@monoes/monomindcli 2.16.12 → 2.16.14

package/dist/src/orgrt/role-incarnation.js

@@ -0,0 +1,374 @@
+// packages/@monomind/cli/src/orgrt/role-incarnation.ts
+// Extracted from daemon.ts — building one role incarnation and its supervised
+// crash-retry loop.
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { restoredRoleStatus, restoreMailboxQueue } from './checkpoint.js';
+import { OrgDaemon } from './daemon.js';
+import { ScrollbackBuffer } from './daemon-types.js';
+import { fileToolRoots } from './file-roots.js';
+import { resolveLoadout, sessionLoadoutFor } from './loadouts.js';
+import { isRecoverableCloseReason, Mailbox } from './mailbox.js';
+import { PolicyEngine } from './policy.js';
+import { buildRoleSessionOpts } from './role-session-opts.js';
+import { computeReplacementBudget } from './role-slot.js';
+import { runAgentSession } from './session.js';
+import { effectiveToolProviders } from './skill-library.js';
+import { TaskProcesses } from './task-cancel.js';
+import { roleProviderPrefixes } from './tool-providers.js';
+import { ORG_DIR } from './types.js';
+/** Build one role incarnation: mailbox, policy, AgentRuntime, sessionOpts,
+ *  and the supervised crash-retry loop. Used by BOTH the startup lazy-spawn
+ *  path (generation 0, via the `spawnRole` closure inside startOrgInner)
+ *  and respawnRole() (generation N+1). Does not touch running.agents or
+ *  running.roleSlots — callers publish the result themselves. */
+export function spawnRoleIncarnation(daemon, name, running, role, generation, opts = {}) {
+    const { roleCheckpoint } = opts;
+    const abort = opts.abort ?? new AbortController();
+    const { def, bus } = running;
+    const cwd = running.workdir;
+    const ws = daemon.workspaceSetting(def);
+    const perRoleBudget = opts.budgetTokensOverride ?? computeReplacementBudget(def, role.id);
+    let roleCwd = cwd;
+    const existingSlot = running.roleSlots.get(role.id);
+    if (ws === 'worktree-per-role' && role.id !== running.bossRoleId) {
+        const wtPath = join(daemon.root, ORG_DIR, name, `worktree-${role.id}`);
+        if (existingSlot?.runtime?.worktreePath === wtPath && existsSync(wtPath)) {
+            // A replacement (generation > 0) reuses the SAME worktree path —
+            // recreating it here would delete any uncommitted work the old
+            // incarnation left behind (design constraint #5).
+            roleCwd = wtPath;
+        }
+        else {
+            try {
+                // Q7: top-level `import { execFileSync }` replaces the inlined
+                // `require('node:child_process')` that broke ESM at runtime —
+                // vitest's CJS shim masked it in tests but the built package
+                // threw "require is not defined" in real Node ESM execution.
+                // SEC-5: argv-array form, no shell.
+                if (existsSync(wtPath)) {
+                    try {
+                        execFileSync('git', ['worktree', 'remove', '--force', wtPath], {
+                            cwd: daemon.root,
+                            stdio: 'ignore',
+                            timeout: 30_000,
+                        });
+                    }
+                    catch {
+                        /* best-effort */
+                    }
+                }
+                execFileSync('git', ['worktree', 'add', wtPath, 'HEAD', '--detach'], {
+                    cwd: daemon.root,
+                    stdio: 'ignore',
+                    timeout: 30_000,
+                });
+                roleCwd = wtPath;
+            }
+            catch {
+                /* fallback to shared cwd if git worktree fails */
+            }
+        }
+    }
+    const mailbox = new Mailbox();
+    if (roleCheckpoint?.mailboxQueue?.length) {
+        restoreMailboxQueue({ mailbox }, roleCheckpoint.mailboxQueue);
+    }
+    // A recoverable close (budget exhaustion) is left open on resume — see
+    // isRecoverableCloseReason's doc comment. Re-closing it here would
+    // make the idle watchdog's "raise the budget and resume" remedy a
+    // no-op, since nothing in this codebase ever reopens a closed mailbox.
