@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/keep-awake.d.ts

@@ -0,0 +1,62 @@
+import { spawn as nodeSpawn } from "node:child_process";
+/**
+ * Cross-platform "keep the host awake" assertion held by voltd while enabled.
+ * Zero native dependencies: each platform gets a long-lived child process whose
+ * lifetime IS the assertion — killing the child releases it.
+ *
+ *  - darwin: `caffeinate -i -s` (idle + system sleep on AC; the display may
+ *    still sleep). Lid-closed sleep on battery cannot be prevented.
+ *  - linux: `systemd-inhibit --mode=block sleep infinity`; hosts without
+ *    systemd degrade with a reason instead of failing.
+ *  - win32: a PowerShell child that P/Invokes SetThreadExecutionState with
+ *    ES_CONTINUOUS | ES_SYSTEM_REQUIRED; the OS clears the flag when the
+ *    process exits.
+ */
+export type KeepAwakeState = "disabled" | "active" | "degraded";
+export type KeepAwakeMethod = "caffeinate" | "systemd-inhibit" | "powershell";
+export interface KeepAwakeStatus {
+    /** Desired (persisted) state. */
+    enabled: boolean;
+    /** Actual state; `degraded` means enabled but the assertion is not held. */
+    state: KeepAwakeState;
+    method?: KeepAwakeMethod;
+    /** Present when degraded. Generic wording only — this string goes to phones. */
+    reason?: string;
+}
+export interface KeepAwakeControllerOptions {
+    platform?: NodeJS.Platform;
+    spawn?: typeof nodeSpawn;
+    log?: (level: "info" | "warn" | "error", message: string) => void;
+    onStatusChanged?: (status: KeepAwakeStatus) => void;
+    /** Respawn delays after unexpected child exit; the last entry repeats. */
+    retryBackoffMs?: number[];
+}
+export declare function getKeepAwakeCommand(platform: NodeJS.Platform): {
+    method: KeepAwakeMethod;
+    command: string;
+    args: string[];
+} | undefined;
+export declare class KeepAwakeController {
+    private readonly platform;
+    private readonly spawn;
+    private readonly log;
+    private readonly onStatusChanged?;
+    private readonly retryBackoffMs;
+    private enabled;
+    private state;
+    private reason;
+    private child;
+    /** Distinguishes exit events of the current child from already-replaced ones. */
+    private generation;
+    private retryTimer;
+    private retryIndex;
+    constructor(options?: KeepAwakeControllerOptions);
+    get status(): KeepAwakeStatus;
+    setEnabled(enabled: boolean): KeepAwakeStatus;
+    shutdown(): Promise<void>;
+    private setState;
+    private startChild;
+    private handleChildGone;
+    private stopChild;
+}
+//# sourceMappingURL=keep-awake.d.ts.map

package/dist/daemon/keep-awake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keep-awake.d.ts","sourceRoot":"","sources":["../../src/daemon/keep-awake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE3E;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC/B,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,KAAK,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,kFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACpD,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAiBD,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GACvB;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,SAAS,CA0B1E;AAED,qBAAa,mBAAmB;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA8D;IAClF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAoC;IACrE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAW;IAE1C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAA8B;IAC3C,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,KAAK,CAA2B;IACxC,iFAAiF;IACjF,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,UAAU,CAAK;IAEvB,YAAY,OAAO,GAAE,0BAA+B,EAMnD;IAED,IAAI,MAAM,IAAI,eAAe,CAQ5B;IAED,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,CAa5C;IAEK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAK9B;IAED,OAAO,CAAC,QAAQ;IAahB,OAAO,CAAC,UAAU;IAqClB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,SAAS;CA4BjB","sourcesContent":["import { type ChildProcess, spawn as nodeSpawn } from \"node:child_process\";\n\n/**\n * Cross-platform \"keep the host awake\" assertion held by voltd while enabled.\n * Zero native dependencies: each platform gets a long-lived child process whose\n * lifetime IS the assertion — killing the child releases it.\n *\n *  - darwin: `caffeinate -i -s` (idle + system sleep on AC; the display may\n *    still sleep). Lid-closed sleep on battery cannot be prevented.\n *  - linux: `systemd-inhibit --mode=block sleep infinity`; hosts without\n *    systemd degrade with a reason instead of failing.\n *  - win32: a PowerShell child that P/Invokes SetThreadExecutionState with\n *    ES_CONTINUOUS | ES_SYSTEM_REQUIRED; the OS clears the flag when the\n *    process exits.\n */\n\nexport type KeepAwakeState = \"disabled\" | \"active\" | \"degraded\";\nexport type KeepAwakeMethod = \"caffeinate\" | \"systemd-inhibit\" | \"powershell\";\n\nexport interface KeepAwakeStatus {\n\t/** Desired (persisted) state. */\n\tenabled: boolean;\n\t/** Actual state; `degraded` means enabled but the assertion is not held. */\n\tstate: KeepAwakeState;\n\tmethod?: KeepAwakeMethod;\n\t/** Present when degraded. Generic wording only — this string goes to phones. */\n\treason?: string;\n}\n\nexport interface KeepAwakeControllerOptions {\n\tplatform?: NodeJS.Platform;\n\tspawn?: typeof nodeSpawn;\n\tlog?: (level: \"info\" | \"warn\" | \"error\", message: string) => void;\n\tonStatusChanged?: (status: KeepAwakeStatus) => void;\n\t/** Respawn delays after unexpected child exit; the last entry repeats. */\n\tretryBackoffMs?: number[];\n}\n\n/**\n * SetThreadExecutionState(ES_CONTINUOUS | ES_SYSTEM_REQUIRED) = 0x80000001.\n * Exits non-zero when the call fails so the controller reports degraded.\n */\nconst WINDOWS_KEEP_AWAKE_SCRIPT = [\n\t\"Add-Type -Name KeepAwake -Namespace Volt -MemberDefinition '[DllImport(\\\"kernel32.dll\\\")] public static extern uint SetThreadExecutionState(uint esFlags);';\",\n\t\"if ([Volt.KeepAwake]::SetThreadExecutionState([uint32]'0x80000001') -eq 0) { exit 1 };\",\n\t\"while ($true) { Start-Sleep -Seconds 3600 }\",\n].join(\" \");\n\nconst DEFAULT_RETRY_BACKOFF_MS = [1_000, 5_000, 30_000];\nconst KILL_ESCALATION_MS = 2_000;\n/** A child alive this long is considered stable; the retry backoff resets. */\nconst STABLE_CHILD_MS = 60_000;\n\nexport function getKeepAwakeCommand(\n\tplatform: NodeJS.Platform,\n): { method: KeepAwakeMethod; command: string; args: string[] } | undefined {\n\tswitch (platform) {\n\t\tcase \"darwin\":\n\t\t\treturn { method: \"caffeinate\", command: \"/usr/bin/caffeinate\", args: [\"-i\", \"-s\"] };\n\t\tcase \"linux\":\n\t\t\treturn {\n\t\t\t\tmethod: \"systemd-inhibit\",\n\t\t\t\tcommand: \"systemd-inhibit\",\n\t\t\t\targs: [\n\t\t\t\t\t\"--what=sleep:idle\",\n\t\t\t\t\t\"--who=voltd\",\n\t\t\t\t\t\"--why=volt keep-awake enabled\",\n\t\t\t\t\t\"--mode=block\",\n\t\t\t\t\t\"sleep\",\n\t\t\t\t\t\"infinity\",\n\t\t\t\t],\n\t\t\t};\n\t\tcase \"win32\":\n\t\t\treturn {\n\t\t\t\tmethod: \"powershell\",\n\t\t\t\tcommand: \"powershell\",\n\t\t\t\targs: [\"-NoProfile\", \"-NonInteractive\", \"-Command\", WINDOWS_KEEP_AWAKE_SCRIPT],\n\t\t\t};\n\t\tdefault:\n\t\t\treturn undefined;\n\t}\n}\n\nexport class KeepAwakeController {\n\tprivate readonly platform: NodeJS.Platform;\n\tprivate readonly spawn: typeof nodeSpawn;\n\tprivate readonly log: (level: \"info\" | \"warn\" | \"error\", message: string) => void;\n\tprivate readonly onStatusChanged?: (status: KeepAwakeStatus) => void;\n\tprivate readonly retryBackoffMs: number[];\n\n\tprivate enabled = false;\n\tprivate state: KeepAwakeState = \"disabled\";\n\tprivate reason: string | undefined;\n\tprivate child: ChildProcess | undefined;\n\t/** Distinguishes exit events of the current child from already-replaced ones. */\n\tprivate generation = 0;\n\tprivate retryTimer: NodeJS.Timeout | undefined;\n\tprivate retryIndex = 0;\n\n\tconstructor(options: KeepAwakeControllerOptions = {}) {\n\t\tthis.platform = options.platform ?? process.platform;\n\t\tthis.spawn = options.spawn ?? nodeSpawn;\n\t\tthis.log = options.log ?? (() => {});\n\t\tthis.onStatusChanged = options.onStatusChanged;\n\t\tthis.retryBackoffMs = options.retryBackoffMs ?? DEFAULT_RETRY_BACKOFF_MS;\n\t}\n\n\tget status(): KeepAwakeStatus {\n\t\tconst method = getKeepAwakeCommand(this.platform)?.method;\n\t\treturn {\n\t\t\tenabled: this.enabled,\n\t\t\tstate: this.state,\n\t\t\t...