@revisium/orchestrator 0.1.0-alpha.9 → 0.2.0-alpha.0

package/dist/host/ensure-revisium.js

@@ -1,90 +1,24 @@
-/**
- * ensureRevisium() — shared auto-start helper (Round 3).
- *
- * Models three distinct states (F7):
- *   1. HEALTHY     → no-op, return proven runtime.
- *   2. NO LIVE DAEMON (null runtime or dead pid) → fresh detached spawn + wait.
- *   3. ALIVE BUT UNHEALTHY → bounded re-poll, then throw (never orphan a live process).
- *
- * Called by BOTH `revisium start` command and host bootstrap (DRY extraction, F9).
- *
- * TOCTOU / compare-and-delete (F16, F19, F21):
- *   In state 2 we re-classify IMMEDIATELY before any removal. decideRuntimeAction()
- *   returns a RuntimeDecision that encodes BOTH the action AND shouldRemove — so the
- *   identity rule (only remove when the recheck still matches the stale snapshot by pid
- *   AND startedAt) lives in one tested place and the caller cannot drift from it (F21).
- *
- *   The same removeRuntimeIfMatches() helper is shared by the state-2 pre-spawn cleanup
- *   AND the spawn-timeout cleanup (F19), so neither path can accidentally delete a runtime
- *   that belongs to a concurrently-started daemon.
- *
- * Known limitation — concurrent cold-start (deferred per ТЗ §3.3.5, slice 0001):
- *   Two host processes starting with no live daemon in the same narrow window can still
- *   race to spawn — the compare-and-delete re-check narrows the orphan window but does
- *   NOT serialize spawns. Full cross-process file-locking is intentionally deferred to a
- *   future slice. The practical guard is the re-check plus the fact that the host path
- *   only runs for explicit dev:* invocations.
- */
 import { spawn } from 'node:child_process';
 import { closeSync, existsSync, openSync, readFileSync, writeFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { baseUrl, findFreePort, getConfig, healthUrl, isAlive, isHealthy, readRuntime, removeRuntime, } from '../cli/config.js';
 import { killTree, parsePort, tailLines, waitForExit, waitHealthy, } from '../cli/commands/revisium-helpers.js';
 const require = createRequire(import.meta.url);
-/** Default cold-start timeout in ms (120 s — matches the existing waitHealthy default). */
 const DEFAULT_TIMEOUT_MS = 120_000;
-/** Default re-poll budget for the alive-but-unhealthy case (consensus MINOR, round 4). */
 const DEFAULT_RECHECK_MS = 20_000;
-/**
- * Remove runtime.json ONLY if the current file on disk still matches the given snapshot
- * (same pid AND startedAt). Shared by the state-2 pre-spawn path and the spawn-timeout
- * cleanup path (F19 / F21 DRY) so neither can accidentally delete a runtime that belongs
- * to a concurrently-started daemon.
- *
- * If the file has been replaced (different identity) or already removed (null), this is a
- * safe no-op — the file either belongs to another process or was already cleaned up.
- *
- * Exported (@internal) for unit testing; production callers should use only the internal
- * call sites (state-2 pre-spawn cleanup and spawn-timeout cleanup).
- */
 export function removeRuntimeIfMatches(snapshot) {
     const current = readRuntime();
     if (current?.pid === snapshot.pid && current?.startedAt === snapshot.startedAt) {
         removeRuntime();
     }
 }
-/**
- * Decide what action to take in state 2 ("no live daemon" from initial classification)
- * given the stale snapshot and an immediate re-read immediately before any removal.
- *
- * Pure function (no side effects, no I/O) — unit-testable in isolation (F18 / F16 / F21).
- *
- * Compare-and-delete contract (F16, F21):
- *   - shouldRemove is true ONLY when the re-read runtime STILL matches the stale snapshot
- *     (same pid AND startedAt). This prevents deleting a live runtime written concurrently
- *     BETWEEN our initial dead-pid read and this re-check.
- *   - If the re-check shows a DIFFERENT (or new) live pid, the action routes into alive
- *     paths ('return-running' or 'repoll') and shouldRemove is always false.
- *
- * @param stalePidSnapshot - The RuntimeState we observed initially (dead pid), or null.
- * @param recheck          - The result of readRuntime() immediately before removal.
- * @param recheckAlive     - Whether recheck.pid is alive (ignored when recheck is null).
- * @param recheckHealthy   - Whether recheck daemon is healthy (ignored when recheck is null).
- */
 export function decideRuntimeAction(stalePidSnapshot, recheck, recheckAlive, recheckHealthy) {
     if (recheck && recheckAlive) {
-        // A concurrent process wrote a live runtime — do NOT delete or spawn over it.
         if (recheckHealthy)
             return { action: 'return-running', shouldRemove: false };
         return { action: 'repoll', shouldRemove: false };
     }
-    // No live runtime after re-read. Determine whether we may remove the stale file.
     if (stalePidSnapshot !== null) {
-        // Compare-and-delete identity check (F21): only set shouldRemove=true when the
-        // recheck runtime STILL matches the stale snapshot (same pid AND startedAt).
-        // - recheck null → file already cleaned up by another process; skip remove but proceed.
-        // - recheck present but different identity → new stale entry from a different past run;
-        //   our snapshot doesn't own it — leave it for its owner.
         const matchesSnapshot = recheck !== null &&
             recheck.pid === stalePidSnapshot.pid &&
             recheck.startedAt === stalePidSnapshot.startedAt;
@@ -92,21 +26,6 @@ export function decideRuntimeAction(stalePidSnapshot, recheck, recheckAlive, rec
     }
     return { action: 'spawn', shouldRemove: false };
 }
-/**
- * Classify the daemon state given a snapshot of: the runtime file, whether the
- * recorded pid is alive, and whether the daemon responds to health checks.
- *
- * Pure function (no side effects, no I/O) — unit-testable in isolation (F15).
- *
- * - 'healthy'       → pid alive AND health check passed.
- * - 'alive-unhealthy' → pid alive BUT health check failed (never spawn a second daemon).
- * - 'no-live-daemon'  → no runtime.json OR recorded pid is dead (safe to spawn fresh).
- *
- * Note: the alive-unhealthy case intentionally includes a concurrent-start scenario
- * where the runtime was written but the daemon is mid-startup (F11): returning
- * 'alive-unhealthy' rather than 'no-live-daemon' routes callers into the bounded
- * re-poll path instead of unconditionally spawning a second daemon.
- */
 export function classifyRuntimeState(rt, alive, healthy) {
     if (!rt || !alive)
         return 'no-live-daemon';
@@ -114,13 +33,6 @@ export function classifyRuntimeState(rt, alive, healthy) {
         return 'healthy';
     return 'alive-unhealthy';
 }
-/**
- * Handle state 3: alive-but-unhealthy daemon.
- *
- * Performs a bounded re-poll. Returns `{alreadyRunning:true}` if the daemon becomes
- * healthy within `recheckMs`. Throws with an actionable message otherwise — never
