@code-yeongyu/senpi 2026.7.25 → 2026.7.26

package/dist/modes/rpc/neo-daemon-registry.js

@@ -1,209 +0,0 @@
-/**
- * Neo daemon registry: the on-disk record clients use to find a running daemon
- * for a given cwd.
- *
- * Layout: `<agentDir>/neo-daemon/<cwd-key>.json`, mode 0600, containing
- * `{ version, socket, pid, token }`. The daemon is the ONLY writer — clients
- * only read. Writes are atomic (temp file + rename) so a client never observes a
- * half-written record.
- *
- * `cwd-key` uses the same safe-path scheme as the session manager
- * (session-manager.ts getDefaultSessionDirPath) so one cwd maps to exactly one
- * daemon record.
- */
-import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
-import { connect } from "node:net";
-import { join } from "node:path";
-import { resolvePath } from "../../utils/paths.js";
-/** Bump when the wire protocol or handshake changes incompatibly. */
-export const NEO_DAEMON_PROTOCOL_VERSION = 1;
-/**
- * Compute the safe registry-key for a cwd. Mirrors the session-manager
- * safe-path scheme so both derive the same key from the same cwd.
- */
-export function neoDaemonCwdKey(cwd) {
-    const resolvedCwd = resolvePath(cwd);
-    return `--${resolvedCwd.replace(/^[/\\]/, "").replace(/[/\\:]/g, "-")}--`;
-}
-/** Directory holding all neo daemon registry records. */
-export function neoDaemonRegistryDir(agentDir) {
-    return join(agentDir, "neo-daemon");
-}
-/** Absolute path to the registry record for a cwd. */
-export function neoDaemonRegistryPath(agentDir, cwd) {
-    return join(neoDaemonRegistryDir(agentDir), `${neoDaemonCwdKey(cwd)}.json`);
-}
-function isValidRecord(value) {
-    if (typeof value !== "object" || value === null)
-        return false;
-    const record = value;
-    return (typeof record.version === "number" &&
-        typeof record.socket === "string" &&
-        typeof record.pid === "number" &&
-        typeof record.token === "string");
-}
-/**
- * Read the registry record for a cwd. Returns undefined when the file is
- * missing, unreadable, or malformed (all non-fatal — the caller then spawns).
- */
-export function readNeoDaemonRecord(agentDir, cwd) {
-    const path = neoDaemonRegistryPath(agentDir, cwd);
-    let raw;
-    try {
-        raw = readFileSync(path, "utf8");
-    }
-    catch {
-        return undefined;
-    }
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        return undefined;
-    }
-    return isValidRecord(parsed) ? parsed : undefined;
-}
-/**
- * Atomically write the registry record (temp file + rename, mode 0600). The
- * daemon calls this as the LAST listen step, after the socket is bound and
- * listening.
- */
-export function writeNeoDaemonRecord(agentDir, cwd, record) {
-    const dir = neoDaemonRegistryDir(agentDir);
-    mkdirSync(dir, { recursive: true });
-    const finalPath = neoDaemonRegistryPath(agentDir, cwd);
-    const tempPath = `${finalPath}.${process.pid}.${Date.now()}.tmp`;
-    writeFileSync(tempPath, JSON.stringify(record, null, 2), { mode: 0o600 });
-    renameSync(tempPath, finalPath);
-}
-/**
- * Re-assert the daemon's own registry record iff it is missing or does not match
- * this daemon (version/socket/pid/token). Returns true when a (re-)write happened.
- *
- * This is the self-heal that closes the "live daemon owns the deterministic
- * socket, but its registry record was lost/corrupted (or a SIGKILL left it
- * missing)" recovery wedge: a fresh client cannot bind a new daemon (the live one
- * owns the socket) and, with no record, cannot find the live one either. The
- * daemon calls this on every accepted connection and on a short recurring
- * interval, so a lost record repairs itself inside the client's attach-poll
- * window. It NEVER clobbers an already-correct record (idempotent, no write when
- * the record already points at this daemon), and because there is exactly one
- * daemon per cwd (the bind mutex), it can never fight another live daemon. The
- * re-asserted record carries the daemon's real in-memory token, so token auth is
- * preserved — the client authenticates with the healed token exactly as it would
- * with the original.
- */
-export function reassertNeoDaemonRecord(agentDir, cwd, record) {
-    const existing = readNeoDaemonRecord(agentDir, cwd);
-    if (existing &&
-        existing.version === record.version &&
-        existing.socket === record.socket &&
-        existing.pid === record.pid &&
-        existing.token === record.token) {
-        return false; // already correct — do not fight a valid record
-    }
-    writeNeoDaemonRecord(agentDir, cwd, record);
-    return true;
-}
-/** Remove the registry record for a cwd (best-effort; missing is fine). */
-export function removeNeoDaemonRecord(agentDir, cwd) {
-    const path = neoDaemonRegistryPath(agentDir, cwd);
-    try {
-        unlinkSync(path);
-    }
-    catch {
-        // already gone
-    }
-}
-/**
- * Whether a pid is alive. `process.kill(pid, 0)` throws ESRCH for a dead pid and
- * EPERM for a live pid we cannot signal (which still means "alive").
- */
-export function isPidAlive(pid) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        const code = error.code;
-        return code === "EPERM";
-    }
-}
-/**
- * Clean up a stale record + its socket file for a cwd BEFORE a fresh daemon
- * binds. A record is stale when its pid is dead. Returns true when something was
- * cleaned. The bound socket path is unlinked so the fresh bind does not hit a
- * leftover socket file.
- */
-export function cleanupStaleNeoDaemon(agentDir, cwd) {
-    const record = readNeoDaemonRecord(agentDir, cwd);
-    if (!record) {
-        // No record: still unlink a dangling socket path if the caller left one.
-        return false;
-    }
-    if (isPidAlive(record.pid)) {
-        return false;
-    }
-    // Stale: remove the socket file and the record.
-    if (record.socket && existsSync(record.socket)) {
-        try {
-            rmSync(record.socket, { force: true });
-        }
-        catch {
-            // non-fatal
-        }
-    }
-    removeNeoDaemonRecord(agentDir, cwd);
-    return true;
-}
-/**
- * Reclaim a leftover unix-socket file at `listenPath` when NO live daemon is
- * serving it, so a fresh bind() does not hit EADDRINUSE forever.
- *
- * This is the safety net that makes the DETERMINISTIC socket path safe: a daemon
- * SIGKILLed without a clean shutdown leaves the socket file on disk with its
- * registry record gone (so {@link cleanupStaleNeoDaemon}, which keys off the
- * record, misses it). bind() on a leftover unix-socket file throws EADDRINUSE
- * whether or not anyone is listening, so the fresh daemon must probe the path and
- * unlink it when it is dead.
- *
- * A LIVE daemon serving the socket accepts a connection; we must NOT unlink that
- * one — the caller then loses the bind race (EADDRINUSE) and attaches to the
- * winner, which is the intended "bind is the mutex" outcome. We only unlink when
- * connecting is refused/errors (a dead socket) or the path is a plain file.
- *
- * No-op on Windows named pipes (not filesystem paths; the OS reclaims a pipe when
- * its owner dies) and when nothing exists at the path.
- */
-export async function reclaimDeadSocketFile(listenPath) {
-    if (process.platform === "win32")
-        return;
-    if (!existsSync(listenPath))
-        return;
-    const alive = await isSocketServed(listenPath);
-    if (alive)
-        return; // a live daemon owns it — let the caller lose the bind race
-    try {
-        rmSync(listenPath, { force: true });
-    }
-    catch {
-        // non-fatal: bind will surface any real problem as EADDRINUSE/EACCES
-    }
-}
-/** Whether a unix socket at `path` currently accepts a connection (a live server). */
-function isSocketServed(path) {
-    return new Promise((resolve) => {
-        const socket = connect(path);
-        const done = (alive) => {
-            socket.removeAllListeners();
-            socket.destroy();
-            resolve(alive);
-        };
-        socket.once("connect", () => done(true));
-        socket.once("error", () => done(false));
-    });
-}
-//# sourceMappingURL=neo-daemon-registry.js.map

