@0xmaxma/claude-gateway 1.3.25 → 1.3.31

package/dist/agent/recovery-policy.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ * Recovery policy (Epic #195, Phase 3).
+ *
+ * Turns a (schema-validated) triage verdict into an actual recovery action —
+ * but only after enforcing three independent guards, so a compromised or
+ * mistaken triage step can never drive an unsafe intervention:
+ *
+ *   1. Per-stage whitelist. Each pipeline stage permits only a small set of
+ *      actions (a `dispatch` stall may redeliver or restart the receiver; a
+ *      `progress` PTY wedge may press esc or restart the session). An action
+ *      the stage does not permit is clamped to `notify-only`, regardless of
+ *      what triage proposed.
+ *   2. Budget + cooldown. Interventions are capped per turn and spaced by a
+ *      cooldown, so a flapping stall cannot trigger an unbounded action loop.
+ *   3. Safe-mode escalation. Repeated PTY-stage failures recommend flipping the
+ *      agent to the headless backend instead of retrying the same wedge.
+ *
+ * All functions are pure — no IO, no clock reads (the caller passes `now`).
+ * The executor that actually presses keys / restarts / flips backend lives in
+ * the runner; this module decides, it never acts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SAFE_MODE_THRESHOLD = exports.DEFAULT_BUDGET = exports.DEFAULT_COOLDOWN_MS = exports.DEFAULT_MAX_INTERVENTIONS_PER_TURN = exports.STAGE_ALLOWED_ACTIONS = exports.NOTIFY_ONLY_PLAN = void 0;
+exports.selectRecoveryAction = selectRecoveryAction;
+exports.defaultActionForStage = defaultActionForStage;
+exports.initialBudget = initialBudget;
+exports.checkBudget = checkBudget;
+exports.shouldEnterSafeMode = shouldEnterSafeMode;
+exports.shouldExitSafeMode = shouldExitSafeMode;
+/** The safe no-op plan. */
+exports.NOTIFY_ONLY_PLAN = {
+    action: 'notify-only',
+    reason: 'no permitted action',
+};
+/**
+ * Actions permitted per stalled stage. Deliberately conservative: destructive
+ * or cross-cutting actions (restart-receiver, fallback-headless) are only
+ * allowed where they make sense. `notify-only` is always implicitly allowed.
+ */
+exports.STAGE_ALLOWED_ACTIONS = {
+    // Receiver/channel ingress — nothing to press; escalate the transport.
+    inbound: ['restart-receiver', 'notify-only'],
+    // Runner failed to inject — restart the session.
+    inject: ['restart-session', 'notify-only'],
+    // Session/CLI startup wedged — restart, or fall back to headless.
+    startup: ['restart-session', 'fallback-headless', 'notify-only'],
+    // Claude producing no output — a TUI overlay is the usual cause: dismiss it,
+    // pick a menu option, or restart; repeated failures escalate to headless.
+    progress: [
+        'esc',
+        'esc-esc',
+        'enter',
+        'select-option',
+        'bridge-menu',
+        'restart-session',
+        'fallback-headless',
+        'notify-only',
+    ],
+    // Turn ended, no artifact — redeliver or restart the session.
+    delivery: ['redeliver-forward', 'restart-session', 'notify-only'],
+    // Artifact written, not sent — redeliver, or restart the receiver.
+    dispatch: ['redeliver-forward', 'restart-receiver', 'notify-only'],
+};
+/**
+ * Decide the recovery plan for a stalled stage given an optional triage verdict.
+ * If a verdict is supplied, its action is honoured ONLY if the stage permits it;
+ * otherwise the plan clamps to notify-only. With no verdict, a conservative
+ * default action for the stage is used (still whitelist-checked).
+ */
+function selectRecoveryAction(input) {
+    const allowed = exports.STAGE_ALLOWED_ACTIONS[input.stage] ?? ['notify-only'];
+    if (input.verdict) {
+        const a = input.verdict.action;
+        if (a === 'notify-only' || a === 'none') {
+            return { action: 'notify-only', reason: `triage:${a}` };
+        }
+        if (allowed.includes(a)) {
+            const plan = { action: a, reason: `triage:${input.verdict.state}` };
+            if (a === 'select-option' && typeof input.verdict.option === 'number') {
+                plan.option = input.verdict.option;
+            }
+            // select-option with no option index is not actionable → clamp.
+            if (a === 'select-option' && plan.option === undefined) {
+                return { action: 'notify-only', reason: 'select-option missing option index' };
+            }
+            return plan;
+        }
+        // Triage proposed an action this stage does not permit → refuse it.
+        return { action: 'notify-only', reason: `clamped: ${a} not allowed at ${input.stage}` };
+    }
+    // No triage available → deterministic default per stage.
