@code-yeongyu/senpi 2026.9.27-4 → 2026.9.28

package/dist/modes/rpc/host-lifecycle-policy.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The lifecycle supervisor's policy half: which cold-start mode and idle-exit window apply
+ * (`resolveHostPolicy`, environment over settings.json over the defaults), and the pure decision
+ * core that turns the current activity snapshot into active / idle / exit (`IdleExitDecider`).
+ *
+ * Nothing here touches a socket, a process or the filesystem; `host-lifecycle.ts` owns all of that
+ * and re-exports these names so every existing importer keeps resolving them at their original home.
+ */
+export type HostColdStart = "transient" | "persistent";
+/** Environment override for the cold-start policy: `transient` or `persistent`. */
+export declare const HOST_COLD_START_ENV = "SENPI_RPC_HOST_COLD_START";
+/** Environment override for the idle-exit window in milliseconds. */
+export declare const HOST_IDLE_EXIT_MS_ENV = "SENPI_RPC_HOST_IDLE_EXIT_MS";
+/** Default idle-exit window: 15 minutes of continuous no-connection, no-turn idle. */
+export declare const DEFAULT_HOST_IDLE_EXIT_MS: number;
+/** Soft handoff deadline: rescan and report, never interrupt turns or in-flight requests. */
+export declare const HANDOFF_GRACE_MS_ENV = "SENPI_RPC_HANDOFF_GRACE_MS";
+export declare const DEFAULT_HANDOFF_GRACE_MS: number;
+/** The policy fields ensureHost() records in rpc-host-daemon/settings.json. */
+export interface HostLifecyclePolicyInput {
+    readonly coldStart?: HostColdStart;
+    readonly idleExitMs?: number;
+}
+export interface HostLifecyclePolicy {
+    readonly coldStart: HostColdStart;
+    readonly idleExitMs: number;
+}
+export declare function parseColdStart(value: string | undefined): HostColdStart | undefined;
+export declare function parseIdleExitMs(value: string | undefined): number | undefined;
+/**
+ * Resolves the effective host policy. Precedence: environment overrides beat
+ * settings.json, which beats the documented defaults (transient, 15 minutes).
+ * Invalid values at either source fall through to the next source.
+ */
+export declare function resolveHostPolicy(settings: unknown, env: Readonly<Record<string, string | undefined>>): HostLifecyclePolicy;
+export interface HostActivity {
+    readonly connections: number;
+    readonly activeTurns: number;
+}
+export type IdleExitDecision = "active" | "idle" | "exit";
+/**
+ * Pure idle-window decision core. `update()` must be called with the CURRENT
+ * activity state; the window only counts continuously idle time and any
+ * activity resets it, so a busy host can never cross the threshold.
+ */
+export declare class IdleExitDecider {
+    private idleSince;
+    private readonly now;
+    readonly idleExitMs: number;
+    constructor(idleExitMs: number, now?: () => number);
+    update(activity: HostActivity): IdleExitDecision;
+}
+//# sourceMappingURL=host-lifecycle-policy.d.ts.map

package/dist/modes/rpc/host-lifecycle-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-lifecycle-policy.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,QAAc,CAAC;AACrD,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI7E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAC/C,mBAAmB,CASrB;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,MAAiB,EAG3D;IAED,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAa/C;CACD"}

package/dist/modes/rpc/host-lifecycle-policy.js

@@ -0,0 +1,64 @@
+/** Environment override for the cold-start policy: `transient` or `persistent`. */
+export const HOST_COLD_START_ENV = "SENPI_RPC_HOST_COLD_START";
+/** Environment override for the idle-exit window in milliseconds. */
+export const HOST_IDLE_EXIT_MS_ENV = "SENPI_RPC_HOST_IDLE_EXIT_MS";
+/** Default idle-exit window: 15 minutes of continuous no-connection, no-turn idle. */
+export const DEFAULT_HOST_IDLE_EXIT_MS = 15 * 60_000;
+/** Soft handoff deadline: rescan and report, never interrupt turns or in-flight requests. */
+export const HANDOFF_GRACE_MS_ENV = "SENPI_RPC_HANDOFF_GRACE_MS";
+export const DEFAULT_HANDOFF_GRACE_MS = 10 * 60_000;
+export function parseColdStart(value) {
+    return value === "transient" || value === "persistent" ? value : undefined;
+}
+export function parseIdleExitMs(value) {
+    if (value === undefined || !/^\d+$/.test(value.trim()))
+        return undefined;
+    const parsed = Number(value.trim());
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
+}
+/**
+ * Resolves the effective host policy. Precedence: environment overrides beat
+ * settings.json, which beats the documented defaults (transient, 15 minutes).
