@dharma-ai-labs/agent-fabric 0.2.210 → 0.2.212

package/dist/maintenanceControlCaller.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=maintenanceControlCaller.test.d.ts.map

package/dist/maintenanceControlCaller.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenanceControlCaller.test.d.ts","sourceRoot":"","sources":["../src/maintenanceControlCaller.test.ts"],"names":[],"mappings":""}

package/dist/maintenanceControlCaller.test.js

@@ -0,0 +1,119 @@
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { runInNewContext } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+async function source() { return ts.createSourceFile('index.ts', await readFile(fileURLToPath(new URL('../src/index.ts', import.meta.url)), 'utf8'), ts.ScriptTarget.Latest, true); }
+function compile(text) {
+    return ts.transpileModule(text.replaceAll('import.meta.url', JSON.stringify(import.meta.url)), { compilerOptions: { target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.None } }).outputText;
+}
+async function namedFixture() {
+    const ast = await source(), node = ast.statements.find(n => ts.isFunctionDeclaration(n) && n.name?.text === 'namedSessionCommand');
+    assert(node);
+    const events = [], workspaceId = '33333333-3333-4333-8333-333333333333';
+    const registration = { name: 'codex-fixture', enabled: false, bindingId: 'binding', identity: { workspaceId, organizationId: 'org_fixture', deviceId: 'device',
+            endpointId: 'endpoint', repositoryBindingId: 'repository' } };
+    class TransportFailure extends Error {
+        diagnostic = { phase: 'connect', osCode: 'ENOENT' };
+    }
+    const globals = {
+        namedSessionReadinessDiagnosticRequested: () => false, currentBootstrapHostScope: () => undefined, currentAcceptedSetupSessionScope: () => undefined,
+        currentNamedSessionChildOwner: () => undefined, process: { platform: 'linux', kill: () => { throw Object.assign(Error('absent'), { code: 'ESRCH' }); } },
+        namedSessionPaths: () => ({ root: '/owned/sessions/codex-fixture' }), dharmaHome: () => '/owned',
+        required: (flags, key) => { if (!flags.has(key))
+            throw Error('required'); return String(flags.get(key)); },
+        acquireNamedSessionStartupAdmission: async () => { events.push('admitted'); return async () => { events.push('released'); }; },
+        registry: async () => [{ workspaceId, organizationId: 'org_fixture', path: '/checkout' }], readDeviceConfig: async () => ({ organizationId: 'org_fixture', deviceId: 'device' }),
+        assertBootstrapHostSource: async () => { }, repositoryRoleScope: () => ({ endpointId: 'endpoint', repositoryBindingId: 'repository' }),
+        readNamedSession: async () => registration, assertRelayAutostartPaused: async () => { events.push('paused-proof'); },
+        relayProcessState: async () => 'stopped', relaySupervisorProcessState: async () => 'stopped',
+        NamedSessionTransportFailure: TransportFailure, namedSessionRequest: async () => { throw new TransportFailure(); },
+        reconcileStoppedNamedSessionLock: async () => ({ ok: true }), resolve,
+    };
+    const run = runInNewContext(compile(node.getText(ast)) + '\nnamedSessionCommand', globals);
+    const flags = new Map([['name', registration.name], ['workspace-id', workspaceId], ['registration-sha256', 'a'.repeat(64)], ['lock-sha256', 'b'.repeat(64)], ['apply', true]]);
+    return { run, flags, events, globals };
+}
+test('actual stopped-lock caller holds home-wide startup admission until reconciliation settles', { timeout: 5000 }, async () => {
+    const f = await namedFixture();
+    let complete;
+    f.globals.reconcileStoppedNamedSessionLock = async (_input, deps) => {
+        await deps.assertTopology();
+        assert.equal(await deps.processState(987654), 'stopped');
+        await new Promise(r => { complete = r; });
+        return { ok: true };
+    };
+    const result = f.run('reconcile-stopped-lock', f.flags);
+    let failure;
+    void result.catch(error => { failure = error; });
+    for (let n = 0; n < 1000 && !complete && !failure; n++)
+        await new Promise(r => setTimeout(r, 1));
+    if (failure)
+        throw failure;
+    assert(complete, 'bounded fixture admission did not settle');
+    assert.deepEqual(f.events, ['admitted', 'paused-proof']);
+    complete();
+    await result;
+    assert.deepEqual(f.events, ['admitted', 'paused-proof', 'released']);
+});
+test('actual stopped-lock caller refuses setup/peer contexts and malformed mutation options before admission', async () => {
+    for (const kind of ['host', 'peer', 'accepted', 'false-apply', 'unknown', 'conflict']) {
+        const f = await namedFixture();
+        if (kind === 'host')
+            f.globals.currentBootstrapHostScope = () => ({});
+        if (kind === 'peer')
+            f.globals.currentNamedSessionChildOwner = () => ({});
+        if (kind === 'accepted')
+            f.globals.currentAcceptedSetupSessionScope = () => ({});
+        if (kind === 'false-apply')
+            f.flags.set('apply', 'false');
+        if (kind === 'unknown')
+            f.flags.set('force', true);
+        if (kind === 'conflict')
+            f.flags.set('dry-run', true);
+        await assert.rejects(f.run('reconcile-stopped-lock', f.flags), /named_session_stopped_lock_options_invalid/);
+        assert.deepEqual(f.events, []);
+    }
+});
+test('actual stopped-lock caller rejects a listening owner and unknown or denied socket failures', async () => {
+    for (const kind of ['live', 'denied', 'unknown']) {
+        const f = await namedFixture();
+        f.globals.namedSessionRequest = kind === 'live' ? async () => ({ ok: true }) : async () => { throw Object.assign(Error('unconfirmed'), { code: kind === 'denied' ? 'EACCES' : 'ECONNRESET' }); };
+        f.globals.reconcileStoppedNamedSessionLock = async (_input, deps) => { await deps.assertTopology(); throw Error('must not mutate'); };
+        await assert.rejects(f.run('reconcile-stopped-lock', f.flags), /named_session_stopped_lock_unconfirmed/);
+        assert.deepEqual(f.events, ['admitted', 'paused-proof', 'released']);
+    }
+});
+test('actual autostart pause is plan-first, container-only and preserves the owning mutation admission', async () => {
+    const ast = await source(), nodes = [];
+    const visit = (n) => { if (ts.isIfStatement(n) && n.expression.getText(ast) === "command === 'relay' && subcommand === 'autostart'")
+        nodes.push(n); ts.forEachChild(n, visit); };
+    visit(ast);
+    assert.equal(nodes.length, 1);
+    for (const mode of ['plan', 'apply', 'foreign', 'false-apply']) {
+        const events = [], flags = new Map();
+        if (mode !== 'plan')
+            flags.set('apply', mode === 'false-apply' ? 'false' : true);
+        const globals = { command: 'relay', subcommand: 'autostart', positional: ['relay', 'autostart', 'pause'], flags, dharmaHome: () => '/owned',
+            withRelayStartupMutation: async (f) => { events.push('lock'); try {
+                return await f();
+            }
+            finally {
+                events.push('unlock');
+            } },
+            inspectOwnedRelayAutostart: async () => ({ backend: mode === 'foreign' ? 'systemd-user' : 'container-entrypoint' }),
+            stopRelayAutostart: async () => { events.push('pause'); }, assertRelayAutostartPaused: async () => { events.push('proof'); } };
+        const run = runInNewContext(compile('async function run(){' + nodes[0].getText(ast) + '}') + '\nrun', globals);
+        if (mode === 'foreign' || mode === 'false-apply') {
+            await assert.rejects(run());
+            assert(!events.includes('pause'));
+        }
+        else {
+            await run();
+            assert.deepEqual(events, mode === 'plan' ? ['lock', 'unlock'] : ['lock', 'pause', 'proof', 'unlock']);
+        }
+    }
+});
+//# sourceMappingURL=maintenanceControlCaller.test.js.map

