@cleocode/core 2026.6.18 → 2026.7.1

package/dist/resources/governor.js

@@ -0,0 +1,377 @@
+/**
+ * ResourceGovernor — Never-OOM class-based admission (T11999, Epic T11992).
+ *
+ * Admits resource-intensive work through priority classes whose slot budgets
+ * are computed at acquire time from host memory + memory-pressure (PSI). A
+ * denial returns a structured, retryable {@link ResourceDeferral} — never a
+ * silent drop, never a crash. Existing grants are NEVER revoked.
+ *
+ * Three modes (verbatim writer-lease shape, `writer-lease.ts` `resolveLeaseMode`):
+ * - `supervisor` — defer to the Rust `cleo-supervisor` `resource_admit` verb.
+ *   Demotes to `local` (log-once) until the IPC client is wired — a
+ *   dead/absent arbiter must never deadlock work.
+ * - `local` — DEFAULT, daemon-off. Per-class slot directories under
+ *   `getCleoHome()/locks/resource-<class>/` arbitrated by `proper-lockfile`
+ *   (crash-stale auto-release ⇒ genuinely cross-process without a daemon),
+ *   plus a point-sample of the {@link ResourceMonitor} taken INSIDE acquire.
+ *   Generalizes the tool-semaphore engine (`tool-semaphore.ts`).
+ * - `off` — pure pass-through.
+ *
+ * `interactive-cli` is NEVER gated; `full-build` is pinned to one machine-wide
+ * slot regardless of pressure.
+ *
+ * @task T11999
+ * @epic T11992
+ * @adr resource-governor-never-oom-architecture §3.4
+ */
+import { existsSync, mkdirSync, readdirSync, writeFileSync } from 'node:fs';
+import { availableParallelism, totalmem } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_RESOURCE_RETRY_AFTER_MS, } from '@cleocode/contracts';
+import lockfile from 'proper-lockfile';
+import { getLogger } from '../logger.js';
+import { getCleoHome } from '../paths.js';
+import { ResourceMonitor } from './monitor.js';
+import { resolveSupervisorSocketPath, sendResourceAdmit, sendResourceRelease, } from './supervisor-admit.js';
+let _log = null;
+function log() {
+    if (_log === null)
+        _log = getLogger('resource-governor');
+    return _log;
+}
+// ---------------------------------------------------------------------------
+// Mode resolution (mirrors writer-lease.ts:192)
+// ---------------------------------------------------------------------------
+let _cachedMode = null;
+let _supervisorDegradeLogged = false;
+/**
+ * Resolve the governor mode from `CLEO_RESOURCES_MODE`, once per process.
+ * Unknown / unset values resolve to `'local'` — the production-safe default
+ * while the supervisor daemon is disabled.
+ *
+ * @task T11999
+ */
+export function resolveGovernorMode() {
+    if (_cachedMode !== null)
+        return _cachedMode;
+    const raw = process.env.CLEO_RESOURCES_MODE;
+    _cachedMode = raw === 'supervisor' || raw === 'local' || raw === 'off' ? raw : 'local';
+    return _cachedMode;
+}
+/**
+ * Log (once) that `supervisor` mode degraded to the local slot engine because
+ * the arbiter was unreachable — a dead/absent supervisor must never deadlock
+ * work (T12001). Mirrors the writer-lease degrade-once behaviour.
+ */
+function logSupervisorDegradeOnce(reason) {
+    if (_supervisorDegradeLogged)
+        return;
+    _supervisorDegradeLogged = true;
+    log().info(`CLEO_RESOURCES_MODE=supervisor but the arbiter is unreachable (${reason}); ` +
+        'degrading to local-mode admission for the process lifetime.');
+}
+/**
+ * Reset cached process-global state (mode + degrade flag). Tests only.
+ * @internal
+ */
+export function _resetGovernorStateForTest() {
+    _cachedMode = null;
+    _supervisorDegradeLogged = false;
+}
+const MB = 1024 * 1024;
+/** Extract `some avg10` (0–100) from a sample; 0 when unavailable. */
+function someAvg10(sample) {
+    const some = sample.globalPressure?.some ?? sample.slicePressure?.some;
+    return some?.avg10 ?? 0;
+}
+/**
+ * Compute the slot budget for a class given a point-sample.
+ *
+ * - `interactive-cli` → `Infinity` (never gated).
+ * - `full-build` → `1` machine-wide, pressure-independent.
