@runweave/server-linux-x64 0.1.19 → 0.1.21

package/payload/backend/activity-sqlite-worker.cjs

@@ -12017,27 +12017,49 @@ function assertWindowsPrivatePath(file) {
   if (process.platform !== "win32") return;
   const script = `
 $ErrorActionPreference = 'Stop'
+try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
 $acl = if ([IO.Directory]::Exists($env:RUNWEAVE_PRIVATE_PATH)) {
   [IO.Directory]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH)
 } else { [IO.File]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH) }
 $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
 $allowed = @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')
-if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { throw 'owner' }
+if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { [Console]::Write('owner'); exit 0 }
 foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier])) {
-  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { throw 'access' }
+  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { [Console]::Write('access'); exit 0 }
+}
+[Console]::Write('private')
+} catch {
+  [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+  const startedAt = performance.now();
+  let result;
   try {
-    (0, import_node_child_process.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+    result = (0, import_node_child_process.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
       env: { ...process.env, RUNWEAVE_PRIVATE_PATH: file },
-      stdio: "ignore",
+      stdio: ["ignore", "pipe", "pipe"],
+      encoding: "utf8",
+      maxBuffer: 64 * 1024,
       timeout: 1e4,
       windowsHide: true
-    });
-  } catch {
-    throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file]);
+    }).trim();
+  } catch (cause) {
+    const error = cause;
+    throw new ConfigurationError(
+      error.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+      [
+        file,
+        `exit=${error.status ?? "none"}`,
+        `signal=${error.signal ?? "none"}`,
+        `code=${error.code ?? "none"}`,
+        `elapsedMs=${Math.round(performance.now() - startedAt)}`
+      ]
+    );
   }
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
 }
 
 // packages/config-node/src/context.ts

package/payload/backend/build-info.json

@@ -1,8 +1,8 @@
 {
   "version": "0.1.0",
-  "buildId": "20261111T131758068Z-c9ecf70f",
-  "sourceRevision": "c9ecf70f133fab80d90c6621f3a071d11d9d09b0",
+  "buildId": "20261113T062359739Z-29c9c1a8",
+  "sourceRevision": "29c9c1a8763c9546f77448d7cd7115e5b319f4a1",
   "sourceDirty": false,
-  "builtAt": "2026-11-11T13:17:58.068Z",
-  "contentSha256": "d6f9ec551eed0650856e63d15d2186974fe7eeb9fc2dd4464f1c3263638470c8"
+  "builtAt": "2026-11-13T06:23:59.739Z",
+  "contentSha256": "ba7f394359ade82a0cd500fc579139993af3c0dc7c6fc3893c34371feb9a559a"
 }

package/payload/backend/dev-resources/control.cjs

@@ -8483,27 +8483,49 @@ function assertWindowsPrivatePath(file) {
   if (process.platform !== "win32") return;
   const script = `
 $ErrorActionPreference = 'Stop'
+try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
 $acl = if ([IO.Directory]::Exists($env:RUNWEAVE_PRIVATE_PATH)) {
   [IO.Directory]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH)
 } else { [IO.File]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH) }
 $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
 $allowed = @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')
-if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { throw 'owner' }
+if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { [Console]::Write('owner'); exit 0 }
 foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier])) {
-  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { throw 'access' }
+  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { [Console]::Write('access'); exit 0 }
+}
+[Console]::Write('private')
+} catch {
+  [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+  const startedAt = performance.now();
+  let result;
   try {
-    (0, import_node_child_process2.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+    result = (0, import_node_child_process2.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
       env: { ...process.env, RUNWEAVE_PRIVATE_PATH: file },
-      stdio: "ignore",
+      stdio: ["ignore", "pipe", "pipe"],
+      encoding: "utf8",
+      maxBuffer: 64 * 1024,
       timeout: 1e4,
       windowsHide: true
-    });
-  } catch {
-    throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file]);
+    }).trim();
+  } catch (cause) {
+    const error = cause;
+    throw new ConfigurationError(
+      error.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+      [
+        file,
+        `exit=${error.status ?? "none"}`,
+        `signal=${error.signal ?? "none"}`,
+        `code=${error.code ?? "none"}`,
+        `elapsedMs=${Math.round(performance.now() - startedAt)}`
+      ]
+    );
   }
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
 }
 
