@songsid/agend 2.3.4-beta.7 → 2.3.5-alpha.3

package/dist/runtime-pane-stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-stdio.js","sourceRoot":"","sources":["../src/runtime-pane-stdio.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAwB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAC,cAAc,EAAC,eAAe,EAAC,gBAAgB,EAAuB,MAAM,kCAAkC,CAAC;AAExI,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAC,MAAe,EAAC,IAAI,GAAqD,OAAO,CAAA,EAAE,CAAA,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;IACjK,iIAAiI;IACjI,MAAM,MAAM,GAAC,IAAI,eAAe,EAAE,EAAC,OAAO,GAAC,IAAI,GAAG,EAAkB,CAAC;IAAA,IAAI,IAA8B,EAAC,KAAK,GAAC,EAAE,EAAC,MAAM,GAAC,KAAK,EAAC,SAAS,GAAC,CAAC,EAAC,QAAQ,GAAC,CAAC,EAAC,MAAM,GAAC,KAAK,EAAC,YAAY,GAAC,KAAK,EAAC,SAAS,GAAC,CAAC,EAAC,eAAe,GAAC,CAAC,CAAC;IACnN,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,CAAC,MAAM,IAAE,MAAM,IAAE,WAAW,CAAC,GAAG,EAAE,GAAC,SAAS,GAAC,MAAM,CAAC;IACtE,MAAM,IAAI,GAAC,GAAE,EAAE,GAAC,IAAG,MAAM;QAAC,OAAO,CAAA,MAAM,GAAC,IAAI,CAAC,CAAA,MAAM,GAAC,KAAK,CAAC,CAAA,YAAY,CAAC,SAAS,CAAC,CAAC,CAAA,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA,KAAI,MAAM,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAC,CAAC;QAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAAA,CAAC,CAAA,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA,KAAK,CAAC,GAAG,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;IAChS,MAAM,IAAI,GAAC,CAAC,KAAqB,EAAC,EAAE,GAAC,IAAG,MAAM;QAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAA,MAAM,KAAK,GAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,GAAC,IAAI,CAAC,CAAA,IAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC,IAAE,MAAM,CAAC,cAAc,GAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAC,gBAAgB,GAAC,CAAC;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC;IACpU,MAAM,IAAI,GAAC,CAAC,KAAY,EAAC,EAAE;QAAC,IAAG,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,KAAK,EAAC,GAAG,CAAA,EAAE;gBACtD,MAAM,KAAK,GAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAG,KAAK,CAAC,IAAI,KAAG,MAAM,EAAC,CAAC;oBACvB,IAAG,YAAY,IAAE,IAAI,IAAE,KAAK;wBAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;oBAAA,YAAY,GAAC,IAAI,CAAC;oBAAA,KAAK,GAAC,KAAK,CAAC,KAAK,CAAC;oBAAA,SAAS,GAAC,KAAK,CAAC,SAAS,CAAC;oBAAA,MAAM,GAAC,IAAI,CAAC;oBAAA,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC;oBACjL,oFAAoF;oBACpF,kGAAkG;oBAClG,MAAM,SAAS,GAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAE,IAAI,CAAC,OAAO,EAAE,EAAC,SAAS,EAAC,OAAO,CAAC,EAAC,OAAO,EAAC,cAAc,EAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAC,OAAO,CAAC,CAAC;oBACzI,KAAK,IAAI,CAAC,EAAC,SAAS,EAAC,MAAM,EAAC,kBAAkB,EAAC,SAAS,EAAC,KAAK,CAAC,KAAK,EAAC,MAAM,EAAC,OAAO,EAAC,SAAS,EAAC,GAAE,EAAE,CAAA,SAAS,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,KAAK;wBAC1H,YAAY,EAAC,GAAE,EAAE,GAAC,IAAI,EAAE,CAAC,CAAA,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC;wBAC3C,MAAM,EAAC,QAAQ,CAAA,EAAE,GAAC,IAAG,CAAC,IAAI;4BAAC,OAAO,CAAA,IAAG,CAAC;4BAAA,IAAI,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,QAAQ,EAAC,CAAC,CAAC;wBAAA,CAAC;wBAAA,MAAK,CAAC;4BAAA,IAAI,EAAE,CAAC;wBAAA,CAAC,CAAA,CAAC;wBAC3F,GAAG,EAAC,CAAC,IAAI,EAAC,KAAK,EAAC