@scotthuang/agent-knock-knock 0.14.17 → 0.16.0

package/dist/src/native-store-authority-runtime.js

@@ -0,0 +1,77 @@
+import fs from "node:fs";
+import path from "node:path";
+import { readJsonFileNoFollow } from "./durable-json-file.js";
+import { nativeAuthorityStore, nativeAuthorityThreadIds, canonicalAuthorityStore } from "./native-store-authority.js";
+import { associateTerminalEndpointEvidence } from "./terminal-control-ref.js";
+import { createTerminalDispatchRepositoryCliAdapter } from "./terminal-dispatch-repository-cli-adapter.js";
+import { captureStoreOwnerIdentity } from "./store-owner-identity.js";
+import { registerStoreOwnerIdentity } from "./store-owner-registry.js";
+import { withStoreWriterLease } from "./store.js";
+import { cliEnv } from "./cli-runtime-context.js";
+import { recordValue } from "./value-guards.js";
+function matchingLedgers(input) {
+    const directory = path.join(input.runtimeDir, "terminal-dispatch");
+    let names;
+    try {
+        names = fs.readdirSync(directory);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return [];
+        throw error;
+    }
+    return names.filter(name => /^terminal-dispatch-[0-9a-f]+\.json$/u.test(name)).flatMap(name => {
+        const ledger = recordValue(readJsonFileNoFollow(path.join(directory, name), "terminal authority ledger"));
+        if (!ledger)
+            throw new Error("terminal authority ledger is unreadable; refusing native mutation");
+        return nativeAuthorityThreadIds(ledger).includes(input.nativeThreadId.toLowerCase()) ? [ledger] : [];
+    });
+}
+/** Native backend access must not bypass an existing managed terminal authority. */
+export function assertNativeRuntimeStoreAuthority(input) {
+    for (const ledger of matchingLedgers(input)) {
+        const transfer = recordValue(ledger.store_authority_transfer);
+        if (nativeAuthorityStore(ledger) !== canonicalAuthorityStore(input.storeDir) || transfer && transfer.phase !== "committed") {
+            throw new Error("native thread has conflicting or transferring Store authority; refresh AKK list and use " +
+                "transfer_store_authority (agent_knock_knock_reconcile_binding operation=transfer_store_authority); no native input sent");
+        }
+    }
+}
+function ledgerControl(ledger) {
+    const value = recordValue(ledger.terminal_control);
+    if (!value || !["herdr", "tmux"].includes(String(value.kind)))
+        throw new Error("unverified authority terminal control");
+    const common = { target: String(value.target), session: String(value.session ?? ""),
+        socketPath: typeof value.socket_path === "string" ? value.socket_path : undefined,
+        panePid: Number(value.pane_pid), capabilities: [] };
+    const control = value.kind === "herdr" ? { ...common, kind: "herdr",
+        workspaceId: String(value.workspace_id), tabId: String(value.tab_id), paneId: String(value.pane_id),
+        terminalId: String(value.terminal_id), sessionDir: typeof value.session_dir === "string" ? value.session_dir : undefined }
+        : { ...common, kind: "tmux", window: 0, pane: 0 };
+    return ledger.terminal_endpoint ? associateTerminalEndpointEvidence(control, ledger.terminal_endpoint) : control;
+}
+export async function withNativeRuntimeStoreAuthority(input, action) {
+    const repository = createTerminalDispatchRepositoryCliAdapter();
+    if (path.resolve(input.runtimeDir) !== path.resolve(repository.runtimeDir()))
+        throw new Error("native authority runtime namespace changed");
+    const controls = [...new Map(matchingLedgers(input).map(ledger => {
+            const control = ledgerControl(ledger);
+            return [repository.runtimeKey(control), control];
+        })).entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, control]) => control);
+    const releases = [];
+    try {
+        for (const control of controls)
+            releases.push(repository.acquire(input.storeDir, control));
+        assertNativeRuntimeStoreAuthority(input);
+        if (controls.length)
+            withStoreWriterLease(input.storeDir, () => {
+                registerStoreOwnerIdentity(captureStoreOwnerIdentity(input.storeDir, cliEnv()));
+            });
+        return await action();
+    }
+    finally {
+        for (const release of releases.reverse())
+            release();
+    }
+}
+//# sourceMappingURL=native-store-authority-runtime.js.map

package/dist/src/native-store-authority-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-runtime.js","sourceRoot":"","sources":["../../src/native-store-authority-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtH,OAAO,EAAE,iCAAiC,EAA2B,MAAM,2BAA2B,CAAC;AACvG,OAAO,EAAE,0CAA0C,EAAE,MAAM,+CAA+C,CAAC;AAC3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,SAAS,eAAe,CAAC,KAA8B;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACnE,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAC1C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACjG,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC5F,MAAM,MAAM,GAAG,WAAW,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QAClG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iCAAiC,CAAC,KAA8B;IAC9E,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC3H,MAAM,IAAI,KAAK,CAAC,0FAA0F;gBACxG,yHAAyH,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B;IACpD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACjF,UAAU,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACjF,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,OAAO,GAAuB,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO;QACrF,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACnG,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE;QAC1H,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACpD,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,iCAAiC,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAI,KAA8B,EACrF,MAAwB;IACxB,MAAM,UAAU,GAAG,0CAA0C,EAAE,CAAC;IAChE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC5I,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAU,CAAC;QAC5D,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3F,iCAAiC,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM;YAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC7D,0BAA0B,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE;YAAE,OAAO,EAAE,CAAC;IAAC,CAAC;AACpE,CAAC"}