 // packages/config-node/src/private-file.ts

package/payload/backend/index.cjs

@@ -1,4 +1,4 @@
-/* runweave:build-info */var __RUNWEAVE_BUILD_INFO__={"version":"0.1.0","buildId":"20261111T131758068Z-c9ecf70f","sourceRevision":"c9ecf70f133fab80d90c6621f3a071d11d9d09b0","sourceDirty":false,"builtAt":"2026-11-11T13:17:58.068Z","contentSha256":"d6f9ec551eed0650856e63d15d2186974fe7eeb9fc2dd4464f1c3263638470c8"};
+/* runweave:build-info */var __RUNWEAVE_BUILD_INFO__={"version":"0.1.0","buildId":"20261113T062359739Z-29c9c1a8","sourceRevision":"29c9c1a8763c9546f77448d7cd7115e5b319f4a1","sourceDirty":false,"builtAt":"2026-11-13T06:23:59.739Z","contentSha256":"ba7f394359ade82a0cd500fc579139993af3c0dc7c6fc3893c34371feb9a559a"};
 const __IMPORT_META_URL__ = require('url').pathToFileURL(__filename).href;
 "use strict";
 var __create = Object.create;
@@ -63498,27 +63498,49 @@ function assertWindowsPrivatePath(file) {
   if (process.platform !== "win32") return;
   const script = `
 $ErrorActionPreference = 'Stop'
+try {
 # Use .NET directly: a parent pwsh may export a PSModulePath incompatible with Windows PowerShell.
 $acl = if ([IO.Directory]::Exists($env:RUNWEAVE_PRIVATE_PATH)) {
   [IO.Directory]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH)
 } else { [IO.File]::GetAccessControl($env:RUNWEAVE_PRIVATE_PATH) }
 $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
 $allowed = @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')
-if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { throw 'owner' }
+if ($acl.GetOwner([Security.Principal.SecurityIdentifier]).Value -notin $allowed) { [Console]::Write('owner'); exit 0 }
 foreach ($rule in $acl.GetAccessRules($true, $true, [Security.Principal.SecurityIdentifier])) {
-  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { throw 'access' }
+  if ($rule.AccessControlType -eq 'Allow' -and $rule.IdentityReference.Value -notin $allowed) { [Console]::Write('access'); exit 0 }
+}
+[Console]::Write('private')
+} catch {
+  [Console]::Write('check-failed:' + $_.Exception.GetType().FullName + ':' + $_.Exception.HResult)
 }
 `;
+  const startedAt = performance.now();
+  let result;
   try {
-    (0, import_node_child_process.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
+    result = (0, import_node_child_process.execFileSync)("powershell.exe", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], {
       env: { ...process.env, RUNWEAVE_PRIVATE_PATH: file },
-      stdio: "ignore",
+      stdio: ["ignore", "pipe", "pipe"],
+      encoding: "utf8",
+      maxBuffer: 64 * 1024,
       timeout: 1e4,
       windowsHide: true
-    });
-  } catch {
-    throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file]);
+    }).trim();
+  } catch (cause) {
+    const error2 = cause;
+    throw new ConfigurationError(
+      error2.code === "ETIMEDOUT" ? "CONFIG_WINDOWS_ACL_CHECK_TIMEOUT" : "CONFIG_WINDOWS_ACL_CHECK_FAILED",
+      [
+        file,
+        `exit=${error2.status ?? "none"}`,
+        `signal=${error2.signal ?? "none"}`,
+        `code=${error2.code ?? "none"}`,
+        `elapsedMs=${Math.round(performance.now() - startedAt)}`
+      ]
+    );
   }
+  if (result === "owner" || result === "access") throw new ConfigurationError("CONFIG_WINDOWS_ACL_NOT_PRIVATE", [file, result]);
+  if (/^check-failed:[A-Za-z0-9_.]+:-?\d+$/.test(result)) throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, result]);
+  if (result !== "private") throw new ConfigurationError("CONFIG_WINDOWS_ACL_CHECK_FAILED", [file, "invalid-result"]);
 }
 