+ * Invalid values at either source fall through to the next source.
+ */
+export function resolveHostPolicy(settings, env) {
+    const record = isRecord(settings) ? settings : {};
+    const coldStart = parseColdStart(env[HOST_COLD_START_ENV]) ?? parseColdStart(asOptionalString(record.coldStart)) ?? "transient";
+    const idleExitMs = parseIdleExitMs(env[HOST_IDLE_EXIT_MS_ENV]) ??
+        parseIdleExitMs(asOptionalString(record.idleExitMs)) ??
+        DEFAULT_HOST_IDLE_EXIT_MS;
+    return { coldStart, idleExitMs };
+}
+/**
+ * Pure idle-window decision core. `update()` must be called with the CURRENT
+ * activity state; the window only counts continuously idle time and any
+ * activity resets it, so a busy host can never cross the threshold.
+ */
+export class IdleExitDecider {
+    constructor(idleExitMs, now = Date.now) {
+        this.idleExitMs = idleExitMs;
+        this.now = now;
+    }
+    update(activity) {
+        // Any attachment or active turn both holds the host open and resets the
+        // window, so only CONTINUOUS idle can ever cross the threshold.
+        if (activity.connections > 0 || activity.activeTurns > 0) {
+            this.idleSince = undefined;
+            return "active";
+        }
+        if (this.idleExitMs === Number.POSITIVE_INFINITY)
+            return "idle";
+        if (this.idleSince === undefined) {
+            this.idleSince = this.now();
+            return "idle";
+        }
+        return this.now() - this.idleSince >= this.idleExitMs ? "exit" : "idle";
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asOptionalString(value) {
+    return typeof value === "string" ? value : typeof value === "number" ? String(value) : undefined;
+}
+//# sourceMappingURL=host-lifecycle-policy.js.map

package/dist/modes/rpc/host-lifecycle-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-lifecycle-policy.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle-policy.ts"],"names":[],"mappings":"AAUA,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AACnE,sFAAsF;AACtF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,MAAM,CAAC;AACrD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAapD,MAAM,UAAU,cAAc,CAAC,KAAyB;IACvD,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAyB;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAChC,QAAiB,EACjB,GAAiD;IAEjD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,MAAM,SAAS,GACd,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,WAAW,CAAC;IAC/G,MAAM,UAAU,GACf,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAC3C,eAAe,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpD,yBAAyB,CAAC;IAC3B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AASD;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAK3B,YAAY,UAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;QAC3D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,QAAsB;QAC5B,wEAAwE;QACxE,gEAAgE;QAChE,IAAI,QAAQ,CAAC,WAAW,GAAG,CAAC,IAAI,QAAQ,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,iBAAiB;YAAE,OAAO,MAAM,CAAC;QAChE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACzE,CAAC;CACD;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClG,CAAC","sourcesContent":["/**\n * The lifecycle supervisor's policy half: which cold-start mode and idle-exit window apply\n * (`resolveHostPolicy`, environment over settings.json over the defaults), and the pure decision\n * core that turns the current activity snapshot into active / idle / exit (`IdleExitDecider`).