@dharma-ai-labs/agent-fabric 0.2.152 → 0.2.154

package/dist/namedCodexSkillDiscovery.d.ts

@@ -0,0 +1,15 @@
+import type { CodexStdioTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-transport';
+import { readNamedSessionPackageContent, type NamedSessionPackageContent } from './namedSessionPackageGate.js';
+export type NamedCodexSkillObservation = Readonly<NamedSessionPackageContent & {
+    schema: 'dharma.named-codex-skill-observation/v1';
+    nativeDiscovered: true;
+    observedAt: string;
+}>;
+/** Only the current owner's non-secret content observation crosses local IPC. */
+export declare function parseNamedCodexSkillObservation(raw: unknown): NamedCodexSkillObservation;
+export declare function observeNamedCodexSkill(transport: Pick<CodexStdioTransport, 'request' | 'signal'>, input: {
+    workspace: string;
+    installation: Parameters<typeof readNamedSessionPackageContent>[0];
+    sharedRepositoryReady: boolean;
+}): Promise<NamedCodexSkillObservation>;
+//# sourceMappingURL=namedCodexSkillDiscovery.d.ts.map

package/dist/namedCodexSkillDiscovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedCodexSkillDiscovery.d.ts","sourceRoot":"","sources":["../src/namedCodexSkillDiscovery.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,6EAA6E,CAAC;AACrH,OAAO,EAAC,8BAA8B,EAAE,KAAK,0BAA0B,EAAC,MAAM,8BAA8B,CAAC;AAE7G,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC,0BAA0B,GAAG;IAC7E,MAAM,EAAE,yCAAyC,CAAC;IAClD,gBAAgB,EAAE,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,iFAAiF;AACjF,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,0BAA0B,CAaxF;AA0BD,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE;IAC9G,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,UAAU,CAAC,OAAO,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA+BtC"}

package/dist/namedCodexSkillDiscovery.js

@@ -0,0 +1,90 @@
+import { isAbsolute, resolve } from 'node:path';
+import { types } from 'node:util';
+import { readNamedSessionPackageContent } from './namedSessionPackageGate.js';
+/** Only the current owner's non-secret content observation crosses local IPC. */
+export function parseNamedCodexSkillObservation(raw) {
+    const value = data(raw);
+    if (Object.keys(value).sort().join(',') !== 'bundleHash,bundleId,catalogHash,manifestHash,nativeDiscovered,observedAt,schema,skillsHash'
+        || value.schema !== 'dharma.named-codex-skill-observation/v1' || value.nativeDiscovered !== true
+        || typeof value.bundleId !== 'string' || !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$(?![\s\S])/i.test(value.bundleId)
+        || ['bundleHash', 'catalogHash', 'manifestHash', 'skillsHash'].some(key => typeof value[key] !== 'string'
+            || !/^sha256:[a-f0-9]{64}$(?![\s\S])/.test(value[key]))
+        || typeof value.observedAt !== 'string')
+        throw new Error('named_session_native_skill_invalid');
+    const at = Date.parse(value.observedAt), now = Date.now();
+    if (!Number.isFinite(at) || new Date(at).toISOString() !== value.observedAt || at > now || now - at > 60_000) {
+        throw new Error('named_session_native_skill_invalid');
+    }
+    return Object.freeze(value);
+}
+function data(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || types.isProxy(value))
+        throw new Error('named_session_native_skill_invalid');
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        throw new Error('named_session_native_skill_invalid');
+    const fields = Object.getOwnPropertyDescriptors(value);
+    if (Reflect.ownKeys(fields).length > 32 || Reflect.ownKeys(fields).some(key => typeof key !== 'string'
+        || !fields[key]?.enumerable || !Object.hasOwn(fields[key], 'value')))
+        throw new Error('named_session_native_skill_invalid');
+    return Object.fromEntries(Object.entries(fields).map(([key, field]) => [key, field.value]));
+}
+function list(value, maximum) {
+    if (!Array.isArray(value) || types.isProxy(value) || Object.getPrototypeOf(value) !== Array.prototype
+        || value.length > maximum)
+        throw new Error('named_session_native_skill_invalid');
+    const fields = Object.getOwnPropertyDescriptors(value);
+    if (Reflect.ownKeys(fields).length !== value.length + 1)
+        throw new Error('named_session_native_skill_invalid');
+    return Array.from({ length: value.length }, (_, index) => {
+        const field = fields[String(index)];
+        if (!field?.enumerable || !Object.hasOwn(field, 'value'))
+            throw new Error('named_session_native_skill_invalid');
+        return field.value;
+    });
+}
+// The owner calls this only inside its existing activation/lifetime boundary.
+// Native discovery is not evidence that a later coding turn used the skill.
+export async function observeNamedCodexSkill(transport, input) {
+    const captured = data(input);
+    if (Object.keys(captured).sort().join(',') !== 'installation,sharedRepositoryReady,workspace'
+        || typeof captured.sharedRepositoryReady !== 'boolean')
+        throw new Error('named_session_native_skill_invalid');
+    const workspace = captured.workspace;
+    const installation = Object.freeze({ ...data(captured.installation) });
+    const sharedRepositoryReady = captured.sharedRepositoryReady;
+    if (typeof workspace !== 'string' || !isAbsolute(workspace) || resolve(workspace) !== workspace
+        || workspace.length > 4096 || /[\r\n\0]/.test(workspace) || transport.signal.aborted) {
+        throw new Error('named_session_native_skill_unavailable');
+    }
+    try {
+        const before = await readNamedSessionPackageContent(installation, sharedRepositoryReady);
+        if (transport.signal.aborted)
+            throw new Error();
+        // Official app-server read; no thread/turn, shell, account or configuration action.
+        const response = data(await transport.request('skills/list', { cwds: [workspace], forceReload: true }));
+        if (transport.signal.aborted)
+            throw new Error();
+        const entries = list(response.data, 1);
+        if (entries.length !== 1)
+            throw new Error();
+        const entry = data(entries[0]);
+        if (entry.cwd !== workspace || list(entry.errors, 256).length !== 0)
+            throw new Error();
+        const skills = list(entry.skills, 1024).map(data);
+        const matches = skills.filter(skill => skill.name === 'dharma-agent-fabric');
+        if (matches.length !== 1 || matches[0].enabled !== true
+            || matches[0].path !== installation.nativeSkillPath)
+            throw new Error();
+        const after = await readNamedSessionPackageContent(installation, sharedRepositoryReady);
+        if (transport.signal.aborted || Object.keys(before)
+            .some(key => before[key] !== after[key]))
+            throw new Error();
+        return parseNamedCodexSkillObservation({ ...after, schema: 'dharma.named-codex-skill-observation/v1',
+            nativeDiscovered: true, observedAt: new Date().toISOString() });
+    }
+    catch {
+        throw new Error('named_session_native_skill_unavailable');
+    }
+}
+//# sourceMappingURL=namedCodexSkillDiscovery.js.map