- * removes runtime.json, never spawns (would orphan a live process).
- */
 async function handleAliveUnhealthy(rt, recheckMs) {
     const becameHealthy = await waitHealthy(healthUrl(rt.httpPort), recheckMs);
     if (becameHealthy) {
@@ -131,10 +43,6 @@ async function handleAliveUnhealthy(rt, recheckMs) {
     }
     throw new Error(`Revisium (pid ${rt.pid}) is running but unhealthy — run \`revo revisium stop\` and retry`);
 }
-/**
- * Perform the "re-poll" branch of state 2: a concurrent start wrote a live-but-unhealthy
- * runtime — poll for late-up rather than spawning a second daemon.
- */
 async function recheckRepoll(rtRecheck, recheckMs) {
     const becameHealthy = await waitHealthy(healthUrl(rtRecheck.httpPort), recheckMs);
     if (becameHealthy) {
@@ -145,14 +53,6 @@ async function recheckRepoll(rtRecheck, recheckMs) {
     }
     throw new Error(`Revisium (pid ${rtRecheck.pid}) is running but unhealthy — run \`revo revisium stop\` and retry`);
 }
-/**
- * Spawn the standalone daemon (detached + unref'd) and wait for health.
- *
- * Writes extended runtime.json (F8: includes dataDir). On health timeout, kills the
- * spawned child, removes its runtime.json (compare-and-delete — F19), and throws.
- *
- * @returns EnsureResult from the freshly-written runtime.json (F3: pid-proven ports).
- */
 async function startAndWaitForHealth(cfg, timeoutMs) {
     const { httpPort, pgPort, dataDir, logFile, runtimeFile } = cfg;
     const entry = require.resolve('@revisium/standalone/bin/revisium-standalone.js');
@@ -162,14 +62,12 @@ async function startAndWaitForHealth(cfg, timeoutMs) {
     if (!child.pid) {
         throw new Error('Failed to start standalone Revisium: spawn returned no pid');
     }
-    child.unref(); // detached — daemon outlives this process
-    // Capture the exact identity of the runtime WE just wrote (F19).
+    child.unref();
     const spawnStartedAt = new Date().toISOString();
     writeFileSync(runtimeFile, JSON.stringify({ httpPort, pgPort, pid: child.pid, startedAt: spawnStartedAt, dataDir }, null, 2));
     const spawnSnapshot = { pid: child.pid, startedAt: spawnStartedAt };
     const spawnHealthy = await waitHealthy(healthUrl(httpPort), timeoutMs);
     if (!spawnHealthy) {
-        // F19: Only removeRuntime() when the file still identifies OUR child (compare-and-delete).
         const logTail = tailLines(logFile, 20);
         killTree(child.pid, 'SIGTERM');
         await waitForExit(child.pid, 20_000);
@@ -179,24 +77,11 @@ async function startAndWaitForHealth(cfg, timeoutMs) {
         throw new Error(`Revisium did not become healthy on ${baseUrl(httpPort)} within ${timeoutMs / 1000}s` +
             ` — see \`revo revisium logs\`\n${logTail}`);
     }
-    // Re-read the freshly-written runtime.json (F3: pid-proven ports).
     const written = readRuntime();
     if (!written)
         throw new Error('runtime.json disappeared after successful start');
     return { runtime: written, alreadyRunning: false };
 }
-/**
- * Ensure the Revisium standalone daemon is running and healthy.
- *
- * Three-state logic (F7):
- *   - State 1: recorded pid alive + healthy → return immediately (alreadyRunning = true).
- *   - State 2: no runtime.json OR recorded pid is dead → removeRuntime if stale, spawn fresh.
- *   - State 3: recorded pid alive but unhealthy → bounded re-poll (recheckMs), then THROW
- *     (never removeRuntime, never spawn — leaves the live process for `revo revisium stop`).
- *
- * @returns EnsureResult with the pid-proven runtime (fresh or existing).
- * @throws if the daemon is alive-but-unhealthy after re-poll, or if spawn times out.
- */
 export async function ensureRevisium(options = {}) {
     const { timeoutMs = DEFAULT_TIMEOUT_MS, recheckMs = DEFAULT_RECHECK_MS } = options;
     const config = getConfig();
@@ -204,19 +89,12 @@ export async function ensureRevisium(options = {}) {
     const alive = rt ? isAlive(rt.pid) : false;
     const healthy = rt && alive ? await isHealthy(rt.httpPort) : false;
     const stateClass = classifyRuntimeState(rt, alive, healthy);
-    // ── State 1: healthy ──────────────────────────────────────────────────────
     if (stateClass === 'healthy') {
         return { runtime: rt, alreadyRunning: true };
     }
-    // ── State 3: alive but unhealthy ─────────────────────────────────────────
     if (stateClass === 'alive-unhealthy') {
         return handleAliveUnhealthy(rt, recheckMs);
     }
-    // ── State 2: no live daemon ───────────────────────────────────────────────
-    //
-    // F16 / F21 compare-and-delete: re-classify IMMEDIATELY before any removal.
-    // decideRuntimeAction() encodes both the action AND shouldRemove so the identity
-    // check lives in one tested pure function (F21).
     const rtRecheck = readRuntime();
     const recheckAlive = rtRecheck ? isAlive(rtRecheck.pid) : false;
     const recheckHealthy = rtRecheck && recheckAlive ? await isHealthy(rtRecheck.httpPort) : false;
@@ -227,13 +105,9 @@ export async function ensureRevisium(options = {}) {
     if (decision.action === 'repoll') {
         return recheckRepoll(rtRecheck, recheckMs);
     }
-    // action === 'remove-and-spawn' or 'spawn'
-    // F22: removeRuntimeIfMatches re-reads and checks identity AT DELETE TIME.
     if (decision.shouldRemove)
         removeRuntimeIfMatches(rtRecheck);
     const httpPort = await findFreePort(parsePort(options.port, config.preferredPort));
-    // CR5: Two independent findFreePort calls can return the same port when their search
-    // bases overlap. If they collide, re-pick pgPort from httpPort+1 to guarantee distinct ports.
     let pgPort = await findFreePort(parsePort(options.pgPort, config.preferredPgPort));
     if (pgPort === httpPort) {
         pgPort = await findFreePort(httpPort + 1);
@@ -241,21 +115,13 @@ export async function ensureRevisium(options = {}) {
     const dataDir = options.data ?? config.dataDir;
     return startAndWaitForHealth({ httpPort, pgPort, dataDir, logFile: config.logFile, runtimeFile: config.runtimeFile }, timeoutMs);
 }
-/** Maximum valid TCP port number (inclusive). */
 const MAX_TCP_PORT = 65535;
-/**
- * Read the postmaster.pid file to cross-check the pg port from runtime.json (F3).
- * Returns the pg port if found, or null if the file is absent (older standalone layout).
- *
- * CR6: Valid port range is 1–65535 (inclusive). Out-of-range values (e.g. 70000) return null.
- */
 export function readPostmasterPgPort(dataDir) {
     const postmasterPid = `${dataDir}/pgdata/postmaster.pid`;
     if (!existsSync(postmasterPid))
         return null;
     try {
         const lines = readFileSync(postmasterPid, 'utf8').split(/\r?\n/);
-        // Line 4 (index 3) is the pg port according to the PostgreSQL postmaster.pid format.
         const portStr = lines[3]?.trim();
         if (!portStr)
             return null;