+    const fallback = defaultActionForStage(input.stage);
+    if (allowed.includes(fallback)) {
+        return { action: fallback, reason: `default:${input.stage}` };
+    }
+    return exports.NOTIFY_ONLY_PLAN;
+}
+/** Conservative default action when no triage verdict is available. */
+function defaultActionForStage(stage) {
+    switch (stage) {
+        case 'dispatch':
+            return 'redeliver-forward';
+        case 'delivery':
+            return 'redeliver-forward';
+        case 'inject':
+        case 'startup':
+            return 'restart-session';
+        case 'inbound':
+            return 'restart-receiver';
+        case 'progress':
+            // A progress wedge is ambiguous without triage; do not blindly press keys.
+            return 'notify-only';
+        default:
+            return 'notify-only';
+    }
+}
+// ─── Budget + cooldown ──────────────────────────────────────────────────────
+exports.DEFAULT_MAX_INTERVENTIONS_PER_TURN = 3;
+exports.DEFAULT_COOLDOWN_MS = 30000;
+exports.DEFAULT_BUDGET = {
+    maxPerTurn: exports.DEFAULT_MAX_INTERVENTIONS_PER_TURN,
+    cooldownMs: exports.DEFAULT_COOLDOWN_MS,
+};
+function initialBudget(turnKey) {
+    return { turnKey, attempts: 0, lastAt: 0 };
+}
+/**
+ * Decide whether an intervention is allowed now, and return the state to keep.
+ * Resets the counter when the turn changes; enforces the per-turn cap and the
+ * cooldown between attempts. Pure — the caller supplies `now`.
+ */
+function checkBudget(state, turnKey, now, cfg = exports.DEFAULT_BUDGET) {
+    // New turn → fresh budget.
+    const base = state.turnKey === turnKey ? state : initialBudget(turnKey);
+    if (base.attempts >= cfg.maxPerTurn) {
+        return { allowed: false, reason: 'budget exhausted for this turn', next: base };
+    }
+    if (base.attempts > 0 && now - base.lastAt < cfg.cooldownMs) {
+        return { allowed: false, reason: 'cooldown active', next: base };
+    }
+    return {
+        allowed: true,
+        reason: 'ok',
+        next: { turnKey, attempts: base.attempts + 1, lastAt: now },
+    };
+}
+// ─── Safe-mode escalation ─────────────────────────────────────────────────
+exports.DEFAULT_SAFE_MODE_THRESHOLD = 3;
+/**
+ * Whether repeated PTY-stage failures should escalate to safe mode (flip the
+ * agent to the headless backend). Pure.
+ */
+function shouldEnterSafeMode(consecutivePtyFailures, threshold = exports.DEFAULT_SAFE_MODE_THRESHOLD) {
+    return consecutivePtyFailures >= threshold;
+}
+/**
+ * Whether safe mode should be lifted. Safe mode is a reactive fallback; it is
+ * cleared explicitly — on a successful PTY turn after a fix, or on user command.
+ */
+function shouldExitSafeMode(input) {
+    return Boolean(input.manualRestore || input.healthyPtyTurnObserved);
+}
+//# sourceMappingURL=recovery-policy.js.map

package/dist/agent/recovery-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-policy.js","sourceRoot":"","sources":["../../src/agent/recovery-policy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA0DH,oDAiCC;AAGD,sDAiBC;AA2BD,sCAEC;AAcD,kCAqBC;AAUD,kDAKC;AAMD,gDAKC;AAzLD,2BAA2B;AACd,QAAA,gBAAgB,GAAiB;IAC5C,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,qBAAqB;CAC9B,CAAA;AAED;;;;GAIG;AACU,QAAA,qBAAqB,GAAkD;IAClF,uEAAuE;IACvE,OAAO,EAAE,CAAC,kBAAkB,EAAE,aAAa,CAAC;IAC5C,iDAAiD;IACjD,MAAM,EAAE,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC1C,kEAAkE;IAClE,OAAO,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,aAAa,CAAC;IAChE,6EAA6E;IAC7E,0EAA0E;IAC1E,QAAQ,EAAE;QACR,KAAK;QACL,SAAS;QACT,OAAO;QACP,eAAe;QACf,aAAa;QACb,iBAAiB;QACjB,mBAAmB;QACnB,aAAa;KACd;IACD,8DAA8D;IAC9D,QAAQ,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,aAAa,CAAC;IACjE,mEAAmE;IACnE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,CAAC;CACnE,CAAA;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,KAIpC;IACC,MAAM,OAAO,GAAG,6BAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAErE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;QAC9B,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACxC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,CAAA;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;YACjF,IAAI,CAAC,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACtE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;YACpC,CAAC;YACD,gEAAgE;YAChE,IAAI,CAAC,KAAK,eAAe,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAA;YAChF,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,oEAAoE;QACpE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,mBAAmB