@12ui/design 0.2.76 → 0.2.77

package/dist/workspace-runner-client.js

@@ -0,0 +1,63 @@
+import { CLI_HEADER, DrawHttpError, DrawTransportError, errorCodeOf, PUSH_HEADER, readBody, retryAfterOf, } from './workspace-draw-client.js';
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+/** The heartbeat answer checked before the runner acts on it: an answer this CLI cannot read is never guessed at. */
+export const validateHeartbeat = (value) => {
+    const fail = (what) => { throw new DrawTransportError('malformed', `The heartbeat answer is not one this command can read: ${what}.`); };
+    if (!isRecord(value) || value.ok !== true)
+        return fail('not ok');
+    if (typeof value.workspace !== 'string' || typeof value.rev !== 'number')
+        return fail('no workspace');
+    if (!Array.isArray(value.ops))
+        return fail('no ops');
+    const ops = [];
+    for (const op of value.ops) {
+        if (!isRecord(op) || typeof op.opId !== 'string' || !UUID.test(op.opId))
+            return fail('an op has no id');
+        if (op.kind !== 'round' && op.kind !== 'edit')
+            return fail(`op ${op.opId} has kind ${JSON.stringify(op.kind)}`);
+        if (op.drawer !== null && typeof op.drawer !== 'string')
+            return fail(`op ${op.opId} has a drawer that is not an id`);
+        ops.push({ opId: op.opId, kind: op.kind, drawer: op.drawer });
+    }
+    const runner = value.runner;
+    if (runner !== null && (!isRecord(runner) || typeof runner.runnerId !== 'string' || typeof runner.leaseUntilMs !== 'number'))
+        return fail('a runner that is not a lease');
+    return {
+        workspace: value.workspace,
+        rev: value.rev,
+        runner: runner === null ? null : { runnerId: runner.runnerId, leaseUntilMs: runner.leaseUntilMs },
+        ops,
+    };
+};
+export const createRunnerClient = (args) => {
+    const fetcher = args.fetch ?? ((url, init) => fetch(url, init));
+    const post = async (pathname, body) => {
+        const url = `${args.origin}${pathname}`;
+        let response;
+        try {
+            response = await fetcher(url, {
+                method: 'POST',
+                headers: { [PUSH_HEADER]: await args.token(), [CLI_HEADER]: args.cliVersion, 'content-type': 'application/json' },
+                body: JSON.stringify(body),
+            });
+        }
+        catch (cause) {
+            throw new DrawTransportError('unreachable', `${new URL(url).host} could not be reached`, { cause });
+        }
+        const parsed = await readBody(response);
+        if (!response.ok)
+            throw new DrawHttpError(response.status, errorCodeOf(parsed) ?? `http_${response.status}`, retryAfterOf(response, parsed), parsed);
+        return parsed;
+    };
+    return {
+        heartbeat: async (body) => (validateHeartbeat(await post('/api/v1/slate/runner', { ...body, cliVersion: args.cliVersion }))),
+        claim: async (opId, runnerId) => {
+            const answer = await post(`/api/v1/slate/ops/${encodeURIComponent(opId)}/claim`, { runnerId });
+            if (!isRecord(answer) || answer.ok !== true || answer.op !== opId)
+                throw new DrawTransportError('malformed', `The claim of ${opId} answered something else`);
+            return { replayed: answer.replayed === true };
+        },
+    };
+};
+//# sourceMappingURL=workspace-runner-client.js.map

package/dist/workspace-runner-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-client.js","sourceRoot":"","sources":["../src/workspace-runner-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,QAAQ,EACR,YAAY,GAEb,MAAM,4BAA4B,CAAC;AAkBpC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,MAAM,IAAI,GAAG,wEAAwE,CAAC;AAEtF,qHAAqH;AACrH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAmB,EAAE;IACnE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAS,EAAE,GAAG,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,0DAA0D,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,GAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACxG,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,iCAAiC,CAAC,CAAC;QACrH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAuB,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC1K,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAkB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE;QACrH,GAAG;KACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAMlC,EAAE,EAAE;IACH,MAAM,OAAO,GAAc,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAE3E,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAa,EAAoB,EAAE;QACvE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACjH,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACrJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,IAAiE,EAA4B,EAAE,CAAC,CAChH,iBAAiB,CAAC,MAAM,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAChG;QACD,KAAK,EAAE,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAkC,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;YAC7J,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/workspace-runner-main.d.ts

@@ -0,0 +1,56 @@
+import { type DrawFetch } from './workspace-draw-client.js';
+import { type DrawArguments, type DrawDependencies, type DrawResult } from './workspace-draw-run.js';
+import { RUNNER_POLICY } from './workspace-runner-policy.js';
+/**
+ * The workspace runner (docs/slate-remote.md, "The workspace runner"): the one detached process per workspace that
+ * `12ui workspace draw` leaves on the user's Mac, so the person's later clicks (Generate more, Edit) are drawn
+ * without a turn in the agent's thread.
