@miller-tech/uap 1.119.4 → 1.121.0

package/dist/cli/proxy-lifecycle.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Reference-counted, session-scoped proxy lifecycle.
+ *
+ * Goal (per product spec): the UAP Anthropic proxy should start when an agent
+ * session is triggered (via the SessionStart hook) and exit WITH the agent —
+ * but only when it is safe to do so:
+ *
+ *   - If a proxy is already running, ADOPT it (reuse) — never start a second.
+ *   - A proxy we adopted (already up), OR a systemd-managed unit, is NEVER
+ *     stopped by us on session end (systemd units are persistent infra).
+ *   - A proxy WE spawned as a plain process is reference-counted across
+ *     sessions: it is stopped on release only when the LAST client (agent
+ *     session) leaves. If any other client is still using it, it keeps running.
+ *
+ * This module holds the pure decision logic + a tiny file-backed registry so it
+ * is unit-testable without spawning a real proxy or touching systemd. The real
+ * side effects (spawn / systemctl / HTTP health probe) are injected as `deps`.
+ *
+ * Liveness note: a client's `pid` MUST be the long-lived AGENT process (the one
+ * that spawns SessionStart and SessionEnd), NOT the ephemeral hook/CLI process
+ * — otherwise the dead-pid pruning below evicts every live session moments
+ * after it registers. The hook passes `$PPID` (the agent) via `--client-pid`.
+ */
+/** Default port the proxy listens on (matches run-anthropic-proxy-continuity.sh). */
+export declare const DEFAULT_PROXY_PORT: number;
+/**
+ * Runtime root for the client registry + owner marker. Prefer XDG_RUNTIME_DIR
+ * (tmpfs at /run/user/<uid>, mode 0700, cleared on logout) and fall back to
+ * ~/.cache. Overridable via UAP_PROXY_RUNTIME_DIR for tests.
+ */
+export declare function runtimeDir(): string;
+/** How the proxy we own was launched — only 'process' is ever auto-stopped. */
+export type OwnerKind = 'process' | 'systemd';
+export interface OwnerRecord {
+    kind: OwnerKind;
+    /** pid of the launched proxy process (kind==='process'). */
+    pid?: number;
+    /**
+     * Opaque process-identity token captured at launch (e.g. /proc start-time).
+     * Checked before signaling to defend against PID reuse.
+     */
+    startToken?: string;
+    /** systemd unit name (kind==='systemd'). */
+    unit?: string;
+    port: number;
+    startedAt: string;
+}
+export interface ClientRecord {
+    clientId: string;
+    /** pid of the long-lived AGENT process, used to prune dead clients. */
+    pid: number;
+    harness?: string;
+    registeredAt: string;
+}
+/** Is a pid still alive? `kill(pid, 0)` throws ESRCH when it isn't. */
+export declare function isPidAlive(pid: number): boolean;
+/** Derive the agent pid encoded in a `ppid-<n>` fallback client id, if present. */
+export declare function pidFromClientId(clientId: string): number | null;
+/** Register (or refresh) a client in the registry. Idempotent per clientId. */
+export declare function registerClient(rt: string, rec: ClientRecord): void;
+/** Remove a client from the registry (no-op if absent). */
+export declare function deregisterClient(rt: string, clientId: string): void;
+/** List live clients, pruning any whose AGENT process has died (self-healing). */
+export declare function listClients(rt: string, opts?: {
+    prune?: boolean;
+}): ClientRecord[];
+export declare function readOwner(rt: string): OwnerRecord | null;
+export declare function writeOwner(rt: string, rec: OwnerRecord): void;
+export declare function clearOwner(rt: string): void;
+export declare function acquireStartLock(rt: string, timeoutMs?: number): Promise<boolean>;
+export declare function releaseStartLock(rt: string): void;
+/** Outcome of a start attempt. `owner` is set ONLY for a process WE spawned and
+ *  confirmed serving — systemd/adopted starts return owner:null (never stopped). */
+export interface StartResult {
+    healthy: boolean;
+    owner: OwnerRecord | null;
+}
+export interface LifecycleDeps {
+    /** Resolve true when the proxy answers a health probe on `port`. */
+    probeHealth: (port: number) => Promise<boolean>;
+    /** Start the proxy; wait for health; return {healthy, owner}. Owner==null
+     *  means "do not claim stoppable ownership" (systemd / failed / adopted). */
+    startProxy: (port: number) => Promise<StartResult>;
+    /** Stop a proxy WE own (kill pid after identity check). */
+    stopProxy: (owner: OwnerRecord) => Promise<void>;
+    /** ISO timestamp (injectable for deterministic tests). */
+    now: () => string;
+}
+export type EnsureAction = 'reused' | 'started' | 'start-failed';
+export interface EnsureResult {
+    action: EnsureAction;
+    port: number;
+    owner: OwnerRecord | null;
+    clients: number;
+}
+/**
+ * Ensure a proxy is available for this client.
