@code-yeongyu/senpi 2026.9.27-4 → 2026.9.28

package/dist/modes/rpc/host-protocol-info.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-protocol-info.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-protocol-info.ts"],"names":[],"mappings":"AAgCA,uHAAuH;AACvH,MAAM,UAAU,qBAAqB,CAAC,IAAa;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,OAAO;QACN,8FAA8F;QAC9F,eAAe,EAAE,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpF,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACtC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;KACvD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAClG,OAAO,SAAS,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxG,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,IAAI,OAAO,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,eAAe,KAAK,YAAY,IAAI,eAAe,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvF,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The `get_protocol_info` answer as a CLIENT reads it: the shape, and the tolerant parse that\n * produces it.\n *\n * This is a BOUNDARY: everything past it is typed, and nothing past it re-validates. Every identity\n * field is optional because a host from an older release answers without them, and an absent field\n * stays absent rather than being defaulted - a guessed `0` generation or a guessed ordinal would be\n * a comparison a client could act on, which is precisely what must not happen (I2). The one field\n * that IS defaulted is `protocolVersion`, to `0`, because no client speaks protocol 0: a reply from\n * before the field existed therefore fails closed instead of matching.\n */\nimport type { EngineOrdinal } from \"../../core/engine-build-identity.ts\";\nimport type { RpcLaunchProfile } from \"./rpc-types.ts\";\n\n/**\n * A `get_protocol_info` answer as a CLIENT reads it. Every identity field is optional because a\n * host from an older release answers without them; absence is read as \"uncomparable\", never as zero.\n */\nexport interface HostProtocolInfo {\n\treadonly protocolVersion: number;\n\t/** Informational only. Nothing in this module compares it. */\n\treadonly serverVersion: string;\n\treadonly capabilities: readonly string[];\n\t/** Which host PROCESS answered. A handoff is complete exactly when this value changes. */\n\treadonly instanceId?: string;\n\t/** Which generation of the daemon that process is; `0` until the first handoff. */\n\treadonly generation?: number;\n\treadonly engineVersion?: string;\n\treadonly engineOrdinal?: EngineOrdinal;\n\treadonly launch_profile?: RpcLaunchProfile;\n}\n\n/** Parses the `data` of a `get_protocol_info` reply. Unknown or malformed identity fields are dropped, not guessed. */\nexport function parseHostProtocolInfo(data: unknown): HostProtocolInfo | undefined {\n\tif (!isRecord(data) || typeof data.serverVersion !== \"string\") return undefined;\n\tif (!Array.isArray(data.capabilities) || !data.capabilities.every((entry) => typeof entry === \"string\")) {\n\t\treturn undefined;\n\t}\n\tconst ordinal = parseOrdinal(data.engineOrdinal);\n\tconst launchProfile = parseLaunchProfile(data.launch_profile);\n\treturn {\n\t\t// A reply without a protocol version predates the field; 0 never matches, so it fails closed.\n\t\tprotocolVersion: typeof data.protocolVersion === \"number\" ? data.protocolVersion : 0,\n\t\tserverVersion: data.serverVersion,\n\t\tcapabilities: data.capabilities,\n\t\t...(typeof data.instanceId === \"string\" && { instanceId: data.instanceId }),\n\t\t...(typeof data.generation === \"number\" &&\n\t\t\tNumber.isSafeInteger(data.generation) && { generation: data.generation }),\n\t\t...(typeof data.engineVersion === \"string\" && { engineVersion: data.engineVersion }),\n\t\t...(ordinal && { engineOrdinal: ordinal }),\n\t\t...(launchProfile && { launch_profile: launchProfile }),\n\t};\n}\n\nfunction parseOrdinal(value: unknown): EngineOrdinal | undefined {\n\tif (!Array.isArray(value) || value.length !== 5 || !value.every((part) => typeof part === \"number\"))\n\t\treturn undefined;\n\treturn [value[0], value[1], value[2], value[3], value[4]];\n}\n\nfunction parseLaunchProfile(value: unknown): RpcLaunchProfile | undefined {\n\tif (!isRecord(value) || typeof value.profile_id !== \"string\" || !isRecord(value.core)) return undefined;\n\tconst { extensions, multi_session, session_runtime } = value.core;\n\tif (!Array.isArray(extensions) || !extensions.every((entry) => typeof entry === \"string\")) return undefined;\n\tif (typeof multi_session !== \"boolean\") return undefined;\n\tif (session_runtime !== \"in-process\" && session_runtime !== \"worker\") return undefined;\n\treturn { profile_id: value.profile_id, core: { extensions, multi_session, session_runtime } };\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}
+{"version":3,"file":"host-protocol-info.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-protocol-info.ts"],"names":[],"mappings":"AAkCA,uHAAuH;AACvH,MAAM,UAAU,qBAAqB,CAAC,IAAa;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,OAAO;QACN,8FAA8F;QAC9F,eAAe,EAAE,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACpF,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACtC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;KAC3F,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAClG,OAAO,SAAS,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxG,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5G,IAAI,OAAO,aAAa,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,eAAe,KAAK,YAAY,IAAI,eAAe,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACvF,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The `get_protocol_info` answer as a CLIENT reads it: the shape, and the tolerant parse that\n * produces it.\n *\n * This is a BOUNDARY: everything past it is typed, and nothing past it re-validates. Every identity\n * field is optional because a host from an older release answers without them, and an absent field\n * stays absent rather than being defaulted - a guessed `0` generation or a guessed ordinal would be\n * a comparison a client could act on, which is precisely what must not happen (I2). The one field\n * that IS defaulted is `protocolVersion`, to `0`, because no client speaks protocol 0: a reply from\n * before the field existed therefore fails closed instead of matching.\n */\nimport type { EngineOrdinal } from \"../../core/engine-build-identity.ts\";\nimport type { RpcLaunchProfile } from \"./rpc-types.ts\";\n\n/**\n * A `get_protocol_info` answer as a CLIENT reads it. Every identity field is optional because a\n * host from an older release answers without them; absence is read as \"uncomparable\", never as zero.\n */\nexport interface HostProtocolInfo {\n\treadonly protocolVersion: number;\n\t/** Informational only. Nothing in this module compares it. */\n\treadonly serverVersion: string;\n\treadonly capabilities: readonly string[];\n\t/** Which host PROCESS answered. A handoff is complete exactly when this value changes. */\n\treadonly instanceId?: string;\n\t/** Which generation of the daemon that process is; `0` until the first handoff. */\n\treadonly generation?: number;\n\treadonly engineVersion?: string;\n\treadonly engineOrdinal?: EngineOrdinal;\n\treadonly launch_profile?: RpcLaunchProfile;\n\t/** Whether the answering host's memory sampler reads pressure right now; absent on classic and older hosts. */\n\treadonly memory_pressure?: boolean;\n}\n\n/** Parses the `data` of a `get_protocol_info` reply. Unknown or malformed identity fields are dropped, not guessed. */\nexport function parseHostProtocolInfo(data: unknown): HostProtocolInfo | undefined {\n\tif (!isRecord(data) || typeof data.serverVersion !== \"string\") return undefined;\n\tif (!Array.isArray(data.capabilities) || !data.capabilities.every((entry) => typeof entry === \"string\")) {\n\t\treturn undefined;\n\t}\n\tconst ordinal = parseOrdinal(data.engineOrdinal);\n\tconst launchProfile = parseLaunchProfile(data.launch_profile);\n\treturn {\n\t\t// A reply without a protocol version predates the field; 0 never matches, so it fails closed.\n\t\tprotocolVersion: typeof data.protocolVersion === \"number\" ? data.protocolVersion : 0,\n\t\tserverVersion: data.serverVersion,\n\t\tcapabilities: data.capabilities,\n\t\t...(typeof data.instanceId === \"string\" && { instanceId: data.instanceId }),\n\t\t...(typeof data.generation === \"number\" &&\n\t\t\tNumber.isSafeInteger(data.generation) && { generation: data.generation }),\n\t\t...(typeof data.engineVersion === \"string\" && { engineVersion: data.engineVersion }),\n\t\t...(ordinal && { engineOrdinal: ordinal }),\n\t\t...(launchProfile && { launch_profile: launchProfile }),\n\t\t...(typeof data.memory_pressure === \"boolean\" && { memory_pressure: data.memory_pressure }),\n\t};\n}\n\nfunction parseOrdinal(value: unknown): EngineOrdinal | undefined {\n\tif (!Array.isArray(value) || value.length !== 5 || !value.every((part) => typeof part === \"number\"))\n\t\treturn undefined;\n\treturn [value[0], value[1], value[2], value[3], value[4]];\n}\n\nfunction parseLaunchProfile(value: unknown): RpcLaunchProfile | undefined {\n\tif (!isRecord(value) || typeof value.profile_id !== \"string\" || !isRecord(value.core)) return undefined;\n\tconst { extensions, multi_session, session_runtime } = value.core;\n\tif (!Array.isArray(extensions) || !extensions.every((entry) => typeof entry === \"string\")) return undefined;\n\tif (typeof multi_session !== \"boolean\") return undefined;\n\tif (session_runtime !== \"in-process\" && session_runtime !== \"worker\") return undefined;\n\treturn { profile_id: value.profile_id, core: { extensions, multi_session, session_runtime } };\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/modes/rpc/host-readiness.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The readiness gate of a host this process just spawned: poll `get_protocol_info` until the host
+ * answers compatibly, the budget runs out, or the spawned supervisor exits. A compatible answer
+ * comes with the attach hold of the connection it arrived on (see host-attach-hold.ts).
+ */
+import type { HostAttachHold } from "./host-attach-hold.ts";
+import type { HostProtocolInfo } from "./host-decision.ts";
+export type ChildExit = {
+    readonly code: number | null;
+    readonly signal: NodeJS.Signals | null;
+};
+export type ProtocolPollResult = {
+    readonly ready: true;
+    readonly protocol: HostProtocolInfo;
+    readonly hold: HostAttachHold;
+} | {
+    readonly ready: false;
+    readonly protocol?: HostProtocolInfo;
+    readonly exited?: ChildExit;
+};
+export declare function pollProtocolInfo(socket: string, timeoutMs: number, isCompatible: (protocol: HostProtocolInfo | undefined) => boolean, childExit?: Promise<ChildExit>): Promise<ProtocolPollResult>;
+//# sourceMappingURL=host-readiness.d.ts.map

