@aiden-ade/sandbox-agent 0.1.59 → 0.1.60

package/dist/sleep-inhibitor.js

@@ -0,0 +1,412 @@
+/**
+ * Cross-platform sleep prevention for the duration of active local agent runs.
+ *
+ * Why this exists: a local run executes in-process with the daemon. When the
+ * machine idle-sleeps, the socket, the runtime heartbeat and the provider CLI
+ * all freeze together; the backend watchdog then fails the run as "Agent
+ * unresponsive". Holding an OS-level sleep assertion while at least one run is
+ * active removes the most common cause of that failure.
+ *
+ * Design constraints learned the hard way:
+ *
+ * - **Never throw, never reject a run.** Sleep prevention is best-effort. A
+ *   missing `caffeinate`/`systemd-inhibit` binary, a sandboxed environment, or
+ *   a spawn failure must degrade to "machine may sleep", never to a failed run.
+ * - **Self-heal.** The helper process can die mid-run (OOM, user kill, session
+ *   teardown). Acquiring once at run start is not enough, so a low-frequency
+ *   watchdog re-checks and respawns while runs are active.
+ * - **Never outlive the daemon.** A leaked `caffeinate` keeps a laptop awake
+ *   forever, which is a far worse bug than the one being fixed. Every backend
+ *   is tied to this process's lifetime by the OS itself (see below), in
+ *   addition to explicit release.
+ *
+ * Platform coverage:
+ *
+ * | Platform | Mechanism                                            |
+ * |----------|------------------------------------------------------|
+ * | macOS    | `caffeinate -i -s -w <pid>`                           |
+ * | Linux    | `systemd-inhibit`, falling back to `gnome-session-inhibit` |
+ * | Windows  | desktop: Electron's `powerSaveBlocker`, registered externally. Standalone/headless daemon (e.g. installed as a Windows Scheduled Task via service-manager.ts): a PowerShell `SetThreadExecutionState` helper, used only when nothing else is already registered |
+ *
+ * `-w <pid>` (macOS) and the `kill -0`/`Get-Process` guard loops (Linux,
+ * Windows) make the OS release the assertion when *this* process exits, even
+ * on SIGKILL where no JS cleanup handler can run. That is the Node-reachable
+ * equivalent of the `PR_SET_PDEATHSIG` guard the Codex sleep-inhibitor uses.
+ *
+ * Known limitation: on macOS the `-s` assertion is only honoured while the
+ * machine is on AC power (see `man caffeinate`). A laptop on battery with the
+ * lid closed will still sleep, and no userspace assertion can prevent that.
+ * Surviving that case is the job of wake-recovery, not of this module.
+ */
+import { spawn } from "node:child_process";
+/**
+ * Set to `1`/`true` to disable sleep prevention entirely. An escape hatch for
+ * users who would rather have their machine sleep than have runs survive.
+ */
+export const SLEEP_PREVENTION_DISABLED_ENV = "ALAN_DISABLE_SLEEP_PREVENTION";
+/** How often to verify the OS assertion is still held while runs are active. */
+const HEALTH_CHECK_INTERVAL_MS = 30_000;
+const noopLog = () => { };
+export function isSleepPreventionDisabled(env = process.env) {
+    const raw = env[SLEEP_PREVENTION_DISABLED_ENV];
+    if (raw === undefined)
+        return false;
+    const normalized = raw.trim().toLowerCase();
+    return normalized === "1" || normalized === "true" || normalized === "yes";
+}
+/**
+ * Backend driven by a long-lived helper process.
+ *
+ * The assertion is held for exactly as long as the helper lives, so lifecycle
+ * management reduces to "is the child still running?".
+ */
+class ChildProcessBackend {
+    child = null;
+    /**
+     * Set once a candidate command is proven absent (ENOENT). Prevents a spawn
+     * storm from the health watchdog on machines that simply lack the binary.
+     */
+    unavailable = false;
+    log;
+    constructor(log) {
+        this.log = log;
+    }
+    /**
+     * Let a multi-candidate backend react when its active helper terminates.
+     * This is not called for an intentional release because `release()` clears
+     * the active child before signalling it.
+     */
+    onUnexpectedTermination() { }
+    isHealthy() {
+        if (this.unavailable)
