@cuna_labs/cli 0.1.0

package/dist/machines/provider-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-screen.js","sourceRoot":"","sources":["../../src/machines/provider-screen.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAoB,EAAE,IAAwE,EAAE,OAA4B,gCAAgC,EAAE,EAAE,MAAmB;IAC1N,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAAA,MAAM,KAAK,GAAC,IAAI,eAAe,EAAE,CAAC;IAAA,IAAI,MAAM,GAAC,KAAK,EAAC,IAAI,GAAC,KAAK,EAAC,KAAK,GAAC,CAAC,EAAC,MAAM,GAAC,EAAE,EAAC,KAAK,GAA2B,EAAE,EAAC,WAAyC,CAAC;IACpM,IAAI,KAA6C,CAAC;IAAA,IAAI,MAAM,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAAA,IAAI,OAA2C,CAAC;IAAA,MAAM,IAAI,GAAC,IAAI,OAAO,CAA2B,CAAC,CAAA,EAAE,GAAC,OAAO,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACjM,MAAM,KAAK,GAAC,CAAC,KAAqB,EAAC,EAAE,GAAC,IAAG,MAAM;QAAC,OAAO,CAAA,MAAM,GAAC,IAAI,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;IAClG,MAAM,MAAM,GAAC,GAAE,EAAE;QAAC,IAAG,MAAM;YAAC,OAAO;QAAA,MAAM,IAAI,GAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,CAAC,QAAQ,IAAI,CAAC,KAAK,2BAA2B,EAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,GAAG,CAAC,KAAG,KAAK,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,EAAC,IAAI,CAAC,KAAK,KAAG,UAAU,CAAA,CAAC,CAAA,wEAAwE,CAAA,CAAC,CAAA,iEAAiE,EAAC,+CAA+C,CAAC,CAAA,CAAC,CAAA,CAAC,2BAA2B,CAAC,CAAC;QAC3b,IAAG,IAAI,CAAC,IAAI,KAAG,OAAO,EAAE,CAAC;YAAA,IAAG,WAAW,EAAE,KAAK,KAAG,UAAU,IAAE,WAAW,CAAC,cAAc,IAAE,IAAI,CAAC,GAAG,EAAE,IAAE,WAAW,CAAC,cAAc,GAAC,IAAI,CAAC,GAAG,EAAE;gBAAC,KAAK,CAAC,IAAI,CAAC,cAAc,WAAW,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAC,WAAW,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAC,mBAAmB,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAC,aAAa,IAAI,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;;gBAAK,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAAA,CAAC;QACxd,IAAG,IAAI;YAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAAA,IAAG,MAAM;YAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAC,eAAe,GAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,CAAC,IAAI,GAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,oBAAoB,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,GAAC,MAAM,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,MAAM,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,KAAK,EAAE,CAAC,CAAC;IAAA,CAAC,CAAC;IACpQ,MAAM,IAAI,GAAC,KAAK,IAAE,EAAE,GAAC,IAAG,IAAI,IAAE,MAAM;QAAC,OAAO,CAAA,IAAI,GAAC,IAAI,CAAC,CAAA,WAAW,GAAC,SAAS,CAAC,CAAA,MAAM,GAAC,EAAE,CAAC,CAAA,IAAG,KAAK;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,MAAM,EAAE,CAAC,CAAA,IAAG,CAAC;QAAA,IAAG,IAAI,CAAC,IAAI,KAAG,QAAQ,EAAC,CAAC;YAAA,KAAK,GAAC,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAAA,KAAK,GAAC,CAAC,CAAC;YAAA,IAAG,CAAC,KAAK,CAAC,MAAM;gBAAC,MAAM,GAAC,qDAAqD,CAAC;QAAA,CAAC;aAAI,CAAC;YAAA,MAAM,OAAO,GAAC,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,CAAC,OAAO,CAAC,YAAY;gBAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,YAAY,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,OAAO,GAAC,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,OAAO,CAAC,YAAY,KAAG,OAAO,CAAC,YAAY,IAAE,OAAO,CAAC,YAAY,KAAG,SAAS,IAAE,CAAC,CAAC,OAAO,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;gBAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;YAAA,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAAA,WAAW,GAAC,MAAM,CAAC;YAAA,IAAG,MAAM,CAAC,KAAK,KAAG,UAAU;gBAAC,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,WAAW,GAAC,SAAS,CAAC,CAAA,MAAM,GAAC,+CAA+C,CAAC,CAAA,MAAM,EAAE,CAAC,CAAA,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,MAAM,CAAC,cAAc,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAA,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,KAAK,GAAC,EAAE,CAAC;QAAA,WAAW,GAAC,SAAS,CAAC;QAAA,MAAM,GAAC,0DAA0D,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,IAAI,GAAC,KAAK,CAAC;QAAA,MAAM,EAAE,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC;IAC7mC,IAAI,QAAQ,GAAC,EAAE,CAAC;IAAA,IAAI,KAAK,GAAC,KAAK,CAAC;IAChC,MAAM,KAAK,GAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA,EAAE,GAAC,KAAI,MAAM,IAAI,IAAI,KAAK,EAAC,CAAC;QAAA,IAAG,QAAQ,EAAC,CAAC;YAAA,QAAQ,IAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAA,IAAG,QAAQ,KAAG,WAAW,EAAC,CAAC;gBAAA,KAAK,GAAC,IAAI,CAAC;gBAAA,QAAQ,GAAC,EAAE,CAAC;YAAA,CAAC;iBAAK,IAAG,QAAQ,KAAG,WAAW,EAAC,CAAC;gBAAA,KAAK,GAAC,KAAK,CAAC;gBAAA,QAAQ,GAAC,EAAE,CAAC;YAAA,CAAC;iBAAK,IAAG,QAAQ,KAAG,QAAQ,IAAE,QAAQ,KAAG,QAAQ,EAAC,CAAC;gBAAA,IAAG,CAAC,KAAK,IAAE,CAAC,IAAI,EAAC,CAAC;oBAAA,KAAK,GAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAC,CAAC,EAAC,KAAK,GAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAA,MAAM,EAAE,CAAC;gBAAA,CAAC;gBAAA,QAAQ,GAAC,EAAE,CAAC;YAAA,CAAC;iBAAK,IAAG,QAAQ,CAAC,MAAM,GAAC,CAAC;gBAAC,QAAQ,GAAC,EAAE,CAAC;YAAA,SAAS;QAAA,CAAC;QAAA,IAAG,IAAI,KAAG,EAAE,EAAC,CAAC;YAAA,QAAQ,GAAC,MAAM,CAAC;YAAA,UAAU,CAAC,GAAE,EAAE,GAAC,IAAG,QAAQ,KAAG,MAAM,EAAC,CAAC;gBAAA,QAAQ,GAAC,EAAE,CAAC;gBAAA,KAAK,EAAE,CAAC;YAAA,CAAC,CAAA,CAAC,EAAC,EAAE,CAAC,CAAC;YAAA,SAAS;QAAA,CAAC;QAAA,IAAG,KAAK;YAAC,SAAS;QAAA,IAAG,IAAI,KAAG,CAAC,IAAE,IAAI,KAAG,GAAG,EAAC,CAAC;YAAA,KAAK,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QAAA,IAAG,IAAI,KAAG,GAAG;YAAC,KAAK,IAAI,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI,KAAG,EAAE,IAAE,IAAI,KAAG,EAAE,CAAC,IAAE,CAAC,IAAI,IAAE,IAAI,CAAC,IAAI,KAAG,QAAQ,IAAE,KAAK,CAAC,KAAK,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC,CAAC;IAC5sB,MAAM,MAAM,GAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAA,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,KAAK,EAAE,CAAC;IAAA,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,OAAO,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;IAAA,IAAG,MAAM,EAAE,OAAO;QAAC,KAAK,EAAE,CAAC;;QAAK,KAAK,IAAI,EAAE,CAAC;IAC/J,IAAG,CAAC;QAAA,OAAO,MAAM,IAAI,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,KAAK,EAAE,CAAC;QAAA,MAAM,EAAE,CAAC;QAAA,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,OAAO,CAAC,CAAC;QAAA,IAAG,KAAK;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,MAAM,MAAM,CAAC;QAAA,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AAC/J,CAAC"}

package/dist/machines/session-actionability.d.ts

@@ -0,0 +1,86 @@
+import type { AgentSession, AgentSessionAuthState, AgentSessionProcessObservation, Machine } from "../api/contracts.js";
+export type SessionBaseState = "attachable" | "starting" | "login-required" | "stale" | "failed" | "terminated" | "unsupported";
+export type SessionRefreshStatus = "idle" | "pending";
+export type SessionRecoveryAction = "attach" | "wait" | "authenticate" | "refresh" | "show-failure" | "none";
+/**
+ * `runtime_lease_current` and `runtime_lease_expired` were `runtime_evidence_*`.
+ *
+ * The word was wrong in a way that mattered. What this classifier tests at the
+ * end is the runtime LEASE window, and a lease renewal that carries no fresh
+ * observation moves it on its own. Calling the result "evidence current" told a
+ * reader that something had recently observed the process, which the row does
+ * not say, and the timestamps beside it now let a caller see the difference
+ * instead of inferring it from a name.
+ *
+ * `runtime_evidence_missing` and `runtime_evidence_invalid` keep their names:
+ * they really are about the evidence fields, not about the window.
+ */
+export type SessionActionReasonCode = "runtime_lease_current"
+/**
+ * The lease is open AND the producer says nobody established the process
+ * state for this epoch. Two codes rather than one, because the producer
+ * distinguishes the causes: a lease renewal that settled without observing
+ * the child, and no provenance recorded at all.
+ *
+ * Both keep the base state `attachable`. The lease is still what decides
+ * whether attaching is worth attempting, and narrowing the action here would
+ * withhold the one thing that can actually answer the question — a lease is
+ * not an observation, but neither is a refusal to try.
