@harness-nexus/cli 0.1.0-alpha.2 → 0.1.0-alpha.4

package/dist/daemon/acp/adapters.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AA2BzD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,GAAG,IAAI,CAQhG"}
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAiCzD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,UAAU,GAAG,IAAI,CAQhG"}

package/dist/daemon/acp/adapters.js

@@ -9,9 +9,15 @@
  * tests at a fixture agent.
  */
 const DEFAULT_ACP_COMMANDS = {
-    // Official Zed adapter, now powered by the Claude Agent SDK (bundles the CLI;
-    // needs local Claude auth).
-    'claude-code': ['npx', '-y', '@zed-industries/claude-agent-acp'],
+    // The ACP project's official wrapper (took over from @zed-industries's
+    // 0.23.x, which the daemon shipped until 2026-09). Reason for the swap,
+    // rig-verified: the old wrapper never requests thinking on gateway/unknown
+    // models (MAX_THINKING_TOKENS on the adapter env didn't help either), so
+    // chat showed no thought stream; the official 0.76.0 streams
+    // agent_thought_chunk by default, advertises loadSession + list/resume
+    // (both caps shapes the daemon already detects), and returns full
+    // SessionInfo. Same switch the stable reference CC bridge runs.
+    'claude-code': ['npx', '-y', '@agentclientprotocol/claude-agent-acp'],
     // Official Zed adapter wrapping the OpenAI Codex CLI (needs `codex` on PATH).
     codex: ['npx', '-y', '@zed-industries/codex-acp'],
     // DeepSeek Harness ships a native ACP v1 profile (needs `dsh` on PATH and a

package/dist/daemon/acp/adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAkD;IAC1E,8EAA8E;IAC9E,4BAA4B;IAC5B,aAAa,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,kCAAkC,CAAC;IAChE,8EAA8E;IAC9E,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,2BAA2B,CAAC;IACjD,4EAA4E;IAC5E,kDAAkD;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACrC,yDAAyD;IACzD,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC;IACxC,KAAK,EAAE,IAAI,EAAE,oDAAoD;IACjE,OAAO,EAAE,IAAI;CACd,CAAC;AAOF,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,GAAsB;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC"}
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../../src/daemon/acp/adapters.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,oBAAoB,GAAkD;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,6DAA6D;IAC7D,uEAAuE;IACvE,kEAAkE;IAClE,gEAAgE;IAChE,aAAa,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,uCAAuC,CAAC;IACrE,8EAA8E;IAC9E,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,2BAA2B,CAAC;IACjD,4EAA4E;IAC5E,kDAAkD;IAClD,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;IACrC,yDAAyD;IACzD,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC;IACxC,KAAK,EAAE,IAAI,EAAE,oDAAoD;IACjE,OAAO,EAAE,IAAI;CACd,CAAC;AAOF,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,GAAsB;IAC3E,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/daemon/acp/agent-connection.d.ts

@@ -4,12 +4,51 @@ export type PermissionOutcome = {
 } | {
     outcome: 'cancelled';
 };
+/**
+ * A JSON-RPC request id, echoed VERBATIM when answering an agent-initiated
+ * request. Adapters disagree on the shape: the Zed wrappers count ints, but
+ * codex-acp sends UUIDs — so a `Number()` coercion turns its id into NaN and
+ * the encoded reply carries `"id":null`, which the agent cannot match (the
+ * permission then waits forever and the turn hangs).
+ */
+export type JsonRpcId = string | number | null;
 export interface AcpAgentInfo {
     name?: string | undefined;
     version?: string | undefined;
 }
+/** The resume-relevant slice of `agentCapabilities` (9 W7). */
+export interface AcpSessionCaps {
+    /** `session/load` — resume WITH history replay (claude/codex adapters). */
+    load: boolean;
+    /** `session/resume` — resume WITHOUT replay (dsh's native adapter). */
+    resume: boolean;
+    /** `session/list` exists (the claude/codex listing path). */
+    list: boolean;
+}
+/**
+ * Advertised caps decide the resume dialect (9 W7): prefer `session/load`
+ * (replay for free), fall back to `session/resume`. `loadSession` is the
+ * pre-capability legacy flag — and WHERE it sits differs by adapter family:
+ * the Zed adapters set it at the initialize RESULT ROOT, the official
+ * `@agentclientprotocol/claude-agent-acp` sets it NESTED inside
+ * `agentCapabilities.loadSession` while its `sessionCapabilities` has `resume`
+ * but NOT `load`. Reading only the root made the official wrapper look like a
+ * resume-only adapter — claude-code channels then resumed with NO replay
+ * ("opening a history session shows an empty pane").
