@sentropic/h2a-runtime 0.98.7-rc.4 → 0.98.7-rc.7

package/dist/identity-cull/identity-fence.js

@@ -0,0 +1,221 @@
+/**
+ * Runtime-owned fail-closed identity fence for the cull staging path.
+ *
+ * Why this file exists: `identity-cull/cull.ts` verifies a held-descriptor
+ * CAS while holding the canonical `identity/.lock`. That hold used to come
+ * from `@sentropic/h2a` (`withIdentityFenceSync`), an undeclared
+ * runtime→core edge that broke isolated installs of this package
+ * (`ERR_MODULE_NOT_FOUND` before any verb ran). This module gives the
+ * staging verification a runtime-owned hold instead: exclusive-create,
+ * protocol-compatible v2 records, still-held checks, bounded wait.
+ *
+ * What this module is NOT: it is not the succession protocol. It never
+ * elects a successor, never reaps legacy records, never retires anything.
+ * Every uncertain outcome fails closed (wait, then `LockTimeoutError`, which
+ * the caller maps to ABORTED) — never a takeover, never a silent pass.
+ *
+ * Interop contract with the core reader (pinned by
+ * `packages/h2a/test/identity-lock-v6.test.js` R1/R2 and by the parity test
+ * in `cull.test.ts`, which reads our held record through the core parser):
+ * the held file carries EXACTLY the v2 key set, `recordVersion: 2`,
+ * `protocol: "identity-binding-fence-v1"`, `publication: "link"`. A live
+ * holder pid makes core wait; a crashed holder is recovered by core's own
+ * dead-holder path. `hostKind: "weak"` with null anchors is deliberate:
+ * staging holds assert nothing about machine identity, and the core parser
+ * accepts weak records while treating them conservatively.
+ *
+ * Stale takeover is deliberately narrow: only a record that parses as valid
+ * v2 AND names a pid that `kill(pid, 0)` proves absent (ESRCH) is unlinked.
+ * EPERM (alive but unpermissioned), unparseable content, and non-positive
+ * pids are hands-off: wait for the timeout, then fail closed.
+ */
+import { closeSync, fsyncSync, openSync, readFileSync, unlinkSync, writeSync } from "node:fs";
+export const IDENTITY_BINDING_FENCE_PROTOCOL = "identity-binding-fence-v1";
+const LOCK_RECORD_MODE = 0o600;
+const DEFAULT_TIMEOUT_MS = 5000;
+const DEFAULT_POLL_MS = 50;
+/** Thrown when the hold cannot be acquired within the bounded budget. The
+ * `name` matches the core fence timeout so callers mapping by name keep
+ * working across the layering boundary. */
+export class FenceTimeoutError extends Error {
+    name = "LockTimeoutError";
+    constructor(lockPath, timeoutMs) {
+        super(`identity fence unavailable: ${lockPath} stayed held for ${timeoutMs} ms`);
+    }
+}
+function newToken() {
+    const bytes = new Uint32Array(4);
+    crypto.getRandomValues(bytes);
+    return [...bytes].map((word) => word.toString(16).padStart(8, "0")).join("");
+}
+function readHeldToken(lockPath) {
+    let raw;
+    try {
+        raw = readFileSync(lockPath, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return undefined;
+    const record = value;
+    const allowed = new Set([
+        "recordVersion", "protocol", "platform", "publication", "hostKind", "host",
+        "boot", "ns", "timeNs", "pid", "start", "token", "fenceEpoch", "at",
+        "target", "operator",
+    ]);
+    if (!Object.keys(record).every((key) => allowed.has(key)))
+        return undefined;
+    if (record["recordVersion"] !== 2 || record["protocol"] !== IDENTITY_BINDING_FENCE_PROTOCOL)
+        return undefined;
+    if (record["publication"] !== "link" && record["publication"] !== "o-excl")
+        return undefined;
+    if (typeof record["token"] !== "string" || !/^[0-9a-f]{32}$/.test(record["token"]))
+        return undefined;
+    if (record["fenceEpoch"] !== record["token"])
+        return undefined;
+    if (typeof record["pid"] !== "number" || !Number.isSafeInteger(record["pid"]))
+        return undefined;
+    return record.token;
+}
+function recordPid(lockPath) {
+    let raw;
+    try {
+        raw = readFileSync(lockPath, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    try {
+        const value = JSON.parse(raw);
+        return typeof value.pid === "number" && Number.isSafeInteger(value.pid) && value.pid > 0
+            ? value.pid
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function holderProvenDead(pid) {
+    try {
+        process.kill(pid, 0);
+        return false;
+    }
+    catch (error) {
+        return error.code === "ESRCH";
+    }
+}
+function platform() {
+    const p = process.platform;
+    return p === "linux" || p === "darwin" || p === "win32" ? p : "other";
+}
+function writeHoldRecord(lockPath, token) {
+    // Exactly the v2 key set — no extras (the core reader rejects unknown
+    // fields), weak anchors (staging asserts no machine identity).