\n *\n * Nothing here touches a socket, a process or the filesystem; `host-lifecycle.ts` owns all of that\n * and re-exports these names so every existing importer keeps resolving them at their original home.\n */\nexport type HostColdStart = \"transient\" | \"persistent\";\n\n/** Environment override for the cold-start policy: `transient` or `persistent`. */\nexport const HOST_COLD_START_ENV = \"SENPI_RPC_HOST_COLD_START\";\n/** Environment override for the idle-exit window in milliseconds. */\nexport const HOST_IDLE_EXIT_MS_ENV = \"SENPI_RPC_HOST_IDLE_EXIT_MS\";\n/** Default idle-exit window: 15 minutes of continuous no-connection, no-turn idle. */\nexport const DEFAULT_HOST_IDLE_EXIT_MS = 15 * 60_000;\n/** Soft handoff deadline: rescan and report, never interrupt turns or in-flight requests. */\nexport const HANDOFF_GRACE_MS_ENV = \"SENPI_RPC_HANDOFF_GRACE_MS\";\nexport const DEFAULT_HANDOFF_GRACE_MS = 10 * 60_000;\n\n/** The policy fields ensureHost() records in rpc-host-daemon/settings.json. */\nexport interface HostLifecyclePolicyInput {\n\treadonly coldStart?: HostColdStart;\n\treadonly idleExitMs?: number;\n}\n\nexport interface HostLifecyclePolicy {\n\treadonly coldStart: HostColdStart;\n\treadonly idleExitMs: number;\n}\n\nexport function parseColdStart(value: string | undefined): HostColdStart | undefined {\n\treturn value === \"transient\" || value === \"persistent\" ? value : undefined;\n}\n\nexport function parseIdleExitMs(value: string | undefined): number | undefined {\n\tif (value === undefined || !/^\\d+$/.test(value.trim())) return undefined;\n\tconst parsed = Number(value.trim());\n\treturn Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;\n}\n\n/**\n * Resolves the effective host policy. Precedence: environment overrides beat\n * settings.json, which beats the documented defaults (transient, 15 minutes).\n * Invalid values at either source fall through to the next source.\n */\nexport function resolveHostPolicy(\n\tsettings: unknown,\n\tenv: Readonly<Record<string, string | undefined>>,\n): HostLifecyclePolicy {\n\tconst record = isRecord(settings) ? settings : {};\n\tconst coldStart =\n\t\tparseColdStart(env[HOST_COLD_START_ENV]) ?? parseColdStart(asOptionalString(record.coldStart)) ?? \"transient\";\n\tconst idleExitMs =\n\t\tparseIdleExitMs(env[HOST_IDLE_EXIT_MS_ENV]) ??\n\t\tparseIdleExitMs(asOptionalString(record.idleExitMs)) ??\n\t\tDEFAULT_HOST_IDLE_EXIT_MS;\n\treturn { coldStart, idleExitMs };\n}\n\nexport interface HostActivity {\n\treadonly connections: number;\n\treadonly activeTurns: number;\n}\n\nexport type IdleExitDecision = \"active\" | \"idle\" | \"exit\";\n\n/**\n * Pure idle-window decision core. `update()` must be called with the CURRENT\n * activity state; the window only counts continuously idle time and any\n * activity resets it, so a busy host can never cross the threshold.\n */\nexport class IdleExitDecider {\n\tprivate idleSince: number | undefined;\n\tprivate readonly now: () => number;\n\treadonly idleExitMs: number;\n\n\tconstructor(idleExitMs: number, now: () => number = Date.now) {\n\t\tthis.idleExitMs = idleExitMs;\n\t\tthis.now = now;\n\t}\n\n\tupdate(activity: HostActivity): IdleExitDecision {\n\t\t// Any attachment or active turn both holds the host open and resets the\n\t\t// window, so only CONTINUOUS idle can ever cross the threshold.