+ */
+export declare function deriveSessionCaps(result: unknown): AcpSessionCaps;
+/**
+ * 9 W9 B — prompt-content capabilities from the initialize result. `image`
+ * gates the composer's attach affordance; dsh derives it per model route so
+ * a live channel may legitimately advertise false.
+ */
+export declare function derivePromptCaps(result: unknown): {
+    image: boolean;
+};
 export declare class AcpAgentConnection {
     private proc;
+    /** The detached leader's pid — which is also its process-group id. */
+    readonly pgid: number | null;
     private nextId;
     private pending;
     private stderrTail;
@@ -17,25 +56,49 @@ export declare class AcpAgentConnection {
     private onPermission;
     private exited;
     private constructor();
-    /** Spawn + `initialize` handshake + `initialized` notification. */
+    /**
+     * Spawn + `initialize` handshake + `initialized` notification.
+     *
+     * 9 W11 A — `onSpawned` fires synchronously right after the detached spawn
+     * (BEFORE initialize) so the caller can ledger the process group while the
+     * hard-death window is still open; a throwing callback kills the spawn and
+     * fails the start (an unledgered adapter is worse than a closed channel).
+     */
     static start(command: string, args: string[], opts: {
         cwd: string;
         env?: NodeJS.ProcessEnv | undefined;
         initializeTimeoutMs?: number;
+        onSpawned?: (pgid: number) => void;
     }): Promise<{
         conn: AcpAgentConnection;
         agentInfo: AcpAgentInfo;
+        sessionCaps: AcpSessionCaps;
+        promptCaps: {
+            image: boolean;
+        };
     }>;
     /** JSON-RPC request with a timeout; rejects on error/exit. */
     request(method: string, params: unknown, timeoutMs: number): Promise<unknown>;
     notify(method: string, params: unknown): void;
     /** Answer the agent's `session/request_permission` (optionId verbatim). */
-    respondPermission(jsonrpcId: number, outcome: PermissionOutcome): void;
+    respondPermission(jsonrpcId: JsonRpcId, outcome: PermissionOutcome): void;
     setNotificationHandler(handler: (method: string, params: Record<string, unknown>) => void): void;
-    setPermissionHandler(handler: (jsonrpcId: number, params: Record<string, unknown>) => void): void;
+    setPermissionHandler(handler: (jsonrpcId: JsonRpcId, params: Record<string, unknown>) => void): void;
     /** Fires when the subprocess exits on its own (crash/quit) — not on kill(). */
     onExit(handler: () => void): void;
-    /** SIGTERM, then SIGKILL after `graceMs`. Idempotent. */
+    /**
+     * Whether the process GROUP still exists (the audit's backstop — a session
+     * whose group died without the exit event reaching teardown).
+     */
+    isGroupAlive(): boolean;
+    /**
+     * SIGTERM the whole process GROUP, then SIGKILL it after `graceMs`.
+     * Idempotent. The group signal is the point: the direct child (npm/npx)
+     * dying does NOT take the wrapper and the vendor binary with it — they
+     * reparent to init and keep running. The timer is unref'd and NOT cleared
+     * on leader exit: grandchildren can outlive the leader, and the follow-up
+     * SIGKILL to a dead group is a caught ESRCH.
