@linxiraos/pi-utils 1.1.14 → 1.1.16

package/CHANGELOG.md

@@ -2,57 +2,7 @@
 
 ## [Unreleased]
 
-## [1.1.14] - 2026-09-12
+## [1.1.16] - 2026-09-19
 
-- 随 1.1.14 版本线发布:bazel 构建面(crates/*/BUILD.bazel)版本号纳入一致性检查,CI 原生构建与桌面冒烟守卫修复。
+- 上游 v18.2.5 同步:JSON 与缓存逻辑流线化重构、which 缓存改字符串键重写。
 
-## [1.1.13] - 2026-09-10
-
-- 上游 v18.1.16 同步:retry 提示解析升级为 longest-wins 合并(账号重置 + 追加 retry-after 同时出现时取更长窗口);`retry-after-ms` 支持 `:`/` =` 分隔形式;provider 明确要求立即重试(=0 或已过期时间戳)时返回 0 而非 undefined,避免误用启发式退避。
-
-## [1.1.12] - 2026-09-10
-
-- worker 宿主选择器族统一为 `__zeta_worker_*` 前缀(与主 CLI 对齐)。
-
-## [1.1.10] - 2026-09-07
-
-### Fixed
-
-- Fixed `extractRetryHint` dropping the longer timing signal when an error body carries both an account reset and an appended retry hint: competing signals now merge by longest window instead of first match, so retries honor the provider's full backoff.
-
-## [1.1.9] - 2026-09-05
-
-- USER_AGENT constant restored to zeta/<version> (the v18.1.10 merge re-introduced the upstream omp/ UA on every provider request); brand wording in path-resolver docs corrected; profile validation error message Zeta'd.
-
-## [1.1.6] - 2026-08-30
-
-- 同步上游 OMP v18.0.10（`33cc6b9a043a`）。
-- 同步上游 OMP v18.0.9（`cc14e04f075d`）。
-
-## [1.1.5] - 2026-08-26
-
-- 同步上游 OMP v18.0.5 / v18.0.6：新增 browsers / json 工具，SHA-2/SHA-3 在 ARM64 上加速。
-
-## [1.1.2] - 2026-08-25
-
-### Fixed
-
-- Republished as 1.1.2 to reset the `latest` tag after the broken 1.1.0 (no functional change over 1.1.1).
-
-## [1.1.1] - 2026-08-25
-
-### Fixed
-
-- Published tarballs now carry real dependency versions instead of Bun's `catalog:` protocol (1.1.0 installs failed with "Unsupported URL Type catalog:").
-
-## [1.1.0] - 2026-08-25
-
-### Changed
-
-- 同步上游 OMP v18.0.3 / v18.0.4（内部运行时与构建改进，无独立用户可见变更）。
-
-## [1.0.0] - 2026-08-13
-
-### Changed
-
-- Reset the version to 1.0.0 and republished under the `@linxiraos/*` scope, breaking from the `@linxiraos` version lineage.

package/THIRD-PARTY-NOTICES.txt

@@ -10843,7 +10843,7 @@ RUST RUNTIME DEPENDENCY LICENSES
 
 Generated from Cargo.lock by cargo-about 0.8.2 in locked, offline, workspace, all-feature, all-target mode, then restricted using cargo metadata to normal and build edges reachable from the workspace (development-only edges are excluded). cargo-deny independently evaluates the complete all-target graph.
 
-Native Opus (audiopus/audiopus_sys) and PCRE2 (pcre2/pcre2-sys) are covered by the exact crate license payloads below. inferno 0.12.8 is package-scoped as CDDL-1.0: its CDDL-covered source remains available in the locked crates.io source archive at https://crates.io/crates/inferno/0.12.8 and https://github.com/jonhoo/inferno. The full locked license text follows below.
+Native Opus (opus/opusic-sys) and PCRE2 (pcre2/pcre2-sys) are covered by the exact crate license payloads below. inferno 0.12.8 is package-scoped as CDDL-1.0: its CDDL-covered source remains available in the locked crates.io source archive at https://crates.io/crates/inferno/0.12.8 and https://github.com/jonhoo/inferno. The full locked license text follows below.
 
