@sentropic/h2a-cli 0.75.0 → 0.78.0

package/dist/runtime/local-files/migrate.js

@@ -1,104 +0,0 @@
-import { existsSync, readdirSync, renameSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { localStorePaths, safePathSegment } from "./paths.js";
-/**
- * Container directories whose immediate children are named after ids
- * (DEC-031). For each, the child entry name is the id (a directory for
- * negotiations/contracts/engagements/inbox/outbox, a `<id>.json` file for
- * policies, a `<sid>.json` file for presence).
- */
-const ID_DIR_CHILDREN = [
-    "negotiations",
-    "inbox",
-    "outbox",
-    "contracts",
-    "engagements"
-];
-const ID_FILE_CHILDREN = ["policies", "presence"];
-function sanitizeFileName(name) {
-    // Split a single trailing extension so `sess:abc.json` → `sess__abc.json`,
-    // sanitizing only the id portion (the `.json` itself has no forbidden chars).
-    const dot = name.lastIndexOf(".");
-    if (dot <= 0)
-        return safePathSegment(name);
-    const base = name.slice(0, dot);
-    const ext = name.slice(dot);
-    return `${safePathSegment(base)}${ext}`;
-}
-/**
- * DEC-064: rename pre-DEC-062 store entries whose names contain `:` (or other
- * Windows-forbidden characters) to their `safePathSegment` form. This makes a
- * store created by `@sentropic/h2a-cli@<=0.1.23` usable on Windows and
- * consistent with the current layout on every OS.
- *
- * The pass is conservative:
- * - It only renames entries whose sanitized name differs from the original.
- * - If the sanitized target already exists, it records a `conflict` and does
- *   NOT overwrite (the caller decides what to do).
- * - With `dryRun`, nothing is written; entries are reported as `would-rename`.
- *
- * Pure-ish: only filesystem renames, no schema sentinel change (the layout
- * version stays "1"; this is a within-version cleanup, not a schema bump).
- */
-export function sanitizeStorePaths(root, options = {}) {
-    const dryRun = options.dryRun ?? false;
-    const paths = localStorePaths(root);
-    const renamed = [];
-    const conflicts = [];
-    function processContainer(container, isFile) {
-        if (!existsSync(container))
-            return;
-        let entries;
-        try {
-            entries = readdirSync(container);
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            const sanitized = isFile ? sanitizeFileName(entry) : safePathSegment(entry);
-            if (sanitized === entry)
-                continue;
-            const fromPath = join(container, entry);
-            const toPath = join(container, sanitized);
-            // Only rename the expected kind (dir vs file) to avoid surprises.
-            try {
-                const st = statSync(fromPath);
-                if (isFile ? !st.isFile() : !st.isDirectory())
-                    continue;
-            }
-            catch {
-                continue;
-            }
-            if (existsSync(toPath)) {
-                conflicts.push({ from: fromPath, to: toPath, status: "conflict" });
-                continue;
-            }
-            if (dryRun) {
-                renamed.push({ from: fromPath, to: toPath, status: "would-rename" });
-                continue;
-            }
-            try {
-                renameSync(fromPath, toPath);
-                renamed.push({ from: fromPath, to: toPath, status: "renamed" });
-            }
-            catch {
-                conflicts.push({ from: fromPath, to: toPath, status: "conflict" });
-            }
-        }
-    }
-    for (const dir of ID_DIR_CHILDREN) {
-        processContainer(paths[dir], false);
-    }
-    for (const dir of ID_FILE_CHILDREN) {
-        processContainer(paths[dir], true);
-    }
-    return {
-        ok: conflicts.length === 0,
-        root,
-        dryRun,
-        renamed,
-        conflicts
-    };
-}
-//# sourceMappingURL=migrate.js.map

package/dist/runtime/local-files/migrate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../../src/runtime/local-files/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAgB9D;;;;;GAKG;AACH,MAAM,eAAe,GAAG;IACtB,cAAc;IACd,OAAO;IACP,QAAQ;IACR,WAAW;IACX,aAAa;CACL,CAAC;AAEX,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAE3D,SAAS,gBAAgB,CAAC,IAAY;IACpC,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,SAAS,GAA0B,EAAE,CAAC;IAE5C,SAAS,gBAAgB,CAAC,SAAiB,EAAE,MAAe;QAC1D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO;QACnC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,SAAS,KAAK,KAAK;gBAAE,SAAS;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC1C,kEAAkE;YAClE,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;oBAAE,SAAS;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnE,SAAS;YACX,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;gBACrE,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC;QAC1B,IAAI;QACJ,MAAM;QACN,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/runtime/local-files/paths.d.ts

@@ -1,146 +0,0 @@
-/**
- * Map an arbitrary id into a filesystem-safe path segment (DEC-062).
