@telora/daemon 0.22.245 → 0.22.290

package/dist/spawn/one-shot-scoping-spawn.js

@@ -1,156 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/prd/prd-frontier-arming.test.ts,
-//   packages/daemon/src/spawn/one-shot-scoping-spawn.test.ts
-// PINNED-BY-END
-/**
- * The ONE-SHOT SCOPING AGENT spawn seam.
- *
- * A scoping agent is a short-lived `claude --print` process whose whole job is
- * to AUTHOR intent through the telora_* MCP tools and exit -- it writes no
- * application code, makes no git changes, and runs in the product repo (where
- * the per-product .mcp.json + CLAUDE.md live) rather than an isolated worktree.
- *
- * WHY THIS MODULE EXISTS (the choice a reviewer should check). The machinery
- * was written for nexus intake (`nexus/intake-spawn.ts`). The PRD frontier
- * needs the SAME process shape -- same kill timeout, same fire-and-forget
- * settle, same cleaned env, same close/error logging -- for a different prompt.
- * The delivery offered two shapes: extract the machinery so both callers share
- * it, or add a thin helper and let each caller keep its own copy of the
- * timeout/settle/log logic. EXTRACTION was taken: the copy is precisely where
- * two spawners drift (one grows an unref'd timer, one does not; one resolves on
- * 'spawn', one on 'close'), and the drift is invisible until a hung agent holds
- * the daemon's event loop. What each caller keeps is its own PURE prompt
- * builder -- the part that genuinely differs and is worth unit-testing on its
- * own (`nexus/intake-spawn.ts` `buildIntakeScopingPrompt`,
- * `prd/scoping-prompt.ts` `buildPrdScopingPrompt`).
- *
- * The extraction is behaviour-preserving for intake: the timeout, the SIGKILL
- * grace, the resolve-on-'spawn' contract and every log line moved here
- * verbatim, and intake re-exports the seam type + timeout constant under their
- * original names so nothing downstream had to change.
- *
- * FIRE-AND-FORGET: a scoping agent runs for minutes. `spawnOneShotScopingAgent`
- * resolves the moment the process is up (the 'spawn' event), NOT on close, so a
- * daemon poll loop is never blocked. The caller's own in-flight guard (intake's
- * `intake_scoping_started_at` stamp; the PRD controller's scoping-run ledger)
- * is what prevents a re-spawn -- never this promise.
- */
-import { spawn } from 'node:child_process';
-import { stripClaudeCodeEnvVars } from '@telora/daemon-core';
-import { createLogger } from '../shell/log.js';
-/**
- * Kill a scoping agent that has not exited within this window (15 minutes).
- *
- * A caller's staleness window (the interval after which it will spawn a
- * REPLACEMENT) must be strictly greater than this plus the SIGKILL grace, or a
- * healthy long-running agent is double-spawned right as it finishes.
- */
-export const SCOPING_AGENT_TIMEOUT_MS = 15 * 60 * 1000;
-/** Grace between SIGTERM and SIGKILL when the kill timeout fires. */
-export const SCOPING_AGENT_SIGKILL_GRACE_MS = 10_000;
-const defaultSeam = {
-    spawnProcess: (command, args, cwd, env) => spawn(command, args, { cwd, env, stdio: ['pipe', 'pipe', 'pipe'] }),
-};
-/** Normalize a close event's argument to an exit code or null. */
-function toExitCode(code) {
-    return typeof code === 'number' ? code : null;
-}
-/**
- * Spawn a one-shot scoping agent. Resolves once the process has SPAWNED
- * (fire-and-forget); rejects only if the process fails to spawn. The
- * close/error handlers log the outcome and invoke `onExit`; the kill timeout
- * bounds a hung agent.
- */
-export function spawnOneShotScopingAgent(config, request, seam = defaultSeam) {
-    const log = createLogger({ module: request.logModule });
-    const timeoutMs = request.timeoutMs ?? SCOPING_AGENT_TIMEOUT_MS;
-    const args = [
-        '--print',
-        '--dangerously-skip-permissions',
-        '--setting-sources', 'project,local',
-        request.prompt,
-    ];
-    const env = stripClaudeCodeEnvVars(process.env);
-    const cwd = config.repoPath ?? process.cwd();
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        let exitReported = false;
-        let proc;
-        try {
-            proc = seam.spawnProcess(config.claudeCodePath, args, cwd, env);
-        }
-        catch (err) {
-            reject(err instanceof Error ? err : new Error(String(err)));
-            return;
-        }
-        // Prompt is a CLI arg; close stdin immediately.
