@cotal-ai/manager 0.16.0 → 0.17.0

package/dist/runtime/pty.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pty.d.ts","sourceRoot":"","sources":["../../src/runtime/pty.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAiB,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAoBtF;;;;;GAKG;AACH,qBAAa,UAAW,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAE/B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW;CAsJhE"}
+{"version":3,"file":"pty.d.ts","sourceRoot":"","sources":["../../src/runtime/pty.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAiB,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAoBtF;;;;;GAKG;AACH,qBAAa,UAAW,YAAW,OAAO;IACxC,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAE/B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,WAAW;CAgKhE"}

package/dist/runtime/pty.js

@@ -163,6 +163,14 @@ export class PtyRuntime {
                     return () => dataSubs.delete(fn);
                 },
                 onExit: (fn) => {
+                    // Already exited (a session attaching over a just-dead pty): fire on the next tick so the
+                    // bridge surfaces a `process-exit` end frame instead of a silent zombie. proc.onExit fired
+                    // ONCE before this listener existed, so a late subscriber would otherwise never hear it
+                    // (waitForExit carries the same already-dead guard).
+                    if (!alive) {
+                        queueMicrotask(fn);
+                        return () => { };
+                    }
                     exitSubs.add(fn);
                     return () => exitSubs.delete(fn);
                 },
@@ -171,10 +179,15 @@ export class PtyRuntime {
                         proc.write(data);
                 },
                 resize: (c, r) => {
+                    // node-pty REJECTS a non-positive dimension (throws), and a console fitting BEFORE its pane
+                    // is laid out can send a 0. Guard BOTH the mirror and the pty resize so a degenerate geometry
+                    // is a safe no-op — never a throw that would propagate into and wedge the serving frame
+                    // handler (the live-e2e "zombie session" class).
+                    if (c <= 0 || r <= 0)
+                        return;
                     cols = c;
                     rows = r;
-                    if (c > 0 && r > 0)
-                        term.resize(c, r); // keep the mirror in step so snapshots reconstruct at size
+                    term.resize(c, r); // keep the mirror in step so snapshots reconstruct at size
                     if (alive)
                         proc.resize(c, r);
                 },

package/dist/runtime/pty.js.map

@@ -1 +1 @@
-{"version":3,"file":"pty.js","sourceRoot":"","sources":["../../src/runtime/pty.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AACxC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB;4CAC4C;AAC5C,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B;;;;;;6EAM6E;AAC7E,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,iFAAiF;AACjF,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACZ,IAAI,GAAG,KAAc,CAAC;IAE/B,KAAK,CAAC,IAAY,EAAE,IAAgB,EAAE,GAAW;QAC/C,iGAAiG;QACjG,6FAA6F;QAC7F,yFAAyF;QACzF,uCAAuC;QACvC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,GAAG;YACH,0FAA0F;YAC1F,6FAA6F;YAC7F,wFAAwF;YACxF,0DAA0D;YAC1D,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;SACpB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;QACvC,yFAAyF;QACzF,wFAAwF;QACxF,4FAA4F;QAC5F,kGAAkG;QAClG,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACjC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,eAAe;YAC3B,gBAAgB,EAAE,IAAI,EAAE,8DAA8D;SACvF,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,GAAG,YAAY,CAAC;QACxB,IAAI,IAAI,GAAG,YAAY,CAAC;QAExB,8FAA8F;QAC9F,+FAA+F;QAC/F,2DAA2D;QAC3D,IAAI,YAAwD,CAAC;QAC7D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;oBACxC,aAAa,CAAC,YAAY,CAAC,CAAC;oBAC5B,YAAY,GAAG,SAAS,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,8DAA8D;YAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjC,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,KAAK,GAAG,KAAK,CAAC;YACd,IAAI,YAAY;gBAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAC9C,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACb,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,oFAAoF;gBACpF,6FAA6F;gBAC7F,6FAA6F;gBAC7F,yFAAyF;gBACzF,yFAAyF;gBACzF,4EAA4E;gBAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;wBACZ,OAAO;oBACT,CAAC;oBACD,yFAAyF;oBACzF,uFAAuF;oBACvF,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC,KAAK;4BAAE,OAAO;wBACnB,IAAI,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;wBACd,CAAC;wBAAC,MAAM,CAAC;4BACP,kBAAkB;wBACpB,CAAC;oBACH,CAAC,EAAE,QAAQ,CAAC,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,8EAA8E;gBAC9E,oEAAoE;gBACpE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;gBACtB,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,MAAM,IAAI,GAAG,GAAS,EAAE;wBACtB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACtB,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC;oBACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACnB,IAAI,CAAC,KAAK;wBAAE,IAAI,EAAE,CAAC;gBACrB,CAAC,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;YACrB,SAAS,EAAE,GAAG,EAAE;gBACd,IAAI,KAAK;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,EAAE,GAAkB,EAAE,CAAC,CAAC;gBAC5B,IAAI,IAAI;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,IAAI;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE;gBACZ,2FAA2F;gBAC3F,wFAAwF;gBACxF,2FAA2F;gBAC3F,2EAA2E;gBAC3E,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAC3E;gBACH,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;oBACb,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;oBACb,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;gBACD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;oBACd,IAAI,KAAK;wBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACf,IAAI,GAAG,CAAC,CAAC;oBACT,IAAI,GAAG,CAAC,CAAC;oBACT,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,2DAA2D;oBAClG,IAAI,KAAK;wBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/B,CAAC;aACF,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"pty.js","sourceRoot":"","sources":["../../src/runtime/pty.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAC;AACxC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB;4CAC4C;AAC5C,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B;;;;;;6EAM6E;AAC7E,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,iFAAiF;AACjF,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACZ,IAAI,GAAG,KAAc,CAAC;IAE/B,KAAK,CAAC,IAAY,EAAE,IAAgB,EAAE,GAAW;QAC/C,iGAAiG;QACjG,6FAA6F;QAC7F,yFAAyF;QACzF,uCAAuC;QACvC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,GAAG;YACH,0FAA0F;YAC1F,6FAA6F;YAC7F,wFAAwF;YACxF,0DAA0D;YAC1D,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;SACpB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;QACvC,yFAAyF;QACzF,wFAAwF;QACxF,4FAA4F;QAC5F,kGAAkG;QAClG,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACjC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,eAAe;YAC3B,gBAAgB,EAAE,IAAI,EAAE,8DAA8D;SACvF,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,GAAG,YAAY,CAAC;QACxB,IAAI,IAAI,GAAG,YAAY,CAAC;QAExB,8FAA8F;QAC9F,+FAA+F;QAC/F,2DAA2D;QAC3D,IAAI,YAAwD,CAAC;QAC7D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;oBACxC,aAAa,CAAC,YAAY,CAAC,CAAC;oBAC5B,YAAY,GAAG,SAAS,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,8DAA8D;YAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACjC,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;YACf,KAAK,GAAG,KAAK,CAAC;YACd,IAAI,YAAY;gBAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAC9C,KAAK,MAAM,EAAE,IAAI,QAAQ;gBAAE,EAAE,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,KAAK;YACX,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;gBACb,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,oFAAoF;gBACpF,6FAA6F;gBAC7F,6FAA6F;gBAC7F,yFAAyF;gBACzF,yFAAyF;gBACzF,4EAA4E;gBAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACjC,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;wBACZ,OAAO;oBACT,CAAC;oBACD,yFAAyF;oBACzF,uFAAuF;oBACvF,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC,KAAK;4BAAE,OAAO;wBACnB,IAAI,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;wBACd,CAAC;wBAAC,MAAM,CAAC;4BACP,kBAAkB;wBACpB,CAAC;oBACH,CAAC,EAAE,QAAQ,CAAC,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrB,OAAO;gBACT,CAAC;gBACD,8EAA8E;gBAC9E,oEAAoE;gBACpE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5D,CAAC;YACD,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;gBACtB,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAC5B,MAAM,IAAI,GAAG,GAAS,EAAE;wBACtB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBACtB,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC;oBACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACnB,IAAI,CAAC,KAAK;wBAAE,IAAI,EAAE,CAAC;gBACrB,CAAC,CAAC;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;YACrB,SAAS,EAAE,GAAG,EAAE;gBACd,IAAI,KAAK;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,EAAE,GAAkB,EAAE,CAAC,CAAC;gBAC5B,IAAI,IAAI;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,IAAI;oBACN,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,EAAE,GAAG,EAAE;gBACZ,2FAA2F;gBAC3F,wFAAwF;gBACxF,2FAA2F;gBAC3F,2EAA2E;gBAC3E,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAC3E;gBACH,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;oBACb,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;oBACb,0FAA0F;oBAC1F,2FAA2F;oBAC3F,wFAAwF;oBACxF,qDAAqD;oBACrD,IAAI,CAAC,KAAK,EAAE,CAAC;wBAAC,cAAc,CAAC,EAAE,CAAC,CAAC;wBAAC,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;oBAAC,CAAC;oBACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;gBACD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;oBACd,IAAI,KAAK;wBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACf,4FAA4F;oBAC5F,8FAA8F;oBAC9F,wFAAwF;oBACxF,iDAAiD;oBACjD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAC7B,IAAI,GAAG,CAAC,CAAC;oBACT,IAAI,GAAG,CAAC,CAAC;oBACT,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,2DAA2D;oBAC9E,IAAI,KAAK;wBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/B,CAAC;aACF,CAAC;SACH,CAAC;IACJ,CAAC;CACF"}

