@openrig/cli 0.6.11 → 0.6.12

package/daemon/context-packs/skills/pm/plan-review/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "plan-review"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Multi-perspective review of a feature plan or requirements doc before development begins. Evaluates from strategy, design/UX, and engineering angles to catch gaps early."
 files:

package/daemon/context-packs/skills/pm/requirements-writer/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "requirements-writer"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when converting PM intake into a slice SPEC.md with observable acceptance outcomes, explicit scope, and advisory sibling build dependencies."
 files:

package/daemon/context-packs/skills/pm/ui-mockup/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "ui-mockup"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Create UI mockups at three fidelity levels — ASCII wireframes for quick iteration, standalone HTML mockups for delivery with requirements, and live prototypes for interaction testing."
 files:

package/daemon/context-packs/skills/pods/development-team/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "development-team"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when a development pod begins or hands off implementation, QA, or design work."
 files:

package/daemon/context-packs/skills/pods/orchestration-team/SKILL.md

@@ -94,7 +94,7 @@ When you dispatch work, give the receiving agent enough structure to act without
 - what proof or verification you expect back
 - any independently held component explicitly selected, and the boundary that triggers it
 
-**(0.5.0) Assign work *with* its context attached.** Rather than make the assignee grep for the as-built, compose a context pack and ride it on the handoff: `rig context compose --out packs/<brief> --from <files>`, then `rig queue create --destination <seat> --body-context packs/<brief> --summary "…"`. The pack's resolved content is snapshotted into the qitem (plus its ref for provenance), so the context survives compaction and is auditable. See `openrig-user` → "Context packs and paced delivery." (`rig context` composes; the queue delivers — the noun never sends.)
+**(0.5.0) Assign work *with* its context attached.** Rather than make the assignee grep for the as-built, compose a context pack and ride it on the handoff: `rig context compose --out packs/<brief> --from <files>`, then `rig queue create --destination <seat> --body-context packs/<brief> --summary "…" --tags "project:<id>,mission:<id>,slice:<id>"`. The pack's resolved content is snapshotted into the qitem (plus its ref for provenance), so the context survives compaction and is auditable. See `openrig-user` → "Context packs and paced delivery." (`rig context` composes; the queue delivers — the noun never sends.)
 
 If design clarity is missing, route to design first.
 If QA gating is required, say so explicitly in the assignment.

package/daemon/context-packs/skills/pods/orchestration-team/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "orchestration-team"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when coordinating assignments, selected review boundaries, or blocked work across a rig."
 files:

package/daemon/context-packs/skills/pods/oversight-team/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "oversight-team"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when you are a seat on the oversight pod (a standing monitor-mode rig that keeps OTHER rigs healthy), configuring or running the drift detectors, or choosing whether to intervene vs escalate. Covers the pull-not-poll posture, the v0 detectors (premature-park, process-drift, off-task, token-burn), the intervention ladder (orchestrator-ping -> refocus -> human escalation), and the cheap+deep model economics. NOT for orchestrating your OWN rig (orchestration-team) and NOT the intervention primi"
 files:

package/daemon/context-packs/skills/pods/review-team/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "review-team"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when assigned a review or when an authored review boundary is reached."
 files:

package/daemon/context-packs/skills/process/agent-browser/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "agent-browser"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to \"open a website\", \"fill out a form\", \"click a button\", \"take a screenshot\", \"scrape data from a page\", \"test this web app\", \"login to a site\", \"automate browser actions\", or any task requiring programmatic web interaction."
 files:

package/daemon/context-packs/skills/process/context-engineering/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "context-engineering"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when designing, reviewing, or debugging how an agent's context window gets filled, pruned, or shared — choosing what loads at boot versus on demand, sizing an install or an always-loaded file, fixing an agent that drifts, repeats itself, or forgets constraints mid-task, planning compaction or summarization, deciding single-agent versus subagents, engineering handoffs between agents, or picking a tool loadout. NOT for rewording a prompt's tone, choosing which model to pin, or debugging busine"
 files:

