@claudexor/daemon 3.3.16 → 3.4.1

package/dist/root-authority.js

@@ -0,0 +1,380 @@
+/**
+ * Persistent root-authority barrier for a shared data root (issue #165).
+ *
+ * D1: before ANY journal recovery or destructive startup work, the fixed
+ * daemon publishes a permanent, legacy-opaque barrier at the canonical writer
+ * address. The barrier is a lease DIRECTORY carrying `root-authority-v2.json`
+ * and NO top-level owner.json, so a pre-fix claimant's owner parse fails
+ * closed forever — it can neither adopt nor quarantine the address. The
+ * barrier is never removed, including on clean shutdown: a failed fixed
+ * candidate leaves a protected recovery/offline state instead of reopening
+ * the process-reaping race.
+ *
+ * D2: the barrier record persists two SEPARATE facts — the writer protocol
+ * epoch (pre-fix and newer-than-supported epochs are refused) and the
+ * semantic version floor of the last fixed runtime that PROVED it could
+ * serve (strictly lower fixed versions are refused; equal versions contend
+ * normally — build SHA/entry path are evidence, not ordering).
+ *
+ * D3: an already-running pre-fix contender that passed its dead-owner check
+ * before this barrier existed cannot be retroactively revoked — a LIVE flat
+ * owner refuses this candidate through the shared lease machinery. Migration
+ * of an owned flat generation is an in-place atomic owner replacement: the
+ * owner record is atomically swapped for an unparseable migration sentinel,
+ * so the address is never absent and never carries a dead parseable owner.
+ * This module makes no stronger claim.
+ *
+ * D4: authority follows the data root. The barrier anchors at the canonical
+ * DEFAULT socket address of the daemon root even when the serving socket
+ * spelling differs, so every fixed runtime sharing one
+ * CLAUDEXOR_CONFIG_DIR/daemon root contends on one root authority.
+ *
+ * This module builds ON the writer-lease owner (single-writer acquisition,
+ * owner classification, stale quarantine) and never re-implements liveness.
+ */
+import { createHash, randomUUID } from "node:crypto";
+import { lstatSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { compareRuntimeSemver, isRuntimeSemver } from "@claudexor/util";
+import { canonicalDefaultSocketPath } from "./token.js";
+import { acquireDaemonWriterLease, inspectDaemonWriterLease, resolveWriterLeaseFilesystem, writerLeaseAnchorPath, ROOT_AUTHORITY_MARKER_FILE, } from "./writer-lease.js";
+export const ROOT_AUTHORITY_SCHEMA_VERSION = 2;
+/** First fixed writer-protocol epoch. Pre-fix runtimes have no epoch at all;
+ * a record with a lower OR higher epoch than this build supports is refused. */
+export const ROOT_AUTHORITY_EPOCH = 2;
+function rootAuthorityRefusal(code, message) {
+    return Object.assign(new Error(message), { code, status: 409 });
+}
+function parseRootAuthorityRecord(raw) {
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        return "marker is not valid JSON";
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return "marker is not a JSON object";
+    }
+    const record = value;
+    if (record.schemaVersion !== ROOT_AUTHORITY_SCHEMA_VERSION) {
+        return `marker schemaVersion is not ${ROOT_AUTHORITY_SCHEMA_VERSION}`;
+    }
+    if (!Number.isSafeInteger(record.epoch) || record.epoch <= 0) {
+        return "marker epoch is not a positive integer";
+    }
+    if (record.state !== "vacant" && record.state !== "served") {
+        return "marker state is not vacant/served";
+    }
+    if (record.floor !== undefined && !isRuntimeSemver(record.floor)) {
+        return "marker floor is not an x.y.z semver";
+    }
+    return {
+        schemaVersion: ROOT_AUTHORITY_SCHEMA_VERSION,
+        epoch: record.epoch,
+        state: record.state,
+        ...(record.floor !== undefined ? { floor: record.floor } : {}),
+    };
+}
+/** Fail-closed barrier read: only a physically missing marker is `absent`.
