@sentropic/h2a-cli 0.75.0 → 0.78.0

package/dist/runtime/drumbeat/relaunchers.js

@@ -1,260 +0,0 @@
-/**
- * Drumbeat relauncher adapters (DEC-091, slice D3). D2 shipped the dumb daemon
- * + the `H2ARelauncher` interface with only a logging adapter; D3 supplies the
- * two **local** adapters that actually revive a stalled agent:
- *
- * - **local-tmux**: `tmux send-keys` the resume/launch command into the pane
- *   captured at launch (DEC-085 `launchContext.tmux`). The natural revive for a
- *   user-local agent — it lands back in its original terminal.
- * - **headless**: detached background respawn of the captured command + a
- *   notification (the PRINCIPAL escalation is wired fully in D7).
- *
- * `chainRelauncher` composes them (try tmux, fall back to headless) — the
- * "local-tmux adapter + headless fallback" of D3. The actual process I/O is
- * behind an injectable `RelauncherRuntime` so the adapters are unit-testable
- * with no real tmux or child processes. The remote adapter is D4.
- */
-import { spawn, spawnSync } from "node:child_process";
-import { randomBytes } from "node:crypto";
-import { H2A_DRUMBEAT_RESUME_BODY_KIND, createEnvelope } from "@sentropic/h2a";
-import { createLocalStore } from "../local-files/store.js";
-import { sendRemoteEnvelope } from "../remote/client.js";
-export const defaultRelauncherRuntime = {
-    run(file, args) {
-        const res = spawnSync(file, [...args], { stdio: "ignore" });
-        return res.status === 0;
-    },
-    capture(file, args) {
-        try {
-            const res = spawnSync(file, [...args], {
-                encoding: "utf8",
-                stdio: ["ignore", "pipe", "ignore"]
-            });
-            return res.status === 0 ? res.stdout : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    },
-    spawnDetached(command, options) {
-        try {
-            const child = typeof command === "string"
-                ? spawn(command, {
-                    cwd: options.cwd,
-                    shell: true,
-                    detached: true,
-                    stdio: "ignore"
-                })
-                : spawn(command.file, [...command.args], {
-                    cwd: command.cwd ?? options.cwd,
-                    detached: true,
-                    stdio: "ignore"
-                });
-            child.unref();
-            return child.pid !== undefined;
-        }
-        catch {
-            return false;
-        }
-    }
-};
-const deferredRelaunchers = new WeakSet();
-function markDeferred(relauncher, deferred) {
-    if (deferred) {
-        deferredRelaunchers.add(relauncher);
-    }
-    else {
-        deferredRelaunchers.delete(relauncher);
-    }
-}
-/**
- * Build a tmux target-pane spec from a captured `launchContext.tmux`. With a
- * window it is `session:window.pane`; otherwise the pane is assumed to be a
- * unique tmux pane id (`%N`, captured via `#{pane_id}` by the D6 plugins) and
- * targeted directly.
- */
-export function tmuxTarget(t) {
-    return t.window !== undefined ? `${t.session}:${t.window}.${t.pane}` : t.pane;
-}
-/**
- * Type `text` into a tmux pane AND submit it. Sends the text literally (`-l`, so
- * spaces / special chars aren't interpreted as tmux key names) then Enter as a
- * SEPARATE send-keys. A combined `send-keys "text" Enter` (or one without `-l`)
- * leaves the line in the input but **never commits** on modern TUIs
- * (codex/claude) — the bug behind "the line is written but no Enter fires". A
- * second Enter covers TUIs that buffer the first. The single shared submit path
- * for both the drumbeat relauncher and the EVO-1 wake/drive local-tmux driver.
- */
-export function tmuxSendSubmit(runtime, target, text) {
-    const typed = runtime.run("tmux", ["send-keys", "-t", target, "-l", text]);
-    const enter1 = runtime.run("tmux", ["send-keys", "-t", target, "Enter"]);
-    const enter2 = runtime.run("tmux", ["send-keys", "-t", target, "Enter"]);
-    return typed && enter1 && enter2;
-}
-/**
- * Default window (ms): if a tmux client attached to the pane's session was
- * active within this window, a wake/relance is DEFERRED so it does not clobber
- * a human typing in the pane. Override via `H2A_WAKE_DEFER_ACTIVITY_MS` (0 = off).