+ */
+ | "runtime_lease_current_observation_unproven" | "runtime_lease_current_observation_unknown" | "launch_pending" | "provider_authentication_required" | "runtime_evidence_missing" | "runtime_evidence_invalid" | "runtime_lease_expired" | "session_failed" | "termination_intended" | "machine_not_running" | "provider_unavailable" | "provider_mismatch";
+export interface SessionActionability {
+    readonly baseState: SessionBaseState;
+    readonly refreshStatus: SessionRefreshStatus;
+    readonly recoveryAction: SessionRecoveryAction;
+    readonly reasonCode: SessionActionReasonCode;
+    readonly observationRevision: number;
+    readonly canAttach: boolean;
+    /**
+     * Who established `processState`, carried on every result with absence folded
+     * into `unknown` by `session-visibility.ts`. It travels beside the base state
+     * rather than inside it: a caller that renders one without the other is how
+     * a moving lease came to print the same word as a real observation.
+     */
+    readonly processObservation: AgentSessionProcessObservation;
+    /**
+     * When the producer last observed this process, and how old that is at `now`.
+     * Present only once the runtime timestamps parse. Reported so a caller can
+     * show "last seen 4 h ago" beside an open lease; NO threshold is applied to
+     * it here, because no producer contract publishes one.
+     */
+    readonly lastObservedAt?: string;
+    readonly observationAgeMs?: number;
+    /** The lease window's end. Distinct from the observation above. */
+    readonly leaseExpiresAt?: string;
+}
+export interface SessionActionabilityInput {
+    readonly session: AgentSession;
+    readonly machine?: Pick<Machine, "id" | "agent" | "state">;
+    readonly authState?: AgentSessionAuthState;
+    readonly now: number;
+    readonly refreshStatus?: SessionRefreshStatus;
+}
+export declare function classifySessionActionability(input: SessionActionabilityInput): SessionActionability;
+/**
+ * The one line every list, tree and explorer row prints for a session.
+ *
+ * Both qualifiers are suffixes and neither can become or replace a base state:
+ * `checking` is presentation only, and the observation note is a fact about
+ * `processState`'s provenance, not a fourth lifecycle.
+ *
+ * Why the note is here at all. `attachable` was derived from the runtime lease
+ * alone, so a row whose lease kept moving while nothing observed the child
+ * printed the byte-identical line to one a supervisor had just looked at. The
+ * note is attached only to `attachable`, because that is the only base state
+ * whose word a reader takes as "this process is up"; `stale`, `starting`,
+ * `failed`, `terminated` and `unsupported` already say the opposite or say
+ * nothing, and a provenance note on them would blur three different answers.
+ */
+export declare function displaySessionActionability(value: SessionActionability): string;
+/** Missing, equal, or lower revisions cannot replace the confirmed state. */
+export declare function mergeSessionActionabilityObservation(input: Readonly<{
+    readonly confirmed: SessionActionability;
+    readonly candidate?: SessionActionability;
+    readonly refreshStatus: SessionRefreshStatus;
+}>): SessionActionability;
+//# sourceMappingURL=session-actionability.d.ts.map

package/dist/machines/session-actionability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-actionability.d.ts","sourceRoot":"","sources":["../../src/machines/session-actionability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,qBAAqB,EACrB,8BAA8B,EAC9B,OAAO,EACR,MAAM,qBAAqB,CAAC;AAS7B,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,UAAU,GAAG,gBAAgB,GAAG,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,aAAa,CAAC;AAChI,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,CAAC;AACtD,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,MAAM,GAAG,cAAc,GAAG,SAAS,GAAG,cAAc,GAAG,MAAM,CAAC;AAC7G;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAC/B,uBAAuB;AACzB;;;;;;;;;;GAUG;GACD,4CAA4C,GAC5C,2CAA2C,GAC3C,gBAAgB,GAChB,kCAAkC,GAClC,0BAA0B,GAC1B,0BAA0B,GAC1B,uBAAuB,GACvB,gBAAgB,GAChB,sBAAsB,GACtB,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CAC/C;AAOD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAgBnG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAQ/E;AAED,6EAA6E;AAC7E,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,QAAQ,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C,CAAC,GAAG,oBAAoB,CAMxB"}

package/dist/machines/session-actionability.js

@@ -0,0 +1,125 @@
+import { machineProviderAvailability } from "./provider-availability.js";
+import { agentSessionProcessObservation, AGENT_SESSION_OBSERVATION_NOTE, isAgentSessionIntendedActive, readRuntimeWindow, } from "./session-visibility.js";
+export function classifySessionActionability(input) {
+    const classified = classifyBase(input);
+    // Carried on every result, not only the attachable one: a `stale` row is
+    // exactly where "when was it last seen" is the question being asked.
+    const runtimeWindow = readRuntimeWindow(input.session, input.now);
+    return Object.freeze({
+        ...classified,
+        refreshStatus: input.refreshStatus ?? "idle",
+        recoveryAction: recoveryFor(classified.baseState),
+        observationRevision: input.session.rowVersion,
+        canAttach: classified.baseState === "attachable",
+        processObservation: agentSessionProcessObservation(input.session),
+        ...(runtimeWindow.lastObservedAt === undefined ? {} : { lastObservedAt: runtimeWindow.lastObservedAt }),
+        ...(runtimeWindow.observationAgeMs === undefined ? {} : { observationAgeMs: runtimeWindow.observationAgeMs }),
+        ...(runtimeWindow.leaseExpiresAt === undefined ? {} : { leaseExpiresAt: runtimeWindow.leaseExpiresAt }),
+    });
+}
+/**
+ * The one line every list, tree and explorer row prints for a session.
