@cluesmith/codev 3.2.3 → 3.2.4

package/dist/agent-farm/servers/process-census.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Issue #1227: a shared single-`ps`-call process snapshot, reused by both the
+ * shellper husk sweep (predicate needs pid/ppid to detect "childless") and the
+ * fleet-RSS observability feature (needs rss). Centralizing the scan avoids
+ * growing a fourth bespoke `ps` caller alongside the three that already exist
+ * (session-manager.ts, architect-session-holder.ts, commands/cleanup.ts).
+ *
+ * Async (`execFile`, not `execFileSync`) is load-bearing, not a style choice:
+ * this is called from `/health` (tower-routes.ts), a hot Tower HTTP path.
+ * `execFileSync` blocks the entire Node.js event loop for the duration of the
+ * `ps` call, freezing every open terminal's WebSocket traffic — the exact
+ * previously-fixed anti-pattern documented at lessons-learned.md:160
+ * ("execSync in HTTP request handlers blocks the entire Node.js event loop").
+ */
+export interface ProcessCensusEntry {
+    pid: number;
+    ppid: number;
+    /** Resident set size in kilobytes, as `ps -o rss=` reports it. */
+    rssKb: number;
+    /** The full joined argv (as `ps ... -o args=` reports it). */
+    cmdline: string;
+}
+/**
+ * Snapshot every running process as {pid, ppid, rssKb, cmdline}. `ps -ww`
+ * prevents argv truncation (shellper config blobs are large) on both BSD and
+ * coreutils `ps`. Resolves to `[]` on `ps` failure (missing binary, timeout,
+ * non-zero exit) — callers decide how to degrade, mirroring the async
+ * `findShellperProcesses` convention in `../../terminal/session-manager.ts`.
+ *
+ * Deliberately raw `execFile` + a hand-rolled Promise, not `execFileSync` and
+ * not `util.promisify(execFile)`: this is called from `/health`
+ * (tower-routes.ts), a hot Tower HTTP path, so it must never block the event
+ * loop — `execFileSync` would freeze every open terminal's WebSocket traffic
+ * for the duration of the `ps` call, the exact previously-fixed anti-pattern
+ * documented at lessons-learned.md:160. `util.promisify` is avoided because
+ * `child_process.execFile` carries a built-in custom promisify resolving
+ * `{stdout, stderr}` via a non-standard symbol that a test mock would need to
+ * reproduce exactly to avoid silently promisifying to the wrong shape.
+ */
+export declare function listProcessCensus(): Promise<ProcessCensusEntry[]>;
+//# sourceMappingURL=process-census.d.ts.map

package/dist/agent-farm/servers/process-census.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-census.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/process-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CACjB;AAkBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAUjE"}

