@cluesmith/codev 3.2.2 → 3.2.4

package/dist/agent-farm/servers/architect-session-holder.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Issue #1224: detect and reclaim live processes that hold an architect's
+ * conversation session id, so an architect launch never bakes a colliding
+ * `claude --resume <id>` into a permanent crash loop.
+ *
+ * Two holder classes were observed after a workspace restart (forensic timeline
+ * on the issue):
+ *   1. OUR OWN superseded shellper for the same architect identity — a remnant
+ *      from before the restart, or a previous crash-looping instance. Its claude
+ *      child dies within seconds of every respawn, so the child is absent most
+ *      of the time; the durable evidence is the *shellper parent's* argv, which
+ *      carries the session id in its JSON config (`"--session-id","<id>"`).
+ *   2. A FOREIGN process — e.g. an interactive `claude` the user started by hand
+ *      on their own tty (holder case in incident 3). This must NEVER be touched:
+ *      it is not ours to kill.
+ *
+ * The policy: reclaim (kill + resume) only OUR OWN superseded shellper, proven
+ * by shellper-main.js + matching session id + matching cwd + matching
+ * CODEV_ARCHITECT_NAME. Anything else that holds the id is foreign → mint fresh.
+ */
+export interface ProcessEntry {
+    pid: number;
+    /** The full joined argv (as `ps ... -o args=` reports it). */
+    cmdline: string;
+}
+/**
+ * The session-flag needle forms a live holder's argv can carry the id in:
+ *   - `--session-id <id>` / `--resume <id>` — a claude CHILD's shell argv
+ *   - `--session-id=<id>` / `--resume=<id>` — the `=`-joined shell variant
+ *   - `"--session-id","<id>"` / `"--resume","<id>"` — the shellper PARENT's
+ *     JSON config argv (Issue #1224: catches a remnant shellper whose child is
+ *     dead between crash-loop respawns).
+ */
+export declare function sessionIdNeedles(sessionId: string): string[];
+/** True when a process's argv references `sessionId` as a session-flag argument. */
+export declare function cmdlineHoldsSession(cmdline: string, sessionId: string): boolean;
+export interface ArchitectIdentity {
+    /** Absolute workspace path the shellper runs in (`cwd` in its config). */
+    workspacePath: string;
+    /** The architect name (shellper config env `CODEV_ARCHITECT_NAME`). */
+    architectName: string;
+}
+/**
+ * True when `cmdline` is one of OUR OWN shellper processes for `identity`:
+ * a `shellper-main.js` whose JSON config carries the matching workspace cwd and
+ * `CODEV_ARCHITECT_NAME`. The cwd match tolerates symlink variants (macOS
+ * `/tmp` vs `/private/tmp`), mirroring verifySessionOwnership.
+ *
+ * This is the airtight-identity gate before any kill: if any field cannot be
+ * positively confirmed, this returns false and the caller must not reclaim.
+ */
+export declare function isOwnArchitectShellper(cmdline: string, identity: ArchitectIdentity): boolean;
+/**
+ * Snapshot every running process as {pid, cmdline}. `ps -ww` prevents argv
+ * truncation (the shellper config blob is large) on both BSD and coreutils.
+ * Throws on `ps` failure; callers decide how to degrade.
+ */
+export declare function listProcessEntries(): ProcessEntry[];
+export interface SessionHolderClassification {
+    /** PIDs of OUR OWN superseded shellpers holding this session (safe to reap). */
+    reclaimable: number[];
+    /** True when some holder is NOT positively ours — must not be touched. */
+    foreign: boolean;
+}
+/**
+ * Classify every live holder of `sessionId` into reclaimable-own vs foreign.
+ * A holder is reclaimable only when it is one of our own architect shellpers
+ * (identity-matched); any other holder (a bare `claude`, a shellper for a
+ * different identity, an unparseable match) is foreign.