\n\t\tif (activity.connections > 0 || activity.activeTurns > 0) {\n\t\t\tthis.idleSince = undefined;\n\t\t\treturn \"active\";\n\t\t}\n\t\tif (this.idleExitMs === Number.POSITIVE_INFINITY) return \"idle\";\n\t\tif (this.idleSince === undefined) {\n\t\t\tthis.idleSince = this.now();\n\t\t\treturn \"idle\";\n\t\t}\n\t\treturn this.now() - this.idleSince >= this.idleExitMs ? \"exit\" : \"idle\";\n\t}\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction asOptionalString(value: unknown): string | undefined {\n\treturn typeof value === \"string\" ? value : typeof value === \"number\" ? String(value) : undefined;\n}\n"]}

package/dist/modes/rpc/host-lifecycle.d.ts

@@ -1,25 +1,7 @@
 #!/usr/bin/env node
 export { classifyChildExit } from "./host-child-exit.ts";
+export { DEFAULT_HANDOFF_GRACE_MS, DEFAULT_HOST_IDLE_EXIT_MS, HANDOFF_GRACE_MS_ENV, HOST_COLD_START_ENV, HOST_IDLE_EXIT_MS_ENV, type HostActivity, type HostColdStart, type HostLifecyclePolicy, type HostLifecyclePolicyInput, IdleExitDecider, type IdleExitDecision, parseColdStart, parseIdleExitMs, resolveHostPolicy, } from "./host-lifecycle-policy.ts";
 import { type SocketFileIdentity } from "./socket-ownership.ts";
-export type HostColdStart = "transient" | "persistent";
-/** Environment override for the cold-start policy: `transient` or `persistent`. */
-export declare const HOST_COLD_START_ENV = "SENPI_RPC_HOST_COLD_START";
-/** Environment override for the idle-exit window in milliseconds. */
-export declare const HOST_IDLE_EXIT_MS_ENV = "SENPI_RPC_HOST_IDLE_EXIT_MS";
-/** Default idle-exit window: 15 minutes of continuous no-connection, no-turn idle. */
-export declare const DEFAULT_HOST_IDLE_EXIT_MS: number;
-/** Soft handoff deadline: rescan and report, never interrupt turns or in-flight requests. */
-export declare const HANDOFF_GRACE_MS_ENV = "SENPI_RPC_HANDOFF_GRACE_MS";
-export declare const DEFAULT_HANDOFF_GRACE_MS: number;
-/** The policy fields ensureHost() records in rpc-host-daemon/settings.json. */
-export interface HostLifecyclePolicyInput {
-    readonly coldStart?: HostColdStart;
-    readonly idleExitMs?: number;
-}
-export interface HostLifecyclePolicy {
-    readonly coldStart: HostColdStart;
-    readonly idleExitMs: number;
-}
 /**
  * The internal hop must stay short enough for sun_path (104 bytes on macOS)
  * regardless of where the public socket lives, and private against other local
@@ -34,31 +16,6 @@ export declare function createInternalSocketPath(baseDir?: string, platform?: No
     dir?: string;
     secretPath?: string;
 }>;
-export declare function parseColdStart(value: string | undefined): HostColdStart | undefined;
-export declare function parseIdleExitMs(value: string | undefined): number | undefined;
-/**
- * Resolves the effective host policy. Precedence: environment overrides beat
- * settings.json, which beats the documented defaults (transient, 15 minutes).
- * Invalid values at either source fall through to the next source.
- */
-export declare function resolveHostPolicy(settings: unknown, env: Readonly<Record<string, string | undefined>>): HostLifecyclePolicy;
-export interface HostActivity {
-    readonly connections: number;
-    readonly activeTurns: number;
-}
-export type IdleExitDecision = "active" | "idle" | "exit";
-/**
- * Pure idle-window decision core. `update()` must be called with the CURRENT
- * activity state; the window only counts continuously idle time and any
- * activity resets it, so a busy host can never cross the threshold.