package/dist/agent-farm/servers/process-census.js

@@ -0,0 +1,62 @@
+/**
+ * Issue #1227: a shared single-`ps`-call process snapshot, reused by both the
+ * shellper husk sweep (predicate needs pid/ppid to detect "childless") and the
+ * fleet-RSS observability feature (needs rss). Centralizing the scan avoids
+ * growing a fourth bespoke `ps` caller alongside the three that already exist
+ * (session-manager.ts, architect-session-holder.ts, commands/cleanup.ts).
+ *
+ * Async (`execFile`, not `execFileSync`) is load-bearing, not a style choice:
+ * this is called from `/health` (tower-routes.ts), a hot Tower HTTP path.
+ * `execFileSync` blocks the entire Node.js event loop for the duration of the
+ * `ps` call, freezing every open terminal's WebSocket traffic — the exact
+ * previously-fixed anti-pattern documented at lessons-learned.md:160
+ * ("execSync in HTTP request handlers blocks the entire Node.js event loop").
+ */
+import { execFile } from 'node:child_process';
+function parseCensus(out) {
+    const entries = [];
+    for (const line of out.split('\n')) {
+        const trimmed = line.trimStart();
+        if (!trimmed)
+            continue;
+        const fields = trimmed.match(/^(\d+)\s+(\d+)\s+(\d+)\s+(.*)$/s);
+        if (!fields)
+            continue;
+        const pid = parseInt(fields[1], 10);
+        const ppid = parseInt(fields[2], 10);
+        const rssKb = parseInt(fields[3], 10);
+        if (Number.isNaN(pid) || pid <= 0 || Number.isNaN(ppid) || Number.isNaN(rssKb))
+            continue;
+        entries.push({ pid, ppid, rssKb, cmdline: fields[4] });
+    }
+    return entries;
+}
+/**
+ * Snapshot every running process as {pid, ppid, rssKb, cmdline}. `ps -ww`
+ * prevents argv truncation (shellper config blobs are large) on both BSD and
+ * coreutils `ps`. Resolves to `[]` on `ps` failure (missing binary, timeout,
+ * non-zero exit) — callers decide how to degrade, mirroring the async
+ * `findShellperProcesses` convention in `../../terminal/session-manager.ts`.
+ *
+ * Deliberately raw `execFile` + a hand-rolled Promise, not `execFileSync` and
+ * not `util.promisify(execFile)`: this is called from `/health`
+ * (tower-routes.ts), a hot Tower HTTP path, so it must never block the event
+ * loop — `execFileSync` would freeze every open terminal's WebSocket traffic
+ * for the duration of the `ps` call, the exact previously-fixed anti-pattern
+ * documented at lessons-learned.md:160. `util.promisify` is avoided because
+ * `child_process.execFile` carries a built-in custom promisify resolving
+ * `{stdout, stderr}` via a non-standard symbol that a test mock would need to
+ * reproduce exactly to avoid silently promisifying to the wrong shape.
+ */
+export function listProcessCensus() {
+    return new Promise((resolve) => {
+        execFile('ps', ['-A', '-ww', '-eo', 'pid=,ppid=,rss=,args='], { timeout: 5000, maxBuffer: 16 * 1024 * 1024 }, (err, stdout) => {
+            if (err || !stdout) {
+                resolve([]);
+                return;
+            }
+            resolve(parseCensus(stdout));
+        });
+    });
+}
+//# sourceMappingURL=process-census.js.map

package/dist/agent-farm/servers/process-census.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-census.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/process-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAW9C,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QACzF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC5H,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,EAAE,CAAC,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-farm/servers/send-buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"send-buffer.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,EAAE,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAClE,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AACpG,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAMhF,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,GAAG,CAAsB;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IAKxE,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI;IASnC,uEAAuE;IACvE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI;IAQrE,+DAA+D;IAC/D,IAAI,IAAI,IAAI;IASZ,yEAAyE;IACzE,KAAK,CAAC,QAAQ,UAAQ,GAAG,IAAI;IA0C7B,qEAAqE;IACrE,IAAI,YAAY,IAAI,MAAM,CAMzB;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF"}
+{"version":3,"file":"send-buffer.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACzC,EAAE,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAClE,0FAA0F;AAC1F,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AACpG,MAAM,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAMhF,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,GAAG,CAAsB;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAEpB,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IAKxE,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI;IASnC,uEAAuE;IACvE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,GAAG,IAAI;IAQrE,+DAA+D;IAC/D,IAAI,IAAI,IAAI;IASZ,yEAAyE;IACzE,KAAK,CAAC,QAAQ,UAAQ,GAAG,IAAI;IAwD7B,qEAAqE;IACrE,IAAI,YAAY,IAAI,MAAM,CAMzB;IAED,+DAA+D;IAC/D,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF"}

package/dist/agent-farm/servers/send-buffer.js

@@ -65,6 +65,19 @@ export class SendBuffer {
             const now = Date.now();
             const maxAgeExceeded = messages.some(m => now - m.timestamp >= this.maxBufferAgeMs);
             const isIdle = session.isUserIdle(this.idleThresholdMs);
+            // #1198: writes to a session whose shellper connection is down are
+            // dropped silently. Hold the messages while the connection recovers
+            // (in-place reconnect takes a few seconds); if it never does, drop
+            // loudly instead of logging a successful delivery.
+            if (!session.writable) {
+                if (forceAll || maxAgeExceeded) {
+                    if (this.log) {
+                        this.log('ERROR', `Dropping ${messages.length} buffered message(s) for unwritable session ${sessionId.slice(0, 8)}... (shellper connection down)`);
+                    }
+                    this.buffers.delete(sessionId);
+                }
+                continue;
+            }
             // Deliver when: forced, user idle, or max age exceeded.
             // Bugfix #492: removed composing check — it gets stuck true after non-Enter
             // keystrokes (Ctrl+C, arrows, Tab), causing messages to wait 60s max age.

