@alan-ai-hq/agent-manager 0.1.113 → 0.1.115

package/dist/local-daemon-lifecycle.d.ts

@@ -0,0 +1,112 @@
+import type { AgentRunAbortReason } from "@alan-ai/shared/runtime-runner-status";
+import { acquireLocalDaemonMaintenanceLease, inspectLocalDaemonRunJournal, type LocalDaemonEndpointObservation, type LocalDaemonStatus, observeLocalDaemonEndpoint, readLocalDaemonOwnerLease, releaseLocalDaemonMaintenanceLease } from "./daemon-local-control.js";
+export type { LocalDaemonEndpointObservation };
+export type LocalDaemonHostState = "running" | "stopped" | "starting" | "unknown";
+export interface LocalDaemonHostInspection {
+    state: LocalDaemonHostState;
+    platform: "darwin" | "linux" | "win32" | "unsupported";
+    detail?: string;
+    observedAtMs: number;
+}
+export interface LocalDaemonIdentity {
+    pid: number;
+    serviceId?: string;
+    installationId?: string;
+    daemonSessionId?: string;
+    daemonEpoch?: number;
+    port: number;
+    startedAtMs?: number;
+}
+export type LocalDaemonMaintenanceReason = "replace" | "recover" | "shutdown" | "auth_repair" | "definition_update";
+export type LocalDaemonLifecycleOutcome = {
+    kind: "ready";
+    identity: LocalDaemonIdentity;
+    status: LocalDaemonStatus;
+} | {
+    kind: "already_ready";
+    identity: LocalDaemonIdentity;
+    status: LocalDaemonStatus;
+} | {
+    kind: "started";
+    identity: LocalDaemonIdentity;
+    status: LocalDaemonStatus;
+} | {
+    kind: "replaced";
+    previous: LocalDaemonIdentity;
+    identity: LocalDaemonIdentity;
+} | {
+    kind: "shutdown";
+    identity: LocalDaemonIdentity;
+    reason: AgentRunAbortReason;
+} | {
+    kind: "blocked";
+    code: "active_journal" | "pending_starts" | "host_unknown" | "endpoint_unreachable" | "endpoint_unauthorized" | "identity_changed" | "stop_timeout" | "maintenance_held" | "update_pending";
+    message: string;
+    observation?: LocalDaemonEndpointObservation;
+    host?: LocalDaemonHostInspection;
+} | {
+    kind: "failed";
+    code: string;
+    message: string;
+};
+export interface LocalDaemonHost {
+    inspect(): Promise<LocalDaemonHostInspection>;
+    ensureDefinition(): Promise<{
+        changed: boolean;
+        updatePending: boolean;
+    }>;
+    enable(): Promise<void>;
+    start(): Promise<void>;
+    stopAndWait(identity: LocalDaemonIdentity, timeoutMs: number): Promise<"exited" | "timeout" | "identity_changed">;
+    forceStopAndWait?(identity: LocalDaemonIdentity, timeoutMs: number): Promise<"exited" | "timeout" | "identity_changed">;
+    uninstall(): Promise<void>;
+}
+export interface LocalDaemonLifecycle {
+    observeEndpoint(timeoutMs?: number): Promise<LocalDaemonEndpointObservation>;
+    ensureReady(): Promise<LocalDaemonLifecycleOutcome>;
+    recover(): Promise<LocalDaemonLifecycleOutcome>;
+    /**
+     * Fenced replacement: acquire maintenance → capture identity → check
+     * pending+accepted journals → recheck → stop only captured identity →
+     * wait for exit → revalidate before any forced host stop → start and verify
+     * a new identity.
+     * If the host is already stopped and a readable owner lease is absent,
+     * skips replacement and performs a non-destructive fresh start.
+     */
+    replaceIfSafe(reason: LocalDaemonMaintenanceReason): Promise<LocalDaemonLifecycleOutcome>;
+    /**
+     * Rejects when active/pending work exists unless force + system reason.
+     * Only explicit browser/local stop_run may produce reason "user".