(method === undefined ? {} : { method }),\n\t\t\t...(this.reason === undefined ? {} : { reason: this.reason }),\n\t\t};\n\t}\n\n\tsetEnabled(enabled: boolean): KeepAwakeStatus {\n\t\tif (enabled === this.enabled) {\n\t\t\treturn this.status;\n\t\t}\n\t\tthis.enabled = enabled;\n\t\tif (enabled) {\n\t\t\tthis.retryIndex = 0;\n\t\t\tthis.startChild();\n\t\t} else {\n\t\t\tthis.stopChild();\n\t\t\tthis.setState(\"disabled\", undefined);\n\t\t}\n\t\treturn this.status;\n\t}\n\n\tasync shutdown(): Promise<void> {\n\t\t// Releases the assertion but keeps `enabled` (persisted) untouched so a\n\t\t// restarted daemon re-applies it.\n\t\tthis.stopChild();\n\t\tthis.state = this.enabled ? \"degraded\" : \"disabled\";\n\t}\n\n\tprivate setState(state: KeepAwakeState, reason: string | undefined): void {\n\t\tif (state === this.state && reason === this.reason) {\n\t\t\treturn;\n\t\t}\n\t\tthis.state = state;\n\t\tthis.reason = reason;\n\t\ttry {\n\t\t\tthis.onStatusChanged?.(this.status);\n\t\t} catch {\n\t\t\t// Observers must never break the controller.\n\t\t}\n\t}\n\n\tprivate startChild(): void {\n\t\tconst command = getKeepAwakeCommand(this.platform);\n\t\tif (command === undefined) {\n\t\t\tthis.setState(\"degraded\", \"unsupported platform\");\n\t\t\treturn;\n\t\t}\n\t\tthis.generation += 1;\n\t\tconst generation = this.generation;\n\t\tlet child: ChildProcess;\n\t\ttry {\n\t\t\tchild = this.spawn(command.command, command.args, { stdio: [\"ignore\", \"ignore\", \"ignore\"] });\n\t\t} catch (error) {\n\t\t\tthis.log(\"error\", `spawn ${command.method} failed: ${String(error)}`);\n\t\t\tthis.handleChildGone(generation, `${command.method} unavailable`);\n\t\t\treturn;\n\t\t}\n\t\tchild.unref();\n\t\tthis.child = child;\n\t\tchild.on(\"error\", (error: NodeJS.ErrnoException) => {\n\t\t\tconst reason = error.code === \"ENOENT\" ? `${command.method} not found` : `${command.method} failed to start`;\n\t\t\tthis.log(\"error\", `${command.method} error: ${String(error)}`);\n\t\t\tthis.handleChildGone(generation, reason);\n\t\t});\n\t\tchild.on(\"exit\", (code, signal) => {\n\t\t\tthis.log(\"warn\", `${command.method} exited (code ${code ?? \"null\"}, signal ${signal ?? \"null\"})`);\n\t\t\tthis.handleChildGone(generation, `${command.method} exited`);\n\t\t});\n\t\tconst stableTimer = setTimeout(() => {\n\t\t\tif (generation === this.generation) {\n\t\t\t\tthis.retryIndex = 0;\n\t\t\t}\n\t\t}, STABLE_CHILD_MS);\n\t\tstableTimer.unref?.();\n\t\tthis.log(\"info\", `spawned ${command.method} (pid ${child.pid ?? \"?\"})`);\n\t\tthis.setState(\"active\", undefined);\n\t}\n\n\tprivate handleChildGone(generation: number, reason: string): void {\n\t\tif (generation !== this.generation || !this.enabled) {\n\t\t\treturn;\n\t\t}\n\t\tthis.child = undefined;\n\t\tthis.setState(\"degraded\", reason);\n\t\tconst delay = this.retryBackoffMs[Math.min(this.retryIndex, this.retryBackoffMs.length - 1)] ?? 30_000;\n\t\tthis.retryIndex += 1;\n\t\tthis.retryTimer = setTimeout(() => {\n\t\t\tthis.retryTimer = undefined;\n\t\t\tif (this.enabled) {\n\t\t\t\tthis.startChild();\n\t\t\t}\n\t\t}, delay);\n\t\tthis.retryTimer.unref?.();\n\t}\n\n\tprivate stopChild(): void {\n\t\tif (this.retryTimer !== undefined) {\n\t\t\tclearTimeout(this.retryTimer);\n\t\t\tthis.retryTimer = undefined;\n\t\t}\n\t\t// Bump the generation so the pending exit event of the killed child is stale.\n\t\tthis.generation += 1;\n\t\tconst child = this.child;\n\t\tthis.child = undefined;\n\t\tif (child === undefined || child.exitCode !== null || child.killed) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t\tconst escalate = setTimeout(() => {\n\t\t\t\ttry {\n\t\t\t\t\tif (child.exitCode === null) {\n\t\t\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Best-effort escalation.\n\t\t\t\t}\n\t\t\t}, KILL_ESCALATION_MS);\n\t\t\tescalate.unref?.();\n\t\t} catch {\n\t\t\t// Child already gone.\n\t\t}\n\t}\n}\n"]}

package/dist/daemon/keep-awake.js

@@ -0,0 +1,190 @@
+import { spawn as nodeSpawn } from "node:child_process";
+/**
+ * SetThreadExecutionState(ES_CONTINUOUS | ES_SYSTEM_REQUIRED) = 0x80000001.
+ * Exits non-zero when the call fails so the controller reports degraded.
+ */
+const WINDOWS_KEEP_AWAKE_SCRIPT = [
+    "Add-Type -Name KeepAwake -Namespace Volt -MemberDefinition '[DllImport(\"kernel32.dll\")] public static extern uint SetThreadExecutionState(uint esFlags);';",
+    "if ([Volt.KeepAwake]::SetThreadExecutionState([uint32]'0x80000001') -eq 0) { exit 1 };",
+    "while ($true) { Start-Sleep -Seconds 3600 }",
+].join(" ");
+const DEFAULT_RETRY_BACKOFF_MS = [1_000, 5_000, 30_000];
+const KILL_ESCALATION_MS = 2_000;
+/** A child alive this long is considered stable; the retry backoff resets. */
+const STABLE_CHILD_MS = 60_000;
+export function getKeepAwakeCommand(platform) {
+    switch (platform) {
+        case "darwin":
+            return { method: "caffeinate", command: "/usr/bin/caffeinate", args: ["-i", "-s"] };
+        case "linux":
+            return {
+                method: "systemd-inhibit",
+                command: "systemd-inhibit",
+                args: [
+                    "--what=sleep:idle",
+                    "--who=voltd",
+                    "--why=volt keep-awake enabled",
+                    "--mode=block",
+                    "sleep",
+                    "infinity",
+                ],
+            };
+        case "win32":
+            return {
+                method: "powershell",
+                command: "powershell",
+                args: ["-NoProfile", "-NonInteractive", "-Command", WINDOWS_KEEP_AWAKE_SCRIPT],
+            };
+        default:
+            return undefined;
+    }
+}
+export class KeepAwakeController {
+    platform;
+    spawn;
+    log;
+    onStatusChanged;
+    retryBackoffMs;
+    enabled = false;
+    state = "disabled";
+    reason;
+    child;
+    /** Distinguishes exit events of the current child from already-replaced ones. */
+    generation = 0;
+    retryTimer;
+    retryIndex = 0;
+    constructor(options = {}) {
+        this.platform = options.platform ?? process.platform;
+        this.spawn = options.spawn ?? nodeSpawn;
+        this.log = options.log ?? (() => { });
+        this.onStatusChanged = options.onStatusChanged;
+        this.retryBackoffMs = options.retryBackoffMs ?? DEFAULT_RETRY_BACKOFF_MS;
+    }
+    get status() {
+        const method = getKeepAwakeCommand(this.platform)?.method;
+        return {
+            enabled: this.enabled,
+            state: this.state,
+            ...(method === undefined ? {} : { method }),
+            ...(this.reason === undefined ? {} : { reason: this.reason }),
+        };
+    }
+    setEnabled(enabled) {
+        if (enabled === this.enabled) {
+            return this.status;
+        }
+        this.enabled = enabled;
+        if (enabled) {
+            this.retryIndex = 0;
+            this.startChild();
+        }
+        else {
+            this.stopChild();
+            this.setState("disabled", undefined);
+        }
+        return this.status;
+    }
+    async shutdown() {
+        // Releases the assertion but keeps `enabled` (persisted) untouched so a
+        // restarted daemon re-applies it.
+        this.stopChild();
+        this.state = this.enabled ? "degraded" : "disabled";
+    }
+    setState(state, reason) {
+        if (state === this.state && reason === this.reason) {
+            return;
+        }
+        this.state = state;
+        this.reason = reason;
+        try {
+            this.onStatusChanged?.(this.status);
+        }
+        catch {
+            // Observers must never break the controller.
