@namzu/cli 23.0.0 → 25.0.0

package/dist/integrations/resident/runner-control.d.ts

@@ -0,0 +1,47 @@
+declare const PHASES: readonly ["starting", "idle", "working", "stopping"];
+export type RunnerControlPhase = (typeof PHASES)[number];
+export type RunnerControlAction = 'status' | 'stop';
+export interface RunnerControlStatus {
+    readonly pid: number;
+    readonly phase: RunnerControlPhase;
+    /** Callback entries admitted by this runner, independent of final settlement. */
+    readonly stepsStarted: number;
+}
+export interface RunnerControlServerOptions {
+    readonly instanceId: string;
+    readonly token: string;
+    readonly getStatus: () => RunnerControlStatus;
+    /** Signal owned work once. A response acknowledges this request, not drainage. */
+    readonly onStop: () => void;
+}
+export interface RunnerControlServer {
+    readonly port: number;
+    /** Refuse new clients and destroy remaining sockets before resolving. */
+    close(): Promise<void>;
+}
+export interface RunnerControlRecord {
+    readonly instanceId: string;
+    readonly token: string;
+    readonly port: number | null;
+    readonly pid: number | null;
+}
+export type RunnerControlResult = ({
+    readonly kind: 'responsive';
+    readonly instanceId: string;
+    readonly stopRequested: boolean;
+} & RunnerControlStatus) | {
+    readonly kind: 'unresponsive';
+    /** No observation here establishes that the process is dead. */
+    readonly reason: string;
+};
+/**
+ * One private, local control endpoint. Authentication is bound to an immutable
+ * runner instance, never to a PID alone. No request runs tools or shell commands.
+ */
+export declare function createRunnerControlServer(options: RunnerControlServerOptions): Promise<RunnerControlServer>;
+/** An authenticated response proves responsiveness; absence never proves death. */
+export declare function queryRunner(record: RunnerControlRecord, action: RunnerControlAction, options?: {
+    readonly timeoutMs?: number;
+}): Promise<RunnerControlResult>;
+export {};
+//# sourceMappingURL=runner-control.d.ts.map

package/dist/integrations/resident/runner-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-control.d.ts","sourceRoot":"","sources":["../../../src/integrations/resident/runner-control.ts"],"names":[],"mappings":"AAMA,QAAA,MAAM,MAAM,sDAAuD,CAAA;AAEnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;AACxD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEnD,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAA;IAClC,iFAAiF;IACjF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,mBAAmB,CAAA;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,MAAM,mBAAmB,GAC5B,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAA;CAC9B,GAAG,mBAAmB,CAAC,GACxB;IACA,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACtB,CAAA;AA8BJ;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAwH9B;AAED,mFAAmF;AACnF,wBAAgB,WAAW,CAC1B,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,mBAAmB,EAC3B,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3C,OAAO,CAAC,mBAAmB,CAAC,CAgF9B"}