 -------------------------------------------------------------------------------
 License: Apache License 2.0 (Apache-2.0)
@@ -12509,6 +12509,58 @@ CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
+-------------------------------------------------------------------------------
+License: BSD 3-Clause "New" or "Revised" License (BSD-3-Clause)
+Used by:
+- opusic-sys 0.7.5 (https://github.com/DoumanAsh/opusic-sys)
+
+Full license text:
+
+Copyright 2001-2023 Xiph.Org, Skype Limited, Octasic,
+                    Jean-Marc Valin, Timothy B. Terriberry,
+                    CSIRO, Gregory Maxwell, Mark Borgerding,
+                    Erik de Castro Lopo, Mozilla, Amazon
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+- Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+- Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+- Neither the name of Internet Society, IETF or IETF Trust, nor the
+names of specific contributors, may be used to endorse or promote
+products derived from this software without specific prior written
+permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
+OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
+PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
+PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
+LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
+NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Opus is subject to the royalty-free patent licenses which are
+specified at:
+
+Xiph.Org Foundation:
+https://datatracker.ietf.org/ipr/1524/
+
+Microsoft Corporation:
+https://datatracker.ietf.org/ipr/1914/
+
+Broadcom Corporation:
+https://datatracker.ietf.org/ipr/1526/
+
 -------------------------------------------------------------------------------
 License: BSD 3-Clause "New" or "Revised" License (BSD-3-Clause)
 Used by:
@@ -13290,29 +13342,6 @@ jurisdiction of the Federal Courts of the Northern District of
 California and the state courts of the State of California, with
 venue lying in Santa Clara County, California.
 
--------------------------------------------------------------------------------
-License: ISC License (ISC)
-Used by:
-- audiopus_sys 0.2.2 (https://github.com/lakelezz/audiopus_sys.git)
-
-Full license text:
-
-ISC License
-
-Copyright (c) 2019, Lakelezz
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
-OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
 -------------------------------------------------------------------------------
 License: ISC License (ISC)
 Used by:
@@ -18734,7 +18763,7 @@ DEALINGS IN THE SOFTWARE.
 -------------------------------------------------------------------------------
 License: MIT License (MIT)
 Used by:
-- opus 0.3.1 (https://github.com/SpaceManiac/opus-rs)
+- opus 0.4.0 (https://github.com/SpaceManiac/opus-rs)
 
 Full license text:
 

package/dist/types/async.d.ts

@@ -1,3 +1,21 @@
+/**
+ * Largest delay `setTimeout` (and `timers/promises` `scheduler.wait`)
+ * accepts without 32-bit signed overflow: larger values wrap and fire
+ * almost immediately instead of sleeping. Chunk day-scale provider waits
+ * (e.g. a monthly quota reset parsed from an error hint) so the full
+ * duration elapses instead of overflowing the timer.
+ */
+export declare const MAX_TIMER_DELAY_MS = 2147483647;
+/**
+ * Abortable sleep for arbitrarily long delays. Waits longer than
+ * {@link MAX_TIMER_DELAY_MS} chunk the sleep into back-to-back timer waits
+ * so no single timer overflows; an abort during any chunk rejects like
+ * `scheduler.wait`.
+ *
+ * Uses a monotonic deadline so a timer that wakes prematurely is re-armed for
+ * the unelapsed duration instead of shortening the requested sleep.
+ */
+export declare function sleepLong(delayMs: number, signal?: AbortSignal): Promise<void>;
 /**
  * Wrap a promise with a timeout and optional abort signal.
  * Rejects with the given error or a new error containing the given message if