+        }
+    }
+    startChild() {
+        const command = getKeepAwakeCommand(this.platform);
+        if (command === undefined) {
+            this.setState("degraded", "unsupported platform");
+            return;
+        }
+        this.generation += 1;
+        const generation = this.generation;
+        let child;
+        try {
+            child = this.spawn(command.command, command.args, { stdio: ["ignore", "ignore", "ignore"] });
+        }
+        catch (error) {
+            this.log("error", `spawn ${command.method} failed: ${String(error)}`);
+            this.handleChildGone(generation, `${command.method} unavailable`);
+            return;
+        }
+        child.unref();
+        this.child = child;
+        child.on("error", (error) => {
+            const reason = error.code === "ENOENT" ? `${command.method} not found` : `${command.method} failed to start`;
+            this.log("error", `${command.method} error: ${String(error)}`);
+            this.handleChildGone(generation, reason);
+        });
+        child.on("exit", (code, signal) => {
+            this.log("warn", `${command.method} exited (code ${code ?? "null"}, signal ${signal ?? "null"})`);
+            this.handleChildGone(generation, `${command.method} exited`);
+        });
+        const stableTimer = setTimeout(() => {
+            if (generation === this.generation) {
+                this.retryIndex = 0;
+            }
+        }, STABLE_CHILD_MS);
+        stableTimer.unref?.();
+        this.log("info", `spawned ${command.method} (pid ${child.pid ?? "?"})`);
+        this.setState("active", undefined);
+    }
+    handleChildGone(generation, reason) {
+        if (generation !== this.generation || !this.enabled) {
+            return;
+        }
+        this.child = undefined;
+        this.setState("degraded", reason);
+        const delay = this.retryBackoffMs[Math.min(this.retryIndex, this.retryBackoffMs.length - 1)] ?? 30_000;
+        this.retryIndex += 1;
+        this.retryTimer = setTimeout(() => {
+            this.retryTimer = undefined;
+            if (this.enabled) {
+                this.startChild();
+            }
+        }, delay);
+        this.retryTimer.unref?.();
+    }
+    stopChild() {
+        if (this.retryTimer !== undefined) {
+            clearTimeout(this.retryTimer);
+            this.retryTimer = undefined;
+        }
+        // Bump the generation so the pending exit event of the killed child is stale.
+        this.generation += 1;
+        const child = this.child;
+        this.child = undefined;
+        if (child === undefined || child.exitCode !== null || child.killed) {
+            return;
+        }
+        try {
+            child.kill("SIGTERM");
+            const escalate = setTimeout(() => {
+                try {
+                    if (child.exitCode === null) {
+                        child.kill("SIGKILL");
+                    }
+                }
+                catch {
+                    // Best-effort escalation.
+                }
+            }, KILL_ESCALATION_MS);
+            escalate.unref?.();
+        }
+        catch {
+            // Child already gone.
+        }
+    }
+}
+//# sourceMappingURL=keep-awake.js.map

package/dist/daemon/keep-awake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keep-awake.js","sourceRoot":"","sources":["../../src/daemon/keep-awake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAsC3E;;;GAGG;AACH,MAAM,yBAAyB,GAAG;IACjC,8JAA8J;IAC9J,wFAAwF;IACxF,6CAA6C;CAC7C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,8EAA8E;AAC9E,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,MAAM,UAAU,mBAAmB,CAClC,QAAyB,EACkD;IAC3E,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACrF,KAAK,OAAO;YACX,OAAO;gBACN,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,iBAAiB;gBAC1B,IAAI,EAAE;oBACL,mBAAmB;oBACnB,aAAa;oBACb,+BAA+B;oBAC/B,cAAc;oBACd,OAAO;oBACP,UAAU;iBACV;aACD,CAAC;QACH,KAAK,OAAO;YACX,OAAO;gBACN,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,yBAAyB,CAAC;aAC9E,CAAC;QACH;YACC,OAAO,SAAS,CAAC;IACnB,CAAC;AAAA,CACD;AAED,MAAM,OAAO,mBAAmB;IACd,QAAQ,CAAkB;IAC1B,KAAK,CAAmB;IACxB,GAAG,CAA8D;IACjE,eAAe,CAAqC;IACpD,cAAc,CAAW;IAElC,OAAO,GAAG,KAAK,CAAC;IAChB,KAAK,GAAmB,UAAU,CAAC;IACnC,MAAM,CAAqB;IAC3B,KAAK,CAA2B;IACxC,iFAAiF;IACzE,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,CAA6B;IACvC,UAAU,GAAG,CAAC,CAAC;IAEvB,YAAY,OAAO,GAA+B,EAAE,EAAE;QACrD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAAA,CACzE;IAED,IAAI,MAAM,GAAoB;QAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC1D,OAAO;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;SAC7D,CAAC;IAAA,CACF;IAED,UAAU,CAAC,OAAgB,EAAmB;QAC7C,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,MAAM,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QACnB,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IAAA,CACnB;IAED,KAAK,CAAC,QAAQ,GAAkB;QAC/B,wEAAwE;QACxE,kCAAkC;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAAA,CACpD;IAEO,QAAQ,CAAC,KAAqB,EAAE,MAA0B,EAAQ;QACzE,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC;YACJ,IAAI,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACR,6CAA6C;QAC9C,CAAC;IAAA,CACD;IAEO,UAAU,GAAS;QAC1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;YAClD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;YAClE,OAAO;QACR,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,kBAAkB,CAAC;YAC7G,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,WAAW,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAAA,CACzC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,iBAAiB,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC;YAClG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;QAAA,CAC7D,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YACpC,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;YACrB,CAAC;QAAA,CACD,EAAE,eAAe,CAAC,CAAC;QACpB,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC,MAAM,SAAS,KAAK,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAAA,CACnC;IAEO,eAAe,CAAC,UAAkB,EAAE,MAAc,EAAQ;QACjE,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACrD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QACvG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,CAAC;QAAA,CACD,EAAE,KAAK,CAAC,CAAC;QACV,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAAA,CAC1B;IAEO,SAAS,GAAS;QACzB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,8EAA8E;QAC9E,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpE,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACJ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;wBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACvB,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,0BAA0B;gBAC3B,CAAC;YAAA,CACD,EAAE,kBAAkB,CAAC,CAAC;YACvB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACR,sBAAsB;QACvB,CAAC;IAAA,CACD;CACD","sourcesContent":["import { type ChildProcess, spawn as nodeSpawn } from \"node:child_process\";\n\n/**\n * Cross-platform \"keep the host awake\" assertion held by voltd while enabled.\n * Zero native dependencies: each platform gets a long-lived child process whose\n * lifetime IS the assertion — killing the child releases it.\n *\n *  - darwin: `caffeinate -i -s` (idle + system sleep on AC; the display may\n *    still sleep). Lid-closed sleep on battery cannot be prevented.\n *  - linux: `systemd-inhibit --mode=block sleep infinity`; hosts without\n *    systemd degrade with a reason instead of failing.\n *  - win32: a PowerShell child that P/Invokes SetThreadExecutionState with\n *    ES_CONTINUOUS | ES_SYSTEM_REQUIRED; the OS clears the flag when the\n *    process exits.\n */\n\nexport type KeepAwakeState = \"disabled\" | \"active\" | \"degraded\";\nexport type KeepAwakeMethod = \"caffeinate\" | \"systemd-inhibit\" | \"powershell\";\n\nexport interface KeepAwakeStatus {\n\t/** Desired (persisted) state. */\n\tenabled: boolean;\n\t/** Actual state; `degraded` means enabled but the assertion is not held. */\n\tstate: KeepAwakeState;\n\tmethod?: KeepAwakeMethod;\n\t/** Present when degraded. Generic wording only — this string goes to phones. */\n\treason?: string;\n}\n\nexport interface KeepAwakeControllerOptions {\n\tplatform?: NodeJS.Platform;\n\tspawn?: typeof nodeSpawn;\n\tlog?: (level: \"info\" | \"warn\" | \"error\", message: string) => void;\n\tonStatusChanged?: (status: KeepAwakeStatus) => void;\n\t/** Respawn delays after unexpected child exit; the last entry repeats. */\n\tretryBackoffMs?: number[];\n}\n\n/**\n * SetThreadExecutionState(ES_CONTINUOUS | ES_SYSTEM_REQUIRED) = 0x80000001.