@letrquan/book 0.3.0 → 0.4.0-beta.0

package/dist/{interactive-assets-T4I4SEHU.js → interactive-assets-73AQO5WP.js}

@@ -5,16 +5,21 @@ import {
 } from "./chunk-J4F2QLM2.js";
 import {
   discoverSkills
-} from "./chunk-67UZEWWF.js";
+} from "./chunk-DNFQTSMJ.js";
 import {
   discoverCommands
-} from "./chunk-EFJ2NH6E.js";
+} from "./chunk-AJZWLKLQ.js";
 import "./chunk-KXAYUIKP.js";
-import "./chunk-HQI7NYGX.js";
+import "./chunk-SWPDKLNM.js";
 import "./chunk-2AAOF5B5.js";
 import "./chunk-XHAO3K7I.js";
-import "./chunk-VPNLCMVR.js";
-import "./chunk-X4NJT436.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 
 // src/tui/interactive-assets.ts
@@ -32,4 +37,4 @@ function loadInteractiveAssets(config) {
 export {
   loadInteractiveAssets
 };
-//# sourceMappingURL=interactive-assets-T4I4SEHU.js.map
+//# sourceMappingURL=interactive-assets-73AQO5WP.js.map

package/dist/{interactive-assets-T4I4SEHU.js.map → interactive-assets-73AQO5WP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/tui/interactive-assets.ts"],"sourcesContent":["import { discoverCommands } from '../commands/loader.js';\nimport { discoverSkills, type Skill } from '../skills.js';\nimport type { SlashCommand } from '../types/commands.js';\nimport type { AgentConfig } from '../types/runtime.js';\nimport { DEFAULT_THEME_NAME, listCustomThemes, resolveTheme, type ResolvedTheme } from './theme.js';\n\nexport interface InteractiveAssets {\n  commands: SlashCommand[];\n  skills: Skill[];\n  customThemes: string[];\n  initialTheme: ResolvedTheme | null;\n}\n\n/** Load filesystem-backed UI metadata before React begins rendering. */\nexport function loadInteractiveAssets(\n  config: Pick<AgentConfig, 'workspace' | 'settings'>,\n): InteractiveAssets {\n  return {\n    commands: discoverCommands(config.workspace),\n    skills: discoverSkills(config.workspace, config.settings.skills.overrides, {\n      executionOverrides: config.settings.skills.execution,\n      enabled: config.settings.skills.enabled,\n    }),\n    customThemes: listCustomThemes(config.workspace),\n    initialTheme: resolveTheme(config.workspace, config.settings.theme ?? DEFAULT_THEME_NAME),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAcO,SAAS,sBACd,QACmB;AACnB,SAAO;AAAA,IACL,UAAU,iBAAiB,OAAO,SAAS;AAAA,IAC3C,QAAQ,eAAe,OAAO,WAAW,OAAO,SAAS,OAAO,WAAW;AAAA,MACzE,oBAAoB,OAAO,SAAS,OAAO;AAAA,MAC3C,SAAS,OAAO,SAAS,OAAO;AAAA,IAClC,CAAC;AAAA,IACD,cAAc,iBAAiB,OAAO,SAAS;AAAA,IAC/C,cAAc,aAAa,OAAO,WAAW,OAAO,SAAS,SAAS,kBAAkB;AAAA,EAC1F;AACF;","names":[]}
+{"version":3,"sources":["../src/tui/interactive-assets.ts"],"sourcesContent":["import { discoverCommands } from '../commands/loader.js';\nimport { discoverSkills, type Skill } from '../skills.js';\nimport type { SlashCommand } from '../types/commands.js';\nimport type { AgentConfig } from '../types/runtime.js';\nimport { DEFAULT_THEME_NAME, listCustomThemes, resolveTheme, type ResolvedTheme } from './theme.js';\n\nexport interface InteractiveAssets {\n  commands: SlashCommand[];\n  skills: Skill[];\n  customThemes: string[];\n  initialTheme: ResolvedTheme | null;\n}\n\n/** Load filesystem-backed UI metadata before React begins rendering. */\nexport function loadInteractiveAssets(\n  config: Pick<AgentConfig, 'workspace' | 'settings'>,\n): InteractiveAssets {\n  return {\n    commands: discoverCommands(config.workspace),\n    skills: discoverSkills(config.workspace, config.settings.skills.overrides, {\n      executionOverrides: config.settings.skills.execution,\n      enabled: config.settings.skills.enabled,\n    }),\n    customThemes: listCustomThemes(config.workspace),\n    initialTheme: resolveTheme(config.workspace, config.settings.theme ?? DEFAULT_THEME_NAME),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAcO,SAAS,sBACd,QACmB;AACnB,SAAO;AAAA,IACL,UAAU,iBAAiB,OAAO,SAAS;AAAA,IAC3C,QAAQ,eAAe,OAAO,WAAW,OAAO,SAAS,OAAO,WAAW;AAAA,MACzE,oBAAoB,OAAO,SAAS,OAAO;AAAA,MAC3C,SAAS,OAAO,SAAS,OAAO;AAAA,IAClC,CAAC;AAAA,IACD,cAAc,iBAAiB,OAAO,SAAS;AAAA,IAC/C,cAAc,aAAa,OAAO,WAAW,OAAO,SAAS,SAAS,kBAAkB;AAAA,EAC1F;AACF;","names":[]}

package/dist/job-runner.js

@@ -2,19 +2,25 @@ import {
   loadPersistentShellSpec,
   readJsonFile,
   writeJsonAtomic
-} from "./chunk-YC6W4EJH.js";
+} from "./chunk-JGF5HLSI.js";
 import {
   TERMINATE_GRACE_MS,
   signalProcessGroup,
   terminateProcessTree,
   waitForProcessClose,
   waitForProcessGroupExit
-} from "./chunk-C7ADUNPR.js";
+} from "./chunk-32WBCUAN.js";
 import "./chunk-RT5SATF7.js";
 import {
   buildChildEnv
 } from "./chunk-XHAO3K7I.js";
-import "./chunk-224FJZLH.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 
 // src/job-runner.ts
@@ -62,6 +68,7 @@ var state = {
   status: "starting",
   notify: spec.notify,
   sandboxed: spec.sandboxed,
+  gitDirReadOnly: spec.gitDirReadOnly,
   runnerPid: process.pid,
   tokenHash: spec.tokenHash,
   startedAt,