+     */
     kill(graceMs?: number): void;
     private handleLine;
     private send;

package/dist/daemon/acp/agent-connection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-connection.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,iBAAiB,GAC3B;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAe;IAC3B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,cAAc,CAA4E;IAClG,OAAO,CAAC,YAAY,CACb;IACP,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO;IAwBP,mEAAmE;WACtD,KAAK,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,GACvF,OAAO,CAAC;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,YAAY,CAAA;KAAE,CAAC;IAyBjE,8DAA8D;IAC9D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB7E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAI7C,2EAA2E;IAC3E,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAItE,sBAAsB,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI;IAIhG,oBAAoB,CAClB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACpE,IAAI;IAIP,+EAA+E;IAC/E,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAIjC,yDAAyD;IACzD,IAAI,CAAC,OAAO,SAAO,GAAG,IAAI;IAU1B,OAAO,CAAC,UAAU;IAuClB,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,gBAAgB;CAGzB"}
+{"version":3,"file":"agent-connection.d.ts","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,iBAAiB,GAC3B;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,IAAI,EAAE,OAAO,CAAC;IACd,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,CAcjE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAKpE;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,IAAI,CAAe;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,cAAc,CAA4E;IAClG,OAAO,CAAC,YAAY,CACb;IACP,OAAO,CAAC,MAAM,CAAS;IAEvB,OAAO;IAyBP;;;;;;;OAOG;WACU,KAAK,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;QACpC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KACpC,GACA,OAAO,CAAC;QACT,IAAI,EAAE,kBAAkB,CAAC;QACzB,SAAS,EAAE,YAAY,CAAC;QACxB,WAAW,EAAE,cAAc,CAAC;QAC5B,UAAU,EAAE;YAAE,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;KAChC,CAAC;IAyDF,8DAA8D;IAC9D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmB7E,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAI7C,2EAA2E;IAC3E,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAIzE,sBAAsB,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI;IAIhG,oBAAoB,CAClB,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACvE,IAAI;IAIP,+EAA+E;IAC/E,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI;IAIjC;;;OAGG;IACH,YAAY,IAAI,OAAO;IAIvB;;;;;;;OAOG;IACH,IAAI,CAAC,OAAO,SAAO,GAAG,IAAI;IAoB1B,OAAO,CAAC,UAAU;IA+ClB,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,gBAAgB;CAGzB"}

package/dist/daemon/acp/agent-connection.js

@@ -1,7 +1,41 @@
 import { spawn } from 'node:child_process';
 import { createInterface } from 'node:readline';
+import { groupIsAlive } from '../adapter-ledger.js';
+/**
+ * Advertised caps decide the resume dialect (9 W7): prefer `session/load`
+ * (replay for free), fall back to `session/resume`. `loadSession` is the
+ * pre-capability legacy flag — and WHERE it sits differs by adapter family:
+ * the Zed adapters set it at the initialize RESULT ROOT, the official
+ * `@agentclientprotocol/claude-agent-acp` sets it NESTED inside
+ * `agentCapabilities.loadSession` while its `sessionCapabilities` has `resume`
+ * but NOT `load`. Reading only the root made the official wrapper look like a
+ * resume-only adapter — claude-code channels then resumed with NO replay
+ * ("opening a history session shows an empty pane").
+ */
+export function deriveSessionCaps(result) {
+    const r = (result ?? {});
+    const caps = r.agentCapabilities?.sessionCapabilities ?? {};
+    return {
+        load: caps['load'] !== undefined ||
+            r.loadSession === true ||
+            r.agentCapabilities?.loadSession === true,
+        resume: caps['resume'] !== undefined,
+        list: caps['list'] !== undefined,
+    };
+}
+/**
+ * 9 W9 B — prompt-content capabilities from the initialize result. `image`
+ * gates the composer's attach affordance; dsh derives it per model route so
+ * a live channel may legitimately advertise false.
+ */
+export function derivePromptCaps(result) {
+    const r = (result ?? {});
+    return { image: r.agentCapabilities?.promptCapabilities?.image === true };
+}
 export class AcpAgentConnection {
     proc;
+    /** The detached leader's pid — which is also its process-group id. */
+    pgid;
     nextId = 1;
     pending = new Map();
     stderrTail = [];
@@ -10,6 +44,7 @@ export class AcpAgentConnection {
     exited = false;
     constructor(proc) {
         this.proc = proc;
+        this.pgid = proc.pid ?? null;
         const rl = createInterface({ input: proc.stdout });
         rl.on('line', (line) => this.handleLine(line));
         proc.stderr?.on('data', (chunk) => {
@@ -32,7 +67,14 @@ export class AcpAgentConnection {
             this.pending.clear();
         });
     }
-    /** Spawn + `initialize` handshake + `initialized` notification. */
+    /**
+     * Spawn + `initialize` handshake + `initialized` notification.
