@12ui/design 0.2.76 → 0.2.78

package/dist/workspace-origin.js

@@ -0,0 +1,36 @@
+/**
+ * Which hosts the Design workspace's command line talks to, in one module (CLAUDE.md item 9).
+ *
+ * - `normalizeOrigin`: where `12ui workspace draw` may send the upload token: https, or http on this machine (a local
+ *   proof worker), with no path.
+ * - `runnerOriginAllowed`: where a workspace runner may be left behind. A runner outlives the command and draws with
+ *   the person's own Codex for as long as its server keeps answering, so it serves design.12ui.com alone, plus http on
+ *   this machine for tests and a local dev worker; any other https host gets the draw and never a runner.
+ */
+export const DEFAULT_ORIGIN = 'https://design.12ui.com';
+const LOOPBACK = new Set(['localhost', '127.0.0.1', '[::1]']);
+/** Only https, or http on this machine, with no path: the token goes to this host alone. Null when refused. */
+export const normalizeOrigin = (value) => {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    const secure = url.protocol === 'https:' || (url.protocol === 'http:' && LOOPBACK.has(url.hostname));
+    if (!secure || url.username || url.password || url.search || url.hash || (url.pathname !== '/' && url.pathname !== ''))
+        return null;
+    return url.origin;
+};
+/** True only for design.12ui.com, or http on this machine. */
+export const runnerOriginAllowed = (value) => {
+    const origin = normalizeOrigin(value);
+    if (origin === null)
+        return false;
+    if (origin === DEFAULT_ORIGIN)
+        return true;
+    const url = new URL(origin);
+    return url.protocol === 'http:' && LOOPBACK.has(url.hostname);
+};
+//# sourceMappingURL=workspace-origin.js.map

package/dist/workspace-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-origin.js","sourceRoot":"","sources":["../src/workspace-origin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AAExD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9D,+GAA+G;AAC/G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAiB,EAAE;IAC9D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpI,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC,CAAC;AAEF,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAW,EAAE;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC,CAAC"}

package/dist/workspace-runner-children.d.ts

@@ -0,0 +1,39 @@
+import type { CodexProcessOptions } from './slate-image-executor.js';
+export type CodexChildRecord = {
+    pgid: number;
+    runnerPid: number;
+    runnerId?: string;
+    callDir: string;
+    startedAt: string;
+};
+/** `runnerId`: the runner that made the call, when its record names it. */
+export type ReapOutcome = {
+    pgid: number;
+    callDir: string;
+    outcome: 'stopped' | 'gone' | 'not_ours';
+    runnerId?: string;
+};
+/** The executor hooks that keep the records: one written when a call's child starts, removed when it ends. */
+export declare const codexChildRecorder: (dir: string, runnerId?: string) => Required<Pick<CodexProcessOptions, "onSpawn" | "onExit">>;
+export declare const listCodexChildren: (dir: string) => Promise<CodexChildRecord[]>;
+/**
+ * The same process hooks, each call also recorded under its request's own folder (`<opRoot>/codex/`), whoever draws it
+ * (the agent's command or a runner). The op lock's heartbeat stops while a Mac sleeps, so a lock that went quiet does
+ * not prove its run is gone; the call it started may still be drawing after the wake (`opCodexAlive`).
+ */
+export declare const recordedForOp: (opRoot: string, options?: CodexProcessOptions) => CodexProcessOptions;
+/**
+ * Whether a Codex call recorded for this request is still running: a live process group whose command line names the
+ * recorded call directory. A record whose group is gone (or now someone else's) is forgotten.
+ */
+export declare const opCodexAlive: (opRoot: string) => Promise<boolean>;
+/**
+ * Stop every recorded call whose runner is gone (a live runner finishes its own calls), and those of `alsoOf` (a
+ * runner stopping its own at its deadline), forgetting each record. A call still running gets SIGTERM, then SIGKILL
+ * after `graceMs`.
+ */
+export declare const reapCodexChildren: (dir: string, options?: {
+    alsoOf?: number;
+    graceMs?: number;
+}) => Promise<ReapOutcome[]>;
+//# sourceMappingURL=workspace-runner-children.d.ts.map