+ *
+ * On `ps` failure returns `{reclaimable: [], foreign: false}` — no positive
+ * evidence, so the caller resumes as it would have before this guard existed.
+ */
+export declare function classifyArchitectSessionHolder(opts: {
+    sessionId: string;
+    identity: ArchitectIdentity;
+    /** Exclude this pid (e.g. Tower's own) from consideration. */
+    selfPid?: number;
+    /** Test seam: override the process snapshot. */
+    list?: () => ProcessEntry[];
+}): SessionHolderClassification;
+/**
+ * Find PIDs of OUR OWN architect shellpers for `identity`, regardless of which
+ * session they hold. Used by remove-architect to reap a live-process-without-a-
+ * registry-row zombie (Issue #1224 symptom B) — there is no stored session id to
+ * key on, so identity (shellper-main.js + cwd + CODEV_ARCHITECT_NAME) is the key.
+ */
+export declare function findOwnArchitectShellpers(opts: {
+    identity: ArchitectIdentity;
+    selfPid?: number;
+    list?: () => ProcessEntry[];
+}): number[];
+/**
+ * Reap the given superseded-shellper PIDs: SIGTERM the process group, poll for
+ * death, then SIGKILL any survivor. Resolves once every pid is gone (or the
+ * SIGKILL grace elapses). The wait matters: the killed shellper's child must
+ * release the session lock before the caller's fresh `claude --resume` runs,
+ * else the collision recurs.
+ *
+ * Seams (`isAlive`, `kill`, `wait`) keep it unit-testable without real signals.
+ */
+export declare function reapShellpers(pids: number[], opts?: {
+    isAlive?: (pid: number) => boolean;
+    kill?: (pid: number, signal: NodeJS.Signals) => void;
+    wait?: (ms: number) => Promise<void>;
+    graceMs?: number;
+    killGraceMs?: number;
+    pollMs?: number;
+}): Promise<void>;
+export type ArchitectLogger = (level: 'INFO' | 'WARN' | 'ERROR', message: string) => void;
+/**
+ * Reconcile a stored architect session id against the live process table before
+ * launch, resolving whether the caller may resume it.
+ *
+ * - A FOREIGN holder → `{ foreignHolder: true }`: the caller must mint fresh
+ *   (the session is genuinely in use by something we must not touch).
+ * - Only OUR OWN superseded shellper(s) hold it → reap them and return
+ *   `{ foreignHolder: false }`: the session is now free, resume it (mint-or-
+ *   RECLAIM, preserving the conversation instead of abandoning it).
+ * - No holder → `{ foreignHolder: false }`: resume as usual.
+ */
+export declare function reconcileArchitectSessionHolder(opts: {
+    sessionId: string;
+    identity: ArchitectIdentity;
+    selfPid?: number;
+    log?: ArchitectLogger;
+    list?: () => ProcessEntry[];
+    reap?: (pids: number[]) => Promise<void>;
+}): Promise<{
+    foreignHolder: boolean;
+    reclaimedPids: number[];
+}>;
+//# sourceMappingURL=architect-session-holder.d.ts.map

package/dist/agent-farm/servers/architect-session-holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architect-session-holder.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/architect-session-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAM5D;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAG/E;AAsBD,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAc5F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,EAAE,CAgBnD;AAED,MAAM,WAAW,2BAA2B;IAC1C,gFAAgF;IAChF,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;CAC7B,GAAG,2BAA2B,CAqB9B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;CAC7B,GAAG,MAAM,EAAE,CAcX;AA6BD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IACL,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CAAC,IAAI,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C,GAAG,OAAO,CAAC;IAAE,aAAa,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA4B/D"}

package/dist/agent-farm/servers/architect-session-holder.js

@@ -0,0 +1,268 @@
+/**
+ * Issue #1224: detect and reclaim live processes that hold an architect's
+ * conversation session id, so an architect launch never bakes a colliding
+ * `claude --resume <id>` into a permanent crash loop.
