omni-notify-mcp 1.3.303 → 1.3.304

package/dist/shared/agentSession.js

@@ -171,23 +171,8 @@ export function ownerBoundLaunch(invocation, ownerPid, cwd, guardDir) {
         };
     }
     return {
-        cmd: "powershell.exe",
-        args: [
-            "-NoProfile",
-            "-NonInteractive",
-            "-ExecutionPolicy",
-            "Bypass",
-            "-File",
-            path.join(guardDir, "ownerGuard.ps1"),
-            "-OwnerPid",
-            String(ownerPid),
-            "-ExeB64",
-            encoded(invocation.cmd),
-            "-ArgsB64",
-            encoded(JSON.stringify(invocation.args)),
-            "-CwdB64",
-            encoded(cwd),
-        ],
+        cmd: process.execPath,
+        args: [path.join(guardDir, "ownerGuard.js"), String(ownerPid), encoded(invocation.cmd), encoded(JSON.stringify(invocation.args)), encoded(cwd)],
     };
 }
 // GATE: how long a CLI tree gets to exit on SIGTERM before it is SIGKILLed — POSIX only; Windows stops it at once

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-notify-mcp",
-  "version": "1.3.303",
+  "version": "1.3.304",
   "description": "Reach your AI agents from anywhere — and let them reach you. One stdio process serves the whole tool surface to Claude Code, GitHub Copilot Chat and Codex: desktop, Telegram, Slack, ntfy, Discord, Teams and SMS are configured in one file, and agents notify you when long work finishes or a decision is needed, ask you a question and wait for your answer, and receive and reply to the messages you send them — with Do Not Disturb and idle detection deciding what actually gets through.",
   "main": "dist/index.js",
   "type": "module",

package/scripts/shared/ownerGuard.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+// OWNER-BOUND LAUNCH, Windows, in Node (#3786; run by process.execPath, never a PATH lookup): start one target and end it, with everything it started, the moment its owner process is gone.
+// argv: <ownerPid> <exeB64> <argsB64 (JSON array)> <cwdB64>. Exit: the target's own exit code; 95 when the owner was already gone, 96 when the
+// target could not start, 93 when its folder does not exist, 97 when a .cmd target is handed a line break (cmd.exe cannot carry one). Node cannot create a Windows job object, so the tree is ended by `taskkill /T` from the target's pid while it lives.
+const { spawn, spawnSync } = require("node:child_process");
+const fs = require("node:fs");
+
+const [ownerArg, exeB64, argsB64, cwdB64] = process.argv.slice(2);
+const decode = (text) => Buffer.from(text, "base64").toString("utf8");
+const owner = Number(ownerArg);
+
+const alive = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (cause) {
+    return cause.code === "EPERM";
+  }
+};
+
+if (!alive(owner)) {
+  console.error(`ownerGuard: the owner process ${owner} is gone - nothing was started`);
+  process.exit(95);
+}
+
+// A .cmd/.bat target runs through cmd.exe, which reads the line once: every argument is wholly quoted, a quote doubled and a percent sign stepped out of the quotes behind a caret, so it arrives as plain text.
+const caret = (text) => `"${text.replace(/(\\*)"/g, '$1$1""').replace(/(\\+)$/, "$1$1").replace(/%/g, '"^%"')}"`;
+
+// The guard itself runs as Node through ELECTRON_RUN_AS_NODE; the target must not inherit it.