+ * C9c: the marker is validated like the startup-diagnostics target — a
+ * symlink, a multi-linked file, a foreign uid, or group/other-accessible
+ * permissions cannot carry root authority. */
+export function readRootAuthority(anchorPath) {
+    const markerPath = join(anchorPath, ROOT_AUTHORITY_MARKER_FILE);
+    let raw;
+    try {
+        const stat = lstatSync(markerPath);
+        if (stat.isSymbolicLink() || !stat.isFile()) {
+            return { status: "invalid", markerPath, reason: "marker is not a regular file" };
+        }
+        if (stat.nlink !== 1) {
+            return { status: "invalid", markerPath, reason: "marker is not singly linked" };
+        }
+        if (process.platform !== "win32") {
+            const uid = process.getuid?.();
+            if (uid !== undefined && stat.uid !== uid) {
+                return { status: "invalid", markerPath, reason: "marker has a foreign uid" };
+            }
+            if ((stat.mode & 0o077) !== 0) {
+                return { status: "invalid", markerPath, reason: "marker permissions are not private" };
+            }
+        }
+        raw = readFileSync(markerPath, "utf8");
+    }
+    catch (error) {
+        if (error?.code === "ENOENT") {
+            return { status: "absent", markerPath };
+        }
+        return { status: "invalid", markerPath, reason: "marker is unreadable" };
+    }
+    const record = parseRootAuthorityRecord(raw);
+    if (typeof record === "string")
+        return { status: "invalid", markerPath, reason: record };
+    return { status: "valid", markerPath, record };
+}
+/** D2 admission: refuse foreign epochs and strictly lower semantic versions. */
+export function assertRootAuthorityAdmits(record, version) {
+    if (record.epoch !== ROOT_AUTHORITY_EPOCH) {
+        throw rootAuthorityRefusal("root_authority_epoch_unsupported", record.epoch < ROOT_AUTHORITY_EPOCH
+            ? `root authority epoch ${record.epoch} predates the supported writer epoch ${ROOT_AUTHORITY_EPOCH}`
+            : `root authority epoch ${record.epoch} is newer than the supported writer epoch ${ROOT_AUTHORITY_EPOCH}`);
+    }
+    if (record.floor === undefined)
+        return;
+    if (!isRuntimeSemver(version)) {
+        // Fail closed: a candidate that cannot be ORDERED against the proven
+        // floor cannot prove it is not a regression.
+        throw rootAuthorityRefusal("root_authority_floor_regression", `candidate version '${version}' cannot be ordered against the proven serving floor ${record.floor}`);
+    }
+    if (compareRuntimeSemver(version, record.floor) < 0) {
+        throw rootAuthorityRefusal("root_authority_floor_regression", `candidate version ${version} is below the proven serving floor ${record.floor}`);
+    }
+}
+/** Atomic (tmp + rename), link-refusing marker write inside the barrier dir. */
+function writeRootAuthorityRecord(anchorPath, record) {
+    const markerPath = join(anchorPath, ROOT_AUTHORITY_MARKER_FILE);
+    const temp = join(anchorPath, `.${ROOT_AUTHORITY_MARKER_FILE}.${process.pid}-${randomUUID()}`);
+    writeFileSync(temp, `${JSON.stringify(record)}\n`, { mode: 0o600, flag: "wx" });
+    try {
+        renameSync(temp, markerPath);
+    }
+    catch (error) {
+        rmSync(temp, { force: true });
+        throw error;
+    }
+}
+/** Migration sentinel that atomically replaces the owned flat owner record.