+    if (roleCheckpoint?.mailboxClosed &&
+        !isRecoverableCloseReason(roleCheckpoint.mailboxCloseReason)) {
+        mailbox.close(roleCheckpoint.mailboxCloseReason);
+    }
+    const policy = new PolicyEngine(role.id, {
+        maxTokens: role.budget_tokens ?? perRoleBudget,
+        // ADR-O001 D1: which basis that ceiling is enforced on. Defaults to
+        // the historical uncached basis so the honest (cache-aware) meter
+        // introduced alongside it cannot exhaust an existing budget_tokens —
+        // including the schema's 1M default — roughly 100x early.
+        maxTokensBasis: def.run_config.budget_tokens_basis ?? 'uncached',
+        maxUsd: role.budget_usd,
+        ...(role.policy ?? {}),
+    }, bus, roleCwd, 
+    // #303: the file tools (Read/Write/Edit/Glob/Grep) get the same extra
+    // roots the Bash sandbox already treats as writable (role-sandbox.ts) —
+    // $TMPDIR, the org root, and any policy.sandbox.allowWrite entries.
+    // $HOME is deliberately excluded; see file-roots.ts.
+    fileToolRoots({ cwd: roleCwd, orgRoot: daemon.root }, role.policy?.sandbox));
+    policy.setToolContext({
+        providerPrefixes: () => roleProviderPrefixes({ tool_providers: effectiveToolProviders(role, daemon.root) }),
+        trace: () => daemon.roleTrace(name, role.id),
+    });
+    // ADR-O001 D1: prefer the persisted four-quantity breakdown; a checkpoint
+    // written before it existed still resumes via the scalar, on the uncached
+    // basis it was recorded on.
+    if (roleCheckpoint?.tokenUsage) {
+        policy.setTokenUsage(roleCheckpoint.tokenUsage);
+    }
+    else if (roleCheckpoint?.tokensUsed) {
+        policy.setUsage(roleCheckpoint.tokensUsed);
+    }
+    // ORG-7: restore accumulated USD spend across resume so a stop/resume
+    // cycle can't reset a role's USD budget back to zero.
+    if (roleCheckpoint?.costUsd) {
+        policy.setUsageUsd(roleCheckpoint.costUsd);
+    }
+    // ADR-O001 D7: the loadout this incarnation's session is built with, fixed
+    // for its life. A checkpointed role keeps what it had (its SDK session was
+    // built with it); a replacement keeps its predecessor's; a new role takes
+    // the loadout of the first ready task it is being spawned for.
+    const loadoutName = roleCheckpoint
+        ? roleCheckpoint.loadout
+        : (existingSlot?.runtime?.loadout ?? sessionLoadoutFor(running.taskDag, role.id));
+    let loadout;
+    if (loadoutName) {
+        try {
+            loadout = resolveLoadout(def, loadoutName, daemon.root);
+        }
+        catch (err) {
+            // Validated at start, so only a config hot-reload or a deleted
+            // instructions_file lands here. Spawn without it, loudly: a role that
+            // fails to spawn would strand its task, which is worse.
+            bus.emit({
+                type: 'audit',
+                from: role.id,
+                reason: 'loadout-unresolvable',
+                msg: `role "${role.id}" spawned without loadout "${loadoutName}": ${err instanceof Error ? err.message : err}`,
+                data: { loadout: loadoutName },
+            });
+        }
+    }
+    const runtime = {
+        mailbox,
+        policy,
+        status: restoredRoleStatus(roleCheckpoint),
+        done: Promise.resolve(),
+        metrics: { tokens: roleCheckpoint?.tokensUsed ?? 0, costUsd: roleCheckpoint?.costUsd ?? 0 },
+        lastMessageId: roleCheckpoint?.lastMessageId,
+        error: roleCheckpoint?.error,
+        sessionId: roleCheckpoint?.sessionId,
+        worktreePath: roleCwd !== cwd ? roleCwd : undefined,
+        scrollback: new ScrollbackBuffer(),
+        ...(loadout ? { loadout: loadout.name } : {}),
+        taskProcesses: new TaskProcesses(),
+    };
+    if (roleCheckpoint?.scrollback?.length) {
+        for (const line of roleCheckpoint.scrollback)
+            runtime.scrollback.push(line);
+    }
+    if (roleCheckpoint?.turns && !running.turns?.has(role.id)) {
+        (running.turns ??= new Map()).set(role.id, roleCheckpoint.turns);
+    }
+    const sessionOpts = buildRoleSessionOpts(daemon, name, running, role, roleCwd, runtime, abort, loadout, policy, mailbox, roleCheckpoint);
+    // Supervised session: transient crashes (provider blips, network) restart
+    // with backoff; a crash with the mailbox already closed, or one that
+    // exhausts the retry budget, is terminal. runAgentSession already emits a
+    // 'status' event for the raw error; the terminal 'audit' event is for
+    // dashboards/alerts that filter on actionable failures (not routine
+    // status chatter) so a dead agent surfaces instead of a run that
+    // silently never progresses.
