@songsid/agend 2.3.5-alpha.4 → 2.3.5-beta.1

package/dist/runtime-pane-codex-index.js

@@ -1,47 +0,0 @@
-/** Read-only exact-ID evidence for the audited Codex local store. No vendor process, DB edits or sidecars. */
-import { Worker } from "node:worker_threads";
-import { pathToFileURL } from "node:url";
-// Immutable mode cannot see WAL changes: callers must prove no WAL bytes before AND after this bounded query.
-const QUERY = `
-const {parentPort,workerData}=require('node:worker_threads');
-let db;try{const {DatabaseSync}=require('node:sqlite');db=new DatabaseSync(workerData.uri,{readOnly:true});
-db.exec('PRAGMA trusted_schema=OFF');const schema=db.prepare('PRAGMA table_info(threads)').all();
-if(schema.length>128||!schema.some(c=>c.name==='id'&&c.type.toUpperCase()==='TEXT'&&c.pk===1))throw Error('Unknown schema');
-const row=db.prepare("SELECT 1 AS present FROM threads WHERE typeof(id) <> 'text' OR id=? COLLATE NOCASE LIMIT 1").get(workerData.id);
-parentPort.postMessage(row===undefined?'clear':'unknown');}catch{parentPort.postMessage('unknown');}finally{try{db?.close();}catch{}}
-`;
-let active = false;
-export function codexIndexHasNoThread(path, id, current) {
-    const isCurrent = () => { try {
-        return current() === true;
-    }
-    catch {
-        return false;
-    } };
-    return new Promise(resolve => {
-        let worker, timer, done = false;
-        const finish = (clear) => { if (done)
-            return; done = true; clearTimeout(timer); if (worker)
-            void worker.terminate().then(() => resolve(clear && isCurrent()), () => resolve(false));
-        else
-            resolve(false); };
-        if (!isCurrent() || active)
-            return finish(false);
-        active = true;
-        try {
-            worker = new Worker(QUERY, { eval: true, workerData: { uri: pathToFileURL(path).href + "?immutable=1", id },
-                resourceLimits: { maxOldGenerationSizeMb: 16, maxYoungGenerationSizeMb: 4 }, stderr: true, stdout: true });
-            worker.stdout?.resume();
-            worker.stderr?.resume(); // The only result that leaves this worker is an exact-ID presence bit.
-            worker.once("message", value => finish(value === "clear"));
-            worker.once("error", () => finish(false));
-            worker.once("exit", () => { active = false; finish(false); });
-            timer = setTimeout(() => finish(false), 750);
-        }
-        catch {
-            active = false;
-            finish(false);
-        }
-    });
-}
-//# sourceMappingURL=runtime-pane-codex-index.js.map

package/dist/runtime-pane-codex-index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-codex-index.js","sourceRoot":"","sources":["../src/runtime-pane-codex-index.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,8GAA8G;AAC9G,MAAM,KAAK,GAAG;;;;;;;CAOb,CAAC;AACF,IAAI,MAAM,GAAG,KAAK,CAAC;AACnB,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,EAAU,EAAE,OAAsB;IACpF,MAAM,SAAS,GAAC,GAAU,EAAE,GAAC,IAAG,CAAC;QAAA,OAAO,OAAO,EAAE,KAAG,IAAI,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAI,MAA0B,EAAE,KAAgD,EAAE,IAAI,GAAG,KAAK,CAAC;QAC/F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE,GAAG,IAAG,IAAI;YAAC,OAAO,CAAA,IAAI,GAAC,IAAI,CAAC,CAAA,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,MAAM;YAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,IAAE,SAAS,EAAE,CAAC,EAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;;YAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1M,IAAG,CAAC,SAAS,EAAE,IAAE,MAAM;YAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAC,IAAI,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,GAAC,IAAI,MAAM,CAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAC,EAAC,GAAG,EAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,GAAC,cAAc,EAAC,EAAE,EAAC;gBAC5F,cAAc,EAAC,EAAC,sBAAsB,EAAC,EAAE,EAAC,wBAAwB,EAAC,CAAC,EAAC,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;YAClG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAAA,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,uEAAuE;YACxH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAC,KAAK,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,KAAG,OAAO,CAAC,CAAC,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,GAAE,EAAE,GAAC,MAAM,GAAC,KAAK,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;YACnJ,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,GAAC,KAAK,CAAC;YAAA,MAAM,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime-pane-config.d.ts

