@threadbase-sh/streamer 1.62.0 → 1.64.0

package/dist/services/push/waitingInputNotifier.d.ts

@@ -0,0 +1,41 @@
+import type { ManagedSession } from "../../types";
+import type { ExpoPushMessage, ExpoPushSender } from "./expoPushSender";
+/**
+ * The payload, and why it is this thin.
+ *
+ * It says *which* session wants attention, never *what* the agent said. The
+ * published privacy policy states notification payloads exclude prompts,
+ * terminal output, credentials and conversation content, so `lastOutput` (raw
+ * PTY output) and `sessionName` (derived from the user's first message) are
+ * both deliberately absent — carrying them is what made the Live Activity
+ * payload diverge from that text (RonenMars/threadbase-mobile#636).
+ *
+ * `projectName` and the two ids stay: mobile needs `sessionId` + `serverId` to
+ * route the tap to the session, and a notification that cannot say which
+ * project it is about is not actionable.
+ */
+export declare function waitingInputMessage(session: ManagedSession, serverId: string): ExpoPushMessage;
+export declare class WaitingInputNotifier {
+    private readonly sender;
+    private readonly serverId;
+    private readonly isWatched;
+    /** Sessions with a turn the user started that has not yet been answered. */
+    private openTurn;
+    /**
+     * @param isWatched Whether a client is currently subscribed to this session
+     * over WebSocket. Mobile subscribes while the session screen is open and the
+     * socket dies when the app is backgrounded, so this is the available signal
+     * for "the user is already looking" — and a push to someone already reading
+     * the output is pure noise.
+     */
+    constructor(sender: ExpoPushSender, serverId: string, isWatched: (sessionId: string) => boolean);
+    /**
+     * React to a session status change.
+     *
+     * Fire-and-forget by design: a push must never delay or fail a session
+     * transition, so this returns a promise the caller may ignore and every error
+     * is logged rather than propagated.
+     */
+    onStatusChange(session: ManagedSession, previousStatus?: string): Promise<void>;
+}
+//# sourceMappingURL=waitingInputNotifier.d.ts.map

package/dist/services/push/waitingInputNotifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waitingInputNotifier.d.ts","sourceRoot":"","sources":["../../../src/services/push/waitingInputNotifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAwBxE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAM9F;AAED,qBAAa,oBAAoB;IAY7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAb5B,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAqB;IAErC;;;;;;OAMG;IACH,YACmB,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,EACxD;IAEJ;;;;;;OAMG;IACG,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyCpF;CACF"}

package/dist/services/questions/answersToKeystrokes.d.ts

@@ -0,0 +1,8 @@
+import type { AskQuestion } from "../../types";
+export declare class UnknownOptionError extends Error {
+    readonly question: string;
+    readonly value: string;
+    constructor(question: string, value: string);
+}
+export declare function answersToKeystrokes(questions: AskQuestion[], answers: Record<string, string | string[]>): string;
+//# sourceMappingURL=answersToKeystrokes.d.ts.map

package/dist/services/questions/answersToKeystrokes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"answersToKeystrokes.d.ts","sourceRoot":"","sources":["../../../src/services/questions/answersToKeystrokes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,QAAQ,EAAE,MAAM;aAChB,KAAK,EAAE,MAAM;IAF/B,YACkB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EAI9B;CACF;AAID,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,WAAW,EAAE,EACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,GACzC,MAAM,CAaR"}

package/dist/services/questions/codexGateAnswers.d.ts

@@ -0,0 +1,14 @@
+export type CodexGateType = "hooks" | "trust";
+export interface GateAnswers {
+    codexHooksGate?: "trust_all" | "continue_untrusted";
+    codexTrustGate?: "yes";
+}
+export declare function loadGateAnswers(): GateAnswers;
+export declare function saveGateAnswer<K extends keyof GateAnswers>(key: K, value: GateAnswers[K]): void;
+/**
+ * The digit that answers a gate per the remembered choice, or null when the
+ * user must be asked. Digits are the dialogs' literal on-screen numbers
+ * (probe-verified: a digit keypress selects AND confirms, no Enter needed).
+ */
+export declare function rememberedGateDigit(gate: CodexGateType): string | null;
+//# sourceMappingURL=codexGateAnswers.d.ts.map

