@quolu/lattice 0.79.3 → 0.79.4

package/README.md

@@ -159,8 +159,14 @@ npm install -g @quolu/lattice
 lattice setup --json
 ```
 
-Requires **Node.js 22.13 or newer, except 25.x** (`engines: >=22.13 <25 || >=26`; Node 25's V8
-turboshaft WASM JIT breaks the bundled sensor, so it is blocked with a banner). The structure sensor ships inside the package — there is nothing
+Requires **Node.js 22.13 or newer** with the supported runtime ranges
+`>=22.13 <24.2 || >=24.22 <25 || >=26.10`. Node 24.2–24.21 and 26.0–26.9
+contain the [upstream cppgc Realm lifetime defect](https://github.com/nodejs/node/pull/65778),
+which can corrupt the heap during worker teardown. Use 24.22.0+ or 26.10.0+ on
+those release lines; Node 22 LTS remains supported. Node 25.x remains excluded
+because its V8 WASM JIT can crash while compiling tree-sitter grammars.
+
+The structure sensor ships inside the package — there is nothing
 else to install, and Lattice never falls back to a sensor on your `PATH`.
 
 `lattice setup`は既存のClaude・Codex・Grok・Cursor設定を検出し、LatticeのMCP登録、

package/bin/lattice-bridge.mjs

@@ -2,8 +2,8 @@
 
 import { readBridgeConfig } from '../src/bridge-config.mjs';
 import {
-  bridgeDaemonVersionDrifted, readBridgeStopRequest, removeBridgeDaemonActiveMarker,
-  removeBridgeDaemonDescriptor, writeBridgeDaemonDescriptor, writeBridgeStopReceipt,
+  bridgeDaemonVersionDrifted, completeBridgeDaemonStop, readBridgeStopRequest,
+  writeBridgeDaemonDescriptor,
 } from '../src/bridge-daemon.mjs';
 import { createBridgeHubHeartbeatController } from '../src/bridge-hub-heartbeat.mjs';
 import { migrateBridgeToHub, retireBridgeTunnelLaunchAgent } from '../src/bridge-hub-migration.mjs';
@@ -31,25 +31,29 @@ if (typeof instanceToken !== 'string' || !/^[0-9a-f]{64}$/u.test(instanceToken))
 const controller = bridgeRuntimeController({ env, instanceToken,
   heartbeat: () => hubHeartbeat.lastHeartbeatSummary() });
 let timer;
-let closing = false;
+let closing = null;
+let stopping = null;
 let descriptorFingerprint = null;
 let heartbeatBinding = null;
 let checking = false;
 let failClosedError = null;
 let hubHeartbeatError = null;
-const close = async () => {
-  if (closing) return;
-  closing = true;
-  clearInterval(timer);
-  await controller.close();
+const close = () => {
+  if (closing === null) {
+    clearInterval(timer);
+    closing = controller.close();
+  }
+  return closing;
+};
+const stop = () => {
+  if (stopping === null) stopping = completeBridgeDaemonStop({ env, close });
+  return stopping;
 };
 
 try {
   const stopRequest = await readBridgeStopRequest({ env });
   if (stopRequest !== null) {
-    await writeBridgeStopReceipt({ nonce: stopRequest.nonce, env });
-    await removeBridgeDaemonDescriptor({ env });
-    await removeBridgeDaemonActiveMarker({ env });
+    await stop();
     process.exit(0);
   }
   const config = await readBridgeConfig({ env });
@@ -64,15 +68,12 @@ try {
 }
 
 timer = setInterval(async () => {
-  if (checking || closing) return;
+  if (checking || closing !== null || stopping !== null) return;
   checking = true;
   try {
     const stopRequest = await readBridgeStopRequest({ env });
     if (stopRequest !== null) {
-      await close();
-      await writeBridgeStopReceipt({ nonce: stopRequest.nonce, env });
-      await removeBridgeDaemonDescriptor({ env });
-      await removeBridgeDaemonActiveMarker({ env });
+      await stop();
       process.exit(0);
     }
     // A stale-version exit is a clean stop, not a failure: whatever supervises
@@ -83,9 +84,7 @@ timer = setInterval(async () => {
     if (Date.now() - lastVersionCheckAt >= BACKGROUND_CHECK_INTERVAL_MS) {
       lastVersionCheckAt = Date.now();
       if (await bridgeDaemonVersionDrifted({})) {
-        await close();
-        await removeBridgeDaemonDescriptor({ env });
-        await removeBridgeDaemonActiveMarker({ env });
+        await stop();
         process.exit(0);
       }
     }
@@ -122,9 +121,7 @@ timer = setInterval(async () => {
     }
     const config = await readBridgeConfig({ env });
     if (config === null || !config.enabled) {
-      await close();
-      await removeBridgeDaemonDescriptor({ env });
-      await removeBridgeDaemonActiveMarker({ env });
+      await stop();
       process.exit(0);
     }
     const binding = await controller.reconcile();
@@ -169,10 +166,20 @@ timer = setInterval(async () => {
     const fingerprint = JSON.stringify(failure);
     if (fingerprint !== failClosedError) process.stderr.write(`${fingerprint}\n`);
     failClosedError = fingerprint;
+    if (stopping !== null) {
+      // A failed terminal transition cannot be acknowledged or turned into exit 0.
