@songsid/agend 2.3.0-beta.9 → 2.3.1

package/dist/session-oom-stop.js

@@ -0,0 +1,259 @@
+/** Authoritative instance stop, separate from an auto-wakeable pause or observational journal. */
+import { closeSync, constants, fstatSync, lstatSync, openSync, readSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import { join } from "node:path";
+import { atomicWriteFileSync } from "./atomic-write.js";
+import { ensureInstanceDir } from "./private-dir.js";
+import { t } from "./locale.js";
+import { selfOomEvidence } from "./session-oom.js";
+export const SESSION_OOM_STOP_FILE = "session-oom-stop.json";
+export function sessionOomStopHint(state) {
+    return t(state?.blocked && (state.record !== null || state.confirmedOom === true)
+        ? "inst.session_oom_hold" : "inst.session_oom_evidence_unreadable");
+}
+const MAX_BYTES = 4096;
+export class SessionOomStoppedError extends Error {
+    code = "SESSION_OOM_STOPPED";
+    constructor(busy = false, state) { super(busy ? t("inst.session_oom_retry_busy") : sessionOomStopHint(state)); this.name = "SessionOomStoppedError"; }
+}
+const owned = (uid) => typeof process.getuid !== "function" || uid === process.getuid();
+const boundedId = (x) => typeof x === "string" && x.length > 0 && Buffer.byteLength(x) <= 1024 && !/[\u0000-\u001f\u007f]/.test(x);
+const integer = (x) => Number.isSafeInteger(x) && x >= 0;
+const fingerprint = (stat) => createHash("sha256").update(JSON.stringify([stat.dev, stat.ino, stat.size, stat.mtimeMs, stat.ctimeMs])).digest("hex");
+const legacyCache = new Map();
+const LEGACY_SCAN_MAX_BYTES = 1024 * 1024;
+/** Read only the true final JSONL record, including wide/CJK pane captures. */
+function lastLegacyRecord(fd, size) {
+    let position = size, bytesRead = 0, end = null;
+    const chunks = [];
+    while (position > 0 && bytesRead < LEGACY_SCAN_MAX_BYTES) {
+        const length = Math.min(16 * 1024, position, LEGACY_SCAN_MAX_BYTES - bytesRead);
+        const chunk = Buffer.alloc(length);
+        position -= length;
+        // A short read means the captured stat no longer describes a complete record.
+        if (readSync(fd, chunk, 0, length, position) !== length)
+            return null;
+        bytesRead += length;
+        chunks.unshift(chunk);
+        for (let i = chunk.length - 1; i >= 0; i--) {
+            const byte = chunk[i];
+            if (end === null) {
+                if (byte === 10 || byte === 13 || byte === 32 || byte === 9)
+                    continue;
+                end = position + i + 1;
+            }
+            if (byte === 10) {
+                return Buffer.concat(chunks).subarray(i + 1, end - position).toString("utf8");
+            }
+        }
+    }
+    return position === 0 ? Buffer.concat(chunks).subarray(0, end ?? 0).toString("utf8") : null;
+}
+function legacyHistoryRevision(instanceDir) {
+    try {
+        const stat = lstatSync(join(instanceDir, "crash-history.jsonl"));
+        if (!stat.isFile() || !owned(stat.uid))
+            throw new SessionOomStoppedError();
+        return `legacy:${fingerprint(stat)}`;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return null;
+        throw new SessionOomStoppedError();
+    }
+}
+/** Upgrade-only evidence: old #2446 wrote a structured stop without a session/launch owner. */
+function legacySessionStop(instanceDir) {
+    let fd;
+    let revision = null;
+    try {
+        const path = join(instanceDir, "crash-history.jsonl"), stat = lstatSync(path);
+        if (!stat.isFile() || !owned(stat.uid))
+            return { blocked: true, record: null, revision: null };
+        revision = `legacy:${fingerprint(stat)}`;
+        const cached = legacyCache.get(instanceDir);
+        let blocked = true, confirmedOom = false;
+        let evidence;
+        if (cached?.revision === revision) {
+            blocked = cached.blocked;
+            confirmedOom = cached.confirmedOom;
+            evidence = cached.evidence;
+        }
+        else {
+            fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            const opened = fstatSync(fd);
+            if (opened.dev !== stat.dev || opened.ino !== stat.ino)
+                return { blocked: true, record: null, revision: null };
+            // The final structured record names the last crash decision. Do not scan
+            // transcripts, parse human logs, or guess that an old OOM is still current.