package/dist/maintenanceControlCaller.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenanceControlCaller.test.js","sourceRoot":"","sources":["../src/maintenanceControlCaller.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACvC,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,KAAK,UAAU,MAAM,KAAG,OAAO,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,MAAM,CAAC,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAA,CAAC;AAC7K,SAAS,OAAO,CAAC,IAAW;IAAE,OAAO,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACxH,EAAC,eAAe,EAAC,EAAC,MAAM,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAC,MAAM,EAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAC,EAAC,CAAC,CAAC,UAAU,CAAC;AAAA,CAAC;AAC3F,KAAK,UAAU,YAAY;IACzB,MAAM,GAAG,GAAC,MAAM,MAAM,EAAE,EAAC,IAAI,GAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,IAAI,EAAE,IAAI,KAAG,qBAAqB,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,CAAC;IACrI,MAAM,MAAM,GAAU,EAAE,EAAC,WAAW,GAAC,sCAAsC,CAAC;IAC5E,MAAM,YAAY,GAAC,EAAC,IAAI,EAAC,eAAe,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,SAAS,EAAC,QAAQ,EAAC,EAAC,WAAW,EAAC,cAAc,EAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ;YAC7I,UAAU,EAAC,UAAU,EAAC,mBAAmB,EAAC,YAAY,EAAC,EAAC,CAAC;IAC3D,MAAM,gBAAiB,SAAQ,KAAK;QAAE,UAAU,GAAC,EAAC,KAAK,EAAC,SAAS,EAAC,MAAM,EAAC,QAAQ,EAAC,CAAC;KAAC;IACpF,MAAM,OAAO,GAAwB;QACnC,wCAAwC,EAAC,GAAE,EAAE,CAAA,KAAK,EAAC,yBAAyB,EAAC,GAAE,EAAE,CAAA,SAAS,EAAC,gCAAgC,EAAC,GAAE,EAAE,CAAA,SAAS;QACzI,6BAA6B,EAAC,GAAE,EAAE,CAAA,SAAS,EAAC,OAAO,EAAC,EAAC,QAAQ,EAAC,OAAO,EAAC,IAAI,EAAC,GAAE,EAAE,GAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAC,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC;QACtI,iBAAiB,EAAC,GAAE,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,+BAA+B,EAAC,CAAC,EAAC,UAAU,EAAC,GAAE,EAAE,CAAA,QAAQ;QACtF,QAAQ,EAAC,CAAC,KAAgC,EAAC,GAAU,EAAC,EAAE,GAAC,IAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAC,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA,CAAC;QACnI,mCAAmC,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA,OAAO,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA,CAAC;QAClH,QAAQ,EAAC,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,WAAW,EAAC,cAAc,EAAC,aAAa,EAAC,IAAI,EAAC,WAAW,EAAC,CAAC,EAAC,gBAAgB,EAAC,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,cAAc,EAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC;QAC5J,yBAAyB,EAAC,KAAK,IAAE,EAAE,GAAC,CAAC,EAAC,mBAAmB,EAAC,GAAE,EAAE,CAAA,CAAC,EAAC,UAAU,EAAC,UAAU,EAAC,mBAAmB,EAAC,YAAY,EAAC,CAAC;QACxH,gBAAgB,EAAC,KAAK,IAAE,EAAE,CAAA,YAAY,EAAC,0BAA0B,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA,CAAC;QACzG,iBAAiB,EAAC,KAAK,IAAE,EAAE,CAAA,SAAS,EAAC,2BAA2B,EAAC,KAAK,IAAE,EAAE,CAAA,SAAS;QACnF,4BAA4B,EAAC,gBAAgB,EAAC,mBAAmB,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAA,CAAC;QAC1G,gCAAgC,EAAC,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,EAAC,OAAO;KAC9D,CAAC;IACF,MAAM,GAAG,GAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAC,uBAAuB,EAAC,OAAO,CAAuE,CAAC;IAC5J,MAAM,KAAK,GAAC,IAAI,GAAG,CAAwB,CAAC,CAAC,MAAM,EAAC,YAAY,CAAC,IAAI,CAAC,EAAC,CAAC,cAAc,EAAC,WAAW,CAAC,EAAC,CAAC,qBAAqB,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC,aAAa,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3L,OAAM,EAAC,GAAG,EAAC,KAAK,EAAC,MAAM,EAAC,OAAO,EAAC,CAAC;AACnC,CAAC;AAED,IAAI,CAAC,2FAA2F,EAAC,EAAC,OAAO,EAAC,IAAI,EAAC,EAAC,KAAK,IAAE,EAAE;IACvH,MAAM,CAAC,GAAC,MAAM,YAAY,EAAE,CAAC;IAAA,IAAI,QAA6B,CAAC;IAC/D,CAAC,CAAC,OAAO,CAAC,gCAAgC,GAAC,KAAK,EAAC,MAAc,EAAC,IAA8E,EAAC,EAAE;QAC/I,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAC,SAAS,CAAC,CAAC;QACpF,MAAM,IAAI,OAAO,CAAO,CAAC,CAAA,EAAE,GAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAAA,OAAM,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC;IAC5D,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAAA,IAAI,OAAe,CAAC;IACzE,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,OAAO,GAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;IAC3C,KAAI,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,IAAE,CAAC,QAAQ,IAAE,CAAC,OAAO,EAAC,CAAC,EAAE;QAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,UAAU,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAG,OAAO;QAAC,MAAM,OAAO,CAAC;IAAA,MAAM,CAAC,QAAQ,EAAC,0CAA0C,CAAC,CAAC;IACrF,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,cAAc,CAAC,CAAC,CAAC;IAAA,QAAQ,EAAE,CAAC;IAAA,MAAM,MAAM,CAAC;IAC/E,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,cAAc,EAAC,UAAU,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wGAAwG,EAAC,KAAK,IAAE,EAAE;IACrH,KAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAC,MAAM,EAAC,UAAU,EAAC,aAAa,EAAC,SAAS,EAAC,UAAU,CAAC,EAAC,CAAC;QAC/E,MAAM,CAAC,GAAC,MAAM,YAAY,EAAE,CAAC;QAC7B,IAAG,IAAI,KAAG,MAAM;YAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,GAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAG,IAAI,KAAG,MAAM;YAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,GAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,CAAC;QAClE,IAAG,IAAI,KAAG,UAAU;YAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,GAAC,GAAE,EAAE,CAAA,CAAC,EAAE,CAAC,CAAC;QACzE,IAAG,IAAI,KAAG,aAAa;YAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAC,OAAO,CAAC,CAAC;QACrD,IAAG,IAAI,KAAG,SAAS;YAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QAC9C,IAAG,IAAI,KAAG,UAAU;YAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAC,CAAC,CAAC,KAAK,CAAC,EAAC,4CAA4C,CAAC,CAAC;QAAA,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4FAA4F,EAAC,KAAK,IAAE,EAAE;IACzG,KAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAC,QAAQ,EAAC,SAAS,CAAC,EAAC,CAAC;QAC7C,MAAM,CAAC,GAAC,MAAM,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAC,IAAI,KAAG,MAAM,CAAA,CAAC,CAAA,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,EAAE,EAAC,IAAI,EAAC,CAAC,CAAA,CAAC,CAAA,KAAK,IAAE,EAAE,GAAC,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,EAAC,IAAI,EAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,YAAY,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC;QACpK,CAAC,CAAC,OAAO,CAAC,gCAAgC,GAAC,KAAK,EAAC,MAAc,EAAC,IAAqC,EAAC,EAAE,GAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAA,CAAC,CAAC;QACtK,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,EAAC,CAAC,CAAC,KAAK,CAAC,EAAC,wCAAwC,CAAC,CAAC;QACvG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAC,CAAC,UAAU,EAAC,cAAc,EAAC,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kGAAkG,EAAC,KAAK,IAAE,EAAE;IAC/G,MAAM,GAAG,GAAC,MAAM,MAAM,EAAE,EAAC,KAAK,GAAkB,EAAE,CAAC;IACnD,MAAM,KAAK,GAAC,CAAC,CAAS,EAAC,EAAE,GAAC,IAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAG,mDAAmD;QAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,EAAE,CAAC,YAAY,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;IAAA,KAAK,CAAC,GAAG,CAAC,CAAC;IACtL,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;IAC7B,KAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAC,OAAO,EAAC,SAAS,EAAC,aAAa,CAAC,EAAC,CAAC;QAC1D,MAAM,MAAM,GAAU,EAAE,EAAC,KAAK,GAAC,IAAI,GAAG,EAAyB,CAAC;QAAA,IAAG,IAAI,KAAG,MAAM;YAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,KAAG,aAAa,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC;QACtI,MAAM,OAAO,GAAC,EAAC,OAAO,EAAC,OAAO,EAAC,UAAU,EAAC,WAAW,EAAC,UAAU,EAAC,CAAC,OAAO,EAAC,WAAW,EAAC,OAAO,CAAC,EAAC,KAAK,EAAC,UAAU,EAAC,GAAE,EAAE,CAAA,QAAQ;YAC1H,wBAAwB,EAAC,KAAK,EAAC,CAAsB,EAAC,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,IAAG,CAAC;gBAAA,OAAO,MAAM,CAAC,EAAE,CAAC;YAAA,CAAC;oBAAO,CAAC;gBAAA,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAA,CAAC,CAAA,CAAC;YACnI,0BAA0B,EAAC,KAAK,IAAE,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,cAAc,CAAA,CAAC,CAAA,sBAAsB,EAAC,CAAC;YACtG,kBAAkB,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,EAAC,0BAA0B,EAAC,KAAK,IAAE,EAAE,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;QACnH,MAAM,GAAG,GAAC,eAAe,CAAC,OAAO,CAAC,uBAAuB,GAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAC,GAAG,CAAC,GAAC,OAAO,EAAC,OAAO,CAAwB,CAAC;QAC9H,IAAG,IAAI,KAAG,SAAS,IAAE,IAAI,KAAG,aAAa,EAAC,CAAC;YAAA,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAAA,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAAA,CAAC;aACtG,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,CAAC,SAAS,CAAC,MAAM,EAAC,IAAI,KAAG,MAAM,CAAA,CAAC,CAAA,CAAC,MAAM,EAAC,QAAQ,CAAC,CAAA,CAAC,CAAA,CAAC,MAAM,EAAC,OAAO,EAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,CAAC;IAC/G,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/namedSessionStoppedLock.d.ts