+const { ELECTRON_RUN_AS_NODE: _runAsNode, ...targetEnv } = process.env;
+const exe = decode(exeB64);
+const args = JSON.parse(decode(argsB64));
+const cwd = decode(cwdB64);
+if (cwd !== "" && !fs.existsSync(cwd)) {
+  console.error(`ownerGuard: the folder ${cwd} does not exist - nothing was started`);
+  process.exit(93);
+}
+const viaCmd = /\.(cmd|bat)$/i.test(exe);
+if (viaCmd && args.some((arg) => /[\r\n]/.test(arg))) {
+  console.error("ownerGuard: a .cmd target cannot carry a line break in an argument - nothing was started");
+  process.exit(97);
+}
+const target = viaCmd
+  ? spawn(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", `"${caret(exe)} ${args.map((arg) => caret(arg)).join(" ")}"`], { cwd: cwd === "" ? undefined : cwd, stdio: "inherit", env: targetEnv, windowsHide: true, windowsVerbatimArguments: true })
+  : spawn(exe, args, { cwd: cwd === "" ? undefined : cwd, stdio: "inherit", env: targetEnv, windowsHide: true });
+target.on("error", (cause) => {
+  console.error(`ownerGuard: the target could not start - ${cause.message}`);
+  process.exit(96);
+});
+
+const endTree = () => {
+  if (target.pid !== undefined && target.exitCode === null) spawnSync("taskkill", ["/PID", String(target.pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+};
+
+// GATE: how often the owner is checked — at the boundary the target outlives a dead owner by up to this long
+const watch = setInterval(() => {
+  if (!alive(owner)) {
+    endTree();
+    process.exit(95);
+  }
+}, 500);
+
+target.on("exit", (code, signal) => {
+  clearInterval(watch);
+  process.exit(code ?? (signal === null ? 1 : 128));
+});

package/scripts/shared/ownerGuard.cs

@@ -1,665 +0,0 @@
-// OWNER-BOUND JOB (#1968, #1983): the ONE source of the kill-on-close Job Object that ends a process tree
-// with its owner. Loaded by ownerGuard.ps1 through Add-Type and called as OwnerJob.Run(...) for FleetView's
-// own launches.
-//
-// #2925: it is NO LONGER compiled into ~/.bullseye/bin/ownerGuard.exe for `claudeCode.claudeProcessWrapper`.
-// That build ran the .NET Framework's csc.exe at every activation, which made a compiler a dependency of a
-// marketplace install; the wrapper is now POSIX-only (media/shared/claudeWrapper.sh, a shell script that needs
-// nothing but /bin/sh) and Windows installs none. Nothing in this file may be re-wired into that setting.
-// Language level is C# 5 (the csc.exe that ships with Windows).
-//
-// THE MECHANISM: the target is created SUSPENDED, assigned to a job carrying KILL_ON_JOB_CLOSE, and only then
-// resumed, so no child can be born outside the job. The guard waits on the owner and the target and, when
-// EITHER ends, terminates the job. BREAKAWAY_OK is set on purpose and SILENT_BREAKAWAY is not: a process that
-// asks for CREATE_BREAKAWAY_FROM_JOB may leave, but nothing leaves by accident - except under `contain`, which leaves
-// BREAKAWAY_OK off because the msys2 runtime asks to break away from every job that allows it (spawn.cc), so a
-// Git Bash tree would otherwise leave the job whole. A child that asks then stays (Microsoft, "Nested Jobs").
-//
-// usage (wrapper mode, owner = the parent process, which is the extension host):  ownerGuard.exe <exe> [args...]
-//       (explicit owner):                                                         ownerGuard.exe --owner <pid> <exe> [args...]
-using System;
-using System.Collections.Generic;
-using System.IO;
-using System.Runtime.InteropServices;
-using System.Text;
-using System.Text.RegularExpressions;
-using System.Threading;
-
-public static class OwnerJob
-{
-    const uint KILL_ON_JOB_CLOSE = 0x2000;
-    const uint BREAKAWAY_OK = 0x800;
-    const int EXTENDED_LIMIT_INFORMATION = 9;
-    const uint CREATE_SUSPENDED = 0x00000004;
-    const int STARTF_USESTDHANDLES = 0x00000100;
-    const uint SYNCHRONIZE = 0x00100000;
-    const uint PROCESS_QUERY_LIMITED_INFORMATION = 0x1000;
-    const uint INFINITE = 0xFFFFFFFF;
-
-    public const int EXIT_NO_TARGET = 90;
-    public const int EXIT_NO_JOB = 91;
-    public const int EXIT_NO_LIMIT = 92;
-    public const int EXIT_NOT_CREATED = 93;
-    public const int EXIT_NOT_ASSIGNED = 94;
-    public const int EXIT_OWNER_GONE = 95;
-    public const int EXIT_NOT_FOUND = 96;
-    public const int EXIT_BATCH_LINE_BREAK = 97;
-    public const int EXIT_NOT_RESUMED = 98;