package/dist/modes/rpc/neo-daemon-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"neo-daemon-registry.js","sourceRoot":"","sources":["../../../src/modes/rpc/neo-daemon-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7G,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,qEAAqE;AACrE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAa7C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IAC1C,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,KAAK,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,GAAW;IAClE,OAAO,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CACN,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAChC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IAChE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAuB;IAC1F,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;IACjE,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAuB;IAC7F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpD,IACC,QAAQ;QACR,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACnC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QACjC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAC3B,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,EAC9B,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,gDAAgD;IAC/D,CAAC;IACD,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,GAAW;IAClE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC;QACJ,UAAU,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,eAAe;IAChB,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,IAAI,KAAK,OAAO,CAAC;IACzB,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,GAAW;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,yEAAyE;QACzE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,gDAAgD;IAChD,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACJ,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,YAAY;QACb,CAAC;IACF,CAAC;IACD,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAkB;IAC7D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IACpC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,KAAK;QAAE,OAAO,CAAC,4DAA4D;IAC/E,IAAI,CAAC;QACJ,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,qEAAqE;IACtE,CAAC;AACF,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;YACrC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Neo daemon registry: the on-disk record clients use to find a running daemon\n * for a given cwd.\n *\n * Layout: `<agentDir>/neo-daemon/<cwd-key>.json`, mode 0600, containing\n * `{ version, socket, pid, token }`. The daemon is the ONLY writer — clients\n * only read. Writes are atomic (temp file + rename) so a client never observes a\n * half-written record.\n *\n * `cwd-key` uses the same safe-path scheme as the session manager\n * (session-manager.ts getDefaultSessionDirPath) so one cwd maps to exactly one\n * daemon record.\n */\n\nimport { existsSync, mkdirSync, readFileSync, renameSync, rmSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport { connect } from \"node:net\";\nimport { join } from \"node:path\";\nimport { resolvePath } from \"../../utils/paths.ts\";\n\n/** Bump when the wire protocol or handshake changes incompatibly. */\nexport const NEO_DAEMON_PROTOCOL_VERSION = 1;\n\nexport interface NeoDaemonRecord {\n\t/** Protocol version the daemon speaks; clients refuse on mismatch. */\n\treadonly version: number;\n\t/** Absolute unix socket path (or Windows named-pipe path) the daemon listens on. */\n\treadonly socket: string;\n\t/** Daemon process id, used for stale-record detection. */\n\treadonly pid: number;\n\t/** Handshake token; a client must present it in `hello`. */\n\treadonly token: string;\n}\n\n/**\n * Compute the safe registry-key for a cwd. Mirrors the session-manager\n * safe-path scheme so both derive the same key from the same cwd.\n */\nexport function neoDaemonCwdKey(cwd: string): string {\n\tconst resolvedCwd = resolvePath(cwd);\n\treturn `--${resolvedCwd.replace(/^[/\\\\]/, \"\").replace(/[/\\\\:]/g, \"-\")}--`;\n}\n\n/** Directory holding all neo daemon registry records. */\nexport function neoDaemonRegistryDir(agentDir: string): string {\n\treturn join(agentDir, \"neo-daemon\");\n}\n\n/** Absolute path to the registry record for a cwd. */\nexport function neoDaemonRegistryPath(agentDir: string, cwd: string): string {\n\treturn join(neoDaemonRegistryDir(agentDir), `${neoDaemonCwdKey(cwd)}.json`);\n}\n\nfunction isValidRecord(value: unknown): value is NeoDaemonRecord {\n\tif (typeof value !== \"object\" || value === null) return false;\n\tconst record = value as Record<string, unknown>;\n\treturn (\n\t\ttypeof record.version === \"number\" &&\n\t\ttypeof record.socket === \"string\" &&\n\t\ttypeof record.pid === \"number\" &&\n\t\ttypeof record.token === \"string\"\n\t);\n}\n\n/**\n * Read the registry record for a cwd. Returns undefined when the file is\n * missing, unreadable, or malformed (all non-fatal — the caller then spawns).\n */\nexport function readNeoDaemonRecord(agentDir: string, cwd: string): NeoDaemonRecord | undefined {\n\tconst path = neoDaemonRegistryPath(agentDir, cwd);\n\tlet raw: string;\n\ttry {\n\t\traw = readFileSync(path, \"utf8\");\n\t} catch {\n\t\treturn undefined;\n\t}\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw);\n\t} catch {\n\t\treturn undefined;\n\t}\n\treturn isValidRecord(parsed) ? parsed : undefined;\n}\n\n/**\n * Atomically write the registry record (temp file + rename, mode 0600). The\n * daemon calls this as the LAST listen step, after the socket is bound and\n * listening.