+    const record = {
+        recordVersion: 2,
+        protocol: IDENTITY_BINDING_FENCE_PROTOCOL,
+        platform: platform(),
+        publication: "link",
+        hostKind: "weak",
+        host: null,
+        boot: null,
+        ns: null,
+        timeNs: null,
+        pid: process.pid,
+        start: null,
+        token,
+        fenceEpoch: token,
+        at: Date.now(),
+    };
+    const fd = openSync(lockPath, "wx", LOCK_RECORD_MODE);
+    try {
+        writeSync(fd, JSON.stringify(record));
+        fsyncSync(fd);
+    }
+    catch (error) {
+        try {
+            closeSync(fd);
+        }
+        catch { /* already closed */ }
+        try {
+            unlinkSync(lockPath);
+        }
+        catch { /* best-effort rollback */ }
+        throw error;
+    }
+    closeSync(fd);
+}
+function pollSlice(pollMs) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, pollMs);
+}
+function acquire(lockPath, timeoutMs, pollMs) {
+    const deadline = performance.now() + timeoutMs;
+    for (;;) {
+        const token = newToken();
+        try {
+            writeHoldRecord(lockPath, token);
+            return token;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        // Held by someone: only an ESRCH-proven-dead valid record is taken over.
+        // Anything else (live holder, unparseable content, foreign shape) waits.
+        const pid = recordPid(lockPath);
+        if (pid !== undefined && holderProvenDead(pid)) {
+            try {
+                unlinkSync(lockPath);
+            }
+            catch { /* raced a release; retry below */ }
+            continue;
+        }
+        if (performance.now() >= deadline)
+            throw new FenceTimeoutError(lockPath, timeoutMs);
+        pollSlice(Math.min(pollMs, Math.max(0, deadline - performance.now())));
+    }
+}
+function release(lockPath, token) {
+    // Remove only our own hold: never unlink a successor's record.
+    try {
+        if (readHeldToken(lockPath) !== token)
+            return;
+    }
+    catch {
+        return;
+    }
+    try {
+        unlinkSync(lockPath);
+    }
+    catch { /* already gone */ }
+}
+export function withIdentityFenceSync(lockPath, fn, options = {}) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
+    const token = acquire(lockPath, timeoutMs, pollMs);
+    const lease = {
+        stillHeld: () => {
+            try {
+                return readHeldToken(lockPath) === token;
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+    try {
+        return fn(lease);
+    }
+    finally {
+        release(lockPath, token);
+    }
+}
+//# sourceMappingURL=identity-fence.js.map

package/dist/identity-cull/identity-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-fence.js","sourceRoot":"","sources":["../../src/identity-cull/identity-fence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAE9F,MAAM,CAAC,MAAM,+BAA+B,GAAG,2BAA2B,CAAC;AAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,eAAe,GAAG,EAAE,CAAC;AAW3B;;2CAE2C;AAC3C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,GAAG,kBAAkB,CAAC;IACnC,YAAY,QAAgB,EAAE,SAAiB;QAC7C,KAAK,CAAC,+BAA+B,QAAQ,oBAAoB,SAAS,KAAK,CAAC,CAAC;IACnF,CAAC;CACF;AAED,SAAS,QAAQ;IACf,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAMD,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM;QAC1E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI;QACnE,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,+BAA+B;QAAE,OAAO,SAAS,CAAC;IAC9G,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7F,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAChG,OAAQ,MAAgC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;QACnD,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC;YACtF,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,KAAa;IACtD,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,MAAM,GAAG;QACb,aAAa,EAAE,CAAC;QAChB,QAAQ,EAAE,+BAA+B;QACzC,QAAQ,EAAE,QAAQ,EAAE;QACpB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI;QACV,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,IAAI;QACX,KAAK;QACL,UAAU,EAAE,KAAK;QACjB,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;KACf,CAAC;IACF,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACtC,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACrD,IAAI,CAAC;YAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,SAAS,CAAC,EAAE,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,SAAiB,EAAE,MAAc;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,KAAa;IAC9C,+DAA+D;IAC/D,IAAI,CAAC;QACH,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,KAAK;YAAE,OAAO;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,EAAoC,EACpC,UAAgC,EAAE;IAElC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAuB;QAChC,SAAS,EAAE,GAAG,EAAE;YACd,IAAI,CAAC;gBACH,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;KACF,CAAC;IACF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/identity-operator-break.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Operator break verbs (`identity unlock`, `lock break`) without a
+ * core import.