-    public const int EXIT_WAIT_FAILED = 99;
-    public const int EXIT_NO_EXIT_CODE = 100;
-    public const int EXIT_DEADLINE = 101;
-    public const int EXIT_ALREADY_RUNNING = 102;
-    public const int FRAME_OWNERS = -1;
-    const uint WAIT_TIMEOUT = 0x102;
-    const uint STILL_ACTIVE = 259;
-    const int ERROR_INVALID_PARAMETER = 87;
-
-    [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
-    struct STARTUPINFO
-    {
-        public int cb;
-        public string lpReserved;
-        public string lpDesktop;
-        public string lpTitle;
-        public int dwX, dwY, dwXSize, dwYSize, dwXCountChars, dwYCountChars, dwFillAttribute, dwFlags;
-        public short wShowWindow, cbReserved2;
-        public IntPtr lpReserved2, hStdInput, hStdOutput, hStdError;
-    }
-
-    [StructLayout(LayoutKind.Sequential)]
-    struct PROCESS_INFORMATION
-    {
-        public IntPtr hProcess, hThread;
-        public int dwProcessId, dwThreadId;
-    }
-
-    [StructLayout(LayoutKind.Sequential)]
-    struct IO_COUNTERS
-    {
-        public ulong a, b, c, d, e, f;
-    }
-
-    [StructLayout(LayoutKind.Sequential)]
-    struct JOBOBJECT_BASIC_LIMIT_INFORMATION
-    {
-        public long PerProcessUserTimeLimit, PerJobUserTimeLimit;
-        public uint LimitFlags;
-        public UIntPtr MinimumWorkingSetSize, MaximumWorkingSetSize;
-        public uint ActiveProcessLimit;
-        public UIntPtr Affinity;
-        public uint PriorityClass, SchedulingClass;
-    }
-
-    [StructLayout(LayoutKind.Sequential)]
-    struct JOBOBJECT_EXTENDED_LIMIT_INFORMATION
-    {
-        public JOBOBJECT_BASIC_LIMIT_INFORMATION BasicLimitInformation;
-        public IO_COUNTERS IoInfo;
-        public UIntPtr ProcessMemoryLimit, JobMemoryLimit, PeakProcessMemoryUsed, PeakJobMemoryUsed;
-    }
-
-    [StructLayout(LayoutKind.Sequential)]
-    struct PROCESS_BASIC_INFORMATION
-    {
-        public IntPtr ExitStatus, PebBaseAddress, AffinityMask, BasePriority, UniqueProcessId, InheritedFromUniqueProcessId;
-    }
-
-    [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-    static extern IntPtr CreateJobObject(IntPtr attributes, string name);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool SetInformationJobObject(IntPtr job, int infoClass, IntPtr info, uint length);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool AssignProcessToJobObject(IntPtr job, IntPtr process);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool TerminateJobObject(IntPtr job, uint exitCode);
-    [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-    static extern bool CreateProcess(string application, string commandLine, IntPtr processAttributes, IntPtr threadAttributes,
-        bool inheritHandles, uint creationFlags, IntPtr environment, string currentDirectory, ref STARTUPINFO startupInfo,
-        out PROCESS_INFORMATION processInformation);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern IntPtr GetStdHandle(int which);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool CloseHandle(IntPtr handle);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern uint WaitForMultipleObjects(uint count, IntPtr[] handles, bool waitAll, uint milliseconds);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern IntPtr OpenProcess(uint access, bool inherit, int pid);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool GetExitCodeProcess(IntPtr process, out uint exitCode);
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern uint ResumeThread(IntPtr thread);
-    [DllImport("kernel32.dll")]
-    static extern IntPtr GetCurrentProcess();
-    [DllImport("kernel32.dll")]
-    static extern int GetCurrentProcessId();
-    [DllImport("kernel32.dll", SetLastError = true)]
-    static extern bool GetProcessTimes(IntPtr process, out long creation, out long exit, out long kernel, out long user);
-    [DllImport("ntdll.dll")]
-    static extern int NtQueryInformationProcess(IntPtr process, int infoClass, ref PROCESS_BASIC_INFORMATION info, int length, out int returned);
-    [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)]
-    static extern bool QueryFullProcessImageName(IntPtr process, int flags, StringBuilder name, ref int size);
-
-    // One argument as CommandLineToArgvW reads it back: quoted only when it must be, a quote escaped by
-    // backslashes per the Windows rules, so a path with spaces stays ONE argument.
