@cluesmith/codev 3.2.3 → 3.3.0

package/dist/terminal/ring-buffer.js

@@ -2,15 +2,37 @@
  * Fixed-size circular buffer for storing terminal output lines.
  * Used for reconnection replay — stores last N lines in memory.
  */
+/**
+ * Ceiling on the incomplete-line partial (#1205). Sits between the 1MB replay
+ * seed and the 4MB level at which Tower's partial monitor warns, so a partial
+ * that trips this cap is already far past anything a viewer needs.
+ */
+const MAX_PARTIAL_CHARS = 2 * 1024 * 1024;
+/** Bound on how far past a trim point we scan for an ESC to align to. */
+const ESC_ALIGN_SCAN_LIMIT = 4096;
+/**
+ * Nudge a trim offset forward to the next ESC, so the retained tail doesn't
+ * begin partway through an escape sequence. Falls back to the raw offset when
+ * no ESC is within the scan window.
+ */
+function alignToEscape(text, offset) {
+    const found = text.indexOf('\x1b', offset);
+    if (found !== -1 && found - offset <= ESC_ALIGN_SCAN_LIMIT)
+        return found;
+    return offset;
+}
 export class RingBuffer {
     capacity;
+    maxPartialChars;
     buffer;
     head = 0;
     count = 0;
     seq = 0; // monotonically increasing sequence number
     partial = ''; // incomplete line from previous pushData call
-    constructor(capacity = 1000) {
+    bytes = 0; // cumulative chars ever appended via pushData (monotone; see bytesWritten)
+    constructor(capacity = 1000, maxPartialChars = MAX_PARTIAL_CHARS) {
         this.capacity = capacity;
+        this.maxPartialChars = maxPartialChars;
         this.buffer = new Array(capacity);
     }
     /** Push a complete line into the buffer. Returns the assigned sequence number. */
@@ -33,15 +55,28 @@ export class RingBuffer {
      * Scans only the incoming `data` for newlines (never re-splits the whole
      * accumulated `partial + data`), so per-call work is O(|data|) rather than
      * O(|partial|) — the O(n²) re-scan that pegged Tower's CPU on no-newline
-     * full-screen-TUI streams (Issue #1047). The `partial` is kept whole and
-     * unbounded so a reconnection replay faithfully reconstructs the screen: a
-     * TUI in the alternate screen buffer encodes its state in the cumulative
-     * byte stream from the alt-screen-enter onward, so truncating the front
-     * would corrupt the replay (the app won't repaint on a same-size reconnect).
+     * full-screen-TUI streams (Issue #1047).
+     *
+     * The `partial` was originally kept whole and unbounded, on the reasoning
+     * that a TUI in the alternate screen buffer encodes its state in the
+     * cumulative byte stream from the alt-screen-enter onward, so truncating the
+     * front would corrupt the replay. That is true, but the growth it licensed
+     * was unbounded for the life of the session (#1205), and every layer above
+     * already accepts exactly this trade: the replay seed, the send cap, and the
+     * frame-skip path are all lossy tail-cuts that rely on the client's
+     * post-connect repaint nudge. So the partial is now capped too, with cuts
+     * ESC-aligned to avoid starting the tail inside an escape sequence.
      *
      * Returns last sequence number.
      */
     pushData(data) {
+        // Monotone total of every char ever fed in (Spec 1313 render-gate round 2). Advances
+        // here — before any split/trim — so it counts ALL output regardless of newlines, and
+        // NEVER decreases (unlike `partialBytes`, which drops when `trimPartial` cuts the front).
+        // It is the render-gate's change token: the mailbox delivery path samples it around the
+        // async classify to detect a mid-render keystroke, and the verdict memo keys on it. A
+        // decreasing signal would let two different screens share a token and alias a stale verdict.
+        this.bytes += data.length;
         let start = 0;
         let nl = data.indexOf('\n');
         while (nl !== -1) {
@@ -54,9 +89,27 @@ export class RingBuffer {
         // Remainder has no newline — append to the partial (cons-string, O(|data|)).
         if (start < data.length) {
             this.partial += data.slice(start);
+            this.trimPartial();
         }
         return this.seq;
     }
+    /**
+     * Enforce the partial ceiling, keeping the most recent characters.