package/dist/workspace-runner-children.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-children.d.ts","sourceRoot":"","sources":["../src/workspace-runner-children.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAgBrE,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAC1H,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAOzH,8GAA8G;AAC9G,eAAO,MAAM,kBAAkB,GAAI,KAAK,MAAM,EAAE,WAAW,MAAM,KAAG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAO1H,CAAC;AASH,eAAO,MAAM,iBAAiB,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAmB/E,CAAC;AAWF;;;;GAIG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,EAAE,UAAS,mBAAwB,KAAG,mBAOjF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAU,QAAQ,MAAM,KAAG,OAAO,CAAC,OAAO,CAOlE,CAAC;AAcF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAU,KAAK,MAAM,EAAE,UAAS;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,KAAG,OAAO,CAAC,WAAW,EAAE,CAsB/H,CAAC"}

package/dist/workspace-runner-children.js

@@ -0,0 +1,139 @@
+import { execFile } from 'node:child_process';
+import { mkdir, readdir, readFile, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import { processIsAlive } from './slate-lock.js';
+/**
+ * The Codex image calls a workspace runner has running, recorded by process group in its state folder
+ * (`codex/<pgid>.json`: the group, the runner's pid and id, the call directory). Each call runs in its own process group
+ * (native-invoke.mjs), so a runner killed outright (SIGKILL of it or of its group) leaves its calls running with no one
+ * to collect them. The next runner of that workspace, and `12ui workspace runner stop`, stop every recorded call whose
+ * runner is gone (one whose runner still lives is that runner's to finish). A call's argv names its call directory, and only a group whose command line names that same
+ * directory is signalled, so a process group id the system has since given to something else is never touched.
+ * The reaping names each dead runner's id, so the next runner can tell the server that runner's claims are over
+ * (its calls are stopped): its requests are then free at once instead of in flight until their quiet window ends.
+ */
+const execFileAsync = promisify(execFile);
+const RUNNER_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+const recordsDir = (dir) => path.join(dir, 'codex');
+const recordFile = (dir, pgid) => path.join(recordsDir(dir), `${pgid}.json`);
+/** The executor hooks that keep the records: one written when a call's child starts, removed when it ends. */
+export const codexChildRecorder = (dir, runnerId) => ({
+    onSpawn: async ({ pgid, callDir }) => {
+        await mkdir(recordsDir(dir), { recursive: true, mode: 0o700 });
+        const record = { pgid, runnerPid: process.pid, ...(runnerId ? { runnerId } : {}), callDir, startedAt: new Date().toISOString() };
+        await writeFile(recordFile(dir, pgid), `${JSON.stringify(record)}\n`, { mode: 0o600 });
+    },
+    onExit: async ({ pgid }) => { await rm(recordFile(dir, pgid), { force: true }); },
+});
+const isRecord = (value) => {
+    const entry = value;
+    return !!entry && Number.isSafeInteger(entry.pgid) && entry.pgid > 1 && Number.isSafeInteger(entry.runnerPid)
+        && (entry.runnerId === undefined || (typeof entry.runnerId === 'string' && RUNNER_ID.test(entry.runnerId)))
+        && typeof entry.callDir === 'string' && path.isAbsolute(entry.callDir) && typeof entry.startedAt === 'string';
+};
+export const listCodexChildren = async (dir) => {
+    let names;
+    try {
+        names = await readdir(recordsDir(dir));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }
+    const records = [];
+    for (const name of names.filter((entry) => /^\d+\.json$/u.test(entry))) {
+        try {
+            const parsed = JSON.parse(await readFile(path.join(recordsDir(dir), name), 'utf8'));
+            if (isRecord(parsed) && `${parsed.pgid}.json` === name)
+                records.push(parsed);
+            else
+                await rm(path.join(recordsDir(dir), name), { force: true });
+        }
+        catch {
+            await rm(path.join(recordsDir(dir), name), { force: true });
+        }
+    }
+    return records;
+};
+/** The command lines of a process group's live members, from `ps`; empty when none is alive. */
+const groupCommands = async (pgid) => {
+    const { stdout } = await execFileAsync('ps', ['-ww', '-axo', 'pgid=,command='], { maxBuffer: 64 * 1024 * 1024 });
+    return stdout.split('\n').flatMap((line) => {
+        const match = /^\s*(\d+)\s+(.*)$/u.exec(line);
+        return match && Number(match[1]) === pgid ? [match[2]] : [];
+    });
+};
+/**
+ * The same process hooks, each call also recorded under its request's own folder (`<opRoot>/codex/`), whoever draws it
+ * (the agent's command or a runner). The op lock's heartbeat stops while a Mac sleeps, so a lock that went quiet does
+ * not prove its run is gone; the call it started may still be drawing after the wake (`opCodexAlive`).
+ */
+export const recordedForOp = (opRoot, options = {}) => {
+    const op = codexChildRecorder(opRoot);
+    return {
+        ...options,
+        onSpawn: async (child) => { await op.onSpawn(child); await options.onSpawn?.(child); },
+        onExit: async (child) => { await options.onExit?.(child); await op.onExit(child); },
+    };
+};
+/**
+ * Whether a Codex call recorded for this request is still running: a live process group whose command line names the
+ * recorded call directory. A record whose group is gone (or now someone else's) is forgotten.
+ */
+export const opCodexAlive = async (opRoot) => {
+    let alive = false;
+    for (const record of await listCodexChildren(opRoot)) {
+        if ((await groupCommands(record.pgid)).some((command) => command.includes(record.callDir)))
+            alive = true;
+        else
+            await rm(recordFile(opRoot, record.pgid), { force: true });
+    }
+    return alive;
+};
+const signalGroup = (pgid, signal) => {
+    try {
+        process.kill(-pgid, signal);
+    }
+    catch (error) {
+        // ESRCH: the group is gone. EPERM: macOS answers so for a group whose members are all zombies.
+        const code = error.code;
+        if (code !== 'ESRCH' && code !== 'EPERM')
+            throw error;
+    }
+};
+const sleep = (milliseconds) => new Promise((resolve) => { setTimeout(resolve, milliseconds); });
+/**
+ * Stop every recorded call whose runner is gone (a live runner finishes its own calls), and those of `alsoOf` (a
+ * runner stopping its own at its deadline), forgetting each record. A call still running gets SIGTERM, then SIGKILL
+ * after `graceMs`.
+ */
+export const reapCodexChildren = async (dir, options = {}) => {
+    const graceMs = options.graceMs ?? 3_000;
+    const outcomes = [];
+    for (const record of await listCodexChildren(dir)) {
+        if (record.runnerPid !== options.alsoOf && processIsAlive(record.runnerPid))
+            continue;
+        const commands = await groupCommands(record.pgid);
+        let outcome = 'gone';
+        if (commands.length > 0) {
+            if (commands.some((command) => command.includes(record.callDir))) {
+                signalGroup(record.pgid, 'SIGTERM');
+                const end = Date.now() + graceMs;
+                while ((await groupCommands(record.pgid)).length > 0 && Date.now() < end)
+                    await sleep(100);
+                if ((await groupCommands(record.pgid)).length > 0)
+                    signalGroup(record.pgid, 'SIGKILL');
+                outcome = 'stopped';
+            }
+            else {
+                outcome = 'not_ours';
+            }
+        }
+        await rm(recordFile(dir, record.pgid), { force: true });
+        outcomes.push({ pgid: record.pgid, callDir: record.callDir, outcome, ...(record.runnerId ? { runnerId: record.runnerId } : {}) });
+    }
+    return outcomes;
+};
+//# sourceMappingURL=workspace-runner-children.js.map