package/dist/agent-farm/servers/send-buffer.js.map

@@ -1 +1 @@
-{"version":3,"file":"send-buffer.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,UAAU,GAA0C,IAAI,CAAC;IACzD,UAAU,GAAwB,IAAI,CAAC;IACvC,OAAO,GAAqB,IAAI,CAAC;IACjC,GAAG,GAAiB,IAAI,CAAC;IACxB,eAAe,CAAS;IACxB,cAAc,CAAS;IAEhC,YAAY,IAA4D;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC;IAC1E,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,UAAwB,EAAE,OAAkB,EAAE,GAAU;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,+DAA+D;IAC/D,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ,GAAG,KAAK;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE9C,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yCAAyC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,QAAQ,CAAC,MAAM,yCAAyC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExD,wDAAwD;YACxD,4EAA4E;YAC5E,0EAA0E;YAC1E,IAAI,QAAQ,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;gBACzC,yEAAyE;gBACzE,0EAA0E;gBAC1E,kDAAkD;gBAClD,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,QAAQ,CAAC,MAAM,mCAAmC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;gBAC1H,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,YAAY;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"send-buffer.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/send-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAyBH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AACvC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,OAAO,UAAU;IACb,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC/C,UAAU,GAA0C,IAAI,CAAC;IACzD,UAAU,GAAwB,IAAI,CAAC;IACvC,OAAO,GAAqB,IAAI,CAAC;IACjC,GAAG,GAAiB,IAAI,CAAC;IACxB,eAAe,CAAS;IACxB,cAAc,CAAS;IAEhC,YAAY,IAA4D;QACtE,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC;IAC1E,CAAC;IAED,8CAA8C;IAC9C,OAAO,CAAC,GAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,UAAwB,EAAE,OAAkB,EAAE,GAAU;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IAED,+DAA+D;IAC/D,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,6CAA6C;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,QAAQ,GAAG,KAAK;QACpB,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE9C,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,yCAAyC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,QAAQ,CAAC,MAAM,yCAAyC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrH,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAExD,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,mDAAmD;YACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;oBAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,QAAQ,CAAC,MAAM,+CAA+C,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC,CAAC,CAAC;oBACrJ,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,wDAAwD;YACxD,4EAA4E;YAC5E,0EAA0E;YAC1E,IAAI,QAAQ,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;gBACzC,yEAAyE;gBACzE,0EAA0E;gBAC1E,kDAAkD;gBAClD,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5C,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;oBACjE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,QAAQ,CAAC,MAAM,mCAAmC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC;gBAC1H,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,YAAY;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IAC/D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/agent-farm/servers/session-log-sweep.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Issue #1238: retention for PTY session logs.
+ *
+ * `PtySession` already bounds a *single* session's log (50 MB, one `.1`
+ * rotation — see `../../terminal/pty-session.ts`), but nothing has ever
+ * deleted the log of a session that ended. Every terminal Tower has ever
+ * opened leaves a file behind forever: an audited machine reached 29,728 files
+ * / 19 GB in `~/.agent-farm/logs`, 97% of it untouched for over a month.
+ *
+ * This module adds the missing cross-file policy: a log is deleted once its
+ * last write is older than the retention window. mtime is the retention key