package/dist/job-runner.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/job-runner.ts"],"sourcesContent":["import { spawn, type ChildProcess } from 'node:child_process';\nimport { buildChildEnv } from './child-env.js';\nimport {\n  appendFileSync,\n  existsSync,\n  readFileSync,\n  rmSync,\n  statSync,\n  truncateSync,\n  writeFileSync,\n} from 'node:fs';\nimport { dirname, extname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport {\n  loadPersistentShellSpec,\n  readJsonFile,\n  writeJsonAtomic,\n  type PersistentShellSpec,\n  type PersistentShellState,\n} from './jobs/persistent-store.js';\nimport {\n  signalProcessGroup,\n  terminateProcessTree,\n  waitForProcessClose,\n  waitForProcessGroupExit,\n  TERMINATE_GRACE_MS,\n} from './jobs/process-tree.js';\n\nconst specPath = process.argv[2];\nif (!specPath) {\n  process.exitCode = 2;\n  throw new Error('Missing persistent shell specification path.');\n}\nconst loaded = loadPersistentShellSpec(specPath);\nif ('error' in loaded) {\n  process.exitCode = 2;\n  throw new Error(loaded.error);\n}\nconst spec: PersistentShellSpec = loaded.spec;\n/**\n * How long a contended record write may block before it counts as failed. The first record and\n * the terminal record wait up to a second for Windows to release the file: the job cannot start\n * without the first, and the manager waits on the second to call a stop complete. Every other\n * write (the heartbeat, the child pid, `stopping`, a log rotation) is repeated by the next\n * heartbeat, so it gives up almost at once instead of stalling the runner's timers.\n */\nconst RECORD_RENAME_RETRY_BUDGET_MS = 1_000;\nconst BEST_EFFORT_RENAME_RETRY_BUDGET_MS = 50;\n/** A terminal record that still failed to write is retried on a timer this often, this many times. */\nconst TERMINAL_RECORD_RETRY_MS = 250;\nconst TERMINAL_RECORD_ATTEMPTS = 20;\n\nlet child: ChildProcess | undefined;\nlet terminal = false;\nlet terminationInFlight = false;\n// These timers are assigned after the child is wired so startup failures can still call finish().\nlet heartbeat: NodeJS.Timeout | undefined;\nlet controlPoll: NodeJS.Timeout | undefined;\nlet deadline: NodeJS.Timeout | undefined;\nconst startedAt = Date.now();\nlet state: PersistentShellState = {\n  version: 1,\n  revision: 1,\n  id: spec.id,\n  command: spec.command,\n  title: spec.title,\n  workdir: spec.workdir,\n  status: 'starting',\n  notify: spec.notify,\n  sandboxed: spec.sandboxed,\n  runnerPid: process.pid,\n  tokenHash: spec.tokenHash,\n  startedAt,\n  heartbeatAt: startedAt,\n  outputRotationSequence: 0,\n  truncatedBytes: 0,\n  timeoutMs: spec.timeoutMs,\n  deadlineAt: spec.timeoutMs ? startedAt + spec.timeoutMs : undefined,\n  parentSessionId: spec.parentSessionId,\n  rootRunId: spec.rootRunId,\n  parentRunId: spec.parentRunId,\n  outputPath: spec.outputPath,\n  controlPath: spec.controlPath,\n  completionSequence: 0,\n  completionDeliveredSequence: 0,\n  completionAcknowledgedSequence: 0,\n};\n\nfunction persist(budgetMs = RECORD_RENAME_RETRY_BUDGET_MS): void {\n  state = { ...state, revision: state.revision + 1, heartbeatAt: Date.now() };\n  writeJsonAtomic(spec.recordPath, state, { renameRetryBudgetMs: budgetMs });\n}\n\n/**\n * A non-terminal write: the heartbeat, the switch to `stopping`, a log rotation. One that fails\n * must not end the runner, or its job would keep running with nothing left to stop it; the next\n * heartbeat writes the same state again. The failure is counted on the record, which that next\n * write carries, rather than noted in the job's log: the log is the command's own output, and the\n * model reads it through BashOutput.\n */\nfunction persistBestEffort(what: string): void {\n  try {\n    persist(BEST_EFFORT_RENAME_RETRY_BUDGET_MS);\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException | undefined)?.code ?? 'unknown error';\n    state = {\n      ...state,\n      recordWriteFailures: (state.recordWriteFailures ?? 0) + 1,\n      lastRecordWriteError: `${what} write failed (${code})`,\n    };\n  }\n}\n\nfunction appendBounded(data: unknown): void {\n  const chunk = Buffer.isBuffer(data) ? data : Buffer.from(String(data));\n  if (chunk.length === 0) return;\n  try {\n    appendFileSync(spec.outputPath, chunk);\n    const size = statSync(spec.outputPath).size;\n    if (size <= spec.maxLogBytes) return;\n    const retained = readFileSync(spec.outputPath).subarray(-spec.maxLogBytes);\n    const discarded = size - retained.length;\n    truncateSync(spec.outputPath, 0);\n    writeFileSync(spec.outputPath, retained);\n    state = {\n      ...state,\n      outputRotationSequence: (state.outputRotationSequence ?? 0) + 1,\n      truncatedBytes: (state.truncatedBytes ?? 0) + discarded,\n    };\n    persistBestEffort('log rotation');\n  } catch {\n    // Output and its retention are best effort; lifecycle state remains authoritative.\n  }\n}\n\n/**\n * End the job's tree. Off Windows the first SIGTERM goes to the supervisor alone, because the\n * supervisor leads the job's own process group and passes the signal on to that group exactly once:\n * signalling the group from here as well would hand the command a second SIGTERM, which a command\n * that has installed its own handler or is midway through a graceful shutdown sees as two stops\n * rather than one. A supervisor that has already exited forwards nothing, so the signal falls\n * through to the group itself. From there the escalation is this process's own, exactly as before,\n * because the supervisor no longer passes SIGKILL along. Windows has no signal for a group, so\n * `taskkill /T /F` still walks the tree from the supervisor there.\n */\nasync function terminateTree(): Promise<boolean> {\n  const proc = child;\n  const pid = proc?.pid;\n  if (!proc || pid === undefined) return true;\n  if (process.platform === 'win32') {\n    return terminateProcessTree(proc, pid, (timeoutMs) => waitForProcessClose(proc, timeoutMs));\n  }\n  try {\n    process.kill(pid, 'SIGTERM');\n  } catch {\n    signalProcessGroup(proc, pid, 'SIGTERM');\n  }\n  if (await waitForProcessGroupExit(pid, TERMINATE_GRACE_MS)) return true;\n  signalProcessGroup(proc, pid, 'SIGKILL');\n  return waitForProcessGroupExit(pid, TERMINATE_GRACE_MS);\n}\n\nfunction finish(\n  status: 'exited' | 'failed' | 'killed' | 'timed_out',\n  code?: number | null,\n  signal?: NodeJS.Signals | string | null,\n  stopReason?: string,\n): void {\n  if (terminal) return;\n  terminal = true;\n  // Stop capturing output at terminality: once the record reads terminal, the\n  // manager may dismiss the job and delete its files, so a straggling stream\n  // chunk must not re-create the log after that point.\n  child?.stdout?.off('data', appendBounded);\n  child?.stderr?.off('data', appendBounded);\n  state = {\n    ...state,\n    status,\n    exitCode: code,\n    signal,\n    stopReason,\n    finishedAt: Date.now(),\n    completionSequence: state.completionSequence + 1,\n  };\n  // Remove the runner-owned control/spec files BEFORE persisting the terminal\n  // record. The manager treats an observable terminal record as \"stop\n  // complete\" and immediately expects these files to be gone, so the removals\n  // must happen-before the rename that publishes the terminal state — the old\n  // order left a window where a preempted runner had published \"killed\" while\n  // the spec file still existed.\n  try {\n    rmSync(spec.controlPath, { force: true });\n    rmSync(specPath, { force: true });\n  } catch {\n    // Best effort: a leaked control/spec file is cleaned up by the manager's\n    // lost-job reconciliation or dismissal, whereas skipping the terminal\n    // persist below would strand the job as \"stopping\" forever.\n  }\n  if (heartbeat) clearInterval(heartbeat);\n  if (controlPoll) clearInterval(controlPoll);\n  if (deadline) clearTimeout(deadline);\n  publishTerminalRecord(1);\n}\n\n/**\n * Write the terminal record, then exit. It is the one write the manager waits on to call a stop\n * complete, so a write that fails even after the retry budget is tried again on a timer rather\n * than ending the runner with its job still recorded as running. If every attempt fails, the\n * runner says at the end of the job's log what really happened, exits nonzero, and the manager's\n * heartbeat-staleness check reports the job lost.\n */\nfunction publishTerminalRecord(attempt: number): void {\n  try {\n    persist();\n  } catch (error) {\n    if (attempt < TERMINAL_RECORD_ATTEMPTS) {\n      setTimeout(() => publishTerminalRecord(attempt + 1), TERMINAL_RECORD_RETRY_MS);\n      return;\n    }\n    reportUnrecordedEnd(error);\n    process.exitCode = 1;\n    setTimeout(() => process.exit(1), 10).unref();\n    return;\n  }\n  setTimeout(() => process.exit(), 10).unref();\n}\n\n/**\n * Every attempt at the terminal record failed, so the manager will find a stale heartbeat and\n * call the job lost. Say what really happened at the end of the job's log, the one place left\n * that someone reads. The log is safe to write: the record never turned terminal, so the\n * manager cannot have dismissed the job and deleted it.\n */\nfunction reportUnrecordedEnd(error: unknown): void {\n  const code = (error as NodeJS.ErrnoException | undefined)?.code ?? 'unknown error';\n  const outcome =\n    state.exitCode === undefined || state.exitCode === null\n      ? state.status\n      : `${state.status}, exit code ${state.exitCode}`;\n  try {\n    appendFileSync(\n      spec.outputPath,\n      `[runner: the job ended (${outcome}) but its record could not be written (${code}); Book will report it as lost]\\n`,\n    );\n  } catch {\n    // There is nowhere left to say it.\n  }\n}\n\n/** The supervisor built beside this file: `.js` in dist, `.ts` when run from source through tsx. */\nfunction supervisorPath(): string {\n  const self = fileURLToPath(import.meta.url);\n  return join(dirname(self), `job-supervisor${extname(self)}`);\n}\n\nfunction failStartup(what: string, error: unknown): never {\n  const reason = error instanceof Error ? error.message : String(error);\n  process.stderr.write(`Persistent background runner could not ${what}: ${reason}\\n`);\n  process.exit(1);\n}\n\n/**\n * The env the supervisor is started with. `NODE_OPTIONS` is meant for the command the user asked\n * for, not for the supervisor standing between them: left in place it makes the supervisor open the\n * inspector and write \"Debugger listening...