@spacebar_ai/moldclaw-core 2026.3.43 → 2026.3.44

package/dist/devices-cli-DIsxj4xp.js

@@ -0,0 +1,342 @@
+import "./logger-BFfIIIKH.js";
+import "./paths-D6AgsMTU.js";
+import "./tmp-moldclaw-dir-DWF-d8qD.js";
+import { r as theme } from "./theme-BSXzMzAA.js";
+import "./globals-DESrFYmC.js";
+import { n as defaultRuntime } from "./runtime-_tQz41uA.js";
+import "./ansi-BPhP6LBZ.js";
+import "./subsystem-CPmDTJ2P.js";
+import "./boolean-B6zcAynR.js";
+import "./env-D42cffog.js";
+import "./utils-C7ykRPCQ.js";
+import "./model-selection-bBBxfXdb.js";
+import "./agent-scope-lZlwP1At.js";
+import "./boundary-file-read-tPYh_8fH.js";
+import "./logger-BGzLUitz.js";
+import "./exec-CvEtXqTZ.js";
+import "./workspace-DJ_S272u.js";
+import "./io-BaBxjB1v.js";
+import "./host-env-security-DQ2i_W12.js";
+import "./safe-text-Cnulee_z.js";
+import "./version-T8nMYUnU.js";
+import "./env-substitution-68cyvF5h.js";
+import "./config-state-h5jUoHya.js";
+import "./network-mode-BtWXzwYn.js";
+import "./registry-C1pRrsQl.js";
+import "./manifest-registry-CS_p1OBQ.js";
+import "./ip-C4YAIpr4.js";
+import "./zod-schema.core-DvwgNmpd.js";
+import "./config-CwBv71QC.js";
+import "./audit-fs-CMb-YUHX.js";
+import "./resolve-PSlwZjg3.js";
+import "./tailnet-fFTz5Twr.js";
+import { r as isLoopbackHost } from "./net-K181nxTH.js";
+import "./credentials-D-5Pb-aZ.js";
+import { _ as GATEWAY_CLIENT_MODES, v as GATEWAY_CLIENT_NAMES } from "./message-channel-DFE4FuE_.js";
+import "./method-scopes-B2ZKSsxQ.js";
+import "./device-identity-IG5DngWM.js";
+import { n as callGateway, t as buildGatewayConnectionDetails } from "./call-gdDAt07d.js";
+import { n as formatTimeAgo } from "./format-relative-B1Jfwsqe.js";
+import "./pairing-token-bu1e6z6X.js";
+import { n as withProgress } from "./progress-Cwq59vgZ.js";
+import { i as listDevicePairing, t as approveDevicePairing, u as summarizeDeviceTokens } from "./device-pairing-BnHbhzz1.js";
+import { n as renderTable, t as getTerminalTableWidth } from "./table-BldgNDVQ.js";
+//#region src/cli/devices-cli.ts
+const FALLBACK_NOTICE = "Direct scope access failed; using local fallback.";
+const devicesCallOpts = (cmd, defaults) => cmd.option("--url <url>", "Gateway WebSocket URL (defaults to gateway.remote.url when configured)").option("--token <token>", "Gateway token (if required)").option("--password <password>", "Gateway password (password auth)").option("--timeout <ms>", "Timeout in ms", String(defaults?.timeoutMs ?? 1e4)).option("--json", "Output JSON", false);
+const callGatewayCli = async (method, opts, params) => withProgress({
+	label: `Devices ${method}`,
+	indeterminate: true,
+	enabled: opts.json !== true
+}, async () => await callGateway({
+	url: opts.url,
+	token: opts.token,
+	password: opts.password,
+	method,
+	params,
+	timeoutMs: Number(opts.timeout ?? 1e4),
+	clientName: GATEWAY_CLIENT_NAMES.CLI,
+	mode: GATEWAY_CLIENT_MODES.CLI
+}));
+function normalizeErrorMessage(error) {
+	if (error instanceof Error) return error.message;
+	return String(error);
+}
+function shouldUseLocalPairingFallback(opts, error) {
+	if (!normalizeErrorMessage(error).toLowerCase().includes("pairing required")) return false;
+	if (typeof opts.url === "string" && opts.url.trim().length > 0) return false;
+	const connection = buildGatewayConnectionDetails();