package/dist/integrations/resident/runner-control.js

@@ -0,0 +1,238 @@
+import { timingSafeEqual } from 'node:crypto';
+import { createConnection, createServer } from 'node:net';
+const MAX_MESSAGE_BYTES = 4_096;
+const MAX_OPEN_SOCKETS = 16;
+const DEFAULT_TIMEOUT_MS = 1_500;
+const PHASES = ['starting', 'idle', 'working', 'stopping'];
+function object(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function exactKeys(value, keys) {
+    const actual = Object.keys(value);
+    return actual.length === keys.length && actual.every((key) => keys.includes(key));
+}
+function validIdentity(instanceId, token) {
+    return (instanceId.length > 0 && instanceId.length <= 256 && token.length > 0 && token.length <= 512);
+}
+function validStatus(value) {
+    return (typeof value.pid === 'number' &&
+        Number.isSafeInteger(value.pid) &&
+        value.pid > 0 &&
+        typeof value.phase === 'string' &&
+        PHASES.includes(value.phase) &&
+        typeof value.stepsStarted === 'number' &&
+        Number.isSafeInteger(value.stepsStarted) &&
+        value.stepsStarted >= 0);
+}
+/**
+ * One private, local control endpoint. Authentication is bound to an immutable
+ * runner instance, never to a PID alone. No request runs tools or shell commands.
+ */
+export async function createRunnerControlServer(options) {
+    if (!validIdentity(options.instanceId, options.token))
+        throw new Error('Runner control requires a bounded instance identity and secret token.');
+    const expectedToken = Buffer.from(options.token);
+    const sockets = new Set();
+    let stopRequested = false;
+    let stopFailed = false;
+    let closing = false;
+    let closePromise;
+    const requestStop = () => {
+        if (stopRequested)
+            return;
+        stopRequested = true;
+        try {
+            options.onStop();
+        }
+        catch (error) {
+            stopFailed = true;
+            throw error;
+        }
+    };
+    const server = createServer((socket) => {
+        socket.on('error', () => { });
+        if (closing || sockets.size >= MAX_OPEN_SOCKETS) {
+            socket.destroy();
+            return;
+        }
+        sockets.add(socket);
+        socket.once('close', () => sockets.delete(socket));
+        // A total deadline, rather than an inactivity timeout a slow sender can reset.
+        const deadline = setTimeout(() => socket.destroy(), DEFAULT_TIMEOUT_MS);
+        socket.once('close', () => clearTimeout(deadline));
+        let buffered = Buffer.alloc(0);
+        let handled = false;
+        socket.on('data', (chunk) => {
+            if (handled || buffered.length + chunk.length > MAX_MESSAGE_BYTES) {
+                socket.destroy();
+                return;
+            }
+            buffered = Buffer.concat([buffered, chunk]);
+            const newline = buffered.indexOf(10);
+            if (newline < 0)
+                return;
+            handled = true;
+            if (newline !== buffered.length - 1) {
+                socket.destroy();
+                return;
+            }
+            try {
+                const request = JSON.parse(buffered.subarray(0, newline).toString('utf8'));
+                if (!object(request) ||
+                    !exactKeys(request, ['version', 'instanceId', 'token', 'action']) ||
+                    request.version !== 1 ||
+                    request.instanceId !== options.instanceId ||
+                    typeof request.token !== 'string' ||
+                    (request.action !== 'status' && request.action !== 'stop')) {
+                    socket.destroy();
+                    return;
+                }
+                const token = Buffer.from(request.token);
+                if (token.length !== expectedToken.length || !timingSafeEqual(token, expectedToken)) {
+                    socket.destroy();
+                    return;
+                }
+                if (request.action === 'stop')
+                    requestStop();
+                if (stopFailed)
+                    throw new Error('Runner stop callback failed.');
+                const state = options.getStatus();
+                if (!object(state) || !validStatus(state))
+                    throw new Error('Invalid runner state.');
+                socket.end(`${JSON.stringify({
+                    version: 1,
+                    instanceId: options.instanceId,
+                    pid: state.pid,
+                    phase: stopRequested ? 'stopping' : state.phase,
+                    stepsStarted: state.stepsStarted,
+                    stopRequested,
+                })}\n`);
+            }
+            catch {
+                // Request bytes and the secret never enter logs or error responses.
+                socket.destroy();
+            }
+        });
+    });
+    const close = () => {
+        if (closePromise)
+            return closePromise;
+        closing = true;