+      clearInterval(timer);
+      process.exit(1);
+    }
     // Public traffic fails closed immediately. Keep only the local control loop alive so an
     // authenticated nonce stop request can still receive a socket-closed receipt.
     await controller.close();
   } finally { checking = false; }
 }, 250);
-process.once('SIGINT', () => close().finally(() => process.exit(0)));
-process.once('SIGTERM', () => close().finally(() => process.exit(0)));
+const stopOnSignal = () => stop().then(() => process.exit(0), (error) => {
+  process.stderr.write(`${JSON.stringify({ schema: 'lattice.bridge_daemon_error.v1',
+    code: error?.code ?? 'BRIDGE_DAEMON_STOP_FAILED', message: 'bridge daemon did not complete shutdown' })}\n`);
+  process.exit(1);
+});
+process.once('SIGINT', stopOnSignal);
+process.once('SIGTERM', stopOnSignal);

package/bin/lattice-dashboard-supervisor.mjs

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import path from 'node:path';
+import { superviseDashboard } from '../src/dashboard-supervisor.mjs';
+
+try {
+  const root = process.env.LATTICE_DASHBOARD_RUNTIME_DIR;
+  if (process.argv.length !== 3 || process.argv[2] !== root || !path.isAbsolute(root)) {
+    throw Object.assign(new Error('invalid supervisor runtime'), { code: 'DASHBOARD_SUPERVISOR_ARGUMENT_INVALID' });
+  }
+  await superviseDashboard({ args: [path.resolve(import.meta.dirname, 'lattice-dashboard.mjs'), '--supervised-runtime', root],
+    env: process.env, root: process.env.LATTICE_DASHBOARD_RUNTIME_DIR,
+    runId: process.env.LATTICE_DASHBOARD_LIFECYCLE_RUN });
+} catch (error) {
+  const code = /^[A-Z_]+$/u.test(error.code ?? '') ? error.code : 'DASHBOARD_SUPERVISOR_FAILED';
+  if (process.connected) process.send({ type: 'supervisor_error', code }, () => process.disconnect());
+  process.stderr.write(`${JSON.stringify({ code })}\n`);
+  process.exitCode = 1;
+}

package/bin/lattice-dashboard.mjs

@@ -14,8 +14,11 @@ import {
   createTodoGanttProjectRegistry,
   startTodoGanttDashboardServer,
 } from '../src/todo-gantt-live.mjs';
+import { dashboardLifecyclePhase } from '../src/dashboard-lifecycle-ipc.mjs';
 
 const args = process.argv.slice(2);
+if (args.length === 2 && args[0] === '--supervised-runtime' && process.connected
+  && args[1] === process.env.LATTICE_DASHBOARD_RUNTIME_DIR) args.splice(0, 2);
 if (args.length === 1 && (args[0] === '--help' || args[0] === '-h')) {
   process.stdout.write('Usage: lattice-dashboard\n');
   process.exit(0);
@@ -40,8 +43,10 @@ const storeCache = createTodoStoreCache();
 const readCachedStore = (repoRoot) => storeCache.read(repoRoot);
 
 async function synchronize() {
+  dashboardLifecyclePhase('registry');
   const active = await readVisibleTodoDashboardProjects({ env,
     projectHasActiveRun: async (entry) => {
+      dashboardLifecyclePhase('store');
       try {
         const store = await readCachedStore(entry.repo_root);
         const active = projectTodoStatus(store, TODO_STATUS_DISPATCH_ONLY).active_set.length > 0
@@ -51,8 +56,10 @@ async function synchronize() {
       } catch (error) {
         if (!reportedStoreReadFailures.has(entry.project_id)) {
           reportedStoreReadFailures.add(entry.project_id);
-          console.error(JSON.stringify({ schema: 'lattice.dashboard_project_store_error.v1',
-            project_id: entry.project_id, message: error instanceof Error ? error.message : String(error) }));
+          // This finite stage survives in the parent's receipt without project/error text.
+          // A lost supervisor leaves no stderr reader; do not create an EPIPE failure
+          // in an otherwise serving daemon by writing to its abandoned pipe.