-    public static string QuoteArg(string arg)
-    {
-        if (arg.Length > 0 && arg.IndexOfAny(new char[] { ' ', '\t', '\n', '\v', '"' }) < 0)
-        {
-            return arg;
-        }
-        StringBuilder sb = new StringBuilder("\"");
-        int slashes = 0;
-        foreach (char ch in arg)
-        {
-            if (ch == '\\') { slashes++; continue; }
-            if (ch == '"') { sb.Append('\\', 2 * slashes + 1); sb.Append('"'); }
-            else { sb.Append('\\', slashes); sb.Append(ch); }
-            slashes = 0;
-        }
-        sb.Append('\\', 2 * slashes);
-        sb.Append('"');
-        return sb.ToString();
-    }
-
-    // cmd.exe reads its command line by rules of its own: every character it treats as special, the quote and the
-    // space included, is escaped with a caret so the whole argument is literal text to it.
-    static string EscapeCmd(string text)
-    {
-        return Regex.Replace(text, "([()\\]\\[%!^\"`<>&|;, *?])", "^$1");
-    }
-
-    static int ParentOf(IntPtr process)
-    {
-        PROCESS_BASIC_INFORMATION info = new PROCESS_BASIC_INFORMATION();
-        int returned;
-        if (NtQueryInformationProcess(process, 0, ref info, Marshal.SizeOf(info), out returned) != 0)
-        {
-            return 0;
-        }
-        return (int)info.InheritedFromUniqueProcessId.ToInt64();
-    }
-
-    static int ParentPid()
-    {
-        return ParentOf(GetCurrentProcess());
-    }
-
-    static long StartOf(IntPtr process, int pid)
-    {
-        long start, ignored;
-        if (!GetProcessTimes(process, out start, out ignored, out ignored, out ignored))
-        {
-            throw new InvalidOperationException("the start time of process " + pid + " could not be read (win32 " + Marshal.GetLastWin32Error() + ")");
-        }
-        return start;
-    }
-
-    // A pid names an ancestor only if that process STARTED BEFORE the younger one: a recycled pid belongs to a
-    // younger process, and then the real ancestor is already dead.
-    static IntPtr OpenGone(int pid, uint access)
-    {
-        IntPtr process = OpenProcess(access, false, pid);
-        if (process == IntPtr.Zero)
-        {
-            int why = Marshal.GetLastWin32Error();
-            if (why != ERROR_INVALID_PARAMETER)
-            {
-                throw new InvalidOperationException("process " + pid + " could not be opened (win32 " + why + ")");
-            }
-        }
-        return process;
-    }
-
-    static IntPtr OpenOlderThan(int pid, IntPtr younger, int youngerPid)
-    {
-        IntPtr process = OpenGone(pid, SYNCHRONIZE | PROCESS_QUERY_LIMITED_INFORMATION);
-        if (process == IntPtr.Zero)
-        {
-            return process;
-        }
-        if (StartOf(process, pid) > StartOf(younger, youngerPid))
-        {
-            CloseHandle(process);
-            return IntPtr.Zero;
-        }
-        return process;
-    }
-
-    static IntPtr OpenOwner(int ownerPid, bool mustPredateSelf)
-    {
-        return mustPredateSelf
-            ? OpenOlderThan(ownerPid, GetCurrentProcess(), GetCurrentProcessId())
-            : OpenProcess(SYNCHRONIZE | PROCESS_QUERY_LIMITED_INFORMATION, false, ownerPid);
-    }
-
-    static string ImageOf(IntPtr process, int pid)
-    {
-        StringBuilder name = new StringBuilder(1024);
-        int size = name.Capacity;
-        if (!QueryFullProcessImageName(process, 0, name, ref size))
-        {
-            throw new InvalidOperationException("the image of process " + pid + " could not be read (win32 " + Marshal.GetLastWin32Error() + ")");
-        }
-        return name.ToString(0, size);
-    }
-
-    static List<IntPtr> ShellFrame()
-    {
-        List<IntPtr> frame = new List<IntPtr>();
-        IntPtr child = GetCurrentProcess();
-        int childPid = GetCurrentProcessId();
-        while (true)
-        {
-            int parentPid = ParentOf(child);
-            if (parentPid == 0)
-            {
-                throw new InvalidOperationException("the parent of process " + childPid + " could not be read");
-            }
-            IntPtr parent = OpenOlderThan(parentPid, child, childPid);
-            if (parent == IntPtr.Zero)
-            {
-                return frame;