package/dist/session/bridge.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The serving-side PTY ↔ session-rail bridge (P2 item 6). Given an authenticated §13.6 session
+ * (its verified grant + a connection scoped to the two eps rails) and a live pty {@link
+ * AttachSession}, it speaks the {@link TerminalFrame} framing over `openSessionRail(role:"serving")`:
+ *
+ *  - the RECONSTRUCTION handshake (PR #158 preserved over the mesh): the caller opens its rail,
+ *    then sends `ready`; the bridge replays the pty's byte-exact backlog snapshot (which can rebuild
+ *    a full-screen TUI's alternate-screen buffer) and only then streams live output — so a late or
+ *    third attach paints correctly without the child having to repaint. Live output that arrives
+ *    while the snapshot is being built is buffered and flushed after it, in order (no chunk slips
+ *    ahead of, or is lost before, the image);
+ *  - duplex byte flow: pty output → `b` frames (serving → caller); caller `b` frames → pty
+ *    keystrokes; `resize` frames → pty geometry;
+ *  - BACKPRESSURE (item-6 pin: never silent loss): the core rail's window is bounded and refuses
+ *    (`resource-exhausted`) rather than buffer; on refusal the bridge DROPS the chunk, accumulates
+ *    the dropped-byte count, and prepends an explicit `drop` notice to the next frame the reopened
+ *    window accepts — the caller always learns output was lost;
+ *  - TERMINATION (item-6 pin 4): every teardown surfaces a DISTINCT end reason (`process-exit` /
+ *    `closed` / `expired` / `target-despawn` / `manager-restart`) as an `end` frame before the rail
+ *    closes, so the client can tell "the agent exited" from "you were detached" from "the manager
+ *    restarted".
+ */
+import type { NatsConnection } from "@nats-io/transport-node";
+import { type SessionGrant, type AttachSession } from "@cotal-ai/core";
+/** The reference manager's terminal-cause vocabulary (the `end.reason` tokens it surfaces — a
+ *  bounded subset of the generic §13.6 terminal-session `end` reason). `process-exit` = the child
+ *  exited; `closed` = a party closed the rail; `expired` = the offer/session TTL elapsed;
+ *  `target-despawn` = the attached agent was despawned; `manager-restart` = the serving manager
+ *  incarnation advanced its epoch (the successor refuses old-epoch sessions, §13.6). */
+export type AttachEndReason = "process-exit" | "closed" | "expired" | "target-despawn" | "manager-restart";
+export interface ServeSessionBridgeOpts {
+    /** A connection scoped to this session's two eps rails (the serving side's per-session credential,
+     *  or — static mode — the manager's instrument connection whose rows cover the subtree). */
+    nc: NatsConnection;
+    /** The VERIFIED session grant (subjects/window/epoch); the bridge grants nothing, it only frames. */
+    grant: SessionGrant;
+    /** The live pty to bridge. */
+    session: AttachSession;
+    /** Fires once with the distinct end reason when the session tears down (either side). */
+    onEnd?(reason: AttachEndReason): void;
+    /** Passthrough rail timer knobs (testability). */
+    idleCreditMs?: number;
+    stallTimeoutMs?: number;
+}
+export interface SessionBridge {
+    /** Terminate the session with a distinct reason (target despawn / manager restart / expiry): the
+     *  `end` frame is sent best-effort, then the rail closes and the pty is unsubscribed. Idempotent. */
+    end(reason: AttachEndReason): void;
+    /** In-memory observability (smoke assertions): the rail's window stats, the dropped-byte count
+     *  (backpressure), the dropped-FRAME count (caller frames the codec rejected), and whether the
+     *  reconstruction handshake has gone live. */
+    stats(): {
+        sent: number;
+        ackedThrough: number;
+        delivered: number;
+        inFlight: number;
+        droppedBytes: number;
+        droppedFrames: number;
+        live: boolean;
+    };
+}
+export declare function serveSessionBridge(opts: ServeSessionBridgeOpts): SessionBridge;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/session/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/session/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEL,KAAK,YAAY,EAAoB,KAAK,aAAa,EACxD,MAAM,gBAAgB,CAAC;AAExB;;;;wFAIwF;AACxF,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAE3G,MAAM,WAAW,sBAAsB;IACrC;gGAC4F;IAC5F,EAAE,EAAE,cAAc,CAAC;IACnB,qGAAqG;IACrG,KAAK,EAAE,YAAY,CAAC;IACpB,8BAA8B;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,yFAAyF;IACzF,KAAK,CAAC,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACtC,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B;yGACqG;IACrG,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC;;kDAE8C;IAC9C,KAAK,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAClJ;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,aAAa,CAsI9E"}

package/dist/session/bridge.js

@@ -0,0 +1,157 @@
+import { EpEnvelopeError, openSessionRail, encodeTerminalData, terminalFrameBytes, decodeTerminalFrame, } from "@cotal-ai/core";
+export function serveSessionBridge(opts) {
+    const { session } = opts;
+    let live = false; // has `ready` been received (backlog replayed, streaming live)?
