vibe64 0.1.26 → 0.1.28

package/node_modules/@jskit-ai/connector-google-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/connector-google-calendar",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "Google Calendar account configuration and event operations for JSKIT connectors.",
   "type": "module",
   "scripts": {
@@ -11,7 +11,7 @@
     "./server": "./src/server/provider.js"
   },
   "dependencies": {
-    "@jskit-ai/connectors-core": "0.1.1",
+    "@jskit-ai/connectors-core": "0.1.4",
     "json-rest-schema": "^1.0.17"
   },
   "jskit": {
@@ -30,6 +30,6 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/kernel": "0.1.187"
   }
 }

package/node_modules/@jskit-ai/connector-google-calendar/patterns/calendar-cli/example/package.json

@@ -7,10 +7,10 @@
     "db:migrate:status": "knex --knexfile ./knexfile.js migrate:list"
   },
   "dependencies": {
-    "@jskit-ai/connectors-core": "0.1.1",
-    "@jskit-ai/connector-google-calendar": "0.1.1",
-    "@jskit-ai/database-runtime": "0.1.184",
-    "@jskit-ai/database-runtime-mysql": "0.1.182",
+    "@jskit-ai/connectors-core": "0.1.4",
+    "@jskit-ai/connector-google-calendar": "0.1.4",
+    "@jskit-ai/database-runtime": "0.1.187",
+    "@jskit-ai/database-runtime-mysql": "0.1.185",
     "knex": "^3.1.0"
   }
 }

package/node_modules/@jskit-ai/connectors-catalog/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/connectors-catalog",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "Provider definitions and focused API operations for JSKIT connectors.",
   "type": "module",
   "exports": {
@@ -123,14 +123,14 @@
     "@aws-sdk/client-redshift-data": "3.1128.0",
     "@aws-sdk/client-s3": "3.1128.0",
     "@aws-sdk/s3-request-presigner": "3.1128.0",
-    "@jskit-ai/connectors-core": "0.1.1",
+    "@jskit-ai/connectors-core": "0.1.4",
     "@modelcontextprotocol/sdk": "1.30.0",
     "@smithy/fetch-http-handler": "5.8.0",
     "json-rest-schema": "^1.0.17",
     "jose": "^6.1.3"
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/kernel": "0.1.187"
   },
   "jskit": {
     "kind": "runtime",

package/node_modules/@jskit-ai/connectors-catalog/test/dbt-semantic-layer.test.js

@@ -163,6 +163,9 @@ test("dbt changing environment, host or token reference requires verification fo
 });
 
 test("dbt abort and timeout interrupt requests without replay or automatic page traversal", async (t) => {
+  // The fake transport has no socket to keep Node 22 alive for an unrefed timeout.
+  const keepAlive = setTimeout(() => {}, 1000);
+  t.after(() => clearTimeout(keepAlive));
   const f = await fixture(t); await f.service.connectApiKey(input); const before = f.requests.length;
   const controller = new AbortController(); controller.abort();
   await assert.rejects(f.service.invoke({ ...input, operation: "metrics.list", signal: controller.signal }), { code: "connector_cancelled" });

package/node_modules/@jskit-ai/connectors-catalog/test/google-ads.test.js

@@ -241,6 +241,9 @@ test("Google Ads rejects declined or insufficient consent and keeps managed assi
 });
 
 test("Google Ads refresh scope reduction, API cancellation and timeout do not replay requests", async (t) => {
+  // The fake transport has no socket to keep Node 22 alive for an unrefed timeout.
+  const keepAlive = setTimeout(() => {}, 1000);
+  t.after(() => clearTimeout(keepAlive));
   const f = await fixture(t); await f.connect(); f.state.stall = "api";
   const timed = createConnectionService({ ...f.options, providers: [{ ...provider, requestTimeoutMs: 20 }] });
   await assert.rejects(f.invoke(undefined, timed), { code: "connector_provider_timeout" });

package/node_modules/@jskit-ai/connectors-catalog/test/salesforce.test.js

@@ -235,6 +235,9 @@ test("Salesforce host policy, cancelled/denied consent and managed references ca
 });
 