package/dist/src/native-store-authority-transfer.d.ts

@@ -0,0 +1,31 @@
+import type { TerminalControlRef } from "./terminal-control-ref.js";
+import type { TerminalDispatchLedgerDocument as Ledger } from "./terminal-dispatch-ledger-codec.js";
+import type { TerminalDispatchRepositoryCliAdapter } from "./terminal-dispatch-repository-cli-adapter.js";
+export interface NativeStoreAuthorityTransferRequest {
+    storeDir: string;
+    terminalControl: TerminalControlRef;
+    expectedAuthorityToken?: string;
+    maintenanceAcknowledgement?: boolean;
+    automatic?: boolean;
+}
+export declare function completedNativeStoreAuthorityReceipt(input: NativeStoreAuthorityTransferRequest, ledger?: Ledger): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+} | undefined;
+/** Caller holds the shared terminal lock. Store leases are deliberately sequential. */
+export declare function transferNativeStoreAuthorityWhileLocked(input: NativeStoreAuthorityTransferRequest, repository: TerminalDispatchRepositoryCliAdapter): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+};
+export declare function transferNativeStoreAuthority(input: NativeStoreAuthorityTransferRequest, repository: TerminalDispatchRepositoryCliAdapter): {
+    transferred: true;
+    transfer_id: string;
+    session_id: string;
+    store_dir: string;
+};
+/** Called after the terminal lock and before the destination Store lease. */
+export declare function recoverNativeStoreAuthorityWhileLocked(input: Omit<NativeStoreAuthorityTransferRequest, "automatic">, repository: TerminalDispatchRepositoryCliAdapter): void;