+    let ended = false;
+    let droppedBytes = 0;
+    let droppedFrames = 0; // caller frames the codec rejected (observability; NOT a silent black hole)
+    const preReadyBuffer = [];
+    let rail;
+    // Send an application payload down the serving rail. Returns true on success; false when the
+    // window is FULL (`resource-exhausted`, the caller-must-drop signal); any OTHER failure
+    // (broken/closed rail) terminates the session — a broken transport is a distinct `closed` end.
+    const railSend = (p) => {
+        try {
+            rail.send(p);
+            return true;
+        }
+        catch (e) {
+            if (e instanceof EpEnvelopeError && e.code === "resource-exhausted")
+                return false;
+            end("closed");
+            return false;
+        }
+    };
+    // Forward one pty output chunk, honoring backpressure with an explicit drop-notice. A pending
+    // drop count is flushed FIRST (the caller must learn output was lost before the resumed stream),
+    // and only if that notice lands does the actual chunk go — otherwise the chunk's bytes join the
+    // drop count. Nothing is ever buffered unboundedly: a chunk the window can't take is DROPPED,
+    // counted, and surfaced, never queued.
+    const forwardOutput = (chunk) => {
+        if (ended)
+            return;
+        if (droppedBytes > 0) {
+            if (railSend({ k: "drop", bytes: droppedBytes }))
+                droppedBytes = 0;
+            else {
+                droppedBytes += chunk.length;
+                return;
+            }
+        }
+        if (!railSend(encodeTerminalData(chunk)))
+            droppedBytes += chunk.length;
+    };
+    const offData = session.onData((chunk) => {
+        if (ended)
+            return;
+        if (live)
+            forwardOutput(chunk);
+        else
+            preReadyBuffer.push(chunk); // hold until the snapshot is replayed, then flush in order
+    });
+    // The pty exit surfaces `process-exit` — but DEFERRED until the caller is live if it exits before
+    // the `ready` handshake (a session established over an already-dead, or a just-dying, pty): EPS is
+    // at-most-once, so an `end` frame sent before the caller subscribed to `.out` is lost. goLive sends
+    // the deferred exit AFTER the backlog, so the caller always learns the agent exited.
+    let pendingExit = false;
+    const offExit = session.onExit(() => { if (live)
+        end("process-exit");
+    else
+        pendingExit = true; });
+    // The reconstruction handshake: replay the byte-exact backlog snapshot, then flush anything the
+    // pty emitted while we built it, then stream live. Subscribing to output BEFORE this (above)
+    // means no chunk is lost between the snapshot and going live. A repeat `ready` (an explicit
+    // repaint) re-sends a fresh snapshot without re-flushing the already-drained pre-ready buffer.
+    const goLive = async () => {
+        let snapshot;
+        try {
+            snapshot = await session.backlog();
+        }
+        catch (e) {
+            end("closed");
+            void e;
+            return;
+        }
+        if (ended)
+            return;
+        if (snapshot.length)
+            forwardOutput(snapshot);
+        if (!live) {
+            for (const chunk of preReadyBuffer.splice(0))
+                forwardOutput(chunk);
+            live = true;
+        }
+        // The pty exited before we went live (established over a dead/dying pty): surface `process-exit`
+        // NOW, after the backlog reconstruction, so the caller sees the final screen AND the honest end.
+        if (pendingExit)
+            end("process-exit");
+    };
+    const onCallerFrame = (data) => {
+        // A caller frame must NEVER wedge the serving rail. A GARBLED or DEGENERATE frame — e.g. a console
+        // fitting before its pane is laid out sends a 0-dim resize, which the §13.6 codec rejects — is
+        // dropped, and each pty side effect is best-effort. One bad frame crashing this handler is exactly
+        // the live-e2e "zombie session" class (rail open, no echo, no honest end) that violates pin 4.
+        // But a drop is NEVER a black hole: it is COUNTED + LOGGED so a silent inbound failure (a caller
+        // whose frames all decode-reject) is diagnosable, not invisible.
+        let p;
+        try {
+            p = decodeTerminalFrame(data);
+        }
+        catch (e) {
+            droppedFrames++;
+            console.error(`! session ${opts.grant.sessionId}: dropped an undecodable caller frame #${droppedFrames} (${e.message})`);
+            return;
+        }
+        switch (p.k) {
+            case "ready":
+                void goLive();
+                return;
+            case "data":
+                try {
+                    session.write(new TextDecoder().decode(terminalFrameBytes(p)));
+                }
+                catch { /* pty gone/degenerate; never wedge the rail */ }
+                return;
+            case "resize":
+                try {
+                    session.resize(p.cols, p.rows);
+                }
+                catch { /* degenerate geometry; ignore, never wedge */ }
+                return;
+            // `end`/`drop` are serving → caller only; a caller sending one is out of protocol — ignore it.