package/dist/types/browsers.d.ts

@@ -1,12 +1,3 @@
-/** Behavior-compatible reimplementation of @puppeteer/browsers' used surface. */
-/** Supported browser products. */
-export declare enum Browser {
-    CHROME = "chrome",
-    CHROMEHEADLESSSHELL = "chrome-headless-shell",
-    CHROMIUM = "chromium",
-    FIREFOX = "firefox",
-    CHROMEDRIVER = "chromedriver"
-}
 /** Browser download platform identifiers. */
 export declare enum BrowserPlatform {
     LINUX = "linux",
@@ -16,17 +7,6 @@ export declare enum BrowserPlatform {
     WIN32 = "win32",
     WIN64 = "win64"
 }
-/** Chrome-for-Testing release channel tags accepted by {@link resolveBuildId}. */
-export declare enum BrowserTag {
-    CANARY = "canary",
-    NIGHTLY = "nightly",
-    BETA = "beta",
-    DEV = "dev",
-    DEVEDITION = "devedition",
-    STABLE = "stable",
-    ESR = "esr",
-    LATEST = "latest"
-}
 /** Download progress reported while a browser archive is streamed to disk. */
 export interface BrowserDownloadProgress {
     downloadedBytes: number;
@@ -34,7 +14,6 @@ export interface BrowserDownloadProgress {
 }
 /** Inputs used to locate an installed browser executable. */
 export interface ComputeExecutablePathOptions {
-    browser: Browser;
     buildId: string;
     cacheDir: string;
     platform?: BrowserPlatform;
@@ -44,9 +23,8 @@ export interface InstallOptions extends ComputeExecutablePathOptions {
     baseUrl?: string;
     downloadProgressCallback?: (progress: BrowserDownloadProgress) => void;
 }
-/** Metadata for one browser installation found in a Puppeteer cache. */
+/** Metadata for a managed Chrome installation in Puppeteer's cache layout. */
 export interface InstalledBrowser {
-    browser: Browser;
     buildId: string;
     platform: BrowserPlatform;
     path: string;
@@ -54,15 +32,9 @@ export interface InstalledBrowser {
 }
 /** Detect the current host's Puppeteer browser platform. */
 export declare function detectBrowserPlatform(): BrowserPlatform | undefined;
-/** Resolve a Chrome-for-Testing channel, milestone, or build prefix to a full build ID. */
-export declare function resolveBuildId(browser: Browser, _platform: BrowserPlatform, tag: string | BrowserTag): Promise<string>;
 /** Return the Chrome-for-Testing archive URL for a browser build. */
-export declare function getDownloadUrl(browser: Browser, platform: BrowserPlatform, buildId: string, baseUrl?: string): URL;
+export declare function getDownloadUrl(platform: BrowserPlatform, buildId: string, baseUrl?: string): URL;
 /** Compute the executable path in Puppeteer's cache layout. */
 export declare function computeExecutablePath(options: ComputeExecutablePathOptions): string;
-/** Scan a Puppeteer cache for browser installation directories. */
-export declare function getInstalledBrowsers(options: {
-    cacheDir: string;
-}): Promise<InstalledBrowser[]>;
 /** Download and unpack Chrome into Puppeteer's existing cache layout. */
 export declare function install(options: InstallOptions): Promise<InstalledBrowser>;

package/dist/types/color.d.ts

@@ -82,6 +82,8 @@ export declare function adjustHsv(hex: string, adj: HSVAdjustment): string;
  * Convert HSL (h: 0-360, s: 0-1, l: 0-1) to a CSS hex string.
  */
 export declare function hslToHex(h: number, s: number, l: number): string;
+/** Parse a 256-color palette index (0–255) to RGB (0..255). */
+export declare function paletteToRgb(index: number): RGB | undefined;
 export interface OKLCH {
     /** Perceptual lightness (0-1) */
     l: number;