package/dist/namedCodexSkillDiscovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedCodexSkillDiscovery.js","sourceRoot":"","sources":["../src/namedCodexSkillDiscovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAC,KAAK,EAAC,MAAM,WAAW,CAAC;AAEhC,OAAO,EAAC,8BAA8B,EAAkC,MAAM,8BAA8B,CAAC;AAQ7G,iFAAiF;AACjF,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,4FAA4F;WACnI,KAAK,CAAC,MAAM,KAAK,yCAAyC,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI;WAC7F,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,sFAAsF,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;WAClJ,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;eACpG,CAAC,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC,CAAC;WAChE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjG,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,UAAU,IAAI,EAAE,GAAG,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAA0C,CAAC;AACvE,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/I,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChH,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ;WACjG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAE,EAAE,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/H,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,OAAe;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;WAChG,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChH,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAA0D,EAAE,KAIxG;IACC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,8CAA8C;WACxF,OAAO,QAAQ,CAAC,qBAAqB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAC,CAAyC,CAAC;IAC7G,MAAM,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB,CAAC;IAC7D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;WAC1F,SAAS,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACzF,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChD,oFAAoF;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;QACtG,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,KAAK,IAAI;eACnD,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,YAAY,CAAC,eAAe;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,8BAA8B,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACxF,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,IAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAA6C;aAC7F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC9D,OAAO,+BAA+B,CAAC,EAAC,GAAG,KAAK,EAAE,MAAM,EAAE,yCAAyC;YACjG,gBAAgB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QAAA,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAAA,CAAC;AACtE,CAAC"}

package/dist/namedCodexSkillDiscovery.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=namedCodexSkillDiscovery.test.d.ts.map

package/dist/namedCodexSkillDiscovery.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedCodexSkillDiscovery.test.d.ts","sourceRoot":"","sources":["../src/namedCodexSkillDiscovery.test.ts"],"names":[],"mappings":""}

