@cello-protocol/connect 0.0.69 → 0.0.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/connect",
-  "version": "0.0.69",
+  "version": "0.0.70",
   "private": false,
   "type": "module",
   "engines": {
@@ -9,17 +9,9 @@
   "publishConfig": {
     "access": "public"
   },
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "bin": {
     "cello-mcp": "./dist/bin/cello-mcp.js"
   },
-  "exports": {
-    ".": {
-      "import": "./dist/index.js",
-      "types": "./dist/index.d.ts"
-    }
-  },
   "files": [
     "dist/",
     "package.json",
@@ -30,16 +22,15 @@
     "@libp2p/peer-id": "^6.0.8",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.4.2",
-    "@cello-protocol/client": "0.0.50",
-    "@cello-protocol/transport": "0.0.18",
-    "@cello-protocol/crypto": "0.0.18"
+    "@cello-protocol/crypto": "0.0.19",
+    "@cello-protocol/transport": "0.0.19"
   },
   "devDependencies": {
     "@claude-flow/testing": "3.0.0-alpha.6",
     "@types/node": "^25.6.2",
     "cbor-x": "^1.6.0",
     "it-length-prefixed": "^10.0.1",
-    "@cello-protocol/daemon": "0.0.51"
+    "@cello-protocol/daemon": "0.0.52"
   },
   "scripts": {
     "typecheck": "tsc --build",

package/dist/config.d.ts

@@ -1,30 +0,0 @@
-/**
- * CELLO adapter runtime configuration.
- *
- * AC-003 (REPOSPLIT-002): CELLO_DIRECTORY_URL defaults to the production directory
- * ALB endpoint. No CELLO_RELAY_MULTIADDR constant exists — relay multiaddr is
- * dynamically assigned per-session by the directory.
- */
-/** Production directory HTTP endpoint (ALB / Route53 — ALB terminates TLS, internal HTTP). */
-export declare const PRODUCTION_DIRECTORY_URL = "http://directory-us1.cello.mygentic.ai";
-/**
- * Resolve the directory URL from the environment, falling back to the
- * production endpoint when CELLO_DIRECTORY_URL is not set.
- *
- * @param env - process.env or a test substitute
- */
-export declare function resolveDirectoryUrl(env?: Record<string, string | undefined>): string;
-/**
- * Auto-discover the directory multiaddr via GET /bootstrap on the directory HTTP endpoint.
- *
- * Pseudocode (fetch strategy):
- *   1. GET ${directoryUrl}/bootstrap with 5s AbortController timeout
- *   2. On HTTP 200 + JSON { multiaddr: string } containing "/p2p/" → return multiaddr
- *   3. On HTTP non-200, network error, or invalid JSON → return null
- *
- * @param directoryUrl - Base URL of the directory HTTP endpoint
- * @param fetchFn - fetch implementation (injectable for testing)
- * @returns The resolved multiaddr string, or null on failure
- */
-export declare function fetchBootstrapMultiaddr(directoryUrl: string, fetchFn?: typeof fetch): Promise<string | null>;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,2CAA2C,CAAC;AAEjF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAEjG;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxB"}

package/dist/config.js

@@ -1,53 +0,0 @@
-/**
- * CELLO adapter runtime configuration.
- *
- * AC-003 (REPOSPLIT-002): CELLO_DIRECTORY_URL defaults to the production directory
- * ALB endpoint. No CELLO_RELAY_MULTIADDR constant exists — relay multiaddr is
- * dynamically assigned per-session by the directory.
- */
-/** Production directory HTTP endpoint (ALB / Route53 — ALB terminates TLS, internal HTTP). */
-export const PRODUCTION_DIRECTORY_URL = "http://directory-us1.cello.mygentic.ai";
-/**
- * Resolve the directory URL from the environment, falling back to the
- * production endpoint when CELLO_DIRECTORY_URL is not set.
- *
- * @param env - process.env or a test substitute
- */
-export function resolveDirectoryUrl(env = process.env) {
-    return env["CELLO_DIRECTORY_URL"] ?? PRODUCTION_DIRECTORY_URL;
-}
-/**
- * Auto-discover the directory multiaddr via GET /bootstrap on the directory HTTP endpoint.