- *
- * V1 ids use `:` as a separator (e.g. `nego:codex`, `claude:proj-1`,
- * `sess:abc123`). On Windows, `:` is the drive-letter separator and is
- * forbidden inside path components — any `mkdir <root>/negotiations/nego:codex`
- * ENOENTs. The same applies to `/`, `\`, `<`, `>`, `"`, `|`, `?`, `*`
- * which are reserved by Windows.
- *
- * The mapping is `[:\\/<>"|?*]+` → `__`. It is deterministic and lossy
- * (we never need to recover the original id from the path segment;
- * lookups go id → path, never path → id; on-disk artefacts always
- * carry the original id in their JSON body).
- *
- * Empty input is mapped to `_` so we never produce an empty path
- * segment.
- */
-export declare function safePathSegment(id: string): string;
-export interface LocalStorePaths {
-    root: string;
-    registry: string;
-    instances: string;
-    keys: string;
-    subagents: string;
-    subagentAudit: string;
-    offboard: string;
-    orgMembership: string;
-    contracts: string;
-    policies: string;
-    engagements: string;
-    artifacts: string;
-    negotiations: string;
-    inbox: string;
-    outbox: string;
-    presence: string;
-    drumbeat: string;
-    blockage: string;
-    escalation: string;
-}
-export declare function localStorePaths(root: string): LocalStorePaths;
-export declare function presenceFile(paths: LocalStorePaths, sessionId: string): string;
-export declare function negotiationDir(paths: LocalStorePaths, negotiationId: string): string;
-export declare function negotiationJournalFile(paths: LocalStorePaths, negotiationId: string): string;
-/**
- * Canonicalize an addressable instance/channel handle so addressing is
- * **case-insensitive** and **label-slug-stable**.
- *
- * The footgun this closes: `deriveInstanceId` builds `host:slugify(label):uuid`
- * (the label is lowercased + slugified), but inbox dirs were keyed on the RAW
- * handle via `safePathSegment`. So a sender addressing `claude:matchID` wrote to
- * `inbox/claude__matchID` while the agent (registered as `claude:matchid:…`)
- * read `inbox/claude__matchid` — the message was silently lost. Routing handles
- * through this first makes both forms resolve to the one canonical inbox.
- *
- * `host:label[:uuid…]` → `lower(host):slugify(label)[:lower(uuid…)]`. A bare
- * token with no `:` (not an instance handle) is returned unchanged.
- */
-export declare function canonicalAddress(addr: string): string;
-/**
- * True iff `addr` is host-qualified (`host:label[:uuid…]`, optionally a
- * subagent `…~name`): a non-empty host segment AND a non-empty label segment.
- * A bare token with no ":" (e.g. "radar-immobilier"), ":label" (empty host) or
- * "host:" (empty label) is NOT addressable — it mis-routes to an orphan inbox.
- */
-export declare function isHostQualifiedAddress(addr: string): boolean;
-/**
- * Throws a user-facing Error if `addr` is not host-qualified. Message names
- * the fix. Used to reject bare-label sends (e.g. "radar-immobilier" → must be
- * "claude:radar-immobilier"): the same label can exist on several hosts.
- */
-export declare function assertHostQualifiedAddress(addr: string, role?: string): void;
-/** Inbox dir for an actor, keyed on its **canonical** handle (case-folded). */
-export declare function inboxDir(paths: LocalStorePaths, actor: string): string;
-/**
- * Inbox dir keyed on the RAW (pre-canonicalization) handle — read-only fallback
- * so envelopes deposited before the case-fold fix are still recovered. Writes
- * always go to the canonical dir; these raw dirs drain as messages are popped.