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACzF,CAAC;IAED,yDAAyD;IACzD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IAC/D,CAAC;IACD,OAAO,wBAAgB,CAAA;AACzB,CAAC;AAED,uEAAuE;AACvE,SAAgB,qBAAqB,CAAC,KAAa;IACjD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAA;QAC5B,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAA;QAC5B,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,iBAAiB,CAAA;QAC1B,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAA;QAC3B,KAAK,UAAU;YACb,2EAA2E;YAC3E,OAAO,aAAa,CAAA;QACtB;YACE,OAAO,aAAa,CAAA;IACxB,CAAC;AACH,CAAC;AAED,+EAA+E;AAElE,QAAA,kCAAkC,GAAG,CAAC,CAAA;AACtC,QAAA,mBAAmB,GAAG,KAAM,CAAA;AAO5B,QAAA,cAAc,GAAiB;IAC1C,UAAU,EAAE,0CAAkC;IAC9C,UAAU,EAAE,2BAAmB;CAChC,CAAA;AAYD,SAAgB,aAAa,CAAC,OAAe;IAC3C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;AAC5C,CAAC;AASD;;;;GAIG;AACH,SAAgB,WAAW,CACzB,KAAkB,EAClB,OAAe,EACf,GAAW,EACX,MAAoB,sBAAc;IAElC,2BAA2B;IAC3B,MAAM,IAAI,GACR,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAE5D,IAAI,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACjF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAClE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE;KAC5D,CAAA;AACH,CAAC;AAED,6EAA6E;AAEhE,QAAA,2BAA2B,GAAG,CAAC,CAAA;AAE5C;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,sBAA8B,EAC9B,YAAoB,mCAA2B;IAE/C,OAAO,sBAAsB,IAAI,SAAS,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,KAGlC;IACC,OAAO,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;AACrE,CAAC"}

package/dist/agent/runner.d.ts

@@ -31,6 +31,9 @@ export declare class AgentRunner extends EventEmitter {
     private readonly sessionSpawnLocks;
     private readonly tooLargeRecoveries;
     private readonly tooLargeExhausted;
+    private readonly safeMode;
+    private readonly recoveryBudgets;
+    private readonly lastTurn;
     private readonly pendingImagePaths;
     private readonly channelCoalesce;
     private readonly coalesceWindowMs;
@@ -55,6 +58,47 @@ export declare class AgentRunner extends EventEmitter {
      * Each payload is routed to the appropriate SessionProcess by chat_id.
      */
     private startCallbackServer;
+    /**
+     * Handle POST /recover from the receiver process (Epic #195, Phase 3b).
+     * The watchdog detects a stall in the receiver, but recovery must run here in
+     * the runner, where the live control surfaces live. Runs the pure executor
+     * with effects bound to the affected session and returns the outcome so the
+     * receiver can persist it to the incident bundle.
+     */
+    private handleRecoverRequest;
+    /**
+     * Route raw interactive-terminal input to the session with this actual
+     * sessionId (Issue #201). The dashboard's Terminal Viewer input mode
+     * streams keystrokes here via the pty-stream WebSocket. Sessions are keyed by
+     * chatId internally, so we match on the process's own sessionId. Returns true
+     * only when a live pty-shell session accepted the bytes (headless / missing /
+     * not-writable → false), so the caller can surface an accurate result.
+     */
+    sendInputToSession(sessionId: string, data: string): boolean;
+    /**
+     * Build the recovery effects bound to one chat's session (Phase 3b). Each
+     * effect resolves the session fresh so it survives a restart mid-recovery.
+     * Keystroke effects go through the wrapper control channel; restart/backend
+     * effects act on the session and safe-mode manager. Effects intentionally
+     * omitted (redeliver-forward, restart-receiver, bridge-menu) are transport /
+     * wrapper concerns not bridged to the runner — the executor reports them as
+     * unsupported rather than guessing.
+     */
+    private buildRecoveryEffects;
+    /**
+     * Evict finished-turn budget entries (Epic #195, Phase 3b). Called on each
+     * budget write so the per-turn map cannot grow without bound on a long-lived
+     * runner. `nowMs` is the timestamp of the write just made; any entry whose last
+     * attempt predates the TTL belongs to a turn that is no longer being recovered.
+     */
+    private pruneRecoveryBudgets;
+    /**
+     * One-shot local `claude -p` triage runner (Phase 3b). Feeds the closed
+     * classification prompt on stdin and returns raw stdout. Hard timeout →
+     * timedOut, which the executor collapses to a safe notify-only verdict. Only
+     * invoked when autoRecover is enabled.
+     */
+    private recoveryTriageSpawn;
     /**
      * Handle POST /command requests from the receiver process.
      * Supports: get_model, set_model, restart.