\n */\nexport function writeNeoDaemonRecord(agentDir: string, cwd: string, record: NeoDaemonRecord): void {\n\tconst dir = neoDaemonRegistryDir(agentDir);\n\tmkdirSync(dir, { recursive: true });\n\tconst finalPath = neoDaemonRegistryPath(agentDir, cwd);\n\tconst tempPath = `${finalPath}.${process.pid}.${Date.now()}.tmp`;\n\twriteFileSync(tempPath, JSON.stringify(record, null, 2), { mode: 0o600 });\n\trenameSync(tempPath, finalPath);\n}\n\n/**\n * Re-assert the daemon's own registry record iff it is missing or does not match\n * this daemon (version/socket/pid/token). Returns true when a (re-)write happened.\n *\n * This is the self-heal that closes the \"live daemon owns the deterministic\n * socket, but its registry record was lost/corrupted (or a SIGKILL left it\n * missing)\" recovery wedge: a fresh client cannot bind a new daemon (the live one\n * owns the socket) and, with no record, cannot find the live one either. The\n * daemon calls this on every accepted connection and on a short recurring\n * interval, so a lost record repairs itself inside the client's attach-poll\n * window. It NEVER clobbers an already-correct record (idempotent, no write when\n * the record already points at this daemon), and because there is exactly one\n * daemon per cwd (the bind mutex), it can never fight another live daemon. The\n * re-asserted record carries the daemon's real in-memory token, so token auth is\n * preserved — the client authenticates with the healed token exactly as it would\n * with the original.\n */\nexport function reassertNeoDaemonRecord(agentDir: string, cwd: string, record: NeoDaemonRecord): boolean {\n\tconst existing = readNeoDaemonRecord(agentDir, cwd);\n\tif (\n\t\texisting &&\n\t\texisting.version === record.version &&\n\t\texisting.socket === record.socket &&\n\t\texisting.pid === record.pid &&\n\t\texisting.token === record.token\n\t) {\n\t\treturn false; // already correct — do not fight a valid record\n\t}\n\twriteNeoDaemonRecord(agentDir, cwd, record);\n\treturn true;\n}\n\n/** Remove the registry record for a cwd (best-effort; missing is fine). */\nexport function removeNeoDaemonRecord(agentDir: string, cwd: string): void {\n\tconst path = neoDaemonRegistryPath(agentDir, cwd);\n\ttry {\n\t\tunlinkSync(path);\n\t} catch {\n\t\t// already gone\n\t}\n}\n\n/**\n * Whether a pid is alive. `process.kill(pid, 0)` throws ESRCH for a dead pid and\n * EPERM for a live pid we cannot signal (which still means \"alive\").\n */\nexport function isPidAlive(pid: number): boolean {\n\tif (!Number.isInteger(pid) || pid <= 0) return false;\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn true;\n\t} catch (error) {\n\t\tconst code = (error as NodeJS.ErrnoException).code;\n\t\treturn code === \"EPERM\";\n\t}\n}\n\n/**\n * Clean up a stale record + its socket file for a cwd BEFORE a fresh daemon\n * binds. A record is stale when its pid is dead. Returns true when something was\n * cleaned. The bound socket path is unlinked so the fresh bind does not hit a\n * leftover socket file.\n */\nexport function cleanupStaleNeoDaemon(agentDir: string, cwd: string): boolean {\n\tconst record = readNeoDaemonRecord(agentDir, cwd);\n\tif (!record) {\n\t\t// No record: still unlink a dangling socket path if the caller left one.\n\t\treturn false;\n\t}\n\tif (isPidAlive(record.pid)) {\n\t\treturn false;\n\t}\n\t// Stale: remove the socket file and the record.\n\tif (record.socket && existsSync(record.socket)) {\n\t\ttry {\n\t\t\trmSync(record.socket, { force: true });\n\t\t} catch {\n\t\t\t// non-fatal\n\t\t}\n\t}\n\tremoveNeoDaemonRecord(agentDir, cwd);\n\treturn true;\n}\n\n/**\n * Reclaim a leftover unix-socket file at `listenPath` when NO live daemon is\n * serving it, so a fresh bind() does not hit EADDRINUSE forever.\n *\n * This is the safety net that makes the DETERMINISTIC socket path safe: a daemon\n * SIGKILLed without a clean shutdown leaves the socket file on disk with its\n * registry record gone (so {@link cleanupStaleNeoDaemon}, which keys off the\n * record, misses it). bind() on a leftover unix-socket file throws EADDRINUSE\n * whether or not anyone is listening, so the fresh daemon must probe the path and\n * unlink it when it is dead.\n *\n * A LIVE daemon serving the socket accepts a connection; we must NOT unlink that\n * one — the caller then loses the bind race (EADDRINUSE) and attaches to the\n * winner, which is the intended \"bind is the mutex\" outcome. We only unlink when\n * connecting is refused/errors (a dead socket) or the path is a plain file.\n *\n * No-op on Windows named pipes (not filesystem paths; the OS reclaims a pipe when\n * its owner dies) and when nothing exists at the path.\n */\nexport async function reclaimDeadSocketFile(listenPath: string): Promise<void> {\n\tif (process.platform === \"win32\") return;\n\tif (!existsSync(listenPath)) return;\n\tconst alive = await isSocketServed(listenPath);\n\tif (alive) return; // a live daemon owns it — let the caller lose the bind race\n\ttry {\n\t\trmSync(listenPath, { force: true });\n\t} catch {\n\t\t// non-fatal: bind will surface any real problem as EADDRINUSE/EACCES\n\t}\n}\n\n/** Whether a unix socket at `path` currently accepts a connection (a live server). */\nfunction isSocketServed(path: string): Promise<boolean> {\n\treturn new Promise((resolve) => {\n\t\tconst socket = connect(path);\n\t\tconst done = (alive: boolean): void => {\n\t\t\tsocket.removeAllListeners();\n\t\t\tsocket.destroy();\n\t\t\tresolve(alive);\n\t\t};\n\t\tsocket.once(\"connect\", () => done(true));\n\t\tsocket.once(\"error\", () => done(false));\n\t});\n}\n"]}