 // packages/config-node/src/private-file.ts
@@ -72000,12 +72022,20 @@ function readHost(scope) {
 }
 
 // packages/pty-host/src/transport.ts
+var HostTransportError = class extends Error {
+  constructor(code, bufferedBytes, limitBytes = 4 * 1024 * 1024) {
+    super(code);
+    this.code = code;
+    this.bufferedBytes = bufferedBytes;
+    this.limitBytes = limitBytes;
+  }
+};
 function receiveJsonLines(socket, onMessage) {
   let source2 = "";
   socket.setEncoding("utf8");
   socket.on("data", (data) => {
     source2 += data;
-    if (Buffer.byteLength(source2) > 4 * 1024 * 1024) return socket.destroy(new Error("HOST_MESSAGE_TOO_LARGE"));
+    if (Buffer.byteLength(source2) > 4 * 1024 * 1024) return socket.destroy(new HostTransportError("HOST_MESSAGE_TOO_LARGE", Buffer.byteLength(source2)));
     let end;
     while ((end = source2.indexOf("\n")) !== -1) {
       const line = source2.slice(0, end);
@@ -72022,35 +72052,76 @@ function receiveJsonLines(socket, onMessage) {
 function sendJson(socket, message2) {
   if (socket.destroyed) return false;
   if (socket.writableLength > 4 * 1024 * 1024) {
-    socket.destroy(new Error("HOST_OUTPUT_GAP"));
+    socket.destroy(new HostTransportError("HOST_OUTPUT_GAP", socket.writableLength));
     return false;
   }
   socket.write(JSON.stringify(message2) + "\n");
   return true;
 }
 