package/dist/agent/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAMtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAW,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAShH,OAAO,EAA0C,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAGvF,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAmB1C,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD,eAAO,MAAM,cAAc,EAAE,WAAW,EAUvC,CAAC;AAaF,eAAO,MAAM,0BAA0B,OAAO,CAAC;AA6C/C,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,SAAS,CAAoC;IAErD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IACjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAEvC,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsD;IACvF,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,eAAe,CAAgC;IAEvD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAA+C;IAGvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAGxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA8C;IAMhF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAKhE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAGvD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+B;IAOjE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAO5B;IAIJ,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAG1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IAGrE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoH;IAKnJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAGxD,OAAO,CAAC,aAAa,CAAwC;IAG7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAGpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAGtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAGlC,OAAO,CAAC,aAAa,CAA6B;gBAEtC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM;IAwBnF;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,gBAAgB,IAAI,aAAa;IAIjC,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;OAGG;YACW,mBAAmB;IAgHjC;;;OAGG;YACW,oBAAoB;IAqLlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,MAAM,CAAC,aAAa;IAI5B,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAsGxB,OAAO,CAAC,MAAM,CAAC,eAAe;YA0ChB,iBAAiB;YAgDjB,YAAY;IAkX1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIpD;;OAEG;YACW,oBAAoB;IAsBlC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;YACW,wBAAwB;IA+CtC;;OAEG;YACW,gBAAgB;IAM9B;;OAEG;YACW,mBAAmB;IAUjC;;;OAGG;YACW,iBAAiB;IAM/B;;;OAGG;YACW,kBAAkB;IA8BhC;;OAEG;YACW,oBAAoB;IA4ClC;;;OAGG;YACW,aAAa;IAS3B;;;OAGG;YACW,cAAc;IAS5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,qBAAqB;IAyC7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BlE;;OAEG;IACH,OAAO,CAAC,SAAS;IAWjB;;;;OAIG;IACD,OAAO,CAAC,YAAY;IAMtB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,eAAe;YAST,wBAAwB;IA2BtC,OAAO,CAAC,gBAAgB;IAexB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,gBAAgB;IAalB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,iBAAiB,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI;IAQ/C,cAAc,IAAI,IAAI;IAetB,aAAa,IAAI,IAAI;IAOrB,cAAc,IAAI,WAAW;IAI7B,qBAAqB,IAAI,IAAI;IAY7B,oBAAoB,IAAI,IAAI;IAO5B,oBAAoB,IAAI,IAAI;IAY5B,mBAAmB,IAAI,IAAI;IAOrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5F,OAAO,CAAC,sBAAsB;IAqBxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BzL;;;;;;;OAOG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAClH,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IA4L1D;;;;;OAKG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;QACjE,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;KAC/B,EACD,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAClH,OAAO,CAAC,MAAM,IAAI,CAAC;IAyNtB;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/C;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAK/D;;;OAGG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE;IAcrD,OAAO,CAAC,sBAAsB;IAc9B,gBAAgB,IAAI,MAAM;IAI1B,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,SAAS;IAIzB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIrD,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAIvH,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAsK/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAIzE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,WAAW,CAAC;IAc/G,OAAO,CAAC,+BAA+B;IAsBjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAmB7F,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5I,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxE;;;;OAIG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,EACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;KAC/B,EACD,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC1B,OAAO,CAAC,MAAM,IAAI,CAAC;IAiItB,OAAO,CAAC,iBAAiB;IA2CzB;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAoBnC"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/agent/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAMtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAW,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAShH,OAAO,EAA0C,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAQvF,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAmB1C,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD,eAAO,MAAM,cAAc,EAAE,WAAW,EAUvC,CAAC;AAqBF,eAAO,MAAM,0BAA0B,OAAO,CAAC;AA6C/C,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,SAAS,CAAoC;IAErD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IACjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAEvC,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsD;IACvF,OAAO,CAAC,QAAQ,CAAiC;IACjD,OAAO,CAAC,eAAe,CAAgC;IAEvD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,gBAAgB,CAA+C;IAGvE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IAGxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA8C;IAMhF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAKhE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IAOvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAQtB;IAIH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkC;IAKlE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4E;IAGrG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+B;IAOjE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAO5B;IAIJ,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAG1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAA+B;IAGrE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoH;IAKnJ,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAGxD,OAAO,CAAC,aAAa,CAAwC;IAG7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAGpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAGtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAGlC,OAAO,CAAC,aAAa,CAA6B;gBAEtC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM;IAwBnF;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,gBAAgB,IAAI,aAAa;IAIjC,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED;;;OAGG;YACW,mBAAmB;IAwHjC;;;;;;OAMG;YACW,oBAAoB;IA2ElC;;;;;;;OAOG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAU5D;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAgC5B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB,CA8BzB;IAEF;;;OAGG;YACW,oBAAoB;IAqLlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,MAAM,CAAC,aAAa;IAI5B,OAAO,CAAC,iBAAiB;IAYzB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IA2GxB,OAAO,CAAC,MAAM,CAAC,eAAe;YA0ChB,iBAAiB;YAgDjB,YAAY;IAiZ1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIpD;;OAEG;YACW,oBAAoB;IAsBlC;;OAEG;YACW,qBAAqB;IAiBnC;;OAEG;YACW,wBAAwB;IA+CtC;;OAEG;YACW,gBAAgB;IAM9B;;OAEG;YACW,mBAAmB;IAUjC;;;OAGG;YACW,iBAAiB;IAM/B;;;OAGG;YACW,kBAAkB;IA8BhC;;OAEG;YACW,oBAAoB;IA4ClC;;;OAGG;YACW,aAAa;IAS3B;;;OAGG;YACW,cAAc;IAS5B;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,qBAAqB;IAyC7B;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BlE;;OAEG;IACH,OAAO,CAAC,SAAS;IAWjB;;;;OAIG;IACD,OAAO,CAAC,YAAY;IAMtB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,eAAe;YAST,wBAAwB;IA2BtC,OAAO,CAAC,gBAAgB;IAexB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,gBAAgB;IAalB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,iBAAiB,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI;IAQ/C,cAAc,IAAI,IAAI;IAetB,aAAa,IAAI,IAAI;IAOrB,cAAc,IAAI,WAAW;IAI7B,qBAAqB,IAAI,IAAI;IAY7B,oBAAoB,IAAI,IAAI;IAO5B,oBAAoB,IAAI,IAAI;IAY5B,mBAAmB,IAAI,IAAI;IAOrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5F,OAAO,CAAC,sBAAsB;IAqBxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,SAAS,IAAI,OAAO;IAIpB,kBAAkB,IAAI,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA4BzL;;;;;;;OAOG;IACG,cAAc,CAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAClH,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IA4L1D;;;;;OAKG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,IAAI,CAAC;QACjE,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;KAC/B,EACD,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAClH,OAAO,CAAC,MAAM,IAAI,CAAC;IAyNtB;;OAEG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI/C;;;;OAIG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAK/D;;;OAGG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,EAAE;IAcrD,OAAO,CAAC,sBAAsB;IAc9B,gBAAgB,IAAI,MAAM;IAI1B,WAAW,IAAI,MAAM;IAIrB,YAAY,IAAI,SAAS;IAIzB,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAIrD,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAIvH,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAC/B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAsK/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,YAAY,CAAC;IAIzE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE,WAAW,CAAC;IAc/G,OAAO,CAAC,+BAA+B;IAsBjC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAmB7F,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5I,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxE;;;;OAIG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,EACxC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,EAAE;QACT,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;KAC/B,EACD,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC1B,OAAO,CAAC,MAAM,IAAI,CAAC;IAiItB,OAAO,CAAC,iBAAiB;IA2CzB;;;OAGG;IACH,eAAe,IAAI,MAAM;IAIzB;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAoBnC"}

package/dist/agent/runner.js

@@ -49,6 +49,11 @@ const line_reply_manager_1 = require("./line-reply-manager");
 const markdown_1 = require("../telegram/markdown");
 const skills_1 = require("../skills");
 const builtin_commands_1 = require("./builtin-commands");
+const safe_mode_1 = require("./safe-mode");
+const recovery_executor_1 = require("./recovery-executor");
+const recovery_policy_1 = require("./recovery-policy");
+const incident_1 = require("./incident");
+const pty_stream_registry_1 = require("../shell/pty-stream-registry");
 const screen_1 = require("../shell/screen");
 const db_1 = require("../history/db");
 const media_store_1 = require("../history/media-store");
@@ -82,6 +87,14 @@ const PROTECTED_WORKSPACE_FILES = [
     'IDENTITY.md', 'USER.md', 'HEARTBEAT.md',
 ];
 const MAX_API_IMAGES = 5;
+// Hard timeout for the one-shot local `claude -p` triage during recovery
+// (Epic #195, Phase 3b). A slow/hung triage collapses to a safe notify-only.
+const RECOVERY_TRIAGE_TIMEOUT_MS = 15000;
+// TTL after which a per-turn recovery budget entry is evicted. A turn's budget
+// only matters during its active stall window (a few interventions spaced by a
+// 30s cooldown), so anything older is a finished turn — pruned to keep the
+// budget map from growing unbounded over a long-lived runner (Epic #195, 3b).
+const RECOVERY_BUDGET_TTL_MS = 10 * 60000;
 // Trailing-edge window for coalescing channel messages that carry an image (or that
 // arrive while an image is already buffered) into a single turn. Reset on every new
 // related update, so an album burst or a client-split photo+caption is gathered
@@ -157,6 +170,27 @@ class AgentRunner extends events_1.EventEmitter {
         // restarting would just churn a context that cannot shrink. Cleared together
         // with the counter on a successful result and on /clear.
         this.tooLargeExhausted = new Set();
+        // Safe-mode manager (Epic #195, Phase 3): tracks repeated PTY-backend failures
+        // and, past a threshold, forces this agent to the headless backend so it keeps
+        // serving turns without a gateway restart. In-memory only — a restart clears it
+        // and re-reads the user's real config. spawnSession reads isActive() to set
+        // SessionProcess.forceHeadless.