+	if (connection.urlSource !== "local loopback") return false;
+	try {
+		return isLoopbackHost(new URL(connection.url).hostname);
+	} catch {
+		return false;
+	}
+}
+function redactLocalPairedDevice(device) {
+	const { tokens, ...rest } = device;
+	return {
+		...rest,
+		tokens: summarizeDeviceTokens(tokens)
+	};
+}
+async function listPairingWithFallback(opts) {
+	try {
+		return parseDevicePairingList(await callGatewayCli("device.pair.list", opts, {}));
+	} catch (error) {
+		if (!shouldUseLocalPairingFallback(opts, error)) throw error;
+		if (opts.json !== true) defaultRuntime.log(theme.warn(FALLBACK_NOTICE));
+		const local = await listDevicePairing();
+		return {
+			pending: local.pending,
+			paired: local.paired.map((device) => redactLocalPairedDevice(device))
+		};
+	}
+}
+async function approvePairingWithFallback(opts, requestId) {
+	try {
+		return await callGatewayCli("device.pair.approve", opts, { requestId });
+	} catch (error) {
+		if (!shouldUseLocalPairingFallback(opts, error)) throw error;
+		if (opts.json !== true) defaultRuntime.log(theme.warn(FALLBACK_NOTICE));
+		const approved = await approveDevicePairing(requestId);
+		if (!approved) return null;
+		return {
+			requestId,
+			device: redactLocalPairedDevice(approved.device)
+		};
+	}
+}
+function parseDevicePairingList(value) {
+	const obj = typeof value === "object" && value !== null ? value : {};
+	return {
+		pending: Array.isArray(obj.pending) ? obj.pending : [],
+		paired: Array.isArray(obj.paired) ? obj.paired : []
+	};
+}
+function selectLatestPendingRequest(pending) {
+	if (!pending?.length) return null;
+	return pending.reduce((latest, current) => {
+		const latestTs = typeof latest.ts === "number" ? latest.ts : 0;
+		return (typeof current.ts === "number" ? current.ts : 0) > latestTs ? current : latest;
+	});
+}
+function formatTokenSummary(tokens) {
+	if (!tokens || tokens.length === 0) return "none";
+	return tokens.map((t) => `${t.role}${t.revokedAtMs ? " (revoked)" : ""}`).toSorted((a, b) => a.localeCompare(b)).join(", ");
+}
+function resolveRequiredDeviceRole(opts) {
+	const deviceId = String(opts.device ?? "").trim();
+	const role = String(opts.role ?? "").trim();
+	if (deviceId && role) return {
+		deviceId,
+		role
+	};
+	defaultRuntime.error("--device and --role required");
+	defaultRuntime.exit(1);
+	return null;
+}
+function registerDevicesCli(program) {
+	const devices = program.command("devices").description("Device pairing and auth tokens");
+	devicesCallOpts(devices.command("list").description("List pending and paired devices").action(async (opts) => {
+		const list = await listPairingWithFallback(opts);
+		if (opts.json) {
+			defaultRuntime.log(JSON.stringify(list, null, 2));
+			return;
+		}
+		if (list.pending?.length) {
+			const tableWidth = getTerminalTableWidth();
+			defaultRuntime.log(`${theme.heading("Pending")} ${theme.muted(`(${list.pending.length})`)}`);
+			defaultRuntime.log(renderTable({
+				width: tableWidth,
+				columns: [
+					{
+						key: "Request",
+						header: "Request",
+						minWidth: 10
+					},
+					{
+						key: "Device",
+						header: "Device",
+						minWidth: 16,
+						flex: true
+					},
+					{
+						key: "Role",
+						header: "Role",
+						minWidth: 8
+					},
+					{
+						key: "IP",
