@songsid/agend 2.3.5-alpha.2 → 2.3.5-alpha.3

package/dist/fleet-manager.d.ts

@@ -1,5 +1,6 @@
 import { type HumanOrigin } from "./human-delivery-receipts.js";
 import { type SettingsPendingView } from "./settings-confirmation.js";
+import { type GeneralSwitchInput } from "./general-binding.js";
 import { SettingsExecution } from "./settings-transaction.js";
 import { AppIconStore } from "./web-app-icon.js";
 import { type NamedTestResult } from "./tunnel/named-link-test.js";
@@ -107,6 +108,7 @@ import { type CacheReport } from "./cache-service.js";
 import { type WebCommandResult } from "./web-commands.js";
 import { type SessionRecord } from "./web-session.js";
 import { WebNotices } from "./web-notices.js";
+import { WebRemoteAccess } from "./web-remote-access.js";
 import { VERIFIED_SESSION_HOURS, type HumanAuthority, type WebAuthorityRefusal, type WebAuthorityResult, type WebPeer } from "./authority/web-authority.js";
 import { type AuthorityState } from "./authority/authority-state.js";
 import { type SessionAuthorization } from "./authority/session-authorizations.js";
@@ -172,6 +174,11 @@ export interface RestartOpts {
     sessionOomRetry?: SessionOomRetry;
     /** Internal pre-invalidation owner fence for an unclear-OOM action. */
     recoveryCurrent?: () => boolean;
+    /**
+     * #1490 row 27: the lifecycle the caller acts for (lifecyclePin), asked before anything is invalidated. A button or
+     * menu offered for one instance never restarts a later one of the same name, or one restarted since.
+     */
+    ownerCurrent?: () => boolean;
     carry?: {
         backend: string;
         from: string | null;
@@ -281,6 +288,11 @@ export type GuestAuditEntry = {
     name: string;
     outcome: string;
 };
+/** #1490 row 27: a restart asked for one lifecycle of an instance after it was stopped, restarted or replaced. */
+export declare class RestartSupersededError extends Error {
+    /** `shown`: the instance as the chat list names it (shownInstanceName). */
+    constructor(shown: string);
+}
 export declare class FleetManager implements FleetContext, LifecycleContext, ArchiverContext, StatuslineWatcherContext, OutboundContext, AgentEndpointContext {
     dataDir: string;
     private static signalTarget;
@@ -349,6 +361,29 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private localNativePaneEndpoint;
     /** Persistent ownership is independent of the exec worker's per-turn capabilities. */
     private nativePanes;
+    /** Prepare only bundled role files; this neither switches General nor starts a provider process. */
+    prepareWindowsGeneralWorkspace(name: string, machineId: string, cli: "codex" | "claude-code", bindingId: string, authorized: () => boolean): Promise<import("./runtime-general-protocol.js").GeneralWorkspaceReceipt>;
+    private readonly generalLocationFlights;
+    private readonly generalAttentionEpisodes;
+    private generalBindings;
+    generalLocations(): unknown;
+    /** Pure preflight for the confirmation diff and stale-tab refusal; never prepares files or starts a CLI. */
+    previewGeneralLocation(raw: unknown): {
+        input: GeneralSwitchInput;
+        summary: string[];
+        connections: string[];
+    };
+    /** All entry points, including automatic native recovery, must respect an interrupted binding switch. */
+    assertGeneralBindingStart(name: string, config: InstanceConfig): void;
+    /** Only the Settings replay's confirmed admin can enter; the whole switch owns one lifecycle transition. */
+    switchGeneralLocation(raw: unknown, authorized: () => boolean, execution: SettingsExecution): Promise<{
+        started: boolean;
+        message: string;
+    }>;
+    /** An offline PC or a confirmed binding boundary holds old waiting input; it never becomes another conversation's queue. */
+    private holdGeneralOldDeliveries;
+    generalLocationDeliveryHold(name: string): string | null;
+    private generalLocationAttention;
     nativePaneFor(name: string, config: InstanceConfig, assertCurrent: () => void): Promise<import("./native-pane-lifecycle.js").NativePaneLifecycle>;
     recoverNativePane(name: string, launchId: string, authorized: () => boolean): Promise<void>;
     holdNativePaneRecovery(name: string, error: unknown): boolean;
@@ -648,6 +683,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private watchdogTimer;
     private startupMemoryDeadline;
     private eventLoopWatch;
+    private stallReporter;
     private startedAt;
     private stormOpenNotifyTimer;
     private memoryLogAt;
@@ -688,6 +724,14 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private readonly webChatRemovals;
     /** #1774: a removal under way — its replies' fate waits for its outcome (success: theirs no more; failure: theirs). */
     private readonly webChatRemovalsPending;
+    /**
+     * #1490 row 27: "still the same lifecycle of `name`" — its lifecycle epoch, moved on synchronously by every stop,
+     * restart and removal (the map is never pruned, so a same-name replacement has a later one). Taken when a button
+     * or menu is claimed or offered, asked after every await before acting by name.