+     *
+     * Trimming back to *half* the ceiling rather than exactly to it is what makes
+     * this affordable. Cutting to the ceiling would put the partial back over it
+     * on the very next append, so every subsequent call would copy the whole
+     * multi-megabyte partial: an O(|partial|)-per-call cost on the hot path that
+     * #1047 specifically restructured to be O(|data|). Halving amortises the copy
+     * over the next half-ceiling of growth, giving O(1) per byte, and bounds the
+     * partial at the ceiling rather than letting it drift above it.
+     */
+    trimPartial() {
+        if (this.partial.length <= this.maxPartialChars)
+            return;
+        const target = Math.floor(this.maxPartialChars / 2);
+        this.partial = this.partial.slice(alignToEscape(this.partial, this.partial.length - target));
+    }
     /** Get all stored lines in order, including any incomplete trailing line. */
     getAll() {
         const result = [];
@@ -110,6 +163,21 @@ export class RingBuffer {
     get partialBytes() {
         return this.partial.length;
     }
+    /**
+     * Cumulative chars ever appended via `pushData` (Spec 1313 render-gate round 2).
+     *
+     * Monotonically non-decreasing: it counts every byte of output for the life of the
+     * session and is NEVER reset by `trimPartial` (which drops `partialBytes`) nor by
+     * `clear()` (which keeps `seq` for the same monotonicity reason). That is exactly the
+     * property the render-gate's change token needs — `(currentSeq, partialBytes)` was
+     * non-monotone once #1205 capped the partial (a trim makes `partialBytes` fall, so two
+     * distinct screens could produce the same token and alias a stale memoized verdict).
+     * `bytesWritten` advances on ANY output and can never collide, so an unchanged value is
+     * a sound proof that the classified screen has not moved.
+     */
+    get bytesWritten() {
+        return this.bytes;
+    }
     /** Clear the buffer and release memory. */
     clear() {
         this.buffer = [];

package/dist/terminal/ring-buffer.js.map

@@ -1 +1 @@
-{"version":3,"file":"ring-buffer.js","sourceRoot":"","sources":["../../src/terminal/ring-buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,UAAU;IAOQ;IANrB,MAAM,CAAW;IACjB,IAAI,GAAW,CAAC,CAAC;IACjB,KAAK,GAAW,CAAC,CAAC;IAClB,GAAG,GAAW,CAAC,CAAC,CAAC,2CAA2C;IAC5D,OAAO,GAAW,EAAE,CAAC,CAAC,8CAA8C;IAE5E,YAA6B,WAAmB,IAAI;QAAvB,aAAQ,GAAR,QAAQ,CAAe;QAClD,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,kFAAkF;IAClF,IAAI,CAAC,IAAY;QACf,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,IAAY;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;YACf,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,6EAA6E;QAC7E,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAgB;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,GAAG,cAAc,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEnC,MAAM,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,wEAAwE;IACxE,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,2CAA2C;IAC3C,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,2CAA2C;IAC7C,CAAC;CACF"}
+{"version":3,"file":"ring-buffer.js","sourceRoot":"","sources":["../../src/terminal/ring-buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,MAAM,IAAI,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,UAAU;IASF;IACA;IATX,MAAM,CAAW;IACjB,IAAI,GAAW,CAAC,CAAC;IACjB,KAAK,GAAW,CAAC,CAAC;IAClB,GAAG,GAAW,CAAC,CAAC,CAAC,2CAA2C;IAC5D,OAAO,GAAW,EAAE,CAAC,CAAC,8CAA8C;IACpE,KAAK,GAAW,CAAC,CAAC,CAAC,2EAA2E;IAEtG,YACmB,WAAmB,IAAI,EACvB,kBAA0B,iBAAiB;QAD3C,aAAQ,GAAR,QAAQ,CAAe;QACvB,oBAAe,GAAf,eAAe,CAA4B;QAE5D,IAAI,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,kFAAkF;IAClF,IAAI,CAAC,IAAY;QACf,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,IAAY;QACnB,qFAAqF;QACrF,qFAAqF;QACrF,0FAA0F;QAC1F,wFAAwF;QACxF,sFAAsF;QACtF,6FAA6F;QAC7F,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,0EAA0E;YAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;YACf,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,6EAA6E;QAC7E,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACK,WAAW;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAgB;QACvB,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,GAAG,cAAc,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEnC,MAAM,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,wEAAwE;IACxE,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,2CAA2C;IAC3C,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,2CAA2C;IAC7C,CAAC;CACF"}

package/dist/terminal/session-manager.d.ts

@@ -30,6 +30,41 @@ export interface CrashLoopFallback {
     /** Fired once when the fallback is applied (caller repairs persisted state, logs). */
     onApply?: () => void;
 }
+/**
+ * Issue #1264: how to relaunch the harness after a *clean* exit.
