@bastani/atomic 0.9.11-alpha.8 → 0.9.11

package/dist/modes/interactive-engine/engine-dialog-host.js

@@ -0,0 +1,129 @@
+/** Requests that mount a host dialog and therefore need generation ownership. */
+const MOUNTING_METHODS = new Set(["select", "confirm", "input", "editor"]);
+async function handleRequest(ui, request, signal) {
+    switch (request.method) {
+        case "select": {
+            const value = await ui.select(request.title, request.options, { timeout: request.timeout, signal });
+            return value === undefined
+                ? { type: "extension_ui_response", id: request.id, cancelled: true }
+                : { type: "extension_ui_response", id: request.id, value };
+        }
+        case "confirm": {
+            const confirmed = await ui.confirm(request.title, request.message, { timeout: request.timeout, signal });
+            return { type: "extension_ui_response", id: request.id, confirmed };
+        }
+        case "input": {
+            const value = await ui.input(request.title, request.placeholder, { timeout: request.timeout, signal });
+            return value === undefined
+                ? { type: "extension_ui_response", id: request.id, cancelled: true }
+                : { type: "extension_ui_response", id: request.id, value };
+        }
+        case "editor": {
+            const value = await ui.editor(request.title, request.prefill, { signal });
+            return value === undefined
+                ? { type: "extension_ui_response", id: request.id, cancelled: true }
+                : { type: "extension_ui_response", id: request.id, value };
+        }
+        case "notify":
+            ui.notify(request.message, request.notifyType);
+            return undefined;
+        case "setStatus":
+            ui.setStatus(request.statusKey, request.statusText);
+            return undefined;
+        case "setWidget":
+            ui.setWidget(request.widgetKey, request.widgetLines, { placement: request.widgetPlacement });
+            return undefined;
+        case "setTitle":
+            ui.setTitle(request.title);
+            return undefined;
+        case "set_editor_text":
+            ui.setEditorText(request.text);
+            return undefined;
+    }
+}
+/**
+ * Generation-owned host dialogs and line widgets for the isolated engine.
+ *
+ * `select`, `confirm`, `input`, and `editor` mount real host components and can
+ * outlive the engine child that asked for them. Without ownership a dead
+ * generation left its dialog on screen forever, its host promise unsettled, and
+ * could answer through the replacement child's writer. Each request is recorded
+ * with the generation that issued it; when that generation ends the mount is
+ * aborted — closing only its own instance — and any answer is suppressed.
+ *
+ * Line widgets (`setWidget` with `string[]`) have the same problem without any
+ * component to close: they are plain host state keyed by name, so the key is
+ * tracked against its latest writer and released only if that writer's
+ * generation is the one that died.
+ */
+export class EngineDialogHostController {
+    constructor(runtime, ui) {
+        this.records = new Map();
+        /** Line-widget key -> generation that last wrote it. */
+        this.widgetOwners = new Map();
+        this.runtime = runtime;
+        this.ui = ui;
+        this.unsubscribeHandler = runtime.setExtensionUIHandler((request) => this.handle(request));
+        this.unsubscribeGenerationEnded = runtime.onGenerationEnded((event) => this.disposeGeneration(event.generation));
+    }
+    dispose() {
+        this.unsubscribeHandler();
+        this.unsubscribeGenerationEnded();
+        this.abortAll();
+        for (const key of [...this.widgetOwners.keys()])
+            this.ui.setWidget(key, undefined);
+        this.widgetOwners.clear();
+    }
+    /** Close every dialog and release every widget key owned by an ended generation. */
+    disposeGeneration(generation) {
+        for (const [id, record] of [...this.records]) {
+            if (record.generation !== generation)
+                continue;
+            this.records.delete(id);
+            record.abort.abort();
+        }
+        for (const [key, owner] of [...this.widgetOwners]) {
+            // A newer generation that rewrote this key owns it now; clearing here
+            // would wipe live content the replacement child just published.
+            if (owner !== generation)
+                continue;
+            this.widgetOwners.delete(key);
+            this.ui.setWidget(key, undefined);
+        }
+    }
+    abortAll() {
+        for (const [, record] of [...this.records])
+            record.abort.abort();
+        this.records.clear();
+    }
+    async handle(request) {
+        if (request.method === "setWidget") {
+            if (request.widgetLines === undefined)
+                this.widgetOwners.delete(request.widgetKey);
+            else
+                this.widgetOwners.set(request.widgetKey, this.runtime.getEngineGeneration());
+            return handleRequest(this.ui, request, undefined);
+        }
+        if (!MOUNTING_METHODS.has(request.method))
+            return handleRequest(this.ui, request, undefined);
+        const abort = new AbortController();
+        const generation = this.runtime.getEngineGeneration();
+        this.records.set(request.id, { generation, abort });
+        let response;
+        try {
+            response = await handleRequest(this.ui, request, abort.signal);
+        }
+        finally {
+            // Only the owning record may be removed: a late settle must not delete a
+            // newer record that happens to share this id.
+            if (this.records.get(request.id)?.abort === abort)
+                this.records.delete(request.id);
+        }
+        // The generation that asked is gone, so the writer now points at a
+        // replacement child. Answering would deliver this reply to the wrong engine.
+        if (abort.signal.aborted)
+            return undefined;
+        return response;
+    }
+}
+//# sourceMappingURL=engine-dialog-host.js.map