package/dist/services/questions/codexGateAnswers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexGateAnswers.d.ts","sourceRoot":"","sources":["../../../src/services/questions/codexGateAnswers.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,cAAc,CAAC,EAAE,WAAW,GAAG,oBAAoB,CAAC;IACpD,cAAc,CAAC,EAAE,KAAK,CAAC;CACxB;AAOD,wBAAgB,eAAe,IAAI,WAAW,CAO7C;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAI/F;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAQtE"}

package/dist/services/questions/codexScreen.d.ts

@@ -0,0 +1,74 @@
+import type { PermissionOption } from "../../types";
+import type { CodexGateType } from "./codexGateAnswers";
+/**
+ * Codex's rendered-screen regexes and predicates: readiness, busy/boot state,
+ * blocking prompts (trust gate, hooks review, usage limits) and the cards built
+ * from them. Pure functions of the rendered lines — no PTY, no session state.
+ *
+ * Lives here rather than in codex-pty-runner.ts for symmetry with the Claude
+ * side, whose equivalents are already in this directory (detectPermissionGate,
+ * detectQuestionFromScreen, detectShellPrompt, parseStatusLine).
+ */
+export declare const CODEX_PROMPT_READY_TEXT = "Ready";
+export declare const CODEX_BUSY_STATUS_RE: RegExp;
+export declare const CODEX_WORKING_STATUS_RE: RegExp;
+export declare const CODEX_MCP_BOOT_RE: RegExp;
+export declare const CODEX_TRUST_GATE_REGEX: RegExp;
+export declare const CODEX_HOOKS_GATE_REGEX: RegExp;
+export declare const CODEX_ACTIVE_WRITER_RE: RegExp;
+/** `failureCode` set on a session killed by the writer-lock detection above. */
+export declare const CODEX_ACTIVE_WRITER_CODE = "codex_active_writer";
+export declare const CODEX_USAGE_LIMIT_RE: RegExp;
+export declare const CODEX_USAGE_RESET_TIP_RE: RegExp;
+export declare const CODEX_RATE_LIMIT_MENU_RE: RegExp;
+export interface CodexBlockingPrompt {
+    prompt: string;
+    detail?: string;
+    options: PermissionOption[];
+    /** Tip-only (not a hard limit / rate-limit menu). Surfaced after a failed turn. */
+    soft?: boolean;
+}
+/**
+ * Detect Codex's rendered command-approval card. This deliberately does not
+ * reuse parseCodexNumberedOptions: the visible 1/2 rows do not answer this
+ * dialog, while `y` and Escape do.
+ */
+export declare function detectCodexCommandApproval(lines: string[]): CodexBlockingPrompt | null;
+/** Parse Codex's numbered TUI menus (`1. …`, `› 2. …`). */
+export declare function parseCodexNumberedOptions(lines: string[]): PermissionOption[];
+/**
+ * Usage-limit errors, the soft "reset available" tip, and the "Approaching
+ * rate limits" model-picker menu. Surfaced over the permission transport so
+ * mobile shows a card instead of spinning forever in `running`.
+ */
+export declare function detectCodexBlockingPrompt(lines: string[]): CodexBlockingPrompt | null;
+/** Last non-blank rendered line — Codex paints the status bar there. */
+export declare function codexStatusBarLine(lines: string[]): string;
+/**
+ * True while the screen shows something that precedes a turn rather than being
+ * one: a blocking gate dialog, or MCP boot progress. Both keep the composer
+ * shut, but neither is the agent doing work — the status-bar half of
+ * codexScreenBlocksComposer cannot tell them apart on its own, and reading
+ * only that half is how the agent phase reported "working" during boot.
+ */
+export declare function codexScreenPreTurn(lines: string[]): boolean;
+/**
+ * True while Codex must not receive composer keystrokes: gate dialogs, MCP
+ * boot progress, or a Starting/Working status bar. Shared by boot detection,
+ * the flat fallback, and mid-session idle re-detect.
+ */
+export declare function codexScreenBlocksComposer(lines: string[]): boolean;
+/** Authoritative Ready: status-bar word present and screen not otherwise busy. */
+export declare function codexScreenShowsReady(lines: string[]): boolean;
+/**
+ * Soft idle for a truncated Ready bar: compose `›` / `>` is up and nothing
+ * busy is on screen. Not used as a sole boot-ready signal on quiet — `›`
+ * appears during Starting — but the flat fallback requires it (or Ready)
+ * before settling so a model-only status line is not mistaken for usable.
+ */
+export declare function codexScreenLooksIdle(lines: string[]): boolean;
+export declare function gateCard(gate: CodexGateType, lines: string[]): {
+    prompt: string;
+    options: PermissionOption[];
+};
+//# sourceMappingURL=codexScreen.d.ts.map

package/dist/services/questions/codexScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexScreen.d.ts","sourceRoot":"","sources":["../../../src/services/questions/codexScreen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;GAQG;AAQH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAI/C,eAAO,MAAM,oBAAoB,QAA6B,CAAC;AAM/D,eAAO,MAAM,uBAAuB,QAAgB,CAAC;AAWrD,eAAO,MAAM,iBAAiB,QAAsC,CAAC;AAOrE,eAAO,MAAM,sBAAsB,QAAwB,CAAC;AAQ5D,eAAO,MAAM,sBAAsB,QAAuB,CAAC;AAa3D,eAAO,MAAM,sBAAsB,QAAwC,CAAC;AAE5E,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAG9D,eAAO,MAAM,oBAAoB,QAA2C,CAAC;AAI7E,eAAO,MAAM,wBAAwB,QAAiC,CAAC;AAGvE,eAAO,MAAM,wBAAwB,QAA6B,CAAC;AAEnE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,mFAAmF;IACnF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAeD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,GAAG,IAAI,CA8CtF;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAS7E;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,mBAAmB,GAAG,IAAI,CAmBrF;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAM3D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAGlE;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAG9D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAM7D;AAUD,wBAAgB,QAAQ,CACtB,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,MAAM,EAAE,GACd;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAqCjD"}

package/dist/services/questions/detectAskUserQuestion.d.ts

@@ -0,0 +1,6 @@
+import type { AskQuestion } from "../../types";
+export declare function detectAskUserQuestion(rawLine: string): {
+    toolUseId: string;
+    questions: AskQuestion[];
+} | null;
+//# sourceMappingURL=detectAskUserQuestion.d.ts.map

package/dist/services/questions/detectAskUserQuestion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectAskUserQuestion.d.ts","sourceRoot":"","sources":["../../../src/services/questions/detectAskUserQuestion.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,aAAa,CAAC;AA4D1D,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GACd;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,WAAW,EAAE,CAAA;CAAE,GAAG,IAAI,CAgBxD"}

package/dist/services/questions/detectPermissionGate.d.ts

@@ -0,0 +1,62 @@
+export interface PermissionOption {
+    /** The real leading number shown on screen (NOT a 1-based array index). */
+    index: number;
+    label: string;
+    /**
+     * Literal keystroke bytes that answer this option, when the number alone
+     * isn't the answer (e.g. a y/N shell prompt answers "y\r"/"n\r", not "1\r").
+     * Additive: OSC-777 gates omit it and the client answers via `index`; the
+     * unstructured shell-prompt path (detectShellPrompt) populates it.
+     */
+    answerKeys?: string;
+}
+export interface PermissionGate {
+    /** Prompt text above the options, e.g. "Claude needs your permission to use Bash". */
+    prompt?: string;
+    /**
+     * The descriptive block above the prompt — the tool title, the command, and any
+     * action description Claude paints inside the gate box (newline-joined). Lets the
+     * client show WHAT is being permitted, not just "Do you want to proceed?".
+     */
+    detail?: string;
+    options: PermissionOption[];
+    /** Index value (the on-screen number) of the `❯`-highlighted option, if any. */
+    cursor?: number;
+}
+/**
+ * Stable content key for de-duping repeated broadcasts of the same gate across
+ * PTY repaint ticks. Includes cursor — moving the on-screen selection is a
+ * real update the client needs, so it must produce a new key.
+ */
+export declare function permissionContentKey(gate: {
+    prompt?: string;
+    detail?: string;
+    options: PermissionOption[];
+    cursor?: number;
+}): string;
+/** True if a raw PTY chunk contains the Claude Code OSC 777 permission notify. */
+export declare function hasPermissionOsc(rawData: string): boolean;
+/**
+ * True if a raw PTY chunk contains the OSC 777 "waiting for your input" notify —
+ * Claude finished its turn. Not a gate: it is the positive signal that any gate
+ * we were tracking is over, which is what lets a stuck card close without
+ * waiting for a prompt marker that will never come.
+ */
+export declare function hasWaitingForInputOsc(rawData: string): boolean;
+/**
+ * Scrape the permission gate's options + prompt from rendered screen lines.
+ * Scrapes the LAST option block on screen, scanning bottom-up: a stale
+ * numbered list sitting in scrollback above the real gate (e.g. Claude's own
+ * prose) matches the same option shape and must not be vacuumed in with it.
+ * Returns null when no numbered options are present (not a gate, or not painted
+ * yet). Pure — no I/O.
+ */
+export declare function scrapePermissionGate(lines: string[]): PermissionGate | null;
+/**
+ * Claim a permission gate from rendered screen lines without an OSC 777.
+ * Returns the scraped gate when the full gate signature is present:
+ * ≥2 numbered options, the gate footer, no Ask-menu footer, and at least one
+ * Yes/No-family option label. Pure — no I/O.
+ */
+export declare function detectGateScreen(lines: string[]): PermissionGate | null;
+//# sourceMappingURL=detectPermissionGate.d.ts.map