-            }
-            frame.Add(parent);
-            string image = Path.GetFileName(ImageOf(parent, parentPid)).ToLowerInvariant();
-            if (image != "bash.exe" && image != "sh.exe")
-            {
-                return frame;
-            }
-            child = parent;
-            childPid = parentPid;
-        }
-    }
-
-    static string ReadLock(string path)
-    {
-        try
-        {
-            using (StreamReader reader = new StreamReader(new FileStream(path, FileMode.Open, FileAccess.Read, FileShare.ReadWrite | FileShare.Delete)))
-            {
-                return reader.ReadToEnd().Trim();
-            }
-        }
-        catch (FileNotFoundException)
-        {
-            return null;
-        }
-    }
-
-    static bool StillHolds(int pid, long start)
-    {
-        IntPtr process = OpenGone(pid, PROCESS_QUERY_LIMITED_INFORMATION);
-        if (process == IntPtr.Zero)
-        {
-            return false;
-        }
-        uint code;
-        bool alive = StartOf(process, pid) == start && GetExitCodeProcess(process, out code) && code == STILL_ACTIVE;
-        CloseHandle(process);
-        return alive;
-    }
-
-    static bool ParseLock(string held, out int pid, out long start)
-    {
-        string[] parts = held.Split(' ');
-        start = 0;
-        pid = 0;
-        return parts.Length == 2 && int.TryParse(parts[0], out pid) && long.TryParse(parts[1], out start);
-    }
-
-    static int TakeLock(string path, out string mine)
-    {
-        mine = GetCurrentProcessId() + " " + StartOf(GetCurrentProcess(), GetCurrentProcessId());
-        for (int attempt = 0; attempt < 2; attempt++)
-        {
-            if (!File.Exists(path))
-            {
-                try
-                {
-                    using (FileStream file = new FileStream(path, FileMode.CreateNew, FileAccess.Write, FileShare.Read))
-                    {
-                        byte[] bytes = Encoding.ASCII.GetBytes(mine);
-                        file.Write(bytes, 0, bytes.Length);
-                    }
-                    return 0;
-                }
-                catch (IOException)
-                {
-                    if (!File.Exists(path))
-                    {
-                        throw;
-                    }
-                }
-            }
-            string held = ReadLock(path);
-            int pid;
-            long start;
-            if (held != null && !ParseLock(held, out pid, out start))
-            {
-                Thread.Sleep(1000);
-                held = ReadLock(path);
-            }
-            if (held == null)
-            {
-                continue;
-            }
-            bool parsed = ParseLock(held, out pid, out start);
-            if (parsed && StillHolds(pid, start))
-            {
-                Say("REFUSED - an earlier run (pid " + pid + ", started " + DateTime.FromFileTime(start).ToString("yyyy-MM-dd HH:mm:ss") + ") still holds " + path + " - this launch did not run");
-                return EXIT_ALREADY_RUNNING;
-            }
-            try
-            {
-                File.Delete(path);
-            }
-            catch (IOException e)
-            {
-                Say("REFUSED - " + path + " named '" + held + "' and could not be replaced (" + e.Message + ") - this launch did not run");
-                return EXIT_ALREADY_RUNNING;
-            }
-            Say("STALE LOCK - " + path + " named '" + held + "', which " + (parsed ? "no longer runs" : "is not a pid and start time") + " - taken over");
-        }
-        Say("REFUSED - " + path + " was taken by another launch while its stale holder was being replaced - this launch did not run");
-        return EXIT_ALREADY_RUNNING;
-    }
-
-    static void ReleaseLock(string path, string mine)
-    {
-        if (ReadLock(path) == mine)
-        {
-            File.Delete(path);
-        }
-    }
-
-    static void Say(string text)
-    {
-        Console.Error.WriteLine("ownerGuard: " + text);
-    }
-
-    // The target as the launch has always resolved it (Get-Command -CommandType Application): a name with a folder is
-    // taken as given, a bare name is searched along PATH, and a name without a PATHEXT extension tries each one.