- */
-export declare function inboxDirRaw(paths: LocalStorePaths, actor: string): string;
-export declare function outboxDir(paths: LocalStorePaths, actor: string): string;
-/** Outbox dir keyed on the RAW handle — read-only fallback for pre-case-fold copies. */
-export declare function outboxDirRaw(paths: LocalStorePaths, actor: string): string;
-/**
- * The outcome of resolving a send target BEFORE depositing (WP-2).
- *
- * - `deliver`        — full id / subagent / unambiguous bare alias with no live session
- *                      hint: just put (legacy path).
- * - `deliver-dormant` — bare alias, 0 live but ≥1 registered instance exists.
- * - `deliver-hint`   — bare alias with exactly 1 live full-id match; deposit to bare
- *                      dir (UNCHANGED destination), surface the uuid to the caller.
- * - `refuse`         — phantom (0 live, 0 registered) | ambiguous (>1 live) | malformed.
- *
- * SAFETY: this function NEVER changes the delivery destination.
- * Auto-routing to a live uuid is an interception risk and is explicitly PARKED.
- */
-export type RecipientResolution = {
-    kind: "deliver";
-    reason?: string;
-} | {
-    kind: "deliver-dormant";
-    reason: string;
-} | {
-    kind: "deliver-hint";
-    liveCandidate: string;
-    reason: string;
-} | {
-    kind: "refuse";
-    reason: string;
-    candidates?: string[];
-};
-/**
- * Resolve how a SEND to `target` should be handled.
- *
- * Does NOT deliver — the caller delivers. Never changes the destination.
- * The `liveInstances` list comes from `listPresence(root).map(s => s.instance)`.
- * The `registeredInstances` list comes from `store.listInstances().map(i => i.instance ?? i.id)`.
- */
-export declare function resolveRecipient(opts: {
-    target: string;
-    liveInstances: readonly string[];
-    registeredInstances: readonly string[];
-}): RecipientResolution;
-/**
- * Gate for REACHING paths (drumbeat relance / wake-another / remote drive).
- *
- * Unlike the inbox-put path, liveness is NOT a blocker for reaching: we
- * intentionally wake dormant agents.  Only a `refuse` outcome (phantom,
- * ambiguous, malformed) should block.  Wraps `resolveRecipient` so all
- * addressing discipline lives in ONE place.
- *
- * This is the REACH-GUARD CHOKEPOINT — the future governance/conductor gate
- * (clearance, conductor-liveness) hooks HERE via the `DrumbeatTickOptions`
- * integration in `watch.ts`, so every reach path inherits it.
- */
-export declare function reachGuard(opts: {
-    target: string;
-    liveInstances: readonly string[];
-    registeredInstances: readonly string[];
-}): {
-    ok: true;
-} | {
-    ok: false;
-    reason: string;
-    kind: string;
-};
-//# sourceMappingURL=paths.d.ts.map

package/dist/runtime/local-files/paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/runtime/local-files/paths.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAsB7D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,MAAM,GACpB,MAAM,CAER;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAerD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO5D;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,SAAc,GAAG,IAAI,CAMjF;AAED,+EAA+E;AAC/E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wFAAwF;AACxF,wBAAgB,YAAY,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1E;AAID;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAe9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,GAAG,mBAAmB,CA2EtB;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM7D"}

package/dist/runtime/local-files/paths.js

@@ -1,233 +0,0 @@
-import { join } from "node:path";
-import { slugify } from "@sentropic/h2a";
-/**
- * Map an arbitrary id into a filesystem-safe path segment (DEC-062).
- *
- * V1 ids use `:` as a separator (e.g. `nego:codex`, `claude:proj-1`,
- * `sess:abc123`). On Windows, `:` is the drive-letter separator and is
- * forbidden inside path components — any `mkdir <root>/negotiations/nego:codex`
- * ENOENTs. The same applies to `/`, `\`, `<`, `>`, `"`, `|`, `?`, `*`
- * which are reserved by Windows.
- *
- * The mapping is `[:\\/<>"|?*]+` → `__`. It is deterministic and lossy
- * (we never need to recover the original id from the path segment;
- * lookups go id → path, never path → id; on-disk artefacts always
- * carry the original id in their JSON body).
- *
- * Empty input is mapped to `_` so we never produce an empty path
- * segment.