,EAAE,CAAA,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE;4BAC/C,IAAG,CAAC,IAAI,IAAE,CAAC,OAAO,EAAE,IAAE,CAAC,KAAK,EAAE,IAAE,OAAO,CAAC,IAAI,IAAE,EAAE,EAAC,CAAC;gCAAA,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gCAAA,OAAO;4BAAA,CAAC;4BAC5G,MAAM,EAAE,GAAC,UAAU,EAAE,EAAC,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAA,CAAC,EAAC,MAAM,CAAC,CAAC;4BAAA,KAAK,CAAC,KAAK,EAAE,CAAC;4BAAA,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC;4BACjL,IAAG,CAAC;gCAAA,IAAI,CAAC,EAAC,IAAI,EAAC,aAAa,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;4BAAA,CAAC;4BAAA,OAAM,KAAK,EAAC,CAAC;gCAAA,YAAY,CAAC,KAAK,CAAC,CAAC;gCAAA,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gCAAA,MAAM,CAAC,KAAK,CAAC,CAAC;gCAAA,IAAI,EAAE,CAAC;4BAAA,CAAC;wBACzH,CAAC,CAAC,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,GAAC,IAAG,MAAM,EAAC,CAAC;wBAAA,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;wBAAA,OAAO;oBAAA,CAAC,CAAA,IAAI,GAAC,KAAK,CAAC,CAAA,YAAY,CAAC,SAAS,CAAC,CAAC,CAAA,IAAI,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,UAAU,EAAC,IAAI,CAAC,UAAU,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,IAAI,EAAE,CAAC,CAAA,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;oBAAA,OAAO;gBAClM,CAAC;gBACD,IAAG,KAAK,CAAC,KAAK,KAAG,KAAK,IAAE,CAAC,IAAI;oBAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC3E,IAAG,KAAK,CAAC,IAAI,KAAG,OAAO,EAAC,CAAC;oBAAA,IAAG,CAAC,KAAK,CAAC,MAAM;wBAAC,eAAe,EAAE,CAAC;oBAAA,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC;oBAAA,SAAS,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC;oBAAA,SAAS,GAAC,KAAK,CAAC,SAAS,CAAC;oBAAA,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBACvK,IAAG,KAAK,CAAC,IAAI,KAAG,YAAY,EAAC,CAAC;oBAAA,MAAM,GAAG,GAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAA,IAAG,CAAC,GAAG;wBAAC,OAAO;oBAAA,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAA,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAAA,IAAG,KAAK,CAAC,EAAE,IAAE,OAAO,EAAE;wBAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;;wBAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBACpP,IAAG,CAAC,OAAO,EAAE,IAAE,QAAQ,IAAE,EAAE;oBAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAAA,QAAQ,EAAE,CAAC;gBAAA,MAAM,KAAK,GAAC,IAAI,CAAC;gBAC5G,MAAM,UAAU,GAAC,eAAe,CAAC;gBAAA,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAC,GAAE,EAAE,CAAA,OAAO,EAAE,IAAE,IAAI,KAAG,KAAK,IAAE,UAAU,KAAG,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,GAAC,IAAI,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,IAAI,EAAC,MAAM,EAAC,CAAC,CAAC,CAAA,CAAC,EAAC,GAAE,EAAE,GAAC,IAAI,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,KAAK,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,QAAQ,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC;YAC/S,CAAC,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,IAAI,EAAE,CAAC;YAAA,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,CAAC;IAAA,CAAC,CAAC;IACrC,MAAM,UAAU,GAAC,WAAW,CAAC,GAAE,EAAE,GAAC,IAAG,MAAM,IAAE,WAAW,CAAC,GAAG,EAAE,GAAC,SAAS,IAAE,MAAM,EAAC,CAAC;QAAA,MAAM,GAAC,KAAK,CAAC;QAAA,eAAe,EAAE,CAAC;IAAA,CAAC,CAAA,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA,CAAC,EAAC,IAAI,CAAC,CAAC;IAAA,UAAU,CAAC,KAAK,EAAE,CAAC;IACvK,MAAM,SAAS,GAAC,UAAU,CAAC,GAAE,EAAE,GAAC,IAAI,EAAE,CAAC,CAAA,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA,CAAC,EAAC,OAAO,CAAC,CAAC;IAAA,SAAS,CAAC,KAAK,EAAE,CAAC;IAAA,KAAK,CAAC,EAAE,CAAC,MAAM,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,OAAO,IAAI,CAAC;AAC5N,CAAC;AACD,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAC,CAAC;IAC9E,IAAG,OAAO,CAAC,QAAQ,KAAG,OAAO;QAAC,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAAA,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC9I,CAAC"}

package/dist/runtime-pane-store.d.ts

@@ -0,0 +1,33 @@
+import { type RuntimePaneLaunch, type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
+import type { NativePaneOwner } from "./runtime-pane-native.js";
+export interface RuntimePaneRecord {
+    launch: RuntimePaneLaunch;
+    snapshot: RuntimePaneSnapshot;
+    openDigest: string;
+    openOperationId: string;
+    bootId: string;
+    /** OS incarnation observed before launch, distinct from a host process boot. */
+    systemBootId?: string;
+    /** Local process bookkeeping; never returned as a coordinator PID. */
+    pid?: number;
+    lastCommand?: {
+        id: string;
+        digest: string;
+        state: "prepared" | "applied";
+    };
+}
+export declare function writeNativePaneExit(owner: NativePaneOwner, launch: RuntimePaneLaunch, pid: number, code: number): void;
+export declare class RuntimePaneStore {
+    readonly directory: string;
+    private readonly file;
+    private ledger;
+    constructor(directory: string);
+    list(): RuntimePaneRecord[];
+    get(id: string): RuntimePaneRecord | undefined;
+    put(record: RuntimePaneRecord): void;
+    /** Called under the profile lock. A lost runner never replays an open or assumes a PID is gone. */
+    recoverInterrupted(systemBootId?: string): void;
+    /** Only an exact helper receipt of CLI exit releases a lost runner's reservation. No PID lookup or signal. */
+    reconcileExit(id: string): void;
+    static digest(value: unknown): string;
+}

package/dist/runtime-pane-store.js

@@ -0,0 +1,164 @@
+/** A separate per-pane ledger: an uncertain pane consumes only its own machine slot. No input text is stored. */
+import { lstatSync, mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { atomicWriteFileSync } from "./atomic-write.js";
+import { runtimeJobDigest } from "./runtime-client-store.js";
+import { validateRuntimePaneLaunch, validateRuntimePaneSnapshot } from "./runtime-pane-protocol.js";
+const MAX_BYTES = 8 * 1024 * 1024;
+const MAX_PANES = 256;
+const MAX_RETIRED = 65_536;
+function writePaneState(path, text) {
+    for (let attempt = 0;; attempt++) {
+        try {
+            atomicWriteFileSync(path, text, { mode: 0o600 });
+            return;
+        }
+        catch (error) {
+            if (process.platform !== "win32" || attempt >= 4 || !["EPERM", "EACCES", "EBUSY"].includes(error.code ?? ""))
+                throw error;
+            // Windows scanners briefly hold replacement targets. Same bound as RuntimeClientStore, no dropped writes.