package/dist/modes/rpc/neo-runtime-options-argv.d.ts

@@ -1,17 +0,0 @@
-/**
- * Convert a NeoRuntimeOptions payload into the classic argv a child
- * `senpi --mode rpc` worker consumes for runtime construction.
- *
- * This is the daemon-side inverse of cli/neo/build-argv.ts: the launcher turns
- * classic argv into neo argv; here the daemon turns the connection's
- * NeoRuntimeOptions back into classic runtime-construction argv for its worker
- * process. Initial inputs (messages / fileArgs) are intentionally NOT emitted —
- * an rpc worker does not consume them as an initial prompt. The plain positional
- * `messages` text is delivered separately as a `prompt` command; launch-time
- * @file expansion is not yet implemented, so `fileArgs` are surfaced as a
- * one-line non-fatal notice in the Go TUI rather than expanded.
- */
-import type { NeoRuntimeOptions } from "./neo-runtime-options.ts";
-/** Build the classic runtime-construction argv for `senpi --mode rpc`. */
-export declare function neoRuntimeOptionsToRpcArgv(options: NeoRuntimeOptions): string[];
-//# sourceMappingURL=neo-runtime-options-argv.d.ts.map

package/dist/modes/rpc/neo-runtime-options-argv.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"neo-runtime-options-argv.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/neo-runtime-options-argv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAmD/E"}

package/dist/modes/rpc/neo-runtime-options-argv.js

@@ -1,79 +0,0 @@
-/**
- * Convert a NeoRuntimeOptions payload into the classic argv a child
- * `senpi --mode rpc` worker consumes for runtime construction.
- *
- * This is the daemon-side inverse of cli/neo/build-argv.ts: the launcher turns
- * classic argv into neo argv; here the daemon turns the connection's
- * NeoRuntimeOptions back into classic runtime-construction argv for its worker
- * process. Initial inputs (messages / fileArgs) are intentionally NOT emitted —
- * an rpc worker does not consume them as an initial prompt. The plain positional
- * `messages` text is delivered separately as a `prompt` command; launch-time
- * @file expansion is not yet implemented, so `fileArgs` are surfaced as a
- * one-line non-fatal notice in the Go TUI rather than expanded.
- */
-/** Build the classic runtime-construction argv for `senpi --mode rpc`. */
-export function neoRuntimeOptionsToRpcArgv(options) {
-    const argv = ["--mode", "rpc"];
-    pushValue(argv, "--provider", options.provider);
-    pushValue(argv, "--model", options.model);
-    pushValue(argv, "--models", options.models?.join(","));
-    pushValue(argv, "--thinking", options.thinking);
-    pushValue(argv, "--api-key", options.apiKey);
-    pushValue(argv, "--session", options.session);
-    pushValue(argv, "--session-id", options.sessionId);
-    pushValue(argv, "--session-dir", options.sessionDir);
-    pushValue(argv, "--fork", options.fork);
-    pushValue(argv, "--name", options.name);
-    pushFlag(argv, "--resume", options.resume);
-    pushFlag(argv, "--continue", options.continue);
-    pushFlag(argv, "--no-session", options.noSession);
-    if (options.projectTrustOverride === true) {
-        argv.push("--approve");
-    }
-    else if (options.projectTrustOverride === false) {
-        argv.push("--no-approve");
-    }
-    pushValue(argv, "--tools", options.tools?.join(","));
-    pushValue(argv, "--exclude-tools", options.excludeTools?.join(","));
-    pushFlag(argv, "--no-tools", options.noTools);
-    pushFlag(argv, "--no-builtin-tools", options.noBuiltinTools);
-    pushRepeated(argv, "--extension", options.extensions);
-    pushRepeated(argv, "--skill", options.skills);
-    pushRepeated(argv, "--prompt-template", options.promptTemplates);
-    pushRepeated(argv, "--theme", options.themes);
-    pushFlag(argv, "--no-extensions", options.noExtensions);
-    pushFlag(argv, "--no-skills", options.noSkills);
-    pushFlag(argv, "--no-prompt-templates", options.noPromptTemplates);
-    pushFlag(argv, "--no-themes", options.noThemes);
-    pushFlag(argv, "--no-context-files", options.noContextFiles);
-    // Extension (unknown) flags: `--<name>` for boolean-true, `--<name> <value>` otherwise.
-    if (options.unknownFlags) {
-        for (const [name, value] of Object.entries(options.unknownFlags)) {
-            if (value === true) {
-                argv.push(`--${name}`);
-            }
-            else if (value !== false) {
-                argv.push(`--${name}`, String(value));
-            }
-        }
-    }
-    return argv;
-}
-function pushValue(argv, flag, value) {
-    if (value !== undefined) {
-        argv.push(flag, value);
-    }
-}
-function pushFlag(argv, flag, value) {
-    if (value === true) {
-        argv.push(flag);
-    }
-}
-function pushRepeated(argv, flag, values) {
-    if (values === undefined)
-        return;
-    for (const value of values) {
-        argv.push(flag, value);
-    }
-}
-//# sourceMappingURL=neo-runtime-options-argv.js.map