- */
-export const H2A_WAKE_DEFER_ACTIVITY_DEFAULT_MS = 4000;
-function activityWindowMs() {
-    const raw = process.env.H2A_WAKE_DEFER_ACTIVITY_MS;
-    if (raw !== undefined) {
-        const n = Number.parseInt(raw, 10);
-        if (Number.isFinite(n) && n >= 0)
-            return n;
-    }
-    return H2A_WAKE_DEFER_ACTIVITY_DEFAULT_MS;
-}
-/**
- * True iff a tmux CLIENT attached to `target`'s session had activity within the
- * defer window — i.e. a human is (probably) typing/looking RIGHT NOW, so a wake
- * that types into the pane would clobber their in-progress input. TUI-agnostic
- * (uses tmux `client_activity`, not any TUI's composer state). Fail-OPEN: if the
- * probe can't be read (no `capture`, no tmux, detached/no client), returns false
- * so waking still works — the guard only fires on a POSITIVE recent-activity read.
- */
-export function paneHasRecentHumanActivity(runtime, target, opts = {}) {
-    if (!runtime.capture)
-        return false;
-    const windowMs = opts.windowMs ?? activityWindowMs();
-    if (windowMs <= 0)
-        return false; // disabled
-    const now = opts.now ?? Date.now();
-    const sessionRaw = runtime.capture("tmux", [
-        "display-message",
-        "-p",
-        "-t",
-        target,
-        "#{session_name}"
-    ]);
-    const session = sessionRaw?.trim();
-    if (!session)
-        return false;
-    const clientsRaw = runtime.capture("tmux", [
-        "list-clients",
-        "-t",
-        `=${session}`,
-        "-F",
-        "#{client_activity}"
-    ]);
-    if (!clientsRaw)
-        return false; // no attached client → no human → don't defer
-    let mostRecentSec = 0;
-    for (const line of clientsRaw.split("\n")) {
-        const epoch = Number.parseInt(line.trim(), 10);
-        if (Number.isFinite(epoch) && epoch > mostRecentSec)
-            mostRecentSec = epoch;
-    }
-    if (mostRecentSec === 0)
-        return false;
-    const ageMs = now - mostRecentSec * 1000; // client_activity is epoch SECONDS
-    return ageMs >= 0 && ageMs < windowMs;
-}
-/** Revive a stalled agent by sending its resume/launch command into its pane. */
-export function localTmuxRelauncher(options = {}) {
-    const runtime = options.runtime ?? defaultRelauncherRuntime;
-    const relauncher = {
-        relance(finding) {
-            markDeferred(relauncher, false);
-            const lc = finding.launchContext;
-            if (!lc?.tmux)
-                return false; // not a tmux-launched agent — let the chain fall through
-            const command = lc.resumeCommand ?? lc.command;
-            const target = tmuxTarget(lc.tmux);
-            if (paneHasRecentHumanActivity(runtime, target)) {
-                markDeferred(relauncher, true);
-                options.log?.(`drumbeat[local-tmux]: relance ${finding.instance} → ${target} DEFERRED (human active in pane)`);
-                return false;
-            }
-            // literal command + separate Enter(s) — a combined `send-keys cmd Enter`
-            // doesn't commit in a TUI (the reported "line written, no Enter") and
-            // without -l the command keys can be misread as tmux key names.