package/dist/services/questions/detectPermissionGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectPermissionGate.d.ts","sourceRoot":"","sources":["../../../src/services/questions/detectPermissionGate.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAIT;AAwBD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAkBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,GAAG,IAAI,CAgD3E;AA4CD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,GAAG,IAAI,CAOvE"}

package/dist/services/questions/detectQuestionFromScreen.d.ts

@@ -0,0 +1,30 @@
+import type { AskQuestion } from "../../types";
+/**
+ * Detect an AskUserQuestion menu in rendered screen lines. Returns the question
+ * set (single-question; the TUI shows one picker at a time) or null.
+ * Pure — no I/O.
+ */
+export declare function detectQuestionFromScreen(lines: string[]): {
+    questions: AskQuestion[];
+} | null;
+/**
+ * True when the rendered screen is the AskUserQuestion "Ready to submit your
+ * answers?" confirmation (a question line + a "Submit answers" option under the
+ * Ask footer). Pure — no I/O. Retained as a classifier (e.g. for analytics);
+ * the submit screen now renders as a normal card.
+ */
+export declare function isSubmitConfirmationScreen(lines: string[]): boolean;
+/**
+ * True when an AskUserQuestion menu is still painted on the rendered screen.
+ * Cheaper and far more forgiving than detectQuestionFromScreen: it asks only
+ * "is the picker up?", so a menu whose options wrap oddly still reads as
+ * present. Used to reject an answer for a menu that already closed. Pure.
+ */
+export declare function isQuestionMenuOnScreen(lines: string[]): boolean;
+/**
+ * Stable content key for de-duping a screen-scraped question against the JSONL
+ * detection of the same question (they share no toolUseId). Keyed on the
+ * question text + option labels.
+ */
+export declare function questionContentKey(questions: AskQuestion[]): string;
+//# sourceMappingURL=detectQuestionFromScreen.d.ts.map

package/dist/services/questions/detectQuestionFromScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectQuestionFromScreen.d.ts","sourceRoot":"","sources":["../../../src/services/questions/detectQuestionFromScreen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,aAAa,CAAC;AA0D1D;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,SAAS,EAAE,WAAW,EAAE,CAAA;CAAE,GAAG,IAAI,CAoE7F;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAYnE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,MAAM,CAInE"}

package/dist/services/questions/detectShellPrompt.d.ts

@@ -0,0 +1,18 @@
+export interface ShellPromptOption {
+    /** Positional fallback number (1-based). Authoritative answer is `answerKeys`. */
+    index: number;
+    label: string;
+    /** The exact bytes to send to answer this option, e.g. "y\r" or "2\r". */
+    answerKeys: string;
+}
+export interface ShellPrompt {
+    prompt: string;
+    options: ShellPromptOption[];
+}
+/**
+ * Scrape an unstructured shell prompt from rendered screen lines. Returns null
+ * when the tail isn't a recognised prompt (prose, Claude's own UI, empty).
+ * Pure — no I/O.
+ */
+export declare function detectShellPrompt(lines: string[]): ShellPrompt | null;
+//# sourceMappingURL=detectShellPrompt.d.ts.map