-        proc.stdin?.end?.();
-        const timeout = setTimeout(() => {
-            log.warn(`scoping agent for ${request.label} timed out after ${timeoutMs / 1000}s, killing`);
-            if (proc.pid) {
-                try {
-                    process.kill(proc.pid, 'SIGTERM');
-                }
-                catch { /* ignore */ }
-                setTimeout(() => {
-                    if (proc.pid) {
-                        try {
-                            process.kill(proc.pid, 'SIGKILL');
-                        }
-                        catch { /* ignore */ }
-                    }
-                }, SCOPING_AGENT_SIGKILL_GRACE_MS);
-            }
-        }, timeoutMs);
-        // Do not let the kill timer keep the daemon event loop alive.
-        timeout.unref?.();
-        // The exit is reported at most ONCE, on whichever of close/error fires
-        // first: a caller's ledger moves the run out of 'in flight' on this
-        // callback, and a second report would clear a ledger entry a LATER spawn
-        // had already replaced.
-        const reportExit = (code) => {
-            if (exitReported)
-                return;
-            exitReported = true;
-            try {
-                request.onExit?.(code);
-            }
-            catch (err) {
-                // A caller's bookkeeping must never take down the daemon from a
-                // child-process event handler.
-                log.warn(`scoping agent exit handler for ${request.label} threw: ${err.message}`);
-            }
-        };
-        proc.on('spawn', () => {
-            // Process is up -- the daemon poll continues; the agent runs to completion
-            // in the background.
-            log.info(`scoping agent spawned for ${request.label} (PID: ${proc.pid ?? '?'})`);
-            if (!settled) {
-                settled = true;
-                resolve();
-            }
-        });
-        proc.on('close', (code) => {
-            clearTimeout(timeout);
-            log.info(`scoping agent for ${request.label} exited (code: ${code ?? '?'})`);
-            reportExit(toExitCode(code));
-            // If 'spawn' never fired (very early exit), still resolve -- the caller's
-            // in-flight guard already prevents an immediate re-spawn.
-            if (!settled) {
-                settled = true;
-                resolve();
-            }
-        });
-        proc.on('error', (err) => {
-            clearTimeout(timeout);
-            const message = err instanceof Error ? err.message : String(err);
-            log.error(`scoping agent spawn error for ${request.label}: ${message}`);
-            reportExit(null);
-            if (!settled) {
-                settled = true;
-                reject(new Error(message));
-            }
-        });
-    });
-}
-//# sourceMappingURL=one-shot-scoping-spawn.js.map

package/dist/spawn/one-shot-scoping-spawn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"one-shot-scoping-spawn.js","sourceRoot":"","sources":["../../src/spawn/one-shot-scoping-spawn.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kEAAkE;AAClE,6DAA6D;AAC7D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD,qEAAqE;AACrE,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAWrD,MAAM,WAAW,GAAqB;IACpC,YAAY,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CACxC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CACtE,CAAC;AAyBF,kEAAkE;AAClE,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAoB,EACpB,OAA4B,EAC5B,OAAyB,WAAW;IAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAChE,MAAM,IAAI,GAAG;QACX,SAAS;QACT,gCAAgC;QAChC,mBAAmB,EAAE,eAAe;QACpC,OAAO,CAAC,MAAM;KACf,CAAC;IACF,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAyC,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE7C,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,IAAkD,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,GAAwB,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAEpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,GAAG,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,KAAK,oBAAoB,SAAS,GAAG,IAAI,YAAY,CAAC,CAAC;YAC7F,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACjE,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC;4BAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC,EAAE,8BAA8B,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,8DAA8D;QAC7D,OAA6C,CAAC,KAAK,EAAE,EAAE,CAAC;QAEzD,uEAAuE;QACvE,oEAAoE;QACpE,yEAAyE;QACzE,wBAAwB;QACxB,MAAM,UAAU,GAAG,CAAC,IAAmB,EAAQ,EAAE;YAC/C,IAAI,YAAY;gBAAE,OAAO;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gEAAgE;gBAChE,+BAA+B;gBAC/B,GAAG,CAAC,IAAI,CAAC,kCAAkC,OAAO,CAAC,KAAK,WAAY,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,2EAA2E;YAC3E,qBAAqB;YACrB,GAAG,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC;YACjF,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAc,EAAE,EAAE;YAClC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,qBAAqB,OAAO,CAAC,KAAK,kBAAkB,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC;YAC7E,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,0EAA0E;YAC1E,0DAA0D;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAa,EAAE,EAAE;YACjC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,iCAAiC,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;YACxE,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/spawn/process-group-kill.d.ts

@@ -1,79 +0,0 @@
-/** Grace a signalled group gets to exit on SIGTERM before SIGKILL. */
-export declare const PROCESS_GROUP_GRACE_MS = 5000;
-/** How long after SIGKILL the group must be confirmed gone. */
-export declare const PROCESS_GROUP_KILL_CONFIRM_MS = 2000;
-export type KillFn = (pid: number, signal: NodeJS.Signals) => void;
-/** Injectable seams for {@link terminateProcessGroup}. */
-export interface ProcessGroupKillDeps {
-    /** Signal sender. Defaults to process.kill. */
-    kill?: KillFn;
-    /** True while any non-zombie member of the group is alive. */
-    isGroupAlive?: (pgid: number) => boolean;
-    /** Sleep seam. Defaults to a setTimeout wait. */
-    sleep?: (ms: number) => Promise<void>;
-}
-export interface ProcessGroupKillOptions {
-    /** Human label for the log line (focus name, session id). */
-    label: string;
-    /** Which teardown route asked (e.g. "team cleanup", "session reap"). */
-    context: string;
-    /** First signal. SIGKILL skips the grace (a reaper that already decided). */
-    initialSignal?: 'SIGTERM' | 'SIGKILL';
-    /** Grace after SIGTERM before SIGKILL. Defaults to PROCESS_GROUP_GRACE_MS. */
-    graceMs?: number;
-    /** Confirmation window after SIGKILL. Defaults to PROCESS_GROUP_KILL_CONFIRM_MS. */
-    confirmMs?: number;
-    /** Poll interval while waiting. */
-    pollMs?: number;
-}
-/**
- * - `already_gone`: no live member when called -- nothing to end.
- * - `exited`: the group ended on the first signal within the grace.
- * - `killed`: it survived the grace, was SIGKILLed, and is confirmed gone.
- * - `survived`: still alive after SIGKILL and the confirmation window.
- * - `unsignalable`: invalid pid, or the OS refused the signal (EPERM).
- */
-export type ProcessGroupKillOutcome = 'already_gone' | 'exited' | 'killed' | 'survived' | 'unsignalable';
-export interface ProcessGroupKillResult {
-    pgid: number;
-    outcome: ProcessGroupKillOutcome;
-    /** Why the group could not be signalled, for `unsignalable`. */
-    detail?: string;
-}
-/** True when the outcome leaves no live member of the group (nothing left to end). */
-export declare function processGroupEnded(result: Pick<ProcessGroupKillResult, 'outcome'>): boolean;
-/**
- * The process's start time in clock ticks since boot (`/proc/<pid>/stat` field
- * 22), as a string -- a stable identity that, paired with the pid, cannot
- * match a later process reusing that pid. Null off Linux or for a gone pid.
- */
-export declare function readProcessStartIdentity(pid: number): string | null;
-/**
- * True while the group has a live (non-zombie) member. kill(-pgid, 0) answers
- * "any member exists" cheaply; on Linux a zombie still counts there, so a
- * positive answer is confirmed by scanning /proc for a non-zombie member.
- */
-export declare function isProcessGroupAlive(pgid: number): boolean;
-/**
- * Send one signal to a process group, falling back to the bare pid when the
- * pid is not a group leader. Returns null on success, or the error code when
- * neither form could be delivered (ESRCH = nothing left; EPERM = refused).
- */
-export declare function signalProcessGroup(pgid: number, signal: NodeJS.Signals, kill?: KillFn): string | null;
-/** A termination whose first signal has already been sent (or ruled out). */
-export interface StartedProcessGroupTermination {
-    /** True when the group was alive and the first signal was delivered. */
-    signalled: boolean;
-    /** Settles when the ladder ends: exit, SIGKILL confirmed, or given up. */
-    result: Promise<ProcessGroupKillResult>;
-}
-/**
- * Begin ending a daemon-spawned process group. The liveness check and the first
- * signal happen SYNCHRONOUSLY, so a synchronous caller (terminateTeam) can read
- * `signalled` at once; the grace, SIGKILL escalation, confirmation, and log run
- * in `result`. Never throws. See the module comment for the ladder.