package/dist/host/ensure-revisium.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-revisium.js","sourceRoot":"","sources":["../../src/host/ensure-revisium.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,YAAY,EACZ,SAAS,EACT,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,aAAa,GAEd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,GACZ,MAAM,qCAAqC,CAAC;AAE7C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,2FAA2F;AAC3F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAQlC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAyDD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,gBAAqC,EACrC,OAA4B,EAC5B,YAAqB,EACrB,cAAuB;IAEvB,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,8EAA8E;QAC9E,IAAI,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC7E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IAED,iFAAiF;IACjF,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,+EAA+E;QAC/E,6EAA6E;QAC7E,wFAAwF;QACxF,wFAAwF;QACxF,0DAA0D;QAC1D,MAAM,eAAe,GACnB,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;YACpC,OAAO,CAAC,SAAS,KAAK,gBAAgB,CAAC,SAAS,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAuB,EACvB,KAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK;QAAE,OAAO,gBAAgB,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAAgB,EAAE,SAAiB;IACrE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iBAAiB,EAAE,CAAC,GAAG,mEAAmE,CAC3F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,SAAuB,EAAE,SAAiB;IACrE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,CAAC,GAAG,mEAAmE,CAClG,CAAC;AACJ,CAAC;AAUD;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAAC,GAAgB,EAAE,SAAiB;IACtE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAW,CAAC;IAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EACnF,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAChD,CAAC;IACF,SAAS,CAAC,GAAG,CAAC,CAAC;IAEf,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,0CAA0C;IAEzD,iEAAiE;IACjE,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,aAAa,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAClG,CAAC;IAEF,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,2FAA2F;QAC3F,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,CAAC,WAAW,SAAS,GAAG,IAAI,GAAG;YACnF,kCAAkC,OAAO,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAiC,EAAE;IAEnC,MAAM,EAAE,SAAS,GAAG,kBAAkB,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IACnF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5D,6EAA6E;IAC7E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,EAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,4EAA4E;IAC5E,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,oBAAoB,CAAC,EAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,6EAA6E;IAC7E,EAAE;IACF,4EAA4E;IAC5E,iFAAiF;IACjF,iDAAiD;IACjD,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,MAAM,cAAc,GAAG,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,SAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,SAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,2CAA2C;IAC3C,2EAA2E;IAC3E,IAAI,QAAQ,CAAC,YAAY;QAAE,sBAAsB,CAAC,SAAU,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,qFAAqF;IACrF,8FAA8F;IAC9F,IAAI,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC;IAE/C,OAAO,qBAAqB,CAC1B,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EACvF,SAAS,CACV,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,aAAa,GAAG,GAAG,OAAO,wBAAwB,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,qFAAqF;QACrF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"ensure-revisium.js","sourceRoot":"","sources":["../../src/host/ensure-revisium.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,YAAY,EACZ,SAAS,EACT,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,aAAa,GAEd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,SAAS,EACT,WAAW,EACX,WAAW,GACZ,MAAM,qCAAqC,CAAC;AAE7C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAG/C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAgBlC,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAqED,MAAM,UAAU,mBAAmB,CACjC,gBAAqC,EACrC,OAA4B,EAC5B,YAAqB,EACrB,cAAuB;IAEvB,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;QAC5B,IAAI,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC7E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,eAAe,GACnB,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;YACpC,OAAO,CAAC,SAAS,KAAK,gBAAgB,CAAC,SAAS,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAeD,MAAM,UAAU,oBAAoB,CAClC,EAAuB,EACvB,KAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK;QAAE,OAAO,gBAAgB,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAOD,KAAK,UAAU,oBAAoB,CAAC,EAAgB,EAAE,SAAiB;IACrE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iBAAiB,EAAE,CAAC,GAAG,mEAAmE,CAC3F,CAAC;AACJ,CAAC;AAID,KAAK,UAAU,aAAa,CAAC,SAAuB,EAAE,SAAiB;IACrE,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,CAAC,GAAG,mEAAmE,CAClG,CAAC;AACJ,CAAC;AAgBD,KAAK,UAAU,qBAAqB,CAAC,GAAgB,EAAE,SAAiB;IACtE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAW,CAAC;IAC3F,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EACnF,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAChD,CAAC;IACF,SAAS,CAAC,GAAG,CAAC,CAAC;IAEf,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,aAAa,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAClG,CAAC;IAEF,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,CAAC,WAAW,SAAS,GAAG,IAAI,GAAG;YACnF,kCAAkC,OAAO,EAAE,CAC9C,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAiC,EAAE;IAEnC,MAAM,EAAE,SAAS,GAAG,kBAAkB,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IACnF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,EAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;QACrC,OAAO,oBAAoB,CAAC,EAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,MAAM,cAAc,GAAG,SAAS,IAAI,YAAY,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,SAAU,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,aAAa,CAAC,SAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,CAAC,YAAY;QAAE,sBAAsB,CAAC,SAAU,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC;IAE/C,OAAO,qBAAqB,CAC1B,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EACvF,SAAS,CACV,CAAC;AACJ,CAAC;AAGD,MAAM,YAAY,GAAG,KAAK,CAAC;AAM3B,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,aAAa,GAAG,GAAG,OAAO,wBAAwB,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/host/host-runtime.js