package/dist/modes/interactive-engine/engine-dialog-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-dialog-host.js","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-dialog-host.ts"],"names":[],"mappings":"AAIA,iFAAiF;AACjF,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhG,KAAK,UAAU,aAAa,CAC3B,EAAsB,EACtB,OAA8B,EAC9B,MAA+B;IAE/B,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,QAAQ,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,SAAS,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACzG,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACvG,OAAO,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,OAAO,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBACpE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,QAAQ;YACZ,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/C,OAAO,SAAS,CAAC;QAClB,KAAK,WAAW;YACf,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACpD,OAAO,SAAS,CAAC;QAClB,KAAK,WAAW;YACf,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;YAC7F,OAAO,SAAS,CAAC;QAClB,KAAK,UAAU;YACd,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC;QAClB,KAAK,iBAAiB;YACrB,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,0BAA0B;IAStC,YAAY,OAAmC,EAAE,EAAsB;QANtD,YAAO,GAAG,IAAI,GAAG,EAA0D,CAAC;QAC7F,wDAAwD;QACvC,iBAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAKzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,0BAA0B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,OAAO;QACN,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,oFAAoF;IACpF,iBAAiB,CAAC,UAAkB;QACnC,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU;gBAAE,SAAS;YAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,KAAK,KAAK,UAAU;gBAAE,SAAS;YACnC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAEO,QAAQ;QACf,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAA8B;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;;gBAC9E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;YAClF,OAAO,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACV,yEAAyE;YACzE,8CAA8C;YAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,KAAK,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,mEAAmE;QACnE,6EAA6E;QAC7E,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD","sourcesContent":["import type { ExtensionUIContext } from \"../../core/extensions/index.ts\";\nimport type { RpcExtensionUIRequest, RpcExtensionUIResponse } from \"../rpc/rpc-types.ts\";\nimport type { IsolatedInteractiveRuntime } from \"./isolated-runtime.ts\";\n\n/** Requests that mount a host dialog and therefore need generation ownership. */\nconst MOUNTING_METHODS: ReadonlySet<string> = new Set([\"select\", \"confirm\", \"input\", \"editor\"]);\n\nasync function handleRequest(\n\tui: ExtensionUIContext,\n\trequest: RpcExtensionUIRequest,\n\tsignal: AbortSignal | undefined,\n): Promise<RpcExtensionUIResponse | undefined> {\n\tswitch (request.method) {\n\t\tcase \"select\": {\n\t\t\tconst value = await ui.select(request.title, request.options, { timeout: request.timeout, signal });\n\t\t\treturn value === undefined\n\t\t\t\t? { type: \"extension_ui_response\", id: request.id, cancelled: true }\n\t\t\t\t: { type: \"extension_ui_response\", id: request.id, value };\n\t\t}\n\t\tcase \"confirm\": {\n\t\t\tconst confirmed = await ui.confirm(request.title, request.message, { timeout: request.timeout, signal });\n\t\t\treturn { type: \"extension_ui_response\", id: request.id, confirmed };\n\t\t}\n\t\tcase \"input\": {\n\t\t\tconst value = await ui.input(request.title, request.placeholder, { timeout: request.timeout, signal });\n\t\t\treturn value === undefined\n\t\t\t\t? { type: \"extension_ui_response\", id: request.id, cancelled: true }\n\t\t\t\t: { type: \"extension_ui_response\", id: request.id, value };\n\t\t}\n\t\tcase \"editor\": {\n\t\t\tconst value = await ui.editor(request.title, request.prefill, { signal });\n\t\t\treturn value === undefined\n\t\t\t\t? { type: \"extension_ui_response\", id: request.id, cancelled: true }\n\t\t\t\t: { type: \"extension_ui_response\", id: request.id, value };\n\t\t}\n\t\tcase \"notify\":\n\t\t\tui.notify(request.message, request.notifyType);\n\t\t\treturn undefined;\n\t\tcase \"setStatus\":\n\t\t\tui.setStatus(request.statusKey, request.statusText);\n\t\t\treturn undefined;\n\t\tcase \"setWidget\":\n\t\t\tui.setWidget(request.widgetKey, request.widgetLines, { placement: request.widgetPlacement });\n\t\t\treturn undefined;\n\t\tcase \"setTitle\":\n\t\t\tui.setTitle(request.title);\n\t\t\treturn undefined;\n\t\tcase \"set_editor_text\":\n\t\t\tui.setEditorText(request.text);\n\t\t\treturn undefined;\n\t}\n}\n\n/**\n * Generation-owned host dialogs and line widgets for the isolated engine.\n *\n * `select`, `confirm`, `input`, and `editor` mount real host components and can\n * outlive the engine child that asked for them. Without ownership a dead\n * generation left its dialog on screen forever, its host promise unsettled, and\n * could answer through the replacement child's writer. Each request is recorded\n * with the generation that issued it; when that generation ends the mount is\n * aborted — closing only its own instance — and any answer is suppressed.\n *\n * Line widgets (`setWidget` with `string[]`) have the same problem without any\n * component to close: they are plain host state keyed by name, so the key is\n * tracked against its latest writer and released only if that writer's\n * generation is the one that died.\n */\nexport class EngineDialogHostController {\n\tprivate readonly runtime: IsolatedInteractiveRuntime;\n\tprivate readonly ui: ExtensionUIContext;\n\tprivate readonly records = new Map<string, { generation: number; abort: AbortController }>();\n\t/** Line-widget key -> generation that last wrote it. */\n\tprivate readonly widgetOwners = new Map<string, number>();\n\tprivate readonly unsubscribeHandler: () => void;\n\tprivate readonly unsubscribeGenerationEnded: () => void;\n\n\tconstructor(runtime: IsolatedInteractiveRuntime, ui: ExtensionUIContext) {\n\t\tthis.runtime = runtime;\n\t\tthis.ui = ui;\n\t\tthis.unsubscribeHandler = runtime.setExtensionUIHandler((request) => this.handle(request));\n\t\tthis.unsubscribeGenerationEnded = runtime.onGenerationEnded((event) => this.disposeGeneration(event.generation));\n\t}\n\n\tdispose(): void {\n\t\tthis.unsubscribeHandler();\n\t\tthis.unsubscribeGenerationEnded();\n\t\tthis.abortAll();\n\t\tfor (const key of [...this.widgetOwners.keys()]) this.ui.setWidget(key, undefined);\n\t\tthis.widgetOwners.clear();\n\t}\n\n\t/** Close every dialog and release every widget key owned by an ended generation. */\n\tdisposeGeneration(generation: number): void {\n\t\tfor (const [id, record] of [...this.records]) {\n\t\t\tif (record.generation !== generation) continue;\n\t\t\tthis.records.delete(id);\n\t\t\trecord.abort.abort();\n\t\t}\n\t\tfor (const [key, owner] of [...this.widgetOwners]) {\n\t\t\t// A newer generation that rewrote this key owns it now; clearing here\n\t\t\t// would wipe live content the replacement child just published.\n\t\t\tif (owner !== generation) continue;\n\t\t\tthis.widgetOwners.delete(key);\n\t\t\tthis.ui.setWidget(key, undefined);\n\t\t}\n\t}\n\n\tprivate abortAll(): void {\n\t\tfor (const [, record] of [...this.records]) record.abort.abort();\n\t\tthis.records.clear();\n\t}\n\n\tprivate async handle(request: RpcExtensionUIRequest): Promise<RpcExtensionUIResponse | undefined> {\n\t\tif (request.method === \"setWidget\") {\n\t\t\tif (request.widgetLines === undefined) this.widgetOwners.delete(request.widgetKey);\n\t\t\telse this.widgetOwners.set(request.widgetKey, this.runtime.getEngineGeneration());\n\t\t\treturn handleRequest(this.ui, request, undefined);\n\t\t}\n\t\tif (!MOUNTING_METHODS.has(request.method)) return handleRequest(this.ui, request, undefined);\n\t\tconst abort = new AbortController();\n\t\tconst generation = this.runtime.getEngineGeneration();\n\t\tthis.records.set(request.id, { generation, abort });\n\t\tlet response: RpcExtensionUIResponse | undefined;\n\t\ttry {\n\t\t\tresponse = await handleRequest(this.ui, request, abort.signal);\n\t\t} finally {\n\t\t\t// Only the owning record may be removed: a late settle must not delete a\n\t\t\t// newer record that happens to share this id.\n\t\t\tif (this.records.get(request.id)?.abort === abort) this.records.delete(request.id);\n\t\t}\n\t\t// The generation that asked is gone, so the writer now points at a\n\t\t// replacement child. Answering would deliver this reply to the wrong engine.\n\t\tif (abort.signal.aborted) return undefined;\n\t\treturn response;\n\t}\n}\n"]}