+ * - `agent-session` → `clamp(1, ⌊(MemAvailable − headroom)/estRamMb⌋, cpus−2)`.
+ * - `test-run` / `scoped-build` → `max(1, ⌊cpus/4⌋)`, ×0.5 when `some>hold`,
+ *   floored to 1 when `some>floor`.
+ * - `llm-call` → `max(1, cpus−2)` (primarily gated by the llm-queue elsewhere).
+ * - `db-heavy` → `1`, deferred (→0) under `backoff`-level pressure.
+ * - `background-autonomous` → `1` only when pressure is `ok`, else `0`.
+ *
+ * @adr resource-governor-never-oom-architecture §3.4 (budgets)
+ */
+export function computeClassBudget(cls, sample, opts = {}) {
+    if (cls === 'interactive-cli')
+        return Number.POSITIVE_INFINITY;
+    const cpus = Math.max(1, opts.cpuCount ?? availableParallelism());
+    const totalBytes = opts.totalMemBytes ?? totalmem();
+    const headroomBytes = (opts.headroomMb ?? 2048) * MB;
+    const hold = opts.holdSomeAvg10 ?? 10;
+    const floor = opts.floorSomeAvg10 ?? 25;
+    const some = someAvg10(sample);
+    // MemAvailable can be null on non-Linux / read error — fall back to total.
+    const availBytes = sample.memAvailableBytes ?? totalBytes;
+    const fullStall = sample.globalPressure?.full?.avg10 ?? sample.slicePressure?.full?.avg10 ?? 0;
+    const backoff = some > floor || fullStall > 10;
+    switch (cls) {
+        case 'full-build':
+            return 1;
+        case 'agent-session': {
+            const estRamBytes = (opts.agentEstRamMb ?? 4096) * MB;
+            const byMem = Math.floor((availBytes - headroomBytes) / estRamBytes);
+            return clamp(1, byMem, Math.max(1, cpus - 2));
+        }
+        case 'llm-call':
+            return Math.max(1, cpus - 2);
+        case 'test-run':
+        case 'scoped-build': {
+            const base = Math.max(1, Math.floor(cpus / 4));
+            if (some > floor)
+                return 1;
+            if (some > hold)
+                return Math.max(1, Math.floor(base / 2));
+            return base;
+        }
+        case 'db-heavy':
+            return backoff ? 0 : 1;
+        case 'background-autonomous':
+            return some > hold || fullStall > 5 ? 0 : 1;
+        default:
+            return 1;
+    }
+}
+function clamp(lo, v, hi) {
+    return Math.max(lo, Math.min(v, hi));
+}
+// ---------------------------------------------------------------------------
+// Local-mode slot engine (generalizes tool-semaphore.ts)
+// ---------------------------------------------------------------------------
+/**
+ * Machine-wide slot directory for a class, under
+ * `getCleoHome()/locks/resource-<class>/`. Shared across projects, worktrees,
+ * and PIDs — exactly like the tool semaphore.
+ */
+export function governorSlotDir(cls) {
+    return join(getCleoHome(), 'locks', `resource-${cls}`);
+}
+function ensureSlotFiles(dir, count) {
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const paths = [];
+    for (let i = 0; i < count; i++) {
+        const p = join(dir, `slot-${i}.lock`);
+        if (!existsSync(p))
+            writeFileSync(p, '', { flag: 'a' });
+        paths.push(p);
+    }
+    return paths;
+}
+const STALE_MS = 600_000;
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+function passThroughGrant(cls) {
+    return {
+        deferred: false,
+        class: cls,
+        slot: -1,
+        acquiredAtMs: Date.now(),
+        release: async () => { },
+    };
+}
+function deferral(cls, reason, retryAfterMs) {
+    return { deferred: true, class: cls, retryAfterMs, reason };
+}
+let _supervisorHolderSeq = 0;
+/**
+ * A process-unique holder id for a supervisor `resource_admit`, so each acquire
+ * is a distinct slot (matched 1:1 by its `release`). `pid` scopes the holder to
+ * this process; the sequence distinguishes concurrent holds of the same class.
+ */
+function supervisorHolderId(cls) {
+    _supervisorHolderSeq += 1;
+    return `${process.pid}:${cls}:${_supervisorHolderSeq}`;
+}
+/**
+ * The Never-OOM admission gate. Stateless wrapper over the mode-resolved
+ * backend (local slot dirs today; supervisor IPC when wired). Construct once
+ * and share, or use the module-level {@link governor} singleton.