+ *
+ * Both qualifiers are suffixes and neither can become or replace a base state:
+ * `checking` is presentation only, and the observation note is a fact about
+ * `processState`'s provenance, not a fourth lifecycle.
+ *
+ * Why the note is here at all. `attachable` was derived from the runtime lease
+ * alone, so a row whose lease kept moving while nothing observed the child
+ * printed the byte-identical line to one a supervisor had just looked at. The
+ * note is attached only to `attachable`, because that is the only base state
+ * whose word a reader takes as "this process is up"; `stale`, `starting`,
+ * `failed`, `terminated` and `unsupported` already say the opposite or say
+ * nothing, and a provenance note on them would blur three different answers.
+ */
+export function displaySessionActionability(value) {
+    const parts = [value.baseState];
+    const note = value.baseState === "attachable"
+        ? AGENT_SESSION_OBSERVATION_NOTE[value.processObservation]
+        : undefined;
+    if (note !== undefined)
+        parts.push(note);
+    if (value.refreshStatus === "pending")
+        parts.push("checking");
+    return parts.join(" · ");
+}
+/** Missing, equal, or lower revisions cannot replace the confirmed state. */
+export function mergeSessionActionabilityObservation(input) {
+    const accepted = input.candidate !== undefined &&
+        input.candidate.observationRevision > input.confirmed.observationRevision
+        ? input.candidate
+        : input.confirmed;
+    return Object.freeze({ ...accepted, refreshStatus: input.refreshStatus });
+}
+function classifyBase(input) {
+    const { session, machine, authState, now } = input;
+    if (!isAgentSessionIntendedActive(session) || session.requestState === "terminal" ||
+        session.processState === "terminated" || session.processState === "terminating") {
+        return result("terminated", "termination_intended");
+    }
+    if (session.requestState === "failed" || session.processState === "failed" || session.processState === "exited") {
+        return result("failed", "session_failed");
+    }
+    if (machine !== undefined) {
+        if (machine.state !== "running")
+            return result("unsupported", "machine_not_running");
+        const provider = machineProviderAvailability(machine);
+        if (!provider.actionable)
+            return result("unsupported", "provider_unavailable");
+        if (provider.agent !== session.agent)
+            return result("unsupported", "provider_mismatch");
+    }
+    else if (session.agent !== "claude-code" && session.agent !== "codex" && session.agent !== "opencode") {
+        return result("unsupported", "provider_unavailable");
+    }
+    if (authState === "login_required")
+        return result("login-required", "provider_authentication_required");
+    if (authState === "unavailable")
+        return result("unsupported", "provider_unavailable");
+    if (session.requestState === "launch_pending" || session.requestState === "runtime_claimed" ||
+        session.processState === "unknown" || session.processState === "starting") {
+        return result("starting", "launch_pending");
+    }
+    if (session.processState !== "ready" && session.processState !== "running") {
+        return result("stale", "runtime_evidence_invalid");
+    }
+    if (session.processEpoch === undefined)
+        return result("stale", "runtime_evidence_missing");
+    // One parser for both timestamps, shared with `session-visibility.ts`.
+    const runtimeWindow = readRuntimeWindow(session, now);
+    if (runtimeWindow.kind === "missing")
+        return result("stale", "runtime_evidence_missing");
+    if (runtimeWindow.kind === "invalid")
+        return result("stale", "runtime_evidence_invalid");
+    // The lease decides whether attaching is worth attempting, exactly as before:
+    // the server's capability snapshot and terminal grant remain the authority
+    // that admits or refuses the attach, and nothing here is narrowed by the age
+    // of the observation carried alongside.
+    if (runtimeWindow.kind !== "lease_current")
+        return result("stale", "runtime_lease_expired");
+    // ...and the provenance of the state the lease covers is named rather than
+    // absorbed. `stale` would be wrong here: it means the lease lapsed and asks
+    // for a refresh, which answers nothing about a row whose lease is open and
+    // whose observation nobody established. So the base state, the action and the
+    // attach admission are untouched, and only the reason changes.