+ *
+ * Breaking an identity or succession lock needs the core lock protocols, so
+ * this package cannot implement it — but it also cannot import
+ * `@sentropic/h2a` (undeclared runtime→core edge: isolated installs crash
+ * with `ERR_MODULE_NOT_FOUND`). Instead the verbs delegate to the core CLI's
+ * hidden `__operator-break` plumbing over the `h2a` binary (the same spawn
+ * pattern `central-mcp.ts` already uses for `mcp-central-serve`) and relay
+ * stdio and the exit code byte-for-byte, so user-visible behavior is
+ * unchanged where core is installed.
+ *
+ * Fail-closed without core: a missing `h2a` binary (ENOENT) or an
+ * already-delegated call (the hop marker, which guards new-runtime/old-core
+ * skew where the hidden verb would dispatch back here and fork recursions)
+ * prints a clean refusal instead of a module crash.
+ */
+import { spawnSync } from "node:child_process";
+export declare const OPERATOR_BREAK_VERB = "__operator-break";
+export declare const OPERATOR_BREAK_HOP_ENV = "H2A_OPERATOR_BREAK_HOP";
+/**
+ * Set by core on `process.env` when it dispatches to this runtime
+ * (same-process dispatch): the exact core entry implementing the hidden
+ * plumbing. Spawning it via `process.execPath` never depends on PATH and
+ * always hits the lockstep core — which matters in test/dev checkouts where
+ * no `h2a` binary is installed.
+ */
+export declare const CORE_ENTRY_ENV = "H2A_CORE_ENTRY";
+export declare function coreSpawnTarget(env: NodeJS.ProcessEnv): {
+    command: string;
+    prefixArgs: string[];
+};
+export interface OperatorBreakRunner {
+    spawn: typeof spawnSync;
+    env: NodeJS.ProcessEnv;
+    stderr: {
+        write(chunk: string): unknown;
+    };
+    setExitCode: (code: number) => void;
+}
+export declare function operatorBreak(lockPath: string, token: string, assertDead: boolean, setExitCode: (code: number) => void, runner?: OperatorBreakRunner): void;
+//# sourceMappingURL=identity-operator-break.d.ts.map

package/dist/identity-operator-break.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-operator-break.d.ts","sourceRoot":"","sources":["../src/identity-operator-break.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,eAAO,MAAM,mBAAmB,qBAAqB,CAAC;AACtD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAE/C,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAMjG;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,SAAS,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC1C,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AASD,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,OAAO,EACnB,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EACnC,MAAM,GAAE,mBAA6C,GACpD,IAAI,CAyCN"}

package/dist/identity-operator-break.js

@@ -0,0 +1,85 @@
+/**
+ * Operator break verbs (`identity unlock`, `lock break`) without a
+ * core import.
+ *
+ * Breaking an identity or succession lock needs the core lock protocols, so
+ * this package cannot implement it — but it also cannot import
+ * `@sentropic/h2a` (undeclared runtime→core edge: isolated installs crash
+ * with `ERR_MODULE_NOT_FOUND`). Instead the verbs delegate to the core CLI's
+ * hidden `__operator-break` plumbing over the `h2a` binary (the same spawn
+ * pattern `central-mcp.ts` already uses for `mcp-central-serve`) and relay
+ * stdio and the exit code byte-for-byte, so user-visible behavior is
+ * unchanged where core is installed.
+ *
+ * Fail-closed without core: a missing `h2a` binary (ENOENT) or an
+ * already-delegated call (the hop marker, which guards new-runtime/old-core
+ * skew where the hidden verb would dispatch back here and fork recursions)
+ * prints a clean refusal instead of a module crash.
+ */
+import { spawnSync } from "node:child_process";
+export const OPERATOR_BREAK_VERB = "__operator-break";
+export const OPERATOR_BREAK_HOP_ENV = "H2A_OPERATOR_BREAK_HOP";
+/**
+ * Set by core on `process.env` when it dispatches to this runtime
+ * (same-process dispatch): the exact core entry implementing the hidden
+ * plumbing. Spawning it via `process.execPath` never depends on PATH and
+ * always hits the lockstep core — which matters in test/dev checkouts where
+ * no `h2a` binary is installed.