- */
-export declare function startProcessGroupTermination(pgid: number, opts: ProcessGroupKillOptions, deps?: ProcessGroupKillDeps): StartedProcessGroupTermination;
-/** End a daemon-spawned process group and confirm it is gone. Never throws. */
-export declare function terminateProcessGroup(pgid: number, opts: ProcessGroupKillOptions, deps?: ProcessGroupKillDeps): Promise<ProcessGroupKillResult>;
-//# sourceMappingURL=process-group-kill.d.ts.map

package/dist/spawn/process-group-kill.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-group-kill.d.ts","sourceRoot":"","sources":["../../src/spawn/process-group-kill.ts"],"names":[],"mappings":"AA4CA,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,OAAQ,CAAC;AAE5C,+DAA+D;AAC/D,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAInD,MAAM,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;AAEnE,0DAA0D;AAC1D,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,iDAAiD;IACjD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IACtC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC;AAEzG,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,uBAAuB,CAAC;IACjC,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,GAAG,OAAO,CAE1F;AAyBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKnE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAsBzD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,GAAE,MAAoB,GAAG,MAAM,GAAG,IAAI,CAsBlH;AAyCD,6EAA6E;AAC7E,MAAM,WAAW,8BAA8B;IAC7C,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,uBAAuB,EAC7B,IAAI,GAAE,oBAAyB,GAC9B,8BAA8B,CAiChC;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,uBAAuB,EAC7B,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}

package/dist/spawn/process-group-kill.js

@@ -1,224 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/shutdown-attribution.test.ts,
-//   packages/daemon/src/completion/team-teardown-kills-process-group.test.ts,
-//   packages/daemon/src/focus/session-health-passes.test.ts,
-//   packages/daemon/src/focus/session-health-poll-sweep.test.ts,
-//   packages/daemon/src/shell/shutdown-ownership-wiring.test.ts,
-//   packages/daemon/src/spawn/lead-launch.test.ts, packages/daemon/src/spawn/lead-process-ownership.test.ts,
-//   packages/daemon/src/spawn/one-shot-process-ownership.test.ts,
-//   packages/daemon/src/spawn/process-group-kill.test.ts,
-//   packages/daemon/src/spawn/spawn-and-acknowledge.test.ts,
-//   packages/daemon/src/spawn/spawn-team-process-ownership.test.ts,
-//   packages/daemon/src/spawn/untracked-lead-sweep.test.ts,
-//   packages/daemon/src/worktree/worktree-state.test.ts
-// PINNED-BY-END
-/**
- * The ONE kill path for a daemon-spawned agent process tree.
- *
- * Team leads are spawned detached (spawnCrashIsolated), so each lead is the
- * leader of its own process group (pgid == lead pid) and everything it starts --
- * subagents, MCP server children -- inherits that group. Signalling the bare
- * lead pid ends the lead and orphans the rest; and a lead that finished its turn
- * but ignores stdin close and SIGTERM outlives any teardown that only sends
- * SIGTERM. Both left idle `claude` processes running after the daemon logged
- * "Team ... cleaned up" (Nexus request 57562907).
- *
- * `terminateProcessGroup` closes both holes for every caller (team teardown, the
- * reapers, session reaps, the untracked-process sweep):
- *   1. signal the whole group (bare-pid fallback for a non-leader),
- *   2. wait a bounded grace for it to exit,
- *   3. SIGKILL the group -- independent of any team-map membership,
- *   4. confirm no live member remains, and
- *   5. log the outcome, including why it could not signal.
- *
- * Pure over injected seams (kill / group liveness / sleep) so the ladder is
- * unit-testable without real processes; the defaults touch the real OS.
- */
-import { readdirSync, readFileSync } from 'node:fs';
-import { createLogger } from '../shell/log.js';
-import { recordTeamShutdownByPid, resolveTerminateInitiator } from '../completion/shutdown-attribution.js';
-const log = createLogger({ module: 'process-group-kill' });
-/** Grace a signalled group gets to exit on SIGTERM before SIGKILL. */
-export const PROCESS_GROUP_GRACE_MS = 5_000;
-/** How long after SIGKILL the group must be confirmed gone. */
-export const PROCESS_GROUP_KILL_CONFIRM_MS = 2_000;
-const DEFAULT_POLL_MS = 100;
-/** True when the outcome leaves no live member of the group (nothing left to end). */
-export function processGroupEnded(result) {
-    return result.outcome === 'already_gone' || result.outcome === 'exited' || result.outcome === 'killed';
-}
-const defaultKill = (pid, signal) => { process.kill(pid, signal); };
-const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
-function errorCode(err) {
-    const code = err?.code;
-    return typeof code === 'string' ? code : String(err?.message ?? err);
-}
-/**
- * Parse `/proc/<pid>/stat` after the command name (which may contain spaces or
- * parentheses). Returns the fields starting at field 3 (state), or null.