+ *
+ * It holds the per-workspace lock (single instance on this Mac) and the server's lease (single instance anywhere),
+ * heartbeats with the workspace's upload token, and for every running request nobody holds it claims the request
+ * and draws it with the draw command's own run, in this process: the same plan, call ids, op lock and run record as
+ * the agent's command, so a request is never drawn twice and a rerun repeats no image call. It leaves alone a request
+ * whose op lock a live run holds (the agent's own command). It stops when the workspace has been idle for
+ * `RUNNER_POLICY.idleMs`, when its token stops working or its token file is older than the token's 12-hour life, when
+ * Codex cannot draw here, or on SIGTERM; it then lets the lease go, so the screen tells the agent again.
+ *
+ * On SIGTERM or SIGINT it claims nothing new and keeps its lease while the draws in hand finish: their Codex calls do
+ * not stop with the signal (`interruptOnSignal: false`), so their options land. What is still drawing at
+ * `RUNNER_POLICY.stopDeadlineMs` is given back to the agent with the goodbye, its calls stopped, and never pushed as
+ * failed. A call Codex itself was stopped in (macOS signals every process at logout and kills them seconds later) is
+ * not pushed either: the request goes back to the agent, whose command settles it.
+ *
+ * Every Codex call is recorded by process group while it runs, so a runner killed outright leaves its calls findable:
+ * the next runner of the workspace stops them when it starts. On every exit that still holds the lock it deletes the
+ * token file before letting the lock go.
+ */
+export type RunnerStop = 'already_running' | 'idle' | 'token_missing' | 'token_invalid' | 'token_expired' | 'cli_outdated' | 'workspace_mismatch' | 'no_engine' | 'lock_lost' | 'signal' | 'fault';
+export type RunnerDependencies = {
+    env?: NodeJS.ProcessEnv;
+    dataRoot?: string;
+    cliVersion?: string;
+    fetch?: DrawFetch;
+    /** Draws one request; the default is the draw command's own run. */
+    draw?: (args: DrawArguments, deps: DrawDependencies) => Promise<DrawResult>;
+    /** Extra dependencies for each draw (tests hand in the executor and the readiness probe). */
+    drawDeps?: Partial<DrawDependencies>;
+    now?: () => number;
+    sleep?: (milliseconds: number, signal: AbortSignal) => Promise<void>;
+    policy?: Partial<typeof RUNNER_POLICY>;
+    /** Aborting it stops the runner as a signal would. */
+    stop?: AbortSignal;
+    runnerId?: string;
+};
+/** `handedBack`: requests still drawing at the stop deadline, given back to the agent (the process must then exit). */
+export type RunnerOutcome = {
+    stop: RunnerStop;
+    runnerId: string;
+    drawn: string[];
+    handedBack: string[];
+};
+export declare const runWorkspaceRunner: (args: {
+    origin: string;
+    workspace: string;
+    deps?: RunnerDependencies;
+}) => Promise<RunnerOutcome>;
+//# sourceMappingURL=workspace-runner-main.d.ts.map

package/dist/workspace-runner-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-main.d.ts","sourceRoot":"","sources":["../src/workspace-runner-main.ts"],"names":[],"mappings":"AAMA,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAoB,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIvH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAY7D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,MAAM,GACN,eAAe,GACf,eAAe,GACf,eAAe,GACf,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,WAAW,GACX,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,oEAAoE;IACpE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5E,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,aAAa,CAAC,CAAC;IACvC,sDAAsD;IACtD,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uHAAuH;AACvH,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AA4B1G,eAAO,MAAM,kBAAkB,GAAU,MAAM;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B,KAAG,OAAO,CAAC,aAAa,CAgQxB,CAAC"}

package/dist/workspace-runner-main.js

@@ -0,0 +1,350 @@
+import { randomUUID } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { packageIdentity } from './client-version.js';
+import { SlateError } from './slate-errors.js';
+import { acquireLock, parseHolder, RUNNER_HEARTBEAT_INTERVAL_MS, staleWhenHeartbeatLapsed } from './slate-lock.js';
+import { DrawHttpError, DrawTransportError } from './workspace-draw-client.js';