+            const last = lastLegacyRecord(fd, stat.size);
+            if (last === null)
+                blocked = true;
+            else {
+                const record = last ? JSON.parse(last) : null;
+                const valid = !!record && typeof record === "object" && typeof record.instance === "string"
+                    && typeof record.timestamp === "string" && Number.isFinite(Date.parse(record.timestamp))
+                    && ["window", "server"].includes(record.crashType);
+                confirmedOom = valid && record.reason === "session_oom" && selfOomEvidence(record.oomEvidence);
+                if (confirmedOom)
+                    evidence = record.oomEvidence;
+                if (valid && record.reason === "session_oom" && !confirmedOom) {
+                    releaseUnprovenStop(instanceDir, null, revision);
+                }
+                blocked = !!last && (!valid || confirmedOom);
+            }
+            if (legacyCache.size >= 512)
+                legacyCache.delete(legacyCache.keys().next().value);
+            legacyCache.set(instanceDir, { revision, blocked, confirmedOom, evidence });
+        }
+        return blocked ? { blocked: true, record: null, revision, ...(confirmedOom ? { confirmedOom: true, evidence } : {}) } : { blocked: false };
+    }
+    catch (error) {
+        return error.code === "ENOENT" ? { blocked: false } : { blocked: true, record: null, revision };
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+function validShape(value) {
+    return [1, 2].includes(value?.version) && value.reason === "session_oom" && boundedId(value.id) && boundedId(value.sessionKey)
+        && /^[a-f0-9]{64}$/.test(value.configuration) && boundedId(value.owner?.bootId)
+        && [value.owner.spawnGeneration, value.owner.launchAttempt, value.owner.launchFenceEpoch].every(integer)
+        && integer(value.stoppedAt) && integer(value.count) && value.count >= 2
+        && integer(value.victim?.pid) && value.victim.pid > 0 && integer(value.victim.at);
+}
+function valid(value) {
+    return validShape(value) && value.version === 2 && selfOomEvidence(value.evidence);
+}
+/** Only a safely read old decision is migrated; preserve its evidence/history. */
+function releaseUnprovenStop(instanceDir, record, legacyRevision, revision) {
+    if (revision) {
+        const stat = lstatSync(join(instanceDir, SESSION_OOM_STOP_FILE));
+        if (!stat.isFile() || !owned(stat.uid) || fingerprint(stat) !== revision)
+            throw new SessionOomStoppedError();
+        atomicWriteFileSync(join(instanceDir, `session-oom-stop-pre-policy2-${revision}.json`), JSON.stringify(record), { mode: 0o600 });
+    }
+    else if (legacyHistoryRevision(instanceDir) !== legacyRevision)
+        throw new SessionOomStoppedError();
+    atomicWriteFileSync(join(instanceDir, SESSION_OOM_STOP_FILE), JSON.stringify({ version: 1, id: randomUUID(),
+        reason: "session_oom_cleared", clearedAt: Date.now(), legacyRevision, migration: "no_self_oom_evidence" }), { mode: 0o600 });
+    console.warn("AgEnD: released an old session-OOM stop without self-caused memory evidence; session preserved.");
+}
+/** Absence alone permits a launch; malformed, foreign, symlinked or unreadable evidence holds it. */
+export function readSessionOomStop(instanceDir) {
+    let fd;
+    try {
+        const dir = lstatSync(instanceDir);
+        if (!dir.isDirectory() || !owned(dir.uid))
+            return { blocked: true, record: null, revision: null };
+        const path = join(instanceDir, SESSION_OOM_STOP_FILE);
+        let stat;
+        try {
+            stat = lstatSync(path);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return legacySessionStop(instanceDir);
+            throw error;
+        }
+        if (!stat.isFile() || !owned(stat.uid))
+            return { blocked: true, record: null, revision: null };
+        // No raw contents in a receipt, error, log or caller-visible command.
+        const revision = fingerprint(stat);
+        if (stat.size > MAX_BYTES)
+            return { blocked: true, record: null, revision };
+        try {
+            fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            const opened = fstatSync(fd);
+            if (!opened.isFile() || !owned(opened.uid) || opened.dev !== stat.dev || opened.ino !== stat.ino || opened.size > MAX_BYTES)
+                return { blocked: true, record: null, revision: null };
+            const bytes = Buffer.alloc(MAX_BYTES + 1);
+            let length = 0;
+            while (length < bytes.length) {
+                const n = readSync(fd, bytes, length, bytes.length - length, null);
+                if (!n)
+                    break;
+                length += n;
+            }
+            if (length > MAX_BYTES)
+                return { blocked: true, record: null, revision };
+            const parsed = JSON.parse(bytes.subarray(0, length).toString("utf8"));
+            // A durable retry receipt prevents the old structured stop from being
+            // re-imported on every subsequent boot. It is not an auto-retry receipt.
+            const cleared = parsed;
+            if (cleared?.version === 1 && cleared.reason === "session_oom_cleared" && boundedId(cleared.id) && integer(cleared.clearedAt)
+                && (cleared.legacyRevision === null || typeof cleared.legacyRevision === "string" && /^legacy:[a-f0-9]{64}$/.test(cleared.legacyRevision))) {
+                // An older binary, or a failed modern marker write, may have recorded
+                // a NEW stop since this retry. A receipt acknowledges only its history.