+ */
+export class ResourceGovernor {
+    /**
+     * Acquire one slot of `cls`. Returns a {@link ResourceGrant} on success or a
+     * {@link ResourceDeferral} on denial. Never throws for admission control;
+     * only genuinely unexpected I/O errors propagate.
+     */
+    async acquire(cls, opts = {}) {
+        // Ungated fast paths: off mode + interactive-cli are pure pass-through.
+        const mode = resolveGovernorMode();
+        if (mode === 'off' || cls === 'interactive-cli') {
+            return passThroughGrant(cls);
+        }
+        const sample = opts.sample ?? (await (opts.monitor ?? new ResourceMonitor()).sample());
+        const budget = computeClassBudget(cls, sample, opts);
+        if (!Number.isFinite(budget))
+            return passThroughGrant(cls);
+        if (budget <= 0) {
+            return deferral(cls, `class '${cls}' budget is 0 under current pressure (some avg10=${someAvg10(sample).toFixed(1)})`, DEFAULT_RESOURCE_RETRY_AFTER_MS);
+        }
+        // Supervisor mode (T12001): route the count enforcement through the central
+        // Rust arbiter so heavy ops are bounded machine-wide. The client computes the
+        // budget (above) from its local pressure sample; the supervisor enforces the
+        // in-flight COUNT. An unreachable supervisor degrades to the local slot
+        // engine below — never a deadlock.
+        if (mode === 'supervisor') {
+            const viaSupervisor = await this.acquireViaSupervisor(cls, Math.floor(budget));
+            if (viaSupervisor !== null)
+                return viaSupervisor;
+        }
+        const dir = governorSlotDir(cls);
+        const slots = ensureSlotFiles(dir, budget);
+        const blocking = opts.blocking ?? true;
+        const timeoutMs = opts.timeoutMs ?? 3_600_000;
+        const pollMs = opts.pollMs ?? 200;
+        const startedAt = Date.now();
+        do {
+            // Re-shuffle each pass so concurrent acquirers don't collide on slot 0.
+            const order = shuffledIndices(slots.length);
+            for (const idx of order) {
+                const path = slots[idx];
+                if (!path)
+                    continue;
+                try {
+                    const release = await lockfile.lock(path, {
+                        retries: 0,
+                        stale: STALE_MS,
+                        realpath: false,
+                    });
+                    let released = false;
+                    return {
+                        deferred: false,
+                        class: cls,
+                        slot: idx,
+                        acquiredAtMs: Date.now(),
+                        release: async () => {
+                            if (released)
+                                return;
+                            released = true;
+                            try {
+                                await release();
+                            }
+                            catch {
+                                // Already released (e.g. stale recovery) — post-condition holds.
+                            }
+                        },
+                    };
+                }
+                catch {
+                    // slot busy — try next
+                }
+            }
+            if (!blocking)
+                break;
+            await sleep(pollMs);
+        } while (Date.now() - startedAt < timeoutMs);
+        return deferral(cls, `class '${cls}' is at capacity (${budget} slot(s)); ` +
+            (blocking ? `timed out after ${timeoutMs}ms` : 'no slot free'), Math.min(pollMs * 4, DEFAULT_RESOURCE_RETRY_AFTER_MS));
+    }
+    /**
+     * Route an admission through the supervisor's central `resource_admit` verb.
+     * Returns a grant (whose `release` calls `resource_release`) or a deferral, or
+     * `null` when the supervisor is unreachable so the caller degrades to the
+     * local slot engine. Never throws — a dead arbiter never deadlocks work.
+     *
+     * @task T12001
+     */
+    async acquireViaSupervisor(cls, budget) {
+        const socketPath = resolveSupervisorSocketPath();
+        const holderId = supervisorHolderId(cls);
+        const reply = await sendResourceAdmit(socketPath, cls, holderId, budget);
+        if ('unavailable' in reply) {
+            logSupervisorDegradeOnce(reply.reason);
+            return null;
+        }
+        if (reply.disposition === 'deferred') {
+            return deferral(cls, `class '${cls}' deferred by supervisor (budget ${budget})`, reply.retry_after_ms || DEFAULT_RESOURCE_RETRY_AFTER_MS);
+        }
+        let released = false;
+        return {
+            deferred: false,
+            class: cls,
+            slot: 0,
+            acquiredAtMs: Date.now(),
+            release: async () => {
+                if (released)
+                    return;
+                released = true;
+                await sendResourceRelease(socketPath, cls, holderId).catch(() => {
+                    // Best-effort: the arbiter reclaims the slot on process death anyway.