- */
-export function safePathSegment(id) {
-    if (typeof id !== "string" || id.length === 0)
-        return "_";
-    const cleaned = id.replace(/[:/\\<>"|?*]+/g, "__");
-    // A pure-dot segment (".", "..", …) is a path-traversal vector: `join(base,
-    // "tenants", "..")` escapes to `base`. Neutralize it so no id (e.g. a broker
-    // `sub=".."` → rootForSub) can climb out of its directory.
-    if (cleaned.length === 0 || /^\.+$/.test(cleaned))
-        return "_";
-    return cleaned;
-}
-export function localStorePaths(root) {
-    return {
-        root,
-        registry: join(root, "registry"),
-        instances: join(root, "registry", "instances.jsonl"),
-        keys: join(root, "registry", "keys.jsonl"),
-        subagents: join(root, "registry", "subagents.jsonl"),
-        subagentAudit: join(root, "registry", "subagent-audit.jsonl"),
-        offboard: join(root, "registry", "offboard.jsonl"),
-        orgMembership: join(root, "registry", "org-membership.jsonl"),
-        contracts: join(root, "contracts"),
-        policies: join(root, "policies"),
-        engagements: join(root, "engagements"),
-        artifacts: join(root, "artifacts"),
-        negotiations: join(root, "negotiations"),
-        inbox: join(root, "inbox"),
-        outbox: join(root, "outbox"),
-        presence: join(root, "presence"),
-        drumbeat: join(root, "drumbeat"),
-        blockage: join(root, "blockage"),
-        escalation: join(root, "escalation")
-    };
-}
-export function presenceFile(paths, sessionId) {
-    return join(paths.presence, `${safePathSegment(sessionId)}.json`);
-}
-export function negotiationDir(paths, negotiationId) {
-    return join(paths.negotiations, safePathSegment(negotiationId));
-}
-export function negotiationJournalFile(paths, negotiationId) {
-    return join(negotiationDir(paths, negotiationId), "journal.jsonl");
-}
-/**
- * Canonicalize an addressable instance/channel handle so addressing is
- * **case-insensitive** and **label-slug-stable**.
- *
- * The footgun this closes: `deriveInstanceId` builds `host:slugify(label):uuid`
- * (the label is lowercased + slugified), but inbox dirs were keyed on the RAW
- * handle via `safePathSegment`. So a sender addressing `claude:matchID` wrote to
- * `inbox/claude__matchID` while the agent (registered as `claude:matchid:…`)
- * read `inbox/claude__matchid` — the message was silently lost. Routing handles
- * through this first makes both forms resolve to the one canonical inbox.
- *
- * `host:label[:uuid…]` → `lower(host):slugify(label)[:lower(uuid…)]`. A bare
- * token with no `:` (not an instance handle) is returned unchanged.
- */
-export function canonicalAddress(addr) {
-    if (typeof addr !== "string" || addr.length === 0)
-        return addr;
-    // Subagent handle `<instance>~<name>` (DEC subagents): the `~name` is
-    // case-sensitive and charset-unrestricted — canonicalize ONLY the instance
-    // part and keep `~name` verbatim, else two siblings differing by case
-    // (…~Researcher vs …~researcher) collapse into one inbox (isolation break).
-    const tilde = addr.indexOf("~");
-    if (tilde >= 0) {
-        return canonicalAddress(addr.slice(0, tilde)) + addr.slice(tilde);
-    }
-    const parts = addr.split(":");
-    if (parts.length < 2)
-        return addr;
-    const [host, label, ...rest] = parts;
-    const canonLabel = label.length === 0 ? label : slugify(label);
-    return [host.toLowerCase(), canonLabel, ...rest.map((segment) => segment.toLowerCase())].join(":");
-}
-/**
- * True iff `addr` is host-qualified (`host:label[:uuid…]`, optionally a
- * subagent `…~name`): a non-empty host segment AND a non-empty label segment.
- * A bare token with no ":" (e.g. "radar-immobilier"), ":label" (empty host) or
- * "host:" (empty label) is NOT addressable — it mis-routes to an orphan inbox.
- */
-export function isHostQualifiedAddress(addr) {
-    if (typeof addr !== "string" || addr.length === 0)
-        return false;
-    // Subagent handle `<instance>~<name>`: validate ONLY the instance part before "~".