+        closePromise = new Promise((resolve, reject) => {
+            server.close((error) => {
+                if (error && error.code !== 'ERR_SERVER_NOT_RUNNING')
+                    reject(error);
+                else
+                    resolve();
+            });
+            for (const socket of sockets)
+                socket.destroy();
+        });
+        return closePromise;
+    };
+    await new Promise((resolve, reject) => {
+        const failed = (error) => reject(error);
+        server.once('error', failed);
+        server.listen({ host: '127.0.0.1', port: 0, exclusive: true }, () => {
+            server.removeListener('error', failed);
+            resolve();
+        });
+    });
+    // Losing the installed control endpoint stops admission through the same
+    // callback; it does not leave an uncontrolled runner claiming to be healthy.
+    server.on('error', () => {
+        try {
+            requestStop();
+        }
+        catch {
+            /* The owner is already being stopped. */
+        }
+        void close().catch(() => { });
+    });
+    const address = server.address();
+    if (address === null || typeof address === 'string') {
+        await close();
+        throw new Error('Runner control did not acquire a loopback port.');
+    }
+    return { port: address.port, close };
+}
+/** An authenticated response proves responsiveness; absence never proves death. */
+export function queryRunner(record, action, options = {}) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 60_000)
+        throw new Error('Runner control timeout must be a whole number from 1 to 60000 milliseconds.');
+    if (!validIdentity(record.instanceId, record.token) ||
+        !Number.isSafeInteger(record.port) ||
+        (record.port ?? 0) < 1 ||
+        (record.port ?? 0) > 65_535 ||
+        !Number.isSafeInteger(record.pid) ||
+        (record.pid ?? 0) < 1 ||
+        (action !== 'status' && action !== 'stop'))
+        return Promise.resolve({
+            kind: 'unresponsive',
+            reason: 'Runner control endpoint is unavailable.',
+        });
+    return new Promise((resolve) => {
+        const socket = createConnection({ host: '127.0.0.1', port: record.port });
+        let settled = false;
+        let buffered = Buffer.alloc(0);
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(deadline);
+            socket.destroy();
+            resolve(result);
+        };
+        const unresponsive = (reason) => finish({ kind: 'unresponsive', reason });
+        const deadline = setTimeout(() => unresponsive('Runner control response timed out.'), timeoutMs);
+        socket.once('error', () => unresponsive('Runner control connection failed.'));
+        socket.once('close', () => unresponsive('Runner control closed without a valid response.'));
+        socket.once('connect', () => {
+            socket.write(`${JSON.stringify({ version: 1, instanceId: record.instanceId, token: record.token, action })}\n`);
+        });
+        socket.on('data', (chunk) => {
+            if (buffered.length + chunk.length > MAX_MESSAGE_BYTES) {
+                unresponsive('Runner control response exceeded its size limit.');
+                return;
+            }
+            buffered = Buffer.concat([buffered, chunk]);
+            const newline = buffered.indexOf(10);
+            if (newline < 0)
+                return;
+            try {
+                const response = JSON.parse(buffered.subarray(0, newline).toString('utf8'));
+                if (newline !== buffered.length - 1 ||
+                    !object(response) ||
+                    !exactKeys(response, [
+                        'version',
+                        'instanceId',
+                        'pid',
+                        'phase',
+                        'stepsStarted',
+                        'stopRequested',
+                    ]) ||
+                    response.version !== 1 ||
+                    response.instanceId !== record.instanceId ||
+                    response.pid !== record.pid ||
+                    !validStatus(response) ||
+                    typeof response.stopRequested !== 'boolean' ||
+                    (response.stopRequested && response.phase !== 'stopping') ||
+                    (action === 'stop' && !response.stopRequested))
+                    throw new Error('Invalid response.');
+                finish({
+                    kind: 'responsive',
+                    instanceId: record.instanceId,
+                    pid: response.pid,
+                    phase: response.phase,
+                    stepsStarted: response.stepsStarted,
+                    stopRequested: response.stopRequested,
+                });
+            }
+            catch {
+                unresponsive('Runner control returned an invalid response.');
+            }
+        });
+    });
+}
+//# sourceMappingURL=runner-control.js.map

