@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/autosave-cleanup.js

@@ -0,0 +1,87 @@
+import { windowsAutosaveProcessLive, windowsAutosaveProcessToken } from './autosave-windows.js';
+import { autosaveGroupAliveSync } from './autosave-group.js';
+import { randomUUID } from 'node:crypto';
+import { closeSync, constants, fsyncSync, lstatSync, openSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { processesWithCwdUnder, processStartToken, processPredatesCurrentBoot, recordedProcessLive } from './delegation/process-liveness.js';
+const processSchema = z.object({ pid: z.number().int().positive(), startToken: z.string().optional() });
+/** Private safety evidence, independent of the run store's ownership/session lifetime. */
+const cleanupSchema = z.object({
+    version: z.literal(1), cwd: z.string().min(1), controller: processSchema,
+    processes: z.array(processSchema), groups: z.array(z.number().int().min(2)),
+    uncertain: z.boolean(), message: z.string(),
+});
+const processLive = (entry) => process.platform === 'win32' ? windowsAutosaveProcessLive(entry) : recordedProcessLive(entry);
+const pathFor = (dataDir, id) => join(dataDir, 'runs', `${z.uuid().parse(id)}.autosave-cleanup.json`);
+/** Write before releasing execution. A failed write never authorizes settlement. */
+export function retainAutosaveCleanup(dataDir, id, cwd, message, proof) {
+    const path = pathFor(dataDir, id);
+    const record = cleanupSchema.parse({ version: 1, cwd, message, ...proof,
+        controller: { pid: process.pid, startToken: process.platform === 'win32' ? windowsAutosaveProcessToken(process.pid) : processStartToken(process.pid) } });
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    const fd = openSync(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        writeFileSync(fd, JSON.stringify(record));
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(temporary, path);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+export function clearAutosaveCleanup(dataDir, id) {
+    // Legacy history IDs cannot own this UUID-scoped optional evidence.
+    if (!z.uuid().safeParse(id).success)
+        return;
+    rmSync(pathFor(dataDir, id), { force: true });
+}
+/** Names reserve orphan scratch even when its run row is no longer loaded. */
+export function autosaveCleanupIds(dataDir) {
+    try {
+        return readdirSync(join(dataDir, 'runs')).flatMap(name => {
+            const id = name.replace(/\.autosave-cleanup\.json$/, '');
+            return id !== name && z.uuid().safeParse(id).success && autosaveCleanupBlocker(dataDir, id) ? [id] : [];
+        });
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Synchronous admission/cleanup proof, with no signalling or invented timeout release. */
+export function autosaveCleanupBlocker(dataDir, id) {
+    if (!z.uuid().safeParse(id).success)
+        return undefined;
+    const path = pathFor(dataDir, id);
+    let record;
+    try {
+        const stat = lstatSync(path);
+        if (!stat.isFile() || stat.isSymbolicLink())
+            return 'autosave cleanup evidence unreadable; worktree reuse blocked';
+        record = cleanupSchema.parse(JSON.parse(readFileSync(path, 'utf8')));
+    }
+    catch (error) {
+        return error.code === 'ENOENT' ? undefined : 'autosave cleanup evidence unreadable; worktree reuse blocked';
+    }
+    // A live controller continues observing identities and ancestry, including
+    // holders that move cwd. Closing its store is not evidence that cleanup ended.
+    if (processLive(record.controller))
+        return record.message;
+    const pids = record.processes.filter(processLive).map(entry => entry.pid);
+    const groups = processPredatesCurrentBoot(record.controller) ? [] : record.groups.filter(autosaveGroupAliveSync);
+    const holders = processesWithCwdUnder(record.cwd);
+    if (record.uncertain || pids.length || groups.length || holders === 'unknown' || holders.length) {
+        return `autosave cleanup pending; retained PIDs: ${[...new Set([...pids, ...(holders === 'unknown' ? [] : holders)])].join(', ') || 'none'}; ` +
+            `process groups: ${groups.join(', ') || 'none'}${record.uncertain || holders === 'unknown' ? '; process inspection uncertain' : ''}; worktree reuse blocked`;
+    }
+    // Reads never unlink evidence: another process may have published a newer
+    // save while this snapshot was being probed. Expired bytes are nonblocking;
+    // the next owned save atomically replaces them, or history deletion removes them.
+    return undefined;
+}
+//# sourceMappingURL=autosave-cleanup.js.map