package/dist/modes/rpc/host-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-readiness.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;CAAE,CAAC;AAEjG,MAAM,MAAM,kBAAkB,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC;AAIhG,wBAAsB,gBAAgB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,KAAK,OAAO,EACjE,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}

package/dist/modes/rpc/host-readiness.js

@@ -0,0 +1,44 @@
+/**
+ * The readiness gate of a host this process just spawned: poll `get_protocol_info` until the host
+ * answers compatibly, the budget runs out, or the spawned supervisor exits. A compatible answer
+ * comes with the attach hold of the connection it arrived on (see host-attach-hold.ts).
+ */
+import { holdProtocolInfo } from "./host-probe.js";
+const SPAWNED_HOST_PROBE_TIMEOUT_MS = 10_000;
+export async function pollProtocolInfo(socket, timeoutMs, isCompatible, childExit) {
+    const deadline = Date.now() + timeoutMs;
+    let lastProtocol;
+    while (Date.now() <= deadline) {
+        const probe = holdProtocolInfo(socket, Math.min(SPAWNED_HOST_PROBE_TIMEOUT_MS, Math.max(1, deadline - Date.now())));
+        const raced = childExit ? await Promise.race([probe, childExit]) : await probe;
+        if (isChildExit(raced)) {
+            // A supervisor exit can be triggered by the Windows identity watchdog
+            // while a named-pipe client is still composing its protocol reply. Do
+            // not terminate the host based solely on that exit until this probe has
+            // had a chance to deliver an answer. A host that never answers still
+            // resolves through holdProtocolInfo's bounded timeout/close handling.
+            const held = await probe;
+            if (!held)
+                return { ready: false, protocol: lastProtocol, exited: raced };
+            lastProtocol = held.info;
+            if (isCompatible(held.info))
+                return { ready: true, protocol: held.info, hold: held.hold };
+            held.hold.release();
+        }
+        else if (raced) {
+            lastProtocol = raced.info;
+            if (isCompatible(raced.info))
+                return { ready: true, protocol: raced.info, hold: raced.hold };
+            raced.hold.release();
+        }
+        await delay(50);
+    }
+    return { ready: false, protocol: lastProtocol };
+}
+function isChildExit(value) {
+    return !!value && "code" in value && "signal" in value;
+}
+function delay(ms) {
+    return new Promise((resolveDelay) => setTimeout(resolveDelay, ms));
+}
+//# sourceMappingURL=host-readiness.js.map

package/dist/modes/rpc/host-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-readiness.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQnD,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,MAAc,EACd,SAAiB,EACjB,YAAiE,EACjE,SAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,YAA0C,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,gBAAgB,CAC7B,MAAM,EACN,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAC3E,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/E,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,sEAAsE;YACtE,sEAAsE;YACtE,wEAAwE;YACxE,qEAAqE;YACrE,sEAAsE;YACtE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC;YACzB,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC1E,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;YACzB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YAClB,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,KAAkE;IACtF,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;AACpE,CAAC","sourcesContent":["/**\n * The readiness gate of a host this process just spawned: poll `get_protocol_info` until the host\n * answers compatibly, the budget runs out, or the spawned supervisor exits. A compatible answer\n * comes with the attach hold of the connection it arrived on (see host-attach-hold.ts).\n */\n\nimport type { HostAttachHold } from \"./host-attach-hold.ts\";\nimport type { HostProtocolInfo } from \"./host-decision.ts\";\nimport { holdProtocolInfo } from \"./host-probe.ts\";\n\nexport type ChildExit = { readonly code: number | null; readonly signal: NodeJS.Signals | null };\n\nexport type ProtocolPollResult =\n\t| { readonly ready: true; readonly protocol: HostProtocolInfo; readonly hold: HostAttachHold }\n\t| { readonly ready: false; readonly protocol?: HostProtocolInfo; readonly exited?: ChildExit };\n\nconst SPAWNED_HOST_PROBE_TIMEOUT_MS = 10_000;\n\nexport async function pollProtocolInfo(\n\tsocket: string,\n\ttimeoutMs: number,\n\tisCompatible: (protocol: HostProtocolInfo | undefined) => boolean,\n\tchildExit?: Promise<ChildExit>,\n): Promise<ProtocolPollResult> {\n\tconst deadline = Date.now() + timeoutMs;\n\tlet lastProtocol: HostProtocolInfo | undefined;\n\twhile (Date.now() <= deadline) {\n\t\tconst probe = holdProtocolInfo(\n\t\t\tsocket,\n\t\t\tMath.min(SPAWNED_HOST_PROBE_TIMEOUT_MS, Math.max(1, deadline - Date.now())),\n\t\t);\n\t\tconst raced = childExit ? await Promise.race([probe, childExit]) : await probe;\n\t\tif (isChildExit(raced)) {\n\t\t\t// A supervisor exit can be triggered by the Windows identity watchdog\n\t\t\t// while a named-pipe client is still composing its protocol reply. Do\n\t\t\t// not terminate the host based solely on that exit until this probe has\n\t\t\t// had a chance to deliver an answer. A host that never answers still\n\t\t\t// resolves through holdProtocolInfo's bounded timeout/close handling.\n\t\t\tconst held = await probe;\n\t\t\tif (!held) return { ready: false, protocol: lastProtocol, exited: raced };\n\t\t\tlastProtocol = held.info;\n\t\t\tif (isCompatible(held.info)) return { ready: true, protocol: held.info, hold: held.hold };\n\t\t\theld.hold.release();\n\t\t} else if (raced) {\n\t\t\tlastProtocol = raced.info;\n\t\t\tif (isCompatible(raced.info)) return { ready: true, protocol: raced.info, hold: raced.hold };\n\t\t\traced.hold.release();\n\t\t}\n\t\tawait delay(50);\n\t}\n\treturn { ready: false, protocol: lastProtocol };\n}\n\nfunction isChildExit(value: { readonly info: HostProtocolInfo } | ChildExit | undefined): value is ChildExit {\n\treturn !!value && \"code\" in value && \"signal\" in value;\n}\n\nfunction delay(ms: number): Promise<void> {\n\treturn new Promise((resolveDelay) => setTimeout(resolveDelay, ms));\n}\n"]}

package/dist/modes/rpc/host-runner.d.ts

@@ -1,3 +1,4 @@
+import { type ShardKind } from "./host-daemon-paths.ts";
 import { type HostDecisionPolicy } from "./host-decision.ts";
 import type { ResolvedHostLaunchSpec } from "./host-launch-spec.ts";
 export declare const HOST_EXIT_OK = 0;
@@ -19,6 +20,8 @@ export type HostRequest = {
     readonly action: "status";
     readonly target: HostTarget;
     readonly includeWorkers: boolean;
+    /** Every endpoint under `target.agentDir` (its socket is ignored), read without pruning. */
+    readonly all?: boolean;
 } | {
     readonly action: "stop";
     readonly target: HostTarget;
@@ -28,6 +31,16 @@ export type HostRequest = {
     readonly action: "handoff";
     readonly target: HostTarget;
     readonly spec: ResolvedHostLaunchSpec;
+}
+/** Removes endpoint state under `agentDir` only on the three-part evidence (`host-gc.ts`). */
+ | {
+    readonly action: "gc";
+    readonly agentDir: string;
+} | {
+    readonly action: "shard_path";
+    readonly kind: ShardKind;
+    readonly owner: string;
+    readonly root: string;
 };
 /** One JSON line and the exit code it means. */
 export interface HostOutcome {

package/dist/modes/rpc/host-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host-runner.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-runner.ts"],"names":[],"mappings":"AAoBA,OAAO,EAIN,KAAK,kBAAkB,EAIvB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAKpE,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAIpC,gGAAgG;AAChG,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GACpB;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACnC,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAEtG,gDAAgD;AAChD,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAa/E"}
+{"version":3,"file":"host-runner.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-runner.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAyB,KAAK,SAAS,EAAmC,MAAM,wBAAwB,CAAC;AAChH,OAAO,EAIN,KAAK,kBAAkB,EAIvB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAMpE,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAIpC,gGAAgG;AAChG,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GACpB;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACnC,GACD;IACA,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,4FAA4F;IAC5F,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACtB,GACD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC1G;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAA;CAAE;AACpG,8FAA8F;GAC5F;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,gDAAgD;AAChD,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAmB/E"}