package/dist/namedCodexSkillDiscovery.test.js

@@ -0,0 +1,37 @@
+import assert from 'node:assert/strict';
+import { randomUUID } from 'node:crypto';
+import test from 'node:test';
+import { parseNamedCodexSkillObservation } from './namedCodexSkillDiscovery.js';
+const good = () => ({ schema: 'dharma.named-codex-skill-observation/v1', nativeDiscovered: true,
+    bundleId: randomUUID(), bundleHash: `sha256:${'a'.repeat(64)}`, catalogHash: `sha256:${'b'.repeat(64)}`,
+    manifestHash: `sha256:${'c'.repeat(64)}`, skillsHash: `sha256:${'d'.repeat(64)}`, observedAt: new Date().toISOString() });
+test('native skill IPC observation snapshots only the exact current non-secret content identity', () => {
+    const input = good(), result = parseNamedCodexSkillObservation(input);
+    assert.deepEqual(result, input);
+    assert.equal(Object.isFrozen(result), true);
+    input.bundleHash = `sha256:${'e'.repeat(64)}`;
+    assert.notEqual(result.bundleHash, input.bundleHash);
+});
+test('native skill IPC observation rejects malformed, stale, future and private fields', () => {
+    const fixture = good();
+    const { catalogHash: _catalog, ...partial } = fixture;
+    for (const value of [partial, { ...fixture, path: '/private/native/SKILL.md' }, { ...fixture, schema: 'foreign' },
+        { ...fixture, nativeDiscovered: false }, { ...fixture, bundleId: `${fixture.bundleId}\n` },
+        { ...fixture, manifestHash: `${fixture.manifestHash}\n` }, { ...fixture, skillsHash: 'not-a-hash' },
+        { ...fixture, observedAt: new Date(Date.now() - 60_001).toISOString() },
+        { ...fixture, observedAt: new Date(Date.now() + 60_000).toISOString() }, { ...fixture, observedAt: 'invalid' },
+        { ...fixture, observedAt: fixture.observedAt.replace('Z', '+00:00') }, []]) {
+        assert.throws(() => parseNamedCodexSkillObservation(value), { message: 'named_session_native_skill_invalid' });
+    }
+});
+test('native skill IPC observation never invokes accessors or proxy traps', () => {
+    let invoked = 0;
+    const getter = { ...good() };
+    Object.defineProperty(getter, 'bundleHash', { enumerable: true, get() { invoked++; return 'private'; } });
+    const proxy = new Proxy(good(), { ownKeys() { invoked++; return []; } });
+    for (const value of [getter, proxy, Object.assign(Object.create({ private: true }), good())]) {
+        assert.throws(() => parseNamedCodexSkillObservation(value), { message: 'named_session_native_skill_invalid' });
+    }
+    assert.equal(invoked, 0);
+});
+//# sourceMappingURL=namedCodexSkillDiscovery.test.js.map

package/dist/namedCodexSkillDiscovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedCodexSkillDiscovery.test.js","sourceRoot":"","sources":["../src/namedCodexSkillDiscovery.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,+BAA+B,EAAC,MAAM,+BAA+B,CAAC;AAE9E,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,yCAAyC,EAAE,gBAAgB,EAAE,IAAI;IAC5F,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IACvG,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,CAAC,CAAC;AAE3H,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,MAAM,KAAK,GAAG,IAAI,EAAE,EAAE,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7E,KAAK,CAAC,UAAU,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;IACvB,MAAM,EAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAC,GAAG,OAAO,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,EAAC,GAAG,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAC;QAC3G,EAAC,GAAG,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAC;QACtF,EAAC,GAAG,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAC;QAC/F,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC;QACrE,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAC;QAC1G,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,EAAC,GAAG,IAAI,EAAE,EAAC,CAAC;IAC3B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAI,OAAO,EAAE,CAAC,CAAC,OAAO,SAAS,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,EAAC,OAAO,KAAI,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC"}

package/dist/namedCodexThread.d.ts

@@ -1,3 +1,5 @@
 import type { CodexAppServerTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+import type { BootstrapHostScope } from './bootstrapHostScope.js';
 export declare function startNamedCodexThread(transport: CodexAppServerTransport, workspaceRoot: string, name: string): Promise<string>;
+export declare function startNamedCodexSetupThread(transport: CodexAppServerTransport, workspaceRoot: string, name: string, scope: BootstrapHostScope): Promise<string>;
 //# sourceMappingURL=namedCodexThread.d.ts.map

package/dist/namedCodexThread.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"namedCodexThread.d.ts","sourceRoot":"","sources":["../src/namedCodexThread.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2EAA2E,CAAC;AAGzH,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,mBAkBlH"}
+{"version":3,"file":"namedCodexThread.d.ts","sourceRoot":"","sources":["../src/namedCodexThread.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2EAA2E,CAAC;AAGzH,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAEhE,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,mBAElH;AAED,wBAAsB,0BAA0B,CAAC,SAAS,EAAE,uBAAuB,EACjF,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,mBAE/D"}