-            const ok = tmuxSendSubmit(runtime, target, command);
-            options.log?.(`drumbeat[local-tmux]: relance ${finding.instance} → tmux send-keys -t ${target} (${ok ? "ok" : "failed"})`);
-            return ok;
-        }
-    };
-    return relauncher;
-}
-/** Fallback: detached background respawn of the captured command + notify. */
-export function headlessRelauncher(options = {}) {
-    const runtime = options.runtime ?? defaultRelauncherRuntime;
-    return {
-        relance(finding) {
-            const lc = finding.launchContext;
-            const command = lc?.resumeCommand ?? lc?.command;
-            if (!command)
-                return false; // nothing to respawn
-            const ok = runtime.spawnDetached(command, { cwd: lc?.cwd });
-            const note = `drumbeat[headless]: relance ${finding.instance} → detached "${command}" (${ok ? "spawned" : "failed"})`;
-            options.log?.(note);
-            runtime.notify?.(note);
-            return ok;
-        }
-    };
-}
-/** Try each adapter in order; the first to issue a relance wins (D3 fallback). */
-export function chainRelauncher(...relaunchers) {
-    return {
-        async relance(finding) {
-            for (const r of relaunchers) {
-                if (await r.relance(finding))
-                    return true;
-                if (deferredRelaunchers.has(r))
-                    return false;
-            }
-            return false;
-        }
-    };
-}
-function envelopeId(now) {
-    return `env:${now}:${randomBytes(4).toString("hex")}`;
-}
-/**
- * D4 remote adapter: sign a `drumbeat.resume` envelope and deliver it to the
- * target instance's declared remote endpoint. It never executes remote code.
- */
-export function remoteRelauncher(options) {
-    const store = options.root ? createLocalStore({ root: options.root }) : undefined;
-    const resolveEndpoint = options.resolveEndpoint ??
-        ((instance) => store?.findInstance(instance)?.endpoints.find((e) => e.kind === "remote")?.uri);
-    const sendImpl = options.sendImpl ?? sendRemoteEnvelope;
-    return {
-        async relance(finding) {
-            const endpoint = await resolveEndpoint(finding.instance);
-            if (!endpoint) {
-                options.log?.(`drumbeat[remote]: no remote endpoint for ${finding.instance}`);
-                return false;
-            }
-            const now = options.now?.() ?? Date.now();
-            const envelope = createEnvelope({
-                id: envelopeId(now),
-                type: "event",
-                actor: options.actor,
-                target: { instance: finding.instance },
-                body: {
-                    kind: H2A_DRUMBEAT_RESUME_BODY_KIND,
-                    target: finding.instance,
-                    reason: finding.reason,
-                    requestedBy: options.actor.instance
-                },
-                createdAt: new Date(now).toISOString()
-            });
-            try {
-                const result = await sendImpl(endpoint, envelope, {
-                    by: options.actor.instance,
-                    privateKeyPem: options.privateKeyPem
-                });
-                const ok = result.status >= 200 && result.status < 300;
-                options.log?.(`drumbeat[remote]: relay ${finding.instance} -> ${endpoint} (${result.status}${ok ? " ok" : " failed"})`);
-                return ok;
-            }
-            catch (error) {
-                options.log?.(`drumbeat[remote]: relay ${finding.instance} -> ${endpoint} failed (${error.message})`);
-                return false;
-            }
-        }
-    };
-}
-//# sourceMappingURL=relaunchers.js.map

package/dist/runtime/drumbeat/relaunchers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"relaunchers.js","sourceRoot":"","sources":["../../../src/runtime/drumbeat/relaunchers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,cAAc,EAIf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EACL,kBAAkB,EAGnB,MAAM,qBAAqB,CAAC;AAmB7B,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,GAAG,CAAC,IAAI,EAAE,IAAI;QACZ,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,IAAI;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;gBACrC,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,KAAK,GACT,OAAO,OAAO,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE;oBACb,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,IAAI;oBACX,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,QAAQ;iBAChB,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;oBACrC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;oBAC/B,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC;AAOF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAiB,CAAC;AAEzD,SAAS,YAAY,CAAC,UAAyB,EAAE,QAAiB;IAChE,IAAI,QAAQ,EAAE,CAAC;QACb,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AA4BD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,CAAqD;IAC9E,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAuC,EACvC,MAAc,EACd,IAAY;IAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,OAAO,