package/dist/modes/rpc/host-runner.js

@@ -10,19 +10,21 @@
  *     4  no host is better than this one     an unreachable socket, or a stop that would end
  *        one (fallback policy)               somebody else's work
  *
- * The refusals are the point. One machine-wide daemon holds every client's sessions, so a client
+ * The refusals are the point. One daemon holds every client's sessions on its endpoint, so a client
  * that cannot get what it wants must SAY so and leave the running host alone (I1) - never stop it,
  * never bind a second host over its socket. `decideHostAction`, `ensureHost`, `stopHost` and
  * `handoffHost` already enforce that; this module only gives their outcomes a machine-readable shape.
  */
 import { engineBuildIdentity } from "../../core/engine-build-identity.js";
 import { daemonEnvKeys, daemonEnvOverrides, writeDaemonEnvKeys } from "./host-daemon-env.js";
-import { createHostDaemonPaths } from "./host-daemon-paths.js";
+import { createHostDaemonPaths, shardKey, shardSocketPathForKey } from "./host-daemon-paths.js";
 import { decideHostAction, HOST_PROTOCOL_VERSION, HostEnsureRefusedError, REQUIRED_HOST_CAPABILITIES, } from "./host-decision.js";
 import { ensureHost } from "./host-ensure.js";
+import { gcHostEndpoints } from "./host-gc.js";
 import { handoffHost } from "./host-handoff.js";
 import { probeProtocolInfo } from "./host-probe.js";
 import { hostSummary, readHostStatus, readSessionCounts } from "./host-status.js";
+import { readAllHostStatus } from "./host-status-all.js";
 import { stopHost } from "./host-stop.js";
 export const HOST_EXIT_OK = 0;
 export const HOST_EXIT_ERROR = 1;
@@ -35,11 +37,17 @@ export async function runHostRequest(request) {
         case "ensure":
             return ensureOutcome(request.target, request.spec, request.policy);
         case "status":
-            return statusOutcome(request.target, request.includeWorkers);
+            return request.all === true
+                ? statusAllOutcome(request.target, request.includeWorkers)
+                : statusOutcome(request.target, request.includeWorkers);
         case "stop":
             return stopOutcome(request.target, request.drain, request.force);
         case "handoff":
             return handoffOutcome(request.target, request.spec);
+        case "shard_path":
+            return shardPathOutcome(request.kind, request.owner, request.root);
+        case "gc":
+            return { exitCode: HOST_EXIT_OK, payload: { ...(await gcHostEndpoints(request.agentDir)) } };
         default:
             return assertNever(request);
     }
@@ -70,7 +78,7 @@ async function ensureOutcome(target, spec, policy) {
             throw error;
         return refusal("refuse", before, { reason: error.reason, socket: target.socket });
     }
-    const host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);
+    const host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS).finally(ensured.release);
     // Only a spawn grants an environment; a reuse inherited whatever the client that started it did.
     if (!ensured.reused)
         await recordEnvScope(target, spec);
@@ -96,6 +104,17 @@ async function statusOutcome(target, includeWorkers) {
     const status = await readHostStatus({ socket: target.socket, agentDir: target.agentDir, includeWorkers });
     return { exitCode: status.reachable ? HOST_EXIT_OK : HOST_EXIT_REFUSED, payload: { ...status } };
 }
+/** Same exit vocabulary as one socket: 0 while anything answers, 3 when nothing does (or nothing is there). */
+async function statusAllOutcome(target, includeWorkers) {
+    const endpoints = await readAllHostStatus({ agentDir: target.agentDir, includeWorkers });
+    const reachable = endpoints.some((endpoint) => endpoint.reachable);
+    return { exitCode: reachable ? HOST_EXIT_OK : HOST_EXIT_REFUSED, payload: { endpoints } };
+}
+/** The naming contract answered without contacting any host, for a client that mirrors it locally. */
+function shardPathOutcome(kind, owner, root) {
+    const key = shardKey(kind, owner);
+    return { exitCode: HOST_EXIT_OK, payload: { kind, key, socket: shardSocketPathForKey(root, kind, key) } };
+}
 /**
  * A hard stop ends every session the daemon holds, including the ones other clients are attached to,
  * so it is gated on the host's own count and refuses with those counts rather than a bare "busy".