package/dist/namedCodexThread.js

@@ -1,19 +1,28 @@
 import { isAbsolute, resolve } from 'node:path';
 import { CODEX_PEER_TOOLS } from './codexPeerTools.js';
+import { CODEX_SETUP_TOOL } from './codexSetupAdmission.js';
 export async function startNamedCodexThread(transport, workspaceRoot, name) {
+    return startThread(transport, workspaceRoot, name);
+}
+export async function startNamedCodexSetupThread(transport, workspaceRoot, name, scope) {
+    return startThread(transport, workspaceRoot, name, scope);
+}
+async function startThread(transport, workspaceRoot, name, setupScope) {
+    const request = (method, params) => setupScope
+        ? setupScope.step(() => transport.request(method, params)) : transport.request(method, params);
     if (!/^[a-z][a-z0-9-]{0,47}$/.test(name) || !isAbsolute(workspaceRoot) || resolve(workspaceRoot) !== workspaceRoot) {
         throw new Error('named_session_thread_invalid');
     }
-    const created = await transport.request('thread/start', { cwd: workspaceRoot,
+    const created = await request('thread/start', { cwd: workspaceRoot,
         approvalPolicy: 'never', permissions: 'dharma_bridge', ephemeral: false,
-        dynamicTools: CODEX_PEER_TOOLS });
+        dynamicTools: setupScope ? structuredClone([...CODEX_PEER_TOOLS, CODEX_SETUP_TOOL]) : CODEX_PEER_TOOLS });
     const thread = created?.thread;
     if (!thread || typeof thread.id !== 'string' || !/^[A-Za-z0-9_-]{1,128}$/.test(thread.id)
         || thread.cwd !== workspaceRoot || thread.status?.type !== 'idle')
         throw new Error('named_session_thread_invalid');
     // Codex lazily persists an empty rollout; its supported naming call flushes it before remote registration.
-    await transport.request('thread/name/set', { threadId: thread.id, name });
-    const read = await transport.request('thread/read', { threadId: thread.id, includeTurns: false });
+    await request('thread/name/set', { threadId: thread.id, name });
+    const read = await request('thread/read', { threadId: thread.id, includeTurns: false });
     if (read?.thread?.id !== thread.id || read.thread.cwd !== workspaceRoot || read.thread.name !== name
         || read.thread.status?.type !== 'idle')
         throw new Error('named_session_thread_invalid');

package/dist/namedCodexThread.js.map

@@ -1 +1 @@
-{"version":3,"file":"namedCodexThread.js","sourceRoot":"","sources":["../src/namedCodexThread.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAkC,EAAE,aAAqB,EAAE,IAAY;IACjH,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,aAAa,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,aAAa;QAC1E,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK;QACvE,YAAY,EAAE,gBAAgB,EAAE,CAA2E,CAAC;IAC9G,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;WACpF,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrH,2GAA2G;IAC3G,MAAM,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAE/F,CAAC;IACF,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;WAC/F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,EAAE,CAAC;AACnB,CAAC"}
+{"version":3,"file":"namedCodexThread.js","sourceRoot":"","sources":["../src/namedCodexThread.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG5D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAkC,EAAE,aAAqB,EAAE,IAAY;IACjH,OAAO,WAAW,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAkC,EACjF,aAAqB,EAAE,IAAY,EAAE,KAAyB;IAC9D,OAAO,WAAW,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAkC,EAAE,aAAqB,EAClF,IAAY,EAAE,UAA+B;IAC7C,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,MAA+B,EAAE,EAAE,CAAC,UAAU;QAC7E,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,aAAa,EAAE,CAAC;QACnH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,aAAa;QAChE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK;QACvE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAA2E,CAAC;IACtL,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;WACpF,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrH,2GAA2G;IAC3G,MAAM,OAAO,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAErF,CAAC;IACF,IAAI,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;WAC/F,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,EAAE,CAAC;AACnB,CAAC"}

package/dist/namedSessionChildOwner.d.ts

@@ -0,0 +1,17 @@
+import type { ChildProcess } from 'node:child_process';
+export interface NamedSessionChildOwner {
+    run<T>(operation: () => Promise<T>): Promise<T>;
+    assert(): void;
+    assertCaptured(name: string, child: ChildProcess): void;
+    ownedPid(name: string): number | null;
+    checkpoint(name: string): Readonly<{
+        stopFresh(): Promise<void>;
+    }>;
+    spawn(name: string, operation: () => ChildProcess): Promise<ChildProcess>;
+    close(): Promise<void>;
+}
+/** Standing supervisor owns only handles returned by its own fresh spawns. */
+export declare function createNamedSessionChildOwner(signal: AbortSignal): NamedSessionChildOwner;
+/** Internal caller composition; no adoption from PID files or inventories. */
+export declare function currentNamedSessionChildOwner(): NamedSessionChildOwner | undefined;
+//# sourceMappingURL=namedSessionChildOwner.d.ts.map