- */
-function readStatFields(pid) {
-    try {
-        const stat = readFileSync(`/proc/${pid}/stat`, 'utf-8');
-        const close = stat.lastIndexOf(')');
-        if (close < 0)
-            return null;
-        return stat.slice(close + 2).trim().split(/\s+/);
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * The process's start time in clock ticks since boot (`/proc/<pid>/stat` field
- * 22), as a string -- a stable identity that, paired with the pid, cannot
- * match a later process reusing that pid. Null off Linux or for a gone pid.
- */
-export function readProcessStartIdentity(pid) {
-    if (process.platform !== 'linux' || !Number.isInteger(pid) || pid <= 1)
-        return null;
-    const fields = readStatFields(pid);
-    // fields[0] is field 3 (state); field 22 (starttime) is fields[19].
-    return fields && fields.length > 19 ? fields[19] : null;
-}
-/**
- * True while the group has a live (non-zombie) member. kill(-pgid, 0) answers
- * "any member exists" cheaply; on Linux a zombie still counts there, so a
- * positive answer is confirmed by scanning /proc for a non-zombie member.
- */
-export function isProcessGroupAlive(pgid) {
-    try {
-        process.kill(-pgid, 0);
-    }
-    catch (err) {
-        // EPERM means a member exists we may not signal -- treat as alive.
-        return errorCode(err) === 'EPERM';
-    }
-    if (process.platform !== 'linux')
-        return true;
-    let entries;
-    try {
-        entries = readdirSync('/proc');
-    }
-    catch {
-        return true;
-    }
-    const target = String(pgid);
-    for (const entry of entries) {
-        if (!/^\d+$/.test(entry))
-            continue;
-        const fields = readStatFields(entry);
-        // fields[0] = state (field 3), fields[2] = pgrp (field 5).
-        if (fields && fields[2] === target && fields[0] !== 'Z')
-            return true;
-    }
-    return false;
-}
-/**
- * Send one signal to a process group, falling back to the bare pid when the
- * pid is not a group leader. Returns null on success, or the error code when
- * neither form could be delivered (ESRCH = nothing left; EPERM = refused).
- */
-export function signalProcessGroup(pgid, signal, kill = defaultKill) {
-    // Every path that ends a lead funnels through here, terminateTeam's included
-    // and the four that bypass it (lead-launch, lead-process-ownership,
-    // session-process-reap, the fleet reap). Recording the deciding path HERE is
-    // what lets the exit line say "daemon-initiated by <path>" for all of them --
-    // and lets "no daemon path claimed this exit" be trustworthy when it appears,
-    // instead of being what the daemon says about its own un-instrumented kills.
-    // First stamp wins, so terminateTeam's more specific one survives a later
-    // SIGKILL escalation.
-    recordTeamShutdownByPid(pgid, resolveTerminateInitiator(new Error().stack));
-    try {
-        kill(-pgid, signal);
-        return null;
-    }
-    catch (groupErr) {
-        try {
-            kill(pgid, signal);
-            return null;
-        }
-        catch (pidErr) {
-            const code = errorCode(pidErr);
-            return code === 'ESRCH' ? errorCode(groupErr) : code;
-        }
-    }
-}
-async function waitForGroupExit(pgid, budgetMs, pollMs, isGroupAlive, sleep) {
-    let waited = 0;
-    while (isGroupAlive(pgid)) {
-        if (waited >= budgetMs)
-            return false;
-        await sleep(pollMs);
-        waited += pollMs;
-    }
-    return true;
-}
-function logOutcome(result, opts, graceMs) {
-    const who = `process group ${result.pgid} of "${opts.label}"`;
-    switch (result.outcome) {
-        case 'already_gone':
-            log.debug(`[process-kill] ${opts.context}: ${who} already gone`);
-            return;
-        case 'exited':
-            log.info(`[process-kill] ${opts.context}: ${who} exited on ${opts.initialSignal ?? 'SIGTERM'}`);
-            return;
-        case 'killed':
-            log.warn(`[process-kill] ${opts.context}: killed ${who} -- it was still running ` +
-                `${opts.initialSignal === 'SIGKILL' ? 'at teardown' : `${Math.round(graceMs / 1000)}s after SIGTERM`} (SIGKILL, confirmed gone)`);
-            return;
-        case 'survived':
-            log.error(`[process-kill] ${opts.context}: ${who} is STILL ALIVE after SIGKILL -- it could not be ended`);
-            return;
-        case 'unsignalable':
-            log.warn(`[process-kill] ${opts.context}: could not signal ${who}: ${result.detail ?? 'unknown reason'}`);
-    }
-}
-/**
- * Begin ending a daemon-spawned process group. The liveness check and the first
- * signal happen SYNCHRONOUSLY, so a synchronous caller (terminateTeam) can read
- * `signalled` at once; the grace, SIGKILL escalation, confirmation, and log run
- * in `result`. Never throws. See the module comment for the ladder.