package/dist/autosave-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autosave-cleanup.js","sourceRoot":"","sources":["../src/autosave-cleanup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7I,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE7I,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACxG,0FAA0F;AAC1F,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa;IACxE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,KAAuD,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC/K,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC;AAEtH,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,EAAU,EAAE,GAAW,EAAE,OAAe,EAAE,KAA2B;IAC1H,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK;QACrE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5J,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACxH,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YACzD,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC1B,IAAI,CAAC;QAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YAC5B,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,EAAU;IAC9D,oEAAoE;IACpE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO;QAAE,OAAO;IAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QAAC,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACnC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,EAAU;IAChE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO,8DAA8D,CAAC;QACnH,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8DAA8D,CAAC;IACzI,CAAC;IACD,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAChG,OAAO,4CAA4C,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;YAC5I,mBAAmB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,0BAA0B,CAAC;IACjK,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,kFAAkF;IAClF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/autosave-git.d.ts

@@ -0,0 +1,23 @@
+import type { AutosaveCleanupProof } from './autosave-cleanup.ts';
+/** The legacy marker stays present for process-attribution readers during the rename. */
+export declare function autosaveOwnerEnv(marker: string, source?: NodeJS.ProcessEnv, rebrand?: boolean): NodeJS.ProcessEnv;
+/** Internal budgets, shared by every autosave command; no user configuration required. */
+export interface AutosaveOptions {
+    timeoutMs?: number;
+    killGraceMs?: number;
+    confirmMs?: number;
+    onWarning?: (message: string) => void;
+    /** Cleanup is still pending. Callers may settle execution only under a separate worktree hold. */
+    onBlocked?: (message: string, proof: AutosaveCleanupProof) => void;
+}
+/**
+ * Timeout starts shutdown, never completion. The returned promise retains the
+ * caller's worktree guard until both the leader and its process group are gone.
+ * If the OS cannot prove termination, report it and keep observing; no timer
+ * fabricates permission for another writer. Commands never reset/remove files.
+ */
+export declare function autosaveGit(cwd: string, args: string[], options: AutosaveOptions): Promise<{
+    ok: boolean;
+    stdout: string;
+    code: number | null;
+}>;