+    const BACKOFFS_MS = daemon.opts.crashBackoffsMs ?? [1000, 5000, 15000];
+    const myGeneration = generation;
+    const isStaleGeneration = () => (running.roleSlots.get(role.id)?.generation ?? 0) !== myGeneration;
+    if (!mailbox.isClosed && runtime.status !== 'crashed') {
+        runtime.done = (async () => {
+            for (let attempt = 0;; attempt++) {
+                try {
+                    await runAgentSession(sessionOpts);
+                    runtime.status = 'ended';
+                    return;
+                }
+                catch (err) {
+                    // A deliberate respawn (see respawnRole) bumps the slot's
+                    // generation and force-stops this incarnation via its
+                    // externalAbort - that abort makes runAgentSession reject here
+                    // exactly like a real crash would. Recognize supersession
+                    // FIRST: this generation's retry loop must never restart,
+                    // never run terminal crash handling, and never notify the
+                    // boss - the replacement (a new generation, spawned
+                    // separately) already owns this role id.
+                    if (isStaleGeneration())
+                        return;
+                    // Drop the crashed session's stale waker immediately: a push()
+                    // during the backoff window must queue for the NEXT session, not
+                    // wake the dead generator to swallow it.
+                    mailbox.detach();
+                    // #203: if the crashed session's mailbox generator was abandoned
+                    // mid-yield (message already shift()ed for it, turn never
+                    // finished), put that message back on the queue — otherwise the
+                    // replacement session's stream() finds an empty queue and parks
+                    // forever, since the "delivered" message is gone for good.
+                    mailbox.reclaimInFlight();
+                    const message = err instanceof Error ? err.message : String(err);
+                    const isTurnLimit = /Reached maximum number of turns|error_max_turns/i.test(message);
+                    // Bounded like every other recovery: attempt counts every pass
+                    // through this loop, so a role that keeps surfacing max-turns
+                    // errors here (session.ts already swallows the normal ones)
+                    // falls through to crash handling instead of looping forever.
+                    if (isTurnLimit && !mailbox.isClosed && attempt < BACKOFFS_MS.length) {
+                        sessionOpts.resumeSessionId = undefined;
+                        mailbox.push(`${Mailbox.CONTINUE_PREFIX} You reached the turn limit on your task. Continue your in-progress work from where you left off; if finished, end your turn.`);
+                        bus.emit({
+                            type: 'status',
+                            from: role.id,
+                            reason: 'turn-limit-recover',
+                            msg: `agent "${role.id}" hit turn limit error — continuing with fresh session`,
+                        });
+                        continue;
+                    }
+                    // Exit 143 = SIGTERM. If the mailbox is already closed, we
+                    // sent the signal ourselves during stop — not a crash.
+                    const killedByStop = mailbox.isClosed && /exit(?:ed)? with code 143/.test(message);
+                    // #251: the org's own stop/complete (finishStop) removes this run
+                    // from this.orgs, closes every mailbox and aborts every session —
+                    // an idle one then rejects with the abort ("Operation aborted",
+                    // "Claude Code process aborted by user"). That is a shutdown, not a
+                    // crash. A non-abort error surfacing during the stop, or a crash
+                    // already backing off when the stop landed, stays a crash.
+                    const abortedByStop = mailbox.isClosed &&
+                        daemon.orgs.get(name) !== running &&
+                        (err?.name === 'AbortError' ||
+                            /\baborted\b/i.test(message));
+                    const crash = () => {
+                        if (killedByStop) {
+                            runtime.status = 'ended';
+                            bus.emit({
+                                type: 'status',
+                                from: role.id,
+                                msg: `agent "${role.id}" terminated by stop (was still working when drain window expired)`,
+                                reason: 'terminated-by-stop',
+                            });
+                            return;
+                        }
+                        if (abortedByStop) {
+                            runtime.status = 'ended';
+                            // #304: `message` here is always an abort string (see abortedByStop
+                            // above) — either "Operation aborted" or the SDK's "Claude Code
+                            // process aborted by user". Echoing it made a planned stop read as
+                            // a human interruption, and made roles of the same run read
+                            // differently. Report WHY the org stopped instead; the raw string
+                            // stays in `data` for debugging.