+            return true; // nothing to heal; already degraded and logged
+        const child = this.child;
+        return child !== null && child.exitCode === null && child.signalCode === null;
+    }
+    acquire() {
+        if (this.unavailable)
+            return;
+        if (this.isHealthy() && this.child !== null)
+            return;
+        // A dead child is cleared before respawning so a failed spawn cannot leave
+        // a stale handle that later reports healthy.
+        this.child = null;
+        const command = this.command();
+        if (command === null) {
+            this.unavailable = true;
+            this.log(`sleep-inhibitor ${this.name} unavailable: no supported command`);
+            return;
+        }
+        let child;
+        try {
+            child = spawn(command.file, command.args, { stdio: "ignore", detached: false });
+        }
+        catch (error) {
+            this.unavailable = true;
+            this.log(`sleep-inhibitor ${this.name} spawn threw: ${describeError(error)}`);
+            return;
+        }
+        child.on("error", (error) => {
+            const wasActiveChild = this.child === child;
+            if (wasActiveChild)
+                this.child = null;
+            // ENOENT means the binary does not exist on this machine — retrying is
+            // pointless. Any other error may be transient, so stay eligible.
+            if (error.code === "ENOENT")
+                this.unavailable = true;
+            this.log(`sleep-inhibitor ${this.name} failed: ${describeError(error)}`);
+            if (wasActiveChild)
+                this.onUnexpectedTermination();
+        });
+        child.on("exit", (code, signal) => {
+            const wasActiveChild = this.child === child;
+            if (wasActiveChild)
+                this.child = null;
+            this.log(`sleep-inhibitor ${this.name} exited code=${code} signal=${signal}`);
+            if (wasActiveChild)
+                this.onUnexpectedTermination();
+        });
+        this.child = child;
+        this.log(`sleep-inhibitor ${this.name} acquired pid=${child.pid}`);
+    }
+    release() {
+        const child = this.child;
+        if (child === null)
+            return;
+        this.child = null;
+        try {
+            child.kill("SIGTERM");
+        }
+        catch (error) {
+            this.log(`sleep-inhibitor ${this.name} release failed: ${describeError(error)}`);
+        }
+    }
+}
+/**
+ * macOS: `caffeinate -i -s -w <pid>`.
+ *
+ * `-i` blocks idle system sleep, `-s` additionally blocks system sleep while on
+ * AC power, and `-w <pid>` makes the OS drop both the moment this process exits
+ * — the orphan guard that survives SIGKILL.
+ */
+class MacCaffeinateBackend extends ChildProcessBackend {
+    name = "caffeinate";
+    command() {
+        return { file: "/usr/bin/caffeinate", args: ["-i", "-s", "-w", String(process.pid)] };
+    }
+}
+/**
+ * Linux: `systemd-inhibit`, falling back to `gnome-session-inhibit`.
+ *
+ * The inhibited command polls `kill -0 <pid>` so the helper self-terminates
+ * once this process is gone, mirroring the macOS `-w` guarantee.
+ */
+class LinuxIdleInhibitBackend extends ChildProcessBackend {
+    name = "systemd-inhibit";
+    candidateIndex = 0;
+    candidateCount = 2;
+    command() {
+        const guard = `while kill -0 ${process.pid} 2>/dev/null; do sleep 5; done`;
+        const candidates = [
+            {
+                file: "systemd-inhibit",
+                args: [
+                    "--what=idle:sleep",
+                    "--mode=block",
+                    "--who=alan-agent",
+                    "--why=Alan is running an active agent run",
+                    "--",
+                    "sh",
+                    "-c",
+                    guard,
+                ],
+            },
+            {
+                file: "gnome-session-inhibit",
+                args: [
+                    "--inhibit",
+                    "idle",
+                    "--reason",
+                    "Alan is running an active agent run",
+                    "sh",
+                    "-c",
