@songsid/agend 2.2.0-alpha.2 → 2.2.0-alpha.3

package/dist/connection-secrets.d.ts

@@ -39,6 +39,11 @@ export interface ConnectionMetadata {
     group_id: string | number | null;
     general_channel_id?: string | null;
     status: string;
+    /**
+     * A known cause the connection is down: "missing_intent" — Message Content is off in the developer portal (#1519 P3);
+     * "rejected" — the platform refused the token (P6).
+     */
+    problem?: "missing_intent" | "rejected";
     identity?: {
         id: string | null;
         username: string | null;

package/dist/connection-secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection-secrets.js","sourceRoot":"","sources":["../src/connection-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB;CAC/G,CAAC;AAuGX,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,MAAe,EAAE,oBAAuC,EAAE;IACxG,IAAI,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,KAAK;YAAE,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"connection-secrets.js","sourceRoot":"","sources":["../src/connection-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB;CAC/G,CAAC;AA4GX,MAAM,UAAU,qBAAqB,CAAC,GAAoB;IACxD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,MAAe,EAAE,oBAAuC,EAAE;IACxG,IAAI,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,IAAI,KAAK;YAAE,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC"}

package/dist/cpu-profile.js

@@ -28,6 +28,56 @@ export function cpuProfileSeconds(env) {
 /** Bounded artifacts, not a bound on V8's native recording memory or JSON allocation. */
 export async function saveCpuProfile(dataDir, profile, signal) {
     signal?.throwIfAborted();
+    // Guard the event loop: a V8 CPU profile with many nodes/samples can exceed
+    // 20 MiB when serialised. We estimate from the structural data before
+    // allocating the full string, so an oversize profile is rejected without
+    // blocking the event loop for O(n) stringify time.
+    //
+    // Estimate accounts for variable-length fields:
+    //  - callFrame.url        (the dominant contributor — can be 300+ chars each)
+    //  - callFrame.functionName (typically short, budget 50 bytes)
+    //  - fixed overhead per node: id, hitCount, children array refs (~100 bytes)
+    //  - timeDeltas: one number per sample (~8 bytes)
+    // A node without a long URL is estimated at ~200 bytes fixed; URL bytes are
+    // counted separately per-node so a profile with many long URLs is caught early.
+    const p = profile;
+    const nodes = Array.isArray(p?.nodes) ? p.nodes : [];
+    const samples = Array.isArray(p?.samples) ? p.samples : [];
+    const timeDeltas = Array.isArray(p?.timeDeltas) ? p.timeDeltas : [];
+    const NODE_FIXED = 100; // id, hitCount, children, JSON punctuation
+    const FRAME_FIXED = 50; // functionName (short), scriptId, lineNumber, columnNumber
+    let estimatedBytes = timeDeltas.length * 8; // timeDeltas
+    estimatedBytes += samples.length * 8; // samples array
+    for (const node of nodes) {
+        const frame = (node.callFrame ?? {});
+        // JSON.stringify the individual string fields for exact escaped+UTF-8 byte
+        // count. BMP CJK chars: 1 UTF-16 unit but 3 UTF-8 bytes (JSON keeps them
+        // unescaped). Backslash paths: each \\ → 2 JSON bytes.
+        const urlBytes = typeof frame.url === "string"
+            ? Buffer.byteLength(JSON.stringify(frame.url), "utf8") - 2 : 0;
+        const fnBytes = typeof frame.functionName === "string"
+            ? Buffer.byteLength(JSON.stringify(frame.functionName), "utf8") - 2 : 0;
+        // Variable arrays per node: positionTicks and children.
+        // Do NOT call JSON.stringify on these arrays — that would allocate the very
+        // large string the guard is meant to prevent. Instead use a conservative
+        // per-record byte estimate:
+        //   positionTicks: each {line,ticks} entry ≤ 35 JSON bytes in the worst case
+        //     (e.g. '{"line":999999,"ticks":9999}' = 29 bytes; 35 gives headroom).
+        //   children: each node-id integer ≤ 8 JSON bytes.
+        const MAX_BYTES_PER_TICK = 35;
+        const posTicksBytes = Array.isArray(node.positionTicks)
+            ? node.positionTicks.length * MAX_BYTES_PER_TICK : 0;
+        const childrenBytes = Array.isArray(node.children)
+            ? node.children.length * 8 : 0;
+        estimatedBytes += NODE_FIXED + FRAME_FIXED + urlBytes + fnBytes + posTicksBytes + childrenBytes;
+        // Early exit: avoid accumulating through every node if already over cap.