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 10 * (attempt + 1));
+        }
+    }
+}
+export function writeNativePaneExit(owner, launch, pid, code) {
+    const directory = join(owner.directory, "exits");
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    if (!lstatSync(directory).isDirectory() || lstatSync(directory).isSymbolicLink())
+        throw Error("Unsafe pane exit directory");
+    writePaneState(join(directory, `${owner.launchId}.json`), JSON.stringify({ version: 1, launchId: owner.launchId,
+        paneId: launch.paneId, agentId: launch.agentId, pid, code }));
+}
+export class RuntimePaneStore {
+    directory;
+    file;
+    ledger;
+    constructor(directory) {
+        this.directory = directory;
+        mkdirSync(directory, { recursive: true, mode: 0o700 });
+        const entry = lstatSync(directory);
+        if (!entry.isDirectory() || entry.isSymbolicLink())
+            throw Error("Pane state must be a private real directory");
+        this.file = join(directory, "panes.json");
+        this.ledger = { version: 1, panes: {} };
+        try {
+            const stat = lstatSync(this.file);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_BYTES)
+                throw Error("Invalid pane ledger file");
+            const raw = JSON.parse(readFileSync(this.file, "utf8"));
+            if (raw?.version !== 1 || !raw.panes || typeof raw.panes !== "object" || Array.isArray(raw.panes) || Object.keys(raw.panes).length > MAX_PANES)
+                throw Error("Invalid pane ledger");
+            if (raw.retired !== undefined && (!raw.retired || typeof raw.retired !== "object" || Array.isArray(raw.retired)
+                || Object.keys(raw.retired).length > MAX_RETIRED || Object.entries(raw.retired).some(([id, digest]) => !/^[a-f0-9-]{36}$/i.test(id) || typeof digest !== "string" || !/^[a-f0-9]{64}$/.test(digest))))
+                throw Error("Invalid pane replay ledger");
+            for (const [id, row] of Object.entries(raw.panes)) {
+                const launch = validateRuntimePaneLaunch(row?.launch);
+                validateRuntimePaneSnapshot(row.snapshot);
+                if (launch.launchId !== undefined && launch.launchId !== row.snapshot.launchId || id !== launch.paneId || row.snapshot?.paneId !== id || row.snapshot.agentId !== launch.agentId
+                    || row.snapshot.sessionId !== undefined && (launch.sessionId !== undefined && row.snapshot.sessionId !== launch.sessionId
+                        || launch.cli === "claude-code" && row.snapshot.sessionId !== (launch.sessionId ?? row.snapshot.launchId))
+                    || row.snapshot.instance !== launch.instance || !/^[a-f0-9-]{36}$/i.test(row.snapshot.launchId)
+                    || !["starting", "running", "exited", "unknown"].includes(row.snapshot.state)
+                    || !Number.isSafeInteger(row.snapshot.commandSequence) || row.snapshot.commandSequence < 0
+                    || !/^[a-f0-9]{64}$/.test(row.openDigest) || !/^[a-f0-9-]{36}$/i.test(row.openOperationId)
+                    || row.systemBootId !== undefined && (typeof row.systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(row.systemBootId))
+                    || typeof row.bootId !== "string" || (row.pid !== undefined && (!Number.isSafeInteger(row.pid) || row.pid < 1))
+                    || row.snapshot.noLaunch && (row.pid !== undefined || row.lastCommand !== undefined)
+                    || (row.lastCommand && (!/^[a-f0-9-]{36}$/i.test(row.lastCommand.id) || !/^[a-f0-9]{64}$/.test(row.lastCommand.digest)
+                        || !["prepared", "applied"].includes(row.lastCommand.state))))
+                    throw Error("Invalid pane record");
+            }
+            this.ledger = raw;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }
+    list() { return structuredClone(Object.values(this.ledger.panes)); }
+    get(id) { return structuredClone(this.ledger.panes[id]); }
+    put(record) {
+        if (this.ledger.retired?.[record.launch.paneId])
+            throw Error("Pane id was retired; its open must never be replayed");
+        const before = structuredClone(this.ledger);
+        const previous = this.ledger.panes[record.launch.paneId];
+        if (!previous && Object.keys(this.ledger.panes).length >= MAX_PANES) {
+            const oldest = Object.values(this.ledger.panes).find(row => row.snapshot.state === "exited");
+            if (!oldest || Object.keys(this.ledger.retired ?? {}).length >= MAX_RETIRED)
+                throw Error("Pane replay ledger capacity reached");
+            (this.ledger.retired ??= {})[oldest.launch.paneId] = oldest.openDigest;
+            delete this.ledger.panes[oldest.launch.paneId];
+        }
+        this.ledger.panes[record.launch.paneId] = structuredClone(record);
+        try {
+            const text = JSON.stringify(this.ledger);
+            if (Buffer.byteLength(text) > MAX_BYTES)
+                throw Error("Pane ledger size limit reached");
+            writePaneState(this.file, text);