@@ -0,0 +1,34 @@
+import type { NamedSessionRegistration } from './namedSessionService.js';
+interface Input {
+    home: string;
+    name: string;
+    registration: NamedSessionRegistration;
+    registrationSha256: string;
+    lockSha256: string;
+    apply: boolean;
+}
+interface Dependencies {
+    assertTopology(): Promise<void>;
+    processState(pid: number): Promise<'stopped' | 'running' | 'unknown'>;
+}
+/** Called only under the owning CLI's home-wide startup mutation admission. */
+export declare function reconcileStoppedNamedSessionLock(input: Input, deps: Dependencies): Promise<{
+    state: string;
+    ok: boolean;
+    planned: boolean;
+    name: string;
+    workspaceId: string;
+    bindingId: string;
+    registrationSha256: string;
+    lockSha256: string;
+    archive: string;
+    previousPid: number;
+    registrationChanged: boolean;
+    budgetChanged: boolean;
+    providerStarted: boolean;
+    protectedStoreRead: boolean;
+    ready: boolean;
+    nativeContinuationAuthorized: boolean;
+}>;
+export {};
+//# sourceMappingURL=namedSessionStoppedLock.d.ts.map

package/dist/namedSessionStoppedLock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionStoppedLock.d.ts","sourceRoot":"","sources":["../src/namedSessionStoppedLock.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,0BAA0B,CAAC;AAIvE,UAAU,KAAK;IACb,IAAI,EAAC,MAAM,CAAC;IAAC,IAAI,EAAC,MAAM,CAAC;IAAC,YAAY,EAAC,wBAAwB,CAAC;IAChE,kBAAkB,EAAC,MAAM,CAAC;IAAC,UAAU,EAAC,MAAM,CAAC;IAAC,KAAK,EAAC,OAAO,CAAC;CAC7D;AACD,UAAU,YAAY;IACpB,cAAc,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,YAAY,CAAC,GAAG,EAAC,MAAM,GAAE,OAAO,CAAC,SAAS,GAAC,SAAS,GAAC,SAAS,CAAC,CAAC;CACjE;AAYD,+EAA+E;AAC/E,wBAAsB,gCAAgC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,YAAY;;;;;;;;;;;;;;;;;GA+CnF"}