+        if (estimatedBytes > CPU_PROFILE_MAX_BYTES) {
+            throw new Error(`CPU profile is too large to save (estimated ≥${Math.round(estimatedBytes / 1_048_576)} MiB, cap is 20 MiB); discarded`);
+        }
+    }
+    if (estimatedBytes > CPU_PROFILE_MAX_BYTES) {
+        throw new Error(`CPU profile is too large to save (estimated ≥${Math.round(estimatedBytes / 1_048_576)} MiB, cap is 20 MiB); discarded`);
+    }
     const json = JSON.stringify(profile);
     if (json === undefined || Buffer.byteLength(json) > CPU_PROFILE_MAX_BYTES)
         throw new Error("CPU profile exceeds the 20 MiB artifact cap; discarded");

package/dist/cpu-profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"cpu-profile.js","sourceRoot":"","sources":["../src/cpu-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAU7D,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACtI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,iCAAiC,uBAAuB,EAAE,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,sBAAsB,uBAAuB,EAAE,CAAC,CAAC;IACzI,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAgB,EAAE,MAAoB;IAC1F,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACrJ,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,cAAc,EAAE;WAC7D,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACnJ,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,QAAQ,GAA0D,EAAE,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,+BAA+B;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,GAAG,qBAAqB,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,gBAAgB,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YACzE,IAAI,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,aAAa,CAAC,CAAC;IACrH,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvH,IAAI,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;IACrH,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,CAAC;IAAC,CAAC;YACtD,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAOpD;IACC,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC7D,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC;IACrD,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC;IAAC,CAAC;IACpD,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACzF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAkC,IAAI,CAAC;IACtD,IAAI,KAAgD,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAE,EAAkC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,MAA8B,EAAQ,EAAE;YACzE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;iBAChB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,eAAe;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC;;gBACvG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5F,kFAAkF;QAClF,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAY,CAAC,CAAC;QAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,EAA0B,EAAE;QACpE,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QACpC,OAAO,GAAG,IAAI,CAAC,CAAC,8CAA8C;QAC9D,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBACtE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YACrE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;YACzD,IAAI,SAAoD,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBAC9B,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;oBACvE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;wBACtC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;wBACxH,yEAAyE;oBAC3E,CAAC,CAAC;iBACH,CAAC,CAAC;gBACH,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC;oBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAC,CAAC;gBACrH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;oBACjF,CAAC;gBAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7G,KAAK,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;IAC5C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,MAAM,IAAI,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3E,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,OAAO,GAAG,IAAI,CAAC,CAAC,4DAA4D;QAC5E,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,OAAO,2BAA2B,gBAAgB,gCAAgC,CAAC,CAAC;QACxI,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"cpu-profile.js","sourceRoot":"","sources":["../src/cpu-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAU7D,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACtI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,iCAAiC,uBAAuB,EAAE,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,uBAAuB;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,eAAe,sBAAsB,uBAAuB,EAAE,CAAC,CAAC;IACzI,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAgB,EAAE,MAAoB;IAC1F,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,4EAA4E;IAC5E,sEAAsE;IACtE,yEAAyE;IACzE,mDAAmD;IACnD,EAAE;IACF,gDAAgD;IAChD,8EAA8E;IAC9E,+DAA+D;IAC/D,6EAA6E;IAC7E,kDAAkD;IAClD,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,CAAC,GAAG,OAAyC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,KAAuC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,OAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAE,CAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAE,CAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,2CAA2C;IACnE,MAAM,WAAW,GAAG,EAAE,CAAC,CAAC,2DAA2D;IACnF,IAAI,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,aAAa;IACzD,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAQ,gBAAgB;IAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;QAChE,2EAA2E;QAC3E,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC5C,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACpD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,wDAAwD;QACxD,4EAA4E;QAC5E,yEAAyE;QACzE,4BAA4B;QAC5B,6EAA6E;QAC7E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,kBAAkB,GAAG,EAAE,CAAC;QAC9B,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAE,IAAY,CAAC,aAAa,CAAC;YAC9D,CAAC,CAAE,IAAY,CAAC,aAAa,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAE,IAAY,CAAC,QAAQ,CAAC;YACzD,CAAC,CAAE,IAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,cAAc,IAAI,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,GAAG,aAAa,CAAC;QAChG,yEAAyE;QACzE,IAAI,cAAc,GAAG,qBAAqB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,iCAAiC,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IACD,IAAI,cAAc,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC3I,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACrJ,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,cAAc,EAAE;WAC7D,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACnJ,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,QAAQ,GAA0D,EAAE,CAAC;IAC3E,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,+BAA+B;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,GAAG,qBAAqB,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,gBAAgB,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YACzE,IAAI,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,aAAa,CAAC,CAAC;IACrH,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvH,IAAI,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;IACrH,OAAO,GAAG,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,MAAM,GAAG,CAAC;IAAC,CAAC;YACtD,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAOpD;IACC,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC7D,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC;IACrD,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC;IAAC,CAAC;IACpD,OAAO,GAAG,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACzF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,WAAW,GAAkC,IAAI,CAAC;IACtD,IAAI,KAAgD,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAE,EAAkC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,MAA8B,EAAQ,EAAE;YACzE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;iBAChB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,eAAe;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC;;gBACvG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5F,kFAAkF;QAClF,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,MAAM,CAAC,GAAY,CAAC,CAAC;QAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,mBAAmB,EAA0B,EAAE;QACpE,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QACpC,OAAO,GAAG,IAAI,CAAC,CAAC,8CAA8C;QAC9D,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;oBACtE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YACrE,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;YACzD,IAAI,SAAoD,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBAC9B,CAAC,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;oBACvE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;wBACtC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;wBACxH,yEAAyE;oBAC3E,CAAC,CAAC;iBACH,CAAC,CAAC;gBACH,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,YAAY,EAAE,CAAC;oBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAC,CAAC;gBACrH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;oBACjF,CAAC;gBAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7G,KAAK,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;IAC5C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,MAAM,IAAI,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3E,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,OAAO,GAAG,IAAI,CAAC,CAAC,4DAA4D;QAC5E,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,OAAO,2BAA2B,gBAAgB,gCAAgC,CAAC,CAAC;QACxI,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/daemon.d.ts

@@ -1,3 +1,4 @@
+import type { PaneContextSource } from "./pane-context-cache.js";
 import { EventEmitter } from "node:events";
 import type { InstanceConfig, RotationSnapshot } from "./types.js";
 import { type Logger } from "./logger.js";
@@ -589,6 +590,10 @@ export declare class Daemon extends EventEmitter {
     private sessionCheckpointWarningEmitted;
     private statePollInFlight;
     private turnReplyGuard;
+    /** #1510: turn boundaries from the CLI's transcript, for a backend whose guard reads its turn end there. */
+    private transcriptTurns;
+    /** #1510: since when (monotonic) this generation has been held as running in the transcript. */
+    private transcriptRunningSince;
     /** Prevent a visible stale XML fragment from being recovered on later turns. */
     private lastMalformedToolCallSignature;
     private proxyReplySeq;
@@ -1199,6 +1204,8 @@ export declare class Daemon extends EventEmitter {
      */
     private cancelQuitConfirmation;
     stop(): Promise<void>;
+    /** Context refresh uses the already-bound manager; no name-based child or backend probe. */
+    getPaneContextSource(): PaneContextSource | null;
     getHangDetector(): HangDetector | null;
     getInstanceState(): InstanceState | "paused";
     getInstanceStateSnapshot(): InstanceStateSnapshot;
@@ -1285,6 +1292,11 @@ export declare class Daemon extends EventEmitter {
     private maybeConfirmReplyGuardIdle;
     private maybeProxyReplyOnTurnEnd;
     private isClaudeCodeBackend;
+    /**
+     * This launch's transcript monitor. #1510: its turn boundaries feed the reply guard's ledger, which starts empty
+     * with it — a new monitor re-baselines at the transcript's end, so nothing the old one read can be attributed.
+     */
+    private buildTranscriptMonitor;
     private replyCompletionGuardEnabled;
     private startReplyRecovery;
     private reportReplyDropWithoutRetry;

package/dist/daemon.js

@@ -11,6 +11,7 @@ import { clearPausedMarker, writePausedMarker } from "./pause-marker.js";
 import { TmuxManager, resolveTmuxLogicalSize } from "./tmux-manager.js";
 import { TranscriptMonitor } from "./transcript-monitor.js";
 import { createTranscriptSource } from "./transcript-sources.js";
+import { TranscriptTurnLedger } from "./transcript-turns.js";
 import { credentialProfileStoreHome, resolveCredentialProfile } from "./backend/credential-profile.js";
 import { resolveToolSet } from "./tool-permissions.js";
 import { getAgendHome } from "./paths.js";
@@ -25,6 +26,7 @@ import { MessageBus } from "./channel/message-bus.js";
 import { shellQuote, UnsupportedCliError } from "./backend/types.js";
 import { getTmuxSession } from "./config.js";
 import { routeToolCall } from "./channel/tool-router.js";
+import { parseReplyButtons, replyButtonsFallbackText } from "./reply-buttons.js";
 import { HangDetector } from "./hang-detector.js";
 import { writeSecretFile } from "./secret-file.js";
 import { PaneWriteLock } from "./pane-write-lock.js";
@@ -69,6 +71,12 @@ const REPLY_DROP_WARNING_COOLDOWN_MS = 5 * 60_000;
  * backstop is delayed by at most this window, never disabled.