+                    guard,
+                ],
+            },
+        ];
+        return candidates[this.candidateIndex] ?? null;
+    }
+    acquire() {
+        // Advance past a candidate that proved missing, then retry the next one.
+        const before = this.candidateIndex;
+        super.acquire();
+        if (this.unavailable && this.candidateIndex === before) {
+            this.tryNextCandidate();
+        }
+    }
+    onUnexpectedTermination() {
+        // `systemd-inhibit` can exist but still exit immediately when logind's
+        // system D-Bus is unavailable (containers, remote sessions, or partial
+        // desktop environments). Treat that the same as a missing binary and try
+        // the session-level GNOME inhibitor immediately.
+        this.tryNextCandidate();
+    }
+    tryNextCandidate() {
+        this.candidateIndex += 1;
+        if (this.candidateIndex >= this.candidateCount)
+            return;
+        this.unavailable = false;
+        super.acquire();
+    }
+}
+/**
+ * Windows: a hidden PowerShell helper calling `SetThreadExecutionState`.
+ *
+ * `ES_CONTINUOUS | ES_SYSTEM_REQUIRED` (0x80000001) is the same request the
+ * daemon's own process would make if Node could call the Win32 API directly;
+ * P/Invoke via `Add-Type` is the subprocess-reachable equivalent, matching the
+ * macOS/Linux backends above. The state is scoped to the calling thread, so
+ * Windows clears it the instant this helper process exits — no separate
+ * release step is needed on top of killing the child, mirroring the `-w`/
+ * `kill -0` orphan guards on the other platforms.
+ *
+ * This only runs when nothing else already holds a Windows sleep assertion
+ * for this daemon (see `createPlatformBackends`) — the desktop app's Electron
+ * `powerSaveBlocker` covers the common case, and duplicating it would just
+ * spawn a redundant `powershell.exe` per run for no additional protection.
+ */
+class WindowsPowerRequestBackend extends ChildProcessBackend {
+    name = "windows-power-request";
+    command() {
+        const guard = `while (Get-Process -Id ${process.pid} -ErrorAction SilentlyContinue) ` +
+            "{ Start-Sleep -Seconds 5 }";
+        const script = [
+            "Add-Type -Namespace Alan -Name Power -MemberDefinition " +
+                "'[DllImport(\"kernel32.dll\")] public static extern uint SetThreadExecutionState(uint esFlags);';",
+            "[Alan.Power]::SetThreadExecutionState(0x80000001) | Out-Null;",
+            guard,
+        ].join(" ");
+        return {
+            file: "powershell.exe",
+            args: ["-NoProfile", "-NonInteractive", "-WindowStyle", "Hidden", "-Command", script],
+        };
+    }
+}
+/**
+ * Backends contributed by the embedding application.
+ *
+ * The desktop app registers Electron's `powerSaveBlocker` here. When present,
+ * it takes priority over `WindowsPowerRequestBackend` (see
+ * `createPlatformBackends`) so a desktop-wrapped run doesn't spawn a
+ * redundant PowerShell helper alongside it.
+ */
+const externalBackends = new Set();
+/**
+ * Register an additional backend. Returns a disposer that unregisters it.
+ *
+ * Registration must happen before the daemon starts to affect its inhibitor;
+ * inhibitors snapshot the registry at construction time.
+ */
+export function registerSleepInhibitorBackend(backend) {
+    externalBackends.add(backend);
+    return () => {
+        externalBackends.delete(backend);
+    };
+}
+function createPlatformBackends(log, hasExternalBackend) {
+    switch (process.platform) {
+        case "darwin":
+            return [new MacCaffeinateBackend(log)];
+        case "linux":
+            return [new LinuxIdleInhibitBackend(log)];
+        case "win32":
+            // A registered external backend (desktop's powerSaveBlocker) already
+            // covers this; only spawn the standalone PowerShell helper when the
+            // daemon is running headless (e.g. as a Windows Scheduled Task via
+            // service-manager.ts) with nothing else holding a sleep assertion.
+            return hasExternalBackend ? [] : [new WindowsPowerRequestBackend(log)];