package/daemon/context-packs/skills/process/dogfood/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "dogfood"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Systematically explore and test a web application to find bugs, UX issues, and other problems. Use when asked to \"dogfood\", \"QA\", \"exploratory test\", \"find issues\", \"bug hunt\", \"test this app/site/platform\", or review the quality of a web application. Produces a structured report with full reproduction evidence -- step-by-step screenshots, repro videos, and detailed repro steps for every issue -- so findings can be handed directly to the responsible teams."
 files:

package/daemon/context-packs/skills/process/frontend-design/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "frontend-design"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications (examples include websites, landing pages, dashboards, React components, HTML/CSS layouts, or when styling/beautifying any web UI). Generates creative, polished code and UI design that avoids generic AI aesthetics."
 files:

package/daemon/context-packs/skills/process/systematic-debugging/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "systematic-debugging"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes"
 files:

package/daemon/context-packs/skills/process/test-driven-development/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "test-driven-development"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when implementing any feature or bugfix, before writing implementation code"
 files:

package/daemon/context-packs/skills/process/verification-before-completion/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "verification-before-completion"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions always"
 files:

package/daemon/context-packs/skills/queue-handoff/SKILL.md

@@ -114,6 +114,14 @@ reaching for `--notify`, stop — that flag does not exist on the
 shipped 0.3.1 CLI; you may be following a stale instruction that
 inverted the default-nudge polarity.
 
+## Every queue row
+
+- **`--summary "<what it is and why this seat>"`** on every `create`, `handoff` and `handoff-and-complete`: one or two plain sentences. It is the row's subject in RECENT, the story and the needs-you view, and a handoff does not inherit it from the source row.
+- **Scope tags `project:<id>`, `mission:<id>`, `slice:<id>`** on project work, set when you create the row (`--tags`; `create` also takes `--mission` and `--slice`). Tags can't be edited afterwards. A handoff keeps the source row's tags unless you pass `--tags` or `--gate`, either of which replaces them; repeat the scope tags in `--tags` when you use `--gate`.
+- **Pass work on with `handoff-and-complete`.** It closes your row as done and records the next row as its successor in one step. A `create` followed by `update --state done --closure-reason handed_off_to` records no successor, and the stuck sweep raises a recovery item for it.
+- **Close what you hold.** A row you claimed ends in a handoff or an `update --state done --closure-reason …`; `rig queue overdue` lists claimed rows past their deadline.
+- **Brief for the model that will read it.** Before handing a peer open-ended work, check which model it runs: `delegating-work`, "Check what kind of agent you're handing it to".
+
 ## Queue-body hygiene (token + parse safety)
 
 The qitem body is durable DATA the daemon stores and replays on every

package/daemon/context-packs/skills/queue-handoff/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "queue-handoff"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when ending a turn, finishing a slice, blocked on another agent's work, or escalating to a human — durable work handoff via queue items so the system keeps moving across compactions, missed messages, and interruptions. Covers the hot-potato terminal-turn-rule (active work ends by passing the ball, not by going idle), default-nudge semantics, and when `--no-nudge` is appropriate for intentional cold park or human gate."
 files:

package/daemon/context-packs/skills/refocusing/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "refocusing"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when a long-running agent may have lost the product outcome, when context was compacted, when work has crossed a major boundary, or when a fresh path-based trace is needed before the next consequential action. Not for fresh-session orientation, waking an idle seat, or checkpoints."
 files:

package/daemon/context-packs/skills/retiring-and-inheriting-a-seat/SKILL.md

@@ -137,8 +137,11 @@ generation's session token → resume it for **one question**, then let it sleep
 - Claude: `claude -p --resume <session>`
 - Codex: `codex exec` (resume the rollout)
 
-Use `rig ask <rig> "<q>" --wake <seat[@gen]|token>` for an explicit bounded
-consultation (introduced in CLI 0.5.1). Check `rig ask --help` for `--runtime`
+Use `rig ask <rig> "<q>" --wake <target>` for an explicit bounded consultation
+(introduced in CLI 0.5.1). Wake seat targets must include the rig: `member@rig` or
+`member@rig@N` (1 = newest tenure). Values without `@` go unchanged to the runtime
+as a session ID or title; a bare member name is not resolved within `<rig>`.
+Check `rig ask --help` for `--runtime`
 and `--wake-timeout`. The wrapper uses a runtime resume; its presence is not
 proof that a particular retained history is available. For a Claude history,
 `claude -p --resume <full-uuid>` is the runtime-level fallback when supported.