+                });
+            },
+        };
+    }
+    /** Non-blocking single-pass acquire (admission semantics). */
+    async tryAcquire(cls, opts = {}) {
+        return this.acquire(cls, { ...opts, blocking: false });
+    }
+    /**
+     * Currently-grantable slot count for `cls` = budget − held. Held is the count
+     * of slot files currently locked. `Infinity` for ungated classes.
+     */
+    async available(cls, opts = {}) {
+        if (resolveGovernorMode() === 'off' || cls === 'interactive-cli') {
+            return Number.POSITIVE_INFINITY;
+        }
+        const sample = opts.sample ?? (await (opts.monitor ?? new ResourceMonitor()).sample());
+        const budget = computeClassBudget(cls, sample, opts);
+        if (!Number.isFinite(budget))
+            return Number.POSITIVE_INFINITY;
+        if (budget <= 0)
+            return 0;
+        const held = await countHeldSlots(cls, budget);
+        return Math.max(0, budget - held);
+    }
+}
+function shuffledIndices(n) {
+    const order = Array.from({ length: n }, (_, i) => i);
+    for (let i = order.length - 1; i > 0; i--) {
+        const j = Math.floor(Math.random() * (i + 1));
+        const a = order[i];
+        const b = order[j];
+        if (a !== undefined && b !== undefined) {
+            order[i] = b;
+            order[j] = a;
+        }
+    }
+    return order;
+}
+/**
+ * Count how many of `budget` slots are currently held, by probing each with a
+ * non-blocking lock. A successful probe-lock is released immediately — it never
+ * holds the slot, so it cannot starve a real acquirer.
+ */
+async function countHeldSlots(cls, budget) {
+    const dir = governorSlotDir(cls);
+    if (!existsSync(dir))
+        return 0;
+    const slots = ensureSlotFiles(dir, budget);
+    let held = 0;
+    for (const path of slots) {
+        try {
+            const release = await lockfile.lock(path, { retries: 0, stale: STALE_MS, realpath: false });
+            await release();
+        }
+        catch {
+            held++;
+        }
+    }
+    return held;
+}
+/** Count of slot files for a class (debug/introspection). */
+export function slotFileCount(cls) {
+    const dir = governorSlotDir(cls);
+    if (!existsSync(dir))
+        return 0;
+    return readdirSync(dir).filter((f) => f.startsWith('slot-') && f.endsWith('.lock')).length;
+}
+/** Process-wide governor singleton. */
+export const governor = new ResourceGovernor();
+//# sourceMappingURL=governor.js.map

package/dist/resources/governor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governor.js","sourceRoot":"","sources":["../../src/resources/governor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,+BAA+B,GAKhC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,IAAI,IAAI,GAAwC,IAAI,CAAC;AACrD,SAAS,GAAG;IACV,IAAI,IAAI,KAAK,IAAI;QAAE,IAAI,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,gDAAgD;AAChD,8EAA8E;AAE9E,IAAI,WAAW,GAAwB,IAAI,CAAC;AAC5C,IAAI,wBAAwB,GAAG,KAAK,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,WAAW,GAAG,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACvF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,MAAc;IAC9C,IAAI,wBAAwB;QAAE,OAAO;IACrC,wBAAwB,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,CAAC,IAAI,CACR,kEAAkE,MAAM,KAAK;QAC3E,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B;IACxC,WAAW,GAAG,IAAI,CAAC;IACnB,wBAAwB,GAAG,KAAK,CAAC;AACnC,CAAC;AAsBD,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvB,sEAAsE;AACtE,SAAS,SAAS,CAAC,MAAsB;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC;IACvE,OAAO,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAkB,EAClB,MAAsB,EACtB,OAAsB,EAAE;IAExB,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAE/D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,IAAI,QAAQ,EAAE,CAAC;IACpD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,IAAI,UAAU,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,KAAK,IAAI,SAAS,GAAG,EAAE,CAAC;IAE/C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC,GAAG,WAAW,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAC/B,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,KAAK;gBAAE,OAAO,CAAC,CAAC;YAC3B,IAAI,IAAI,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,uBAAuB;YAC1B,OAAO,IAAI,GAAG,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,CAAS,EAAE,EAAU;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB;IAChD,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW,EAAE,KAAa;IACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,CAAC,CAAC;QACR,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;QACxB