+    switch (agentSessionProcessObservation(session)) {
+        case "observed": return result("attachable", "runtime_lease_current");
+        case "unproven": return result("attachable", "runtime_lease_current_observation_unproven");
+        case "unknown": return result("attachable", "runtime_lease_current_observation_unknown");
+    }
+}
+function result(baseState, reasonCode) {
+    return Object.freeze({ baseState, reasonCode });
+}
+function recoveryFor(state) {
+    switch (state) {
+        case "attachable": return "attach";
+        case "starting": return "wait";
+        case "login-required": return "authenticate";
+        case "stale": return "refresh";
+        case "failed": return "show-failure";
+        case "terminated":
+        case "unsupported": return "none";
+    }
+}
+//# sourceMappingURL=session-actionability.js.map

package/dist/machines/session-actionability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-actionability.js","sourceRoot":"","sources":["../../src/machines/session-actionability.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EACL,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAmFjC,MAAM,UAAU,4BAA4B,CAAC,KAAgC;IAC3E,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACvC,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM;QAC5C,cAAc,EAAE,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QACjD,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QAC7C,SAAS,EAAE,UAAU,CAAC,SAAS,KAAK,YAAY;QAChD,kBAAkB,EAAE,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC;QACjE,GAAG,CAAC,aAAa,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC;QACvG,GAAG,CAAC,aAAa,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC7G,GAAG,CAAC,aAAa,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC;KACxG,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAA2B;IACrE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,SAAmB,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,YAAY;QAC3C,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oCAAoC,CAAC,KAInD;IACA,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS;QAC5C,KAAK,CAAC,SAAS,CAAC,mBAAmB,GAAG,KAAK,CAAC,SAAS,CAAC,mBAAmB;QACzE,CAAC,CAAC,KAAK,CAAC,SAAS;QACjB,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACpB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,KAAgC;IACpD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACnD,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,UAAU;QAC7E,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;QACpF,OAAO,MAAM,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAChH,OAAO,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAC/E,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAC1F,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACxG,OAAO,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,SAAS,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IACxG,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,YAAY,KAAK,gBAAgB,IAAI,OAAO,CAAC,YAAY,KAAK,iBAAiB;QACvF,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC3F,uEAAuE;IACvE,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACzF,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACzF,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,wCAAwC;IACxC,IAAI,aAAa,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC5F,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,+DAA+D;IAC/D,QAAQ,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC;QACtE,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,EAAE,4CAA4C,CAAC,CAAC;QAC3F,KAAK,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,YAAY,EAAE,2CAA2C,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,SAA2B,EAAE,UAAmC;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,KAAuB;IAC1C,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,YAAY,CAAC,CAAC,OAAO,QAAQ,CAAC;QACnC,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC;QAC/B,KAAK,gBAAgB,CAAC,CAAC,OAAO,cAAc,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,SAAS,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAC,OAAO,cAAc,CAAC;QACrC,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,OAAO,MAAM,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/machines/session-visibility.d.ts

@@ -0,0 +1,139 @@
+import type { AgentSession, AgentSessionProcessObservation } from "../api/contracts.js";
+/**
+ * Whether a supervisor ESTABLISHED this row's process state for its CURRENT
+ * epoch, folding "the field is absent" into the one answer it is.
+ *
+ * Absence is `unknown`, not `observed`. A deployment older than the release that
+ * began recording provenance sends no field at all, and the producer's own
+ * description of `unknown` already covers exactly that case: "every observation
+ * older than the release that began recording it". Defaulting the other way is
+ * the single mistake this field exists to make impossible, so the fold happens
+ * once, here, and no renderer is left to decide it.
+ */
+export declare function agentSessionProcessObservation(session: AgentSession): AgentSessionProcessObservation;
+/**
+ * The words a human surface puts beside a state whose provenance is not
+ * `observed`, defined once so the session list, the Machine tree and the
+ * explorer cannot drift into three vocabularies for one producer field.
+ *
+ * `observed` has no word on purpose. It is what an unqualified "running"
+ * already means, and a qualifier on every healthy row is noise that teaches a
+ * reader to skip the two that matter.
+ *
+ * The other two are kept apart rather than folded into one "unverified",
+ * because the producer distinguishes them and the causes differ: `unproven` is
+ * a supervisor that settled a runtime-lease renewal without being able to
+ * observe the child, and `unknown` is no provenance recorded for this epoch at
+ * all — including every row from a deployment older than the release that
+ * began recording it. Neither says the process is stale, and neither may be
+ * rendered as a termination.
+ */
+export declare const AGENT_SESSION_OBSERVATION_NOTE: Readonly<Record<AgentSessionProcessObservation, string | undefined>>;
+/**
+ * A still-running process is not an active session once termination has been
+ * requested. The machine overview is an operational view, not session history.
+ */
+export declare function isAgentSessionIntendedActive(session: AgentSession): boolean;
+/**
+ * What an AgentSession row supports about its runtime, as two separate facts.
+ *
+ * WHY THIS REPLACED `isAgentSessionRunningNow`. That predicate answered one
+ * boolean named "running now" from `process_state === "running"` plus
+ * `runtime_expires_at > now`, and it placed no bound at all on how old
+ * `runtime_observed_at` was. Those are two different things:
+ *
+ *   `runtime_observed_at`  a PAST fact — when the producer last observed this
+ *                          process. It can only ever say "was", never "is".
+ *   `runtime_expires_at`   a WINDOW — how long the runtime lease the supervisor
+ *                          renews remains valid. A renewal moves this forward
+ *                          and says nothing about the process.
+ *
+ * A lease renewal that carries no fresh observation therefore kept the old
+ * predicate answering `true` from an observation of any age, which is the exact
+ * shape of "the row asserts running while nothing observed it".
+ *
+ * WHAT THIS DELIBERATELY DOES NOT DO. It invents no freshness threshold. There
+ * is no interval after which this module declares an observation stale, because
+ * no producer contract publishes one and a number chosen here would be a
+ * fabricated liveness claim wearing a constant's clothes. The observation's age
+ * is REPORTED so a caller can show it or decide with it; it is never compared
+ * against anything.