+                            const why = running.closedBy === 'org-complete' ? 'org_complete' : 'stop requested';
+                            bus.emit({
+                                type: 'status',
+                                from: role.id,
+                                msg: `agent "${role.id}" stopped with the org (${why})`,
+                                reason: 'agent-stopped',
+                                data: { agentId: role.id, error: message },
+                            });
+                            return;
+                        }
+                        runtime.status = 'crashed';
+                        runtime.error = message;
+                        // Close the mailbox so deliver()/receiveRemote() report a real
+                        // error instead of pushing into a queue no session will read
+                        // (and returning a false "delivered" receipt to the sender).
+                        mailbox.close();
+                        const isContextLimit = OrgDaemon.CONTEXT_LIMIT_RE.test(message);
+                        bus.emit({
+                            type: 'audit',
+                            from: role.id,
+                            msg: `agent "${role.id}" crashed: ${message}`,
+                            reason: isContextLimit ? 'agent-context-limit' : 'agent-session-crash',
+                            data: {
+                                agentId: role.id,
+                                error: message,
+                                restarts: attempt,
+                                contextLimit: isContextLimit,
+                            },
+                        });
+                        if (role.id !== running.bossRoleId) {
+                            // #2/#3: a worker is gone for the rest of this run. Without this
+                            // notice the coordinator keeps messaging a corpse (observed: four
+                            // unanswered org_send calls to a developer that had crashed on a
+                            // context-window limit). Tell the boss to reassign — and if the
+                            // crash was a context overflow, tell it to chunk smaller, since
+                            // re-dispatching the same task verbatim fails the same way.
+                            const bossRt = running.agents.get(running.bossRoleId);
+                            if (bossRt && !bossRt.mailbox.isClosed) {
+                                const guidance = isContextLimit
+                                    ? ' This was a context-window overflow — re-dispatching the same task verbatim will fail identically. Break the work into smaller pieces (one file or section at a time) and do not paste large file contents in a single message.'
+                                    : '';
+                                bossRt.mailbox.push(`[system] Worker "${role.id}" crashed and will not recover this run (${message}). It can no longer receive messages — stop messaging it. Reassign its outstanding work to another agent or take it on yourself.${guidance}`);
+                                bus.emit({
+                                    type: 'audit',
+                                    from: running.bossRoleId,
+                                    reason: 'worker-crashed',
+                                    msg: `worker "${role.id}" crashed (contextLimit=${isContextLimit}); coordinator notified to reassign`,
+                                });
+                            }
+                        }
+                        else {
+                            // #4: the coordinator itself died. Don't go silent and wait for a
+                            // human — attempt a bounded whole-org restart with fresh sessions
+                            // (which also sheds whatever bloated context caused the crash).
+                            daemon.scheduleBossRestart(name);
+                        }
+                    };
+                    // Fatal errors (provider auth/quota/billing — tagged with
+                    // err.fatal by the runner) can NEVER be fixed by a restart: the
+                    // same call fails identically or hangs. Skip the backoff loop
+                    // and go straight to terminal crash handling instead of burning
+                    // the retry budget and wall-clock on a guaranteed failure.
+                    const fatal = err?.fatal === true;
+                    if (fatal) {
+                        bus.emit({
+                            type: 'status',
+                            from: role.id,
+                            reason: 'agent-fatal',
+                            msg: `agent "${role.id}" hit a fatal (non-retryable) error — not restarting`,
+                        });
+                        crash();
+                        return;
+                    }
+                    if (mailbox.isClosed || attempt >= BACKOFFS_MS.length) {
+                        crash();
+                        return;
+                    }
+                    bus.emit({
+                        type: 'status',
+                        from: role.id,
+                        reason: 'agent-restart',
+                        msg: `agent "${role.id}" crashed (${message}) — restarting in ${BACKOFFS_MS[attempt]}ms (attempt ${attempt + 1}/${BACKOFFS_MS.length})`,
+                    });
+                    await new Promise((r) => {
+                        const t = setTimeout(r, BACKOFFS_MS[attempt]);
+                        t.unref?.();
+                        // Org stop (finishStop) aborts every active slot's controller —
+                        // without racing it here, this wait wouldn't notice for up to
+                        // BACKOFFS_MS[attempt] (default up to 15s), well past finishStop's
+                        // own bounded drain window. That let this loop's crash() —
+                        // and the bus.emit() it triggers — fire AFTER finishStop had
+                        // already declared the org stopped and returned, capable of
+                        // recreating files in a run directory a caller was already
+                        // deleting.