package/daemon/context-packs/skills/retiring-and-inheriting-a-seat/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "retiring-and-inheriting-a-seat"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when you are a sitting agent near your context threshold (~85%) and a PLANNED seat transition is due — retire deliberately and hand your seat to a fresh successor primed from a packet, rather than let compaction degrade you. Covers the handover packet, the append-only lineage ledger (one row per tenure), physical-seat continuity, the do-not-over-inherit framing, the optional warm-handoff window, and wake-v0 (consulting a retired predecessor). NOT for unplanned compaction/crash recovery (sess"
 files:

package/daemon/context-packs/skills/seat-continuity-and-handover/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "seat-continuity-and-handover"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when replacing a seat's occupant (rebuild/handover/swap), reasoning about stable-seat-identity vs fluid-occupant-identity, choosing an old-occupant disposition (retire/advise/shadow), or recording provenance for an occupant change. Two independent outcomes (continuityOutcome + seatBindingOutcome) and the 5 failure modes that prevent silent dishonesty."
 files:

package/daemon/context-packs/skills/session-compaction-and-restore/SKILL.md

@@ -79,6 +79,25 @@ OpenRig activity **hooks** and `[features]`, never session or auth state. So the
 rule is "never edits native session/auth/transcript files," NOT "never touches any
 provider-owned file."
 
+## Claude's own idle compaction while managed compaction is on
+
+While `policies.claude_compaction.enabled` is true with a valid threshold (the enforcer treats any other
+threshold as off), every Claude session OpenRig launches (fresh, fork, resume and restore; ordinary, kernel,
+team-default and full-bypass seats) carries `idleCompaction: false` in its one `--settings` value. Claude Code then
+doesn't compact an idle session on its own, so managed seats compact through OpenRig's sequence (restore map, then
+`/compact` at the threshold).
+
+- **Version boundary:** Claude Code supports the key from 2.1.290. Earlier versions ignore it, so idle compaction
+  stays possible there.
+- **Precedence:** it overrides a lower-precedence `idleCompaction: true` in user or project settings for those
+  launches. Claude's managed settings still win.
+- **Native threshold auto-compaction is untouched** (`autoCompactEnabled`, `DISABLE_AUTO_COMPACT`). Where the enforcer
+  has no fresh status-line usage sample for a seat, it doesn't compact that seat, and native auto-compaction is then
+  the only compaction. Nothing guarantees a native fallback.
+- **It applies at the next launch.** Turning the policy off leaves idle compaction off in a running session until
+  that session's next launch. Turning it on doesn't reach sessions already running.
+- **Policy off, or a non-Claude runtime:** the launch command is unchanged.
+
 ## Current CLI surface (operator / kernel seats; verified vs main d37a08ad)
 
 Managed compaction/restore is driven by five shipped verbs — pick per intent, and

package/daemon/context-packs/skills/session-compaction-and-restore/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "session-compaction-and-restore"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when reasoning about what survives compaction/context-loss/restart/seat-refresh, designing a high-fidelity restore packet, or distinguishing native runtime resume vs fork vs artifact-backed mental-model rebuild. Covers the 4 failure modes that prevent honest restore (compacted seat drops hot potato; restore packet preserves details but loses product intent; runtime resume mistaken for handover or fork; rebuilt seat starts with stale instructions)."
 files:

package/daemon/context-packs/skills/software-for-agents/manifest.yaml

@@ -1,7 +1,7 @@
 # GENERATED by scripts/generate-context-packs.mjs — DO NOT EDIT.
 # Package-time projection of a canonical skill; regenerated every build.
 name: "software-for-agents"
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: "skills"
 purpose: "Use when older OpenRig instructions name software-for-agents or describe agent-in-the-middle or studio software under the former skill name."
 files:

package/daemon/context-packs/world-example/manifest.yaml

@@ -1,5 +1,5 @@
 name: world-example
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: world
 purpose: "A fill-in template showing the anatomy of an OpenRig world pack."
 files:

package/daemon/context-packs/world-public/manifest.yaml

@@ -1,5 +1,5 @@
 name: world-public
-version: "0.6.11"
+version: "0.6.12"
 taxonomy: world
 purpose: "A portable operating-world primer that derives volatile facts and teaches agents to author their own world."
 files:

package/daemon/dist/adapters/bounded-probe-exec.d.ts

@@ -0,0 +1,45 @@
+import { stopGroup } from "../domain/codex-network-default.js";
+import type { ExecFn } from "./tmux.js";
+/** How long a runtime's `--version` or `--help` probe may take before it is ended and recorded as an error.
+ *  Generous on purpose: a longer bound only costs time when a binary really hangs, and loaded hosts are unmeasured. */
+export declare const RUNTIME_PROBE_TIMEOUT_MS = 30000;
+/** A probe that didn't answer within its bound; its process group has been ended. */
+export declare class ProbeTimeoutError extends Error {
+    readonly command: string;
+    readonly timeoutMs: number;
+    /** The code Node gives a command that timed out, so failure classifiers read it like any other timeout. */
+    readonly code = "ETIMEDOUT";
+    constructor(command: string, timeoutMs: number);
+}
+/** End every probe still running: its whole process group, TERM then KILL, as the timeout path does. Probes that
+ *  have finished are not in the set, so a normal probe is untouched. */
+export declare function endRunningProbeGroups(graceMs?: number): Promise<void>;
+/** The daemon is stopping: no probe starts from now on, and the ones running are ended. */
+export declare function stopRuntimeProbes(graceMs?: number): Promise<void>;
+/** While the daemon is still starting (the Codex probe runs before it listens, and the shutdown handlers aren't
+ *  installed yet), end the probes' groups on SIGINT/SIGTERM and then die of the signal as before. Returns the
+ *  disposer to call once the real shutdown handlers take over. */
+export declare function endProbeGroupsOnStartupSignal(): () => void;
+/** A probe the daemon's stop ended or refused: it has no result, and says nothing about the runtime. */
+export declare class ProbeStoppedError extends Error {
+    readonly command: string;
+    readonly code = "ESTOPPED";
+    constructor(command: string, why: "ended" | "refused");
+}
+/**
+ * An ExecFn for runtime version and help probes, which must never hold up their caller (daemon startup awaits
+ * one before it listens). Unlike execCommand: stdin is closed (a probe never needs input), the command runs in
+ * its own process group, and after `timeoutMs` that whole group is ended (TERM, then KILL, then a bounded wait
+ * for the reap; the Codex readers' stopGroup) and the promise rejects with ProbeTimeoutError. Where a group
+ * can't be signalled (Windows), the probe process itself is then killed; its own descendants may survive there.
+ * Otherwise it answers when the probe exits: what it wrote (after a short drain) on exit 0, or a rejection like
+ * execCommand's on any other exit. Only if that 200 ms drain times out (the output pipes are still held open, by
+ * a descendant) is the group ended then, so that descendant can't turn a finished probe into a timeout; a healthy
+ * probe whose pipes end within the drain never reaches stopGroup. A descendant that closed its stdio is left
+ * running, as execCommand leaves it.
+ */
+export declare function boundedProbeExec(timeoutMs?: number, graceMs?: number, deps?: {
+    stopGroup?: typeof stopGroup;
+    cwd?: (cmd: string) => string | undefined;
+}): ExecFn;
+//# sourceMappingURL=bounded-probe-exec.d.ts.map