package/dist/modes/rpc/host-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-runner.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EAGrB,sBAAsB,EAEtB,0BAA0B,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAoB,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAuB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAyBhC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAoB;IACxD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,QAAQ;YACZ,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,KAAK,QAAQ;YACZ,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9D,KAAK,MAAM;YACV,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,SAAS;YACb,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD;YACC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACF,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,MAAkB,EAClB,IAA4B,EAC5B,MAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3B,wFAAwF;QACxF,2FAA2F;QAC3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;IACF,CAAC;IACD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,UAAU,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO;SAC7D,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5D,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtE,iGAAiG;IACjG,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE;YACR,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAClD,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;YACpD,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB;KACD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACpB,MAAe,EACf,MAAoC,EACpC,KAAmC;IAEnC,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC;IAC3B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,cAAuB;IACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,KAAc,EAAE,KAAc;IAC5E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE;KACpF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAkB,EAAE,IAA4B;IAC7E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE;YAChC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtE,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;KAClG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAsB;IAC7C,OAAO,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,GAAW,EAAE,IAAkC;IACvF,OAAO;QACN,MAAM;QACN,GAAG;QACH,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI;QAC1C,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI;QAC1C,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE;QACtC,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI;QACzD,WAAW,EAAE,gBAAgB,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,WAAW;KAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CACf,IAA2B,EAC3B,IAAkC,EAClC,IAA2D;IAE3D,OAAO;QACN,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB;QACpE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE;KAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAkB,EAAE,IAA4B;IAC7E,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACtB,OAAO;QACN,eAAe,EAAE,qBAAqB;QACtC,oBAAoB,EAAE,0BAA0B;QAChD,QAAQ,EAAE,mBAAmB,EAAE;QAC/B,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC","sourcesContent":["/**\n * One host request, performed: ensure a daemon, report one, stop one, or hand one off.\n *\n * This is the whole behaviour behind `senpi host` - and behind the launchers that call the same\n * entry point in-process - separated from the command line that expresses it. Every request answers\n * with a JSON payload plus the exit code that payload means, so a CLI, a desktop and a task runner\n * report the same outcome with the same vocabulary:\n *\n *     0  the request happened            3  refused: a running host this client may not act on,\n *     4  no host is better than this one     an unreachable socket, or a stop that would end\n *        one (fallback policy)               somebody else's work\n *\n * The refusals are the point. One machine-wide daemon holds every client's sessions, so a client\n * that cannot get what it wants must SAY so and leave the running host alone (I1) - never stop it,\n * never bind a second host over its socket. `decideHostAction`, `ensureHost`, `stopHost` and\n * `handoffHost` already enforce that; this module only gives their outcomes a machine-readable shape.\n */\nimport { engineBuildIdentity } from \"../../core/engine-build-identity.ts\";\nimport { daemonEnvKeys, daemonEnvOverrides, writeDaemonEnvKeys } from \"./host-daemon-env.ts\";\nimport { createHostDaemonPaths } from \"./host-daemon-paths.ts\";\nimport {\n\tdecideHostAction,\n\tHOST_PROTOCOL_VERSION,\n\ttype HostDecisionClient,\n\ttype HostDecisionPolicy,\n\tHostEnsureRefusedError,\n\ttype HostProtocolInfo,\n\tREQUIRED_HOST_CAPABILITIES,\n} from \"./host-decision.ts\";\nimport { type EnsuredHost, ensureHost } from \"./host-ensure.ts\";\nimport { type HandoffRefusal, handoffHost } from \"./host-handoff.ts\";\nimport type { ResolvedHostLaunchSpec } from \"./host-launch-spec.ts\";\nimport { probeProtocolInfo } from \"./host-probe.ts\";\nimport { hostSummary, readHostStatus, readSessionCounts } from \"./host-status.ts\";\nimport { stopHost } from \"./host-stop.ts\";\n\nexport const HOST_EXIT_OK = 0;\nexport const HOST_EXIT_ERROR = 1;\nexport const HOST_EXIT_USAGE = 2;\nexport const HOST_EXIT_REFUSED = 3;\nexport const HOST_EXIT_FALLBACK = 4;\n\nconst PROBE_TIMEOUT_MS = 10_000;\n\n/** Which daemon a request is about: the endpoint, and the agent directory holding its state. */\nexport interface HostTarget {\n\treadonly socket: string;\n\treadonly agentDir: string;\n}\n\nexport type HostRequest =\n\t| {\n\t\t\treadonly action: \"ensure\";\n\t\t\treadonly target: HostTarget;\n\t\t\treadonly spec: ResolvedHostLaunchSpec;\n\t\t\treadonly policy: HostDecisionPolicy;\n\t  }\n\t| { readonly action: \"status\"; readonly target: HostTarget; readonly includeWorkers: boolean }\n\t| { readonly action: \"stop\"; readonly target: HostTarget; readonly drain: boolean; readonly force: boolean }\n\t| { readonly action: \"handoff\"; readonly target: HostTarget; readonly spec: ResolvedHostLaunchSpec };\n\n/** One JSON line and the exit code it means. */\nexport interface HostOutcome {\n\treadonly exitCode: number;\n\treadonly payload: Record<string, unknown>;\n}\n\nexport async function runHostRequest(request: HostRequest): Promise<HostOutcome> {\n\tswitch (request.action) {\n\t\tcase \"ensure\":\n\t\t\treturn ensureOutcome(request.target, request.spec, request.policy);\n\t\tcase \"status\":\n\t\t\treturn statusOutcome(request.target, request.includeWorkers);\n\t\tcase \"stop\":\n\t\t\treturn stopOutcome(request.target, request.drain, request.force);\n\t\tcase \"handoff\":\n\t\t\treturn handoffOutcome(request.target, request.spec);\n\t\tdefault:\n\t\t\treturn assertNever(request);\n\t}\n}\n\nasync function ensureOutcome(\n\ttarget: HostTarget,\n\tspec: ResolvedHostLaunchSpec,\n\tpolicy: HostDecisionPolicy,\n): Promise<HostOutcome> {\n\tconst before = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tif (policy === \"fallback\") {\n\t\t// `fallback` is the caller saying it can live without a host. The decision is made HERE\n\t\t// because an ensure always produces a host or fails: it has no fallback answer of its own.\n\t\tconst decision = decideHostAction(decisionClient(), before, \"fallback\");\n\t\tif (decision.action === \"fallback\") {\n\t\t\treturn refusal(\"fallback\", before, { reason: decision.reason, socket: target.socket });\n\t\t}\n\t}\n\tlet ensured: EnsuredHost;\n\ttry {\n\t\tensured = await ensureHost({\n\t\t\tsocket: target.socket,\n\t\t\tagentDir: target.agentDir,\n\t\t\thostArgs: spec.hostArgs,\n\t\t\tenv: daemonEnvOverrides(process.env, spec.env),\n\t\t\tpolicy: spec.policy,\n\t\t\tupgrade: policy === \"upgrade\" ? \"if-engine-differs\" : \"never\",\n\t\t});\n\t} catch (error: unknown) {\n\t\tif (!(error instanceof HostEnsureRefusedError)) throw error;\n\t\treturn refusal(\"refuse\", before, { reason: error.reason, socket: target.socket });\n\t}\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\t// Only a spawn grants an environment; a reuse inherited whatever the client that started it did.\n\tif (!ensured.reused) await recordEnvScope(target, spec);\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: {\n\t\t\taction: ensureAction(ensured.reused, before, host),\n\t\t\t...identityPayload(target.socket, ensured.pid, host),\n\t\t\treused: ensured.reused,\n\t\t},\n\t};\n}\n\n/**\n * What an ensure DID. A handoff and a fresh start both report `reused: false`, so the instance id is\n * what tells them apart: a handoff replaced the process behind a socket somebody was already serving.\n */\nfunction ensureAction(\n\treused: boolean,\n\tbefore: HostProtocolInfo | undefined,\n\tafter: HostProtocolInfo | undefined,\n): string {\n\tif (reused) return \"reuse\";\n\treturn before !== undefined && before.instanceId !== after?.instanceId ? \"handoff\" : \"start\";\n}\n\nasync function statusOutcome(target: HostTarget, includeWorkers: boolean): Promise<HostOutcome> {\n\tconst status = await readHostStatus({ socket: target.socket, agentDir: target.agentDir, includeWorkers });\n\treturn { exitCode: status.reachable ? HOST_EXIT_OK : HOST_EXIT_REFUSED, payload: { ...status } };\n}\n\n/**\n * A hard stop ends every session the daemon holds, including the ones other clients are attached to,\n * so it is gated on the host's own count and refuses with those counts rather than a bare \"busy\".\n * A DRAIN ends no work - the host stops accepting and leaves when it is empty - so it is never gated.\n */\nasync function stopOutcome(target: HostTarget, drain: boolean, force: boolean): Promise<HostOutcome> {\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tconst sessions = await readSessionCounts(target.socket, true);\n\tconst occupied = sessions.foreign_attached + sessions.foreign_retained > 0;\n\tif (!drain && !force && occupied) {\n\t\treturn refusal(\"refuse\", host, { reason: \"sessions_live\", socket: target.socket, sessions });\n\t}\n\tconst result = await stopHost({ socket: target.socket, agentDir: target.agentDir, drain, force });\n\tif (result.action === \"refuse\") {\n\t\treturn refusal(\"refuse\", host, { reason: result.reason, socket: target.socket, sessions });\n\t}\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: { action: result.action, socket: target.socket, pid: result.pid, sessions },\n\t};\n}\n\nasync function handoffOutcome(target: HostTarget, spec: ResolvedHostLaunchSpec): Promise<HostOutcome> {\n\tconst before = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tconst result = await handoffHost({\n\t\tsocket: target.socket,\n\t\tagentDir: target.agentDir,\n\t\thostArgs: spec.hostArgs,\n\t\tenv: daemonEnvOverrides(process.env, spec.env),\n\t\tpolicy: spec.policy,\n\t});\n\tif (result.action === \"refuse\") {\n\t\treturn refusal(\"refuse\", before, {\n\t\t\treason: upgradeRefusal(result.reason),\n\t\t\tsocket: target.socket,\n\t\t\tdetail: result.reason,\n\t\t\tupgradeable: result.upgradeable,\n\t\t});\n\t}\n\tawait recordEnvScope(target, spec);\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: { action: \"handoff\", ...identityPayload(target.socket, result.pid, host), reused: false },\n\t};\n}\n\n/**\n * A host that cannot drain and a platform that cannot hand off are one answer to the caller: this\n * build may not replace the running generation. The refusal that produced it stays in `detail`.\n */\nfunction upgradeRefusal(reason: HandoffRefusal): string {\n\treturn reason === \"handoff_unsupported\" ? \"upgrade_unsupported\" : reason;\n}\n\nfunction identityPayload(socket: string, pid: number, host: HostProtocolInfo | undefined): Record<string, unknown> {\n\treturn {\n\t\tsocket,\n\t\tpid,\n\t\tinstanceId: host?.instanceId ?? null,\n\t\tgeneration: host?.generation ?? null,\n\t\tengineVersion: host?.engineVersion ?? null,\n\t\tengineOrdinal: host?.engineOrdinal ?? null,\n\t\tcapabilities: host?.capabilities ?? [],\n\t\tlaunchProfileId: host?.launch_profile?.profile_id ?? null,\n\t\tupgradeable: decideHostAction(decisionClient(), host, \"upgrade\").upgradeable,\n\t};\n}\n\n/**\n * The two ways a request ends without acting, and the exit codes they mean: a `refuse` leaves a\n * running host alone (3), a `fallback` says no host is better than this one (4).\n */\nfunction refusal(\n\tkind: \"refuse\" | \"fallback\",\n\thost: HostProtocolInfo | undefined,\n\tbody: { readonly reason: string } & Record<string, unknown>,\n): HostOutcome {\n\treturn {\n\t\texitCode: kind === \"refuse\" ? HOST_EXIT_REFUSED : HOST_EXIT_FALLBACK,\n\t\tpayload: { action: kind, ...body, host: hostSummary(host) },\n\t};\n}\n\nasync function recordEnvScope(target: HostTarget, spec: ResolvedHostLaunchSpec): Promise<void> {\n\tconst paths = createHostDaemonPaths({ socket: target.socket, agentDir: target.agentDir });\n\tawait writeDaemonEnvKeys(paths, daemonEnvKeys(process.env, spec.env));\n}\n\n/**\n * This build as a client, WITHOUT a launch profile: the request's own `ensureHost` decides whether a\n * handoff may happen, from the profile it would launch. What is asked here is only what any client\n * can answer without one - is the running host usable, and could it be handed off from at all.\n */\nfunction decisionClient(): HostDecisionClient {\n\treturn {\n\t\tprotocolVersion: HOST_PROTOCOL_VERSION,\n\t\trequiredCapabilities: REQUIRED_HOST_CAPABILITIES,\n\t\tidentity: engineBuildIdentity(),\n\t\tstartedByUs: false,\n\t\tplatform: process.platform,\n\t};\n}\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`unreachable host request: ${JSON.stringify(value)}`);\n}\n"]}