+     *
+     * 9 W11 A — `onSpawned` fires synchronously right after the detached spawn
+     * (BEFORE initialize) so the caller can ledger the process group while the
+     * hard-death window is still open; a throwing callback kills the spawn and
+     * fails the start (an unledgered adapter is worse than a closed channel).
+     */
     static async start(command, args, opts) {
         const initializeTimeoutMs = opts.initializeTimeoutMs ?? 20000;
         let proc;
@@ -41,6 +83,11 @@ export class AcpAgentConnection {
                 cwd: opts.cwd,
                 env: { ...process.env, ...(opts.env ?? {}) },
                 stdio: ['pipe', 'pipe', 'pipe'],
+                // Own process group: adapters spawn their own trees (npm → sh →
+                // wrapper → the vendor binary). Signaling only the direct child
+                // orphaned the grandchildren — a bare `claude` binary survived every
+                // teardown, parented to init. kill() takes the whole group down.
+                detached: true,
             });
         }
         catch (e) {
@@ -50,9 +97,34 @@ export class AcpAgentConnection {
         proc.on('error', (e) => {
             conn.failAll(new Error(`ACP adapter '${command}' failed: ${errText(e)}`));
         });
-        const result = (await conn.request('initialize', { protocolVersion: 1, clientCapabilities: {} }, initializeTimeoutMs));
+        if (opts.onSpawned !== undefined && proc.pid !== undefined) {
+            try {
+                opts.onSpawned(proc.pid);
+            }
+            catch (e) {
+                conn.kill();
+                throw new Error(`failed to ledger ACP adapter '${command}': ${errText(e)}`);
+            }
+        }
+        let result;
+        try {
+            result = (await conn.request('initialize', { protocolVersion: 1, clientCapabilities: {} }, initializeTimeoutMs));
+        }
+        catch (e) {
+            // The caller never receives this connection (start has not returned),
+            // so no one else would kill it — a timed-out/failed initialize must
+            // not leak the spawned group. This closes the pre-W11 leak where a
+            // hung initialize left a live adapter behind a dead channel.
+            conn.kill();
+            throw e;
+        }
         conn.notify('initialized', {});
-        return { conn, agentInfo: result?.agentInfo ?? {} };
+        return {
+            conn,
+            agentInfo: result?.agentInfo ?? {},
+            sessionCaps: deriveSessionCaps(result),
+            promptCaps: derivePromptCaps(result),
+        };
     }
     /** JSON-RPC request with a timeout; rejects on error/exit. */
     request(method, params, timeoutMs) {
@@ -90,14 +162,40 @@ export class AcpAgentConnection {
     onExit(handler) {
         this.proc.on('exit', handler);
     }
-    /** SIGTERM, then SIGKILL after `graceMs`. Idempotent. */
+    /**
+     * Whether the process GROUP still exists (the audit's backstop — a session
+     * whose group died without the exit event reaching teardown).
+     */
+    isGroupAlive() {
+        return this.pgid !== null && groupIsAlive(this.pgid);
+    }
+    /**
+     * SIGTERM the whole process GROUP, then SIGKILL it after `graceMs`.
+     * Idempotent. The group signal is the point: the direct child (npm/npx)
+     * dying does NOT take the wrapper and the vendor binary with it — they
+     * reparent to init and keep running. The timer is unref'd and NOT cleared
+     * on leader exit: grandchildren can outlive the leader, and the follow-up
+     * SIGKILL to a dead group is a caught ESRCH.