- */
-export function startProcessGroupTermination(pgid, opts, deps = {}) {
-    const kill = deps.kill ?? defaultKill;
-    const isGroupAlive = deps.isGroupAlive ?? isProcessGroupAlive;
-    const sleep = deps.sleep ?? defaultSleep;
-    const graceMs = opts.graceMs ?? PROCESS_GROUP_GRACE_MS;
-    const confirmMs = opts.confirmMs ?? PROCESS_GROUP_KILL_CONFIRM_MS;
-    const pollMs = opts.pollMs ?? DEFAULT_POLL_MS;
-    const initialSignal = opts.initialSignal ?? 'SIGTERM';
-    const finish = (outcome, detail) => {
-        const result = detail === undefined ? { pgid, outcome } : { pgid, outcome, detail };
-        logOutcome(result, opts, graceMs);
-        return result;
-    };
-    const notSignalled = (outcome, detail) => ({ signalled: false, result: Promise.resolve(finish(outcome, detail)) });
-    if (!Number.isInteger(pgid) || pgid <= 1)
-        return notSignalled('unsignalable', `invalid pid ${pgid}`);
-    if (!isGroupAlive(pgid))
-        return notSignalled('already_gone');
-    const firstErr = signalProcessGroup(pgid, initialSignal, kill);
-    if (firstErr === 'ESRCH')
-        return notSignalled('already_gone');
-    if (firstErr !== null)
-        return notSignalled('unsignalable', `${initialSignal} refused (${firstErr})`);
-    const ladder = async () => {
-        if (initialSignal === 'SIGTERM') {
-            if (await waitForGroupExit(pgid, graceMs, pollMs, isGroupAlive, sleep))
-                return finish('exited');
-            const killErr = signalProcessGroup(pgid, 'SIGKILL', kill);
-            if (killErr !== null && killErr !== 'ESRCH')
-                return finish('unsignalable', `SIGKILL refused (${killErr})`);
-        }
-        if (await waitForGroupExit(pgid, confirmMs, pollMs, isGroupAlive, sleep))
-            return finish('killed');
-        return finish('survived');
-    };
-    return { signalled: true, result: ladder() };
-}
-/** End a daemon-spawned process group and confirm it is gone. Never throws. */
-export function terminateProcessGroup(pgid, opts, deps = {}) {
-    return startProcessGroupTermination(pgid, opts, deps).result;
-}
-//# sourceMappingURL=process-group-kill.js.map

package/dist/spawn/process-group-kill.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-group-kill.js","sourceRoot":"","sources":["../../src/spawn/process-group-kill.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,8EAA8E;AAC9E,6DAA6D;AAC7D,iEAAiE;AACjE,iEAAiE;AACjE,6GAA6G;AAC7G,kEAAkE;AAClE,0DAA0D;AAC1D,6DAA6D;AAC7D,oEAAoE;AACpE,4DAA4D;AAC5D,wDAAwD;AACxD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAE3G,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAE3D,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAEnD,MAAM,eAAe,GAAG,GAAG,CAAC;AA6C5B,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,MAA+C;IAC/E,OAAO,MAAM,CAAC,OAAO,KAAK,cAAc,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED,MAAM,WAAW,GAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1F,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;IAClD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAoB;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,oEAAoE;IACpE,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,2DAA2D;QAC3D,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,MAAsB,EAAE,OAAe,WAAW;IACjG,6EAA6E;IAC7E,oEAAoE;IACpE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,sBAAsB;IACtB,uBAAuB,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,QAAgB,EAChB,MAAc,EACd,YAAuC,EACvC,KAAoC;IAEpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,MAA8B,EAAE,IAA6B,EAAE,OAAe;IAChG,MAAM,GAAG,GAAG,iBAAiB,MAAM,CAAC,IAAI,QAAQ,IAAI,CAAC,KAAK,GAAG,CAAC;IAC9D,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,cAAc;YACjB,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,KAAK,GAAG,eAAe,CAAC,CAAC;YACjE,OAAO;QACT,KAAK,QAAQ;YACX,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,OAAO,KAAK,GAAG,cAAc,IAAI,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;YAChG,OAAO;QACT,KAAK,QAAQ;YACX,GAAG,CAAC,IAAI,CACN,kBAAkB,IAAI,CAAC,OAAO,YAAY,GAAG,2BAA2B;gBACxE,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,iBAAiB,4BAA4B,CACjI,CAAC;YACF,OAAO;QACT,KAAK,UAAU;YACb,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,KAAK,GAAG,wDAAwD,CAAC,CAAC;YAC1G,OAAO;QACT,KAAK,cAAc;YACjB,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,OAAO,sBAAsB,GAAG,KAAK,MAAM,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAAY,EACZ,IAA6B,EAC7B,OAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,6BAA6B,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;IAEtD,MAAM,MAAM,GAAG,CAAC,OAAgC,EAAE,MAAe,EAA0B,EAAE;QAC3F,MAAM,MAAM,GAA2B,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC5G,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,OAAgC,EAAE,MAAe,EAAkC,EAAE,CACzG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAE3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,cAAc,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC,cAAc,EAAE,GAAG,aAAa,aAAa,QAAQ,GAAG,CAAC,CAAC;IAErG,MAAM,MAAM,GAAG,KAAK,IAAqC,EAAE;QACzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChG,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,cAAc,EAAE,oBAAoB,OAAO,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,MAAM,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClG,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,IAA6B,EAC7B,OAA6B,EAAE;IAE/B,OAAO,4BAA4B,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC"}

package/dist/spawn/provider-window.d.ts

@@ -1,39 +0,0 @@
-/**
- * The account a spawn's model calls are billed and limited against.