+          dashboardLifecyclePhase('store_read_failed');
         }
         return false;
       }
@@ -103,28 +110,43 @@ let closing = null;
  */
 function close() {
   if (closing === null) {
+    dashboardLifecyclePhase('close');
     clearInterval(timer);
     closing = (async () => {
-      try { await forgetTodoDashboardDaemonRecord({ env }); } catch {}
-      await dashboard.close();
+      let cleanupFailure = false;
+      try { await forgetTodoDashboardDaemonRecord({ env }); }
+      catch { cleanupFailure = true; dashboardLifecyclePhase('cleanup_failed'); }
+      try { await dashboard.close(); }
+      catch (error) { dashboardLifecyclePhase('close_failed'); throw error; }
+      if (cleanupFailure) throw new Error('dashboard record cleanup failed');
     })();
   }
   return closing;
 }
 
 function exit(code) {
-  close().catch(() => {}).finally(() => process.exit(code));
+  close().then(() => process.exit(code), () => process.exit(code === 0 ? 1 : code));
 }
 
 await synchronize();
+dashboardLifecyclePhase('listen');
 const dashboard = await startTodoGanttDashboardServer({
   registry,
   port,
-  onShutdown: process.platform === 'win32' ? () => exit(0) : null,
+  onShutdown: process.platform === 'win32' ? () => {
+    dashboardLifecyclePhase('shutdown_request'); exit(0);
+  } : null,
 });
 await writeTodoDashboardDaemonRecord({ port: dashboard.port, env });
+dashboardLifecyclePhase('ready');
 const timer = setInterval(() => synchronize().then((count) => {
-  if (count === 0) exit(0);
-}).catch(() => exit(1)), 1_000);
-process.once('SIGINT', () => exit(0));
-process.once('SIGTERM', () => exit(0));
+  dashboardLifecyclePhase('periodic_sync');
+  if (count === 0) { dashboardLifecyclePhase('empty_shutdown'); exit(0); }
+}).catch(() => { dashboardLifecyclePhase('sync_failed'); exit(1); }), 1_000);
+process.on('message', (message) => {
+  if (message?.type === 'dashboard_shutdown') {
+    dashboardLifecyclePhase('shutdown_request'); exit(0);
+  }
+});
+process.once('SIGINT', () => { dashboardLifecyclePhase('shutdown_request'); exit(0); });
+process.once('SIGTERM', () => { dashboardLifecyclePhase('shutdown_request'); exit(0); });

package/docs/bridge-setup.md

@@ -119,6 +119,35 @@ bridgeが無効な間は以下すべてnullで、bridgeを有効にしている
 | `node_path`・`node_version` | そのprocessを実行しているNodeの実体pathと版 |
 | `bridge_path` | そのprocessが実行しているbridge script |
 
+**`dashboard_lifecycle`** — `bridge status --json`の読み取り専用の終了記録。
+`lattice.dashboard_lifecycle_status.v1`の`last_ensure`に起動・再利用・無応答拒否の判断、
+`active`に監視中のrun、`last_termination`に最後の実終了または監督消失を返す。
+読み取りでdaemonを起動したり欠測を補完したりしない。未導入の旧daemonには記録が無い。
+
+通常のdashboard起動は小さいsupervisorが子をwaitし、実終了の観測時刻・codeまたはsignal・最後の段階を
+所有runtimeの`lifecycle/`へ保存する。POSIXはprivate directory/file、Windowsは既存storeの所有境界を使う。
+64run、各16KiB・64段階イベントまでとし、activeや生存中の監視外childは削除しない。閉じた古いrunから
+整理し、満杯なら記録を捨てて起動を続けずtyped容量エラーで止める。stderr本文やproject本文は保存せず、
+byte数と先頭64KiBまでのdigestを残す。中断された一時fileも上限内で扱い、所有writerの死亡確認後に除去する。
+Windowsで記録の置換が一時的に拒否された場合は、所有pathを再検証しながら短い期限内だけ公開を待つ。
+解除されなければ元のfilesystem errorを伴う`DASHBOARD_LIFECYCLE_PUBLISH_FAILED`を返し、旧完全記録を保持する。
+
+Windowsの`observed_exit`は実waitで得たDWORDの`uint32`と`hex`を保持し、signalは`not_applicable`とする。
+`0xC0000005`等の値だけでは例外と外部TerminateProcessを区別できない。`termination_request`は自分のIPC終了要求と、
+FILETIMEで認証したhandleへのTerminateProcess要求・実GetExitCodeProcess結果を別に記録する。
+Nodeの疑似SIGTERMしか残らない場合はraw値を得た扱いにしない。
+
+supervisorだけがKILLなどで消えた場合、childは残して配信を継続する。Windowsではchildをdetachedで起動し、
+supervisorが所有するJobの終了に連動させない。通常の停止要求はIPCで送り、実childの終了をwaitする。
+次の通常ensureはchildのhealthと
+identityを確認し、同じdaemonを再利用する。監督消失後の過去の終了値・終了時刻はunknownのまま残す。
+OS再起動などでsupervisorとchildの両方が消えた場合も、観測できなかった終了値や理由はunknownのまま残す。
+周期LaunchAgentは従来のstableなCLI pathでensureするままで、plist・Node・信用設定の書換えは要らない。
+
+配信失敗のreceiptには、`reason`のtyped codeに加え、許可済みの`failure.stage`と`failure.subreason`が入る。
+段階は`heartbeat_registration`、`hub_listing`、`project_route`、欠測時の`unknown`であり、任意のerror detailや
+messageは写さない。配信確認の失敗は、daemonの死亡を示す判定には使わない。
+
 **`runtime_drift`** — 両者の食い違い。空配列は「差が無い」または「`runtime`が名乗っていないので
 判定できない」のどちらかである。
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/lattice",
-  "version": "0.79.3",
+  "version": "0.79.4",
   "description": "Schedulability compiler for multi-agent development: observe real code boundaries, refactor the conflicting seam, recompile the plan for parallel execution",
   "author": {
     "name": "Quo / クオ at kitepon.dev",
@@ -13,7 +13,7 @@
     "url": "git+https://github.com/kitepon/Lattice.git"
   },
   "engines": {
-    "node": ">=22.13 <25 || >=26"
+    "node": ">=22.13 <24.2 || >=24.22 <25 || >=26.10"
   },
   "bin": {
     "lattice": "bin/lattice.mjs",

package/sensor/dist/bin/lattice-sensor.js

@@ -125,32 +125,12 @@ async function loadLatticeSensor() {
 // which fails for ESM-only packages. This bypasses the transformation.