@@ -1,16 +0,0 @@
-import type { RuntimePaneLaunch } from "./runtime-pane-protocol.js";
-import type { NativePaneOwner } from "./runtime-pane-native.js";
-export interface NativePaneConfig {
-    sessionId?: string;
-    instructionsFile?: string;
-    mcp?: {
-        nodePath: string;
-        helperPath: string;
-        connectionPath: string;
-        configPath: string;
-        tools: string[];
-        serverName: string;
-    };
-    cleanup(): void;
-}
-export declare function prepareNativePaneConfig(launch: RuntimePaneLaunch, owner: NativePaneOwner, nodePath: string, helperPath: string): NativePaneConfig;

package/dist/runtime-pane-config.js

@@ -1,54 +0,0 @@
-/** Launch-local files only. Provider account configuration and credentials are never copied or rewritten. */
-import { lstatSync, mkdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { validateNativeMcpConnection } from "./windows-cli-providers.js";
-import { validatePaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
-function realDirectory(path) { const stat = lstatSync(path); if (!stat.isDirectory() || stat.isSymbolicLink())
-    throw Error("Pane configuration must stay in its owned directory"); }
-export function prepareNativePaneConfig(launch, owner, nodePath, helperPath) {
-    realDirectory(owner.directory);
-    const parent = join(owner.directory, "launches");
-    mkdirSync(parent, { recursive: true, mode: 0o700 });
-    realDirectory(parent);
-    const directory = join(parent, owner.launchId);
-    mkdirSync(directory, { mode: 0o700 });
-    const files = [];
-    const config = { ...(launch.cli === "claude-code" ? { sessionId: launch.sessionId ?? owner.launchId } : {}), cleanup: () => {
-            for (const file of files) {
-                try {
-                    unlinkSync(file);
-                }
-                catch { /* Only exact files created by this launch. */ }
-            }
-            try {
-                rmdirSync(directory);
-            }
-            catch { /* Unknown extra files are never deleted. */ }
-        } };
-    const write = (name, value) => { const file = join(directory, name); writeFileSync(file, value, { encoding: "utf8", mode: 0o600, flag: "wx" }); files.push(file); return file; };
-    try {
-        if (launch.mcpTools) {
-            if (!owner.mcp)
-                throw Error("Persistent pane MCP scope was not prepared");
-            const identity = validatePaneMcpOwner(owner.mcp.owner), mcp = validateNativeMcpConnection({ endpoint: owner.mcp.endpoint, token: owner.mcp.token, tools: owner.mcp.tools });
-            if (identity.paneId !== launch.paneId || identity.launchId !== owner.launchId || identity.agentId !== launch.agentId || identity.instance !== launch.instance
-                || JSON.stringify(mcp.tools) !== JSON.stringify(launch.mcpTools))
-                throw Error("Persistent pane MCP scope differs from its launch");
-            const connectionPath = write("mcp-connection.json", JSON.stringify({ ...mcp, owner: identity }));
-            const serverName = `agend_${launch.agentId.replace(/-/g, "")}`;
-            const server = { command: nodePath, args: [helperPath, "--connection-file", connectionPath] };
-            const configPath = write("mcp.json", JSON.stringify({ mcpServers: { [serverName]: server } }));
-            config.mcp = { nodePath, helperPath, connectionPath, configPath, serverName, tools: mcp.tools };
-        }
-        else if (owner.mcp)
-            throw Error("Unexpected pane MCP scope");
-        if (launch.cli === "claude-code" && launch.instructions)