+                return cleared.legacyRevision === legacyHistoryRevision(instanceDir) ? { blocked: false } : legacySessionStop(instanceDir);
+            }
+            if (validShape(parsed) && !valid(parsed)) {
+                releaseUnprovenStop(instanceDir, parsed, legacyHistoryRevision(instanceDir), revision);
+                return { blocked: false };
+            }
+            return { blocked: true, record: valid(parsed) ? parsed : null, revision };
+        }
+        catch {
+            return { blocked: true, record: null, revision };
+        }
+    }
+    catch (error) {
+        return error.code === "ENOENT" ? { blocked: false } : { blocked: true, record: null, revision: null };
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+export function assertNoSessionOomStop(instanceDir) {
+    const state = readSessionOomStop(instanceDir);
+    if (state.blocked)
+        throw new SessionOomStoppedError(false, state);
+}
+/** Call synchronously after the confirmed OOM's final owner check, before ending supervision. */
+export function writeSessionOomStop(instanceDir, input) {
+    ensureInstanceDir(instanceDir);
+    const existing = readSessionOomStop(instanceDir);
+    if (existing.blocked) {
+        if (existing.record)
+            return existing.record;
+        throw new SessionOomStoppedError(false, existing);
+    }
+    const record = { version: 2, id: randomUUID(), reason: "session_oom",
+        owner: { bootId: input.owner.bootId, spawnGeneration: input.owner.spawnGeneration, launchAttempt: input.owner.launchAttempt, launchFenceEpoch: input.owner.launchFenceEpoch },
+        sessionKey: input.sessionKey, configuration: input.configuration, stoppedAt: input.stoppedAt, count: input.count,
+        victim: { pid: input.victim.pid, at: input.victim.at },
+        evidence: { policy: 2, scope: "global", ramPages: input.evidence?.ramPages, victimRssPages: input.evidence?.victimRssPages,
+            victimAnonKiB: input.evidence?.victimAnonKiB, victimTotalRssKiB: input.evidence?.victimTotalRssKiB,
+            largestOtherRssPages: input.evidence?.largestOtherRssPages } };
+    if (!valid(record) || Buffer.byteLength(JSON.stringify(record)) > MAX_BYTES)
+        throw new Error("Invalid session OOM stop evidence");
+    atomicWriteFileSync(join(instanceDir, SESSION_OOM_STOP_FILE), JSON.stringify(record), { mode: 0o600 });
+    return record;
+}
+export function captureSessionOomRetry(instanceDir) {
+    const state = readSessionOomStop(instanceDir);
+    if (state.blocked && state.revision === null)
+        throw new SessionOomStoppedError(false, state);
+    return { revision: state.blocked ? state.revision : null, legacyRevision: legacyHistoryRevision(instanceDir) };
+}
+/** Does not authorize clearing a later OOM decision, even if it arrived while the action waited. */
+export function clearSessionOomStopForRetry(instanceDir, retry) {
+    const state = readSessionOomStop(instanceDir);
+    if (!state.blocked)
+        return;
+    if (!state.revision || state.revision !== retry.revision)
+        throw new SessionOomStoppedError(false, state);
+    if (legacyHistoryRevision(instanceDir) !== retry.legacyRevision)
+        throw new SessionOomStoppedError(false, state);
+    try {
+        atomicWriteFileSync(join(instanceDir, SESSION_OOM_STOP_FILE), JSON.stringify({ version: 1,
+            id: randomUUID(), reason: "session_oom_cleared", clearedAt: Date.now(), legacyRevision: retry.legacyRevision }), { mode: 0o600 });
+    }
+    catch {
+        throw new SessionOomStoppedError(false, state);
+    }
+    assertNoSessionOomStop(instanceDir);
+}
+//# sourceMappingURL=session-oom-stop.js.map

package/dist/session-oom-stop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-oom-stop.js","sourceRoot":"","sources":["../src/session-oom-stop.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAwB,MAAM,kBAAkB,CAAC;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,UAAU,kBAAkB,CAAC,KAA2B;IAC5D,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC;QAC/E,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,SAAS,GAAG,IAAI,CAAC;AAgBvB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,qBAAqB,CAAC;IACtC,YAAY,IAAI,GAAG,KAAK,EAAE,KAA2B,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC;CAC7K;AACD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;AAChG,MAAM,SAAS,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzJ,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAK,CAAY,IAAI,CAAC,CAAC;AAC3F,MAAM,WAAW,GAAG,CAAC,IAAkF,EAAE,EAAE,CACzG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqG,CAAC;AACjI,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,EAAU,EAAE,IAAY;IAChD,IAAI,QAAQ,GAAG,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,GAAG,GAAkB,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,OAAO,QAAQ,GAAG,CAAC,IAAI,SAAS,GAAG,qBAAqB,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,qBAAqB,GAAG,SAAS,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,QAAQ,IAAI,MAAM,CAAC;QACnB,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACrE,SAAS,IAAI,MAAM,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC;oBAAE,SAAS;gBACtE,GAAG,GAAG,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;gBAChB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AACD,SAAS,qBAAqB,CAAC,WAAmB;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QAC3E,OAAO,UAAU,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,IAAI,EAAsB,CAAC;IAC3B,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/F,QAAQ,GAAG,UAAU,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,IAAI,EAAE,YAAY,GAAG,KAAK,CAAC;QACzC,IAAI,QAAqC,CAAC;QAC1C,IAAI,MAAM,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAAC,CAAC;aAC3H,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC/G,yEAAyE;YACzE,4EAA4E;YAC5E,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAC7B,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;uBACtF,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;uBACrF,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrD,YAAY,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC/F,IAAI,YAAY;oBAAE,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;gBAChD,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC9D,