package/dist/modes/interactive-engine/engine-generation.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Host-local engine generation lifecycle.
+ *
+ * A dead engine child cannot send a protocol frame, so generation death can
+ * never be a wire message: SIGKILL, spawn errors, closed stdin, and malformed
+ * JSONL all have to be observed by the host. `RpcClient` publishes this event
+ * synchronously, before any restart work, so host controllers can tear down
+ * exactly the dead generation without waiting for a later `engine_ready`.
+ */
+export type InteractiveEngineGenerationEndKind = "exit" | "process-error" | "stdin-error" | "transport-error" | "explicit-stop";
+export interface InteractiveEngineGenerationEnded {
+    /**
+     * The generation that ended. Remote component IDs restart at
+     * `remote_component_1` for every child, so stale teardown must never close a
+     * mount owned by a newer generation.
+     */
+    generation: number;
+    /** Concrete cause, used for pending-request rejection and recovery notices. */
+    error: Error;
+    kind: InteractiveEngineGenerationEndKind;
+    /**
+     * True for host-initiated termination (explicit stop, deliberate generation
+     * replacement, shutdown). Automatic recovery must only run for unexpected
+     * loss, never for ordinary shutdown.
+     */
+    expected: boolean;
+}
+export type InteractiveEngineGenerationEndedListener = (event: InteractiveEngineGenerationEnded) => void;
+//# sourceMappingURL=engine-generation.d.ts.map

package/dist/modes/interactive-engine/engine-generation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-generation.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-generation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,kCAAkC,GAC3C,MAAM,GACN,eAAe,GACf,aAAa,GACb,iBAAiB,GACjB,eAAe,CAAC;AAEnB,MAAM,WAAW,gCAAgC;IAChD;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,kCAAkC,CAAC;IACzC;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,MAAM,wCAAwC,GAAG,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,CAAC"}

package/dist/modes/interactive-engine/engine-generation.js

@@ -0,0 +1,11 @@
+/**
+ * Host-local engine generation lifecycle.
+ *
+ * A dead engine child cannot send a protocol frame, so generation death can
+ * never be a wire message: SIGKILL, spawn errors, closed stdin, and malformed
+ * JSONL all have to be observed by the host. `RpcClient` publishes this event
+ * synchronously, before any restart work, so host controllers can tear down
+ * exactly the dead generation without waiting for a later `engine_ready`.
+ */
+export {};
+//# sourceMappingURL=engine-generation.js.map

package/dist/modes/interactive-engine/engine-generation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-generation.js","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-generation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG","sourcesContent":["/**\n * Host-local engine generation lifecycle.\n *\n * A dead engine child cannot send a protocol frame, so generation death can\n * never be a wire message: SIGKILL, spawn errors, closed stdin, and malformed\n * JSONL all have to be observed by the host. `RpcClient` publishes this event\n * synchronously, before any restart work, so host controllers can tear down\n * exactly the dead generation without waiting for a later `engine_ready`.\n */\n\nexport type InteractiveEngineGenerationEndKind =\n\t| \"exit\"\n\t| \"process-error\"\n\t| \"stdin-error\"\n\t| \"transport-error\"\n\t| \"explicit-stop\";\n\nexport interface InteractiveEngineGenerationEnded {\n\t/**\n\t * The generation that ended. Remote component IDs restart at\n\t * `remote_component_1` for every child, so stale teardown must never close a\n\t * mount owned by a newer generation.\n\t */\n\tgeneration: number;\n\t/** Concrete cause, used for pending-request rejection and recovery notices. */\n\terror: Error;\n\tkind: InteractiveEngineGenerationEndKind;\n\t/**\n\t * True for host-initiated termination (explicit stop, deliberate generation\n\t * replacement, shutdown). Automatic recovery must only run for unexpected\n\t * loss, never for ordinary shutdown.\n\t */\n\texpected: boolean;\n}\n\nexport type InteractiveEngineGenerationEndedListener = (event: InteractiveEngineGenerationEnded) => void;\n"]}