+ *
+ * Two holder classes were observed after a workspace restart (forensic timeline
+ * on the issue):
+ *   1. OUR OWN superseded shellper for the same architect identity — a remnant
+ *      from before the restart, or a previous crash-looping instance. Its claude
+ *      child dies within seconds of every respawn, so the child is absent most
+ *      of the time; the durable evidence is the *shellper parent's* argv, which
+ *      carries the session id in its JSON config (`"--session-id","<id>"`).
+ *   2. A FOREIGN process — e.g. an interactive `claude` the user started by hand
+ *      on their own tty (holder case in incident 3). This must NEVER be touched:
+ *      it is not ours to kill.
+ *
+ * The policy: reclaim (kill + resume) only OUR OWN superseded shellper, proven
+ * by shellper-main.js + matching session id + matching cwd + matching
+ * CODEV_ARCHITECT_NAME. Anything else that holds the id is foreign → mint fresh.
+ */
+import { execFileSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+/** Marker identifying a Codev shellper process in a `ps` command line. */
+const SHELLPER_MARKER = 'shellper-main.js';
+/**
+ * The session-flag needle forms a live holder's argv can carry the id in:
+ *   - `--session-id <id>` / `--resume <id>` — a claude CHILD's shell argv
+ *   - `--session-id=<id>` / `--resume=<id>` — the `=`-joined shell variant
+ *   - `"--session-id","<id>"` / `"--resume","<id>"` — the shellper PARENT's
+ *     JSON config argv (Issue #1224: catches a remnant shellper whose child is
+ *     dead between crash-loop respawns).
+ */
+export function sessionIdNeedles(sessionId) {
+    return ['--session-id', '--resume'].flatMap((flag) => [
+        `${flag} ${sessionId}`,
+        `${flag}=${sessionId}`,
+        `"${flag}","${sessionId}"`,
+    ]);
+}
+/** True when a process's argv references `sessionId` as a session-flag argument. */
+export function cmdlineHoldsSession(cmdline, sessionId) {
+    const needles = sessionIdNeedles(sessionId);
+    return needles.some((needle) => cmdline.includes(needle));
+}
+/** Canonicalize a path for comparison; fall back to the input when realpath fails. */
+function realpathOrSelf(p) {
+    try {
+        return realpathSync(p);
+    }
+    catch {
+        return p;
+    }
+}
+/**
+ * Extract a `"key":"value"` string field from a shellper's JSON config as it
+ * appears verbatim in the `ps` argv. Regex rather than JSON.parse: the config
+ * embeds the full process env, so the blob is large and a partial/edge `ps`
+ * line must degrade to "field absent" rather than throw.
+ */
+function extractJsonStringField(cmdline, key) {
+    const m = cmdline.match(new RegExp(`"${key}"\\s*:\\s*"([^"]+)"`));
+    return m ? m[1] : null;
+}
+/**
+ * True when `cmdline` is one of OUR OWN shellper processes for `identity`:
+ * a `shellper-main.js` whose JSON config carries the matching workspace cwd and
+ * `CODEV_ARCHITECT_NAME`. The cwd match tolerates symlink variants (macOS
+ * `/tmp` vs `/private/tmp`), mirroring verifySessionOwnership.
+ *
+ * This is the airtight-identity gate before any kill: if any field cannot be
+ * positively confirmed, this returns false and the caller must not reclaim.
+ */
+export function isOwnArchitectShellper(cmdline, identity) {
+    if (!cmdline.includes(SHELLPER_MARKER))
+        return false;
+    const cfgName = extractJsonStringField(cmdline, 'CODEV_ARCHITECT_NAME');
+    if (cfgName !== identity.architectName)
+        return false;
+    const cfgCwd = extractJsonStringField(cmdline, 'cwd');
+    if (!cfgCwd)
+        return false;
+    const wanted = new Set([identity.workspacePath, realpathOrSelf(identity.workspacePath)]);
+    const got = new Set([cfgCwd, realpathOrSelf(cfgCwd)]);
+    const cwdMatches = [...got].some((g) => wanted.has(g));
+    if (!cwdMatches)
+        return false;
+    return true;
+}
+/**
+ * Snapshot every running process as {pid, cmdline}. `ps -ww` prevents argv
+ * truncation (the shellper config blob is large) on both BSD and coreutils.