  */
 const REPLY_GUARD_IDLE_CONFIRM_MS = 60_000;
+/**
+ * #1510: how long an idle pane may be held because the transcript still shows the turn running. A turn whose end is
+ * never written (the CLI killed, the rollout replaced) would otherwise be re-checked for ever; past this it stands
+ * down like a turn the transcript cannot place — never a recovery.
+ */
+const TRANSCRIPT_RUNNING_HOLD_MAX_MS = 30 * 60_000;
 const REPLY_RECOVERY_PROMPT = "[system:reply-required] The previous human-facing turn ended without a successfully delivered reply. Do not redo the work. React with an emoji or use the reply tool exactly once now to send the user a concise conclusion. If no substantive answer is needed, a brief react is sufficient. If you already replied to this message, do nothing. Do not reply to this system instruction except through the react or reply tool.";
 /** Point a resumed CLI at its one backend-native instruction source. */
 /** The outbox evidence for a delivery the CLI's transcript shows taken (#758; #1201 absorbed). */
@@ -644,6 +652,8 @@ const CONFIRM_BUSY_POLL_MS = 200;
  * hold the pane write lock along with it.
  */
 const CONFIRM_BUSY_MAX_WAIT_MS = 10_000;
+/** How much longer a confirmation waits while the control client is blind (a drained read; its limit is 10 s). */
+const CONFIRM_BUSY_BLIND_EXTRA_MS = 12_000;
 /**
  * How long a delivery waits for an in-flight spawn. Comfortably past the default
  * 25s startup timeout plus dialog dismissal; past it we fall back to the old
@@ -1225,6 +1235,10 @@ export class Daemon extends EventEmitter {
     // It also supplies the older dead-MCP/malformed-call recovery paths, so those
     // paths cannot disagree about whether the turn already spoke to the channel.
     turnReplyGuard = new TurnReplyGuard();
+    /** #1510: turn boundaries from the CLI's transcript, for a backend whose guard reads its turn end there. */
+    transcriptTurns = new TranscriptTurnLedger();
+    /** #1510: since when (monotonic) this generation has been held as running in the transcript. */
+    transcriptRunningSince = null;
     /** Prevent a visible stale XML fragment from being recovered on later turns. */
     lastMalformedToolCallSignature;
     proxyReplySeq = 0;
@@ -2178,7 +2192,7 @@ export class Daemon extends EventEmitter {
             // (statusline transcript); codex/kiro/opencode read their CLI's own
             // conversation store via a pluggable source. Backends with no known
             // source stay inert exactly as before.
-            this.transcriptMonitor = new TranscriptMonitor(this.instanceDir, this.logger, createTranscriptSource(this.config.backend ?? "claude-code", this.config.working_directory, this.credentialProfileStore()));
+            this.transcriptMonitor = this.buildTranscriptMonitor(createTranscriptSource(this.config.backend ?? "claude-code", this.config.working_directory, this.credentialProfileStore()));
             const transcriptMonitor = this.transcriptMonitor;
             const transcriptFence = this.launchFenceEpoch;
             // Baseline in the isolate before this daemon accepts new work. A
@@ -4113,6 +4127,23 @@ export class Daemon extends EventEmitter {
             this.logger.debug({ err: e }, "Failed to remove PID file");
         }
     }
+    /** Context refresh uses the already-bound manager; no name-based child or backend probe. */
+    getPaneContextSource() {
+        const tmux = this.tmux;
+        const control = this.controlClient;
+        if (!tmux || !control || this.deliveryWritesStopping)
+            return null;
+        const owner = this.interactionOwner();
+        const epoch = this.deliveryEpoch;
+        const isCurrent = () => {
+            const now = this.interactionOwner();
+            return !this.deliveryWritesStopping && this.controlClient === control && this.tmux === tmux && this.deliveryEpoch === epoch
+                && now.bootId === owner.bootId && now.spawnGeneration === owner.spawnGeneration
+                && now.launchAttempt === owner.launchAttempt && now.launchFenceEpoch === owner.launchFenceEpoch;
+        };
+        return { owner: tmux, generation: JSON.stringify([owner.bootId, owner.spawnGeneration, owner.launchAttempt, owner.launchFenceEpoch, epoch]),
+            isCurrent, capture: () => isCurrent() ? tmux.capturePaneWithHistory(60, 2_000) : Promise.reject(new Error("Pane context owner retired")) };
+    }
     getHangDetector() {
         return this.hangDetector;
     }
@@ -4651,11 +4682,14 @@ export class Daemon extends EventEmitter {
         // chat_id) does not update lastChatId, so its proxy reply would land in
         // whatever USER topic spoke to this instance last — the wrong audience for
         // a task result, and a stale one (sol's review of #515).
