@sentropic/h2a-runtime 0.90.1 → 0.90.3

package/dist/index.d.ts

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { projectStatusForH2a } from "./status-projection.js";
+import type { ProcView } from "./proc-cpu.js";
 import { type RegistryEntry } from "./registry.js";
-import { reclaimProposals, type SessionLease } from "./session-lease.js";
+import { reclaimProposals, type SessionLease, type SessionLeaseFleetAudit, type SessionLeaseWorker } from "./session-lease.js";
 import { projectRemoteAgents } from "./agents-projection.js";
 export declare const packageName = "@sentropic/h2a-runtime";
 export declare const H2A_RUNTIME_CLI_API_VERSION = 1;
@@ -93,6 +94,7 @@ export declare function acquireSessionLease(sessionId: string, opts: {
     holder: string;
     workspace?: string;
     agentPane?: string;
+    worker?: SessionLeaseWorker;
 }): SessionLease | undefined;
 /** What one supervising pass over the session leases did. */
 export type SessionLeaseSupervision = {
@@ -113,6 +115,19 @@ export type SessionLeaseSupervision = {
  * Its only output beyond the store is a list of PROPOSALS.
  */
 export declare function superviseSessionLeases(sessions: ReadonlyArray<RegistryEntry>, now?: string): SessionLeaseSupervision;
+/** Relaunch one managed session while its lease carries the bounded protection. */
+export declare function relaunchSessionWithLease(input: {
+    sessionId: string;
+    tmuxSession: string;
+    command: string;
+    resolvingBoundMs?: number;
+}): boolean;
+/** One on-demand fleet-wide read-back audit; it never runs from rendering. */
+export declare function auditLiveSessionLeases(sessions?: ReadonlyArray<RegistryEntry>, now?: string): SessionLeaseFleetAudit & {
+    reaped: string[];
+    liveLeaseCount: number;
+    procView: ProcView;
+};
 /**
  * Reliability slice 1 — RESUME a throttled HEADLESS LOCAL job. Relaunch the SAME
  * job in the SAME `runCwd` it already ran in (its recorded `cwd` — NOT a fresh

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AA4HA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAiB7D,OAAO,EAcL,KAAK,aAAa,EAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAKL,gBAAgB,EAEhB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AA6G5B,OAAO,EAGL,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAuHhC,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AA0XrB,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrD;AA4HD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6G7B;AAyED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAEvC,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAyCjB;AAQD,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAmU1E;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,YAAY,GAAG,SAAS,CAQ1B;AAED,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,EACtC,GAAG,GAAE,MAAiC,GACrC,uBAAuB,CAuCzB;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAyIrE;AAsND,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,EACnC,MAAM,GAAE,CACN,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CACoC,GAClE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7B;AA2LD,wBAAsB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAy8OvE;AA0BD,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;AAC/B,oFAAoF;AACpF,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC;AAE5B;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAE5E;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;GAIG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAEnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAkIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAiB9C,OAAO,EAcL,KAAK,aAAa,EAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EASL,gBAAgB,EAEhB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AA6G5B,OAAO,EAGL,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAuHhC,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AA0XrB,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrD;AA4HD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