\n * Exits non-zero when the call fails so the controller reports degraded.\n */\nconst WINDOWS_KEEP_AWAKE_SCRIPT = [\n\t\"Add-Type -Name KeepAwake -Namespace Volt -MemberDefinition '[DllImport(\\\"kernel32.dll\\\")] public static extern uint SetThreadExecutionState(uint esFlags);';\",\n\t\"if ([Volt.KeepAwake]::SetThreadExecutionState([uint32]'0x80000001') -eq 0) { exit 1 };\",\n\t\"while ($true) { Start-Sleep -Seconds 3600 }\",\n].join(\" \");\n\nconst DEFAULT_RETRY_BACKOFF_MS = [1_000, 5_000, 30_000];\nconst KILL_ESCALATION_MS = 2_000;\n/** A child alive this long is considered stable; the retry backoff resets. */\nconst STABLE_CHILD_MS = 60_000;\n\nexport function getKeepAwakeCommand(\n\tplatform: NodeJS.Platform,\n): { method: KeepAwakeMethod; command: string; args: string[] } | undefined {\n\tswitch (platform) {\n\t\tcase \"darwin\":\n\t\t\treturn { method: \"caffeinate\", command: \"/usr/bin/caffeinate\", args: [\"-i\", \"-s\"] };\n\t\tcase \"linux\":\n\t\t\treturn {\n\t\t\t\tmethod: \"systemd-inhibit\",\n\t\t\t\tcommand: \"systemd-inhibit\",\n\t\t\t\targs: [\n\t\t\t\t\t\"--what=sleep:idle\",\n\t\t\t\t\t\"--who=voltd\",\n\t\t\t\t\t\"--why=volt keep-awake enabled\",\n\t\t\t\t\t\"--mode=block\",\n\t\t\t\t\t\"sleep\",\n\t\t\t\t\t\"infinity\",\n\t\t\t\t],\n\t\t\t};\n\t\tcase \"win32\":\n\t\t\treturn {\n\t\t\t\tmethod: \"powershell\",\n\t\t\t\tcommand: \"powershell\",\n\t\t\t\targs: [\"-NoProfile\", \"-NonInteractive\", \"-Command\", WINDOWS_KEEP_AWAKE_SCRIPT],\n\t\t\t};\n\t\tdefault:\n\t\t\treturn undefined;\n\t}\n}\n\nexport class KeepAwakeController {\n\tprivate readonly platform: NodeJS.Platform;\n\tprivate readonly spawn: typeof nodeSpawn;\n\tprivate readonly log: (level: \"info\" | \"warn\" | \"error\", message: string) => void;\n\tprivate readonly onStatusChanged?: (status: KeepAwakeStatus) => void;\n\tprivate readonly retryBackoffMs: number[];\n\n\tprivate enabled = false;\n\tprivate state: KeepAwakeState = \"disabled\";\n\tprivate reason: string | undefined;\n\tprivate child: ChildProcess | undefined;\n\t/** Distinguishes exit events of the current child from already-replaced ones. */\n\tprivate generation = 0;\n\tprivate retryTimer: NodeJS.Timeout | undefined;\n\tprivate retryIndex = 0;\n\n\tconstructor(options: KeepAwakeControllerOptions = {}) {\n\t\tthis.platform = options.platform ?? process.platform;\n\t\tthis.spawn = options.spawn ?? nodeSpawn;\n\t\tthis.log = options.log ?? (() => {});\n\t\tthis.onStatusChanged = options.onStatusChanged;\n\t\tthis.retryBackoffMs = options.retryBackoffMs ?? DEFAULT_RETRY_BACKOFF_MS;\n\t}\n\n\tget status(): KeepAwakeStatus {\n\t\tconst method = getKeepAwakeCommand(this.platform)?.method;\n\t\treturn {\n\t\t\tenabled: this.enabled,\n\t\t\tstate: this.state,\n\t\t\t...(method === undefined ? {} : { method }),\n\t\t\t...(this.reason === undefined ? {} : { reason: this.reason }),\n\t\t};\n\t}\n\n\tsetEnabled(enabled: boolean): KeepAwakeStatus {\n\t\tif (enabled === this.enabled) {\n\t\t\treturn this.status;\n\t\t}\n\t\tthis.enabled = enabled;\n\t\tif (enabled) {\n\t\t\tthis.retryIndex = 0;\n\t\t\tthis.startChild();\n\t\t} else {\n\t\t\tthis.stopChild();\n\t\t\tthis.setState(\"disabled\", undefined);\n\t\t}\n\t\treturn this.status;\n\t}\n\n\tasync shutdown(): Promise<void> {\n\t\t// Releases the assertion but keeps `enabled` (persisted) untouched so a\n\t\t// restarted daemon re-applies it.\n\t\tthis.stopChild();\n\t\tthis.state = this.enabled ? \"degraded\" : \"disabled\";\n\t}\n\n\tprivate setState(state: KeepAwakeState, reason: string | undefined): void {\n\t\tif (state === this.state && reason === this.reason) {\n\t\t\treturn;\n\t\t}\n\t\tthis.state = state;\n\t\tthis.reason = reason;\n\t\ttry {\n\t\t\tthis.onStatusChanged?.(this.status);\n\t\t} catch {\n\t\t\t// Observers must never break the controller.\n\t\t}\n\t}\n\n\tprivate startChild(): void {\n\t\tconst command = getKeepAwakeCommand(this.platform);\n\t\tif (command === undefined) {\n\t\t\tthis.setState(\"degraded\", \"unsupported platform\");\n\t\t\treturn;\n\t\t}\n\t\tthis.generation += 1;\n\t\tconst generation = this.generation;\n\t\tlet child: ChildProcess;\n\t\ttry {\n\t\t\tchild = this.spawn(command.command, command.args, { stdio: [\"ignore\", \"ignore\", \"ignore\"] });\n\t\t} catch (error) {\n\t\t\tthis.log(\"error\", `spawn ${command.method} failed: ${String(error)}`);\n\t\t\tthis.handleChildGone(generation, `${command.method} unavailable`);\n\t\t\treturn;\n\t\t}\n\t\tchild.unref();\n\t\tthis.child = child;\n\t\tchild.on(\"error\", (error: NodeJS.ErrnoException) => {\n\t\t\tconst reason = error.code === \"ENOENT\" ? `${command.method} not found` : `${command.method} failed to start`;\n\t\t\tthis.log(\"error\", `${command.method} error: ${String(error)}`);\n\t\t\tthis.handleChildGone(generation, reason);\n\t\t});\n\t\tchild.on(\"exit\", (code, signal) => {\n\t\t\tthis.log(\"warn\", `${command.method} exited (code ${code ?? \"null\"}, signal ${signal ?? \"null\"})`);\n\t\t\tthis.handleChildGone(generation, `${command.method} exited`);\n\t\t});\n\t\tconst stableTimer = setTimeout(() => {\n\t\t\tif (generation === this.generation) {\n\t\t\t\tthis.retryIndex = 0;\n\t\t\t}\n\t\t}, STABLE_CHILD_MS);\n\t\tstableTimer.unref?.();\n\t\tthis.log(\"info\", `spawned ${command.method} (pid ${child.pid ?? \"?\"})`);\n\t\tthis.setState(\"active\", undefined);\n\t}\n\n\tprivate handleChildGone(generation: number, reason: string): void {\n\t\tif (generation !== this.generation || !this.enabled) {\n\t\t\treturn;\n\t\t}\n\t\tthis.child = undefined;\n\t\tthis.setState(\"degraded\", reason);\n\t\tconst delay = this.retryBackoffMs[Math.min(this.retryIndex, this.retryBackoffMs.length - 1)] ?? 30_000;\n\t\tthis.retryIndex += 1;\n\t\tthis.retryTimer = setTimeout(() => {\n\t\t\tthis.retryTimer = undefined;\n\t\t\tif (this.enabled) {\n\t\t\t\tthis.startChild();\n\t\t\t}\n\t\t}, delay);\n\t\tthis.retryTimer.unref?.();\n\t}\n\n\tprivate stopChild(): void {\n\t\tif (this.retryTimer !== undefined) {\n\t\t\tclearTimeout(this.retryTimer);\n\t\t\tthis.retryTimer = undefined;\n\t\t}\n\t\t// Bump the generation so the pending exit event of the killed child is stale.\n\t\tthis.generation += 1;\n\t\tconst child = this.child;\n\t\tthis.child = undefined;\n\t\tif (child === undefined || child.exitCode !== null || child.killed) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t\tconst escalate = setTimeout(() => {\n\t\t\t\ttry {\n\t\t\t\t\tif (child.exitCode === null) {\n\t\t\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Best-effort escalation.\n\t\t\t\t}\n\t\t\t}, KILL_ESCALATION_MS);\n\t\t\tescalate.unref?.();\n\t\t} catch {\n\t\t\t// Child already gone.\n\t\t}\n\t}\n}\n"]}

package/dist/daemon/lease-broker.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Conversation lease broker: the single authority on which process owns the
+ * live runtime for a (workspaceName, sessionId). Runtimes and relays are
+ * effects driven by its transitions. Runs single-threaded on the daemon event
+ * loop; every transition is a synchronous state mutation followed by async
+ * effects.
+ */
+export type LeaseState = "unowned" | "daemon-active" | "daemon-detached" | "daemon-draining" | "tui-owned";
+export type LeaseHandoff = "cold" | "warm" | "none";
+export type LeaseDenyReason = "held_by_tui" | "force_unsupported" | "draining_elsewhere";
+export type DaemonAttachRejectionReason = "tui_owned" | "draining";
+export type LeaseReleaseReason = "quit" | "switch" | "connection_lost" | "rekey" | "shutdown" | "retention_expired";
+export interface LeaseRecord {
+    key: string;
+    workspaceName: string;
+    sessionId: string;
+    state: LeaseState;
+    /** control connectionId of owning TUI when tui-owned / target of daemon-draining */
+    tuiConnectionId?: string;
+    /** live phone stream count when daemon-* */
+    streamCount: number;
+    /** active relayIds when tui-owned */
+    relayIds: Set<string>;
+    /** drain bookkeeping when daemon-draining */
+    drain?: {
+        viewerFeedId: string;
+        startedAtMs: number;
+        cancelled: boolean;
+        /**
+         * Runtime disposal has started; the drain can no longer revert to a
+         * daemon-owned state, so a cancellation must defer the final transition
+         * to runDrain's continuation.