package/dist/namedSessionChildOwner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionChildOwner.d.ts","sourceRoot":"","sources":["../src/namedSessionChildOwner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAOrD,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,IAAI,CAAC;IACf,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;QAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAC,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,WAAW,GAAG,sBAAsB,CAyFxF;AAED,8EAA8E;AAC9E,wBAAgB,6BAA6B,uCAA+B"}

package/dist/namedSessionChildOwner.js

@@ -0,0 +1,122 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { watchOwnedChild } from './ownedChildLifecycle.js';
+const context = new AsyncLocalStorage();
+const owners = new WeakMap();
+/** Standing supervisor owns only handles returned by its own fresh spawns. */
+export function createNamedSessionChildOwner(signal) {
+    const children = new Map();
+    const pending = new Set(), acquisitions = new Set();
+    let active = true, borrowed = false, closing;
+    const stop = (entry) => entry.lifecycle.stopped ? Promise.resolve() : entry.stopping ??= entry.lifecycle.stop();
+    const abort = () => {
+        active = false;
+        for (const entry of children.values())
+            void stop(entry).catch(() => { });
+    };
+    const assertDispatch = () => {
+        if (context.getStore() !== owner || !borrowed || !active || signal.aborted) {
+            throw new Error('named_session_child_owner_unavailable');
+        }
+    };
+    const owner = {
+        assert: assertDispatch,
+        assertCaptured(name, child) {
+            assertDispatch();
+            const entry = children.get(name);
+            if (!entry || entry.child !== child || owners.get(child) !== owner || entry.lifecycle.stopped
+                || entry.lifecycle.failed || entry.stopping)
+                throw new Error('named_session_child_owner_unavailable');
+        },
+        checkpoint(name) {
+            assertDispatch();
+            if (!/^[a-z][a-z0-9-]{0,47}$/.test(name))
+                throw new Error('named_session_child_owner_conflict');
+            const previous = children.get(name);
+            return Object.freeze({ async stopFresh() {
+                    const entry = children.get(name);
+                    // Limited cooperative cleanup uses captured handles, never PID lookup.
+                    // Preserve any child that preceded this request and all sibling names.
+                    if (entry && entry !== previous)
+                        await stop(entry);
+                } });
+        },
+        ownedPid(name) {
+            assertDispatch();
+            const entry = children.get(name);
+            return entry && !entry.lifecycle.stopped && !entry.lifecycle.failed && !entry.stopping
+                && Number.isSafeInteger(entry.child.pid) ? entry.child.pid : null;
+        },
+        async run(operation) {
+            if (context.getStore() || borrowed || !active || signal.aborted)
+                throw new Error('named_session_child_owner_unavailable');
+            borrowed = true;
+            try {
+                return await context.run(owner, operation);
+            }
+            finally {
+                borrowed = false;
+                await owner.close();
+            }
+        },
+        spawn(name, operation) {
+            const acquisition = (async () => {
+                assertDispatch();
+                if (!/^[a-z][a-z0-9-]{0,47}$/.test(name) || pending.has(name))
+                    throw new Error('named_session_child_owner_conflict');
+                pending.add(name);
+                try {
+                    for (const [key, entry] of children)
+                        if (entry.lifecycle.stopped)
+                            children.delete(key);
+                    const prior = children.get(name);
+                    if (prior) {
+                        if (prior.lifecycle.failed || prior.stopping)
+                            await stop(prior);
+                        if (!prior.lifecycle.stopped)
+                            throw new Error('named_session_owned_child_still_running');
+                        children.delete(name);
+                    }
+                    if (children.size >= 50)
+                        throw new Error('named_session_child_owner_capacity');
+                    assertDispatch();
+                    const child = operation();
+                    // Capture before post-dispatch refusal, including synchronous abort.
+                    if (owners.has(child))
+                        throw new Error('named_session_child_owner_conflict');
+                    const entry = { child, lifecycle: watchOwnedChild(child) };
+                    owners.set(child, owner);
+                    children.set(name, entry);
+                    if (!active || signal.aborted)
+                        void stop(entry).catch(() => { });
+                    assertDispatch();
+                    return child;
+                }
+                finally {
+                    pending.delete(name);
+                }
+            })();
+            acquisitions.add(acquisition);
+            void acquisition.then(() => acquisitions.delete(acquisition), () => acquisitions.delete(acquisition));
+            return acquisition;
+        },
+        close() {
+            active = false;
+            signal.removeEventListener('abort', abort);
+            return closing ??= (async () => {
+                // Include a handle acquired while close was called inside its spawn.
+                await Promise.allSettled([...acquisitions]);
+                const results = await Promise.allSettled([...children.values()].map(stop));
+                if (results.some(result => result.status === 'rejected'))
+                    throw new Error('owned_child_stop_unconfirmed');
+            })();
+        },
+    };
+    Object.freeze(owner);
+    signal.addEventListener('abort', abort, { once: true });
+    if (signal.aborted)
+        abort();
+    return owner;
+}
+/** Internal caller composition; no adoption from PID files or inventories. */
+export function currentNamedSessionChildOwner() { return context.getStore(); }
+//# sourceMappingURL=namedSessionChildOwner.js.map