+ * It parses as NO lease owner anywhere (no pid/token), so from the instant it
+ * lands, pre-fix AND fixed claimants alike fail closed on the flat address;
+ * only this module recognizes it and completes the interrupted migration. */
+const MIGRATION_SENTINEL = { rootAuthority: "migrating" };
+function isMigrationSentinel(anchorPath) {
+    try {
+        const value = JSON.parse(readFileSync(join(anchorPath, "owner.json"), "utf8"));
+        return value?.rootAuthority === MIGRATION_SENTINEL.rootAuthority;
+    }
+    catch {
+        return false;
+    }
+}
+/** Publish the marker over an already-neutralized generation, then retire the
+ * sentinel. Every intermediate state keeps the address occupied and opaque. */
+function completeBarrierInstallation(anchorPath) {
+    writeRootAuthorityRecord(anchorPath, {
+        schemaVersion: ROOT_AUTHORITY_SCHEMA_VERSION,
+        epoch: ROOT_AUTHORITY_EPOCH,
+        state: "vacant",
+    });
+    rmSync(join(anchorPath, "owner.json"), { force: true });
+}
+/** In-place preservation name for a stale flat owner record (C4). The name
+ * never parses as the owner record, marks a migration as begun for crash
+ * completion, and keeps the dead owner's bytes as evidence (authority
+ * artifacts are never deleted). */
+function staleFlatOwnerPreservationName(owner) {
+    const digest = createHash("sha256")
+        .update(String(owner.pid))
+        .update("\0")
+        .update(owner.token)
+        .digest("hex");
+    return `owner.stale-${owner.pid}-${digest}.json`;
+}
+function hasStaleFlatOwnerPreservation(anchorPath) {
+    try {
+        return readdirSync(anchorPath).some((name) => name.startsWith("owner.stale-") && name.endsWith(".json"));
+    }
+    catch {
+        return false;
+    }
+}
+/** Atomically install the migration sentinel as owner.json (temp + rename). */
+function installMigrationSentinel(anchorPath, fs) {
+    const temp = join(anchorPath, `.owner.json.${process.pid}-${randomUUID()}`);
+    fs.writeOwner(temp, `${JSON.stringify(MIGRATION_SENTINEL)}\n`);
+    fs.rename(temp, join(anchorPath, "owner.json"));
+}
+/**
+ * C4: convert a PROVEN-STALE flat legacy generation into the barrier IN
+ * PLACE, before any claim. The shared lease machinery's stale quarantine
+ * renames the WHOLE directory to the tombstone and recreates it — an absence
+ * window a newly arriving legacy claimant wins, beyond D3's accepted
+ * already-running limitation. On this migration path the directory is never
+ * absent and owner.json is never a parseable dead owner after our first
+ * mutation:
+ *   1. atomically rename owner.json to the in-dir stale-owner preservation
+ *      file (a legacy claimant fails closed on the missing owner record and
+ *      never writes one into an existing directory);
+ *   2. atomically install the migration sentinel as owner.json;
+ *   3. publish the marker and retire the sentinel.
+ * A crash between 1 and 2 leaves {preservation file, no owner.json} — a
+ * state only this module produces — and the next fixed candidate completes
+ * the installation deterministically; a crash between 2 and 3 is the
+ * existing sentinel-completion path. Nested-slot (#159) semantics are
+ * untouched: this runs only on the barrier-less flat address.
+ */
+function migrateStaleFlatGenerationInPlace(anchorPath, canonical, deps) {
+    const status = inspectDaemonWriterLease(canonical, deps);
+    if (status.path !== anchorPath)
+        return; // a barrier already resolved the nested slot
+    const fs = resolveWriterLeaseFilesystem(deps);
+    try {
+        if (status.status === "owned" && status.capability.status === "proven_stale") {
+            fs.rename(join(anchorPath, "owner.json"), join(anchorPath, staleFlatOwnerPreservationName(status.owner)));
+            installMigrationSentinel(anchorPath, fs);
+            completeBarrierInstallation(anchorPath);
+            return;
+        }
+        if (status.status === "unknown" &&
+            status.reason === "owner_missing" &&
+            hasStaleFlatOwnerPreservation(anchorPath)) {
+            // A previous migration crashed after preserving the stale owner.
+            installMigrationSentinel(anchorPath, fs);
+            completeBarrierInstallation(anchorPath);
+        }
+    }
+    catch (error) {
+        if (error?.code === "ENOENT") {
+            // A concurrent fixed contender is migrating the same generation; the
+            // claim below arbitrates through the shared single-writer machinery.