+import { runWorkspaceDraw } from './workspace-draw-run.js';
+import { defaultDataRoot, opLockIsLive, opRootOf } from './workspace-draw-store.js';
+import { createRunnerClient } from './workspace-runner-client.js';
+import { codexChildRecorder, reapCodexChildren } from './workspace-runner-children.js';
+import { RUNNER_POLICY } from './workspace-runner-policy.js';
+import { createRunnerLog, ensureRunnerDir, readRunnerToken, removeRunnerToken, runnerDirOf, runnerLockFile, runnerTokenWrittenAtMs, } from './workspace-runner-store.js';
+/** The stops after which the token cannot speak to the server: no goodbye, and no lease kept while finishing. */
+const SILENT_STOPS = new Set(['token_missing', 'token_invalid', 'token_expired']);
+const interruptibleSleep = (milliseconds, signal) => new Promise((resolve) => {
+    if (signal.aborted) {
+        resolve();
+        return;
+    }
+    const done = () => { clearTimeout(timer); signal.removeEventListener('abort', done); resolve(); };
+    const timer = setTimeout(done, milliseconds);
+    signal.addEventListener('abort', done, { once: true });
+});
+/** What one draw's outcome means for the runner: done with the request, retry it later, or stop altogether. */
+const verdictOf = (result) => {
+    switch (result.output.code) {
+        case 'done':
+        case 'replayed':
+        case 'partial':
+        case 'failed':
+        case 'unknown_op':
+            return { kind: 'done' };
+        // Another run holds the request (this Mac's agent command, or a runner whose claim is in flight): not this one's.
+        case 'op_in_progress':
+        case 'op_in_flight':
+        case 'needs_escalation':
+            return { kind: 'retry' };
+        case 'token_invalid': return { kind: 'stop', stop: 'token_invalid' };
+        case 'cli_outdated': return { kind: 'stop', stop: 'cli_outdated' };
+        // Codex cannot draw here (or stopped being able to): the agent's command will say why.
+        case 'no_engine': return { kind: 'stop', stop: 'no_engine' };
+        default: return { kind: 'stop', stop: 'fault' };
+    }
+};
+export const runWorkspaceRunner = async (args) => {
+    const deps = args.deps ?? {};
+    const env = deps.env ?? process.env;
+    const policy = { ...RUNNER_POLICY, ...deps.policy };
+    const now = deps.now ?? Date.now;
+    const sleep = deps.sleep ?? interruptibleSleep;
+    const dataRoot = deps.dataRoot ?? defaultDataRoot(env);
+    const cliVersion = deps.cliVersion ?? packageIdentity().version;
+    const runnerId = deps.runnerId ?? randomUUID();
+    const draw = deps.draw ?? runWorkspaceDraw;
+    const dir = runnerDirOf(dataRoot, args.origin, args.workspace);
+    await ensureRunnerDir(dir);
+    const log = createRunnerLog(dir, () => new Date(now()));
+    let lock;
+    try {
+        lock = await acquireLock({ file: runnerLockFile(dir), policy: staleWhenHeartbeatLapsed, waitMs: 0 });
+    }
+    catch (error) {
+        if (error instanceof SlateError && error.code === 'workspace_busy')
+            return { stop: 'already_running', runnerId, drawn: [], handedBack: [] };
+        throw error;
+    }
+    const halt = new AbortController();
+    let stop = null;
+    const stopWith = (reason) => {
+        stop ??= reason;
+        halt.abort();
+    };
+    const onExternalStop = () => { stopWith('signal'); };
+    deps.stop?.addEventListener('abort', onExternalStop, { once: true });
+    if (deps.stop?.aborted)
+        stopWith('signal');
+    // The lock's heartbeat, and the check that it is still ours (a run after a long sleep may have taken it over).
+    const keepLock = setInterval(() => {
+        void (async () => {
+            const raw = await readFile(lock.file, 'utf8').catch(() => '');
+            if (parseHolder(raw)?.nonce !== lock.holder.nonce) {
+                stopWith('lock_lost');
+                return;
+            }
+            await lock.touch().catch(() => undefined);
+        })();
+    }, policy.lockTouchMs ?? RUNNER_HEARTBEAT_INTERVAL_MS);
+    keepLock.unref?.();
+    let token = '';
+    const client = createRunnerClient({
+        origin: args.origin,
+        cliVersion,
+        token: async () => token,
+        ...(deps.fetch ? { fetch: deps.fetch } : {}),
+    });
+    const children = codexChildRecorder(dir, runnerId);
+    // Each call runs to its own end on a signal, and is recorded while it runs.