package/dist/namedSessionStoppedLock.js

@@ -0,0 +1,108 @@
+import { createHash } from 'node:crypto';
+import { constants } from 'node:fs';
+import { link, lstat, open, realpath, unlink } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+const digest = (bytes) => createHash('sha256').update(bytes).digest('hex');
+const unavailable = () => new Error('named_session_stopped_lock_unconfirmed');
+async function privateFile(path, uid, limit) {
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const stat = await file.stat({ bigint: true });
+        if (!stat.isFile() || Number(stat.uid) !== uid || (Number(stat.mode) & 0o077) !== 0 || stat.size > BigInt(limit))
+            throw unavailable();
+        const bytes = await file.readFile();
+        if (bytes.length > limit)
+            throw unavailable();
+        return { bytes, dev: stat.dev, ino: stat.ino };
+    }
+    finally {
+        await file.close();
+    }
+}
+/** Called only under the owning CLI's home-wide startup mutation admission. */
+export async function reconcileStoppedNamedSessionLock(input, deps) {
+    const uid = process.getuid?.() ?? -1;
+    if (process.platform !== 'linux' || uid <= 0 || resolve(input.home) !== input.home
+        || !/^[a-z][a-z0-9-]{0,47}$/.test(input.name) || input.registration.name !== input.name
+        || input.registration.enabled || input.registration.maintenanceFence
+        || ![input.registrationSha256, input.lockSha256].every(v => /^[a-f0-9]{64}$/.test(v)))
+        throw unavailable();
+    const root = join(input.home, 'sessions', input.name), registrationPath = join(root, 'registration.json'), lockPath = join(root, 'service.lock');
+    for (const path of [input.home, join(input.home, 'sessions'), root]) {
+        const stat = await lstat(path);
+        if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== uid || (stat.mode & 0o077) !== 0 || await realpath(path) !== path)
+            throw unavailable();
+    }
+    const verify = async () => {
+        await deps.assertTopology();
+        const registration = await privateFile(registrationPath, uid, 4096);
+        if (digest(registration.bytes) !== input.registrationSha256
+            || JSON.stringify(JSON.parse(registration.bytes.toString('utf8'))) !== JSON.stringify(input.registration))
+            throw unavailable();
+        const lock = await privateFile(lockPath, uid, 64), text = lock.bytes.toString('utf8');
+        if (digest(lock.bytes) !== input.lockSha256 || !/^([1-9][0-9]*)\n?$/.test(text))
+            throw unavailable();
+        const pid = Number(text.trim());
+        if (!Number.isSafeInteger(pid) || pid <= 1 || await deps.processState(pid) !== 'stopped')
+            throw unavailable();
+        return { ...lock, pid };
+    };
+    const before = await verify(), archiveName = 'service.lock.stopped.' + input.lockSha256;
+    const receipt = { ok: true, planned: !input.apply, name: input.name, workspaceId: input.registration.identity.workspaceId,
+        bindingId: input.registration.bindingId, registrationSha256: input.registrationSha256, lockSha256: input.lockSha256,
+        archive: archiveName, previousPid: before.pid, registrationChanged: false, budgetChanged: false, providerStarted: false, protectedStoreRead: false,
+        ready: false, nativeContinuationAuthorized: false };
+    if (!input.apply)
+        return { ...receipt, state: 'stopped_lock_reconciliation_planned' };
+    const current = await verify();
+    if (current.dev !== before.dev || current.ino !== before.ino)
+        throw unavailable();
+    const archive = join(root, archiveName);
+    try {
+        await link(lockPath, archive);
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    const retained = await privateFile(archive, uid, 64);
+    if (retained.dev !== before.dev || retained.ino !== before.ino || digest(retained.bytes) !== input.lockSha256)
+        throw unavailable();
+    const archiveFile = await open(archive, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        await archiveFile.sync();
+    }
+    finally {
+        await archiveFile.close();
+    }
+    const directory = await open(root, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        await directory.sync();
+    }
+    finally {
+        await directory.close();
+    }
+    const final = await verify();
+    if (final.dev !== before.dev || final.ino !== before.ino)
+        throw unavailable();
+    await unlink(lockPath);
+    const completedDirectory = await open(root, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        await completedDirectory.sync();
+    }
+    finally {
+        await completedDirectory.close();
+    }
+    try {
+        await lstat(lockPath);
+        throw unavailable();
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    if (digest((await privateFile(registrationPath, uid, 4096)).bytes) !== input.registrationSha256)
+        throw unavailable();
+    return { ...receipt, state: 'stopped_lock_reconciled', planned: false };
+}
+//# sourceMappingURL=namedSessionStoppedLock.js.map