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACnD,CAAC;gBACD,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,WAAW,CAAC,IAAI,IAAI,GAAG;gBAAE,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YAClF,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC7H,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACpD,CAAC;AACD,SAAS,UAAU,CAAC,KAAU;IAC5B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;WACzH,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC;WAC5E,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;WACrG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC;WACpE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AACD,SAAS,KAAK,CAAC,KAAU;IACvB,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,kFAAkF;AAClF,SAAS,mBAAmB,CAAC,WAAmB,EAAE,MAAe,EAAE,cAA6B,EAAE,QAAiB;IACjH,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QAC7G,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,gCAAgC,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnI,CAAC;SAAM,IAAI,qBAAqB,CAAC,WAAW,CAAC,KAAK,cAAc;QAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACrG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE;QACzG,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/H,OAAO,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;AAClH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAC/B,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC7H,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/F,sEAAsE;QACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5E,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpL,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;gBACnE,IAAI,CAAC,CAAC;oBAAE,MAAM;gBACd,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;YACD,IAAI,MAAM,GAAG,SAAS;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACzE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,sEAAsE;YACtE,yEAAyE;YACzE,MAAM,OAAO,GAAG,MAAqH,CAAC;YACtI,IAAI,OAAO,EAAE,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;mBACxH,CAAC,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;gBAC7I,sEAAsE;gBACtE,wEAAwE;gBACxE,OAAO,OAAO,CAAC,cAAc,KAAK,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAC7H,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,qBAAqB,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACvF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnI,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAwD;IAC/G,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,aAAa;QAClF,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE;QAC7K,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QAChH,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE;QACtD,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc;YACxH,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB;YAClG,oBAAoB,EAAE,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,EAAE,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClI,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7F,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,2BAA2B,CAAC,WAAmB,EAAE,KAAsB;IACrF,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO;IAC3B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzG,IAAI,qBAAqB,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChH,IAAI,CAAC;QAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7F,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACtI,MAAM,CAAC;QAAC,MAAM,IAAI,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IACzD,sBAAsB,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC"}

package/dist/session-oom.d.ts

@@ -0,0 +1,34 @@
+export interface CliOomIdentity {
+    pid: number;
+    start: string;
+    comm: string;
+    observedAt: number;
+}
+export interface SelfOomEvidence {
+    policy: 2;
+    scope: "global";
+    ramPages: number;
+    victimRssPages: number;
+    victimAnonKiB: number;
+    victimTotalRssKiB: number;
+    largestOtherRssPages: number;
+}
+export interface KernelOom {
+    pid: number;
+    comm: string;
+    at: number;
+    attribution: "self" | "collateral" | "unknown";
+    evidence?: SelfOomEvidence;
+}
+export declare function selfOomEvidence(value: unknown): value is SelfOomEvidence;
+export declare function describeSelfOom(e: SelfOomEvidence): string;
+/** Follow only a short shell/env chain. Branched or unknown primaries are unknown. */
+export declare function observeCliOomIdentity(panePid: number, binaryName: string, proc?: string): Promise<CliOomIdentity | null>;
+export declare function parseKernelOoms(output: string): KernelOom[];
+export declare function confirmedCliOom(identity: CliOomIdentity | null, diedAt: number, proc?: string): Promise<KernelOom | null>;
+export interface SessionOomCount {
+    key: string;
+    count: number;
+}
+/** Ready after resume is not recovery proof: the same session can OOM later. */
+export declare function consecutiveSessionOoms(previous: SessionOomCount | null, key: string | null, confirmed: boolean): SessionOomCount | null;

package/dist/session-oom.js

@@ -0,0 +1,251 @@
+/** Definitive, conservative Linux OOM attribution. Never signals a workload for memory. */
+import { execFile } from "./child-process.js";
+import { readFile, readlink } from "node:fs/promises";
+import { basename } from "node:path";
+import { t } from "./locale.js";
+/** Positive dominance proof only. A selected victim is not necessarily the allocator. */
+function validOomEvidence(value) {
+    const e = value;
+    if (!e || e.policy !== 2 || e.scope !== "global"
+        || ![e.ramPages, e.victimRssPages, e.victimAnonKiB, e.victimTotalRssKiB, e.largestOtherRssPages]
+            .every(n => Number.isSafeInteger(n) && n >= 0)
+        || !e.ramPages || !e.victimRssPages || !e.victimTotalRssKiB
+        || e.victimRssPages > e.ramPages || e.victimAnonKiB > e.victimTotalRssKiB)
+        return false;
+    const pageKiB = e.victimTotalRssKiB / e.victimRssPages;
+    return [4, 16, 64].some(unit => Math.abs(pageKiB - unit) <= unit * 0.05);
+}
+export function selfOomEvidence(value) {
+    if (!validOomEvidence(value))
+        return false;
+    const e = value;
+    // Both table and RAM use pages. Scaling by the kill-line anonymous fraction
+    // avoids assuming 4-KiB pages on arm64, or mistaking file RSS for anon RSS.