package/dist/types/dirs.d.ts

@@ -37,8 +37,20 @@ export declare function normalizeProfileName(profile: string | undefined): strin
  * syntactically invalid value).
  */
 export declare function resolveProfileEnv(profile: string | undefined): string | undefined;
+/** Profile-independent config root (~/.zeta), shared by every zeta profile. */
+export declare function getBaseConfigRoot(): string;
 export declare function resolveEquivalentPath(inputPath: string): string;
 export declare function normalizePathForComparison(inputPath: string): string;
+/**
+ * Compare paths already normalized by {@link normalizePathForComparison}.
+ *
+ * Returns the relative path (an empty string when the paths are equal), or
+ * `null` when the candidate is outside the root. Callers classifying one
+ * candidate against several static roots can normalize each side once and
+ * reuse the public helpers' containment semantics without repeating realpath
+ * work.
+ */
+export declare function relativePathWithinNormalizedRoot(normalizedRoot: string, normalizedCandidate: string): string | null;
 export declare function pathIsWithin(root: string, candidate: string): boolean;
 export declare function relativePathWithinRoot(root: string, candidate: string): string | null;
 /** Get the project directory. */
@@ -172,6 +184,8 @@ export declare function getPythonGatewayDir(): string;
 export declare function getPuppeteerDir(): string;
 /** Get the browser relay extension install directory (~/.zeta/browser-relay). */
 export declare function getBrowserRelayDir(): string;
+/** Get the profile root for Chromium browsers the browser tool spawns via `app.path` (~/.zeta/browser-profiles). */
+export declare function getBrowserProfilesDir(): string;
 /** Get DOCS_RS cache directory () */
 export declare function getDocsRsCacheDir(): string;
 /** Get the auto-QA grievances SQLite database path (~/.zeta/autoqa.db; XDG: $XDG_DATA_HOME/zeta/autoqa.db). */
@@ -263,6 +277,13 @@ export declare function getAgentModulesDir(agentDir?: string): string;
 export declare function getMemoriesDir(agentDir?: string): string;
 /** Get the terminal sessions directory (~/.zeta/agent/terminal-sessions). */
 export declare function getTerminalSessionsDir(agentDir?: string): string;
+/**
+ * Get the persistent registry of custom session files
+ * (~/.zeta/agent/custom-session-files). Each `--session-dir`/`--session`
+ * transcript is recorded here as one marker file so storage GC can scan its
+ * exact path after its terminal breadcrumb is overwritten by a later session.
+ */
+export declare function getCustomSessionFilesDir(agentDir?: string): string;
 /** Get the crash log path (~/.zeta/agent/zeta-crash.log). */
 export declare function getCrashLogPath(agentDir?: string): string;
 /** Get the debug log path (~/.zeta/agent/zeta-debug.log). */

package/dist/types/env.d.ts

@@ -26,11 +26,21 @@ export declare function isMacosMallocStackLoggingEnvName(name: string): boolean;
  */
 export declare function isWsl(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv): boolean;
 export declare function filterProcessEnv(env: Record<string, string | undefined>): Record<string, string>;
+/**
+ * Removes {@link GIT_REPO_LOCATION_ENV_NAMES} from a copied child env in place.
+ *
+ * Windows environment lookups are case-insensitive, so a block that spells a
+ * variable `git_dir` is just as binding there; match case-insensitively on
+ * win32 and exactly elsewhere (POSIX env names are case-sensitive).
+ */
+export declare function stripGitRepoLocationEnv(env: Record<string, string>, platform?: NodeJS.Platform): void;
 /** Filters process env for child shells without launch-cwd dotenv values. */
 export declare function filterChildShellEnv(env: Record<string, string | undefined>, cwd?: string): Record<string, string>;
+/** Return every value defined by `cwd`'s dotenv files, plus environment values that came from them. */
+export declare function getDotenvEnvValues(cwd?: string, env?: Record<string, string | undefined>): string[];
 /**
- * Parses a .env file synchronously into key-value string pairs using
- * {@link parseEnvLine} for Bun-compatible line semantics.
+ * Parses a complete .env file with the runtime's dotenv grammar, then retains
+ * only shell-identifier names and spawn-safe values.
  */
 export declare function parseEnvFile(filePath: string): Record<string, string>;
 /**

package/dist/types/executable.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Check if a file path exists, is a regular file, and has effective execute permission.
+ */
+export declare function isExecutable(filePath: string): boolean;