- *
- * Pseudocode (fetch strategy):
- *   1. GET ${directoryUrl}/bootstrap with 5s AbortController timeout
- *   2. On HTTP 200 + JSON { multiaddr: string } containing "/p2p/" → return multiaddr
- *   3. On HTTP non-200, network error, or invalid JSON → return null
- *
- * @param directoryUrl - Base URL of the directory HTTP endpoint
- * @param fetchFn - fetch implementation (injectable for testing)
- * @returns The resolved multiaddr string, or null on failure
- */
-export async function fetchBootstrapMultiaddr(directoryUrl, fetchFn = fetch) {
-    const bootstrapUrl = `${directoryUrl.replace(/\/$/, "")}/bootstrap`;
-    const ac = new AbortController();
-    const timeout = setTimeout(() => ac.abort(), 5000);
-    try {
-        const resp = await fetchFn(bootstrapUrl, { signal: ac.signal });
-        if (!resp.ok) {
-            return null;
-        }
-        const json = await resp.json();
-        if (typeof json.multiaddr === "string" && json.multiaddr.includes("/p2p/")) {
-            return json.multiaddr;
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,wCAAwC,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA0C,OAAO,CAAC,GAAG;IACvF,OAAO,GAAG,CAAC,qBAAqB,CAAC,IAAI,wBAAwB,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,YAAoB,EACpB,UAAwB,KAAK;IAE7B,MAAM,YAAY,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC;IACpE,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,2 +0,0 @@
-export { resolveDirectoryUrl, PRODUCTION_DIRECTORY_URL, fetchBootstrapMultiaddr } from "./config.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,2 +0,0 @@
-export { resolveDirectoryUrl, PRODUCTION_DIRECTORY_URL, fetchBootstrapMultiaddr } from "./config.js";
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/lock-file.d.ts

@@ -1,72 +0,0 @@
-/**
- * lock-file.ts — PID lock file manager for single-instance cello-mcp process
- *
- * CELLO-M6B-001: Every new cello-mcp startup kills any prior process holding
- * the same lock file, ensuring exactly one cello-mcp per agent at all times.
- *
- * Pseudocode (Phase P):
- *
- * acquireLockFile(lockFilePath, opts?):
- *   1. Read lockFilePath. If it doesn't exist, skip to step 7.
- *   2. Parse PID from file content (trim whitespace, parseInt).
- *   3. Check if process with that PID is running (kill(priorPid, 0)).
- *      - If ESRCH (no such process) → stale lock → skip to step 7.
- *      - If EPERM (permission denied) → process exists but owned by another user → warn and continue to step 7.
- *      - If process is running and killable → proceed to step 4.
- *   4. Send SIGTERM to prior process.
- *   5. Poll every 100ms for up to 5 seconds, checking if process still exists (kill(priorPid, 0)).
- *   6. If still running after 5s, send SIGKILL. Log at warn level.
- *   7. Create lock file directory (mkdir -p) if needed.
- *   8. Write current process.pid to lockFilePath.
- *   9. Return a cleanup function that removes the lock file.
- *
- * releaseLockFile(lockFilePath):
- *   1. Call fs.unlinkSync(lockFilePath), catch ENOENT silently.
- *
- * Dependency injection for testability:
- *   - killFn: (pid: number, signal: number | NodeJS.Signals) => void
- *     Defaults to process.kill. Tests inject a mock that throws for EPERM scenarios.
- */
-/**
- * Get the lock file path for a given agent name.
- * Used by both cello-mcp.ts and tests to ensure path logic is consistent.
- *
- * @param agentName - Optional agent name (M7+ multi-agent support)
- * @param baseDir - Base directory for .cello (defaults to homedir())
- * @returns Absolute path to the lock file
- */
-export declare function getLockFilePath(agentName: string | null, baseDir?: string): string;
-export interface LockFileOptions {
-    /**
-     * Injected kill function for testing. Defaults to process.kill.
-     * Tests can inject a mock that throws { code: 'EPERM' } to simulate cross-user scenarios.
-     */
-    killFn?: (pid: number, signal: number | NodeJS.Signals) => void;
-    /**
-     * Logger for observability events. If not provided, no events are logged.
-     */
-    logger?: {
-        info: (event: string, context: Record<string, unknown>) => void;
-        warn: (event: string, context: Record<string, unknown>) => void;
-    };
-}
-/**
- * Acquire the PID lock file. If a prior process is running, kill it (SIGTERM → wait → SIGKILL).