+ *  - already healthy -> ADOPT (reuse); register client; claim no ownership.
+ *  - not healthy -> take the start lock, re-probe, then start. Claim ownership
+ *    ONLY if the adapter returns a stoppable owner (a process we spawned).
+ * Fail-open: a failed start returns 'start-failed' and never throws.
+ */
+export declare function ensureProxy(rt: string, client: ClientRecord, port: number, deps: LifecycleDeps): Promise<EnsureResult>;
+export type ReleaseAction = 'stopped' | 'left-other-clients' | 'left-adopted' | 'not-running';
+export interface ReleaseResult {
+    action: ReleaseAction;
+    remainingClients: number;
+}
+/**
+ * Release this client. Stop the proxy ONLY when:
+ *   - we own it (a process WE spawned — owner marker present), AND
+ *   - no other client remains after removing this one.
+ * Otherwise leave it running:
+ *   - 'left-other-clients' — another agent session is still using it.
+ *   - 'left-adopted'       — we never owned it (pre-existing / systemd / external).
+ */
+export declare function releaseProxy(rt: string, clientId: string, deps: LifecycleDeps): Promise<ReleaseResult>;
+/**
+ * Derive a stable client id shared across a session's SessionStart + Stop
+ * hooks. Order MATCHES the hook derivation (session-start.sh) so a manual CLI
+ * call and the hook agree: explicit flag, then harness session ids, then the
+ * parent pid (the agent) — spelled `ppid-<n>` to match the hook.
+ */
+export declare function resolveClientId(explicit?: string): string;
+//# sourceMappingURL=proxy-lifecycle.d.ts.map

package/dist/cli/proxy-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-lifecycle.d.ts","sourceRoot":"","sources":["../../src/cli/proxy-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAeH,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,QAAyC,CAAC;AAKzE;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAYD,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAS/C;AAQD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/D;AASD,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAIlE;AAED,2DAA2D;AAC3D,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMnE;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,YAAY,EAAE,CAiCtF;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAUxD;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAG7D;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAM3C;AAQD,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,SAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBrF;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAMjD;AAMD;oFACoF;AACpF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD;iFAC6E;IAC7E,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,2DAA2D;IAC3D,SAAS,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,0DAA0D;IAC1D,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,cAAc,CAAC;AACjE,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,YAAY,CAAC,CAwBvB;AAED,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,oBAAoB,GACpB,cAAc,GACd,aAAa,CAAC;AAClB,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,aAAa,CAAC,CAkBxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAYzD"}

package/dist/cli/proxy-lifecycle.js

@@ -0,0 +1,286 @@
+/**
+ * Reference-counted, session-scoped proxy lifecycle.
+ *
+ * Goal (per product spec): the UAP Anthropic proxy should start when an agent
+ * session is triggered (via the SessionStart hook) and exit WITH the agent —
+ * but only when it is safe to do so:
+ *
+ *   - If a proxy is already running, ADOPT it (reuse) — never start a second.
+ *   - A proxy we adopted (already up), OR a systemd-managed unit, is NEVER
+ *     stopped by us on session end (systemd units are persistent infra).
+ *   - A proxy WE spawned as a plain process is reference-counted across
+ *     sessions: it is stopped on release only when the LAST client (agent
+ *     session) leaves. If any other client is still using it, it keeps running.
+ *
+ * This module holds the pure decision logic + a tiny file-backed registry so it
+ * is unit-testable without spawning a real proxy or touching systemd. The real
+ * side effects (spawn / systemctl / HTTP health probe) are injected as `deps`.