-            config.instructionsFile = write("instructions.txt", launch.instructions);
-        return config;
-    }
-    catch (error) {
-        config.cleanup();
-        throw error;
-    }
-}
-//# sourceMappingURL=runtime-pane-config.js.map

package/dist/runtime-pane-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-config.js","sourceRoot":"","sources":["../src/runtime-pane-config.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAItE,SAAS,aAAa,CAAC,IAAY,IAAU,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;IAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC,CAAC,CAAC;AAClM,MAAM,UAAU,uBAAuB,CAAC,MAAyB,EAAE,KAAsB,EAAE,QAAgB,EAAE,UAAkB;IAC7H,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7H,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE;YAC3I,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;YAAC,CAAC;YAChH,IAAI,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACtF,CAAC,EAAE,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACzM,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,2BAA2B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5K,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;mBACxJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACrI,MAAM,cAAc,GAAG,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjG,MAAM,UAAU,GAAG,SAAS,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/F,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QAClG,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG;YAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAClI,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpD,CAAC"}

package/dist/runtime-pane-host.d.ts

@@ -1,44 +0,0 @@
-import type { IPty } from "node-pty";
-import { RuntimePaneStore } from "./runtime-pane-store.js";
-import { type RuntimePaneLaunch, type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
-import type { PaneMcpConnection } from "./windows-pane-mcp.js";
-import type { NativePaneOwner } from "./runtime-pane-native.js";
-import type { PaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
-import { NativePaneTranscriptReader, type NativeClaudeSessionState } from "./runtime-pane-transcript.js";
-export { persistentNativeArguments } from "./runtime-pane-native.js";
-export type RuntimePaneProcess = Pick<IPty, "pid" | "write" | "resize" | "kill" | "pause" | "resume" | "onData" | "onExit"> & {
-    onFailure?(listener: () => void): {
-        dispose(): void;
-    };
-};
-export interface RuntimePaneHostOptions {
-    store: RuntimePaneStore;
-    bootId: string;
-    systemBootId?: string;
-    online(): boolean;
-    maxAgents(): number;
-    /** Internal local launch factory, never a field in the remote request. */
-    spawn?(launch: RuntimePaneLaunch, owner: NativePaneOwner): Promise<RuntimePaneProcess>;
-    mcpConnection?(owner: PaneMcpOwner, tools: string[]): PaneMcpConnection;
-    /** Internal runner seam. A remote request never provides roots or a path. */
-    transcript?(launch: RuntimePaneLaunch, sessionId: string): (Pick<NativePaneTranscriptReader, "read" | "close"> & Partial<Pick<NativePaneTranscriptReader, "baseline">>);
-    sessionProof?(launch: RuntimePaneLaunch, sessionId: string, current: () => boolean): Promise<NativeClaudeSessionState>;
-    output?(snapshot: RuntimePaneSnapshot): void;
-}
-export declare class RuntimePaneHost {
-    private readonly options;
-    private readonly live;
-    private readonly queues;
-    private closing;
-    private readonly general;
-    constructor(options: RuntimePaneHostOptions);
-    list(): RuntimePaneSnapshot[];
-    /** Exact live reservation; no PID adoption or scans of other panes. */
-    owns(owner: PaneMcpOwner): boolean;
-    request(raw: unknown, current?: () => boolean): Promise<unknown>;
-    private open;
-    private recover;
-    private operate;
-    private readTranscript;
-    stop(): Promise<void>;
-}

package/dist/runtime-pane-host.js

@@ -1,424 +0,0 @@
-import { RuntimePaneOutputBuffer } from "./runtime-pane-output.js";
-import { RuntimeGeneralWorkspace, loadGeneralKnowledge } from "./runtime-general-workspace.js";