+ * Throws on `ps` failure; callers decide how to degrade.
+ */
+export function listProcessEntries() {
+    const out = execFileSync('ps', ['-ww', '-eo', 'pid=,args='], {
+        encoding: 'utf-8',
+        timeout: 5000,
+        maxBuffer: 16 * 1024 * 1024,
+    });
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const trimmed = line.trimStart();
+        const sp = trimmed.indexOf(' ');
+        if (sp <= 0)
+            continue;
+        const pid = parseInt(trimmed.slice(0, sp), 10);
+        if (Number.isNaN(pid) || pid <= 0)
+            continue;
+        entries.push({ pid, cmdline: trimmed.slice(sp + 1) });
+    }
+    return entries;
+}
+/**
+ * Classify every live holder of `sessionId` into reclaimable-own vs foreign.
+ * A holder is reclaimable only when it is one of our own architect shellpers
+ * (identity-matched); any other holder (a bare `claude`, a shellper for a
+ * different identity, an unparseable match) is foreign.
+ *
+ * On `ps` failure returns `{reclaimable: [], foreign: false}` — no positive
+ * evidence, so the caller resumes as it would have before this guard existed.
+ */
+export function classifyArchitectSessionHolder(opts) {
+    const list = opts.list ?? listProcessEntries;
+    let entries;
+    try {
+        entries = list();
+    }
+    catch {
+        return { reclaimable: [], foreign: false };
+    }
+    const reclaimable = [];
+    let foreign = false;
+    for (const { pid, cmdline } of entries) {
+        if (opts.selfPid !== undefined && pid === opts.selfPid)
+            continue;
+        if (!cmdlineHoldsSession(cmdline, opts.sessionId))
+            continue;
+        if (isOwnArchitectShellper(cmdline, opts.identity)) {
+            reclaimable.push(pid);
+        }
+        else {
+            foreign = true;
+        }
+    }
+    return { reclaimable, foreign };
+}
+/**
+ * Find PIDs of OUR OWN architect shellpers for `identity`, regardless of which
+ * session they hold. Used by remove-architect to reap a live-process-without-a-
+ * registry-row zombie (Issue #1224 symptom B) — there is no stored session id to
+ * key on, so identity (shellper-main.js + cwd + CODEV_ARCHITECT_NAME) is the key.
+ */
+export function findOwnArchitectShellpers(opts) {
+    const list = opts.list ?? listProcessEntries;
+    let entries;
+    try {
+        entries = list();
+    }
+    catch {
+        return [];
+    }
+    const pids = [];
+    for (const { pid, cmdline } of entries) {
+        if (opts.selfPid !== undefined && pid === opts.selfPid)
+            continue;
+        if (isOwnArchitectShellper(cmdline, opts.identity))
+            pids.push(pid);
+    }
+    return pids;
+}
+/** Whether a pid is still alive (signal 0 probe). */
+function pidAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        // ESRCH → gone; EPERM → alive but not ours to signal (treat as alive).
+        return err.code === 'EPERM';
+    }
+}
+/** Kill a shellper's whole process group (leader is detached), best-effort. */
+function killProcessGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        // Group gone or not permitted — fall back to the single pid.
+        try {
+            process.kill(pid, signal);
+        }
+        catch {
+            /* already dead */
+        }
+    }
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Reap the given superseded-shellper PIDs: SIGTERM the process group, poll for
+ * death, then SIGKILL any survivor. Resolves once every pid is gone (or the
+ * SIGKILL grace elapses). The wait matters: the killed shellper's child must
+ * release the session lock before the caller's fresh `claude --resume` runs,
+ * else the collision recurs.