+        }
+        catch (error) {
+            this.ledger = before;
+            throw error;
+        }
+    }
+    /** Called under the profile lock. A lost runner never replays an open or assumes a PID is gone. */
+    recoverInterrupted(systemBootId) {
+        if (systemBootId !== undefined && (typeof systemBootId !== "string" || !/^[a-f0-9]{64}$/.test(systemBootId)))
+            throw Error("Invalid current Windows boot proof");
+        for (const record of this.list())
+            if (record.snapshot.state !== "exited") {
+                if (systemBootId && record.systemBootId && systemBootId !== record.systemBootId) {
+                    record.snapshot.state = "exited";
+                    record.snapshot.exitProof = "system-reboot";
+                    delete record.snapshot.exitCode;
+                    this.put(record);
+                    continue;
+                }
+                if (record.snapshot.state !== "unknown") {
+                    record.snapshot.state = "unknown";
+                    this.put(record);
+                }
+                this.reconcileExit(record.launch.paneId);
+            }
+    }
+    /** Only an exact helper receipt of CLI exit releases a lost runner's reservation. No PID lookup or signal. */
+    reconcileExit(id) {
+        const record = this.get(id);
+        if (!record || record.snapshot.state === "exited")
+            return;
+        const path = join(this.directory, "exits", `${record.snapshot.launchId}.json`);
+        try {
+            const stat = lstatSync(path);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 4096)
+                throw Error("Unsafe pane exit receipt");
+            const exit = JSON.parse(readFileSync(path, "utf8"));
+            if (exit?.version !== 1 || exit.launchId !== record.snapshot.launchId || exit.paneId !== record.launch.paneId || exit.agentId !== record.launch.agentId
+                || !Number.isSafeInteger(exit.pid) || exit.pid <= 0 || record.pid !== undefined && record.pid !== exit.pid || !Number.isSafeInteger(exit.code) || exit.code < 0)
+                throw Error("Pane exit receipt identity differs");
+            record.snapshot.state = "exited";
+            record.snapshot.exitCode = exit.code;
+            this.put(record);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            const diagnostic = path.replace(/\.json$/, ".error.json");
+            try {
+                const stat = lstatSync(diagnostic);
+                if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 4096)
+                    throw Error("Unsafe pane exit diagnostic");
+                const value = JSON.parse(readFileSync(diagnostic, "utf8"));
+                if (value.launchId !== record.snapshot.launchId || value.paneId !== record.launch.paneId || value.agentId !== record.launch.agentId
+                    || !["create", "start-helper", "assign", "running", "helper-exit", "tree-exit", "receipt"].includes(value.stage) || !Number.isSafeInteger(value.code))
+                    throw Error("Invalid pane exit diagnostic");
+                throw Error(`Owned Windows pane exit proof failed at ${value.stage} (win32 ${value.code}); the reservation is held`);
+            }
+            catch (diagnosticError) {
+                if (diagnosticError.code !== "ENOENT")
+                    throw diagnosticError;
+            }
+        }
+    }
+    static digest(value) { return runtimeJobDigest(value); }
+}
+//# sourceMappingURL=runtime-pane-store.js.map

package/dist/runtime-pane-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-store.js","sourceRoot":"","sources":["../src/runtime-pane-store.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAoD,MAAM,4BAA4B,CAAC;AAgBtJ,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjE,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YACrJ,0GAA0G;YAC1G,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAsB,EAAE,MAAyB,EAAE,GAAW,EAAE,IAAY;IAC9G,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5H,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QAC7G,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,OAAO,gBAAgB;IAGN,SAAS;IAFb,IAAI,CAAS;IACtB,MAAM,CAAS;IACvB,YAAqB,SAAiB;yBAAjB,SAAS;QAC5B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC/G,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;gBAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACxD,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACnL,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;mBAC1G,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACnP,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAuC,EAAE,CAAC;gBACxF,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACtD,2BAA2B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;uBAC3K,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;2BACpH,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;uBACzG,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;uBAC5F,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;uBAC1E,