+ *
+ * Liveness note: a client's `pid` MUST be the long-lived AGENT process (the one
+ * that spawns SessionStart and SessionEnd), NOT the ephemeral hook/CLI process
+ * — otherwise the dead-pid pruning below evicts every live session moments
+ * after it registers. The hook passes `$PPID` (the agent) via `--client-pid`.
+ */
+import { mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, existsSync, } from 'fs';
+import { join } from 'path';
+import os from 'os';
+/** Default port the proxy listens on (matches run-anthropic-proxy-continuity.sh). */
+export const DEFAULT_PROXY_PORT = Number(process.env.PROXY_PORT ?? 4000);
+const DIR_MODE = 0o700;
+const FILE_MODE = 0o600;
+/**
+ * Runtime root for the client registry + owner marker. Prefer XDG_RUNTIME_DIR
+ * (tmpfs at /run/user/<uid>, mode 0700, cleared on logout) and fall back to
+ * ~/.cache. Overridable via UAP_PROXY_RUNTIME_DIR for tests.
+ */
+export function runtimeDir() {
+    const override = process.env.UAP_PROXY_RUNTIME_DIR;
+    if (override)
+        return override;
+    const base = process.env.XDG_RUNTIME_DIR || join(os.homedir(), '.cache');
+    return join(base, 'uap-proxy');
+}
+function clientsDir(rt) {
+    return join(rt, 'clients');
+}
+function ownerPath(rt) {
+    return join(rt, 'owner.json');
+}
+function lockPath(rt) {
+    return join(rt, 'start.lock');
+}
+/** Is a pid still alive? `kill(pid, 0)` throws ESRCH when it isn't. */
+export function isPidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        // EPERM means the process exists but we can't signal it — still alive.
+        return e.code === 'EPERM';
+    }
+}
+function safeFilename(clientId) {
+    // Registry files are named by client id; keep them filesystem-safe and
+    // incapable of escaping the clients dir (no path separators survive).
+    return clientId.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 200) || 'anon';
+}
+/** Derive the agent pid encoded in a `ppid-<n>` fallback client id, if present. */
+export function pidFromClientId(clientId) {
+    const m = /^ppid-(\d+)$/.exec(clientId);
+    if (!m)
+        return null;
+    const n = Number(m[1]);
+    return Number.isInteger(n) && n > 0 ? n : null;
+}
+/** Atomic write (tmp + rename) with restrictive mode so a torn read is impossible. */
+function atomicWrite(path, data) {
+    const tmp = `${path}.tmp.${process.pid}.${Math.floor(process.hrtime()[1] % 1e6)}`;
+    writeFileSync(tmp, data, { mode: FILE_MODE });
+    renameSync(tmp, path);
+}
+/** Register (or refresh) a client in the registry. Idempotent per clientId. */
+export function registerClient(rt, rec) {
+    const dir = clientsDir(rt);
+    mkdirSync(dir, { recursive: true, mode: DIR_MODE });
+    atomicWrite(join(dir, safeFilename(rec.clientId)), JSON.stringify(rec));
+}
+/** Remove a client from the registry (no-op if absent). */
+export function deregisterClient(rt, clientId) {
+    try {
+        rmSync(join(clientsDir(rt), safeFilename(clientId)), { force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** List live clients, pruning any whose AGENT process has died (self-healing). */
+export function listClients(rt, opts = {}) {
+    const dir = clientsDir(rt);
+    if (!existsSync(dir))
+        return [];
+    const out = [];
+    let entries = [];
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+    for (const name of entries) {
+        if (name.endsWith('.tmp') || name.includes('.tmp.'))
+            continue; // in-flight write
+        const full = join(dir, name);
+        let rec = null;
+        try {
+            rec = JSON.parse(readFileSync(full, 'utf8'));
+        }
+        catch {
+            rec = null;
+        }
+        if (!rec || typeof rec.clientId !== 'string') {
+            if (opts.prune !== false)
+                rmSync(full, { force: true });
+            continue;
+        }
+        // A client whose AGENT process is gone ended without a clean release
+        // (crash). Drop it so it never pins the proxy alive forever. pid<=0 means
+        // "liveness unknown" — keep it (rely on clean release) rather than evict.