+         */
+        disposing: boolean;
+        resolveGranted: (result: {
+            handoff: "warm";
+        }) => void;
+        rejectGranted: (error: Error) => void;
+    };
+    /** Provisional daemon runtime creations that have not committed ownership. */
+    pendingDaemonAttaches: number;
+    /** pending lazy-resume shared by racing attaches (daemon-active sub-flag) */
+    resuming?: Promise<void>;
+}
+export interface DaemonAttachClaim {
+    readonly id: string;
+    readonly workspaceName: string;
+    readonly sessionId?: string;
+}
+export type DaemonAttachBeginOutcome = {
+    kind: "proceed";
+    claim: DaemonAttachClaim;
+} | {
+    kind: "relay";
+    tuiConnectionId: string;
+} | {
+    kind: "retry";
+    retryAfterMs: number;
+};
+export type DaemonAttachCommitOutcome = {
+    ok: true;
+    previousState: LeaseState;
+} | {
+    ok: false;
+    reason: DaemonAttachRejectionReason;
+    tuiConnectionId?: string;
+};
+export type LeaseAcquireOutcome = {
+    kind: "granted";
+    handoff: LeaseHandoff;
+} | {
+    kind: "pending";
+    viewerFeedId: string;
+    granted: Promise<{
+        handoff: "warm";
+    }>;
+} | {
+    kind: "denied";
+    reason: LeaseDenyReason;
+};
+export interface LeaseBrokerEffects {
+    /** True when the daemon runtime for the key is mid-turn. */
+    isRuntimeStreaming(workspaceName: string, sessionId: string): boolean;
+    /** Resolves when the daemon runtime's current turn ends. */
+    waitForRuntimeIdle(workspaceName: string, sessionId: string): Promise<void>;
+    /** Dispose the daemon runtime through the normal dispose path (session_shutdown "quit"). */
+    disposeRuntime(workspaceName: string, sessionId: string, reason: string): Promise<void>;
+    /** Close daemon-attached phone streams for the key with the given reason. */
+    closePhoneStreams(workspaceName: string, sessionId: string, reason: string): Promise<void> | void;
+    /** Close open relays for a tui-owned lease. */
+    closeRelays(record: LeaseRecord, reason: "lease_transferred" | "session_rekeyed_reconnect" | "host_shutdown" | "error"): void;
+    onDrainStarted?(record: LeaseRecord, viewerFeedId: string): void;
+    onDrainEnded?(record: LeaseRecord, viewerFeedId: string, reason: "granted" | "cancelled" | "error"): void;
+    audit(event: {
+        type: "lease_acquired" | "lease_released" | "lease_denied";
+        workspaceName: string;
+        sessionId: string;
+        details: Record<string, unknown>;
+    }): void;
+    generateViewerFeedId?(): string;
+}
+export declare class LeaseBroker {
+    private readonly effects;
+    private readonly records;
+    constructor(effects: LeaseBrokerEffects);
+    lookup(workspaceName: string, sessionId: string): LeaseRecord | undefined;
+    list(): LeaseRecord[];
+    private getOrCreateRecord;
+    private dropIfUnowned;
+    beginDaemonAttach(workspaceName: string, sessionId: string | undefined): DaemonAttachBeginOutcome;
+    abortDaemonAttach(claim: DaemonAttachClaim): void;
+    commitDaemonRuntime(claim: DaemonAttachClaim, workspaceName: string, sessionId: string): DaemonAttachCommitOutcome;
+    rollbackDaemonRuntimeCommit(workspaceName: string, sessionId: string, previousState: LeaseState): void;
+    acquireForTui(request: {
+        connectionId: string;
+        workspaceName: string;
+        sessionId: string;
+        force?: boolean;
+    }): Promise<LeaseAcquireOutcome>;
+    private beginDrain;
+    private runDrain;
+    private cancelDrain;
+    releaseFromTui(connectionId: string, workspaceName: string, sessionId: string, reason?: LeaseReleaseReason): {
+        ok: true;
+    } | {
+        ok: false;
+        code: "not_held";
+    };
+    /** Connection died: implicit release of ALL leases held by connectionId. */
+    releaseAllForConnection(connectionId: string): void;
+    rekey(workspaceName: string, oldSessionId: string, newSessionId: string): void;
+    registerRelay(workspaceName: string, sessionId: string, relayId: string): void;
+    unregisterRelay(workspaceName: string, sessionId: string, relayId: string): void;
+    onDaemonRuntimeAttached(workspaceName: string, sessionId: string): void;
+    onDaemonRuntimeStreamCountChanged(workspaceName: string, sessionId: string, liveStreams: number): void;
+    onDaemonRuntimeDisposed(workspaceName: string, sessionId: string, reason: string): void;
+    isDraining(workspaceName: string, sessionId: string): boolean;
+}
+//# sourceMappingURL=lease-broker.d.ts.map

package/dist/daemon/lease-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease-broker.d.ts","sourceRoot":"","sources":["../../src/daemon/lease-broker.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAE3G,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AACzF,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,UAAU,CAAC;AAEnE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,iBAAiB,GAAG,OAAO,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAEpH,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,6CAA6C;IAC7C,KAAK,CAAC,EAAE;QACP,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;QACnB;;;;WAIG;QACH,SAAS,EAAE,OAAO,CAAC;QACnB,cAAc,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACtD,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KACtC,CAAC;IACF,8EAA8E;IAC9E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GACjC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,MAAM,MAAM,yBAAyB,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,UAAU,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,kBAAkB;IAClC,4DAA4D;IAC5D,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACtE,4DAA4D;IAC5D,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,4FAA4F;IAC5F,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,6EAA6E;IAC7E,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClG,+CAA+C;IAC/C,WAAW,CACV,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,mBAAmB,GAAG,2BAA2B,GAAG,eAAe,GAAG,OAAO,GACnF,IAAI,CAAC;IACR,cAAc,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,YAAY,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC;IAC1G,KAAK,CAAC,KAAK,EAAE;QACZ,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,cAAc,CAAC;QAC3D,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACjC,GAAG,IAAI,CAAC;IACT,oBAAoB,CAAC,IAAI,MAAM,CAAC;CAChC;AAQD,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,YAAY,OAAO,EAAE,kBAAkB,EAEtC;IAED,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAExE;IAED,IAAI,IAAI,WAAW,EAAE,CAEpB;IAED,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,aAAa;IAWrB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,wBAAwB,CAoBhG;IAED,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAUhD;IAED,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,yBAAyB,CA0BjH;IAED,2BAA2B,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,GAAG,IAAI,CAUrG;IAMK,aAAa,CAAC,OAAO,EAAE;QAC5B,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,OAAO,CAAC;KAChB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiH/B;IAED,OAAO,CAAC,UAAU;YAwBJ,QAAQ;IAgFtB,OAAO,CAAC,WAAW;IAqBnB,cAAc,CACb,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,kBAA2B,GACjC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CA0BhD;IAED,4EAA4E;IAC5E,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAUlD;IAED,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAiC7E;IAMD,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAK7E;IAED,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAM/E;IAMD,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAWtE;IAED,iCAAiC,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAWrG;IAED,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CA0BtF;IAED,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE5D;CACD","sourcesContent":["import { randomUUID } from \"node:crypto\";\n\n/**\n * Conversation lease broker: the single authority on which process owns the\n * live runtime for a (workspaceName, sessionId). Runtimes and relays are\n * effects driven by its transitions. Runs single-threaded on the daemon event\n * loop; every transition is a synchronous state mutation followed by async\n * effects.