+            return;
+        }
+        throw rootAuthorityRefusal("root_authority_unreadable", `root authority barrier could not be installed over the stale flat generation at ${anchorPath}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Stage-1 startup admission: validate/install the permanent barrier, apply
+ * the epoch + floor refusals, and claim single-writer authority for this
+ * root. On a barrier-less root the flat legacy address is claimed through
+ * the shared lease machinery first (live owners refuse, proven-stale owners
+ * are quarantined), then the owned generation becomes the barrier in place:
+ * owner record atomically swapped for the migration sentinel, marker
+ * published, sentinel retired, claim reacquired in the nested slot.
+ */
+export function acquireRootAuthority(input) {
+    // C9b: a candidate that cannot be ORDERED against serving floors must not
+    // serve — even on a fresh floorless root, where it would otherwise be
+    // admitted and then leave the root floorless forever.
+    if (!isRuntimeSemver(input.version)) {
+        throw rootAuthorityRefusal("root_authority_candidate_invalid", `candidate version '${input.version}' is not an x.y.z semantic version; refusing to serve this data root`);
+    }
+    const canonical = input.canonicalSocketPath ?? canonicalDefaultSocketPath();
+    const anchorPath = writerLeaseAnchorPath(canonical);
+    const effectiveDeps = {
+        identity: input.identity,
+        ...(input.deps ?? {}),
+    };
+    const acquireClaim = (socketPath) => acquireDaemonWriterLease(socketPath, { identity: input.identity }, input.deps ?? {});
+    const before = readRootAuthority(anchorPath);
+    if (before.status === "invalid") {
+        throw rootAuthorityRefusal("root_authority_unreadable", `root authority barrier at ${before.markerPath} is unusable (${before.reason}); refusing to serve this data root`);
+    }
+    let record = null;
+    if (before.status === "valid") {
+        assertRootAuthorityAdmits(before.record, input.version);
+        record = before.record;
+    }
+    else if (isMigrationSentinel(anchorPath)) {
+        // A previous fixed candidate crashed between neutralizing the owner and
+        // publishing the marker. The address stayed opaque throughout; finish the
+        // interrupted installation deterministically.
+        completeBarrierInstallation(anchorPath);
+    }
+    else {
+        // C4: a PROVEN-STALE flat generation migrates in place BEFORE any claim,
+        // so the shared quarantine's rename-away/recreate absence window never
+        // opens on the legacy-visible address.
+        migrateStaleFlatGenerationInPlace(anchorPath, canonical, effectiveDeps);
+    }
+    // Claim the canonical root address. With a barrier installed the lease
+    // machinery resolves the nested active slot; without one it wins (or
+    // refuses with the shared typed errors) the flat legacy address.
+    let rootClaim = acquireClaim(canonical);
+    if (rootClaim.path === anchorPath) {
+        // First migration (D1/D3): we own the FLAT generation with a live owner
+        // record. Convert it in place — the directory never disappears and its
+        // owner record is either this live pid or the unparseable sentinel, so a
+        // pre-fix claimant fails closed at every instant.
+        try {
+            const temp = join(anchorPath, `.owner.json.${process.pid}-${randomUUID()}`);
+            writeFileSync(temp, `${JSON.stringify(MIGRATION_SENTINEL)}\n`, { mode: 0o600, flag: "wx" });
+            renameSync(temp, join(anchorPath, "owner.json"));
+            completeBarrierInstallation(anchorPath);
+        }
+        catch (error) {
+            throw rootAuthorityRefusal("root_authority_unreadable", `root authority barrier could not be installed at ${anchorPath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        rootClaim = acquireClaim(canonical);
+    }
+    if (record === null) {
+        const installed = readRootAuthority(anchorPath);
+        if (installed.status !== "valid") {
+            rootClaim.release();
+            throw rootAuthorityRefusal("root_authority_unreadable", `root authority barrier at ${anchorPath} did not settle after installation`);
+        }
+        try {
+            assertRootAuthorityAdmits(installed.record, input.version);
+        }
+        catch (error) {
+            rootClaim.release();
+            throw error;
+        }
+        record = installed.record;
+    }
+    // D4: a custom socket spelling still serves under the canonical root
+    // authority; its own socket-adjacent lease is claimed in addition.