-    static string Resolve(string exe)
-    {
-        List<string> extensions = new List<string>((Environment.GetEnvironmentVariable("PATHEXT") ?? ".COM;.EXE;.BAT;.CMD")
-            .Split(new char[] { ';' }, StringSplitOptions.RemoveEmptyEntries));
-        List<string> folders = new List<string>();
-        if (exe.IndexOfAny(new char[] { '\\', '/', ':' }) >= 0)
-        {
-            folders.Add(null);
-        }
-        else
-        {
-            foreach (string dir in (Environment.GetEnvironmentVariable("PATH") ?? "").Split(new char[] { ';' }, StringSplitOptions.RemoveEmptyEntries))
-            {
-                folders.Add(dir.Trim('"'));
-            }
-        }
-        foreach (string folder in folders)
-        {
-            string stem = folder == null ? exe : Path.Combine(folder, exe);
-            if (File.Exists(stem) && extensions.Exists(delegate(string e) { return stem.EndsWith(e, StringComparison.OrdinalIgnoreCase); }))
-            {
-                return Path.GetFullPath(stem);
-            }
-            foreach (string ext in extensions)
-            {
-                if (File.Exists(stem + ext))
-                {
-                    return Path.GetFullPath(stem + ext);
-                }
-            }
-        }
-        return null;
-    }
-
-    // The command line the target is created with, or null (and a refusal said) when it cannot be carried.
-    static string CommandLine(ref string exe, string[] args, out int refusal)
-    {
-        refusal = 0;
-        string ext = Path.GetExtension(exe).ToLowerInvariant();
-        StringBuilder line = new StringBuilder();
-        if (ext == ".cmd" || ext == ".bat")
-        {
-            foreach (string arg in args)
-            {
-                if (arg.IndexOfAny(new char[] { '\r', '\n' }) >= 0)
-                {
-                    Say("the target '" + exe + "' is a batch file and one of its arguments holds a line break, which cmd.exe cannot carry - nothing was started");
-                    refusal = EXIT_BATCH_LINE_BREAK;
-                    return null;
-                }
-            }
-            StringBuilder inner = new StringBuilder(EscapeCmd(exe));
-            foreach (string arg in args)
-            {
-                inner.Append(' ').Append(EscapeCmd(EscapeCmd(QuoteArg(arg))));
-            }
-            exe = Path.Combine(Environment.SystemDirectory, "cmd.exe");
-            return QuoteArg(exe) + " /d /s /v:off /c \"" + inner + "\"";
-        }
-        line.Append(QuoteArg(exe));
-        foreach (string arg in args)
-        {
-            line.Append(' ').Append(QuoteArg(arg));
-        }
-        return line.ToString();
-    }
-
-    public static int Run(int ownerPid, string exe, string[] args, string cwd)
-    {
-        return Run(ownerPid, exe, args, cwd, 0, false, null);
-    }
-
-    // Runs the target inside a kill-on-close job and answers the target's own exit code. ownerPid <= 0 means
-    // "the parent process owns this launch", FRAME_OWNERS means "the shell frame owns it" (ShellFrame). cwd null or
-    // empty starts the target where this process runs. deadlineSeconds > 0 ends the whole job at that age
-    // (EXIT_DEADLINE). contain leaves BREAKAWAY_OK off, so no process inside can leave the job, Git Bash's
-    // included. lockFile, when given, admits one launch at a time (TakeLock).
-    public static int Run(int ownerPid, string exe, string[] args, string cwd, int deadlineSeconds, bool contain, string lockFile)
-    {
-        if (string.IsNullOrEmpty(exe) || exe.Trim().Length == 0)
-        {
-            Say("the target executable is empty - nothing was started");
-            return EXIT_NO_TARGET;
-        }
-        if (string.IsNullOrEmpty(cwd))
-        {
-            cwd = null;
-        }
-        string resolved = Resolve(exe);
-        if (resolved == null)
-        {
-            Say("the target '" + exe + "' is not an executable on PATH or on disk - nothing was started");
-            return EXIT_NOT_FOUND;
-        }
-        exe = resolved;
-        int refusal;
-        string line = CommandLine(ref exe, args, out refusal);
-        if (line == null)
-        {
-            return refusal;
-        }
-        string mine = null;
-        if (!string.IsNullOrEmpty(lockFile))
-        {
-            int refused = TakeLock(lockFile, out mine);