package/dist/src/native-store-authority-transfer.js

@@ -0,0 +1,172 @@
+import { randomUUID } from "node:crypto";
+import { cliEnv } from "./cli-runtime-context.js";
+import { canonicalJson } from "./canonical-json.js";
+import { loadManagedSession, saveManagedSession, listManagedSessions, tryLoadManagedSession } from "./session-store.js";
+import { withStoreWriterLease } from "./store.js";
+import { captureStoreOwnerIdentity } from "./store-owner-identity.js";
+import { readStoreOwnerInventory, registerStoreOwnerIdentity, probeStoreOwnerInventory } from "./store-owner-registry.js";
+import { canonicalAuthorityStore, inspectNativeStoreAuthority, nativeAuthorityWorkSettled } from "./native-store-authority.js";
+import { recordValue } from "./value-guards.js";
+function readJournal(ledger) {
+    const journal = recordValue(ledger.store_authority_transfer);
+    if (!journal || journal.phase === "committed")
+        return undefined;
+    if (journal.version !== 1 || !journal.source_session || !journal.target_session ||
+        typeof journal.source_store_dir !== "string" || typeof journal.target_store_dir !== "string" ||
+        typeof journal.transfer_id !== "string" || !["prepared", "source_retired", "target_created"].includes(String(journal.phase))) {
+        throw new Error("Store authority transfer journal is invalid; preserve evidence and repair it before retrying");
+    }
+    return journal;
+}
+function verifySourceOwner(journal) {
+    const inventory = readStoreOwnerInventory(journal.source_store_dir);
+    if (inventory.fingerprint !== journal.source_inventory)
+        throw new Error("source Store owner registrations changed during transfer; no input sent");
+    if (journal.legacy_acknowledged && inventory.reason === "owner_inventory_absent")
+        return;
+    if (probeStoreOwnerInventory(inventory).state !== "dead")
+        throw new Error("source Store has an active or unverifiable owner; transfer refused; no input sent");
+}
+function prepareJournal(input, ledger) {
+    const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+    if (!inspection.transferEligible || !inspection.session || !inspection.sourceStoreDir) {
+        throw new Error(`Store authority transfer refused: ${inspection.reason ?? inspection.state}; no input sent`);
+    }
+    if (input.automatic ? !inspection.automaticEligible : inspection.fingerprint !== input.expectedAuthorityToken) {
+        throw new Error("Store authority changed or is not automatically reclaimable; refresh AKK list; no input sent");
+    }
+    if (inspection.ownerStatus === "legacy" && input.maintenanceAcknowledgement !== true) {
+        throw new Error("legacy Store owner is unknown; stop all associated Hosts/writers, then explicitly supply maintenance_acknowledgement=true");
+    }
+    const source = inspection.session;
+    const now = new Date().toISOString();
+    const id = randomUUID();
+    const target = { ...source, revision: undefined, status: "bound",
+        binding: { ...source.binding, binding_id: randomUUID(), generation: source.binding.generation + 1,
+            bound_at: now, last_verified_at: now },
+        updated_at: now, detached_at: undefined, quarantine_reason: undefined,
+        authority_transfer: undefined,
+        authority_received: { transfer_id: id, source_store_dir: inspection.sourceStoreDir, received_at: now } };
+    return { version: 1, transfer_id: id, phase: "prepared", source_store_dir: inspection.sourceStoreDir,
+        target_store_dir: canonicalAuthorityStore(input.storeDir),
+        source_inventory: readStoreOwnerInventory(inspection.sourceStoreDir).fingerprint,
+        source_session: source, target_session: JSON.parse(JSON.stringify(target)),
+        generation: (inspection.generation ?? 1) + 1,
+        automatic: input.automatic === true, legacy_acknowledged: inspection.ownerStatus === "legacy",
+        started_at: now, initial_authority_token: input.expectedAuthorityToken };
+}
+export function completedNativeStoreAuthorityReceipt(input, ledger) {
+    const journal = recordValue(ledger?.store_authority_transfer);
+    if (!journal || journal.phase !== "committed" || journal.target_store_dir !== canonicalAuthorityStore(input.storeDir) ||
+        (input.automatic ? journal.automatic !== true : !input.expectedAuthorityToken || input.expectedAuthorityToken !== journal.initial_authority_token))
+        return undefined;
+    return { transferred: true, transfer_id: String(journal.transfer_id),
+        session_id: String(recordValue(journal.target_session)?.session_id), store_dir: String(journal.target_store_dir) };
+}
+function targetAvailable(journal) {
+    const existing = listManagedSessions(journal.target_store_dir);
+    for (const session of existing) {
+        if ((session.session_id === journal.target_session.session_id ||
+            session.binding?.native_thread_id === journal.target_session.binding?.native_thread_id) &&
+            session.authority_received?.transfer_id !== journal.transfer_id) {
+            throw new Error("destination Store already has a competing Session; transfer refused");
+        }
+    }
+}
+/** Caller holds the shared terminal lock. Store leases are deliberately sequential. */
+export function transferNativeStoreAuthorityWhileLocked(input, repository) {
+    let ledger = repository.load(input.terminalControl);
+    if (!ledger || !repository.matchesControl(ledger, input.terminalControl)) {
+        throw new Error("Store authority terminal incarnation changed; refresh AKK list; no input sent");
+    }
+    const completed = completedNativeStoreAuthorityReceipt(input, ledger);
+    if (completed)
+        return completed;
+    let journal = readJournal(ledger);
+    if (journal) {
+        const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+        if (canonicalAuthorityStore(input.storeDir) !== journal.target_store_dir ||
+            (input.automatic ? !journal.automatic : inspection.fingerprint !== input.expectedAuthorityToken)) {
+            throw new Error("unfinished Store authority transfer belongs to another destination or snapshot");
+        }
+    }
+    else
+        journal = prepareJournal(input, ledger);
+    const transaction = journal;
+    const persist = (phase) => {
+        transaction.phase = phase;
+        ledger = { ...ledger, store_authority_transfer: { ...transaction } };
+        repository.save(input.terminalControl, ledger, { authorityTransfer: true });
+    };
+    // Upgrade/check destination before installing a durable fence. Once prepared,
+    // every crash point is resumed by this journal, without any terminal input.
+    withStoreWriterLease(transaction.target_store_dir, () => {
+        targetAvailable(transaction);
+        const owner = captureStoreOwnerIdentity(transaction.target_store_dir, cliEnv());
+        registerStoreOwnerIdentity(owner);
+        if (!readStoreOwnerInventory(transaction.target_store_dir).complete)
+            throw new Error("destination owner inventory is incomplete; source authority unchanged");
+        transaction.target_owner ??= owner;
+    });
+    withStoreWriterLease(transaction.source_store_dir, () => {
+        verifySourceOwner(transaction);
+        const source = loadManagedSession(transaction.source_store_dir, transaction.source_session.session_id);
+        if (source.authority_transfer?.transfer_id === transaction.transfer_id)
+            return;
+        if (canonicalJson(source) !== canonicalJson(transaction.source_session) ||
+            !nativeAuthorityWorkSettled(transaction.source_store_dir, source)) {
+            throw new Error("source Session/work changed during authority transfer; no input sent");
+        }
+        persist("prepared");
+        saveManagedSession(transaction.source_store_dir, { ...source, status: "quarantined",
+            quarantine_reason: "native Store authority transferred", updated_at: transaction.started_at,
+            authority_transfer: { transfer_id: transaction.transfer_id, target_store_dir: transaction.target_store_dir,
+                transferred_at: transaction.started_at } }, { expectedRevision: source.revision });
+        persist("source_retired");
+    });
+    withStoreWriterLease(transaction.target_store_dir, () => {
+        verifySourceOwner(transaction);
+        targetAvailable(transaction);
+        const present = tryLoadManagedSession(transaction.target_store_dir, transaction.target_session.session_id);
+        const { revision: _revision, ...presentBody } = present ?? {};
+        if (present && canonicalJson(presentBody) !== canonicalJson(transaction.target_session)) {
+            throw new Error("destination Session changed before authority transfer commit; preserve the journal and inspect the destination");
+        }
+        if (!present)
+            saveManagedSession(transaction.target_store_dir, transaction.target_session, { expectedRevision: null });
+        persist("target_created");
+        const owner = captureStoreOwnerIdentity(transaction.target_store_dir, cliEnv());
+        registerStoreOwnerIdentity(owner);
+        const session = loadManagedSession(transaction.target_store_dir, transaction.target_session.session_id);
+        // No old Turn is adopted or replayed. Its callback/history stay in source.
+        ledger = { status: "resolved", store_dir: transaction.target_store_dir,
+            native_thread_id: session.binding.native_thread_id, session_id: session.session_id,
+            binding: session.binding, resolved_at: new Date().toISOString(),
+            reason: "native Store authority transferred without terminal input",
+            store_authority: { version: 1, generation: transaction.generation,
+                store_dir: transaction.target_store_dir, owner },
+            store_authority_transfer: { ...transaction, phase: "committed" } };
+        repository.save(input.terminalControl, ledger, { authorityTransfer: true });
+    });
+    return { transferred: true, transfer_id: transaction.transfer_id,
+        session_id: transaction.target_session.session_id, store_dir: transaction.target_store_dir };
+}
+export function transferNativeStoreAuthority(input, repository) {
+    const release = repository.acquire(input.storeDir, input.terminalControl);
+    try {
+        return transferNativeStoreAuthorityWhileLocked(input, repository);
+    }
+    finally {
+        release();
+    }
+}
+/** Called after the terminal lock and before the destination Store lease. */
+export function recoverNativeStoreAuthorityWhileLocked(input, repository) {
+    const ledger = repository.load(input.terminalControl);
+    const inspection = inspectNativeStoreAuthority({ ...input, ledger });
+    const journal = ledger && readJournal(ledger);
+    if (inspection.automaticEligible || journal?.automatic && journal.target_store_dir === canonicalAuthorityStore(input.storeDir)) {
+        transferNativeStoreAuthorityWhileLocked({ ...input, automatic: true }, repository);
+    }
+}
+//# sourceMappingURL=native-store-authority-transfer.js.map