+// packages/pty-host/src/diagnostics.ts
+function hostErrorCode(error2) {
+  if (!(error2 instanceof Error)) return "HOST_OPERATION_FAILED";
+  const code = error2.code;
+  if (code && /^(?:E[A-Z0-9_]+|HOST_[A-Z0-9_]+)$/.test(code)) return code;
+  return /^HOST_[A-Z0-9_]+$/.test(error2.message) ? error2.message : "HOST_OPERATION_FAILED";
+}
+var actions = /* @__PURE__ */ new Set([
+  "hello",
+  "claimWriter",
+  "listSessions",
+  "createSession",
+  "setUpstreams",
+  "freeze",
+  "stop",
+  "writeInput",
+  "getInputOperation",
+  "getSnapshot",
+  "readOutput",
+  "resize",
+  "signal",
+  "closeSession",
+  "attachSession"
+]);
+function diagnosticAction(action) {
+  return actions.has(action) ? action : "unknown";
+}
+function writeHostDiagnostic(diagnostic) {
+  process.stderr.write(JSON.stringify({ timestamp: (/* @__PURE__ */ new Date()).toISOString(), ...diagnostic }) + "\n");
+}
+function reportHostDiagnostic(sink, diagnostic) {
+  try {
+    sink(diagnostic);
+  } catch {
+  }
+}
+
 // packages/pty-host/src/client.ts
 var PtyHostClient = class _PtyHostClient {
-  descriptor;
-  generation = 0;
-  events = /* @__PURE__ */ new Set();
-  disconnected = /* @__PURE__ */ new Set();
-  pending = /* @__PURE__ */ new Map();
-  socket;
-  token;
-  connected = false;
-  constructor(scope) {
+  constructor(scope, diagnostic) {
+    this.diagnostic = diagnostic;
     const discovery = readHost(scope);
     this.descriptor = discovery.descriptor;
     this.token = discovery.token;
     this.socket = (0, import_node_net2.createConnection)(this.descriptor.endpoint);
-    this.socket.on("error", () => {
+    this.socket.on("error", (error2) => {
+      this.disconnectError = error2;
     });
     this.socket.on("close", () => {
       this.connected = false;
-      for (const request2 of this.pending.values()) request2.reject(new Error("HOST_CONNECTION_LOST"));
+      const error2 = this.disconnectError ?? new Error("HOST_CONNECTION_LOST");
+      reportHostDiagnostic(this.diagnostic, {
+        event: "pty-host.connection.closed",
+        hostInstanceId: this.descriptor.hostInstanceId,
+        connectionId: this.connectionId,
+        code: hostErrorCode(error2),
+        pendingRequests: this.pending.size,
+        writableBytes: this.socket.writableLength,
+        ...error2 instanceof HostTransportError ? { bufferedBytes: error2.bufferedBytes, limitBytes: error2.limitBytes } : {}
+      });
+      for (const request2 of this.pending.values()) request2.reject(error2);
       this.pending.clear();
-      for (const listener of this.disconnected) listener();
+      for (const listener of this.disconnected) listener(error2);
     });
     receiveJsonLines(this.socket, (value) => {
       const message2 = value;
@@ -72062,13 +72133,28 @@ var PtyHostClient = class _PtyHostClient {
       } else if (message2.type) for (const listener of this.events) listener(value);
     });
   }
-  static async connect(scope, ownerId2, expectedGeneration, expectedHostInstanceId) {
-    const client = new _PtyHostClient(scope);
+  descriptor;
+  generation = 0;
+  events = /* @__PURE__ */ new Set();
+  disconnected = /* @__PURE__ */ new Set();
+  pending = /* @__PURE__ */ new Map();
+  socket;
+  token;
+  connected = false;
+  connectionId = (0, import_node_crypto15.randomUUID)();
+  disconnectError;
+  get isConnected() {
+    return this.connected && !this.socket.destroyed;
+  }
+  static async connect(scope, ownerId2, expectedGeneration, expectedHostInstanceId, diagnostic = writeHostDiagnostic) {
+    const client = new _PtyHostClient(scope, diagnostic);
     try {
       await new Promise((resolve, reject) => {
         const timer = setTimeout(() => {
-          client.socket.destroy();
-          reject(new Error("HOST_CONNECT_TIMEOUT"));
+          const error2 = new Error("HOST_CONNECT_TIMEOUT");
+          client.disconnectError = error2;
+          client.socket.destroy(error2);
+          reject(error2);
         }, 5e3);
         client.socket.once("error", (error2) => {
           clearTimeout(timer);
@@ -72091,8 +72177,9 @@ var PtyHostClient = class _PtyHostClient {
   /** Aborting only releases this caller's wait; it does not cancel or replay Host operations. */
   request(action, body2 = {}, signal) {
     if (signal?.aborted) return Promise.reject(new Error("HOST_REQUEST_ABORTED"));
-    if (!this.connected) return Promise.reject(new Error("HOST_CONNECTION_LOST"));
+    if (!this.isConnected) return Promise.reject(this.socket.errored ?? this.disconnectError ?? new Error("HOST_CONNECTION_LOST"));
     const requestId = (0, import_node_crypto15.randomUUID)();
+    const startedAt = performance.now();
     return new Promise((resolve, reject) => {
       const cleanup = () => {
         clearTimeout(timer);
@@ -72105,6 +72192,17 @@ var PtyHostClient = class _PtyHostClient {
           resolve(value);
         },
         reject: (error2) => {
+          reportHostDiagnostic(this.diagnostic, {
+            event: "pty-host.request.failed",
+            hostInstanceId: this.descriptor.hostInstanceId,
+            connectionId: this.connectionId,
+            requestId,
+            action: diagnosticAction(action),
+            code: hostErrorCode(error2),
+            elapsedMs: Math.round(performance.now() - startedAt),
+            pendingRequests: this.pending.size,
+            writableBytes: this.socket.writableLength
+          });
           cleanup();
           reject(error2);
         }
@@ -72115,7 +72213,7 @@ var PtyHostClient = class _PtyHostClient {
       signal?.addEventListener("abort", abort, { once: true });
       try {
         if (!sendJson(this.socket, { requestId, token: this.token, hostInstanceId: this.descriptor.hostInstanceId, action, body: body2 })) {
-          request2.reject(new Error("HOST_CONNECTION_LOST"));
+          request2.reject(this.socket.errored ?? new Error("HOST_CONNECTION_LOST"));
         }
       } catch (error2) {
         request2.reject(error2);
@@ -72123,11 +72221,13 @@ var PtyHostClient = class _PtyHostClient {
     });
   }
   close() {
+    this.disconnectError ??= new Error("HOST_CLIENT_CLOSED");
     this.socket.destroy();
   }
 };
 