+     */
+    shutdown(input: {
+        reason: Exclude<AgentRunAbortReason, "user">;
+        force?: boolean;
+    }): Promise<LocalDaemonLifecycleOutcome>;
+}
+export declare function endpointObservationPresentation(observation: LocalDaemonEndpointObservation): "ready" | "unauthorized" | "degraded_unreachable";
+export declare function hostAllowsReplacementConsideration(host: LocalDaemonHostInspection): boolean;
+export declare function identitiesMatch(a: LocalDaemonIdentity, b: LocalDaemonIdentity): boolean;
+export declare function identityFromObservation(observation: Extract<LocalDaemonEndpointObservation, {
+    kind: "ready";
+}>, ownerPid?: number): LocalDaemonIdentity;
+export interface CreateLocalDaemonLifecycleOptions {
+    configPath: string;
+    port: number;
+    token?: string;
+    host: LocalDaemonHost;
+    observeTimeoutMs?: number;
+    stopTimeoutMs?: number;
+    forceStopTimeoutMs?: number;
+    readyPollMs?: number;
+    readyTimeoutMs?: number;
+    toctouYieldMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    nowMs?: () => number;
+    observe?: typeof observeLocalDaemonEndpoint;
+    inspectJournal?: typeof inspectLocalDaemonRunJournal;
+    acquireMaintenance?: typeof acquireLocalDaemonMaintenanceLease;
+    releaseMaintenance?: typeof releaseLocalDaemonMaintenanceLease;
+    readOwner?: typeof readLocalDaemonOwnerLease;
+}
+export declare function createLocalDaemonLifecycle(options: CreateLocalDaemonLifecycleOptions): LocalDaemonLifecycle;
+//# sourceMappingURL=local-daemon-lifecycle.d.ts.map

package/dist/local-daemon-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-daemon-lifecycle.d.ts","sourceRoot":"","sources":["../src/local-daemon-lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAC5B,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,kCAAkC,EACnC,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,8BAA8B,EAAE,CAAC;AAE/C,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAElF,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,SAAS,GACT,UAAU,GACV,aAAa,GACb,mBAAmB,CAAC;AAExB,MAAM,MAAM,2BAA2B,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAChF;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EACA,gBAAgB,GAChB,gBAAgB,GAChB,cAAc,GACd,sBAAsB,GACtB,uBAAuB,GACvB,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,gBAAgB,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,8BAA8B,CAAC;IAC7C,IAAI,CAAC,EAAE,yBAAyB,CAAC;CAClC,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC9C,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,WAAW,CACT,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,kBAAkB,CAAC,CAAC;IACtD,gBAAgB,CAAC,CACf,QAAQ,EAAE,mBAAmB,EAC7B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,kBAAkB,CAAC,CAAC;IACtD,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7E,WAAW,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChD;;;;;;;OAOG;IACH,aAAa,CAAC,MAAM,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC1F;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE;QACd,MAAM,EAAE,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC1C;AACD,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,8BAA8B,GAC1C,OAAO,GAAG,cAAc,GAAG,sBAAsB,CAInD;AACD,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAE3F;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAQvF;AAoBD,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,OAAO,CAAC,8BAA8B,EAAE;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,EACvE,QAAQ,SAAI,GACX,mBAAmB,CAQrB;AAED,MAAM,WAAW,iCAAiC;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,0BAA0B,CAAC;IAC5C,cAAc,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACrD,kBAAkB,CAAC,EAAE,OAAO,kCAAkC,CAAC;IAC/D,kBAAkB,CAAC,EAAE,OAAO,kCAAkC,CAAC;IAC/D,SAAS,CAAC,EAAE,OAAO,yBAAyB,CAAC;CAC9C;AAoBD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iCAAiC,GACzC,oBAAoB,CAwZtB"}

package/dist/local-daemon-lifecycle.js

@@ -0,0 +1,433 @@
+import { acquireLocalDaemonMaintenanceLease, inspectLocalDaemonRunJournal, observeLocalDaemonEndpoint, readLocalDaemonOwnerLease, releaseLocalDaemonMaintenanceLease, } from "./daemon-local-control.js";
+export function endpointObservationPresentation(observation) {
+    if (observation.kind === "ready")
+        return "ready";
+    if (observation.kind === "unauthorized")
+        return "unauthorized";
+    return "degraded_unreachable";
+}
+export function hostAllowsReplacementConsideration(host) {
+    return host.state === "stopped" || host.state === "running";
+}
+export function identitiesMatch(a, b) {
+    if (a.port !== b.port)
+        return false;
+    if (a.daemonSessionId && b.daemonSessionId && a.daemonSessionId !== b.daemonSessionId) {
+        return false;
+    }
+    if (a.serviceId && b.serviceId && a.serviceId !== b.serviceId)
+        return false;
+    if (a.pid > 0 && b.pid > 0 && a.pid !== b.pid)
+        return false;
+    return true;
+}
+function hasReplacementIdentity(identity) {
+    return identity.pid > 0 && Boolean(identity.daemonSessionId);
+}
+function identityFromOwnerLease(owner, fallbackPort) {
+    if (!owner)
+        return null;
+    return {
+        pid: owner.pid,
+        serviceId: owner.localServiceId,