+ *
+ * It also grants nothing. Attachment, control and observation authority stay
+ * exactly where they are — with the server's capability snapshot and the
+ * terminal grant — and no reading here substitutes for either.
+ */
+export type AgentSessionRuntimeEvidence = 
+/** Termination is intended or requested; the runtime fields do not matter. */
+"not_intended_active"
+/** The producer does not report this process as running or ready. */
+ | "not_reported_running"
+/** One of the two runtime timestamps is absent. */
+ | "evidence_missing"
+/** A timestamp does not parse, is in the future, or the window is inverted. */
+ | "evidence_invalid"
+/** Last observed running, and the runtime lease has since lapsed. */
+ | "observed_running_lease_expired"
+/**
+ * The row reports running, and the producer says nobody established that for
+ * this process epoch: a lease renewal settled without observing the child, or
+ * no provenance is recorded at all.
+ *
+ * It is deliberately its own value rather than a qualifier on the two
+ * `observed_*` ones. The word "observed" is a claim, and the whole reason the
+ * producer publishes `process_observation` is that a moving lease was making
+ * that claim on nobody's behalf. The lease is still reported in
+ * `leaseCurrent`, because it is still true — it is just not this.
+ */
+ | "reported_running_observation_unproven"
+/**
+ * The strongest thing an AgentSession row can support: a supervisor observed
+ * it running at `lastObservedAt` for this epoch, and the lease covering it is
+ * still open. It is NOT a statement that the process is alive at `now`.
+ */
+ | "observed_running_lease_current";
+export interface AgentSessionRuntimeReading {
+    readonly evidence: AgentSessionRuntimeEvidence;
+    /** The producer's own timestamp, forwarded verbatim. Absent when unusable. */
+    readonly lastObservedAt?: string;
+    /** How old that observation is at `now`. Reported; never thresholded here. */
+    readonly observationAgeMs?: number;
+    readonly leaseExpiresAt?: string;
+    /** The lease window alone. True says nothing about the process. */
+    readonly leaseCurrent: boolean;
+    /**
+     * The producer's provenance for `processState`, with absence folded into
+     * `unknown`. Carried on every reading so a caller can never get a lease
+     * without also getting the answer to "did anybody look?".
+     */
+    readonly processObservation: AgentSessionProcessObservation;
+}
+/**
+ * The two runtime timestamps, parsed once.
+ *
+ * `session-actionability.ts` used to parse the same pair with the same skew
+ * constant a few lines away from the copy here, and the two could drift into
+ * disagreeing about one row. There is one parser now, and it never decides what
+ * the pair MEANS — only what it says.
+ */
+export type RuntimeWindowKind = "missing" | "invalid" | "lease_current" | "lease_expired";
+export interface RuntimeWindow {
+    readonly kind: RuntimeWindowKind;
+    readonly lastObservedAt?: string;
+    readonly observationAgeMs?: number;
+    readonly leaseExpiresAt?: string;
+}
+export declare function readRuntimeWindow(session: AgentSession, now: number): RuntimeWindow;
+export declare function readAgentSessionRuntime(session: AgentSession, now: number): AgentSessionRuntimeReading;
+/**
+ * The last thing a supervisor OBSERVED about the process, with no lease in it.
+ *
+ * Past tense in the name because it is past tense in the data: a caller that
+ * wants to say something about `now` needs more than this row. It is false when
+ * the producer says nobody established the state for this epoch, because then
+ * there is no observation to be past tense about.
+ */
+export declare function wasAgentSessionObservedRunning(session: AgentSession, now: number): boolean;
+/** The runtime lease window alone. A renewal moves this and nothing else. */
+export declare function hasCurrentAgentSessionRuntimeLease(session: AgentSession, now: number): boolean;
+//# sourceMappingURL=session-visibility.d.ts.map

package/dist/machines/session-visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-visibility.d.ts","sourceRoot":"","sources":["../../src/machines/session-visibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAIxF;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,YAAY,GACpB,8BAA8B,CAEhC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,8BAA8B,EAAE,MAAM,GAAG,SAAS,CAAC,CAK1D,CAAC;AAEH;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAE3E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,MAAM,2BAA2B;AACrC,8EAA8E;AAC5E,qBAAqB;AACvB,qEAAqE;GACnE,sBAAsB;AACxB,mDAAmD;GACjD,kBAAkB;AACpB,+EAA+E;GAC7E,kBAAkB;AACpB,qEAAqE;GACnE,gCAAgC;AAClC;;;;;;;;;;GAUG;GACD,uCAAuC;AACzC;;;;GAIG;GACD,gCAAgC,CAAC;AAErC,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,8EAA8E;IAC9E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;CAC7D;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,eAAe,GAAG,eAAe,CAAC;AAE1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAiBnF;AAUD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,0BAA0B,CA0BtG;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAG1F;AAED,6EAA6E;AAC7E,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9F"}

package/dist/machines/session-visibility.js

@@ -0,0 +1,109 @@
+const MAX_FUTURE_SKEW_MS = 5_000;
+/**
+ * Whether a supervisor ESTABLISHED this row's process state for its CURRENT
+ * epoch, folding "the field is absent" into the one answer it is.