\" into the job's log, which the runner appends to the\n * command's own output. It is therefore taken out here and carried beside it, under a name of this\n * runner's own, which the supervisor puts back for the command alone.\n *\n * This process inherited Book's environment, so a `NODE_ENV` Book defaulted for its own renderer\n * travels the whole chain: it is not the job's, and a persistent job outlives Book to be the one\n * that most certainly must not carry it.\n */\nfunction supervisorEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = buildChildEnv(process.env, spec.env);\n  const nodeOptions = env.NODE_OPTIONS;\n  delete env.NODE_OPTIONS;\n  if (nodeOptions !== undefined) env.BOOK_SUPERVISED_NODE_OPTIONS = nodeOptions;\n  return env;\n}\n\n/**\n * Create the log, write the first record, then start the command under its supervisor. The first\n * record says `starting`, and the job counts as started once the second, carrying the command's\n * pid, has landed: `start()` returns on the first record whose status is not `starting`, so a\n * record that claimed otherwise would report a persistent job with nothing to stop. That first\n * write is therefore the one that cannot be best effort — without it the manager gives up, forgets\n * the job and deletes its files while the command runs on with nothing left to stop it. So until\n * it has landed, a failure ends the runner before anything runs; a failure on the second ends the\n * command first, and both say why on stderr, which `start()` reports.\n */\nfunction startRunner(): void {\n  try {\n    writeFileSync(spec.outputPath, '', { encoding: 'utf8', mode: 0o600 });\n  } catch (error) {\n    failStartup('create its job log', error);\n  }\n  try {\n    persist();\n  } catch (error) {\n    failStartup('write its job record', error);\n  }\n  let proc: ChildProcess;\n  try {\n    // `process.execArgv` carries tsx's loader when this runner itself runs from source.\n    proc = spawn(process.execPath, [...process.execArgv, supervisorPath(), specPath], {\n      cwd: spec.workdir,\n      env: supervisorEnv(),\n      detached: true,\n      stdio: ['pipe', 'pipe', 'pipe'],\n      windowsHide: true,\n    });\n  } catch (error) {\n    appendBounded(error instanceof Error ? `${error.message}\\n` : `${String(error)}\\n`);\n    process.exitCode = 1;\n    finish('failed');\n    return;\n  }\n  child = proc;\n  // The supervisor's stdin is its lifeline to this process: never written and never closed, it\n  // reaches end-of-file only when this process is gone. See job-supervisor.ts.\n  proc.stdin?.on('error', () => {});\n  proc.stdout?.on('data', appendBounded);\n  proc.stderr?.on('data', appendBounded);\n  proc.on('error', (error) => {\n    appendBounded(`${error.message}\\n`);\n    if (state.status !== 'stopping') finish('failed');\n  });\n  proc.on('close', (code, signal) => {\n    if (terminal || state.status === 'stopping') return;\n    finish(code === 0 ? 'exited' : 'failed', code, signal);\n  });\n  state = { ...state, status: 'running', childPid: proc.pid };\n  try {\n    persist();\n  } catch (error) {\n    // The manager calls the job started only once it reads this record. Without it, it would\n    // give up, forget the job and delete its files while the command ran on: end the command\n    // first, then say why.\n    terminal = true;\n    void terminateTree().finally(() => failStartup('write its job record', error));\n    return;\n  }\n  heartbeat = setInterval(() => persistBestEffort('heartbeat'), 1_000);\n  controlPoll = setInterval(() => {\n    if (!existsSync(spec.controlPath) || terminal) return;\n    const control = readJsonFile<{ token?: string; action?: string; reason?: string }>(\n      spec.controlPath,\n    );\n    if (control?.token !== spec.token || control.action !== 'stop') return;\n    void requestTermination('killed', control.reason ?? 'requested');\n  }, 250);\n  deadline = spec.timeoutMs\n    ? setTimeout(() => {\n        void requestTermination('timed_out', 'timeout');\n      }, spec.timeoutMs)\n    : undefined;\n}\n\nasync function requestTermination(status: 'killed' | 'timed_out', reason: string): Promise<void> {\n  if (terminal || terminationInFlight) return;\n  terminationInFlight = true;\n  state = { ...state, status: 'stopping', stopReason: reason };\n  persistBestEffort('stopping state');\n  try {\n    if (await terminateTree()) {\n      finish(status, child?.exitCode, child?.signalCode, reason);\n    } else {\n      appendBounded('[termination requested; process is still running; retrying]\\n');\n      const retry = setTimeout(() => void requestTermination(status, reason), 500);\n      retry.unref();\n    }\n  } finally {\n    terminationInFlight = false;\n  }\n}\n\nstartRunner();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS,SAAS,YAAY;AACvC,SAAS,qBAAqB;AAgB9B,IAAM,WAAW,QAAQ,KAAK,CAAC;AAC/B,IAAI,CAAC,UAAU;AACb,UAAQ,WAAW;AACnB,QAAM,IAAI,MAAM,8CAA8C;AAChE;AACA,IAAM,SAAS,wBAAwB,QAAQ;AAC/C,IAAI,WAAW,QAAQ;AACrB,UAAQ,WAAW;AACnB,QAAM,IAAI,MAAM,OAAO,KAAK;AAC9B;AACA,IAAM,OAA4B,OAAO;AAQzC,IAAM,gCAAgC;AACtC,IAAM,qCAAqC;AAE3C,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AAEjC,IAAI;AACJ,IAAI,WAAW;AACf,IAAI,sBAAsB;AAE1B,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAM,YAAY,KAAK,IAAI;AAC3B,IAAI,QAA8B;AAAA,EAChC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,IAAI,KAAK;AAAA,EACT,SAAS,KAAK;AAAA,EACd,OAAO,KAAK;AAAA,EACZ,SAAS,KAAK;AAAA,EACd,QAAQ;AAAA,EACR,QAAQ,KAAK;AAAA,EACb,WAAW,KAAK;AAAA,EAChB,WAAW,QAAQ;AAAA,EACnB,WAAW,KAAK;AAAA,EAChB;AAAA,EACA,aAAa;AAAA,EACb,wBAAwB;AAAA,EACxB,gBAAgB;AAAA,EAChB,WAAW,KAAK;AAAA,EAChB,YAAY,KAAK,YAAY,YAAY,KAAK,YAAY;AAAA,EAC1D,iBAAiB,KAAK;AAAA,EACtB,WAAW,KAAK;AAAA,EAChB,aAAa,KAAK;AAAA,EAClB,YAAY,KAAK;AAAA,EACjB,aAAa,KAAK;AAAA,EAClB,oBAAoB;AAAA,EACpB,6BAA6B;AAAA,EAC7B,gCAAgC;AAClC;AAEA,SAAS,QAAQ,WAAW,+BAAqC;AAC/D,UAAQ,EAAE,GAAG,OAAO,UAAU,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,EAAE;AAC1E,kBAAgB,KAAK,YAAY,OAAO,EAAE,qBAAqB,SAAS,CAAC;AAC3E;AASA,SAAS,kBAAkB,MAAoB;AAC7C,MAAI;AACF,YAAQ,kCAAkC;AAAA,EAC5C,SAAS,OAAO;AACd,UAAM,OAAQ,OAA6C,QAAQ;AACnE,YAAQ;AAAA,MACN,GAAG;AAAA,MACH,sBAAsB,MAAM,uBAAuB,KAAK;AAAA,MACxD,sBAAsB,GAAG,IAAI,kBAAkB,IAAI;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAqB;AAC1C,QAAM,QAAQ,OAAO,SAAS,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,CAAC;AACrE,MAAI,MAAM,WAAW,EAAG;AACxB,MAAI;AACF,mBAAe,KAAK,YAAY,KAAK;AACrC,UAAM,OAAO,SAAS,KAAK,UAAU,EAAE;AACvC,QAAI,QAAQ,KAAK,YAAa;AAC9B,UAAM,WAAW,aAAa,KAAK,UAAU,EAAE,SAAS,CAAC,KAAK,WAAW;AACzE,UAAM,YAAY,OAAO,SAAS;AAClC,iBAAa,KAAK,YAAY,CAAC;AAC/B,kBAAc,KAAK,YAAY,QAAQ;AACvC,YAAQ;AAAA,MACN,GAAG;AAAA,MACH,yBAAyB,MAAM,0BAA0B,KAAK;AAAA,MAC9D,iBAAiB,MAAM,kBAAkB,KAAK;AAAA,IAChD;AACA,sBAAkB,cAAc;AAAA,EAClC,QAAQ;AAAA,EAER;AACF;AAYA,eAAe,gBAAkC;AAC/C,QAAM,OAAO;AACb,QAAM,MAAM,MAAM;AAClB,MAAI,CAAC,QAAQ,QAAQ,OAAW,QAAO;AACvC,MAAI,QAAQ,aAAa,SAAS;AAChC,WAAO,qBAAqB,MAAM,KAAK,CAAC,cAAc,oBAAoB,MAAM,SAAS,CAAC;AAAA,EAC5F;AACA,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,QAAQ;AACN,uBAAmB,MAAM,KAAK,SAAS;AAAA,EACzC;AACA,MAAI,MAAM,wBAAwB,KAAK,kBAAkB,EAAG,QAAO;AACnE,qBAAmB,MAAM,KAAK,SAAS;AACvC,SAAO,wBAAwB,KAAK,kBAAkB;AACxD;AAEA,SAAS,OACP,QACA,MACA,QACA,YACM;AACN,MAAI,SAAU;AACd,aAAW;AAIX,SAAO,QAAQ,IAAI,QAAQ,aAAa;AACxC,SAAO,QAAQ,IAAI,QAAQ,aAAa;AACxC,UAAQ;AAAA,IACN,GAAG;AAAA,IACH;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI;AAAA,IACrB,oBAAoB,MAAM,qBAAqB;AAAA,EACjD;AAOA,MAAI;AACF,WAAO,KAAK,aAAa,EAAE,OAAO,KAAK,CAAC;AACxC,WAAO,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,EAClC,QAAQ;AAAA,EAIR;AACA,MAAI,UAAW,eAAc,SAAS;AACtC,MAAI,YAAa,eAAc,WAAW;AAC1C,MAAI,SAAU,cAAa,QAAQ;AACnC,wBAAsB,CAAC;AACzB;AASA,SAAS,sBAAsB,SAAuB;AACpD,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AACd,QAAI,UAAU,0BAA0B;AACtC,iBAAW,MAAM,sBAAsB,UAAU,CAAC,GAAG,wBAAwB;AAC7E;AAAA,IACF;AACA,wBAAoB,KAAK;AACzB,YAAQ,WAAW;AACnB,eAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM;AAC5C;AAAA,EACF;AACA,aAAW,MAAM,QAAQ,KAAK,GAAG,EAAE,EAAE,MAAM;AAC7C;AAQA,SAAS,oBAAoB,OAAsB;AACjD,QAAM,OAAQ,OAA6C,QAAQ;AACnE,QAAM,UACJ,MAAM,aAAa,UAAa,MAAM,aAAa,OAC/C,MAAM,SACN,GAAG,MAAM,MAAM,eAAe,MAAM,QAAQ;AAClD,MAAI;AACF;AAAA,MACE,KAAK;AAAA,MACL,2BAA2B,OAAO,0CAA0C,IAAI;AAAA;AAAA,IAClF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAGA,SAAS,iBAAyB;AAChC,QAAM,OAAO,cAAc,YAAY,GAAG;AAC1C,SAAO,KAAK,QAAQ,IAAI,GAAG,iBAAiB,QAAQ,IAAI,CAAC,EAAE;AAC7D;AAEA,SAAS,YAAY,MAAc,OAAuB;AACxD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,UAAQ,OAAO,MAAM,0CAA0C,IAAI,KAAK,MAAM;AAAA,CAAI;AAClF,UAAQ,KAAK,CAAC;AAChB;AAaA,SAAS,gBAAmC;AAC1C,QAAM,MAAyB,cAAc,QAAQ,KAAK,KAAK,GAAG;AAClE,QAAM,cAAc,IAAI;AACxB,SAAO,IAAI;AACX,MAAI,gBAAgB,OAAW,KAAI,+BAA+B;AAClE,SAAO;AACT;AAYA,SAAS,cAAoB;AAC3B,MAAI;AACF,kBAAc,KAAK,YAAY,IAAI,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,gBAAY,sBAAsB,KAAK;AAAA,EACzC;AACA,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AACd,gBAAY,wBAAwB,KAAK;AAAA,EAC3C;AACA,MAAI;AACJ,MAAI;AAEF,WAAO,MAAM,QAAQ,UAAU,CAAC,GAAG,QAAQ,UAAU,eAAe,GAAG,QAAQ,GAAG;AAAA,MAChF,KAAK,KAAK;AAAA,MACV,KAAK,cAAc;AAAA,MACnB,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,aAAa;AAAA,IACf,CAAC;AAAA,EACH,SAAS,OAAO;AACd,kBAAc,iBAAiB,QAAQ,GAAG,MAAM,OAAO;AAAA,IAAO,GAAG,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,YAAQ,WAAW;AACnB,WAAO,QAAQ;AACf;AAAA,EACF;AACA,UAAQ;AAGR,OAAK,OAAO,GAAG,SAAS,MAAM;AAAA,EAAC,CAAC;AAChC,OAAK,QAAQ,GAAG,QAAQ,aAAa;AACrC,OAAK,QAAQ,GAAG,QAAQ,aAAa;AACrC,OAAK,GAAG,SAAS,CAAC,UAAU;AAC1B,kBAAc,GAAG,MAAM,OAAO;AAAA,CAAI;AAClC,QAAI,MAAM,WAAW,WAAY,QAAO,QAAQ;AAAA,EAClD,CAAC;AACD,OAAK,GAAG,SAAS,CAAC,MAAM,WAAW;AACjC,QAAI,YAAY,MAAM,WAAW,WAAY;AAC7C,WAAO,SAAS,IAAI,WAAW,UAAU,MAAM,MAAM;AAAA,EACvD,CAAC;AACD,UAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,UAAU,KAAK,IAAI;AAC1D,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AAId,eAAW;AACX,SAAK,cAAc,EAAE,QAAQ,MAAM,YAAY,wBAAwB,KAAK,CAAC;AAC7E;AAAA,EACF;AACA,cAAY,YAAY,MAAM,kBAAkB,WAAW,GAAG,GAAK;AACnE,gBAAc,YAAY,MAAM;AAC9B,QAAI,CAAC,WAAW,KAAK,WAAW,KAAK,SAAU;AAC/C,UAAM,UAAU;AAAA,MACd,KAAK;AAAA,IACP;AACA,QAAI,SAAS,UAAU,KAAK,SAAS,QAAQ,WAAW,OAAQ;AAChE,SAAK,mBAAmB,UAAU,QAAQ,UAAU,WAAW;AAAA,EACjE,GAAG,GAAG;AACN,aAAW,KAAK,YACZ,WAAW,MAAM;AACf,SAAK,mBAAmB,aAAa,SAAS;AAAA,EAChD,GAAG,KAAK,SAAS,IACjB;AACN;AAEA,eAAe,mBAAmB,QAAgC,QAA+B;AAC/F,MAAI,YAAY,oBAAqB;AACrC,wBAAsB;AACtB,UAAQ,EAAE,GAAG,OAAO,QAAQ,YAAY,YAAY,OAAO;AAC3D,oBAAkB,gBAAgB;AAClC,MAAI;AACF,QAAI,MAAM,cAAc,GAAG;AACzB,aAAO,QAAQ,OAAO,UAAU,OAAO,YAAY,MAAM;AAAA,IAC3D,OAAO;AACL,oBAAc,+DAA+D;AAC7E,YAAM,QAAQ,WAAW,MAAM,KAAK,mBAAmB,QAAQ,MAAM,GAAG,GAAG;AAC3E,YAAM,MAAM;AAAA,IACd;AAAA,EACF,UAAE;AACA,0BAAsB;AAAA,EACxB;AACF;AAEA,YAAY;","names":[]}