-            if (refused != 0)
-            {
-                return refused;
-            }
-        }
-        try
-        {
-            return Launch(ownerPid, exe, line, cwd, deadlineSeconds, contain);
-        }
-        finally
-        {
-            if (mine != null)
-            {
-                ReleaseLock(lockFile, mine);
-            }
-        }
-    }
-
-    static int Launch(int ownerPid, string exe, string line, string cwd, int deadlineSeconds, bool contain)
-    {
-        bool frame = ownerPid == FRAME_OWNERS;
-        bool viaParent = !frame && ownerPid <= 0;
-        if (viaParent)
-        {
-            ownerPid = ParentPid();
-        }
-
-        IntPtr job = CreateJobObject(IntPtr.Zero, null);
-        if (job == IntPtr.Zero)
-        {
-            Say("the job object could not be created (win32 " + Marshal.GetLastWin32Error() + ") - the target was NOT started unguarded");
-            return EXIT_NO_JOB;
-        }
-        JOBOBJECT_EXTENDED_LIMIT_INFORMATION limits = new JOBOBJECT_EXTENDED_LIMIT_INFORMATION();
-        limits.BasicLimitInformation.LimitFlags = contain ? KILL_ON_JOB_CLOSE : KILL_ON_JOB_CLOSE | BREAKAWAY_OK;
-        int size = Marshal.SizeOf(limits);
-        IntPtr buffer = Marshal.AllocHGlobal(size);
-        try
-        {
-            Marshal.StructureToPtr(limits, buffer, false);
-            if (!SetInformationJobObject(job, EXTENDED_LIMIT_INFORMATION, buffer, (uint)size))
-            {
-                Say("the job could not be told to kill on close (win32 " + Marshal.GetLastWin32Error() + ") - the target was NOT started unguarded");
-                CloseHandle(job);
-                return EXIT_NO_LIMIT;
-            }
-        }
-        finally
-        {
-            Marshal.FreeHGlobal(buffer);
-        }
-
-        STARTUPINFO startup = new STARTUPINFO();
-        startup.cb = Marshal.SizeOf(startup);
-        IntPtr stdin = GetStdHandle(-10), stdout = GetStdHandle(-11), stderr = GetStdHandle(-12);
-        if (stdin != IntPtr.Zero && stdout != IntPtr.Zero && stderr != IntPtr.Zero)
-        {
-            startup.dwFlags = STARTF_USESTDHANDLES;
-            startup.hStdInput = stdin;
-            startup.hStdOutput = stdout;
-            startup.hStdError = stderr;
-        }
-
-        PROCESS_INFORMATION process;
-        if (!CreateProcess(exe, line, IntPtr.Zero, IntPtr.Zero, true, CREATE_SUSPENDED, IntPtr.Zero, cwd, ref startup, out process))
-        {
-            Say("the target could not be created (win32 " + Marshal.GetLastWin32Error() + ") - nothing was started");
-            CloseHandle(job);
-            return EXIT_NOT_CREATED;
-        }
-        if (!AssignProcessToJobObject(job, process.hProcess))
-        {
-            int error = Marshal.GetLastWin32Error();
-            TerminateJobObject(job, EXIT_NOT_ASSIGNED);
-            CloseHandle(process.hThread);
-            CloseHandle(process.hProcess);
-            CloseHandle(job);
-            Say("the target could not be put under the job that ends it with its owner (win32 " + error + ") - it was stopped rather than left unguarded");
-            return EXIT_NOT_ASSIGNED;
-        }
-
-        // The owner is opened AFTER the target sits in the job and BEFORE it runs, so a dead owner stops it unrun.
-        List<IntPtr> owners = new List<IntPtr>();
-        if (frame)
-        {
-            owners = ShellFrame();
-        }
-        else if (ownerPid > 0)
-        {
-            IntPtr owner = OpenOwner(ownerPid, viaParent);
-            if (owner != IntPtr.Zero)
-            {
-                owners.Add(owner);
-            }
-        }
-        if (owners.Count == 0)
-        {
-            int why = Marshal.GetLastWin32Error();
-            TerminateJobObject(job, EXIT_OWNER_GONE);
-            CloseHandle(process.hThread);
-            CloseHandle(process.hProcess);
-            CloseHandle(job);
-            Say((frame ? "the shell frame above this guard" : "the owner process " + ownerPid) + " cannot be watched (win32 " + why + ") - the target was stopped before it ran");
-            return EXIT_OWNER_GONE;
-        }
-
-        if (ResumeThread(process.hThread) == 0xFFFFFFFF)
-        {
-            int why = Marshal.GetLastWin32Error();
-            TerminateJobObject(job, EXIT_NOT_RESUMED);