 test("Salesforce cancellation and timeout interrupt requests and a revoked refresh becomes reconnect-required", async (t) => {
+  // The fake transport has no socket to keep Node 22 alive for an unrefed timeout.
+  const keepAlive = setTimeout(() => {}, 1000);
+  t.after(() => clearTimeout(keepAlive));
   const f = await fixture(t); await f.connect(); f.state.stall = "api";
   const timed = createConnectionService({ ...f.options, providers: [{ ...provider, requestTimeoutMs: 30 }] });
   await assert.rejects(timed.invoke({ ...input, operation: "limits.read" }), { code: "connector_provider_timeout" });

package/node_modules/@jskit-ai/connectors-catalog/test/xero.test.js

@@ -248,6 +248,9 @@ test("Xero errors are redacted, never retried and require reconnect after authen
 });
 
 test("Xero interruption and timeout stop before the accounting call and keep the connection usable", async (t) => {
+  // The fake transport has no socket to keep Node 22 alive for an unrefed timeout.
+  const keepAlive = setTimeout(() => {}, 1000);
+  t.after(() => clearTimeout(keepAlive));
   const f = await fixture(t); await f.connect(); f.state.stall = true;
   const service = createConnectionService({ ...f.options, providers: [{ ...xeroProvider, requestTimeoutMs: 35 }] });
   const count = f.requests.length;

package/node_modules/@jskit-ai/connectors-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/connectors-core",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "description": "Portable integration configuration and server-side account connection runtime.",
   "type": "module",
   "scripts": {
@@ -53,9 +53,9 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/database-runtime": "0.1.184",
-    "@jskit-ai/http-runtime": "0.1.182",
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/database-runtime": "0.1.187",
+    "@jskit-ai/http-runtime": "0.1.185",
+    "@jskit-ai/kernel": "0.1.187"
   },
   "peerDependenciesMeta": {
     "@jskit-ai/database-runtime": {

package/node_modules/@jskit-ai/http-web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/http-web",
-  "version": "0.1.29",
+  "version": "0.1.32",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -44,14 +44,14 @@
     "./client/support/contractGuards": "./src/client/support/contractGuards.js"
   },
   "dependencies": {
-    "@jskit-ai/resource-crud-core": "0.1.126",
+    "@jskit-ai/resource-crud-core": "0.1.129",
     "@mdi/js": "^7.4.47"
   },
   "peerDependencies": {
-    "@jskit-ai/http-runtime": "0.1.182",
-    "@jskit-ai/kernel": "0.1.184",
-    "@jskit-ai/realtime": "0.1.181",
-    "@jskit-ai/shell-web": "0.1.188",
+    "@jskit-ai/http-runtime": "0.1.185",
+    "@jskit-ai/kernel": "0.1.187",
+    "@jskit-ai/realtime": "0.1.184",
+    "@jskit-ai/shell-web": "0.1.191",
     "@tanstack/vue-query": "^5.90.5",
     "vue": "^3.5.13",
     "vue-router": "^5.0.4",

package/node_modules/@jskit-ai/kernel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/kernel",
-  "version": "0.1.184",
+  "version": "0.1.187",
   "type": "module",
   "dependencies": {
     "json-rest-schema": "^1.0.17"

package/node_modules/@jskit-ai/kernel/server/runtime/fastifyBootstrap.js

@@ -1,5 +1,5 @@
 import { ActionRuntimeError } from "../../shared/actions/actionDefinitions.js";
-import { normalizeOpaqueId } from "../../shared/support/normalize.js";
+import { normalizeOpaqueId, normalizeTransactionOutcome } from "../../shared/support/normalize.js";
 import { resolveDefaultSurfaceId } from "../support/appConfig.js";
 
 const JSON_API_CONTENT_TYPE = "application/vnd.api+json";
@@ -255,7 +255,9 @@ function resolveRequestRouteTransport(request) {
 