+{"version":3,"sources":["../src/job-runner.ts"],"sourcesContent":["import { spawn, type ChildProcess } from 'node:child_process';\nimport { buildChildEnv } from './child-env.js';\nimport {\n  appendFileSync,\n  existsSync,\n  readFileSync,\n  rmSync,\n  statSync,\n  truncateSync,\n  writeFileSync,\n} from 'node:fs';\nimport { dirname, extname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport {\n  loadPersistentShellSpec,\n  readJsonFile,\n  writeJsonAtomic,\n  type PersistentShellSpec,\n  type PersistentShellState,\n} from './jobs/persistent-store.js';\nimport {\n  signalProcessGroup,\n  terminateProcessTree,\n  waitForProcessClose,\n  waitForProcessGroupExit,\n  TERMINATE_GRACE_MS,\n} from './jobs/process-tree.js';\n\nconst specPath = process.argv[2];\nif (!specPath) {\n  process.exitCode = 2;\n  throw new Error('Missing persistent shell specification path.');\n}\nconst loaded = loadPersistentShellSpec(specPath);\nif ('error' in loaded) {\n  process.exitCode = 2;\n  throw new Error(loaded.error);\n}\nconst spec: PersistentShellSpec = loaded.spec;\n/**\n * How long a contended record write may block before it counts as failed. The first record and\n * the terminal record wait up to a second for Windows to release the file: the job cannot start\n * without the first, and the manager waits on the second to call a stop complete. Every other\n * write (the heartbeat, the child pid, `stopping`, a log rotation) is repeated by the next\n * heartbeat, so it gives up almost at once instead of stalling the runner's timers.\n */\nconst RECORD_RENAME_RETRY_BUDGET_MS = 1_000;\nconst BEST_EFFORT_RENAME_RETRY_BUDGET_MS = 50;\n/** A terminal record that still failed to write is retried on a timer this often, this many times. */\nconst TERMINAL_RECORD_RETRY_MS = 250;\nconst TERMINAL_RECORD_ATTEMPTS = 20;\n\nlet child: ChildProcess | undefined;\nlet terminal = false;\nlet terminationInFlight = false;\n// These timers are assigned after the child is wired so startup failures can still call finish().\nlet heartbeat: NodeJS.Timeout | undefined;\nlet controlPoll: NodeJS.Timeout | undefined;\nlet deadline: NodeJS.Timeout | undefined;\nconst startedAt = Date.now();\nlet state: PersistentShellState = {\n  version: 1,\n  revision: 1,\n  id: spec.id,\n  command: spec.command,\n  title: spec.title,\n  workdir: spec.workdir,\n  status: 'starting',\n  notify: spec.notify,\n  sandboxed: spec.sandboxed,\n  gitDirReadOnly: spec.gitDirReadOnly,\n  runnerPid: process.pid,\n  tokenHash: spec.tokenHash,\n  startedAt,\n  heartbeatAt: startedAt,\n  outputRotationSequence: 0,\n  truncatedBytes: 0,\n  timeoutMs: spec.timeoutMs,\n  deadlineAt: spec.timeoutMs ? startedAt + spec.timeoutMs : undefined,\n  parentSessionId: spec.parentSessionId,\n  rootRunId: spec.rootRunId,\n  parentRunId: spec.parentRunId,\n  outputPath: spec.outputPath,\n  controlPath: spec.controlPath,\n  completionSequence: 0,\n  completionDeliveredSequence: 0,\n  completionAcknowledgedSequence: 0,\n};\n\nfunction persist(budgetMs = RECORD_RENAME_RETRY_BUDGET_MS): void {\n  state = { ...state, revision: state.revision + 1, heartbeatAt: Date.now() };\n  writeJsonAtomic(spec.recordPath, state, { renameRetryBudgetMs: budgetMs });\n}\n\n/**\n * A non-terminal write: the heartbeat, the switch to `stopping`, a log rotation. One that fails\n * must not end the runner, or its job would keep running with nothing left to stop it; the next\n * heartbeat writes the same state again. The failure is counted on the record, which that next\n * write carries, rather than noted in the job's log: the log is the command's own output, and the\n * model reads it through BashOutput.\n */\nfunction persistBestEffort(what: string): void {\n  try {\n    persist(BEST_EFFORT_RENAME_RETRY_BUDGET_MS);\n  } catch (error) {\n    const code = (error as NodeJS.ErrnoException | undefined)?.code ?? 'unknown error';\n    state = {\n      ...state,\n      recordWriteFailures: (state.recordWriteFailures ?? 0) + 1,\n      lastRecordWriteError: `${what} write failed (${code})`,\n    };\n  }\n}\n\nfunction appendBounded(data: unknown): void {\n  const chunk = Buffer.isBuffer(data) ? data : Buffer.from(String(data));\n  if (chunk.length === 0) return;\n  try {\n    appendFileSync(spec.outputPath, chunk);\n    const size = statSync(spec.outputPath).size;\n    if (size <= spec.maxLogBytes) return;\n    const retained = readFileSync(spec.outputPath).subarray(-spec.maxLogBytes);\n    const discarded = size - retained.length;\n    truncateSync(spec.outputPath, 0);\n    writeFileSync(spec.outputPath, retained);\n    state = {\n      ...state,\n      outputRotationSequence: (state.outputRotationSequence ?? 0) + 1,\n      truncatedBytes: (state.truncatedBytes ?? 0) + discarded,\n    };\n    persistBestEffort('log rotation');\n  } catch {\n    // Output and its retention are best effort; lifecycle state remains authoritative.\n  }\n}\n\n/**\n * End the job's tree. Off Windows the first SIGTERM goes to the supervisor alone, because the\n * supervisor leads the job's own process group and passes the signal on to that group exactly once:\n * signalling the group from here as well would hand the command a second SIGTERM, which a command\n * that has installed its own handler or is midway through a graceful shutdown sees as two stops\n * rather than one. A supervisor that has already exited forwards nothing, so the signal falls\n * through to the group itself. From there the escalation is this process's own, exactly as before,\n * because the supervisor no longer passes SIGKILL along. Windows has no signal for a group, so\n * `taskkill /T /F` still walks the tree from the supervisor there.\n */\nasync function terminateTree(): Promise<boolean> {\n  const proc = child;\n  const pid = proc?.pid;\n  if (!proc || pid === undefined) return true;\n  if (process.platform === 'win32') {\n    return terminateProcessTree(proc, pid, (timeoutMs) => waitForProcessClose(proc, timeoutMs));\n  }\n  try {\n    process.kill(pid, 'SIGTERM');\n  } catch {\n    signalProcessGroup(proc, pid, 'SIGTERM');\n  }\n  if (await waitForProcessGroupExit(pid, TERMINATE_GRACE_MS)) return true;\n  signalProcessGroup(proc, pid, 'SIGKILL');\n  return waitForProcessGroupExit(pid, TERMINATE_GRACE_MS);\n}\n\nfunction finish(\n  status: 'exited' | 'failed' | 'killed' | 'timed_out',\n  code?: number | null,\n  signal?: NodeJS.Signals | string | null,\n  stopReason?: string,\n): void {\n  if (terminal) return;\n  terminal = true;\n  // Stop capturing output at terminality: once the record reads terminal, the\n  // manager may dismiss the job and delete its files, so a straggling stream\n  // chunk must not re-create the log after that point.\n  child?.stdout?.off('data', appendBounded);\n  child?.stderr?.off('data', appendBounded);\n  state = {\n    ...state,\n    status,\n    exitCode: code,\n    signal,\n    stopReason,\n    finishedAt: Date.now(),\n    completionSequence: state.completionSequence + 1,\n  };\n  // Remove the runner-owned control/spec files BEFORE persisting the terminal\n  // record. The manager treats an observable terminal record as \"stop\n  // complete\" and immediately expects these files to be gone, so the removals\n  // must happen-before the rename that publishes the terminal state — the old\n  // order left a window where a preempted runner had published \"killed\" while\n  // the spec file still existed.\n  try {\n    rmSync(spec.controlPath, { force: true });\n    rmSync(specPath, { force: true });\n  } catch {\n    // Best effort: a leaked control/spec file is cleaned up by the manager's\n    // lost-job reconciliation or dismissal, whereas skipping the terminal\n    // persist below would strand the job as \"stopping\" forever.\n  }\n  if (heartbeat) clearInterval(heartbeat);\n  if (controlPoll) clearInterval(controlPoll);\n  if (deadline) clearTimeout(deadline);\n  publishTerminalRecord(1);\n}\n\n/**\n * Write the terminal record, then exit. It is the one write the manager waits on to call a stop\n * complete, so a write that fails even after the retry budget is tried again on a timer rather\n * than ending the runner with its job still recorded as running. If every attempt fails, the\n * runner says at the end of the job's log what really happened, exits nonzero, and the manager's\n * heartbeat-staleness check reports the job lost.\n */\nfunction publishTerminalRecord(attempt: number): void {\n  try {\n    persist();\n  } catch (error) {\n    if (attempt < TERMINAL_RECORD_ATTEMPTS) {\n      setTimeout(() => publishTerminalRecord(attempt + 1), TERMINAL_RECORD_RETRY_MS);\n      return;\n    }\n    reportUnrecordedEnd(error);\n    process.exitCode = 1;\n    setTimeout(() => process.exit(1), 10).unref();\n    return;\n  }\n  setTimeout(() => process.exit(), 10).unref();\n}\n\n/**\n * Every attempt at the terminal record failed, so the manager will find a stale heartbeat and\n * call the job lost. Say what really happened at the end of the job's log, the one place left\n * that someone reads. The log is safe to write: the record never turned terminal, so the\n * manager cannot have dismissed the job and deleted it.\n */\nfunction reportUnrecordedEnd(error: unknown): void {\n  const code = (error as NodeJS.ErrnoException | undefined)?.code ?? 'unknown error';\n  const outcome =\n    state.exitCode === undefined || state.exitCode === null\n      ? state.status\n      : `${state.status}, exit code ${state.exitCode}`;\n  try {\n    appendFileSync(\n      spec.outputPath,\n      `[runner: the job ended (${outcome}) but its record could not be written (${code}); Book will report it as lost]\\n`,\n    );\n  } catch {\n    // There is nowhere left to say it.\n  }\n}\n\n/** The supervisor built beside this file: `.js` in dist, `.ts` when run from source through tsx. */\nfunction supervisorPath(): string {\n  const self = fileURLToPath(import.meta.url);\n  return join(dirname(self), `job-supervisor${extname(self)}`);\n}\n\nfunction failStartup(what: string, error: unknown): never {\n  const reason = error instanceof Error ? error.message : String(error);\n  process.stderr.write(`Persistent background runner could not ${what}: ${reason}\\n`);\n  process.exit(1);\n}\n\n/**\n * The env the supervisor is started with. `NODE_OPTIONS` is meant for the command the user asked\n * for, not for the supervisor standing between them: left in place it makes the supervisor open the\n * inspector and write \"Debugger listening...