\n */\n\nexport type LeaseState = \"unowned\" | \"daemon-active\" | \"daemon-detached\" | \"daemon-draining\" | \"tui-owned\";\n\nexport type LeaseHandoff = \"cold\" | \"warm\" | \"none\";\n\nexport type LeaseDenyReason = \"held_by_tui\" | \"force_unsupported\" | \"draining_elsewhere\";\nexport type DaemonAttachRejectionReason = \"tui_owned\" | \"draining\";\n\nexport type LeaseReleaseReason = \"quit\" | \"switch\" | \"connection_lost\" | \"rekey\" | \"shutdown\" | \"retention_expired\";\n\nexport interface LeaseRecord {\n\tkey: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\tstate: LeaseState;\n\t/** control connectionId of owning TUI when tui-owned / target of daemon-draining */\n\ttuiConnectionId?: string;\n\t/** live phone stream count when daemon-* */\n\tstreamCount: number;\n\t/** active relayIds when tui-owned */\n\trelayIds: Set<string>;\n\t/** drain bookkeeping when daemon-draining */\n\tdrain?: {\n\t\tviewerFeedId: string;\n\t\tstartedAtMs: number;\n\t\tcancelled: boolean;\n\t\t/**\n\t\t * Runtime disposal has started; the drain can no longer revert to a\n\t\t * daemon-owned state, so a cancellation must defer the final transition\n\t\t * to runDrain's continuation.\n\t\t */\n\t\tdisposing: boolean;\n\t\tresolveGranted: (result: { handoff: \"warm\" }) => void;\n\t\trejectGranted: (error: Error) => void;\n\t};\n\t/** Provisional daemon runtime creations that have not committed ownership. */\n\tpendingDaemonAttaches: number;\n\t/** pending lazy-resume shared by racing attaches (daemon-active sub-flag) */\n\tresuming?: Promise<void>;\n}\n\nexport interface DaemonAttachClaim {\n\treadonly id: string;\n\treadonly workspaceName: string;\n\treadonly sessionId?: string;\n}\n\nexport type DaemonAttachBeginOutcome =\n\t| { kind: \"proceed\"; claim: DaemonAttachClaim }\n\t| { kind: \"relay\"; tuiConnectionId: string }\n\t| { kind: \"retry\"; retryAfterMs: number };\n\nexport type DaemonAttachCommitOutcome =\n\t| { ok: true; previousState: LeaseState }\n\t| { ok: false; reason: DaemonAttachRejectionReason; tuiConnectionId?: string };\n\nexport type LeaseAcquireOutcome =\n\t| { kind: \"granted\"; handoff: LeaseHandoff }\n\t| { kind: \"pending\"; viewerFeedId: string; granted: Promise<{ handoff: \"warm\" }> }\n\t| { kind: \"denied\"; reason: LeaseDenyReason };\n\nexport interface LeaseBrokerEffects {\n\t/** True when the daemon runtime for the key is mid-turn. */\n\tisRuntimeStreaming(workspaceName: string, sessionId: string): boolean;\n\t/** Resolves when the daemon runtime's current turn ends. */\n\twaitForRuntimeIdle(workspaceName: string, sessionId: string): Promise<void>;\n\t/** Dispose the daemon runtime through the normal dispose path (session_shutdown \"quit\"). */\n\tdisposeRuntime(workspaceName: string, sessionId: string, reason: string): Promise<void>;\n\t/** Close daemon-attached phone streams for the key with the given reason. */\n\tclosePhoneStreams(workspaceName: string, sessionId: string, reason: string): Promise<void> | void;\n\t/** Close open relays for a tui-owned lease. */\n\tcloseRelays(\n\t\trecord: LeaseRecord,\n\t\treason: \"lease_transferred\" | \"session_rekeyed_reconnect\" | \"host_shutdown\" | \"error\",\n\t): void;\n\tonDrainStarted?(record: LeaseRecord, viewerFeedId: string): void;\n\tonDrainEnded?(record: LeaseRecord, viewerFeedId: string, reason: \"granted\" | \"cancelled\" | \"error\"): void;\n\taudit(event: {\n\t\ttype: \"lease_acquired\" | \"lease_released\" | \"lease_denied\";\n\t\tworkspaceName: string;\n\t\tsessionId: string;\n\t\tdetails: Record<string, unknown>;\n\t}): void;\n\tgenerateViewerFeedId?(): string;\n}\n\nconst LEASE_TRANSFERRED_CLOSE_REASON = \"lease_transferred\";\n\nfunction getLeaseKey(workspaceName: string, sessionId: string): string {\n\treturn `${workspaceName}\\0${sessionId}`;\n}\n\nexport class LeaseBroker {\n\tprivate readonly effects: LeaseBrokerEffects;\n\tprivate readonly records = new Map<string, LeaseRecord>();\n\n\tconstructor(effects: LeaseBrokerEffects) {\n\t\tthis.effects = effects;\n\t}\n\n\tlookup(workspaceName: string, sessionId: string): LeaseRecord | undefined {\n\t\treturn this.records.get(getLeaseKey(workspaceName, sessionId));\n\t}\n\n\tlist(): LeaseRecord[] {\n\t\treturn Array.from(this.records.values());\n\t}\n\n\tprivate getOrCreateRecord(workspaceName: string, sessionId: string): LeaseRecord {\n\t\tconst key = getLeaseKey(workspaceName, sessionId);\n\t\tlet record = this.records.get(key);\n\t\tif (!record) {\n\t\t\trecord = {\n\t\t\t\tkey,\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId,\n\t\t\t\tstate: \"unowned\",\n\t\t\t\tstreamCount: 0,\n\t\t\t\trelayIds: new Set(),\n\t\t\t\tpendingDaemonAttaches: 0,\n\t\t\t};\n\t\t\tthis.records.set(key, record);\n\t\t}\n\t\treturn record;\n\t}\n\n\tprivate dropIfUnowned(record: LeaseRecord): void {\n\t\tif (\n\t\t\trecord.state === \"unowned\" &&\n\t\t\trecord.relayIds.size === 0 &&\n\t\t\trecord.streamCount === 0 &&\n\t\t\trecord.pendingDaemonAttaches === 0\n\t\t) {\n\t\t\tthis.records.delete(record.key);\n\t\t}\n\t}\n\n\tbeginDaemonAttach(workspaceName: string, sessionId: string | undefined): DaemonAttachBeginOutcome {\n\t\tconst claim: DaemonAttachClaim = {\n\t\t\tid: randomUUID(),\n\t\t\tworkspaceName,\n\t\t\t...(sessionId === undefined ? {} : { sessionId }),\n\t\t};\n\t\tif (sessionId === undefined) {\n\t\t\treturn { kind: \"proceed\", claim };\n\t\t}\n\t\tconst record = this.getOrCreateRecord(workspaceName, sessionId);\n\t\tif (record.state === \"tui-owned\" && record.tuiConnectionId) {\n\t\t\tthis.dropIfUnowned(record);\n\t\t\treturn { kind: \"relay\", tuiConnectionId: record.tuiConnectionId };\n\t\t}\n\t\tif (record.state === \"daemon-draining\") {\n\t\t\tthis.dropIfUnowned(record);\n\t\t\treturn { kind: \"retry\", retryAfterMs: 1000 };\n\t\t}\n\t\trecord.pendingDaemonAttaches++;\n\t\treturn { kind: \"proceed\", claim };\n\t}\n\n\tabortDaemonAttach(claim: DaemonAttachClaim): void {\n\t\tif (claim.sessionId === undefined) {\n\t\t\treturn;\n\t\t}\n\t\tconst record = this.lookup(claim.workspaceName, claim.sessionId);\n\t\tif (!record) {\n\t\t\treturn;\n\t\t}\n\t\trecord.pendingDaemonAttaches = Math.max(0, record.pendingDaemonAttaches - 1);\n\t\tthis.dropIfUnowned(record);\n\t}\n\n\tcommitDaemonRuntime(claim: DaemonAttachClaim, workspaceName: string, sessionId: string): DaemonAttachCommitOutcome {\n\t\tthis.abortDaemonAttach(claim);\n\t\tconst record = this.getOrCreateRecord(workspaceName, sessionId);\n\t\tif (record.state === \"tui-owned\") {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\treason: \"tui_owned\",\n\t\t\t\t...(record.tuiConnectionId ? { tuiConnectionId: record.tuiConnectionId } : {}),\n\t\t\t};\n\t\t}\n\t\tif (record.state === \"daemon-draining\") {\n\t\t\treturn { ok: false, reason: \"draining\" };\n\t\t}\n\t\tconst previousState = record.state;\n\t\tif (record.state === \"unowned\" || record.state === \"daemon-detached\") {\n\t\t\trecord.state = \"daemon-active\";\n\t\t\tthis.effects.audit({\n\t\t\t\ttype: \"lease_acquired\",\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId,\n\t\t\t\tdetails: { owner: \"daemon\", handoff: \"none\" },\n\t\t\t});\n\t\t} else if (record.state === \"daemon-active\") {\n\t\t\trecord.state = \"daemon-active\";\n\t\t}\n\t\treturn { ok: true, previousState };\n\t}\n\n\trollbackDaemonRuntimeCommit(workspaceName: string, sessionId: string, previousState: LeaseState): void {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (!record || record.state === \"tui-owned\" || record.state === \"daemon-draining\") {\n\t\t\treturn;\n\t\t}\n\t\trecord.state = previousState;\n\t\tif (previousState === \"unowned\") {\n\t\t\trecord.streamCount = 0;\n\t\t\tthis.dropIfUnowned(record);\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// TUI acquire / release / rekey\n\t// ==========================================================================\n\n\tasync acquireForTui(request: {\n\t\tconnectionId: string;\n\t\tworkspaceName: string;\n\t\tsessionId: string;\n\t\tforce?: boolean;\n\t}): Promise<LeaseAcquireOutcome> {\n\t\tconst { connectionId, workspaceName, sessionId } = request;\n\t\tif (request.force) {\n\t\t\tthis.effects.audit({\n\t\t\t\ttype: \"lease_denied\",\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId,\n\t\t\t\tdetails: { requester: connectionId, reason: \"force_unsupported\" },\n\t\t\t});\n\t\t\treturn { kind: \"denied\", reason: \"force_unsupported\" };\n\t\t}\n\t\tconst record = this.getOrCreateRecord(workspaceName, sessionId);\n\t\tswitch (record.state) {\n\t\t\tcase \"unowned\": {\n\t\t\t\trecord.state = \"tui-owned\";\n\t\t\t\trecord.tuiConnectionId = connectionId;\n\t\t\t\tthis.effects.audit({\n\t\t\t\t\ttype: \"lease_acquired\",\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\tsessionId,\n\t\t\t\t\tdetails: { owner: \"tui\", handoff: \"none\", connectionId },\n\t\t\t\t});\n\t\t\t\treturn { kind: \"granted\", handoff: \"none\" };\n\t\t\t}\n\t\t\tcase \"tui-owned\": {\n\t\t\t\tif (record.tuiConnectionId === connectionId) {\n\t\t\t\t\treturn { kind: \"granted\", handoff: \"none\" };\n\t\t\t\t}\n\t\t\t\tthis.effects.audit({\n\t\t\t\t\ttype: \"lease_denied\",\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\tsessionId,\n\t\t\t\t\tdetails: { requester: connectionId, reason: \"held_by_tui\" },\n\t\t\t\t});\n\t\t\t\treturn { kind: \"denied\", reason: \"held_by_tui\" };\n\t\t\t}\n\t\t\tcase \"daemon-draining\": {\n\t\t\t\tif (record.tuiConnectionId === connectionId && record.drain) {\n\t\t\t\t\tconst drain = record.drain;\n\t\t\t\t\treturn {\n\t\t\t\t\t\tkind: \"pending\",\n\t\t\t\t\t\tviewerFeedId: drain.viewerFeedId,\n\t\t\t\t\t\tgranted: new Promise((resolve, reject) => {\n\t\t\t\t\t\t\tconst previousResolve = drain.resolveGranted;\n\t\t\t\t\t\t\tconst previousReject = drain.rejectGranted;\n\t\t\t\t\t\t\tdrain.resolveGranted = (result) => {\n\t\t\t\t\t\t\t\tpreviousResolve(result);\n\t\t\t\t\t\t\t\tresolve(result);\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\tdrain.rejectGranted = (error) => {\n\t\t\t\t\t\t\t\tpreviousReject(error);\n\t\t\t\t\t\t\t\treject(error);\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tthis.effects.audit({\n\t\t\t\t\ttype: \"lease_denied\",\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\tsessionId,\n\t\t\t\t\tdetails: { requester: connectionId, reason: \"draining_elsewhere\" },\n\t\t\t\t});\n\t\t\t\treturn { kind: \"denied\", reason: \"draining_elsewhere\" };\n\t\t\t}\n\t\t\tcase \"daemon-detached\":\n\t\t\tcase \"daemon-active\": {\n\t\t\t\tif (this.effects.isRuntimeStreaming(workspaceName, sessionId)) {\n\t\t\t\t\t// A mid-turn runtime ALWAYS drains before the handoff, even when\n\t\t\t\t\t// every phone has detached. Disposing a busy runtime abandons the\n\t\t\t\t\t// turn: its results (including completed subagent work buffered in\n\t\t\t\t\t// an in-flight tool call) are never persisted, and the transcript\n\t\t\t\t\t// is left with a dangling tool call. The acquiring TUI watches the\n\t\t\t\t\t// rest of the turn through the drain viewer feed and is granted\n\t\t\t\t\t// ownership once the runtime goes idle; it can cancel the drain by\n\t\t\t\t\t// releasing (Esc/quit), which leaves the turn running on the daemon.\n\t\t\t\t\treturn this.beginDrain(record, connectionId);\n\t\t\t\t}\n\t\t\t\t// Idle: dispose and grant immediately.\n\t\t\t\t// The flip to tui-owned happens BEFORE disposal so the disposal's\n\t\t\t\t// onDaemonRuntimeDisposed callback no-ops (it is part of this grant).\n\t\t\t\trecord.state = \"tui-owned\";\n\t\t\t\trecord.tuiConnectionId = connectionId;\n\t\t\t\ttry {\n\t\t\t\t\tawait this.effects.disposeRuntime(workspaceName, sessionId, \"lease_transferred_to_tui\");\n\t\t\t\t\tawait this.effects.closePhoneStreams(workspaceName, sessionId, LEASE_TRANSFERRED_CLOSE_REASON);\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// Disposal failed after the premature tui-owned flip. Leaving the\n\t\t\t\t\t// lease tui-owned would strand the still-alive daemon runtime and\n\t\t\t\t\t// phone streams. Revert to a daemon-owned state and fail the acquire\n\t\t\t\t\t// (unless the connection already died and released the lease).\n\t\t\t\t\tif (record.state === \"tui-owned\" && record.tuiConnectionId === connectionId) {\n\t\t\t\t\t\trecord.state = record.streamCount > 0 ? \"daemon-active\" : \"daemon-detached\";\n\t\t\t\t\t\trecord.tuiConnectionId = undefined;\n\t\t\t\t\t}\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\trecord.streamCount = 0;\n\t\t\t\tif ((record.state as LeaseState) !== \"tui-owned\" || record.tuiConnectionId !== connectionId) {\n\t\t\t\t\t// The connection died while the disposal effects ran and the lease\n\t\t\t\t\t// was already released (releaseAllForConnection). The release path\n\t\t\t\t\t// audited; there is no live owner left to grant to.\n\t\t\t\t\tthis.dropIfUnowned(record);\n\t\t\t\t\treturn { kind: \"granted\", handoff: \"warm\" };\n\t\t\t\t}\n\t\t\t\tthis.effects.audit({\n\t\t\t\t\ttype: \"lease_acquired\",\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\tsessionId,\n\t\t\t\t\tdetails: { owner: \"tui\", handoff: \"warm\", connectionId },\n\t\t\t\t});\n\t\t\t\treturn { kind: \"granted\", handoff: \"warm\" };\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate beginDrain(record: LeaseRecord, connectionId: string): LeaseAcquireOutcome {\n\t\tconst viewerFeedId = this.effects.generateViewerFeedId?.() ?? `vf-${randomUUID()}`;\n\t\trecord.state = \"daemon-draining\";\n\t\trecord.tuiConnectionId = connectionId;\n\t\tlet resolveGranted: (result: { handoff: \"warm\" }) => void = () => {};\n\t\tlet rejectGranted: (error: Error) => void = () => {};\n\t\tconst granted = new Promise<{ handoff: \"warm\" }>((resolve, reject) => {\n\t\t\tresolveGranted = resolve;\n\t\t\trejectGranted = reject;\n\t\t});\n\t\tgranted.catch(() => {});\n\t\trecord.drain = {\n\t\t\tviewerFeedId,\n\t\t\tstartedAtMs: Date.now(),\n\t\t\tcancelled: false,\n\t\t\tdisposing: false,\n\t\t\tresolveGranted,\n\t\t\trejectGranted,\n\t\t};\n\t\tthis.effects.onDrainStarted?.(record, viewerFeedId);\n\t\tvoid this.runDrain(record);\n\t\treturn { kind: \"pending\", viewerFeedId, granted };\n\t}\n\n\tprivate async runDrain(record: LeaseRecord): Promise<void> {\n\t\tconst drain = record.drain;\n\t\tif (!drain) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tawait this.effects.waitForRuntimeIdle(record.workspaceName, record.sessionId);\n\t\t} catch (error) {\n\t\t\tif (!drain.cancelled && record.drain === drain) {\n\t\t\t\trecord.drain = undefined;\n\t\t\t\trecord.state = record.streamCount > 0 ? \"daemon-active\" : \"daemon-detached\";\n\t\t\t\trecord.tuiConnectionId = undefined;\n\t\t\t\tthis.effects.onDrainEnded?.(record, drain.viewerFeedId, \"error\");\n\t\t\t\tdrain.rejectGranted(error instanceof Error ? error : new Error(String(error)));\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\tif (drain.cancelled || record.drain !== drain) {\n\t\t\treturn;\n\t\t}\n\t\t// From here disposal is irreversible: record.drain stays set so a\n\t\t// cancellation landing during these awaits is visible afterwards, and\n\t\t// cancelDrain defers the final transition to this continuation.\n\t\tdrain.disposing = true;\n\t\ttry {\n\t\t\tawait this.effects.disposeRuntime(record.workspaceName, record.sessionId, \"lease_transferred_to_tui\");\n\t\t\tawait this.effects.closePhoneStreams(record.workspaceName, record.sessionId, LEASE_TRANSFERRED_CLOSE_REASON);\n\t\t} catch (error) {\n\t\t\t// This phase is otherwise unguarded, so a disposal failure (e.g. a\n\t\t\t// state-manager IO error) would wedge the lease in daemon-draining forever\n\t\t\t// and leave the acquiring TUI's grant promise unsettled. Recover: clear the\n\t\t\t// drain, settle the grant, and move to a state a later acquire can retry\n\t\t\t// from (unowned when the requester already gave up, else daemon-owned).\n\t\t\tif (record.drain === drain) {\n\t\t\t\trecord.drain = undefined;\n\t\t\t\trecord.tuiConnectionId = undefined;\n\t\t\t}\n\t\t\tif (drain.cancelled) {\n\t\t\t\t// Zero the stream count before dropping. dropIfUnowned requires\n\t\t\t\t// streamCount === 0, so leaving it stale here (the success path resets it\n\t\t\t\t// at the bottom of runDrain, but this early return skips that) would\n\t\t\t\t// strand the record in `records` as an undroppable \"unowned\" ghost that\n\t\t\t\t// then hands a phantom stream count to the next acquire.\n\t\t\t\trecord.streamCount = 0;\n\t\t\t\trecord.state = \"unowned\";\n\t\t\t\tthis.dropIfUnowned(record);\n\t\t\t} else {\n\t\t\t\trecord.state = record.streamCount > 0 ? \"daemon-active\" : \"daemon-detached\";\n\t\t\t\tthis.effects.onDrainEnded?.