package/dist/integrations/resident/runner-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-control.js","sourceRoot":"","sources":["../../../src/integrations/resident/runner-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAe,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAEtE,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAC/B,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAU,CAAA;AA6CnE,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,KAAa;IACvD,OAAO,CACN,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAC5F,CAAA;AACF,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B;IAClD,OAAO,CACN,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/B,KAAK,CAAC,GAAG,GAAG,CAAC;QACb,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC9B,MAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QACnD,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QACxC,KAAK,CAAC,YAAY,IAAI,CAAC,CACvB,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAmC;IAEnC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IACzF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,IAAI,aAAa,GAAG,KAAK,CAAA;IACzB,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,YAAuC,CAAA;IAC3C,MAAM,WAAW,GAAG,GAAS,EAAE;QAC9B,IAAI,aAAa;YAAE,OAAM;QACzB,aAAa,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,EAAE,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAA;YACjB,MAAM,KAAK,CAAA;QACZ,CAAC;IACF,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5B,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAM;QACP,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACnB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAClD,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAA;QACvE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;QAClD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACnE,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACP,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACpC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAM;YACvB,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,OAAO,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACP,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACnF,IACC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChB,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACjE,OAAO,CAAC,OAAO,KAAK,CAAC;oBACrB,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;oBACzC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;oBACjC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,EACzD,CAAC;oBACF,MAAM,CAAC,OAAO,EAAE,CAAA;oBAChB,OAAM;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACxC,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;oBACrF,MAAM,CAAC,OAAO,EAAE,CAAA;oBAChB,OAAM;gBACP,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;oBAAE,WAAW,EAAE,CAAA;gBAC5C,IAAI,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA;gBACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;gBACnF,MAAM,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,SAAS,CAAC;oBACjB,OAAO,EAAE,CAAC;oBACV,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;oBAC/C,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,aAAa;iBACb,CAAC,IAAI,CACN,CAAA;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,oEAAoE;gBACpE,MAAM,CAAC,OAAO,EAAE,CAAA;YACjB,CAAC;QACF,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,GAAkB,EAAE;QACjC,IAAI,YAAY;YAAE,OAAO,YAAY,CAAA;QACrC,OAAO,GAAG,IAAI,CAAA;QACd,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtB,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,wBAAwB;oBAC9E,MAAM,CAAC,KAAK,CAAC,CAAA;;oBACT,OAAO,EAAE,CAAA;YACf,CAAC,CAAC,CAAA;YACF,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC/C,CAAC,CAAC,CAAA;QACF,OAAO,YAAY,CAAA;IACpB,CAAC,CAAA;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,MAAM,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtC,OAAO,EAAE,CAAA;QACV,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IACF,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,IAAI,CAAC;YACJ,WAAW,EAAE,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACR,yCAAyC;QAC1C,CAAC;QACD,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,EAAE,CAAA;QACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAC1B,MAA2B,EAC3B,MAA2B,EAC3B,UAA2C,EAAE;IAE7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,MAAM;QAC1E,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAC/F,IACC,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC;QAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;QACtB,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM;QAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QACjC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC;QACrB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC;QAE1C,OAAO,OAAO,CAAC,OAAO,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,yCAAyC;SACjD,CAAC,CAAA;IACH,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAc,EAAE,CAAC,CAAA;QACnF,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAQ,EAAE;YACpD,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,QAAQ,CAAC,CAAA;YACtB,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAO,CAAC,MAAM,CAAC,CAAA;QAChB,CAAC,CAAA;QACD,MAAM,YAAY,GAAG,CAAC,MAAc,EAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAA;QACvF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,oCAAoC,CAAC,EAAE,SAAS,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,mCAAmC,CAAC,CAAC,CAAA;QAC7E,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,iDAAiD,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,MAAM,CAAC,KAAK,CACX,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,CACjG,CAAA;QACF,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACxD,YAAY,CAAC,kDAAkD,CAAC,CAAA;gBAChE,OAAM;YACP,CAAC;YACD,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACpC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAM;YACvB,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACpF,IACC,OAAO,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC/B,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACjB,CAAC,SAAS,CAAC,QAAQ,EAAE;wBACpB,SAAS;wBACT,YAAY;wBACZ,KAAK;wBACL,OAAO;wBACP,cAAc;wBACd,eAAe;qBACf,CAAC;oBACF,QAAQ,CAAC,OAAO,KAAK,CAAC;oBACtB,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;oBACzC,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;oBAC3B,CAAC,WAAW,CAAC,QAAQ,CAAC;oBACtB,OAAO,QAAQ,CAAC,aAAa,KAAK,SAAS;oBAC3C,CAAC,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC;oBACzD,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;oBAE9C,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;gBACrC,MAAM,CAAC;oBACN,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,GAAG,EAAE,QAAQ,CAAC,GAAa;oBAC3B,KAAK,EAAE,QAAQ,CAAC,KAA2B;oBAC3C,YAAY,EAAE,QAAQ,CAAC,YAAsB;oBAC7C,aAAa,EAAE,QAAQ,CAAC,aAAa;iBACrC,CAAC,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,YAAY,CAAC,8CAA8C,CAAC,CAAA;YAC7D,CAAC;QACF,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC"}