 // eslint-disable-next-line @typescript-eslint/no-implied-eval
 const importESM = new Function('specifier', 'return import(specifier)');
-// Block LatticeSensor on Node.js 25.x — V8's turboshaft WASM JIT has a Zone
-// allocator bug that reliably crashes when compiling tree-sitter
-// grammars (see #54, #81, #140). The previous behaviour was a soft
-// console.warn that scrolls off-screen before the OOM crash 30 seconds
-// later, leading to a steady stream of "what is this OOM" reports.
-// Hard-exit before any WASM work; allow override via env var for users
-// who patched V8 themselves or want to test a future fix.
-const nodeVersion = process.versions.node;
-const nodeMajor = parseInt(nodeVersion.split('.')[0] ?? '0', 10);
-if ((0, node_version_check_1.isNode25Affected)(nodeMajor)) {
-    process.stderr.write((0, node_version_check_1.buildNode25BlockBanner)(nodeVersion) + '\n');
-    if (!process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE) {
-        process.exit(1);
-    }
-    // Override active — banner shown for visibility, continuing.
-}
-// Enforce the supported Node floor. `engines` in package.json only *warns* on
-// install (unless engine-strict), so hard-block here to actually keep users off
-// unsupported versions. Mirrors the Node 25 block above. See package.json `engines`.
-if (nodeMajor < node_version_check_1.MIN_NODE_MAJOR) {
-    process.stderr.write((0, node_version_check_1.buildNodeTooOldBanner)(nodeVersion) + '\n');
-    if (!process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE) {
-        process.exit(1);
-    }
-    // Override active — banner shown for visibility, continuing.
-}
+// Keep the CLI and MCP bootstrap on the same runtime compatibility policy.
+const runtimeSupport = (0, node_version_check_1.evaluateNodeVersionGuard)(process.versions.node, Boolean(process.env.LATTICE_SENSOR_ALLOW_UNSAFE_NODE));
+if (runtimeSupport.banner !== null)
+    process.stderr.write(runtimeSupport.banner + '\n');
+if (runtimeSupport.blocked)
+    process.exit(1);
 // Re-exec with V8's `--liftoff-only` if it isn't already set, so tree-sitter's
 // large WASM grammars never hit the turboshaft Zone OOM (`Fatal process out of
 // memory: Zone`) on Node >= 22. No-op under the bundled launcher, which already

package/sensor/dist/bin/node-version-check.d.ts

@@ -1,5 +1,6 @@
 /**
- * Node.js version compatibility check.
+ * Shared Node.js compatibility policy for CLI and MCP bootstrap.
+ * Includes the Node cppgc Realm lifetime repair and the existing Node25 exclusion.
  *
  * Node 25.x has a V8 turboshaft WASM JIT Zone allocator bug that
  * reliably crashes LatticeSensor with `Fatal process out of memory: Zone`
@@ -36,4 +37,12 @@ export declare const MIN_NODE_MAJOR = 20;
  * (see ../ui/glyphs.ts for the rationale).
  */
 export declare function buildNodeTooOldBanner(nodeVersion: string): string;
+/** Node's cppgc Realm lifetime repair: nodejs/node#65778 (24.x backport#83b3431c). */
+export declare function isNodeRealmLifetimeAffected(nodeVersion: string): boolean;
+export declare function buildNodeRealmLifetimeBanner(nodeVersion: string): string;
+/** Shared bootstrap policy for the sensor CLI and the packaged MCP entry. */
+export declare function evaluateNodeVersionGuard(nodeVersion: string, overrideActive: boolean): {
+    blocked: boolean;
+    banner: string | null;
+};
 //# sourceMappingURL=node-version-check.d.ts.map

package/sensor/dist/bin/node-version-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-version-check.d.ts","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBlE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAkBjE"}
+{"version":3,"file":"node-version-check.d.ts","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmBlE;AAED,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAkBjE;AAED,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAMxE;AAED,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAiBxE;AAED,6EAA6E;AAC7E,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAOlI"}

package/sensor/dist/bin/node-version-check.js

@@ -1,6 +1,7 @@
 "use strict";
 /**
- * Node.js version compatibility check.
+ * Shared Node.js compatibility policy for CLI and MCP bootstrap.