package/dist/workspace-runner-children.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-children.js","sourceRoot":"","sources":["../src/workspace-runner-children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;;;;;;GASG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAM1C,MAAM,SAAS,GAAG,wEAAwE,CAAC;AAE3F,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAErG,8GAA8G;AAC9G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,QAAiB,EAA6D,EAAE,CAAC,CAAC;IAChI,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACnJ,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;CAClF,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA6B,EAAE;IAC7D,MAAM,KAAK,GAAG,KAAyC,CAAC;IACxD,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAK,KAAK,CAAC,IAAe,GAAG,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;WACpH,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;WACxG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,GAAW,EAA+B,EAAE;IAClF,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7F,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;gBACxE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,gGAAgG;AAChG,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE;IAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACjH,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,UAA+B,EAAE,EAAuB,EAAE;IACtG,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,OAAO;QACV,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACpF,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE;IACrE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,MAAM,MAAM,IAAI,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC;;YACpG,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,MAAsB,EAAQ,EAAE;IACjE,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+FAA+F;QAC/F,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;IACxD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,GAAW,EAAE,UAAiD,EAAE,EAA0B,EAAE;IAClI,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,SAAS;QACtF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,GAA2B,MAAM,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACjE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACjC,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;oBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3F,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACvF,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,UAAU,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpI,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC"}