package/dist/integrations/resident/runner-launch.d.ts

@@ -0,0 +1,52 @@
+import type { RunFlags } from '../../commands/run-flags.js';
+import type { CommandContext } from '../../commands/types.js';
+import { type RunnerRecord } from './runner-store.js';
+import type { CliResident } from './storage.js';
+import type { ResidentVerificationSpec } from './verification.js';
+export interface ResidentWorkerLaunch {
+    readonly version: 1;
+    readonly cwd: string;
+    readonly agentKey: string;
+    readonly instanceId: string;
+    readonly config: CommandContext['config'];
+    readonly flags: RunFlags;
+    readonly toolLoading?: 'eager' | 'deferred';
+    readonly contextProfile?: 'resident' | 'interactive';
+    readonly learningDisclosure?: 'eager' | 'on-demand';
+    readonly verification?: ResidentVerificationSpec;
+    readonly maxIdleMs: number;
+}
+/** Launch the same installation with no terminal streams or on-disk credentials/config. */
+export declare function startResidentRunner(options: {
+    readonly resident: CliResident;
+    readonly ctx: CommandContext;
+    readonly flags: RunFlags;
+    readonly toolLoading?: 'eager' | 'deferred';
+    readonly contextProfile?: 'resident' | 'interactive';
+    readonly learningDisclosure?: 'eager' | 'on-demand';
+    readonly verification?: ResidentVerificationSpec;
+    readonly maxSteps: number;
+    readonly maxIdleMs: number;
+}): Promise<Omit<RunnerRecord, "token">>;
+export declare function residentRunnerStatus(resident: CliResident): Promise<{
+    owner: null;
+    live: null;
+} | {
+    owner: Omit<RunnerRecord, "token">;
+    live: import("./runner-control.js").RunnerControlResult | null;
+}>;
+/** Caller durably closes admission first. No signals are sent to recorded PIDs. */
+export declare function stopResidentRunner(resident: CliResident, options: {
+    readonly owner: RunnerRecord | null;
+    readonly waitMs?: number;
+}): Promise<{
+    status: "absent";
+    owner: null;
+} | {
+    status: "drained";
+    owner: Omit<RunnerRecord, "token">;
+} | {
+    status: "unconfirmed";
+    owner: Omit<RunnerRecord, "token"> | null;
+}>;
+//# sourceMappingURL=runner-launch.d.ts.map

package/dist/integrations/resident/runner-launch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-launch.d.ts","sourceRoot":"","sources":["../../../src/integrations/resident/runner-launch.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAE7D,OAAO,EACN,KAAK,YAAY,EAMjB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAEjE,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IACpD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,WAAW,CAAA;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAA;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,2FAA2F;AAC3F,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IAClD,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,UAAU,CAAA;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,GAAG,aAAa,CAAA;IACpD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,WAAW,CAAA;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAA;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B,wCA+GA;AAED,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,WAAW;;;;;;GAO/D;AAED,mFAAmF;AACnF,wBAAsB,kBAAkB,CACvC,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;GAkB1E"}