+            case "end":
+            case "drop":
+                return;
+        }
+    };
+    function end(reason) {
+        if (ended)
+            return;
+        ended = true;
+        offData();
+        offExit();
+        try {
+            rail.send({ k: "end", reason }); // best-effort distinct end-state notice (advisory; may window out)
+        }
+        catch {
+            /* the ledger close/expiry is the authority; the notice is advisory (§13.6) */
+        }
+        rail.close();
+        opts.onEnd?.(reason);
+    }
+    rail = openSessionRail({
+        nc: opts.nc,
+        grant: opts.grant,
+        role: "serving",
+        onData: onCallerFrame,
+        onClose: () => end("closed"),
+        onProtocolError: () => end("closed"),
+        ...(opts.idleCreditMs !== undefined ? { idleCreditMs: opts.idleCreditMs } : {}),
+        ...(opts.stallTimeoutMs !== undefined ? { stallTimeoutMs: opts.stallTimeoutMs } : {}),
+    });
+    return {
+        end,
+        stats: () => ({ ...rail.stats(), droppedBytes, droppedFrames, live }),
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/session/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/session/bridge.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,GAE9F,MAAM,gBAAgB,CAAC;AAkCxB,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,gEAAgE;IAClF,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC,4EAA4E;IACnG,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,IAAkB,CAAC;IAEvB,6FAA6F;IAC7F,wFAAwF;IACxF,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,CAAC,CAAgB,EAAW,EAAE;QAC7C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB;gBAAE,OAAO,KAAK,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,8FAA8F;IAC9F,iGAAiG;IACjG,gGAAgG;IAChG,8FAA8F;IAC9F,uCAAuC;IACvC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAQ,EAAE;QAC5C,IAAI,KAAK;YAAE,OAAO;QAClB,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBAAE,YAAY,GAAG,CAAC,CAAC;iBAC9D,CAAC;gBAAC,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAAE,YAAY,IAAI,KAAK,CAAC,MAAM,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK;YAAE,OAAO;QAClB,IAAI,IAAI;YAAE,aAAa,CAAC,KAAK,CAAC,CAAC;;YAC1B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,2DAA2D;IAC9F,CAAC,CAAC,CAAC;IACH,kGAAkG;IAClG,mGAAmG;IACnG,oGAAoG;IACpG,qFAAqF;IACrF,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI;QAAE,GAAG,CAAC,cAAc,CAAC,CAAC;;QAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAElG,gGAAgG;IAChG,6FAA6F;IAC7F,4FAA4F;IAC5F,+FAA+F;IAC/F,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;QACvC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,QAAQ,CAAC,CAAC;YACd,KAAK,CAAC,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,KAAK;YAAE,OAAO;QAClB,IAAI,QAAQ,CAAC,MAAM;YAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,MAAM,KAAK,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,iGAAiG;QACjG,iGAAiG;QACjG,IAAI,WAAW;YAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,IAAa,EAAQ,EAAE;QAC5C,mGAAmG;QACnG,+FAA+F;QAC/F,mGAAmG;QACnG,+FAA+F;QAC/F,iGAAiG;QACjG,iEAAiE;QACjE,IAAI,CAAgB,CAAC;QACrB,IAAI,CAAC;YACH,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,aAAa,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,0CAA0C,aAAa,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;YACpI,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,KAAK,MAAM,EAAE,CAAC;gBACd,OAAO;YACT,KAAK,MAAM;gBACT,IAAI,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;gBACjI,OAAO;YACT,KAAK,QAAQ;gBACX,IAAI,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;gBAChG,OAAO;YACT,+FAA+F;YAC/F,KAAK,KAAK,CAAC;YACX,KAAK,MAAM;gBACT,OAAO;QACX,CAAC;IACH,CAAC,CAAC;IAEF,SAAS,GAAG,CAAC,MAAuB;QAClC,IAAI,KAAK;YAAE,OAAO;QAClB,KAAK,GAAG,IAAI,CAAC;QACb,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,mEAAmE;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,GAAG,eAAe,CAAC;QACrB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC5B,eAAe,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QACH,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/session/establish.d.ts

@@ -0,0 +1,212 @@
+/**
+ * The manager-side session ESTABLISHMENT (P2 item 6): mint the holder/target-lifecycle/
+ * instance+epoch-bound OFFER, and enforce its ONE-USE redemption through the §13.6 composite.