package/dist/autosave-git.js

@@ -0,0 +1,211 @@
+import { logPrefix } from './home/display.js';
+import { productEnvEntries } from './core/product-env.js';
+import { autosaveGroupExists, autosaveGroupSnapshotAlive, groupInspectionFailed } from './autosave-group.js';
+import { processStartToken } from './delegation/process-liveness.js';
+import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { readdir, readFile } from 'node:fs/promises';
+import { watchAutosaveHolders } from './autosave-holders.js';
+import { watchWindowsAutosave } from './autosave-windows.js';
+/** The legacy marker stays present for process-attribution readers during the rename. */
+export function autosaveOwnerEnv(marker, source = process.env, rebrand) {
+    const kept = Object.fromEntries(Object.entries(source).filter(([name]) => !/^(CEZ|HSQ)_AUTOSAVE_OWNER$/i.test(name)));
+    return { ...kept, ...productEnvEntries('AUTOSAVE_OWNER', marker, rebrand) };
+}
+/** Transcript warnings while cleanup is blocked; the durable proof still follows every change. */
+const BLOCKED_WARNINGS = 3;
+/** A group consisting only of zombies cannot write, even before init reaps it. */
+async function groupAlive(pid, diagnostic) {
+    const uncertain = (error) => groupInspectionFailed(pid, error, diagnostic);
+    if (!autosaveGroupExists(pid, diagnostic))
+        return false;
+    if (process.platform !== 'linux') {
+        diagnostic(`process group ${pid} alive`);
+        return true;
+    }
+    try {
+        const stats = [];
+        for (const entry of await readdir('/proc')) {
+            if (!/^\d+$/.test(entry))
+                continue;
+            try {
+                stats.push(await readFile(`/proc/${entry}/stat`, 'utf8'));
+            }
+            catch (error) {
+                if (error.code === 'ENOENT')
+                    continue;
+                uncertain(error);
+                return true;
+            }
+        }
+        return autosaveGroupSnapshotAlive(pid, stats, diagnostic);
+    }
+    catch (error) {
+        uncertain(error);
+        return true;
+    }
+}
+/**
+ * Timeout starts shutdown, never completion. The returned promise retains the
+ * caller's worktree guard until both the leader and its process group are gone.
+ * If the OS cannot prove termination, report it and keep observing; no timer
+ * fabricates permission for another writer. Commands never reset/remove files.
+ */
+export async function autosaveGit(cwd, args, options) {
+    const windows = process.platform === 'win32' ? await watchWindowsAutosave() : undefined;
+    const marker = randomUUID();
+    let leader;
+    const holdersAlive = process.platform === 'win32' ? (windows ? Object.assign(async () => false, { diagnostics: () => ({ pids: [], processes: [], inspectionFailed: false }) }) : undefined) : await watchAutosaveHolders(cwd, { marker, root: () => leader });
+    return new Promise((resolve) => {
+        const timeoutMs = options.timeoutMs ?? 30_000;
+        const killGraceMs = options.killGraceMs ?? 1_000;
+        const confirmMs = options.confirmMs ?? 2_000;
+        const warn = (message) => {
+            const text = `autosave git ${args[0]} in ${cwd}: ${message}`;
+            console.warn(`${logPrefix()} ${text}`);
+            try {
+                options.onWarning?.(text);
+            }
+            catch { /* Reporting must not interrupt shutdown. */ }
+        };
+        if (!holdersAlive) {
+            warn('cannot inspect worktree processes; save unsuccessful, no Git command started');
+            resolve({ ok: false, stdout: '', code: null });
+            return;
+        }
+        const grouped = process.platform !== 'win32';
+        // Git maintenance detaches and may move to the shared git directory.
+        // Suppress it for this command only; never rewrite the repository config.
+        const child = spawn('git', ['-c', 'gc.auto=0', '-c', 'maintenance.auto=false', ...args], {
+            cwd, detached: grouped, stdio: ['ignore', 'pipe', 'pipe'], env: autosaveOwnerEnv(marker),
+        });
+        leader = child.pid;
+        let stdout = '';
+        let bytes = 0;
+        let exited = false;
+        let closed = false;
+        let code = null;
+        let aborted = false;
+        let finished = false;
+        let checking = false;
+        let blocked = false;
+        let lastBlocker = '';
+        let blockedWarnings = 0;
+        let groupDiagnostic = 'process inspection pending';
+        let groupPending = true;
+        const leaderToken = child.pid === undefined ? undefined : processStartToken(child.pid);
+        const reportBlocked = () => {
+            if (!blocked || finished)
+                return;
+            const holders = holdersAlive.diagnostics();
+            const message = `termination not confirmed; Git PID ${child.pid ?? 'unknown'} ${exited ? 'exited' : 'has not exited'}; ${groupDiagnostic}; ` +