package/dist/integrations/resident/runner-launch.js

@@ -0,0 +1,142 @@
+import { fork } from 'node:child_process';
+import { createRequire } from 'node:module';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { queryRunner } from './runner-control.js';
+import { finishRunner, publicRunner, readRunner, readRunnerInstance, reserveRunner, } from './runner-store.js';
+/** Launch the same installation with no terminal streams or on-disk credentials/config. */
+export async function startResidentRunner(options) {
+    const { resident } = options;
+    const existing = readRunner(resident);
+    if (existing && (existing.phase === 'reserved' || existing.phase === 'running'))
+        throw new Error(`Runner ${existing.instanceId} already owns this resident. Use resident status or stop; a second start cannot reset its limit.`);
+    const agenda = await resident.agenda.read();
+    if (!agenda || agenda.paused || agenda.pursuits.some((p) => p.state.phase === 'running'))
+        throw new Error('Starting requires open admission and no unresolved pursuit claims.');
+    const owner = reserveRunner(resident, {
+        mode: 'background',
+        maxSteps: options.maxSteps,
+        pauseGeneration: agenda.pauseGeneration ?? 0,
+    });
+    const source = import.meta.url.endsWith('.ts');
+    const worker = new URL(`./runner-worker.${source ? 'ts' : 'js'}`, import.meta.url);
+    const launch = {
+        version: 1,
+        cwd: resident.cwd,
+        agentKey: resident.agentKey,
+        instanceId: owner.instanceId,
+        config: options.ctx.config,
+        flags: options.flags,
+        toolLoading: options.toolLoading,
+        contextProfile: options.contextProfile,
+        learningDisclosure: options.learningDisclosure,
+        verification: options.verification,
+        maxIdleMs: options.maxIdleMs,
+    };
+    let child;
+    try {
+        child = fork(worker, [], {
+            cwd: resident.cwd,
+            env: { ...process.env, NAMZU_HOME: resident.root },
+            detached: true,
+            stdio: ['ignore', 'ignore', 'ignore', 'ipc'],
+            execArgv: source ? ['--import', createRequire(import.meta.url).resolve('tsx')] : [],
+        });
+    }
+    catch (error) {
+        finishRunner(resident, owner, 'launch_failed');
+        throw error;
+    }
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.removeListener('message', message);
+            child.removeListener('exit', exited);
+            // Keep the error listener: asynchronous IPC teardown must not crash the launcher.
+            if (child.connected)
+                child.disconnect();
+            child.unref();
+            if (error)
+                reject(error);
+            else {
+                try {
+                    const current = readRunnerInstance(resident, owner.instanceId);
+                    if (!current)
+                        throw new Error('Runner startup receipt disappeared.');
+                    resolve(publicRunner(current));
+                }
+                catch (readError) {
+                    reject(readError);
+                }
+            }
+        };
+        const message = (raw) => {
+            if (!raw || typeof raw !== 'object')
+                return;
+            const value = raw;
+            if (value.instanceId !== owner.instanceId)
+                return;
+            if (value.kind === 'error') {
+                finish(new Error(typeof value.message === 'string' ? value.message : 'Runner startup failed.'));
+            }
+            else if (value.kind === 'ready') {
+                // The child will not admit a model step before this explicit handoff.
+                child.send({ kind: 'go', instanceId: owner.instanceId }, (error) => finish(error ?? undefined));
+            }
+        };
+        const exited = () => finish(new Error('Resident worker exited before startup was acknowledged. Inspect resident status.'));
+        const timer = setTimeout(() => finish(new Error('Resident startup was not acknowledged. Ownership is retained; inspect resident status before retrying.')), 15_000);
+        child.on('message', message);
+        child.once('exit', exited);
+        child.on('error', (error) => {
+            if (!child.pid) {
+                try {
+                    finishRunner(resident, owner, 'launch_failed');
+                }
+                catch {
+                    /* Keep the exact-owner conflict visible in status. */
+                }
+            }
+            finish(error);
+        });
+        child.send(launch, (error) => {
+            if (error)
+                finish(error);
+        });
+    });
+}
+export async function residentRunnerStatus(resident) {
+    const record = readRunner(resident);
+    if (!record)
+        return { owner: null, live: null };
+    return {
+        owner: publicRunner(record),
+        live: record.phase === 'running' ? await queryRunner(record, 'status') : null,
+    };
+}
+/** Caller durably closes admission first. No signals are sent to recorded PIDs. */
+export async function stopResidentRunner(resident, options) {
+    const record = options.owner;
+    const waitMs = options.waitMs ?? 5_000;
+    if (!record)
+        return { status: 'absent', owner: null };
+    if (record.phase === 'stopped')
+        return { status: 'drained', owner: publicRunner(record) };
+    if (record.phase === 'released')
+        return { status: 'unconfirmed', owner: publicRunner(record) };
+    if (record.phase === 'running')
+        await queryRunner(record, 'stop');
+    const deadline = Date.now() + waitMs;
+    while (true) {
+        const current = readRunnerInstance(resident, record.instanceId);
+        if (current?.phase === 'stopped')
+            return { status: 'drained', owner: publicRunner(current) };
+        if (!current || current.phase === 'released' || Date.now() >= deadline)
+            return { status: 'unconfirmed', owner: current ? publicRunner(current) : null };
+        await sleep(Math.min(50, Math.max(1, deadline - Date.now())));
+    }
+}
+//# sourceMappingURL=runner-launch.js.map