+    const processOptions = { interruptOnSignal: false, ...children };
+    const active = new Map();
+    const attempts = new Map();
+    const givenUp = new Set();
+    const drawn = [];
+    let lastActivity = now();
+    let failures = 0;
+    await log({ event: 'started', runnerId, origin: args.origin, workspace: args.workspace, cliVersion });
+    const drawOne = (opId) => {
+        const work = (async () => {
+            await log({ event: 'draw_started', opId });
+            let result;
+            try {
+                result = await draw({ opId, token, origin: args.origin, engine: 'auto', dryRun: false, runnerId }, { processOptions, ...deps.drawDeps, env, dataRoot, cliVersion, progress: (line) => { void log({ event: 'progress', opId, line }); } });
+            }
+            catch (error) {
+                await log({ event: 'draw_fault', opId, message: error instanceof Error ? error.message : String(error) });
+                stopWith('fault');
+                return;
+            }
+            const verdict = verdictOf(result);
+            await log({ event: 'draw_finished', opId, code: result.output.code, exitCode: result.exitCode, message: result.output.message, record: result.output.record });
+            if (verdict.kind === 'done')
+                drawn.push(opId);
+            if (verdict.kind === 'retry') {
+                const tries = (attempts.get(opId) ?? 0) + 1;
+                attempts.set(opId, tries);
+                // A request the runner cannot get through is the agent's: the next heartbeat leaves it out, so it is released.
+                if (tries >= policy.attemptsPerOp)
+                    givenUp.add(opId);
+            }
+            if (verdict.kind === 'stop')
+                stopWith(verdict.stop);
+        })().finally(() => {
+            active.delete(opId);
+            lastActivity = now();
+        });
+        active.set(opId, work);
+    };
+    /** Takes back a claim on a request this runner is still drawing; no second draw starts. */
+    const reclaim = async (opId) => {
+        try {
+            await client.claim(opId, runnerId);
+            await log({ event: 'reclaimed', opId });
+        }
+        catch (error) {
+            if (error instanceof DrawHttpError && error.code === 'token_invalid') {
+                stopWith('token_invalid');
+                return;
+            }
+            await log({ event: 'reclaim_refused', opId, code: error instanceof DrawHttpError ? error.code : 'transport' });
+        }
+    };
+    const claimAndDraw = async (beat) => {
+        for (const op of beat.ops) {
+            if (stop)
+                return;
+            if (givenUp.has(op.opId))
+                continue;
+            // Drawing it already. Its claim outlives a lapsed lease (in flight on the server until its quiet window ends), so
+            // a long sleep leaves nothing to take back; a request whose window ended is the agent's and is not listed. One
+            // listed unheld while this runner still lists it as drawing was let go by someone else's goodbye in its name:
+            // take it back, inside its window, and keep drawing (a refused take-back leaves the draw to finish or be given up).
+            if (active.has(op.opId)) {
+                if (op.drawer === null)
+                    await reclaim(op.opId);
+                if (stop)
+                    return;
+                continue;
+            }
+            if (active.size >= policy.maxActive)
+                continue;
+            if (op.drawer !== null && op.drawer !== runnerId)
+                continue;
+            // The agent's own command is drawing it on this Mac: it is that run's.
+            if (await opLockIsLive(opRootOf(dataRoot, op.opId)))
+                continue;
+            try {
+                await client.claim(op.opId, runnerId);
+            }
+            catch (error) {
+                if (error instanceof DrawHttpError && error.code === 'token_invalid') {
+                    stopWith('token_invalid');
+                    return;
+                }
+                await log({ event: 'claim_refused', opId: op.opId, code: error instanceof DrawHttpError ? error.code : 'transport' });
+                continue;
+            }
+            await log({ event: 'claimed', opId: op.opId, kind: op.kind });
+            drawOne(op.opId);
+        }
+    };
+    /**
+     * A dead runner's calls are stopped (reaped above), so its claims are over: its goodbye, sent for it, frees its
+     * requests at once, instead of leaving them in flight until their quiet window ends (on this Mac that is proven; a
+     * runner on another Mac cannot know it, so the server keeps them in flight).