package/dist/modes/interactive-engine/engine-health.d.ts

@@ -0,0 +1,107 @@
+import { type ActivityWatchdogDiagnostic } from "./activity-watchdog.ts";
+import type { InteractiveEngineGenerationEnded } from "./engine-generation.ts";
+export type EngineDiagnosticListener = (diagnostic: ActivityWatchdogDiagnostic) => void;
+export interface EngineHealthDeps {
+    /** Terminate the current (or hung replacement) engine child. */
+    stop(): Promise<void>;
+    /** Replace the engine child and reload host state from it. */
+    restart(): Promise<void>;
+    /** Drop streaming/compaction/callback activity owned by the dead generation. */
+    clearActivity(): void;
+}
+export declare const UNEXPECTED_ENGINE_LOSS_NOTICE = "Interactive engine stopped unexpectedly; restarting.";
+export declare const UNRESPONSIVE_ENGINE_NOTICE = "Interactive engine is not responding; restarting.";
+/**
+ * Keep the actionable transport cause in the recovery notice. Child stderr can
+ * contain provider output or secrets, so only the bounded summary before the
+ * RpcClient's `. Stderr:` suffix is safe to render.
+ */
+export declare function formatUnexpectedEngineLossNotice(event: InteractiveEngineGenerationEnded): string;
+export interface EngineHealthOptions {
+    /** Injectable clock so tests can cross the unresponsive threshold instantly. */
+    now?: () => number;
+}
+/**
+ * Engine health surface: diagnostic fan-out plus single-flight recovery.
+ *
+ * Recovery has exactly two entry points, deliberately separate:
+ *
+ *  - {@link handleGenerationEnded} runs ONE automatic replacement attempt after
+ *    an unexpected loss of a generation. Expected losses (explicit stop,
+ *    deliberate generation replacement, host shutdown) never restart.
+ *  - {@link terminate} is the explicit user escape hatch (Ctrl+C). It force-stops
+ *    first, so it can rescue a replacement child that is hung waiting for
+ *    readiness instead of joining that pending promise.
+ *
+ * Neither path is reachable from an interrupt: pressing Escape only requests the
+ * engine's own cooperative abort and waits for it.
+ */
+export declare class EngineHealthController {
+    private readonly deps;
+    private readonly now;
+    private readonly listeners;
+    private pending;
+    private unresponsive;
+    private abortStartedAt;
+    private attempt;
+    /** When the current replacement attempt began; undefined once it settles. */
+    private attemptStartedAt;
+    private attemptId;
+    private forceStoppedAttemptId;
+    private rescueRequested;
+    /**
+     * Latched when a replacement failed on its own. Automatic recovery stays
+     * single-shot, but the user's Ctrl+C must remain able to try again: without
+     * this the host would be left with no engine, no pending attempt, no overdue
+     * abort, and no watchdog flag, so nothing could arm the escape hatch.
+     */
+    private replacementNeeded;
+    private termination;
+    /** Set once disposal begins; joins the in-flight attempt and termination. */
+    private shutdownPromise;
+    private stopped;
+    constructor(deps: EngineHealthDeps, options?: EngineHealthOptions);
+    onDiagnostic(listener: EngineDiagnosticListener): () => void;
+    /** Publish a diagnostic produced elsewhere (watchdog, transport, bridge). */
+    publish(diagnostic: ActivityWatchdogDiagnostic): void;
+    /** A heartbeat proves the child's loop turns again, so clear a reported stall. */
+    clearUnresponsive(): void;
+    markCooperativeAbortStarted(): void;
+    markCooperativeAbortSettled(): void;
+    /**
+     * True only when the engine is provably not answering:
+     *
+     *  - the heartbeat watchdog declared it unresponsive;
+     *  - a replacement failed on its own and the host has no engine;
+     *  - a cooperative abort has been outstanding past the unresponsive threshold
+     *    (a child whose loop still turns but is deadlocked);
+     *  - a replacement has been waiting for `engine_ready` past that threshold.
+     *
+     * The readiness case has no watchdog coverage at all: a child stopped before
+     * readiness emits no heartbeat and no diagnostic, and `start()` waits without
+     * a deadline by design. Crossing a threshold arms nothing on its own — it
+     * only decides whether a deliberate Ctrl+C escalates — and all of this stays
+     * false for a healthy engine so a stray second Ctrl+C cannot replace one.
+     */
+    needsExplicitTermination(): boolean;
+    private isOverdue;
+    isRecovering(): boolean;
+    /**
+     * Stop accepting recovery work and join whatever is still running.
+     *
+     * Disposal must not return while a replacement is between its own stop and
+     * its spawn: the client's restart permit is voided by `deps.stop()`, and the
+     * attempt is then awaited so no child, and no host initialization, outlives
+     * teardown. Idempotent, and bounded by the client's own stop deadlines.
+     */
+    shutdown(): Promise<void>;
+    handleGenerationEnded(event: InteractiveEngineGenerationEnded): void;
+    terminate(): Promise<void>;
+    /** Force-stop an overdue replacement, at most once per attempt. */
+    private rescueOverdueAttempt;
+    private stopQuietly;
+    private recover;
+    private notice;
+    private deliver;
+}
+//# sourceMappingURL=engine-health.d.ts.map

package/dist/modes/interactive-engine/engine-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-health.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAA0B,MAAM,wBAAwB,CAAC;AACjG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAE/E,MAAM,MAAM,wBAAwB,GAAG,CAAC,UAAU,EAAE,0BAA0B,KAAK,IAAI,CAAC;AAExF,MAAM,WAAW,gBAAgB;IAChC,gEAAgE;IAChE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,8DAA8D;IAC9D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,gFAAgF;IAChF,aAAa,IAAI,IAAI,CAAC;CACtB;AAED,eAAO,MAAM,6BAA6B,yDAAyD,CAAC;AACpG,eAAO,MAAM,0BAA0B,sDAAsD,CAAC;AAE9F;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,gCAAgC,GAAG,MAAM,CAQhG;AAED,MAAM,WAAW,mBAAmB;IACnC,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAA4B;IAC3C,6EAA6E;IAC7E,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,qBAAqB,CAAqB;IAClD,OAAO,CAAC,eAAe,CAAS;IAChC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,WAAW,CAA4B;IAC/C,6EAA6E;IAC7E,OAAO,CAAC,eAAe,CAA4B;IACnD,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,mBAAmB,EAGhE;IAED,YAAY,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,IAAI,CAI3D;IAED,6EAA6E;IAC7E,OAAO,CAAC,UAAU,EAAE,0BAA0B,GAAG,IAAI,CAGpD;IAED,kFAAkF;IAClF,iBAAiB,IAAI,IAAI,CAExB;IAED,2BAA2B,IAAI,IAAI,CAElC;IAED,2BAA2B,IAAI,IAAI,CAElC;IAED;;;;;;;;;;;;;;OAcG;IACH,wBAAwB,IAAI,OAAO,CAGlC;IAED,OAAO,CAAC,SAAS;IAIjB,YAAY,IAAI,OAAO,CAEtB;IAED;;;;;;;OAOG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAWxB;IAED,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,GAAG,IAAI,CAYnE;IAED,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAiCzB;IAED,mEAAmE;IACnE,OAAO,CAAC,oBAAoB;YASd,WAAW;IASzB,OAAO,CAAC,OAAO;IA6Cf,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;CAIf"}