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAEvD,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,kCAAkC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA2C,EAC3C,MAAc,EACd,OAA4C,EAAE;IAE9C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;IACrD,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,WAAW;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QACzC,iBAAiB;QACjB,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QACzC,cAAc;QACd,IAAI;QACJ,IAAI,OAAO,EAAE;QACb,IAAI;QACJ,oBAAoB;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC,CAAC,8CAA8C;IAC7E,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,aAAa;YAAE,aAAa,GAAG,KAAK,CAAC;IAC7E,CAAC;IACD,IAAI,aAAa,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,GAAG,aAAa,GAAG,IAAI,CAAC,CAAC,mCAAmC;IAC7E,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,QAAQ,CAAC;AACxC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,UAAmC,EAAE;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC;IAC5D,MAAM,UAAU,GAAkB;QAChC,OAAO,CAAC,OAA2B;YACjC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;YACjC,IAAI,CAAC,EAAE,EAAE,IAAI;gBAAE,OAAO,KAAK,CAAC,CAAC,yDAAyD;YACtF,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,OAAO,CAAC;YAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBAChD,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,EAAE,CACX,iCAAiC,OAAO,CAAC,QAAQ,MAAM,MAAM,kCAAkC,CAChG,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,yEAAyE;YACzE,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,EAAE,CACX,iCAAiC,OAAO,CAAC,QAAQ,wBAAwB,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CAC5G,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,UAAmC,EAAE;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC;IAC5D,OAAO;QACL,OAAO,CAAC,OAA2B;YACjC,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;YACjC,MAAM,OAAO,GAAG,EAAE,EAAE,aAAa,IAAI,EAAE,EAAE,OAAO,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC,CAAC,qBAAqB;YACjD,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,+BAA+B,OAAO,CAAC,QAAQ,gBAAgB,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC;YACtH,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,GAAG,WAAqC;IACtE,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAA2B;YACvC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,OAAO,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe;QACvB,CAAC,CAAC,QAAgB,EAAsB,EAAE,CACxC,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IAExD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAA2B;YACvC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,EAAE,CAAC,4CAA4C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC9E,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,cAAc,CAAwB;gBACrD,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC;gBACnB,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;gBACtC,IAAI,EAAE;oBACJ,IAAI,EAAE,6BAA6B;oBACnC,MAAM,EAAE,OAAO,CAAC,QAAQ;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;iBACpC;gBACD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;aACvC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE;oBAChD,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;oBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC,CAAC,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;gBACvD,OAAO,CAAC,GAAG,EAAE,CACX,2BAA2B,OAAO,CAAC,QAAQ,OAAO,QAAQ,KAAK,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,CACzG,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,EAAE,CACX,2BAA2B,OAAO,CAAC,QAAQ,OAAO,QAAQ,YAAa,KAAe,CAAC,OAAO,GAAG,CAClG,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/drumbeat/scan.d.ts

@@ -1,36 +0,0 @@
-/**
- * Drumbeat scan (DEC-086, slice D2). Reads the durable registry and decides,
- * per stopped agent, whether it is a relance candidate, has exhausted its
- * relance budget (→ escalate, D7), or finished (→ ignore/clear).
- */
-import type { H2AWorkStatus } from "@sentropic/h2a";
-import { type H2ADrumbeatEntry } from "./registry.js";
-/** Default number of relances before escalating to the PRINCIPAL (DEC-084). */
-export declare const H2A_DEFAULT_MAX_RELANCES = 3;
-export type H2ADrumbeatReason = "stopped" | "out-of-tokens";
-export interface H2ADrumbeatFinding {
-    readonly instance: string;
-    readonly reason: H2ADrumbeatReason;
-    readonly workStatus: H2AWorkStatus;
-    readonly launchContext?: H2ADrumbeatEntry["launchContext"];
-    readonly relanceCount: number;
-}
-export interface H2ADrumbeatScanResult {
-    /** Stopped agents that should be relanced. */
-    readonly findings: readonly H2ADrumbeatFinding[];
-    /** Entries that hit the relance cap — hand to escalation (D7). */
-    readonly exhausted: readonly H2ADrumbeatEntry[];
-}
-export interface ScanDrumbeatOptions {
-    readonly maxRelances?: number;
-    /** Instances already handled by a pre-scan D4 inbox consume pass. */
-    readonly skipInstances?: readonly string[];
-}
-/**
- * Classify the registry: `done` entries are skipped (a clean finish);
- * entries at/over `maxRelances` are `exhausted` (escalate, don't loop);
- * everything else is a relance `finding` (reason `out-of-tokens` when that is
- * the recorded status, else `stopped`).