+     */
+    const releaseDeadRunners = async (reaped) => {
+        const dead = [...new Set(reaped.flatMap((entry) => (entry.runnerId && entry.runnerId !== runnerId ? [entry.runnerId] : [])))];
+        if (dead.length === 0)
+            return;
+        const fresh = await readRunnerToken(dir);
+        if (!fresh)
+            return;
+        token = fresh;
+        for (const deadId of dead) {
+            try {
+                await client.heartbeat({ runnerId: deadId, drawing: [], stopping: true });
+                await log({ event: 'released_dead_runner', runnerId: deadId });
+            }
+            catch (error) {
+                await log({ event: 'release_dead_runner_failed', runnerId: deadId, code: error instanceof DrawHttpError ? error.code : 'transport' });
+            }
+        }
+    };
+    const goodbye = async () => {
+        // Before the first token is read there is nothing to say it with, and nothing was ever claimed.
+        if (token === '') {
+            await log({ event: 'goodbye_skipped', reason: 'no_token' });
+            return null;
+        }
+        try {
+            return await client.heartbeat({ runnerId, drawing: [], stopping: true });
+        }
+        catch (error) {
+            await log({ event: 'goodbye_failed', code: error instanceof DrawHttpError ? error.code : 'transport' });
+            return null;
+        }
+    };
+    /**
+     * Stopping: claim nothing more, keep the lease (a heartbeat listing what is drawing) while the draws in hand finish,
+     * up to the stop deadline. Returns what is still drawing then, after stopping its Codex calls: the goodbye gives
+     * those requests back to the agent, and nothing is pushed for them.
+     */
+    const finishDrawsInHand = async () => {
+        if (active.size === 0)
+            return [];
+        const deadline = now() + policy.stopDeadlineMs;
+        const settled = Promise.allSettled([...active.values()]);
+        const keepLease = !SILENT_STOPS.has(stop);
+        const never = new AbortController().signal;
+        await log({ event: 'finishing', stop, drawing: [...active.keys()], deadlineMs: policy.stopDeadlineMs });
+        while (active.size > 0 && now() < deadline) {
+            if (keepLease)
+                await client.heartbeat({ runnerId, drawing: [...active.keys()].filter((opId) => !givenUp.has(opId)) }).catch(() => null);
+            await Promise.race([settled, sleep(Math.max(1, Math.min(policy.pollMs, deadline - now())), never)]);
+        }
+        const left = [...active.keys()];
+        if (left.length > 0) {
+            const reaped = await reapCodexChildren(dir, { alsoOf: process.pid }).catch(() => []);
+            await log({ event: 'handed_back', opIds: left, codex: reaped.map((entry) => entry.pgid) });
+        }
+        return left;
+    };
+    try {
+        // A runner of this workspace killed outright may have left Codex calls running: they are nobody's now.
+        const reaped = await reapCodexChildren(dir).catch(() => []);
+        if (reaped.length > 0)
+            await log({ event: 'reaped', codex: reaped });
+        await releaseDeadRunners(reaped);
+        while (!stop) {
+            const fresh = await readRunnerToken(dir);
+            const writtenAtMs = fresh ? await runnerTokenWrittenAtMs(dir) : null;
+            if (!fresh || writtenAtMs === null) {
+                stopWith('token_missing');
+                break;
+            }
+            // The token file is rewritten by every draw command; one older than the token's life holds a dead token.
+            if (now() - writtenAtMs >= policy.tokenLifetimeMs) {
+                stopWith('token_expired');
+                break;
+            }
+            token = fresh;
+            let beat;
+            try {
+                beat = await client.heartbeat({ runnerId, drawing: [...active.keys()].filter((opId) => !givenUp.has(opId)) });
+                failures = 0;
+            }
+            catch (error) {
+                if (error instanceof DrawHttpError) {
+                    if (error.code === 'token_invalid') {
+                        stopWith('token_invalid');
+                        break;
+                    }
+                    if (error.status === 426 || error.code === 'cli_outdated') {
+                        stopWith('cli_outdated');
+                        break;
+                    }
+                    if (error.code === 'runner_busy' || error.status === 429) {
+                        // Another runner's lease (a dead one lapses within one lease), or the edge limit: wait what it names.
+                        await log({ event: 'wait', code: error.code, seconds: error.retryAfterSeconds });
+                        if (active.size === 0 && now() - lastActivity >= policy.idleMs) {
+                            stopWith('idle');
+                            break;
+                        }
+                        await sleep(Math.min(policy.leaseWaitMaxMs, Math.max(1, error.retryAfterSeconds ?? 5) * 1000), halt.signal);
+                        continue;
+                    }
+                }
+                if (error instanceof DrawTransportError && error.kind === 'malformed') {
+                    stopWith('fault');
+                    break;
+                }
+                // Unreachable or a server fault: back off and try again; idle time keeps counting.