- */
-export declare class IdleExitDecider {
-    private idleSince;
-    private readonly now;
-    readonly idleExitMs: number;
-    constructor(idleExitMs: number, now?: () => number);
-    update(activity: HostActivity): IdleExitDecision;
-}
 export interface SupervisorLaunch {
     readonly socket: string;
     readonly hostArgs: readonly string[];

package/dist/modes/rpc/host-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle.ts"],"names":[],"mappings":";AAuDA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAezD,OAAO,EAGN,KAAK,kBAAkB,EAKvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;AAEvD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AACnE,sFAAsF;AACtF,eAAO,MAAM,yBAAyB,QAAc,CAAC;AACrD,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,eAAO,MAAM,wBAAwB,QAAc,CAAC;AAEpD,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAcD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,SAAW,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBhE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,GAAG,SAAS,CAEnF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI7E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,OAAO,EACjB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAC/C,mBAAmB,CASrB;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,qBAAa,eAAe;IAC3B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,YAAY,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,MAAiB,EAG3D;IAED,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,gBAAgB,CAa/C;CACD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC9C;AAED,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AASzE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CASjG;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CA4CzF;AAQD,0FAA0F;AAC1F,wBAAgB,kBAAkB,IAAI,MAAM,CAW3C;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,OAAqB,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrC;AAWD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAUrD;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+W/E"}
+{"version":3,"file":"host-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-lifecycle.ts"],"names":[],"mappings":";AAgEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAIzD,OAAO,EACN,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,eAAe,EACf,KAAK,gBAAgB,EACrB,cAAc,EACd,eAAe,EACf,iBAAiB,GACjB,MAAM,4BAA4B,CAAC;AAgBpC,OAAO,EAGN,KAAK,kBAAkB,EAKvB,MAAM,uBAAuB,CAAC;AAuB/B;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,SAAW,EAClB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBhE;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,kBAAkB,CAAC;CAC9C;AAED,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AASzE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CASjG;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,GAAG,SAAS,CA4CzF;AAQD,0FAA0F;AAC1F,wBAAgB,kBAAkB,IAAI,MAAM,CAW3C;AA4BD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,gBAAgB,EACxB,cAAc,EAAE,MAAM,EACtB,QAAQ,GAAE,OAAqB,GAC7B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAmBrC;AAWD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,EAC3C,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC1C;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAUrD;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4W/E"}

package/dist/modes/rpc/host-lifecycle.js

@@ -50,9 +50,15 @@ import { fileURLToPath } from "node:url";
 import { getAgentDir, isBunBinary, isBundledNode } from "../../config.js";
 import { processIsLive, readProcessStartTime } from "../app-server/daemon/process.js";
 import { classifyChildExit, noteChildExit } from "./host-child-exit.js";
+import { ClientOccupancy } from "./host-client-occupancy.js";
+import { DEFAULT_HANDOFF_GRACE_MS, HANDOFF_GRACE_MS_ENV, IdleExitDecider, parseIdleExitMs, resolveHostPolicy, } from "./host-lifecycle-policy.js";
 // The exit verdict moved to ./host-child-exit.ts with the crash recording it now feeds; it stays
 // exported from here so every existing importer keeps resolving it at its original home.
 export { classifyChildExit } from "./host-child-exit.js";
+// The cold-start/idle-exit policy and its decision core live in ./host-lifecycle-policy.ts; they stay
+// exported from here so every existing importer keeps resolving them at their original home.
+export { DEFAULT_HANDOFF_GRACE_MS, DEFAULT_HOST_IDLE_EXIT_MS, HANDOFF_GRACE_MS_ENV, HOST_COLD_START_ENV, HOST_IDLE_EXIT_MS_ENV, IdleExitDecider, parseColdStart, parseIdleExitMs, resolveHostPolicy, } from "./host-lifecycle-policy.js";
+import { hostCrashCleanupPaths } from "./host-cleanup-paths.js";
 import { createHostDaemonPaths, generationPaths, HOST_DAEMON_DIR_ENV } from "./host-daemon-paths.js";
 import { releaseGeneration } from "./host-daemon-registration.js";
 import { watchForSupersession } from "./host-supersession.js";
@@ -62,15 +68,6 @@ import { activeTurnsForIdleDecision, createObserverLink } from "./observer-link.