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC;uBACvF,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC;uBACvF,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;uBACpH,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;uBAC5G,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC;uBACjF,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;2BACjH,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAA0B,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,GAAG,CAAC,EAAU,IAAmC,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,GAAG,CAAC,MAAyB;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACrH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,WAAW;gBAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAChI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YACvE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS;gBAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACvF,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,mGAAmG;IACnG,kBAAkB,CAAC,YAAqB;QACtC,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChK,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzE,IAAI,YAAY,IAAI,MAAM,CAAC,YAAY,IAAI,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;oBAChF,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;oBAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC;oBAC9E,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAAC,SAAS;gBAC9D,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACjG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,CAAC;IACH,CAAC;IACD,8GAA8G;IAC9G,aAAa,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,OAAO,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;gBAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACzG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO;mBAClJ,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACrN,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAC1D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;oBAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO;uBAC9H,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBACrM,MAAM,KAAK,CAAC,2CAA2C,KAAK,CAAC,KAAK,WAAW,KAAK,CAAC,IAAI,4BAA4B,CAAC,CAAC;YACvH,CAAC;YAAC,OAAO,eAAe,EAAE,CAAC;gBAAC,IAAK,eAAyC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,eAAe,CAAC;YAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,KAAc,IAAY,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC1E"}

package/dist/runtime-pane-transcript-protocol.d.ts

@@ -0,0 +1,43 @@
+export type PaneTranscriptProvider = "codex" | "claude-code";
+export interface PaneTranscriptCursor {
+    sessionId: string;
+    offset: number;
+    fileId: string | null;
+    anchor: string;
+    skipping?: boolean;
+}
+export interface PaneTranscriptWireBatch {
+    state: "pending" | "ready";
+    cursor: PaneTranscriptCursor;
+    /** Complete record bytes, base64-encoded to stay bounded even for heavily escaped JSON. */
+    data: string;
+    complete: boolean;
+    /** Oversized records were skipped; absence and turn completion across this gap are unproven. */
+    gap: boolean;
+}
+export interface RuntimeTranscriptReference {
+    version: 1;
+    machineId: string;
+    hostBootId: string;
+    paneId: string;
+    launchId: string;
+    agentId: string;
+    provider: PaneTranscriptProvider;
+    cursor: PaneTranscriptCursor;
+}
+export declare const PANE_TRANSCRIPT_MAX_FILE_BYTES: number;
+export declare const PANE_TRANSCRIPT_EMPTY_ANCHOR: string;
+export declare function validatePaneTranscriptCursor(value: unknown, expectedSessionId?: string): PaneTranscriptCursor;
+export declare function validatePaneTranscriptWireBatch(value: unknown, sessionId: string): PaneTranscriptWireBatch;
+export declare function validateRuntimeTranscriptReference(value: unknown): RuntimeTranscriptReference;
+/** A cursor may advance; its machine, process generation and pinned conversation may not. */
+export declare function sameRuntimeTranscriptScope(a: RuntimeTranscriptReference, b: RuntimeTranscriptReference): boolean;
+/** Runner-owned baseline jumps over old content while carrying only a bounded turn-state proof. */
+export interface PaneTranscriptBaseline {
+    state: "pending" | "ready";
+    cursor: PaneTranscriptCursor;
+    complete: boolean;
+    turnKnown: boolean;
+    openTurn: string | null;
+}
+export declare function validatePaneTranscriptBaseline(value: unknown, sessionId: string): PaneTranscriptBaseline;

package/dist/runtime-pane-transcript-protocol.js

@@ -0,0 +1,58 @@
+/** Closed remote transcript identities. Never put a runner path in a coordinator checkpoint. */
+import { createHash } from "node:crypto";
+import { validNativeSessionId } from "./windows-cli-providers.js";
+export const PANE_TRANSCRIPT_MAX_FILE_BYTES = 16 * 1024 * 1024 * 1024;
+export const PANE_TRANSCRIPT_EMPTY_ANCHOR = createHash("sha256").update("").digest("hex");
+const uuid = (value) => typeof value === "string" && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i.test(value);
+function closed(value, keys) {
+    if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some(key => !keys.includes(key)))
