omp-conductor 0.18.1 → 0.18.2

package/src/worker.ts

@@ -12,7 +12,6 @@
 
 import { mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import type { WorkerIdentity } from "./host.ts";
 import { createSession, disposeSession, SessionAdmissionClosedError, type AgentSessionLike } from "./omp.ts";
 import type { GateShape, ReleaseBlockContext } from "./release-policy.ts";
 import type { Caps, GraphToolsObservation, ResolvedGrants, RunState } from "./types.ts";
@@ -218,17 +217,6 @@ export interface WorkerOpts {
   onReleaseBlocked?: (shape: GateShape, context: ReleaseBlockContext) => void;
   /** The child's pid, the instant it exists. See {@link VerbListener.bindPid}. */
   onSpawn?: (pid: number) => void;
-  /**
-   * The worker identity this session runs under (#798): the dedicated
-   * least-privilege account the daemon resolved for worker launch. Forwarded
-   * to `createSession`, which launches the child through the identity
-   * transition (setpriv), re-points its environment at the worker's own home,
-   * grants it the control socket, and refuses the session unless its kernel
-   * uid/gid match. The daemon supplies it for every worker launch and refuses
-   * to dispatch a worker without it; absent, the session runs as the
-   * caller's own identity (orchestrator, tests).
-   */
-  workerIdentity?: WorkerIdentity;
   /** Control socket for that child, beside the run's own session directory. */
   socketPath?: string;
   /**
@@ -571,7 +559,6 @@ export async function runWorker(
       role: "worker",
       ...(o.releaseGrants === undefined ? {} : { releaseGrants: o.releaseGrants }),
       ...(o.onReleaseBlocked === undefined ? {} : { onReleaseBlocked: o.onReleaseBlocked }),
-      ...(o.workerIdentity === undefined ? {} : { identity: o.workerIdentity }),
       ...(o.onSpawn === undefined ? {} : { onSpawn: o.onSpawn }),
       ...(o.socketPath === undefined ? {} : { socketPath: o.socketPath }),
       ...(o.verbSocketPath === undefined ? {} : { verbSocketPath: o.verbSocketPath }),