+ * Includes the Node cppgc Realm lifetime repair and the existing Node25 exclusion.
  *
  * Node 25.x has a V8 turboshaft WASM JIT Zone allocator bug that
  * reliably crashes LatticeSensor with `Fatal process out of memory: Zone`
@@ -13,6 +14,9 @@ exports.MIN_NODE_MAJOR = void 0;
 exports.buildNode25BlockBanner = buildNode25BlockBanner;
 exports.isNode25Affected = isNode25Affected;
 exports.buildNodeTooOldBanner = buildNodeTooOldBanner;
+exports.isNodeRealmLifetimeAffected = isNodeRealmLifetimeAffected;
+exports.buildNodeRealmLifetimeBanner = buildNodeRealmLifetimeBanner;
+exports.evaluateNodeVersionGuard = evaluateNodeVersionGuard;
 /**
  * Build the bordered banner shown when LatticeSensor detects an
  * unsupported Node.js major version (Node 25.x). Pinned via unit
@@ -81,4 +85,42 @@ function buildNodeTooOldBanner(nodeVersion) {
         sep,
     ].join('\n');
 }
+/** Node's cppgc Realm lifetime repair: nodejs/node#65778 (24.x backport#83b3431c). */
+function isNodeRealmLifetimeAffected(nodeVersion) {
+    const parts = nodeVersion.split('.');
+    const major = Number(parts[0]);
+    const minor = Number(parts[1]);
+    return (major === 24 && minor >= 2 && minor < 22)
+        || (major === 26 && minor < 10);
+}
+function buildNodeRealmLifetimeBanner(nodeVersion) {
+    const sep = '-'.repeat(72);
+    return [
+        sep,
+        `[LatticeSensor] Unsupported Node.js version: ${nodeVersion}`,
+        sep,
+        'This Node.js release has a cppgc wrapper/Realm lifetime defect.',
+        'Worker teardown can write to freed memory and corrupt the native heap.',
+        'Upstream repair: https://github.com/nodejs/node/pull/65778',
+        '',
+        'Fix: use Node.js 24.22.0+ on the 24.x line or 26.10.0+ on the 26.x line.',
+        'Supported Node.js 22 LTS is also outside this affected implementation.',
+        '',
+        'For a custom patched runtime only, the existing override is:',
+        '  LATTICE_SENSOR_ALLOW_UNSAFE_NODE=1 lattice sensor ...',
+        sep,
+    ].join('\n');
+}
+/** Shared bootstrap policy for the sensor CLI and the packaged MCP entry. */
+function evaluateNodeVersionGuard(nodeVersion, overrideActive) {
+    const nodeMajor = parseInt(nodeVersion.split('.')[0] ?? '0', 10);
+    let banner = null;
+    if (isNode25Affected(nodeMajor))
+        banner = buildNode25BlockBanner(nodeVersion);
+    else if (nodeMajor < exports.MIN_NODE_MAJOR)
+        banner = buildNodeTooOldBanner(nodeVersion);
+    else if (isNodeRealmLifetimeAffected(nodeVersion))
+        banner = buildNodeRealmLifetimeBanner(nodeVersion);
+    return { blocked: banner !== null && !overrideActive, banner };
+}
 //# sourceMappingURL=node-version-check.js.map

package/sensor/dist/bin/node-version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-version-check.js","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAWH,wDAmBC;AAGD,4CAEC;AAmBD,sDAkBC;AAtED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,sDAAsD;QACtD,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACU,QAAA,cAAc,GAAG,EAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,WAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,kCAAkC,sBAAc,gCAAgC;QAChF,yEAAyE;QACzE,sBAAsB;QACtB,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,8CAA8C;QAC9C,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"node-version-check.js","sourceRoot":"","sources":["../../src/bin/node-version-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAWH,wDAmBC;AAGD,4CAEC;AAmBD,sDAkBC;AAGD,kEAMC;AAED,oEAiBC;AAGD,4DAOC;AA5GD;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,sDAAsD;QACtD,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACU,QAAA,cAAc,GAAG,EAAE,CAAC;AAEjC;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,WAAmB;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,kCAAkC,sBAAc,gCAAgC;QAChF,yEAAyE;QACzE,sBAAsB;QACtB,EAAE;QACF,8BAA8B;QAC9B,+DAA+D;QAC/D,6EAA6E;QAC7E,EAAE;QACF,8CAA8C;QAC9C,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,SAAgB,2BAA2B,CAAC,WAAmB;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;WAC5C,CAAC,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAgB,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG;QACH,gDAAgD,WAAW,EAAE;QAC7D,GAAG;QACH,iEAAiE;QACjE,wEAAwE;QACxE,4DAA4D;QAC5D,EAAE;QACF,0EAA0E;QAC1E,wEAAwE;QACxE,EAAE;QACF,8DAA8D;QAC9D,yDAAyD;QACzD,GAAG;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAgB,wBAAwB,CAAC,WAAmB,EAAE,cAAuB;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,gBAAgB,CAAC,SAAS,CAAC;QAAE,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;SACzE,IAAI,SAAS,GAAG,sBAAc;QAAE,MAAM,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;SAC5E,IAAI,2BAA2B,CAAC,WAAW,CAAC;QAAE,MAAM,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACtG,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC"}

package/sensor/dist/mcp/daemon-paths.d.ts

@@ -59,6 +59,10 @@ export interface DaemonLockInfo {
     socketPath: string;