-import { GeneralManagedFileError } from "./runtime-general-protocol.js";
-/** Runner-owned, persistent CLI panes. A coordinator reconnect neither launches nor replays anything. */
-import { randomUUID } from "node:crypto";
-import { RuntimePaneStore } from "./runtime-pane-store.js";
-import { RuntimePaneScreen } from "./runtime-pane-screen.js";
-import { PANE_EDIT_KEYS, validateRuntimePaneRequest } from "./runtime-pane-protocol.js";
-import { spawnNativePane } from "./runtime-pane-process.js";
-import { NativePaneTranscriptReader, nativeClaudeSessionState, nativeCodexSessionState } from "./runtime-pane-transcript.js";
-import { validatePaneTranscriptBaseline, validatePaneTranscriptWireBatch } from "./runtime-pane-transcript-protocol.js";
-export { persistentNativeArguments } from "./runtime-pane-native.js";
-const KEYS = { Enter: "\r", Escape: "\x1b", Up: "\x1b[A", Down: "\x1b[B", Right: "\x1b[C", Left: "\x1b[D", "C-c": "\x03", "C-q": "\x11" };
-export class RuntimePaneHost {
-    options;
-    live = new Map();
-    queues = new Map();
-    closing = false;
-    general;
-    constructor(options) {
-        this.options = options;
-        this.general = new RuntimeGeneralWorkspace(options.store.directory);
-    }
-    list() {
-        for (const row of this.options.store.list())
-            if (!this.live.has(row.launch.paneId))
-                this.options.store.reconcileExit(row.launch.paneId);
-        return this.options.store.list().map(row => structuredClone(this.live.get(row.launch.paneId)?.record.snapshot ?? row.snapshot));
-    }
-    /** Exact live reservation; no PID adoption or scans of other panes. */
-    owns(owner) {
-        if (this.closing || owner.hostBootId !== this.options.bootId)
-            return false;
-        try {
-            const pane = this.live.get(owner.paneId)?.record.snapshot ?? this.options.store.get(owner.paneId)?.snapshot;
-            return !!pane && pane.hostBootId === owner.hostBootId && pane.launchId === owner.launchId && pane.agentId === owner.agentId
-                && pane.instance === owner.instance && (pane.state === "starting" || pane.state === "running");
-        }
-        catch {
-            return false;
-        }
-    }
-    async request(raw, current = () => true) {
-        const request = validateRuntimePaneRequest(raw);
-        if (request.action === "list")
-            return { hostBootId: this.options.bootId, capabilities: { openDisposition: true, recovery: true, claudeSessionProof: true, codexSessionProof: true, generalWorkspace: true }, panes: this.list() };
-        if (this.closing || !this.options.online() || !current())
-            throw Error("Pane runtime is disconnected");
-        if (request.action === "general-workspace") {
-            const installed = loadGeneralKnowledge(request.cli).hash;
-            if (installed !== request.packHash)
-                return { version: 1, bindingId: request.bindingId, instance: request.instance, cli: request.cli, packHash: installed, upgradeRequired: true };
-            try {
-                return this.general.prepare(request, current, cwd => !this.list().some(row => row.state !== "exited"
-                    && this.options.store.get(row.paneId)?.launch.cwd.toLowerCase() === cwd.toLowerCase()));
-            }
-            catch (err) {
-                // Closed, fixed-asset diagnostics cross the transport; raw errors, paths and file contents never do.
-                if (!(err instanceof GeneralManagedFileError))
-                    throw err;
-                return { version: 1, bindingId: request.bindingId, instance: request.instance, cli: request.cli, packHash: request.packHash, managedFile: err.file };
-            }
-        }
-        if (request.action === "shutdown") {
-            // No await between the inventory, admission fence and reply. An accepted/queued launch or an unknown
-            // reservation prevents shutdown; disconnect/lease loss alone never tears down a persistent host.