+        this.safeMode = new safe_mode_1.SafeModeManager({
+            audit: (e) => this.logger.info('Safe-mode transition', {
+                agentId: e.agentId,
+                action: e.action,
+                reason: e.reason,
+                failures: e.failures,
+            }),
+        });
+        // Recovery executor state (Epic #195, Phase 3b). Per-turn intervention budget,
+        // keyed by turnKey so it resets each turn. In-memory only.
+        this.recoveryBudgets = new Map();
+        // Last injected turn per chat, for the C1 guarded resend: `delivered` flips
+        // true once assistant output reaches the channel, so a resend after recovery
+        // only fires when the stalled turn produced nothing (no double-submit). `resent`
+        // guards against resending more than once per turn.
+        this.lastTurn = new Map();
         // Tracks pending Telegram image paths per chatId (queue) for size accumulation after each turn.
         this.pendingImagePaths = new Map();
         // Coalescing buffer: collects channel messages that arrive close together so a
@@ -177,6 +211,46 @@ class AgentRunner extends events_1.EventEmitter {
         this.skillRegistry = { skills: new Map() };
         // Cancel function for the daily history cleanup timer
         this.cancelCleanup = null;
+        /**
+         * One-shot local `claude -p` triage runner (Phase 3b). Feeds the closed
+         * classification prompt on stdin and returns raw stdout. Hard timeout →
+         * timedOut, which the executor collapses to a safe notify-only verdict. Only
+         * invoked when autoRecover is enabled.
+         */
+        this.recoveryTriageSpawn = async (prompt) => {
+            const { spawn } = await Promise.resolve().then(() => __importStar(require('child_process')));
+            return new Promise((resolve) => {
+                let done = false;
+                let out = '';
+                const finish = (r) => {
+                    if (done)
+                        return;
+                    done = true;
+                    clearTimeout(timer);
+                    resolve(r);
+                };
+                const timer = setTimeout(() => {
+                    try {
+                        child.kill('SIGKILL');
+                    }
+                    catch { /* already gone */ }
+                    finish({ stdout: '', timedOut: true });
+                }, RECOVERY_TRIAGE_TIMEOUT_MS);
+                const child = spawn('claude', ['-p', '--output-format', 'text'], {
+                    stdio: ['pipe', 'pipe', 'ignore'],
+                });
+                child.stdout?.on('data', (d) => { out += String(d); });
+                child.on('error', () => finish({ stdout: '', timedOut: true }));
+                child.on('close', () => finish({ stdout: out }));
+                try {
+                    child.stdin?.write(prompt);
+                    child.stdin?.end();
+                }
+                catch {
+                    finish({ stdout: '', timedOut: true });
+                }
+            });
+        };
         this.agentConfig = agentConfig;
         this.gatewayConfig = gatewayConfig;
         this.logger = logger ?? (0, logger_1.createLogger)(agentConfig.id, gatewayConfig.gateway.logDir);
@@ -229,6 +303,13 @@ class AgentRunner extends events_1.EventEmitter {
                     this.handleCommandRequest(raw, res);
                     return;
                 }
+                if (url.pathname === '/recover') {
+                    // Cross-process recovery bridge (Epic #195, Phase 3b): the receiver
+                    // process detects a stall but recovery must run here, where the live
+                    // control surfaces (session stdin, restart, safe-mode) live.
+                    this.handleRecoverRequest(raw, res);
+                    return;
+                }
                 // Default: /channel — existing channel message handler
                 // Connection: close prevents keep-alive pool reuse: after the OS's
                 // keepAliveTimeout expires the server closes the TCP connection, and the
@@ -315,6 +396,160 @@ class AgentRunner extends events_1.EventEmitter {
         });
         this.logger.info('Channel callback server listening', { port: this.callbackPort });
     }
+    /**
+     * Handle POST /recover from the receiver process (Epic #195, Phase 3b).
+     * The watchdog detects a stall in the receiver, but recovery must run here in
+     * the runner, where the live control surfaces live. Runs the pure executor
+     * with effects bound to the affected session and returns the outcome so the
+     * receiver can persist it to the incident bundle.
+     */
+    async handleRecoverRequest(raw, res) {
+        const respond = (data, status = 200) => {
+            res.writeHead(status, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify(data));
+        };
+        let body;
+        try {
+            body = JSON.parse(raw);
+        }
+        catch {
+            respond({ ok: false, error: 'Invalid JSON' }, 400);
+            return;
+        }
+        const chatId = body.chatId ?? '';
+        const stage = body.stage ?? '';
+        if (!chatId || !stage) {
+            respond({ ok: false, error: 'missing chatId/stage' }, 400);
+            return;
+        }
+        const session = this.sessions.get(chatId);
+        const autoRecover = this.gatewayConfig.gateway.selfHealing?.autoRecover === true;
+        const req = {
+            incidentId: body.incidentId ?? '',
+            agentId: this.agentConfig.id,
+            chatId,
+            // Prefer the live session's id (survives a request that names a stale one).