package/dist/namedSessionStoppedLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionStoppedLock.js","sourceRoot":"","sources":["../src/namedSessionStoppedLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,SAAS,EAAC,MAAM,SAAS,CAAC;AAClC,OAAO,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAGvC,MAAM,MAAM,GAAC,CAAC,KAAgB,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,MAAM,WAAW,GAAC,GAAE,EAAE,CAAA,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAU1E,KAAK,UAAU,WAAW,CAAC,IAAW,EAAC,GAAU,EAAC,KAAY;IAC5D,MAAM,IAAI,GAAC,MAAM,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,UAAU,GAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzF,IAAG,CAAC;QACF,MAAM,IAAI,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;QAC1C,IAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,GAAG,IAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAC,KAAK,CAAC,KAAG,CAAC,IAAE,IAAI,CAAC,IAAI,GAAC,MAAM,CAAC,KAAK,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QACtH,MAAM,KAAK,GAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAA,IAAG,KAAK,CAAC,MAAM,GAAC,KAAK;YAAC,MAAM,WAAW,EAAE,CAAC;QAC5E,OAAM,EAAC,KAAK,EAAC,GAAG,EAAC,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,IAAI,CAAC,GAAG,EAAC,CAAC;IAC1C,CAAC;YAAO,CAAC;QAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;AAC/B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAAW,EAAC,IAAiB;IAClF,MAAM,GAAG,GAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAE,CAAC,CAAC,CAAC;IACjC,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO,IAAE,GAAG,IAAE,CAAC,IAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAG,KAAK,CAAC,IAAI;WACnE,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAE,KAAK,CAAC,YAAY,CAAC,IAAI,KAAG,KAAK,CAAC,IAAI;WAChF,KAAK,CAAC,YAAY,CAAC,OAAO,IAAE,KAAK,CAAC,YAAY,CAAC,gBAAgB;WAC/D,CAAC,CAAC,KAAK,CAAC,kBAAkB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IACxG,MAAM,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,EAAC,KAAK,CAAC,IAAI,CAAC,EAAC,gBAAgB,GAAC,IAAI,CAAC,IAAI,EAAC,mBAAmB,CAAC,EAAC,QAAQ,GAAC,IAAI,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IACrI,KAAI,MAAM,IAAI,IAAG,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,IAAI,CAAC,EAAC,CAAC;QAC9D,MAAM,IAAI,GAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAE,IAAI,CAAC,cAAc,EAAE,IAAE,IAAI,CAAC,GAAG,KAAG,GAAG,IAAE,CAAC,IAAI,CAAC,IAAI,GAAC,KAAK,CAAC,KAAG,CAAC,IAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAG,IAAI;YAAC,MAAM,WAAW,EAAE,CAAC;IACxI,CAAC;IACD,MAAM,MAAM,GAAC,KAAK,IAAE,EAAE;QACpB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAC,MAAM,WAAW,CAAC,gBAAgB,EAAC,GAAG,EAAC,IAAI,CAAC,CAAC;QAChE,IAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,KAAG,KAAK,CAAC,kBAAkB;eACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAC7H,MAAM,IAAI,GAAC,MAAM,WAAW,CAAC,QAAQ,EAAC,GAAG,EAAC,EAAE,CAAC,EAAC,IAAI,GAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAG,KAAK,CAAC,UAAU,IAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9B,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAE,GAAG,IAAE,CAAC,IAAE,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAG,SAAS;YAAC,MAAM,WAAW,EAAE,CAAC;QACpG,OAAM,EAAC,GAAG,IAAI,EAAC,GAAG,EAAC,CAAC;IACtB,CAAC,CAAC;IACF,MAAM,MAAM,GAAC,MAAM,MAAM,EAAE,EAAC,WAAW,GAAC,uBAAuB,GAAC,KAAK,CAAC,UAAU,CAAC;IACjF,MAAM,OAAO,GAAC,EAAC,EAAE,EAAC,IAAI,EAAC,OAAO,EAAC,CAAC,KAAK,CAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW;QAC7G,SAAS,EAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAC,kBAAkB,EAAC,KAAK,CAAC,kBAAkB,EAAC,UAAU,EAAC,KAAK,CAAC,UAAU;QAC9G,OAAO,EAAC,WAAW,EAAC,WAAW,EAAC,MAAM,CAAC,GAAG,EAAC,mBAAmB,EAAC,KAAK,EAAC,aAAa,EAAC,KAAK,EAAC,eAAe,EAAC,KAAK,EAAC,kBAAkB,EAAC,KAAK;QACvI,KAAK,EAAC,KAAK,EAAC,4BAA4B,EAAC,KAAK,EAAC,CAAC;IAClD,IAAG,CAAC,KAAK,CAAC,KAAK;QAAC,OAAM,EAAC,GAAG,OAAO,EAAC,KAAK,EAAC,qCAAqC,EAAC,CAAC;IAC/E,MAAM,OAAO,GAAC,MAAM,MAAM,EAAE,CAAC;IAC7B,IAAG,OAAO,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,OAAO,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;QAAC,MAAM,WAAW,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAC,IAAI,CAAC,IAAI,EAAC,WAAW,CAAC,CAAC;IACrC,IAAG,CAAC;QAAA,MAAM,IAAI,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC;IAAA,CAAC;IAClC,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,MAAM,KAAK,CAAC;IAAA,CAAC;IAC9E,MAAM,QAAQ,GAAC,MAAM,WAAW,CAAC,OAAO,EAAC,GAAG,EAAC,EAAE,CAAC,CAAC;IACjD,IAAG,QAAQ,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,QAAQ,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAG,KAAK,CAAC,UAAU;QAAC,MAAM,WAAW,EAAE,CAAC;IACvH,MAAM,WAAW,GAAC,MAAM,IAAI,CAAC,OAAO,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAG,CAAC;QAAA,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;IACjE,MAAM,SAAS,GAAC,MAAM,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,WAAW,GAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/F,IAAG,CAAC;QAAA,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;IAC7D,MAAM,KAAK,GAAC,MAAM,MAAM,EAAE,CAAC;IAC3B,IAAG,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG,IAAE,KAAK,CAAC,GAAG,KAAG,MAAM,CAAC,GAAG;QAAC,MAAM,WAAW,EAAE,CAAC;IACtE,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvB,MAAM,kBAAkB,GAAC,MAAM,IAAI,CAAC,IAAI,EAAC,SAAS,CAAC,QAAQ,GAAC,SAAS,CAAC,WAAW,GAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACxG,IAAG,CAAC;QAAA,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC;IAAA,CAAC;YAAO,CAAC;QAAA,MAAM,kBAAkB,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;IAC/E,IAAG,CAAC;QAAA,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAA,MAAM,WAAW,EAAE,CAAC;IAAA,CAAC;IAAA,OAAM,KAAK,EAAC,CAAC;QAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,QAAQ;YAAC,MAAM,KAAK,CAAC;IAAA,CAAC;IAC7H,IAAG,MAAM,CAAC,CAAC,MAAM,WAAW,CAAC,gBAAgB,EAAC,GAAG,EAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAG,KAAK,CAAC,kBAAkB;QAAC,MAAM,WAAW,EAAE,CAAC;IAC/G,OAAM,EAAC,GAAG,OAAO,EAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;AACnE,CAAC"}

package/dist/namedSessionStoppedLock.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=namedSessionStoppedLock.test.d.ts.map

package/dist/namedSessionStoppedLock.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionStoppedLock.test.d.ts","sourceRoot":"","sources":["../src/namedSessionStoppedLock.test.ts"],"names":[],"mappings":""}