+{"version":3,"file":"host-runner.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAkB,QAAQ,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAChH,OAAO,EACN,gBAAgB,EAChB,qBAAqB,EAGrB,sBAAsB,EAEtB,0BAA0B,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAoB,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAuB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAkChC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAoB;IACxD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,QAAQ;YACZ,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,KAAK,QAAQ;YACZ,OAAO,OAAO,CAAC,GAAG,KAAK,IAAI;gBAC1B,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;gBAC1D,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1D,KAAK,MAAM;YACV,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,SAAS;YACb,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,YAAY;YAChB,OAAO,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,KAAK,IAAI;YACR,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9F;YACC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;AACF,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,MAAkB,EAClB,IAA4B,EAC5B,MAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3B,wFAAwF;QACxF,2FAA2F;QAC3F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;IACF,CAAC;IACD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,UAAU,CAAC;YAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO;SAC7D,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,YAAY,sBAAsB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5D,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,iGAAiG;IACjG,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE;YACR,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAClD,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;YACpD,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB;KACD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CACpB,MAAe,EACf,MAAoC,EACpC,KAAmC;IAEnC,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC;IAC3B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAkB,EAAE,cAAuB;IACvE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,+GAA+G;AAC/G,KAAK,UAAU,gBAAgB,CAAC,MAAkB,EAAE,cAAuB;IAC1E,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED,sGAAsG;AACtG,SAAS,gBAAgB,CAAC,IAAe,EAAE,KAAa,EAAE,IAAY;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,KAAc,EAAE,KAAc;IAC5E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE;KACpF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAkB,EAAE,IAA4B;IAC7E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE;YAChC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtE,OAAO;QACN,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;KAClG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAsB;IAC7C,OAAO,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,GAAW,EAAE,IAAkC;IACvF,OAAO;QACN,MAAM;QACN,GAAG;QACH,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;QACpC,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;QACpC,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI;QAC1C,aAAa,EAAE,IAAI,EAAE,aAAa,IAAI,IAAI;QAC1C,YAAY,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE;QACtC,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,IAAI,IAAI;QACzD,WAAW,EAAE,gBAAgB,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,WAAW;KAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CACf,IAA2B,EAC3B,IAAkC,EAClC,IAA2D;IAE3D,OAAO;QACN,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB;QACpE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE;KAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAkB,EAAE,IAA4B;IAC7E,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,MAAM,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc;IACtB,OAAO;QACN,eAAe,EAAE,qBAAqB;QACtC,oBAAoB,EAAE,0BAA0B;QAChD,QAAQ,EAAE,mBAAmB,EAAE;QAC/B,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC1B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC","sourcesContent":["/**\n * One host request, performed: ensure a daemon, report one, stop one, or hand one off.\n *\n * This is the whole behaviour behind `senpi host` - and behind the launchers that call the same\n * entry point in-process - separated from the command line that expresses it. Every request answers\n * with a JSON payload plus the exit code that payload means, so a CLI, a desktop and a task runner\n * report the same outcome with the same vocabulary:\n *\n *     0  the request happened            3  refused: a running host this client may not act on,\n *     4  no host is better than this one     an unreachable socket, or a stop that would end\n *        one (fallback policy)               somebody else's work\n *\n * The refusals are the point. One daemon holds every client's sessions on its endpoint, so a client\n * that cannot get what it wants must SAY so and leave the running host alone (I1) - never stop it,\n * never bind a second host over its socket. `decideHostAction`, `ensureHost`, `stopHost` and\n * `handoffHost` already enforce that; this module only gives their outcomes a machine-readable shape.\n */\nimport { engineBuildIdentity } from \"../../core/engine-build-identity.ts\";\nimport { daemonEnvKeys, daemonEnvOverrides, writeDaemonEnvKeys } from \"./host-daemon-env.ts\";\nimport { createHostDaemonPaths, type ShardKind, shardKey, shardSocketPathForKey } from \"./host-daemon-paths.ts\";\nimport {\n\tdecideHostAction,\n\tHOST_PROTOCOL_VERSION,\n\ttype HostDecisionClient,\n\ttype HostDecisionPolicy,\n\tHostEnsureRefusedError,\n\ttype HostProtocolInfo,\n\tREQUIRED_HOST_CAPABILITIES,\n} from \"./host-decision.ts\";\nimport { type EnsuredHost, ensureHost } from \"./host-ensure.ts\";\nimport { gcHostEndpoints } from \"./host-gc.ts\";\nimport { type HandoffRefusal, handoffHost } from \"./host-handoff.ts\";\nimport type { ResolvedHostLaunchSpec } from \"./host-launch-spec.ts\";\nimport { probeProtocolInfo } from \"./host-probe.ts\";\nimport { hostSummary, readHostStatus, readSessionCounts } from \"./host-status.ts\";\nimport { readAllHostStatus } from \"./host-status-all.ts\";\nimport { stopHost } from \"./host-stop.ts\";\n\nexport const HOST_EXIT_OK = 0;\nexport const HOST_EXIT_ERROR = 1;\nexport const HOST_EXIT_USAGE = 2;\nexport const HOST_EXIT_REFUSED = 3;\nexport const HOST_EXIT_FALLBACK = 4;\n\nconst PROBE_TIMEOUT_MS = 10_000;\n\n/** Which daemon a request is about: the endpoint, and the agent directory holding its state. */\nexport interface HostTarget {\n\treadonly socket: string;\n\treadonly agentDir: string;\n}\n\nexport type HostRequest =\n\t| {\n\t\t\treadonly action: \"ensure\";\n\t\t\treadonly target: HostTarget;\n\t\t\treadonly spec: ResolvedHostLaunchSpec;\n\t\t\treadonly policy: HostDecisionPolicy;\n\t  }\n\t| {\n\t\t\treadonly action: \"status\";\n\t\t\treadonly target: HostTarget;\n\t\t\treadonly includeWorkers: boolean;\n\t\t\t/** Every endpoint under `target.agentDir` (its socket is ignored), read without pruning. */\n\t\t\treadonly all?: boolean;\n\t  }\n\t| { readonly action: \"stop\"; readonly target: HostTarget; readonly drain: boolean; readonly force: boolean }\n\t| { readonly action: \"handoff\"; readonly target: HostTarget; readonly spec: ResolvedHostLaunchSpec }\n\t/** Removes endpoint state under `agentDir` only on the three-part evidence (`host-gc.ts`). */\n\t| { readonly action: \"gc\"; readonly agentDir: string }\n\t| { readonly action: \"shard_path\"; readonly kind: ShardKind; readonly owner: string; readonly root: string };\n\n/** One JSON line and the exit code it means. */\nexport interface HostOutcome {\n\treadonly exitCode: number;\n\treadonly payload: Record<string, unknown>;\n}\n\nexport async function runHostRequest(request: HostRequest): Promise<HostOutcome> {\n\tswitch (request.action) {\n\t\tcase \"ensure\":\n\t\t\treturn ensureOutcome(request.target, request.spec, request.policy);\n\t\tcase \"status\":\n\t\t\treturn request.all === true\n\t\t\t\t? statusAllOutcome(request.target, request.includeWorkers)\n\t\t\t\t: statusOutcome(request.target, request.includeWorkers);\n\t\tcase \"stop\":\n\t\t\treturn stopOutcome(request.target, request.drain, request.force);\n\t\tcase \"handoff\":\n\t\t\treturn handoffOutcome(request.target, request.spec);\n\t\tcase \"shard_path\":\n\t\t\treturn shardPathOutcome(request.kind, request.owner, request.root);\n\t\tcase \"gc\":\n\t\t\treturn { exitCode: HOST_EXIT_OK, payload: { ...(await gcHostEndpoints(request.agentDir)) } };\n\t\tdefault:\n\t\t\treturn assertNever(request);\n\t}\n}\n\nasync function ensureOutcome(\n\ttarget: HostTarget,\n\tspec: ResolvedHostLaunchSpec,\n\tpolicy: HostDecisionPolicy,\n): Promise<HostOutcome> {\n\tconst before = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tif (policy === \"fallback\") {\n\t\t// `fallback` is the caller saying it can live without a host. The decision is made HERE\n\t\t// because an ensure always produces a host or fails: it has no fallback answer of its own.\n\t\tconst decision = decideHostAction(decisionClient(), before, \"fallback\");\n\t\tif (decision.action === \"fallback\") {\n\t\t\treturn refusal(\"fallback\", before, { reason: decision.reason, socket: target.socket });\n\t\t}\n\t}\n\tlet ensured: EnsuredHost;\n\ttry {\n\t\tensured = await ensureHost({\n\t\t\tsocket: target.socket,\n\t\t\tagentDir: target.agentDir,\n\t\t\thostArgs: spec.hostArgs,\n\t\t\tenv: daemonEnvOverrides(process.env, spec.env),\n\t\t\tpolicy: spec.policy,\n\t\t\tupgrade: policy === \"upgrade\" ? \"if-engine-differs\" : \"never\",\n\t\t});\n\t} catch (error: unknown) {\n\t\tif (!(error instanceof HostEnsureRefusedError)) throw error;\n\t\treturn refusal(\"refuse\", before, { reason: error.reason, socket: target.socket });\n\t}\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS).finally(ensured.release);\n\t// Only a spawn grants an environment; a reuse inherited whatever the client that started it did.\n\tif (!ensured.reused) await recordEnvScope(target, spec);\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: {\n\t\t\taction: ensureAction(ensured.reused, before, host),\n\t\t\t...identityPayload(target.socket, ensured.pid, host),\n\t\t\treused: ensured.reused,\n\t\t},\n\t};\n}\n\n/**\n * What an ensure DID. A handoff and a fresh start both report `reused: false`, so the instance id is\n * what tells them apart: a handoff replaced the process behind a socket somebody was already serving.\n */\nfunction ensureAction(\n\treused: boolean,\n\tbefore: HostProtocolInfo | undefined,\n\tafter: HostProtocolInfo | undefined,\n): string {\n\tif (reused) return \"reuse\";\n\treturn before !== undefined && before.instanceId !== after?.instanceId ? \"handoff\" : \"start\";\n}\n\nasync function statusOutcome(target: HostTarget, includeWorkers: boolean): Promise<HostOutcome> {\n\tconst status = await readHostStatus({ socket: target.socket, agentDir: target.agentDir, includeWorkers });\n\treturn { exitCode: status.reachable ? HOST_EXIT_OK : HOST_EXIT_REFUSED, payload: { ...status } };\n}\n\n/** Same exit vocabulary as one socket: 0 while anything answers, 3 when nothing does (or nothing is there). */\nasync function statusAllOutcome(target: HostTarget, includeWorkers: boolean): Promise<HostOutcome> {\n\tconst endpoints = await readAllHostStatus({ agentDir: target.agentDir, includeWorkers });\n\tconst reachable = endpoints.some((endpoint) => endpoint.reachable);\n\treturn { exitCode: reachable ? HOST_EXIT_OK : HOST_EXIT_REFUSED, payload: { endpoints } };\n}\n\n/** The naming contract answered without contacting any host, for a client that mirrors it locally. */\nfunction shardPathOutcome(kind: ShardKind, owner: string, root: string): HostOutcome {\n\tconst key = shardKey(kind, owner);\n\treturn { exitCode: HOST_EXIT_OK, payload: { kind, key, socket: shardSocketPathForKey(root, kind, key) } };\n}\n\n/**\n * A hard stop ends every session the daemon holds, including the ones other clients are attached to,\n * so it is gated on the host's own count and refuses with those counts rather than a bare \"busy\".\n * A DRAIN ends no work - the host stops accepting and leaves when it is empty - so it is never gated.\n */\nasync function stopOutcome(target: HostTarget, drain: boolean, force: boolean): Promise<HostOutcome> {\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tconst sessions = await readSessionCounts(target.socket, true);\n\tconst occupied = sessions.foreign_attached + sessions.foreign_retained > 0;\n\tif (!drain && !force && occupied) {\n\t\treturn refusal(\"refuse\", host, { reason: \"sessions_live\", socket: target.socket, sessions });\n\t}\n\tconst result = await stopHost({ socket: target.socket, agentDir: target.agentDir, drain, force });\n\tif (result.action === \"refuse\") {\n\t\treturn refusal(\"refuse\", host, { reason: result.reason, socket: target.socket, sessions });\n\t}\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: { action: result.action, socket: target.socket, pid: result.pid, sessions },\n\t};\n}\n\nasync function handoffOutcome(target: HostTarget, spec: ResolvedHostLaunchSpec): Promise<HostOutcome> {\n\tconst before = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\tconst result = await handoffHost({\n\t\tsocket: target.socket,\n\t\tagentDir: target.agentDir,\n\t\thostArgs: spec.hostArgs,\n\t\tenv: daemonEnvOverrides(process.env, spec.env),\n\t\tpolicy: spec.policy,\n\t});\n\tif (result.action === \"refuse\") {\n\t\treturn refusal(\"refuse\", before, {\n\t\t\treason: upgradeRefusal(result.reason),\n\t\t\tsocket: target.socket,\n\t\t\tdetail: result.reason,\n\t\t\tupgradeable: result.upgradeable,\n\t\t});\n\t}\n\tawait recordEnvScope(target, spec);\n\tconst host = await probeProtocolInfo(target.socket, PROBE_TIMEOUT_MS);\n\treturn {\n\t\texitCode: HOST_EXIT_OK,\n\t\tpayload: { action: \"handoff\", ...identityPayload(target.socket, result.pid, host), reused: false },\n\t};\n}\n\n/**\n * A host that cannot drain and a platform that cannot hand off are one answer to the caller: this\n * build may not replace the running generation. The refusal that produced it stays in `detail`.\n */\nfunction upgradeRefusal(reason: HandoffRefusal): string {\n\treturn reason === \"handoff_unsupported\" ? \"upgrade_unsupported\" : reason;\n}\n\nfunction identityPayload(socket: string, pid: number, host: HostProtocolInfo | undefined): Record<string, unknown> {\n\treturn {\n\t\tsocket,\n\t\tpid,\n\t\tinstanceId: host?.instanceId ?? null,\n\t\tgeneration: host?.generation ?? null,\n\t\tengineVersion: host?.engineVersion ?? null,\n\t\tengineOrdinal: host?.engineOrdinal ?? null,\n\t\tcapabilities: host?.capabilities ?? [],\n\t\tlaunchProfileId: host?.launch_profile?.profile_id ?? null,\n\t\tupgradeable: decideHostAction(decisionClient(), host, \"upgrade\").upgradeable,\n\t};\n}\n\n/**\n * The two ways a request ends without acting, and the exit codes they mean: a `refuse` leaves a\n * running host alone (3), a `fallback` says no host is better than this one (4).\n */\nfunction refusal(\n\tkind: \"refuse\" | \"fallback\",\n\thost: HostProtocolInfo | undefined,\n\tbody: { readonly reason: string } & Record<string, unknown>,\n): HostOutcome {\n\treturn {\n\t\texitCode: kind === \"refuse\" ? HOST_EXIT_REFUSED : HOST_EXIT_FALLBACK,\n\t\tpayload: { action: kind, ...body, host: hostSummary(host) },\n\t};\n}\n\nasync function recordEnvScope(target: HostTarget, spec: ResolvedHostLaunchSpec): Promise<void> {\n\tconst paths = createHostDaemonPaths({ socket: target.socket, agentDir: target.agentDir });\n\tawait writeDaemonEnvKeys(paths, daemonEnvKeys(process.env, spec.env));\n}\n\n/**\n * This build as a client, WITHOUT a launch profile: the request's own `ensureHost` decides whether a\n * handoff may happen, from the profile it would launch. What is asked here is only what any client\n * can answer without one - is the running host usable, and could it be handed off from at all.\n */\nfunction decisionClient(): HostDecisionClient {\n\treturn {\n\t\tprotocolVersion: HOST_PROTOCOL_VERSION,\n\t\trequiredCapabilities: REQUIRED_HOST_CAPABILITIES,\n\t\tidentity: engineBuildIdentity(),\n\t\tstartedByUs: false,\n\t\tplatform: process.platform,\n\t};\n}\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`unreachable host request: ${JSON.stringify(value)}`);\n}\n"]}