+    const anonPages = e.victimRssPages * (e.victimAnonKiB / e.victimTotalRssKiB);
+    return anonPages >= e.ramPages / 2 && anonPages >= 2 * e.largestOtherRssPages;
+}
+export function describeSelfOom(e) {
+    const anonPages = e.victimRssPages * (e.victimAnonKiB / e.victimTotalRssKiB);
+    return t("inst.session_oom_proof", Math.floor(100 * anonPages / e.ramPages), e.largestOtherRssPages ? (anonPages / e.largestOtherRssPages).toFixed(1) : "∞");
+}
+const MAX_PROC_BYTES = 16_384;
+const LAUNCHERS = new Set(["bash", "dash", "sh", "zsh", "fish", "env", "busybox"]);
+async function text(path) {
+    try {
+        const value = await readFile(path, "utf8");
+        return value.length <= MAX_PROC_BYTES ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function processStart(stat) {
+    const end = stat.lastIndexOf(")");
+    const start = stat.slice(end + 2).trim().split(/\s+/)[19];
+    return end > 0 && /^\d+$/.test(start ?? "") ? start : null;
+}
+/** Follow only a short shell/env chain. Branched or unknown primaries are unknown. */
+export async function observeCliOomIdentity(panePid, binaryName, proc = "/proc") {
+    if (process.platform !== "linux" || !Number.isSafeInteger(panePid) || panePid <= 0)
+        return null;
+    let pid = panePid, parent = null;
+    for (let depth = 0; depth < 4; depth++) {
+        const comm = (await text(`${proc}/${pid}/comm`))?.trim();
+        const stat = await text(`${proc}/${pid}/stat`);
+        const status = await text(`${proc}/${pid}/status`);
+        // A journal PID is in the host namespace. Do not guess container mappings.
+        const ns = status?.match(/^NSpid:\s+(.+)$/m)?.[1]?.trim().split(/\s+/);
+        if (!stat || !ns || ns.length !== 1 || Number(ns[0]) !== pid)
+            return null;
+        // NSpid is relative to the procfs mount, so one entry does NOT prove a
+        // host PID. Linux reserves 0xEFFFFFFC for the initial PID namespace:
+        // include/uapi/linux/nsfs.h PID_NS_INIT_INO (older: linux/proc_ns.h).
+        // Decline unknown/nested namespaces rather than match container IDs to
+        // unrelated host-journal victims. No namespace translation is attempted.
+        try {
+            if (await readlink(`${proc}/${pid}/ns/pid`) !== "pid:[4026531836]")
+                return null;
+        }
+        catch {
+            return null;
+        }
+        const start = processStart(stat);
+        const ppid = Number(stat.slice(stat.lastIndexOf(")") + 2).trim().split(/\s+/)[1]);
+        if (!start || (parent !== null && ppid !== parent))
+            return null;
+        const again = await text(`${proc}/${pid}/stat`);
+        if (!again || processStart(again) !== start)
+            return null;
+        let executable;
+        try {
+            executable = basename((await readlink(`${proc}/${pid}/exe`)).replace(/ \(deleted\)$/, ""));
+        }
+        catch {
+            return null;
+        }
+        if (comm === binaryName && !LAUNCHERS.has(executable))
+            return { pid, start, comm, observedAt: Date.now() };
+        // An unknown primary, or a branched launcher, cannot identify which child
+        // is the primary CLI. Never search through it for a tool/subagent match.