+                        if (abort.signal.aborted) {
+                            clearTimeout(t);
+                            r();
+                            return;
+                        }
+                        abort.signal.addEventListener('abort', () => {
+                            clearTimeout(t);
+                            r();
+                        }, { once: true });
+                    });
+                    if (isStaleGeneration())
+                        return; // superseded during the backoff wait
+                    if (mailbox.isClosed) {
+                        crash();
+                        return;
+                    } // org stopped during backoff — never recovered
+                    // #247: continue the crashed conversation (briefing, task context,
+                    // finished work) instead of starting cold. runAgentSession falls
+                    // back to one fresh session if this id can't be resumed.
+                    sessionOpts.resumeSessionId = runtime.sessionId;
+                }
+            }
+        })();
+    }
+    return { runtime, abort };
+}
+//# sourceMappingURL=role-incarnation.js.map

package/dist/src/orgrt/role-incarnation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-incarnation.js","sourceRoot":"","sources":["../../../src/orgrt/role-incarnation.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,8EAA8E;AAC9E,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAuB,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAgB,MAAM,YAAY,CAAC;AAEnD;;;;iEAIiE;AACjE,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,IAAY,EACZ,OAAmB,EACnB,IAAa,EACb,UAAkB,EAClB,IAAI,GAIA,EAAE;IAEN,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,eAAe,EAAE,CAAC;IAClD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAQ,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,IAAI,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,EAAE,KAAK,mBAAmB,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,YAAY,EAAE,OAAO,EAAE,YAAY,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,iEAAiE;YACjE,+DAA+D;YAC/D,kDAAkD;YAClD,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,+DAA+D;gBAC/D,8DAA8D;gBAC9D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,oCAAoC;gBACpC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;4BAC7D,GAAG,EAAE,MAAM,CAAC,IAAI;4BAChB,KAAK,EAAE,QAAQ;4BACf,OAAO,EAAE,MAAM;yBAChB,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,iBAAiB;oBACnB,CAAC;gBACH,CAAC;gBACD,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;oBACnE,GAAG,EAAE,MAAM,CAAC,IAAI;oBAChB,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;gBACH,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,IAAI,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QACzC,mBAAmB,CAAC,EAAE,OAAO,EAAS,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,kEAAkE;IAClE,uEAAuE;IACvE,IACE,cAAc,EAAE,aAAa;QAC7B,CAAC,wBAAwB,CAAC,cAAc,CAAC,kBAAkB,CAAC,EAC5D,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAC7B,IAAI,CAAC,EAAE,EACP;QACE,SAAS,EAAE,IAAI,CAAC,aAAa,IAAI,aAAa;QAC9C,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,0DAA0D;QAC1D,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,IAAI,UAAU;QAChE,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;KACvB,EACD,GAAG,EACH,OAAO;IACP,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,qDAAqD;IACrD,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5E,CAAC;IACF,MAAM,CAAC,cAAc,CAAC;QACpB,gBAAgB,EAAE,GAAG,EAAE,CACrB,oBAAoB,CAAC,EAAE,cAAc,EAAE,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrF,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,0EAA0E;IAC1E,0EAA0E;IAC1E,4BAA4B;IAC5B,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IACD,sEAAsE;IACtE,sDAAsD;IACtD,IAAI,cAAc,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,WAAW,GAAG,cAAc;QAChC,CAAC,CAAC,cAAc,CAAC,OAAO;QACxB,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