-    const tilde = addr.indexOf("~");
-    const instancePart = tilde >= 0 ? addr.slice(0, tilde) : addr;
-    const parts = instancePart.split(":");
-    return parts.length >= 2 && parts[0].length > 0 && parts[1].length > 0;
-}
-/**
- * Throws a user-facing Error if `addr` is not host-qualified. Message names
- * the fix. Used to reject bare-label sends (e.g. "radar-immobilier" → must be
- * "claude:radar-immobilier"): the same label can exist on several hosts.
- */
-export function assertHostQualifiedAddress(addr, role = "recipient") {
-    if (!isHostQualifiedAddress(addr)) {
-        throw new Error(`h2a: ${role} "${addr}" is not host-qualified — address it as <host>:<label> (e.g. claude:${String(addr).replace(/^:+/, "") || "agent"}). A bare label is ambiguous (the same label can exist on several hosts) and routes to an orphan inbox nobody reads. Resolve the exact peer via discover.`);
-    }
-}
-/** Inbox dir for an actor, keyed on its **canonical** handle (case-folded). */
-export function inboxDir(paths, actor) {
-    return join(paths.inbox, safePathSegment(canonicalAddress(actor)));
-}
-/**
- * Inbox dir keyed on the RAW (pre-canonicalization) handle — read-only fallback
- * so envelopes deposited before the case-fold fix are still recovered. Writes
- * always go to the canonical dir; these raw dirs drain as messages are popped.
- */
-export function inboxDirRaw(paths, actor) {
-    return join(paths.inbox, safePathSegment(actor));
-}
-export function outboxDir(paths, actor) {
-    return join(paths.outbox, safePathSegment(canonicalAddress(actor)));
-}
-/** Outbox dir keyed on the RAW handle — read-only fallback for pre-case-fold copies. */
-export function outboxDirRaw(paths, actor) {
-    return join(paths.outbox, safePathSegment(actor));
-}
-/** Pattern for a valid 12-hex UUID segment (case-insensitive). */
-const UUID12_PATTERN = /^[0-9a-f]{12}$/i;
-/**
- * Compute the canonical `host:label` key for an instance address by taking
- * only the first two colon-segments of the canonicalized form.
- */
-function hostLabelKey(addr) {
-    const canonical = canonicalAddress(addr);
-    const parts = canonical.split(":");
-    return `${parts[0]}:${parts[1]}`;
-}
-/**
- * Resolve how a SEND to `target` should be handled.
- *
- * Does NOT deliver — the caller delivers. Never changes the destination.
- * The `liveInstances` list comes from `listPresence(root).map(s => s.instance)`.
- * The `registeredInstances` list comes from `store.listInstances().map(i => i.instance ?? i.id)`.
- */
-export function resolveRecipient(opts) {
-    const { target, liveInstances, registeredInstances } = opts;
-    // 1. Subagent (contains `~`) — pass through unchanged.
-    if (target.includes("~")) {
-        return { kind: "deliver" };
-    }
-    // 2. Split on `:`. Fewer than 2 segments or empty host/label should already
-    //    be rejected by isHostQualifiedAddress upstream — don't double-gate.
-    const parts = target.split(":");
-    if (parts.length < 2 || parts[0].length === 0 || parts[1].length === 0) {
-        return { kind: "deliver" };
-    }
-    // 3. Full id: exactly 3 segments where seg3 is 12-hex.
-    if (parts.length === 3 && UUID12_PATTERN.test(parts[2])) {
-        return { kind: "deliver" };
-    }
-    // 4. Malformed 3-segment: seg3 is NOT 12-hex.
-    if (parts.length >= 3) {
-        const host = parts[0];
-        const label = parts[1];
-        return {
-            kind: "refuse",
-            reason: `'${target}' has a 3rd segment that is not a uuid — address the channel as ${host}:${label} or a live peer as ${host}:${label}:<uuid> (resolve via discover).`
-        };
-    }
-    // 5. Bare alias (exactly 2 segments).