+ *
+ * Item 6 owns the offer mint + the STATIC redeem enforcement (this module) + the PTY bridge + the
+ * CLI/console clients + restart termination. The auth-service USER-MODE redemption handler
+ * (callout-minted per-session credentials) and the barrier session reconciler
+ * (implementations/auth/src/service.ts:358) are the #29 auth-trigger slice — OUT of item 6. This
+ * module exposes both halves through ONE {@link RedemptionSeam} interface: {@link
+ * staticRedemptionSeam} (wired) and {@link userModeRedemptionSeam} (a loud refusal until #29 lands
+ * — a user-mode attach must fail, never silently degrade to the static path).
+ *
+ * TARGET BINDING: the §13.6 grant is a CLOSED schema (holder + serving only), so the attached
+ * agent's (name, lifecycleUid) is bound MANAGER-SIDE — recorded in the {@link ManagerSessionRegistry}
+ * keyed by the fresh sessionId at mint, and re-checked live before the bridge serves (a despawned
+ * or replaced target ends the session with `target-despawn`). The holder + serving signature
+ * binding already stops a foreign party from redeeming or serving; the registry adds the target
+ * lifecycle the pin requires without widening the core artifact.
+ */
+import type { NatsConnection } from "@nats-io/transport-node";
+import { type AnchorResolver, type EpGateState, type LifecycleGatePin, type SessionCredential, type SessionGrant, type SessionLedger, type SessionPresenter } from "@cotal-ai/core";
+/** The attached agent's incarnation coordinate — the "target lifecycle" the offer binds (pin 1). */
+export interface SessionTarget {
+    name: string;
+    lifecycleUid: string;
+}
+/** The item-6 attach offer: the signed §13.6 grant plus the manager-side target binding. The REPLY
+ *  to the caller carries the `grant` only (holder-bound, non-bearer — a leak releases nothing);
+ *  `target` stays server-side (the caller already named it in the attach request). */
+export interface AttachOffer {
+    grant: SessionGrant;
+    target: SessionTarget;
+}
+export interface MintAttachOfferArgs {
+    space: string;
+    /** The serving manager incarnation: its lifecycleUid + the current serve-gate epoch (item-3 seam
+     *  — the §13.1 endpoint gate epoch; a successor incarnation advancing it refuses old sessions). */
+    serving: {
+        instanceId: string;
+        epoch: number;
+    };
+    /** The redeeming caller's triple, taken from the authenticated attach request (ctx.subject.caller). */
+    holder: {
+        id: string;
+        lifecycleUid: string;
+        processEpoch: number;
+    };
+    /** The attached agent + its incarnation (the target-lifecycle binding, recorded server-side). */
+    target: SessionTarget;
+    /** The manager's `sessions`-role signer (its own key material; the matching public key is its
+     *  registered `sessions` trust anchor the redeem/verify path resolves). */
+    signer: {
+        keyId: string;
+        keyPair: {
+            sign(input: Uint8Array): Uint8Array;
+        };
+    };
+    /** Session lifetime (§13.6 live-class; bounds the whole session, not just a redeem window). */
+    ttlMs: number;
+    /** Max in-flight data frames per direction (bounded flow window). */
+    window?: number;
+    now?: number;
+}
+/** Mint an attach offer: a §13.6 session grant on the `manager` endpoint bound to the holder triple
+ *  + serving instance/epoch, paired with the manager-side target binding. Pure — signs + returns;
+ *  the manager records the offer in its {@link ManagerSessionRegistry}. */
+export declare function mintAttachOffer(args: MintAttachOfferArgs): AttachOffer;
+/** The redemption's serving-gate observation, carried WHOLE rather than as a bare revision.
+ *
+ *  The §13.1 fence has to tell two revision moves apart: a BARRIER (which must refuse) and another
+ *  sibling mint's identical-bytes commit touch (which must not — every per-session credential
+ *  serializes on this one gate key, so refusing on contention would fail live sessions for no
+ *  security reason). A revision alone cannot make that distinction, so the pin carries the gate
+ *  state its revision came from and the fence compares EVERY field of it. */
+export interface ServingGatePin extends LifecycleGatePin {
+    /** The observation the revision came from. Absent ONLY on an open mesh, where nothing is minted,
+     *  nothing is staged, and there is no gate to fence against; the stage refuses loudly if it is
+     *  ever missing on an auth mesh rather than staging unfenced. */
+    gate?: EpGateState;
+}
+/**
+ * The manager's per-session SERVING credential, injected because minting one needs the space auth
+ * and the §13.1 endpoint gate, which live on the Manager, not in this module.
+ *
+ * The four calls are the credential's whole life, in the order §13.6 requires: `mint` produces
+ * bytes that are NOT yet authority, `stage` writes the gate-checked §13.1 ledger row that makes
+ * them revocable, the redemption's finalize CAS is what promotes them, and `revoke` kills the row
+ * by name at the session's terminal. `open` is separate from `mint` on purpose: nothing connects
+ * until the session row is `active`.
