailureCode = /^(WIN32_[0-9]{1,10}|EXECUTION_OUTCOME_UNKNOWN|INVALID_OR_FAILED_START)$/;
+function supervisorFailureDiagnostic(error62) {
+  if (!(error62 instanceof Error) || !supervisorFailureCodes.has(error62.message)) return null;
+  const stage = typeof error62.cause === "string" && /^(REQUEST|BRIDGE|CGROUP|EXECUTION|CLEANUP)$/.test(error62.cause) ? error62.cause : void 0;
+  const nativeCode = typeof error62.cause === "string" && nativeFailureCode.test(error62.cause) ? error62.cause : void 0;
+  return { code: error62.message, ...stage ? { stage } : {}, ...nativeCode ? { nativeCode } : {} };
+}
 function absolute(value) {
   return typeof value === "string" && value.length > 0 && value.length < 32767 && !value.includes("\0") && path16.isAbsolute(value) && path16.resolve(value) === value;
 }
@@ -29316,7 +29347,7 @@ async function runSupervised(helper, request, options = {}) {
             if (pid === null || !Number.isInteger(m.exitCode) || typeof m.timedOut !== "boolean" || typeof m.cancelled !== "boolean" || m.treeTerminated !== true) throw Error();
             outcome = { exitCode: m.exitCode, timedOut: m.timedOut, cancelled: m.cancelled, treeTerminated: true };
           } else if (m.type === "error") {
-            fail7("SUPERVISOR_EXECUTION_UNKNOWN", typeof m.stage === "string" && /^(REQUEST|BRIDGE|CGROUP|EXECUTION|CLEANUP)$/.test(m.stage) ? m.stage : void 0);
+            fail7("SUPERVISOR_EXECUTION_UNKNOWN", typeof m.stage === "string" && /^(REQUEST|BRIDGE|CGROUP|EXECUTION|CLEANUP)$/.test(m.stage) ? m.stage : typeof m.code === "string" && nativeFailureCode.test(m.code) ? m.code : void 0);
             return;
           } else throw Error();
         } catch {
@@ -32273,7 +32304,7 @@ var NativeRuntime = class {
       if (!stored.created) {
         if (!journalBinding(stored.entry, binding2)) throw Error("IDEMPOTENCY_CONFLICT");
         if (stored.entry.result) {
-          this.send({ type: "result", version: 1, binding: binding2, result: await outboundResult(frame.tool, journalResult(stored.entry.result), binding2, this.optionalTelemetry, this.options.efficiencyLedger) });
+          this.send({ type: "result", version: 1, binding: binding2, result: await outboundResult(frame.tool, journalResult(stored.entry.result, stored.entry.resultCode), binding2, this.optionalTelemetry, this.options.efficiencyLedger) });
           return;
         }
         if (stored.entry.state === "prepared") {
@@ -32372,6 +32403,8 @@ var NativeRuntime = class {
         } else {
           const isCommand = frame.tool.name === "command_run" || frame.tool.name.startsWith("git_") || frame.tool.name === "project_snapshot";
           const uncertain = error62 instanceof Error && error62.message === "GUARD_EVIDENCE_FAILED" || isCommand && !(error62 instanceof NativeToolError);
+          const supervisorFailure = supervisorFailureDiagnostic(error62);
+          if (supervisorFailure) context.stderr.append("\n" + JSON.stringify({ supervisorFailure }) + "\n");
           const output2 = { exitCode: null, timedOut: false, cancelled: abort.signal.aborted, treeTerminated: !uncertain, stdout: context.stdout.toString(), stderr: context.stderr.toString(), stdoutTruncated: context.stdout.truncated, stderrTruncated: context.stderr.truncated, resultCode: uncertain ? "EXECUTION_UNKNOWN" : abort.signal.aborted ? "CANCELLED" : safeCode(error62) };
           try {
             const { resultCode, ...raw } = output2;
@@ -32412,7 +32445,7 @@ var NativeRuntime = class {
     const fresh = await this.options.journal.get(binding2.executionId);
     let result2;
     if (fresh?.result) {
-      result2 = this.completedResults.get(binding2.executionId) ?? (context ? await outboundResult(context.tool.call, journalResult(fresh.result), binding2, this.optionalTelemetry, this.options.efficiencyLedger) : journalResult(fresh.result));
+      result2 = this.completedResults.get(binding2.executionId) ?? (context ? await outboundResult(context.tool.call, journalResult(fresh.result, fresh.resultCode), binding2, this.optionalTelemetry, this.options.efficiencyLedger) : journalResult(fresh.result, fresh.resultCode));
       if (frame.action === "output" && this.options.efficiencyLedger) {
         const notice = await this.optionalTelemetry.run(() => this.options.efficiencyLedger.consumeNoticeForExecution?.(binding2.executionId), null);
         if (notice) result2 = { ...result2, efficiencyNotice: notice };
@@ -51358,7 +51391,7 @@ async function restoreContentAudit(input2, output2, key) {
 }
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.53" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.54" : "0.3.2";
 var NETWORK_PUBLIC_KEY = true ? "-----BEGIN PUBLIC KEY-----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\nn6HK/F5May25c6oMmS3nh/NsiZopL1OvdtWKTt1L4WlRAgMBAAE=\n-----END PUBLIC KEY-----\n" : "";
 var AI_CONNECTION_SHIPPED = false;
 var QUARANTINE_RETRY_MS = 6e4;