package/daemon/dist/adapters/bounded-probe-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-probe-exec.d.ts","sourceRoot":"","sources":["../../src/adapters/bounded-probe-exec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC;uHACuH;AACvH,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAM/C,qFAAqF;AACrF,qBAAa,iBAAkB,SAAQ,KAAK;IAG9B,QAAQ,CAAC,OAAO,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAFhE,2GAA2G;IAC3G,QAAQ,CAAC,IAAI,eAAe;gBACP,OAAO,EAAE,MAAM,EAAW,SAAS,EAAE,MAAM;CAIjE;AAoBD;wEACwE;AACxE,wBAAsB,qBAAqB,CAAC,OAAO,SAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED,2FAA2F;AAC3F,wBAAsB,iBAAiB,CAAC,OAAO,SAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/E;AAED;;kEAEkE;AAClE,wBAAgB,6BAA6B,IAAI,MAAM,IAAI,CAY1D;AAED,wGAAwG;AACxG,qBAAa,iBAAkB,SAAQ,KAAK;IAE9B,QAAQ,CAAC,OAAO,EAAE,MAAM;IADpC,QAAQ,CAAC,IAAI,cAAc;gBACN,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS;CAI/D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,SAA2B,EACpC,OAAO,SAAiB,EACxB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAAO,GACrF,MAAM,CAiGR"}