+						header: "IP",
+						minWidth: 12
+					},
+					{
+						key: "Age",
+						header: "Age",
+						minWidth: 8
+					},
+					{
+						key: "Flags",
+						header: "Flags",
+						minWidth: 8
+					}
+				],
+				rows: list.pending.map((req) => ({
+					Request: req.requestId,
+					Device: req.displayName || req.deviceId,
+					Role: req.role ?? "",
+					IP: req.remoteIp ?? "",
+					Age: typeof req.ts === "number" ? formatTimeAgo(Date.now() - req.ts) : "",
+					Flags: req.isRepair ? "repair" : ""
+				}))
+			}).trimEnd());
+		}
+		if (list.paired?.length) {
+			const tableWidth = getTerminalTableWidth();
+			defaultRuntime.log(`${theme.heading("Paired")} ${theme.muted(`(${list.paired.length})`)}`);
+			defaultRuntime.log(renderTable({
+				width: tableWidth,
+				columns: [
+					{
+						key: "Device",
+						header: "Device",
+						minWidth: 16,
+						flex: true
+					},
+					{
+						key: "Roles",
+						header: "Roles",
+						minWidth: 12,
+						flex: true
+					},
+					{
+						key: "Scopes",
+						header: "Scopes",
+						minWidth: 12,
+						flex: true
+					},
+					{
+						key: "Tokens",
+						header: "Tokens",
+						minWidth: 12,
+						flex: true
+					},
+					{
+						key: "IP",
+						header: "IP",
+						minWidth: 12
+					}
+				],
+				rows: list.paired.map((device) => ({
+					Device: device.displayName || device.deviceId,
+					Roles: device.roles?.length ? device.roles.join(", ") : "",
+					Scopes: device.scopes?.length ? device.scopes.join(", ") : "",
+					Tokens: formatTokenSummary(device.tokens),
+					IP: device.remoteIp ?? ""
+				}))
+			}).trimEnd());
+		}
+		if (!list.pending?.length && !list.paired?.length) defaultRuntime.log(theme.muted("No device pairing entries."));
+	}));
+	devicesCallOpts(devices.command("remove").description("Remove a paired device entry").argument("<deviceId>", "Paired device id").action(async (deviceId, opts) => {
+		const trimmed = deviceId.trim();
+		if (!trimmed) {
+			defaultRuntime.error("deviceId is required");
+			defaultRuntime.exit(1);
+			return;
+		}
+		const result = await callGatewayCli("device.pair.remove", opts, { deviceId: trimmed });
+		if (opts.json) {
+			defaultRuntime.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		defaultRuntime.log(`${theme.warn("Removed")} ${theme.command(trimmed)}`);
+	}));
+	devicesCallOpts(devices.command("clear").description("Clear paired devices from the gateway table").option("--pending", "Also reject all pending pairing requests", false).option("--yes", "Confirm destructive clear", false).action(async (opts) => {
+		if (!opts.yes) {
+			defaultRuntime.error("Refusing to clear pairing table without --yes");
+			defaultRuntime.exit(1);
+			return;
+		}
+		const list = parseDevicePairingList(await callGatewayCli("device.pair.list", opts, {}));
+		const removedDeviceIds = [];
+		const rejectedRequestIds = [];
+		const paired = Array.isArray(list.paired) ? list.paired : [];
+		for (const device of paired) {
+			const deviceId = typeof device.deviceId === "string" ? device.deviceId.trim() : "";
+			if (!deviceId) continue;
+			await callGatewayCli("device.pair.remove", opts, { deviceId });
+			removedDeviceIds.push(deviceId);
+		}
+		if (opts.pending) {
+			const pending = Array.isArray(list.pending) ? list.pending : [];