+     */
+    /** #1490 row 27: an instance as the chat list names it — its display name where it has one, else its name. */
+    private shownInstanceName;
+    private lifecyclePin;
     private webChatGeneration;
     /** #1774: who an instance's reply is from, taken when it is sent: the name's generation and its daemon then. */
     private webChatIdentity;
@@ -883,7 +927,9 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
         status: number;
         body: Record<string, unknown>;
     }>;
-    /** #2170: the Generals a chat card could be posted in (promptSettingsChange's rule): connected, on the platform, unaffected. */
+    /** A confirmation belongs to the server route/lifetime, not the availability of General's model. */
+    private settingsGeneralRoute;
+    /** Connected, same-platform, unaffected server routes can post cards even while the model is offline. */
     private settingsNoticeGenerals;
     /**
      * #2170: General's notice of a change confirmed from the web — the first General a chat card could have been posted
@@ -1804,6 +1850,8 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     /** #1742: `/start web` from a fleet admin: the /web menu right here in the DM, for the General this bot serves. */
     private startWebInDm;
     private getPublicWebLink;
+    /** The public link's wiring to this fleet (a test builds one with the tunnel itself stubbed: `ensure`, `provider`). */
+    private publicWebLinkDeps;
     private publicLinkAutoOpen;
     /**
      * #named-link-ttl: the admin who last opened a named-tunnel link from /web, with the live binding — only while they
@@ -3288,6 +3336,89 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * again. A fleet with a chat connection, another session, or another peer: nothing (§3 as before).
      */
     authorizeHostSession(session: SessionRecord, peer: WebPeer): void;
+    private webRemoteAccessState;
+    /** The authenticator, the outside switch and the wrong-code limiter (web-remote-access.json), read on first use. */
+    webRemoteAccess(): WebRemoteAccess | null;
+    /** "Allow connections from outside" is on (an app set up) and this is a web-only fleet. */
+    private outsideOn;
+    /** The link connections from outside opened, while it is open and still theirs: its exposure. Else null. */
+    private outsideLink;
+    /**
+     * The request's live session, asked again each time `current()` is called (its own cookie authenticated anew, the same
+     * handle): this web-only fleet's owner — this computer's admin, on this computer (`hostOnly`), or also signed in from
+     * outside — and web-verified now. Null when it is not (a guest, a LAN session, a chat fleet's admin, nobody).
+     */
+    private liveOwner;
+    /** Every session signed in from outside ends (and the authorizations kept for them). */
+    private endOutsideSessions;
+    /**
+     * #1939 §10 / #3008: a stored receipt's authority as it reads now — the web authority state, and for this computer's
+     * admin from outside the switch and the last revocation of remote authority (Prism P2 2).