+        default:
+            return [];
+    }
+}
+/**
+ * Holds an OS sleep assertion while `setActive(true)` is in effect.
+ *
+ * Mirrors the Codex `SleepInhibitor` contract: idempotent, self-healing, and
+ * silent on platforms where nothing is available.
+ */
+export class SleepInhibitor {
+    backends;
+    log;
+    enabled;
+    active = false;
+    healthTimer = null;
+    exitHandler = null;
+    disposed = false;
+    constructor(options = {}) {
+        this.log = options.log ?? noopLog;
+        this.enabled = !isSleepPreventionDisabled(options.env ?? process.env);
+        this.backends = this.enabled
+            ? [...createPlatformBackends(this.log, externalBackends.size > 0), ...externalBackends]
+            : [];
+        if (!this.enabled) {
+            this.log(`sleep-inhibitor disabled via ${SLEEP_PREVENTION_DISABLED_ENV}`);
+        }
+    }
+    isActive() {
+        return this.active;
+    }
+    /** Names of the backends this inhibitor will drive. Exposed for diagnostics. */
+    backendNames() {
+        return this.backends.map((backend) => backend.name);
+    }
+    /**
+     * Turn sleep prevention on or off. Safe to call repeatedly with the same
+     * value; only edges do work.
+     */
+    setActive(active) {
+        if (this.disposed)
+            return;
+        if (this.active === active) {
+            // Even on a repeated `true`, re-verify: a helper may have died since the
+            // last call and the watchdog may not have fired yet.
+            if (active)
+                this.healBackends();
+            return;
+        }
+        this.active = active;
+        if (active)
+            this.start();
+        else
+            this.stop();
+    }
+    /** Release everything and detach timers/handlers. Idempotent. */
+    dispose() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        this.active = false;
+        this.stop();
+    }
+    start() {
+        if (this.backends.length === 0)
+            return;
+        this.healBackends();
+        if (this.healthTimer === null) {
+            this.healthTimer = setInterval(() => this.healBackends(), HEALTH_CHECK_INTERVAL_MS);
+            // Never keep the process alive purely to hold a sleep assertion.
+            this.healthTimer.unref?.();
+        }
+        if (this.exitHandler === null) {
+            // Best-effort synchronous cleanup. The OS-level parent guards above are
+            // the real safety net; this just releases promptly on a clean exit.
+            this.exitHandler = () => {
+                for (const backend of this.backends)
+                    backend.release();
+            };
+            process.on("exit", this.exitHandler);
+        }
+    }
+    stop() {
+        if (this.healthTimer !== null) {
+            clearInterval(this.healthTimer);
+            this.healthTimer = null;
+        }
+        if (this.exitHandler !== null) {
+            process.removeListener("exit", this.exitHandler);
+            this.exitHandler = null;
+        }
+        for (const backend of this.backends) {
+            try {
+                backend.release();
+            }
+            catch (error) {
+                this.log(`sleep-inhibitor release error: ${describeError(error)}`);
+            }
+        }
+    }
+    /**
+     * Acquire anything not currently held. This is the self-healing step: a
+     * backend whose helper died is respawned here.
+     *
+     * Healthy backends are skipped rather than re-acquired, so concurrent runs
+     * can never stack assertions even if a backend's own `acquire()` is not
+     * defensively idempotent.
+     */
+    healBackends() {
+        for (const backend of this.backends) {
+            try {
+                if (backend.isHealthy())
+                    continue;
+                backend.acquire();
+            }
+            catch (error) {
+                this.log(`sleep-inhibitor ${backend.name} acquire error: ${describeError(error)}`);
+            }
+        }
+    }
+}
+function describeError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=sleep-inhibitor.js.map