+        daemonSessionId: owner.daemonSessionId,
+        port: owner.localApiPort || fallbackPort,
+        startedAtMs: owner.startedAtMs,
+    };
+}
+export function identityFromObservation(observation, ownerPid = 0) {
+    const status = observation.status;
+    return {
+        pid: ownerPid,
+        serviceId: status.localServiceId,
+        daemonSessionId: status.daemonSessionId,
+        port: status.localApiPort,
+    };
+}
+function sleepMs(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function journalBlock(journal, pendingOnly) {
+    if (journal.safeToRestart)
+        return null;
+    return {
+        kind: "blocked",
+        code: pendingOnly ? "pending_starts" : "active_journal",
+        message: pendingOnly
+            ? "Pending run starts still protect this daemon"
+            : "Active or pending runs still protect this daemon",
+    };
+}
+export function createLocalDaemonLifecycle(options) {
+    const observeTimeoutMs = options.observeTimeoutMs ?? 750;
+    const stopTimeoutMs = options.stopTimeoutMs ?? 10_000;
+    const forceStopTimeoutMs = options.forceStopTimeoutMs ?? 5_000;
+    const readyPollMs = options.readyPollMs ?? 100;
+    const readyTimeoutMs = options.readyTimeoutMs ?? 5_000;
+    const toctouYieldMs = options.toctouYieldMs ?? 50;
+    const sleep = options.sleep ?? sleepMs;
+    const nowMs = options.nowMs ?? Date.now;
+    const observe = options.observe ?? observeLocalDaemonEndpoint;
+    const inspectJournal = options.inspectJournal ?? inspectLocalDaemonRunJournal;
+    const acquireMaintenance = options.acquireMaintenance ?? acquireLocalDaemonMaintenanceLease;
+    const releaseMaintenance = options.releaseMaintenance ?? releaseLocalDaemonMaintenanceLease;
+    const readOwner = options.readOwner ?? readLocalDaemonOwnerLease;
+    const resolveOwnerPid = () => {
+        try {
+            return readOwner(options.configPath)?.pid ?? 0;
+        }
+        catch {
+            return 0;
+        }
+    };
+    // `null` proves that no owner lease exists; `undefined` means the lease could
+    // not be read and must remain fail-closed for destructive replacement.
+    const resolveOwnerIdentity = () => {
+        try {
+            return identityFromOwnerLease(readOwner(options.configPath), options.port);
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const observeEndpoint = (timeoutMs = observeTimeoutMs) => observe(options.port, options.token, timeoutMs);
+    const waitUntilReady = async () => {
+        const deadline = nowMs() + readyTimeoutMs;
+        while (nowMs() < deadline) {
+            const observation = await observeEndpoint();
+            if (observation.kind === "ready") {
+                return {
+                    kind: "started",
+                    identity: identityFromObservation(observation, resolveOwnerPid()),
+                    status: observation.status,
+                };
+            }
+            if (observation.kind === "unauthorized") {
+                return {
+                    kind: "blocked",
+                    code: "endpoint_unauthorized",
+                    message: "Local daemon rejected the configured token",
+                    observation,
+                };
+            }
+            await sleep(readyPollMs);
+        }
+        return {
+            kind: "blocked",
+            code: "endpoint_unreachable",
+            message: "Daemon did not become ready after start",
+        };
+    };
+    const ensureReady = async () => {
+        const observation = await observeEndpoint();
+        if (observation.kind === "ready") {
+            return {
+                kind: "already_ready",
+                identity: identityFromObservation(observation, resolveOwnerPid()),
+                status: observation.status,
+            };
+        }
+        if (observation.kind === "unauthorized") {
+            return {
+                kind: "blocked",
+                code: "endpoint_unauthorized",
+                message: "Local daemon rejected the configured token",
+                observation,
+            };
+        }
+        const host = await options.host.inspect();
+        if (host.state === "unknown") {
+            return {
+                kind: "blocked",
+                code: "host_unknown",
+                message: host.detail ?? "Host service state is unknown",
+                host,
+                observation,
+            };
+        }
+        const definition = await options.host.ensureDefinition();
+        if (definition.updatePending && host.state === "running") {
+            return {
+                kind: "blocked",
+                code: "update_pending",
+                message: "Service definition update is pending while the host is still running",
+                host,
+                observation,
+            };
+        }
+        await options.host.enable();
+        if (host.state === "stopped" || host.state === "starting") {
+            await options.host.start();
+        }
+        else if (observation.kind === "unreachable") {
+            // Host claims running but endpoint is down — caller must use recover/replace.