+ */
+export const CORE_ENTRY_ENV = "H2A_CORE_ENTRY";
+export function coreSpawnTarget(env) {
+    const entry = env[CORE_ENTRY_ENV];
+    if (typeof entry === "string" && entry.length > 0) {
+        return { command: process.execPath, prefixArgs: [entry] };
+    }
+    return { command: "h2a", prefixArgs: [] };
+}
+const realRunner = (setExitCode) => ({
+    spawn: spawnSync,
+    env: process.env,
+    stderr: process.stderr,
+    setExitCode,
+});
+export function operatorBreak(lockPath, token, assertDead, setExitCode, runner = realRunner(setExitCode)) {
+    if (runner.env[OPERATOR_BREAK_HOP_ENV]) {
+        runner.stderr.write("[h2a] lock break unavailable: already delegated to the core CLI (version skew: update core and runtime lockstep)\n");
+        runner.setExitCode(1);
+        return;
+    }
+    const target = coreSpawnTarget(runner.env);
+    const args = [
+        ...target.prefixArgs,
+        OPERATOR_BREAK_VERB,
+        "--lock", lockPath,
+        "--token", token,
+        ...(assertDead ? ["--assert-dead"] : []),
+    ];
+    // NB: spawnSync reports a failed spawn on `result.error` — it only throws
+    // for invalid arguments. Both shapes mean the delegation cannot run.
+    let result;
+    try {
+        result = runner.spawn(target.command, args, {
+            stdio: "inherit",
+            env: { ...runner.env, [OPERATOR_BREAK_HOP_ENV]: "1" },
+        });
+    }
+    catch (error) {
+        result = { status: null, error: error };
+    }
+    const spawnError = result.error;
+    if (spawnError) {
+        if (spawnError.code === "ENOENT") {
+            runner.stderr.write("[h2a] lock break unavailable: the core h2a CLI is not installed beside this runtime\n");
+        }
+        else {
+            runner.stderr.write(`[h2a] lock break unavailable: cannot delegate to the core h2a CLI (${spawnError.code ?? spawnError.message})\n`);
+        }
+        runner.setExitCode(1);
+        return;
+    }
+    if (typeof result.status === "number")
+        runner.setExitCode(result.status);
+    else
+        runner.setExitCode(1);
+}
+//# sourceMappingURL=identity-operator-break.js.map

package/dist/identity-operator-break.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-operator-break.js","sourceRoot":"","sources":["../src/identity-operator-break.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAC/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC5C,CAAC;AASD,MAAM,UAAU,GAAG,CAAC,WAAmC,EAAuB,EAAE,CAAC,CAAC;IAChF,KAAK,EAAE,SAAS;IAChB,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAa,EACb,UAAmB,EACnB,WAAmC,EACnC,SAA8B,UAAU,CAAC,WAAW,CAAC;IAErD,IAAI,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,oHAAoH,CACrH,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG;QACX,GAAG,MAAM,CAAC,UAAU;QACpB,mBAAmB;QACnB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,KAAK;QAChB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,MAAoC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE;YAC1C,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAc,EAAkC,CAAC;IACnF,CAAC;IACD,MAAM,UAAU,GAAI,MAA4C,CAAC,KAAK,CAAC;IACvE,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC/G,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,sEAAsE,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,OAAO,KAAK,CACjH,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;QACpE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/index.d.ts

@@ -197,7 +197,7 @@ export { ensureCentralMcp } from "./central-mcp.js";
 export * from "./cli-seat-fixtures.js";
 export * from "./cli-seat-codecs.js";
 export * from "./cli-seat-materialization.js";
-export { enrollSeatConsumerViaFacade } from "./llm-mesh-accounts.js";
+export declare const enrollSeatConsumerViaFacade: typeof import("./llm-mesh-accounts.js").enrollSeatConsumerViaFacade;
 export type { LlmMeshSeatImporter, SeatConsumerProfileInput, SeatConsumerParsers, SeatConsumerEnrollmentOptions } from "./llm-mesh-accounts.js";
 /**
  * h2a-facing surface: the read-only remote-agents projection consumed by the

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsFA,OAAO,EAsDL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAsCnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAU7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQ9C,OAAO,EAOL,KAAK,qBAAqB,EAE3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAqBL,KAAK,aAAa,EAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EASL,gBAAgB,EAEhB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AA8G5B,OAAO,EAGL,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAyGhC,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AA0XrB,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrD;AA4HD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6G7B;AAyED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAEvC,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAyCjB;AAQD,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAkT1E;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,GACA,YAAY,GAAG,SAAS,CAW1B;AAED,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