package/dist/modes/rpc/neo-runtime-options-argv.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"neo-runtime-options-argv.js","sourceRoot":"","sources":["../../../src/modes/rpc/neo-runtime-options-argv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,0EAA0E;AAC1E,MAAM,UAAU,0BAA0B,CAAC,OAA0B;IACpE,MAAM,IAAI,GAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEzC,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7C,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAElD,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,CAAC;SAAM,IAAI,OAAO,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,CAAC;IAED,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE7D,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,YAAY,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACjE,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE7D,wFAAwF;IACxF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACxB,CAAC;iBAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY,EAAE,KAAyB;IACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAY,EAAE,KAA0B;IACzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,IAAc,EAAE,IAAY,EAAE,MAAqC;IACxF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;AACF,CAAC","sourcesContent":["/**\n * Convert a NeoRuntimeOptions payload into the classic argv a child\n * `senpi --mode rpc` worker consumes for runtime construction.\n *\n * This is the daemon-side inverse of cli/neo/build-argv.ts: the launcher turns\n * classic argv into neo argv; here the daemon turns the connection's\n * NeoRuntimeOptions back into classic runtime-construction argv for its worker\n * process. Initial inputs (messages / fileArgs) are intentionally NOT emitted —\n * an rpc worker does not consume them as an initial prompt. The plain positional\n * `messages` text is delivered separately as a `prompt` command; launch-time\n * @file expansion is not yet implemented, so `fileArgs` are surfaced as a\n * one-line non-fatal notice in the Go TUI rather than expanded.\n */\n\nimport type { NeoRuntimeOptions } from \"./neo-runtime-options.ts\";\n\n/** Build the classic runtime-construction argv for `senpi --mode rpc`. */\nexport function neoRuntimeOptionsToRpcArgv(options: NeoRuntimeOptions): string[] {\n\tconst argv: string[] = [\"--mode\", \"rpc\"];\n\n\tpushValue(argv, \"--provider\", options.provider);\n\tpushValue(argv, \"--model\", options.model);\n\tpushValue(argv, \"--models\", options.models?.join(\",\"));\n\tpushValue(argv, \"--thinking\", options.thinking);\n\tpushValue(argv, \"--api-key\", options.apiKey);\n\n\tpushValue(argv, \"--session\", options.session);\n\tpushValue(argv, \"--session-id\", options.sessionId);\n\tpushValue(argv, \"--session-dir\", options.sessionDir);\n\tpushValue(argv, \"--fork\", options.fork);\n\tpushValue(argv, \"--name\", options.name);\n\tpushFlag(argv, \"--resume\", options.resume);\n\tpushFlag(argv, \"--continue\", options.continue);\n\tpushFlag(argv, \"--no-session\", options.noSession);\n\n\tif (options.projectTrustOverride === true) {\n\t\targv.push(\"--approve\");\n\t} else if (options.projectTrustOverride === false) {\n\t\targv.push(\"--no-approve\");\n\t}\n\n\tpushValue(argv, \"--tools\", options.tools?.join(\",\"));\n\tpushValue(argv, \"--exclude-tools\", options.excludeTools?.join(\",\"));\n\tpushFlag(argv, \"--no-tools\", options.noTools);\n\tpushFlag(argv, \"--no-builtin-tools\", options.noBuiltinTools);\n\n\tpushRepeated(argv, \"--extension\", options.extensions);\n\tpushRepeated(argv, \"--skill\", options.skills);\n\tpushRepeated(argv, \"--prompt-template\", options.promptTemplates);\n\tpushRepeated(argv, \"--theme\", options.themes);\n\tpushFlag(argv, \"--no-extensions\", options.noExtensions);\n\tpushFlag(argv, \"--no-skills\", options.noSkills);\n\tpushFlag(argv, \"--no-prompt-templates\", options.noPromptTemplates);\n\tpushFlag(argv, \"--no-themes\", options.noThemes);\n\tpushFlag(argv, \"--no-context-files\", options.noContextFiles);\n\n\t// Extension (unknown) flags: `--<name>` for boolean-true, `--<name> <value>` otherwise.\n\tif (options.unknownFlags) {\n\t\tfor (const [name, value] of Object.entries(options.unknownFlags)) {\n\t\t\tif (value === true) {\n\t\t\t\targv.push(`--${name}`);\n\t\t\t} else if (value !== false) {\n\t\t\t\targv.push(`--${name}`, String(value));\n\t\t\t}\n\t\t}\n\t}\n\n\treturn argv;\n}\n\nfunction pushValue(argv: string[], flag: string, value: string | undefined): void {\n\tif (value !== undefined) {\n\t\targv.push(flag, value);\n\t}\n}\n\nfunction pushFlag(argv: string[], flag: string, value: boolean | undefined): void {\n\tif (value === true) {\n\t\targv.push(flag);\n\t}\n}\n\nfunction pushRepeated(argv: string[], flag: string, values: readonly string[] | undefined): void {\n\tif (values === undefined) return;\n\tfor (const value of values) {\n\t\targv.push(flag, value);\n\t}\n}\n"]}