package/daemon/dist/adapters/bounded-probe-exec.js

@@ -0,0 +1,204 @@
+import { spawn } from "node:child_process";
+import { stopGroup } from "../domain/codex-network-default.js";
+/** How long a runtime's `--version` or `--help` probe may take before it is ended and recorded as an error.
+ *  Generous on purpose: a longer bound only costs time when a binary really hangs, and loaded hosts are unmeasured. */
+export const RUNTIME_PROBE_TIMEOUT_MS = 30_000;
+const PROBE_GRACE_MS = 1_000;
+const MAX_OUTPUT_BYTES = 1024 * 1024;
+/** After the probe exits, how long to wait for the rest of its output before answering. */
+const DRAIN_MS = 200;
+/** A probe that didn't answer within its bound; its process group has been ended. */
+export class ProbeTimeoutError extends Error {
+    command;
+    timeoutMs;
+    /** The code Node gives a command that timed out, so failure classifiers read it like any other timeout. */
+    code = "ETIMEDOUT";
+    constructor(command, timeoutMs) {
+        super(`${command} did not answer within ${Math.round(timeoutMs / 1000)} s; the probe was ended`);
+        this.command = command;
+        this.timeoutMs = timeoutMs;
+        this.name = "ProbeTimeoutError";
+    }
+}
+/** Probes running now, so the daemon can end their process groups when it stops: a probe's group is detached,
+ *  and nothing else ends it when the daemon goes away first. */
+const runningProbes = new Set();
+/** Probes `endRunningProbeGroups` ended, so their rejection reads as stopped, not as a failed runtime. */
+const endedByStop = new WeakSet();
+let exitHookInstalled = false;
+/** Set once the daemon is stopping: an ended probe's caller may fall back to another probe (`--version` to
+ *  `--help`), and that one must not start. */
+let stopping = false;
+/** Last resort for a process that is already exiting: no waiting, so no TERM first. */
+function killRunningProbeGroupsNow() {
+    for (const child of runningProbes) {
+        if (child.pid === undefined)
+            continue;
+        try {
+            process.kill(-child.pid, "SIGKILL");
+        }
+        catch { /* gone, or no process groups here (Windows) */ }
+    }
+}
+/** End every probe still running: its whole process group, TERM then KILL, as the timeout path does. Probes that
+ *  have finished are not in the set, so a normal probe is untouched. */
+export async function endRunningProbeGroups(graceMs = PROBE_GRACE_MS) {
+    await Promise.all([...runningProbes].map((child) => { endedByStop.add(child); return stopGroup(child, graceMs); }));
+}
+/** The daemon is stopping: no probe starts from now on, and the ones running are ended. */
+export async function stopRuntimeProbes(graceMs = PROBE_GRACE_MS) {
+    stopping = true;
+    await endRunningProbeGroups(graceMs);
+}
+/** While the daemon is still starting (the Codex probe runs before it listens, and the shutdown handlers aren't
+ *  installed yet), end the probes' groups on SIGINT/SIGTERM and then die of the signal as before. Returns the
+ *  disposer to call once the real shutdown handlers take over. */
+export function endProbeGroupsOnStartupSignal() {
+    const handlers = new Map();
+    const dispose = () => { for (const [signal, handler] of handlers)
+        process.off(signal, handler); handlers.clear(); };
+    for (const signal of ["SIGINT", "SIGTERM"]) {
+        const handler = () => {
+            dispose();
+            void stopRuntimeProbes().finally(() => process.kill(process.pid, signal));
+        };
+        handlers.set(signal, handler);
+        process.on(signal, handler);
+    }
+    return dispose;
+}
+/** A probe the daemon's stop ended or refused: it has no result, and says nothing about the runtime. */
+export class ProbeStoppedError extends Error {
+    command;
+    code = "ESTOPPED";
+    constructor(command, why) {
+        super(why === "ended" ? `${command} was ended: the daemon is stopping` : `${command} was not started: the daemon is stopping`);
+        this.command = command;
+        this.name = "ProbeStoppedError";
+    }
+}
+/**
+ * An ExecFn for runtime version and help probes, which must never hold up their caller (daemon startup awaits
+ * one before it listens). Unlike execCommand: stdin is closed (a probe never needs input), the command runs in
+ * its own process group, and after `timeoutMs` that whole group is ended (TERM, then KILL, then a bounded wait
+ * for the reap; the Codex readers' stopGroup) and the promise rejects with ProbeTimeoutError. Where a group
+ * can't be signalled (Windows), the probe process itself is then killed; its own descendants may survive there.
+ * Otherwise it answers when the probe exits: what it wrote (after a short drain) on exit 0, or a rejection like
+ * execCommand's on any other exit. Only if that 200 ms drain times out (the output pipes are still held open, by
+ * a descendant) is the group ended then, so that descendant can't turn a finished probe into a timeout; a healthy
+ * probe whose pipes end within the drain never reaches stopGroup. A descendant that closed its stdio is left
+ * running, as execCommand leaves it.
+ */
+export function boundedProbeExec(timeoutMs = RUNTIME_PROBE_TIMEOUT_MS, graceMs = PROBE_GRACE_MS, deps = {}) {
+    const endGroup = deps.stopGroup ?? stopGroup;
+    return (cmd) => new Promise((resolveProbe, rejectProbe) => {
+        let child;
+        let tracked;
+        // A settled probe is no longer running, whatever it left behind (see the exit handler below).
+        const resolve = (output) => { if (tracked)
+            runningProbes.delete(tracked); resolveProbe(output); };
+        const reject = (err) => { if (tracked)
+            runningProbes.delete(tracked); rejectProbe(err); };
+        if (stopping) {
+            reject(new ProbeStoppedError(cmd, "refused"));
+            return;
+        }
+        try {
+            child = spawn(cmd, { shell: true, stdio: ["ignore", "pipe", "pipe"], detached: true, cwd: deps.cwd?.(cmd) });
+        }
+        catch (err) {
+            reject(err);
+            return;
+        }
+        tracked = child;
+        runningProbes.add(child);
+        if (!exitHookInstalled) {
+            exitHookInstalled = true;
+            process.on("exit", killRunningProbeGroupsNow);
+        }
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.setEncoding("utf8");
+        child.stderr?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => { if (stdout.length < MAX_OUTPUT_BYTES)
+            stdout += chunk; });
+        child.stderr?.on("data", (chunk) => { if (stderr.length < MAX_OUTPUT_BYTES)
+            stderr += chunk; });
+        let settled = false;
+        const exited = new Promise((r) => {
+            if (child.exitCode !== null || child.signalCode !== null)
+                r();
+            else
+                child.once("exit", () => r());
+        });
+        // The group first; then, where group signals don't reach (Windows), the probe process itself, waiting (bounded)
+        // for its exit. Then let the pipes end by themselves, bounded, so output still in them is read before they're
+        // closed; nothing holds the caller past that.
+        const end = async () => {
+            await endGroup(child, graceMs);
+            if (child.exitCode === null && child.signalCode === null) {
+                child.kill("SIGKILL");
+                let t;
+                await Promise.race([exited, new Promise((r) => { t = setTimeout(r, graceMs); })]);
+                clearTimeout(t);
+            }
+            const ends = [child.stdout, child.stderr].filter((stream) => stream && !stream.readableEnded)
+                .map((stream) => new Promise((r) => { stream.once("end", () => r()); stream.once("close", () => r()); }));
+            let t;
+            await Promise.race([Promise.all(ends), new Promise((r) => { t = setTimeout(r, graceMs); })]);
+            clearTimeout(t);
+            child.stdout?.destroy();
+            child.stderr?.destroy();
+        };
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            void end().then(() => reject(new ProbeTimeoutError(cmd, timeoutMs)));
+        }, timeoutMs);
+        child.once("error", (err) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            reject(err);
+        });
+        // Answer when the probe exits, after a short drain of what it wrote (a descendant may keep the pipes open, so
+        // don't wait for `close`). Only pipes still held open after the drain mean a descendant holds the output: then,
+        // and only then, end the group. A descendant that closed its stdio is left alone.
+        child.once("exit", (code, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            const open = () => [child.stdout, child.stderr].filter((stream) => stream && !stream.readableEnded);
+            const drained = new Promise((r) => {
+                let pending = 0;
+                const done = () => { pending -= 1; if (pending <= 0)
+                    r(); };
+                for (const stream of open()) {
+                    pending += 1;
+                    stream.once("end", done);
+                }
+                if (pending === 0)
+                    r();
+                setTimeout(r, DRAIN_MS);
+            });
+            // Yield once to I/O before deciding: if the event loop stalled past the drain timer, the pipes' end events
+            // may be queued behind it, and a closed-stdio descendant must not be taken for one holding the output.
+            void drained.then(() => new Promise((r) => setImmediate(r))).then(() => (open().length > 0 ? end() : undefined)).then(() => {
+                // The stop first: a probe it ended has no answer, even if it trapped TERM and exited 0 with a version.
+                if (endedByStop.has(child))
+                    reject(new ProbeStoppedError(cmd, "ended"));
+                else if (code === 0)
+                    resolve(stdout);
+                else {
+                    const output = [stdout.trim(), stderr.trim()].filter(Boolean).join("\n");
+                    // code, signal and stderr as execAsync's rejection carries them, for the failure classifiers.
+                    reject(Object.assign(new Error(`Command failed: ${cmd} (${signal ? `signal ${signal}` : `exit ${code}`})${output ? `\n${output}` : ""}`), { code, signal, stderr }));
+                }
+            });
+        });
+    });
+}
+//# sourceMappingURL=bounded-probe-exec.js.map