-            if (request.hostBootId !== this.options.bootId || this.queues.size || this.list().some(pane => pane.state !== "exited"))
-                throw Error("Pane host still has live or unconfirmed work");
-            this.closing = true;
-            return { hostBootId: this.options.bootId, shutdown: true };
-        }
-        const id = request.action === "open" ? request.launch.paneId : request.paneId;
-        const queue = this.queues.get(id) ?? { tail: Promise.resolve(), count: 0 };
-        if (queue.count >= 16)
-            throw Error("Pane operation queue is full");
-        queue.count++;
-        this.queues.set(id, queue);
-        const operation = queue.tail.catch(() => { }).then(async () => {
-            if (this.closing || !this.options.online() || !current())
-                throw Error("Pane runtime is disconnected");
-            return request.action === "open" ? this.open(request) : request.action === "recover" ? this.recover(request) : this.operate(request, current);
-        });
-        queue.tail = operation;
-        try {
-            return await operation;
-        }
-        finally {
-            if (--queue.count === 0 && this.queues.get(id) === queue)
-                this.queues.delete(id);
-        }
-    }
-    async open(request) {
-        const { launch, operationId } = request;
-        const digest = RuntimePaneStore.digest(launch);
-        const existing = this.options.store.get(launch.paneId);
-        if (existing) {
-            if (existing.openOperationId !== operationId || existing.openDigest !== digest)
-                throw Error("Pane id already belongs to another launch");
-            const live = this.live.get(launch.paneId);
-            if (!live && existing.snapshot.state !== "exited")
-                throw Error("Pane launch outcome is unknown; no replacement was started");
-            return { ...structuredClone(live?.record.snapshot ?? existing.snapshot), reattached: true };
-        }
-        this.list();
-        const rows = this.options.store.list();
-        const limit = this.options.maxAgents();
-        if (!Number.isInteger(limit) || limit < 1 || limit > 16)
-            throw Error("Invalid machine pane limit");
-        if (launch.launchId && rows.some(row => row.snapshot.launchId === launch.launchId))
-            throw Error("Pane launch identity already belongs to another pane");
-        const record = {
-            ...(this.options.systemBootId ? { systemBootId: this.options.systemBootId } : {}),
-            launch, openDigest: digest, openOperationId: operationId, bootId: this.options.bootId,
-            snapshot: { hostBootId: this.options.bootId, paneId: launch.paneId, agentId: launch.agentId, instance: launch.instance, launchId: launch.launchId ?? randomUUID(), columns: launch.columns, rows: launch.rows,
-                state: "starting", seq: 0, outputAt: 0, commandSequence: 0 },
-        };
-        const sessionId = launch.sessionId ?? (launch.cli === "claude-code" ? record.snapshot.launchId : undefined);
-        if (sessionId)
-            record.snapshot.sessionId = sessionId;
-        if (rows.some(row => row.launch.agentId === launch.agentId && row.snapshot.state !== "exited")
-            || rows.filter(row => row.snapshot.state !== "exited").length >= limit) {
-            // A durable tombstone consumes this open identity. Even a lost refusal ACK cannot turn its retry into a launch.
-            // Never issue this proof for a spawn exception: the factory may have created a child before throwing.
-            record.snapshot.state = "exited";
-            record.snapshot.noLaunch = true;
-            this.options.store.put(record);
-            return { ...structuredClone(record.snapshot), reattached: false };
-        }
-        if (launch.generalWorkspace)
-            this.general.verify({ action: "general-workspace", ...launch.generalWorkspace, instance: launch.instance, cli: launch.cli }, launch.cwd);
-        // Synchronous reservation before the first await: parallel opens cannot oversubscribe the machine.
-        this.options.store.put(record);
-        let process;
-        try {
-            const owner = { directory: this.options.store.directory, launchId: record.snapshot.launchId };
-            if (launch.mcpTools) {
-                if (!this.options.mcpConnection)
-                    throw Error("Persistent pane MCP authority is unavailable");
-                owner.mcp = this.options.mcpConnection({ hostBootId: this.options.bootId, paneId: launch.paneId, launchId: record.snapshot.launchId, agentId: launch.agentId, instance: launch.instance }, launch.mcpTools);
-            }
-            process = await (this.options.spawn ? this.options.spawn(launch, owner) : spawnNativePane(launch, owner));
-            let finish;
-            const exited = new Promise(resolve => { finish = resolve; });
-            const screen = new RuntimePaneScreen(launch.columns, launch.rows, data => {
-                if (this.live.get(launch.paneId)?.record === record && record.snapshot.state === "running")
-                    process.write(data);
-            });
-            const live = { record, process, screen, parsed: Promise.resolve(), output: new RuntimePaneOutputBuffer(), exited, finish };
-            this.live.set(launch.paneId, live);
-            record.pid = process.pid;
-            record.snapshot.state = "running";
-            process.onFailure?.(() => {
-                if (record.snapshot.state === "exited")
-                    return;
-                record.snapshot.state = "unknown";
-                try {
-                    this.options.store.put(record);
-                }
-                catch { /* retained on disk as unfinished */ }
-            });
-            process.onData(data => {
-                if (this.live.get(launch.paneId) !== live)
-                    return;
-                live.output.append(data);
-                // Invalidate observations when bytes arrive, not later when the VT parser finishes. A queued repaint
-                // already makes an old composer proof unsafe, even while capture or parser completion is awaiting.