+                `${holders.inspectionFailed ? 'cwd inspection failed; ' : ''}retained cwd holder PIDs: ${holders.pids.join(', ') || 'none'}; worktree reuse blocked until cleanup is confirmed`;
+            const proof = windows ? windows.cleanupProof() : {
+                processes: [...holders.processes, ...(!exited && child.pid !== undefined ? [{ pid: child.pid, startToken: leaderToken }] : [])],
+                groups: groupPending && child.pid !== undefined ? [child.pid] : [], uncertain: !exited && child.pid === undefined,
+            };
+            const signature = JSON.stringify({ message, proof });
+            if (signature === lastBlocker)
+                return;
+            lastBlocker = signature;
+            // Changing descendant PIDs must not flood the transcript (hearsay-tools/cezarion#958).
+            if (blockedWarnings < BLOCKED_WARNINGS)
+                warn(message);
+            else if (blockedWarnings === BLOCKED_WARNINGS)
+                warn('further cleanup changes suppressed until cleanup is confirmed; worktree reuse stays blocked');
+            blockedWarnings++;
+            try {
+                options.onBlocked?.(message, proof);
+            }
+            catch { /* Retain cleanup if the caller cannot take its own hold. */ }
+        };
+        let killTimer;
+        let confirmTimer;
+        let pollTimer;
+        const signal = (name) => {
+            if (finished || child.pid === undefined)
+                return;
+            try {
+                if (windows)
+                    windows.stop(name === 'SIGKILL');
+                else
+                    process.kill(-child.pid, name);
+            }
+            catch { /* The observation below, not signal delivery, proves termination. */ }
+        };
+        const finish = () => {
+            finished = true;
+            clearTimeout(deadline);
+            clearTimeout(killTimer);
+            clearTimeout(confirmTimer);
+            clearTimeout(pollTimer);
+            child.stdout.destroy();
+            child.stderr.destroy();
+            resolve({ ok: !aborted && code === 0, stdout, code: aborted ? null : code });
+        };
+        const observe = async () => {
+            if (finished || checking)
+                return;
+            clearTimeout(pollTimer);
+            checking = true;
+            // A failed spawn owns no process. Signals never substitute for observation.
+            const alive = child.pid !== undefined && (windows ? await windows.alive(child.pid, () => exited) : await groupAlive(child.pid, message => { groupDiagnostic = message; }));
+            groupPending = alive;
+            if (!alive)
+                groupDiagnostic = `process group ${child.pid ?? 'unknown'} exited`;
+            else if (windows)
+                groupDiagnostic = windows.diagnostic();
+            const holders = !alive && await holdersAlive();
+            checking = false;
+            if (finished)
+                return;
+            if (exited && !alive && !holders && (aborted || closed)) {
+                finish();
+                return;
+            }
+            reportBlocked();
+            pollTimer = setTimeout(() => { void observe(); }, process.platform === 'linux' ? 50 : 500);
+        };
+        const abort = (reason) => {
+            if (aborted || finished)
+                return;
+            aborted = true;
+            warn(`${reason}; save unsuccessful, stopping process group`);
+            signal('SIGTERM');
+            killTimer = setTimeout(() => signal('SIGKILL'), killGraceMs);
+            confirmTimer = setTimeout(() => {
+                blocked = true;
+                reportBlocked();
+            }, killGraceMs + confirmMs);
+            void observe();
+        };
+        const deadline = setTimeout(() => abort('command timed out'), timeoutMs);
+        const collect = (chunk, output) => {
+            bytes += Buffer.byteLength(chunk);
+            if (bytes > 32 * 1024 * 1024) {
+                abort('output limit exceeded');
+                return;
+            }
+            if (output)
+                stdout += chunk;
+        };
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.on('close', () => { closed = true; void observe(); });
+        child.stdout.on('data', chunk => collect(chunk, true));
+        child.stderr.on('data', chunk => collect(chunk, false));
+        child.on('error', () => {
+            // Only spawn failure proves no child exists. Later errors do not.
+            if (child.pid === undefined) {
+                exited = true;
+                finish();
+            }
+            else
+                abort('process error');
+        });
+        child.on('exit', value => { exited = true; code = value; void observe(); });
+        if (windows)
+            void observe(); // Observe ancestry while the leader is still running.
+    });
+}
+//# sourceMappingURL=autosave-git.js.map