-        if (meta.from_instance || !meta.chat_id)
+        // A web message on a fleet with no chat platform has no chat_id (its reply goes to the web chat through the fleet's
+        // web-only sink), but it is a person waiting for an answer all the same: the guard arms for it (alpha.2).
+        if (meta.from_instance || (!meta.chat_id && meta.source !== "web"))
             return;
         // The last non-empty line of what we pasted: everything on screen after it
         // is the agent's own output.
         const inboundMarker = deliveredText.split(/\r?\n/).map(l => l.trim()).filter(Boolean).pop();
+        const deliveredAt = Date.now();
         // #1241 P2-1: carry pre-arm work evidence over the arm, bounded by this
         // delivery's ingress — output the paste produced before it confirmed.
         this.turnReplyGuard.arm({
@@ -4665,6 +4699,8 @@ export class Daemon extends EventEmitter {
             messageId: meta.message_id || undefined,
             correlationId: meta.correlation_id || undefined,
             inboundMarker,
+            deliveredText,
+            deliveredAt,
         }, this.pendingWork.lastInboundTimestamp());
         // #1209: persist the in-flight turn with a seam checkpoint. A marker
         // that survives a restart is an interrupted turn by construction —
@@ -4953,6 +4989,34 @@ export class Daemon extends EventEmitter {
             this.clearReplyGuardConfirm();
             return;
         }
+        // #1510: a backend whose turn end is read from its own transcript (codex) must show it there too: the turn that
+        // took this delivery ended and nothing started since. Anything less never starts a recovery.
+        if (this.backend?.turnEndFromTranscript === true) {
+            let verdict = this.transcriptTurns.verdict(turn.target.deliveredText, turn.target.deliveredAt ?? 0);
+            if (verdict === "running") {
+                if (this.transcriptRunningSince?.generation !== turn.generation) {
+                    this.transcriptRunningSince = { generation: turn.generation, at: performance.now() };
+                }
+                if (performance.now() - this.transcriptRunningSince.at >= TRANSCRIPT_RUNNING_HOLD_MAX_MS)
+                    verdict = "unknown";
+            }
+            if (verdict !== "running")
+                this.transcriptRunningSince = null;
+            if (verdict === "running") {
+                // Idle on screen, still working in the transcript: look again after another window.
+                this.armReplyGuardConfirm(turn.generation);
+                this.logger.info({ correlationId: turn.target.correlationId, generation: turn.generation, reason: "transcript_turn_running" }, "Reply guard holding — the transcript shows the turn still running");
+                return;
+            }
+            if (verdict !== "ended") {
+                this.clearReplyGuardConfirm();
+                this.turnReplyGuard.complete(turn.generation);
+                this.logger.info({ correlationId: turn.target.correlationId, generation: turn.generation, reason: `transcript_${verdict}` }, verdict === "unknown" ? "Reply guard stood down — this delivery's turn is not in the transcript followed (fail-safe)"
+                    : verdict === "aborted" ? "Reply guard stood down — the turn was interrupted"
+                        : "Reply guard stood down — the turn ended on a provider error (its own notice covers it)");
+                return;
+            }
+        }
         this.clearReplyGuardConfirm();
         if (turn.replyAttempted) {
             // A reply was attempted but its deliver result is unknown (in-flight
@@ -4970,6 +5034,16 @@ export class Daemon extends EventEmitter {
             || this.config.backend === "claude-code"
             || this.backend?.binaryName === "claude";
     }
+    /**
+     * This launch's transcript monitor. #1510: its turn boundaries feed the reply guard's ledger, which starts empty
+     * with it — a new monitor re-baselines at the transcript's end, so nothing the old one read can be attributed.
+     */
+    buildTranscriptMonitor(source) {
+        const monitor = new TranscriptMonitor(this.instanceDir, this.logger, source);
+        this.transcriptTurns.reset();
+        monitor.on("turns", (turns) => this.transcriptTurns.observe(turns));
+        return monitor;
+    }
     replyCompletionGuardEnabled() {
         return this.config.reply_completion_guard !== false
             && this.backend?.replyCompletionGuard === true;
@@ -8275,6 +8349,10 @@ export class Daemon extends EventEmitter {
                 // is disqualifying and no amount of output may override it. Where it
                 // cannot (a backend with no prompt pattern), the output signal remains
                 // exactly as before — this must not regress backends we cannot read.