package/dist/src/native-store-authority-transfer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-transfer.js","sourceRoot":"","sources":["../../src/native-store-authority-transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAA2B,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1H,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAI/H,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA2BhD,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,cAAc;QAC7E,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,gBAAgB,KAAK,QAAQ;QAC5F,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/H,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,OAAqC,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,WAAW,KAAK,OAAO,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,mBAAmB,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB;QAAE,OAAO;IACzF,IAAI,wBAAwB,CAAC,SAAS,CAAC,CAAC,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;AACjK,CAAC;AAED,SAAS,cAAc,CAAC,KAA0C,EAAE,MAAc;IAChF,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,iBAAiB,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,sBAAsB,EAAE,CAAC;QAC9G,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,UAAU,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,0BAA0B,KAAK,IAAI,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,2HAA2H,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,MAAM,GAAwB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO;QACnF,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAQ,CAAC,UAAU,GAAG,CAAC;YACjG,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;QACxC,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS;QACrE,kBAAkB,EAAE,SAAS;QAC7B,kBAAkB,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC;IAC3G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,CAAC,cAAc;QAClG,gBAAgB,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzD,gBAAgB,EAAE,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,WAAW;QAChF,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAwB;QACjG,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;QAC5C,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,WAAW,KAAK,QAAQ;QAC7F,UAAU,EAAE,GAAG,EAAE,uBAAuB,EAAE,KAAK,CAAC,sBAAsB,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,KAA0C,EAAE,MAAe;IAC9G,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,IAAI,OAAO,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnH,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,KAAK,CAAC,sBAAsB,KAAK,OAAO,CAAC,uBAAuB,CAAC;QAAE,OAAO,SAAS,CAAC;IACvK,OAAO,EAAE,WAAW,EAAE,IAAa,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAC3E,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,cAAc,CAAC,UAAU;YAC3D,OAAO,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC;YACvF,OAAO,CAAC,kBAAkB,EAAE,WAAW,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uCAAuC,CACrD,KAA0C,EAAE,UAAgD;IAE5F,IAAI,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,SAAS,GAAG,oCAAoC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtE,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,gBAAgB;YACtE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;;QAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,KAA+B,EAAE,EAAE;QAClD,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC;QAC1B,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,wBAAwB,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,8EAA8E;IAC9E,4EAA4E;IAC5E,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC9J,WAAW,CAAC,YAAY,KAAK,KAAK,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,kBAAkB,EAAE,WAAW,KAAK,WAAW,CAAC,WAAW;YAAE,OAAO;QAC/E,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC;YACrE,CAAC,0BAA0B,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,CAAC,UAAU,CAAC,CAAC;QACpB,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,aAAa;YACjF,iBAAiB,EAAE,oCAAoC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU;YAC3F,kBAAkB,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;gBACxG,cAAc,EAAE,WAAW,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAS,EAAE,CAAC,CAAC;QACxF,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACtD,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,eAAe,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3G,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAC9D,IAAI,OAAO,IAAI,aAAa,CAAC,WAAW,CAAC,KAAK,aAAa,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC;QACpI,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,yBAAyB,CAAC,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,0BAA0B,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACxG,2EAA2E;QAC3E,MAAM,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,gBAAgB;YACpE,gBAAgB,EAAE,OAAO,CAAC,OAAQ,CAAC,gBAAgB,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;YACnF,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC/D,MAAM,EAAE,2DAA2D;YACnE,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU;gBAC/D,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE;YAClD,wBAAwB,EAAE,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;QACrE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW;QAC9D,UAAU,EAAE,WAAW,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,gBAAgB,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA0C,EACrF,UAAgD;IAChD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1E,IAAI,CAAC;QAAC,OAAO,uCAAuC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAAC,CAAC;YAClE,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sCAAsC,CAAC,KAA6D,EAClH,UAAgD;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,iBAAiB,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/H,uCAAuC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/src/native-store-authority-watch.d.ts