package/daemon/dist/adapters/bounded-probe-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-probe-exec.js","sourceRoot":"","sources":["../../src/adapters/bounded-probe-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAG/D;uHACuH;AACvH,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,qFAAqF;AACrF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGrB;IAA0B;IAF/C,2GAA2G;IAClG,IAAI,GAAG,WAAW,CAAC;IAC5B,YAAqB,OAAe,EAAW,SAAiB;QAC9D,KAAK,CAAC,GAAG,OAAO,0BAA0B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAD9E,YAAO,GAAP,OAAO,CAAQ;QAAW,cAAS,GAAT,SAAS,CAAQ;QAE9D,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;gEACgE;AAChE,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC1D,0GAA0G;AAC1G,MAAM,WAAW,GAAG,IAAI,OAAO,EAA4B,CAAC;AAC5D,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B;8CAC8C;AAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,uFAAuF;AACvF,SAAS,yBAAyB;IAChC,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED;wEACwE;AACxE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAO,GAAG,cAAc;IAClE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAAG,cAAc;IAC9D,QAAQ,GAAG,IAAI,CAAC;IAChB,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,KAAK,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wGAAwG;AACxG,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAErB;IADZ,IAAI,GAAG,UAAU,CAAC;IAC3B,YAAqB,OAAe,EAAE,GAAwB;QAC5D,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,oCAAoC,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,CAAC,CAAC;QAD5G,YAAO,GAAP,OAAO,CAAQ;QAElC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAS,GAAG,wBAAwB,EACpC,OAAO,GAAG,cAAc,EACxB,OAAoF,EAAE;IAEtF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAC7C,OAAO,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,OAAO,CAAS,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QACxE,IAAI,KAA+B,CAAC;QACpC,IAAI,OAA6C,CAAC;QAClD,8FAA8F;QAC9F,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,EAAE,GAAG,IAAI,OAAO;YAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;QAChB,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YACrC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;;gBACzD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,gHAAgH;QAChH,8GAA8G;QAC9G,8CAA8C;QAC9C,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACrB,MAAM,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,IAAI,CAA4C,CAAC;gBACjD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClF,YAAY,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;iBAC1F,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,GAAG,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpH,IAAI,CAA4C,CAAC;YACjD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;QACH,8GAA8G;QAC9G,gHAAgH;QAChH,kFAAkF;QAClF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACpG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;gBACtC,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC;oBAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5D,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;oBAAC,OAAO,IAAI,CAAC,CAAC;oBAAC,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBACzE,IAAI,OAAO,KAAK,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,2GAA2G;YAC3G,uGAAuG;YACvG,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzH,uGAAuG;gBACvG,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;qBACnE,IAAI,IAAI,KAAK,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;qBAChC,CAAC;oBACJ,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACzE,8FAA8F;oBAC9F,MAAM,CAAC,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CAAC,mBAAmB,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACnH,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CACzB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/daemon/dist/adapters/claude-code-adapter.d.ts