+                // The attempt's owner (#1514 review): a confirmation fenced because the window was replaced must not be revived
+                // by the late proof below on the replacement's pane.
+                const ownerTmux = this.tmux, ownerGeneration = this.spawnGeneration;
+                const owned = () => this.tmux === ownerTmux && this.spawnGeneration === ownerGeneration;
                 const becameBusy = await this.confirmAfterEnter(windowId, enterAt, signature, pasteBaseline, "idle-to-busy-retry", !rawPaste);
                 if (becameBusy) {
                     if (status)
@@ -8286,15 +8364,29 @@ export class Daemon extends EventEmitter {
                     if (!rawPaste && !steer && !this.canProveSubmission())
                         verdict.proof = "output-edge";
                 }
+                else if (!owned()) {
+                    // The window this delivery was pasted into was replaced while it was being confirmed: whether its CLI took
+                    // the message is unknown, and the new window's pane says nothing about it. Uncertain, never ✅ or ❌.
+                    this.logger.warn({ phase: "post-submit-proof" }, "Window replaced during submission proof — delivery outcome uncertain");
+                    verdict.phase = "post-submit-proof";
+                    verdict.proof = "window-replaced";
+                    return false;
+                }
                 else {
                     const proof = this.structuredInputEvidence()
-                        ? await this.lateCodexSubmissionProof(signature, pasteBaseline)
-                        : await this.confirmSubmitted(signature, pasteBaseline);
-                    if (proof === "submitted") {
+                        ? await this.lateCodexSubmissionProof(signature, pasteBaseline, false, owned)
+                        : await this.confirmSubmitted(signature, pasteBaseline, owned);
+                    if (proof === "submitted" && owned()) {
                         if (status)
                             this.emit("message_confirmed", status);
                         return true;
                     }
+                    if (!owned()) {
+                        this.logger.warn({ phase: "post-submit-proof" }, "Window replaced during submission proof — delivery outcome uncertain");
+                        verdict.phase = "post-submit-proof";
+                        verdict.proof = "window-replaced";
+                        return false;
+                    }
                     if (this.structuredInputEvidence() && proof !== "stranded") {
                         // This is the observed #910 race: the CLI processed the message
                         // although its echo had not appeared within the proof window. A
@@ -8397,16 +8489,25 @@ export class Daemon extends EventEmitter {
      * still confirmed on output alone).
      */
     async confirmAfterEnter(windowId, enterAt, signature, baseline, retryPhase, allowRecoveryEnter = true) {
+        // The window this confirmation is about (#1490). The waits below can span a recoverWindow, which replaces
+        // this.tmux with a new TmuxManager, so its identity (with the spawn generation) is the fence. A recovery Enter or
+        // a proof taken after that would be about another window: the fence goes down to the write
+        // (sendDeliveryEnterAfterAvailability asks it last, right before the key) and into every proof, which asks it
+        // before its capture and again before judging what it read (#1514 review) — so a replacement during a capture
+        // can neither confirm this delivery nor run a proof's side effects.
+        const generation = this.spawnGeneration, tmux = this.tmux;
+        const current = () => this.spawnGeneration === generation && this.tmux === tmux;
+        const proofNow = () => this.confirmSubmitted(signature, baseline, current);
         if (!this.canProveSubmission()) {
-            let busy = await this.confirmBusyAfterEnter(windowId, enterAt);
+            let busy = (await this.confirmBusyAfterEnter(windowId, enterAt)) && current();
             if (!busy) {
-                if (!allowRecoveryEnter)
+                if (!allowRecoveryEnter || !current())
                     return false;
                 this.logger.warn("No idle→busy transition after Enter — re-sending Enter once");
                 const retryAt = Date.now();
-                if (!(await this.sendDeliveryEnter(retryPhase)))
+                if (!(await this.sendDeliveryEnter(retryPhase, current)))
                     return false;
-                busy = await this.confirmBusyAfterEnter(windowId, retryAt);
+                busy = (await this.confirmBusyAfterEnter(windowId, retryAt)) && current();
             }
             return busy;
         }
@@ -8422,7 +8523,9 @@ export class Daemon extends EventEmitter {
             // proves a swallowed Enter only once it outlasts the window; an early one is polled through. Codex keeps its rule.