@@ -1,23 +1,8 @@
-/**
- * Host daemon runtime file (`host.json`) — the tracked identity of the long-lived Revo/NestJS
- * host daemon, the single DBOS owner (ADR 0006). It lives beside the standalone `runtime.json`
- * in the profile data dir but is a SEPARATE file: the standalone daemon and the host daemon have
- * independent lifecycles, so conflating them would let one's stale pid mask the other's state.
- *
- * Shape is intentionally minimal — only what `ensureHost`/`status`/clients need: the pid to prove
- * liveness, the GraphQL port that is the client transport, and the profile/startedAt for display
- * and compare-and-delete identity. Standalone HTTP/pg ports stay in `runtime.json` (readRuntime).
- */
 import { existsSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getConfig, isAlive, profileDataDir, PROFILES } from '../config.js';
 let cachedCodeVersion;
-/**
- * This build's package version (e.g. `0.1.0-alpha.7`). Recorded in host.json so `ensureHost`/`doctor`
- * can detect a stale daemon running a DIFFERENT build than the current install (slice 139). A `0.0.0`
- * dev checkout does not change across rebuilds, so dev relies on `revo restart`; released builds differ.
- */
 export function hostCodeVersion() {
     if (cachedCodeVersion === undefined) {
         try {
@@ -37,7 +22,6 @@ export function hostRuntimeFile() {
 export function readHostRuntime() {
     return readHostRuntimeAt(hostRuntimeFile());
 }
-/** Read+parse a host.json at an ARBITRARY path (a sibling profile's). Null when absent/corrupt. */
 export function readHostRuntimeAt(file) {
     if (!existsSync(file))
         return null;
@@ -48,12 +32,6 @@ export function readHostRuntimeAt(file) {
         return null;
     }
 }
-/**
- * Live tracked daemon pids across ALL profiles (slice 140 Phase 2). The rogue reaper must protect
- * EVERY profile's daemon tree, not just the active one — else `revo stop --all --profile default`
- * would SIGKILL a live `dev` daemon (and its bridges), aborting that profile's in-flight DBOS work.
- * Band-default dirs only (a custom REVO_DATA_DIR layout isn't enumerable; documented in profileDataDir).
- */
 export function allTrackedHostPids() {
     const pids = [];
     for (const profile of Object.keys(PROFILES)) {
@@ -71,18 +49,12 @@ export function removeHostRuntime() {
     if (existsSync(file))
         rmSync(file);
 }
-/**
- * Remove `host.json` ONLY if the file on disk still matches the snapshot (same pid AND startedAt).
- * A replaced file (a concurrently-started daemon) or an already-removed file is a safe no-op — so
- * cleanup can never delete a runtime that belongs to another daemon (compare-and-delete).
- */
 export function removeHostRuntimeIfMatches(snapshot) {
     const current = readHostRuntime();
     if (current?.pid === snapshot.pid && current?.startedAt === snapshot.startedAt) {
         removeHostRuntime();
     }
 }
-/** True when `host.json` records a daemon whose pid is still alive (liveness, not health). */
 export function isHostRunning() {
     const runtime = readHostRuntime();
     return runtime !== null && isAlive(runtime.pid);