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAkB,EAAE,MAAc,EAAE,YAAoB;IACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAE7B;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,GAAkB;IAC5C,oBAAoB,IAAI,CAAC,CAAC;IAC1B,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;AACzD,CAAC;AAwBD;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAC3B;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAkB,EAAE,OAAuB,EAAE;QACzD,wEAAwE;QACxE,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAChD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;YAChB,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,oDAAoD,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAChG,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,8EAA8E;QAC9E,6EAA6E;QAC7E,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,IAAI,aAAa,KAAK,IAAI;gBAAE,OAAO,aAAa,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,GAAG,CAAC;YACF,wEAAwE;YACxE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;wBACxC,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,KAAK;qBAChB,CAAC,CAAC;oBACH,IAAI,QAAQ,GAAG,KAAK,CAAC;oBACrB,OAAO;wBACL,QAAQ,EAAE,KAAK;wBACf,KAAK,EAAE,GAAG;wBACV,IAAI,EAAE,GAAG;wBACT,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;wBACxB,OAAO,EAAE,KAAK,IAAI,EAAE;4BAClB,IAAI,QAAQ;gCAAE,OAAO;4BACrB,QAAQ,GAAG,IAAI,CAAC;4BAChB,IAAI,CAAC;gCACH,MAAM,OAAO,EAAE,CAAC;4BAClB,CAAC;4BAAC,MAAM,CAAC;gCACP,iEAAiE;4BACnE,CAAC;wBACH,CAAC;qBACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,uBAAuB;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM;YACrB,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE;QAE7C,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,qBAAqB,MAAM,aAAa;YACnD,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAChE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,+BAA+B,CAAC,CACtD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,oBAAoB,CAChC,GAAkB,EAClB,MAAc;QAEd,MAAM,UAAU,GAAG,2BAA2B,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;YAC3B,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACrC,OAAO,QAAQ,CACb,GAAG,EACH,UAAU,GAAG,oCAAoC,MAAM,GAAG,EAC1D,KAAK,CAAC,cAAc,IAAI,+BAA+B,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,CAAC;YACP,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC9D,sEAAsE;gBACxE,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,UAAU,CAAC,GAAkB,EAAE,OAAuB,EAAE;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,GAAkB,EAAE,OAAuB,EAAE;QAC3D,IAAI,mBAAmB,EAAE,KAAK,KAAK,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YACjE,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAC9D,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAkB,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5F,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,GAAkB;IAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC7F,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC"}

package/dist/resources/supervisor-admit.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Supervisor-mode resource admission client (T12001 · Epic T11992).
+ *
+ * The `supervisor`-mode counterpart of the {@link ResourceGovernor}'s local slot
+ * engine. Where local mode arbitrates heavy-op concurrency through cross-process
+ * lockfiles, supervisor mode routes the `resource_admit` / `resource_release`
+ * lease-ipc verbs to the Rust `cleo-supervisor` so a single in-memory counter is
+ * the machine-wide source of truth.
+ *
+ * A dead/absent supervisor must NEVER deadlock work: every send degrades to
+ * `{ unavailable }` on any transport error, and the governor falls back to the
+ * local slot engine. Mirrors the `llm-queue-admit.ts` transport (core cannot
+ * import `@cleocode/runtime` — a cycle — so it speaks the NDJSON codec directly
+ * through the shared `@cleocode/contracts` lease-ipc Zod schemas).
+ *
+ * @task T12001
+ * @epic T11992
+ */
+import { type ResourceAdmitResultResponse, type ResourceReleaseResultResponse } from '@cleocode/contracts';
+/** A transport-unavailable sentinel — the caller degrades to the local engine. */
+export interface SupervisorUnavailable {
+    readonly unavailable: true;
+    readonly reason: string;
+}
+/**
+ * Resolve the supervisor socket path: `$CLEO_SUPERVISOR_SOCKET` overrides,
+ * otherwise `<cleoHome>/cleo-supervisor.sock`.
+ */
+export declare function resolveSupervisorSocketPath(): string;
+/**
+ * Admit (or defer) a heavy op of `cls` for `holderId` against `budget` through
+ * the supervisor's central arbiter. Resolves the `resource_admit_result` reply,
+ * or `{ unavailable }` when the supervisor cannot arbitrate (degrade to local).
