fix(computer): bind macOS helper to supervised peer pid (#11475)

2026-09-22 00:02:31 +00:00 · 2026-07-29 19:49:36 -07:00
parent 80c42d38c7
commit 1f2f809a11
13 changed files with 352 additions and 146 deletions
@@ -0,0 +1,31 @@
+public struct AgentLaunchArguments: Equatable, Sendable {
+    public let socketPath: String
+    public let tokenFilePath: String
+    public let expectedPeerProcessId: Int32
+
+    public static func parse(_ arguments: [String]) -> AgentLaunchArguments? {
+        guard arguments.count == 6,
+              arguments[0] == "--agent",
+              !arguments[1].isEmpty,
+              arguments[2] == "--token-file",
+              !arguments[3].isEmpty,
+              arguments[4] == "--peer-pid",
+              let expectedPeerProcessId = Int32(arguments[5]),
+              expectedPeerProcessId > 0
+        else {
+            return nil
+        }
+        return AgentLaunchArguments(
+            socketPath: arguments[1],
+            tokenFilePath: arguments[3],
+            expectedPeerProcessId: expectedPeerProcessId
+        )
+    }
+}
+
+public func isAuthorizedAgentPeer(
+    peerProcessId: Int32?,
+    expectedProcessId: Int32
+) -> Bool {
+    expectedProcessId > 0 && peerProcessId == expectedProcessId
+}