+            sessionId: session?.sessionId ?? body.sessionId ?? '',
+            stage,
+            failureClass: body.failureClass ?? null,
+            turnKey: body.turnKey ?? chatId,
+        };
+        try {
+            const result = await (0, recovery_executor_1.runRecovery)(req, {
+                autoRecover,
+                effects: this.buildRecoveryEffects(chatId),
+                now: () => Date.now(),
+                budget: {
+                    get: (turnKey) => this.recoveryBudgets.get(turnKey) ?? (0, recovery_policy_1.initialBudget)(turnKey),
+                    set: (s) => {
+                        this.recoveryBudgets.set(s.turnKey, s);
+                        this.pruneRecoveryBudgets(s.lastAt);
+                    },
+                },
+                // Live triage is the most sensitive surface — only ever run when the
+                // operator has opted in. When off, the executor uses the deterministic
+                // per-stage default action (still whitelist-clamped).
+                triageSpawn: autoRecover ? this.recoveryTriageSpawn : undefined,
+                gatherEvidence: async () => {
+                    const s = this.sessions.get(chatId);
+                    if (!s)
+                        return null;
+                    try {
+                        const snap = await pty_stream_registry_1.ptyStreamRegistry.screenText(s.sessionId);
+                        if (!snap)
+                            return null;
+                        // Scrub the untrusted screen before it leaves the process / reaches
+                        // the triage model. Redact the chat id explicitly on top of the
+                        // pattern-based secret scrub.
+                        return { screenText: (0, incident_1.scrubText)(snap.text, [chatId]) };
+                    }
+                    catch {
+                        return null;
+                    }
+                },
+                resendAfterRecover: autoRecover,
+                log: (msg, meta) => this.logger.info(msg, meta),
+            });
+            respond({ ok: true, outcome: (0, recovery_executor_1.toRecoveryOutcome)(result), result });
+        }
+        catch (err) {
+            this.logger.error('Recovery attempt failed', { chatId, stage, error: err.message });
+            respond({ ok: false, error: err.message }, 500);
+        }
+    }
+    /**
+     * Route raw interactive-terminal input to the session with this actual
+     * sessionId (Issue #201). The dashboard's Terminal Viewer input mode
+     * streams keystrokes here via the pty-stream WebSocket. Sessions are keyed by
+     * chatId internally, so we match on the process's own sessionId. Returns true
+     * only when a live pty-shell session accepted the bytes (headless / missing /
+     * not-writable → false), so the caller can surface an accurate result.
+     */
+    sendInputToSession(sessionId, data) {
+        if (!sessionId || typeof data !== 'string' || data.length === 0)
+            return false;
+        for (const proc of this.sessions.values()) {
+            if (proc.sessionId === sessionId) {
+                return proc.sendInput(data);
+            }
+        }
+        return false;
+    }
+    /**
+     * Build the recovery effects bound to one chat's session (Phase 3b). Each
+     * effect resolves the session fresh so it survives a restart mid-recovery.
+     * Keystroke effects go through the wrapper control channel; restart/backend
+     * effects act on the session and safe-mode manager. Effects intentionally
+     * omitted (redeliver-forward, restart-receiver, bridge-menu) are transport /
+     * wrapper concerns not bridged to the runner — the executor reports them as
+     * unsupported rather than guessing.
+     */
+    buildRecoveryEffects(chatId) {
+        const control = (key, option) => {
+            this.sessions.get(chatId)?.sendControl(key, option);
+        };
+        return {
+            esc: () => control('esc'),
+            escEsc: () => control('esc-esc'),
+            enter: () => control('enter'),
+            selectOption: (option) => control('select-option', option),
+            restartSession: () => this.restartProcess(chatId),
+            fallbackHeadless: async () => {
+                // Flip to the headless backend, then restart so the new session respawns
+                // headless (spawnSession reads safeMode.isActive → forceHeadless).
+                this.safeMode.enter(this.agentConfig.id, 'recovery: fallback-headless');
+                await this.restartProcess(chatId);
+            },
+            resendLast: () => {
+                const lt = this.lastTurn.get(chatId);
+                // Guard: only resend a turn that produced no output and was not already
+                // resent — never double-submit.