-    const key = hostLabelKey(target);
-    const liveMatches = liveInstances.filter((inst) => hostLabelKey(inst) === key);
-    const registeredMatches = registeredInstances.filter((inst) => hostLabelKey(inst) === key);
-    if (liveMatches.length > 1) {
-        return {
-            kind: "refuse",
-            reason: `'${target}' is ambiguous — ${liveMatches.length} live agents share it; address the exact one (resolve via discover).`,
-            candidates: liveMatches
-        };
-    }
-    if (liveMatches.length === 1) {
-        const liveCandidate = liveMatches[0];
-        return {
-            kind: "deliver-hint",
-            liveCandidate,
-            reason: `bare alias resolved to 1 live agent; deposited to the channel — prefer re-sending to ${liveCandidate} for direct delivery.`
-        };
-    }
-    // 0 live
-    if (registeredMatches.length > 0) {
-        return {
-            kind: "deliver-dormant",
-            reason: `no live session for '${target}'; deposited for wake (a registered agent exists).`
-        };
-    }
-    return {
-        kind: "refuse",
-        reason: `'${target}' matches no live or registered agent — likely a phantom/invented id or sub-label. Resolve via discover; do not invent labels.`
-    };
-}
-// ─── WP-7: Reach Guard ──────────────────────────────────────────────────────
-/**
- * Gate for REACHING paths (drumbeat relance / wake-another / remote drive).
- *
- * Unlike the inbox-put path, liveness is NOT a blocker for reaching: we
- * intentionally wake dormant agents.  Only a `refuse` outcome (phantom,
- * ambiguous, malformed) should block.  Wraps `resolveRecipient` so all
- * addressing discipline lives in ONE place.
- *
- * This is the REACH-GUARD CHOKEPOINT — the future governance/conductor gate
- * (clearance, conductor-liveness) hooks HERE via the `DrumbeatTickOptions`
- * integration in `watch.ts`, so every reach path inherits it.
- */
-export function reachGuard(opts) {
-    const r = resolveRecipient(opts);
-    if (r.kind === "refuse") {
-        return { ok: false, reason: r.reason, kind: r.kind };
-    }
-    return { ok: true };
-}
-//# sourceMappingURL=paths.js.map

package/dist/runtime/local-files/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/runtime/local-files/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACnD,4EAA4E;IAC5E,6EAA6E;IAC7E,2DAA2D;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9D,OAAO,OAAO,CAAC;AACjB,CAAC;AAwBD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC;QACpD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC;QACpD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC;QAC7D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,CAAC;QAClD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC;QAC7D,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACtC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAClC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QACxC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5B,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,SAAiB;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAsB,EAAE,aAAqB;IAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAsB,EACtB,aAAqB;IAErB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,sEAAsE;IACtE,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,mFAAmF;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,IAAI,GAAG,WAAW;IACzE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,KAAK,IAAI,uEAAuE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,2JAA2J,CAClS,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,QAAQ,CAAC,KAAsB,EAAE,KAAa;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAsB,EAAE,KAAa;IAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB,EAAE,KAAa;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,KAAa;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC;AAuBD,kEAAkE;AAClE,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,GAAG,IAAI,CAAC;IAE5D,uDAAuD;IACvD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,uDAAuD;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,8CAA8C;IAC9C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EACJ,IAAI,MAAM,mEAAmE,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,iCAAiC;SACjK,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CACtC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,CACrC,CAAC;IAEF,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,MAAM,CAClD,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,GAAG,CACrC,CAAC;IAEF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EACJ,IAAI,MAAM,oBAAoB,WAAW,CAAC,MAAM,sEAAsE;YACxH,UAAU,EAAE,WAAW;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,aAAa;YACb,MAAM,EACJ,wFAAwF,aAAa,uBAAuB;SAC/H,CAAC;IACJ,CAAC;IAED,SAAS;IACT,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EACJ,wBAAwB,MAAM,oDAAoD;SACrF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EACJ,IAAI,MAAM,gIAAgI;KAC7I,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,IAI1B;IACC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/runtime/local-files/presence.d.ts

@@ -1,80 +0,0 @@
-import { type H2ALaunchContext, type H2ASession, type H2ASessionState, type H2AWorkStatus } from "@sentropic/h2a";
-export interface PresenceWriteResult {
-    /** Absolute path of the presence file on disk. */
-    readonly path: string;
-}
-/**
- * Atomically write a session's presence file under `<root>/.h2a/presence/`.