+        if (typeof rec.pid === 'number' && rec.pid > 0 && !isPidAlive(rec.pid)) {
+            if (opts.prune !== false)
+                rmSync(full, { force: true });
+            continue;
+        }
+        out.push(rec);
+    }
+    return out;
+}
+export function readOwner(rt) {
+    const p = ownerPath(rt);
+    if (!existsSync(p))
+        return null;
+    try {
+        const rec = JSON.parse(readFileSync(p, 'utf8'));
+        if (rec && (rec.kind === 'process' || rec.kind === 'systemd'))
+            return rec;
+    }
+    catch {
+        /* fall through */
+    }
+    return null;
+}
+export function writeOwner(rt, rec) {
+    mkdirSync(rt, { recursive: true, mode: DIR_MODE });
+    atomicWrite(ownerPath(rt), JSON.stringify(rec));
+}
+export function clearOwner(rt) {
+    try {
+        rmSync(ownerPath(rt), { force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+// ---------------------------------------------------------------------------
+// Start lock — serialize the probe->start->writeOwner critical section so two
+// simultaneous SessionStarts don't both spawn a proxy onto the same port.
+// ---------------------------------------------------------------------------
+const LOCK_STALE_MS = 30_000;
+export async function acquireStartLock(rt, timeoutMs = 5000) {
+    mkdirSync(rt, { recursive: true, mode: DIR_MODE });
+    const p = lockPath(rt);
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        try {
+            mkdirSync(p); // atomic: succeeds only if it did not exist
+            return true;
+        }
+        catch {
+            // Held. Steal it if it is stale (a crashed holder).
+            try {
+                const st = statSync(p);
+                if (Date.now() - st.mtimeMs > LOCK_STALE_MS) {
+                    rmSync(p, { recursive: true, force: true });
+                    continue;
+                }
+            }
+            catch {
+                continue; // vanished between attempts — retry
+            }
+            if (Date.now() >= deadline)
+                return false; // give up; caller proceeds (fail-open)
+            await new Promise((r) => setTimeout(r, 100));
+        }
+    }
+}
+export function releaseStartLock(rt) {
+    try {
+        rmSync(lockPath(rt), { recursive: true, force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/**
+ * Ensure a proxy is available for this client.
+ *  - already healthy -> ADOPT (reuse); register client; claim no ownership.
+ *  - not healthy -> take the start lock, re-probe, then start. Claim ownership
+ *    ONLY if the adapter returns a stoppable owner (a process we spawned).
+ * Fail-open: a failed start returns 'start-failed' and never throws.
+ */
+export async function ensureProxy(rt, client, port, deps) {
+    listClients(rt); // prune dead clients first
+    registerClient(rt, client);
+    if (await deps.probeHealth(port)) {
+        return { action: 'reused', port, owner: readOwner(rt), clients: listClients(rt).length };
+    }
+    const locked = await acquireStartLock(rt);
+    try {
+        // Another session may have started it while we waited for the lock.
+        if (await deps.probeHealth(port)) {
+            return { action: 'reused', port, owner: readOwner(rt), clients: listClients(rt).length };
+        }
+        const res = await deps.startProxy(port);
+        if (!res.healthy) {
+            return { action: 'start-failed', port, owner: null, clients: listClients(rt).length };
+        }
+        // Own ONLY a process we spawned + confirmed. systemd/adopted -> owner null.
+        if (res.owner)
+            writeOwner(rt, res.owner);
+        return { action: 'started', port, owner: res.owner, clients: listClients(rt).length };
+    }
+    finally {
+        if (locked)
+            releaseStartLock(rt);
+    }
+}
+/**
+ * Release this client. Stop the proxy ONLY when:
+ *   - we own it (a process WE spawned — owner marker present), AND
+ *   - no other client remains after removing this one.
+ * Otherwise leave it running:
+ *   - 'left-other-clients' — another agent session is still using it.
+ *   - 'left-adopted'       — we never owned it (pre-existing / systemd / external).
+ */
+export async function releaseProxy(rt, clientId, deps) {
+    deregisterClient(rt, clientId);
+    const remaining = listClients(rt); // prunes dead clients too
+    const owner = readOwner(rt);
+    if (!owner) {
+        return { action: 'left-adopted', remainingClients: remaining.length };
+    }
+    if (remaining.length > 0) {
+        return { action: 'left-other-clients', remainingClients: remaining.length };
+    }
+    // We own it and we are the last client — shut it down with the agent.