- * Returns a cleanup function that releases the lock file on exit.
- *
- * AC-001, AC-002, AC-004, SI-001
- */
-export declare function acquireLockFile(lockFilePath: string, opts?: LockFileOptions): Promise<() => void>;
-/**
- * Release the lock file. Called on SIGTERM/SIGINT/normal exit.
- * AC-003
- *
- * @param lockFilePath - Path to the lock file to remove
- * @param logger - Optional logger for observability events
- * @param unlinkFn - Injected unlink function for testing (defaults to fs.unlinkSync)
- */
-export declare function releaseLockFile(lockFilePath: string, logger?: {
-    info: (event: string, context: Record<string, unknown>) => void;
-    warn: (event: string, context: Record<string, unknown>) => void;
-}, unlinkFn?: (path: string) => void): void;
-//# sourceMappingURL=lock-file.d.ts.map

package/dist/lock-file.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock-file.d.ts","sourceRoot":"","sources":["../src/lock-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,SAAY,GAClB,MAAM,CAIR;AAED,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAChE;;OAEG;IACH,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAChE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KACjE,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,MAAM,IAAI,CAAC,CAgMrB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE;IACP,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAChE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACjE,EACD,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAiB,GAC5C,IAAI,CAcN"}

package/dist/lock-file.js

@@ -1,270 +0,0 @@
-/**
- * lock-file.ts — PID lock file manager for single-instance cello-mcp process
- *
- * CELLO-M6B-001: Every new cello-mcp startup kills any prior process holding
- * the same lock file, ensuring exactly one cello-mcp per agent at all times.
- *
- * Pseudocode (Phase P):
- *
- * acquireLockFile(lockFilePath, opts?):
- *   1. Read lockFilePath. If it doesn't exist, skip to step 7.
- *   2. Parse PID from file content (trim whitespace, parseInt).
- *   3. Check if process with that PID is running (kill(priorPid, 0)).
- *      - If ESRCH (no such process) → stale lock → skip to step 7.
- *      - If EPERM (permission denied) → process exists but owned by another user → warn and continue to step 7.
- *      - If process is running and killable → proceed to step 4.
- *   4. Send SIGTERM to prior process.
- *   5. Poll every 100ms for up to 5 seconds, checking if process still exists (kill(priorPid, 0)).
- *   6. If still running after 5s, send SIGKILL. Log at warn level.
- *   7. Create lock file directory (mkdir -p) if needed.
- *   8. Write current process.pid to lockFilePath.
- *   9. Return a cleanup function that removes the lock file.
- *
- * releaseLockFile(lockFilePath):
- *   1. Call fs.unlinkSync(lockFilePath), catch ENOENT silently.
- *
- * Dependency injection for testability:
- *   - killFn: (pid: number, signal: number | NodeJS.Signals) => void
- *     Defaults to process.kill. Tests inject a mock that throws for EPERM scenarios.
- */
-import { readFileSync, writeFileSync, unlinkSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { homedir } from "node:os";
-/**
- * Get the lock file path for a given agent name.
- * Used by both cello-mcp.ts and tests to ensure path logic is consistent.
- *
- * @param agentName - Optional agent name (M7+ multi-agent support)
- * @param baseDir - Base directory for .cello (defaults to homedir())
- * @returns Absolute path to the lock file
- */
-export function getLockFilePath(agentName, baseDir = homedir()) {
-    return agentName
-        ? join(baseDir, ".cello", "agents", agentName, "cello-mcp.pid")
-        : join(baseDir, ".cello", "cello-mcp.pid");
-}
-/**
- * Acquire the PID lock file. If a prior process is running, kill it (SIGTERM → wait → SIGKILL).
- * Returns a cleanup function that releases the lock file on exit.
- *
- * AC-001, AC-002, AC-004, SI-001
- */
-export async function acquireLockFile(lockFilePath, opts) {
-    const killFn = opts?.killFn ?? process.kill.bind(process);
-    const logger = opts?.logger;
-    // Step 1-3: Check for prior process
-    let priorPid = null;
-    try {
-        const content = readFileSync(lockFilePath, "utf8").trim();
-        priorPid = parseInt(content, 10);
-        if (isNaN(priorPid) || priorPid <= 0) {
-            // Invalid or dangerous PID — treat as stale.