@@ -35,6 +35,7 @@ export declare class ClaudeCodeAdapter implements RuntimeAdapter {
     private collectorAssetPath;
     private autoDriveProviderPrompts;
     private listProcesses?;
+    private readinessTimeoutMs?;
     private autoLaunches;
     readonly claudeManagedLaunch?: ClaudeManagedLaunch;
     private activityRelayPath;
@@ -52,6 +53,8 @@ export declare class ClaudeCodeAdapter implements RuntimeAdapter {
         collectorAssetPath?: string;
         autoDriveProviderPrompts?: boolean;
         listProcesses?: NativeProcessLister;
+        /** Bound on a slow resume's wait, from the launch (default: runtime.readiness_timeout_seconds). */
+        readinessTimeoutMs?: number;
         claudeManagedLaunch?: ClaudeManagedLaunch;
         /** DI source of the activity-relay.cjs asset (parity with the Codex adapter). */
         activityRelayPath?: string;
@@ -84,6 +87,16 @@ export declare class ClaudeCodeAdapter implements RuntimeAdapter {
         permissionMode?: NodeBinding["permissionMode"];
     }): void;
     private assessManagedProbe;
+    /** tmux names a shell for every OpenRig launch (the launch script is `sh`), so its word alone can't say
+     *  Claude is gone. With a bound pane, the process tree must show the pane's shell holding the terminal with
+     *  nothing under it; Claude, or a launch script about to start it, is a slow resume. */
+    private paneReturnedToShell;
+    /** Who holds the pane, by the observations already there. "another": positively something other than this launch's own
+     *  start: a ready screen whose lineage failed the check (with a process list that could be read), a Claude naming
+     *  another conversation, or a stable Codex. Waiting won't make any of them this launch's, and its token is not recorded
+     *  as an attempt. "own": this launch's Claude. "unknown": nothing seen yet (the launch script is starting it) or a
+     *  process list that can't be read, whatever the screen shows. One process listing serves the Claude observations. */
+    private paneOccupant;
     private verifyResumeLaunch;
     private projectEntry;
     /**
@@ -96,7 +109,11 @@ export declare class ClaudeCodeAdapter implements RuntimeAdapter {
     private preserveMode;
     private pluginAppliesToClaude;
     private resolveTargetDir;
+    /** true when applied, "skipped" when handled but not applied, false when this isn't a resource it handles. */
     private applyRuntimeResource;
+    /** Merge a JSON fragment into a project file. An existing target that can't be read, or isn't a JSON object (it
+     *  doesn't parse, or it holds an array or a single value), belongs to its owner: it's left as it is, nothing is
+     *  merged, and a warning says so. Returns whether the fragment was applied. */
     private mergeJsonFragment;
     /**
      * Merge a managed block into the target guidance file. Returns `true` when
@@ -110,7 +127,6 @@ export declare class ClaudeCodeAdapter implements RuntimeAdapter {
     private provisionManagedBootstrap;
     private provisionClaudeState;
     private workspaceTrustKeys;
-    private readJsonObject;
     private readJsonObjectStrict;
     private readJsonObjectField;
     /**