- */
-export declare function scanDrumbeat(root: string, options?: ScanDrumbeatOptions): H2ADrumbeatScanResult;
-//# sourceMappingURL=scan.d.ts.map

package/dist/runtime/drumbeat/scan.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/runtime/drumbeat/scan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEpE,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,eAAe,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,mBAAwB,GAChC,qBAAqB,CAsBvB"}

package/dist/runtime/drumbeat/scan.js

@@ -1,41 +0,0 @@
-/**
- * Drumbeat scan (DEC-086, slice D2). Reads the durable registry and decides,
- * per stopped agent, whether it is a relance candidate, has exhausted its
- * relance budget (→ escalate, D7), or finished (→ ignore/clear).
- */
-import { listDrumbeat } from "./registry.js";
-/** Default number of relances before escalating to the PRINCIPAL (DEC-084). */
-export const H2A_DEFAULT_MAX_RELANCES = 3;
-/**
- * Classify the registry: `done` entries are skipped (a clean finish);
- * entries at/over `maxRelances` are `exhausted` (escalate, don't loop);
- * everything else is a relance `finding` (reason `out-of-tokens` when that is
- * the recorded status, else `stopped`).
- */
-export function scanDrumbeat(root, options = {}) {
-    const maxRelances = options.maxRelances ?? H2A_DEFAULT_MAX_RELANCES;
-    const skip = new Set(options.skipInstances ?? []);
-    const findings = [];
-    const exhausted = [];
-    for (const entry of listDrumbeat(root)) {
-        if (skip.has(entry.instance))
-            continue;
-        if (entry.workStatus === "done")
-            continue;
-        if (entry.terminal)
-            continue; // D5: a watchdog terminal action already resolved this
-        if (entry.relanceCount >= maxRelances) {
-            exhausted.push(entry);
-            continue;
-        }
-        findings.push({
-            instance: entry.instance,
-            reason: entry.workStatus === "out-of-tokens" ? "out-of-tokens" : "stopped",
-            workStatus: entry.workStatus,
-            ...(entry.launchContext ? { launchContext: entry.launchContext } : {}),
-            relanceCount: entry.relanceCount
-        });
-    }
-    return { findings, exhausted };
-}
-//# sourceMappingURL=scan.js.map

package/dist/runtime/drumbeat/scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/runtime/drumbeat/scan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,YAAY,EAAyB,MAAM,eAAe,CAAC;AAEpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAyB1C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,UAA+B,EAAE;IAEjC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM;YAAE,SAAS;QAC1C,IAAI,KAAK,CAAC,QAAQ;YAAE,SAAS,CAAC,uDAAuD;QACrF,IAAI,KAAK,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;YAC1E,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/runtime/drumbeat/watch.d.ts

@@ -1,74 +0,0 @@
-/**
- * Drumbeat daemon core (DEC-086, slice D2): the dumb, always-on anchor that
- * `/loop` provides only on Claude. It scans the registry and, for each stalled
- * agent, calls a **relauncher adapter** (concrete adapters — local-tmux,
- * remote, headless — are slice D3/D4). It performs no LLM work and never
- * relaunches by itself; it just detects + dispatches + caps the relances.
- */
-import type { H2AReflexiveDecision } from "@sentropic/h2a";
-import { type H2ADrumbeatFinding, type ScanDrumbeatOptions } from "./scan.js";
-import { type H2ADrumbeatEntry } from "./registry.js";
-import type { ReflexiveDecider } from "./deciders.js";
-/** Adapter that actually re-invokes a stalled agent (slice D3/D4). */
-export interface H2ARelauncher {
-    /** Returns true if a relance was issued (counts against the cap). */
-    relance(finding: H2ADrumbeatFinding): boolean | Promise<boolean>;
-}
-/** A relauncher that only logs — the D2 default until real adapters land. */
-export declare function loggingRelauncher(write: (line: string) => void): H2ARelauncher;
-export interface DrumbeatTickOptions extends ScanDrumbeatOptions {
-    /** D4: optional pre-scan hook, used by watch to consume remote resume inboxes. */
-    beforeScan?: () => readonly string[] | Promise<readonly string[]>;
-    /** Hook for entries that hit the relance cap → escalate to PRINCIPAL (D7). */
-    onExhausted?: (entry: H2ADrumbeatEntry) => void | Promise<void>;
-    now?: number;
-    /** D5: reflexive watchdog. Consulted once `relanceCount >= deciderAfter`. */
-    decider?: ReflexiveDecider;
-    /** D5: minimum relanceCount before consulting the decider (default 1). */
-    deciderAfter?: number;
-    /** D5: apply the decision (true) or just log it and do the safe default (false). */
-    enforce?: boolean;
-    /** D5: label recorded in the decision log (default "logging"). */
-    deciderLabel?: string;
-    /** D5: effect hooks (cli.ts wires escalation), keeping watch.ts store-free. */
-    onEscalate?: (finding: H2ADrumbeatFinding, decision: H2AReflexiveDecision) => void | Promise<void>;
-    onReroute?: (finding: H2ADrumbeatFinding, decision: H2AReflexiveDecision) => void | Promise<void>;
-    /**
-     * WP-7: store root for the reach-guard.  When provided, each finding is
-     * checked via `reachGuard` before reaching: phantom / ambiguous / malformed
-     * targets are SKIPPED (never relanced).  When absent the guard is bypassed
-     * and the tick behaves exactly as today — backward-compatible.