package/dist/namedSessionStoppedLock.test.js

@@ -0,0 +1,104 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { chmod, lstat, mkdir, mkdtemp, readFile, realpath, rename, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { reconcileStoppedNamedSessionLock } from './namedSessionStoppedLock.js';
+const linux = { skip: process.platform !== 'linux' }, sha = (v) => createHash('sha256').update(v).digest('hex');
+async function fixture() {
+    const home = await realpath(await mkdtemp(join(tmpdir(), 'dharma-stopped-lock-')));
+    await chmod(home, 0o700);
+    const name = 'codex-fixture', root = join(home, 'sessions', name);
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    await chmod(join(home, 'sessions'), 0o700);
+    const registration = { schema: 'dharma.named-session/v1', name, bindingId: '11111111-1111-4111-8111-111111111111', enabled: false,
+        maximumCostCents: 1000, maximumTurnCostCents: 25, identity: { organizationId: 'org_fixture', provider: 'codex',
+            repositoryBindingId: '22222222-2222-4222-8222-222222222222', workspaceId: '33333333-3333-4333-8333-333333333333',
+            endpointId: '44444444-4444-4444-8444-444444444444', membershipId: '55555555-5555-4555-8555-555555555555', deviceId: '66666666-6666-4666-8666-666666666666' } };
+    await writeFile(join(root, 'registration.json'), JSON.stringify(registration) + '\n', { mode: 0o600 });
+    const lock = join(root, 'service.lock');
+    await writeFile(lock, '987654\n', { mode: 0o600 });
+    const input = { home, name, registration, registrationSha256: sha(await readFile(join(root, 'registration.json'))), lockSha256: sha(await readFile(lock)), apply: false };
+    const deps = { assertTopology: async () => { }, processState: async () => 'stopped' };
+    return { home, root, lock, input, deps };
+}
+test('stopped-lock plan is inert and apply retains the exact original lock inode and registration', linux, async () => {
+    const f = await fixture(), before = await lstat(f.lock);
+    const plan = await reconcileStoppedNamedSessionLock(f.input, f.deps);
+    assert.equal(plan.state, 'stopped_lock_reconciliation_planned');
+    assert.equal((await lstat(f.lock)).ino, before.ino);
+    await assert.rejects(lstat(join(f.root, plan.archive)), { code: 'ENOENT' });
+    const result = await reconcileStoppedNamedSessionLock({ ...f.input, apply: true }, f.deps);
+    assert.equal(result.state, 'stopped_lock_reconciled');
+    assert.equal((await lstat(join(f.root, result.archive))).ino, before.ino);
+    assert.equal(result.registrationChanged, false);
+    assert.equal(result.budgetChanged, false);
+    assert.equal(result.protectedStoreRead, false);
+    await assert.rejects(lstat(f.lock), { code: 'ENOENT' });
+});
+for (const cause of ['enabled', 'wrong-registration', 'wrong-lock', 'running', 'unknown', 'unsafe-parent', 'foreign-topology', 'symlink', 'malformed']) {
+    test('stopped-lock reconciliation refuses ' + cause + ' without removing the lock', linux, async () => {
+        const f = await fixture();
+        if (cause === 'enabled')
+            f.input.registration.enabled = true;
+        if (cause === 'wrong-registration')
+            f.input.registrationSha256 = '0'.repeat(64);
+        if (cause === 'wrong-lock')
+            f.input.lockSha256 = '0'.repeat(64);
+        if (cause === 'running' || cause === 'unknown')
+            f.deps.processState = async () => cause;
+        if (cause === 'unsafe-parent')
+            await chmod(f.root, 0o755);
+        if (cause === 'foreign-topology')
+            f.deps.assertTopology = async () => { throw Error('foreign controller'); };
+        if (cause === 'symlink') {
+            await writeFile(join(f.root, 'foreign'), '987654\n', { mode: 0o600 });
+            f.input.name = 'linked';
+            f.input.registration = { ...f.input.registration, name: 'linked' };
+            await symlink(f.root, join(f.home, 'sessions', 'linked'));
+        }
+        if (cause === 'malformed') {
+            await writeFile(f.lock, 'not-a-pid\n');
+            f.input.lockSha256 = sha(await readFile(f.lock));
+        }
+        await assert.rejects(reconcileStoppedNamedSessionLock({ ...f.input, apply: true }, f.deps));
+        assert.equal((await lstat(f.lock)).isFile(), true);
+    });
+}
+test('a topology change after archive creation leaves the active lock intact', linux, async () => {
+    const f = await fixture();
+    let checks = 0;
+    f.deps.assertTopology = async () => { if (++checks === 3)
+        throw Error('topology changed'); };
+    await assert.rejects(reconcileStoppedNamedSessionLock({ ...f.input, apply: true }, f.deps));
+    assert.equal((await lstat(f.lock)).isFile(), true);
+    assert.equal(sha(await readFile(join(f.root, 'service.lock.stopped.' + f.input.lockSha256))), f.input.lockSha256);
+});
+test('a symbolic service lock and an existing foreign archive never admit reconciliation', linux, async () => {
+    for (const cause of ['symlink', 'archive']) {
+        const f = await fixture();
+        if (cause === 'symlink') {
+            await rename(f.lock, join(f.root, 'original'));
+            await symlink(join(f.root, 'original'), f.lock);
+        }
+        else
+            await writeFile(join(f.root, 'service.lock.stopped.' + f.input.lockSha256), 'foreign\n', { mode: 0o600 });
+        await assert.rejects(reconcileStoppedNamedSessionLock({ ...f.input, apply: true }, f.deps));
+        assert.equal(Boolean(await lstat(f.lock)), true);
+    }
+});
+test('registration replacement or a newly live PID after planning cannot remove the active lock', linux, async () => {
+    for (const cause of ['registration', 'pid']) {
+        const f = await fixture();
+        let n = 0;
+        f.deps.assertTopology = async () => { if (++n === 2 && cause === 'registration')
+            await writeFile(join(f.root, 'registration.json'), '{}\n'); };
+        let pidChecks = 0;
+        if (cause === 'pid')
+            f.deps.processState = async () => ++pidChecks === 1 ? 'stopped' : 'running';
+        await assert.rejects(reconcileStoppedNamedSessionLock({ ...f.input, apply: true }, f.deps));
+        assert.equal((await lstat(f.lock)).isFile(), true);
+    }
+});
+//# sourceMappingURL=namedSessionStoppedLock.test.js.map