 import { HOST_INSTANCE_ID_ENV } from "./protocol-identity.js";
 import { MAX_SOCKET_PATH_BYTES, PUBLIC_SOCKET_IDENTITY_FILE, shieldSocketDuringClose, statSocketIdentity, unlinkOwnedSocket, writeSocketIdentityFile, } from "./socket-ownership.js";
 import { authenticateSocket, createSocketSecret, ensureSocketSecret, resolveSocketTransportAddress, SOCKET_SECRET_FILE_ENV, sendSocketHandshake, socketSecretPath, } from "./socket-transport.js";
-/** Environment override for the cold-start policy: `transient` or `persistent`. */
-export const HOST_COLD_START_ENV = "SENPI_RPC_HOST_COLD_START";
-/** Environment override for the idle-exit window in milliseconds. */
-export const HOST_IDLE_EXIT_MS_ENV = "SENPI_RPC_HOST_IDLE_EXIT_MS";
-/** Default idle-exit window: 15 minutes of continuous no-connection, no-turn idle. */
-export const DEFAULT_HOST_IDLE_EXIT_MS = 15 * 60_000;
-/** Soft handoff deadline: rescan and report, never interrupt turns or in-flight requests. */
-export const HANDOFF_GRACE_MS_ENV = "SENPI_RPC_HANDOFF_GRACE_MS";
-export const DEFAULT_HANDOFF_GRACE_MS = 10 * 60_000;
 const CHILD_STOP_TIMEOUT_MS = 5_000;
 /** Win32 named-pipe shutdown can leave supervisor handles live after close starts. */
 const WINDOWS_SUPERVISOR_SHUTDOWN_HARD_EXIT_MS = 2_000;
@@ -109,54 +106,6 @@ export async function createInternalSocketPath(baseDir = tmpdir(), platform = pr
     }), { mode: 0o600 });
     return { socket: join(dir, "host.sock"), dir, secretPath: join(dir, ".secret") };
 }
-export function parseColdStart(value) {
-    return value === "transient" || value === "persistent" ? value : undefined;
-}
-export function parseIdleExitMs(value) {
-    if (value === undefined || !/^\d+$/.test(value.trim()))
-        return undefined;
-    const parsed = Number(value.trim());
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
-}
-/**
- * Resolves the effective host policy. Precedence: environment overrides beat
- * settings.json, which beats the documented defaults (transient, 15 minutes).
- * Invalid values at either source fall through to the next source.
- */
-export function resolveHostPolicy(settings, env) {
-    const record = isRecord(settings) ? settings : {};
-    const coldStart = parseColdStart(env[HOST_COLD_START_ENV]) ?? parseColdStart(asOptionalString(record.coldStart)) ?? "transient";
-    const idleExitMs = parseIdleExitMs(env[HOST_IDLE_EXIT_MS_ENV]) ??
-        parseIdleExitMs(asOptionalString(record.idleExitMs)) ??
-        DEFAULT_HOST_IDLE_EXIT_MS;
-    return { coldStart, idleExitMs };
-}
-/**
- * Pure idle-window decision core. `update()` must be called with the CURRENT
- * activity state; the window only counts continuously idle time and any
- * activity resets it, so a busy host can never cross the threshold.
- */
-export class IdleExitDecider {
-    constructor(idleExitMs, now = Date.now) {
-        this.idleExitMs = idleExitMs;
-        this.now = now;
-    }
-    update(activity) {
-        // Any attachment or active turn both holds the host open and resets the
-        // window, so only CONTINUOUS idle can ever cross the threshold.
-        if (activity.connections > 0 || activity.activeTurns > 0) {
-            this.idleSince = undefined;
-            return "active";
-        }
-        if (this.idleExitMs === Number.POSITIVE_INFINITY)
-            return "idle";
-        if (this.idleSince === undefined) {
-            this.idleSince = this.now();
-            return "idle";
-        }
-        return this.now() - this.idleSince >= this.idleExitMs ? "exit" : "idle";
-    }
-}
 /** Hidden internal launch route: wire-invisible, never advertised by the public CLI surface. */
 export const INTERNAL_SUPERVISOR_FLAG = "--internal-rpc-host-supervisor";
 /**
@@ -362,7 +311,7 @@ export async function runHostSupervisor(launch) {
     const internalSocket = internal.socket;
     const internalSecretPath = internal.secretPath ?? socketSecretPath(internalSocket);
     const internalSecret = process.platform === "win32" ? await createSocketSecret(internalSecretPath) : undefined;
-    const clientSockets = new Set();
+    const clients = new ClientOccupancy(() => decider.update(currentActivity()));
     const busySessions = new Map();
     // Declared before anything that can reach `currentActivity()`. A client accepted during startup
     // asks for the activity snapshot, and a `const` read before its initializer runs is a
@@ -413,18 +362,14 @@ export async function runHostSupervisor(launch) {
             [HOST_WATCH_PPID_ENV]: String(process.pid),
             ...(internal.dir ? { [HOST_SCRATCH_DIR_ENV]: internal.dir } : {}),
             ...(internalSecret ? { [SOCKET_SECRET_FILE_ENV]: internalSecretPath } : {}),
-            [HOST_CLEANUP_PATHS_ENV]: [
-                // A successor writes no registration of its own until the ensure that spawned it does,
-                // and the files under these paths still describe the generation being replaced.