package/dist/modes/interactive-engine/engine-health.js

@@ -0,0 +1,250 @@
+import { ENGINE_UNRESPONSIVE_MS } from "./activity-watchdog.js";
+export const UNEXPECTED_ENGINE_LOSS_NOTICE = "Interactive engine stopped unexpectedly; restarting.";
+export const UNRESPONSIVE_ENGINE_NOTICE = "Interactive engine is not responding; restarting.";
+/**
+ * Keep the actionable transport cause in the recovery notice. Child stderr can
+ * contain provider output or secrets, so only the bounded summary before the
+ * RpcClient's `. Stderr:` suffix is safe to render.
+ */
+export function formatUnexpectedEngineLossNotice(event) {
+    const firstLine = event.error.message.split(/\r?\n/u, 1)[0]?.trim() ?? "";
+    const stderrIndex = firstLine.indexOf(". Stderr:");
+    const withoutStderr = (stderrIndex === -1 ? firstLine : firstLine.slice(0, stderrIndex)).trim();
+    const summary = withoutStderr.slice(0, 240).replace(/[.!?]+$/u, "");
+    return summary
+        ? `${UNEXPECTED_ENGINE_LOSS_NOTICE} Cause (${event.kind}): ${summary}.`
+        : `${UNEXPECTED_ENGINE_LOSS_NOTICE} Cause: ${event.kind}.`;
+}
+/**
+ * Engine health surface: diagnostic fan-out plus single-flight recovery.
+ *
+ * Recovery has exactly two entry points, deliberately separate:
+ *
+ *  - {@link handleGenerationEnded} runs ONE automatic replacement attempt after
+ *    an unexpected loss of a generation. Expected losses (explicit stop,
+ *    deliberate generation replacement, host shutdown) never restart.
+ *  - {@link terminate} is the explicit user escape hatch (Ctrl+C). It force-stops
+ *    first, so it can rescue a replacement child that is hung waiting for
+ *    readiness instead of joining that pending promise.
+ *
+ * Neither path is reachable from an interrupt: pressing Escape only requests the
+ * engine's own cooperative abort and waits for it.
+ */
+export class EngineHealthController {
+    constructor(deps, options) {
+        this.listeners = new Set();
+        this.pending = [];
+        this.unresponsive = false;
+        this.attemptId = 0;
+        this.rescueRequested = false;
+        /**
+         * Latched when a replacement failed on its own. Automatic recovery stays
+         * single-shot, but the user's Ctrl+C must remain able to try again: without
+         * this the host would be left with no engine, no pending attempt, no overdue
+         * abort, and no watchdog flag, so nothing could arm the escape hatch.
+         */
+        this.replacementNeeded = false;
+        this.stopped = false;
+        this.deps = deps;
+        this.now = options?.now ?? (() => performance.now());
+    }
+    onDiagnostic(listener) {
+        for (const diagnostic of this.pending.splice(0))
+            listener(diagnostic);
+        this.listeners.add(listener);
+        return () => this.listeners.delete(listener);
+    }
+    /** Publish a diagnostic produced elsewhere (watchdog, transport, bridge). */
+    publish(diagnostic) {
+        if (diagnostic.level === "unresponsive" && diagnostic.source === "watchdog")
+            this.unresponsive = true;
+        this.deliver(diagnostic);
+    }
+    /** A heartbeat proves the child's loop turns again, so clear a reported stall. */
+    clearUnresponsive() {
+        this.unresponsive = false;
+    }
+    markCooperativeAbortStarted() {
+        this.abortStartedAt ??= this.now();
+    }
+    markCooperativeAbortSettled() {
+        this.abortStartedAt = undefined;
+    }
+    /**
+     * True only when the engine is provably not answering:
+     *
+     *  - the heartbeat watchdog declared it unresponsive;
+     *  - a replacement failed on its own and the host has no engine;
+     *  - a cooperative abort has been outstanding past the unresponsive threshold
+     *    (a child whose loop still turns but is deadlocked);
+     *  - a replacement has been waiting for `engine_ready` past that threshold.
+     *
+     * The readiness case has no watchdog coverage at all: a child stopped before
+     * readiness emits no heartbeat and no diagnostic, and `start()` waits without
+     * a deadline by design. Crossing a threshold arms nothing on its own — it
+     * only decides whether a deliberate Ctrl+C escalates — and all of this stays
+     * false for a healthy engine so a stray second Ctrl+C cannot replace one.
+     */
+    needsExplicitTermination() {
+        if (this.unresponsive || this.replacementNeeded)
+            return true;
+        return this.isOverdue(this.abortStartedAt) || this.isOverdue(this.attemptStartedAt);
+    }
+    isOverdue(startedAt) {
+        return startedAt !== undefined && this.now() - startedAt >= ENGINE_UNRESPONSIVE_MS;
+    }
+    isRecovering() {
+        return this.attempt !== undefined || this.termination !== undefined;
+    }
+    /**
+     * Stop accepting recovery work and join whatever is still running.
+     *
+     * Disposal must not return while a replacement is between its own stop and
+     * its spawn: the client's restart permit is voided by `deps.stop()`, and the
+     * attempt is then awaited so no child, and no host initialization, outlives
+     * teardown. Idempotent, and bounded by the client's own stop deadlines.
+     */
+    shutdown() {
+        if (this.shutdownPromise)
+            return this.shutdownPromise;
+        this.stopped = true;
+        this.rescueRequested = false;
+        this.replacementNeeded = false;
+        this.shutdownPromise = (async () => {
+            await this.stopQuietly();
+            await this.attempt?.catch(() => { });
+            await this.termination?.catch(() => { });
+        })();
+        return this.shutdownPromise;
+    }
+    handleGenerationEnded(event) {
+        this.deps.clearActivity();
+        if (event.expected || this.stopped)
+            return;
+        if (this.attempt) {
+            // A newer child died while the replacement attempt was still running, so
+            // that attempt cannot leave a viable generation behind. Latch instead of
+            // restarting again: automatic recovery stays single-shot, and Ctrl+C is
+            // armed once the in-flight attempt settles.
+            this.replacementNeeded = true;
+            return;
+        }
+        void this.recover(formatUnexpectedEngineLossNotice(event)).catch(() => { });
+    }
+    terminate() {
+        // A repeat Ctrl+C must be able to rescue a replacement that is itself
+        // overdue, instead of joining the in-flight termination forever. The stop
+        // is fenced by attempt id so repeated presses cannot stack restarts onto a
+        // healthy replacement.
+        if (this.termination) {
+            this.rescueOverdueAttempt();
+            return this.termination;
+        }
+        const inFlight = this.attempt;
+        // The attempt this press supersedes fails by our own hand, so its failure is
+        // expected rather than something to report to the user.
+        if (inFlight)
+            this.forceStoppedAttemptId = this.attemptId;
+        const run = (async () => {
+            this.deps.clearActivity();
+            this.notice(UNRESPONSIVE_ENGINE_NOTICE);
+            await this.stopQuietly();
+            // An automatic attempt swallows its own errors, so this only waits for it
+            // to release the single-flight slot.
+            if (inFlight)
+                await inFlight;
+            await this.recover(undefined);
+            // Each user-forced stop of an overdue replacement earns exactly one more
+            // replacement attempt, so the escape hatch stays usable indefinitely.
+            while (this.rescueRequested && !this.stopped) {
+                this.rescueRequested = false;
+                this.notice(UNRESPONSIVE_ENGINE_NOTICE);
+                await this.recover(undefined);
+            }
+        })().finally(() => {
+            if (this.termination === run)
+                this.termination = undefined;
+        });
+        this.termination = run;
+        return run;
+    }
+    /** Force-stop an overdue replacement, at most once per attempt. */
+    rescueOverdueAttempt() {
+        if (!this.isOverdue(this.attemptStartedAt))
+            return false;
+        if (this.forceStoppedAttemptId === this.attemptId)
+            return false;
+        this.forceStoppedAttemptId = this.attemptId;
+        this.rescueRequested = true;
+        void this.stopQuietly();
+        return true;
+    }
+    async stopQuietly() {
+        try {
+            await this.deps.stop();
+        }
+        catch {
+            // A stop failure must not strand the escape hatch: the restart still
+            // replaces the child and reports any real failure.
+        }
+    }
+    recover(notice) {
+        // Order matters: after shutdown no caller may join, or revive, an attempt
+        // that still happens to occupy the slot.
+        if (this.stopped)
+            return Promise.resolve();
+        if (this.attempt)
+            return this.attempt;
+        if (notice)
+            this.notice(notice);
+        this.attemptId += 1;
+        const id = this.attemptId;
+        this.attemptStartedAt = this.now();
+        this.rescueRequested = false;
+        // A new attempt is under way, so the previous failure is no longer the
+        // reason to arm Ctrl+C. It re-arms below only if this attempt fails too.
+        this.replacementNeeded = false;
+        // The watchdog verdict belonged to the generation being replaced. A fresh
+        // child emits no heartbeat until it is ready, so leaving the latch set
+        // would keep `needsExplicitTermination()` true through the whole pre-ready
+        // window and let the first Ctrl+C stop a replacement that never misbehaved.
+        // Only this child's own heartbeat, or its own stall, may set it again.
+        this.unresponsive = false;
+        const run = this.deps
+            .restart()
+            .catch((error) => {
+            // An attempt the user deliberately stopped, or one cancelled by
+            // disposal, did not fail on its own.
+            if (this.forceStoppedAttemptId === id || this.stopped)
+                return;
+            // Keep Ctrl+C armed: automatic recovery is single-shot, but the user
+            // must be able to ask for another attempt after a real failure.
+            this.replacementNeeded = true;
+            // A concrete failure, so no operational source: this one surfaces.
+            this.deliver({
+                activity: undefined,
+                elapsedMs: 0,
+                level: "unresponsive",
+                message: `Interactive engine restart failed: ${error.message}`,
+            });
+        })
+            .finally(() => {
+            if (this.attempt !== run)
+                return;
+            this.attempt = undefined;
+            this.attemptStartedAt = undefined;
+        });
+        this.attempt = run;
+        return run;
+    }
+    notice(message) {
+        this.deliver({ activity: undefined, elapsedMs: 0, level: "blocking", message, source: "recovery" });
+    }
+    deliver(diagnostic) {
+        if (this.listeners.size === 0)
+            this.pending.push(diagnostic);
+        for (const listener of this.listeners)
+            listener(diagnostic);
+    }
+}
+//# sourceMappingURL=engine-health.js.map