+                failures += 1;
+                await log({ event: 'heartbeat_failed', code: error instanceof DrawHttpError ? error.code : 'unreachable', failures });
+                if (active.size === 0 && now() - lastActivity >= policy.idleMs) {
+                    stopWith('idle');
+                    break;
+                }
+                await sleep(Math.min(policy.backoffMaxMs, policy.pollMs * 2 ** Math.min(failures, 6)), halt.signal);
+                continue;
+            }
+            if (beat.workspace !== args.workspace) {
+                stopWith('workspace_mismatch');
+                break;
+            }
+            const open = beat.ops.filter((op) => !givenUp.has(op.opId));
+            if (open.length > 0 || active.size > 0)
+                lastActivity = now();
+            await claimAndDraw(beat);
+            if (stop)
+                break;
+            if (active.size === 0 && open.length === 0 && now() - lastActivity >= policy.idleMs) {
+                // Let the lease go; a click that raced the goodbye keeps the runner on.
+                const last = await goodbye();
+                if (last && last.ops.some((op) => op.drawer === null && !givenUp.has(op.opId))) {
+                    lastActivity = now();
+                    continue;
+                }
+                stop = 'idle';
+                await log({ event: 'stopped', stop, drawn });
+                return { stop, runnerId, drawn, handedBack: [] };
+            }
+            await sleep(policy.pollMs, halt.signal);
+        }
+        const handedBack = await finishDrawsInHand();
+        if (!SILENT_STOPS.has(stop))
+            await goodbye();
+        await log({ event: 'stopped', stop, drawn, ...(handedBack.length > 0 ? { handedBack } : {}) });
+        return { stop: stop ?? 'fault', runnerId, drawn, handedBack };
+    }
+    finally {
+        clearInterval(keepLock);
+        deps.stop?.removeEventListener('abort', onExternalStop);
+        // The token goes with the runner, unless another runner has taken the lock over (it is that runner's token now).
+        const holder = parseHolder(await readFile(lock.file, 'utf8').catch(() => ''));
+        if (holder?.nonce === lock.holder.nonce)
+            await removeRunnerToken(dir).catch(() => undefined);
+        await lock.release();
+    }
+};
+//# sourceMappingURL=workspace-runner-main.js.map

package/dist/workspace-runner-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-main.js","sourceRoot":"","sources":["../src/workspace-runner-main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,4BAA4B,EAAE,wBAAwB,EAAiB,MAAM,iBAAiB,CAAC;AAClI,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAkB,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAA8D,MAAM,yBAAyB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAA2C,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,cAAc,EACd,sBAAsB,GAEvB,MAAM,6BAA6B,CAAC;AA2DrC,iHAAiH;AACjH,MAAM,YAAY,GAA4B,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAE3G,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,MAAmB,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IAC/G,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAS,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC7C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,+GAA+G;AAC/G,MAAM,SAAS,GAAG,CAAC,MAAkB,EAA6E,EAAE;IAClH,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC;QAAC,KAAK,UAAU,CAAC;QAAC,KAAK,SAAS,CAAC;QAAC,KAAK,QAAQ,CAAC;QAAC,KAAK,YAAY;YAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,kHAAkH;QAClH,KAAK,gBAAgB,CAAC;QAAC,KAAK,cAAc,CAAC;QAAC,KAAK,kBAAkB;YACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,KAAK,eAAe,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACrE,KAAK,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACnE,uFAAuF;QACvF,KAAK,WAAW,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7D,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAIxC,EAA0B,EAAE;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,eAAe,EAAE,CAAC,OAAO,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAc,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEnE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC5I,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAQ,EAAE;QAC5C,IAAI,KAAK,MAAM,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,GAAS,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,IAAI,EAAE,OAAO;QAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE3C,+GAA+G;IAC/G,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACrF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EAAE,MAAM,CAAC,WAAW,IAAI,4BAA4B,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEnB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,MAAM,MAAM,GAAiB,kBAAkB,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU;QACV,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;QACxB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnD,4EAA4E;IAC5E,MAAM,cAAc,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,GAAG,GAAG,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IAEtG,MAAM,OAAO,GAAG,CAAC,IAAY,EAAQ,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,IAAI,MAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CACjB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC7E,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACtI,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC1G,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/J,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1B,+GAA+G;gBAC/G,IAAI,KAAK,IAAI,MAAM,CAAC,aAAa;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpB,YAAY,GAAG,GAAG,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,2FAA2F;IAC3F,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACnC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC5G,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,IAAqB,EAAiB,EAAE;QAClE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnC,kHAAkH;YAClH,+GAA+G;YAC/G,8GAA8G;YAC9G,oHAAoH;YACpH,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;oBAAE,MAAM,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,IAAI;oBAAE,OAAO;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YAC9C,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ;gBAAE,SAAS;YAC3D,uEAAuE;YACvE,IAAI,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAAE,SAAS;YAC9D,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAC5G,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAoC,EAAiB,EAAE;QACvF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9H,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,GAAG,KAAK,CAAC;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1E,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACxI,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAqC,EAAE;QAC1D,gGAAgG;QAChG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACxG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,iBAAiB,GAAG,KAAK,IAAuB,EAAE;QACtD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC;QAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC;QAC3C,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACxG,OAAO,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC3C,IAAI,SAAS;gBAAE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACxI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACrF,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,uGAAuG;QACvG,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE,IAAI,CAAC,KAAK,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACzE,yGAAyG;YACzG,IAAI,GAAG,EAAE,GAAG,WAAW,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACxF,KAAK,GAAG,KAAK,CAAC;YACd,IAAI,IAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9G,QAAQ,GAAG,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBACzE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;wBAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;wBAAC,MAAM;oBAAC,CAAC;oBAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACzD,sGAAsG;wBACtG,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC;wBACjF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;4BAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;4BAAC,MAAM;wBAAC,CAAC;wBAC5F,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC5G,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,YAAY,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACpG,mFAAmF;gBACnF,QAAQ,IAAI,CAAC,CAAC;gBACd,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAC5F,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpG,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;gBAAE,YAAY,GAAG,GAAG,EAAE,CAAC;YAC7D,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACpF,wEAAwE;gBACxE,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;gBAC7B,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC/E,YAAY,GAAG,GAAG,EAAE,CAAC;oBACrB,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC;gBACd,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAC9C,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACxD,iHAAiH;QACjH,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;AACH,CAAC,CAAC"}

package/dist/workspace-runner-policy.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The workspace runner's numbers and launch rule, in one module (CLAUDE.md item 9). The server's lease
+ * (`SLATE_RUNNER.leaseMs`, 60 s, renewed below 30 s) is what decides whether the screen tells the agent; these only
+ * pace and bound the runner itself.
+ */
+export declare const RUNNER_POLICY: Readonly<{
+    /** One heartbeat (which is also the poll for new clicks) every 5 s: a click starts drawing within about 5 s. */
+    pollMs: 5000;
+    /** An idle workspace lets its runner go after 30 minutes; the next click then goes to the agent, which starts one. */
+    idleMs: number;
+    /** The server allows at most three running requests per workspace; the runner draws at most that many at once. */
+    maxActive: 3;
+    /** A request the runner could not get through this many times (server unreachable mid-draw) is left to the agent. */
+    attemptsPerOp: 3;
+    /** Backoff ceiling while design.12ui.com cannot be reached. */
+    backoffMaxMs: 60000;
+    /** The longest single wait for another runner's lease to lapse (one lease). */
+    leaseWaitMaxMs: 60000;
+    /** The lock file's own heartbeat (its mtime); `null` keeps the lock module's default. */
+    lockTouchMs: number | null;
+    /**
+     * After SIGTERM or SIGINT the runner claims nothing new, keeps its lease, and lets the draws in hand finish: their
+     * Codex calls are not stopped by the signal (each is bounded by its own timeout), so their options land. This is the
+     * longest it waits: one image call's own timeout plus a minute for its pushes. What is still drawing then is given
+     * back to the agent, never marked failed.
+     */
+    stopDeadlineMs: number;
+    /**
+     * The upload token lives 12 hours (the server's `SLATE_TIME.pushTokenTtlMs`). Every `12ui workspace draw` rewrites
+     * the token file, so a file older than this holds a dead token: the runner stops then on its own, whatever its
+     * server answers.