package/dist/workspace-runner-client.d.ts

@@ -0,0 +1,43 @@
+import { type DrawFetch } from './workspace-draw-client.js';
+/**
+ * The workspace runner's side of its two routes on design.12ui.com (docs/slate-remote.md, "The workspace runner"):
+ * the heartbeat, which takes or renews the workspace's lease and lists the running requests, and the claim of one
+ * request. Authenticated by the upload token alone, read fresh for every call. No retry here: the runner's loop
+ * owns the cadence and waits out what the server names (`retryAfterSeconds`).
+ */
+/** `waiting`: its round waits on the person (the inspiration pause); the server refuses its claim until it goes on. */
+export type RunningRequest = {
+    opId: string;
+    kind: 'round' | 'edit';
+    drawer: string | null;
+    waiting: boolean;
+};
+export type HeartbeatAnswer = {
+    workspace: string;
+    rev: number;
+    runner: {
+        runnerId: string;
+        leaseUntilMs: number;
+    } | null;
+    ops: RunningRequest[];
+};
+/** The heartbeat answer checked before the runner acts on it: an answer this CLI cannot read is never guessed at. */
+export declare const validateHeartbeat: (value: unknown) => HeartbeatAnswer;
+export declare const createRunnerClient: (args: {
+    origin: string;
+    cliVersion: string;
+    /** The current upload token: the runner re-reads its token file for every call. */
+    token: () => Promise<string>;
+    fetch?: DrawFetch;
+}) => {
+    heartbeat: (body: {
+        runnerId: string;
+        drawing: string[];
+        stopping?: boolean;
+    }) => Promise<HeartbeatAnswer>;
+    claim: (opId: string, runnerId: string) => Promise<{
+        replayed: boolean;
+    }>;
+};
+export type RunnerClient = ReturnType<typeof createRunnerClient>;
+//# sourceMappingURL=workspace-runner-client.d.ts.map

package/dist/workspace-runner-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-client.d.ts","sourceRoot":"","sources":["../src/workspace-runner-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAUL,KAAK,SAAS,EACf,MAAM,4BAA4B,CAAC;AAEpC;;;;;GAKG;AAEH,uHAAuH;AACvH,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/G,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1D,GAAG,EAAE,cAAc,EAAE,CAAC;CACvB,CAAC;AAMF,qHAAqH;AACrH,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,eAuBlD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,MAAM;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;sBAyB2B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,eAAe,CAAC;kBAG1F,MAAM,YAAY,MAAM,KAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CAMhF,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/workspace-runner-client.js