-            // priorPid === 0: process.kill(0, ...) sends signal to the entire process group.
-            // priorPid < 0: process.kill(-1, ...) sends signal to all processes the user can signal.
-            // Both are POSIX semantics — neither refers to the intended prior cello-mcp instance.
-            priorPid = null;
-        }
-    }
-    catch (err) {
-        // ENOENT = no lock file exists → proceed to write
-        if (err.code !== "ENOENT") {
-            // Unexpected read error (permissions, etc) — non-fatal, log and continue
-            logger?.warn("client.startup.lock.read.failed", {
-                reason: err.message,
-            });
-        }
-        priorPid = null;
-    }
-    if (priorPid !== null) {
-        // Check if process is running
-        let isRunning = false;
-        try {
-            killFn(priorPid, 0); // signal 0 = check existence without killing
-            isRunning = true;
-        }
-        catch (err) {
-            const code = err.code;
-            if (code === "ESRCH") {
-                // No such process — stale lock
-                isRunning = false;
-            }
-            else if (code === "EPERM") {
-                // Process exists but owned by another user (SI-001)
-                logger?.warn("client.startup.lock.eperm", {
-                    priorPid,
-                    reason: "process owned by another user",
-                });
-                isRunning = false; // Treat as stale — we cannot kill it, proceed with our own lock
-            }
-            else {
-                // Unknown error — log and treat as not running
-                logger?.warn("client.startup.lock.check.failed", {
-                    priorPid,
-                    reason: err.message,
-                });
-                isRunning = false;
-            }
-        }
-        if (isRunning) {
-            // Step 4: Send SIGTERM
-            // Track whether SIGTERM was successfully delivered. If the kill call throws
-            // (race: process exited between the existence check and the kill call), we
-            // know the process is already gone — we must NOT emit prior.process.killed,
-            // because the taxonomy entry says "after successfully killing a prior process."
-            let sigTermDelivered = false;
-            try {
-                killFn(priorPid, "SIGTERM");
-                sigTermDelivered = true;
-            }
-            catch (err) {
-                // Kill failed (race: process exited between check and kill) — non-fatal.
-                // The process is already gone; skip the polling phase and proceed to write.
-                logger?.warn("client.startup.prior.kill.failed", {
-                    priorPid,
-                    signal: "SIGTERM",
-                    reason: err.message,
-                });
-            }
-            // Only poll if SIGTERM was actually delivered
-            let stillRunning = sigTermDelivered;
-            if (sigTermDelivered) {
-                // Step 5: Poll for up to 5 seconds
-                const startTime = Date.now();
-                const timeout = 5000;
-                // Check immediately after SIGTERM (most processes exit quickly)
-                try {
-                    killFn(priorPid, 0);
-                    stillRunning = true;
-                }
-                catch (err) {
-                    if (err.code === "ESRCH") {
-                        // ESRCH = no such process — process is gone
-                        stillRunning = false;
-                    }
-                    // EPERM or unknown — process may still exist; treat as still running
-                }
-                // Only poll if still running after immediate check
-                while (stillRunning && Date.now() - startTime < timeout) {
-                    await new Promise((resolve) => setTimeout(resolve, 100));
-                    try {
-                        killFn(priorPid, 0);
-                        stillRunning = true;
-                    }
-                    catch (err) {
-                        if (err.code === "ESRCH") {
-                            // ESRCH = no such process — process is gone
-                            stillRunning = false;
-                            break;
-                        }
-                        // EPERM or unknown — process may still exist; treat as still running
-                    }
-                }
-            }
-            // Step 6: Escalate to SIGKILL if needed
-            if (stillRunning) {
-                try {
-                    killFn(priorPid, "SIGKILL");
-                    // Poll after SIGKILL to verify the kernel has reaped the process before
-                    // we write the lock file. SIGKILL is unblockable but process cleanup
-                    // (releasing file locks, closing fds) is not instantaneous — especially
-                    // on loaded systems. Poll up to 500ms in 50ms intervals.