6G7B;AAyED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAEvC,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAyCjB;AAQD,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAmU1E;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,GACA,YAAY,GAAG,SAAS,CAW1B;AAED,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,EACtC,GAAG,GAAE,MAAiC,GACrC,uBAAuB,CA4DzB;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAeV;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,QAAQ,GAAE,aAAa,CAAC,aAAa,CAAc,EACnD,GAAG,GAAE,MAAiC,GACrC,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAkB3F;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAyIrE;AAsND,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,EACnC,MAAM,GAAE,CACN,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CACoC,GAClE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7B;AA+LD,wBAAsB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAykPvE;AA0BD,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;AAC/B,oFAAoF;AACpF,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC;AAE5B;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAE5E;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;GAIG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAEnE"}

package/dist/index.js

@@ -15,17 +15,18 @@ import { transmittedSecrets, secretsSummary } from "./secrets.js";
 import { localConvStat, remoteConvStat, alignment } from "./convsync.js";
 import { gitAlignment, localAncestry, localGitStat, remoteGitStat, } from "./gitdiff.js";
 import { syncConversation } from "./sync.js";
-import { attachLocalSession, attachPodTmux, capturePane, capturePaneVisible, clearPaneComposer, conductorRunning, currentTmuxSessionName, currentTmuxSessionIs, ensureManagedTmuxProfile, ensureHeadlessTerminal, existingLocalSessionSlugs, fanoutLabels, findLocalSession, killLocalSession, localSessionGatewayEnvStatus, listLocalSessions, listLocalSessionsWithDiagnostics, localSessionIdle, localSessionPanePid, localSessionName, paneTreeCpuMs, paneWorkerPid, pasteLiteralBlock, submitPane, installH2aStatusSurface, managedSessionCandidates, parseManagedSessionName, openH2aStatusWindow, persistLaunchContext, readLaunchContext, relaunchInSession, resolveAgentPane, resolveAgentPaneForInstance, resolveLocalSession, runLocalCliForeground, sendKeysLiteral, sessionAttached, sessionAttachedCount, setLocalSessionDisplayName, slugify, cleanupHeadlessPromptFile, startH2aWindow, startH2aWindowVerified, startHeadlessSession, startLocalSession, tmuxAvailable, uninstallH2aStatusSurface, } from "./tmux.js";
+import { attachLocalSession, attachPodTmux, capturePane, capturePaneVisible, clearPaneComposer, conductorRunning, currentTmuxSessionName, currentTmuxSessionIs, ensureManagedTmuxProfile, ensureHeadlessTerminal, existingLocalSessionSlugs, fanoutLabels, findLocalSession, killLocalSession, localSessionGatewayEnvStatus, listLocalSessions, listH2aStatusSurfaces, listLocalSessionsWithDiagnostics, localSessionIdle, localSessionPanePid, localSessionName, paneProcessObservation, paneTreeCpuMs, paneWorkerAttribution, paneWorkerAttributionFromView, paneWorkerPid, pasteLiteralBlock, submitPane, installH2aStatusSurface, managedSessionCandidates, parseManagedSessionName, openH2aStatusWindow, persistLaunchContext, readLaunchContext, readFleetProcView, relaunchInSession, resolveAgentPane, resolveAgentPaneForInstance, resolveLocalSession, sessionRelaunchSafety, runLocalCliForeground, sendKeysLiteral, sessionAttached, sessionAttachedCount, setLocalSessionDisplayName, slugify, cleanupHeadlessPromptFile, startH2aWindow, startH2aWindowVerified, startHeadlessSession, startLocalSession, tmuxAvailable, uninstallH2aStatusSurface, } from "./tmux.js";
 import { deliverInitialPrompt, sleepSync, } from "./prompt-delivery.js";
 import { buildLaunchContext } from "./launch-context.js";
 import { migrateTmuxNames } from "./tmux-name-migration.js";
 import { projectStatusForH2a } from "./status-projection.js";