package/dist/modes/rpc/host-status-all.d.ts

@@ -0,0 +1,31 @@
+import { type HostEndpointEntry, type HostEndpointIdentitySource } from "./host-endpoints.ts";
+import { type HostStatusReport } from "./host-status.ts";
+export interface HostEndpointStatus extends Omit<HostStatusReport, "socket"> {
+    readonly socket: string | null;
+    readonly dir: string;
+    readonly identity: HostEndpointIdentitySource;
+}
+/**
+ * Endpoints read at once. Each read holds a socket and a few files open until its budget runs out, so
+ * an unbounded fan-out over hundreds of hung hosts hit EMFILE under a 256-descriptor hard limit and
+ * returned no rows at all; up to this many hung hosts still cost about one budget in total.
+ */
+export declare const STATUS_ALL_MAX_IN_FLIGHT = 64;
+interface StatusAllOptions {
+    readonly agentDir: string;
+    readonly includeWorkers: boolean;
+    /** Budget for each read of each endpoint's socket, default 10 s (`readHostStatus`). */
+    readonly timeoutMs?: number;
+    /** Replaces the per-endpoint read; tests observe how many run at once. */
+    readonly _test?: {
+        readonly readEndpoint?: (endpoint: HostEndpointEntry) => Promise<HostEndpointStatus>;
+    };
+}
+/**
+ * Endpoints are read concurrently, at most STATUS_ALL_MAX_IN_FLIGHT at a time, each under its own
+ * budget, so hung hosts cost about one budget per STATUS_ALL_MAX_IN_FLIGHT rather than one each; rows
+ * keep the enumeration order (sorted by directory name).
+ */
+export declare function readAllHostStatus(options: StatusAllOptions): Promise<readonly HostEndpointStatus[]>;
+export {};
+//# sourceMappingURL=host-status-all.d.ts.map

package/dist/modes/rpc/host-status-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-status-all.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-status-all.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,iBAAiB,EAAE,KAAK,0BAA0B,EAAqB,MAAM,qBAAqB,CAAC;AAEjH,OAAO,EAAE,KAAK,gBAAgB,EAAkB,MAAM,kBAAkB,CAAC;AAGzE,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC9C;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C,UAAU,gBAAgB;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAA;KAAE,CAAC;CAC1G;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAazG"}

package/dist/modes/rpc/host-status-all.js

@@ -0,0 +1,78 @@
+/**
+ * `senpi host status --all`: one status row per endpoint an agent directory holds state for.
+ *
+ * Enumeration is the daemon directory (`listHostEndpoints`), and every row is the single-socket
+ * report read with `prune: false` - so this answer removes NOTHING. Dead generations stay visible as
+ * `alive: false` rows, an endpoint whose host exited stays listed through its `endpoint.json`, and
+ * the reclaiming of what ended is a separate, evidence-gated command rather than a side effect of
+ * looking. A directory that names no socket still gets a row (`socket: null`), built from the
+ * directory alone, because it is exactly what an operator asking "what is on this machine" needs to
+ * see.
+ */
+import { readHostCrashRecords } from "./host-crash-record.js";
+import { hostDaemonDirectoryPaths } from "./host-daemon-paths.js";
+import { listHostEndpoints } from "./host-endpoints.js";
+import { readGenerationRows } from "./host-generations.js";
+import { readHostStatus } from "./host-status.js";
+import { readClaimRows } from "./host-status-rows.js";
+/**
+ * Endpoints read at once. Each read holds a socket and a few files open until its budget runs out, so
+ * an unbounded fan-out over hundreds of hung hosts hit EMFILE under a 256-descriptor hard limit and
+ * returned no rows at all; up to this many hung hosts still cost about one budget in total.
+ */
+export const STATUS_ALL_MAX_IN_FLIGHT = 64;
+/**
+ * Endpoints are read concurrently, at most STATUS_ALL_MAX_IN_FLIGHT at a time, each under its own
+ * budget, so hung hosts cost about one budget per STATUS_ALL_MAX_IN_FLIGHT rather than one each; rows
+ * keep the enumeration order (sorted by directory name).
+ */
+export async function readAllHostStatus(options) {
+    const endpoints = await listHostEndpoints(options.agentDir);
+    const read = options._test?.readEndpoint ?? ((endpoint) => endpointStatus(endpoint, options));
+    const rows = new Array(endpoints.length);
+    let next = 0;
+    const worker = async () => {
+        for (let index = next++; index < endpoints.length; index = next++) {
+            const endpoint = endpoints[index];
+            if (endpoint !== undefined)
+                rows[index] = await read(endpoint);
+        }
+    };
+    await Promise.all(Array.from({ length: Math.min(STATUS_ALL_MAX_IN_FLIGHT, endpoints.length) }, worker));
+    return rows;
+}
+async function endpointStatus(endpoint, options) {
+    const located = { dir: endpoint.dir, identity: endpoint.identity };
+    if (endpoint.socket === null)
+        return { ...(await unaddressableStatus(endpoint.dir)), socket: null, ...located };
+    const report = await readHostStatus({ socket: endpoint.socket, agentDir: options.agentDir, includeWorkers: options.includeWorkers }, { prune: false, ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}) });
+    return { ...report, ...located };
+}
+async function unaddressableStatus(dir) {
+    const paths = hostDaemonDirectoryPaths(dir);
+    const generations = await readGenerationRows(paths, { includeDead: true });
+    const claims = await readClaimRows(paths, generations);
+    return {
+        reachable: false,
+        pid: null,
+        instanceId: null,
+        generation: null,
+        engineVersion: null,
+        capabilities: [],
+        launchProfile: null,
+        sessions: { total: 0, interactive: 0, worker: 0, retained: 0, foreign_attached: 0, foreign_retained: 0 },
+        zombies: null,
+        rss_mb: null,
+        host_rss_mb: null,
+        open_fds: null,
+        memory_pressure: null,
+        env_keys: [],
+        generations,
+        crashes: readHostCrashRecords(dir).length,
+        shard: null,
+        session_rows: [],
+        claims_live: claims.filter((claim) => claim.live).length,
+        claims: [],
+    };
+}
+//# sourceMappingURL=host-status-all.js.map