     startedAt: number;
 }
+/** The election and its clients must agree how long an observed startup is protected. */
+export declare const DAEMON_STARTUP_GRACE_MS = 10000;
+/** Time component only: callers still verify liveness and the socket hello. */
+export declare function daemonStartupDeadline(info: Pick<DaemonLockInfo, 'startedAt'> | null, now?: number): number | null;
 /** Whether a lock record contains enough identity data for a socket hello. */
 export declare function canProbeDaemonIdentity(info: DaemonLockInfo): boolean;
 /**

package/sensor/dist/mcp/daemon-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-paths.d.ts","sourceRoot":"","sources":["../../src/mcp/daemon-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA8BH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAUvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAOpE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CA0C7F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAuBjE"}
+{"version":3,"file":"daemon-paths.d.ts","sourceRoot":"","sources":["../../src/mcp/daemon-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA8BH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAUvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,IAAI,EAAE,GAAG,SAAa,GAAG,MAAM,GAAG,IAAI,CAKrH;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAOpE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CA0C7F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAuBjE"}

package/sensor/dist/mcp/daemon-paths.js

@@ -62,9 +62,11 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DAEMON_STARTUP_GRACE_MS = void 0;
 exports.getDaemonSocketCandidates = getDaemonSocketCandidates;
 exports.getDaemonSocketPath = getDaemonSocketPath;
 exports.getDaemonPidPath = getDaemonPidPath;
+exports.daemonStartupDeadline = daemonStartupDeadline;
 exports.canProbeDaemonIdentity = canProbeDaemonIdentity;
 exports.probeDaemonIdentity = probeDaemonIdentity;
 exports.encodeLockInfo = encodeLockInfo;
@@ -134,6 +136,16 @@ function getDaemonSocketPath(projectRoot) {
 function getDaemonPidPath(projectRoot) {
     return path.join((0, directory_1.getLatticeSensorDir)(projectRoot), 'daemon.pid');
 }
+/** The election and its clients must agree how long an observed startup is protected. */
+exports.DAEMON_STARTUP_GRACE_MS = 10_000;
+/** Time component only: callers still verify liveness and the socket hello. */
+function daemonStartupDeadline(info, now = Date.now()) {
+    const startedAt = info?.startedAt;
+    if (typeof startedAt !== 'number' || !Number.isFinite(startedAt) || startedAt <= 0
+        || !Number.isFinite(now) || now < startedAt || now - startedAt >= exports.DAEMON_STARTUP_GRACE_MS)
+        return null;
+    return startedAt + exports.DAEMON_STARTUP_GRACE_MS;
+}
 /** Whether a lock record contains enough identity data for a socket hello. */
 function canProbeDaemonIdentity(info) {
     return (Number.isInteger(info.pid) &&

package/sensor/dist/mcp/daemon-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-paths.js","sourceRoot":"","sources":["../../src/mcp/daemon-paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CH,8DAUC;AASD,kDAGC;AAGD,4CAEC;AAWD,wDAOC;AAOD,kDA0CC;AAMD,wCAEC;AAOD,wCAuBC;AA9KD,+CAAiC;AACjC,yCAA2B;AAC3B,uCAAyB;AACzB,2CAA6B;AAC7B,4CAAmD;AAEnD,oDAAoD;AACpD,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,8EAA8E;AAC9E,SAAS,WAAW,CAAC,WAAmB;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,qEAAqE;IACrE,+EAA+E;IAC/E,6EAA6E;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,yBAAyB,CAAC,WAAmB;IAC3D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,0EAA0E;QAC1E,OAAO,CAAC,+BAA+B,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,uBAAuB;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,4EAA4E;IAC5E,OAAO,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,CAAC;AACpD,CAAC;AAED,kEAAkE;AAClE,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC;AACnE,CAAC;AAUD,8EAA8E;AAC9E,SAAgB,sBAAsB,CAAC,IAAoB;IACzD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,CAAC;QACZ,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,IAAoB,EAAE,SAAS,GAAG,KAAK;IACzE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,MAAkB,CAAC;QACvB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QACzD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAA4B,CAAC;gBAC9E,MAAM,CACJ,KAAK,CAAC,QAAQ,KAAK,CAAC;oBACpB,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBACtB,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAoB;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IACE,MAAM;YACN,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,MAAwB,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"daemon-paths.js","sourceRoot":"","sources":["../../src/mcp/daemon-paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CH,8DAUC;AASD,kDAGC;AAGD,4CAEC;AAcD,sDAKC;AAGD,wDAOC;AAOD,kDA0CC;AAMD,wCAEC;AAOD,wCAuBC;AAzLD,+CAAiC;AACjC,yCAA2B;AAC3B,uCAAyB;AACzB,2CAA6B;AAC7B,4CAAmD;AAEnD,oDAAoD;AACpD,