 import { buildAgentLaunchArgs, isAgentLaunchEffort, isAgentLaunchProfile, } from "./agent-launch-args.js";
-import { planRelaunch } from "./relaunch.js";
-import { isHumanFacingSession, readConversationCustomTitle, readLastLayout, reconcileRunConvIds, restore as restoreLayout, } from "./restore.js";
+import { deriveSessionClass } from "./session-class.js";
+import { isRelaunchKillable, planRelaunch, relaunchContinuationPrompt, wakeRelaunchedSession, } from "./relaunch.js";
+import { isHumanFacingSession, legacySessionEvidence, readConversationCustomTitle, readLastLayout, reconcileRunConvIds, restore as restoreLayout, } from "./restore.js";
 import { getLayoutConfig } from "./config.js";
 import { advanceJob, coerceRegistryTool, enroll, enrollFromRun, isLive, listJobs, listLocalForLs, loadRegistry, loadRegistryWithDiagnostics, resolveLocalTmuxSessionForName, tryClaimSlot, withRegistryLock, resolveRegistryPath, } from "./registry.js";
-import { SessionLeaseStore, decideSessionBeat, isSessionLeaseAbandoned, planLeaseSupervision, reclaimProposals, resolveSessionLeasePath, } from "./session-lease.js";
+import { auditSessionLeaseFleet, countLiveSessionLeases, SessionLeaseStore, decideSessionBeat, isSessionLeaseAlive, isSessionLeaseAbandoned, isSessionLeaseDeadBoot, planLeaseSupervision, reclaimProposals, resolveSessionLeasePath, } from "./session-lease.js";
 import { aimdEffectiveCap, assertDelegateEffort, assertSafeName, buildDelegateArgs, buildJobRows, buildRemoteDelegate, buildThrottleResumeArgs, canDelegateAtDepth, childDepthEnvValue, clampDepth, clampRemoteDepthBudget, conductorAdvisory, DEFAULT_MAX_CONCURRENT, DEPTH_ENV, inheritedDepthBudget, isDelegateType, isThrottleResumeDue, jitteredBackoffMs, JOB_ID_ENV, jobDir, planNextStarts, planThrottleStep, readJobResult, THROTTLE_MAX_ATTEMPTS, reconcileRemoteJobs, renderJobsTable, resolveJobCwd, runTrackMirror, sweepStaleJobs, trackItemNewArgs, trackItemRealizeArgs, } from "./delegate.js";
 import { detectThrottle, THROTTLE_TAIL_LINES } from "./throttle-signatures.js";
 import { interactiveResumeNudge, planInteractiveResume, } from "./interactive-throttle.js";
@@ -1014,12 +1015,15 @@ function sessionLeaseStore() {
  * to compute a rate against.
  */
 export function acquireSessionLease(sessionId, opts) {
-    const cpuMs = opts.agentPane ? paneTreeCpuMs(opts.agentPane) : undefined;
+    // CPU baseline and worker identity share one /proc walk at acquire time.
+    const observation = opts.agentPane ? paneProcessObservation(opts.agentPane) : undefined;
+    const worker = opts.worker ?? observation?.worker;
     return sessionLeaseStore().acquire({
         sessionId,
         holder: opts.holder,
         ...(opts.workspace !== undefined ? { workspace: opts.workspace } : {}),
-        ...(cpuMs !== undefined ? { cpuMs } : {}),
+        ...(observation?.cpuMs !== undefined ? { cpuMs: observation.cpuMs } : {}),
+        ...(worker !== undefined ? { worker } : {}),
     });
 }
 /**
@@ -1040,6 +1044,9 @@ export function superviseSessionLeases(sessions, now = new Date().toISOString())
         unreadable: [],
         proposals: [],
     };
+    const procView = readFleetProcView();
+    // R3: prior-boot corpses are reaped silently before any proposal pass.
+    store.reapDeadBootLeases(procView);
     const leases = store.readAll();
     const byId = new Map(leases.map((lease) => [lease.sessionId, lease]));
     for (const step of planLeaseSupervision(leases, sessions)) {
@@ -1055,27 +1062,77 @@ export function superviseSessionLeases(sessions, now = new Date().toISOString())
             if (step.action === "leave")
                 continue;
             const pane = step.tmuxSession ? resolveAgentPane(step.tmuxSession) : undefined;
+            let currentLease = lease;
+            // R1 lazy migration: old leases remain alive until this pass can resolve
+            // their worker. Resolve from the pass-wide snapshot, never by spawning a
+            // /proc walk for every lease.