package/dist/modes/rpc/host-status-all.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-status-all.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-status-all.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAA2D,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAyB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAQtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAW3C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAyB;IAChE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC,QAA2B,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACjH,MAAM,IAAI,GAAyB,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACxC,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;IACF,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACxG,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAA2B,EAAE,OAAyB;IACnF,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,CAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC;IAChH,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,EAC/F,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC9F,CAAC;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO;QACN,SAAS,EAAE,KAAK;QAChB,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,IAAI;QACnB,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE;QACxG,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,eAAe,EAAE,IAAI;QACrB,QAAQ,EAAE,EAAE;QACZ,WAAW;QACX,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,MAAM;QACzC,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,EAAE;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM;QACxD,MAAM,EAAE,EAAE;KACV,CAAC;AACH,CAAC","sourcesContent":["/**\n * `senpi host status --all`: one status row per endpoint an agent directory holds state for.\n *\n * Enumeration is the daemon directory (`listHostEndpoints`), and every row is the single-socket\n * report read with `prune: false` - so this answer removes NOTHING. Dead generations stay visible as\n * `alive: false` rows, an endpoint whose host exited stays listed through its `endpoint.json`, and\n * the reclaiming of what ended is a separate, evidence-gated command rather than a side effect of\n * looking. A directory that names no socket still gets a row (`socket: null`), built from the\n * directory alone, because it is exactly what an operator asking \"what is on this machine\" needs to\n * see.\n */\nimport { readHostCrashRecords } from \"./host-crash-record.ts\";\nimport { hostDaemonDirectoryPaths } from \"./host-daemon-paths.ts\";\nimport { type HostEndpointEntry, type HostEndpointIdentitySource, listHostEndpoints } from \"./host-endpoints.ts\";\nimport { readGenerationRows } from \"./host-generations.ts\";\nimport { type HostStatusReport, readHostStatus } from \"./host-status.ts\";\nimport { readClaimRows } from \"./host-status-rows.ts\";\n\nexport interface HostEndpointStatus extends Omit<HostStatusReport, \"socket\"> {\n\treadonly socket: string | null;\n\treadonly dir: string;\n\treadonly identity: HostEndpointIdentitySource;\n}\n\n/**\n * Endpoints read at once. Each read holds a socket and a few files open until its budget runs out, so\n * an unbounded fan-out over hundreds of hung hosts hit EMFILE under a 256-descriptor hard limit and\n * returned no rows at all; up to this many hung hosts still cost about one budget in total.\n */\nexport const STATUS_ALL_MAX_IN_FLIGHT = 64;\n\ninterface StatusAllOptions {\n\treadonly agentDir: string;\n\treadonly includeWorkers: boolean;\n\t/** Budget for each read of each endpoint's socket, default 10 s (`readHostStatus`). */\n\treadonly timeoutMs?: number;\n\t/** Replaces the per-endpoint read; tests observe how many run at once. */\n\treadonly _test?: { readonly readEndpoint?: (endpoint: HostEndpointEntry) => Promise<HostEndpointStatus> };\n}\n\n/**\n * Endpoints are read concurrently, at most STATUS_ALL_MAX_IN_FLIGHT at a time, each under its own\n * budget, so hung hosts cost about one budget per STATUS_ALL_MAX_IN_FLIGHT rather than one each; rows\n * keep the enumeration order (sorted by directory name).\n */\nexport async function readAllHostStatus(options: StatusAllOptions): Promise<readonly HostEndpointStatus[]> {\n\tconst endpoints = await listHostEndpoints(options.agentDir);\n\tconst read = options._test?.readEndpoint ?? ((endpoint: HostEndpointEntry) => endpointStatus(endpoint, options));\n\tconst rows: HostEndpointStatus[] = new Array(endpoints.length);\n\tlet next = 0;\n\tconst worker = async (): Promise<void> => {\n\t\tfor (let index = next++; index < endpoints.length; index = next++) {\n\t\t\tconst endpoint = endpoints[index];\n\t\t\tif (endpoint !== undefined) rows[index] = await read(endpoint);\n\t\t}\n\t};\n\tawait Promise.all(Array.from({ length: Math.min(STATUS_ALL_MAX_IN_FLIGHT, endpoints.length) }, worker));\n\treturn rows;\n}\n\nasync function endpointStatus(endpoint: HostEndpointEntry, options: StatusAllOptions): Promise<HostEndpointStatus> {\n\tconst located = { dir: endpoint.dir, identity: endpoint.identity };\n\tif (endpoint.socket === null) return { ...(await unaddressableStatus(endpoint.dir)), socket: null, ...located };\n\tconst report = await readHostStatus(\n\t\t{ socket: endpoint.socket, agentDir: options.agentDir, includeWorkers: options.includeWorkers },\n\t\t{ prune: false, ...(options.timeoutMs !== undefined ? { timeoutMs: options.timeoutMs } : {}) },\n\t);\n\treturn { ...report, ...located };\n}\n\nasync function unaddressableStatus(dir: string): Promise<Omit<HostStatusReport, \"socket\">> {\n\tconst paths = hostDaemonDirectoryPaths(dir);\n\tconst generations = await readGenerationRows(paths, { includeDead: true });\n\tconst claims = await readClaimRows(paths, generations);\n\treturn {\n\t\treachable: false,\n\t\tpid: null,\n\t\tinstanceId: null,\n\t\tgeneration: null,\n\t\tengineVersion: null,\n\t\tcapabilities: [],\n\t\tlaunchProfile: null,\n\t\tsessions: { total: 0, interactive: 0, worker: 0, retained: 0, foreign_attached: 0, foreign_retained: 0 },\n\t\tzombies: null,\n\t\trss_mb: null,\n\t\thost_rss_mb: null,\n\t\topen_fds: null,\n\t\tmemory_pressure: null,\n\t\tenv_keys: [],\n\t\tgenerations,\n\t\tcrashes: readHostCrashRecords(dir).length,\n\t\tshard: null,\n\t\tsession_rows: [],\n\t\tclaims_live: claims.filter((claim) => claim.live).length,\n\t\tclaims: [],\n\t};\n}\n"]}

package/dist/modes/rpc/host-status-rows.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The per-row detail of a status report: the sessions a host listed and the session-path claims its
+ * endpoint's `reservations/` directory holds.
+ *
+ * Both are parsed here from what the host and the directory SAY, at the boundary, so the report
+ * carries typed rows and never a raw reply. The listing is the same `list_sessions` reply the counts
+ * are made from; the claims are read from the directory every generation of the endpoint shares, so
+ * a path a draining predecessor still holds is visible even though the answering generation's own
+ * listing no longer names it.
+ */
+import type { HostDaemonDirectory } from "./host-daemon-paths.ts";
+import type { HostGenerationRow } from "./host-generations.ts";
+/** One session the host listed, with the canonical path a client matches it by. */
+export interface HostSessionRow {
+    readonly id: string;
+    readonly kind: string;
+    readonly session_path: string | null;
+    readonly attachments: number;
+    /** The labels published on a worker listing; `null` when the host published none. */
+    readonly context: Readonly<Record<string, string>> | null;
+}
+/** One session-path claim, whichever generation of the endpoint wrote it. */
+export interface HostPathClaimRow {
+    readonly session_path: string;
+    readonly owner_pid: number;
+    readonly instance_id: string;
+    /** The owner generation's ordinal, `null` once its generation record is gone. */
+    readonly generation: number | null;
+    /** Whether the owner had a client attached when it last published; `null` for a pre-flag claim. */
+    readonly attached: boolean | null;
+    readonly live: boolean;
+}
+export declare function parseSessionRows(reply: unknown): readonly HostSessionRow[];
+export declare function readClaimRows(paths: HostDaemonDirectory, generations: readonly HostGenerationRow[]): Promise<readonly HostPathClaimRow[]>;
+//# sourceMappingURL=host-status-rows.d.ts.map