+    try {
+        await deps.stopProxy(owner);
+    }
+    finally {
+        clearOwner(rt);
+    }
+    return { action: 'stopped', remainingClients: 0 };
+}
+/**
+ * Derive a stable client id shared across a session's SessionStart + Stop
+ * hooks. Order MATCHES the hook derivation (session-start.sh) so a manual CLI
+ * call and the hook agree: explicit flag, then harness session ids, then the
+ * parent pid (the agent) — spelled `ppid-<n>` to match the hook.
+ */
+export function resolveClientId(explicit) {
+    const candidates = [
+        explicit,
+        process.env.CLAUDE_SESSION_ID,
+        process.env.FACTORY_SESSION_ID,
+        process.env.CURSOR_SESSION_ID,
+        process.env.UAP_SESSION_ID,
+    ];
+    for (const c of candidates) {
+        if (c && c.trim())
+            return c.trim();
+    }
+    return `ppid-${process.ppid}`;
+}
+//# sourceMappingURL=proxy-lifecycle.js.map

package/dist/cli/proxy-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-lifecycle.js","sourceRoot":"","sources":["../../src/cli/proxy-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,EACb,UAAU,GACX,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AAEzE,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;AAChC,CAAC;AACD,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;AAChC,CAAC;AA4BD,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uEAAuE;QACvE,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,uEAAuE;IACvE,sEAAsE;IACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC;AAC3E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,sFAAsF;AACtF,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;IAClF,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9C,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,GAAiB;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,QAAgB;IAC3D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,OAA4B,EAAE;IACpE,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,kBAAkB;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAwB,IAAI,CAAC;QACpC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAiB,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,qEAAqE;QACrE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC;YAAE,OAAO,GAAG,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAU,EAAE,GAAgB;IACrD,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnD,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,SAAS,GAAG,IAAI;IACjE,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,4CAA4C;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;YACpD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;oBAC5C,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5C,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,oCAAoC;YAChD,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC,CAAC,uCAAuC;YACjF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAiCD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,MAAoB,EACpB,IAAY,EACZ,IAAmB;IAEnB,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,2BAA2B;IAC5C,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAE3B,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,oEAAoE;QACpE,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACxF,CAAC;QACD,4EAA4E;QAC5E,IAAI,GAAG,CAAC,KAAK;YAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxF,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,QAAgB,EAChB,IAAmB;IAEnB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC9E,CAAC;IACD,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,MAAM,UAAU,GAAG;QACjB,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,cAAc;KAC3B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC"}

package/dist/cli/proxy.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `uap proxy` — reference-counted, session-scoped lifecycle for the UAP
+ * Anthropic proxy.
+ *
+ *   uap proxy ensure  [--client <id>] [--client-pid <n>] [--port <n>] [--quiet]
+ *       Start the proxy if none is running, or ADOPT an already-running one.
+ *       Registers this session as a client. Wired into the SessionStart hook.
+ *   uap proxy release [--client <id>] [--quiet]
+ *       Deregister this session; stop the proxy ONLY if WE spawned it (as a
+ *       plain process) AND no other client remains. systemd/adopted proxies are
+ *       never stopped. Wired into the Stop / SessionEnd hook.
+ *   uap proxy status [--port <n>] [--json]
+ *   uap proxy start | stop | restart          manual controls
+ *   uap proxy enable | disable                toggle .uap.json proxy.autostart
+ *
+ * Everything is fail-open: hook-driven calls never throw and never block the
+ * session — a proxy that won't start just means the agent runs without it.
+ *
+ * Env overrides (test/advanced):
+ *   PROXY_PORT                  default port (4000)
+ *   UAP_PROXY_RUNTIME_DIR       registry root (default $XDG_RUNTIME_DIR/uap-proxy)
+ *   UAP_PROXY_RUN_SCRIPT        proxy launch script (default: bundled continuity script)
+ *   UAP_PROXY_NO_SYSTEMD=1      force the detached-process path (skip systemd)
+ *   UAP_PROXY_HEALTH_WAIT_MS    how long to wait for /health after launch (15000)
+ */
+export interface ProxyOptions {
+    client?: string;
+    clientPid?: string | number;
+    ifEnabled?: boolean;
+    port?: string | number;
+    quiet?: boolean;
+    json?: boolean;
+}
+export declare function proxyCommand(sub: string | undefined, options?: ProxyOptions): Promise<void>;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/cli/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/cli/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA0PH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CA8If"}