-                    const sigkillDeadline = Date.now() + 500;
-                    let reaped = false;
-                    while (Date.now() < sigkillDeadline) {
-                        await new Promise((resolve) => setTimeout(resolve, 50));
-                        try {
-                            killFn(priorPid, 0);
-                            // Still running — keep polling
-                        }
-                        catch (err) {
-                            if (err.code === "ESRCH") {
-                                // ESRCH = no such process — reaping confirmed
-                                reaped = true;
-                                break;
-                            }
-                            // EPERM or unknown — not yet confirmed reaped; continue polling
-                        }
-                    }
-                    // Log a single event regardless of whether reaping was confirmed.
-                    // reaped=false on a very loaded system means SIGKILL was sent but the kernel
-                    // hasn't cleaned up within 500ms — the process is dying, we proceed anyway.
-                    logger?.warn("client.startup.prior.process.killed", {
-                        priorPid,
-                        signal: "SIGKILL",
-                        reaped,
-                    });
-                }
-                catch (err) {
-                    logger?.warn("client.startup.prior.kill.failed", {
-                        priorPid,
-                        signal: "SIGKILL",
-                        reason: err.message,
-                    });
-                }
-            }
-            else if (sigTermDelivered) {
-                // Graceful exit — SIGTERM was delivered and the process exited on its own.
-                // Only emit this event when we successfully sent the signal (sigTermDelivered=true)
-                // and the process is confirmed gone (stillRunning=false). Do NOT emit when
-                // SIGTERM threw (the process was already dead before we could send the signal).
-                logger?.info("client.startup.prior.process.killed", {
-                    priorPid,
-                    signal: "SIGTERM",
-                });
-            }
-        }
-    }
-    // Step 7-8: Write own PID to lock file
-    // Per canonical taxonomy and story observability spec: lock file write failure is
-    // NON-FATAL. Log at warn level and proceed — orphan detection is disabled but the
-    // process can still serve MCP tool calls. The operator will see the warn event and
-    // can diagnose the filesystem permission issue separately.
-    try {
-        mkdirSync(dirname(lockFilePath), { recursive: true });
-        writeFileSync(lockFilePath, String(process.pid), "utf8");
-        logger?.info("client.startup.lock.acquired", { pid: process.pid });
-    }
-    catch (err) {
-        logger?.warn("client.startup.lock.write.failed", {
-            reason: err.message,
-        });
-        // Non-fatal: return a no-op cleanup since we have no lock to release
-        return () => { };
-    }
-    // Step 9: Return idempotent cleanup function.
-    // The function may be called from multiple paths (exit event + signal/exception handler).
-    // The released flag suppresses the second call to prevent a duplicate
-    // client.startup.lock.released log event in the wild (I-3 finding).
-    let released = false;
-    return () => {
-        if (!released) {
-            released = true;
-            releaseLockFile(lockFilePath, logger);
-        }
-    };
-}
-/**
- * Release the lock file. Called on SIGTERM/SIGINT/normal exit.
- * AC-003
- *
- * @param lockFilePath - Path to the lock file to remove
- * @param logger - Optional logger for observability events
- * @param unlinkFn - Injected unlink function for testing (defaults to fs.unlinkSync)
- */
-export function releaseLockFile(lockFilePath, logger, unlinkFn = unlinkSync) {
-    try {
-        unlinkFn(lockFilePath);
-        logger?.info("client.startup.lock.released", { pid: process.pid });
-    }
-    catch (err) {
-        // ENOENT is expected if cleanup ran twice — silent
-        if (err.code !== "ENOENT") {
-            // Unexpected unlink failure (EACCES, EROFS, etc.) — non-fatal but observable
-            logger?.warn("client.startup.lock.release.failed", {
-                reason: err.message,
-                pid: process.pid,
-            });
-        }
-    }
-}
-//# sourceMappingURL=lock-file.js.map