package/dist/types/fetch-retry.d.ts

@@ -1,6 +1,10 @@
+/** Provider-specific interpretation for timezone-naive retry timestamps. */
+export interface RetryHintOptions {
+    /** UTC offset appended to an absolute reset stamp that omits its timezone. */
+    naiveResetTimezoneOffset?: string;
+}
 /**
  * Server-suggested retry delay extraction. Merges the patterns historically used
- * by the OpenAI Codex and Google Gemini retry helpers.
  *
  * Header sources (checked in order):
  *  - `retry-after-ms` (milliseconds)
@@ -16,12 +20,14 @@
  *  - `try again in 250ms` / `try again in 12s` / `try again in 5 min` / `try again in ~158 min`
  *  - `retry-after-ms=98497000` / `retry-after-ms: 7200000` / `retry-after-ms = 7200000`
  *  - `Your limit will reset at 2026-09-01 09:44:51` / `将在 2026-09-01 09:44:51 重置`
+ *    (a provider offset makes a naive wall clock authoritative; otherwise it
+ *    resolves only when no relative signal is present)
  *
  * Returns `undefined` if no signal is found, or `0` when the provider
  * explicitly asks for an immediate retry (`retry-after…=0`, or an absolute
  * reset timestamp that has already elapsed).
  */
-export declare function extractRetryHint(source: Response | Headers | null | undefined, body?: string): number | undefined;
+export declare function extractRetryHint(source: Response | Headers | null | undefined, body?: string, options?: RetryHintOptions): number | undefined;
 export interface FetchWithRetryOptions extends RequestInit {
     /** Total fetch attempts (initial + retries). Default `5`. */
     maxAttempts?: number;

package/dist/types/file-lock.d.ts

@@ -8,10 +8,22 @@ export interface FileLockOptions {
     /** Maximum age of the lock before it is considered stale and can be broken. */
     staleMs?: number;
 }
+/** An exclusive OS-backed lease. Releasing an already released handle is safe. */
+export interface FileLockHandle {
+    release(): void;
+}
+/** An exclusive OS-backed lease. Releasing an already released handle is safe. */
+export interface FileLockHandle {
+    release(): void;
+}
 declare function getLockPath(filePath: string): string;
 declare function tryAcquireLock(lockPath: string): NativeFileLock | null;
+/** Acquire an exclusive lease; callers must release it when their operation ends. */
+export declare function acquireFileLock(filePath: string, options?: FileLockOptions): Promise<FileLockHandle>;
 /** Run `fn` while holding an OS-backed exclusive lock for `filePath`. */
 export declare function withFileLock<T>(filePath: string, fn: () => Promise<T>, options?: FileLockOptions): Promise<T>;
+/** Run synchronous `fn` while holding an OS-backed exclusive lock for `filePath`. */
+export declare function withFileLockSync<T>(filePath: string, fn: () => T, options?: FileLockOptions): T;
 /**
  * Test-only acquisition handle for forcing ownership handoffs. This is not
  * part of the supported package API.

package/dist/types/format.d.ts

@@ -14,6 +14,13 @@ export declare function formatNumber(n: number): string;
  * Examples: "512B", "1.5KB", "2.3MB", "1.2GB"
  */
 export declare function formatBytes(bytes: number): string;
+/**
+ * Count `\n` code units via native `indexOf` — no split array, roughly an
+ * order of magnitude cheaper than a per-code-unit loop on multi-MiB text.
+ * Line-count semantics are the caller's (empty text is 0 or 1 lines
+ * depending on the contract).
+ */
+export declare function countNewlines(text: string): number;
 /**
  * Truncate a string to maxLen characters, appending an ellipsis if truncated.
  * For display-width-aware truncation (terminals), use truncateToWidth from @linxiraos/pi-tui.