package/dist/modes/interactive-engine/engine-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-health.js","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAcjG,MAAM,CAAC,MAAM,6BAA6B,GAAG,sDAAsD,CAAC;AACpG,MAAM,CAAC,MAAM,0BAA0B,GAAG,mDAAmD,CAAC;AAE9F;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAAC,KAAuC;IACvF,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,OAAO;QACb,CAAC,CAAC,GAAG,6BAA6B,WAAW,KAAK,CAAC,IAAI,MAAM,OAAO,GAAG;QACvE,CAAC,CAAC,GAAG,6BAA6B,WAAW,KAAK,CAAC,IAAI,GAAG,CAAC;AAC7D,CAAC;AAOD;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,sBAAsB;IAyBlC,YAAY,IAAsB,EAAE,OAA6B;QAtBhD,cAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;QACzD,YAAO,GAAiC,EAAE,CAAC;QAC3C,iBAAY,GAAG,KAAK,CAAC;QAKrB,cAAS,GAAG,CAAC,CAAC;QAEd,oBAAe,GAAG,KAAK,CAAC;QAChC;;;;;WAKG;QACK,sBAAiB,GAAG,KAAK,CAAC;QAI1B,YAAO,GAAG,KAAK,CAAC;QAGvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,YAAY,CAAC,QAAkC;QAC9C,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,UAAsC;QAC7C,IAAI,UAAU,CAAC,KAAK,KAAK,cAAc,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,kFAAkF;IAClF,iBAAiB;QAChB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,2BAA2B;QAC1B,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED,2BAA2B;QAC1B,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,wBAAwB;QACvB,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrF,CAAC;IAEO,SAAS,CAAC,SAA6B;QAC9C,OAAO,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,sBAAsB,CAAC;IACpF,CAAC;IAED,YAAY;QACX,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IACrE,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ;QACP,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;IAED,qBAAqB,CAAC,KAAuC;QAC5D,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,yEAAyE;YACzE,yEAAyE;YACzE,wEAAwE;YACxE,4CAA4C;YAC5C,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,OAAO;QACR,CAAC;QACD,KAAK,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,SAAS;QACR,sEAAsE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,uBAAuB;QACvB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,WAAW,CAAC;QACzB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,6EAA6E;QAC7E,wDAAwD;QACxD,IAAI,QAAQ;YAAE,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1D,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,0EAA0E;YAC1E,qCAAqC;YACrC,IAAI,QAAQ;gBAAE,MAAM,QAAQ,CAAC;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9B,yEAAyE;YACzE,sEAAsE;YACtE,OAAO,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9C,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;gBACxC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACjB,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG;gBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,mEAAmE;IAC3D,oBAAoB;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,WAAW;QACxB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,qEAAqE;YACrE,mDAAmD;QACpD,CAAC;IACF,CAAC;IAEO,OAAO,CAAC,MAA0B;QACzC,0EAA0E;QAC1E,yCAAyC;QACzC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAC/B,0EAA0E;QAC1E,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI;aACnB,OAAO,EAAE;aACT,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE;YACvB,gEAAgE;YAChE,qCAAqC;YACrC,IAAI,IAAI,CAAC,qBAAqB,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO;YAC9D,qEAAqE;YACrE,gEAAgE;YAChE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,mEAAmE;YACnE,IAAI,CAAC,OAAO,CAAC;gBACZ,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,sCAAsC,KAAK,CAAC,OAAO,EAAE;aAC9D,CAAC,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACb,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG;gBAAE,OAAO;YACjC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACnC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,MAAM,CAAC,OAAe;QAC7B,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACrG,CAAC;IAEO,OAAO,CAAC,UAAsC;QACrD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;CACD","sourcesContent":["import { type ActivityWatchdogDiagnostic, ENGINE_UNRESPONSIVE_MS } from \"./activity-watchdog.ts\";\nimport type { InteractiveEngineGenerationEnded } from \"./engine-generation.ts\";\n\nexport type EngineDiagnosticListener = (diagnostic: ActivityWatchdogDiagnostic) => void;\n\nexport interface EngineHealthDeps {\n\t/** Terminate the current (or hung replacement) engine child. */\n\tstop(): Promise<void>;\n\t/** Replace the engine child and reload host state from it. */\n\trestart(): Promise<void>;\n\t/** Drop streaming/compaction/callback activity owned by the dead generation. */\n\tclearActivity(): void;\n}\n\nexport const UNEXPECTED_ENGINE_LOSS_NOTICE = \"Interactive engine stopped unexpectedly; restarting.\";\nexport const UNRESPONSIVE_ENGINE_NOTICE = \"Interactive engine is not responding; restarting.\";\n\n/**\n * Keep the actionable transport cause in the recovery notice. Child stderr can\n * contain provider output or secrets, so only the bounded summary before the\n * RpcClient's `. Stderr:` suffix is safe to render.\n */\nexport function formatUnexpectedEngineLossNotice(event: InteractiveEngineGenerationEnded): string {\n\tconst firstLine = event.error.message.split(/\\r?\\n/u, 1)[0]?.trim() ?? \"\";\n\tconst stderrIndex = firstLine.indexOf(\". Stderr:\");\n\tconst withoutStderr = (stderrIndex === -1 ? firstLine : firstLine.slice(0, stderrIndex)).trim();\n\tconst summary = withoutStderr.slice(0, 240).replace(/[.!?]+$/u, \"\");\n\treturn summary\n\t\t? `${UNEXPECTED_ENGINE_LOSS_NOTICE} Cause (${event.kind}): ${summary}.`\n\t\t: `${UNEXPECTED_ENGINE_LOSS_NOTICE} Cause: ${event.kind}.`;\n}\n\nexport interface EngineHealthOptions {\n\t/** Injectable clock so tests can cross the unresponsive threshold instantly. */\n\tnow?: () => number;\n}\n\n/**\n * Engine health surface: diagnostic fan-out plus single-flight recovery.