@sentropic/h2a-runtime 0.98.3 → 0.98.5

package/dist/resume-launch-options.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Pinned launch options for `runtime:run --resume` — recovery + SELF-HEAL of
+ * the conflicting-rows outage (2026-10): two registry rows for one
+ * convId/cwd/tool with different bare/gatewayMode pins used to be a bare fatal
+ * ("cannot recover pinned launch options: conflicting registry rows") that
+ * blocked EVERY resume of that conversation, even when all but one row
+ * provably described a dead session.
+ *
+ * The resolution: probe each conflicting row with the SAME 3-state vocabulary
+ * as the managed-host resolver (`probeManagedRowLiveness`). A row whose
+ * session is PROVABLY dead (dead probe, or positively ended) is pruned from
+ * the registry under the lock (`removeRegistryRowsById`); a live or UNKNOWN
+ * row stays (fail closed — a probe failure is never death). When one row (or
+ * none) remains, the resume continues normally with it; a still-conflicting
+ * set stays a fatal, but now naming the ids in cause and the repair action
+ * instead of leaving the operator to guess.
+ */
+import { type ManagedHostProbeResult, type RegistryEntry } from "./registry.js";
+/** Injectable session probes (tests stay deterministic, no tmux/host needed). */
+export type ResumeLaunchProbes = {
+    readonly native?: (name: string) => ManagedHostProbeResult;
+    readonly tmux?: (name: string) => ManagedHostProbeResult;
+};
+/**
+ * Same conflict predicate as the pre-self-heal fatal: any row pinning launch
+ * options (bare/gatewayMode) that differ from the first row's. All rows in the
+ * set share convId/cwd/tool, so ANY difference poisons the whole set.
+ */
+export declare function pinnedLaunchOptionsConflict(entries: readonly RegistryEntry[]): boolean;
+/** Actionable fatal for a conflict that survived the self-heal. */
+export declare function conflictingRowsReason(ids: readonly string[]): string;
+export type PinnedLaunchResolution = {
+    readonly state: "unreadable";
+    readonly reason: string;
+} | {
+    readonly state: "conflict";
+    readonly reason: string;
+    readonly ids: readonly string[];
+} | {
+    readonly state: "ok";
+    readonly entries: RegistryEntry[];
+    readonly prunedIds: readonly string[];
+};
+/**
+ * Resolve the rows that pin launch options for a resume of `convId` in `cwd`
+ * under tool `tool`: read the registry (3-state), keep only managed local rows
+ * for this conversation, self-heal a conflicting set by pruning provably-dead
+ * rows, and report what remains. Pure over injectable probes; the registry
+ * write (pruning) goes through the registry lock.
+ */
+export declare function resolvePinnedLaunchEntries(args: {
+    readonly convId: string;
+    readonly cwd: string;
+    readonly tool: string;
+    /** Defaults to the canonical registry path (honors REMOTE_CLI_CONFIG_HOME). */
+    readonly registryPath?: string;
+    readonly probes?: ResumeLaunchProbes;
+}): PinnedLaunchResolution;
+//# sourceMappingURL=resume-launch-options.d.ts.map

package/dist/resume-launch-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-launch-options.d.ts","sourceRoot":"","sources":["../src/resume-launch-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAML,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,iFAAiF;AACjF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,sBAAsB,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,sBAAsB,CAAC;CAC1D,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,SAAS,aAAa,EAAE,GAChC,OAAO,CAIT;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAKpE;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAEvG;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC,GAAG,sBAAsB,CA0BzB"}

package/dist/resume-launch-options.js

@@ -0,0 +1,64 @@
+/**
+ * Pinned launch options for `runtime:run --resume` — recovery + SELF-HEAL of
+ * the conflicting-rows outage (2026-10): two registry rows for one
+ * convId/cwd/tool with different bare/gatewayMode pins used to be a bare fatal
+ * ("cannot recover pinned launch options: conflicting registry rows") that
+ * blocked EVERY resume of that conversation, even when all but one row
+ * provably described a dead session.
+ *
+ * The resolution: probe each conflicting row with the SAME 3-state vocabulary
+ * as the managed-host resolver (`probeManagedRowLiveness`). A row whose
+ * session is PROVABLY dead (dead probe, or positively ended) is pruned from
+ * the registry under the lock (`removeRegistryRowsById`); a live or UNKNOWN
+ * row stays (fail closed — a probe failure is never death). When one row (or
+ * none) remains, the resume continues normally with it; a still-conflicting
+ * set stays a fatal, but now naming the ids in cause and the repair action
+ * instead of leaving the operator to guess.
+ */
+import { isManagedLocalKind, loadRegistry, probeManagedRowLiveness, removeRegistryRowsById, resolveRegistryPath, } from "./registry.js";
+/**
+ * Same conflict predicate as the pre-self-heal fatal: any row pinning launch
+ * options (bare/gatewayMode) that differ from the first row's. All rows in the
+ * set share convId/cwd/tool, so ANY difference poisons the whole set.
+ */
+export function pinnedLaunchOptionsConflict(entries) {
+    return entries.some((entry) => entry.bare !== entries[0]?.bare || entry.gatewayMode !== entries[0]?.gatewayMode);
+}
+/** Actionable fatal for a conflict that survived the self-heal. */
+export function conflictingRowsReason(ids) {
+    return ("cannot recover pinned launch options: conflicting registry rows: ids " +
+        `${ids.join(", ")} — stop the stale session or remove its row`);
+}
+/**
+ * Resolve the rows that pin launch options for a resume of `convId` in `cwd`
+ * under tool `tool`: read the registry (3-state), keep only managed local rows
+ * for this conversation, self-heal a conflicting set by pruning provably-dead
+ * rows, and report what remains. Pure over injectable probes; the registry
+ * write (pruning) goes through the registry lock.
+ */
+export function resolvePinnedLaunchEntries(args) {
+    const registryPath = args.registryPath ?? resolveRegistryPath();
+    const read = loadRegistry(registryPath);
+    if (read.state === "unknown") {
+        return { state: "unreadable", reason: read.reason };
+    }
+    let entries = read.entries.filter((entry) => isManagedLocalKind(entry.kind) && entry.convId === args.convId &&
+        entry.cwd === args.cwd && entry.tool === args.tool);
+    if (!pinnedLaunchOptionsConflict(entries)) {
+        return { state: "ok", entries, prunedIds: [] };
+    }
+    const deadIds = entries
+        .filter((entry) => probeManagedRowLiveness(entry, args.probes) === "dead")
+        .map((entry) => entry.id);
+    if (deadIds.length > 0) {
+        removeRegistryRowsById(deadIds, registryPath);
+        const pruned = new Set(deadIds);
+        entries = entries.filter((entry) => !pruned.has(entry.id));
+    }
+    if (pinnedLaunchOptionsConflict(entries)) {
+        const ids = entries.map((entry) => entry.id);
+        return { state: "conflict", ids, reason: conflictingRowsReason(ids) };
+    }
+    return { state: "ok", entries, prunedIds: deadIds };
+}
+//# sourceMappingURL=resume-launch-options.js.map

package/dist/resume-launch-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-launch-options.js","sourceRoot":"","sources":["../src/resume-launch-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AAQvB;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAiC;IAEjC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CACjF,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,GAAsB;IAC1D,OAAO,CACL,uEAAuE;QACvE,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,CAC/D,CAAC;AACJ,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAO1C;IACC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC9D,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CACnD,CAAC;IACF,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;SACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC;SACzE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentropic/h2a-runtime",
-  "version": "0.98.3",
+  "version": "0.98.5",
   "type": "module",
   "exports": {
     ".": {