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,8EAA8E;AAC9E,SAAS,WAAW,CAAC,WAAmB;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,WAAmB;IAC3C,qEAAqE;IACrE,+EAA+E;IAC/E,6EAA6E;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,yBAAyB,CAAC,WAAmB;IAC3D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,0EAA0E;QAC1E,OAAO,CAAC,+BAA+B,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,uBAAuB;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,4EAA4E;IAC5E,OAAO,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAE,CAAC;AACpD,CAAC;AAED,kEAAkE;AAClE,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAA,+BAAmB,EAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC;AACnE,CAAC;AAUD,yFAAyF;AAC5E,QAAA,uBAAuB,GAAG,MAAM,CAAC;AAE9C,+EAA+E;AAC/E,SAAgB,qBAAqB,CAAC,IAA8C,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpG,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,CAAC;IAClC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;WAC7E,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,SAAS,IAAI,GAAG,GAAG,SAAS,IAAI,+BAAuB;QAAE,OAAO,IAAI,CAAC;IACzG,OAAO,SAAS,GAAG,+BAAuB,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,SAAgB,sBAAsB,CAAC,IAAoB;IACzD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,CAAC;QACZ,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,IAAoB,EAAE,SAAS,GAAG,KAAK;IACzE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACtC,IAAI,MAAkB,CAAC;QACvB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QACzD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAA4B,CAAC;gBAC9E,MAAM,CACJ,KAAK,CAAC,QAAQ,KAAK,CAAC;oBACpB,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;oBACtB,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,CAC9D,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,IAAoB;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IACE,MAAM;YACN,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAClC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;YACD,OAAO,MAAwB,CAAC;QAClC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/sensor/dist/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AA4JH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAO7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAIvF;AAgFD;;;;;;;;;;GAUG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,WAAW,CAAgB;IAGnC,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,YAAY,CAA+C;IAGnE,OAAO,CAAC,gBAAgB,CAA+B;IAIvD,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,QAAQ,CAA4D;IAE5E,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,IAAI,CAA4D;IACxE,sFAAsF;IACtF,OAAO,CAAC,cAAc,CAAuB;gBAEjC,WAAW,CAAC,EAAE,MAAM;IAIhC;;;;;;;;;;;;OAYG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmE5B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B,uEAAuE;YACzD,WAAW;IA4DzB;;;;;;;;OAQG;YACW,kBAAkB;IAmEhC;;;;;;;OAOG;YACW,0BAA0B;IA6CxC,iFAAiF;IACjF,OAAO,CAAC,qBAAqB;IAK7B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;CAoB5B;AAWD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAiKH;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAO7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAIvF;AAgFD;;;;;;;;;;GAUG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,WAAW,CAAgB;IAGnC,OAAO,CAAC,OAAO,CAA2B;IAC1C,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,YAAY,CAA+C;IAGnE,OAAO,CAAC,gBAAgB,CAA+B;IAIvD,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,QAAQ,CAA4D;IAE5E,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,IAAI,CAA4D;IACxE,sFAAsF;IACtF,OAAO,CAAC,cAAc,CAAuB;gBAEjC,WAAW,CAAC,EAAE,MAAM;IAIhC;;;;;;;;;;;;OAYG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmE5B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B3B,uEAAuE;YACzD,WAAW;IA4DzB;;;;;;;;OAQG;YACW,kBAAkB;IAiEhC;;;;;;;OAOG;YACW,0BAA0B;IAkExC,iFAAiF;IACjF,OAAO,CAAC,qBAAqB;IAK7B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;CAoB5B;AAWD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC"}

package/sensor/dist/mcp/index.js

@@ -151,21 +151,26 @@ function makeFallbackEngine(root) {
     }
     return new engine_1.MCPEngine({ writerLockRoot: root, queryPool: true, queryPoolDefaultMax: DIRECT_QUERY_POOL_MAX });
 }
-/**
- * How long a launcher waits for a freshly-spawned daemon to bind its socket
- * before giving up and running in-process. The daemon binds the socket *before*
- * the (backgrounded) engine/grammar warm-up, so this only needs to cover node
- * process startup. 60 × 100ms = 6s of headroom for a cold/slow box; on the
- * common path the socket appears within a few rounds.
- */
-// Poll finely (25ms) so the proxy attaches the instant the freshly-spawned
-// daemon binds, instead of waiting up to a coarse 100ms after — shaves the
-// cold-start handshake (the window the headless agent races). Same ~6s total
-// give-up budget (240 × 25ms), just finer granularity; socket-connect probes
-// are cheap. Paired with deferring the LatticeSensor load (engine.ts) off the bind
-// path, this narrows the "No such tool available" race window.