+        if (!LAUNCHERS.has(executable))
+            return null;
+        const raw = await text(`${proc}/${pid}/task/${pid}/children`);
+        const children = raw?.trim().split(/\s+/).filter(value => /^\d+$/.test(value)) ?? [];
+        if (children.length !== 1)
+            return null;
+        parent = pid;
+        pid = Number(children[0]);
+        if (!Number.isSafeInteger(pid) || pid <= 0)
+            return null;
+    }
+    return null;
+}
+export function parseKernelOoms(output) {
+    const records = [];
+    let beganAt = 0, ramPages = 0, table = false, header = null, invalid = false;
+    let tasks = new Map();
+    let context = "";
+    const reset = () => { beganAt = ramPages = 0; table = invalid = false; header = null; tasks = new Map(); context = ""; };
+    for (const line of output.split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            const row = JSON.parse(line);
+            if (row._TRANSPORT !== "kernel")
+                continue;
+            if (typeof row.MESSAGE !== "string") {
+                invalid = true;
+                continue;
+            }
+            const at = Number(row.__REALTIME_TIMESTAMP) / 1000;
+            if (!Number.isFinite(at) || at <= 0) {
+                reset();
+                continue;
+            }
+            const msg = row.MESSAGE;
+            if (msg.includes("invoked oom-killer:")) {
+                reset();
+                beganAt = at;
+            }
+            const ram = /^\s*(\d+) pages RAM\s*$/.exec(msg);
+            if (ram) {
+                if (ramPages && ramPages !== Number(ram[1]))
+                    invalid = true;
+                ramPages = Number(ram[1]);
+            }
+            if (msg === "Tasks state (memory values in pages):") {
+                if (table)
+                    invalid = true;
+                table = true;
+            }
+            // Linux 6.8 added per-kind RSS columns. Match the declared layout before
+            // reading rows; unknown/reordered columns must not hide a larger task.
+            if (/^\[\s*pid\s*\]/.test(msg)) {
+                const columns = /^\[\s*pid\s*\]\s+uid\s+tgid\s+total_vm\s+rss\s+(rss_anon\s+rss_file\s+rss_shmem\s+)?pgtables_bytes\s+swapents\s+oom_score_adj\s+name\s*$/.exec(msg);
+                if (!table || header || !columns)
+                    invalid = true;
+                else
+                    header = columns[1] ? "rss-columns" : "legacy";
+            }
+            if (table && /^\[\s*\d/.test(msg)) {
+                // comm is the rest of the line, not a word (e.g. "tmux: server").
+                const task = (header === "rss-columns"
+                    ? /^\[\s*(\d+)\]\s+\d+\s+\d+\s+\d+\s+(\d+)\s+\d+\s+\d+\s+\d+\s+\d+\s+\d+\s+-?\d+\s+(.+?)\s*$/
+                    : /^\[\s*(\d+)\]\s+\d+\s+\d+\s+\d+\s+(\d+)\s+\d+\s+\d+\s+-?\d+\s+(.+?)\s*$/).exec(msg);
+                if (!header || !task)
+                    invalid = true;
+                else {
+                    const pid = Number(task[1]), rss = Number(task[2]), comm = task[3];
+                    const old = tasks.get(pid);
+                    if (old && (old.rss !== rss || old.comm !== comm))
+                        invalid = true;
+                    if (!Number.isSafeInteger(rss) || (!old && tasks.size >= 4096))
+                        invalid = true;
+                    else
+                        tasks.set(pid, { rss, comm });
+                }
+            }
+            if (msg.startsWith("oom-kill:")) {
+                if (context)
+                    invalid = true;
+                context = msg;
+            }
+            const victim = /^(Out of memory|Memory cgroup out of memory): Killed process (\d+) \(([^)]+)\)/.exec(msg);
+            if (!victim)
+                continue;
+            const pid = Number(victim[2]), comm = victim[3];
+            const record = { pid, comm, at, attribution: "unknown" };
+            const own = tasks.get(pid);
+            const rss = /anon-rss:(\d+)kB, file-rss:(\d+)kB, shmem-rss:(\d+)kB/.exec(msg);
+            // Only one complete, unconstrained report. Shared fleet/container memcg
+            // exhaustion cannot identify an individual instance as the cause.
+            if (beganAt && at >= beganAt && at - beganAt <= 10_000 && !invalid && ramPages && table && header && own?.comm === comm && rss
+                && context.startsWith("oom-kill:constraint=CONSTRAINT_NONE,") && context.includes(",global_oom,")
+                && context.includes(`,task=${comm},pid=${pid},`) && victim[1] === "Out of memory") {
+                const evidence = { policy: 2, scope: "global", ramPages, victimRssPages: own.rss,
+                    victimAnonKiB: Number(rss[1]), victimTotalRssKiB: Number(rss[1]) + Number(rss[2]) + Number(rss[3]),
+                    largestOtherRssPages: Math.max(0, ...[...tasks].filter(([other]) => other !== pid).map(([, task]) => task.rss)) };
+                if (validOomEvidence(evidence) && evidence.largestOtherRssPages >= 2 * own.rss)
+                    record.attribution = "collateral";
+                if (selfOomEvidence(evidence)) {
+                    record.attribution = "self";
+                    record.evidence = evidence;
+                }
+            }
+            records.push(record);
+            reset();
+        }
+        catch {
+            invalid = true; /* a lost task row may hide the actual hog */
+        }
+    }
+    return records;
+}
+let pending = null;
+/** One physical reader for a burst of deaths; bounded output/runtime, current boot only. */
+function recentKernelOoms() {
+    if (pending)
+        return pending;
+    pending = new Promise(resolve => {
+        // Project away optional machine/host metadata (journal cursors stay).
+        // Leave room for all 4096 task rows
+        // plus the report's stack/Mem-Info and other recent kernel messages.