+            if (currentLease.worker === undefined && pane !== undefined) {
+                const worker = paneWorkerAttributionFromView(pane, procView);
+                if (worker !== undefined) {
+                    currentLease = store.populateWorker({
+                        sessionId: currentLease.sessionId,
+                        token: currentLease.token,
+                        worker,
+                    });
+                }
+            }
+            if (!isSessionLeaseAlive(currentLease, procView, now)) {
+                result.unreadable.push(currentLease.sessionId);
+                continue;
+            }
             const cpuMsNow = pane ? paneTreeCpuMs(pane) : undefined;
-            const decision = decideSessionBeat({ lease, cpuMsNow, now });
+            const decision = decideSessionBeat({ lease: currentLease, cpuMsNow, now });
             if (decision.action === "beat" && cpuMsNow !== undefined) {
-                store.heartbeat({ sessionId: lease.sessionId, token: lease.token, cpuMs: cpuMsNow });
-                result.beaten.push(lease.sessionId);
+                store.heartbeat({ sessionId: currentLease.sessionId, token: currentLease.token, cpuMs: cpuMsNow });
+                result.beaten.push(currentLease.sessionId);
             }
             else if (decision.action === "observe" && cpuMsNow !== undefined) {
-                store.observe({ sessionId: lease.sessionId, token: lease.token, cpuMs: cpuMsNow });
-                result.observed.push(lease.sessionId);
+                store.observe({ sessionId: currentLease.sessionId, token: currentLease.token, cpuMs: cpuMsNow });
+                result.observed.push(currentLease.sessionId);
             }
             else {
-                result.unreadable.push(lease.sessionId);
+                result.unreadable.push(currentLease.sessionId);
             }
         }
         catch {
             // a rejected write (raced re-acquisition, torn store) must not stop the pass
         }
     }
-    result.proposals = reclaimProposals(store.readAll(), now);
+    result.proposals = reclaimProposals(store.readAll(), now, procView);
     return result;
 }
+/** Relaunch one managed session while its lease carries the bounded protection. */
+export function relaunchSessionWithLease(input) {
+    const store = sessionLeaseStore();
+    const lease = store.forSession(input.sessionId);
+    if (lease === undefined)
+        return relaunchInSession(input.tmuxSession, input.command);
+    const pane = resolveAgentPane(input.tmuxSession);
+    const outcome = store.relaunch({
+        sessionId: lease.sessionId,
+        token: lease.token,
+        ...(input.resolvingBoundMs !== undefined
+            ? { resolvingBoundMs: input.resolvingBoundMs }
+            : {}),
+        act: () => relaunchInSession(input.tmuxSession, input.command),
+        resolveWorker: () => (pane ? paneWorkerAttribution(pane) : undefined),
+    });
+    return outcome.succeeded;
+}
+/** One on-demand fleet-wide read-back audit; it never runs from rendering. */
+export function auditLiveSessionLeases(sessions = listJobs(), now = new Date().toISOString()) {
+    const store = sessionLeaseStore();
+    const leases = store.readAll();
+    const procView = readFleetProcView();
+    const report = auditSessionLeaseFleet(sessions.map((session) => ({
+        sessionId: session.id,
+        ...(session.tmuxSession !== undefined ? { tmuxSession: session.tmuxSession } : {}),
+        ...(session.jobState !== undefined ? { jobState: session.jobState } : {}),
+    })), leases, listH2aStatusSurfaces(), procView, now);
+    const liveLeaseCount = countLiveSessionLeases(leases, procView, now);
+    const reaped = store.reapDeadBootLeases(procView);
+    return { ...report, reaped, liveLeaseCount, procView };
+}
 /** Human-readable duration for lease reporting ("41m", "2h13m"). */
 function formatIdle(ms) {
     const minutes = Math.floor(ms / 60_000);
@@ -1449,13 +1506,14 @@ function registryEntriesForLocalTmuxTarget(target, local, entries = loadRegistry
     });
 }
 function registryEntryForResumeTarget(target, local) {
+    const evidence = legacySessionEvidence(homedir(), local === undefined ? listLocalSessions() : [local]);
     const matches = registryEntriesForLocalTmuxTarget(target, local).filter((e) => {
         // Resume is a human-facing operation, not a promotion path. Share the
         // durable class test with restore so legacy human rows remain resumable,
         // while delegated jobs and explicit background launches stay excluded.