 function applyRouteTransportErrorResponse(reply, request, error, {
   statusCode = 500,
-  normalizedErrorCode = ""
+  normalizedErrorCode = "",
+  message = error?.message,
+  exposeDetails = true
 } = {}) {
   const transport = resolveRequestRouteTransport(request);
   const errorSerializer = transport && typeof transport.error === "function" ? transport.error : null;
@@ -267,7 +269,9 @@ function applyRouteTransportErrorResponse(reply, request, error, {
     request,
     reply,
     statusCode,
-    code: normalizedErrorCode
+    code: normalizedErrorCode,
+    message,
+    exposeDetails
   });
 
   if (payload && typeof payload.then === "function") {
@@ -282,6 +286,36 @@ function applyRouteTransportErrorResponse(reply, request, error, {
   return true;
 }
 
+function resolveApiErrorStatus(error, code) {
+  // JSON REST's public error codes need HTTP classification even without status hints.
+  switch (code) {
+    case "REST_API_VALIDATION":
+      return 422;
+    case "REST_API_RESOURCE":
+      switch (error?.subtype) {
+        case "not_found": return 404;
+        case "forbidden": return 403;
+        case "conflict": return 409;
+        default: return 400;
+      }
+    case "REST_API_VERSION_CONFLICT":
+      return 409;
+    case "REST_API_PRECONDITION_FAILED":
+      return 412;
+    case "REST_API_FIELDSET_INVALID":
+    case "REST_API_INCLUDE_INVALID":
+      return 400;
+    case "REST_API_PAYLOAD":
+      return error?.statusCode === 413 ? 413 : 400;
+    case "REST_API_TEMPORAL_DATA_INVALID":
+      return 500;
+    default: {
+      const status = Number(error?.statusCode || error?.status);
+      return Number.isInteger(status) && status >= 400 && status <= 599 ? status : 500;
+    }
+  }
+}
+
 function registerApiErrorHandler(
   app,
   {
@@ -308,10 +342,10 @@ function registerApiErrorHandler(
 
   app.setErrorHandler((error, request, reply) => {
     const normalizedErrorCode = String(error?.code || "").trim();
+    const transactionOutcome = normalizeTransactionOutcome(error?.transactionOutcome);
+    const outcomeFields = transactionOutcome ? { transactionOutcome } : {};
     const isCsrfErrorCode = normalizedErrorCode.startsWith("FST_CSRF_");
-    const statusFromError = Number(error?.statusCode || error?.status);
-    const statusCode =
-      Number.isInteger(statusFromError) && statusFromError >= 400 && statusFromError <= 599 ? statusFromError : 500;
+    const statusCode = resolveApiErrorStatus(error, normalizedErrorCode);
 
     if (Array.isArray(error?.validation)) {
       const fieldErrors = resolveValidationFieldErrors(error);
@@ -325,6 +359,7 @@ function registerApiErrorHandler(
       reply.code(400).send({
         error: "Validation failed.",
         code: validationErrorCode,
+        ...outcomeFields,
         fieldErrors,
         details: {
           fieldErrors
@@ -336,7 +371,8 @@ function registerApiErrorHandler(
     if (isAppError(error) || error instanceof ActionRuntimeError) {
       if (applyRouteTransportErrorResponse(reply, request, error, {
         statusCode: error.status,
-        normalizedErrorCode: normalizedErrorCode || "app_error"
+        normalizedErrorCode: normalizedErrorCode || "app_error",
+        exposeDetails: shouldExposeAppErrorDetails(normalizedErrorCode)
       })) {
         return;
       }
@@ -349,7 +385,8 @@ function registerApiErrorHandler(
       const appErrorCode = normalizedErrorCode || "app_error";
       const payload = {
         error: error.message,
-        code: appErrorCode
+        code: appErrorCode,
+        ...outcomeFields
       };
       if (error.details && shouldExposeAppErrorDetails(appErrorCode)) {
         payload.details = error.details;
@@ -385,7 +422,8 @@ function registerApiErrorHandler(
       normalizedErrorCode || (statusCode >= 500 ? "internal_server_error" : "request_failed");
     const payload = {
       error: message,
-      code: fallbackErrorCode
+      code: fallbackErrorCode,
+      ...outcomeFields
     };
     if (isCsrfErrorCode) {
       payload.details = {
@@ -394,7 +432,9 @@ function registerApiErrorHandler(
     }
     if (applyRouteTransportErrorResponse(reply, request, error, {
       statusCode,
-      normalizedErrorCode: fallbackErrorCode
+      normalizedErrorCode: fallbackErrorCode,
+      message,
+      exposeDetails: statusCode < 500
     })) {
       return;
     }