-     */
-    root?: string;
-    /**
-     * WP-7: optional log sink for reach-guard skip messages.  Defaults to a
-     * no-op; pass a `(line: string) => void` to surface the skip reason.
-     */
-    log?: (line: string) => void;
-    /**
-     * Gov D2/D4: the instance id of the agent running this drumbeat.  When
-     * absent, BOTH governance checks (D2 conductor-ownership, D4 cross-workspace
-     * CoI advisory) are SKIPPED entirely — fully backward-compatible; all
-     * existing callers that do not pass this option are unaffected.
-     */
-    selfInstance?: string;
-}
-export interface DrumbeatTickResult {
-    readonly relanced: readonly string[];
-    readonly exhausted: readonly string[];
-}
-/** One scan→dispatch pass (no timers) — the testable unit of the loop. */
-export declare function drumbeatTick(root: string, relauncher: H2ARelauncher, options?: DrumbeatTickOptions): Promise<DrumbeatTickResult>;
-export interface DrumbeatWatchOptions extends DrumbeatTickOptions {
-    /** Beat interval in ms. Default 30s. */
-    intervalMs?: number;
-    /** Stop the loop. */
-    signal?: AbortSignal;
-    onTick?: (result: DrumbeatTickResult) => void | Promise<void>;
-}
-/**
- * Run the drumbeat loop until `signal` aborts. Each beat: scan → relance via
- * the adapter → cap. The anchor that codex/agy/gemini lack.
- */
-export declare function runDrumbeatWatch(root: string, relauncher: H2ARelauncher, options?: DrumbeatWatchOptions): Promise<void>;
-//# sourceMappingURL=watch.d.ts.map

package/dist/runtime/drumbeat/watch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../src/runtime/drumbeat/watch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAsB,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAO/E,OAAO,EAAgB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC5F,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtD,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,aAAa,CAS9E;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAClE,8EAA8E;IAC9E,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,aAAa,EACzB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAmL7B;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAC/D,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AAiBD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,aAAa,EACzB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/runtime/drumbeat/watch.js

@@ -1,216 +0,0 @@
-/**
- * Drumbeat daemon core (DEC-086, slice D2): the dumb, always-on anchor that
- * `/loop` provides only on Claude. It scans the registry and, for each stalled
- * agent, calls a **relauncher adapter** (concrete adapters — local-tmux,
- * remote, headless — are slice D3/D4). It performs no LLM work and never
- * relaunches by itself; it just detects + dispatches + caps the relances.