package/dist/modes/rpc/neo-runtime-options.d.ts

@@ -1,84 +0,0 @@
-/**
- * NeoRuntimeOptions — the typed handshake payload a neo client sends so the
- * daemon builds THAT connection's runtime exactly as the classic launcher would.
- *
- * Every field here corresponds to a `parsed.<field>` read in the classic
- * runtime-construction path (main.ts). The neo launcher forwards the classic
- * argv (see cli/neo/build-argv.ts); the daemon reconstructs a runtime from this
- * payload per connection, so per-client startup flags survive daemon sharing.
- *
- * The mapping between classic parsed fields and this payload is captured by
- * {@link NEO_RUNTIME_OPTION_SOURCE_FIELDS} and enforced by an extraction test
- * (neo-runtime-options-extraction.test.ts): the test statically scans the
- * runtime-construction path for `parsed.*` reads and fails if any runtime field
- * is not represented here. It is therefore GENERATED FROM the source, never
- * hand-maintained — a future consumer of a new parsed field fails the test until
- * it is threaded through this payload.
- *
- * Documented carve-outs (fields the daemon deliberately does NOT accept because
- * they are launcher fast-paths or resolve before the daemon is ever reached):
- * see {@link NEO_RUNTIME_OPTION_CARVEOUT_FIELDS}.
- */
-/**
- * The typed per-connection runtime options.
- *
- * Values mirror the classic `Args` shape for the runtime-relevant subset. All
- * fields are optional: an omitted field means "classic default" for that flag.
- * Initial inputs (`messages`, `fileArgs`) are forwarded RAW. Launch-time
- * @file/image expansion is NOT yet implemented daemon-side: only the plain
- * positional `messages` text is delivered (as a `prompt` command); `fileArgs`
- * surface a one-line non-fatal notice in the Go TUI instead of being expanded.
- */
-export interface NeoRuntimeOptions {
-    readonly provider?: string;
-    readonly model?: string;
-    readonly models?: readonly string[];
-    readonly thinking?: string;
-    /**
-     * Per-connection API key. Applied ONLY to this connection's own AuthStorage
-     * so one client's --api-key can never leak into another connection.
-     */
-    readonly apiKey?: string;
-    readonly noSession?: boolean;
-    readonly session?: string;
-    readonly sessionId?: string;
-    readonly sessionDir?: string;
-    readonly fork?: string;
-    readonly name?: string;
-    readonly resume?: boolean;
-    readonly continue?: boolean;
-    readonly projectTrustOverride?: boolean;
-    readonly tools?: readonly string[];
-    readonly excludeTools?: readonly string[];
-    readonly noTools?: boolean;
-    readonly noBuiltinTools?: boolean;
-    readonly extensions?: readonly string[];
-    readonly skills?: readonly string[];
-    readonly promptTemplates?: readonly string[];
-    readonly themes?: readonly string[];
-    readonly noExtensions?: boolean;
-    readonly noSkills?: boolean;
-    readonly noPromptTemplates?: boolean;
-    readonly noThemes?: boolean;
-    readonly noContextFiles?: boolean;
-    /** Unknown flags (extension flags): name -> value. */
-    readonly unknownFlags?: Readonly<Record<string, boolean | string>>;
-    readonly messages?: readonly string[];
-    readonly fileArgs?: readonly string[];
-}
-/**
- * Every classic `parsed.<field>` the runtime-construction path reads that MUST
- * be represented in {@link NeoRuntimeOptions}. This is the contract the
- * extraction test enforces against the actual source.
- *
- * Keep this in `parsed`-field spelling (the classic Args key), because that is
- * what the extraction test scans for in main.ts.
- */
-export declare const NEO_RUNTIME_OPTION_SOURCE_FIELDS: readonly ["provider", "model", "models", "thinking", "apiKey", "noSession", "session", "sessionId", "sessionDir", "fork", "name", "resume", "continue", "projectTrustOverride", "tools", "excludeTools", "noTools", "noBuiltinTools", "extensions", "skills", "promptTemplates", "themes", "noExtensions", "noSkills", "noPromptTemplates", "noThemes", "noContextFiles", "unknownFlags", "messages", "fileArgs"];
-/**
- * Classic `parsed.*` fields the runtime path reads that the daemon deliberately
- * does NOT accept in the handshake, each with the reason it resolves before the
- * daemon or is intentionally launcher-local. The extraction test allows these.
- */
-export declare const NEO_RUNTIME_OPTION_CARVEOUT_FIELDS: Readonly<Record<string, string>>;
-//# sourceMappingURL=neo-runtime-options.d.ts.map

package/dist/modes/rpc/neo-runtime-options.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"neo-runtime-options.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/neo-runtime-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAEjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAG5B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAGxC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAGlC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAElC,sDAAsD;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC;IAGnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,mZA+B2B,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBtE,CAAC"}