\" into the job's log, which the runner appends to the\n * command's own output. It is therefore taken out here and carried beside it, under a name of this\n * runner's own, which the supervisor puts back for the command alone.\n *\n * This process inherited Book's environment, so a `NODE_ENV` Book defaulted for its own renderer\n * travels the whole chain: it is not the job's, and a persistent job outlives Book to be the one\n * that most certainly must not carry it.\n */\nfunction supervisorEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = buildChildEnv(process.env, spec.env);\n  const nodeOptions = env.NODE_OPTIONS;\n  delete env.NODE_OPTIONS;\n  if (nodeOptions !== undefined) env.BOOK_SUPERVISED_NODE_OPTIONS = nodeOptions;\n  return env;\n}\n\n/**\n * Create the log, write the first record, then start the command under its supervisor. The first\n * record says `starting`, and the job counts as started once the second, carrying the command's\n * pid, has landed: `start()` returns on the first record whose status is not `starting`, so a\n * record that claimed otherwise would report a persistent job with nothing to stop. That first\n * write is therefore the one that cannot be best effort — without it the manager gives up, forgets\n * the job and deletes its files while the command runs on with nothing left to stop it. So until\n * it has landed, a failure ends the runner before anything runs; a failure on the second ends the\n * command first, and both say why on stderr, which `start()` reports.\n */\nfunction startRunner(): void {\n  try {\n    writeFileSync(spec.outputPath, '', { encoding: 'utf8', mode: 0o600 });\n  } catch (error) {\n    failStartup('create its job log', error);\n  }\n  try {\n    persist();\n  } catch (error) {\n    failStartup('write its job record', error);\n  }\n  let proc: ChildProcess;\n  try {\n    // `process.execArgv` carries tsx's loader when this runner itself runs from source.\n    proc = spawn(process.execPath, [...process.execArgv, supervisorPath(), specPath], {\n      cwd: spec.workdir,\n      env: supervisorEnv(),\n      detached: true,\n      stdio: ['pipe', 'pipe', 'pipe'],\n      windowsHide: true,\n    });\n  } catch (error) {\n    appendBounded(error instanceof Error ? `${error.message}\\n` : `${String(error)}\\n`);\n    process.exitCode = 1;\n    finish('failed');\n    return;\n  }\n  child = proc;\n  // The supervisor's stdin is its lifeline to this process: never written and never closed, it\n  // reaches end-of-file only when this process is gone. See job-supervisor.ts.\n  proc.stdin?.on('error', () => {});\n  proc.stdout?.on('data', appendBounded);\n  proc.stderr?.on('data', appendBounded);\n  proc.on('error', (error) => {\n    appendBounded(`${error.message}\\n`);\n    if (state.status !== 'stopping') finish('failed');\n  });\n  proc.on('close', (code, signal) => {\n    if (terminal || state.status === 'stopping') return;\n    finish(code === 0 ? 'exited' : 'failed', code, signal);\n  });\n  state = { ...state, status: 'running', childPid: proc.pid };\n  try {\n    persist();\n  } catch (error) {\n    // The manager calls the job started only once it reads this record. Without it, it would\n    // give up, forget the job and delete its files while the command ran on: end the command\n    // first, then say why.\n    terminal = true;\n    void terminateTree().finally(() => failStartup('write its job record', error));\n    return;\n  }\n  heartbeat = setInterval(() => persistBestEffort('heartbeat'), 1_000);\n  controlPoll = setInterval(() => {\n    if (!existsSync(spec.controlPath) || terminal) return;\n    const control = readJsonFile<{ token?: string; action?: string; reason?: string }>(\n      spec.controlPath,\n    );\n    if (control?.token !== spec.token || control.action !== 'stop') return;\n    void requestTermination('killed', control.reason ?? 'requested');\n  }, 250);\n  deadline = spec.timeoutMs\n    ? setTimeout(() => {\n        void requestTermination('timed_out', 'timeout');\n      }, spec.timeoutMs)\n    : undefined;\n}\n\nasync function requestTermination(status: 'killed' | 'timed_out', reason: string): Promise<void> {\n  if (terminal || terminationInFlight) return;\n  terminationInFlight = true;\n  state = { ...state, status: 'stopping', stopReason: reason };\n  persistBestEffort('stopping state');\n  try {\n    if (await terminateTree()) {\n      finish(status, child?.exitCode, child?.signalCode, reason);\n    } else {\n      appendBounded('[termination requested; process is still running; retrying]\\n');\n      const retry = setTimeout(() => void requestTermination(status, reason), 500);\n      retry.unref();\n    }\n  } finally {\n    terminationInFlight = false;\n  }\n}\n\nstartRunner();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAgC;AAEzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS,SAAS,YAAY;AACvC,SAAS,qBAAqB;AAgB9B,IAAM,WAAW,QAAQ,KAAK,CAAC;AAC/B,IAAI,CAAC,UAAU;AACb,UAAQ,WAAW;AACnB,QAAM,IAAI,MAAM,8CAA8C;AAChE;AACA,IAAM,SAAS,wBAAwB,QAAQ;AAC/C,IAAI,WAAW,QAAQ;AACrB,UAAQ,WAAW;AACnB,QAAM,IAAI,MAAM,OAAO,KAAK;AAC9B;AACA,IAAM,OAA4B,OAAO;AAQzC,IAAM,gCAAgC;AACtC,IAAM,qCAAqC;AAE3C,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AAEjC,IAAI;AACJ,IAAI,WAAW;AACf,IAAI,sBAAsB;AAE1B,IAAI;AACJ,IAAI;AACJ,IAAI;AACJ,IAAM,YAAY,KAAK,IAAI;AAC3B,IAAI,QAA8B;AAAA,EAChC,SAAS;AAAA,EACT,UAAU;AAAA,EACV,IAAI,KAAK;AAAA,EACT,SAAS,KAAK;AAAA,EACd,OAAO,KAAK;AAAA,EACZ,SAAS,KAAK;AAAA,EACd,QAAQ;AAAA,EACR,QAAQ,KAAK;AAAA,EACb,WAAW,KAAK;AAAA,EAChB,gBAAgB,KAAK;AAAA,EACrB,WAAW,QAAQ;AAAA,EACnB,WAAW,KAAK;AAAA,EAChB;AAAA,EACA,aAAa;AAAA,EACb,wBAAwB;AAAA,EACxB,gBAAgB;AAAA,EAChB,WAAW,KAAK;AAAA,EAChB,YAAY,KAAK,YAAY,YAAY,KAAK,YAAY;AAAA,EAC1D,iBAAiB,KAAK;AAAA,EACtB,WAAW,KAAK;AAAA,EAChB,aAAa,KAAK;AAAA,EAClB,YAAY,KAAK;AAAA,EACjB,aAAa,KAAK;AAAA,EAClB,oBAAoB;AAAA,EACpB,6BAA6B;AAAA,EAC7B,gCAAgC;AAClC;AAEA,SAAS,QAAQ,WAAW,+BAAqC;AAC/D,UAAQ,EAAE,GAAG,OAAO,UAAU,MAAM,WAAW,GAAG,aAAa,KAAK,IAAI,EAAE;AAC1E,kBAAgB,KAAK,YAAY,OAAO,EAAE,qBAAqB,SAAS,CAAC;AAC3E;AASA,SAAS,kBAAkB,MAAoB;AAC7C,MAAI;AACF,YAAQ,kCAAkC;AAAA,EAC5C,SAAS,OAAO;AACd,UAAM,OAAQ,OAA6C,QAAQ;AACnE,YAAQ;AAAA,MACN,GAAG;AAAA,MACH,sBAAsB,MAAM,uBAAuB,KAAK;AAAA,MACxD,sBAAsB,GAAG,IAAI,kBAAkB,IAAI;AAAA,IACrD;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAqB;AAC1C,QAAM,QAAQ,OAAO,SAAS,IAAI,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,CAAC;AACrE,MAAI,MAAM,WAAW,EAAG;AACxB,MAAI;AACF,mBAAe,KAAK,YAAY,KAAK;AACrC,UAAM,OAAO,SAAS,KAAK,UAAU,EAAE;AACvC,QAAI,QAAQ,KAAK,YAAa;AAC9B,UAAM,WAAW,aAAa,KAAK,UAAU,EAAE,SAAS,CAAC,KAAK,WAAW;AACzE,UAAM,YAAY,OAAO,SAAS;AAClC,iBAAa,KAAK,YAAY,CAAC;AAC/B,kBAAc,KAAK,YAAY,QAAQ;AACvC,YAAQ;AAAA,MACN,GAAG;AAAA,MACH,yBAAyB,MAAM,0BAA0B,KAAK;AAAA,MAC9D,iBAAiB,MAAM,kBAAkB,KAAK;AAAA,IAChD;AACA,sBAAkB,cAAc;AAAA,EAClC,QAAQ;AAAA,EAER;AACF;AAYA,eAAe,gBAAkC;AAC/C,QAAM,OAAO;AACb,QAAM,MAAM,MAAM;AAClB,MAAI,CAAC,QAAQ,QAAQ,OAAW,QAAO;AACvC,MAAI,QAAQ,aAAa,SAAS;AAChC,WAAO,qBAAqB,MAAM,KAAK,CAAC,cAAc,oBAAoB,MAAM,SAAS,CAAC;AAAA,EAC5F;AACA,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,QAAQ;AACN,uBAAmB,MAAM,KAAK,SAAS;AAAA,EACzC;AACA,MAAI,MAAM,wBAAwB,KAAK,kBAAkB,EAAG,QAAO;AACnE,qBAAmB,MAAM,KAAK,SAAS;AACvC,SAAO,wBAAwB,KAAK,kBAAkB;AACxD;AAEA,SAAS,OACP,QACA,MACA,QACA,YACM;AACN,MAAI,SAAU;AACd,aAAW;AAIX,SAAO,QAAQ,IAAI,QAAQ,aAAa;AACxC,SAAO,QAAQ,IAAI,QAAQ,aAAa;AACxC,UAAQ;AAAA,IACN,GAAG;AAAA,IACH;AAAA,IACA,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA,YAAY,KAAK,IAAI;AAAA,IACrB,oBAAoB,MAAM,qBAAqB;AAAA,EACjD;AAOA,MAAI;AACF,WAAO,KAAK,aAAa,EAAE,OAAO,KAAK,CAAC;AACxC,WAAO,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,EAClC,QAAQ;AAAA,EAIR;AACA,MAAI,UAAW,eAAc,SAAS;AACtC,MAAI,YAAa,eAAc,WAAW;AAC1C,MAAI,SAAU,cAAa,QAAQ;AACnC,wBAAsB,CAAC;AACzB;AASA,SAAS,sBAAsB,SAAuB;AACpD,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AACd,QAAI,UAAU,0BAA0B;AACtC,iBAAW,MAAM,sBAAsB,UAAU,CAAC,GAAG,wBAAwB;AAC7E;AAAA,IACF;AACA,wBAAoB,KAAK;AACzB,YAAQ,WAAW;AACnB,eAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM;AAC5C;AAAA,EACF;AACA,aAAW,MAAM,QAAQ,KAAK,GAAG,EAAE,EAAE,MAAM;AAC7C;AAQA,SAAS,oBAAoB,OAAsB;AACjD,QAAM,OAAQ,OAA6C,QAAQ;AACnE,QAAM,UACJ,MAAM,aAAa,UAAa,MAAM,aAAa,OAC/C,MAAM,SACN,GAAG,MAAM,MAAM,eAAe,MAAM,QAAQ;AAClD,MAAI;AACF;AAAA,MACE,KAAK;AAAA,MACL,2BAA2B,OAAO,0CAA0C,IAAI;AAAA;AAAA,IAClF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAGA,SAAS,iBAAyB;AAChC,QAAM,OAAO,cAAc,YAAY,GAAG;AAC1C,SAAO,KAAK,QAAQ,IAAI,GAAG,iBAAiB,QAAQ,IAAI,CAAC,EAAE;AAC7D;AAEA,SAAS,YAAY,MAAc,OAAuB;AACxD,QAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,UAAQ,OAAO,MAAM,0CAA0C,IAAI,KAAK,MAAM;AAAA,CAAI;AAClF,UAAQ,KAAK,CAAC;AAChB;AAaA,SAAS,gBAAmC;AAC1C,QAAM,MAAyB,cAAc,QAAQ,KAAK,KAAK,GAAG;AAClE,QAAM,cAAc,IAAI;AACxB,SAAO,IAAI;AACX,MAAI,gBAAgB,OAAW,KAAI,+BAA+B;AAClE,SAAO;AACT;AAYA,SAAS,cAAoB;AAC3B,MAAI;AACF,kBAAc,KAAK,YAAY,IAAI,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AAAA,EACtE,SAAS,OAAO;AACd,gBAAY,sBAAsB,KAAK;AAAA,EACzC;AACA,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AACd,gBAAY,wBAAwB,KAAK;AAAA,EAC3C;AACA,MAAI;AACJ,MAAI;AAEF,WAAO,MAAM,QAAQ,UAAU,CAAC,GAAG,QAAQ,UAAU,eAAe,GAAG,QAAQ,GAAG;AAAA,MAChF,KAAK,KAAK;AAAA,MACV,KAAK,cAAc;AAAA,MACnB,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,aAAa;AAAA,IACf,CAAC;AAAA,EACH,SAAS,OAAO;AACd,kBAAc,iBAAiB,QAAQ,GAAG,MAAM,OAAO;AAAA,IAAO,GAAG,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,YAAQ,WAAW;AACnB,WAAO,QAAQ;AACf;AAAA,EACF;AACA,UAAQ;AAGR,OAAK,OAAO,GAAG,SAAS,MAAM;AAAA,EAAC,CAAC;AAChC,OAAK,QAAQ,GAAG,QAAQ,aAAa;AACrC,OAAK,QAAQ,GAAG,QAAQ,aAAa;AACrC,OAAK,GAAG,SAAS,CAAC,UAAU;AAC1B,kBAAc,GAAG,MAAM,OAAO;AAAA,CAAI;AAClC,QAAI,MAAM,WAAW,WAAY,QAAO,QAAQ;AAAA,EAClD,CAAC;AACD,OAAK,GAAG,SAAS,CAAC,MAAM,WAAW;AACjC,QAAI,YAAY,MAAM,WAAW,WAAY;AAC7C,WAAO,SAAS,IAAI,WAAW,UAAU,MAAM,MAAM;AAAA,EACvD,CAAC;AACD,UAAQ,EAAE,GAAG,OAAO,QAAQ,WAAW,UAAU,KAAK,IAAI;AAC1D,MAAI;AACF,YAAQ;AAAA,EACV,SAAS,OAAO;AAId,eAAW;AACX,SAAK,cAAc,EAAE,QAAQ,MAAM,YAAY,wBAAwB,KAAK,CAAC;AAC7E;AAAA,EACF;AACA,cAAY,YAAY,MAAM,kBAAkB,WAAW,GAAG,GAAK;AACnE,gBAAc,YAAY,MAAM;AAC9B,QAAI,CAAC,WAAW,KAAK,WAAW,KAAK,SAAU;AAC/C,UAAM,UAAU;AAAA,MACd,KAAK;AAAA,IACP;AACA,QAAI,SAAS,UAAU,KAAK,SAAS,QAAQ,WAAW,OAAQ;AAChE,SAAK,mBAAmB,UAAU,QAAQ,UAAU,WAAW;AAAA,EACjE,GAAG,GAAG;AACN,aAAW,KAAK,YACZ,WAAW,MAAM;AACf,SAAK,mBAAmB,aAAa,SAAS;AAAA,EAChD,GAAG,KAAK,SAAS,IACjB;AACN;AAEA,eAAe,mBAAmB,QAAgC,QAA+B;AAC/F,MAAI,YAAY,oBAAqB;AACrC,wBAAsB;AACtB,UAAQ,EAAE,GAAG,OAAO,QAAQ,YAAY,YAAY,OAAO;AAC3D,oBAAkB,gBAAgB;AAClC,MAAI;AACF,QAAI,MAAM,cAAc,GAAG;AACzB,aAAO,QAAQ,OAAO,UAAU,OAAO,YAAY,MAAM;AAAA,IAC3D,OAAO;AACL,oBAAc,+DAA+D;AAC7E,YAAM,QAAQ,WAAW,MAAM,KAAK,mBAAmB,QAAQ,MAAM,GAAG,GAAG;AAC3E,YAAM,MAAM;AAAA,IACd;AAAA,EACF,UAAE;AACA,0BAAsB;AAAA,EACxB;AACF;AAEA,YAAY;","names":[]}