             const strandMustPersist = !!this.backend?.readInputRow;
             for (;;) {
-                proof = await this.confirmSubmitted(signature, baseline);
+                proof = await proofNow();
+                if (!current())
+                    return false;
                 if (proof === "submitted")
                     return true;
                 if ((proof === "stranded" && !strandMustPersist) || Date.now() >= firstDeadline)
@@ -8431,18 +8534,22 @@ export class Daemon extends EventEmitter {
             }
             if (proof !== "stranded" || !allowRecoveryEnter)
                 return false;
-            if (!(await this.waitForPaneReadyForDelivery(windowId, STRANDED_RETRY_READY_WAIT_MS)))
+            if (!(await this.waitForPaneReadyForDelivery(windowId, STRANDED_RETRY_READY_WAIT_MS)) || !current())
+                return false;
+            proof = await proofNow();
+            if (!current())
                 return false;
-            proof = await this.confirmSubmitted(signature, baseline);
             if (proof === "submitted")
                 return true;
             if (proof !== "stranded")
                 return false;
-            if (!(await this.sendDeliveryEnter(retryPhase)))
+            if (!(await this.sendDeliveryEnter(retryPhase, current)))
                 return false;
             const retryDeadline = Date.now() + POST_ENTER_PROOF_WINDOW_MS;
             for (;;) {
-                proof = await this.confirmSubmitted(signature, baseline);
+                proof = await proofNow();
+                if (!current())
+                    return false;
                 if (proof === "submitted")
                     return true;
                 if (Date.now() >= retryDeadline)
@@ -8450,8 +8557,10 @@ export class Daemon extends EventEmitter {
                 await new Promise(r => setTimeout(r, POST_ENTER_PROOF_POLL_MS));
             }
         }
-        if (await this.confirmSubmitted(signature, baseline) === "submitted")
+        if (await proofNow() === "submitted" && current())
             return true;
+        if (!current())
+            return false;
         // Retry once the prompt is back — an Enter sent into a mid-redraw TUI is
         // how we got here. Then poll briefly rather than judging on one capture:
         // the key takes a moment to be digested, and a single early look would
@@ -8461,25 +8570,32 @@ export class Daemon extends EventEmitter {
         this.logger.warn("Enter did not submit — waiting for the prompt, then re-sending once");
         if (!(await this.waitForPaneReadyForDelivery(windowId, STRANDED_RETRY_READY_WAIT_MS)))
             return false;
-        if (!(await this.sendDeliveryEnter(retryPhase)))
+        if (!(await this.sendDeliveryEnter(retryPhase, current)))
             return false;
         const deadline = Date.now() + POST_ENTER_PROOF_WINDOW_MS;
         for (;;) {
-            if (await this.confirmSubmitted(signature, baseline) === "submitted")
+            const proof = await proofNow();
+            if (!current())
+                return false;
+            if (proof === "submitted")
                 return true;
             if (Date.now() >= deadline)
                 return false;
             await new Promise(r => setTimeout(r, POST_ENTER_PROOF_POLL_MS));
         }
     }
-    async confirmSubmitted(signature, baseline) {
-        if (!this.tmux)
+    async confirmSubmitted(signature, baseline, owned) {
+        // `owned`: the attempt's window fence (#1514 review), asked before the capture and again before judging it —
+        // judging can retire the spawn's input guard, so a capture of a replaced window must not even be judged.
+        if (!this.tmux || (owned && !owned()))
             return "unproven";
         let pane = null;
         try {
             pane = await this.tmux.capturePane();
         }
         catch { /* the transcript may still say */ }
+        if (owned && !owned())
+            return "unproven";
         const onPane = pane === null ? "unproven" : this.judgeSubmission(pane, signature, baseline);
         if (onPane === "submitted")
             return onPane;
@@ -8487,7 +8603,7 @@ export class Daemon extends EventEmitter {
         const found = await this.transcriptLook(signature);
         // One synchronous stretch from here: the fence is asked after the last await, and only then is the hit kept and the
         // spawn's guard retired — a stop or respawn that lands between the look and this line leaves both untouched.