+        throw Error("Invalid runtime transcript identity");
+    return value;
+}
+export function validatePaneTranscriptCursor(value, expectedSessionId) {
+    const v = closed(value, ["sessionId", "offset", "fileId", "anchor", "skipping"]);
+    if (!validNativeSessionId("codex", v.sessionId) || expectedSessionId !== undefined && v.sessionId !== expectedSessionId
+        || !Number.isSafeInteger(v.offset) || v.offset < 0 || v.offset > PANE_TRANSCRIPT_MAX_FILE_BYTES
+        || v.fileId !== null && (typeof v.fileId !== "string" || !/^[a-f0-9]{64}$/.test(v.fileId))
+        || typeof v.anchor !== "string" || !/^[a-f0-9]{64}$/.test(v.anchor)
+        || v.skipping !== undefined && typeof v.skipping !== "boolean"
+        || v.fileId === null && (v.offset !== 0 || v.anchor !== PANE_TRANSCRIPT_EMPTY_ANCHOR || v.skipping === true))
+        throw Error("Invalid pane transcript cursor");
+    return { sessionId: v.sessionId, offset: v.offset, fileId: v.fileId, anchor: v.anchor,
+        ...(v.skipping ? { skipping: true } : {}) };
+}
+export function validatePaneTranscriptWireBatch(value, sessionId) {
+    const v = closed(value, ["state", "cursor", "data", "complete", "gap"]), cursor = validatePaneTranscriptCursor(v.cursor, sessionId);
+    if (v.state !== "pending" && v.state !== "ready" || typeof v.data !== "string" || v.data.length > 220_000
+        || v.data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(v.data)
+        || Buffer.from(v.data, "base64").toString("base64") !== v.data || typeof v.complete !== "boolean" || typeof v.gap !== "boolean"
+        || v.state === "pending" && (v.data !== "" || v.complete || v.gap) || v.state === "ready" && cursor.fileId === null
+        || v.state === "ready" && cursor.skipping && (!v.gap || v.complete))
+        throw Error("Invalid pane transcript response");
+    return { state: v.state, cursor, data: v.data, complete: v.complete, gap: v.gap };
+}
+export function validateRuntimeTranscriptReference(value) {
+    const v = closed(value, ["version", "machineId", "hostBootId", "paneId", "launchId", "agentId", "provider", "cursor"]);
+    // "local" is the coordinator's own Windows bridge, never a remotely enrolled machine id.
+    if (v.version !== 1 || v.machineId !== "local" && !uuid(v.machineId) || !uuid(v.hostBootId) || !uuid(v.paneId) || !uuid(v.launchId)
+        || !uuid(v.agentId) || v.provider !== "codex" && v.provider !== "claude-code")
+        throw Error("Invalid runtime transcript identity");
+    return { version: 1, machineId: v.machineId, hostBootId: v.hostBootId, paneId: v.paneId,
+        launchId: v.launchId, agentId: v.agentId, provider: v.provider, cursor: validatePaneTranscriptCursor(v.cursor) };
+}
+/** A cursor may advance; its machine, process generation and pinned conversation may not. */
+export function sameRuntimeTranscriptScope(a, b) {
+    return a.version === b.version && a.machineId === b.machineId && a.hostBootId === b.hostBootId
+        && a.paneId === b.paneId && a.launchId === b.launchId && a.agentId === b.agentId
+        && a.provider === b.provider && a.cursor.sessionId === b.cursor.sessionId;
+}
+export function validatePaneTranscriptBaseline(value, sessionId) {
+    const v = closed(value, ["state", "cursor", "complete", "turnKnown", "openTurn"]), cursor = validatePaneTranscriptCursor(v.cursor, sessionId);
+    if (v.state !== "pending" && v.state !== "ready" || typeof v.complete !== "boolean" || typeof v.turnKnown !== "boolean"
+        || v.openTurn !== null && (typeof v.openTurn !== "string" || !v.openTurn || v.openTurn.length > 256 || /[\r\n\0]/.test(v.openTurn))
+        || !v.turnKnown && v.openTurn !== null || v.state === "ready" && cursor.fileId === null
+        || v.state === "pending" && (v.complete || v.turnKnown || v.openTurn !== null) || cursor.skipping)
+        throw Error("Invalid native transcript baseline");
+    return { state: v.state, cursor, complete: v.complete, turnKnown: v.turnKnown, openTurn: v.openTurn };
+}
+//# sourceMappingURL=runtime-pane-transcript-protocol.js.map

package/dist/runtime-pane-transcript-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-transcript-protocol.js","sourceRoot":"","sources":["../src/runtime-pane-transcript-protocol.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAsBlE,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACtE,MAAM,CAAC,MAAM,4BAA4B,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1F,MAAM,IAAI,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,iEAAiE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7J,SAAS,MAAM,CAAC,KAAc,EAAE,IAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3K,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAAE,iBAA0B;IACrF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,iBAAiB;WAClH,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,MAAiB,GAAG,CAAC,IAAK,CAAC,CAAC,MAAiB,GAAG,8BAA8B;WACpH,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;WACvF,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;WAChE,