package/node_modules/@jskit-ai/kernel/server/runtime/fastifyBootstrap.test.js

@@ -155,6 +155,44 @@ test("registerApiErrorHandler includes internal_server_error code for unhandled
   assert.equal(reply.payload.error, "Internal server error.");
 });
 
+test("registerApiErrorHandler exposes only allowlisted transaction outcomes", () => {
+  const fastify = createFastifyStub();
+  registerApiErrorHandler(fastify, { isAppError });
+  for (const transactionOutcome of ["none", "pending", "committed", "rolledBack", "unknown"]) {
+    const error = Object.assign(new Error("Private SQL failure"), {
+      transactionOutcome,
+      cause: { password: "private" },
+      cleanupErrors: [{ message: "private cleanup" }]
+    });
+    const reply = createReplyStub();
+    fastify.errorHandler(error, {}, reply);
+    assert.equal(reply.statusCode, 500);
+    assert.deepEqual(reply.payload, {
+      error: "Internal server error.",
+      code: "internal_server_error",
+      transactionOutcome
+    });
+  }
+  for (const transactionOutcome of [undefined, "success", { secret: "private" }]) {
+    const reply = createReplyStub();
+    fastify.errorHandler(Object.assign(new Error("private"), { transactionOutcome }), {}, reply);
+    assert.equal(Object.hasOwn(reply.payload, "transactionOutcome"), false);
+  }
+});
+
+test("AppError and validation payloads retain transaction outcomes", () => {
+  const fastify = createFastifyStub();
+  registerApiErrorHandler(fastify, { isAppError });
+  for (const error of [
+    Object.assign(new AppError(409, "Conflict."), { transactionOutcome: "rolledBack" }),
+    { validation: [{ instancePath: "/title", message: "Required" }], transactionOutcome: "none" }
+  ]) {
+    const reply = createReplyStub();
+    fastify.errorHandler(error, {}, reply);
+    assert.equal(reply.payload.transactionOutcome, error.transactionOutcome);
+  }
+});
+
 test("registerApiErrorHandler keeps known error code for non-app errors", () => {
   const fastify = createFastifyStub();
   registerApiErrorHandler(fastify, { isAppError });

package/node_modules/@jskit-ai/kernel/shared/support/normalize.js

@@ -1,3 +1,9 @@
+const TRANSACTION_OUTCOMES = Object.freeze(["none", "pending", "committed", "rolledBack", "unknown"]);
+
+function normalizeTransactionOutcome(value) {
+  return TRANSACTION_OUTCOMES.includes(value) ? value : "";
+}
+
 function normalizeText(value, { fallback = "" } = {}) {
   const normalized = String(value || "").trim();
   return normalized || fallback;
@@ -351,6 +357,8 @@ function ensureNonEmptyText(value, label = "value") {
 }
 
 export {
+  TRANSACTION_OUTCOMES,
+  normalizeTransactionOutcome,
   normalizeText,
   hasValue,
   normalizeBoolean,

package/node_modules/@jskit-ai/kernel/shared/support/normalize.test.js

@@ -17,9 +17,19 @@ import {
   normalizeOneOf,
   normalizeQueryToken,
   normalizeText,
+  normalizeTransactionOutcome,
   normalizeUniqueTextList
 } from "./normalize.js";
 