         if (e.role !== undefined)
             return false;
-        return isHumanFacingSession(e);
+        return isHumanFacingSession(e, evidence);
     });
     const ids = new Set(matches.map((e) => e.id));
     if (ids.size !== 1)
@@ -3339,6 +3397,15 @@ export async function main(argv) {
             process.exitCode = 1;
             return;
         }
+        let gatewayMode;
+        try {
+            gatewayMode = gatewayModeFromOptions(opts);
+        }
+        catch (error) {
+            process.stderr.write(`[h2a] ${error.message}.\n`);
+            process.exitCode = 1;
+            return;
+        }
         const target = slug ?? slugify(process.cwd());
         const localResolution = resolveLocalSession(target);
         if (localResolution.kind === "ambiguous") {
@@ -3404,15 +3471,6 @@ export async function main(argv) {
             return;
         }
         const profile = entry.tool;
-        let gatewayMode;
-        try {
-            gatewayMode = gatewayModeFromOptions(opts);
-        }
-        catch (error) {
-            process.stderr.write(`[h2a] ${error.message}.\n`);
-            process.exitCode = 1;
-            return;
-        }
         if (gatewayMode === "gateway" && !profileUsesLlmMeshGateway(profile)) {
             process.stderr.write(`[h2a] --llm-gateway/--gw is unsupported for ${profile}; this gateway is Anthropic-compatible and only Claude profiles consume it.\n`);
             process.exitCode = 2;
@@ -3535,13 +3593,19 @@ export async function main(argv) {
             }
         }
         gateway = await injectLlmMeshGatewayEnv(effectiveGatewayMode, true, localSessionName(resumeSlug));
-        const { name } = startLocalSession(profile, command, entry.cwd, args, resumeSlug, undefined, { sessionClass: "human", attachedTerminal: true });
+        const sessionClass = deriveSessionClass({
+            background: opts.attach !== true,
+            humanTerminal: opts.attach === true &&
+                process.stdin.isTTY === true &&
+                process.stdout.isTTY === true,
+        });
+        const { name } = startLocalSession(profile, command, entry.cwd, args, resumeSlug, undefined, { sessionClass, attachedTerminal: true });
         enrollFromRun({
             profile,
             slug: resumeSlug,
             tmuxSession: name,
             cwd: entry.cwd,
-            sessionClass: "human",
+            sessionClass,
             ...(entry.convId ? { convId: entry.convId } : {}),
             ...(gatewayMode !== "auto" ? { gatewayMode } : {}),
         });
@@ -3736,7 +3800,11 @@ export async function main(argv) {
         // A detached/background or run-once launch is a worker, even when its
         // agent later emits a Claude SessionStart hook. Stamp this through tmux
         // so that hook cannot reclassify it as a human session.
-        const sessionClass = opts.background || opts.headless ? "background" : "human";
+        const sessionClass = deriveSessionClass({
+            background: opts.background === true,
+            headless: opts.headless === true,
+            humanTerminal: opts.attachedTerminal !== false,
+        });
         let activeGateway;
         const h2a = getH2aConfig();
         const h2aSidecar = opts.h2a ?? h2a.enabled;
@@ -4553,11 +4621,14 @@ export async function main(argv) {
         .command("leases")
         .description("Session slot leases (machine-scoped): who holds a concurrency slot, when it last proved it was working, and which slots are reclaimable. READ-ONLY — it kills nothing and frees nothing.")
         .option("--probe", "before reporting, run one supervising pass: beat the leases of sessions whose pane is burning CPU, record the others")
+        .option("--audit", "run one on-demand fleet-wide read-back audit (one tmux FORMAT call and one /proc scan)")
         .action((opts) => {
         const now = new Date().toISOString();
         if (opts.probe === true)
             superviseSessionLeases(listJobs(), now);
-        const leases = sessionLeaseStore().readAll();
+        const audit = opts.audit === true ? auditLiveSessionLeases(listJobs(), now) : undefined;
+        const store = sessionLeaseStore();
+        const leases = store.readAll();
         if (leases.length === 0) {
             process.stdout.write("no session leases\n");
             return;
@@ -4568,17 +4639,33 @@ export async function main(argv) {
             .sort((a, b) => Date.parse(a.heartbeatAt) - Date.parse(b.heartbeatAt))
             .map((lease) => {
             const idle = nowMs - Date.parse(lease.heartbeatAt);
-            const state = isSessionLeaseAbandoned(lease, now) ? "RECLAIMABLE" : "held";
+            const state = audit
+                ? isSessionLeaseAlive(lease, audit.procView, now)
+                    ? "held"
+                    : "RECLAIMABLE"