+ */
+export interface SessionServing {
+    /** Mint the per-session serving credential: exact-subject for THIS session only, expiring no
+     *  later than the grant. Bytes only — no ledger row yet, so this confers nothing durable. */
+    mint(grant: SessionGrant): Promise<SessionCredential>;
+    /** Stage its §13.1 credential-ledger row into the serving instance's revocation family, fenced on
+     *  `pin` — the gate observed during THIS redemption, which stays the authority: the commit CASes
+     *  on its revision, and a lost CAS is refused unless the gate is still identical in every field
+     *  but the revision. MUST throw if the gate moved — that loss is the lifecycle fence, and a throw
+     *  here refuses the whole redemption. */
+    stage(grant: SessionGrant, cred: SessionCredential, pin: ServingGatePin): Promise<void>;
+    /** Open the serving connection for ONE session with that credential. MUST fail loud: there is no
+     *  shared connection to fall back to, and serving a session without its own credential is exactly
+     *  the standing-writer shape this design removes. */
+    open(cred: SessionCredential): Promise<NatsConnection>;
+    /** Revoke the credential by id, idempotently (§13.6 makes the sweep retry until the mark sticks).
+     *
+     *  RESIDUAL, NAMED: this marks the §13.1 ledger row revoked; it does NOT evict a live connection.
+     *  The session's own teardown closes its connection first, so in the ordinary path the credential
+     *  has no connection left to use — but if that close fails, the JWT stays broker-valid until its
+     *  TTL (bounded by the session exp). Cluster-verified eviction of these holders belongs to the
+     *  §13.1 takeover barrier, which enumerates the family. So: do not read this as immediate broker
+     *  death on session close. */
+    revoke(credentialId: string): Promise<void>;
+    /** LEADER-SERVED observation of the serving instance's §13.1 issuance gate, returned as the pin
+     *  {@link stage} is CASed against. Real, not a placeholder: it is what makes the stage a fence. */
+    observeGate(endpoint: string, instanceId: string): Promise<ServingGatePin>;
+}
+/** The one interface both modes present. `redeem` VERIFIES the presented grant (signature/anchor/
+ *  currency) then enforces the one-use CAS + presenter-equality; it THROWS on any refusal (a second
+ *  redeem, a foreign presenter, an expired/forged grant) and returns the sessionId on success.
+ *  `serving` then hands the SERVING party its own credential — a separate, authenticated retrieval
+ *  (§13.6 per-party release: no private material crosses between the two parties, so it is never
+ *  folded into the redemption answer). */
+export interface RedemptionSeam {
+    redeem(grant: SessionGrant, presenter: SessionPresenter): Promise<{
+        sessionId: string;
+    }>;
+    serving(sessionId: string, presenter: {
+        endpoint: string;
+        instanceId: string;
+        epoch: number;
+    }): Promise<SessionCredential>;
+}
+type MaybePromise<T> = T | Promise<T>;
+/** What {@link staticRedemptionSeam} reads from the manager's durable authority. In production the
+ *  ledger + gate/epoch reads come from the auth store (leader-served); the smoke supplies an
+ *  in-memory faithful ledger. */
+export interface StaticRedemptionDeps {
+    space: string;
+    resolveAnchor: AnchorResolver;
+    ledger: SessionLedger;
+    /** The per-session serving credential's mint/stage/open/revoke seam (see {@link SessionServing}). */
+    serving: SessionServing;
+    holderProcessEpoch(holder: {
+        id: string;
+        lifecycleUid: string;
+    }): MaybePromise<number | undefined>;
+    servingEpoch(endpoint: string, instanceId: string): MaybePromise<number | undefined>;
+    observeHolderGate(holder: {
+        id: string;
+        lifecycleUid: string;
+    }): MaybePromise<LifecycleGatePin>;
+    observeServingGate(endpoint: string, instanceId: string): MaybePromise<ServingGatePin>;
+    now?(): number;
+}
+/**
+ * The STATIC redeem seam (item 6's wired path): the manager runs the §13.6 redemption — verify the
+ * signed grant, then `redeemSession` (the one-use `issuing` create-CAS + presenter-equality + the
+ * gate-pinned stage + the finalize's fresh epoch re-checks) — and, for the SERVING half, mints,
+ * stages, releases and revokes a real per-session credential through {@link SessionServing}.
+ *
+ * WHAT EACH HALF ACTUALLY GETS, stated exactly, because the two halves are NOT symmetric here and a
+ * comment claiming they are would be worse than the asymmetry:
+ *
+ *  - SERVING half (this manager's own): a real `session-serving` credential, exact-subject
+ *    (`eps.<endpoint>.<sessionId>.<epoch>.{in,out}`), TTL-bound to the session, staged into this
+ *    instance's §13.1 `epcred.<endpoint>.<instanceId>` family under the open-and-commit fence, and
+ *    revoked BY NAME at the session's terminal. It replaces a STANDING wildcard credential that
+ *    reached every live session's bytes at its epoch (SPEC 13.9:2526).