package/dist/services/questions/detectShellPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectShellPrompt.d.ts","sourceRoot":"","sources":["../../../src/services/questions/detectShellPrompt.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAgCD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,GAAG,IAAI,CA2ErE"}

package/dist/services/questions/parseAgentPhase.d.ts

@@ -0,0 +1,12 @@
+import type { ProviderName } from "../../providers";
+import type { AgentPhase } from "../../types";
+/**
+ * Derive the agent's phase from a rendered screen.
+ *
+ * An unrecognised provider yields `null` rather than falling back to a
+ * provider-specific grammar. `getTerminalChromeFilter` already establishes that
+ * instinct — "prefer passthrough over wrong Claude filters" — and the opposite
+ * default is what let a wrong grammar run against the wrong provider in #647.
+ */
+export declare function parseAgentPhase(lines: string[], provider: ProviderName): AgentPhase | null;
+//# sourceMappingURL=parseAgentPhase.d.ts.map

package/dist/services/questions/parseAgentPhase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseAgentPhase.d.ts","sourceRoot":"","sources":["../../../src/services/questions/parseAgentPhase.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgC9C;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,GAAG,UAAU,GAAG,IAAI,CAI1F"}

package/dist/services/questions/parseStatusLine.d.ts

@@ -0,0 +1,19 @@
+export interface StatusLineInfo {
+    /** e.g. "Opus 4.8 (1M context)" or "Sonnet 5". */
+    model?: string;
+    /** e.g. "high" — the reasoning-effort tier. */
+    effort?: string;
+    /** e.g. "accept edits on" — the active permission mode. */
+    permissionMode?: string;
+}
+/**
+ * Extract model / effort / permission mode from rendered screen lines.
+ * Returns an empty object when the footer isn't on screen — callers treat every
+ * field as optional, so a missed parse degrades to "not reported" rather than
+ * throwing or inventing a value.
+ *
+ * Scans from the bottom: the footer is the last thing painted, and older
+ * scrollback can contain text that looks like a footer row.
+ */
+export declare function parseStatusLine(lines: string[]): StatusLineInfo;
+//# sourceMappingURL=parseStatusLine.d.ts.map

package/dist/services/questions/parseStatusLine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseStatusLine.d.ts","sourceRoot":"","sources":["../../../src/services/questions/parseStatusLine.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAwB/D"}

package/dist/services/questions/questionBroadcast.d.ts

@@ -0,0 +1,18 @@
+import type { AskQuestion, WSMessage } from "../../types";
+export interface PendingQuestion {
+    toolUseId: string;
+    questions: AskQuestion[];
+}
+export declare function questionsFromLines(sessionId: string, lines: string[]): {
+    messages: Extract<WSMessage, {
+        type: "question";
+    }>[];
+    pending: PendingQuestion[];
+};
+export declare function shouldBroadcastQuestion(args: {
+    newContentKey: string;
+    lastContentKey: string | undefined;
+    newToolUseId: string;
+    priorToolUseId: string | undefined;
+}): boolean;
+//# sourceMappingURL=questionBroadcast.d.ts.map

package/dist/services/questions/questionBroadcast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"questionBroadcast.d.ts","sourceRoot":"","sources":["../../../src/services/questions/questionBroadcast.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG1D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAID,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EAAE,GACd;IACD,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,EAAE,CAAC;IACrD,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B,CAgBA;AAaD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,GAAG,OAAO,CAIV"}

package/dist/services/questions/resolveAnswer.d.ts

@@ -0,0 +1,16 @@
+import type { AskQuestion } from "../../types";
+export type AnswerResolution = {
+    ok: true;
+    keys: string;
+} | {
+    ok: false;
+    reason: "no_pending_question" | "tool_use_mismatch" | "unknown_option";
+};
+export declare function resolveAnswer(pending: {
+    toolUseId: string;
+    questions: AskQuestion[];
+} | undefined, body: {
+    toolUseId?: unknown;
+    answers?: unknown;
+}): AnswerResolution;
+//# sourceMappingURL=resolveAnswer.d.ts.map