+ * because the last byte written to a session log is, in effect, the moment
+ * that session stopped producing output — the "session ended" signal, without
+ * needing to join against DB session state (which is itself pruned, so dead
+ * sessions leave no row to join against).
+ *
+ * Live sessions are excluded by id regardless of mtime. A session log's fd is
+ * held open for the session's whole life, so unlinking it under a live writer
+ * would silently redirect every subsequent write into an unlinked inode —
+ * losing the log of the one session someone might actually want to read. A
+ * 30-day-idle live session is vanishingly unlikely, but the guard is cheap.
+ *
+ * Wired in `./tower-server.ts` on two triggers (Tower startup, and a daily
+ * in-process timer), mirroring the husk sweep in `./shellper-husk-sweep.ts`.
+ */
+export declare const DEFAULT_LOG_RETENTION_DAYS = 30;
+export declare const DEFAULT_LOG_SWEEP_INTERVAL_MS: number;
+export declare const MS_PER_DAY: number;
+/**
+ * Retention window in days (env `AGENT_FARM_LOG_RETENTION_DAYS`, default 30).
+ * `0` disables the sweep entirely — an explicit "keep everything" opt-out for
+ * anyone who treats these logs as an audit trail.
+ *
+ * NaN-checked rather than `parsed || default` because `0` is a meaningful
+ * override and is falsy in JS (same reasoning as `resolveHuskGraceMs`).
+ */
+export declare function resolveLogRetentionDays(env?: NodeJS.ProcessEnv): number;
+/**
+ * Sweep cadence (env `AGENT_FARM_LOG_SWEEP_INTERVAL_MS`, default 24h). Floored
+ * at 1s so a bad value can't spin the event loop; tests shorten it deliberately.
+ */
+export declare function resolveLogSweepIntervalMs(env?: NodeJS.ProcessEnv): number;
+export interface SessionLogFootprint {
+    /** Number of session log files (including `.log.1` rotations). */
+    files: number;
+    /** Total bytes on disk. */
+    bytes: number;
+    /** mtime of the oldest log, or null when there are none. */
+    oldestMtimeMs: number | null;
+}
+/**
+ * Total footprint of the session log directory. Read-only — used by
+ * `codev doctor` to surface the number the issue was filed about, and by the
+ * sweep's own logging. A missing directory is a healthy zero, not an error.
+ */
+export declare function measureSessionLogs(logDir: string): SessionLogFootprint;
+export interface SweepSessionLogsOptions {
+    /** The session log directory, i.e. `~/.agent-farm/logs`. */
+    logDir: string;
+    /** Age at which a log becomes eligible for deletion. `0` disables the sweep. */
+    retentionMs: number;
+    /**
+     * Ids of sessions that are alive right now. Their logs are never deleted,
+     * however old the mtime looks, because their fd is still open.
+     */
+    activeSessionIds?: Iterable<string>;
+    /** Seam, defaults to `Date.now()`. */
+    now?: number;
+    log?: (msg: string) => void;
+}
+export interface SweepSessionLogsResult {
+    /** Session log files examined. */
+    scanned: number;
+    /** Files unlinked. */
+    deleted: number;
+    /** Bytes reclaimed (sum of the deleted files' sizes). */
+    bytesFreed: number;
+    /** Aged-out files kept because their session is still live. */
+    skippedActive: number;
+    /** Files that were eligible but could not be unlinked. */
+    failed: number;
+}
+/**
+ * Delete session logs whose last write is older than `retentionMs`.
+ *
+ * Never throws: a log directory that can't be read, or an individual file that
+ * can't be stat'd or unlinked, is counted and skipped. Log retention is
+ * janitorial — it must not be able to take Tower's startup path down with it.
+ */
+export declare function sweepSessionLogs(opts: SweepSessionLogsOptions): SweepSessionLogsResult;
+/** Human-readable byte count for log lines and `codev doctor` output. */
+export declare function formatBytes(bytes: number): string;
+//# sourceMappingURL=session-log-sweep.d.ts.map