+                if (!lt || lt.delivered || lt.resent)
+                    return false;
+                const s = this.sessions.get(chatId);
+                if (!s)
+                    return false;
+                lt.resent = true;
+                s.setProcessing(true);
+                s.sendMessage(lt.text);
+                s.touch();
+                return true;
+            },
+        };
+    }
+    /**
+     * Evict finished-turn budget entries (Epic #195, Phase 3b). Called on each
+     * budget write so the per-turn map cannot grow without bound on a long-lived
+     * runner. `nowMs` is the timestamp of the write just made; any entry whose last
+     * attempt predates the TTL belongs to a turn that is no longer being recovered.
+     */
+    pruneRecoveryBudgets(nowMs) {
+        const cutoff = nowMs - RECOVERY_BUDGET_TTL_MS;
+        for (const [key, state] of this.recoveryBudgets) {
+            if (state.lastAt < cutoff)
+                this.recoveryBudgets.delete(key);
+        }
+    }
     /**
      * Handle POST /command requests from the receiver process.
      * Supports: get_model, set_model, restart.
@@ -599,7 +834,12 @@ class AgentRunner extends events_1.EventEmitter {
                 }
             }
             session.setProcessing(true);
-            session.sendMessage(blocks.join('\n'));
+            const turnText = blocks.join('\n');
+            session.sendMessage(turnText);
+            // Remember this turn for the C1 guarded resend (Phase 3b): reset the
+            // delivered/resent flags so a resend can only fire if this turn stalls
+            // before producing output.
+            this.lastTurn.set(chatId, { text: turnText, delivered: false, resent: false });
             session.touch();
             this.logger.debug('Injected channel turn into session', {
                 chatId,
@@ -729,6 +969,15 @@ class AgentRunner extends events_1.EventEmitter {
                 mapKey, recoveryCount, historyLimit: proc.historyLimit,
             });
         }
+        // Safe mode (Epic #195, Phase 3): if the PTY backend has repeatedly failed
+        // for this agent, force the headless backend for this spawn. Cleared
+        // automatically once safe mode exits (a later healthy turn / user restore).
+        if (this.safeMode.isActive(this.agentConfig.id)) {
+            proc.forceHeadless = true;
+            this.logger.info('Spawning in safe mode (headless backend forced)', {
+                mapKey, agentId: this.agentConfig.id,
+            });
+        }
         await proc.start();
         // Forward all session output lines so listeners on AgentRunner (GatewayRouter,
         // CronScheduler, tests) receive them without needing individual session references.
@@ -736,7 +985,16 @@ class AgentRunner extends events_1.EventEmitter {
         // Notify typing indicator when session permanently fails (max restarts exceeded)
         if (source !== 'api') {
             proc.once('failed', () => {
-                this.writeTypingError(mapKey, 'PROCESS_FAILED');
+                // Safe mode (Epic #195, Phase 3): a hard failure of the PTY (interactive
+                // TUI) backend counts toward the safe-mode threshold. Once crossed, the
+                // agent auto-flips to headless on the next spawn so the user's next
+                // message is served instead of re-wedging. Headless failures don't count
+                // (there is no PTY wrapper to blame / fall back from). When we just
+                // entered safe mode, tell the user that specifically instead of the
+                // generic "stopped" notice (one .error file, so pick the better code).
+                const enteredSafeMode = proc.backend === 'pty-shell' &&
+                    this.safeMode.recordPtyFailure(this.agentConfig.id);
+                this.writeTypingError(mapKey, enteredSafeMode ? 'SAFE_MODE_ENABLED' : 'PROCESS_FAILED');
                 this.sessions.delete(mapKey);
                 // LINE: surface an error for any outstanding postback button so a tap
                 // returns the interrupted notice instead of a stale "still thinking".
@@ -899,6 +1157,13 @@ class AgentRunner extends events_1.EventEmitter {
                             // the next 32MB (if any) starts fresh at the top of the ladder.
                             this.tooLargeRecoveries.delete(mapKey);
                             this.tooLargeExhausted.delete(mapKey);
+                            // Safe mode (Epic #195, Phase 3): a healthy PTY turn resets the
+                            // consecutive-failure counter and lifts safe mode if it was active
+                            // (the interactive backend recovered). Headless successes don't
+                            // touch it — that's the fallback doing its job, not the PTY healing.
+                            if (proc.backend === 'pty-shell') {
+                                this.safeMode.recordSuccess(this.agentConfig.id);
+                            }
                         }
                         // When a menu was rendered to buttons this turn, the wrapper appends
                         // the same menu text to the turn's result — strip that suffix so it
@@ -941,6 +1206,11 @@ class AgentRunner extends events_1.EventEmitter {
                             else {
                                 this.writeAutoForward(mapKey, text);
                             }
+                            // Assistant output reached the channel — mark the turn delivered so
+                            // a later recovery does not resend a message that was answered (C1).
+                            const lt = this.lastTurn.get(mapKey);
+                            if (lt)
+                                lt.delivered = true;
                         }
                         replyCalled = false; // reset for next turn
                         replyToolUseId = null;