package/dist/sleep-inhibitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sleep-inhibitor.js","sourceRoot":"","sources":["../src/sleep-inhibitor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE7E,gFAAgF;AAChF,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAoBxC,MAAM,OAAO,GAAW,GAAG,EAAE,GAAE,CAAC,CAAC;AAEjC,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAe,mBAAmB;IAEtB,KAAK,GAAwB,IAAI,CAAC;IAC5C;;;OAGG;IACO,WAAW,GAAG,KAAK,CAAC;IACX,GAAG,CAAS;IAE/B,YAAY,GAAW;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAKD;;;;OAIG;IACO,uBAAuB,KAAU,CAAC;IAE5C,SAAS;QACP,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;IAChF,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACpD,2EAA2E;QAC3E,6CAA6C;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAElB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,iBAAiB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACjD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;YAC5C,IAAI,cAAc;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACtC,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,YAAY,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,cAAc;gBAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;YAC5C,IAAI,cAAc;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,gBAAgB,IAAI,WAAW,MAAM,EAAE,CAAC,CAAC;YAC9E,IAAI,cAAc;gBAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,oBAAoB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,oBAAqB,SAAQ,mBAAmB;IAC3C,IAAI,GAAG,YAAY,CAAC;IAEnB,OAAO;QACf,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,uBAAwB,SAAQ,mBAAmB;IAC9C,IAAI,GAAG,iBAAiB,CAAC;IAC1B,cAAc,GAAG,CAAC,CAAC;IACV,cAAc,GAAG,CAAC,CAAC;IAE1B,OAAO;QACf,MAAM,KAAK,GAAG,iBAAiB,OAAO,CAAC,GAAG,gCAAgC,CAAC;QAC3E,MAAM,UAAU,GAAG;YACjB;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE;oBACJ,mBAAmB;oBACnB,cAAc;oBACd,kBAAkB;oBAClB,2CAA2C;oBAC3C,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,KAAK;iBACN;aACF;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE;oBACJ,WAAW;oBACX,MAAM;oBACN,UAAU;oBACV,qCAAqC;oBACrC,IAAI;oBACJ,IAAI;oBACJ,KAAK;iBACN;aACF;SACF,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC;IACjD,CAAC;IAED,OAAO;QACL,yEAAyE;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QACnC,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;YACvD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAES,uBAAuB;QAC/B,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QACvD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,0BAA2B,SAAQ,mBAAmB;IACjD,IAAI,GAAG,uBAAuB,CAAC;IAE9B,OAAO;QACf,MAAM,KAAK,GACT,0BAA0B,OAAO,CAAC,GAAG,kCAAkC;YACvE,4BAA4B,CAAC;QAC/B,MAAM,MAAM,GAAG;YACb,yDAAyD;gBACvD,mGAAmG;YACrG,+DAA+D;YAC/D,KAAK;SACN,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC;SACtF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,GAAG,EAAE;QACV,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW,EAAE,kBAA2B;IACtE,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,KAAK,OAAO;YACV,OAAO,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,KAAK,OAAO;YACV,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,OAAO,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACR,QAAQ,CAA0B;IAClC,GAAG,CAAS;IACZ,OAAO,CAAU;IAC1B,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAA0B,IAAI,CAAC;IAC1C,WAAW,GAAwB,IAAI,CAAC;IACxC,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,UAAqD,EAAE;QACjE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,CAAC,yBAAyB,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO;YAC1B,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CAAC,gCAAgC,6BAA6B,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,gFAAgF;IAChF,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,MAAe;QACvB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,yEAAyE;YACzE,qDAAqD;YACrD,IAAI,MAAM;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,MAAM;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,iEAAiE;IACjE,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,KAAK;QACX,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,wBAAwB,CAAC,CAAC;YACpF,iEAAiE;YACjE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,CAAC,WAAW,GAAG,GAAG,EAAE;gBACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACzD,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,IAAI;QACV,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,kCAAkC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,YAAY;QAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,SAAS,EAAE;oBAAE,SAAS;gBAClC,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,IAAI,mBAAmB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/suspension-detector.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Detects that this process was suspended (machine sleep, VM pause, laptop lid
+ * close) rather than merely idle.
+ *
+ * Why the daemon needs to know: when the host sleeps, the socket, the runtime
+ * heartbeat and the provider CLI all freeze together. Nothing is emitted, so
+ * from the backend's point of view the run simply went silent, and the
+ * watchdog fails it as "Agent unresponsive". Sleep prevention (see
+ * `sleep-inhibitor.ts`) removes the common case, but it cannot win against a
+ * lid close on battery or a forced sleep — so the daemon must be able to say
+ * "I was frozen, that silence was not my fault" once it wakes.
+ *
+ * Detection method: schedule a timer at a known interval and compare the
+ * wall-clock gap against the interval. Timers do not fire while the process is
+ * suspended, so a gap far larger than the interval means the process was not
+ * running. This is the same inter-tick gap technique the API watchdog uses to
+ * notice that *it* was suspended (`isWakeGapSweep`), applied at the client.
+ *
+ * A plain "wall clock jumped" check would also fire on NTP corrections and
+ * timezone changes; keying off missed timer ticks avoids both, because a clock
+ * adjustment does not stop timers from firing.
+ */
+export interface SuspensionDetectorOptions {
+    /** Called once per detected suspension, with how long the process was frozen. */
+    onSuspensionDetected: (gapMs: number) => void;
+    checkIntervalMs?: number;
+    thresholdMs?: number;
+    /** Injectable for tests. */
+    now?: () => number;
+    setIntervalFn?: typeof setInterval;
+    clearIntervalFn?: typeof clearInterval;
+}
+export declare class SuspensionDetector {
+    private readonly onSuspensionDetected;
+    private readonly checkIntervalMs;
+    private readonly thresholdMs;
+    private readonly now;
+    private readonly setIntervalFn;
+    private readonly clearIntervalFn;
+    private timer;
+    private lastTickAtMs;
+    constructor(options: SuspensionDetectorOptions);
+    start(): void;
+    stop(): void;
+    isRunning(): boolean;
+    private tick;
+}
+//# sourceMappingURL=suspension-detector.d.ts.map