package/dist/modes/rpc/host-status-rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-status-rows.d.ts","sourceRoot":"","sources":["../../../src/modes/rpc/host-status-rows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG/D,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mGAAmG;IACnG,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,cAAc,EAAE,CAc1E;AAED,wBAAsB,aAAa,CAClC,KAAK,EAAE,mBAAmB,EAC1B,WAAW,EAAE,SAAS,iBAAiB,EAAE,GACvC,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CActC"}

package/dist/modes/rpc/host-status-rows.js

@@ -0,0 +1,42 @@
+import { claimOwnerIsLive, readSessionPathClaims } from "./host-reservations.js";
+export function parseSessionRows(reply) {
+    if (!isRecord(reply) || !Array.isArray(reply.sessions))
+        return [];
+    return reply.sessions.flatMap((entry) => {
+        if (!isRecord(entry))
+            return [];
+        return [
+            {
+                id: typeof entry.sessionId === "string" ? entry.sessionId : "",
+                kind: typeof entry.kind === "string" ? entry.kind : "interactive",
+                session_path: typeof entry.sessionPath === "string" ? entry.sessionPath : null,
+                attachments: typeof entry.attachments === "number" ? entry.attachments : 0,
+                context: stringRecord(entry.context),
+            },
+        ];
+    });
+}
+export async function readClaimRows(paths, generations) {
+    const rows = [];
+    for (const claim of await readSessionPathClaims(paths.reservationsDir)) {
+        const owner = claim.owner;
+        rows.push({
+            session_path: owner.sessionPath,
+            owner_pid: owner.pid,
+            instance_id: owner.instanceId,
+            generation: generations.find((row) => row.instanceId === owner.instanceId)?.generation ?? null,
+            attached: owner.attached ?? null,
+            live: await claimOwnerIsLive(owner),
+        });
+    }
+    return rows.sort((left, right) => left.session_path.localeCompare(right.session_path));
+}
+function stringRecord(value) {
+    if (!isRecord(value))
+        return null;
+    return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=host-status-rows.js.map

package/dist/modes/rpc/host-status-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-status-rows.js","sourceRoot":"","sources":["../../../src/modes/rpc/host-status-rows.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAwBjF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;QAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,OAAO;YACN;gBACC,EAAE,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBAC9D,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;gBACjE,YAAY,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBAC9E,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;gBAC1E,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;aACpC;SACD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,KAA0B,EAC1B,WAAyC;IAEzC,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,qBAAqB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACT,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,SAAS,EAAE,KAAK,CAAC,GAAG;YACpB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,IAAI,IAAI;YAC9F,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,IAAI,EAAE,MAAM,gBAAgB,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAChG,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The per-row detail of a status report: the sessions a host listed and the session-path claims its\n * endpoint's `reservations/` directory holds.\n *\n * Both are parsed here from what the host and the directory SAY, at the boundary, so the report\n * carries typed rows and never a raw reply. The listing is the same `list_sessions` reply the counts\n * are made from; the claims are read from the directory every generation of the endpoint shares, so\n * a path a draining predecessor still holds is visible even though the answering generation's own\n * listing no longer names it.\n */\nimport type { HostDaemonDirectory } from \"./host-daemon-paths.ts\";\nimport type { HostGenerationRow } from \"./host-generations.ts\";\nimport { claimOwnerIsLive, readSessionPathClaims } from \"./host-reservations.ts\";\n\n/** One session the host listed, with the canonical path a client matches it by. */\nexport interface HostSessionRow {\n\treadonly id: string;\n\treadonly kind: string;\n\treadonly session_path: string | null;\n\treadonly attachments: number;\n\t/** The labels published on a worker listing; `null` when the host published none. */\n\treadonly context: Readonly<Record<string, string>> | null;\n}\n\n/** One session-path claim, whichever generation of the endpoint wrote it. */\nexport interface HostPathClaimRow {\n\treadonly session_path: string;\n\treadonly owner_pid: number;\n\treadonly instance_id: string;\n\t/** The owner generation's ordinal, `null` once its generation record is gone. */\n\treadonly generation: number | null;\n\t/** Whether the owner had a client attached when it last published; `null` for a pre-flag claim. */\n\treadonly attached: boolean | null;\n\treadonly live: boolean;\n}\n\nexport function parseSessionRows(reply: unknown): readonly HostSessionRow[] {\n\tif (!isRecord(reply) || !Array.isArray(reply.sessions)) return [];\n\treturn reply.sessions.flatMap((entry: unknown) => {\n\t\tif (!isRecord(entry)) return [];\n\t\treturn [\n\t\t\t{\n\t\t\t\tid: typeof entry.sessionId === \"string\" ? entry.sessionId : \"\",\n\t\t\t\tkind: typeof entry.kind === \"string\" ? entry.kind : \"interactive\",\n\t\t\t\tsession_path: typeof entry.sessionPath === \"string\" ? entry.sessionPath : null,\n\t\t\t\tattachments: typeof entry.attachments === \"number\" ? entry.attachments : 0,\n\t\t\t\tcontext: stringRecord(entry.context),\n\t\t\t},\n\t\t];\n\t});\n}\n\nexport async function readClaimRows(\n\tpaths: HostDaemonDirectory,\n\tgenerations: readonly HostGenerationRow[],\n): Promise<readonly HostPathClaimRow[]> {\n\tconst rows: HostPathClaimRow[] = [];\n\tfor (const claim of await readSessionPathClaims(paths.reservationsDir)) {\n\t\tconst owner = claim.owner;\n\t\trows.push({\n\t\t\tsession_path: owner.sessionPath,\n\t\t\towner_pid: owner.pid,\n\t\t\tinstance_id: owner.instanceId,\n\t\t\tgeneration: generations.find((row) => row.instanceId === owner.instanceId)?.generation ?? null,\n\t\t\tattached: owner.attached ?? null,\n\t\t\tlive: await claimOwnerIsLive(owner),\n\t\t});\n\t}\n\treturn rows.sort((left, right) => left.session_path.localeCompare(right.session_path));\n}\n\nfunction stringRecord(value: unknown): Readonly<Record<string, string>> | null {\n\tif (!isRecord(value)) return null;\n\treturn Object.fromEntries(\n\t\tObject.entries(value).filter((entry): entry is [string, string] => typeof entry[1] === \"string\"),\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/modes/rpc/host-status.d.ts

@@ -1,5 +1,7 @@
+import { type ShardKind } from "./host-daemon-paths.ts";
 import type { HostProtocolInfo } from "./host-decision.ts";
 import { type HostGenerationRow } from "./host-generations.ts";
+import { type HostPathClaimRow, type HostSessionRow } from "./host-status-rows.ts";
 import type { RpcLaunchProfile } from "./rpc-types.ts";
 /**
  * Sessions the host reports. `foreign_*` is the same count from the point of view of a client that
@@ -16,6 +18,7 @@ export interface HostSessionCounts {
     readonly foreign_retained: number;
 }
 export type { HostGenerationRow } from "./host-generations.ts";
+export type { HostPathClaimRow, HostSessionRow } from "./host-status-rows.ts";
 export interface HostStatusReport {
     readonly reachable: boolean;
     readonly socket: string;
@@ -30,9 +33,27 @@ export interface HostStatusReport {
     readonly rss_mb: number | null;
     readonly host_rss_mb: number | null;
     readonly open_fds: number | null;
+    /**
+     * Whether the ANSWERING generation's memory sampler reads pressure right now (RSS above
+     * `SENPI_RPC_HOST_RSS_WARN_MB`); `null` when nothing answers or the host predates the field.
+     */
+    readonly memory_pressure: boolean | null;
     /** Environment NAMES the daemon was granted, never values. */
     readonly env_keys: readonly string[];
     readonly generations: readonly HostGenerationRow[];
+    /** Records in this endpoint's `crashes.jsonl`: supervised host children that DIED, not stopped. */
+    readonly crashes: number;
+    /** The owner-keyed shard the socket names (`<kind>-<16hex>.sock`), `null` for any other endpoint. */
+    readonly shard: {
+        readonly kind: ShardKind;
+        readonly key: string;
+    } | null;
+    /** Every listed session, only when workers were asked for; `[]` otherwise. */
+    readonly session_rows: readonly HostSessionRow[];
+    /** Session-path claims in `reservations/` whose owner process is still running. */
+    readonly claims_live: number;
+    /** Every claim in `reservations/`, whichever generation wrote it, only when workers were asked for. */
+    readonly claims: readonly HostPathClaimRow[];
 }
 export interface HostStatusOptions {
     readonly socket: string;
@@ -40,7 +61,17 @@ export interface HostStatusOptions {
     /** Ask the host to include `kind: "worker"` rows, exactly as `list_sessions` defines the flag. */
     readonly includeWorkers?: boolean;
 }
-export declare function readHostStatus(options: HostStatusOptions): Promise<HostStatusReport>;
+/**
+ * How a status read treats the daemon directory. `prune` (the default, and the single-socket
+ * `status`) removes what ended before reporting; `prune: false` (`status --all`) reports dead
+ * generations as `alive: false` rows and removes nothing.
+ */
+export interface HostStatusReadOptions {
+    readonly prune?: boolean;
+    /** Budget for each read of the socket, default 10 s. */
+    readonly timeoutMs?: number;
+}
+export declare function readHostStatus(options: HostStatusOptions, read?: HostStatusReadOptions): Promise<HostStatusReport>;
 /**
  * The occupancy a stop decision is made on. A host that does not answer holds nothing a client can
  * see, and an empty count is what lets a stop proceed against a socket nobody serves.