+    const socketLease = input.socketPath === canonical ? null : acquireClaim(input.socketPath);
+    const lease = socketLease ?? rootClaim;
+    let released = false;
+    return {
+        lease,
+        record,
+        anchorPath,
+        advanceFloor: () => {
+            // C9a generation fence: only the LIVE writer of the root address may
+            // promote the floor. A released grant, or one superseded by a newer
+            // generation, refuses instead of clobbering the successor's authority.
+            if (released) {
+                throw rootAuthorityRefusal("root_authority_grant_stale", "root authority grant was released; refusing to advance the serving floor");
+            }
+            // C9a: missing/corrupt current state is a typed refusal, never a
+            // silent rewrite — the barrier record is authority evidence. Checked
+            // BEFORE the lease fence: a vanished marker also breaks the nested
+            // address resolution, and the honest cause is the marker itself.
+            const current = readRootAuthority(anchorPath);
+            if (current.status !== "valid") {
+                throw rootAuthorityRefusal("root_authority_unreadable", current.status === "absent"
+                    ? `root authority marker at ${current.markerPath} disappeared; refusing to recreate it during floor advancement`
+                    : `root authority marker at ${current.markerPath} is unusable (${current.reason}); refusing to overwrite it during floor advancement`);
+            }
+            const claim = inspectDaemonWriterLease(canonical, effectiveDeps);
+            if (claim.status !== "owned" ||
+                claim.path !== rootClaim.path ||
+                claim.owner.pid !== rootClaim.owner.pid ||
+                claim.owner.token !== rootClaim.owner.token) {
+                throw rootAuthorityRefusal("root_authority_grant_stale", `root authority grant is no longer the live writer of ${rootClaim.path}; refusing to advance the serving floor`);
+            }
+            // Monotonic floor: input.version is a proven semver (C9b admission).
+            const floor = current.record.floor !== undefined &&
+                compareRuntimeSemver(current.record.floor, input.version) >= 0
+                ? current.record.floor
+                : input.version;
+            const next = {
+                schemaVersion: ROOT_AUTHORITY_SCHEMA_VERSION,
+                epoch: ROOT_AUTHORITY_EPOCH,
+                state: "served",
+                floor,
+            };
+            writeRootAuthorityRecord(anchorPath, next);
+            return next;
+        },
+        release: () => {
+            if (released)
+                return;
+            released = true;
+            socketLease?.release();
+            rootClaim.release();
+        },
+    };
+}
+//# sourceMappingURL=root-authority.js.map

package/dist/root-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-authority.js","sourceRoot":"","sources":["../src/root-authority.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,0BAA0B,GAK3B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C;gFACgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAmBtC,SAAS,oBAAoB,CAC3B,IAA8B,EAC9B,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAClE,CAAC;AAOD,SAAS,wBAAwB,CAAC,GAAW;IAC3C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,aAAa,KAAK,6BAA6B,EAAE,CAAC;QAC3D,OAAO,+BAA+B,6BAA6B,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAK,MAAM,CAAC,KAAgB,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,qCAAqC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,aAAa,EAAE,6BAA6B;QAC5C,KAAK,EAAE,MAAM,CAAC,KAAe;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED;;;8CAG8C;AAC9C,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QACnF,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBAC1C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;YACzF,CAAC;QACH,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CAAC,MAA2B,EAAE,OAAe;IACpF,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;QAC1C,MAAM,oBAAoB,CACxB,kCAAkC,EAClC,MAAM,CAAC,KAAK,GAAG,oBAAoB;YACjC,CAAC,CAAC,wBAAwB,MAAM,CAAC,KAAK,wCAAwC,oBAAoB,EAAE;YACpG,CAAC,CAAC,wBAAwB,MAAM,CAAC,KAAK,6CAA6C,oBAAoB,EAAE,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO;IACvC