package/dist/suspension-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspension-detector.d.ts","sourceRoot":"","sources":["../src/suspension-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAgBH,MAAM,WAAW,yBAAyB;IACxC,iFAAiF;IACjF,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,WAAW,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,aAAa,CAAC;CACxC;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA0B;IAC/D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;IACvD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,YAAY,CAAuB;gBAE/B,OAAO,EAAE,yBAAyB;IAS9C,KAAK,IAAI,IAAI;IAQb,IAAI,IAAI,IAAI;IAOZ,SAAS,IAAI,OAAO;IAIpB,OAAO,CAAC,IAAI;CAiBb"}

package/dist/suspension-detector.js

@@ -0,0 +1,89 @@
+/**
+ * Detects that this process was suspended (machine sleep, VM pause, laptop lid
+ * close) rather than merely idle.
+ *
+ * Why the daemon needs to know: when the host sleeps, the socket, the runtime
+ * heartbeat and the provider CLI all freeze together. Nothing is emitted, so
+ * from the backend's point of view the run simply went silent, and the
+ * watchdog fails it as "Agent unresponsive". Sleep prevention (see
+ * `sleep-inhibitor.ts`) removes the common case, but it cannot win against a
+ * lid close on battery or a forced sleep — so the daemon must be able to say
+ * "I was frozen, that silence was not my fault" once it wakes.
+ *
+ * Detection method: schedule a timer at a known interval and compare the
+ * wall-clock gap against the interval. Timers do not fire while the process is
+ * suspended, so a gap far larger than the interval means the process was not
+ * running. This is the same inter-tick gap technique the API watchdog uses to
+ * notice that *it* was suspended (`isWakeGapSweep`), applied at the client.
+ *
+ * A plain "wall clock jumped" check would also fire on NTP corrections and
+ * timezone changes; keying off missed timer ticks avoids both, because a clock
+ * adjustment does not stop timers from firing.
+ */
+/** Timer cadence. Small enough to bound detection latency, large enough to be free. */
+const DEFAULT_CHECK_INTERVAL_MS = 15_000;
+/**
+ * Overshoot beyond the interval that counts as a suspension.
+ *
+ * Ordinary event-loop congestion and timer coalescing routinely add seconds;
+ * they must not be reported as sleep. A full minute of overshoot cannot be
+ * explained that way, and anything shorter than this is well inside the
+ * backend's 5-minute unresponsive window anyway, so reporting it would add
+ * noise without preventing a single failed run.
+ */
+const DEFAULT_THRESHOLD_MS = 60_000;
+export class SuspensionDetector {
+    onSuspensionDetected;
+    checkIntervalMs;
+    thresholdMs;
+    now;
+    setIntervalFn;
+    clearIntervalFn;
+    timer = null;
+    lastTickAtMs = null;
+    constructor(options) {
+        this.onSuspensionDetected = options.onSuspensionDetected;
+        this.checkIntervalMs = options.checkIntervalMs ?? DEFAULT_CHECK_INTERVAL_MS;
+        this.thresholdMs = options.thresholdMs ?? DEFAULT_THRESHOLD_MS;
+        this.now = options.now ?? Date.now;
+        this.setIntervalFn = options.setIntervalFn ?? setInterval;
+        this.clearIntervalFn = options.clearIntervalFn ?? clearInterval;
+    }
+    start() {
+        if (this.timer !== null)
+            return;
+        this.lastTickAtMs = this.now();
+        this.timer = this.setIntervalFn(() => this.tick(), this.checkIntervalMs);
+        // Detection must never be the reason the process stays alive.
+        this.timer.unref?.();
+    }
+    stop() {
+        if (this.timer === null)
+            return;
+        this.clearIntervalFn(this.timer);
+        this.timer = null;
+        this.lastTickAtMs = null;
+    }
+    isRunning() {
+        return this.timer !== null;
+    }
+    tick() {
+        const nowMs = this.now();
+        const previousMs = this.lastTickAtMs;
+        this.lastTickAtMs = nowMs;
+        if (previousMs === null)
+            return;
+        // Overshoot beyond the scheduled cadence, i.e. time the process was not running.
+        const overshootMs = nowMs - previousMs - this.checkIntervalMs;
+        if (overshootMs < this.thresholdMs)
+            return;
+        try {
+            this.onSuspensionDetected(overshootMs);
+        }
+        catch {
+            // A reporting failure must never break the detection loop; the next
+            // suspension still gets reported.
+        }
+    }
+}
+//# sourceMappingURL=suspension-detector.js.map