 // backend/src/terminal/runtime/pty-host-client.ts
+var hostLogger = logger.child({ component: "pty-host" });
 var ownerId = (0, import_node_crypto16.randomUUID)();
 var connection;
 var generation;
@@ -72139,7 +72239,13 @@ function usesPtyHost() {
 }
 async function getPtyHost() {
   if (stopped) throw new Error("HOST_CLIENT_STOPPED");
-  connection ??= PtyHostClient.connect(configuration().context, ownerId, generation, hostInstanceId).then(async (client) => {
+  connection ??= PtyHostClient.connect(
+    configuration().context,
+    ownerId,
+    generation,
+    hostInstanceId,
+    ({ event, ...fields2 }) => hostLogger.warn(event, fields2)
+  ).then(async (client) => {
     generation = client.generation;
     hostInstanceId = client.descriptor.hostInstanceId;
     client.disconnected.add(() => {
@@ -72174,7 +72280,7 @@ async function createHostedPty(options) {
   const dataListeners = /* @__PURE__ */ new Set();
   const frameListeners = /* @__PURE__ */ new Set();
   const exitListeners = /* @__PURE__ */ new Set();
-  const disconnectListeners = /* @__PURE__ */ new Set();
+  const failureListeners = /* @__PURE__ */ new Set();
   const resizeListeners = /* @__PURE__ */ new Set();
   const pending2 = [];
   let exited;
@@ -72187,6 +72293,8 @@ async function createHostedPty(options) {
     for (const listener of frameListeners) listener(frame);
   };
   let initializing = true;
+  let disposed = false;
+  let failed = false;
   const early = [];
   const receive = (event) => {
     if (event.terminalSessionId !== options.terminalSessionId) return;
@@ -72194,7 +72302,7 @@ async function createHostedPty(options) {
       early.push(event);
       return;
     }
-    if (event.type === "launch" && options.onLaunch) void options.onLaunch(event.launch).catch(disconnected);
+    if (event.type === "launch" && options.onLaunch) void options.onLaunch(event.launch).catch((error2) => notifyFailure("launch", error2));
     if (event.type === "output") emitFrame(event);
     if (event.type === "resize") {
       grid = { cols: event.cols, rows: event.rows };
@@ -72205,9 +72313,12 @@ async function createHostedPty(options) {
       for (const listener of exitListeners) listener({ exitCode: exited });
     }
   };
-  const disconnected = () => {
-    for (const listener of disconnectListeners) listener();
+  const fail3 = (failure3) => {
+    if (disposed || failed) return;
+    failed = true;
+    for (const listener of failureListeners) listener(failure3);
   };
+  const disconnected = (error2) => fail3({ kind: "host-disconnected", code: hostErrorCode(error2) });
   client.events.add(receive);
   client.disconnected.add(disconnected);
   let attached;
@@ -72254,7 +72365,19 @@ async function createHostedPty(options) {
     });
     return job;
   };
-  const notifyFailure = () => disconnected();
+  const notifyFailure = (action, error2) => {
+    if (disposed || failed) return;
+    const code = hostErrorCode(error2);
+    hostLogger.warn("terminal.host.operation.failed", {
+      terminalSessionId: options.terminalSessionId,
+      hostInstanceId: client.descriptor.hostInstanceId,
+      action,
+      code,
+      pendingInputs,
+      pendingBytes
+    });
+    fail3({ kind: client.isConnected ? "host-operation-failed" : "host-disconnected", action, code });
+  };
   return {
     pid: attached.session.pid,
     onData(listener) {
@@ -72265,15 +72388,16 @@ async function createHostedPty(options) {
       if (exited !== void 0) listener({ exitCode: exited });
     },
     write(data) {
-      void writeSteps([{ type: "text", data }], void 0, true).catch(notifyFailure);
+      void writeSteps([{ type: "text", data }], void 0, true).catch((error2) => notifyFailure("writeInput", error2));
     },
     resize(cols, rows) {
-      void client.request("resize", { ...target2, cols, rows }).catch(notifyFailure);
+      void client.request("resize", { ...target2, cols, rows }).catch((error2) => notifyFailure("resize", error2));
     },
     signal(signal) {
-      void client.request("signal", { ...target2, signal }).catch(notifyFailure);
+      void client.request("signal", { ...target2, signal }).catch((error2) => notifyFailure("signal", error2));
     },
     dispose() {
+      disposed = true;
       client.events.delete(receive);
       client.disconnected.delete(disconnected);
     },
@@ -72289,8 +72413,8 @@ async function createHostedPty(options) {
         frameListeners.add(listener);
         for (const frame of pending2.splice(0)) listener(frame);
       },
-      onDisconnect(listener) {
-        disconnectListeners.add(listener);
+      onFailure(listener) {
+        failureListeners.add(listener);
       },
       onResize(listener) {
         resizeListeners.add(listener);
@@ -114183,10 +114307,19 @@ function getLiveTerminalScrollback(scrollback) {
 }
 