@@ -0,0 +1,9 @@
+import { type TerminalControlRef } from "./terminal-control-ref.js";
+/** Register the creating Host atomically with the Watch's durable authority. */
+export declare function withNativeAuthorityWatchOwner<T>(storeDir: string, create: () => T): T;
+/** Read only: a transfer must retain outstanding Watch observation/callback ownership. */
+export declare function hasOutstandingNativeAuthorityWatch(input: {
+    storeDir: string;
+    terminalControl: TerminalControlRef;
+    nativeThreadId?: string;
+}): boolean;

package/dist/src/native-store-authority-watch.js

@@ -0,0 +1,43 @@
+import { terminalControlEvidenceMatches } from "./terminal-control-ref.js";
+import { listTerminalWatches } from "./terminal-watch-store.js";
+import { cliEnv } from "./cli-runtime-context.js";
+import { captureStoreOwnerIdentity } from "./store-owner-identity.js";
+import { registerStoreOwnerIdentity } from "./store-owner-registry.js";
+import { withStoreWriterLease } from "./store.js";
+/** Register the creating Host atomically with the Watch's durable authority. */
+export function withNativeAuthorityWatchOwner(storeDir, create) {
+    return withStoreWriterLease(storeDir, () => {
+        registerStoreOwnerIdentity(captureStoreOwnerIdentity(storeDir, cliEnv()));
+        return create();
+    });
+}
+function watchNativeThreadId(watch) {
+    const anchor = watch.anchor;
+    if (anchor.schema === "agent-knock-knock/claude-human-started-active-task-anchor")
+        return anchor.session_id;
+    if (anchor.schema === "agent-knock-knock/claude-user-explicit-fallback-watch-anchor")
+        return anchor.transcript_anchor.session_id;
+    if (anchor.schema === "agent-knock-knock/codex-human-started-active-task-anchor" ||
+        anchor.schema === "agent-knock-knock/codex-paginated-task-anchor")
+        return anchor.native_thread_id;
+    if (anchor.schema !== "agent-knock-knock/codex-user-explicit-fallback-watch-anchor")
+        return undefined;
+    const checkpoint = watch.observation_checkpoint;
+    if ("schema" in checkpoint && checkpoint.schema === "agent-knock-knock/codex-user-explicit-fallback-watch-checkpoint") {
+        const accepted = checkpoint.accepted_identity?.native_thread_id;
+        if (accepted)
+            return accepted;
+    }
+    return anchor.acceptance_anchor.version === 1 ? anchor.acceptance_anchor.native_thread_id : undefined;
+}
+/** Read only: a transfer must retain outstanding Watch observation/callback ownership. */
+export function hasOutstandingNativeAuthorityWatch(input) {
+    return listTerminalWatches(input.storeDir).some(watch => {
+        const nativeThreadId = watchNativeThreadId(watch);
+        const related = nativeThreadId && input.nativeThreadId
+            ? nativeThreadId.toLowerCase() === input.nativeThreadId.toLowerCase()
+            : terminalControlEvidenceMatches(watch.terminal.terminal_endpoint, input.terminalControl);
+        return related && (watch.status === "active" || watch.notification_outbox.some(notification => notification.status !== "delivered" && notification.status !== "superseded"));
+    });
+}
+//# sourceMappingURL=native-store-authority-watch.js.map

package/dist/src/native-store-authority-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority-watch.js","sourceRoot":"","sources":["../../src/native-store-authority-watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAA2B,MAAM,2BAA2B,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAsB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,gFAAgF;AAChF,MAAM,UAAU,6BAA6B,CAAI,QAAgB,EAAE,MAAe;IAChF,OAAO,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE;QACzC,0BAA0B,CAAC,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,2DAA2D;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAC5G,IAAI,MAAM,CAAC,MAAM,KAAK,8DAA8D;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC;IACjI,IAAI,MAAM,CAAC,MAAM,KAAK,0DAA0D;QAC9E,MAAM,CAAC,MAAM,KAAK,+CAA+C;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC;IACpG,IAAI,MAAM,CAAC,MAAM,KAAK,6DAA6D;QAAE,OAAO,SAAS,CAAC;IACtG,MAAM,UAAU,GAAG,KAAK,CAAC,sBAAsB,CAAC;IAChD,IAAI,QAAQ,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,iEAAiE,EAAE,CAAC;QACtH,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;QAChE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,iBAAiB,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AACxG,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kCAAkC,CAAC,KAIlD;IACC,OAAO,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACtD,MAAM,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,cAAc,IAAI,KAAK,CAAC,cAAc;YACpD,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE;YACrE,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5F,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAC5F,YAAY,CAAC,MAAM,KAAK,WAAW,IAAI,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/native-store-authority.d.ts

@@ -0,0 +1,29 @@
+import type { ManagedSessionState } from "./managed-session.js";
+import { type TerminalControlRef } from "./terminal-control-ref.js";
+import type { TerminalDispatchLedgerDocument } from "./terminal-dispatch-ledger-codec.js";
+export interface NativeStoreAuthorityInspection {
+    state: "none" | "current" | "conflict" | "transferring";
+    reason?: string;
+    sourceStoreDir?: string;
+    sessionId?: string;
+    generation?: number;
+    fingerprint?: string;
+    transferEligible: boolean;
+    automaticEligible: boolean;
+    ownerStatus: "alive" | "dead" | "unknown" | "legacy";
+    session?: ManagedSessionState;
+}
+export declare function canonicalAuthorityStore(storeDir: string): string;
+export declare function nativeAuthorityStore(ledger: TerminalDispatchLedgerDocument): string | undefined;
+export declare function nativeAuthorityThreadIds(ledger: TerminalDispatchLedgerDocument): string[];
+/** A resolved dispatch releases the Turn, not this native thread's Store authority. */
+export declare function nativeAuthorityWorkSettled(storeDir: string, session: ManagedSessionState): boolean;
+export declare function nativeAuthorityFingerprint(value: unknown): string;
+/** Shared, read-only authority predicate for List, Status and mutation preflight. */
+export declare function inspectNativeStoreAuthority(input: {
+    ledger?: TerminalDispatchLedgerDocument;
+    terminalControl: TerminalControlRef;
+    nativeThreadId?: string;
+    storeDir: string;
+}): NativeStoreAuthorityInspection;
+export declare function assertNativeStoreAuthorityCurrent(input: Parameters<typeof inspectNativeStoreAuthority>[0]): void;