package/dist/autosave-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autosave-git.js","sourceRoot":"","sources":["../src/autosave-git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE7G,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,yFAAyF;AACzF,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAM,GAAsB,OAAO,CAAC,GAAG,EAAE,OAAiB;IACzG,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9E,CAAC;AAYD,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,kFAAkF;AAClF,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,UAAqC;IAC1E,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACpF,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAAC,UAAU,CAAC,iBAAiB,GAAG,QAAQ,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5F,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAClE,OAAO,KAAK,EAAE,CAAC;gBACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACjE,SAAS,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc,EAAE,OAAwB;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAA0B,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAc,EAAE,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1Q,OAAO,IAAI,OAAO,CAAuD,CAAC,OAAO,EAAE,EAAE;QACnF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,gBAAgB,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,OAAO,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;QAC3F,CAAC,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACrF,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC7C,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC,EAAE;YACvF,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC;SACzF,CAAC,CAAC;QACH,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;QACnB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,eAAe,GAAG,4BAA4B,CAAC;QACnD,IAAI,YAAY,GAAG,IAAI,CAAC;QACxB,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,IAAI,CAAC,OAAO,IAAI,QAAQ;gBAAE,OAAO;YACjC,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,sCAAsC,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,KAAK,eAAe,IAAI;gBAC1I,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,qDAAqD,CAAC;YAClL,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBAC/C,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/H,MAAM,EAAE,YAAY,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;aAClH,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,WAAW;gBAAE,OAAO;YACtC,WAAW,GAAG,SAAS,CAAC;YACxB,uFAAuF;YACvF,IAAI,eAAe,GAAG,gBAAgB;gBAAE,IAAI,CAAC,OAAO,CAAC,CAAC;iBACjD,IAAI,eAAe,KAAK,gBAAgB;gBAAE,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACnJ,eAAe,EAAE,CAAC;YAClB,IAAI,CAAC;gBAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;QACrH,CAAC,CAAC;QACF,IAAI,SAAqC,CAAC;QAC1C,IAAI,YAAwC,CAAC;QAC7C,IAAI,SAAqC,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,IAAoB,EAAE,EAAE;YACtC,IAAI,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO;YAChD,IAAI,CAAC;gBAAC,IAAI,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;;oBAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YAC3F,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;QACjF,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,IAAI,QAAQ,IAAI,QAAQ;gBAAE,OAAO;YACjC,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC;YAChB,4EAA4E;YAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3K,YAAY,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,eAAe,GAAG,iBAAiB,KAAK,CAAC,GAAG,IAAI,SAAS,SAAS,CAAC;iBAC1E,IAAI,OAAO;gBAAE,eAAe,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,MAAM,YAAY,EAAE,CAAC;YAC/C,QAAQ,GAAG,KAAK,CAAC;YACjB,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC9E,aAAa,EAAE,CAAC;YAChB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7F,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,EAAE;YAC/B,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,GAAG,MAAM,6CAA6C,CAAC,CAAC;YAC7D,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;YAC7D,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,aAAa,EAAE,CAAC;YAClB,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;YAC5B,KAAK,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE;YACjD,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzE,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC;QAC9B,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,kEAAkE;YAClE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC;YAAC,CAAC;;gBACpD,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,OAAO;YAAE,KAAK,OAAO,EAAE,CAAC,CAAC,sDAAsD;IACrF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/autosave-group.d.ts

