@brutalsystems/muster 0.8.0 → 0.8.1

package/dist/duration.js

@@ -11,8 +11,10 @@ export function parseDuration(value, label) {
     const raw = value.trim();
     if (raw.toLowerCase() === "off")
         return "off";
-    const match = /^(\d+)([smh])$/.exec(raw);
-    const seconds = match ? Number(match[1]) * UNITS[match[2]] : 0;
+    const match = /^(\d+)([smh])$/i.exec(raw);
+    const seconds = match
+        ? Number(match[1]) * UNITS[match[2].toLowerCase()]
+        : 0;
     if (!match || seconds <= 0)
         throw new Error(`${label} must be a duration like 90s, 30m, 4h, or off (got ${JSON.stringify(value)})`);
     return seconds;

package/dist/format.js

@@ -15,6 +15,15 @@ function argument(value) {
 export function humanColorEnabled(isTTY, env) {
     return isTTY === true && env.NO_COLOR === undefined && env.TERM !== "dumb";
 }
+/** Rendered from seconds rather than rounded to minutes: parseDuration accepts
+ *  45s, and "1m" for a 45s limit misreports it. */
+function duration(seconds) {
+    return seconds % 3600 === 0
+        ? `${seconds / 3600}h`
+        : seconds % 60 === 0
+            ? `${seconds / 60}m`
+            : `${seconds}s`;
+}
 function recordHuman(record, color) {
     const paint = (value, code) => color ? `\u001b[${code}m${value}\u001b[0m` : value;
     const field = (label, value) => `  ${paint(label + ":", 90)} ${value}`;
@@ -54,13 +63,6 @@ function recordHuman(record, color) {
             : record.model_source === "config"
                 ? " (configured default)"
                 : ""}`));
-    // Rendered from seconds rather than rounded to minutes: parseDuration accepts
-    // 45s, and "1m" for a 45s limit misreports it.
-    const duration = (seconds) => seconds % 3600 === 0
-        ? `${seconds / 3600}h`
-        : seconds % 60 === 0
-            ? `${seconds / 60}m`
-            : `${seconds}s`;
     if (record.idle_timeout)
         lines.push(field("Idle timeout", duration(record.idle_timeout)));
     if (record.ttl)

package/dist/guard.js

@@ -265,17 +265,20 @@ export const DEFAULT_IDLE_TIMEOUT = 1800;
  * under `host = "pty"` in config and then never arm it.
  */
 export function resolveLifecycle(req, config, reapable) {
-    const one = (flag, configured, label, fallback) => {
+    const one = (flag, configured, label, configLabel, fallback) => {
         // `off` asks for nothing, so it is accepted even where a lifecycle cannot
         // be honoured: a wrapper that always passes it defensively must still be
         // able to launch a pty session.
         if (flag !== undefined && !reapable && flag.trim().toLowerCase() !== "off")
             throw new Error(`${label} applies to tmux sessions, which outlive the process that ` +
                 `launched them; this launch is ${req.kind === "task" ? "a task" : `hosted on ${req.host ?? "the configured host"}`}`);
+        // Each source names ITSELF in the error: a bad config value reported as
+        // "--idle-timeout must be ..." sends the reader looking for a flag they
+        // never typed.
         const chosen = flag !== undefined
             ? parseDuration(flag, label)
             : configured !== undefined
-                ? parseDuration(configured, label)
+                ? parseDuration(configured, configLabel)
                 : undefined;
         if (!reapable)
             return null;
@@ -284,8 +287,8 @@ export function resolveLifecycle(req, config, reapable) {
         return chosen === "off" ? null : chosen;
     };
     return {
-        idleTimeout: one(req.idleTimeout, config.session.idle_timeout, "--idle-timeout", DEFAULT_IDLE_TIMEOUT),
-        ttl: one(req.ttl, config.session.ttl, "--ttl", null),
+        idleTimeout: one(req.idleTimeout, config.session.idle_timeout, "--idle-timeout", "[session] idle_timeout", DEFAULT_IDLE_TIMEOUT),
+        ttl: one(req.ttl, config.session.ttl, "--ttl", "[session] ttl", null),
     };
 }
 export function runtimeArgs(req) {