+ *
+ * Absence is `unknown`, not `observed`. A deployment older than the release that
+ * began recording provenance sends no field at all, and the producer's own
+ * description of `unknown` already covers exactly that case: "every observation
+ * older than the release that began recording it". Defaulting the other way is
+ * the single mistake this field exists to make impossible, so the fold happens
+ * once, here, and no renderer is left to decide it.
+ */
+export function agentSessionProcessObservation(session) {
+    return session.processObservation ?? "unknown";
+}
+/**
+ * The words a human surface puts beside a state whose provenance is not
+ * `observed`, defined once so the session list, the Machine tree and the
+ * explorer cannot drift into three vocabularies for one producer field.
+ *
+ * `observed` has no word on purpose. It is what an unqualified "running"
+ * already means, and a qualifier on every healthy row is noise that teaches a
+ * reader to skip the two that matter.
+ *
+ * The other two are kept apart rather than folded into one "unverified",
+ * because the producer distinguishes them and the causes differ: `unproven` is
+ * a supervisor that settled a runtime-lease renewal without being able to
+ * observe the child, and `unknown` is no provenance recorded for this epoch at
+ * all — including every row from a deployment older than the release that
+ * began recording it. Neither says the process is stale, and neither may be
+ * rendered as a termination.
+ */
+export const AGENT_SESSION_OBSERVATION_NOTE = Object.freeze({
+    observed: undefined,
+    unproven: "not observed",
+    unknown: "observation unknown",
+});
+/**
+ * A still-running process is not an active session once termination has been
+ * requested. The machine overview is an operational view, not session history.
+ */
+export function isAgentSessionIntendedActive(session) {
+    return session.desiredState === "running" && session.requestState !== "termination_pending";
+}
+export function readRuntimeWindow(session, now) {
+    if (session.runtimeObservedAt === undefined || session.runtimeExpiresAt === undefined) {
+        return Object.freeze({ kind: "missing" });
+    }
+    const observedAt = Date.parse(session.runtimeObservedAt);
+    const expiresAt = Date.parse(session.runtimeExpiresAt);
+    if (!Number.isFinite(observedAt) || !Number.isFinite(expiresAt) ||
+        observedAt > now + MAX_FUTURE_SKEW_MS || expiresAt <= observedAt) {
+        return Object.freeze({ kind: "invalid" });
+    }
+    const kind = expiresAt > now ? "lease_current" : "lease_expired";
+    return Object.freeze({
+        kind,
+        lastObservedAt: session.runtimeObservedAt,
+        observationAgeMs: now - observedAt,
+        leaseExpiresAt: session.runtimeExpiresAt,
+    });
+}
+function reading(evidence, processObservation, extra = { leaseCurrent: false }) {
+    return Object.freeze({ evidence, processObservation, ...extra });
+}
+export function readAgentSessionRuntime(session, now) {
+    const observation = agentSessionProcessObservation(session);
+    if (!isAgentSessionIntendedActive(session))
+        return reading("not_intended_active", observation);
+    if (session.processState !== "running")
+        return reading("not_reported_running", observation);
+    const runtimeWindow = readRuntimeWindow(session, now);
+    if (runtimeWindow.kind === "missing")
+        return reading("evidence_missing", observation);
+    if (runtimeWindow.kind === "invalid")
+        return reading("evidence_invalid", observation);
+    const leaseCurrent = runtimeWindow.kind === "lease_current";
+    const window = {
+        ...(runtimeWindow.lastObservedAt === undefined ? {} : { lastObservedAt: runtimeWindow.lastObservedAt }),
+        ...(runtimeWindow.observationAgeMs === undefined ? {} : { observationAgeMs: runtimeWindow.observationAgeMs }),
+        ...(runtimeWindow.leaseExpiresAt === undefined ? {} : { leaseExpiresAt: runtimeWindow.leaseExpiresAt }),
+        leaseCurrent,
+    };
+    // The ordering that answers the requirement: a current lease is checked AFTER
+    // provenance, never instead of it. `unproven` with an open lease is the exact
+    // row this field was published for -- the lease moved and nothing observed the
+    // child -- and it must not render as a fresh observation.
+    if (observation !== "observed") {
+        return reading("reported_running_observation_unproven", observation, window);
+    }
+    return reading(leaseCurrent ? "observed_running_lease_current" : "observed_running_lease_expired", observation, window);
+}
+/**
+ * The last thing a supervisor OBSERVED about the process, with no lease in it.
+ *
+ * Past tense in the name because it is past tense in the data: a caller that
+ * wants to say something about `now` needs more than this row. It is false when
+ * the producer says nobody established the state for this epoch, because then
+ * there is no observation to be past tense about.