+            return {
+                kind: "blocked",
+                code: "endpoint_unreachable",
+                message: observation.detail ?? `Endpoint unreachable (${observation.reason})`,
+                host,
+                observation,
+            };
+        }
+        return waitUntilReady();
+    };
+    const replaceIfSafe = async (_reason) => {
+        const host = await options.host.inspect();
+        if (!hostAllowsReplacementConsideration(host)) {
+            return {
+                kind: "blocked",
+                code: "host_unknown",
+                message: host.detail ?? "Host state does not authorize replacement",
+                host,
+            };
+        }
+        // Leave enough headroom for host-control commands (for example launchctl
+        // bootout/bootstrap) in addition to the bounded polling windows below.
+        const maintenanceLeaseMs = stopTimeoutMs + forceStopTimeoutMs + readyTimeoutMs + 15_000;
+        const acquired = acquireMaintenance(options.configPath, "watchdog", maintenanceLeaseMs);
+        if (!acquired.acquired) {
+            return {
+                kind: "blocked",
+                code: "maintenance_held",
+                message: "Another maintenance lease already owns replacement",
+            };
+        }
+        let maintenanceHeld = true;
+        const releaseAcquiredMaintenance = () => {
+            if (!maintenanceHeld)
+                return;
+            maintenanceHeld = false;
+            releaseMaintenance(options.configPath, acquired.lease.id);
+        };
+        try {
+            const before = await observeEndpoint();
+            const capturedOwner = resolveOwnerIdentity();
+            let previous = null;
+            if (before.kind === "ready") {
+                previous = identityFromObservation(before, capturedOwner?.pid ?? 0);
+            }
+            else if (before.kind === "unauthorized") {
+                return {
+                    kind: "blocked",
+                    code: "endpoint_unauthorized",
+                    message: "Cannot replace while the endpoint rejects auth",
+                    observation: before,
+                    host,
+                };
+            }
+            else {
+                previous = capturedOwner ?? null;
+            }
+            const firstJournal = inspectJournal(options.configPath);
+            const firstBlock = journalBlock(firstJournal, false);
+            if (firstBlock)
+                return firstBlock;
+            // A completed stop can remove its owner lease just after the supervisor
+            // times out waiting for exit. Once the OS also proves the service is
+            // stopped, there is no process to replace: re-enter the non-destructive
+            // ensure path so recovery can start it and recreate the identity.