+ *  - CALLER half: NOT minted, staged, or revoked here, and `releaseCredential` returns a MARKER with
+ *    no usable bytes for it. The caller's `session-caller` JWT is minted OUT OF BAND from the local
+ *    space seed — by the console establisher and by CLI attach — after redemption.
+ *
+ *    SPEC 13.6 PAIR-REVOKE IS NOT IMPLEMENTED FOR THE CALLER HALF. Stated exactly, because the
+ *    difference between this and pair-revoke is the whole residual: that JWT is not written into the
+ *    session lineage, is not named by the session row's credential material, and is untouched by
+ *    session close and by takeover reconcile. It dies by TTL alone, at a 24h ceiling
+ *    (`SESSION_GRANT_MAX_TTL_MS`).
+ *
+ *    Why the window is tolerable for THIS static slice, as reviewed: the caller grant is
+ *    exact-pinned to one `(endpoint, sessionId, epoch)`, so it can reach neither a sibling session
+ *    nor a successor epoch; and once the serving half is revoked and its connection closed there is
+ *    no counterparty on those two subjects. What survives is a broker-valid connection, not reach
+ *    into another session. Closing it properly means minting the caller half inside redemption,
+ *    which needs the user-mode (#29) callout exchange. Until that lands, do not describe any part of
+ *    this as pair teardown.
+ *  - `revokeCredential` is therefore ONE-SIDED by construction: it revokes an id this seam minted
+ *    and is an explicit no-op for the caller id, rather than silently appearing to revoke both.
+ */
+export declare function staticRedemptionSeam(deps: StaticRedemptionDeps): RedemptionSeam;
+/** The USER-MODE redeem seam: UNWIRED (the #29 auth-trigger slice owns the callout-minted
+ *  per-session credential path). It REFUSES LOUD, naming the path — a user-mode attach fails rather
+ *  than degrading to the static seam (item-6 binding no-fallback rule). */
+export declare function userModeRedemptionSeam(): RedemptionSeam;
+/** The manager's in-memory session registry: the sessionId → (target lifecycle, offer) binding the
+ *  §13.6 grant cannot carry. The serve path looks the target up here and re-checks its liveness
+ *  before bridging, so a despawned/replaced target ends the session (`target-despawn`). */
+export declare class ManagerSessionRegistry {
+    #private;
+    /** Record a freshly minted offer. Throws on a sessionId collision (a fresh unguessable id never
+     *  repeats — a repeat is a mint bug, never silently overwritten). */
+    record(offer: AttachOffer): void;
+    /** The target bound to a sessionId, or undefined if unknown/removed. */
+    target(sessionId: string): SessionTarget | undefined;
+    /** Drop a session (redeem-refused, closed, expired, or target gone). Idempotent. */
+    remove(sessionId: string): void;
+    /** Every sessionId whose target is a given agent incarnation — the set a despawn/restart must end. */
+    forTarget(name: string, lifecycleUid: string): string[];
+    get size(): number;
+}
+export {};
+//# sourceMappingURL=establish.d.ts.map

package/dist/session/establish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"establish.d.ts","sourceRoot":"","sources":["../../src/session/establish.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EAEtB,MAAM,gBAAgB,CAAC;AAGxB,oGAAoG;AACpG,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;sFAEsF;AACtF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd;uGACmG;IACnG,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,uGAAuG;IACvG,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IACnE,iGAAiG;IACjG,MAAM,EAAE,aAAa,CAAC;IACtB;+EAC2E;IAC3E,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE;YAAE,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAA;SAAE,CAAA;KAAE,CAAC;IAC5E,+FAA+F;IAC/F,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;2EAE2E;AAC3E,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,WAAW,CAetE;AAID;;;;;;6EAM6E;AAC7E,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD;;qEAEiE;IACjE,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B;iGAC6F;IAC7F,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtD;;;;6CAIyC;IACzC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF;;yDAEqD;IACrD,IAAI,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvD;;;;;;;kCAO8B;IAC9B,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C;uGACmG;IACnG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5E;AAED;;;;;0CAK0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5H;AAED,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtC;;iCAEiC;AACjC,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,cAAc,CAAC;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,qGAAqG;IACrG,OAAO,EAAE,cAAc,CAAC;IACxB,kBAAkB,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrF,iBAAiB,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAChG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IACvF,GAAG,CAAC,IAAI,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,cAAc,CA4E/E;AAED;;2EAE2E;AAC3E,wBAAgB,sBAAsB,IAAI,cAAc,CAOvD;AAUD;;2FAE2F;AAC3F,qBAAa,sBAAsB;;IAGjC;yEACqE;IACrE,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAMhC,wEAAwE;IACxE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIpD,oFAAoF;IACpF,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI/B,sGAAsG;IACtG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE;IAMvD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}