@@ -0,0 +1,72 @@
+import { CLI_HEADER, DrawHttpError, DrawTransportError, errorCodeOf, NO_REDIRECT, PUSH_HEADER, readBody, redirectOf, retryAfterOf, } from './workspace-draw-client.js';
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+/** The heartbeat answer checked before the runner acts on it: an answer this CLI cannot read is never guessed at. */
+export const validateHeartbeat = (value) => {
+    const fail = (what) => { throw new DrawTransportError('malformed', `The heartbeat answer is not one this command can read: ${what}.`); };
+    if (!isRecord(value) || value.ok !== true)
+        return fail('not ok');
+    if (typeof value.workspace !== 'string' || typeof value.rev !== 'number')
+        return fail('no workspace');
+    if (!Array.isArray(value.ops))
+        return fail('no ops');
+    const ops = [];
+    for (const op of value.ops) {
+        if (!isRecord(op) || typeof op.opId !== 'string' || !UUID.test(op.opId))
+            return fail('an op has no id');
+        if (op.kind !== 'round' && op.kind !== 'edit')
+            return fail(`op ${op.opId} has kind ${JSON.stringify(op.kind)}`);
+        if (op.drawer !== null && typeof op.drawer !== 'string')
+            return fail(`op ${op.opId} has a drawer that is not an id`);
+        // `waiting: true` while its round waits on the person, absent otherwise (and from a server older than the field,
+        // whose claim answers for it).
+        if (op.waiting !== undefined && op.waiting !== true)
+            return fail(`op ${op.opId} has a waiting flag that is not true`);
+        ops.push({ opId: op.opId, kind: op.kind, drawer: op.drawer, waiting: op.waiting === true });
+    }
+    const runner = value.runner;
+    if (runner !== null && (!isRecord(runner) || typeof runner.runnerId !== 'string' || typeof runner.leaseUntilMs !== 'number'))
+        return fail('a runner that is not a lease');
+    return {
+        workspace: value.workspace,
+        rev: value.rev,
+        runner: runner === null ? null : { runnerId: runner.runnerId, leaseUntilMs: runner.leaseUntilMs },
+        ops,
+    };
+};
+export const createRunnerClient = (args) => {
+    const fetcher = args.fetch ?? ((url, init) => fetch(url, init));
+    const post = async (pathname, body) => {
+        const url = `${args.origin}${pathname}`;
+        let response;
+        try {
+            response = await fetcher(url, {
+                method: 'POST',
+                headers: { [PUSH_HEADER]: await args.token(), [CLI_HEADER]: args.cliVersion, 'content-type': 'application/json' },
+                body: JSON.stringify(body),
+                // The upload token travels in a header, and fetch keeps custom headers across a redirect: never follow one.
+                redirect: NO_REDIRECT,
+            });
+        }
+        catch (cause) {
+            throw new DrawTransportError('unreachable', `${new URL(url).host} could not be reached`, { cause });
+        }
+        const redirected = await redirectOf(url, response);
+        if (redirected)
+            throw redirected;
+        const parsed = await readBody(response);
+        if (!response.ok)
+            throw new DrawHttpError(response.status, errorCodeOf(parsed) ?? `http_${response.status}`, retryAfterOf(response, parsed), parsed);
+        return parsed;
+    };
+    return {
+        heartbeat: async (body) => (validateHeartbeat(await post('/api/v1/slate/runner', { ...body, cliVersion: args.cliVersion }))),
+        claim: async (opId, runnerId) => {
+            const answer = await post(`/api/v1/slate/ops/${encodeURIComponent(opId)}/claim`, { runnerId });
+            if (!isRecord(answer) || answer.ok !== true || answer.op !== opId)
+                throw new DrawTransportError('malformed', `The claim of ${opId} answered something else`);
+            return { replayed: answer.replayed === true };
+        },
+    };
+};
+//# sourceMappingURL=workspace-runner-client.js.map

package/dist/workspace-runner-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-client.js","sourceRoot":"","sources":["../src/workspace-runner-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,WAAW,EACX,QAAQ,EACR,UAAU,EACV,YAAY,GAEb,MAAM,4BAA4B,CAAC;AAmBpC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,MAAM,IAAI,GAAG,wEAAwE,CAAC;AAEtF,qHAAqH;AACrH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAmB,EAAE;IACnE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAS,EAAE,GAAG,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,0DAA0D,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxJ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;IACtG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,GAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACxG,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,aAAa,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,iCAAiC,CAAC,CAAC;QACrH,iHAAiH;QACjH,+BAA+B;QAC/B,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,sCAAsC,CAAC,CAAC;QACtH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAuB,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC1K,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAkB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAsB,EAAE;QACrH,GAAG;KACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAMlC,EAAE,EAAE;IACH,MAAM,OAAO,GAAc,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAE3E,MAAM,IAAI,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAa,EAAoB,EAAE;QACvE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxC,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACjH,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,4GAA4G;gBAC5G,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAAC,aAAa,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,UAAU;YAAE,MAAM,UAAU,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACrJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,IAAiE,EAA4B,EAAE,CAAC,CAChH,iBAAiB,CAAC,MAAM,IAAI,CAAC,sBAAsB,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAChG;QACD,KAAK,EAAE,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAkC,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;YAC7J,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/workspace-runner-main.d.ts