+            if (host.state === "stopped" && before.kind === "unreachable" && capturedOwner === null) {
+                releaseAcquiredMaintenance();
+                return ensureReady();
+            }
+            if (!previous || !hasReplacementIdentity(previous)) {
+                return {
+                    kind: "blocked",
+                    code: "identity_changed",
+                    message: "Cannot prove the identity of the daemon selected for replacement",
+                    observation: before,
+                    host,
+                };
+            }
+            await sleep(toctouYieldMs);
+            const secondJournal = inspectJournal(options.configPath);
+            const secondBlock = journalBlock(secondJournal, false);
+            if (secondBlock)
+                return secondBlock;
+            const recheck = await observeEndpoint();
+            const currentOwner = resolveOwnerIdentity();
+            const current = recheck.kind === "ready"
+                ? identityFromObservation(recheck, currentOwner?.pid ?? 0)
+                : currentOwner;
+            if (!current || !hasReplacementIdentity(current) || !identitiesMatch(previous, current)) {
+                return {
+                    kind: "blocked",
+                    code: "identity_changed",
+                    message: "Daemon identity changed or became unverifiable during replacement fence",
+                    observation: recheck,
+                    host,
+                };
+            }
+            previous = current;
+            const stopResult = await options.host.stopAndWait(previous, stopTimeoutMs);
+            if (stopResult === "identity_changed") {
+                return {
+                    kind: "blocked",
+                    code: "identity_changed",
+                    message: "Daemon identity changed immediately before the host stop",
+                    host,
+                };
+            }
+            if (stopResult === "timeout") {
+                if (!options.host.forceStopAndWait) {
+                    return {
+                        kind: "blocked",
+                        code: "stop_timeout",
+                        message: "Timed out waiting for the captured daemon identity to exit",
+                        host,
+                    };
+                }
+                // Graceful shutdown may have spent the full timeout while another run
+                // was accepted or launchd adopted a new daemon. Re-establish every
+                // destructive-action fence before escalating to launchd bootout.
+                const escalationJournal = inspectJournal(options.configPath);
+                const escalationBlock = journalBlock(escalationJournal, false);
+                if (escalationBlock)
+                    return escalationBlock;
+                const escalationObservation = await observeEndpoint();
+                const escalationOwner = resolveOwnerIdentity();
+                const escalationIdentity = escalationObservation.kind === "ready"
+                    ? identityFromObservation(escalationObservation, escalationOwner?.pid ?? 0)
+                    : escalationOwner;
+                if (!escalationIdentity ||
+                    !hasReplacementIdentity(escalationIdentity) ||
+                    !identitiesMatch(previous, escalationIdentity)) {
+                    return {
+                        kind: "blocked",
+                        code: "identity_changed",
+                        message: "Daemon identity changed or became unverifiable before forced shutdown",
+                        observation: escalationObservation,
+                        host,
+                    };
+                }
+                previous = escalationIdentity;
+                const forceStopResult = await options.host.forceStopAndWait(previous, forceStopTimeoutMs);
+                if (forceStopResult === "identity_changed") {
+                    return {
+                        kind: "blocked",
+                        code: "identity_changed",
+                        message: "Daemon identity changed immediately before forced shutdown",
+                        host,
+                    };
+                }
+                if (forceStopResult === "timeout") {
+                    return {
+                        kind: "blocked",
+                        code: "stop_timeout",
+                        message: "Timed out waiting for the captured daemon identity after forced shutdown",
+                        host,
+                    };
+                }
+                // macOS force-stop unloads the launchd definition so KeepAlive cannot
+                // race the fence. Restore it only after the captured PID is gone.
+                releaseAcquiredMaintenance();
+                await options.host.ensureDefinition();
+                await options.host.enable();
+                await options.host.start();
+                const started = await waitUntilReady();
+                if (started.kind !== "started" &&
+                    started.kind !== "already_ready" &&
+                    started.kind !== "ready") {
+                    return started;
+                }
+                return {
+                    kind: "replaced",
+                    previous,
+                    identity: started.identity,
+                };
+            }
+            // The new daemon acquires its own startup maintenance lease. Hand off
+            // the watchdog fence only after the captured process has exited.