package/dist/host/host-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-runtime.js","sourceRoot":"","sources":["../../src/host/host-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAoB,MAAM,cAAc,CAAC;AAa9F,IAAI,iBAAqC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA0B,CAAC;YAC/E,iBAAiB,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAKD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAkB,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAA6B;IACtE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,iBAAiB,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"host-runtime.js","sourceRoot":"","sources":["../../src/host/host-runtime.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAoB,MAAM,cAAc,CAAC;AAa9F,IAAI,iBAAqC,CAAC;AAK1C,MAAM,UAAU,eAAe;IAC7B,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA0B,CAAC;YAC/E,iBAAiB,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAKD,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;AAC9C,CAAC;AAGD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAMD,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAkB,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAKD,MAAM,UAAU,0BAA0B,CAAC,QAA6B;IACtE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,IAAI,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,iBAAiB,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/host/host.lifecycle.js

@@ -10,22 +10,6 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
-/**
- * HostLifecycle — OnApplicationBootstrap / OnApplicationShutdown.
- *
- * Boot order (§2 of the ТЗ):
- *   1. ensureRevisium() — auto-start if no live daemon; three-state (F7).
- *   2. Pid-proven pg port from the returned runtime (never resolvePorts() — F3).
- *   3. Optional postmaster.pid cross-check (F8).
- *   4. ensurePostgres(provenPgPort) — CREATE DATABASE dbos if absent.
- *   5. dbosService.setConfig(url) + dbosService.launch().
- *
- * Shutdown:
- *   - DBOS.shutdown() only.
- *   - INTENTIONALLY does NOT stop the Revisium daemon (Round 3, human decision):
- *     the daemon is detached+unref'd and is a shared, long-lived process; subsequent
- *     `revo dev:status <id>` invocations must find the same daemon + embedded Postgres.
- */
 import { Inject, Injectable, Optional } from '@nestjs/common';
 import { DbosService } from '../engine/dbos.service.js';
 import { ensureRevisium, readPostmasterPgPort } from './ensure-revisium.js';
@@ -35,8 +19,6 @@ function isMcpStdioHost() {
     return process.env.REVO_MCP_STDIO === '1';
 }
 function keepControlPlaneBootstrapDependency(_api) {
-    // The constructor dependency forces the control-plane provider graph to instantiate
-    // before DBOS.launch(); pipeline registration must precede launch.
 }
 let HostLifecycle = class HostLifecycle {
     dbosService;
@@ -45,11 +27,8 @@ let HostLifecycle = class HostLifecycle {
         keepControlPlaneBootstrapDependency(taskControlPlaneApi);
     }
     async onApplicationBootstrap() {
-        // Step 1: Ensure Revisium daemon is running (auto-start if absent).
         const { runtime } = await ensureRevisium();
-        // Step 2: Pid-proven pg port (F3 — never resolvePorts()).
         let provenPgPort = runtime.pgPort;
-        // Optional cross-check against postmaster.pid (F8).
         if (runtime.dataDir) {
             const pmPort = readPostmasterPgPort(runtime.dataDir);
             if (pmPort !== null && pmPort !== runtime.pgPort) {
@@ -60,19 +39,13 @@ let HostLifecycle = class HostLifecycle {
                 provenPgPort = pmPort;
             }
         }
-        // If runtime.dataDir is absent (older standalone), skip cross-check and rely on rt.pgPort.
-        // Step 3: Ensure the `dbos` database exists.
         await ensurePostgres(provenPgPort);
-        // Step 4+5: Configure + launch DBOS.
         this.dbosService.setConfig(dbosSystemDatabaseUrl(provenPgPort), {
             logLevel: isMcpStdioHost() ? 'warn' : undefined,
         });
         await this.dbosService.launch();
     }
     async onApplicationShutdown() {
-        // Intentional: host does not own the Revisium daemon lifecycle.
-        // Only DBOS.shutdown() runs on exit.
-        // The daemon was spawned detached+unref'd and must outlive the host process.
         await this.dbosService.shutdown();
     }
 };