+     */
+    tokenLifetimeMs: number;
+}>;
+/** Set to 1 and `12ui workspace draw` leaves no runner behind: every click then messages the agent, as before. */
+export declare const RUNNER_OPT_OUT_ENV = "TWELVE_UI_NO_RUNNER";
+export type RunnerLaunchRefusal = 'opted_out' | 'origin';
+/** Why no runner may be left behind for this origin and environment, or null when one may. */
+export declare const runnerLaunchRefusal: (origin: string, env: NodeJS.ProcessEnv) => RunnerLaunchRefusal | null;
+//# sourceMappingURL=workspace-runner-policy.d.ts.map

package/dist/workspace-runner-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-policy.d.ts","sourceRoot":"","sources":["../src/workspace-runner-policy.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,eAAO,MAAM,aAAa;IACxB,gHAAgH;;IAEhH,sHAAsH;;IAEtH,kHAAkH;;IAElH,qHAAqH;;IAErH,+DAA+D;;IAE/D,+EAA+E;;IAE/E,yFAAyF;iBACpE,MAAM,GAAG,IAAI;IAClC;;;;;OAKG;;IAEH;;;;OAIG;;EAEH,CAAC;AAEH,kHAAkH;AAClH,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEzD,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,EAAE,KAAK,MAAM,CAAC,UAAU,KAAG,mBAAmB,GAAG,IAIlG,CAAC"}

package/dist/workspace-runner-policy.js

@@ -0,0 +1,47 @@
+import { IMAGE_CALL_TIMEOUT_MS } from './slate-image-executor.js';
+import { runnerOriginAllowed } from './workspace-origin.js';
+/**
+ * The workspace runner's numbers and launch rule, in one module (CLAUDE.md item 9). The server's lease
+ * (`SLATE_RUNNER.leaseMs`, 60 s, renewed below 30 s) is what decides whether the screen tells the agent; these only
+ * pace and bound the runner itself.
+ */
+export const RUNNER_POLICY = Object.freeze({
+    /** One heartbeat (which is also the poll for new clicks) every 5 s: a click starts drawing within about 5 s. */
+    pollMs: 5_000,
+    /** An idle workspace lets its runner go after 30 minutes; the next click then goes to the agent, which starts one. */
+    idleMs: 30 * 60_000,
+    /** The server allows at most three running requests per workspace; the runner draws at most that many at once. */
+    maxActive: 3,
+    /** A request the runner could not get through this many times (server unreachable mid-draw) is left to the agent. */
+    attemptsPerOp: 3,
+    /** Backoff ceiling while design.12ui.com cannot be reached. */
+    backoffMaxMs: 60_000,
+    /** The longest single wait for another runner's lease to lapse (one lease). */
+    leaseWaitMaxMs: 60_000,
+    /** The lock file's own heartbeat (its mtime); `null` keeps the lock module's default. */
+    lockTouchMs: null,
+    /**
+     * After SIGTERM or SIGINT the runner claims nothing new, keeps its lease, and lets the draws in hand finish: their
+     * Codex calls are not stopped by the signal (each is bounded by its own timeout), so their options land. This is the
+     * longest it waits: one image call's own timeout plus a minute for its pushes. What is still drawing then is given
+     * back to the agent, never marked failed.
+     */
+    stopDeadlineMs: IMAGE_CALL_TIMEOUT_MS + 60_000,
+    /**
+     * The upload token lives 12 hours (the server's `SLATE_TIME.pushTokenTtlMs`). Every `12ui workspace draw` rewrites
+     * the token file, so a file older than this holds a dead token: the runner stops then on its own, whatever its
+     * server answers.
+     */
+    tokenLifetimeMs: 12 * 60 * 60_000,
+});
+/** Set to 1 and `12ui workspace draw` leaves no runner behind: every click then messages the agent, as before. */
+export const RUNNER_OPT_OUT_ENV = 'TWELVE_UI_NO_RUNNER';
+/** Why no runner may be left behind for this origin and environment, or null when one may. */
+export const runnerLaunchRefusal = (origin, env) => {
+    if ((env[RUNNER_OPT_OUT_ENV] ?? '').trim() === '1')
+        return 'opted_out';
+    if (!runnerOriginAllowed(origin))
+        return 'origin';
+    return null;
+};
+//# sourceMappingURL=workspace-runner-policy.js.map

package/dist/workspace-runner-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-policy.js","sourceRoot":"","sources":["../src/workspace-runner-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,gHAAgH;IAChH,MAAM,EAAE,KAAK;IACb,sHAAsH;IACtH,MAAM,EAAE,EAAE,GAAG,MAAM;IACnB,kHAAkH;IAClH,SAAS,EAAE,CAAC;IACZ,qHAAqH;IACrH,aAAa,EAAE,CAAC;IAChB,+DAA+D;IAC/D,YAAY,EAAE,MAAM;IACpB,+EAA+E;IAC/E,cAAc,EAAE,MAAM;IACtB,yFAAyF;IACzF,WAAW,EAAE,IAAqB;IAClC;;;;;OAKG;IACH,cAAc,EAAE,qBAAqB,GAAG,MAAM;IAC9C;;;;OAIG;IACH,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM;CAClC,CAAC,CAAC;AAEH,kHAAkH;AAClH,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAIxD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,GAAsB,EAA8B,EAAE;IACxG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvE,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}