+            releaseAcquiredMaintenance();
+            if (host.platform === "win32") {
+                const definition = await options.host.ensureDefinition();
+                if (definition.updatePending) {
+                    return {
+                        kind: "blocked",
+                        code: "update_pending",
+                        message: "Windows service definition remained pending after daemon exit",
+                        host,
+                    };
+                }
+            }
+            await options.host.start();
+            const started = await waitUntilReady();
+            if (started.kind !== "started" &&
+                started.kind !== "already_ready" &&
+                started.kind !== "ready") {
+                return started;
+            }
+            return {
+                kind: "replaced",
+                previous,
+                identity: started.identity,
+            };
+        }
+        finally {
+            releaseAcquiredMaintenance();
+        }
+    };
+    const recover = async () => {
+        const observation = await observeEndpoint();
+        if (observation.kind === "ready") {
+            return {
+                kind: "ready",
+                identity: identityFromObservation(observation, resolveOwnerPid()),
+                status: observation.status,
+            };
+        }
+        if (observation.kind === "unauthorized") {
+            return {
+                kind: "blocked",
+                code: "endpoint_unauthorized",
+                message: "Local daemon rejected the configured token",
+                observation,
+            };
+        }
+        const host = await options.host.inspect();
+        if (host.state === "stopped") {
+            return ensureReady();
+        }
+        if (!hostAllowsReplacementConsideration(host)) {
+            return {
+                kind: "blocked",
+                code: "host_unknown",
+                message: host.detail ?? "Host state does not authorize recovery replacement",
+                host,
+                observation,
+            };
+        }
+        return replaceIfSafe("recover");
+    };
+    const shutdown = async (input) => {
+        const journal = inspectJournal(options.configPath);
+        if (!journal.safeToRestart && !input.force) {
+            return {
+                kind: "blocked",
+                code: "active_journal",
+                message: "Shutdown rejected while active or pending runs exist; pass force with a system reason",
+            };
+        }
+        const observation = await observeEndpoint();
+        const identity = observation.kind === "ready"
+            ? identityFromObservation(observation, resolveOwnerPid())
+            : { pid: resolveOwnerPid(), port: options.port };
+        const stopResult = await options.host.stopAndWait(identity, stopTimeoutMs);
+        if (stopResult === "timeout") {
+            return {
+                kind: "blocked",
+                code: "stop_timeout",
+                message: "Timed out waiting for daemon exit during shutdown",
+            };
+        }
+        return { kind: "shutdown", identity, reason: input.reason };
+    };
+    return {
+        observeEndpoint,
+        ensureReady,
+        recover,
+        replaceIfSafe,
+        shutdown,
+    };
+}
+//# sourceMappingURL=local-daemon-lifecycle.js.map

package/dist/local-daemon-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-daemon-lifecycle.js","sourceRoot":"","sources":["../src/local-daemon-lifecycle.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kCAAkC,EAClC,4BAA4B,EAG5B,0BAA0B,EAC1B,yBAAyB,EACzB,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AA2FnC,MAAM,UAAU,+BAA+B,CAC7C,WAA2C;IAE3C,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IAC/D,OAAO,sBAAsB,CAAC;AAChC,CAAC;AACD,MAAM,UAAU,kCAAkC,CAAC,IAA+B;IAChF,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAsB,EAAE,CAAsB;IAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA6B;IAC3D,OAAO,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmD,EACnD,YAAoB;IAEpB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,YAAY;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,WAAuE,EACvE,QAAQ,GAAG,CAAC;IAEZ,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,IAAI,EAAE,MAAM,CAAC,YAAY;KAC1B,CAAC;AACJ,CAAC;AAsBD,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CACnB,OAA2D,EAC3D,WAAoB;IAEpB,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;QACvD,OAAO,EAAE,WAAW;YAClB,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,kDAAkD;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAA0C;IAE1C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;IACzD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;IACtD,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC;IAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,4BAA4B,CAAC;IAC9E,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,kCAAkC,CAAC;IAC5F,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,kCAAkC,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,yBAAyB,CAAC;IAEjE,MAAM,eAAe,GAAG,GAAW,EAAE;QACnC,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IAEF,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,oBAAoB,GAAG,GAA2C,EAAE;QACxE,IAAI,CAAC;YACH,OAAO,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,SAAS,GAAG,gBAAgB,EAAE,EAAE,CACvD,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAElD,MAAM,cAAc,GAAG,KAAK,IAA0C,EAAE;QACtE,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,cAAc,CAAC;QAC1C,OAAO,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;YAC5C,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACjC,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;oBACjE,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxC,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,4CAA4C;oBACrD,WAAW;iBACZ,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,yCAAyC;SACnD,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAA0C,EAAE;QACnE,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,QAAQ,EAAE,