package/dist/agent-farm/servers/session-log-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-log-sweep.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/session-log-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAQH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,6BAA6B,QAAsB,CAAC;AAEjE,eAAO,MAAM,UAAU,QAAsB,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGpF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGtF;AAED,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAyBtE;AAED,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,sBAAsB,CA2DtF;AAED,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUjD"}

package/dist/agent-farm/servers/session-log-sweep.js

@@ -0,0 +1,165 @@
+/**
+ * Issue #1238: retention for PTY session logs.
+ *
+ * `PtySession` already bounds a *single* session's log (50 MB, one `.1`
+ * rotation — see `../../terminal/pty-session.ts`), but nothing has ever
+ * deleted the log of a session that ended. Every terminal Tower has ever
+ * opened leaves a file behind forever: an audited machine reached 29,728 files
+ * / 19 GB in `~/.agent-farm/logs`, 97% of it untouched for over a month.
+ *
+ * This module adds the missing cross-file policy: a log is deleted once its
+ * last write is older than the retention window. mtime is the retention key
+ * because the last byte written to a session log is, in effect, the moment
+ * that session stopped producing output — the "session ended" signal, without
+ * needing to join against DB session state (which is itself pruned, so dead
+ * sessions leave no row to join against).
+ *
+ * Live sessions are excluded by id regardless of mtime. A session log's fd is
+ * held open for the session's whole life, so unlinking it under a live writer
+ * would silently redirect every subsequent write into an unlinked inode —
+ * losing the log of the one session someone might actually want to read. A
+ * 30-day-idle live session is vanishingly unlikely, but the guard is cheap.
+ *
+ * Wired in `./tower-server.ts` on two triggers (Tower startup, and a daily
+ * in-process timer), mirroring the husk sweep in `./shellper-husk-sweep.ts`.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+/** `<session-uuid>.log` and its single rotation `<session-uuid>.log.1`. */
+const SESSION_LOG_RE = /^(.+)\.log(\.1)?$/;
+export const DEFAULT_LOG_RETENTION_DAYS = 30;
+export const DEFAULT_LOG_SWEEP_INTERVAL_MS = 24 * 60 * 60 * 1000;
+export const MS_PER_DAY = 24 * 60 * 60 * 1000;
+/**
+ * Retention window in days (env `AGENT_FARM_LOG_RETENTION_DAYS`, default 30).
+ * `0` disables the sweep entirely — an explicit "keep everything" opt-out for
+ * anyone who treats these logs as an audit trail.
+ *
+ * NaN-checked rather than `parsed || default` because `0` is a meaningful
+ * override and is falsy in JS (same reasoning as `resolveHuskGraceMs`).
+ */
+export function resolveLogRetentionDays(env = process.env) {
+    const parsed = parseInt(env.AGENT_FARM_LOG_RETENTION_DAYS ?? '', 10);
+    return Math.max(Number.isNaN(parsed) ? DEFAULT_LOG_RETENTION_DAYS : parsed, 0);
+}
+/**
+ * Sweep cadence (env `AGENT_FARM_LOG_SWEEP_INTERVAL_MS`, default 24h). Floored
+ * at 1s so a bad value can't spin the event loop; tests shorten it deliberately.
+ */
+export function resolveLogSweepIntervalMs(env = process.env) {
+    const parsed = parseInt(env.AGENT_FARM_LOG_SWEEP_INTERVAL_MS ?? '', 10);
+    return Math.max(Number.isNaN(parsed) ? DEFAULT_LOG_SWEEP_INTERVAL_MS : parsed, 1000);
+}
+/**
+ * Total footprint of the session log directory. Read-only — used by