package/dist/namedSessionStoppedLock.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionStoppedLock.test.js","sourceRoot":"","sources":["../src/namedSessionStoppedLock.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,KAAK,EAAC,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,SAAS,EAAC,MAAM,kBAAkB,CAAC;AACtG,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,gCAAgC,EAAC,MAAM,8BAA8B,CAAC;AAG9E,MAAM,KAAK,GAAC,EAAC,IAAI,EAAC,OAAO,CAAC,QAAQ,KAAG,OAAO,EAAC,EAAC,GAAG,GAAC,CAAC,CAAY,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/G,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAC,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAAA,MAAM,KAAK,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;IACxG,MAAM,IAAI,GAAC,eAAe,EAAC,IAAI,GAAC,IAAI,CAAC,IAAI,EAAC,UAAU,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,KAAK,CAAC,IAAI,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAAA,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,KAAK,CAAC,CAAC;IAClJ,MAAM,YAAY,GAA0B,EAAC,MAAM,EAAC,yBAAyB,EAAC,IAAI,EAAC,SAAS,EAAC,sCAAsC,EAAC,OAAO,EAAC,KAAK;QAC/I,gBAAgB,EAAC,IAAI,EAAC,oBAAoB,EAAC,EAAE,EAAC,QAAQ,EAAC,EAAC,cAAc,EAAC,aAAa,EAAC,QAAQ,EAAC,OAAO;YACnG,mBAAmB,EAAC,sCAAsC,EAAC,WAAW,EAAC,sCAAsC;YAC7G,UAAU,EAAC,sCAAsC,EAAC,YAAY,EAAC,sCAAsC,EAAC,QAAQ,EAAC,sCAAsC,EAAC,EAAC,CAAC;IAC5J,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAC,mBAAmB,CAAC,EAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAC,IAAI,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAC,IAAI,CAAC,IAAI,EAAC,cAAc,CAAC,CAAC;IAAA,MAAM,SAAS,CAAC,IAAI,EAAC,UAAU,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAC,EAAC,IAAI,EAAC,IAAI,EAAC,YAAY,EAAC,kBAAkB,EAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAC,mBAAmB,CAAC,CAAC,CAAC,EAAC,UAAU,EAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC;IAC7J,MAAM,IAAI,GAAC,EAAC,cAAc,EAAC,KAAK,IAAE,EAAE,GAAC,CAAC,EAAC,YAAY,EAAC,KAAK,IAAE,EAAE,CAAC,SAA0C,EAAC,CAAC;IAC1G,OAAM,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC;AACpC,CAAC;AAED,IAAI,CAAC,6FAA6F,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE;IAChH,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,EAAC,MAAM,GAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAAA,MAAM,IAAI,GAAC,MAAM,gCAAgC,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,qCAAqC,CAAC,CAAC;IAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClH,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAC,MAAM,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAC,yBAAyB,CAAC,CAAC;IAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7H,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAC,KAAK,CAAC,CAAC;IAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAC,KAAK,CAAC,CAAC;IAAA,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAC,KAAK,CAAC,CAAC;IACtI,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,KAAI,MAAM,KAAK,IAAI,CAAC,SAAS,EAAC,oBAAoB,EAAC,YAAY,EAAC,SAAS,EAAC,SAAS,EAAC,eAAe,EAAC,kBAAkB,EAAC,SAAS,EAAC,WAAW,CAAC,EAAC,CAAC;IAC7I,IAAI,CAAC,sCAAsC,GAAC,KAAK,GAAC,4BAA4B,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE;QAC5F,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;QACxB,IAAG,KAAK,KAAG,SAAS;YAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,GAAC,IAAI,CAAC;QACvD,IAAG,KAAK,KAAG,oBAAoB;YAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAG,KAAK,KAAG,YAAY;YAAC,CAAC,CAAC,KAAK,CAAC,UAAU,GAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAG,KAAK,KAAG,SAAS,IAAE,KAAK,KAAG,SAAS;YAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAC,KAAK,IAAE,EAAE,CAAA,KAAK,CAAC;QAC3E,IAAG,KAAK,KAAG,eAAe;YAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,EAAC,KAAK,CAAC,CAAC;QACrD,IAAG,KAAK,KAAG,kBAAkB;YAAC,CAAC,CAAC,IAAI,CAAC,cAAc,GAAC,KAAK,IAAE,EAAE,GAAC,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAA,CAAC,CAAC;QAClG,IAAG,KAAK,KAAG,SAAS,EAAC,CAAC;YAAA,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,SAAS,CAAC,EAAC,UAAU,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YACpF,CAAC,CAAC,KAAK,CAAC,IAAI,GAAC,QAAQ,CAAC;YAAA,CAAC,CAAC,KAAK,CAAC,YAAY,GAAC,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,EAAC,IAAI,EAAC,QAAQ,EAAC,CAAC;YAAA,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,CAAC;QAAA,CAAC;QAC7I,IAAG,KAAK,KAAG,WAAW,EAAC,CAAC;YAAA,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,EAAC,aAAa,CAAC,CAAC;YAAA,CAAC,CAAC,KAAK,CAAC,UAAU,GAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAA,CAAC;QAC9G,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,IAAI,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,wEAAwE,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE;IAC3F,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;IAAA,IAAI,MAAM,GAAC,CAAC,CAAC;IAAA,CAAC,CAAC,IAAI,CAAC,cAAc,GAAC,KAAK,IAAE,EAAE,GAAC,IAAG,EAAE,MAAM,KAAG,CAAC;QAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA,CAAC,CAAC;IACvH,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,uBAAuB,GAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAChH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE;IACvG,KAAI,MAAM,KAAK,IAAI,CAAC,SAAS,EAAC,SAAS,CAAC,EAAC,CAAC;QACxC,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;QACxB,IAAG,KAAK,KAAG,SAAS,EAAC,CAAC;YAAA,MAAM,MAAM,CAAC,CAAC,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,UAAU,CAAC,CAAC,CAAC;YAAA,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;;YAC7G,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,uBAAuB,GAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QACvG,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAC,KAAK,EAAC,KAAK,IAAE,EAAE;IAC9G,KAAI,MAAM,KAAK,IAAI,CAAC,cAAc,EAAC,KAAK,CAAC,EAAC,CAAC;QACzC,MAAM,CAAC,GAAC,MAAM,OAAO,EAAE,CAAC;QAAA,IAAI,CAAC,GAAC,CAAC,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,cAAc,GAAC,KAAK,IAAE,EAAE,GAAC,IAAG,EAAE,CAAC,KAAG,CAAC,IAAE,KAAK,KAAG,cAAc;YAAC,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,mBAAmB,CAAC,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAC;QAC9H,IAAI,SAAS,GAAC,CAAC,CAAC;QAAA,IAAG,KAAK,KAAG,KAAK;YAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAC,KAAK,IAAE,EAAE,CAAA,EAAE,SAAS,KAAG,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC;QAClG,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,EAAC,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAA,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,IAAI,CAAC,CAAC;IAC3I,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/relayAutostart.d.ts

@@ -62,6 +62,8 @@ export declare function enableRelayAutostart(options: RelayAutostartOptions & {
     policy: string | null;
     version: string;
     preserveStandardAnchor?: boolean;
+    /** Existing Linux registration only; keep its controller paused during a signing-maintenance upgrade. */
+    pauseForSigningMaintenance?: boolean;
 }): Promise<RelayAutostartState>;
 export declare function disableRelayAutostart(options: RelayAutostartOptions): Promise<RelayAutostartState>;
 export declare function startRelayAutostart(options: RelayAutostartOptions): Promise<{
@@ -72,6 +74,7 @@ export declare function startRelayAutostart(options: RelayAutostartOptions): Pro
 export declare function inspectOwnedRelayAutostart(options: RelayAutostartOptions, inspection?: {
     allowLegacy?: boolean;
 }): Promise<RelayAutostartRegistration>;
+export declare function assertRelayAutostartPaused(options: RelayAutostartOptions): Promise<void>;
 export declare function stopRelayAutostart(options: RelayAutostartOptions): Promise<{
     state: "stop_requested";
     backend: "container-entrypoint" | "systemd-user" | "windows-task" | "launchd-user";

package/dist/relayAutostart.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relayAutostart.d.ts","sourceRoot":"","sources":["../src/relayAutostart.ts"],"names":[],"mappings":"AAMA,OAAO,EACkD,KAAK,gBAAgB,EAAmC,MAAM,8BAA8B,CAAC;AAEtJ,OAAO,EACe,KAAK,cAAc,EAAC,MAAM,mBAAmB,CAAC;AAOpE,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5E,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,UAAU,kBAAkB;IAC1B,OAAO,EAAE,cAAc,GAAG,cAAc,GAAG,cAAc,GAAG,sBAAsB,CAAC;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG,CAAC;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClH;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACxE;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACzG,KAAK,YAAY,GAAG,0BAA0B,CAAC;AAE/C,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,CAAC;IAC9D,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC1F,eAAe,CAAC,EAAE,2BAA2B,GAAG,gBAAgB,CAAC;IACjE,aAAa,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC1C,CAAC;AAyCF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAkB3G;AAwDD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,UAE3H;AAmBD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,UAM/F;AA4ED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtH;AAuBD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyDvG;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAC1E,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAC5E,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiI/B;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiCxG;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,qBAAqB;;;;GAyBvE;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,qBAAqB,EAAE,UAAU,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,uCAe1H;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB;;;;GAetE"}
+{"version":3,"file":"relayAutostart.d.ts","sourceRoot":"","sources":["../src/relayAutostart.ts"],"names":[],"mappings":"AAMA,OAAO,EACyE,KAAK,gBAAgB,EAAmC,MAAM,8BAA8B,CAAC;AAE7K,OAAO,EACe,KAAK,cAAc,EAAC,MAAM,mBAAmB,CAAC;AAOpE,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE5E,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,UAAU,kBAAkB;IAC1B,OAAO,EAAE,cAAc,GAAG,cAAc,GAAG,cAAc,GAAG,sBAAsB,CAAC;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG,CAAC;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClH;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACxE;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,2BAA2B,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACzG,KAAK,YAAY,GAAG,0BAA0B,CAAC;AAE/C,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,aAAa,CAAC;IAC9D,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC1F,eAAe,CAAC,EAAE,2BAA2B,GAAG,gBAAgB,CAAC;IACjE,aAAa,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC1C,CAAC;AAyCF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAkB3G;AAwDD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,UAE3H;AAmBD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,UAM/F;AA4ED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BtH;AAuBD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyDvG;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IAC1E,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAC5E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,yGAAyG;IACzG,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsI/B;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiCxG;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,qBAAqB;;;;GAyBvE;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,qBAAqB,EAAE,UAAU,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,uCAe1H;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAC,qBAAqB,iBAsB7E;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB;;;;GAetE"}