,EACtC,GAAG,GAAE,MAAiC,GACrC,uBAAuB,CA4DzB;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAeV;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,QAAQ,GAAE,aAAa,CAAC,aAAa,CAAc,EACnD,GAAG,GAAE,MAAiC,GACrC,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAkB3F;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CA0HrE;AAsJD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iCAAiC,QAAQ,CAAC;AAEvD,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,OAAO,EAClB,aAAa,UAA8E,GAC1F,OAAO,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,GAAG,SAAS,CAStB;AAiKD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,EACnC,MAAM,GAAE,CACN,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CACoC,GAClE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,CACtB,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAClC;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IACJ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtB,EACN,OAAO,GAAE,gCAMR,GACA,OAAO,CAAC,IAAI,CAAC,CAoBf;AAqCD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,YAAY,GAAG,SAAS,EAI/B,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,QAAQ,GAAE,qBAGT,GACA,aAAa,GAAG,SAAS,CAsB3B;AA6LD,wBAAsB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CA63QvE;AA6BD,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;AAC/B,oFAAoF;AACpF,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,qEAAqE;AACrE,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,YAAY,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEhJ;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAE5E;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAEnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsFA,OAAO,EAsDL,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AAwCnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAU7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQ9C,OAAO,EAOL,KAAK,qBAAqB,EAE3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAqBL,KAAK,aAAa,EAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EASL,gBAAgB,EAEhB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAkH5B,OAAO,EAGL,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAiGhC,eAAO,MAAM,WAAW,2BAA2B,CAAC;AACpD,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,UAAU,EACV,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EACV,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AA0XrB,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrD;AA4HD;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA6G7B;AAyED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAEvC,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EAC1D,OAAO,GAAE;IACP,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACtD,GACV,OAAO,CAAC,MAAM,CAAC,CAyCjB;AAQD,MAAM,MAAM,cAAc,GACtB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAkT1E;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,GACA,YAAY,GAAG,SAAS,CAW1B;AAED,6DAA6D;AAC7D,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,EACtC,GAAG,GAAE,MAAiC,GACrC,uBAAuB,CA4DzB;AAED,mFAAmF;AACnF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAeV;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,QAAQ,GAAE,aAAa,CAAC,aAAa,CAAc,EACnD,GAAG,GAAE,MAAiC,GACrC,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAkB3F;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CA0HrE;AAsJD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iCAAiC,QAAQ,CAAC;AAEvD,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,OAAO,EAClB,aAAa,UAA8E,GAC1F,OAAO,CAQT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,GAAG,SAAS,CAStB;AAiKD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,EACnC,MAAM,GAAE,CACN,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CACoC,GAClE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,CACtB,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,KAChC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAClC;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,GAAE;IACJ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtB,EACN,OAAO,GAAE,gCAMR,GACA,OAAO,CAAC,IAAI,CAAC,CAoBf;AAqCD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,YAAY,GAAG,SAAS,EAI/B,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,QAAQ,GAAE,qBAGT,GACA,aAAa,GAAG,SAAS,CAsB3B;AA6LD,wBAAsB,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAk5QvE;AA6BD,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC;AAC/B,oFAAoF;AACpF,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,qEAAqE;AACrE,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC;AAG9C,eAAO,MAAM,2BAA2B,EAAE,cAAc,wBAAwB,EAAE,2BACgB,CAAC;AACnG,YAAY,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEhJ;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAE5E;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC;;;;GAIG;AACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG/D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAEnE"}

package/dist/index.js

@@ -24,7 +24,7 @@ import { attachLocalSession, attachPodTmux, capturePane, capturePaneVisible, cle
 import { deliverInitialPrompt, sleepSync, } from "./prompt-delivery.js";