package/dist/services/questions/resolveAnswer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveAnswer.d.ts","sourceRoot":"","sources":["../../../src/services/questions/resolveAnswer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,gBAAgB,CAAA;CAAE,CAAC;AAE1F,wBAAgB,aAAa,CAC3B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,WAAW,EAAE,CAAA;CAAE,GAAG,SAAS,EACpE,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/C,gBAAgB,CAYlB"}

package/dist/services/search/searchQuery.d.ts

@@ -0,0 +1,78 @@
+import type { ProviderName } from "../../providers";
+/**
+ * Search query parsing, pagination, and filters (C8).
+ *
+ * `/api/search` returned `{ hasMore: false, offset: 0, total: results.length }`
+ * with all three values hardcoded. That was not merely unimplemented — it was
+ * actively wrong: the scanner truncates at `limit`, so a query with more matches
+ * than the limit reported `hasMore: false` and `total` equal to the truncated
+ * count. A client had no way to learn that results were missing, let alone
+ * fetch them.
+ *
+ * The scanner also already computes a relevance `score` and match `snippets`
+ * per result, and the endpoint discarded both — so results arrived in an
+ * unexplained order with no indication of *why* anything matched.
+ */
+export declare const DEFAULT_SEARCH_LIMIT = 50;
+export declare const MAX_SEARCH_LIMIT = 200;
+export declare const MAX_QUERY_LENGTH = 256;
+export interface SearchFilters {
+    provider?: ProviderName;
+    projectPath?: string;
+    branch?: string;
+    /** Inclusive lower bound on last activity, epoch ms. */
+    since?: number;
+    /** Inclusive upper bound on last activity, epoch ms. */
+    until?: number;
+}
+export interface ParsedSearchQuery {
+    q: string;
+    limit: number;
+    offset: number;
+    filters: SearchFilters;
+}
+export declare class SearchQueryError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/**
+ * Parse and validate search parameters.
+ *
+ * Rejects rather than silently clamping an invalid query, so a client that
+ * mistypes a filter learns about it instead of receiving plausible-looking
+ * results for a query it did not mean. `limit` is the exception: it is clamped,
+ * because an over-large limit is a resource question rather than a
+ * misunderstanding, and failing a search over it would be unhelpful.
+ */
+export declare function parseSearchQuery(params: URLSearchParams): ParsedSearchQuery;
+/** A search result as returned to clients, after adaptation. */
+export interface AdaptedResult {
+    projectPath?: string;
+    branch?: string;
+    provider?: string;
+    lastActivity?: string | number | null;
+}
+/**
+ * Apply the filters the scanner cannot express itself.
+ *
+ * The scanner's SearchOptions supports `provider` but not project, branch, or
+ * date bounds, so those are applied here. Filtering after the fact means the
+ * scanner's own limit must be raised before slicing — see `handleSearch` — or
+ * a filter would silently drop results that a later page should have contained.
+ */
+export declare function applyFilters<T extends AdaptedResult>(results: T[], filters: SearchFilters): T[];
+export interface Page<T> {
+    items: T[];
+    total: number;
+    offset: number;
+    hasMore: boolean;
+}
+/**
+ * Slice a filtered result set into a page.
+ *
+ * `total` is the count AFTER filtering and BEFORE slicing, and `hasMore` is
+ * derived from it — the two values the previous implementation hardcoded to
+ * `results.length` and `false`.
+ */
+export declare function paginate<T>(results: T[], offset: number, limit: number): Page<T>;
+//# sourceMappingURL=searchQuery.d.ts.map

package/dist/services/search/searchQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchQuery.d.ts","sourceRoot":"","sources":["../../../src/services/search/searchQuery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,MAAM,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFvB,YACE,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,MAAM,EAGtB;CACF;AAQD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,GAAG,iBAAiB,CAiD3E;AAED,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACvC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,CAAC,EAAE,CAgB/F;AAED,MAAM,WAAW,IAAI,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAQhF"}