@@ -0,0 +1,56 @@
+import { type DrawFetch } from './workspace-draw-client.js';
+import { type DrawArguments, type DrawDependencies, type DrawResult } from './workspace-draw-run.js';
+import { RUNNER_POLICY } from './workspace-runner-policy.js';
+/**
+ * The workspace runner (docs/slate-remote.md, "The workspace runner"): the one detached process per workspace that
+ * `12ui workspace draw` leaves on the user's Mac, so the person's later clicks (Generate more, Edit) are drawn
+ * without a turn in the agent's thread.
+ *
+ * It holds the per-workspace lock (single instance on this Mac) and the server's lease (single instance anywhere),
+ * heartbeats with the workspace's upload token, and for every running request nobody holds it claims the request
+ * and draws it with the draw command's own run, in this process: the same plan, call ids, op lock and run record as
+ * the agent's command, so a request is never drawn twice and a rerun repeats no image call. It leaves alone a request
+ * whose op lock a live run holds (the agent's own command). It stops when the workspace has been idle for
+ * `RUNNER_POLICY.idleMs`, when its token stops working or its token file is older than the token's 12-hour life, when
+ * Codex cannot draw here, or on SIGTERM; it then lets the lease go, so the screen tells the agent again.
+ *
+ * On SIGTERM or SIGINT it claims nothing new and keeps its lease while the draws in hand finish: their Codex calls do
+ * not stop with the signal (`interruptOnSignal: false`), so their options land. What is still drawing at
+ * `RUNNER_POLICY.stopDeadlineMs` is given back to the agent with the goodbye, its calls stopped, and never pushed as
+ * failed. A call Codex itself was stopped in (macOS signals every process at logout and kills them seconds later) is
+ * not pushed either: the request goes back to the agent, whose command settles it.
+ *
+ * Every Codex call is recorded by process group while it runs, so a runner killed outright leaves its calls findable:
+ * the next runner of the workspace stops them when it starts. On every exit that still holds the lock it deletes the
+ * token file before letting the lock go.
+ */
+export type RunnerStop = 'already_running' | 'idle' | 'token_missing' | 'token_invalid' | 'token_expired' | 'cli_outdated' | 'workspace_mismatch' | 'no_engine' | 'lock_lost' | 'signal' | 'fault';
+export type RunnerDependencies = {
+    env?: NodeJS.ProcessEnv;
+    dataRoot?: string;
+    cliVersion?: string;
+    fetch?: DrawFetch;
+    /** Draws one request; the default is the draw command's own run. */
+    draw?: (args: DrawArguments, deps: DrawDependencies) => Promise<DrawResult>;
+    /** Extra dependencies for each draw (tests hand in the executor and the readiness probe). */
+    drawDeps?: Partial<DrawDependencies>;
+    now?: () => number;
+    sleep?: (milliseconds: number, signal: AbortSignal) => Promise<void>;
+    policy?: Partial<typeof RUNNER_POLICY>;
+    /** Aborting it stops the runner as a signal would. */
+    stop?: AbortSignal;
+    runnerId?: string;
+};
+/** `handedBack`: requests still drawing at the stop deadline, given back to the agent (the process must then exit). */
+export type RunnerOutcome = {
+    stop: RunnerStop;
+    runnerId: string;
+    drawn: string[];
+    handedBack: string[];
+};
+export declare const runWorkspaceRunner: (args: {
+    origin: string;
+    workspace: string;
+    deps?: RunnerDependencies;
+}) => Promise<RunnerOutcome>;
+//# sourceMappingURL=workspace-runner-main.d.ts.map

package/dist/workspace-runner-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-runner-main.d.ts","sourceRoot":"","sources":["../src/workspace-runner-main.ts"],"names":[],"mappings":"AAMA,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAoB,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIvH,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAY7D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,MAAM,UAAU,GAClB,iBAAiB,GACjB,MAAM,GACN,eAAe,GACf,eAAe,GACf,eAAe,GACf,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,WAAW,GACX,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,oEAAoE;IACpE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5E,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,aAAa,CAAC,CAAC;IACvC,sDAAsD;IACtD,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uHAAuH;AACvH,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAuC1G,eAAO,MAAM,kBAAkB,GAAU,MAAM;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B,KAAG,OAAO,CAAC,aAAa,CA8QxB,CAAC"}