,IAAI,OAAsD,CAAC;IAC3D,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+DAA+D;YAC/D,sEAAsE;YACtE,wDAAwD;YACxD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,IAAI,CAAC,EAAE;gBACb,MAAM,EAAE,sBAAsB;gBAC9B,GAAG,EAAE,SAAS,IAAI,CAAC,EAAE,8BAA8B,WAAW,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE;gBAC9G,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAiB;QAC5B,OAAO;QACP,MAAM;QACN,MAAM,EAAE,kBAAkB,CAAC,cAAc,CAAC;QAC1C,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QACvB,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,IAAI,CAAC,EAAE;QAC3F,aAAa,EAAE,cAAc,EAAE,aAAa;QAC5C,KAAK,EAAE,cAAc,EAAE,KAAK;QAC5B,SAAS,EAAE,cAAc,EAAE,SAAS;QACpC,YAAY,EAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACnD,UAAU,EAAE,IAAI,gBAAgB,EAAE;QAClC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,aAAa,EAAE,IAAI,aAAa,EAAE;KACnC,CAAC;IACF,IAAI,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,UAAU;YAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,cAAc,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,CACtC,MAAM,EACN,IAAI,EACJ,OAAO,EACP,IAAI,EACJ,OAAO,EACP,OAAO,EACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,OAAO,EACP,cAAc,CACf,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,0EAA0E;IAC1E,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,6BAA6B;IAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,UAAU,CAAC;IAChC,MAAM,iBAAiB,GAAG,GAAY,EAAE,CACtC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC;IACrE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;oBACnC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;oBACzB,OAAO;gBACT,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,0DAA0D;oBAC1D,sDAAsD;oBACtD,+DAA+D;oBAC/D,0DAA0D;oBAC1D,0DAA0D;oBAC1D,0DAA0D;oBAC1D,oDAAoD;oBACpD,yCAAyC;oBACzC,IAAI,iBAAiB,EAAE;wBAAE,OAAO;oBAChC,+DAA+D;oBAC/D,iEAAiE;oBACjE,yCAAyC;oBACzC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACjB,iEAAiE;oBACjE,0DAA0D;oBAC1D,gEAAgE;oBAChE,gEAAgE;oBAChE,2DAA2D;oBAC3D,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC1B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACjE,MAAM,WAAW,GAAG,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACrF,+DAA+D;oBAC/D,8DAA8D;oBAC9D,4DAA4D;oBAC5D,8DAA8D;oBAC9D,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;wBACrE,WAAW,CAAC,eAAe,GAAG,SAAS,CAAC;wBACxC,OAAO,CAAC,IAAI,CACV,GAAG,OAAO,CAAC,eAAe,+HAA+H,CAC1J,CAAC;wBACF,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,IAAI,CAAC,EAAE;4BACb,MAAM,EAAE,oBAAoB;4BAC5B,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,wDAAwD;yBAC/E,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBACD,2DAA2D;oBAC3D,uDAAuD;oBACvD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACnF,kEAAkE;oBAClE,kEAAkE;oBAClE,gEAAgE;oBAChE,oEAAoE;oBACpE,iEAAiE;oBACjE,2DAA2D;oBAC3D,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ;wBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO;wBACjC,CAAE,GAAgC,EAAE,IAAI,KAAK,YAAY;4BACvD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;oBAClC,MAAM,KAAK,GAAG,GAAS,EAAE;wBACvB,IAAI,YAAY,EAAE,CAAC;4BACjB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;4BACzB,GAAG,CAAC,IAAI,CAAC;gCACP,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,IAAI,CAAC,EAAE;gCACb,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,oEAAoE;gCAC1F,MAAM,EAAE,oBAAoB;6BAC7B,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,IAAI,aAAa,EAAE,CAAC;4BAClB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;4BACzB,oEAAoE;4BACpE,gEAAgE;4BAChE,mEAAmE;4BACnE,4DAA4D;4BAC5D,kEAAkE;4BAClE,iCAAiC;4BACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC;4BACpF,GAAG,CAAC,IAAI,CAAC;gCACP,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,IAAI,CAAC,EAAE;gCACb,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,2BAA2B,GAAG,GAAG;gCACvD,MAAM,EAAE,eAAe;gCACvB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;6BAC3C,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