package/dist/modes/rpc/neo-runtime-options.js

@@ -1,92 +0,0 @@
-/**
- * NeoRuntimeOptions — the typed handshake payload a neo client sends so the
- * daemon builds THAT connection's runtime exactly as the classic launcher would.
- *
- * Every field here corresponds to a `parsed.<field>` read in the classic
- * runtime-construction path (main.ts). The neo launcher forwards the classic
- * argv (see cli/neo/build-argv.ts); the daemon reconstructs a runtime from this
- * payload per connection, so per-client startup flags survive daemon sharing.
- *
- * The mapping between classic parsed fields and this payload is captured by
- * {@link NEO_RUNTIME_OPTION_SOURCE_FIELDS} and enforced by an extraction test
- * (neo-runtime-options-extraction.test.ts): the test statically scans the
- * runtime-construction path for `parsed.*` reads and fails if any runtime field
- * is not represented here. It is therefore GENERATED FROM the source, never
- * hand-maintained — a future consumer of a new parsed field fails the test until
- * it is threaded through this payload.
- *
- * Documented carve-outs (fields the daemon deliberately does NOT accept because
- * they are launcher fast-paths or resolve before the daemon is ever reached):
- * see {@link NEO_RUNTIME_OPTION_CARVEOUT_FIELDS}.
- */
-/**
- * Every classic `parsed.<field>` the runtime-construction path reads that MUST
- * be represented in {@link NeoRuntimeOptions}. This is the contract the
- * extraction test enforces against the actual source.
- *
- * Keep this in `parsed`-field spelling (the classic Args key), because that is
- * what the extraction test scans for in main.ts.
- */
-export const NEO_RUNTIME_OPTION_SOURCE_FIELDS = [
-    "provider",
-    "model",
-    "models",
-    "thinking",
-    "apiKey",
-    "noSession",
-    "session",
-    "sessionId",
-    "sessionDir",
-    "fork",
-    "name",
-    "resume",
-    "continue",
-    "projectTrustOverride",
-    "tools",
-    "excludeTools",
-    "noTools",
-    "noBuiltinTools",
-    "extensions",
-    "skills",
-    "promptTemplates",
-    "themes",
-    "noExtensions",
-    "noSkills",
-    "noPromptTemplates",
-    "noThemes",
-    "noContextFiles",
-    "unknownFlags",
-    "messages",
-    "fileArgs",
-];
-/**
- * Classic `parsed.*` fields the runtime path reads that the daemon deliberately
- * does NOT accept in the handshake, each with the reason it resolves before the
- * daemon or is intentionally launcher-local. The extraction test allows these.
- */
-export const NEO_RUNTIME_OPTION_CARVEOUT_FIELDS = {
-    // Launcher fast-paths: handled and exited before any runtime is constructed.
-    help: "classic --help fast-path; never reaches the daemon",
-    version: "classic --version fast-path; never reaches the daemon",
-    export: "classic --export fast-path; never reaches the daemon",
-    listModels: "classic --list-models fast-path; never reaches the daemon",
-    // Mode / dispatch: the daemon path is chosen by the launcher, not forwarded.
-    mode: "output mode dispatch; the daemon always speaks rpc over the socket",
-    print: "print-mode dispatch; TTY-less --neo falls back to classic print in the launcher",
-    neo: "the --neo flag itself; consumed by the launcher to choose the neo path",
-    multiSession: "RPC-host process flag; neo daemon workers always use classic per-connection RPC",
-    // Diagnostics are produced by the parser, not a runtime input.
-    diagnostics: "parser-produced diagnostics; not a runtime construction input",
-    // Neo launcher-local flags never forwarded to the daemon runtime.
-    neoIsolated: "launcher-local: selects isolated transport, not a runtime input",
-    neoBin: "launcher-local: dev binary override, not a runtime input",
-    // Neo daemon supervisor flags: consumed by the daemon launcher, never a
-    // per-connection runtime input (each connection's runtime comes from the
-    // handshake NeoRuntimeOptions, not the daemon's own argv).
-    neoListen: "daemon-supervisor: socket path to bind; not a per-connection runtime input",
-    neoRegister: "daemon-supervisor: self-register flag; not a per-connection runtime input",
-    // Verbose controls classic startup logging / InteractiveMode; neo renders its
-    // own UI and does not consume classic verbose startup output.
-    verbose: "classic InteractiveMode/startup verbosity; neo renders its own UI",
-};
-//# sourceMappingURL=neo-runtime-options.js.map