package/dist/suspension-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspension-detector.js","sourceRoot":"","sources":["../src/suspension-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,uFAAuF;AACvF,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAapC,MAAM,OAAO,kBAAkB;IACZ,oBAAoB,CAA0B;IAC9C,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,GAAG,CAAe;IAClB,aAAa,CAAqB;IAClC,eAAe,CAAuB;IAC/C,KAAK,GAA0C,IAAI,CAAC;IACpD,YAAY,GAAkB,IAAI,CAAC;IAE3C,YAAY,OAAkC;QAC5C,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAC5E,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;QAC/D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC;QAC1D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,aAAa,CAAC;IAClE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzE,8DAA8D;QAC7D,IAAI,CAAC,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAEO,IAAI;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO;QAEhC,iFAAiF;QACjF,MAAM,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC;QAC9D,IAAI,WAAW,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO;QAE3C,IAAI,CAAC;YACH,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,kCAAkC;QACpC,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Re-exports from the canonical shared agent types.
+ * Single source of truth: packages/shared/src/agent/types.ts
+ */
+export * from "@alan-ai/shared/agent";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,uBAAuB,CAAC"}

package/dist/types.js

@@ -0,0 +1,6 @@
+/**
+ * Re-exports from the canonical shared agent types.
+ * Single source of truth: packages/shared/src/agent/types.ts
+ */
+export * from "@alan-ai/shared/agent";
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,uBAAuB,CAAC"}

package/dist/updater.d.ts

@@ -0,0 +1,15 @@
+export interface UpdatePayload {
+    devMode: boolean;
+    version?: string;
+}
+/**
+ * Install the new agent version via npm.
+ * Returns true if the install succeeded.
+ */
+export declare function installUpdate(payload: UpdatePayload): Promise<boolean>;
+/**
+ * Spawn a new agent process with the same env vars, then exit this process.
+ * Preserves the provider session ID so the new agent can resume Claude context.
+ */
+export declare function respawnAgent(lastProviderSessionId?: string): void;
+//# sourceMappingURL=updater.d.ts.map

package/dist/updater.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../src/updater.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAe5E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAmBjE"}

package/dist/updater.js

@@ -0,0 +1,50 @@
+/**
+ * Self-update logic for the sandbox agent.
+ * In prod/staging, installs the new version from npm.
+ */
+import { execSync, spawn } from "node:child_process";
+const DEFAULT_PATH = "/home/user/.local/node/bin:/home/user/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
+/**
+ * Install the new agent version via npm.
+ * Returns true if the install succeeded.
+ */
+export async function installUpdate(payload) {
+    const version = payload.version ?? "latest";
+    try {
+        console.info(`[updater] Installing @aiden-ade/sandbox-agent@${version} via npm`);
+        execSync(`npm install -g @aiden-ade/sandbox-agent@${version}`, {
+            timeout: 60_000,
+            env: { ...process.env, PATH: DEFAULT_PATH },
+            stdio: "pipe",
+        });
+        console.info("[updater] npm install complete");
+        return true;
+    }
+    catch (error) {
+        console.error("[updater] npm install failed:", error.message);
+        return false;
+    }
+}
+/**
+ * Spawn a new agent process with the same env vars, then exit this process.
+ * Preserves the provider session ID so the new agent can resume Claude context.
+ */
+export function respawnAgent(lastProviderSessionId) {
+    const env = { ...process.env };
+    if (lastProviderSessionId) {
+        env.AIDEN_PROVIDER_SESSION_ID = lastProviderSessionId;
+    }
+    console.info("[updater] Spawning new agent process");
+    const child = spawn("aiden-agent", [], {
+        detached: true,
+        stdio: "ignore",
+        env: { ...env, PATH: DEFAULT_PATH },
+    });
+    child.unref();
+    // Give the new process a moment to start before we exit
+    setTimeout(() => {
+        console.info("[updater] Old agent exiting after respawn");
+        process.exit(0);
+    }, 500);
+}
+//# sourceMappingURL=updater.js.map