+ *
+ * Seams (`isAlive`, `kill`, `wait`) keep it unit-testable without real signals.
+ */
+export async function reapShellpers(pids, opts) {
+    if (pids.length === 0)
+        return;
+    const isAlive = opts?.isAlive ?? pidAlive;
+    const kill = opts?.kill ?? killProcessGroup;
+    const wait = opts?.wait ?? sleep;
+    const graceMs = opts?.graceMs ?? 3000;
+    const killGraceMs = opts?.killGraceMs ?? 2000;
+    const pollMs = opts?.pollMs ?? 100;
+    const pollUntilDead = async (deadlineMs) => {
+        let waited = 0;
+        while (waited < deadlineMs && pids.some((pid) => isAlive(pid))) {
+            await wait(pollMs);
+            waited += pollMs;
+        }
+    };
+    for (const pid of pids)
+        kill(pid, 'SIGTERM');
+    await pollUntilDead(graceMs);
+    const survivors = pids.filter((pid) => isAlive(pid));
+    if (survivors.length > 0) {
+        for (const pid of survivors)
+            kill(pid, 'SIGKILL');
+        // Confirm SIGKILL actually took effect before returning: the caller resumes
+        // `claude --resume <id>` next, and a holder still in the kernel's exit path
+        // has not yet released the session lock — returning early would re-open the
+        // very collision race this reap exists to close (codex review, Issue #1224).
+        await pollUntilDead(killGraceMs);
+    }
+}
+/**
+ * Reconcile a stored architect session id against the live process table before
+ * launch, resolving whether the caller may resume it.
+ *
+ * - A FOREIGN holder → `{ foreignHolder: true }`: the caller must mint fresh
+ *   (the session is genuinely in use by something we must not touch).
+ * - Only OUR OWN superseded shellper(s) hold it → reap them and return
+ *   `{ foreignHolder: false }`: the session is now free, resume it (mint-or-
+ *   RECLAIM, preserving the conversation instead of abandoning it).
+ * - No holder → `{ foreignHolder: false }`: resume as usual.
+ */
+export async function reconcileArchitectSessionHolder(opts) {
+    const { reclaimable, foreign } = classifyArchitectSessionHolder({
+        sessionId: opts.sessionId,
+        identity: opts.identity,
+        selfPid: opts.selfPid,
+        list: opts.list,
+    });
+    const shortId = opts.sessionId.slice(0, 8);
+    if (foreign) {
+        opts.log?.('WARN', `Architect '${opts.identity.architectName}' session ${shortId}… is held by a foreign process; minting a fresh session (holder left untouched) in ${opts.identity.workspacePath}`);
+        return { foreignHolder: true, reclaimedPids: [] };
+    }
+    if (reclaimable.length === 0) {
+        return { foreignHolder: false, reclaimedPids: [] };
+    }
+    opts.log?.('WARN', `Architect '${opts.identity.architectName}' session ${shortId}… is held by our own superseded shellper(s) [${reclaimable.join(', ')}]; reaping to reclaim the conversation in ${opts.identity.workspacePath}`);
+    const reap = opts.reap ?? ((pids) => reapShellpers(pids));
+    await reap(reclaimable);
+    return { foreignHolder: false, reclaimedPids: reclaimable };
+}
+//# sourceMappingURL=architect-session-holder.js.map

package/dist/agent-farm/servers/architect-session-holder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architect-session-holder.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/architect-session-holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAQ3C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,GAAG,IAAI,IAAI,SAAS,EAAE;QACtB,GAAG,IAAI,IAAI,SAAS,EAAE;QACtB,IAAI,IAAI,MAAM,SAAS,GAAG;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,OAAe,EAAE,GAAW;IAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,qBAAqB,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,QAA2B;IACjF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,QAAQ,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAErD,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAE9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE;QAC3D,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,SAAS;QAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAO9C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAC7C,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjE,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QAC5D,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IAC7C,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QACjE,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qDAAqD;AACrD,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,GAAW,EAAE,MAAsB;IAC3D,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAc,EACd,IAOC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,QAAQ,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,gBAAgB,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC;IAEnC,MAAM,aAAa,GAAG,KAAK,EAAE,UAAkB,EAAiB,EAAE;QAChE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,MAAM,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,SAAS;YAAE,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClD,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAID;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAOrD;IACC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,8BAA8B,CAAC;QAC9D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,EAAE,CACR,MAAM,EACN,cAAc,IAAI,CAAC,QAAQ,CAAC,aAAa,aAAa,OAAO,sFAAsF,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CACjL,CAAC;QACF,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CACR,MAAM,EACN,cAAc,IAAI,CAAC,QAAQ,CAAC,aAAa,aAAa,OAAO,gDAAgD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAC9M,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAc,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAC9D,CAAC"}

package/dist/agent-farm/servers/process-census.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Issue #1227: a shared single-`ps`-call process snapshot, reused by both the
+ * shellper husk sweep (predicate needs pid/ppid to detect "childless") and the
+ * fleet-RSS observability feature (needs rss). Centralizing the scan avoids
+ * growing a fourth bespoke `ps` caller alongside the three that already exist
+ * (session-manager.ts, architect-session-holder.ts, commands/cleanup.ts).
+ *
+ * Async (`execFile`, not `execFileSync`) is load-bearing, not a style choice:
+ * this is called from `/health` (tower-routes.ts), a hot Tower HTTP path.
+ * `execFileSync` blocks the entire Node.js event loop for the duration of the
+ * `ps` call, freezing every open terminal's WebSocket traffic — the exact
+ * previously-fixed anti-pattern documented at lessons-learned.md:160
+ * ("execSync in HTTP request handlers blocks the entire Node.js event loop").
+ */
+export interface ProcessCensusEntry {
+    pid: number;
+    ppid: number;
+    /** Resident set size in kilobytes, as `ps -o rss=` reports it. */
+    rssKb: number;
+    /** The full joined argv (as `ps ... -o args=` reports it). */
+    cmdline: string;
+}
+/**
+ * Snapshot every running process as {pid, ppid, rssKb, cmdline}. `ps -ww`
+ * prevents argv truncation (shellper config blobs are large) on both BSD and
+ * coreutils `ps`. Resolves to `[]` on `ps` failure (missing binary, timeout,
+ * non-zero exit) — callers decide how to degrade, mirroring the async
+ * `findShellperProcesses` convention in `../../terminal/session-manager.ts`.
+ *
+ * Deliberately raw `execFile` + a hand-rolled Promise, not `execFileSync` and
+ * not `util.promisify(execFile)`: this is called from `/health`
+ * (tower-routes.ts), a hot Tower HTTP path, so it must never block the event
+ * loop — `execFileSync` would freeze every open terminal's WebSocket traffic
+ * for the duration of the `ps` call, the exact previously-fixed anti-pattern
+ * documented at lessons-learned.md:160. `util.promisify` is avoided because
+ * `child_process.execFile` carries a built-in custom promisify resolving
+ * `{stdout, stderr}` via a non-standard symbol that a test mock would need to
+ * reproduce exactly to avoid silently promisifying to the wrong shape.
+ */
+export declare function listProcessCensus(): Promise<ProcessCensusEntry[]>;
+//# sourceMappingURL=process-census.d.ts.map

package/dist/agent-farm/servers/process-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-census.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/process-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAkBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAUjE"}

package/dist/agent-farm/servers/process-census.js

@@ -0,0 +1,62 @@
+/**
+ * Issue #1227: a shared single-`ps`-call process snapshot, reused by both the
+ * shellper husk sweep (predicate needs pid/ppid to detect "childless") and the
+ * fleet-RSS observability feature (needs rss). Centralizing the scan avoids
+ * growing a fourth bespoke `ps` caller alongside the three that already exist
+ * (session-manager.ts, architect-session-holder.ts, commands/cleanup.ts).