- * Uses a temp file + rename so concurrent readers always see a complete
- * JSON document (the session owns its own file, so writer contention is
- * not expected, but we keep the rename anyway for partial-write safety).
- */
-export declare function writePresence(root: string, session: H2ASession): PresenceWriteResult;
-/** Read a presence file by session id. Returns undefined if absent or malformed. */
-export declare function readPresence(root: string, sessionId: string): H2ASession | undefined;
-/**
- * Delete a presence file. Idempotent: missing file is not an error.
- */
-export declare function deletePresence(root: string, sessionId: string): void;
-export interface ListPresenceOptions {
-    /** Reference instant; defaults to Date.now(). */
-    readonly now?: number;
-    /** Expiry window in ms; defaults to H2A_SESSION_DEFAULT_EXPIRY_MS. */
-    readonly expiryMs?: number;
-    /** Include expired sessions (default false). */
-    readonly includeExpired?: boolean;
-}
-/**
- * Read all presence files under `<root>/.h2a/presence/`, filter out malformed
- * files, and (by default) drop sessions whose heartbeat is older than
- * `expiryMs`. Sweep expired files from disk as a side-effect.
- */
-export declare function listPresence(root: string, options?: ListPresenceOptions): H2ASession[];
-/**
- * Mutate a session's `heartbeatAt` (or `state`) on disk by reading,
- * patching, and re-writing. The session owns its file so this is safe
- * without a lock for V1 (DEC-051 acknowledges this constraint).
- */
-export declare function updatePresence(root: string, sessionId: string, patch: {
-    heartbeatAt?: string;
-    state?: H2ASessionState;
-    workStatus?: H2AWorkStatus;
-    launchContext?: H2ALaunchContext;
-    lastMcpActivityAt?: string;
-}): H2ASession | undefined;
-/**
- * Reap presence files for the SAME `instance` whose owning process is provably
- * dead — the "false-live" left behind when a host (Claude Code / Codex) drops
- * the MCP stdio connection WITHOUT signalling the child: the process lingered
- * and its blind heartbeat kept the presence "live", so peers kept routing to an
- * agent that could no longer answer. A fresh `mcp-serve` boot calls this at
- * auto-open to clear the stale presence of a previous connection of the SAME
- * agent.
- *
- * Reaps an entry iff ALL hold:
- *  - same `instance` (an instance never migrates machines — it is keyed on the
- *    provider conversation — so the local pid probe is valid);
- *  - a DIFFERENT `sessionId` than `keepSessionId` (never reap the caller);
- *  - a numeric `pid` that `isAlive` reports dead.
- *
- * Best-effort: never throws. `isAlive` is injectable for deterministic tests.
- *
- * @returns the sessionIds that were reaped.
- */
-export declare function reapDeadInstancePresence(root: string, instance: string, keepSessionId: string, isAlive?: (pid: number) => boolean): string[];
-/**
- * Host-wide janitor: reap EVERY presence file whose owning process is provably
- * dead, regardless of instance. The safest possible reap — a dead process
- * cannot own a live session — but it assumes presence pids are local to this
- * machine (true for a single-host bus). On a bus shared across machines, scope
- * with `reapDeadInstancePresence` instead, since a remote pid would read as
- * dead here. Best-effort: never throws. `isAlive` is injectable for tests.
- *
- * @returns the reaped sessionIds (and, for reporting, their instances).
- */
-export declare function reapAllDeadPresence(root: string, isAlive?: (pid: number) => boolean): Array<{
-    sessionId: string;
-    instance: string;
-    pid: number;
-}>;
-//# sourceMappingURL=presence.d.ts.map

package/dist/runtime/local-files/presence.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"presence.d.ts","sourceRoot":"","sources":["../../../src/runtime/local-files/presence.ts"],"names":[],"mappings":"AAYA,OAAO,EAOL,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AAQxB,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,GAClB,mBAAmB,CAgBrB;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,UAAU,GAAG,SAAS,CAiBxB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CASpE;AAED,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,mBAAwB,GAChC,UAAU,EAAE,CAuCd;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GACA,UAAU,GAAG,SAAS,CA2BxB;AAgBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAyB,GAClD,MAAM,EAAE,CAsBV;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAyB,GAClD,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB7D"}