+     */
     kill(graceMs = 3000) {
         if (this.exited || this.proc.stdin === null)
             return;
         this.proc.removeAllListeners('exit');
-        const killTimer = setTimeout(() => this.proc.kill('SIGKILL'), graceMs);
-        this.proc.on('exit', () => clearTimeout(killTimer));
-        this.proc.kill('SIGTERM');
+        const pid = this.proc.pid;
+        const sigGroup = (sig) => {
+            if (pid === undefined)
+                return;
+            try {
+                process.kill(-pid, sig); // negative pid = the process group
+            }
+            catch {
+                // group already gone
+            }
+        };
+        const killTimer = setTimeout(() => sigGroup('SIGKILL'), graceMs);
+        killTimer.unref();
+        sigGroup('SIGTERM');
+        this.proc.kill('SIGTERM'); // the leader too (belt and braces)
         this.failAll(new Error('agent process killed'));
         this.exited = true;
     }
@@ -113,7 +211,7 @@ export class AcpAgentConnection {
             return; // agents log noise on stdout sometimes; skip non-JSON lines
         }
         if (msg.method === 'session/request_permission' && msg.id !== undefined) {
-            this.onPermission?.(Number(msg.id), msg.params ?? {});
+            this.onPermission?.(msg.id, msg.params ?? {});
             return;
         }
         if (msg.method !== undefined) {
@@ -129,7 +227,13 @@ export class AcpAgentConnection {
             this.pending.delete(Number(msg.id));
             clearTimeout(pending.timer);
             if (msg.error !== undefined) {
-                pending.reject(new Error(msg.error.message ?? 'ACP request failed'));
+                // Error `data` rides along — the callers key retry/surface logic off
+                // it. The detail FIELD differs per adapter dialect: dsh uses
+                // `data.details`, codex-acp uses `data.message` (its top-level
+                // message is a useless "Internal error").
+                const data = msg.error.data;
+                const details = [data?.message, data?.details].filter(Boolean).join(': ');
+                pending.reject(new Error(`${msg.error.message ?? 'ACP request failed'}${details ? `: ${details}` : ''}`));
             }
             else {
                 pending.resolve(msg.result);

package/dist/daemon/acp/agent-connection.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-connection.js","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAyBhD,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAe;IACnB,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,UAAU,GAAa,EAAE,CAAC;IAC1B,cAAc,GAAuE,IAAI,CAAC;IAC1F,YAAY,GAClB,IAAI,CAAC;IACC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,IAAkB;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAO,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,2DAA2D;YAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;wBAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACrF,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,OAAe,EACf,IAAc,EACd,IAAwF;QAExF,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC;QAC9D,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;gBAC5C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,OAAO,aAAa,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAChC,YAAY,EACZ,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAC9C,mBAAmB,CACpB,CAAiC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,8DAA8D;IAC9D,OAAO,CAAC,MAAc,EAAE,MAAe,EAAE,SAAiB;QACxD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,MAAM,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO;gBACP,MAAM;gBACN,KAAK,EAAE,KAAkC;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAe;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,iBAAiB,CAAC,SAAiB,EAAE,OAA0B;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,OAAkE;QACvF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,oBAAoB,CAClB,OAAqE;QAErE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,OAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,OAAO,GAAG,IAAI;QACjB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAC3B,IAAI,GAMH,CAAC;QACF,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,4DAA4D;QACtE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,4BAA4B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACxE,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,mEAAmE;QAC7E,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,OAAgB;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"agent-connection.js","sourceRoot":"","sources":["../../../src/daemon/acp/agent-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA4CpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAGtB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,IAAI,EACF,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS;YAC1B,CAAC,CAAC,WAAW,KAAK,IAAI;YACtB,CAAC,CAAC,iBAAiB,EAAE,WAAW,KAAK,IAAI;QAC3C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS;QACpC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAEtB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAe;IAC3B,sEAAsE;IAC7D,IAAI,CAAgB;IACrB,MAAM,GAAG,CAAC,CAAC;IACX,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC5C,UAAU,GAAa,EAAE,CAAC;IAC1B,cAAc,GAAuE,IAAI,CAAC;IAC1F,YAAY,GAClB,IAAI,CAAC;IACC,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAoB,IAAkB;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAO,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,2DAA2D;YAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;oBACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;oBAClC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;wBAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACrF,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAChB,OAAe,EACf,IAAc,EACd,IAKC;QAOD,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC;QAC9D,IAAI,IAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC1B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;gBAC5C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,gEAAgE;gBAChE,gEAAgE;gBAChE,qEAAqE;gBACrE,iEAAiE;gBACjE,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,gBAAgB,OAAO,aAAa,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,IAAI,MAIH,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAC1B,YAAY,EACZ,EAAE,eAAe,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAC9C,mBAAmB,CACpB,CAAkB,CAAC;QACtB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sEAAsE;YACtE,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;YAClC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;YACtC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,OAAO,CAAC,MAAc,EAAE,MAAe,EAAE,SAAiB;QACxD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,MAAM,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO;gBACP,MAAM;gBACN,KAAK,EAAE,KAAkC;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAe;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,iBAAiB,CAAC,SAAoB,EAAE,OAA0B;QAChE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,sBAAsB,CAAC,OAAkE;QACvF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,oBAAoB,CAClB,OAAwE;QAExE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,OAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,OAAO,GAAG,IAAI;QACjB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,GAAmB,EAAQ,EAAE;YAC7C,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO;YAC9B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,mCAAmC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,mCAAmC;QAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO;QAC3B,IAAI,GAMH,CAAC;QACF,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,4DAA4D;QACtE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,4BAA4B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACxE,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,mEAAmE;QAC7E,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,qEAAqE;gBACrE,6DAA6D;gBAC7D,+DAA+D;gBAC/D,0CAA0C;gBAC1C,MAAM,IAAI,GAAI,GAAG,CAAC,KAA2D,CAAC,IAAI,CAAC;gBACnF,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1E,OAAO,CAAC,MAAM,CACZ,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,OAAgB;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACpD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/daemon/adapter-ledger.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Adapter process ledger (Phase 9 W11 A) — the daemon's crash-proof account
+ * of every adapter process GROUP it created. One JSON file per live adapter
+ * under `~/.hnx/adapters/<wireSessionId>.json`:
+ *
+ *   { pgid, target, command, wireSessionId, nativeSessionId?, startedAt }
+ *
+ * Invariants:
+ * - The entry is written INSIDE `AcpAgentConnection.start`, right after the
+ *   detached spawn and BEFORE initialize — a hard death during establishment
+ *   still leaves a sweepable record (Principle: a crash may orphan a
+ *   process, never an UNACCOUNTED one).
+ * - Kill paths never unlink: files are removed ONLY by the periodic audit
+ *   (group gone) or the boot sweep. Removing at teardown would lose
+ *   accounting if the daemon hard-dies inside the SIGTERM→SIGKILL grace —
+ *   leaving the file lets the next boot's sweep finish the reap instead.
+ * - No secrets: the command name only (credentials live in the target's
+ *   native config, never in adapter argv/env).
+ * - One daemon per (user, home): a second daemon's boot sweep would reap the
+ *   first one's live adapters. Concurrent daemons on one home are already
+ *   unsupported (shared ~/.hnx/config.json, double job dispatch).
+ */
+export interface AdapterLedgerEntry {
+    /** The process-group id (the detached leader's pid). */
+    pgid: number;
+    target: string;
+    command: string;
+    wireSessionId: string;
+    nativeSessionId?: string;
+    startedAt: number;
+}
+export declare function adapterLedgerDir(home: string): string;
+export declare function writeAdapterLedgerEntry(home: string, entry: AdapterLedgerEntry): void;
+/** All valid entries (malformed files are skipped here, not deleted). */
+export declare function readAdapterLedger(home: string): AdapterLedgerEntry[];
+/**
+ * Whether the process GROUP still exists. EPERM (the group exists but is
+ * owned by someone else — pid reuse made it foreign) counts as NOT ours:
+ * every caller treats a false answer as "drop the file without signaling",
+ * so a foreign process is never killed on our word alone.
+ */
+export declare function groupIsAlive(pgid: number): boolean;
+/** SIGTERM the group, then SIGKILL after `graceMs` (unref'd — mirrors conn.kill). */
+export declare function killProcessGroup(pgid: number, graceMs?: number): void;
+/**
+ * Boot sweep — run ONCE at daemon start, before anything here can spawn a
+ * new adapter: every still-alive pgid in the ledger is a leftover from a
+ * previous instance's hard death (SIGKILL/OOM skip every teardown path; the
+ * detached groups survive it). Kills live groups, deletes every file.