 import { startLaunchGuard } from "./launch-guard.js";
 import { buildLaunchContext } from "./launch-context.js";
-import { attachNativeSession, driveNativeInstruction, killNativeSessionIfIncarnation, killNativeSessionTree, nativeHostAvailable, nativePromptDeliveryDeps, nativeSessionLiveness, nativeSessionPid, nativeSessionState, nativeTreeCpuMs, nativeWorkerPid, preflightNativeLaunch, resolveSessionHostKind, startNativeH2aSidecar, startNativeHeadlessSession, startNativeSession, NativeHostCapabilityMismatchError, NativeLaunchAdmissionError, } from "./native-host.js";
+import { attachNativeSession, driveNativeInstruction, killNativeSessionIfIncarnation, killNativeSessionTree, nativeHostAvailable, nativePromptDeliveryDeps, nativeSessionLiveness, nativeSessionPid, nativeSessionState, nativeSessionStateAsync, nativeTreeCpuMs, nativeWorkerPid, preflightNativeLaunch, resolveSessionHostKind, startNativeH2aSidecar, startNativeHeadlessSession, startNativeSession, startNativeSessionSingleShot, NativeHostCapabilityMismatchError, NativeLaunchAdmissionError, } from "./native-host.js";
 import { executeNativeRestart, NativeRestartError, } from "./native-restart.js";
 import { migrateTmuxNames } from "./tmux-name-migration.js";
 import { projectStatusForH2a } from "./status-projection.js";
@@ -45,7 +45,11 @@ import { DEFAULT_FANOUT_MAX, mapWithConcurrency, planRemoteFanout, } from "./fan
 import { authenticateJobEnvelopes, buildDecisionReply, dropEnvelope, emitJobDone, envelopeFileName, isAwaitingDecision, jobInstance, parentInstance, pendingDecisions, readInboxEnvelopes, renderPendingDecisions, repliedDecisionJobIds, } from "./h2a-jobs.js";
 import { buildConductorTask, computeDurableWorkspaceId, normalizeRootCommits, detectAvailableHosts, freshestLaunchEnvelope, h2aReportsLiveConductor, markLaunchEnvelopeProcessed, readLastLaunchAt, readLaunchEnvelopes, recordLaunchAt, selectHost, shouldLaunch, } from "./conductor-launch.js";
 import { defaultLocalH2aRoot } from "./h2a-bridge.js";
-import { refuseCullExecution, runIdentityCullDryRun } from "./identity-cull/cull.js";
+import { operatorBreak as operatorBreakToCore } from "./identity-operator-break.js";
+// identity-cull is imported lazily at its verb below: cull.js needs the
+// core identity fence (`@sentropic/h2a`), which must never become a
+// load-time edge of this barrel — isolated installs of this package have
+// no core beside them.
 import { guardConvWriters } from "./conv-guard.js";
 import { handleClaudeHook, installClaudeHooks, manualEnroll, readStdin, } from "./enroll.js";
 import { probePodCredHealth, softRefreshSession } from "./soft-refresh.js";
@@ -78,7 +82,6 @@ const H2A_RUN_API_VERSION = "h2a.run/v1";
 const STRUCTURED_LAUNCH_PHASE_PREFIX = "[h2a] h2a.run.phase/v1 ";
 const H2A_RUNTIME_VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
 import { CLI_PROFILES, gatewayModeForProfile, profileUsesLlmMeshGateway, } from "./protocol-local.js";
-import { enrollViaFacade, enrollSeatConsumerViaFacade, formatLlmMeshAccountError, formatLlmMeshAccountList, listAccountsViaFacade, removeAccountViaFacade, } from "./llm-mesh-accounts.js";
 import { readLlmMeshConfig, updateLlmMeshRoutingConfig, } from "./gateway-host/config-file.js";
 import { startGateway, stopGateway, readGatewayPid, llmMeshLogPath, replaceAnthropicGatewayEnvironment, acquireLlmMeshSessionEnv, } from "./gateway-host/daemon.js";
 import { describeLlmMeshRoutingConfig, parseLlmMeshRoutingConfig, preferredRoutingConfig, strategyRoutingConfig, } from "./routing-preferences.js";
@@ -1832,19 +1835,12 @@ export async function main(argv) {
     const identityCommand = program
         .command("identity")
         .description("Inspect identity bindings or unlock a token-fenced identity lock");
-    const operatorBreak = async (lockPath, token, assertDead) => {
-        const { breakLockAsOperator, breakIdentityLockAsOperator } = await import("@sentropic/h2a");
-        const identityLock = basename(lockPath) === '.lock' && basename(dirname(lockPath)) === 'identity';
-        const breaker = identityLock ? breakIdentityLockAsOperator : breakLockAsOperator;
-        const result = breaker(lockPath, { expectToken: token, assertDead });
-        process.stdout.write(`${JSON.stringify({ path: identityLock ? 'identity/.lock' : lockPath, ...result })}\n`);
-        if (!result.broken) {
-            process.stderr.write(`[h2a] lock break refused: ${result.reason}${result.pid !== undefined ? ` (pid ${result.pid})` : ""}\n`);
-            if (result.reason === "assert-dead-required") {
-                process.stderr.write("[h2a] verify the holder has stopped, then explicitly pass --assert-dead; no PID is killed\n");
-            }
-            process.exitCode = 1;
-        }
+    // Operator break delegates to the core CLI's hidden `__operator-break`
+    // plumbing (same `h2a`-binary spawn pattern as central-mcp): this package
+    // must not import `@sentropic/h2a`, and the relay keeps stdio/exit codes
+    // byte-for-byte identical where core is installed.