@@ -0,0 +1,8 @@
+type Diagnostic = (message: string) => void;
+export declare function groupInspectionFailed(pid: number, error: unknown, diagnostic: Diagnostic): void;
+/** Only ESRCH proves absence; a signal permission error retains the guard. */
+export declare function autosaveGroupExists(pid: number, diagnostic: Diagnostic): boolean;
+/** Shared by live async observation and synchronous durable admission recovery. */
+export declare function autosaveGroupSnapshotAlive(pid: number, stats: readonly string[], diagnostic: Diagnostic): boolean;
+export declare function autosaveGroupAliveSync(pid: number): boolean;
+export {};

package/dist/autosave-group.js

@@ -0,0 +1,61 @@
+import fs from 'node:fs';
+export function groupInspectionFailed(pid, error, diagnostic) {
+    diagnostic(`process group ${pid} inspection failed (${error.code ?? String(error)})`);
+}
+/** Only ESRCH proves absence; a signal permission error retains the guard. */
+export function autosaveGroupExists(pid, diagnostic) {
+    try {
+        process.kill(-pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ESRCH')
+            return false;
+        groupInspectionFailed(pid, error, diagnostic);
+        return true;
+    }
+}
+/** Shared by live async observation and synchronous durable admission recovery. */
+export function autosaveGroupSnapshotAlive(pid, stats, diagnostic) {
+    let zombie = false;
+    for (const stat of stats) {
+        const fields = stat.slice(stat.lastIndexOf(')') + 1).trim().split(/\s+/);
+        if (Number(fields[2]) !== pid)
+            continue;
+        if (fields[0] !== 'Z' && fields[0] !== 'X') {
+            diagnostic(`process group ${pid} alive`);
+            return true;
+        }
+        zombie = true;
+    }
+    if (zombie)
+        return false;
+    // An empty scan is not proof: recheck the kernel's group lookup.
+    return autosaveGroupExists(pid, diagnostic);
+}
+export function autosaveGroupAliveSync(pid) {
+    const diagnostic = () => { };
+    if (!autosaveGroupExists(pid, diagnostic))
+        return false;
+    if (process.platform !== 'linux')
+        return true;
+    try {
+        const stats = [];
+        for (const entry of fs.readdirSync('/proc')) {
+            if (!/^\d+$/.test(entry))
+                continue;
+            try {
+                stats.push(fs.readFileSync(`/proc/${entry}/stat`, 'utf8'));
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    return true;
+            }
+        }
+        return autosaveGroupSnapshotAlive(pid, stats, diagnostic);
+    }
+    catch {
+        return true;
+    }
+}
+//# sourceMappingURL=autosave-group.js.map

package/dist/autosave-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autosave-group.js","sourceRoot":"","sources":["../src/autosave-group.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,KAAc,EAAE,UAAsB;IACvF,UAAU,CAAC,iBAAiB,GAAG,uBAAwB,KAA+B,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACnH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,UAAsB;IACrE,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpE,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,GAAW,EAAE,KAAwB,EAAE,UAAsB;IACtG,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,UAAU,CAAC,iBAAiB,GAAG,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtG,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,KAAK,CAAC;IACzB,iEAAiE;IACjE,OAAO,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,KAAK,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YACnE,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;YAAC,CAAC;QACxF,CAAC;QACD,OAAO,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/autosave-holders.d.ts

@@ -0,0 +1,34 @@
+import { type RecordedProcess } from './delegation/process-liveness.ts';
+/**
+ * Set on each autosave Git command with a fresh value. Descendants inherit it
+ * through fork, exec, setsid and reparenting; unrelated work in the worktree
+ * (Squeal's Vitest workers, agent tools) never carries it (hearsay-tools/cezarion#958).
+ */
+export declare const AUTOSAVE_OWNER_ENV = "CEZ_AUTOSAVE_OWNER";
+/** `marked` is absent when the environment cannot be read; `gone` means the process exited. */
+export type OwnerProbe = (pid: number, marker: string) => Promise<{
+    marked?: boolean | undefined;
+    parent?: number;
+} | 'gone'>;
+export interface AutosaveOwner {
+    /** This command's `AUTOSAVE_OWNER_ENV` value. */
+    marker: string;
+    /** The Git leader, once spawned. */
+    root: () => number | undefined;
+}
+/**
+ * Conservative companion to owned-group proof, using orphan recovery's cwd
+ * boundary. A new holder counts only when it is Git's: its environment carries
+ * this command's marker, its parent is Git or an attributed holder, or its
+ * environment cannot be read (fail closed). Never signal cwd-only matches: they
+ * may be unrelated agent tools. Polling does not contain a child that both clears
+ * its environment and leaves the tree before it can be observed; this is not an
+ * OS sandbox.
+ */
+export declare function watchAutosaveHolders(cwd: string, owner: AutosaveOwner, probe?: OwnerProbe): Promise<((() => Promise<boolean>) & {
+    diagnostics: () => {
+        pids: number[];
+        processes: RecordedProcess[];
+        inspectionFailed: boolean;
+    };
+}) | undefined>;