+ * Returns what happened so the caller can log it.
+ */
+export declare function sweepAdapterLedger(home: string): {
+    reaped: number;
+    dropped: number;
+};
+/**
+ * Periodic audit — the ONLY runtime remover of ledger files: an entry whose
+ * group is gone (the adapter exited, or a teardown's kill completed) is
+ * deleted; live entries stay. Returns how many files were dropped.
+ */
+export declare function auditAdapterLedger(home: string): number;
+//# sourceMappingURL=adapter-ledger.d.ts.map

package/dist/daemon/adapter-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-ledger.d.ts","sourceRoot":"","sources":["../../src/daemon/adapter-ledger.ts"],"names":[],"mappings":"AAUA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,kBAAkB;IACjC,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAcrF;AAyBD,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAepE;AAiCD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAAO,GAAG,IAAI,CAWnE;AAsCD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAcpF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASvD"}

package/dist/daemon/adapter-ledger.js

@@ -0,0 +1,207 @@
+import { mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from 'node:fs';
+import { join } from 'node:path';
+/** Wire session ids are server-generated base64url-ish tokens. */
+const WIRE_ID = /^[A-Za-z0-9_-]{1,128}$/;
+/** Sanity bound — a daemon owns at most CHAT_MAX_SESSIONS_PER_MACHINE of these. */
+const MAX_FILES = 256;
+export function adapterLedgerDir(home) {
+    return join(home, '.hnx', 'adapters');
+}
+export function writeAdapterLedgerEntry(home, entry) {
+    if (!WIRE_ID.test(entry.wireSessionId)) {
+        throw new Error('refusing adapter ledger write: unsafe wire session id');
+    }
+    if (!Number.isInteger(entry.pgid) || entry.pgid <= 0) {
+        throw new Error(`refusing adapter ledger write: invalid pgid ${String(entry.pgid)}`);
+    }
+    const dir = adapterLedgerDir(home);
+    mkdirSync(dir, { recursive: true });
+    const file = join(dir, `${entry.wireSessionId}.json`);
+    const tmp = `${file}.tmp`;
+    writeFileSync(tmp, `${JSON.stringify(entry)}\n`, 'utf8');
+    // Atomic swap — a crash mid-write can never half-replace an entry.
+    renameSync(tmp, file);
+}
+/** Parse one ledger file; null = malformed (not an entry we ever wrote). */
+function parseEntry(file) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed['pgid'] === 'number' &&
+        Number.isInteger(parsed['pgid']) &&
+        parsed['pgid'] > 0 &&
+        typeof parsed['target'] === 'string' &&
+        typeof parsed['command'] === 'string' &&
+        typeof parsed['wireSessionId'] === 'string' &&
+        WIRE_ID.test(parsed['wireSessionId']) &&
+        typeof parsed['startedAt'] === 'number') {
+        return parsed;
+    }
+    return null;
+}
+/** All valid entries (malformed files are skipped here, not deleted). */
+export function readAdapterLedger(home) {
+    const dir = adapterLedgerDir(home);
+    let names;
+    try {
+        names = readdirSync(dir);
+    }
+    catch {
+        return []; // no ledger dir yet — nothing was ever spawned here
+    }
+    const out = [];
+    for (const name of names.slice(0, MAX_FILES)) {
+        if (!name.endsWith('.json'))
+            continue;
+        const entry = parseEntry(join(dir, name));
+        if (entry !== null)
+            out.push(entry);
+    }
+    return out;
+}
+/**
+ * Whether the process GROUP has at least one LIVE (non-zombie) member.
+ * `kill(-pgid, 0)` alone cannot tell: a ZOMBIE stays answerable forever,
+ * and on machines whose PID 1 does not reap (a bare docker CMD, nohup under
+ * a plain shell) orphaned grandchildren zombify and would pin their ledger
+ * entry past every audit. Linux /proc walk; where /proc is absent the
+ * kill() answer stands (conservative).