+			for (const req of pending) {
+				const requestId = typeof req.requestId === "string" ? req.requestId.trim() : "";
+				if (!requestId) continue;
+				await callGatewayCli("device.pair.reject", opts, { requestId });
+				rejectedRequestIds.push(requestId);
+			}
+		}
+		if (opts.json) {
+			defaultRuntime.log(JSON.stringify({
+				removedDevices: removedDeviceIds,
+				rejectedPending: rejectedRequestIds
+			}, null, 2));
+			return;
+		}
+		defaultRuntime.log(`${theme.warn("Cleared")} ${removedDeviceIds.length} paired device${removedDeviceIds.length === 1 ? "" : "s"}`);
+		if (opts.pending) defaultRuntime.log(`${theme.warn("Rejected")} ${rejectedRequestIds.length} pending request${rejectedRequestIds.length === 1 ? "" : "s"}`);
+	}));
+	devicesCallOpts(devices.command("approve").description("Approve a pending device pairing request").argument("[requestId]", "Pending request id").option("--latest", "Approve the most recent pending request", false).action(async (requestId, opts) => {
+		let resolvedRequestId = requestId?.trim();
+		if (!resolvedRequestId || opts.latest) resolvedRequestId = selectLatestPendingRequest((await listPairingWithFallback(opts)).pending)?.requestId?.trim();
+		if (!resolvedRequestId) {
+			defaultRuntime.error("No pending device pairing requests to approve");
+			defaultRuntime.exit(1);
+			return;
+		}
+		const result = await approvePairingWithFallback(opts, resolvedRequestId);
+		if (!result) {
+			defaultRuntime.error("unknown requestId");
+			defaultRuntime.exit(1);
+			return;
+		}
+		if (opts.json) {
+			defaultRuntime.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		const deviceId = result?.device?.deviceId;
+		defaultRuntime.log(`${theme.success("Approved")} ${theme.command(deviceId ?? "ok")} ${theme.muted(`(${resolvedRequestId})`)}`);
+	}));
+	devicesCallOpts(devices.command("reject").description("Reject a pending device pairing request").argument("<requestId>", "Pending request id").action(async (requestId, opts) => {
+		const result = await callGatewayCli("device.pair.reject", opts, { requestId });
+		if (opts.json) {
+			defaultRuntime.log(JSON.stringify(result, null, 2));
+			return;
+		}
+		const deviceId = result?.deviceId;
+		defaultRuntime.log(`${theme.warn("Rejected")} ${theme.command(deviceId ?? "ok")}`);
+	}));
+	devicesCallOpts(devices.command("rotate").description("Rotate a device token for a role").requiredOption("--device <id>", "Device id").requiredOption("--role <role>", "Role name").option("--scope <scope...>", "Scopes to attach to the token (repeatable)").action(async (opts) => {
+		const required = resolveRequiredDeviceRole(opts);
+		if (!required) return;
+		const result = await callGatewayCli("device.token.rotate", opts, {
+			deviceId: required.deviceId,
+			role: required.role,
+			scopes: Array.isArray(opts.scope) ? opts.scope : void 0
+		});
+		defaultRuntime.log(JSON.stringify(result, null, 2));
+	}));
+	devicesCallOpts(devices.command("revoke").description("Revoke a device token for a role").requiredOption("--device <id>", "Device id").requiredOption("--role <role>", "Role name").action(async (opts) => {
+		const required = resolveRequiredDeviceRole(opts);
+		if (!required) return;
+		const result = await callGatewayCli("device.token.revoke", opts, {