package/dist/types/index.d.ts

@@ -4,12 +4,12 @@ export * from "./binary.js";
 export * from "./color.js";
 export * from "./dirs.js";
 export * from "./env.js";
+export * from "./executable.js";
 export * from "./fetch-retry.js";
 export * from "./file-lock.js";
 export * from "./format.js";
 export * from "./frontmatter.js";
 export * from "./fs-error.js";
-export * from "./glob.js";
 export * from "./incoming-json.js";
 export * from "./json.js";
 export * from "./json-parse.js";
@@ -40,4 +40,5 @@ export * from "./tls-fetch.js";
 export * from "./type-guards.js";
 export * from "./version.js";
 export * from "./which.js";
+export * from "./yaml-config.js";
 export declare function structuredCloneJSON<T>(value: T): T;

package/dist/types/mime.d.ts

@@ -1,3 +1,4 @@
+export declare const IMAGE_METADATA_HEADER_BYTES: number;
 export declare const SUPPORTED_IMAGE_MIME_TYPES: Set<string>;
 export type ImageMetadata = {
     mimeType: "image/png";

package/dist/types/path.d.ts

@@ -2,3 +2,9 @@
 export declare function windowsPathToWslMount(filePath: string): string | undefined;
 /** Removes Win32 extended-length prefixes before passing paths to Bun APIs. */
 export declare function stripWindowsExtendedLengthPathPrefix(filePath: string, platform?: NodeJS.Platform): string;
+/**
+ * Test whether a path is fully qualified and drive-independent.
+ * On Windows, requires a drive letter with separator (e.g. `C:\`) or UNC (`\\server\share` or `//server/share`).
+ * On POSIX, requires an absolute path.
+ */
+export declare function isFullyQualifiedPath(filePath: string, platform?: NodeJS.Platform): boolean;

package/dist/types/peek-file.d.ts

@@ -10,9 +10,8 @@ export declare function peekFile<T>(filePath: string, maxBytes: number, op: (hea
 /**
  * Read up to the last `maxBytes` of `filePath` and pass that slice to `op`.
  *
- * The tail mirror of {@link peekFile}: same pooled-buffer strategy (no per-call
- * allocation for small reads), but the read is positioned at `size - len` so the
- * window ends at EOF. When the file is shorter than `maxBytes`, the whole file is
+ * The tail mirror of {@link peekFile}: the read is positioned at `size - len` so
+ * the window ends at EOF. When the file is shorter than `maxBytes`, the whole file is
  * returned. A multi-byte codepoint straddling the leading cut decodes to a
  * replacement char — callers that parse line-oriented tails drop the partial
  * leading line anyway.

package/dist/types/postmortem.d.ts

@@ -27,6 +27,27 @@ export declare enum Reason {
  * instances across bundles/realms.
  */
 export declare const NATIVE_PROCESS_EXIT: unique symbol;
+/**
+ * Hard-exit the process through the native primitive, resolved on every call.
+ *
+ * The native exit is deliberately re-resolved here rather than bound at module
+ * load: the extension/hook loader's `withHostGuard` transiently swaps
+ * `process.reallyExit`/`process.exit` for a stub that throws
+ * `ExtensionExitError`, and the shipped bundle defers this module's evaluation
+ * until first access — which can land inside that guard window, so binding at
+ * init could freeze the throwing stub forever and turn every later shutdown
+ * (SIGHUP/SIGINT/fatal) into an unhandled-rejection loop (#7393). When the
+ * guard is active the stub carries the native exit under
+ * {@link NATIVE_PROCESS_EXIT} (#6488).
+ *
+ * Both globals are reinstalled to their natives before exiting: Bun's
+ * `process.exit` re-reads `process.reallyExit` at call time, so exiting through
+ * one primitive while its sibling still holds the throwing stub re-enters the
+ * guard and loops the rejection storm (#11789). After restoring, `reallyExit`
+ * (the low-level primitive) is preferred; `process.exit` and finally `SIGKILL`
+ * are fallbacks so a poisoned or absent chain can never leave the process alive.
+ */
+export declare function exitProcess(code: number): never;
 /** User-facing command printed before fatal cleanup so interrupted work can be resumed. */
 export interface FatalRecoveryHint {
     /** Stable label identifying the recoverable session or process. */
@@ -91,11 +112,11 @@ export declare function isWorkerIpcDeserializeError(err: unknown): boolean;
  */
 export declare function registerWorkerIpcFaultHandler(handler: (err: Error) => void): () => void;
 /**
- * Treat unhandled stdout EPIPE rejections as a graceful peer disconnect.
- *
- * Stdio protocol servers call this for their process lifetime so a closed
- * client pipe runs registered cleanup callbacks instead of the fatal path.
- * The returned callback removes the registration.
+ * Treat a closed stdout consumer as a graceful peer disconnect for the caller's
+ * active lifetime. Attaches one shared `process.stdout` `error` listener,
+ * ref-counted across registrants (the ACP protocol server, the one-shot CLI
+ * entry). The returned callback removes the registration; the listener detaches
+ * when the last registrant unregisters.
  */
 export declare function registerStdioDisconnectHandling(): () => void;
 /**