+     */
+    receiptAuthorityNow(stored: HumanAuthority, state?: AuthorityState): HumanAuthority;
+    /** #3008 (the sign-in page): this exposure is the outside link, open now. */
+    isOutsideLink(exposureId: string): boolean;
+    /** What Settings shows: set up or not, the switch, a wait in force, the link — its address only to this computer. */
+    webOutsideStatus(req: IncomingMessage): {
+        webOnly: boolean;
+        here: boolean;
+        enrolled: boolean;
+        enrolledAt: number | null;
+        outside: boolean;
+        pausedForMs: number;
+        link: {
+            state: string;
+            url?: string;
+            expiresAt?: number;
+            noExpiry?: true;
+            quick: boolean;
+        } | null;
+    };
+    /** Set up (or set up again): a new secret, shown once to this computer's admin. Null: not them. */
+    webOutsideBeginEnrollment(req: IncomingMessage): {
+        secret: string;
+        uri: string;
+        expiresInMs: number;
+    } | null;
+    /** The new app's first code: on "ok" it replaces the old one, whose sessions from outside end. */
+    webOutsideConfirmEnrollment(req: IncomingMessage, code: string): "ok" | "wrong" | "expired" | "unsaved" | "not_here";
+    /** Forget the app: the switch goes off, the link closes, every session from outside ends. */
+    webOutsideRemove(req: IncomingMessage): "ok" | "unsaved" | "not_here";
+    /** The switch. On: needs an app set up; the link opens. Off: it closes and every session from outside ends. */
+    webOutsideSwitch(req: IncomingMessage, on: boolean): "ok" | "not_enrolled" | "not_here" | "not_allowed" | "unsaved";
+    private outsideAttempt;
+    private outsideOpening;
+    /**
+     * Open the outside link: an attempt after each delay in turn until one opens (#3008 B: twice more at most — the quick
+     * link's address service limits how often it may be asked). Every attempt asks again: the switch still on, the fleet
+     * running. A final failure: one Notice; the switch stays on, so the next start tries again.
+     */
+    private openOutsideLink;
+    private closeOutsideLink;
+    /** PublicWebLink.onClose for the outside link: what closed it decides what happens next (#3008 B). */
+    private outsideLinkClosed;
+    /**
+     * #3008 (auth-api POST /auth/totp): a sign-in through the outside link with the authenticator's code. "ok": the caller
+     * makes the session (SessionRecord.remote) and then calls authorizeOutsideSession. Each wrong code counts; a wait that
+     * starts is a Notice; a code that matches a step just outside the window logs how far this clock seems to be off.
+     */
+    outsideSignIn(exposureId: string | undefined, code: string): {
+        kind: "ok";
+    } | {
+        kind: "wrong";
+    } | {
+        kind: "paused";
+        retryAfterMs: number;
+    } | {
+        kind: "closed";
+    } | {
+        kind: "unavailable";
+    };
+    /**
+     * #3008: a session just made by outsideSignIn's "ok" is this computer's admin for its authorization's life. False: it
+     * could not be admitted (its handle not saved, #3015 review r3) — the caller ends it.
+     */
+    authorizeOutsideSession(session: SessionRecord, peer: WebPeer, label: string): boolean;
     private authorityStateStore;
     /**
      * #1939 §10: the switch, "Only this computer can authorize" and the revocation epoch in force for the configuration as
@@ -3787,12 +3918,12 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      */
     private locateBinaryOnLoginShell;
     /**
-     * #1092: the binary in one of the directories its own installer installs to,
-     * when no login shell can see it (the installer recorded its PATH in an
-     * interactive-only rc file). The same executable-file check as the login
-     * shell lookup; a symlink to an executable counts, as codex's launcher is one.
+     * #1092: the binary in one of the directories its own installer installs to, when no login shell can see it (the
+     * installer recorded its PATH in an interactive-only rc file) — only those directories (#1092). #3009: through
+     * backend-availability's install-directory check (the one resolveBackendBinary uses): one killable child, never
+     * accessSync/statSync on the fleet's thread. An executable file counts, a symlink to one too (codex's launcher is one).
      */
-    private locateInInstallerBinDirs;
+    private locateInstalledBackend;
     /** Put an installed binary's directory on the fleet's PATH (#1059), once. */
     private adoptBinaryDirectory;
     /** Discord native `/login` slash — shared by every adapter dispatch block. */
@@ -4125,8 +4256,12 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
      * restart backends only read it at launch, so it is persisted and the
      * instance respawns.
      */
-    applyEffort(instanceName: string, requested: string): Promise<string>;
-    applyModel(instanceName: string, model: string): Promise<string>;
+    applyEffort(instanceName: string, requested: string, opts?: {
+        current?: () => boolean;
+    }): Promise<string>;
+    applyModel(instanceName: string, model: string, opts?: {
+        current?: () => boolean;
+    }): Promise<string>;
     /** Save an instance's model (fleet.yaml, or its ClassicBot channel). False when neither holds it. */
     private persistInstanceModel;
     /**