package/dist/host/host.lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"host.lifecycle.js","sourceRoot":"","sources":["../../src/host/host.lifecycle.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAiD,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yDAAyD,CAAC;AAErG,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,mCAAmC,CAAC,IAA4C;IACvF,oFAAoF;IACpF,mEAAmE;AACrE,CAAC;AAGM,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEgB;IADxC,YACwC,WAAwB,EAG9D,mBAAgD;QAHV,gBAAW,GAAX,WAAW,CAAa;QAK9D,mCAAmC,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,oEAAoE;QACpE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAE3C,0DAA0D;QAC1D,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAElC,oDAAoD;QACpD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,MAAM,oCAAoC,MAAM,IAAI;oBAChG,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QACD,2FAA2F;QAE3F,6CAA6C;QAC7C,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QAEnC,qCAAqC;QACrC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE;YAC9D,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,gEAAgE;QAChE,qCAAqC;QACrC,6EAA6E;QAC7E,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF,CAAA;AAhDY,aAAa;IADzB,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,WAAW,CAAC,CAAA;IACnB,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;qCAFgB,WAAW;QAGxC,0BAA0B;GALvC,aAAa,CAgDzB"}
+{"version":3,"file":"host.lifecycle.js","sourceRoot":"","sources":["../../src/host/host.lifecycle.ts"],"names":[],"mappings":";;;;;;;;;;;;AAcA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAiD,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACrF,OAAO,EAAE,0BAA0B,EAAE,MAAM,yDAAyD,CAAC;AAErG,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,mCAAmC,CAAC,IAA4C;AACzF,CAAC;AAGM,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEgB;IADxC,YACwC,WAAwB,EAG9D,mBAAgD;QAHV,gBAAW,GAAX,WAAW,CAAa;QAK9D,mCAAmC,CAAC,mBAAmB,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAE3C,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAElC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,MAAM,oCAAoC,MAAM,IAAI;oBAChG,6DAA6D,CAChE,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,YAAY,GAAG,MAAM,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QAEnC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE;YAC9D,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChD,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF,CAAA;AAvCY,aAAa;IADzB,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,WAAW,CAAC,CAAA;IACnB,WAAA,QAAQ,EAAE,CAAA;IACV,WAAA,MAAM,CAAC,0BAA0B,CAAC,CAAA;qCAFgB,WAAW;QAGxC,0BAA0B;GALvC,aAAa,CAuCzB"}

package/dist/host/queue-ownership.js

@@ -1,47 +1,8 @@
-/**
- * Daemon singleton gate (slice 139, hardened slice 140). Exactly ONE host daemon per profile may own —
- * and therefore poll — the `dev-tasks` WorkflowQueue. Ownership is a connection-scoped Postgres
- * ADVISORY LOCK:
- *
- *   - Advisory locks are DATABASE-scoped, NOT cluster-global (PG: "Advisory locks are local to each
- *     database"). The gate works only because every contending daemon connects to the SAME fixed
- *     maintenance `postgres` database, so they all contend in one shared per-database lock namespace.
- *     We use `postgres` because it exists right after `ensureRevisium` — before the per-profile `dbos`
- *     database is created — letting the daemon decide "am I the owner?" BEFORE DBOS.launch() and before
- *     the queue worker starts polling. INVARIANT: all contenders MUST take this lock on the identical
- *     database. NEVER probe this lock key from another database (e.g. `dbos`) expecting a conflict — it
- *     would silently NOT conflict and could mint a second owner.
- *   - The key is a FULL 64-bit value derived from the lock name via md5 (`('x'||substr(md5(name),1,16))
- *     ::bit(64)::bigint`), not `hashtext(...)::bigint` — `hashtext` is only 32 bits, so distinct
- *     profile names could hash-collide and wrongly block a different profile's daemon. md5's 64 bits
- *     make a cross-profile collision negligible.
- *   - The lock is held on a DEDICATED, long-lived connection for the daemon's whole life. It
- *     auto-releases when that connection ends — on graceful shutdown OR on a hard crash — so a dead
- *     owner never blocks a successor. (Verified by experiment: a second connection's
- *     `pg_try_advisory_lock` returns false while held, and true again once the holder disconnects.)
- *
- * A daemon that does NOT win the lock lost a concurrent cold-start race (e.g. several `revo mcp`
- * bridges spawning at once) and exits; ensureHost then attaches to the winner via host.json. This
- * closes the "concurrent cold-start spawns multiple daemons" hole that let stale daemons accumulate.
- * It does NOT, however, coordinate LEGACY hosts that predate the lock — those are detected by the
- * `pg_stat_activity` census (queue-poller-census.ts) and evicted by `revo doctor`/`stop` (slice 140).
- */
 import pg from 'pg';
-/**
- * SQL expression that turns the text lock name (bound as `$1`) into a full 64-bit advisory-lock key.
- * `md5` yields 128 bits of hex; the first 16 hex chars are reinterpreted as a signed bigint. Shared by
- * lock + unlock so they always target the identical key.
- */
 const LOCK_KEY_EXPR = `('x' || substr(md5($1), 1, 16))::bit(64)::bigint`;
-/** Stable advisory-lock identity for a profile's dev-tasks queue ownership. */
 export function ownershipLockName(profile) {
     return `revo:dev-tasks:${profile}`;
 }
-/**
- * Try to become the sole dev-tasks owner for `profile`. Returns `{owned:false}` (and closes its probe
- * connection) when another live daemon already holds it. When `{owned:true}`, the returned connection
- * stays open holding the lock until `release()` (or process death) frees it.
- */
 export async function acquireQueueOwnership(profile, pgPort, deps = {}) {
     const url = `postgresql://revisium:password@localhost:${pgPort}/postgres`;
     const name = ownershipLockName(profile);
@@ -54,14 +15,11 @@ export async function acquireQueueOwnership(profile, pgPort, deps = {}) {
         await client.end().catch(() => undefined);
         return { owned: false, release: async () => undefined };
     }
-    // Keep `client` reachable (via this closure) so its socket — and the lock — is held for the daemon's
-    // life. The OS frees the connection (and thus the lock) on crash; release() does it gracefully.
     const release = async () => {
         try {
             await client.query(`SELECT pg_advisory_unlock(${LOCK_KEY_EXPR})`, [name]);
         }
         catch {
-            // best-effort; ending the connection releases the lock regardless
         }
         await client.end().catch(() => undefined);
     };