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,oBAAoB,CACxB,iCAAiC,EACjC,sBAAsB,OAAO,wDAAwD,MAAM,CAAC,KAAK,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,IAAI,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,oBAAoB,CACxB,iCAAiC,EACjC,qBAAqB,OAAO,sCAAsC,MAAM,CAAC,KAAK,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,wBAAwB,CAAC,UAAkB,EAAE,MAA2B;IAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,0BAA0B,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/F,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA0BD;;;6EAG6E;AAC7E,MAAM,kBAAkB,GAAG,EAAE,aAAa,EAAE,WAAW,EAAW,CAAC;AAEnE,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAE5E,CAAC;QACF,OAAO,KAAK,EAAE,aAAa,KAAK,kBAAkB,CAAC,aAAa,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;+EAC+E;AAC/E,SAAS,2BAA2B,CAAC,UAAkB;IACrD,wBAAwB,CAAC,UAAU,EAAE;QACnC,aAAa,EAAE,6BAA6B;QAC5C,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;mCAGmC;AACnC,SAAS,8BAA8B,CAAC,KAAuB;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;SACnB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,eAAe,KAAK,CAAC,GAAG,IAAI,MAAM,OAAO,CAAC;AACnD,CAAC;AAED,SAAS,6BAA6B,CAAC,UAAkB;IACvD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,wBAAwB,CAAC,UAAkB,EAAE,EAA+B;IACnF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5E,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC/D,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,iCAAiC,CACxC,UAAkB,EAClB,SAAiB,EACjB,IAAmC;IAEnC,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,6CAA6C;IACrF,MAAM,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YAC7E,EAAE,CAAC,MAAM,CACP,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAC9B,IAAI,CAAC,UAAU,EAAE,8BAA8B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC/D,CAAC;YACF,wBAAwB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzC,2BAA2B,CAAC,UAAU,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;YAC3B,MAAM,CAAC,MAAM,KAAK,eAAe;YACjC,6BAA6B,CAAC,UAAU,CAAC,EACzC,CAAC;YACD,iEAAiE;YACjE,wBAAwB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzC,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,qEAAqE;YACrE,qEAAqE;YACrE,OAAO;QACT,CAAC;QACD,MAAM,oBAAoB,CACxB,2BAA2B,EAC3B,mFAAmF,UAAU,KAC3F,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,0EAA0E;IAC1E,sEAAsE;IACtE,sDAAsD;IACtD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,oBAAoB,CACxB,kCAAkC,EAClC,sBAAsB,KAAK,CAAC,OAAO,sEAAsE,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,mBAAmB,IAAI,0BAA0B,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,aAAa,GAAkC;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;KACtB,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAqB,EAAE,CAC7D,wBAAwB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,oBAAoB,CACxB,2BAA2B,EAC3B,6BAA6B,MAAM,CAAC,UAAU,iBAAiB,MAAM,CAAC,MAAM,qCAAqC,CAClH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAA+B,IAAI,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;SAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,wEAAwE;QACxE,0EAA0E;QAC1E,8CAA8C;QAC9C,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,uEAAuE;QACvE,uCAAuC;QACvC,iCAAiC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC1E,CAAC;IAED,uEAAuE;IACvE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;YAC5E,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;YACjD,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,oBAAoB,CACxB,2BAA2B,EAC3B,oDAAoD,UAAU,KAC5D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACjC,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,oBAAoB,CACxB,2BAA2B,EAC3B,6BAA6B,UAAU,oCAAoC,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,yBAAyB,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,WAAW,IAAI,SAAS,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,KAAK;QACL,MAAM;QACN,UAAU;QACV,YAAY,EAAE,GAAG,EAAE;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,oBAAoB,CACxB,4BAA4B,EAC5B,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC/B,MAAM,oBAAoB,CACxB,2BAA2B,EAC3B,OAAO,CAAC,MAAM,KAAK,QAAQ;oBACzB,CAAC,CAAC,4BAA4B,OAAO,CAAC,UAAU,gEAAgE;oBAChH,CAAC,CAAC,4BAA4B,OAAO,CAAC,UAAU,iBAAiB,OAAO,CAAC,MAAM,sDAAsD,CACxI,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACjE,IACE,KAAK,CAAC,MAAM,KAAK,OAAO;gBACxB,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;gBAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG;gBACvC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,EAC3C,CAAC;gBACD,MAAM,oBAAoB,CACxB,4BAA4B,EAC5B,wDAAwD,SAAS,CAAC,IAAI,yCAAyC,CAChH,CAAC;YACJ,CAAC;YACD,qEAAqE;YACrE,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;gBAClC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC5D,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACpB,MAAM,IAAI,GAAwB;gBAChC,aAAa,EAAE,6BAA6B;gBAC5C,KAAK,EAAE,oBAAoB;gBAC3B,KAAK,EAAE,QAAQ;gBACf,KAAK;aACN,CAAC;YACF,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,EAAE,OAAO,EAAE,CAAC;YACvB,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/rpc-followers.d.ts