+			deviceId: required.deviceId,
+			role: required.role
+		});
+		defaultRuntime.log(JSON.stringify(result, null, 2));
+	}));
+}
+//#endregion
+export { registerDevicesCli };

package/dist/diagnostic-DTPopFvh.js

@@ -0,0 +1,310 @@
+import { t as createSubsystemLogger } from "./subsystem-CPmDTJ2P.js";
+import { c as loadConfig } from "./io-BaBxjB1v.js";
+import { t as emitDiagnosticEvent } from "./diagnostic-events-Bj7fdPDH.js";
+//#region src/logging/diagnostic-session-state.ts
+const diagnosticSessionStates = /* @__PURE__ */ new Map();
+const SESSION_STATE_TTL_MS = 1800 * 1e3;
+const SESSION_STATE_PRUNE_INTERVAL_MS = 60 * 1e3;
+const SESSION_STATE_MAX_ENTRIES = 2e3;
+let lastSessionPruneAt = 0;
+function pruneDiagnosticSessionStates(now = Date.now(), force = false) {
+	const shouldPruneForSize = diagnosticSessionStates.size > SESSION_STATE_MAX_ENTRIES;
+	if (!force && !shouldPruneForSize && now - lastSessionPruneAt < SESSION_STATE_PRUNE_INTERVAL_MS) return;
+	lastSessionPruneAt = now;
+	for (const [key, state] of diagnosticSessionStates.entries()) {
+		const ageMs = now - state.lastActivity;
+		if (state.state === "idle" && state.queueDepth <= 0 && ageMs > SESSION_STATE_TTL_MS) diagnosticSessionStates.delete(key);
+	}
+	if (diagnosticSessionStates.size <= SESSION_STATE_MAX_ENTRIES) return;
+	const excess = diagnosticSessionStates.size - SESSION_STATE_MAX_ENTRIES;
+	const ordered = Array.from(diagnosticSessionStates.entries()).toSorted((a, b) => a[1].lastActivity - b[1].lastActivity);
+	for (let i = 0; i < excess; i += 1) {
+		const key = ordered[i]?.[0];
+		if (!key) break;
+		diagnosticSessionStates.delete(key);
+	}
+}
+function resolveSessionKey({ sessionKey, sessionId }) {
+	return sessionKey ?? sessionId ?? "unknown";
+}
+function findStateBySessionId(sessionId) {
+	for (const state of diagnosticSessionStates.values()) if (state.sessionId === sessionId) return state;
+}
+function getDiagnosticSessionState(ref) {
+	pruneDiagnosticSessionStates();
+	const key = resolveSessionKey(ref);
+	const existing = diagnosticSessionStates.get(key) ?? (ref.sessionId && findStateBySessionId(ref.sessionId));
+	if (existing) {
+		if (ref.sessionId) existing.sessionId = ref.sessionId;
+		if (ref.sessionKey) existing.sessionKey = ref.sessionKey;
+		return existing;
+	}
+	const created = {
+		sessionId: ref.sessionId,
+		sessionKey: ref.sessionKey,
+		lastActivity: Date.now(),
+		state: "idle",
+		queueDepth: 0
+	};
+	diagnosticSessionStates.set(key, created);
+	pruneDiagnosticSessionStates(Date.now(), true);
+	return created;
+}
+function getDiagnosticSessionStateCountForTest$1() {
+	return diagnosticSessionStates.size;
+}
+function resetDiagnosticSessionStateForTest() {
+	diagnosticSessionStates.clear();
+	lastSessionPruneAt = 0;
+}
+//#endregion
+//#region src/logging/diagnostic.ts
+const diag = createSubsystemLogger("diagnostic");
+const webhookStats = {
+	received: 0,
+	processed: 0,
+	errors: 0,
+	lastReceived: 0
+};
+let lastActivityAt = 0;
+const DEFAULT_STUCK_SESSION_WARN_MS = 12e4;
+const MIN_STUCK_SESSION_WARN_MS = 1e3;
+const MAX_STUCK_SESSION_WARN_MS = 1440 * 60 * 1e3;
+let commandPollBackoffRuntimePromise = null;
+function loadCommandPollBackoffRuntime() {
+	commandPollBackoffRuntimePromise ??= import("./command-poll-backoff.runtime-cAdwdrRB.js");