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;gBACjE,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,4CAA4C;gBACrD,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,+BAA+B;gBACvD,IAAI;gBACJ,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzD,IAAI,UAAU,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACzD,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sEAAsE;gBAC/E,IAAI;gBACJ,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1D,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC9C,8EAA8E;YAC9E,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,IAAI,yBAAyB,WAAW,CAAC,MAAM,GAAG;gBAC7E,IAAI;gBACJ,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EACzB,OAAqC,EACC,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,2CAA2C;gBACnE,IAAI;aACL,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,kBAAkB,GAAG,aAAa,GAAG,kBAAkB,GAAG,cAAc,GAAG,MAAM,CAAC;QACxF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACxF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,oDAAoD;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,GAAG,IAAI,CAAC;QAC3B,MAAM,0BAA0B,GAAG,GAAS,EAAE;YAC5C,IAAI,CAAC,eAAe;gBAAE,OAAO;YAC7B,eAAe,GAAG,KAAK,CAAC;YACxB,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;YAC7C,IAAI,QAAQ,GAA+B,IAAI,CAAC;YAChD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC1C,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,gDAAgD;oBACzD,WAAW,EAAE,MAAM;oBACnB,IAAI;iBACL,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,aAAa,IAAI,IAAI,CAAC;YACnC,CAAC;YAED,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACrD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;YAElC,wEAAwE;YACxE,qEAAqE;YACrE,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBACxF,0BAA0B,EAAE,CAAC;gBAC7B,OAAO,WAAW,EAAE,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,QAAQ,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnD,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,kEAAkE;oBAC3E,WAAW,EAAE,MAAM;oBACnB,IAAI;iBACL,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;YAE3B,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;YAEpC,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;YAC5C,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC;gBAC1D,CAAC,CAAC,YAAY,CAAC;YACnB,IAAI,CAAC,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxF,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,yEAAyE;oBAClF,WAAW,EAAE,OAAO;oBACpB,IAAI;iBACL,CAAC;YACJ,CAAC;YACD,QAAQ,GAAG,OAAO,CAAC;YAEnB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC3E,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;gBACtC,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,0DAA0D;oBACnE,IAAI;iBACL,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACnC,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,4DAA4D;wBACrE,IAAI;qBACL,CAAC;gBACJ,CAAC;gBAED,sEAAsE;gBACtE,mEAAmE;gBACnE,iEAAiE;gBACjE,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC7D,MAAM,eAAe,GAAG,YAAY,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,eAAe;oBAAE,OAAO,eAAe,CAAC;gBAE5C,MAAM,qBAAqB,GAAG,MAAM,eAAe,EAAE,CAAC;gBACtD,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;gBAC/C,MAAM,kBAAkB,GACtB,qBAAqB,CAAC,IAAI,KAAK,OAAO;oBACpC,CAAC,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,CAAC;oBAC3E,CAAC,CAAC,eAAe,CAAC;gBACtB,IACE,CAAC,kBAAkB;oBACnB,CAAC,sBAAsB,CAAC,kBAAkB,CAAC;oBAC3C,CAAC,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAC9C,CAAC;oBACD,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,uEAAuE;wBAChF,WAAW,EAAE,qBAAqB;wBAClC,IAAI;qBACL,CAAC;gBACJ,CAAC;gBAED,QAAQ,GAAG,kBAAkB,CAAC;gBAC9B,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;gBAC1F,IAAI,eAAe,KAAK,kBAAkB,EAAE,CAAC;oBAC3C,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,4DAA4D;wBACrE,IAAI;qBACL,CAAC;gBACJ,CAAC;gBACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,0EAA0E;wBACnF,IAAI;qBACL,CAAC;gBACJ,CAAC;gBAED,sEAAsE;gBACtE,kEAAkE;gBAClE,0BAA0B,EAAE,CAAC;gBAC7B,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;gBACvC,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;oBAC1B,OAAO,CAAC,IAAI,KAAK,eAAe;oBAChC,OAAO,CAAC,IAAI,KAAK,OAAO,EACxB,CAAC;oBACD,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,UAAU;oBAChB,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC;YACJ,CAAC;YAED,sEAAsE;YACtE,iEAAiE;YACjE,0BAA0B,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzD,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;oBAC7B,OAAO;wBACL,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,+DAA+D;wBACxE,IAAI;qBACL,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;YACvC,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;gBAC1B,OAAO,CAAC,IAAI,KAAK,eAAe;gBAChC,OAAO,CAAC,IAAI,KAAK,OAAO,EACxB,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,0BAA0B,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAA0C,EAAE;QAC/D,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;gBACjE,MAAM,EAAE,WAAW,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,4CAA4C;gBACrD,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,oDAAoD;gBAC5E,IAAI;gBACJ,WAAW;aACZ,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,KAGvB,EAAwC,EAAE;QACzC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EACL,uFAAuF;aAC1F,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,eAAe,EAAE,CAAC;QAC5C,MAAM,QAAQ,GACZ,WAAW,CAAC,IAAI,KAAK,OAAO;YAC1B,CAAC,CAAC,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,CAAC;YACzD,CAAC,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAErD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,mDAAmD;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9D,CAAC,CAAC;IAEF,OAAO;QACL,eAAe;QACf,WAAW;QACX,OAAO;QACP,aAAa;QACb,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/local-git-status.d.ts

@@ -0,0 +1,14 @@
+export type GitExecutor = (cwd: string, args: string[]) => string;
+export interface GitTreePreflight {
+    currentBranch: string | null;
+    dirtyFileCount: number;
+    isDirty: boolean;
+}
+/**
+ * Count porcelain-v1 NUL records without returning paths to callers. Rename and
+ * copy entries contain an extra path record, which must not be counted as a
+ * second dirty file.