+    const operatorBreak = (lockPath, token, assertDead) => {
+        operatorBreakToCore(lockPath, token, assertDead, (code) => { process.exitCode = code; });
     };
     identityCommand
         .command("unlock")
@@ -1874,9 +1870,18 @@ export async function main(argv) {
         .option("--execute", "refuse destructive execution; no bypass exists")
         .option("--root <path>", "DEF h2a root (default: H2A_ROOT or ~/h2a-workspace/.h2a)")
         .option("--output <path>", "new external directory for the proof packet")
-        .action((opts) => {
+        .action(async (opts) => {
+        let cull;
+        try {
+            cull = await import("./identity-cull/cull.js");
+        }
+        catch (error) {
+            process.stderr.write(`[h2a] identity cull unavailable: ${error instanceof Error ? error.message : String(error)}\n`);
+            process.exitCode = 1;
+            return;
+        }
         if (opts.execute) {
-            const refusal = refuseCullExecution();
+            const refusal = cull.refuseCullExecution();
             process.stderr.write(`[h2a] identity cull refused: ${refusal.refusalCodes.join(", ")}\n`);
             process.exitCode = 2;
             return;
@@ -1884,7 +1889,7 @@ export async function main(argv) {
         const defRoot = opts.root ?? process.env.H2A_ROOT ?? defaultLocalH2aRoot();
         const outputDir = opts.output ?? join(tmpdir(), `h2a-identity-cull-${randomUUID()}`);
         try {
-            const result = runIdentityCullDryRun({
+            const result = cull.runIdentityCullDryRun({
                 defRoot,
                 pinRoot: join(homedir(), "src", "a2a-cli"),
                 outputDir,
@@ -4248,13 +4253,11 @@ export async function main(argv) {
             }
         };
         try {
-            if (structuredLaunch && sessionHost === "native") {
-                for (const label of labels)
-                    preflightNativeLaunch(localSessionName(slugify(label ?? cwd)));
-            }
-            const reservedTmuxSlugs = tmuxAvailable()
-                ? existingLocalSessionSlugs(labels, cwd)
-                : [];
+            // No separate preflight fork: the in-process name probe below prepares
+            // the host for a native run. The single-shot launch still performs its
+            // fenced admission with a fresh inventory before creating any session.
+            void preflightNativeLaunch;
+            const reservedTmuxSlugs = existingLocalSessionSlugs(labels, cwd);
             // The inventory and this decision are separate reads: a structured
             // launch can leave a name visible just before its last tmux process
             // exits. Re-probe every canonical/legacy spelling and reclaim the slug
@@ -4289,14 +4292,16 @@ export async function main(argv) {
             // twin over a live-but-unprovable native writer (sol-F3): the same
             // fail-closed rule as resolveManagedHost's rule 4 applies — refuse
             // to launch on an unprovable host state.
-            const nativeExistence = labels
+            const nativeExistence = await Promise.all(labels
                 .map((label) => slugify(label ?? cwd))
-                .map((slug) => {
-                const detail = nativeSessionState(localSessionName(slug));
+                .map(async (slug) => {
+                const detail = sessionHost === "native"
+                    ? await nativeSessionStateAsync(localSessionName(slug), true)
+                    : nativeSessionState(localSessionName(slug));
                 const probe = detail.state === "unknown" ? "unknown"
                     : detail.state === "found" && detail.session.status === "running" ? "live" : "dead";
                 return { slug, probe, reason: detail.state === "unknown" ? detail.reason : undefined };
-            });
+            }));
             const unknownNativeSlugs = nativeExistence
                 .filter((probed) => probed.probe === "unknown");
             if (unknownNativeSlugs.length > 0) {
@@ -4341,9 +4346,15 @@ export async function main(argv) {
             // Single-writer guard: refuse to resume a conversation another live
             // session (local registry / remote pod) is already writing.
             if (opts.resume) {
+                // Reuse this operation's certified name verdict for that SAME
+                // session. Other conversation owners still require their own probe.
+                // Creation rechecks the complete inventory and name admission at
+                // the host, so this snapshot never authorizes a colliding create.