package/dist/integrations/resident/runner-launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-launch.js","sourceRoot":"","sources":["../../../src/integrations/resident/runner-launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAG1D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAEN,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,aAAa,GACb,MAAM,mBAAmB,CAAA;AAkB1B,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAUzC;IACA,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC9E,MAAM,IAAI,KAAK,CACd,UAAU,QAAQ,CAAC,UAAU,kGAAkG,CAC/H,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,EAAE;QACrC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC;KAC5C,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClF,MAAM,MAAM,GAAyB;QACpC,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAA;IACD,IAAI,KAA8B,CAAA;IAClC,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE;YACxB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;YAClD,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC;YAC5C,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;SACnF,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,CAAA;QAC9C,MAAM,KAAK,CAAA;IACZ,CAAC;IACD,OAAO,MAAM,IAAI,OAAO,CAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7E,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YACxC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACpC,kFAAkF;YAClF,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,UAAU,EAAE,CAAA;YACvC,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;iBACnB,CAAC;gBACL,IAAI,CAAC;oBACJ,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;oBAC9D,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;oBACpE,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC/B,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACpB,MAAM,CAAC,SAAS,CAAC,CAAA;gBAClB,CAAC;YACF,CAAC;QACF,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;YAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAM;YAC3C,MAAM,KAAK,GAAG,GAA8B,CAAA;YAC5C,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAM;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,MAAM,CACL,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CACvF,CAAA;YACF,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnC,sEAAsE;gBACtE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAClE,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAC1B,CAAA;YACF,CAAC;QACF,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,GAAG,EAAE,CACnB,MAAM,CACL,IAAI,KAAK,CACR,kFAAkF,CAClF,CACD,CAAA;QACF,MAAM,KAAK,GAAG,UAAU,CACvB,GAAG,EAAE,CACJ,MAAM,CACL,IAAI,KAAK,CACR,wGAAwG,CACxG,CACD,EACF,MAAM,CACN,CAAA;QACD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,CAAA;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACR,sDAAsD;gBACvD,CAAC;YACF,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,CAAA;QACd,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAqB;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/C,OAAO;QACN,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KAC7E,CAAA;AACF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAAqB,EACrB,OAA0E;IAE1E,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAA;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAA;IAClG,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAC9B,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAA;IACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAA;IACpC,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QAC/D,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;YAC/B,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;QACpE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YACrE,OAAO,EAAE,MAAM,EAAE,aAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzF,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;AACF,CAAC"}

package/dist/integrations/resident/runner-store.d.ts

@@ -0,0 +1,44 @@
+import { type ProjectId, type TenantId } from '@namzu/sdk';
+import type { CliResident } from './storage.js';
+export interface RunnerRecord {
+    readonly version: 1;
+    readonly revision: number;
+    readonly instanceId: string;
+    readonly tenantId: TenantId;
+    readonly projectId: ProjectId;
+    readonly agentKey: string;
+    readonly cwd: string;
+    readonly mode: 'foreground' | 'background';
+    readonly phase: 'reserved' | 'running' | 'stopped' | 'released';
+    readonly reservedAt: number;
+    readonly maxSteps: number;
+    readonly pauseGeneration: number;
+    readonly pid: number | null;
+    readonly port: number | null;
+    /** Private authentication material; never include this in status output. */
+    readonly token: string;
+    readonly endedAt: number | null;
+    readonly outcome: string | null;
+}
+export interface ReserveRunnerOptions {
+    readonly mode: RunnerRecord['mode'];
+    readonly maxSteps: number;
+    readonly pauseGeneration: number;
+}
+/** An absent runner is a read-only result, never an instruction to initialize it. */
+export declare function readRunner(resident: CliResident): RunnerRecord | null;
+/** The original runner's final evidence remains visible after a successor starts. */
+export declare function readRunnerInstance(resident: CliResident, instanceId: string): RunnerRecord | null;
+/** Reserve one explicitly authorized invocation; an occupied owner is never stolen. */
+export declare function reserveRunner(resident: CliResident, options: ReserveRunnerOptions): RunnerRecord;
+export declare function attachRunning(resident: CliResident, expected: RunnerRecord, process: {
+    readonly pid: number;
+    readonly port: number | null;
+}): RunnerRecord;
+/** Publish only after the executor and its controls have drained. */
+export declare function finishRunner(resident: CliResident, expected: RunnerRecord, outcome: string): RunnerRecord;
+/** Explicit operator recovery of an exact owner; this is never proof of drainage. */
+export declare function releaseRunner(resident: CliResident, expected: RunnerRecord): RunnerRecord;
+/** Status reports retain ownership evidence without disclosing the control nonce. */
+export declare function publicRunner(record: RunnerRecord): Omit<RunnerRecord, 'token'>;
+//# sourceMappingURL=runner-store.d.ts.map

package/dist/integrations/resident/runner-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-store.d.ts","sourceRoot":"","sources":["../../../src/integrations/resident/runner-store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,SAAS,EAAyB,KAAK,QAAQ,EAAc,MAAM,YAAY,CAAA;AAI7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/C,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAA;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAChC;AAmKD,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY,GAAG,IAAI,CAGrE;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAOjG;AAuBD,uFAAuF;AACvF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,GAAG,YAAY,CA+BhG;AAED,wBAAgB,aAAa,CAC5B,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC7D,YAAY,CASd;AAED,qEAAqE;AACrE,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,MAAM,GACb,YAAY,CAWd;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,GAAG,YAAY,CAWzF;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAmB9E"}