\n *\n * Recovery has exactly two entry points, deliberately separate:\n *\n *  - {@link handleGenerationEnded} runs ONE automatic replacement attempt after\n *    an unexpected loss of a generation. Expected losses (explicit stop,\n *    deliberate generation replacement, host shutdown) never restart.\n *  - {@link terminate} is the explicit user escape hatch (Ctrl+C). It force-stops\n *    first, so it can rescue a replacement child that is hung waiting for\n *    readiness instead of joining that pending promise.\n *\n * Neither path is reachable from an interrupt: pressing Escape only requests the\n * engine's own cooperative abort and waits for it.\n */\nexport class EngineHealthController {\n\tprivate readonly deps: EngineHealthDeps;\n\tprivate readonly now: () => number;\n\tprivate readonly listeners = new Set<EngineDiagnosticListener>();\n\tprivate pending: ActivityWatchdogDiagnostic[] = [];\n\tprivate unresponsive = false;\n\tprivate abortStartedAt: number | undefined;\n\tprivate attempt: Promise<void> | undefined;\n\t/** When the current replacement attempt began; undefined once it settles. */\n\tprivate attemptStartedAt: number | undefined;\n\tprivate attemptId = 0;\n\tprivate forceStoppedAttemptId: number | undefined;\n\tprivate rescueRequested = false;\n\t/**\n\t * Latched when a replacement failed on its own. Automatic recovery stays\n\t * single-shot, but the user's Ctrl+C must remain able to try again: without\n\t * this the host would be left with no engine, no pending attempt, no overdue\n\t * abort, and no watchdog flag, so nothing could arm the escape hatch.\n\t */\n\tprivate replacementNeeded = false;\n\tprivate termination: Promise<void> | undefined;\n\t/** Set once disposal begins; joins the in-flight attempt and termination. */\n\tprivate shutdownPromise: Promise<void> | undefined;\n\tprivate stopped = false;\n\n\tconstructor(deps: EngineHealthDeps, options?: EngineHealthOptions) {\n\t\tthis.deps = deps;\n\t\tthis.now = options?.now ?? (() => performance.now());\n\t}\n\n\tonDiagnostic(listener: EngineDiagnosticListener): () => void {\n\t\tfor (const diagnostic of this.pending.splice(0)) listener(diagnostic);\n\t\tthis.listeners.add(listener);\n\t\treturn () => this.listeners.delete(listener);\n\t}\n\n\t/** Publish a diagnostic produced elsewhere (watchdog, transport, bridge). */\n\tpublish(diagnostic: ActivityWatchdogDiagnostic): void {\n\t\tif (diagnostic.level === \"unresponsive\" && diagnostic.source === \"watchdog\") this.unresponsive = true;\n\t\tthis.deliver(diagnostic);\n\t}\n\n\t/** A heartbeat proves the child's loop turns again, so clear a reported stall. */\n\tclearUnresponsive(): void {\n\t\tthis.unresponsive = false;\n\t}\n\n\tmarkCooperativeAbortStarted(): void {\n\t\tthis.abortStartedAt ??= this.now();\n\t}\n\n\tmarkCooperativeAbortSettled(): void {\n\t\tthis.abortStartedAt = undefined;\n\t}\n\n\t/**\n\t * True only when the engine is provably not answering:\n\t *\n\t *  - the heartbeat watchdog declared it unresponsive;\n\t *  - a replacement failed on its own and the host has no engine;\n\t *  - a cooperative abort has been outstanding past the unresponsive threshold\n\t *    (a child whose loop still turns but is deadlocked);\n\t *  - a replacement has been waiting for `engine_ready` past that threshold.\n\t *\n\t * The readiness case has no watchdog coverage at all: a child stopped before\n\t * readiness emits no heartbeat and no diagnostic, and `start()` waits without\n\t * a deadline by design. Crossing a threshold arms nothing on its own — it\n\t * only decides whether a deliberate Ctrl+C escalates — and all of this stays\n\t * false for a healthy engine so a stray second Ctrl+C cannot replace one.\n\t */\n\tneedsExplicitTermination(): boolean {\n\t\tif (this.unresponsive || this.replacementNeeded) return true;\n\t\treturn this.isOverdue(this.abortStartedAt) || this.isOverdue(this.attemptStartedAt);\n\t}\n\n\tprivate isOverdue(startedAt: number | undefined): boolean {\n\t\treturn startedAt !== undefined && this.now() - startedAt >= ENGINE_UNRESPONSIVE_MS;\n\t}\n\n\tisRecovering(): boolean {\n\t\treturn this.attempt !== undefined || this.termination !== undefined;\n\t}\n\n\t/**\n\t * Stop accepting recovery work and join whatever is still running.\n\t *\n\t * Disposal must not return while a replacement is between its own stop and\n\t * its spawn: the client's restart permit is voided by `deps.stop()`, and the\n\t * attempt is then awaited so no child, and no host initialization, outlives\n\t * teardown. Idempotent, and bounded by the client's own stop deadlines.\n\t */\n\tshutdown(): Promise<void> {\n\t\tif (this.shutdownPromise) return this.shutdownPromise;\n\t\tthis.stopped = true;\n\t\tthis.rescueRequested = false;\n\t\tthis.replacementNeeded = false;\n\t\tthis.shutdownPromise = (async () => {\n\t\t\tawait this.stopQuietly();\n\t\t\tawait this.attempt?.catch(() => {});\n\t\t\tawait this.termination?.catch(() => {});\n\t\t})();\n\t\treturn this.shutdownPromise;\n\t}\n\n\thandleGenerationEnded(event: InteractiveEngineGenerationEnded): void {\n\t\tthis.deps.clearActivity();\n\t\tif (event.expected || this.stopped) return;\n\t\tif (this.attempt) {\n\t\t\t// A newer child died while the replacement attempt was still running, so\n\t\t\t// that attempt cannot leave a viable generation behind. Latch instead of\n\t\t\t// restarting again: automatic recovery stays single-shot, and Ctrl+C is\n\t\t\t// armed once the in-flight attempt settles.