(record, drain.viewerFeedId, \"error\");\n\t\t\t\tdrain.rejectGranted(error instanceof Error ? error : new Error(String(error)));\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\trecord.drain = undefined;\n\t\trecord.streamCount = 0;\n\t\tif (drain.cancelled) {\n\t\t\t// The requesting connection died mid-disposal. The runtime is gone, so\n\t\t\t// the lease returns to unowned instead of granting to a dead owner.\n\t\t\trecord.state = \"unowned\";\n\t\t\trecord.tuiConnectionId = undefined;\n\t\t\tthis.effects.audit({\n\t\t\t\ttype: \"lease_released\",\n\t\t\t\tworkspaceName: record.workspaceName,\n\t\t\t\tsessionId: record.sessionId,\n\t\t\t\tdetails: { owner: \"daemon\", reason: \"connection_lost\", drainCancelledDuringDisposal: true },\n\t\t\t});\n\t\t\tthis.dropIfUnowned(record);\n\t\t\treturn;\n\t\t}\n\t\trecord.state = \"tui-owned\";\n\t\tthis.effects.onDrainEnded?.(record, drain.viewerFeedId, \"granted\");\n\t\tthis.effects.audit({\n\t\t\ttype: \"lease_acquired\",\n\t\t\tworkspaceName: record.workspaceName,\n\t\t\tsessionId: record.sessionId,\n\t\t\tdetails: { owner: \"tui\", handoff: \"warm\", connectionId: record.tuiConnectionId },\n\t\t});\n\t\tdrain.resolveGranted({ handoff: \"warm\" });\n\t}\n\n\tprivate cancelDrain(record: LeaseRecord): void {\n\t\tconst drain = record.drain;\n\t\tif (!drain || drain.cancelled) {\n\t\t\treturn;\n\t\t}\n\t\tdrain.cancelled = true;\n\t\tif (drain.disposing) {\n\t\t\t// Runtime disposal already started and cannot be reverted; fail the\n\t\t\t// grant now and let runDrain's continuation finish the transition\n\t\t\t// (to unowned) once the disposal effects settle.\n\t\t\tthis.effects.onDrainEnded?.(record, drain.viewerFeedId, \"cancelled\");\n\t\t\tdrain.rejectGranted(new Error(\"drain cancelled\"));\n\t\t\treturn;\n\t\t}\n\t\trecord.drain = undefined;\n\t\trecord.tuiConnectionId = undefined;\n\t\trecord.state = record.streamCount > 0 ? \"daemon-active\" : \"daemon-detached\";\n\t\tthis.effects.onDrainEnded?.(record, drain.viewerFeedId, \"cancelled\");\n\t\tdrain.rejectGranted(new Error(\"drain cancelled\"));\n\t}\n\n\treleaseFromTui(\n\t\tconnectionId: string,\n\t\tworkspaceName: string,\n\t\tsessionId: string,\n\t\treason: LeaseReleaseReason = \"quit\",\n\t): { ok: true } | { ok: false; code: \"not_held\" } {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (record?.state === \"daemon-draining\" && record.tuiConnectionId === connectionId) {\n\t\t\t// The requesting TUI is abandoning its own pending drain (a change of\n\t\t\t// mind). Cancel it rather than letting runDrain complete and force-grant\n\t\t\t// an unwanted warm lease — which would needlessly dispose the daemon\n\t\t\t// runtime and close every phone stream for a handoff no one wants.\n\t\t\tthis.cancelDrain(record);\n\t\t\tthis.dropIfUnowned(record);\n\t\t\treturn { ok: true };\n\t\t}\n\t\tif (!record || record.state !== \"tui-owned\" || record.tuiConnectionId !== connectionId) {\n\t\t\treturn { ok: false, code: \"not_held\" };\n\t\t}\n\t\tthis.effects.closeRelays(record, \"lease_transferred\");\n\t\trecord.relayIds.clear();\n\t\trecord.state = \"unowned\";\n\t\trecord.tuiConnectionId = undefined;\n\t\tthis.effects.audit({\n\t\t\ttype: \"lease_released\",\n\t\t\tworkspaceName,\n\t\t\tsessionId,\n\t\t\tdetails: { owner: \"tui\", reason, connectionId },\n\t\t});\n\t\tthis.dropIfUnowned(record);\n\t\treturn { ok: true };\n\t}\n\n\t/** Connection died: implicit release of ALL leases held by connectionId. */\n\treleaseAllForConnection(connectionId: string): void {\n\t\tfor (const record of Array.from(this.records.values())) {\n\t\t\tif (record.state === \"tui-owned\" && record.tuiConnectionId === connectionId) {\n\t\t\t\tthis.releaseFromTui(connectionId, record.workspaceName, record.sessionId, \"connection_lost\");\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (record.state === \"daemon-draining\" && record.tuiConnectionId === connectionId) {\n\t\t\t\tthis.cancelDrain(record);\n\t\t\t}\n\t\t}\n\t}\n\n\trekey(workspaceName: string, oldSessionId: string, newSessionId: string): void {\n\t\tif (oldSessionId === newSessionId) {\n\t\t\treturn;\n\t\t}\n\t\tconst record = this.lookup(workspaceName, oldSessionId);\n\t\tif (!record) {\n\t\t\treturn;\n\t\t}\n\t\tconst newKey = getLeaseKey(workspaceName, newSessionId);\n\t\tconst displaced = this.records.get(newKey);\n\t\tif (displaced) {\n\t\t\t// The target session id already has its own lease record. A destructive\n\t\t\t// rekey would either orphan `record` (its old key removed but never\n\t\t\t// re-inserted) or silently drop the live `displaced` record from all\n\t\t\t// lease accounting, stranding its runtime/streams/relays. Refuse instead\n\t\t\t// and leave both records on their current keys; the caller re-acquires\n\t\t\t// under the new id on its next reconnect.\n\t\t\tthis.effects.audit({\n\t\t\t\ttype: \"lease_denied\",\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId: newSessionId,\n\t\t\t\tdetails: { reason: \"rekey_target_in_use\", oldSessionId, displacedState: displaced.state },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tthis.records.delete(record.key);\n\t\trecord.sessionId = newSessionId;\n\t\trecord.key = newKey;\n\t\tthis.records.set(newKey, record);\n\t\tif (record.state === \"tui-owned\" && record.relayIds.size > 0) {\n\t\t\tthis.effects.closeRelays(record, \"session_rekeyed_reconnect\");\n\t\t\trecord.relayIds.clear();\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Relay bookkeeping (tui-owned)\n\t// ==========================================================================\n\n\tregisterRelay(workspaceName: string, sessionId: string, relayId: string): void {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (record?.state === \"tui-owned\") {\n\t\t\trecord.relayIds.add(relayId);\n\t\t}\n\t}\n\n\tunregisterRelay(workspaceName: string, sessionId: string, relayId: string): void {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (record) {\n\t\t\trecord.relayIds.delete(relayId);\n\t\t\tthis.dropIfUnowned(record);\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Daemon runtime lifecycle notifications\n\t// ==========================================================================\n\n\tonDaemonRuntimeAttached(workspaceName: string, sessionId: string): void {\n\t\tconst record = this.getOrCreateRecord(workspaceName, sessionId);\n\t\tif (record.state === \"unowned\" || record.state === \"daemon-detached\") {\n\t\t\trecord.state = \"daemon-active\";\n\t\t\tthis.effects.audit({\n\t\t\t\ttype: \"lease_acquired\",\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId,\n\t\t\t\tdetails: { owner: \"daemon\", handoff: \"none\" },\n\t\t\t});\n\t\t}\n\t}\n\n\tonDaemonRuntimeStreamCountChanged(workspaceName: string, sessionId: string, liveStreams: number): void {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (!record) {\n\t\t\treturn;\n\t\t}\n\t\trecord.streamCount = liveStreams;\n\t\tif (record.state === \"daemon-draining\" || record.state === \"tui-owned\" || record.state === \"unowned\") {\n\t\t\t// Drain completes regardless of stream count; tui-owned counts relays instead.\n\t\t\treturn;\n\t\t}\n\t\trecord.state = liveStreams > 0 ? \"daemon-active\" : \"daemon-detached\";\n\t}\n\n\tonDaemonRuntimeDisposed(workspaceName: string, sessionId: string, reason: string): void {\n\t\tconst record = this.lookup(workspaceName, sessionId);\n\t\tif (!record) {\n\t\t\treturn;\n\t\t}\n\t\tif (record.state === \"daemon-draining\") {\n\t\t\t// Disposal is part of the drain flow (or shutdown subsumed it); the drain\n\t\t\t// path handles its own transition.\n\t\t\treturn;\n\t\t}\n\t\tif (record.state === \"tui-owned\") {\n\t\t\t// The runtime disposal that accompanies an immediate grant.\n\t\t\treturn;\n\t\t}\n\t\trecord.streamCount = 0;\n\t\trecord.state = \"unowned\";\n\t\tthis.effects.audit({\n\t\t\ttype: \"lease_released\",\n\t\t\tworkspaceName,\n\t\t\tsessionId,\n\t\t\tdetails: {\n\t\t\t\towner: \"daemon\",\n\t\t\t\treason: reason === \"detached_runtime_ttl_expired\" ? \"retention_expired\" : reason,\n\t\t\t},\n\t\t});\n\t\tthis.dropIfUnowned(record);\n\t}\n\n\tisDraining(workspaceName: string, sessionId: string): boolean {\n\t\treturn this.lookup(workspaceName, sessionId)?.state === \"daemon-draining\";\n\t}\n}\n"]}