-            Say("the target could not be resumed (win32 " + why + ") - it was stopped rather than left suspended");
-            return EXIT_NOT_RESUMED;
-        }
-        CloseHandle(process.hThread);
-
-        List<IntPtr> watched = new List<IntPtr>(owners);
-        watched.Insert(0, process.hProcess);
-        uint waited = WaitForMultipleObjects((uint)watched.Count, watched.ToArray(), false, deadlineSeconds > 0 ? (uint)deadlineSeconds * 1000 : INFINITE);
-        int waitError = Marshal.GetLastWin32Error();
-        foreach (IntPtr owner in owners)
-        {
-            CloseHandle(owner);
-        }
-        if (waited == 0xFFFFFFFF)
-        {
-            TerminateJobObject(job, EXIT_WAIT_FAILED);
-            Say("the wait on the target and its owner failed (win32 " + waitError + ") - the target was stopped rather than left unwatched");
-            return EXIT_WAIT_FAILED;
-        }
-        if (waited == WAIT_TIMEOUT)
-        {
-            TerminateJobObject(job, EXIT_DEADLINE);
-            Say("DEADLINE - the target ran past its " + deadlineSeconds + " s; its whole job was ended");
-            return EXIT_DEADLINE;
-        }
-        if (waited != 0)
-        {
-            TerminateJobObject(job, EXIT_OWNER_GONE);
-            Say("OWNER GONE - a process this launch was bound to ended; the target's whole job was ended");
-            return EXIT_OWNER_GONE;
-        }
-
-        uint code = 0;
-        if (!GetExitCodeProcess(process.hProcess, out code))
-        {
-            int why = Marshal.GetLastWin32Error();
-            TerminateJobObject(job, EXIT_NO_EXIT_CODE);
-            Say("the target's exit code could not be read (win32 " + why + ") - the target was stopped");
-            return EXIT_NO_EXIT_CODE;
-        }
-        TerminateJobObject(job, 1);
-        CloseHandle(process.hProcess);
-        CloseHandle(job);
-        return (int)code;
-    }
-
-    public static int Main(string[] argv)
-    {
-        List<string> rest = new List<string>(argv);
-        int ownerPid = 0;
-        if (rest.Count >= 2 && rest[0] == "--owner")
-        {
-            if (!int.TryParse(rest[1], out ownerPid) || ownerPid <= 0)
-            {
-                Say("--owner needs a process id");
-                return EXIT_NO_TARGET;
-            }
-            rest.RemoveRange(0, 2);
-        }
-        if (rest.Count == 0)
-        {
-            Say("usage: ownerGuard.exe [--owner <pid>] <exe> [args...]");
-            return EXIT_NO_TARGET;
-        }
-        string exe = rest[0];
-        rest.RemoveAt(0);
-        return Run(ownerPid, exe, rest.ToArray(), null);
-    }
-}

package/scripts/shared/ownerGuard.ps1

@@ -1,31 +0,0 @@
-# OWNER-BOUND LAUNCH (#1968): start one target so that it can never outlive its owner, and so that nothing it
-# started can outlive IT. This script is only the PowerShell door onto ownerGuard.cs, which holds the whole job.
-# #2925: the same source is no longer compiled into an ownerGuard.exe for `claudeCode.claudeProcessWrapper` — that
-# build ran csc.exe at every activation, and the .NET compiler is not a dependency a marketplace install may carry.
-# The target's own exit code is answered as this script's exit code.
-param(
-    [Parameter(Mandatory = $true)][int]$OwnerPid,
-    [Parameter(Mandatory = $true)][string]$ExeB64,
-    [Parameter(Mandatory = $true)][string]$ArgsB64,
-    [Parameter(Mandatory = $true)][AllowEmptyString()][string]$CwdB64,
-    [switch]$ShellFrame,
-    [int]$DeadlineSeconds = 0,
-    [switch]$Contain,
-    [string]$LockFile = ""
-)
-
-$ErrorActionPreference = "Stop"
-
-Add-Type -Path (Join-Path $PSScriptRoot "ownerGuard.cs")
-
-$exe = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($ExeB64))
-# ConvertFrom-Json hands back the WHOLE array as one object on Windows PowerShell, so iterate it with
-# foreach: a one-element array arrives as the element itself and a longer one as the array, both right.
-$argv = New-Object System.Collections.Generic.List[string]
-foreach ($item in ([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($ArgsB64)) | ConvertFrom-Json)) {
-    $argv.Add([string]$item)
-}
-$cwd = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($CwdB64))
-
-if ($ShellFrame) { $OwnerPid = [OwnerJob]::FRAME_OWNERS }
-exit ([OwnerJob]::Run($OwnerPid, $exe, $argv.ToArray(), $cwd, $DeadlineSeconds, $Contain.IsPresent, $LockFile))