package/dist/src/native-store-authority.js

@@ -0,0 +1,181 @@
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { canonicalJson } from "./canonical-json.js";
+import { listDeferredForegroundTransfers } from "./deferred-foreground-transfer.js";
+import { isFinalDeferredForegroundTransferStatus } from "./deferred-foreground-transfer-policy.js";
+import { listManagedSessions, listNativeThreadTransitions } from "./session-store.js";
+import { listConversations, pathsForConversationDir, storeManifestPath } from "./store.js";
+import { readJsonFileNoFollow } from "./durable-json-file.js";
+import { hasOutstandingNativeAuthorityWatch } from "./native-store-authority-watch.js";
+import { isSessionSendBlockingStatus, sessionIdForConversation } from "./protocol.js";
+import { terminalControlEvidence, terminalControlEvidenceMatches } from "./terminal-control-ref.js";
+import { isStoreOwnerIdentity, storeOwnerKind } from "./store-owner-identity.js";
+import { readStoreOwnerInventory, probeStoreOwnerInventory } from "./store-owner-registry.js";
+import { nonBlankString, recordValue } from "./value-guards.js";
+export function canonicalAuthorityStore(storeDir) {
+    const resolved = path.resolve(storeDir);
+    try {
+        return fs.realpathSync(resolved);
+    }
+    catch {
+        return resolved;
+    }
+}
+export function nativeAuthorityStore(ledger) {
+    const stored = nonBlankString(ledger.store_dir);
+    if (stored)
+        return canonicalAuthorityStore(stored);
+    const statePath = nonBlankString(ledger.state_path);
+    if (!statePath)
+        return undefined;
+    try {
+        return canonicalAuthorityStore(pathsForConversationDir(path.dirname(statePath)).storeDir);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function nativeAuthorityThreadIds(ledger) {
+    const binding = recordValue(ledger.binding);
+    return [ledger.native_thread_id, binding?.native_thread_id,
+        ledger.before_native_thread_id, ledger.target_native_thread_id]
+        .flatMap(value => nonBlankString(value)?.toLowerCase() ?? []);
+}
+/** A resolved dispatch releases the Turn, not this native thread's Store authority. */
+export function nativeAuthorityWorkSettled(storeDir, session) {
+    if (!["bound", "detached"].includes(session.status) || session.authority_transfer)
+        return false;
+    const turns = listConversations(storeDir).filter(turn => sessionIdForConversation(turn) === session.session_id);
+    if (turns.some(turn => isSessionSendBlockingStatus(turn.status) ||
+        recordValue(turn.approval_state)?.blocked === true ||
+        [turn.callback_delivery, turn.callback_notification_delivery].some(hasUnsettledAuthorityCallback)))
+        return false;
+    if (listNativeThreadTransitions(storeDir).some(transition => (transition.source_session_id === session.session_id || transition.target_session_id === session.session_id) &&
+        !["committed", "aborted"].includes(transition.status)))
+        return false;
+    if (session.binding && hasOutstandingNativeAuthorityWatch({ storeDir,
+        terminalControl: session.binding.terminal_control, nativeThreadId: session.binding.native_thread_id }))
+        return false;
+    // Conservatively wait for all Store transfers: a callback/deferred handoff may
+    // carry authority indirectly through a Turn rather than the Session id.
+    return !listDeferredForegroundTransfers(storeDir).some(transfer => !isFinalDeferredForegroundTransferStatus(transfer.status));
+}
+function hasUnsettledAuthorityCallback(value) {
+    const delivery = recordValue(value);
+    return Boolean(delivery && !["delivered", "accepted", "superseded"].includes(String(delivery.status)));
+}
+export function nativeAuthorityFingerprint(value) {
+    return createHash("sha256").update(canonicalJson(value)).digest("hex");
+}
+/** Shared, read-only authority predicate for List, Status and mutation preflight. */
+export function inspectNativeStoreAuthority(input) {
+    const result = {
+        state: "none", ownerStatus: "legacy", transferEligible: false, automaticEligible: false
+    };
+    const ledger = input.ledger;
+    if (!ledger)
+        return result;
+    const ids = nativeAuthorityThreadIds(ledger);
+    if (!ids.length || input.nativeThreadId && !ids.includes(input.nativeThreadId.toLowerCase()))
+        return result;
+    const evidence = ledger.terminal_endpoint ?? ledger.terminal_control;
+    if (!terminalControlEvidenceMatches(evidence, input.terminalControl, { requireProcessAnchor: false })) {
+        return { ...result, state: "conflict", reason: "authority_terminal_identity_unverified" };
+    }
+    result.sourceStoreDir = nativeAuthorityStore(ledger);
+    result.sessionId = nonBlankString(ledger.session_id ?? ledger.target_session_id);
+    const authority = recordValue(ledger.store_authority);
+    result.generation = Number(authority?.generation ?? 1);
+    const transfer = recordValue(ledger.store_authority_transfer);
+    const inProgress = transfer && transfer.phase !== "committed";
+    result.state = inProgress ? "transferring" : result.sourceStoreDir === canonicalAuthorityStore(input.storeDir) ? "current" : "conflict";