+                const nativeLivenessByName = new Map(nativeExistence.map(({ slug, probe }) => [localSessionName(slug), probe === "dead" ? false : probe === "live" ? true : "unknown"]));
                 const ok = await guardConvWriters({
                     convId: opts.resume,
                     cwd,
+                    nativeSessionLiveness: name => nativeLivenessByName.get(name) ?? nativeSessionLiveness(name),
                     ...(opts.force ? { force: true } : {}),
                     fetchRemoteSessions: async () => {
                         const url = getConfiguredRemoteOptional();
@@ -4459,6 +4470,10 @@ export async function main(argv) {
                 }
                 let name;
                 let slug;
+                // R3 P1: pid/identity returned by the single-shot launch; the
+                // re-probes below prefer these and skip their forks.
+                let launchedPid;
+                let launchedWorkerPid;
                 let outputLog;
                 let resultJson;
                 let agentPane;
@@ -4495,7 +4510,9 @@ export async function main(argv) {
                     }
                 }
                 else if (sessionHost === "native") {
-                    ({ name, slug } = startNativeSession(profile, command, cwd, args, label, {
+                    // One in-process async operation, with a fresh admission inventory;
+                    // returns pid/identity so the re-probes below are skipped.
+                    ({ name, slug, pid: launchedPid, workerPid: launchedWorkerPid } = await startNativeSessionSingleShot(profile, command, cwd, args, label, {
                         onCreateAttempt,
                         ...(opts.resume !== undefined ? { resumeId: opts.resume } : {}),
                         ...(initialPrompt !== undefined
@@ -4706,13 +4723,16 @@ export async function main(argv) {
                         sleepSync(50);
                     }
                 }
+                // R3 P1: prefer the pid/identity returned by the single-shot
+                // launch (no fork); fall back to probes only when absent (e.g.
+                // tmux path or adopted pre-existing session without a fresh pid).
                 const pid = sessionHost === "native"
-                    ? nativeSessionPid(name)
+                    ? (launchedPid ?? nativeSessionPid(name))
                     : agentPane
                         ? localSessionPanePid(agentPane)
                         : undefined;
                 const workerPid = sessionHost === "native"
-                    ? nativeWorkerPid(name)
+                    ? (launchedWorkerPid ?? nativeWorkerPid(name))
                     : agentPane !== undefined
                         ? paneWorkerPid(agentPane)
                         : undefined;
@@ -7725,6 +7745,7 @@ export async function main(argv) {
         }
         try {
             const source = opts.from ?? (opts.cli ? "cli" : opts.token ? "token" : "oauth");
+            const { enrollViaFacade } = await import("./llm-mesh-accounts.js");
             const account = source === "oauth"
                 ? await enrollViaFacade(normalized, { ...(opts.configRef ? { configRef: opts.configRef } : {}), from: "oauth" })
                 : await enrollSeatConsumerViaFacade(normalized, { from: source, ...(opts.seatProfile ? { seatProfile: opts.seatProfile } : {}) });
@@ -7749,6 +7770,7 @@ export async function main(argv) {
         .description("List public accounts owned by this local llm-mesh scope")
         .option("--json", "emit public account metadata as JSON")
         .action(async (opts) => {
+        const { listAccountsViaFacade, formatLlmMeshAccountList, formatLlmMeshAccountError } = await import("./llm-mesh-accounts.js");
         try {
             const accounts = await listAccountsViaFacade();
             process.stdout.write(`${formatLlmMeshAccountList(accounts, opts.json === true)}\n`);
@@ -7763,6 +7785,7 @@ export async function main(argv) {
         .aliases(["rm", "unenroll"])
         .description("Remove one account owned by this local llm-mesh scope")
         .action(async (accountId) => {
+        const { removeAccountViaFacade, formatLlmMeshAccountError } = await import("./llm-mesh-accounts.js");
         try {
             const result = await removeAccountViaFacade(accountId);
             process.stdout.write(`[h2a] llm-mesh account: removed ${result.accountId}\n`);
@@ -8120,7 +8143,9 @@ export { ensureCentralMcp } from "./central-mcp.js";
 export * from "./cli-seat-fixtures.js";
 export * from "./cli-seat-codecs.js";
 export * from "./cli-seat-materialization.js";
-export { enrollSeatConsumerViaFacade } from "./llm-mesh-accounts.js";
+// Keep the public async consumer contract without loading account providers in
+// every local crash-recovery launcher before it can elect its native host.
+export const enrollSeatConsumerViaFacade = async (...args) => (await import("./llm-mesh-accounts.js")).enrollSeatConsumerViaFacade(...args);
 /**
  * h2a-facing surface: the read-only remote-agents projection consumed by the
  * objective-loop tick's *agents adapter* in `@sentropic/h2a` (via lazy