package/dist/job-supervisor.js

@@ -1,15 +1,24 @@
+import {
+  spawnCommandExecution
+} from "./chunk-W7SLYS3M.js";
 import {
   loadPersistentShellSpec
-} from "./chunk-YC6W4EJH.js";
+} from "./chunk-JGF5HLSI.js";
 import {
   TERMINATE_GRACE_MS,
   runTaskkill
-} from "./chunk-C7ADUNPR.js";
+} from "./chunk-32WBCUAN.js";
 import "./chunk-RT5SATF7.js";
 import {
   buildChildEnv
 } from "./chunk-XHAO3K7I.js";
-import "./chunk-224FJZLH.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 
 // src/job-supervisor.ts
@@ -45,7 +54,7 @@ var options = {
   windowsHide: true,
   env: commandEnv()
 };
-var command = spec.exec ? spawn(spec.exec.file, spec.exec.args, { ...options, shell: false }) : spawn(spec.effectiveCommand, { ...options, shell: true });
+var command = spec.exec ? spawnCommandExecution(spec.exec, options) : spawn(spec.effectiveCommand, { ...options, shell: true });
 var lifelineLost = false;
 command.on("error", (error) => {
   process.stderr.write(`${error.message}

package/dist/job-supervisor.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/job-supervisor.ts"],"sourcesContent":["/**\n * The supervisor that keeps a persistent background job's command from outliving its runner.\n *\n * The detached job runner is the only thing that stops a command, so when the runner died any\n * other way than through a stop request (a crash, Task Manager, `kill -9`), the command kept\n * running with nothing left to stop it. On Windows the runner's death did end the shell wrapper,\n * which Node puts in a job object that dies with its parent, but not the process the wrapper had\n * started. Elsewhere the command ran in its own process group, and nothing ended it at all.\n *\n * The runner now starts this process detached, so that it outlives the runner: outside the\n * runner's job object on Windows, as the leader of its own process group elsewhere. This process\n * starts the command. Its stdin is a pipe the runner holds open and never writes, a lifeline: when\n * the runner goes away, for any reason, the operating system closes the pipe, and this process\n * ends the command's whole tree and then itself. The pipe needs no polling and cannot be fooled by\n * a reused pid. The command writes straight into the runner's own pipes, and this process exits\n * with the command's exit code, so the runner records what it always recorded. The pid Book reports\n * for the job is this process's; off Windows a signal sent to it is passed to the whole job.\n *\n * Usage, from the runner: node job-supervisor.js <spec-path>\n */\nimport { spawn, type SpawnOptions } from 'node:child_process';\nimport { constants } from 'node:os';\nimport { buildChildEnv } from './child-env.js';\nimport { loadPersistentShellSpec } from './jobs/persistent-store.js';\nimport { runTaskkill, TERMINATE_GRACE_MS } from './jobs/process-tree.js';\n\n/** Signals this process can die of just as the command did: Node gives them no meaning of its own. */\nconst RERAISABLE_SIGNALS: ReadonlySet<NodeJS.Signals> = new Set([\n  'SIGTERM',\n  'SIGINT',\n  'SIGHUP',\n  'SIGKILL',\n]);\n\nconst [specPath] = process.argv.slice(2);\nif (!specPath) {\n  process.stderr.write('Missing persistent shell specification path.\\n');\n  process.exit(2);\n}\n// The same checks the runner applies: this process starts the command, so a spec it must not\n// execute is exactly as unsafe here as it is there.\nconst loaded = loadPersistentShellSpec(specPath);\nif ('error' in loaded) {\n  process.stderr.write(`${loaded.error}\\n`);\n  process.exit(2);\n}\nconst spec = loaded.spec;\n\n/**\n * The env the command is started with. This process was started without `NODE_OPTIONS`, so that the\n * options the user asked for apply to their command rather than opening an inspector here and\n * writing about it into the job's log; the runner carries them beside it for exactly that reason.\n *\n * A `NODE_ENV` Book defaulted for its own renderer is dropped here too, the last link of the\n * chain: the runner has already removed its own, and this process reads what it inherited.\n */\nfunction commandEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = buildChildEnv(process.env);\n  const nodeOptions = env.BOOK_SUPERVISED_NODE_OPTIONS;\n  delete env.BOOK_SUPERVISED_NODE_OPTIONS;\n  if (nodeOptions !== undefined) env.NODE_OPTIONS = nodeOptions;\n  return env;\n}\n\nconst options: SpawnOptions = {\n  stdio: ['ignore', 'inherit', 'inherit'],\n  windowsHide: true,\n  env: commandEnv(),\n};\n// Sandboxed specs carry an argv; only unsandboxed ones go through a shell.\nconst command = spec.exec\n  ? spawn(spec.exec.file, spec.exec.args, { ...options, shell: false })\n  : spawn(spec.effectiveCommand, { ...options, shell: true });\n\n/** Set once the runner is gone and this process has begun ending the command's tree. */\nlet lifelineLost = false;\n\ncommand.on('error', (error) => {\n  process.stderr.write(`${error.message}\\n`);\n  if (!lifelineLost) process.exit(1);\n});\n\ncommand.on('exit', (code, signal) => {\n  // Once the runner is gone, this process exits when the tree has been ended, not before.\n  if (lifelineLost) return;\n  if (signal && process.platform !== 'win32') {\n    if (RERAISABLE_SIGNALS.has(signal)) {\n      // Die of the command's signal, so the runner records it the way it did before this process\n      // stood between them.\n      // Drop the forwarding handler, or it would swallow the re-raised signal.\n      process.removeAllListeners(signal);\n      process.kill(process.pid, signal);\n      setTimeout(() => process.exit(1), 100);\n      return;\n    }\n    // A signal Node gives a meaning of its own cannot be re-raised: SIGUSR1 would open the\n    // inspector and write \"Debugger listening...\" into the job's log, and SIGSEGV, SIGBUS, SIGABRT\n    // and SIGQUIT would dump this process's core. Report the command's death the way a shell does.\n    process.exit(128 + (constants.signals[signal] ?? 0));\n  }\n  process.exit(code ?? 1);\n});\n\n/**\n * Signals sent to this process, the pid Book reports for the job, are meant for the job: pass each\n * to the whole group, as the runner's own stop does, and exit with the command. Forwarded once per\n * kind, because the forwarded signal reaches this process too. Windows has no such signals; there\n * the runner's stop goes through taskkill.\n */\nconst FORWARDED_SIGNALS: readonly NodeJS.Signals[] = ['SIGTERM', 'SIGINT', 'SIGHUP'];\nconst forwarded = new Set<NodeJS.Signals>();\nif (process.platform !== 'win32') {\n  for (const kind of FORWARDED_SIGNALS) {\n    process.on(kind, () => {\n      if (lifelineLost || forwarded.has(kind)) return;\n      forwarded.add(kind);\n      try {\n        process.kill(-process.pid, kind);\n      } catch {\n        // The group has already exited.\n      }\n    });\n  }\n}\n\n/** How long one `taskkill` may take, and how many times it is tried before the tree is given up on. */\nconst TASKKILL_TIMEOUT_MS = 10_000;\nconst TASKKILL_ATTEMPTS = 3;\n\n/**\n * `taskkill /T /F` on the command's tree, retried until one of them actually runs. A single attempt\n * that fails or times out leaves the command's descendants running, and here there is nobody to\n * escalate afterwards: this process is about to exit and the runner it served is already gone.\n */\nasync function killCommandTree(pid: number): Promise<void> {\n  for (let attempt = 1; attempt <= TASKKILL_ATTEMPTS; attempt++) {\n    if (await runTaskkill(pid, TASKKILL_TIMEOUT_MS)) return;\n  }\n}\n\n/** The runner is gone: end the command's whole tree, then exit. */\nfunction endCommandTree(): void {\n  if (lifelineLost) return;\n  lifelineLost = true;\n  if (process.platform === 'win32') {\n    if (command.pid === undefined) process.exit(1);\n    // taskkill walks the tree from the command's root, which is still alive because this process\n    // holds it. Exit only when the tree kill is done: as a child of this process, it would die with\n    // it, taking the walks it had left undone with it.\n    void killCommandTree(command.pid).finally(() => process.exit(1));\n    return;\n  }\n  // This process leads the command's process group, and the group signal below reaches it too. Its\n  // own SIGTERM is already spared, by the forwarding handler above returning now that the lifeline\n  // is lost; that is what lets the escalation below run, and it is why nothing else has to spare it\n  // a second time.\n  try {\n    process.kill(-process.pid, 'SIGTERM');\n  } catch {\n    // The group has already exited.\n  }\n  // The group includes this process, so waitForProcessGroupExit could never report it empty:\n  // escalate on the grace alone. SIGKILL ends this process too.\n  setTimeout(() => {\n    try {\n      process.kill(-process.pid, 'SIGKILL');\n    } catch {\n      // The group has already exited.\n    }\n    process.exit(1);\n  }, TERMINATE_GRACE_MS);\n}\n\nprocess.stdin.on('end', endCommandTree);\nprocess.stdin.on('error', endCommandTree);\nprocess.stdin.resume();\n"],"mappings":";;;;;;;;;;;;;;;AAoBA,SAAS,aAAgC;AACzC,SAAS,iBAAiB;AAM1B,IAAM,qBAAkD,oBAAI,IAAI;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC;AACvC,IAAI,CAAC,UAAU;AACb,UAAQ,OAAO,MAAM,gDAAgD;AACrE,UAAQ,KAAK,CAAC;AAChB;AAGA,IAAM,SAAS,wBAAwB,QAAQ;AAC/C,IAAI,WAAW,QAAQ;AACrB,UAAQ,OAAO,MAAM,GAAG,OAAO,KAAK;AAAA,CAAI;AACxC,UAAQ,KAAK,CAAC;AAChB;AACA,IAAM,OAAO,OAAO;AAUpB,SAAS,aAAgC;AACvC,QAAM,MAAyB,cAAc,QAAQ,GAAG;AACxD,QAAM,cAAc,IAAI;AACxB,SAAO,IAAI;AACX,MAAI,gBAAgB,OAAW,KAAI,eAAe;AAClD,SAAO;AACT;AAEA,IAAM,UAAwB;AAAA,EAC5B,OAAO,CAAC,UAAU,WAAW,SAAS;AAAA,EACtC,aAAa;AAAA,EACb,KAAK,WAAW;AAClB;AAEA,IAAM,UAAU,KAAK,OACjB,MAAM,KAAK,KAAK,MAAM,KAAK,KAAK,MAAM,EAAE,GAAG,SAAS,OAAO,MAAM,CAAC,IAClE,MAAM,KAAK,kBAAkB,EAAE,GAAG,SAAS,OAAO,KAAK,CAAC;AAG5D,IAAI,eAAe;AAEnB,QAAQ,GAAG,SAAS,CAAC,UAAU;AAC7B,UAAQ,OAAO,MAAM,GAAG,MAAM,OAAO;AAAA,CAAI;AACzC,MAAI,CAAC,aAAc,SAAQ,KAAK,CAAC;AACnC,CAAC;AAED,QAAQ,GAAG,QAAQ,CAAC,MAAM,WAAW;AAEnC,MAAI,aAAc;AAClB,MAAI,UAAU,QAAQ,aAAa,SAAS;AAC1C,QAAI,mBAAmB,IAAI,MAAM,GAAG;AAIlC,cAAQ,mBAAmB,MAAM;AACjC,cAAQ,KAAK,QAAQ,KAAK,MAAM;AAChC,iBAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,GAAG;AACrC;AAAA,IACF;AAIA,YAAQ,KAAK,OAAO,UAAU,QAAQ,MAAM,KAAK,EAAE;AAAA,EACrD;AACA,UAAQ,KAAK,QAAQ,CAAC;AACxB,CAAC;AAQD,IAAM,oBAA+C,CAAC,WAAW,UAAU,QAAQ;AACnF,IAAM,YAAY,oBAAI,IAAoB;AAC1C,IAAI,QAAQ,aAAa,SAAS;AAChC,aAAW,QAAQ,mBAAmB;AACpC,YAAQ,GAAG,MAAM,MAAM;AACrB,UAAI,gBAAgB,UAAU,IAAI,IAAI,EAAG;AACzC,gBAAU,IAAI,IAAI;AAClB,UAAI;AACF,gBAAQ,KAAK,CAAC,QAAQ,KAAK,IAAI;AAAA,MACjC,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAGA,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAO1B,eAAe,gBAAgB,KAA4B;AACzD,WAAS,UAAU,GAAG,WAAW,mBAAmB,WAAW;AAC7D,QAAI,MAAM,YAAY,KAAK,mBAAmB,EAAG;AAAA,EACnD;AACF;AAGA,SAAS,iBAAuB;AAC9B,MAAI,aAAc;AAClB,iBAAe;AACf,MAAI,QAAQ,aAAa,SAAS;AAChC,QAAI,QAAQ,QAAQ,OAAW,SAAQ,KAAK,CAAC;AAI7C,SAAK,gBAAgB,QAAQ,GAAG,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/D;AAAA,EACF;AAKA,MAAI;AACF,YAAQ,KAAK,CAAC,QAAQ,KAAK,SAAS;AAAA,EACtC,QAAQ;AAAA,EAER;AAGA,aAAW,MAAM;AACf,QAAI;AACF,cAAQ,KAAK,CAAC,QAAQ,KAAK,SAAS;AAAA,IACtC,QAAQ;AAAA,IAER;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,kBAAkB;AACvB;AAEA,QAAQ,MAAM,GAAG,OAAO,cAAc;AACtC,QAAQ,MAAM,GAAG,SAAS,cAAc;AACxC,QAAQ,MAAM,OAAO;","names":[]}