+ */
+export function wasAgentSessionObservedRunning(session, now) {
+    const value = readAgentSessionRuntime(session, now).evidence;
+    return value === "observed_running_lease_current" || value === "observed_running_lease_expired";
+}
+/** The runtime lease window alone. A renewal moves this and nothing else. */
+export function hasCurrentAgentSessionRuntimeLease(session, now) {
+    return readAgentSessionRuntime(session, now).leaseCurrent;
+}
+//# sourceMappingURL=session-visibility.js.map

package/dist/machines/session-visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-visibility.js","sourceRoot":"","sources":["../../src/machines/session-visibility.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAqB;IAErB,OAAO,OAAO,CAAC,kBAAkB,IAAI,SAAS,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAEvC,MAAM,CAAC,MAAM,CAAC;IAChB,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,qBAAqB;CAC/B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAqB;IAChE,OAAO,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,qBAAqB,CAAC;AAC9F,CAAC;AA+FD,MAAM,UAAU,iBAAiB,CAAC,OAAqB,EAAE,GAAW;IAClE,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3D,UAAU,GAAG,GAAG,GAAG,kBAAkB,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAsB,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,cAAc,EAAE,OAAO,CAAC,iBAAiB;QACzC,gBAAgB,EAAE,GAAG,GAAG,UAAU;QAClC,cAAc,EAAE,OAAO,CAAC,gBAAgB;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CACd,QAAqC,EACrC,kBAAkD,EAClD,QAA6E,EAAE,YAAY,EAAE,KAAK,EAAE;IAEpG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAqB,EAAE,GAAW;IACxE,MAAM,WAAW,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,KAAK,eAAe,CAAC;IAC5D,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,aAAa,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC;QACvG,GAAG,CAAC,aAAa,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC;QAC7G,GAAG,CAAC,aAAa,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC;QACvG,YAAY;KACb,CAAC;IACF,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,0DAA0D;IAC1D,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,uCAAuC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CACZ,YAAY,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,gCAAgC,EAClF,WAAW,EACX,MAAM,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAqB,EAAE,GAAW;IAC/E,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC7D,OAAO,KAAK,KAAK,gCAAgC,IAAI,KAAK,KAAK,gCAAgC,CAAC;AAClG,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kCAAkC,CAAC,OAAqB,EAAE,GAAW;IACnF,OAAO,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;AAC5D,CAAC"}

package/dist/platform/adapter.d.ts

@@ -0,0 +1,62 @@
+export type PlatformKind = "windows" | "macos" | "linux";
+export interface PlatformPaths {
+    readonly configDirectory: string;
+    readonly stateDirectory: string;
+    readonly runtimeDirectory: string;
+}
+export interface SafeFileSnapshot {
+    readonly exists: boolean;
+    readonly text?: string;
+}
+export interface PlatformAdapter {
+    readonly kind: PlatformKind;
+    readonly paths: PlatformPaths;
+    readSafeConfig(path: string, maximumBytes: number): Promise<SafeFileSnapshot>;
+    /**
+     * Replace the configuration file's whole contents, owner-only and atomically.
+     *
+     * The read side is the standard: a file this refuses to read is a file it
+     * also refuses to overwrite, checked with the same ownership and permission
+     * predicates before the replacement begins. The write itself goes to a
+     * sibling temporary file, is fsynced, and is renamed over the target, so a
+     * crash or a concurrent reader observes either the previous bytes or the new
+     * ones — never a truncated file.
+     *
+     * The caller supplies the complete text. Merging belongs to the caller
+     * (`ensureProfileRecorded` in `config/config.ts`), which parses the current
+     * file and preserves every key it already holds.
+     */
+    writeSafeConfig(path: string, text: string, maximumBytes: number): Promise<void>;
+    /**
+     * Create the file only if the name is free, and answer which happened.
+     *
+     * `writeSafeConfig` is an atomic REPLACE: it opens a unique temporary sibling
+     * with `O_EXCL` and renames it over the target, so it never fails because the
+     * target exists. That is the right primitive for configuration, and the wrong
+     * one for a slot two processes contend for — a caller that reads, finds the
+     * slot free, and then writes is performing check-then-act, and two processes
+     * interleaved that way both believe they hold it. Measured: two real OS
+     * processes, one state directory, both reserved.
+     *
+     * This is the compare-and-swap that shape needs. The TARGET itself is opened
+     * with `O_CREAT|O_EXCL|O_NOFOLLOW`, which the kernel resolves atomically, so
+     * exactly one caller can win however the two are scheduled.
+     *
+     * Returns `true` when this call created the file and `false` when the name was
+     * already taken. `false` is an ordinary answer, not a fault: the caller owns
+     * the product sentence for "someone else holds this", and an errno is not it.
+     * Every other failure is the same typed configuration-file refusal
+     * `writeSafeConfig` raises.
+     */
+    createExclusiveConfig(path: string, text: string, maximumBytes: number): Promise<boolean>;
+}
+export interface PlatformEnvironment {
+    readonly platform: NodeJS.Platform;
+    readonly env: NodeJS.ProcessEnv;
+    readonly homeDirectory: string;
+    readonly userId?: number;
+}
+export declare function resolvePlatformKind(platform: NodeJS.Platform): PlatformKind;
+export declare function resolvePlatformPaths(input: PlatformEnvironment): PlatformPaths;
+export declare function createPlatformAdapter(input?: Partial<PlatformEnvironment>): PlatformAdapter;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/platform/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/platform/adapter.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9E;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3F;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,YAAY,CAW3E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,aAAa,CA0B9E;AAoKD,wBAAgB,qBAAqB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAAG,eAAe,CAwB3F"}