package/dist/namedSessionChildOwner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionChildOwner.js","sourceRoot":"","sources":["../src/namedSessionChildOwner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAC,eAAe,EAA2B,MAAM,0BAA0B,CAAC;AAGnF,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA0B,CAAC;AAChE,MAAM,MAAM,GAAG,IAAI,OAAO,EAAwC,CAAC;AAYnE,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAAC,MAAmB;IAC9D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,EAAE,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnF,IAAI,MAAM,GAAG,IAAI,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAkC,CAAC;IACxE,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACvH,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,KAAK,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE;YAAE,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;IACF,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,KAAK,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAA2B;QACpC,MAAM,EAAE,cAAc;QACtB,cAAc,CAAC,IAAI,EAAE,KAAK;YACxB,cAAc,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO;mBACxF,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1G,CAAC;QACD,UAAU,CAAC,IAAI;YACb,cAAc,EAAE,CAAC;YACjB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChG,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,CAAC,SAAS;oBACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACjC,uEAAuE;oBACvE,uEAAuE;oBACvE,IAAI,KAAK,IAAI,KAAK,KAAK,QAAQ;wBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrD,CAAC,EAAC,CAAC,CAAC;QACN,CAAC;QACD,QAAQ,CAAC,IAAI;YACX,cAAc,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ;mBACjF,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS;YACjB,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1H,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBAAA,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAA,CAAC;oBACzC,CAAC;gBAAA,QAAQ,GAAG,KAAK,CAAC;gBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YAAA,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,IAAI,EAAE,SAAS;YACnB,MAAM,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9B,cAAc,EAAE,CAAC;gBACjB,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACrH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC;oBACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ;wBAAE,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO;4BAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,KAAK,EAAE,CAAC;wBACV,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ;4BAAE,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;wBAChE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO;4BAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;wBACzF,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACxB,CAAC;oBACD,IAAI,QAAQ,CAAC,IAAI,IAAI,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBAC/E,cAAc,EAAE,CAAC;oBACjB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;oBAC1B,qEAAqE;oBACrE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBAC7E,MAAM,KAAK,GAAU,EAAC,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,EAAC,CAAC;oBAChE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACpD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO;wBAAE,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAChE,cAAc,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAC;gBACf,CAAC;wBAAS,CAAC;oBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAA,CAAC;YACnC,CAAC,CAAC,EAAE,CAAC;YACL,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC9B,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACtG,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,KAAK;YACH,MAAM,GAAG,KAAK,CAAC;YACf,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,OAAO,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC7B,qEAAqE;gBACrE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC5G,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;KACF,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,EAAE,CAAC;IAC5B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,6BAA6B,KAAI,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA,CAAC"}

package/dist/namedSessionChildOwner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=namedSessionChildOwner.test.d.ts.map

package/dist/namedSessionChildOwner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionChildOwner.test.d.ts","sourceRoot":"","sources":["../src/namedSessionChildOwner.test.ts"],"names":[],"mappings":""}