+/** Initial socket polling budget. A positively observed live same-version
+ * startup owner may receive the remainder of its original shared startup grace
+ * below; absent, expired, or untrusted owners do not extend this budget. Only a
+ * verified hello establishes readiness. */
+// Fine polling attaches promptly without renewing the owner's fixed deadline.
 const DAEMON_CONNECT_MAX_RETRIES = 240;
 const DAEMON_CONNECT_RETRY_DELAY_MS = 25;
+function observeStartupLock(root) {
+    try {
+        return (0, daemon_paths_1.decodeLockInfo)(fs.readFileSync((0, daemon_paths_1.getDaemonPidPath)(root), 'utf8'));
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === 'ENOENT')
+            return null;
+        const safeCode = typeof code === 'string' && /^[A-Z0-9_]{1,40}$/.test(code) ? code : 'UNKNOWN';
+        process.stderr.write(`[LatticeSensor MCP] Startup owner observation failed (${safeCode}).\n`);
+        throw error;
+    }
+}
 /** Whether `LATTICE_SENSOR_NO_DAEMON` was set to a truthy value. */
 function daemonOptOutSet() {
     const raw = process.env.LATTICE_SENSOR_NO_DAEMON;
@@ -551,9 +556,7 @@ class MCPServer {
                 // Give a newly-elected daemon time to bind, then require its socket hello
                 // to match the lock PID/version. PID existence alone accepts an unrelated
                 // process after OS PID reuse and permanently wedges startup (#1553).
-                const age = Date.now() - existing.startedAt;
-                const startupGraceMs = 10_000;
-                const stillStarting = existing.startedAt > 0 && age >= 0 && age < startupGraceMs;
+                const stillStarting = (0, daemon_paths_1.daemonStartupDeadline)(existing) !== null;
                 // Legacy plain-PID locks have no socket identity to test. Preserve those
                 // live holders: an inconclusive probe is not permission to create a
                 // second writer.
@@ -614,32 +617,53 @@ class MCPServer {
             }
             return null;
         };
+        const connectOutcome = async () => {
+            const socket = await connectAnyCandidate();
+            if (socket === 'foreign-product')
+                return 'foreign-product';
+            if (socket === 'version-mismatch')
+                return { fallbackReason: 'version-skew' };
+            return socket;
+        };
         const getDaemonSocket = async () => {
             // Fast path: a daemon may already be listening (on either candidate).
-            const probe = await connectAnyCandidate();
+            const probe = await connectOutcome();
             // ADR 0049 Decision 5③: a different product's daemon — propagate
             // verbatim so the local-handshake proxy fails the session closed
             // instead of silently falling back to direct mode.
-            if (probe === 'foreign-product')
-                return 'foreign-product';
-            // Same-product version skew — definitive, serve in-process (direct,
-            // reason: version-skew), don't poll for 6s.
-            if (probe === 'version-mismatch')
-                return { fallbackReason: 'version-skew' };
             if (probe)
                 return probe;
             // None reachable — spawn one (detached) and poll for its bind.
             spawnDetachedDaemon(root);
             for (let attempt = 0; attempt < DAEMON_CONNECT_MAX_RETRIES; attempt++) {
                 await sleep(DAEMON_CONNECT_RETRY_DELAY_MS);
-                const s = await connectAnyCandidate();
-                if (s === 'foreign-product')
-                    return 'foreign-product';
-                if (s === 'version-mismatch')
-                    return { fallbackReason: 'version-skew' };
+                const s = await connectOutcome();
                 if (s)
                     return s;
             }
+            // An elected same-version owner may still be inside the very grace window
+            // in which competing candidates are required to leave it alone. Do not
+            // permanently degrade its clients before that owner's original deadline.
+            const owner = observeStartupLock(root);
+            const startupDeadline = owner?.version === version_1.LatticeSensorPackageVersion
+                && (0, daemon_paths_1.canProbeDaemonIdentity)(owner) && (0, daemon_1.isProcessAlive)(owner.pid) ? (0, daemon_paths_1.daemonStartupDeadline)(owner) : null;
+            if (owner && startupDeadline !== null) {
+                const monotonicDeadline = performance.now() + Math.max(0, startupDeadline - Date.now());
+                const maxAttempts = Math.ceil(daemon_paths_1.DAEMON_STARTUP_GRACE_MS / DAEMON_CONNECT_RETRY_DELAY_MS);
+                for (let attempt = 0; attempt < maxAttempts && Date.now() < startupDeadline
+                    && performance.now() < monotonicDeadline; attempt++) {
+                    await sleep(Math.min(DAEMON_CONNECT_RETRY_DELAY_MS, Math.max(1, monotonicDeadline - performance.now())));
+                    const socket = await connectOutcome();
+                    if (socket)
+                        return socket;
+                    const current = observeStartupLock(root);
+                    // A temporarily missing record neither revokes nor renews the fixed
+                    // observed wait. It never proves readiness; only the hello above does.
+                    if (!(0, daemon_1.isProcessAlive)(owner.pid) || (current !== null && (current.pid !== owner.pid
+                        || current.startedAt !== owner.startedAt || current.version !== owner.version)))
+                        break;
+                }
+            }
             return { fallbackReason: 'no-daemon' }; // never bound — the proxy serves this session in-process
         };
         await (0, proxy_1.runLocalHandshakeProxy)({ getDaemonSocket, makeEngine: () => makeFallbackEngine(root), root });