+        try {
+            execFile("journalctl", ["--kernel", "--boot=0", "--since=-5min", "--no-pager", "--output=json",
+                "--output-fields=MESSAGE,_TRANSPORT,__REALTIME_TIMESTAMP", "--lines=8192"], { encoding: "utf8", timeout: 1000, maxBuffer: 8 * 1024 * 1024, killSignal: "SIGKILL" }, (error, stdout) => resolve(error ? null : parseKernelOoms(stdout)));
+        }
+        catch {
+            resolve(null);
+        }
+    }).finally(() => { pending = null; });
+    return pending;
+}
+async function identityIsDead(identity, proc) {
+    try {
+        const stat = await readFile(`${proc}/${identity.pid}/stat`, "utf8");
+        return stat.length <= MAX_PROC_BYTES && processStart(stat) === identity.start && /\) [ZX] /.test(stat);
+    }
+    catch (error) {
+        // Unreadable is not absent: a reused PID owned by somebody else may be
+        // hidden by procfs permissions. Only a known disappearance is acceptable.
+        return ["ENOENT", "ESRCH"].includes(error.code ?? "");
+    }
+}
+export async function confirmedCliOom(identity, diedAt, proc = "/proc") {
+    if (process.platform !== "linux" || !identity || diedAt < identity.observedAt)
+        return null;
+    if (!await identityIsDead(identity, proc))
+        return null;
+    const records = await recentKernelOoms();
+    if (!await identityIsDead(identity, proc))
+        return null;
+    return records?.find(row => row.pid === identity.pid && row.comm === identity.comm
+        && row.at >= identity.observedAt && row.at <= diedAt) ?? null;
+}
+/** Ready after resume is not recovery proof: the same session can OOM later. */
+export function consecutiveSessionOoms(previous, key, confirmed) {
+    if (!confirmed || !key)
+        return null;
+    return { key, count: previous?.key === key ? previous.count + 1 : 1 };
+}
+//# sourceMappingURL=session-oom.js.map

package/dist/session-oom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-oom.js","sourceRoot":"","sources":["../src/session-oom.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAahC,yFAAyF;AACzF,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,CAAC,GAAG,KAA+B,CAAC;IAC1C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;WAC3C,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,oBAAoB,CAAC;aAC7F,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;WAC7C,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,iBAAiB;WACxD,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,OAAO,GAAG,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,cAAc,CAAC;IACvD,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC;IAChB,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7E,OAAO,SAAS,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC,wBAAwB,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/J,CAAC;AACD,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AACnF,KAAK,UAAU,IAAI,CAAC,IAAY;IAC9B,IAAI,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAClI,CAAC;AACD,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe,EAAE,UAAkB,EAAE,IAAI,GAAG,OAAO;IAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,GAAG,GAAG,OAAO,EAAE,MAAM,GAAkB,IAAI,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,SAAS,CAAC,CAAC;QACnD,2EAA2E;QAC3E,MAAM,EAAE,GAAG,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC1E,uEAAuE;QACvE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAAC;YAAC,IAAI,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK,kBAAkB;gBAAE,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/G,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1H,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3G,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,SAAS,GAAG,WAAW,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,GAAoC,IAAI,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9G,IAAI,KAAK,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC7D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACzH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ;gBAAE,SAAS;YAC1C,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YAClE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3D,MAAM,GAAG,GAAW,GAAG,CAAC,OAAO,CAAC;YAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;YAAC,CAAC;YACnE,MAAM,GAAG,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBAAC,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,GAAG,IAAI,CAAC;gBAAC,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACpG,IAAI,GAAG,KAAK,uCAAuC,EAAE,CAAC;gBAAC,IAAI,KAAK;oBAAE,OAAO,GAAG,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;YACjG,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,0IAA0I,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrK,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,IAAI,CAAC;;oBAC5C,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;YACtD,CAAC;YACD,IAAI,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,kEAAkE;gBAClE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa;oBACpC,CAAC,CAAC,2FAA2F;oBAC7F,CAAC,CAAC,yEAAyE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzF,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;oBAAE,OAAO,GAAG,IAAI,CAAC;qBAChC,CAAC;oBACJ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;oBACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC3B,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;wBAAE,OAAO,GAAG,IAAI,CAAC;oBAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;wBAAE,OAAO,GAAG,IAAI,CAAC;;wBAC1E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAAC,IAAI,OAAO;oBAAE,OAAO,GAAG,IAAI,CAAC;gBAAC,OAAO,GAAG,GAAG,CAAC;YAAC,CAAC;YAChF,MAAM,MAAM,GAAG,gFAAgF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1G,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;YACjD,