package/dist/namedSessionChildOwner.test.js

@@ -0,0 +1,203 @@
+import assert from 'node:assert/strict';
+import { AsyncResource } from 'node:async_hooks';
+import { execFileSync, spawn } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+import { mkdtemp, readFile, realpath, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import { compileFunction } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { createNamedSessionChildOwner, currentNamedSessionChildOwner } from './namedSessionChildOwner.js';
+import { watchOwnedChild } from './ownedChildLifecycle.js';
+class FakeChild extends EventEmitter {
+    pid = 101;
+    exitCode = null;
+    signalCode = null;
+    signals = [];
+    finishOnKill = true;
+    kill(signal) {
+        this.signals.push(signal);
+        if (this.finishOnKill)
+            queueMicrotask(() => this.finish());
+        return true;
+    }
+    finish() { this.exitCode = 0; this.emit('exit', 0); this.emit('close', 0); }
+    get handle() { return this; }
+}
+test('standing owner serializes each name and refuses replacement of a still-live child', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal), child = new FakeChild();
+    let replacements = 0;
+    await owner.run(async () => {
+        assert.equal(currentNamedSessionChildOwner(), owner);
+        await owner.spawn('reviewer', () => child.handle);
+        await assert.rejects(owner.spawn('reviewer', () => { replacements++; return new FakeChild().handle; }), /still_running/);
+    });
+    assert.equal(replacements, 0);
+    assert.deepEqual(child.signals, ['SIGTERM']);
+    assert.equal(currentNamedSessionChildOwner(), undefined);
+});
+test('standing owner waits for confirmed errored-child exit before admitting its replacement', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal), first = new FakeChild(), second = new FakeChild();
+    first.finishOnKill = false;
+    let replacements = 0;
+    await owner.run(async () => {
+        await owner.spawn('reviewer', () => first.handle);
+        first.emit('error', new Error('synthetic send failure'));
+        const replacing = owner.spawn('reviewer', () => { replacements++; return second.handle; });
+        await Promise.resolve();
+        assert.equal(replacements, 0);
+        assert.deepEqual(first.signals, ['SIGTERM']);
+        first.finish();
+        await replacing;
+    });
+    assert.equal(replacements, 1);
+    assert.deepEqual(second.signals, ['SIGTERM']);
+});
+test('standing owner rejects duplicate concurrent admission while prior stop is pending', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal), first = new FakeChild();
+    first.finishOnKill = false;
+    let spawns = 0;
+    await owner.run(async () => {
+        await owner.spawn('reviewer', () => first.handle);
+        first.emit('error', new Error('synthetic failure'));
+        const replacing = owner.spawn('reviewer', () => { spawns++; return new FakeChild().handle; });
+        await assert.rejects(owner.spawn('reviewer', () => { spawns++; return new FakeChild().handle; }), /owner_conflict/);
+        first.finish();
+        await replacing;
+    });
+    assert.equal(spawns, 1);
+});
+for (const action of ['abort', 'close']) {
+    test(`standing owner captures and drains a child when ${action} occurs inside synchronous spawn`, async () => {
+        const signal = new AbortController(), owner = createNamedSessionChildOwner(signal.signal), child = new FakeChild();
+        await assert.rejects(owner.run(() => owner.spawn('reviewer', () => {
+            if (action === 'abort')
+                signal.abort();
+            else
+                void owner.close();
+            return child.handle;
+        })), /owner_unavailable/);
+        assert.equal(child.exitCode, 0);
+        assert.deepEqual(child.signals, ['SIGTERM']);
+        await owner.close();
+    });
+}
+test('standing owner does not adopt another owner child, and does not signal an unrelated handle', async () => {
+    const first = createNamedSessionChildOwner(new AbortController().signal), child = new FakeChild(), unrelated = new FakeChild();
+    const second = createNamedSessionChildOwner(new AbortController().signal);
+    const outside = new AsyncResource('synthetic-unscoped-owner');
+    await first.run(async () => {
+        await first.spawn('reviewer', () => child.handle);
+        await assert.rejects(outside.runInAsyncScope(() => second.run(() => second.spawn('reviewer', () => child.handle))), /owner_conflict/);
+        assert.equal(child.signals.length, 0);
+    });
+    outside.emitDestroy();
+    assert.deepEqual(unrelated.signals, []);
+});
+test('standing owner refuses late detached spawn after its operation has settled', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal);
+    let late, effects = 0;
+    await owner.run(async () => { late = () => owner.spawn('reviewer', () => { effects++; return new FakeChild().handle; }); });
+    await assert.rejects(late(), /owner_unavailable/);
+    assert.equal(effects, 0);
+});
+test('standing owner releases admission after synchronous spawn failure without hiding uncertainty', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal), child = new FakeChild();
+    await owner.run(async () => {
+        await assert.rejects(owner.spawn('reviewer', () => { throw new Error('synthetic spawn failure'); }), /spawn failure/);
+        await owner.spawn('reviewer', () => child.handle);
+    });