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS;WAC3D,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,4BAA4B,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC9J,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAuB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;QAC9G,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChD,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,KAAc,EAAE,SAAiB;IAC/E,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,4BAA4B,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpI,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO;WACpG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;WACjE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,SAAS;WAC5H,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;WAChH,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACvH,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AACpF,CAAC;AACD,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvH,yFAAyF;IACzF,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;WAC9H,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,aAAa;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpI,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;QAC/F,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;AACrH,CAAC;AACD,6FAA6F;AAC7F,MAAM,UAAU,0BAA0B,CAAC,CAA6B,EAAE,CAA6B;IACrG,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;WACzF,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;WAC7E,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;AAC9E,CAAC;AAID,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,SAAiB;IAC9E,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,4BAA4B,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9I,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS;WAClH,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;WAChI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;WACpF,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvJ,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAyB,EAAE,CAAC;AACzH,CAAC"}

package/dist/runtime-pane-transcript.d.ts

@@ -0,0 +1,45 @@
+import type { PaneTranscriptBaseline } from "./runtime-pane-transcript-protocol.js";
+import { type PaneTranscriptCursor, type PaneTranscriptProvider, type PaneTranscriptWireBatch } from "./runtime-pane-transcript-protocol.js";
+export { validatePaneTranscriptCursor, type PaneTranscriptCursor, type PaneTranscriptProvider } from "./runtime-pane-transcript-protocol.js";
+export interface PaneTranscriptBatch extends PaneTranscriptWireBatch {
+    /** Complete UTF-8 JSONL records only. A partial/oversized record never becomes a turn boundary. */
+    lines: string[];
+}
+export interface PaneTranscriptRoots {
+    codex: string;
+    claude: string;
+}
+/** Root configuration comes only from the runner's allowed provider environment, never a pane RPC. */
+export declare function nativePaneTranscriptRoots(env?: NodeJS.ProcessEnv, home?: string): PaneTranscriptRoots;
+/** Same algorithm as Claude's project directory, evaluated on the runner's canonical native cwd. */
+export declare function nativeClaudeProjectKey(cwd: string): string;
+export type NativeClaudeSessionState = "absent" | "saved" | "unknown";
+/** Positive absence is a read-only runner proof, never inferred from a failed resume or pending transcript read.
+ * Key derivation is tied to the audited Claude launch version; re-check it with each Claude version audit. */
+export declare function nativeClaudeSessionState(cwd: string, sessionId: string, current?: () => boolean, roots?: PaneTranscriptRoots): Promise<NativeClaudeSessionState>;
+/** Complete, bounded absence proof, distinct from the transcript reader's incremental "pending" result.
+ * A matching archive, stale metadata, incomplete walk, WAL, unsafe file or lost lease is unknown, never absence. */
+export declare function nativeCodexSessionState(cwd: string, sessionId: string, current?: () => boolean, roots?: PaneTranscriptRoots): Promise<NativeClaudeSessionState>;
+export declare class NativePaneTranscriptReader {
+    readonly provider: PaneTranscriptProvider;
+    readonly cwd: string;
+    readonly sessionId: string;
+    private readonly roots;
+    private busy;
+    private pinnedFile;
+    private metadataBytes;
+    private discovery;
+    private discoveryMatches;
+    private canonicalCwd;
+    private stopped;
+    readonly initial: PaneTranscriptCursor;
+    constructor(provider: PaneTranscriptProvider, cwd: string, sessionId: string, roots?: PaneTranscriptRoots);
+    /** At most one filesystem operation remains in flight even if a transport deadline abandons its result. */
+    read(cursor?: PaneTranscriptCursor, current?: () => boolean): Promise<PaneTranscriptBatch>;
+    /** At most 4 MiB of tail content, independent of history size; no historical text leaves the runner. */
+    baseline(cursor?: PaneTranscriptCursor, current?: () => boolean): Promise<PaneTranscriptBaseline>;
+    close(): Promise<void>;
+    private candidates;
+    private locate;
+    private readOwned;
+}