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9E,wEAAwE;YACxE,kEAAkE;YAClE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,GAAG,OAAO,IAAI,MAAM,IAAI,CAAC,OAAO,IAAI,QAAQ,IAAI,KAAK,IAAI,MAAM,IAAI,GAAG,EAAE,IAAI,KAAK,IAAI,IAAI,GAAG;mBACzH,OAAO,CAAC,UAAU,CAAC,sCAAsC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;mBAC9F,OAAO,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;gBACpF,MAAM,QAAQ,GAAoB,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC,GAAG;oBAC/F,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAClG,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACpH,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,oBAAoB,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG;oBAAE,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;gBAClH,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;oBAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAAC,CAAC;YAC7F,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAC,KAAK,EAAE,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,CAAC,6CAA6C;QAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,IAAI,OAAO,GAAuC,IAAI,CAAC;AACvD,4FAA4F;AAC5F,SAAS,gBAAgB;IACvB,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,IAAI,OAAO,CAAqB,OAAO,CAAC,EAAE;QAClD,sEAAsE;QACtE,oCAAoC;QACpC,qEAAqE;QACrE,IAAI,CAAC;YAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe;gBAClG,yDAAyD,EAAE,cAAc,CAAC,EAC5E,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EACtF,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACtE,MAAM,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAwB,EAAE,IAAY;IAClE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,MAAM,IAAI,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,0EAA0E;QAC1E,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA+B,EAAE,MAAc,EAAE,IAAI,GAAG,OAAO;IACnG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,MAAM,GAAG,QAAQ,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,IAAI,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;WAC7E,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC;AAClE,CAAC;AAGD,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,QAAgC,EAAE,GAAkB,EAAE,SAAkB;IAC7G,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/settings-api.d.ts

@@ -27,6 +27,7 @@ import { type SettingsExecution } from "./settings-transaction.js";
  * written; warnings are non-blocking and returned alongside the result.
  */
 import { type AppShellContext } from "./web-api.js";
+import { type ExplicitInstanceRemoval } from "./instance-removal.js";
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { Logger } from "./logger.js";
 import type { FleetConfig, RawFleetConfig } from "./types.js";
@@ -35,6 +36,10 @@ import { type ConnectionMetadata, type ConnectionBinding, type BindingProbe, typ
 import type { ProviderSecretStatus } from "./provider-secret-registry.js";
 import { type GuildEmoji, type GuildEmojiGroup } from "./status-emojis.js";
 export interface SettingsApiContext extends AppShellContext {
+    retryAdapterNow?(id: string): {
+        queued: boolean;
+        already_running?: boolean;
+    };
     /** #1920 phase 3: Settings → Web sign-ins → Guests. */
     guestOverview?(): unknown;
     revokeGuestWebSessions?(owner: {
@@ -58,14 +63,19 @@ export interface SettingsApiContext extends AppShellContext {
     logger: Logger;
     getRawFleetConfig(): RawFleetConfig;
     saveFleetConfig(explicitPatches?: RawConfigPatch[]): void;
+    /** Refresh managed guidance and web clients after a committed experimental setting change. */
+    canvasWorkerSettingChanged?(): void;
     lifecycle: {
         isPaused(name: string): boolean;
         pause(name: string): Promise<void>;
         wake(name: string, timeoutMs?: number): Promise<void>;
     };
     isClassicInstance?(name: string): boolean;
+    /** Delete an agent the way delete_instance and the chat's Delete do (FleetManager.removeInstance): stopped, its schedules
+     *  and team places dropped, its fleet.yaml entry removed. Absent in unit contexts that only exercise CRUD. */
+    removeInstance?(name: string, authorization: ExplicitInstanceRemoval, execution?: SettingsExecution): Promise<void>;
     /** Phase 2b: an operator wake that respects the warm hard cap (FleetManager.explicitWake). */
-    explicitWake?(name: string, timeoutMs?: number): Promise<void>;
+    explicitWake?(name: string, timeoutMs?: number, retryStoppedSession?: boolean): Promise<void>;
     restartClassicInstanceFromSettings?(instanceName: string, changedFields?: string[], execution?: SettingsExecution): Promise<void>;
     captureClassicSettingsRestoration?(instanceName: string, changedFields: string[], execution?: SettingsExecution): () => Promise<void>;
     /** Present on a real fleet; absent in unit contexts that only exercise CRUD. */
@@ -80,6 +90,8 @@ export interface SettingsApiContext extends AppShellContext {
     /** Non-null when the running config and fleet.yaml disagree on a
      * startup-only key, in which case a restart cannot clear the fleet row. */
     fleetSignatureMismatchKeys?(): string[] | null;
+    /** #2346: whether a connection added now starts at once (another one is running), or needs AgEnD restarted. */
+    connectionsStartLive?(): boolean;
     /** #1005/#1021: a Discord connection's server emojis, from each server its
      * bot can draw on, fetched with its bot token and cached. */
     listGuildEmojis?(channelId: string, refresh?: boolean): Promise<{
@@ -134,6 +146,7 @@ export interface SettingsApiContext extends AppShellContext {
     verifyProviderSecret?(input: {
         specId: string;
         secret: string;
+        clear?: boolean;
         sessionBinding: string;
         idempotencyKey: string;
     }): Promise<{