-        if (!found || !t?.current())
+        if (!found || !t?.current() || (owned && !owned()))
             return onPane;
         if (!t.provenBy) {
             t.provenBy = found;
@@ -8622,11 +8738,13 @@ export class Daemon extends EventEmitter {
         return "unverifiable";
     }
     /** Only positive echo/queue evidence may turn an ambiguous Codex write into ✅. */
-    async lateCodexSubmissionProof(signature, baseline, waitThroughStranded = false) {
+    async lateCodexSubmissionProof(signature, baseline, waitThroughStranded = false, owned) {
         const deadline = Date.now() + CODEX_LATE_PROOF_MS;
         let proof = "unproven";
         for (;;) {
-            proof = await this.confirmSubmitted(signature, baseline);
+            if (owned && !owned())
+                return "unproven";
+            proof = await this.confirmSubmitted(signature, baseline, owned);
             // Ordinary idle-path proof may return a strand immediately. After a
             // native-queue recovery Enter, though, it can be the previous frame
             // still on screen; only a strand that survives the bounded repaint
@@ -8638,6 +8756,8 @@ export class Daemon extends EventEmitter {
                     // Scrollback can hold the echo the viewport lost — but it is judged exactly like the viewport: a box that
                     // cannot be read, or that still holds our text, is never upgraded by an echo further up.
                     const history = await this.tmux.capturePaneWithHistory(300);
+                    if (owned && !owned())
+                        return "unproven";
                     if (this.judgeSubmission(history, signature, baseline) === "submitted")
                         return this.submittedProof();
                 }
@@ -8924,12 +9044,18 @@ export class Daemon extends EventEmitter {
     async confirmBusyAfterEnter(windowId, since) {
         const client = this.controlClient;
         const hardDeadline = Date.now() + CONFIRM_BUSY_MAX_WAIT_MS;
+        // A drained control read hides notifications (#1517 review): while the client is blind a quiet pane is not
+        // evidence of a swallowed Enter, so blind polls do not count toward "no reaction". Bounded: past the drain limit
+        // the client retires and resets, which restarts this check from when it could see again.
+        const blindDeadline = hardDeadline + CONFIRM_BUSY_BLIND_EXTRA_MS;
         let observedFrom = since;
         let polls = 0;
         while (polls < CONFIRM_BUSY_POLLS) {
             await new Promise(r => setTimeout(r, CONFIRM_BUSY_POLL_MS));
             if (client.hasOutputSince(windowId, observedFrom))
                 return true;
+            if (client.isObservationBlind?.() && Date.now() < blindDeadline)
+                continue;
             const resetAt = client.getObservationResetAt();
             if (resetAt > observedFrom && Date.now() < hardDeadline) {
                 this.logger.debug({ windowId, resetAt }, "Control mode reconnected mid-confirmation — restarting the Enter check from when we could see again");
@@ -9247,7 +9373,20 @@ export class Daemon extends EventEmitter {
             respond(null, "No channel world bound to this chat context — awaiting an inbound message to establish it");
             return;
         }
-        if (!routeToolCall(adapter, tool, args, this.lastThreadId, respond)) {
+        // #1266: without the fleet there is no button store: buttons are checked, then offered as text.
+        let routed = args;
+        if (tool === "reply") {
+            const buttons = parseReplyButtons(args.buttons, args);
+            if (buttons && "error" in buttons) {
+                respond(null, `reply: ${buttons.error}`);
+                return;
+            }
+            if (buttons) {
+                routed = { ...args, text: `${String(args.text)}\n\n${replyButtonsFallbackText(buttons.buttons)}` };
+                delete routed.buttons;
+            }
+        }
+        if (!routeToolCall(adapter, tool, routed, this.lastThreadId, respond)) {
             respond(null, `Unknown tool: ${tool}`);
         }
     }
@@ -10344,15 +10483,16 @@ export class Daemon extends EventEmitter {
         // this file from <instanceDir>/agent.token (mode 0o600) and sends its
         // value in the X-Agend-Instance-Token header; the daemon-side /agent
         // endpoint verifies it matches the on-disk value for the claimed
-        // instance. This prevents other local processes (even those holding
-        // the global web token) from impersonating instances.
+        // instance. A global web token cannot substitute for this credential, but
+        // same-uid shell processes can read sibling tokens. Mode 0600 separates
+        // OS users; it does not isolate mutually untrusted agents on this account.
         const agentTokenPath = join(this.instanceDir, "agent.token");
         const agentToken = randomBytes(32).toString("hex");
         const tokenWrite = writeSecretFile(agentTokenPath, agentToken);
         if (!tokenWrite.ok) {
             // Do not fail the spawn over it — an instance that cannot start is worse
             // than one whose token is readable. But say so, loudly: the whole point of
-            // this token is that other local processes cannot use it.
+            // this permission check separates other OS users, not same-uid processes.
             this.logger.error({ path: agentTokenPath, mode: tokenWrite.mode?.toString(8), reason: tokenWrite.reason }, "Agent token file is not owner-only — other local users can impersonate this instance");
         }
         // AGEND_HOME points the child's agent-cli at the same data dir the daemon