\n\t\t\tthis.replacementNeeded = true;\n\t\t\treturn;\n\t\t}\n\t\tvoid this.recover(formatUnexpectedEngineLossNotice(event)).catch(() => {});\n\t}\n\n\tterminate(): Promise<void> {\n\t\t// A repeat Ctrl+C must be able to rescue a replacement that is itself\n\t\t// overdue, instead of joining the in-flight termination forever. The stop\n\t\t// is fenced by attempt id so repeated presses cannot stack restarts onto a\n\t\t// healthy replacement.\n\t\tif (this.termination) {\n\t\t\tthis.rescueOverdueAttempt();\n\t\t\treturn this.termination;\n\t\t}\n\t\tconst inFlight = this.attempt;\n\t\t// The attempt this press supersedes fails by our own hand, so its failure is\n\t\t// expected rather than something to report to the user.\n\t\tif (inFlight) this.forceStoppedAttemptId = this.attemptId;\n\t\tconst run = (async () => {\n\t\t\tthis.deps.clearActivity();\n\t\t\tthis.notice(UNRESPONSIVE_ENGINE_NOTICE);\n\t\t\tawait this.stopQuietly();\n\t\t\t// An automatic attempt swallows its own errors, so this only waits for it\n\t\t\t// to release the single-flight slot.\n\t\t\tif (inFlight) await inFlight;\n\t\t\tawait this.recover(undefined);\n\t\t\t// Each user-forced stop of an overdue replacement earns exactly one more\n\t\t\t// replacement attempt, so the escape hatch stays usable indefinitely.\n\t\t\twhile (this.rescueRequested && !this.stopped) {\n\t\t\t\tthis.rescueRequested = false;\n\t\t\t\tthis.notice(UNRESPONSIVE_ENGINE_NOTICE);\n\t\t\t\tawait this.recover(undefined);\n\t\t\t}\n\t\t})().finally(() => {\n\t\t\tif (this.termination === run) this.termination = undefined;\n\t\t});\n\t\tthis.termination = run;\n\t\treturn run;\n\t}\n\n\t/** Force-stop an overdue replacement, at most once per attempt. */\n\tprivate rescueOverdueAttempt(): boolean {\n\t\tif (!this.isOverdue(this.attemptStartedAt)) return false;\n\t\tif (this.forceStoppedAttemptId === this.attemptId) return false;\n\t\tthis.forceStoppedAttemptId = this.attemptId;\n\t\tthis.rescueRequested = true;\n\t\tvoid this.stopQuietly();\n\t\treturn true;\n\t}\n\n\tprivate async stopQuietly(): Promise<void> {\n\t\ttry {\n\t\t\tawait this.deps.stop();\n\t\t} catch {\n\t\t\t// A stop failure must not strand the escape hatch: the restart still\n\t\t\t// replaces the child and reports any real failure.\n\t\t}\n\t}\n\n\tprivate recover(notice: string | undefined): Promise<void> {\n\t\t// Order matters: after shutdown no caller may join, or revive, an attempt\n\t\t// that still happens to occupy the slot.\n\t\tif (this.stopped) return Promise.resolve();\n\t\tif (this.attempt) return this.attempt;\n\t\tif (notice) this.notice(notice);\n\t\tthis.attemptId += 1;\n\t\tconst id = this.attemptId;\n\t\tthis.attemptStartedAt = this.now();\n\t\tthis.rescueRequested = false;\n\t\t// A new attempt is under way, so the previous failure is no longer the\n\t\t// reason to arm Ctrl+C. It re-arms below only if this attempt fails too.\n\t\tthis.replacementNeeded = false;\n\t\t// The watchdog verdict belonged to the generation being replaced. A fresh\n\t\t// child emits no heartbeat until it is ready, so leaving the latch set\n\t\t// would keep `needsExplicitTermination()` true through the whole pre-ready\n\t\t// window and let the first Ctrl+C stop a replacement that never misbehaved.\n\t\t// Only this child's own heartbeat, or its own stall, may set it again.\n\t\tthis.unresponsive = false;\n\t\tconst run = this.deps\n\t\t\t.restart()\n\t\t\t.catch((error: Error) => {\n\t\t\t\t// An attempt the user deliberately stopped, or one cancelled by\n\t\t\t\t// disposal, did not fail on its own.\n\t\t\t\tif (this.forceStoppedAttemptId === id || this.stopped) return;\n\t\t\t\t// Keep Ctrl+C armed: automatic recovery is single-shot, but the user\n\t\t\t\t// must be able to ask for another attempt after a real failure.\n\t\t\t\tthis.replacementNeeded = true;\n\t\t\t\t// A concrete failure, so no operational source: this one surfaces.\n\t\t\t\tthis.deliver({\n\t\t\t\t\tactivity: undefined,\n\t\t\t\t\telapsedMs: 0,\n\t\t\t\t\tlevel: \"unresponsive\",\n\t\t\t\t\tmessage: `Interactive engine restart failed: ${error.message}`,\n\t\t\t\t});\n\t\t\t})\n\t\t\t.finally(() => {\n\t\t\t\tif (this.attempt !== run) return;\n\t\t\t\tthis.attempt = undefined;\n\t\t\t\tthis.attemptStartedAt = undefined;\n\t\t\t});\n\t\tthis.attempt = run;\n\t\treturn run;\n\t}\n\n\tprivate notice(message: string): void {\n\t\tthis.deliver({ activity: undefined, elapsedMs: 0, level: \"blocking\", message, source: \"recovery\" });\n\t}\n\n\tprivate deliver(diagnostic: ActivityWatchdogDiagnostic): void {\n\t\tif (this.listeners.size === 0) this.pending.push(diagnostic);\n\t\tfor (const listener of this.listeners) listener(diagnostic);\n\t}\n}\n"]}

package/dist/modes/interactive-engine/engine-input-form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-input-form.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-input-form.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAY9E,oDAAoD;AACpD,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,MAAM,CAAK;IACnB,YAAY,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAExC;IAED,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAuBrG;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQhC;IAED,OAAO,IAAI,IAAI,CAGd;IAED,OAAO,CAAC,IAAI;CAGZ"}
+{"version":3,"file":"engine-input-form.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive-engine/engine-input-form.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAY9E,oDAAoD;AACpD,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,MAAM,CAAK;IACnB,YAAY,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAExC;IAED,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAgCrG;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQhC;IAED,OAAO,IAAI,IAAI,CAGd;IAED,OAAO,CAAC,IAAI;CAGZ"}