-                record.snapshot.seq++;
-                record.snapshot.outputAt = Date.now();
-                live.parsed = screen.write(data).then(() => {
-                    try {
-                        this.options.output?.(structuredClone(record.snapshot));
-                    }
-                    catch { /* observer backpressure cannot change process ownership */ }
-                }).catch(() => {
-                    record.snapshot.state = "unknown";
-                    try {
-                        process.pause();
-                        this.options.store.put(record);
-                    }
-                    catch { /* reserved until exit is proven */ }
-                });
-            });
-            process.onExit(({ exitCode }) => {
-                record.snapshot.state = "exited";
-                record.snapshot.exitCode = exitCode;
-                try {
-                    this.options.store.put(record);
-                }
-                catch { /* an old live record stays reserved on restart */ }
-                finish();
-                try {
-                    this.options.output?.(structuredClone(record.snapshot));
-                }
-                catch { /* process exit is independent of its observer */ }
-                const retired = [...this.live.values()].filter(row => row.record.snapshot.state === "exited");
-                for (const old of retired.slice(0, Math.max(0, retired.length - 16))) {
-                    void old.transcript?.close().catch(() => { });
-                    old.screen.dispose();
-                    this.live.delete(old.record.launch.paneId);
-                }
-            });
-            this.options.store.put(record);
-            if (this.closing) {
-                process.kill();
-                throw Error("Pane host stopped during launch");
-            }
-            return { ...structuredClone(record.snapshot), reattached: false };
-        }
-        catch (error) {
-            if (process) {
-                try {
-                    process.kill();
-                }
-                catch { /* retain uncertain reservation */ }
-            }
-            // A launch factory may fail after creating a native child. Only onExit proves there is no process.
-            if (record.snapshot.state !== "exited")
-                record.snapshot.state = "unknown";
-            this.options.store.put(record);
-            throw error;
-        }
-    }
-    recover(request) {
-        const record = this.options.store.get(request.paneId);
-        if (!record || record.snapshot.launchId !== request.launchId || record.snapshot.hostBootId !== request.hostBootId)
-            throw Error("Recovery needs the exact retained pane with no live host owner");
-        if (record.snapshot.state === "exited")
-            return structuredClone(record.snapshot);
-        if (this.live.has(request.paneId) || record.snapshot.state !== "unknown" || record.bootId === this.options.bootId || request.confirmedStopped !== true)
-            throw Error("The retained pane is not eligible for stopped-process recovery");
-        record.snapshot.state = "exited";
-        record.snapshot.exitProof = "admin-confirmed";
-        delete record.snapshot.exitCode;
-        this.options.store.put(record);
-        return structuredClone(record.snapshot);
-    }
-    async operate(request, current) {
-        const live = this.live.get(request.paneId);
-        const stored = this.options.store.get(request.paneId);
-        if (!stored || stored.snapshot.launchId !== request.launchId)
-            throw Error("Pane launch identity is stale");
-        if (request.action === "snapshot")
-            return structuredClone(live?.record.snapshot ?? stored.snapshot);
-        if (request.action === "session-proof") {
-            const { launch, snapshot } = live?.record ?? stored;
-            if (!["claude-code", "codex"].includes(launch.cli) || snapshot.state !== "exited" || snapshot.noLaunch || !snapshot.sessionId)
-                throw Error("Session proof requires an exited supported pane");
-            let settled = false, timer;
-            const lease = () => !settled && !this.closing && this.options.online() && current();
-            const read = this.options.sessionProof
-                ? this.options.sessionProof(launch, snapshot.sessionId, lease)
-                : (launch.cli === "codex" ? nativeCodexSessionState : nativeClaudeSessionState)(launch.cwd, snapshot.sessionId, lease);
-            try {
-                const state = await Promise.race([read, new Promise(done => { timer = setTimeout(() => done("unknown"), 1500); })]);
-                return { snapshot: structuredClone(snapshot), state: lease() && ["absent", "saved", "unknown"].includes(state) ? state : "unknown" };