+ * `codev doctor` to surface the number the issue was filed about, and by the
+ * sweep's own logging. A missing directory is a healthy zero, not an error.
+ */
+export function measureSessionLogs(logDir) {
+    const footprint = { files: 0, bytes: 0, oldestMtimeMs: null };
+    let entries;
+    try {
+        entries = fs.readdirSync(logDir);
+    }
+    catch {
+        return footprint;
+    }
+    for (const name of entries) {
+        if (!SESSION_LOG_RE.test(name))
+            continue;
+        let stat;
+        try {
+            stat = fs.statSync(path.join(logDir, name));
+        }
+        catch {
+            continue; // vanished mid-scan — nothing to account for
+        }
+        if (!stat.isFile())
+            continue;
+        footprint.files += 1;
+        footprint.bytes += stat.size;
+        if (footprint.oldestMtimeMs === null || stat.mtimeMs < footprint.oldestMtimeMs) {
+            footprint.oldestMtimeMs = stat.mtimeMs;
+        }
+    }
+    return footprint;
+}
+/**
+ * Delete session logs whose last write is older than `retentionMs`.
+ *
+ * Never throws: a log directory that can't be read, or an individual file that
+ * can't be stat'd or unlinked, is counted and skipped. Log retention is
+ * janitorial — it must not be able to take Tower's startup path down with it.
+ */
+export function sweepSessionLogs(opts) {
+    const result = {
+        scanned: 0,
+        deleted: 0,
+        bytesFreed: 0,
+        skippedActive: 0,
+        failed: 0,
+    };
+    if (opts.retentionMs <= 0)
+        return result;
+    const now = opts.now ?? Date.now();
+    const active = new Set(opts.activeSessionIds ?? []);
+    let entries;
+    try {
+        entries = fs.readdirSync(opts.logDir);
+    }
+    catch {
+        return result; // no log dir yet (fresh install) — nothing to sweep
+    }
+    for (const name of entries) {
+        const match = SESSION_LOG_RE.exec(name);
+        if (!match)
+            continue;
+        const fullPath = path.join(opts.logDir, name);
+        let stat;
+        try {
+            stat = fs.statSync(fullPath);
+        }
+        catch {
+            continue;
+        }
+        if (!stat.isFile())
+            continue;
+        result.scanned += 1;
+        if (now - stat.mtimeMs < opts.retentionMs)
+            continue;
+        if (active.has(match[1])) {
+            result.skippedActive += 1;
+            continue;
+        }
+        try {
+            fs.unlinkSync(fullPath);
+            result.deleted += 1;
+            result.bytesFreed += stat.size;
+        }
+        catch {
+            result.failed += 1;
+        }
+    }
+    if (result.deleted > 0 || result.failed > 0) {
+        opts.log?.(`Session log sweep: deleted ${result.deleted} log(s), freed ${formatBytes(result.bytesFreed)}` +
+            ` (${result.scanned} scanned` +
+            (result.skippedActive > 0 ? `, ${result.skippedActive} kept as live` : '') +
+            (result.failed > 0 ? `, ${result.failed} failed` : '') +
+            ')');
+    }
+    return result;
+}
+/** Human-readable byte count for log lines and `codev doctor` output. */
+export function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    const units = ['KB', 'MB', 'GB', 'TB'];
+    let value = bytes / 1024;
+    let unit = 0;
+    while (value >= 1024 && unit < units.length - 1) {
+        value /= 1024;
+        unit += 1;
+    }
+    return `${value < 10 ? value.toFixed(1) : Math.round(value)} ${units[unit]}`;
+}
+//# sourceMappingURL=session-log-sweep.js.map