+{"version":3,"sources":["../src/job-supervisor.ts"],"sourcesContent":["/**\n * The supervisor that keeps a persistent background job's command from outliving its runner.\n *\n * The detached job runner is the only thing that stops a command, so when the runner died any\n * other way than through a stop request (a crash, Task Manager, `kill -9`), the command kept\n * running with nothing left to stop it. On Windows the runner's death did end the shell wrapper,\n * which Node puts in a job object that dies with its parent, but not the process the wrapper had\n * started. Elsewhere the command ran in its own process group, and nothing ended it at all.\n *\n * The runner now starts this process detached, so that it outlives the runner: outside the\n * runner's job object on Windows, as the leader of its own process group elsewhere. This process\n * starts the command. Its stdin is a pipe the runner holds open and never writes, a lifeline: when\n * the runner goes away, for any reason, the operating system closes the pipe, and this process\n * ends the command's whole tree and then itself. The pipe needs no polling and cannot be fooled by\n * a reused pid. The command writes straight into the runner's own pipes, and this process exits\n * with the command's exit code, so the runner records what it always recorded. The pid Book reports\n * for the job is this process's; off Windows a signal sent to it is passed to the whole job.\n *\n * Usage, from the runner: node job-supervisor.js <spec-path>\n */\nimport { spawn, type SpawnOptions } from 'node:child_process';\nimport { constants } from 'node:os';\nimport { buildChildEnv } from './child-env.js';\nimport { loadPersistentShellSpec } from './jobs/persistent-store.js';\nimport { runTaskkill, TERMINATE_GRACE_MS } from './jobs/process-tree.js';\nimport { spawnCommandExecution } from './shell-selection.js';\n\n/** Signals this process can die of just as the command did: Node gives them no meaning of its own. */\nconst RERAISABLE_SIGNALS: ReadonlySet<NodeJS.Signals> = new Set([\n  'SIGTERM',\n  'SIGINT',\n  'SIGHUP',\n  'SIGKILL',\n]);\n\nconst [specPath] = process.argv.slice(2);\nif (!specPath) {\n  process.stderr.write('Missing persistent shell specification path.\\n');\n  process.exit(2);\n}\n// The same checks the runner applies: this process starts the command, so a spec it must not\n// execute is exactly as unsafe here as it is there.\nconst loaded = loadPersistentShellSpec(specPath);\nif ('error' in loaded) {\n  process.stderr.write(`${loaded.error}\\n`);\n  process.exit(2);\n}\nconst spec = loaded.spec;\n\n/**\n * The env the command is started with. This process was started without `NODE_OPTIONS`, so that the\n * options the user asked for apply to their command rather than opening an inspector here and\n * writing about it into the job's log; the runner carries them beside it for exactly that reason.\n *\n * A `NODE_ENV` Book defaulted for its own renderer is dropped here too, the last link of the\n * chain: the runner has already removed its own, and this process reads what it inherited.\n */\nfunction commandEnv(): NodeJS.ProcessEnv {\n  const env: NodeJS.ProcessEnv = buildChildEnv(process.env);\n  const nodeOptions = env.BOOK_SUPERVISED_NODE_OPTIONS;\n  delete env.BOOK_SUPERVISED_NODE_OPTIONS;\n  if (nodeOptions !== undefined) env.NODE_OPTIONS = nodeOptions;\n  return env;\n}\n\nconst options: SpawnOptions = {\n  stdio: ['ignore', 'inherit', 'inherit'],\n  windowsHide: true,\n  env: commandEnv(),\n};\n// Sandboxed specs and a session shell spawned as argv carry an `exec`; the rest go through a shell.\n// `exec.env` (on Windows, the command in `BOOK_BASH_COMMAND` for Git Bash or any POSIX-named sh)\n// reaches this spawn alone, never the runner's environment or this process's.\nconst command = spec.exec\n  ? spawnCommandExecution(spec.exec, options)\n  : spawn(spec.effectiveCommand, { ...options, shell: true });\n\n/** Set once the runner is gone and this process has begun ending the command's tree. */\nlet lifelineLost = false;\n\ncommand.on('error', (error) => {\n  process.stderr.write(`${error.message}\\n`);\n  if (!lifelineLost) process.exit(1);\n});\n\ncommand.on('exit', (code, signal) => {\n  // Once the runner is gone, this process exits when the tree has been ended, not before.\n  if (lifelineLost) return;\n  if (signal && process.platform !== 'win32') {\n    if (RERAISABLE_SIGNALS.has(signal)) {\n      // Die of the command's signal, so the runner records it the way it did before this process\n      // stood between them.\n      // Drop the forwarding handler, or it would swallow the re-raised signal.\n      process.removeAllListeners(signal);\n      process.kill(process.pid, signal);\n      setTimeout(() => process.exit(1), 100);\n      return;\n    }\n    // A signal Node gives a meaning of its own cannot be re-raised: SIGUSR1 would open the\n    // inspector and write \"Debugger listening...\" into the job's log, and SIGSEGV, SIGBUS, SIGABRT\n    // and SIGQUIT would dump this process's core. Report the command's death the way a shell does.\n    process.exit(128 + (constants.signals[signal] ?? 0));\n  }\n  process.exit(code ?? 1);\n});\n\n/**\n * Signals sent to this process, the pid Book reports for the job, are meant for the job: pass each\n * to the whole group, as the runner's own stop does, and exit with the command. Forwarded once per\n * kind, because the forwarded signal reaches this process too. Windows has no such signals; there\n * the runner's stop goes through taskkill.\n */\nconst FORWARDED_SIGNALS: readonly NodeJS.Signals[] = ['SIGTERM', 'SIGINT', 'SIGHUP'];\nconst forwarded = new Set<NodeJS.Signals>();\nif (process.platform !== 'win32') {\n  for (const kind of FORWARDED_SIGNALS) {\n    process.on(kind, () => {\n      if (lifelineLost || forwarded.has(kind)) return;\n      forwarded.add(kind);\n      try {\n        process.kill(-process.pid, kind);\n      } catch {\n        // The group has already exited.\n      }\n    });\n  }\n}\n\n/** How long one `taskkill` may take, and how many times it is tried before the tree is given up on. */\nconst TASKKILL_TIMEOUT_MS = 10_000;\nconst TASKKILL_ATTEMPTS = 3;\n\n/**\n * `taskkill /T /F` on the command's tree, retried until one of them actually runs. A single attempt\n * that fails or times out leaves the command's descendants running, and here there is nobody to\n * escalate afterwards: this process is about to exit and the runner it served is already gone.\n */\nasync function killCommandTree(pid: number): Promise<void> {\n  for (let attempt = 1; attempt <= TASKKILL_ATTEMPTS; attempt++) {\n    if (await runTaskkill(pid, TASKKILL_TIMEOUT_MS)) return;\n  }\n}\n\n/** The runner is gone: end the command's whole tree, then exit. */\nfunction endCommandTree(): void {\n  if (lifelineLost) return;\n  lifelineLost = true;\n  if (process.platform === 'win32') {\n    if (command.pid === undefined) process.exit(1);\n    // taskkill walks the tree from the command's root, which is still alive because this process\n    // holds it. Exit only when the tree kill is done: as a child of this process, it would die with\n    // it, taking the walks it had left undone with it.\n    void killCommandTree(command.pid).finally(() => process.exit(1));\n    return;\n  }\n  // This process leads the command's process group, and the group signal below reaches it too. Its\n  // own SIGTERM is already spared, by the forwarding handler above returning now that the lifeline\n  // is lost; that is what lets the escalation below run, and it is why nothing else has to spare it\n  // a second time.\n  try {\n    process.kill(-process.pid, 'SIGTERM');\n  } catch {\n    // The group has already exited.\n  }\n  // The group includes this process, so waitForProcessGroupExit could never report it empty:\n  // escalate on the grace alone. SIGKILL ends this process too.\n  setTimeout(() => {\n    try {\n      process.kill(-process.pid, 'SIGKILL');\n    } catch {\n      // The group has already exited.\n    }\n    process.exit(1);\n  }, TERMINATE_GRACE_MS);\n}\n\nprocess.stdin.on('end', endCommandTree);\nprocess.stdin.on('error', endCommandTree);\nprocess.stdin.resume();\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoBA,SAAS,aAAgC;AACzC,SAAS,iBAAiB;AAO1B,IAAM,qBAAkD,oBAAI,IAAI;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC;AACvC,IAAI,CAAC,UAAU;AACb,UAAQ,OAAO,MAAM,gDAAgD;AACrE,UAAQ,KAAK,CAAC;AAChB;AAGA,IAAM,SAAS,wBAAwB,QAAQ;AAC/C,IAAI,WAAW,QAAQ;AACrB,UAAQ,OAAO,MAAM,GAAG,OAAO,KAAK;AAAA,CAAI;AACxC,UAAQ,KAAK,CAAC;AAChB;AACA,IAAM,OAAO,OAAO;AAUpB,SAAS,aAAgC;AACvC,QAAM,MAAyB,cAAc,QAAQ,GAAG;AACxD,QAAM,cAAc,IAAI;AACxB,SAAO,IAAI;AACX,MAAI,gBAAgB,OAAW,KAAI,eAAe;AAClD,SAAO;AACT;AAEA,IAAM,UAAwB;AAAA,EAC5B,OAAO,CAAC,UAAU,WAAW,SAAS;AAAA,EACtC,aAAa;AAAA,EACb,KAAK,WAAW;AAClB;AAIA,IAAM,UAAU,KAAK,OACjB,sBAAsB,KAAK,MAAM,OAAO,IACxC,MAAM,KAAK,kBAAkB,EAAE,GAAG,SAAS,OAAO,KAAK,CAAC;AAG5D,IAAI,eAAe;AAEnB,QAAQ,GAAG,SAAS,CAAC,UAAU;AAC7B,UAAQ,OAAO,MAAM,GAAG,MAAM,OAAO;AAAA,CAAI;AACzC,MAAI,CAAC,aAAc,SAAQ,KAAK,CAAC;AACnC,CAAC;AAED,QAAQ,GAAG,QAAQ,CAAC,MAAM,WAAW;AAEnC,MAAI,aAAc;AAClB,MAAI,UAAU,QAAQ,aAAa,SAAS;AAC1C,QAAI,mBAAmB,IAAI,MAAM,GAAG;AAIlC,cAAQ,mBAAmB,MAAM;AACjC,cAAQ,KAAK,QAAQ,KAAK,MAAM;AAChC,iBAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,GAAG;AACrC;AAAA,IACF;AAIA,YAAQ,KAAK,OAAO,UAAU,QAAQ,MAAM,KAAK,EAAE;AAAA,EACrD;AACA,UAAQ,KAAK,QAAQ,CAAC;AACxB,CAAC;AAQD,IAAM,oBAA+C,CAAC,WAAW,UAAU,QAAQ;AACnF,IAAM,YAAY,oBAAI,IAAoB;AAC1C,IAAI,QAAQ,aAAa,SAAS;AAChC,aAAW,QAAQ,mBAAmB;AACpC,YAAQ,GAAG,MAAM,MAAM;AACrB,UAAI,gBAAgB,UAAU,IAAI,IAAI,EAAG;AACzC,gBAAU,IAAI,IAAI;AAClB,UAAI;AACF,gBAAQ,KAAK,CAAC,QAAQ,KAAK,IAAI;AAAA,MACjC,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAGA,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAO1B,eAAe,gBAAgB,KAA4B;AACzD,WAAS,UAAU,GAAG,WAAW,mBAAmB,WAAW;AAC7D,QAAI,MAAM,YAAY,KAAK,mBAAmB,EAAG;AAAA,EACnD;AACF;AAGA,SAAS,iBAAuB;AAC9B,MAAI,aAAc;AAClB,iBAAe;AACf,MAAI,QAAQ,aAAa,SAAS;AAChC,QAAI,QAAQ,QAAQ,OAAW,SAAQ,KAAK,CAAC;AAI7C,SAAK,gBAAgB,QAAQ,GAAG,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/D;AAAA,EACF;AAKA,MAAI;AACF,YAAQ,KAAK,CAAC,QAAQ,KAAK,SAAS;AAAA,EACtC,QAAQ;AAAA,EAER;AAGA,aAAW,MAAM;AACf,QAAI;AACF,cAAQ,KAAK,CAAC,QAAQ,KAAK,SAAS;AAAA,IACtC,QAAQ;AAAA,IAER;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,kBAAkB;AACvB;AAEA,QAAQ,MAAM,GAAG,OAAO,cAAc;AACtC,QAAQ,MAAM,GAAG,SAAS,cAAc;AACxC,QAAQ,MAAM,OAAO;","names":[]}