- */
-import { canonicalAddress } from "../local-files/index.js";
-import { reachGuard } from "../local-files/paths.js";
-import { listPresence } from "../local-files/presence.js";
-import { createLocalStore } from "../local-files/store.js";
-import { conductorFor } from "../governance/conductor.js";
-import { scanDrumbeat } from "./scan.js";
-import { markRelanced, clearDrumbeatEntry, markDrumbeatTerminal } from "./registry.js";
-import { recordDrumbeatDecision } from "./decisions.js";
-/** A relauncher that only logs — the D2 default until real adapters land. */
-export function loggingRelauncher(write) {
-    return {
-        relance(finding) {
-            write(`drumbeat: would relance ${finding.instance} (reason=${finding.reason}, tries=${finding.relanceCount})`);
-            return true;
-        }
-    };
-}
-/** One scan→dispatch pass (no timers) — the testable unit of the loop. */
-export async function drumbeatTick(root, relauncher, options = {}) {
-    const preRelanced = await options.beforeScan?.();
-    const { findings, exhausted } = scanDrumbeat(root, {
-        maxRelances: options.maxRelances,
-        skipInstances: [...(options.skipInstances ?? []), ...(preRelanced ?? [])]
-    });
-    // WP-7: Build reach-guard sets once per tick (avoid repeated I/O).
-    // When `options.root` is absent the guard is skipped — backward-compatible.
-    let guardRoot = options.root;
-    let liveInstances;
-    let registeredInstances;
-    let allSessions;
-    if (guardRoot !== undefined) {
-        allSessions = listPresence(guardRoot, options.now !== undefined ? { now: options.now } : {});
-        liveInstances = allSessions.map((s) => s.instance);
-        registeredInstances = createLocalStore({ root: guardRoot })
-            .listInstances()
-            .map((i) => i.instance);
-    }
-    // Gov D2/D4: resolve wSelf (self's workspace) once per tick if selfInstance known.
-    // undefined = unknown/skip advisory.
-    const selfInstance = options.selfInstance;
-    let wSelf;
-    if (selfInstance !== undefined && guardRoot !== undefined) {
-        const selfSessions = (allSessions ?? []).filter((s) => canonicalAddress(s.instance) === canonicalAddress(selfInstance));
-        if (selfSessions.length > 0 && selfSessions[0].workspace?.id !== undefined) {
-            wSelf = selfSessions[0].workspace.id;
-        }
-        else {
-            try {
-                const reg = createLocalStore({ root: guardRoot }).findInstance(selfInstance);
-                if (reg?.workspace?.id !== undefined) {
-                    wSelf = reg.workspace.id;
-                }
-            }
-            catch {
-                // if registry unreadable, wSelf stays undefined → D4 advisory skipped
-            }
-        }
-    }
-    const relanced = [];
-    const k = options.deciderAfter ?? 1;
-    for (const finding of findings) {
-        // ── REACH-GUARD CHOKEPOINT ──────────────────────────────────────────────
-        // Governance gates (D2 conductor-ownership, D4 CoI advisory) hook HERE so
-        // every reach path inherits them.
-        if (guardRoot !== undefined) {
-            const guard = reachGuard({
-                target: finding.instance,
-                liveInstances: liveInstances,
-                registeredInstances: registeredInstances
-            });
-            if (!guard.ok) {
-                options.log?.(`drumbeat: skipping relance of ${finding.instance} — ${guard.reason}`);
-                continue;
-            }
-        }
-        // ── GOV D2: conductor owns relances (opt-in, default-allow) ────────────
-        // Suppression only when ALL of:
-        //   (a) selfInstance and options.root are known
-        //   (b) wTarget (the finding's workspace) is resolvable
-        //   (c) a live conductor is claimed for that workspace
-        //   (d) self is NOT that conductor
-        //   (e) relanceCount === 0 (fresh stall — failsafe: if relanceCount >= 1
-        //       the conductor has already missed the window; peer steps in so
-        //       a workspace is never frozen by a stuck conductor)
-        // Also used by D4 CoI advisory below.
-        let wTarget;
-        if (selfInstance !== undefined && guardRoot !== undefined) {
-            // Resolve finding's workspace from live sessions first, then registry.