package/dist/host/queue-ownership.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue-ownership.js","sourceRoot":"","sources":["../../src/host/queue-ownership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;;;GAIG;AACH,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAqBzE,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,kBAAkB,OAAO,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,MAAc,EACd,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,4CAA4C,MAAM,WAAW,CAAC;IAC1E,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAA+B,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,aAAa,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,qGAAqG;IACrG,gGAAgG;IAChG,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"queue-ownership.js","sourceRoot":"","sources":["../../src/host/queue-ownership.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,MAAM,IAAI,CAAC;AAKpB,MAAM,aAAa,GAAG,kDAAkD,CAAC;AAsBzE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,kBAAkB,OAAO,EAAE,CAAC;AACrC,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,MAAc,EACd,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,4CAA4C,MAAM,WAAW,CAAC;IAC1E,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAA+B,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,+BAA+B,aAAa,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,6BAA6B,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC"}

package/dist/host/queue-poller-census.js

@@ -1,39 +1,12 @@
-/**
- * Queue-poller census (slice 140, Part A Layer 3 — detection half, pure).
- *
- * The advisory lock (queue-ownership.ts) only coordinates daemons that CALL it. A legacy/old-version
- * host that predates the lock — or a `revo mcp` from before the thin-bridge era that is itself a full
- * DBOS host — still connects to the `dbos` database and polls the `dev-tasks` queue, ignoring the lock.
- * It has no inbound listening port, so the port-based `revo stop`/`doctor` cannot see it. The ONE
- * control plane shared with code we do not control is the database itself: every DBOS system-DB
- * connection is stamped `application_name = dbos_transact_<executorID>_<appVersion>` (visible in
- * `pg_stat_activity`). A connection whose executor id is NOT this profile's pinned owner is a rogue.
- *
- * This module is the pure classifier (unit-tested); the live `pg_stat_activity` query lives in the IO
- * layer (lifecycle.ts). Classification keys on the executor-id segment ONLY: `application_name` is
- * capped at 63 bytes by Postgres, so a long suffix can truncate the appVersion — we therefore never
- * trust the parsed version for identity (the owner's true version comes from host.json elsewhere).
- */
 const STAMP_PREFIX = 'dbos_transact_';
-/**
- * Parse the executor id out of `dbos_transact_<executorID>_<appVersion>` — the segment between the
- * fixed prefix and the LAST underscore (the appVersion separator). Returns null when the string is not
- * a DBOS stamp. Robust to a truncated/empty appVersion segment (we only need the executor id); pinned
- * revo executor ids (`revo-<profile>`) and `local` contain no underscore, so the last-underscore split
- * is unambiguous for the identities we classify.
- */
 export function parseExecutorId(applicationName) {
     if (!applicationName.startsWith(STAMP_PREFIX))
         return null;
-    const rest = applicationName.slice(STAMP_PREFIX.length); // <executorID>_<appVersion>
+    const rest = applicationName.slice(STAMP_PREFIX.length);
     const sep = rest.lastIndexOf('_');
     const executorId = sep < 0 ? rest : rest.slice(0, sep);
     return executorId.length > 0 ? executorId : null;
 }
-/**
- * Foreign DBOS pollers among `backends` — any connection whose parsed executor id differs from the
- * profile's pinned owner. Report-only data; the caller decides how to surface or evict it.
- */
 export function classifyQueuePollerRogues(backends, ownerExecutorId) {
     const rogues = [];
     for (const b of backends) {

package/dist/host/queue-poller-census.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue-poller-census.js","sourceRoot":"","sources":["../../src/host/queue-poller-census.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAmBtC;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,eAAuB;IACrD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAsC,EACtC,eAAuB;IAEvB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,eAAe;YAAE,SAAS;QACpE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"queue-poller-census.js","sourceRoot":"","sources":["../../src/host/queue-poller-census.ts"],"names":[],"mappings":"AAeA,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAwBtC,MAAM,UAAU,eAAe,CAAC,eAAuB;IACrD,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAID,MAAM,UAAU,yBAAyB,CACvC,QAAsC,EACtC,eAAuB;IAEvB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,eAAe;YAAE,SAAS;QACpE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/http/graphql-host.module.js