package/dist/types/procmgr.d.ts

@@ -1,4 +1,6 @@
 import type { Subprocess } from "bun";
+import { isExecutable } from "./executable.js";
+export { isExecutable };
 export interface ShellConfig {
     shell: string;
     args: string[];
@@ -10,10 +12,6 @@ export interface ShellConfigOptions {
     /** File path or runtime layer that supplied the active shell setting. */
     configSource?: string;
 }
-/**
- * Check if a shell binary is executable.
- */
-export declare function isExecutable(path: string): boolean;
 /**
  * Get shell args for the resolved shell.
  * cmd.exe takes `/c`; PowerShell (powershell.exe / pwsh) takes

package/dist/types/snowflake.d.ts

@@ -5,6 +5,7 @@ declare namespace Snowflake {
     const PATTERN: RegExp;
     const EPOCH_TIMESTAMP = 1420070400000;
     const MAX_SEQUENCE = 4194303;
+    const MAX_TIMESTAMP: number;
     function formatParts(dt: number, seq: number): Snowflake;
     class Source {
         #private;

package/dist/types/sqlite.d.ts

@@ -1,13 +1,33 @@
+/** Shared SQLite opening, error attribution, and result-code classification for persistent stores. */
+import { Database } from "bun:sqlite";
+/** Controls opt-in replacement of an unrecoverably corrupt SQLite store. */
+export interface SqliteOpenOptions {
+    /**
+     * Preserve a corrupt store and its sidecars, recreate it, and run the
+     * initializer once more. Disabled by default.
+     */
+    recoverCorruption?: boolean;
+    /** Runs after preservation and before the replacement is initialized. */
+    onCorruptionPreserved?: (backupPath: string, error: unknown) => void;
+}
 /**
- * Shared classifiers for `bun:sqlite` error result codes.
+ * Opens and initializes a store, retrying BUSY failures up to four total attempts.
+ * Installs the busy handler before initialization and closes failed connections.
+ * The initializer may run again on a fresh connection; on success it owns the handle.
  *
- * Every omp SQLite store (`agent.db` credential/usage store, `models.db` model
- * cache, `history.db`) needs the same two distinctions: a transient BUSY that
- * clears by retrying, and an unrecoverable corruption that never does. Keeping
- * one implementation here prevents the classifiers from drifting between the
- * credential store and the model cache.
+ * With corruption recovery enabled, recovery is serialized across processes.
+ * The identity observed by the failed handle is checked under that lock, so a
+ * waiter adopts a replacement made by a peer instead of quarantining it.
+ * Final failures retain their SQLite codes and include the database path.
  */
-import type { Database } from "bun:sqlite";
+export declare function openSqliteDatabase<T>(dbPath: string, initialize: (db: Database) => T | Promise<T>, options?: SqliteOpenOptions): Promise<T>;
+/**
+ * Synchronous counterpart to {@link openSqliteDatabase}. It performs no BUSY
+ * retry loop; corruption recovery, when enabled, is bounded to one replacement.
+ */
+export declare function openSqliteDatabaseSync<T>(dbPath: string, initialize: (db: Database) => T, options?: SqliteOpenOptions): T;
+/** Adds the failing store's path to an error without losing SQLite result codes or its original stack. */
+export declare function annotateSqliteError(error: unknown, dbPath: string): Error;
 /** Checkpoints committed WAL frames without waiting for concurrent readers. */
 export declare function checkpointWal(db: Database): void;
 /**