@@ -0,0 +1,17 @@
+import { type Socket } from "node:net";
+/**
+ * Lifecycle owner for local RPC follower sockets. A disconnected follower is
+ * dropped instead of crashing the daemon: readline re-emits asynchronous
+ * socket write failures (such as EPIPE) on its Interface, so the Interface
+ * and the socket share one cleanup, and sends skip sockets that can no
+ * longer receive.
+ */
+export declare class RpcFollowers {
+    private readonly sockets;
+    attach(sock: Socket, onLine: (line: string) => void): void;
+    send(sock: Socket, obj: unknown): void;
+    /** Destroy every follower so server.close() cannot hang on live sockets. */
+    destroyAll(): void;
+    private drop;
+}
+//# sourceMappingURL=rpc-followers.d.ts.map

package/dist/rpc-followers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-followers.d.ts","sourceRoot":"","sources":["../src/rpc-followers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAGvC;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAWzD;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAUrC;IAED,4EAA4E;IAC5E,UAAU,IAAI,IAAI,CAEjB;IAED,OAAO,CAAC,IAAI;CAIb"}

package/dist/rpc-followers.js

@@ -0,0 +1,46 @@
+import { createInterface } from "node:readline";
+/**
+ * Lifecycle owner for local RPC follower sockets. A disconnected follower is
+ * dropped instead of crashing the daemon: readline re-emits asynchronous
+ * socket write failures (such as EPIPE) on its Interface, so the Interface
+ * and the socket share one cleanup, and sends skip sockets that can no
+ * longer receive.
+ */
+export class RpcFollowers {
+    sockets = new Set();
+    attach(sock, onLine) {
+        this.sockets.add(sock);
+        const rl = createInterface({ input: sock });
+        const cleanup = () => {
+            rl.close();
+            this.drop(sock);
+        };
+        rl.on("line", onLine);
+        rl.on("error", cleanup);
+        sock.on("error", cleanup);
+        sock.on("close", cleanup);
+    }
+    send(sock, obj) {
+        if (sock.destroyed || !sock.writable) {
+            this.drop(sock);
+            return;
+        }
+        try {
+            sock.write(JSON.stringify(obj) + "\n");
+        }
+        catch {
+            this.drop(sock);
+        }
+    }
+    /** Destroy every follower so server.close() cannot hang on live sockets. */
+    destroyAll() {
+        for (const socket of this.sockets)
+            socket.destroy();
+    }
+    drop(sock) {
+        this.sockets.delete(sock);
+        if (!sock.destroyed)
+            sock.destroy();
+    }
+}
+//# sourceMappingURL=rpc-followers.js.map

package/dist/rpc-followers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-followers.js","sourceRoot":"","sources":["../src/rpc-followers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,MAAM,CAAC,IAAY,EAAE,MAA8B;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,GAAY;QAC7B,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,UAAU;QACR,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/server.d.ts

@@ -1,6 +1,7 @@
 import { type CommandAuthority } from "./command-authority.js";
 import { type DelegationAdmissionAuthority } from "./delegation-admission.js";
 import { JOB_STATES, jobStateFromResult, type JobRecord } from "./job-record.js";
+import { type DaemonServingModeSnapshot } from "./serving-admission.js";
 import { socketAlive } from "./socket-probe.js";
 import { type RuntimeReplacementAuthority } from "./daemon-shutdown-rpc.js";
 import { type TurnEnqueueProblem as TurnEnqueueProblemValue } from "@claudexor/schema";
@@ -37,6 +38,8 @@ export interface DaemonOptions extends RuntimeReplacementAuthority {
     onTurnEnqueueFailed?: (turnId: string, problem: TurnEnqueueProblemValue) => void;
     onShutdownRequested?: () => Promise<void>;