+    if (result.state === "current")
+        return result;
+    result.reason = inProgress ? "store_authority_transfer_incomplete" : "native_thread_authoritative_in_another_store";
+    if (!result.sourceStoreDir || !result.sessionId) {
+        result.reason = "authority_store_or_session_unverified";
+        return result;
+    }
+    return inspectForeignStoreAuthority(input, ledger, result);
+}
+function inspectForeignStoreAuthority(input, ledger, result) {
+    const sourceStoreDir = result.sourceStoreDir;
+    const ids = nativeAuthorityThreadIds(ledger);
+    const authority = recordValue(ledger.store_authority);
+    const transfer = recordValue(ledger.store_authority_transfer);
+    const inProgress = transfer && transfer.phase !== "committed";
+    try {
+        const inventory = readStoreOwnerInventory(sourceStoreDir);
+        result.ownerStatus = inspectStoreAuthorityOwner(ledger.store_authority, inventory, sourceStoreDir);
+        const sessions = listManagedSessions(sourceStoreDir);
+        const session = sessions.find(value => value.session_id === result.sessionId);
+        if (!session || !session.binding || !ids.includes(session.binding.native_thread_id?.toLowerCase() ?? "")) {
+            result.reason = "authority_session_binding_unverified";
+            return result;
+        }
+        result.session = session;
+        result.fingerprint = nativeAuthorityFingerprint({ ledger, session, inventory: inventory.fingerprint,
+            targetStore: canonicalAuthorityStore(input.storeDir), terminal: terminalControlEvidence(input.terminalControl) });
+        if (inProgress)
+            return inspectPendingTransfer(result, transfer, inventory.fingerprint, input.storeDir);
+        if (ledger.status !== "resolved" || !nativeAuthorityWorkSettled(sourceStoreDir, session)) {
+            result.reason = "authority_has_unresolved_work";
+            return result;
+        }
+        if (["alive", "unknown"].includes(result.ownerStatus)) {
+            result.reason = `authority_owner_${result.ownerStatus}`;
+            return result;
+        }
+        result.transferEligible = true;
+        result.automaticEligible = automaticOwnerEvidence(result, authority, inventory);
+        return result;
+    }
+    catch {
+        return { ...result, reason: "authority_evidence_unreadable", transferEligible: false, automaticEligible: false };
+    }
+}
+function inspectStoreAuthorityOwner(value, inventory, sourceStoreDir) {
+    const authority = recordValue(value);
+    if (value !== undefined && (!authority || authority.version !== 1 || !isStoreOwnerIdentity(authority.owner)))
+        return "unknown";
+    if (authority && (canonicalAuthorityStore(String(authority.store_dir)) !== sourceStoreDir ||
+        !inventory.owners.some(owner => canonicalJson(owner) === canonicalJson(authority.owner))))
+        return "unknown";
+    if (!authority && inventory.reason === "owner_inventory_absent")
+        return "legacy";
+    const state = probeStoreOwnerInventory(inventory).state;
+    if (state !== "dead")
+        return state;
+    const manifest = recordValue(readJsonFileNoFollow(storeManifestPath(sourceStoreDir), "Store manifest"));
+    return !authority || authority.legacy_owner_coverage === true || manifest?.owner_registration !== "required" ? "legacy" : "dead";
+}
+function automaticOwnerEvidence(result, authority, inventory) {
+    return result.ownerStatus === "dead" && isStoreOwnerIdentity(authority?.owner) && inventory.complete &&
+        inventory.owners.some(owner => canonicalJson(owner) === canonicalJson(authority.owner)) &&
+        inventory.owners.every(owner => owner.store_kind === "ephemeral") &&
+        storeOwnerKind(result.sourceStoreDir, { AKK_EPHEMERAL_STORE: "1" }) === "ephemeral";
+}
+function inspectPendingTransfer(result, transfer, inventoryFingerprint, storeDir) {
+    if (transfer.source_inventory !== inventoryFingerprint) {
+        result.reason = "authority_owner_registrations_changed";
+        return result;
+    }
+    if (result.ownerStatus === "alive" || result.ownerStatus === "unknown" ||
+        result.ownerStatus === "legacy" && transfer.legacy_acknowledged !== true) {
+        result.reason = `authority_owner_${result.ownerStatus}`;
+        return result;
+    }
+    result.transferEligible = canonicalAuthorityStore(String(transfer.target_store_dir)) === canonicalAuthorityStore(storeDir);
+    return result;
+}
+export function assertNativeStoreAuthorityCurrent(input) {
+    const inspected = inspectNativeStoreAuthority(input);
+    if (!["conflict", "transferring"].includes(inspected.state))
+        return;
+    throw new Error(`terminal ${input.terminalControl.target} native thread is authoritative in another Store ` +
+        `${inspected.sourceStoreDir ?? "(unverified)"}: ${inspected.reason}. Refresh AKK list and use its ` +
+        "transfer_store_authority action (agent_knock_knock_reconcile_binding operation=transfer_store_authority). " +
+        "Active or unverifiable owners must be stopped/repaired first; do not delete the Store or runtime ledger.");
+}
+//# sourceMappingURL=native-store-authority.js.map