+                : isSessionLeaseAbandoned(lease, now)
+                    ? "RECLAIMABLE"
+                    : "held";
             return (`${lease.sessionId.padEnd(24)} ${state.padEnd(12)} ` +
                 `idle ${formatIdle(idle).padEnd(7)} ttl ${formatIdle(lease.ttlMs).padEnd(6)} ` +
                 `holder ${lease.holder}`);
         });
         process.stdout.write(`${rows.join("\n")}\n`);
-        const reclaimable = reclaimProposals(leases, now).length;
+        const reclaimable = audit
+            ? reclaimProposals(leases, now, audit.procView).length
+            : reclaimProposals(leases, now).length;
         if (reclaimable > 0) {
             process.stderr.write(`[h2a] ${reclaimable} slot(s) reclaimable — free one with: h2a jobs reclaim <id> ` +
                 "(the session's tmux window is left running and can still be attached)\n");
         }
+        if (audit) {
+            if (audit.reaped.length > 0) {
+                process.stderr.write(`[h2a] audit reaped prior-boot lease(s): ${audit.reaped.join(", ")}\n`);
+            }
+            if (audit.missingStatusSurface.length > 0) {
+                process.stderr.write(`[h2a] audit status-surface drift: ${audit.missingStatusSurface.join(", ")}\n`);
+            }
+        }
     });
     jobsCommand
         .command("reclaim <id>")
@@ -4586,15 +4673,21 @@ export async function main(argv) {
         .action((id) => {
         const now = new Date().toISOString();
         const store = sessionLeaseStore();
-        const lease = store.forSession(id);
+        let lease = store.forSession(id);
         if (!lease) {
             process.stderr.write(`[h2a] no session lease for "${id}" — nothing to reclaim (see: h2a jobs leases)\n`);
             process.exitCode = 1;
             return;
         }
+        const procView = readFleetProcView();
+        if (isSessionLeaseDeadBoot(lease, procView)) {
+            store.reapDeadBootLeases(procView);
+            process.stdout.write(`reaped ${id} — lease belonged to a prior boot\n`);
+            return;
+        }
         // The one guard that matters: a session still proving it works keeps its
         // slot, whatever the operator believes. Reclaiming is not arbitration.
-        if (!isSessionLeaseAbandoned(lease, now)) {
+        if (isSessionLeaseAlive(lease, procView, now)) {
             const idle = Date.parse(now) - Date.parse(lease.heartbeatAt);
             process.stderr.write(`[h2a] refusing to reclaim ${id}: its lease still beats (last proof of work ` +
                 `${formatIdle(idle)} ago, TTL ${formatIdle(lease.ttlMs)}). It is working.\n`);
@@ -5477,7 +5570,10 @@ export async function main(argv) {
             })(),
             slug: s.slug,
             name: s.name,
-            idle: localSessionIdle(s.name),
+            ...(() => {
+                const safety = sessionRelaunchSafety(s.name);
+                return { ...safety, livenessReason: safety.reason };
+            })(),
         })), {
             ...(forced ? { force: true } : {}),
             ...(opts.all && !opts.includeAgents
@@ -5510,7 +5606,15 @@ export async function main(argv) {
         if (!forced) {
             let ok = 0;
             for (const action of plan.actions) {
-                if (relaunchInSession(action.name, action.cmd)) {
+                const sessionId = entryByTmuxSession.get(action.name)?.id;
+                const relaunched = sessionId !== undefined
+                    ? relaunchSessionWithLease({
+                        sessionId,
+                        tmuxSession: action.name,
+                        command: action.cmd,
+                    })
+                    : relaunchInSession(action.name, action.cmd);
+                if (relaunched) {
                     ok += 1;
                     process.stderr.write(`[h2a] relaunched ${action.slug}: ${action.cmd}\n`);
                 }
@@ -5576,16 +5680,38 @@ export async function main(argv) {
             process.exitCode = 1;
             return;
         }
+        const finalReady = [];
+        for (const item of ready) {
+            const safety = sessionRelaunchSafety(item.action.name);
+            if (!isRelaunchKillable(safety)) {
+                process.stderr.write(`[h2a] skipped ${item.action.slug}: ${safety.reason}\n`);
+                continue;
+            }
+            finalReady.push(item);
+        }
         let ok = 0;
-        for (const { action, entry, sessionClass } of ready) {
-            if (!killLocalSession(action.name)) {
-                process.stderr.write(`[h2a] FAILED to force-restart ${action.slug}: tmux session ${action.name} could not be killed.\n`);
+        for (const { action, entry, sessionClass } of finalReady) {
+            const safety = sessionRelaunchSafety(action.name);
+            if (!isRelaunchKillable(safety)) {