package/dist/loader-DQNPDKOX.js

@@ -0,0 +1,27 @@
+import {
+  collectSkippedCommandNotices,
+  discoverCommands,
+  generateCommandListing,
+  inspectCommands,
+  resolveCommandBody
+} from "./chunk-AJZWLKLQ.js";
+import "./chunk-KXAYUIKP.js";
+import "./chunk-SWPDKLNM.js";
+import "./chunk-2AAOF5B5.js";
+import "./chunk-XHAO3K7I.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
+import "./chunk-ZPSZZUWF.js";
+export {
+  collectSkippedCommandNotices,
+  discoverCommands,
+  generateCommandListing,
+  inspectCommands,
+  resolveCommandBody
+};
+//# sourceMappingURL=loader-DQNPDKOX.js.map

package/dist/{mcp-approvals-HJ2VDYMC.js → mcp-approvals-27LJYADQ.js}

@@ -4,9 +4,10 @@ import {
   mcpServersToRecord,
   partitionMcpServersByApproval,
   persistMcpProjectServerChoice
-} from "./chunk-56SIEMDX.js";
-import "./chunk-VPNLCMVR.js";
-import "./chunk-X4NJT436.js";
+} from "./chunk-PTDC7ZUP.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   evaluateMcpServerApproval,
@@ -15,4 +16,4 @@ export {
   partitionMcpServersByApproval,
   persistMcpProjectServerChoice
 };
-//# sourceMappingURL=mcp-approvals-HJ2VDYMC.js.map
+//# sourceMappingURL=mcp-approvals-27LJYADQ.js.map

package/dist/{mcp-config-RNB5LEVE.js → mcp-config-GXSODNCM.js}

@@ -4,7 +4,8 @@ import {
   isValidMcpServerName,
   loadMcpConfig,
   resolveMcpServerList
-} from "./chunk-Y2VHN7TC.js";
+} from "./chunk-MEOB2DZA.js";
+import "./chunk-EEX6QNXV.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   consoleMcpDiagnosticSink,
@@ -13,4 +14,4 @@ export {
   loadMcpConfig,
   resolveMcpServerList
 };
-//# sourceMappingURL=mcp-config-RNB5LEVE.js.map
+//# sourceMappingURL=mcp-config-GXSODNCM.js.map

package/dist/memory-store-I6Z54VUN.js

@@ -0,0 +1,51 @@
+import {
+  DEFAULT_MAX_INDEX_LINES,
+  MAX_INDEX_BYTES,
+  deleteMemoryEntry,
+  findGitRoot,
+  findLegacyMemoryBackup,
+  getMemoryHealth,
+  getNewestMemoryWriteTime,
+  getProjectMemoryDir,
+  legacyBackupNotice,
+  listMemoryFiles,
+  loadMemoryContext,
+  memoryFileForSlug,
+  memoryWriteScope,
+  migrateLegacyMemoryDir,
+  migrateLegacyMemoryFormat,
+  sanitizeMemorySlug,
+  shortenAtWord,
+  slugifyWorkspace
+} from "./chunk-EFXVSQ5J.js";
+import "./chunk-KXAYUIKP.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-OJBMDM5H.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
+import "./chunk-ZPSZZUWF.js";
+export {
+  DEFAULT_MAX_INDEX_LINES,
+  MAX_INDEX_BYTES,
+  deleteMemoryEntry,
+  findGitRoot,
+  findLegacyMemoryBackup,
+  getMemoryHealth,
+  getNewestMemoryWriteTime,
+  getProjectMemoryDir,
+  legacyBackupNotice,
+  listMemoryFiles,
+  loadMemoryContext,
+  memoryFileForSlug,
+  memoryWriteScope,
+  migrateLegacyMemoryDir,
+  migrateLegacyMemoryFormat,
+  sanitizeMemorySlug,
+  shortenAtWord,
+  slugifyWorkspace
+};
+//# sourceMappingURL=memory-store-I6Z54VUN.js.map

package/dist/{model-window-store-MTSQ5JDJ.js → model-window-store-6VKXXTPJ.js}

@@ -11,8 +11,9 @@ import {
   ratchetModelWindow,
   readModelWindowStore,
   writeModelWindowStore
-} from "./chunk-4AS7LKKQ.js";
-import "./chunk-X4NJT436.js";
+} from "./chunk-62EEAUID.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   FileModelWindowStore,
@@ -28,4 +29,4 @@ export {
   readModelWindowStore,
   writeModelWindowStore
 };
-//# sourceMappingURL=model-window-store-MTSQ5JDJ.js.map
+//# sourceMappingURL=model-window-store-6VKXXTPJ.js.map

package/dist/{openai-compatible-2OB54YST.js → openai-compatible-IPUNBJ53.js}

@@ -2,13 +2,15 @@ import {
   chatCompletionStream,
   convertTools,
   parseCompatibleUsage
-} from "./chunk-AQEQX4FF.js";
+} from "./chunk-AHC7OU75.js";
 import "./chunk-2AAOF5B5.js";
 import "./chunk-RT5SATF7.js";
-import "./chunk-62QL5QUP.js";
+import "./chunk-OJBMDM5H.js";
+import "./chunk-IDYWN37T.js";
+import "./chunk-ZPSZZUWF.js";
 export {
   chatCompletionStream,
   convertTools,
   parseCompatibleUsage
 };
-//# sourceMappingURL=openai-compatible-2OB54YST.js.map
+//# sourceMappingURL=openai-compatible-IPUNBJ53.js.map

package/dist/{permission-approvals-YLV6UC5W.js → permission-approvals-Q5IMFEZI.js}

@@ -2,13 +2,14 @@ import {
   evaluateProjectAllowRule,
   partitionProjectAllowRules,
   persistProjectAllowRuleChoice
-} from "./chunk-KBQS35OV.js";
-import "./chunk-VPNLCMVR.js";
-import "./chunk-X4NJT436.js";
+} from "./chunk-MV5PQNIA.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   evaluateProjectAllowRule,
   partitionProjectAllowRules,
   persistProjectAllowRuleChoice
 };
-//# sourceMappingURL=permission-approvals-YLV6UC5W.js.map
+//# sourceMappingURL=permission-approvals-Q5IMFEZI.js.map

package/dist/{permissions-DHOKF3W2.js → permissions-7Y35X6HZ.js}

@@ -7,6 +7,9 @@ import {
   evaluatePermission,
   evaluatePermissionDetail,
   hasAdjudicationPolicy,
+  hasBashAdjudicationPolicy,
+  memoryTargetSpellings,
+  missingRuleReason,
   parseRule,
   permissionReasonOf,
   permissionResultOf,
@@ -15,14 +18,25 @@ import {
   permissionRuleMatchesCall,
   permissionRuleOf,
   primaryArgForRule
-} from "./chunk-J62VZYOB.js";
-import "./chunk-JTPOI3KU.js";
-import "./chunk-525CAZPY.js";
-import "./chunk-X66I2NQO.js";
-import "./chunk-62QL5QUP.js";
-import "./chunk-224FJZLH.js";
-import "./chunk-VPNLCMVR.js";
-import "./chunk-X4NJT436.js";
+} from "./chunk-N2G4Q7ME.js";
+import "./chunk-XJRJVXJR.js";
+import "./chunk-UCFJ43OS.js";
+import "./chunk-HOZXKOE3.js";
+import "./chunk-EFXVSQ5J.js";
+import "./chunk-62EEAUID.js";
+import "./chunk-KXAYUIKP.js";
+import "./chunk-W7SLYS3M.js";
+import "./chunk-SBTU5BEC.js";
+import "./chunk-4DKHLZRI.js";
+import "./chunk-OJBMDM5H.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-MV5PQNIA.js";
+import "./chunk-B5FC3MYZ.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   ALWAYS_ALLOWED_TOOLS,
@@ -33,6 +47,9 @@ export {
   evaluatePermission,
   evaluatePermissionDetail,
   hasAdjudicationPolicy,
+  hasBashAdjudicationPolicy,
+  memoryTargetSpellings,
+  missingRuleReason,
   parseRule,
   permissionReasonOf,
   permissionResultOf,
@@ -42,4 +59,4 @@ export {
   permissionRuleOf,
   primaryArgForRule
 };
-//# sourceMappingURL=permissions-DHOKF3W2.js.map
+//# sourceMappingURL=permissions-7Y35X6HZ.js.map

package/dist/provider-approvals-5AGH3RVT.js

@@ -0,0 +1,76 @@
+import {
+  LEGACY_BASE_URL_ID,
+  MODEL_SELECTION_KEYS,
+  PROVIDER_CONNECTION_KEYS,
+  WorkspaceProviderRefusalError,
+  createWorkspaceProviderGate,
+  declaredProviderIds,
+  describeApiKeyDeclaration,
+  describeDroppedOverride,
+  describeLegacyBaseUrl,
+  describeOrigin,
+  describeReservedProvider,
+  describeUnaffectedSelection,
+  describeWithheldSelection,
+  describeWorkspaceProvider,
+  droppedProviderOverrides,
+  emptyWorkspaceProviderPartition,
+  environmentModelSelections,
+  evaluateLegacyBaseUrl,
+  legacyBaseUrlFingerprint,
+  modelSelectionsOf,
+  partitionWorkspaceProviders,
+  persistWorkspaceProviderChoice,
+  profileModelKey,
+  profileOfModelKey,
+  providerIdsOf,
+  providerPrefixOf,
+  unaffectedModelSelections,
+  withEnvironmentSelections,
+  withheldModelSelections,
+  withheldProviderIds,
+  withoutWorkspaceProviderOverrides,
+  workspaceProviderFingerprint,
+  workspaceProviderRefusal
+} from "./chunk-B5FC3MYZ.js";
+import "./chunk-WV3O5PGX.js";
+import "./chunk-HFB74CLM.js";
+import "./chunk-REASC2QG.js";
+import "./chunk-IDYWN37T.js";
+import "./chunk-ZPSZZUWF.js";
+export {
+  LEGACY_BASE_URL_ID,
+  MODEL_SELECTION_KEYS,
+  PROVIDER_CONNECTION_KEYS,
+  WorkspaceProviderRefusalError,
+  createWorkspaceProviderGate,
+  declaredProviderIds,
+  describeApiKeyDeclaration,
+  describeDroppedOverride,
+  describeLegacyBaseUrl,
+  describeOrigin,
+  describeReservedProvider,
+  describeUnaffectedSelection,
+  describeWithheldSelection,
+  describeWorkspaceProvider,
+  droppedProviderOverrides,
+  emptyWorkspaceProviderPartition,
+  environmentModelSelections,
+  evaluateLegacyBaseUrl,
+  legacyBaseUrlFingerprint,
+  modelSelectionsOf,
+  partitionWorkspaceProviders,
+  persistWorkspaceProviderChoice,
+  profileModelKey,
+  profileOfModelKey,
+  providerIdsOf,
+  providerPrefixOf,
+  unaffectedModelSelections,
+  withEnvironmentSelections,
+  withheldModelSelections,
+  withheldProviderIds,
+  withoutWorkspaceProviderOverrides,
+  workspaceProviderFingerprint,
+  workspaceProviderRefusal
+};
+//# sourceMappingURL=provider-approvals-5AGH3RVT.js.map

package/dist/{sandbox-WRYTZH3D.js → sandbox-N2RY72GN.js}

@@ -15,10 +15,11 @@ import {
   unbindablePaths,
   unsandboxedRefusalMessage,
   withGitConfigReadOnlyNotice
-} from "./chunk-JTPOI3KU.js";
-import "./chunk-X66I2NQO.js";
-import "./chunk-62QL5QUP.js";
-import "./chunk-224FJZLH.js";
+} from "./chunk-XJRJVXJR.js";
+import "./chunk-OJBMDM5H.js";
+import "./chunk-YIL6HTJX.js";
+import "./chunk-EEX6QNXV.js";
+import "./chunk-IDYWN37T.js";
 import "./chunk-ZPSZZUWF.js";
 export {
   buildSandboxExecution,
@@ -38,4 +39,4 @@ export {
   unsandboxedRefusalMessage,
   withGitConfigReadOnlyNotice
 };
-//# sourceMappingURL=sandbox-WRYTZH3D.js.map
+//# sourceMappingURL=sandbox-N2RY72GN.js.map