+	return commandPollBackoffRuntimePromise;
+}
+function markActivity() {
+	lastActivityAt = Date.now();
+}
+function resolveStuckSessionWarnMs(config) {
+	const raw = config?.diagnostics?.stuckSessionWarnMs;
+	if (typeof raw !== "number" || !Number.isFinite(raw)) return DEFAULT_STUCK_SESSION_WARN_MS;
+	const rounded = Math.floor(raw);
+	if (rounded < MIN_STUCK_SESSION_WARN_MS || rounded > MAX_STUCK_SESSION_WARN_MS) return DEFAULT_STUCK_SESSION_WARN_MS;
+	return rounded;
+}
+function logWebhookReceived(params) {
+	webhookStats.received += 1;
+	webhookStats.lastReceived = Date.now();
+	if (diag.isEnabled("debug")) diag.debug(`webhook received: channel=${params.channel} type=${params.updateType ?? "unknown"} chatId=${params.chatId ?? "unknown"} total=${webhookStats.received}`);
+	emitDiagnosticEvent({
+		type: "webhook.received",
+		channel: params.channel,
+		updateType: params.updateType,
+		chatId: params.chatId
+	});
+	markActivity();
+}
+function logWebhookProcessed(params) {
+	webhookStats.processed += 1;
+	if (diag.isEnabled("debug")) diag.debug(`webhook processed: channel=${params.channel} type=${params.updateType ?? "unknown"} chatId=${params.chatId ?? "unknown"} duration=${params.durationMs ?? 0}ms processed=${webhookStats.processed}`);
+	emitDiagnosticEvent({
+		type: "webhook.processed",
+		channel: params.channel,
+		updateType: params.updateType,
+		chatId: params.chatId,
+		durationMs: params.durationMs
+	});
+	markActivity();
+}
+function logWebhookError(params) {
+	webhookStats.errors += 1;
+	diag.error(`webhook error: channel=${params.channel} type=${params.updateType ?? "unknown"} chatId=${params.chatId ?? "unknown"} error="${params.error}" errors=${webhookStats.errors}`);
+	emitDiagnosticEvent({
+		type: "webhook.error",
+		channel: params.channel,
+		updateType: params.updateType,
+		chatId: params.chatId,
+		error: params.error
+	});
+	markActivity();
+}
+function logMessageQueued(params) {
+	const state = getDiagnosticSessionState(params);
+	state.queueDepth += 1;
+	state.lastActivity = Date.now();
+	if (diag.isEnabled("debug")) diag.debug(`message queued: sessionId=${state.sessionId ?? "unknown"} sessionKey=${state.sessionKey ?? "unknown"} source=${params.source} queueDepth=${state.queueDepth} sessionState=${state.state}`);
+	emitDiagnosticEvent({
+		type: "message.queued",
+		sessionId: state.sessionId,
+		sessionKey: state.sessionKey,
+		channel: params.channel,
+		source: params.source,
+		queueDepth: state.queueDepth
+	});
+	markActivity();
+}
+function logMessageProcessed(params) {
+	if (params.outcome === "error" ? diag.isEnabled("error") : diag.isEnabled("debug")) {
+		const payload = `message processed: channel=${params.channel} chatId=${params.chatId ?? "unknown"} messageId=${params.messageId ?? "unknown"} sessionId=${params.sessionId ?? "unknown"} sessionKey=${params.sessionKey ?? "unknown"} outcome=${params.outcome} duration=${params.durationMs ?? 0}ms${params.reason ? ` reason=${params.reason}` : ""}${params.error ? ` error="${params.error}"` : ""}`;
+		if (params.outcome === "error") diag.error(payload);
+		else diag.debug(payload);
+	}
+	emitDiagnosticEvent({
+		type: "message.processed",
+		channel: params.channel,
+		chatId: params.chatId,
+		messageId: params.messageId,