+                process.stderr.write(`[h2a] skipped ${action.slug}: became live before kill: ${safety.reason}\n`);
+                continue;
+            }
+            if (!safety.identity) {
+                process.stderr.write(`[h2a] skipped ${action.slug}: liveness identity was unreadable immediately before kill.\n`);
+                continue;
+            }
+            if (!killLocalSession(action.name, safety.identity)) {
+                process.stderr.write(`[h2a] skipped ${action.slug}: tmux session ${action.name} changed or was no longer proven dead immediately before kill.\n`);
                 continue;
             }
             try {
                 const gatewayMode = gatewayModeForProfile(action.profile, entry.gatewayMode ?? "auto");
                 await injectLlmMeshGatewayEnv(gatewayMode, true, localSessionName(action.slug));
-                const { name } = startLocalSession(action.profile, action.command, entry.cwd, action.args, action.slug, undefined, { sessionClass });
+                const { name, agentPane } = startLocalSession(action.profile, action.command, entry.cwd, action.args, action.slug, undefined, {
+                    sessionClass,
+                    resumeId: action.convId,
+                    attachedTerminal: true,
+                });
                 enrollFromRun({
                     profile: action.profile,
                     slug: action.slug,
@@ -5597,8 +5723,32 @@ export async function main(argv) {
                         ? { gatewayMode: entry.gatewayMode }
                         : {}),
                 });
+                const wake = wakeRelaunchedSession(relaunchContinuationPrompt(entry.task), {
+                    deliverContinuation: (prompt) => deliverInitialPrompt(agentPane, prompt, {
+                        capturePane: capturePaneVisible,
+                        clearComposer: clearPaneComposer,
+                        pasteBlock: pasteLiteralBlock,
+                        submit: submitPane,
+                        cpuMs: paneTreeCpuMs,
+                        sleep: sleepSync,
+                        now: () => Date.now(),
+                    }),
+                    submitConfirmation: () => submitPane(agentPane),
+                    capturePane: () => capturePaneVisible(agentPane),
+                    sleep: sleepSync,
+                    now: () => Date.now(),
+                });
+                if (wake.confirmation === "auto-passed") {
+                    process.stderr.write(`[h2a] ${action.slug}: Claude stale-session confirmation auto-passed once\n`);
+                }
+                if (wake.state !== "working") {
+                    process.stderr.write(`[h2a] FAILED to wake ${action.slug} after resume: ${wake.reason}\n` +
+                        (wake.capture ? `[h2a] last screen:\n${wake.capture}\n` : ""));
+                    continue;
+                }
                 ok += 1;
-                process.stderr.write(`[h2a] force-restarted ${action.slug}: ${action.cmd}\n`);
+                process.stderr.write(`[h2a] force-restarted ${action.slug}: ${action.cmd}; objective re-injected; agent WORKING ` +
+                    `(${Math.round(wake.delivery.cpuDeltaMs)}ms CPU, ${wake.delivery.evidence})\n`);
             }
             catch (error) {
                 process.stderr.write(`[h2a] FAILED to force-restart ${action.slug} after killing ${action.name}: ${error.message}\n`);
@@ -5701,6 +5851,9 @@ export async function main(argv) {
         });
         let nudged = 0;
         if (apply) {
+            const leaseIdByTmuxSession = new Map(loadRegistry()
+                .filter((entry) => entry.tmuxSession !== undefined)
+                .map((entry) => [entry.tmuxSession, entry.id]));
             for (const r of plan.toResume) {
                 // DOUBLE-CHECK the attached guard at the moment of action (the pure plan
                 // already excluded attached panes, but re-read in case a human just
@@ -5709,7 +5862,14 @@ export async function main(argv) {
                     process.stderr.write(`[h2a] ${r.name} (${r.type}) just got attached — skipping the nudge\n`);
                     continue;
                 }
-                const ok = relaunchInSession(r.name, interactiveResumeNudge(r.type));
+                const sessionId = leaseIdByTmuxSession.get(r.name);
+                const ok = sessionId !== undefined
+                    ? relaunchSessionWithLease({
+                        sessionId,
+                        tmuxSession: r.name,
+                        command: interactiveResumeNudge(r.type),
+                    })
+                    : relaunchInSession(r.name, interactiveResumeNudge(r.type));
                 if (ok) {
                     nudged += 1;
                     throttleState.set(r.name, r.next);