+ */
+export declare function countPorcelainEntries(output: string): number;
+export declare function preflightGitTree(cwd: string, git: GitExecutor): GitTreePreflight;
+//# sourceMappingURL=local-git-status.d.ts.map

package/dist/local-git-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-git-status.d.ts","sourceRoot":"","sources":["../src/local-git-status.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;CAClB;AAkBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAgB5D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,gBAAgB,CAWhF"}

package/dist/local-git-status.js

@@ -0,0 +1,43 @@
+const BRANCH_LABEL_MAX_LENGTH = 256;
+function stripControlCharacters(value) {
+    return Array.from(value)
+        .filter((character) => {
+        const code = character.charCodeAt(0);
+        return code >= 32 && code !== 127;
+    })
+        .join("");
+}
+function sanitizeBranch(value) {
+    const sanitized = stripControlCharacters(value.trim()).slice(0, BRANCH_LABEL_MAX_LENGTH);
+    return sanitized || null;
+}
+/**
+ * Count porcelain-v1 NUL records without returning paths to callers. Rename and
+ * copy entries contain an extra path record, which must not be counted as a
+ * second dirty file.
+ */
+export function countPorcelainEntries(output) {
+    const records = output.split("\0");
+    let count = 0;
+    for (let index = 0; index < records.length; index += 1) {
+        const record = records[index];
+        if (!record)
+            continue;
+        count += 1;
+        const status = record.slice(0, 2);
+        if (status.includes("R") || status.includes("C")) {
+            index += 1;
+        }
+    }
+    return count;
+}
+export function preflightGitTree(cwd, git) {
+    const currentBranch = sanitizeBranch(git(cwd, ["branch", "--show-current"]));
+    const dirtyFileCount = countPorcelainEntries(git(cwd, ["status", "--porcelain=v1", "-z", "--untracked-files=all"]));
+    return {
+        currentBranch,
+        dirtyFileCount,
+        isDirty: dirtyFileCount > 0,
+    };
+}
+//# sourceMappingURL=local-git-status.js.map

package/dist/local-git-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-git-status.js","sourceRoot":"","sources":["../src/local-git-status.ts"],"names":[],"mappings":"AAQA,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACzF,OAAO,SAAS,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAgB;IAC5D,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,qBAAqB,CAC1C,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,CACtE,CAAC;IAEF,OAAO;QACL,aAAa;QACb,cAAc;QACd,OAAO,EAAE,cAAc,GAAG,CAAC;KAC5B,CAAC;AACJ,CAAC"}

package/dist/managed-mcp.d.ts

@@ -0,0 +1,7 @@
+import type { AlanMcpRegistration } from "@alan-ai/shared/agent";
+export declare function buildManagedAlanMcp(input: {
+    apiUrl: string;
+    runtimeToken: string;
+    runId: string;
+}): AlanMcpRegistration;
+//# sourceMappingURL=managed-mcp.d.ts.map

package/dist/managed-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-mcp.d.ts","sourceRoot":"","sources":["../src/managed-mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,mBAAmB,CAYtB"}