@@ -8,9 +8,6 @@ import { Module } from '@nestjs/common';
 import { GraphqlApiModule } from '../api/graphql-api/graphql-api.module.js';
 import { HostLifecycle } from '../host/host.lifecycle.js';
 import { TaskControlPlaneModule } from '../task-control-plane/task-control-plane.module.js';
-// The daemon serves BOTH front doors (ADR 0006): GraphQL (frontend) + MCP (agents), over one host
-// process that is the single DBOS owner. The MCP server is built directly from TaskControlPlaneApi-
-// Service (see daemon.ts) — no separate McpModule in the graph.
 let GraphqlHostModule = class GraphqlHostModule {
 };
 GraphqlHostModule = __decorate([

package/dist/http/graphql-host.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"graphql-host.module.js","sourceRoot":"","sources":["../../src/http/graphql-host.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAE5F,kGAAkG;AAClG,oGAAoG;AACpG,gEAAgE;AAKzD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAAG,CAAA;AAApB,iBAAiB;IAJ7B,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QACnD,SAAS,EAAE,CAAC,aAAa,CAAC;KAC3B,CAAC;GACW,iBAAiB,CAAG"}
+{"version":3,"file":"graphql-host.module.js","sourceRoot":"","sources":["../../src/http/graphql-host.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAMrF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;CAAG,CAAA;AAApB,iBAAiB;IAJ7B,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;QACnD,SAAS,EAAE,CAAC,aAAa,CAAC;KAC3B,CAAC;GACW,iBAAiB,CAAG"}

package/dist/mcp/mcp-capabilities.js

@@ -8,6 +8,9 @@ export const MCP_TOOL_NAMES = [
     'create_run',
     'start_run',
     'resume_run',
+    'get_run_attention',
+    'get_run_status',
+    'watch_run_changes',
     'cancel_run',
     'list_runs',
     'get_run',
@@ -19,9 +22,6 @@ export const MCP_TOOL_NAMES = [
     'tail_agent_log',
     'read_agent_output_events',
     'get_run_digest',
-    'wait_for_run',
-    'wait_for_any_gate',
-    'watch_runs',
     'list_inbox',
     'get_inbox_item',
     'get_pending_decisions',
@@ -44,12 +44,30 @@ export const MCP_INSTRUCTIONS = `Revo is a local-first software-development task
 
 Use these tools to manage tasks end-to-end from your coding agent:
 - create and start runs;
-- inspect run status, events, attempts, agent activity, bounded logs, and digests;
+- resume terminal recoverable preflight blocks with resume_run after the target repo is repaired;
+- observe run state and attention requirements through the intent-named observation tools;
+- inspect bounded digests, events, attempts, agent activity, and logs only when needed;
 - resolve human inbox gates and questions;
 - inspect installed playbooks, roles, and pipelines;
 - inspect PR readiness and actionable review feedback before resuming work;
 - validate repository context before starting live work.
 
+task_monitoring_loop — default agent algorithm for monitoring a run:
+1. Call get_run_attention(runId): answers "what currently requires attention?" with requiresAttention, nextAction, and suggestedTools.
+2. nextAction "wait" → sleep/backoff, re-call get_run_attention.
+3. nextAction "ask_human" → inspect and resolve the inbox item with approve_gate/reject_gate/answer_question.
+4. nextAction "inspect_digest" → call get_run_digest once; nextAction "inspect_log" → call get_agent_log once.
+5. nextAction "done" → stop. nextAction "start_run" → call start_run.
+Use get_run_status for neutral dashboard or status checks that must not prescribe actions.
+watch_run_changes is only for UI/change-stream/long-poll consumers that explicitly need cursor-based transition delivery — not for normal task monitoring.
+
+Diagnostic tools (call only when required):
+- get_run_digest when nextAction is "inspect_digest".
+- get_agent_log with offsetBytes/limitBytes or tailBytes when nextAction is "inspect_log" or explicit debugging requires logs.
+- Avoid get_run(includeEvents:true) and raw agent logs in polling loops.
+
 This MCP server is local stdio only and does not expose generic Revisium table CRUD.
-Use product-level tools instead of writing raw rows.`;
+Use product-level tools instead of writing raw rows.
+
+create_run requires an explicit pipelineId; omit it and no run is created — you get candidatePipelines plus a best-effort wouldAutoRoute to choose from (no silent auto-routing). Use list_pipelines/simulate_route to pick.`;
 //# sourceMappingURL=mcp-capabilities.js.map

package/dist/mcp/mcp-capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-capabilities.js","sourceRoot":"","sources":["../../src/mcp/mcp-capabilities.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;IACrB,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,cAAc;IACd,mBAAmB;IACnB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;qDAWqB,CAAC"}
+{"version":3,"file":"mcp-capabilities.js","sourceRoot":"","sources":["../../src/mcp/mcp-capabilities.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;IACrB,wBAAwB;IACxB,aAAa;IACb,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,mBAAmB;IACnB,gBAAgB;IAChB,mBAAmB;IACnB,YAAY;IACZ,WAAW;IACX,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,oBAAoB;IACpB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;IAChB,0BAA0B;IAC1B,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6NA6B6L,CAAC"}