 // backend/src/ws/terminal-server-connection-helpers.ts
+var TERMINAL_RECOVERY_CLOSE_REASONS = {
+  "mirror-limit": "Terminal mirror output limit",
+  "host-disconnected": "Terminal host connection lost",
+  "host-operation-failed": "Terminal host operation failed"
+};
 var TMUX_INITIAL_REPAINT_SETTLE_MS = 50;
 var TMUX_METADATA_SYNC_DELAY_MS = 100;
 var TERMINAL_WS_MAX_PENDING_BYTES = 4 * 1024 * 1024;
 var terminalWsLogger = logger.child({ component: "terminal-ws" });
+var socketContexts = /* @__PURE__ */ new WeakMap();
+function registerTerminalSocketContext(socket, terminalSessionId) {
+  socketContexts.set(socket, { terminalSessionId });
+}
 function delay7(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -114227,14 +114360,25 @@ function sendEvent(socket, event) {
   }
   const payload = JSON.stringify(event);
   if (socket.bufferedAmount + Buffer.byteLength(payload, "utf8") > TERMINAL_WS_MAX_PENDING_BYTES) {
-    closeSlowTerminalSocket(socket);
+    closeSlowTerminalSocket(socket, "Terminal output recovery required", {
+      trigger: "send-buffer-limit",
+      payloadBytes: Buffer.byteLength(payload, "utf8"),
+      limitBytes: TERMINAL_WS_MAX_PENDING_BYTES,
+      messageType: event.type
+    });
     return false;
   }
   socket.send(payload);
   return true;
 }
-function closeSlowTerminalSocket(socket, reason = "Terminal output recovery required") {
+function closeSlowTerminalSocket(socket, reason = "Terminal output recovery required", details = {}) {
   if (socket.readyState !== 1) return;
+  terminalWsLogger.warn("terminal.output.recovery.required", {
+    ...socketContexts.get(socket),
+    reason,
+    bufferedBytes: socket.bufferedAmount,
+    ...details
+  });
   socket.close(1013, reason);
   socket.emit("terminal-output-stopped");
   const timer = setTimeout(() => socket.terminate(), 1e3);
@@ -114724,6 +114868,7 @@ function attachTerminalWebSocketServer(upgradeRouter, terminalSessionManager, ru
       return;
     }
     const { terminalSessionId } = handshake;
+    registerTerminalSocketContext(socket, terminalSessionId);
     const connectedAt = Date.now();
     const session = terminalSessionManager.getSession(terminalSessionId);
     const params = new URL(request2.url ?? "/", "http://localhost").searchParams;
@@ -114848,7 +114993,7 @@ function attachTerminalWebSocketServer(upgradeRouter, terminalSessionManager, ru
       try {
         activeRuntime.resize(cols, rows);
       } catch {
-        closeSlowTerminalSocket(socket);
+        closeSlowTerminalSocket(socket, "Terminal initial resize failed");
         runtimeRegistry.retainIdleRuntime(runtimeId);
         return;
       }
@@ -114979,7 +115124,10 @@ function attachTerminalWebSocketServer(upgradeRouter, terminalSessionManager, ru
     unsubscribe = runtimeRegistry.subscribe(runtimeId, {
       onOutputFrame: (frame) => outputRecovery?.onFrame(frame),
       onResize: (cols2, rows2) => outputRecovery?.onResize(cols2, rows2),
-      onRecoveryError: () => closeSlowTerminalSocket(socket, "Terminal mirror output limit"),
+      onRecoveryError: (failure3) => {
+        terminalWsLogger5.warn("terminal.runtime.recovery.failed", { terminalSessionId, ...failure3 });
+        closeSlowTerminalSocket(socket, TERMINAL_RECOVERY_CLOSE_REASONS[failure3.kind]);
+      },
       onData(data) {
         runtimeOutputSequence += 1;
         logTerminalPerf("terminal.runtime.output", {
@@ -115023,7 +115171,7 @@ function attachTerminalWebSocketServer(upgradeRouter, terminalSessionManager, ru