-            const targetSession = (allSessions ?? []).find((s) => canonicalAddress(s.instance) === canonicalAddress(finding.instance));
-            if (targetSession?.workspace?.id !== undefined) {
-                wTarget = targetSession.workspace.id;
-            }
-            else {
-                try {
-                    const reg = createLocalStore({ root: guardRoot }).findInstance(finding.instance);
-                    if (reg?.workspace?.id !== undefined) {
-                        wTarget = reg.workspace.id;
-                    }
-                }
-                catch {
-                    // registry unreadable → wTarget stays undefined → ALLOW
-                }
-            }
-            if (wTarget !== undefined) {
-                const res = conductorFor({
-                    root: guardRoot,
-                    workspaceId: wTarget,
-                    ...(options.now !== undefined ? { now: options.now } : {})
-                });
-                if (res.conductor !== null &&
-                    canonicalAddress(res.conductor) !== canonicalAddress(selfInstance) &&
-                    finding.relanceCount === 0) {
-                    options.log?.(`drumbeat: ${finding.instance} in ${wTarget} owned by conductor ${res.conductor}; deferring relance`);
-                    continue; // D2 suppression
-                }
-            }
-        }
-        // ── END GOV D2 ──────────────────────────────────────────────────────────
-        // ── GOV D4: cross-workspace CoI advisory (warn only, never skip) ────────
-        if (selfInstance !== undefined &&
-            wSelf !== undefined &&
-            wTarget !== undefined &&
-            canonicalAddress(wSelf) !== canonicalAddress(wTarget)) {
-            options.log?.(`drumbeat: cross-workspace relance of ${finding.instance} (workspace ${wTarget}) by ${selfInstance} (workspace ${wSelf}) — no target-conductor mandate (advisory)`);
-        }
-        // ── END GOV D4 ──────────────────────────────────────────────────────────
-        // ────────────────────────────────────────────────────────────────────────
-        // Cost guard: relance cheaply until K relances, then consult the decider.
-        if (!options.decider || finding.relanceCount < k) {
-            if (await relauncher.relance(finding)) {
-                markRelanced(root, finding.instance, options.now);
-                relanced.push(finding.instance);
-            }
-            continue;
-        }
-        const decision = await options.decider.decide(finding);
-        let applied = decision.action;
-        if (!options.enforce) {
-            applied = "relance"; // advisory-first: log the verdict, do the safe default
-        }
-        else if (decision.action === "finish" && finding.workStatus !== "done") {
-            applied = "escalate"; // `done` is the only safe-to-finish status (else never abandon)
-        }
-        switch (applied) {
-            case "relance":
-                if (await relauncher.relance(finding)) {
-                    markRelanced(root, finding.instance, options.now);
-                    relanced.push(finding.instance);
-                }
-                break;
-            case "finish":
-                clearDrumbeatEntry(root, finding.instance); // workStatus === "done": genuinely complete
-                break;
-            case "escalate":
-                await options.onEscalate?.(finding, decision);
-                markDrumbeatTerminal(root, finding.instance, "escalate", options.now);
-                break;
-            case "reroute":
-                await options.onReroute?.(finding, decision);
-                markDrumbeatTerminal(root, finding.instance, "reroute", options.now);
-                break;
-        }
-        recordDrumbeatDecision(root, {
-            instance: finding.instance,
-            decided: decision.action,
-            applied,
-            ...(decision.reason ? { reason: decision.reason } : {}),
-            decider: options.deciderLabel ?? "logging",
-            enforced: options.enforce === true,
-            at: new Date(options.now ?? Date.now()).toISOString()
-        });
-    }
-    const escalated = [];
-    for (const entry of exhausted) {
-        await options.onExhausted?.(entry);
-        escalated.push(entry.instance);
-    }
-    return { relanced, exhausted: escalated };
-}
-function delay(ms, signal) {
-    return new Promise((resolve) => {
-        if (signal?.aborted)
-            return resolve();
-        const timer = setTimeout(() => {
-            signal?.removeEventListener("abort", onAbort);
-            resolve();
-        }, ms);
-        function onAbort() {
-            clearTimeout(timer);
-            resolve();
-        }
-        signal?.addEventListener("abort", onAbort, { once: true });
-    });
-}
-/**
- * Run the drumbeat loop until `signal` aborts. Each beat: scan → relance via
- * the adapter → cap. The anchor that codex/agy/gemini lack.
- */
-export async function runDrumbeatWatch(root, relauncher, options = {}) {
-    const intervalMs = options.intervalMs ?? 30_000;
-    while (!options.signal?.aborted) {
-        const result = await drumbeatTick(root, relauncher, options);
-        await options.onTick?.(result);
-        if (options.signal?.aborted)
-            break;
-        await delay(intervalMs, options.signal);
-    }
-}
-//# sourceMappingURL=watch.js.map