+test("normalizeTransactionOutcome accepts only the documented literal outcomes", () => {
+  for (const value of ["none", "pending", "committed", "rolledBack", "unknown"]) {
+    assert.equal(normalizeTransactionOutcome(value), value);
+  }
+  for (const value of [undefined, null, false, 0, "", "rolledback", " committed ", { toString: () => "committed" }]) {
+    assert.equal(normalizeTransactionOutcome(value), "");
+  }
+});
+
 test("hasValue returns false for nullish and blank text, true otherwise", () => {
   assert.equal(hasValue(null), false);
   assert.equal(hasValue(undefined), false);

package/node_modules/@jskit-ai/payments-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/payments-core",
-  "version": "0.1.1",
+  "version": "0.1.4",
   "type": "module",
   "description": "Application-owned payment configuration, subscription access and transactional usage credits.",
   "exports": {

package/node_modules/@jskit-ai/realtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/realtime",
-  "version": "0.1.181",
+  "version": "0.1.184",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -20,8 +20,8 @@
     "socket.io-client": "^4.8.3"
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184",
-    "@jskit-ai/shell-web": "0.1.188",
+    "@jskit-ai/kernel": "0.1.187",
+    "@jskit-ai/shell-web": "0.1.191",
     "vue": "^3.5.13"
   },
   "description": "Thin, generic realtime runtime wrappers for socket.io server and client.",

package/node_modules/@jskit-ai/realtime/patterns/realtime-application/example/package.json

@@ -2,7 +2,7 @@
   "private": true,
   "type": "module",
   "dependencies": {
-    "@jskit-ai/realtime": "0.1.181",
-    "@jskit-ai/shell-web": "0.1.188"
+    "@jskit-ai/realtime": "0.1.184",
+    "@jskit-ai/shell-web": "0.1.191"
   }
 }

package/node_modules/@jskit-ai/resource-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/resource-core",
-  "version": "0.1.126",
+  "version": "0.1.129",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -27,6 +27,6 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/kernel": "0.1.187"
   }
 }

package/node_modules/@jskit-ai/resource-crud-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/resource-crud-core",
-  "version": "0.1.126",
+  "version": "0.1.129",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -13,7 +13,7 @@
     "./shared/crudResource": "./src/shared/crudResource.js"
   },
   "dependencies": {
-    "@jskit-ai/resource-core": "0.1.126"
+    "@jskit-ai/resource-core": "0.1.129"
   },
   "description": "Shared CRUD resource, field, lookup, filter, and namespace contracts.",
   "jskit": {
@@ -34,6 +34,6 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/kernel": "0.1.187"
   }
 }

package/node_modules/@jskit-ai/shell-web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/shell-web",
-  "version": "0.1.188",
+  "version": "0.1.191",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -31,7 +31,7 @@
     "@mdi/js": "^7.4.47"
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "pinia": "^3.0.4",
     "vue": "^3.5.13",
     "vue-router": "^5.0.4",

package/node_modules/@jskit-ai/uploads-runtime/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/uploads-runtime",
-  "version": "0.1.159",
+  "version": "0.1.162",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -77,6 +77,6 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/kernel": "0.1.184"
+    "@jskit-ai/kernel": "0.1.187"
   }
 }

package/node_modules/@local/current-app/package.json

@@ -48,7 +48,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "@local/vibe64-core": "0.1.0",
     "@local/vibe64-genesis": "0.1.0",
     "@local/vibe64-project": "0.1.0",

package/node_modules/@local/main/package.json

@@ -28,7 +28,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
-    "@jskit-ai/realtime": "0.1.181"
+    "@jskit-ai/kernel": "0.1.187",
+    "@jskit-ai/realtime": "0.1.184"
   }
 }

package/node_modules/@local/studio-health/package.json

@@ -49,7 +49,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "@local/vibe64-accounts": "0.1.0",
     "@local/vibe64-core": "0.1.0",
     "@local/vibe64-execution": "0.1.0",

package/node_modules/@local/vibe64-accounts/package.json

@@ -61,9 +61,9 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/http-web": "0.1.29",
-    "@jskit-ai/kernel": "0.1.184",
-    "@jskit-ai/realtime": "0.1.181",
+    "@jskit-ai/http-web": "0.1.32",
+    "@jskit-ai/kernel": "0.1.187",
+    "@jskit-ai/realtime": "0.1.184",
     "@mdi/js": "^7.4.47",
     "@local/studio-terminal-core": "0.1.0",
     "@local/vibe64-core": "0.1.0",