package/dist/agent-farm/servers/session-log-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-log-sweep.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/session-log-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,2EAA2E;AAC3E,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjE,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,gCAAgC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,SAAS,GAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnF,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,6CAA6C;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAS;QAC7B,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QACrB,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QAC7B,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;YAC/E,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AA8BD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,MAAM,MAAM,GAA2B;QACrC,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC;KACV,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAEpD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,oDAAoD;IACrE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE9C,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,SAAS;QAC7B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAEpB,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW;YAAE,SAAS;QACpD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CACR,8BAA8B,MAAM,CAAC,OAAO,kBAAkB,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;YAC9F,KAAK,MAAM,CAAC,OAAO,UAAU;YAC7B,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,aAAa,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/dist/agent-farm/servers/shellper-husk-sweep.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Issue #1227: a stricter, second-pass reap for shellper "husks" — a shellper
+ * whose PTY child has exited (deliberate lingering behavior from #905/#1198 so
+ * a reconnect can replay history) but which `killOrphanedShellpers`
+ * (`../../terminal/session-manager.ts`) can never reap, because that function
+ * unconditionally protects any shellper whose Unix socket still responds.
+ *
+ * A husk still answers its socket, so it survives `killOrphanedShellpers`
+ * forever. The predicate here is stricter and orthogonal: a shellper is a husk
+ * only when it is simultaneously
+ *   - unregistered  — not a live PID in `terminal_sessions.shellper_pid`
+ *   - childless     — no process in the table has it as a parent (OS-level
+ *                      signal; there is no wire-protocol "has-child" frame)
+ *   - aged          — older than `graceMs`, which absorbs any legitimate
+ *                      mid-respawn / mid-adoption transient (seconds), so the
+ *                      three conditions together can only ever be true for a
+ *                      genuine husk (per the issue: "unregistered and
+ *                      childless" is a terminal state — a shellper that lost
+ *                      its registration can never receive another SPAWN).
+ *
+ * The actual kill is delegated to `reapShellpers` (`./architect-session-holder.js`,
+ * SIGTERM → poll → SIGKILL → confirm-death) rather than reimplemented here.
+ */
+import type Database from 'better-sqlite3';
+import { type ProcessCensusEntry } from './process-census.js';
+export declare const SHELLPER_MARKER = "shellper-main.js";
+/**
+ * The set of shellper PIDs Tower currently believes are registered, per
+ * `terminal_sessions` — validated against each PID's actual process start
+ * time to guard against PID reuse (a stale row whose PID was reused by an
+ * unrelated process does not count as registered).
+ */
+export declare function computeRegisteredShellperPids(db: Database.Database, getStartTime?: (pid: number) => Promise<number | null>): Promise<Set<number>>;
+export interface FindHuskShellpersOptions {
+    /** This Tower instance's socket directory — scopes the sweep so another
+     * instance's (or another user's) legitimate shellpers are never touched. */
+    socketDir: string;
+    registeredShellperPids: Set<number>;
+    graceMs: number;
+    /**
+     * Seam, defaults to `listProcessCensus`. Accepts a plain array too (not just
+     * a function returning one) so a caller that already took a snapshot for
+     * another purpose (e.g. RSS display) can pass it through and avoid a second
+     * `ps` scan — see `handleHuskPreview` in tower-routes.ts.
+     */
+    census?: () => ProcessCensusEntry[] | Promise<ProcessCensusEntry[]>;
+    /** Seam, defaults to `Date.now()`. */
+    now?: number;
+    /** Seam, defaults to `getProcessStartTime`. */
+    getStartTime?: (pid: number) => Promise<number | null>;
+}
+/**
+ * Returns the PIDs of shellper-main.js processes, scoped to `socketDir`, that
+ * are unregistered AND childless AND older than `graceMs`.
+ */
+export declare function findHuskShellpers(opts: FindHuskShellpersOptions): Promise<number[]>;
+/**
+ * The husk grace period (env `SHELLPER_HUSK_GRACE_MS`, default 1 hour), shared
+ * by every trigger (startup, periodic, on-demand preview/apply) so a preview
+ * always predicts what the periodic sweep would actually do.
+ *
+ * NaN-checked rather than `parsed || default`: `0` is a legitimate override
+ * (tests want an immediate-eligibility grace period) and `0` is falsy in JS,
+ * so `parsed || default` would silently discard a deliberate zero.
+ */
+export declare function resolveHuskGraceMs(env?: NodeJS.ProcessEnv): number;
+export interface SweepShellperHusksOptions {
+    socketDir: string;
+    db: Database.Database;
+    graceMs: number;
+    log?: (msg: string) => void;
+    census?: () => ProcessCensusEntry[] | Promise<ProcessCensusEntry[]>;
+    now?: number;
+    getStartTime?: (pid: number) => Promise<number | null>;
+    /** Seam, defaults to `reapShellpers`. */
+    reap?: (pids: number[]) => Promise<void>;
+}
+/**
+ * Compute the registered-shellper set from the DB, find husk candidates, and
+ * reap them. Returns the swept PIDs so callers (startup log, periodic-timer
+ * log, on-demand CLI) can report what happened.
+ */
+export declare function sweepShellperHusks(opts: SweepShellperHusksOptions): Promise<{
+    swept: number;
+    pids: number[];
+}>;
+//# sourceMappingURL=shellper-husk-sweep.d.ts.map

package/dist/agent-farm/servers/shellper-husk-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellper-husk-sweep.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/shellper-husk-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIjF,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAgBlD;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAuB,GAC1E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAmBtB;AAED,MAAM,WAAW,wBAAwB;IACvC;gFAC4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,kBAAkB,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpE,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyBzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG/E;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,kBAAkB,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACvD,yCAAyC;IACzC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAmB5C"}