           pendingInitialOutput += metadata.output;
           if (Buffer.byteLength(pendingInitialOutput, "utf8") > 512 * 1024) {
             pendingInitialOutput = "";
-            closeSlowTerminalSocket(socket);
+            closeSlowTerminalSocket(socket, "Terminal initial output queue exceeded", { trigger: "initial-output-limit", limitBytes: 512 * 1024 });
           }
           return;
         }
@@ -124604,7 +124752,7 @@ var ExperienceLearningAnalysis = class {
         triggers,
         applicability,
         avoid,
-        actions,
+        actions: actions2,
         verification,
         state
       }) => ({
@@ -124613,7 +124761,7 @@ var ExperienceLearningAnalysis = class {
         triggers,
         applicability,
         avoid,
-        actions,
+        actions: actions2,
         verification,
         state
       })
@@ -126703,8 +126851,14 @@ var TerminalOutputScreen = class _TerminalOutputScreen {
     if (this.disposed) return;
     this.pendingBytes += frame.range.toOffset - frame.range.fromOffset;
     if (this.pendingBytes > RESUME_MAX_BYTES || this.queue.length >= 8192) {
+      const failure3 = {
+        code: this.pendingBytes > RESUME_MAX_BYTES ? "HOST_MIRROR_PENDING_LIMIT" : "HOST_MIRROR_QUEUE_LIMIT",
+        bufferedBytes: this.pendingBytes,
+        limitBytes: RESUME_MAX_BYTES,
+        queuedOperations: this.queue.length
+      };
       this.dispose();
-      this.onFailure();
+      this.onFailure(failure3);
       return;
     }
     this.queue.push({ frame });
@@ -126809,8 +126963,14 @@ var TerminalOutputScreen = class _TerminalOutputScreen {
         this.writing = false;
         this.partialControlBytes = screenParserIsIdle(this.terminal) ? 0 : this.partialControlBytes + frame.range.toOffset - frame.range.fromOffset;
         if (this.partialControlBytes > RESUME_MAX_BYTES) {
+          const failure3 = {
+            code: "HOST_MIRROR_CONTROL_LIMIT",
+            bufferedBytes: this.partialControlBytes,
+            limitBytes: RESUME_MAX_BYTES,
+            queuedOperations: this.queue.length
+          };
           this.dispose();
-          this.onFailure();
+          this.onFailure(failure3);
           return;
         }
         this.completeSnapshot?.();
@@ -126923,9 +127083,10 @@ var TerminalRuntimeRegistry = class _TerminalRuntimeRegistry {
     if (entry.outputRecovery && !runtime.hosted) {
       entry.outputScreen = new TerminalOutputScreen(
         entry.outputRecovery.cursor,
-        () => {
+        (failure3) => {
+          logger.warn("terminal.mirror.failed", { terminalSessionId, ...failure3 });
           for (const subscriber of entry.subscribers)
-            subscriber.onRecoveryError?.();
+            subscriber.onRecoveryError?.({ kind: "mirror-limit", code: failure3.code });
           void this.disposeRuntime(runtimeId);
         }
       );
@@ -126957,8 +127118,8 @@ var TerminalRuntimeRegistry = class _TerminalRuntimeRegistry {
       runtime.hosted.onFrame((frame) => {
         for (const subscriber of entry.subscribers) subscriber.onOutputFrame?.(frame);
       });
-      runtime.hosted.onDisconnect(() => {
-        for (const subscriber of entry.subscribers) subscriber.onRecoveryError?.();
+      runtime.hosted.onFailure((failure3) => {
+        for (const subscriber of entry.subscribers) subscriber.onRecoveryError?.(failure3);
         void this.disposeRuntime(runtimeId);
       });
     }