;wBAC3B,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC;wBACxB,+DAA+D;wBAC/D,6DAA6D;wBAC7D,6DAA6D;wBAC7D,OAAO,CAAC,KAAK,EAAE,CAAC;wBAChB,MAAM,cAAc,GAAG,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChE,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,IAAI,CAAC,EAAE;4BACb,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,cAAc,OAAO,EAAE;4BAC7C,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB;4BACtE,IAAI,EAAE;gCACJ,OAAO,EAAE,IAAI,CAAC,EAAE;gCAChB,KAAK,EAAE,OAAO;gCACd,QAAQ,EAAE,OAAO;gCACjB,YAAY,EAAE,cAAc;6BAC7B;yBACF,CAAC,CAAC;wBACH,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;4BACnC,iEAAiE;4BACjE,kEAAkE;4BAClE,iEAAiE;4BACjE,gEAAgE;4BAChE,gEAAgE;4BAChE,4DAA4D;4BAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;4BACtD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gCACvC,MAAM,QAAQ,GAAG,cAAc;oCAC7B,CAAC,CAAC,iOAAiO;oCACnO,CAAC,CAAC,EAAE,CAAC;gCACP,MAAM,CAAC,OAAO,CAAC,IAAI,CACjB,oBAAoB,IAAI,CAAC,EAAE,4CAA4C,OAAO,mIAAmI,QAAQ,EAAE,CAC5N,CAAC;gCACF,GAAG,CAAC,IAAI,CAAC;oCACP,IAAI,EAAE,OAAO;oCACb,IAAI,EAAE,OAAO,CAAC,UAAU;oCACxB,MAAM,EAAE,gBAAgB;oCACxB,GAAG,EAAE,WAAW,IAAI,CAAC,EAAE,2BAA2B,cAAc,qCAAqC;iCACtG,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,kEAAkE;4BAClE,kEAAkE;4BAClE,gEAAgE;4BAChE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;wBACnC,CAAC;oBACH,CAAC,CAAC;oBACF,0DAA0D;oBAC1D,gEAAgE;oBAChE,8DAA8D;oBAC9D,gEAAgE;oBAChE,2DAA2D;oBAC3D,MAAM,KAAK,GAAI,GAAkC,EAAE,KAAK,KAAK,IAAI,CAAC;oBAClE,IAAI,KAAK,EAAE,CAAC;wBACV,GAAG,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,IAAI,CAAC,EAAE;4BACb,MAAM,EAAE,aAAa;4BACrB,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,sDAAsD;yBAC7E,CAAC,CAAC;wBACH,KAAK,EAAE,CAAC;wBACR,OAAO;oBACT,CAAC;oBACD,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;wBACtD,KAAK,EAAE,CAAC;wBACR,OAAO;oBACT,CAAC;oBACD,GAAG,CAAC,IAAI,CAAC;wBACP,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,IAAI,CAAC,EAAE;wBACb,MAAM,EAAE,eAAe;wBACvB,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,cAAc,OAAO,qBAAqB,WAAW,CAAC,OAAO,CAAC,eAAe,OAAO,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG;qBACxI,CAAC,CAAC;oBACH,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;wBAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;wBAC7C,CAA4B,CAAC,KAAK,EAAE,EAAE,CAAC;wBACxC,gEAAgE;wBAChE,8DAA8D;wBAC9D,mEAAmE;wBACnE,2DAA2D;wBAC3D,6DAA6D;wBAC7D,4DAA4D;wBAC5D,2DAA2D;wBAC3D,YAAY;wBACZ,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;4BACzB,YAAY,CAAC,CAAC,CAAC,CAAC;4BAChB,CAAC,EAAE,CAAC;4BACJ,OAAO;wBACT,CAAC;wBACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAC3B,OAAO,EACP,GAAG,EAAE;4BACH,YAAY,CAAC,CAAC,CAAC,CAAC;4BAChB,CAAC,EAAE,CAAC;wBACN,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;oBACJ,CAAC,CAAC,CAAC;oBACH,IAAI,iBAAiB,EAAE;wBAAE,OAAO,CAAC,qCAAqC;oBACtE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,KAAK,EAAE,CAAC;wBACR,OAAO;oBACT,CAAC,CAAC,+CAA+C;oBACjD,mEAAmE;oBACnE,iEAAiE;oBACjE,yDAAyD;oBACzD,WAAW,CAAC,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/orgrt/role-respawn.d.ts

@@ -0,0 +1,7 @@
+import type { OrgDaemon } from './daemon.js';
+import { type RespawnReceipt } from './role-slot.js';
+/** org_respawn_role's daemon-owned implementation. See the design doc's
+ *  "Replacement algorithm" (13 steps) — this method's body follows those
+ *  steps in order, numbered in comments. */
+export declare function respawnRole(daemon: OrgDaemon, name: string, callerId: string, rawInput: unknown): Promise<RespawnReceipt>;
+//# sourceMappingURL=role-respawn.d.ts.map

package/dist/src/orgrt/role-respawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-respawn.d.ts","sourceRoot":"","sources":["../../../src/orgrt/role-respawn.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAIL,KAAK,cAAc,EAGpB,MAAM,gBAAgB,CAAC;AAGxB;;4CAE4C;AAC5C,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,cAAc,CAAC,CA4UzB"}