package/dist/hosts/tmux.js

@@ -57,6 +57,19 @@ export function parseWindowList(output) {
         label: label.join(FIELD),
     }));
 }
+/**
+ * One shell command line for `run-shell`.
+ *
+ * Two escapes, not one. POSIX single-quoting keeps the shell from splitting an
+ * argument, and `#` is doubled because tmux expands the command as a FORMAT
+ * before any shell sees it: an unescaped `#{pane_pid}` inside a path is
+ * silently replaced, and quoting cannot prevent that.
+ */
+export function tmuxCommand(argv) {
+    return argv
+        .map((a) => `'${a.replaceAll("'", `'\\''`).replaceAll("#", "##")}'`)
+        .join(" ");
+}
 export class TmuxHost {
     server;
     id = "tmux";
@@ -86,6 +99,11 @@ export class TmuxHost {
     capabilities() {
         return { watchable: true, attachable: true, survivesParentExit: true };
     }
+    /** The tmux server this host talks to, so a caller needing it in an armed
+     *  command does not reach in with a structural cast. */
+    socketName() {
+        return this.server;
+    }
     /** Null when the window is gone — the caller stops rather than guesses. */
     async sessionState(hostRef) {
         try {
@@ -113,7 +131,7 @@ export class TmuxHost {
             "-b",
             "-d",
             String(Math.max(1, Math.round(seconds))),
-            argv.map((a) => `'${a.replaceAll("'", `'\\''`)}'`).join(" "),
+            tmuxCommand(argv),
         ]);
     }
     async launch(opts) {

package/dist/reap.js

@@ -1,5 +1,8 @@
 import { Registry } from "./registry.js";
-const MIN_POLL = 30, MAX_POLL = 300;
+// The floor is low so a short limit is honoured rather than rounded up: a 45s
+// ttl behind a 30s floor fires at up to 75s. A session with a limit that short
+// does not live long enough for the extra polls to matter.
+const MIN_POLL = 5, MAX_POLL = 300;
 /**
  * Derived from the SHORTER active expiry: a 4h idle timeout paired with a 2m
  * ttl must not poll on the 4h scale, or the ttl overshoots by minutes.

package/dist/run.js

@@ -451,8 +451,8 @@ export class Muster {
             // armed before the window is recorded would poll a target the registry
             // cannot name. `schedule` is optional on the host interface, so pty and
             // macos-terminal opt out by not implementing it.
-            if (driver?.schedule && (lifecycle.idleTimeout ?? lifecycle.ttl))
-                await driver
+            if (driver?.schedule && (lifecycle.idleTimeout ?? lifecycle.ttl)) {
+                const armed = await driver
                     .schedule(pollInterval(lifecycle), [
                     process.execPath,
                     // ../dist/muster.js, not ./muster.js: this resolves from src/run.ts
@@ -463,12 +463,24 @@ export class Muster {
                     "--home",
                     this.home,
                     "--socket",
-                    driver.server ?? "muster",
+                    driver.socketName?.() ?? "muster",
                     entry.launchId,
                 ])
-                    // A lifecycle that cannot be armed must not fail the launch: the
-                    // session is up and usable, and the orphan risk is what we had before.
-                    .catch(() => { });
+                    .then(() => true, () => false);
+                // A lifecycle that could not be armed must not fail the launch — the
+                // session is up and usable, and the orphan risk is what we had before.
+                // But it must not be REPORTED either: a record promising an expiry
+                // nothing will honour is worse than one promising none, because there
+                // is no way to tell from the outside.
+                if (!armed) {
+                    lifecycle.idleTimeout = null;
+                    lifecycle.ttl = null;
+                    entry = await this.registry.update(entry.launchId, {
+                        idleTimeout: null,
+                        ttl: null,
+                    });
+                }
+            }
             let diagnostic = req.runtime === "claude"
                 ? "no Claude session registry found (check terminal for workspace trust or login prompts)"
                 : req.runtime === "opencode"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brutalsystems/muster",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Launch instructed, reachable local agent sessions",
   "type": "module",
   "engines": {