     onRuntimeReplacementRequested?: () => Promise<void>;
+    /** Issue #165 D5 admission snapshot; absent embedders always serve normal. */
+    servingMode?: DaemonServingModeSnapshot;
     /** Test-only barriers around command authority acquisition. */
     startupBarrier?: (barrier: "before_registry_load" | "after_registry_load") => void | Promise<void>;
 }
@@ -44,7 +47,7 @@ export interface DaemonOptions extends RuntimeReplacementAuthority {
 export declare class DaemonServer {
     private readonly opts;
     private server?;
-    private readonly sockets;
+    private readonly followers;
     private readonly queue;
     private readonly cancelled;
     private readonly controllers;

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAYA,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,UAAU,EACV,kBAAkB,EAIlB,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,kBAAkB,IAAI,uBAAuB,EACnD,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC/E;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE9E,MAAM,WAAW,aAAc,SAAQ,2BAA2B;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;0BAEsB;IACtB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D;;;;wEAIoE;IACpE,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACjF,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,6BAA6B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,+DAA+D;IAC/D,cAAc,CAAC,EAAE,CACf,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,KACpD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAKD,8EAA8E;AAC9E,qBAAa,YAAY;IAkBX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAjBjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiB;IAC9C,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAC,CAAgB;IACrC,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAE7B;IAEH,YAA6B,IAAI,EAAE,aAAa,EAAI;IAE9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAgB3B;YAEa,SAAS;IA2CvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAIpB;YAEa,QAAQ;IAwDtB,qDAAqD;IACrD,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAE/B;IAED,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,IAAI;YAQE,MAAM;YAgCN,QAAQ;IAoGtB,OAAO,KAAK,aAAa,GAExB;IAED;+EAC2E;IAC3E,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAYtD;IAED,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,aAAa;IAkBrB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,UAAU;IAKlB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAAK;YAqDC,MAAM;CA2ErB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAUA,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAIL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,UAAU,EACV,kBAAkB,EAIlB,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,kBAAkB,IAAI,uBAAuB,EACnD,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC/E;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE9E,MAAM,WAAW,aAAc,SAAQ,2BAA2B;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;0BAEsB;IACtB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3D;;;;wEAIoE;IACpE,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACjF,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,6BAA6B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,8EAA8E;IAC9E,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,+DAA+D;IAC/D,cAAc,CAAC,EAAE,CACf,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,KACpD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAKD,8EAA8E;AAC9E,qBAAa,YAAY;IAkBX,OAAO,CAAC,QAAQ,CAAC,IAAI;IAjBjC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAiB;IAC9C,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAC,CAAgB;IACrC,OAAO,CAAC,WAAW,CAAC,CAAgB;IACpC,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAE7B;IAEH,YAA6B,IAAI,EAAE,aAAa,EAAI;IAE9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAgB3B;YAEa,SAAS;IA2BvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAIpB;YAEa,QAAQ;IAwDtB,qDAAqD;IACrD,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAE/B;IAED,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,IAAI;YAIE,MAAM;YAsCN,QAAQ;IA2GtB,OAAO,KAAK,aAAa,GAExB;IAED;+EAC2E;IAC3E,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,CAYtD;IAED,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,aAAa;IAkBrB;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,UAAU;IAKlB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAAK;YAqDC,MAAM;CA2ErB"}