+    assert.equal(child.exitCode, 0);
+});
+test('standing owner reports unconfirmed exit instead of settling successfully', async (t) => {
+    t.mock.timers.enable({ apis: ['setTimeout'] });
+    const signal = new AbortController(), owner = createNamedSessionChildOwner(signal.signal), child = new FakeChild();
+    child.finishOnKill = false;
+    const running = owner.run(async () => { await owner.spawn('reviewer', () => child.handle); signal.abort(); });
+    const outcome = assert.rejects(running, /owned_child_stop_unconfirmed/);
+    for (let i = 0; i < 12; i++)
+        await Promise.resolve();
+    t.mock.timers.tick(10_000);
+    for (let i = 0; i < 12; i++)
+        await Promise.resolve();
+    t.mock.timers.tick(10_000);
+    await outcome;
+    assert.deepEqual(child.signals, ['SIGTERM', 'SIGKILL']);
+    child.finish();
+});
+test('standing owner can recover an earlier stop failure only after actual exit is observed', async (t) => {
+    t.mock.timers.enable({ apis: ['setTimeout'] });
+    const owner = createNamedSessionChildOwner(new AbortController().signal), first = new FakeChild(), second = new FakeChild();
+    first.finishOnKill = false;
+    await owner.run(async () => {
+        await owner.spawn('reviewer', () => first.handle);
+        first.emit('error', new Error('synthetic error'));
+        const replacement = owner.spawn('reviewer', () => second.handle);
+        const failure = assert.rejects(replacement, /owned_child_stop_unconfirmed/);
+        for (let i = 0; i < 12; i++)
+            await Promise.resolve();
+        t.mock.timers.tick(10_000);
+        for (let i = 0; i < 12; i++)
+            await Promise.resolve();
+        t.mock.timers.tick(10_000);
+        await failure;
+        assert.deepEqual(second.signals, []);
+        first.finish();
+        await owner.spawn('reviewer', () => second.handle);
+    });
+    assert.equal(second.exitCode, 0);
+});
+test('standing owner enforces the bounded live-child capacity without spawning a fifty-first child', async () => {
+    const owner = createNamedSessionChildOwner(new AbortController().signal), children = [];
+    let extra = 0;
+    await owner.run(async () => {
+        for (let i = 0; i < 50; i++) {
+            const child = new FakeChild();
+            children.push(child);
+            await owner.spawn(`session-${i}`, () => child.handle);
+        }
+        await assert.rejects(owner.spawn('session-overflow', () => { extra++; return new FakeChild().handle; }), /owner_capacity/);
+    });
+    assert.equal(extra, 0);
+    assert.equal(children.filter(child => child.exitCode === 0).length, 50);
+});
+test('actual supervisor declaration drains its fresh C-only session child before returning', async (t) => {
+    const root = await realpath(await mkdtemp(resolve(tmpdir(), 'dharma-standing-session-'))), signal = new AbortController();
+    let child;
+    t.after(async () => { signal.abort(); if (child)
+        await watchOwnedChild(child).stop({ graceMs: 1000 }); await rm(root, { recursive: true, force: true }); });
+    const baseline = process.env.DHARMA_SUPERVISOR_BASELINE_SHA;
+    if (baseline && !/^[a-f0-9]{40}$/.test(baseline))
+        throw new Error('fixture_baseline_invalid');
+    const source = baseline ? execFileSync('git', ['show', `${baseline}:packages/cli/src/index.ts`], { encoding: 'utf8' })
+        : await readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const ast = ts.createSourceFile('index.ts', source, ts.ScriptTarget.Latest, true);
+    const functions = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === 'superviseNamedSessions');
+    assert.equal(functions.length, 1);
+    const output = ts.transpileModule(functions[0].getText(ast), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.CommonJS
+        }, reportDiagnostics: true });
+    assert.equal(output.diagnostics?.filter(d => d.category === ts.DiagnosticCategory.Error).length, 0);
+    const dependencies = { process: { platform: 'linux', stderr: { write: () => { } } }, createNamedSessionChildOwner,
+        resolve, dharmaHome: () => root, setTimeout, clearTimeout,
+        access: async () => { throw Object.assign(new Error('synthetic vault absent'), { code: 'ENOENT' }); },
+        readdir: async () => [{ name: 'reviewer', isDirectory: () => true }],
+        readNamedSession: async () => ({ enabled: true, name: 'reviewer', identity: { workspaceId: 'synthetic_workspace' } }),
+        namedSessionCommand: async (action, flags) => {
+            assert.equal(action, 'start');
+            assert.equal(flags.get('name'), 'reviewer');
+            assert.equal(flags.get('workspace-id'), 'synthetic_workspace');
+            assert.equal(flags.get('apply'), true);
+            const owner = currentNamedSessionChildOwner();
+            const start = () => spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], { cwd: root, stdio: 'ignore' });
+            child = owner ? await owner.spawn('reviewer', start) : start();
+            signal.abort();
+            return { ok: true };
+        } };
+    const supervise = compileFunction(output.outputText + '\nreturn superviseNamedSessions;', ['exports', ...Object.keys(dependencies)])({}, ...Object.values(dependencies));
+    await supervise(signal.signal);
+    assert.ok(child);
+    assert.ok(child.exitCode !== null || child.signalCode !== null);
+});
+//# sourceMappingURL=namedSessionChildOwner.test.js.map