package/dist/src/native-store-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-store-authority.js","sourceRoot":"","sources":["../../src/native-store-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,uCAAuC,EAAE,MAAM,0CAA0C,CAAC;AAEnG,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,8BAA8B,EAA2B,MAAM,2BAA2B,CAAC;AAE7H,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAA4B,MAAM,2BAA2B,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAehE,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsC;IACzE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QAAC,OAAO,uBAAuB,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAClG,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAsC;IAC7E,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,gBAAgB;QACxD,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,CAAC;SAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,OAA4B;IACvF,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAChG,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAChH,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7D,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,KAAK,IAAI;QAClD,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAC1D,CAAC,UAAU,CAAC,iBAAiB,KAAK,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,iBAAiB,KAAK,OAAO,CAAC,UAAU,CAAC;QAC5G,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,OAAO,CAAC,OAAO,IAAI,kCAAkC,CAAC,EAAE,QAAQ;QAClE,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACvH,+EAA+E;IAC/E,wEAAwE;IACxE,OAAO,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,uCAAuC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAChI,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,2BAA2B,CAAC,KAK3C;IACC,MAAM,MAAM,GAAmC;QAC7C,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK;KACxF,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAC3B,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5G,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,IAAI,MAAM,CAAC,gBAAgB,CAAC;IACrE,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACtG,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,CAAC,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC;IAC9D,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,KAAK,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACxI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC9C,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,8CAA8C,CAAC;IACpH,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,CAAC,MAAM,GAAG,uCAAuC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,4BAA4B,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAwD,EACxD,MAAsC,EACtC,MAAsC;IAEtC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAe,CAAC;IAC9C,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,CAAC,WAAW,GAAG,0BAA0B,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QACnG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzG,MAAM,CAAC,MAAM,GAAG,sCAAsC,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,CAAC,WAAW,GAAG,0BAA0B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW;YACjG,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QACpH,IAAI,UAAU;YAAE,OAAO,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvG,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,0BAA0B,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,CAAC,MAAM,GAAG,+BAA+B,CAAC;YAChD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,MAAM,GAAG,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,iBAAiB,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;IACnH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAE,SAA8B,EAChF,cAAsB;IACtB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/H,IAAI,SAAS,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,cAAc;QACvF,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9G,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB;QAAE,OAAO,QAAQ,CAAC;IACjF,MAAM,KAAK,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;IACxD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,cAAc,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACxG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,qBAAqB,KAAK,IAAI,IAAI,QAAQ,EAAE,kBAAkB,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACnI,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsC,EAAE,SAA8C,EACpH,SAA8B;IAC9B,OAAO,MAAM,CAAC,WAAW,KAAK,MAAM,IAAI,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ;QAClG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvF,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC;QACjE,cAAc,CAAC,MAAM,CAAC,cAAe,EAAE,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,KAAK,WAAW,CAAC;AACzF,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAsC,EAAE,QAAiC,EACvG,oBAAmC,EAAE,QAAgB;IACrD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,oBAAoB,EAAE,CAAC;QACvD,MAAM,CAAC,MAAM,GAAG,uCAAuC,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;QACpE,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QAC3E,MAAM,CAAC,MAAM,GAAG,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,CAAC,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3H,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAwD;IACxG,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO;IACpE,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,eAAe,CAAC,MAAM,mDAAmD;QACzG,GAAG,SAAS,CAAC,cAAc,IAAI,cAAc,KAAK,SAAS,CAAC,MAAM,iCAAiC;QACnG,4GAA4G;QAC5G,0GAA0G,CAAC,CAAC;AAChH,CAAC"}

package/dist/src/semantic-tool-descriptions.d.ts

@@ -26,4 +26,4 @@ export declare const semanticToolDescriptions: {
     readonly identify_foreground: string;
     readonly identify_and_send: string;
 };
-export declare const semanticCommandGuidance: readonly ["For a requested new Desktop conversation use agent_knock_knock_desktop_create, optionally with an exact project and first task. Preserve its operation_id and automatic Watch; opening or uncertain operations may only be continued by that same ID. The terminal new_thread tool remains separate and must not be used to replace a Desktop conversation.", "Present conversations[] as CLI or Desktop using surface, with Codex/Claude as agent types. Select its displayed conversation_id and advertised action; AKK chooses the connection. Do not add raw discovery arrays to the list or count them or Watches as independent tasks. Same-project display grouping never proves session identity. Use terminalDebug for complete connection diagnostics. Bound Watch/Turn operations retain their original provider; never retry uncertain input on another route.", string, string, string];
+export declare const semanticCommandGuidance: readonly ["For a requested new Desktop conversation use agent_knock_knock_desktop_create, optionally with an exact project and first task. Preserve its operation_id and automatic Watch; opening or uncertain operations may only be continued by that same ID. The terminal new_thread tool remains separate and must not be used to replace a Desktop conversation.", "Present conversations[] as CLI or Desktop using surface, with Codex/Claude as agent types. Select its displayed conversation_id and advertised action; AKK chooses the connection. New Claude sends prefer an exact managed terminal Turn, falling back to a native Watch only without a controllable exact terminal; Codex sends prefer the verified backend. Do not add raw discovery arrays to the list or count them or Watches as independent tasks. Same-project display grouping never proves session identity. Use terminalDebug for complete connection diagnostics. Bound Watch/Turn operations retain their original provider; never retry uncertain input on another route.", string, string, string];