+ *
+ * Async (`execFile`, not `execFileSync`) is load-bearing, not a style choice:
+ * this is called from `/health` (tower-routes.ts), a hot Tower HTTP path.
+ * `execFileSync` blocks the entire Node.js event loop for the duration of the
+ * `ps` call, freezing every open terminal's WebSocket traffic — the exact
+ * previously-fixed anti-pattern documented at lessons-learned.md:160
+ * ("execSync in HTTP request handlers blocks the entire Node.js event loop").
+ */
+import { execFile } from 'node:child_process';
+function parseCensus(out) {
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const trimmed = line.trimStart();
+        if (!trimmed)
+            continue;
+        const fields = trimmed.match(/^(\d+)\s+(\d+)\s+(\d+)\s+(.*)$/s);
+        if (!fields)
+            continue;
+        const pid = parseInt(fields[1], 10);
+        const ppid = parseInt(fields[2], 10);
+        const rssKb = parseInt(fields[3], 10);
+        if (Number.isNaN(pid) || pid <= 0 || Number.isNaN(ppid) || Number.isNaN(rssKb))
+            continue;
+        entries.push({ pid, ppid, rssKb, cmdline: fields[4] });
+    }
+    return entries;
+}
+/**
+ * Snapshot every running process as {pid, ppid, rssKb, cmdline}. `ps -ww`
+ * prevents argv truncation (shellper config blobs are large) on both BSD and
+ * coreutils `ps`. Resolves to `[]` on `ps` failure (missing binary, timeout,
+ * non-zero exit) — callers decide how to degrade, mirroring the async
+ * `findShellperProcesses` convention in `../../terminal/session-manager.ts`.
+ *
+ * Deliberately raw `execFile` + a hand-rolled Promise, not `execFileSync` and
+ * not `util.promisify(execFile)`: this is called from `/health`
+ * (tower-routes.ts), a hot Tower HTTP path, so it must never block the event
+ * loop — `execFileSync` would freeze every open terminal's WebSocket traffic
+ * for the duration of the `ps` call, the exact previously-fixed anti-pattern
+ * documented at lessons-learned.md:160. `util.promisify` is avoided because
+ * `child_process.execFile` carries a built-in custom promisify resolving
+ * `{stdout, stderr}` via a non-standard symbol that a test mock would need to
+ * reproduce exactly to avoid silently promisifying to the wrong shape.
+ */
+export function listProcessCensus() {
+    return new Promise((resolve) => {
+        execFile('ps', ['-A', '-ww', '-eo', 'pid=,ppid=,rss=,args='], { timeout: 5000, maxBuffer: 16 * 1024 * 1024 }, (err, stdout) => {
+            if (err || !stdout) {
+                resolve([]);
+                return;
+            }
+            resolve(parseCensus(stdout));
+        });
+    });
+}
+//# sourceMappingURL=process-census.js.map

package/dist/agent-farm/servers/process-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-census.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/process-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAW9C,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QACzF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC5H,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-farm/servers/send-buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"send-buffer.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,EAAE,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAClE,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AACpG,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAMhF,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,GAAG,CAAsB;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IAKxE,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI;IASnC,uEAAuE;IACvE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI;IAQrE,+DAA+D;IAC/D,IAAI,IAAI,IAAI;IASZ,yEAAyE;IACzE,KAAK,CAAC,QAAQ,UAAQ,GAAG,IAAI;IA0C7B,qEAAqE;IACrE,IAAI,YAAY,IAAI,MAAM,CAMzB;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF"}
+{"version":3,"file":"send-buffer.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,EAAE,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAClE,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AACpG,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAMhF,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,GAAG,CAAsB;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IAKxE,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI;IASnC,uEAAuE;IACvE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI;IAQrE,+DAA+D;IAC/D,IAAI,IAAI,IAAI;IASZ,yEAAyE;IACzE,KAAK,CAAC,QAAQ,UAAQ,GAAG,IAAI;IAwD7B,qEAAqE;IACrE,IAAI,YAAY,IAAI,MAAM,CAMzB;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF"}

package/dist/agent-farm/servers/send-buffer.js

@@ -65,6 +65,19 @@ export class SendBuffer {
             const now = Date.now();
             const maxAgeExceeded = messages.some(m => now - m.timestamp >= this.maxBufferAgeMs);
             const isIdle = session.isUserIdle(this.idleThresholdMs);
+            // #1198: writes to a session whose shellper connection is down are
+            // dropped silently. Hold the messages while the connection recovers
+            // (in-place reconnect takes a few seconds); if it never does, drop
+            // loudly instead of logging a successful delivery.