-            }
-            catch {
-                return { snapshot: structuredClone(snapshot), state: "unknown" };
-            }
-            finally {
-                settled = true;
-                clearTimeout(timer);
-                void read.catch(() => { });
-            }
-        }
-        if (!live && request.action === "capture" && stored.snapshot.state === "exited")
-            return { snapshot: structuredClone(stored.snapshot), text: "" };
-        if (!live)
-            throw Error("Pane process is not owned by this runner; its reservation is retained");
-        const record = live.record;
-        if (request.action === "output")
-            return live.output.read(request.offset, record.snapshot.state === "exited");
-        await live.parsed;
-        if (request.action === "capture") {
-            const seq = record.snapshot.seq, text = await live.screen.capture(request);
-            if (seq !== record.snapshot.seq)
-                throw Error("Pane changed during capture; observe it again");
-            return { snapshot: structuredClone(record.snapshot), text };
-        }
-        if (request.action === "bind-session") {
-            const expected = record.snapshot.sessionId ?? record.launch.sessionId ?? (record.launch.cli === "claude-code" ? record.snapshot.launchId : undefined);
-            if (expected && expected !== request.sessionId)
-                throw Error("Pane conversation identity is already pinned elsewhere");
-            if (!expected) {
-                if (record.snapshot.state !== "running")
-                    throw Error("An unowned pane cannot establish a conversation identity");
-                const text = await live.screen.capture({ history: 200, joined: true });
-                const ids = [...text.matchAll(/\bSession:\s*([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})\b/gi)].map(match => match[1]);
-                if (ids.length !== 1 || ids[0] !== request.sessionId)
-                    throw Error("The owned pane has no unique matching status identity");
-            }
-            if (!current() || !this.options.online() || this.closing)
-                throw Error("Pane session binding lease expired");
-            if (record.snapshot.sessionId !== request.sessionId) {
-                record.snapshot.sessionId = request.sessionId;
-                try {
-                    this.options.store.put(record);
-                }
-                catch (error) {
-                    delete record.snapshot.sessionId;
-                    throw error;
-                }
-            }
-            return structuredClone(record.snapshot);
-        }
-        if (request.action === "transcript" || request.action === "transcript-baseline")
-            return this.readTranscript(live, request.cursor, current, request.action === "transcript-baseline");
-        if (request.action === "reconcile") {
-            if (record.snapshot.commandSequence !== request.sequence || record.lastCommand?.id !== request.operationId
-                || record.lastCommand.digest !== request.digest || record.lastCommand.state !== "applied")
-                throw Error("Pane command outcome is unconfirmed");
-            return structuredClone(record.snapshot);
-        }
-        if (!current() || !this.options.online())
-            throw Error("Pane input lease expired");
-        const digest = RuntimePaneStore.digest(request);
-        if (request.sequence === record.snapshot.commandSequence) {
-            if (record.lastCommand?.id !== request.operationId || record.lastCommand.digest !== digest)
-                throw Error("Pane input sequence belongs to another command");
-            if (record.lastCommand.state !== "applied")
-                throw Error("Pane input outcome is unknown; it will not be replayed");
-            return structuredClone(record.snapshot);
-        }
-        if (request.sequence !== record.snapshot.commandSequence + 1)
-            throw Error("Pane input sequence is stale or has a gap");
-        if (record.lastCommand?.state === "prepared" && request.action !== "close")
-            throw Error("Previous pane input outcome is unknown");
-        if (record.snapshot.state !== "running" && request.action !== "close")
-            throw Error("Pane process is not confirmed running");
-        record.snapshot.commandSequence = request.sequence;
-        record.lastCommand = { id: request.operationId, digest, state: "prepared" };
-        delete record.snapshot.inputRefused;
-        if ((request.action === "input" || request.action === "key" || request.action === "edit") && request.expectedSeq !== record.snapshot.seq) {
-            // Positively no input. Consume this command identity: a lost refusal ACK must never become a later key.