-                ...(successor ? [] : [paths.pointerFile, generation.pidFile, paths.settingsFile]),
-                // POSIX public sockets are removed ownership-checked by the host child
-                // (token: the scratch-directory sidecar plus HOST_PUBLIC_SOCKET_ENV),
-                // never by path from a crash-path cleanup: a blind removal here would
-                // unlink a newer host's freshly published entry after a takeover.
-                // Windows named pipes have no filesystem entry to own, so they stay
-                // listed for the crash-path cleanup.
-                ...(process.platform === "win32" ? [publicSocket] : []),
-            ].join("\n"),
+            [HOST_CLEANUP_PATHS_ENV]: hostCrashCleanupPaths({
+                pointerFile: paths.pointerFile,
+                generationPidFile: generation.pidFile,
+                settingsFile: paths.settingsFile,
+                publicSocket,
+                successor: Boolean(successor),
+                platform: process.platform,
+            }).join("\n"),
             ...(process.platform === "win32" ? {} : { [HOST_PUBLIC_SOCKET_ENV]: publicSocket }),
         },
         // Slot 3 is the lifetime pipe: "pipe" gives the child a read end it can
@@ -462,12 +407,12 @@ export async function runHostSupervisor(launch) {
             const internal = createConnection(resolveSocketTransportAddress(internalSocket, process.platform, internalSecret));
             if (internalSecret)
                 sendSocketHandshake(internal, internalSecret);
-            clientSockets.add(client);
-            // A readiness exchange can begin and end between ticks. Record the
-            // attachment now, before a later tick can reuse the preceding idle window.
-            decider.update(currentActivity());
+            // A readiness exchange can begin and end between ticks: the client is recorded the
+            // moment its first request line arrives, before a later tick can reuse the preceding
+            // idle window. An observing read (`status`) is never recorded (host-client-occupancy.ts).
+            clients.admit(client);
             const detach = () => {
-                clientSockets.delete(client);
+                clients.release(client);
                 decider.update(currentActivity());
                 internal.destroy();
                 client.destroy();
@@ -496,12 +441,12 @@ export async function runHostSupervisor(launch) {
     const decider = new IdleExitDecider(policy.coldStart === "persistent" ? Number.POSITIVE_INFINITY : policy.idleExitMs);
     const tickIntervalMs = Math.max(20, Math.min(1_000, policy.idleExitMs / 4));
     const ticker = setInterval(() => {
-        if (!draining && decider.update(currentActivity()) === "exit")
+        if (!draining && decider.update(currentActivity()) === "exit" && clients.unclassifiedCount === 0)
             void shutdown("idle", 0);
     }, tickIntervalMs);
     function currentActivity() {
         return {
-            connections: clientSockets.size,
+            connections: clients.attachedCount,
             activeTurns: activeTurnsForIdleDecision({
                 healthy: observerLink.healthy(),
                 unhealthySince: observerLink.unhealthySince(),
@@ -561,8 +506,7 @@ export async function runHostSupervisor(launch) {
             : undefined;
         try {
             writeStderrLine(`senpi rpc host supervisor: ${reason} shutdown`);
-            for (const client of clientSockets)
-                client.destroy();
+            clients.destroyAll();
             // libuv unlinks the bound NAME when the listening handle closes - which
             // would delete a newer host's entry renamed over this path. Shield the
             // current entry for the close, then let the ownership check decide. A drained
@@ -913,12 +857,6 @@ function errorMessage(cause) {
 function isNodeErrorCode(cause, code) {
     return cause instanceof Error && "code" in cause && cause.code === code;
 }
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function asOptionalString(value) {
-    return typeof value === "string" ? value : typeof value === "number" ? String(value) : undefined;
-}
 function isEntryScript() {
     const entry = process.argv[1];
     if (!entry)