+ *
+ * A clean exit means the user ended the harness on purpose (double Ctrl-C,
+ * `/quit`, `exit`). The session and its shellper survive that — only the
+ * harness is rerun, and it is rerun **without recovery**: a fresh
+ * conversation, not a `--resume` of the one just abandoned. Restarting a
+ * crash is the opposite: that one *should* resume, which is what recovery
+ * exists for.
+ *
+ * A factory rather than a precomputed arg list, because every clean exit
+ * starts a genuinely new conversation and so needs its own freshly minted
+ * session id. This layer stays agnostic of what the args mean; the caller
+ * mints, persists, and returns them.
+ *
+ * Returning null (or omitting the option entirely) means "relaunch with the
+ * args as they stand" — correct for sessions that have no recovery concept,
+ * such as plain shells.
+ *
+ * Returning `{ stop: true }` means "do NOT relaunch — end the session instead."
+ * next() can only influence the args/env; the launch `command` is retained by
+ * SessionManager. So when the harness has become invalid since launch (Issue
+ * #1338: a retired harness, whose retained command may itself be the retired
+ * binary), rerunning would be fail-open. `stop` lets the factory fail closed:
+ * SessionManager tears the session down with a visible reason rather than
+ * respawning the retired command.
+ */
+export interface FreshLaunch {
+    next: () => {
+        args: string[];
+        env?: Record<string, string>;
+    } | {
+        stop: true;
+    } | null;
+}
 export interface CreateSessionOptions {
     sessionId: string;
     command: string;
@@ -43,6 +78,7 @@ export interface CreateSessionOptions {
     maxRestarts?: number;
     restartResetAfter?: number;
     crashLoopFallback?: CrashLoopFallback;
+    freshLaunch?: FreshLaunch;
 }
 export interface ReconnectRestartOptions {
     command: string;
@@ -53,11 +89,38 @@ export interface ReconnectRestartOptions {
     maxRestarts?: number;
     restartResetAfter?: number;
     crashLoopFallback?: CrashLoopFallback;
+    freshLaunch?: FreshLaunch;
 }
+/**
+ * Issue #1264 safety valve. Clean-exit reruns are deliberately unlimited —
+ * quitting your agent is a gesture, not a failure, and a long-lived architect
+ * can out-quit any budget. But "unlimited" must not become an infinite spawn
+ * loop when the harness is broken rather than being quit: a misconfigured
+ * command that exits 0 immediately would otherwise respawn forever.
+ *
+ * A human cannot produce a deliberate quit within a couple of seconds of the
+ * harness starting, so a clean exit that fast is evidence of a broken command,
+ * not a gesture. Only those count, and only consecutively — a single fast exit
+ * followed by a healthy session resets the counter. This restores the bound
+ * that both #1241 (end the session) and pre-3.2.4 (maxRestarts) had, without
+ * charging real gestures for it.