+ */
+export declare function sendResourceAdmit(socketPath: string, cls: string, holderId: string, budget: number): Promise<ResourceAdmitResultResponse | SupervisorUnavailable>;
+/**
+ * Release a previously-admitted slot of `cls` for `holderId`. Resolves the
+ * `resource_release_result` reply, or `{ unavailable }` on transport failure
+ * (the slot self-heals via the arbiter's process-death reclaim / stale recovery).
+ */
+export declare function sendResourceRelease(socketPath: string, cls: string, holderId: string): Promise<ResourceReleaseResultResponse | SupervisorUnavailable>;
+//# sourceMappingURL=supervisor-admit.d.ts.map

package/dist/resources/supervisor-admit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-admit.d.ts","sourceRoot":"","sources":["../../src/resources/supervisor-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAKL,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EACnC,MAAM,qBAAqB,CAAC;AAY7B,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,GAAG,qBAAqB,CAAC,CAS9D;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,6BAA6B,GAAG,qBAAqB,CAAC,CAShE"}

package/dist/resources/supervisor-admit.js

@@ -0,0 +1,136 @@
+/**
+ * Supervisor-mode resource admission client (T12001 · Epic T11992).
+ *
+ * The `supervisor`-mode counterpart of the {@link ResourceGovernor}'s local slot
+ * engine. Where local mode arbitrates heavy-op concurrency through cross-process
+ * lockfiles, supervisor mode routes the `resource_admit` / `resource_release`
+ * lease-ipc verbs to the Rust `cleo-supervisor` so a single in-memory counter is
+ * the machine-wide source of truth.
+ *
+ * A dead/absent supervisor must NEVER deadlock work: every send degrades to
+ * `{ unavailable }` on any transport error, and the governor falls back to the
+ * local slot engine. Mirrors the `llm-queue-admit.ts` transport (core cannot
+ * import `@cleocode/runtime` — a cycle — so it speaks the NDJSON codec directly
+ * through the shared `@cleocode/contracts` lease-ipc Zod schemas).
+ *
+ * @task T12001
+ * @epic T11992
+ */
+import { connect } from 'node:net';
+import { join } from 'node:path';
+import { LEASE_IPC_PROTOCOL_VERSION, LeaseIpcRequestEnvelopeSchema, LeaseIpcResponseEnvelopeSchema, } from '@cleocode/contracts';
+import { getCleoHome } from '@cleocode/paths';
+/** The supervisor IPC socket filename — MUST equal `SOCKET_NAME` in `crates/cleo-supervisor/src/paths.rs`. */
+const SUPERVISOR_SOCKET_NAME = 'cleo-supervisor.sock';
+/** Connect timeout (ms). A slow/absent socket degrades fast — never a deadlock. */
+const CONNECT_TIMEOUT_MS = 250;
+/** Per-request read timeout for a result frame (ms). */
+const REQUEST_TIMEOUT_MS = 2_000;
+/**
+ * Resolve the supervisor socket path: `$CLEO_SUPERVISOR_SOCKET` overrides,
+ * otherwise `<cleoHome>/cleo-supervisor.sock`.
+ */
+export function resolveSupervisorSocketPath() {
+    return process.env.CLEO_SUPERVISOR_SOCKET ?? join(getCleoHome(), SUPERVISOR_SOCKET_NAME);
+}
+/**
+ * Admit (or defer) a heavy op of `cls` for `holderId` against `budget` through
+ * the supervisor's central arbiter. Resolves the `resource_admit_result` reply,
+ * or `{ unavailable }` when the supervisor cannot arbitrate (degrade to local).
+ */
+export async function sendResourceAdmit(socketPath, cls, holderId, budget) {
+    const result = await sendLeaseRequest(socketPath, { kind: 'resource_admit', class: cls, holder_id: holderId, budget }, 'resource_admit_result');
+    if ('unavailable' in result)
+        return result;
+    if (result.kind === 'resource_admit_result')
+        return result;
+    return { unavailable: true, reason: `unexpected response kind: ${result.kind}` };
+}
+/**
+ * Release a previously-admitted slot of `cls` for `holderId`. Resolves the
+ * `resource_release_result` reply, or `{ unavailable }` on transport failure
+ * (the slot self-heals via the arbiter's process-death reclaim / stale recovery).