- *  - anthropic: the claude backend (team spawns and every `claude --print` one-shot).
- *  - openai:    the codex backend on a hosted model.
- *  - local:     a local model (routed through codex, or any other non-hosted
- *               engine). No hosted limit reaches it; nothing records here today.
- */
-export type ModelProvider = 'anthropic' | 'openai' | 'local';
-/** The provider of the claude backend -- the daemon's default engine (backends/registry.ts DEFAULT_BACKEND_ID). */
-export declare const CLAUDE_PROVIDER: ModelProvider;
-/** The provider of the codex backend on a hosted model. */
-export declare const CODEX_PROVIDER: ModelProvider;
-/**
- * The provider a spawn will run on, from its resolved engine id and whether the
- * pass routes a local model. Pure. An engine the daemon does not know as hosted
- * is read as local: it reaches neither hosted account, so neither window may
- * hold it.
- */
-export declare function providerForEngine(engineId: string, localModelSelected?: boolean): ModelProvider;
-/**
- * Record a rate-limit signal on one provider. Returns true when that provider's
- * window is now open (the reset is in the future), false when the signal closed
- * it. Leaves every other provider's window untouched.
- */
-export declare function openProviderWindow(provider: ModelProvider, resetAtMs: number, nowMs?: number): boolean;
-/**
- * The instant a provider's window closes, or null when it is not open. A window
- * whose reset has passed reads as closed and is dropped.
- */
-export declare function providerWindowHoldUntilMs(provider: ModelProvider, nowMs?: number): number | null;
-/**
- * True when any provider's window is open. The spawn gates resolve the provider
- * of the spawn they are about to let through only then: with every window closed
- * no provider holds anything, so the route needs no reading.
- */
-export declare function anyProviderWindowOpen(nowMs?: number): boolean;
-/** Test-only: close every window, as a daemon re-exec starts with none. */
-export declare function __resetProviderWindowsForTests(): void;
-//# sourceMappingURL=provider-window.d.ts.map

package/dist/spawn/provider-window.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-window.d.ts","sourceRoot":"","sources":["../../src/spawn/provider-window.ts"],"names":[],"mappings":"AAgCA;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE7D,mHAAmH;AACnH,eAAO,MAAM,eAAe,EAAE,aAA2B,CAAC;AAE1D,2DAA2D;AAC3D,eAAO,MAAM,cAAc,EAAE,aAAwB,CAAC;AAEtD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,kBAAkB,UAAQ,GAAG,aAAa,CAI7F;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,MAAmB,GAAG,OAAO,CAkBlH;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI,CAQ5G;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,GAAE,MAAmB,GAAG,OAAO,CAKzE;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,IAAI,IAAI,CAErD"}

package/dist/spawn/provider-window.js

@@ -1,99 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/model-unavailable-review-exit.test.ts,
-//   packages/daemon/src/spawn/codex-limit.test.ts, packages/daemon/src/spawn/empty-directive-route.test.ts,
-//   packages/daemon/src/spawn/provider-window.test.ts
-// PINNED-BY-END
-/**
- * Per-provider rate-limit windows.