-            record.snapshot.inputRefused = true;
-            record.lastCommand.state = "applied";
-            this.options.store.put(record);
-            return structuredClone(record.snapshot);
-        }
-        // Durable before input: a crash after this write must hold, never duplicate Enter.
-        this.options.store.put(record);
-        if (request.action === "input")
-            live.process.write(request.kind === "paste" ? live.screen.bracketedPaste(request.text) : request.text);
-        else if (request.action === "edit")
-            live.process.write(request.keys.map(key => PANE_EDIT_KEYS[key]).join("").repeat(request.repeat ?? 1));
-        else if (request.action === "key")
-            live.process.write(KEYS[request.key]);
-        else if (request.action === "resize") {
-            live.process.resize(request.columns, request.rows);
-            await live.screen.resize(request.columns, request.rows);
-            record.snapshot.columns = request.columns;
-            record.snapshot.rows = request.rows;
-        }
-        else {
-            live.process.kill();
-            let timer;
-            const stopped = await Promise.race([live.exited.then(() => true), new Promise(resolve => { timer = setTimeout(() => resolve(false), 10_000); })]);
-            clearTimeout(timer);
-            if (!stopped)
-                record.snapshot.state = "unknown";
-        }
-        record.lastCommand.state = "applied";
-        this.options.store.put(record);
-        return structuredClone(record.snapshot);
-    }
-    async readTranscript(live, cursor, current, baseline = false) {
-        const { launch, snapshot } = live.record;
-        if (!snapshot.sessionId || cursor.sessionId !== snapshot.sessionId)
-            throw Error("Transcript identity differs from its owned pane");
-        if (snapshot.state !== "running" && snapshot.state !== "exited")
-            throw Error("Transcript pane ownership is unconfirmed");
-        live.transcript ??= this.options.transcript?.(launch, snapshot.sessionId) ?? new NativePaneTranscriptReader(launch.cli, launch.cwd, snapshot.sessionId);
-        let settled = false, timer;
-        const lease = () => !settled && !this.closing && current() && this.options.online();
-        const read = baseline ? live.transcript.baseline?.(cursor, lease) ?? Promise.resolve({ state: "pending", cursor, complete: false, turnKnown: false, openTurn: null }) : live.transcript.read(cursor, lease);
-        try {
-            const batch = await Promise.race([read, new Promise((_resolve, reject) => { timer = setTimeout(() => reject(Error("Pane transcript read deadline exceeded")), 1000); })]);
-            if (!lease())
-                throw Error("Pane transcript read lease expired");
-            if (baseline)
-                return validatePaneTranscriptBaseline(batch, snapshot.sessionId);
-            if (!("data" in batch))
-                throw Error("Pane transcript response has no records");
-            return validatePaneTranscriptWireBatch({ state: batch.state, cursor: batch.cursor, data: batch.data, complete: batch.complete, gap: batch.gap }, snapshot.sessionId);
-        }
-        finally {
-            settled = true;
-            clearTimeout(timer);
-            void read.catch(() => { });
-        }
-    }
-    async stop() {
-        this.closing = true;
-        for (const live of this.live.values())
-            if (live.record.snapshot.state !== "exited") {
-                try {
-                    live.process.kill();
-                }
-                catch {
-                    live.record.snapshot.state = "unknown";
-                }
-            }
-        // Pending opens recheck admission and retire their own process; no new request can enter.
-        await Promise.allSettled([...this.queues.values()].map(queue => queue.tail));
-        // A request to close is not exit evidence. Keep native helpers alive until their job receipt or the bounded hold.
-        const remaining = [...this.live.values()].filter(live => live.record.snapshot.state !== "exited");
-        let timer;
-        if (remaining.length)
-            await Promise.race([Promise.all(remaining.map(live => live.exited)), new Promise(done => { timer = setTimeout(done, 10_000); })]);
-        clearTimeout(timer);
-        for (const live of this.live.values()) {
-            if (live.record.snapshot.state !== "exited")
-                live.record.snapshot.state = "unknown";
-            try {
-                this.options.store.put(live.record);
-            }
-            finally {
-                live.screen.dispose();
-                void live.transcript?.close().catch(() => { });
-            }
-        }
-    }
-}
-//# sourceMappingURL=runtime-pane-host.js.map