+            if (!session.writable) {
+                if (forceAll || maxAgeExceeded) {
+                    if (this.log) {
+                        this.log('ERROR', `Dropping ${messages.length} buffered message(s) for unwritable session ${sessionId.slice(0, 8)}... (shellper connection down)`);
+                    }
+                    this.buffers.delete(sessionId);
+                }
+                continue;
+            }
             // Deliver when: forced, user idle, or max age exceeded.
             // Bugfix #492: removed composing check — it gets stuck true after non-Enter
             // keystrokes (Ctrl+C, arrows, Tab), causing messages to wait 60s max age.

package/dist/agent-farm/servers/send-buffer.js.map

@@ -1 +1 @@
-{"version":3,"file":"send-buffer.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,UAAU,GAA0C,IAAI,CAAC;IACzD,UAAU,GAAwB,IAAI,CAAC;IACvC,OAAO,GAAqB,IAAI,CAAC;IACjC,GAAG,GAAiB,IAAI,CAAC;IACxB,eAAe,CAAS;IACxB,cAAc,CAAS;IAEhC,YAAY,IAA4D;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC;IAC1E,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,UAAwB,EAAE,OAAkB,EAAE,GAAU;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,+DAA+D;IAC/D,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ,GAAG,KAAK;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE9C,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yCAAyC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,QAAQ,CAAC,MAAM,yCAAyC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExD,wDAAwD;YACxD,4EAA4E;YAC5E,0EAA0E;YAC1E,IAAI,QAAQ,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;gBACzC,yEAAyE;gBACzE,0EAA0E;gBAC1E,kDAAkD;gBAClD,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,QAAQ,CAAC,MAAM,mCAAmC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;gBAC1H,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,YAAY;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"send-buffer.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,UAAU,GAA0C,IAAI,CAAC;IACzD,UAAU,GAAwB,IAAI,CAAC;IACvC,OAAO,GAAqB,IAAI,CAAC;IACjC,GAAG,GAAiB,IAAI,CAAC;IACxB,eAAe,CAAS;IACxB,cAAc,CAAS;IAEhC,YAAY,IAA4D;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC;IAC1E,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,UAAwB,EAAE,OAAkB,EAAE,GAAU;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,+DAA+D;IAC/D,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ,GAAG,KAAK;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE9C,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yCAAyC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,QAAQ,CAAC,MAAM,yCAAyC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExD,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,mDAAmD;YACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,CAAC,MAAM,+CAA+C,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC,CAAC,CAAC;oBACrJ,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,wDAAwD;YACxD,4EAA4E;YAC5E,0EAA0E;YAC1E,IAAI,QAAQ,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;gBACzC,yEAAyE;gBACzE,0EAA0E;gBAC1E,kDAAkD;gBAClD,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,QAAQ,CAAC,MAAM,mCAAmC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;gBAC1H,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,YAAY;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}