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		durationMs: params.durationMs,
+		outcome: params.outcome,
+		reason: params.reason,
+		error: params.error
+	});
+	markActivity();
+}
+function logSessionStateChange(params) {
+	const state = getDiagnosticSessionState(params);
+	const isProbeSession = state.sessionId?.startsWith("probe-") ?? false;
+	const prevState = state.state;
+	state.state = params.state;
+	state.lastActivity = Date.now();
+	if (params.state === "idle") state.queueDepth = Math.max(0, state.queueDepth - 1);
+	if (!isProbeSession && diag.isEnabled("debug")) diag.debug(`session state: sessionId=${state.sessionId ?? "unknown"} sessionKey=${state.sessionKey ?? "unknown"} prev=${prevState} new=${params.state} reason="${params.reason ?? ""}" queueDepth=${state.queueDepth}`);
+	emitDiagnosticEvent({
+		type: "session.state",
+		sessionId: state.sessionId,
+		sessionKey: state.sessionKey,
+		prevState,
+		state: params.state,
+		reason: params.reason,
+		queueDepth: state.queueDepth
+	});
+	markActivity();
+}
+function logSessionStuck(params) {
+	const state = getDiagnosticSessionState(params);
+	diag.warn(`stuck session: sessionId=${state.sessionId ?? "unknown"} sessionKey=${state.sessionKey ?? "unknown"} state=${params.state} age=${Math.round(params.ageMs / 1e3)}s queueDepth=${state.queueDepth}`);
+	emitDiagnosticEvent({
+		type: "session.stuck",
+		sessionId: state.sessionId,
+		sessionKey: state.sessionKey,
+		state: params.state,
+		ageMs: params.ageMs,
+		queueDepth: state.queueDepth
+	});
+	markActivity();
+}
+function logLaneEnqueue(lane, queueSize) {
+	diag.debug(`lane enqueue: lane=${lane} queueSize=${queueSize}`);
+	emitDiagnosticEvent({
+		type: "queue.lane.enqueue",
+		lane,
+		queueSize
+	});
+	markActivity();
+}
+function logLaneDequeue(lane, waitMs, queueSize) {
+	diag.debug(`lane dequeue: lane=${lane} waitMs=${waitMs} queueSize=${queueSize}`);
+	emitDiagnosticEvent({
+		type: "queue.lane.dequeue",
+		lane,
+		queueSize,
+		waitMs
+	});
+	markActivity();
+}
+function logRunAttempt(params) {
+	diag.debug(`run attempt: sessionId=${params.sessionId ?? "unknown"} sessionKey=${params.sessionKey ?? "unknown"} runId=${params.runId} attempt=${params.attempt}`);
+	emitDiagnosticEvent({
+		type: "run.attempt",
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		runId: params.runId,
+		attempt: params.attempt
+	});
+	markActivity();
+}
+function logToolLoopAction(params) {
+	const payload = `tool loop: sessionId=${params.sessionId ?? "unknown"} sessionKey=${params.sessionKey ?? "unknown"} tool=${params.toolName} level=${params.level} action=${params.action} detector=${params.detector} count=${params.count}${params.pairedToolName ? ` pairedTool=${params.pairedToolName}` : ""} message="${params.message}"`;
+	if (params.level === "critical") diag.error(payload);
+	else diag.warn(payload);
+	emitDiagnosticEvent({
+		type: "tool.loop",
+		sessionId: params.sessionId,
+		sessionKey: params.sessionKey,
+		toolName: params.toolName,
+		level: params.level,
+		action: params.action,
+		detector: params.detector,
+		count: params.count,
+		message: params.message,
+		pairedToolName: params.pairedToolName
+	});
+	markActivity();
+}
+function logActiveRuns() {
+	const activeSessions = Array.from(diagnosticSessionStates.entries()).filter(([, s]) => s.state === "processing").map(([id, s]) => `${id}(q=${s.queueDepth},age=${Math.round((Date.now() - s.lastActivity) / 1e3)}s)`);