package/dist/modes/rpc/neo-runtime-options.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"neo-runtime-options.js","sourceRoot":"","sources":["../../../src/modes/rpc/neo-runtime-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA8DH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,UAAU;IACV,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,WAAW;IACX,SAAS;IACT,WAAW;IACX,YAAY;IACZ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,sBAAsB;IACtB,OAAO;IACP,cAAc;IACd,SAAS;IACT,gBAAgB;IAChB,YAAY;IACZ,QAAQ;IACR,iBAAiB;IACjB,QAAQ;IACR,cAAc;IACd,UAAU;IACV,mBAAmB;IACnB,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,UAAU;IACV,UAAU;CAC6D,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAqC;IACnF,6EAA6E;IAC7E,IAAI,EAAE,oDAAoD;IAC1D,OAAO,EAAE,uDAAuD;IAChE,MAAM,EAAE,sDAAsD;IAC9D,UAAU,EAAE,2DAA2D;IACvE,6EAA6E;IAC7E,IAAI,EAAE,oEAAoE;IAC1E,KAAK,EAAE,iFAAiF;IACxF,GAAG,EAAE,wEAAwE;IAC7E,YAAY,EAAE,iFAAiF;IAC/F,+DAA+D;IAC/D,WAAW,EAAE,+DAA+D;IAC5E,kEAAkE;IAClE,WAAW,EAAE,iEAAiE;IAC9E,MAAM,EAAE,0DAA0D;IAClE,wEAAwE;IACxE,yEAAyE;IACzE,2DAA2D;IAC3D,SAAS,EAAE,4EAA4E;IACvF,WAAW,EAAE,2EAA2E;IACxF,8EAA8E;IAC9E,8DAA8D;IAC9D,OAAO,EAAE,mEAAmE;CACnE,CAAC","sourcesContent":["/**\n * NeoRuntimeOptions — the typed handshake payload a neo client sends so the\n * daemon builds THAT connection's runtime exactly as the classic launcher would.\n *\n * Every field here corresponds to a `parsed.<field>` read in the classic\n * runtime-construction path (main.ts). The neo launcher forwards the classic\n * argv (see cli/neo/build-argv.ts); the daemon reconstructs a runtime from this\n * payload per connection, so per-client startup flags survive daemon sharing.\n *\n * The mapping between classic parsed fields and this payload is captured by\n * {@link NEO_RUNTIME_OPTION_SOURCE_FIELDS} and enforced by an extraction test\n * (neo-runtime-options-extraction.test.ts): the test statically scans the\n * runtime-construction path for `parsed.*` reads and fails if any runtime field\n * is not represented here. It is therefore GENERATED FROM the source, never\n * hand-maintained — a future consumer of a new parsed field fails the test until\n * it is threaded through this payload.\n *\n * Documented carve-outs (fields the daemon deliberately does NOT accept because\n * they are launcher fast-paths or resolve before the daemon is ever reached):\n * see {@link NEO_RUNTIME_OPTION_CARVEOUT_FIELDS}.\n */\n\n/**\n * The typed per-connection runtime options.\n *\n * Values mirror the classic `Args` shape for the runtime-relevant subset. All\n * fields are optional: an omitted field means \"classic default\" for that flag.\n * Initial inputs (`messages`, `fileArgs`) are forwarded RAW. Launch-time\n * @file/image expansion is NOT yet implemented daemon-side: only the plain\n * positional `messages` text is delivered (as a `prompt` command); `fileArgs`\n * surface a one-line non-fatal notice in the Go TUI instead of being expanded.\n */\nexport interface NeoRuntimeOptions {\n\t// Provider / model / thinking / auth.\n\treadonly provider?: string;\n\treadonly model?: string;\n\treadonly models?: readonly string[];\n\treadonly thinking?: string;\n\t/**\n\t * Per-connection API key. Applied ONLY to this connection's own AuthStorage\n\t * so one client's --api-key can never leak into another connection.\n\t */\n\treadonly apiKey?: string;\n\n\t// Session selection.\n\treadonly noSession?: boolean;\n\treadonly session?: string;\n\treadonly sessionId?: string;\n\treadonly sessionDir?: string;\n\treadonly fork?: string;\n\treadonly name?: string;\n\treadonly resume?: boolean;\n\treadonly continue?: boolean;\n\n\t// Approval / project trust.\n\treadonly projectTrustOverride?: boolean;\n\n\t// Tool scoping.\n\treadonly tools?: readonly string[];\n\treadonly excludeTools?: readonly string[];\n\treadonly noTools?: boolean;\n\treadonly noBuiltinTools?: boolean;\n\n\t// Resource loading.\n\treadonly extensions?: readonly string[];\n\treadonly skills?: readonly string[];\n\treadonly promptTemplates?: readonly string[];\n\treadonly themes?: readonly string[];\n\treadonly noExtensions?: boolean;\n\treadonly noSkills?: boolean;\n\treadonly noPromptTemplates?: boolean;\n\treadonly noThemes?: boolean;\n\treadonly noContextFiles?: boolean;\n\n\t/** Unknown flags (extension flags): name -> value. */\n\treadonly unknownFlags?: Readonly<Record<string, boolean | string>>;\n\n\t// Initial inputs — forwarded RAW; daemon expands @file/image paths per cwd.\n\treadonly messages?: readonly string[];\n\treadonly fileArgs?: readonly string[];\n}\n\n/**\n * Every classic `parsed.<field>` the runtime-construction path reads that MUST\n * be represented in {@link NeoRuntimeOptions}. This is the contract the\n * extraction test enforces against the actual source.\n *\n * Keep this in `parsed`-field spelling (the classic Args key), because that is\n * what the extraction test scans for in main.ts.\n */\nexport const NEO_RUNTIME_OPTION_SOURCE_FIELDS = [\n\t\"provider\",\n\t\"model\",\n\t\"models\",\n\t\"thinking\",\n\t\"apiKey\",\n\t\"noSession\",\n\t\"session\",\n\t\"sessionId\",\n\t\"sessionDir\",\n\t\"fork\",\n\t\"name\",\n\t\"resume\",\n\t\"continue\",\n\t\"projectTrustOverride\",\n\t\"tools\",\n\t\"excludeTools\",\n\t\"noTools\",\n\t\"noBuiltinTools\",\n\t\"extensions\",\n\t\"skills\",\n\t\"promptTemplates\",\n\t\"themes\",\n\t\"noExtensions\",\n\t\"noSkills\",\n\t\"noPromptTemplates\",\n\t\"noThemes\",\n\t\"noContextFiles\",\n\t\"unknownFlags\",\n\t\"messages\",\n\t\"fileArgs\",\n] as const satisfies readonly (keyof import(\"../../cli/args.ts\").Args)[];\n\n/**\n * Classic `parsed.*` fields the runtime path reads that the daemon deliberately\n * does NOT accept in the handshake, each with the reason it resolves before the\n * daemon or is intentionally launcher-local. The extraction test allows these.\n */\nexport const NEO_RUNTIME_OPTION_CARVEOUT_FIELDS: Readonly<Record<string, string>> = {\n\t// Launcher fast-paths: handled and exited before any runtime is constructed.\n\thelp: \"classic --help fast-path; never reaches the daemon\",\n\tversion: \"classic --version fast-path; never reaches the daemon\",\n\texport: \"classic --export fast-path; never reaches the daemon\",\n\tlistModels: \"classic --list-models fast-path; never reaches the daemon\",\n\t// Mode / dispatch: the daemon path is chosen by the launcher, not forwarded.\n\tmode: \"output mode dispatch; the daemon always speaks rpc over the socket\",\n\tprint: \"print-mode dispatch; TTY-less --neo falls back to classic print in the launcher\",\n\tneo: \"the --neo flag itself; consumed by the launcher to choose the neo path\",\n\tmultiSession: \"RPC-host process flag; neo daemon workers always use classic per-connection RPC\",\n\t// Diagnostics are produced by the parser, not a runtime input.\n\tdiagnostics: \"parser-produced diagnostics; not a runtime construction input\",\n\t// Neo launcher-local flags never forwarded to the daemon runtime.\n\tneoIsolated: \"launcher-local: selects isolated transport, not a runtime input\",\n\tneoBin: \"launcher-local: dev binary override, not a runtime input\",\n\t// Neo daemon supervisor flags: consumed by the daemon launcher, never a\n\t// per-connection runtime input (each connection's runtime comes from the\n\t// handshake NeoRuntimeOptions, not the daemon's own argv).\n\tneoListen: \"daemon-supervisor: socket path to bind; not a per-connection runtime input\",\n\tneoRegister: \"daemon-supervisor: self-register flag; not a per-connection runtime input\",\n\t// Verbose controls classic startup logging / InteractiveMode; neo renders its\n\t// own UI and does not consume classic verbose startup output.\n\tverbose: \"classic InteractiveMode/startup verbosity; neo renders its own UI\",\n} as const;\n"]}