package/dist/lock-file.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lock-file.js","sourceRoot":"","sources":["../src/lock-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAwB,EACxB,OAAO,GAAG,OAAO,EAAE;IAEnB,OAAO,SAAS;QACd,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAiBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,IAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;IAE5B,oCAAoC;IACpC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACrC,6CAA6C;YAC7C,iFAAiF;YACjF,yFAAyF;YACzF,sFAAsF;YACtF,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,kDAAkD;QAClD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,yEAAyE;YACzE,MAAM,EAAE,IAAI,CAAC,iCAAiC,EAAE;gBAC9C,MAAM,EAAG,GAAa,CAAC,OAAO;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,8BAA8B;QAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,6CAA6C;YAClE,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,+BAA+B;gBAC/B,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;iBAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,oDAAoD;gBACpD,MAAM,EAAE,IAAI,CAAC,2BAA2B,EAAE;oBACxC,QAAQ;oBACR,MAAM,EAAE,+BAA+B;iBACxC,CAAC,CAAC;gBACH,SAAS,GAAG,KAAK,CAAC,CAAC,gEAAgE;YACrF,CAAC;iBAAM,CAAC;gBACN,+CAA+C;gBAC/C,MAAM,EAAE,IAAI,CAAC,kCAAkC,EAAE;oBAC/C,QAAQ;oBACR,MAAM,EAAG,GAAa,CAAC,OAAO;iBAC/B,CAAC,CAAC;gBACH,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,uBAAuB;YACvB,4EAA4E;YAC5E,2EAA2E;YAC3E,4EAA4E;YAC5E,gFAAgF;YAChF,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC5B,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,yEAAyE;gBACzE,4EAA4E;gBAC5E,MAAM,EAAE,IAAI,CAAC,kCAAkC,EAAE;oBAC/C,QAAQ;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAG,GAAa,CAAC,OAAO;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,8CAA8C;YAC9C,IAAI,YAAY,GAAG,gBAAgB,CAAC;YAEpC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,mCAAmC;gBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC;gBAErB,gEAAgE;gBAChE,IAAI,CAAC;oBACH,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;oBACpB,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,4CAA4C;wBAC5C,YAAY,GAAG,KAAK,CAAC;oBACvB,CAAC;oBACD,qEAAqE;gBACvE,CAAC;gBAED,mDAAmD;gBACnD,OAAO,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;oBACxD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;oBACzD,IAAI,CAAC;wBACH,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;wBACpB,YAAY,GAAG,IAAI,CAAC;oBACtB,CAAC;oBAAC,OAAO,GAAY,EAAE,CAAC;wBACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BACpD,4CAA4C;4BAC5C,YAAY,GAAG,KAAK,CAAC;4BACrB,MAAM;wBACR,CAAC;wBACD,qEAAqE;oBACvE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC5B,wEAAwE;oBACxE,qEAAqE;oBACrE,wEAAwE;oBACxE,yDAAyD;oBACzD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;oBACzC,IAAI,MAAM,GAAG,KAAK,CAAC;oBACnB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;wBACpC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;wBACxD,IAAI,CAAC;4BACH,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;4BACpB,+BAA+B;wBACjC,CAAC;wBAAC,OAAO,GAAY,EAAE,CAAC;4BACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gCACpD,8CAA8C;gCAC9C,MAAM,GAAG,IAAI,CAAC;gCACd,MAAM;4BACR,CAAC;4BACD,gEAAgE;wBAClE,CAAC;oBACH,CAAC;oBACD,kEAAkE;oBAClE,6EAA6E;oBAC7E,4EAA4E;oBAC5E,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE;wBAClD,QAAQ;wBACR,MAAM,EAAE,SAAS;wBACjB,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,EAAE,IAAI,CAAC,kCAAkC,EAAE;wBAC/C,QAAQ;wBACR,MAAM,EAAE,SAAS;wBACjB,MAAM,EAAG,GAAa,CAAC,OAAO;qBAC/B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,IAAI,gBAAgB,EAAE,CAAC;gBAC5B,2EAA2E;gBAC3E,oFAAoF;gBACpF,2EAA2E;gBAC3E,gFAAgF;gBAChF,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE;oBAClD,QAAQ;oBACR,MAAM,EAAE,SAAS;iBAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,kFAAkF;IAClF,kFAAkF;IAClF,mFAAmF;IACnF,2DAA2D;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,EAAE,IAAI,CAAC,kCAAkC,EAAE;YAC/C,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC,CAAC;QACH,qEAAqE;QACrE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,8CAA8C;IAC9C,0FAA0F;IAC1F,sEAAsE;IACtE,oEAAoE;IACpE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,eAAe,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,MAGC,EACD,WAAmC,UAAU;IAE7C,IAAI,CAAC;QACH,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvB,MAAM,EAAE,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,mDAAmD;QACnD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,6EAA6E;YAC7E,MAAM,EAAE,IAAI,CAAC,oCAAoC,EAAE;gBACjD,MAAM,EAAG,GAAa,CAAC,OAAO;gBAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC"}