+	diag.debug(`active runs: count=${activeSessions.length} sessions=[${activeSessions.join(", ")}]`);
+	markActivity();
+}
+let heartbeatInterval = null;
+function startDiagnosticHeartbeat(config) {
+	if (heartbeatInterval) return;
+	heartbeatInterval = setInterval(() => {
+		let heartbeatConfig = config;
+		if (!heartbeatConfig) try {
+			heartbeatConfig = loadConfig();
+		} catch {
+			heartbeatConfig = void 0;
+		}
+		const stuckSessionWarnMs = resolveStuckSessionWarnMs(heartbeatConfig);
+		const now = Date.now();
+		pruneDiagnosticSessionStates(now, true);
+		const activeCount = Array.from(diagnosticSessionStates.values()).filter((s) => s.state === "processing").length;
+		const waitingCount = Array.from(diagnosticSessionStates.values()).filter((s) => s.state === "waiting").length;
+		const totalQueued = Array.from(diagnosticSessionStates.values()).reduce((sum, s) => sum + s.queueDepth, 0);
+		if (!(lastActivityAt > 0 || webhookStats.received > 0 || activeCount > 0 || waitingCount > 0 || totalQueued > 0)) return;
+		if (now - lastActivityAt > 12e4 && activeCount === 0 && waitingCount === 0) return;
+		diag.debug(`heartbeat: webhooks=${webhookStats.received}/${webhookStats.processed}/${webhookStats.errors} active=${activeCount} waiting=${waitingCount} queued=${totalQueued}`);
+		emitDiagnosticEvent({
+			type: "diagnostic.heartbeat",
+			webhooks: {
+				received: webhookStats.received,
+				processed: webhookStats.processed,
+				errors: webhookStats.errors
+			},
+			active: activeCount,
+			waiting: waitingCount,
+			queued: totalQueued
+		});
+		loadCommandPollBackoffRuntime().then(({ pruneStaleCommandPolls }) => {
+			for (const [, state] of diagnosticSessionStates) pruneStaleCommandPolls(state);
+		}).catch((err) => {
+			diag.debug(`command-poll-backoff prune failed: ${String(err)}`);
+		});
+		for (const [, state] of diagnosticSessionStates) {
+			const ageMs = now - state.lastActivity;
+			if (state.state === "processing" && ageMs > stuckSessionWarnMs) logSessionStuck({
+				sessionId: state.sessionId,
+				sessionKey: state.sessionKey,
+				state: state.state,
+				ageMs
+			});
+		}
+	}, 3e4);
+	heartbeatInterval.unref?.();
+}
+function stopDiagnosticHeartbeat() {
+	if (heartbeatInterval) {
+		clearInterval(heartbeatInterval);
+		heartbeatInterval = null;
+	}
+}
+function getDiagnosticSessionStateCountForTest() {
+	return getDiagnosticSessionStateCountForTest$1();
+}
+function resetDiagnosticStateForTest() {
+	resetDiagnosticSessionStateForTest();
+	webhookStats.received = 0;
+	webhookStats.processed = 0;
+	webhookStats.errors = 0;
+	webhookStats.lastReceived = 0;
+	lastActivityAt = 0;
+	stopDiagnosticHeartbeat();
+}
+//#endregion
+export { startDiagnosticHeartbeat as _, logLaneEnqueue as a, logRunAttempt as c, logToolLoopAction as d, logWebhookError as f, resolveStuckSessionWarnMs as g, resetDiagnosticStateForTest as h, logLaneDequeue as i, logSessionStateChange as l, logWebhookReceived as m, getDiagnosticSessionStateCountForTest as n, logMessageProcessed as o, logWebhookProcessed as p, logActiveRuns as r, logMessageQueued as s, diag as t, logSessionStuck as u, stopDiagnosticHeartbeat as v, getDiagnosticSessionState as y };