+ */
+function groupHasLiveMember(pgid) {
+    let names;
+    try {
+        names = readdirSync('/proc');
+    }
+    catch {
+        return true;
+    }
+    for (const name of names) {
+        if (!/^[0-9]+$/.test(name))
+            continue;
+        let stat;
+        try {
+            stat = readFileSync(`/proc/${name}/stat`, 'utf8');
+        }
+        catch {
+            continue; // raced an exit — the next call re-reads
+        }
+        // Fields after `(comm)`: state ppid pgrp … (comm may contain spaces).
+        const fields = stat.slice(stat.lastIndexOf(')') + 2).split(' ');
+        if (fields.length < 3)
+            continue;
+        if (Number.parseInt(fields[2], 10) === pgid && fields[0] !== 'Z')
+            return true;
+    }
+    return false;
+}
+/**
+ * Whether the process GROUP still exists. EPERM (the group exists but is
+ * owned by someone else — pid reuse made it foreign) counts as NOT ours:
+ * every caller treats a false answer as "drop the file without signaling",
+ * so a foreign process is never killed on our word alone.
+ */
+export function groupIsAlive(pgid) {
+    try {
+        process.kill(-pgid, 0);
+    }
+    catch {
+        return false;
+    }
+    return groupHasLiveMember(pgid);
+}
+/** SIGTERM the group, then SIGKILL after `graceMs` (unref'd — mirrors conn.kill). */
+export function killProcessGroup(pgid, graceMs = 3000) {
+    const sig = (s) => {
+        try {
+            process.kill(-pgid, s);
+        }
+        catch {
+            // group already gone
+        }
+    };
+    const t = setTimeout(() => sig('SIGKILL'), graceMs);
+    t.unref();
+    sig('SIGTERM');
+}
+function unlinkQuiet(home, wireSessionId) {
+    try {
+        unlinkSync(join(adapterLedgerDir(home), `${wireSessionId}.json`));
+    }
+    catch {
+        // already gone
+    }
+}
+/**
+ * Housekeeping shared by the sweep and the audit: junk files — a torn write,
+ * hand-dropped garbage, or a `.json.tmp` stranded by a hard death between
+ * the tmp write and the rename — must not accumulate.
+ */
+function dropJunkFiles(home) {
+    const dir = adapterLedgerDir(home);
+    let names;
+    try {
+        names = readdirSync(dir);
+    }
+    catch {
+        return 0;
+    }
+    let removed = 0;
+    for (const name of names.slice(0, MAX_FILES)) {
+        const isTmp = name.endsWith('.json.tmp');
+        if (!isTmp && !name.endsWith('.json'))
+            continue;
+        if (!isTmp && parseEntry(join(dir, name)) !== null)
+            continue;
+        try {
+            unlinkSync(join(dir, name));
+            removed++;
+        }
+        catch {
+            // racing writer — the next pass retries
+        }
+    }
+    return removed;
+}
+/**
+ * Boot sweep — run ONCE at daemon start, before anything here can spawn a
+ * new adapter: every still-alive pgid in the ledger is a leftover from a
+ * previous instance's hard death (SIGKILL/OOM skip every teardown path; the
+ * detached groups survive it). Kills live groups, deletes every file.
+ * Returns what happened so the caller can log it.
+ */
+export function sweepAdapterLedger(home) {
+    let reaped = 0;
+    let dropped = 0;
+    for (const entry of readAdapterLedger(home)) {
+        if (groupIsAlive(entry.pgid)) {
+            killProcessGroup(entry.pgid);
+            reaped++;
+        }
+        else {
+            dropped++;
+        }
+        unlinkQuiet(home, entry.wireSessionId);
+    }
+    dropJunkFiles(home);
+    return { reaped, dropped };
+}
+/**
+ * Periodic audit — the ONLY runtime remover of ledger files: an entry whose
+ * group is gone (the adapter exited, or a teardown's kill completed) is
+ * deleted; live entries stay. Returns how many files were dropped.
+ */
+export function auditAdapterLedger(home) {
+    let dropped = 0;
+    for (const entry of readAdapterLedger(home)) {
+        if (!groupIsAlive(entry.pgid)) {
+            unlinkQuiet(home, entry.wireSessionId);
+            dropped++;
+        }
+    }
+    return dropped + dropJunkFiles(home);
+}
+//# sourceMappingURL=adapter-ledger.js.map