+ */
+export declare const FAST_CLEAN_EXIT_MS = 2000;
+export declare const MAX_FAST_CLEAN_EXITS = 5;
 /** Failing exits inside this window count toward crash-loop detection. */
 export declare const CRASH_LOOP_WINDOW_MS = 30000;
 /** Failing exits within the window needed to declare a crash loop. */
 export declare const CRASH_LOOP_THRESHOLD = 3;
+/**
+ * #1198 in-place reconnect tuning. When a session's socket closes without an
+ * EXIT frame but the shellper process is still alive, the connection is
+ * re-established instead of tearing the session down: backoff per attempt
+ * within one recovery round, a stability window that resets the round
+ * counter, and a cap on consecutive unstable rounds.
+ */
+export declare const RECONNECT_BACKOFF_MS: number[];
+export declare const RECONNECT_STABILITY_MS = 30000;
+export declare const MAX_RECOVERY_ROUNDS = 3;
 /**
  * Issue #1149: true when the recorded failing-exit timestamps amount to a
  * crash loop (>= CRASH_LOOP_THRESHOLD failures inside the trailing
@@ -90,11 +153,49 @@ export declare class SessionManager extends EventEmitter {
     private sessions;
     private readonly log;
     constructor(config: SessionManagerConfig);
+    /**
+     * This instance's socket directory. Issue #1227: the husk sweep and fleet
+     * observability route handlers need it to reuse the exact scope-marker
+     * technique findShellperProcesses() uses, so they never touch (or count)
+     * another Tower instance's shellpers.
+     */
+    get socketDir(): string;
     /**
      * Spawn a new shellper process and connect to it.
      * Returns the connected client.
      */
     createSession(opts: CreateSessionOptions): Promise<IShellperClient>;
+    /**
+     * Subscribe to a session client's lifecycle events (exit, error, close) and
+     * set up auto-restart when configured. Called on session creation, on
+     * reconnection after a Tower restart, and again for the replacement client
+     * after an in-place reconnect (#1198), so all three paths behave identically.
+     */
+    private wireClientEvents;
+    /**
+     * #1198: attempt to re-establish a session's shellper connection after an
+     * unexpected socket close. The shellper protocol is built for reconnection
+     * (that is how sessions survive Tower restarts), so a transient socket
+     * error must not tear down a healthy shellper: doing so unlinks the live
+     * socket and orphans the process. Falls through to the historical
+     * dead-session path when the process is gone or every attempt fails.
+     */
+    private recoverSession;
+    /**
+     * Whether the session's recorded shellper process is still the one running
+     * under its PID: alive, and with a matching start time (guards PID reuse).
+     */
+    private isShellperProcessCurrent;
+    /**
+     * Whether an in-place reconnect can possibly succeed: the shellper process
+     * is current (alive, same start time) and its socket file still exists.
+     */
+    private canReachShellper;
+    /**
+     * The historical unexpected-death path: remove the session, clean up its
+     * socket, and emit 'session-error' so the Tower layer can log the loss.
+     */
+    private declareSessionDead;
     /**
      * Reconnect to an existing shellper process after Tower restart.
      * Validates PID is alive and start time matches.
@@ -170,7 +271,35 @@ export declare class SessionManager extends EventEmitter {
      * Remove a dead session from the map, clear its timers, and clean up socket.
      * Called when a session exits naturally (no restart) or exhausts maxRestarts.
      */
+    /**
+     * Removal for sessions whose CHILD process ended (clean exit, or restart
+     * exhaustion). The shellper deliberately lingers after its child exits to
+     * serve late connections (#905), so it is a spent husk here: unlink the
+     * socket unconditionally — that is what marks the lingering shellper
+     * unresponsive so killOrphanedShellpers reaps it. Preserving the socket on
+     * this path leaks an immortal empty shellper per exited session (#1198
+     * e2e regression).
+     */
     private removeDeadSession;
+    /**
+     * #1198: removal for sessions whose CONNECTION died (recovery exhausted or
+     * shellper unreachable). Unlike the child-exit path, the shellper may
+     * still host a live conversation, and unlinking a live shellper's socket
+     * makes it unreachable AND flags it for the orphan sweeper's kill path —
+     * so this path preserves the socket while the recorded process is current,
+     * degrading to a recoverable orphan (re-adoptable, attachable), never a
+     * killed live process.