package/node_modules/@local/vibe64-core/package.json

@@ -98,7 +98,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "@local/vibe64-execution": "0.1.0"
   }
 }

package/node_modules/@local/vibe64-database-tools/package.json

@@ -67,9 +67,9 @@
     "@codemirror/language": "^6.12.4",
     "@codemirror/state": "^6.7.0",
     "@codemirror/view": "^6.43.4",
-    "@jskit-ai/http-web": "0.1.29",
-    "@jskit-ai/kernel": "0.1.184",
-    "@jskit-ai/shell-web": "0.1.188",
+    "@jskit-ai/http-web": "0.1.32",
+    "@jskit-ai/kernel": "0.1.187",
+    "@jskit-ai/shell-web": "0.1.191",
     "@local/vibe64-core": "0.1.0",
     "@local/vibe64-execution": "0.1.0",
     "@local/vibe64-project": "0.1.0",

package/node_modules/@local/vibe64-project/package.json

@@ -57,7 +57,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "@local/vibe64-core": "0.1.0",
     "@local/vibe64-execution": "0.1.0",
     "@local/vibe64-genesis": "0.1.0",

package/node_modules/@local/vibe64-runtime/src/server/codexAppServerProvider.js

@@ -1480,6 +1480,19 @@ async function stopCodexAppServerRuntime(options = {}) {
         stopped: false
       };
     }
+    const expectedAccount = normalizeAgentText(options.expectedAccountIdentitySignature);
+    if (expectedAccount) {
+      // A replacement runtime is installed only after the previous process has
+      // drained under this same lock. Never stop that replacement for stale
+      // ephemeral-thread cleanup.
+      if (!codexAppServerProcessMetadataIsIdentifiable(existing, runtimeDir) ||
+          !/^sha256:[a-f0-9]{64}$/u.test(existing.accountIdentitySignature)) {
+        return { processExitVerified: false, runtimeDirRemoved: false, stopped: false };
+      }
+      if (existing.accountIdentitySignature !== expectedAccount) {
+        return { ownershipSuperseded: true, processExitVerified: false, runtimeDirRemoved: false, stopped: false };
+      }
+    }
     processStop = await stopCodexAppServerProcess(runtimeDir, options);
     if (processStop.processExitVerified === true && preserveProcessExitProof) {
       const metadata = await readCodexAppServerMetadata(runtimeDir);
@@ -3650,6 +3663,25 @@ class CodexAppServerAgentProvider {
     };
   }
 
+  async readGoal(threadId = "") {
+    const client = await this.activeClient();
+    return this.runRequest(
+      () => client.request("thread/goal/get", { threadId: normalizeAgentText(threadId) }),
+      "codex-app-server-goal-read"
+    );
+  }
+
+  async setGoalStatus(threadId = "", status = "") {
+    if (!["active", "paused"].includes(status)) {
+      throw new TypeError("Invalid Codex goal status.");
+    }
+    const client = await this.activeClient();
+    return this.runRequest(
+      () => client.request("thread/goal/set", { threadId: normalizeAgentText(threadId), status }),
+      "codex-app-server-goal-status"
+    );
+  }
+
   async readThread(threadId = "") {
     const client = await this.activeClient();
     const response = await this.runRequest(
@@ -3994,12 +4026,14 @@ class CodexAppServerAgentProvider {
   }
 
   async stopRuntime({
+    expectedAccountIdentitySignature = "",
     preserveProcessExitProof = false
   } = {}) {
     this.close();
     const runtime = this.runtime || {};
     const result = await stopCodexAppServerRuntime({
       ...this.options,
+      expectedAccountIdentitySignature,
       preserveProcessExitProof,
       runtimeDir: runtime.runtimeDir || this.options.runtimeDir
     });

package/node_modules/@local/vibe64-sessions/package.json

@@ -50,7 +50,7 @@
     }
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.184",
+    "@jskit-ai/kernel": "0.1.187",
     "@local/vibe64-core": "0.1.0",
     "@local/vibe64-execution": "0.1.0",
     "@local/vibe64-project": "0.1.0",