+ */
+export async function sendResourceRelease(socketPath, cls, holderId) {
+    const result = await sendLeaseRequest(socketPath, { kind: 'resource_release', class: cls, holder_id: holderId }, 'resource_release_result');
+    if ('unavailable' in result)
+        return result;
+    if (result.kind === 'resource_release_result')
+        return result;
+    return { unavailable: true, reason: `unexpected response kind: ${result.kind}` };
+}
+/**
+ * One-shot NDJSON lease-ipc round-trip over a fresh Unix socket. Connection per
+ * request (the verbs are stateless); the socket is closed before resolution.
+ * Any transport error resolves to `{ unavailable }` — never throws, never
+ * deadlocks. `expectedKind` is the result `kind` the caller correlates.
+ */
+function sendLeaseRequest(socketPath, request, expectedKind) {
+    return new Promise((resolve) => {
+        const id = `ra-${process.pid}-${request.kind}`;
+        const envelope = LeaseIpcRequestEnvelopeSchema.parse({
+            protocol_version: LEASE_IPC_PROTOCOL_VERSION,
+            id,
+            direction: 'request',
+            request,
+        });
+        const line = `${JSON.stringify(envelope)}\n`;
+        let settled = false;
+        let buffer = '';
+        const socket = connect(socketPath);
+        const done = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.removeAllListeners();
+            socket.destroy();
+            resolve(value);
+        };
+        const degrade = (reason) => done({ unavailable: true, reason });
+        socket.setTimeout(REQUEST_TIMEOUT_MS);
+        const connectTimer = setTimeout(() => degrade('supervisor connect timeout'), CONNECT_TIMEOUT_MS);
+        socket.on('connect', () => {
+            clearTimeout(connectTimer);
+            socket.write(line);
+        });
+        socket.on('timeout', () => degrade('supervisor request timeout'));
+        socket.on('error', (err) => {
+            clearTimeout(connectTimer);
+            degrade(err.message);
+        });
+        socket.on('close', () => {
+            if (!settled)
+                degrade('supervisor closed the connection before responding');
+        });
+        socket.on('data', (chunk) => {
+            buffer += chunk.toString('utf8');
+            const nl = buffer.indexOf('\n');
+            if (nl < 0)
+                return; // wait for a full NDJSON line
+            let json;
+            try {
+                json = JSON.parse(buffer.slice(0, nl));
+            }
+            catch (cause) {
+                degrade(`malformed lease-ipc frame: ${cause instanceof Error ? cause.message : cause}`);
+                return;
+            }
+            const parsed = LeaseIpcResponseEnvelopeSchema.safeParse(json);
+            if (!parsed.success) {
+                degrade(`off-contract lease-ipc response: ${parsed.error.message}`);
+                return;
+            }
+            const { response } = parsed.data;
+            if (response.kind === expectedKind) {
+                done(response);
+                return;
+            }
+            if (response.kind === 'error') {
+                degrade(`${response.code}: ${response.message}`);
+                return;
+            }
+            degrade(`unexpected lease-ipc response kind for ${request.kind}: ${response.kind}`);
+        });
+    });
+}
+//# sourceMappingURL=supervisor-admit.js.map

package/dist/resources/supervisor-admit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-admit.js","sourceRoot":"","sources":["../../src/resources/supervisor-admit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,0BAA0B,EAE1B,6BAA6B,EAC7B,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,8GAA8G;AAC9G,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAEtD,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC;;;GAGG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,GAAW,EACX,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,UAAU,EACV,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EACnE,uBAAuB,CACxB,CAAC;IACF,IAAI,aAAa,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAuB;QAAE,OAAO,MAAM,CAAC;IAC3D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,GAAW,EACX,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,UAAU,EACV,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC7D,yBAAyB,CAC1B,CAAC;IACF,IAAI,aAAa,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB;QAAE,OAAO,MAAM,CAAC;IAC7D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,UAAkB,EAClB,OAAwB,EACxB,YAAiE;IAEjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,KAAK,CAAC;YACnD,gBAAgB,EAAE,0BAA0B;YAC5C,EAAE;YACF,SAAS,EAAE,SAAkB;YAC7B,OAAO;SACR,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,GAAW,OAAO,CAAC,UAAU,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,CACX,KAA0F,EACpF,EAAE;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAE9E,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAC7B,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAC3C,kBAAkB,CACnB,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO,CAAC,8BAA8B;YAClD,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAuE,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,0CAA0C,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}