package/dist/relayAutostart.js

@@ -4,9 +4,9 @@ import { lstat, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { dirname, isAbsolute, join, posix } from 'node:path';
 import { promisify } from 'node:util';
-import { assertContainerStartupOwnership, containerEntrypointAvailable, containerStartupControl, containerStartupState, ownsContainerStartup, writeContainerRegistration, readContainerRegistration } from './containerRelayLifecycle.js';
+import { assertContainerStartupOwnership, containerEntrypointAvailable, containerStartupControl, containerStartupState, ownsContainerStartup, containerStartupPaused, writeContainerRegistration, readContainerRegistration } from './containerRelayLifecycle.js';
 import { currentBootstrapHostScope } from './bootstrapHostScope.js';
-import { assertWslHostPreflight, disableWslRelayHost, enableWslRelayHost, startWslRelayHost, wslRelayHostStatus } from './wslRelayHost.js';
+import { assertWslHostPreflight, assertWslRelayHostPaused, pauseWslRelayHost, disableWslRelayHost, enableWslRelayHost, startWslRelayHost, wslRelayHostStatus } from './wslRelayHost.js';
 const execFileAsync = promisify(execFile);
 const UNIT_NAME = 'dharma-agent-fabric.service';
 const MAC_LABEL = 'io.dharma.agent-fabric.relay';
@@ -341,6 +341,9 @@ export async function relayAutostartStatus(options) {
 }
 export async function enableRelayAutostart(options) {
     const platform = options.platform || process.platform;
+    if (options.pauseForSigningMaintenance && (platform !== 'linux' || options.preserveStandardAnchor)) {
+        throw new Error('relay_signing_maintenance_startup_scope_invalid');
+    }
     if (platform !== 'linux' && platform !== 'win32' && platform !== 'darwin') {
         throw new Error(`Relay autostart is unsupported on ${platform}.`);
     }
@@ -349,6 +352,8 @@ export async function enableRelayAutostart(options) {
     const userHome = options.userHome || homedir();
     const run = options.run || defaultRunner;
     const previous = await readRegistration(options);
+    if (options.pauseForSigningMaintenance && !previous)
+        throw new Error('relay_signing_maintenance_startup_scope_invalid');
     const backend = platform === 'linux'
         ? await containerEntrypointAvailable(options) ? 'container-entrypoint' : 'systemd-user'
         : platform === 'darwin' ? 'launchd-user' : 'windows-task';
@@ -393,7 +398,7 @@ export async function enableRelayAutostart(options) {
         if (previous && !await ownsStartupFile(options, previous))
             throw new Error('autostart_conflict: container startup is not owned.');
         await writeContainerRegistration(options, registration);
-        await containerStartupControl(options, registration, true);
+        await containerStartupControl(options, registration, !options.pauseForSigningMaintenance);
         return containerStartupState(options, registration);
     }
     if (platform === 'win32' && !previous) {
@@ -451,8 +456,11 @@ export async function enableRelayAutostart(options) {
     await writeFile(registrationPath(options.home), `${JSON.stringify(registration, null, 2)}\n`, { mode: 0o600 });
     if (platform === 'linux') {
         await run('systemctl', ['--user', 'daemon-reload']);
-        await run('systemctl', ['--user', 'enable', UNIT_NAME]);
-        await enableWslRelayHost(options);
+        await run('systemctl', ['--user', options.pauseForSigningMaintenance ? 'disable' : 'enable', UNIT_NAME]);
+        if (options.pauseForSigningMaintenance)
+            await pauseWslRelayHost(options);
+        else
+            await enableWslRelayHost(options);
     }
     else if (platform === 'darwin') {
         await run('/usr/bin/plutil', ['-lint', destination]);
@@ -474,7 +482,7 @@ export async function enableRelayAutostart(options) {
         await run('powershell.exe', encodedPowerShell(command));
     }
     const status = await relayAutostartStatus(options);
-    if (status.state !== 'enabled')
+    if (status.state !== (options.pauseForSigningMaintenance ? 'disabled' : 'enabled'))
         throw new Error(`Relay autostart registration was not verified (${status.state}).`);
     return status;
 }
@@ -561,6 +569,37 @@ export async function inspectOwnedRelayAutostart(options, inspection = {}) {
         await macLoaded(options, registration);
     return registration;
 }
+export async function assertRelayAutostartPaused(options) {
+    const registration = await inspectOwnedRelayAutostart(options);
+    if (registration.backend === 'container-entrypoint') {
+        // Only a valid paused control awaiting its new matching heartbeat is polled.
+        // Identity, permission, malformed metadata and other failures stop immediately.
+        for (let attempt = 0; attempt < 50; attempt++) {
+            if (await containerStartupPaused(options, registration))
+                return;
+            if (attempt < 49)
+                await new Promise(resolve => setTimeout(resolve, 100));
+        }
+        throw Error('relay_startup_pause_unconfirmed');
+    }
+    if (registration.backend !== 'systemd-user' || (await relayAutostartStatus(options)).state !== 'disabled') {
+        throw Error('relay_startup_pause_unconfirmed');
+    }
+    const run = options.run || defaultRunner;
+    let active;
+    try {
+        active = (await run('systemctl', ['--user', 'is-active', UNIT_NAME])).stdout.trim();
+    }
+    catch (error) {
+        const e = error;
+        if (e.code !== 3 || typeof e.stdout !== 'string' || e.stdout.trim() !== 'inactive')
+            throw error;
+        active = 'inactive';
+    }
+    if (active !== 'inactive')
+        throw Error('relay_startup_pause_unconfirmed');
+    await assertWslRelayHostPaused(options);
+}
 export async function stopRelayAutostart(options) {
     const registration = await inspectOwnedRelayAutostart(options);
     const run = options.run || defaultRunner;