- *
- * A rate limit belongs to the ACCOUNT that reported it, and the daemon spawns on
- * more than one account: the claude backend runs on Anthropic, the codex backend
- * on OpenAI (or, when a local model is routed through it, on no hosted account
- * at all). Until 2026-09-24 the daemon kept ONE window that every spawn read, so
- * a Claude limit held the Codex review spawns that run on a separate OpenAI
- * account (on mars every review has run on Codex since 2026-09-16), and a Codex
- * limit recorded there would have held the Claude coding teams.
- *
- * So the window is keyed by provider. A limit opens only its own provider's
- * window; a reader names the provider of the spawn it is about to make
- * (providerForEngine, from the spawn's resolved engine and whether a local model
- * is routed) and is held only by that provider's window. A limit on both holds
- * both. Within one provider the semantics are the ones the single window had: a
- * reset in the future opens it until then, the LATER of two open resets binds (a
- * five_hour rejection inside a seven_day window does not shorten it), and a
- * reset already in the past closes it. In-memory only: a restart re-learns it
- * from the provider on the first attempt.
- */
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'spawn-cooldown' });
-/** The provider of the claude backend -- the daemon's default engine (backends/registry.ts DEFAULT_BACKEND_ID). */
-export const CLAUDE_PROVIDER = 'anthropic';
-/** The provider of the codex backend on a hosted model. */
-export const CODEX_PROVIDER = 'openai';
-/**
- * The provider a spawn will run on, from its resolved engine id and whether the
- * pass routes a local model. Pure. An engine the daemon does not know as hosted
- * is read as local: it reaches neither hosted account, so neither window may
- * hold it.
- */
-export function providerForEngine(engineId, localModelSelected = false) {
-    if (engineId === 'claude')
-        return CLAUDE_PROVIDER;
-    if (engineId === 'codex')
-        return localModelSelected ? 'local' : CODEX_PROVIDER;
-    return 'local';
-}
-const windows = new Map();
-/**
- * Record a rate-limit signal on one provider. Returns true when that provider's
- * window is now open (the reset is in the future), false when the signal closed
- * it. Leaves every other provider's window untouched.
- */
-export function openProviderWindow(provider, resetAtMs, nowMs = Date.now()) {
-    const current = windows.get(provider) ?? null;
-    if (!Number.isFinite(resetAtMs) || resetAtMs <= nowMs) {
-        if (current !== null) {
-            log.info(`Provider rate limit (${provider}): window closed (reset instant has passed); ${provider} spawns resume`);
-        }
-        windows.delete(provider);
-        return false;
-    }
-    const next = Math.max(current ?? 0, resetAtMs);
-    if (current !== next) {
-        log.warn(`Provider rate limit (${provider}): holding every ${provider} spawn (teams and one-shots) until ` +
-            `${new Date(next).toISOString()} -- spawns on other providers proceed`);
-    }
-    windows.set(provider, next);
-    return true;
-}
-/**
- * The instant a provider's window closes, or null when it is not open. A window
- * whose reset has passed reads as closed and is dropped.
- */
-export function providerWindowHoldUntilMs(provider, nowMs = Date.now()) {
-    const until = windows.get(provider);
-    if (until === undefined)
-        return null;
-    if (until <= nowMs) {
-        windows.delete(provider);
-        return null;
-    }
-    return until;
-}
-/**
- * True when any provider's window is open. The spawn gates resolve the provider
- * of the spawn they are about to let through only then: with every window closed
- * no provider holds anything, so the route needs no reading.
- */
-export function anyProviderWindowOpen(nowMs = Date.now()) {
-    for (const provider of [...windows.keys()]) {
-        if (providerWindowHoldUntilMs(provider, nowMs) !== null)
-            return true;
-    }
-    return false;
-}
-/** Test-only: close every window, as a daemon re-exec starts with none. */
-export function __resetProviderWindowsForTests() {
-    windows.clear();
-}
-//# sourceMappingURL=provider-window.js.map

package/dist/spawn/provider-window.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-window.js","sourceRoot":"","sources":["../../src/spawn/provider-window.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mFAAmF;AACnF,4GAA4G;AAC5G,sDAAsD;AACtD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAWvD,mHAAmH;AACnH,MAAM,CAAC,MAAM,eAAe,GAAkB,WAAW,CAAC;AAE1D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAkB,QAAQ,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,kBAAkB,GAAG,KAAK;IAC5E,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAClD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;IAC/E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,SAAiB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IACvG,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACtD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,wBAAwB,QAAQ,gDAAgD,QAAQ,gBAAgB,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,wBAAwB,QAAQ,oBAAoB,QAAQ,qCAAqC;YACjG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,uCAAuC,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAuB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;IAC9D,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3C,IAAI,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,8BAA8B;IAC5C,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}