+     */
+    private removeUnreachableSession;
+    private detachSessionFromMap;
+    /**
+     * Socket cleanup for the connection-failure path: unlink only when the
+     * recorded shellper process is gone. The check uses the same start-time
+     * guard as reconnection, so a reused PID counts as "gone" and a dead
+     * shellper's socket/log files do not leak. Async and best-effort by
+     * design; the map mutation stays sync in the caller.
+     */
+    private cleanupDeadSessionSocket;
     private getSocketPath;
     private unlinkSocketIfExists;
     private readShellperInfo;

package/dist/terminal/session-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/terminal/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/E;AAED;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,OAAO,CAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,QAAQ,SAAM,EAAE,aAAa,SAAQ;IAKjD,yDAAyD;IACzD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAezB,uDAAuD;IACvD,KAAK,IAAI,IAAI;IAab,8BAA8B;IAC9B,QAAQ,IAAI,MAAM,EAAE;IAIpB,8DAA8D;IAC9D,UAAU,IAAI,OAAO;CAGtB;AAiBD,qBAAa,cAAe,SAAQ,YAAY;IAIlC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAqC;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;gBAEf,MAAM,EAAE,oBAAoB;IAKzD;;;OAGG;IACG,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqIzE;;;;OAIG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,uBAAuB,GACvC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAsGlC;;;OAGG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6CnD;;OAEG;IACH,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;IAQ5C;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAUhG;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAqD5C;;;OAGG;IACH,OAAO,CAAC,WAAW;IAsBnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC;IA8C9C;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IA2B7B;;;;OAIG;IACH,QAAQ,IAAI,IAAI;IAahB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,oBAAoB;IAkB5B,OAAO,CAAC,gBAAgB;IAiDxB,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,gBAAgB;IA+DxB;;;;;;;OAOG;IACH,OAAO,CAAC,2BAA2B;IAkBnC,OAAO,CAAC,sBAAsB;IAe9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,aAAa;CAmCtB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2DvE"}
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/terminal/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACtF;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AACxC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,UAAoB,CAAC;AACtD,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,gBAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/E;AAED;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,OAAO,CAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAEnB,QAAQ,SAAM,EAAE,aAAa,SAAQ;IAKjD,yDAAyD;IACzD,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAezB,uDAAuD;IACvD,KAAK,IAAI,IAAI;IAab,8BAA8B;IAC9B,QAAQ,IAAI,MAAM,EAAE;IAIpB,8DAA8D;IAC9D,UAAU,IAAI,OAAO;CAGtB;AA6BD,qBAAa,cAAe,SAAQ,YAAY;IAIlC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAqC;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAwB;gBAEf,MAAM,EAAE,oBAAoB;IAKzD;;;;;OAKG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;;OAGG;IACG,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAyGzE;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAoDxB;;;;;;;OAOG;YACW,cAAc;IA6C5B;;;OAGG;YACW,wBAAwB;IAStC;;;OAGG;YACW,gBAAgB;IAU9B;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAQ1B;;;;OAIG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,uBAAuB,GACvC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAyFlC;;;OAGG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6CnD;;OAEG;IACH,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;IAQ5C;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAUhG;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IAqD5C;;;OAGG;IACH,OAAO,CAAC,WAAW;IAsBnB;;;;;;;;;;;;;;;;;;OAkBG;IACG,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC;IA8C9C;;;;;;;;;OASG;IACH,OAAO,CAAC,qBAAqB;IA2B7B;;;;OAIG;IACH,QAAQ,IAAI,IAAI;IAahB;;;OAGG;IACH;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;;;;;;;OAQG;IACH,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,oBAAoB;IAW5B;;;;;;OAMG;YACW,wBAAwB;IAetC,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,oBAAoB;IAkB5B,OAAO,CAAC,gBAAgB;IAiDxB,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,qBAAqB;IAmB7B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;IAmBrB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,kBAAkB;IAkB1B,OAAO,CAAC,gBAAgB;IAoKxB;;;;;;;OAOG;IACH,OAAO,CAAC,2BAA2B;IAkBnC,OAAO,CAAC,sBAAsB;IAe9B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;OAIG;IACH,OAAO,CAAC,aAAa;CAmCtB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2DvE"}