package/dist/services/security/capabilities.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Scoped device capabilities (C5).
+ * See docs/architecture/2026-07-24-device-identity-and-capabilities.md.
+ *
+ * Authorization was all-or-nothing: authMiddleware asked one question — is this
+ * token the API key — and answered 401 or full access. A device paired merely to
+ * glance at session status held exactly the authority of the one driving the
+ * agent, because there was only ever one credential and no principal to scope.
+ */
+export declare const CAPABILITIES: readonly ["history:read", "session:control", "fs:browse", "fs:upload", "notifications", "admin"];
+export type Capability = (typeof CAPABILITIES)[number];
+export declare function isCapability(value: unknown): value is Capability;
+/**
+ * Every capability, `admin` included. What a normal driving device gets.
+ *
+ * It withheld `admin` originally, on the reasoning that a device should run the
+ * agent without being able to rotate credentials or revoke its siblings. That is
+ * a sound rule for a server shared between people, and this one is not: the
+ * phone IS the administration surface. Mobile's paired-devices screen
+ * (`GET /api/devices`), backup and restore (`/api/backup/*`) and the model and
+ * effort settings (`/api/config/claude-flags`) are all admin-gated, so a device
+ * without `admin` loses four working screens the moment it starts presenting its
+ * own token instead of the shared key.
+ *
+ * `read-only` is where the narrowing lives, and it still does.
+ */
+export declare const FULL_CAPABILITIES: Capability[];
+/**
+ * Read-only monitoring. The mode that makes a "just show me what's happening"
+ * device safe to pair, and the one C5 explicitly calls for.
+ */
+export declare const READ_ONLY_CAPABILITIES: Capability[];
+export type CapabilityPreset = "full" | "read-only";
+export declare function capabilitiesForPreset(preset: CapabilityPreset): Capability[];
+/**
+ * The principal behind a request.
+ *
+ * `legacy` is the shared API key: it predates device identity, so it carries the
+ * full preset and no device id. Keeping it working is what lets this ship
+ * without breaking every already-paired device.
+ */
+export interface Principal {
+    kind: "device" | "legacy";
+    deviceId?: string;
+    capabilities: Capability[];
+}
+export declare function legacyPrincipal(): Principal;
+export declare function hasCapability(principal: Principal, required: Capability): boolean;
+export declare function requiredCapability(path: string, method: string): Capability | null;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/services/security/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/services/security/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,YAAY,YACvB,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,eAAe,EACf,OAAO,CACC,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,EAOzC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,UAAU,EAAqB,CAAC;AAErE,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,CAAC;AAEpD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,EAAE,CAE5E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED,wBAAgB,eAAe,IAAI,SAAS,CAM3C;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,GAAG,OAAO,CAEjF;AAgED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAgBlF"}

package/dist/services/sessions/autoResumeOnBoot.d.ts

@@ -0,0 +1,28 @@
+import type { ManagedSessionRow } from "../../db/repositories/managed-sessions.repository";
+/** Only a recent restart is eligible for unattended recovery. */
+export declare const AUTO_RESUME_WINDOW_MS: number;
+/** Hard ceiling for unattended agent starts during one boot. */
+export declare const AUTO_RESUME_MAX = 5;
+/** At most two provider processes may be starting at once. */
+export declare const AUTO_RESUME_CONCURRENCY = 2;
+/** Keep successive starts from landing on the host in the same instant. */
+export declare const AUTO_RESUME_STAGGER_MS = 500;
+export type AutoResumeSkipReason = "not_shutdown" | "not_interrupted" | "too_old" | "project_missing" | "resume_identity_missing" | "history_missing";
+export interface AutoResumeOptions {
+    now: number;
+    projectExists: (projectPath: string) => boolean;
+    historyExists: (row: ManagedSessionRow) => boolean;
+}
+/** Why a persisted row must remain a user-driven resume, or null when eligible. */
+export declare function autoResumeSkipReason(row: ManagedSessionRow, opts: AutoResumeOptions): AutoResumeSkipReason | null;
+export interface AutoResumePlan {
+    attempts: ManagedSessionRow[];
+    skipped: Array<{
+        row: ManagedSessionRow;
+        reason: AutoResumeSkipReason;
+    }>;
+    overflow: ManagedSessionRow[];
+}
+/** Preserve repository order while applying eligibility and the per-boot ceiling. */
+export declare function planAutoResume(rows: ManagedSessionRow[], opts: AutoResumeOptions): AutoResumePlan;
+//# sourceMappingURL=autoResumeOnBoot.d.ts.map

package/dist/services/sessions/autoResumeOnBoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoResumeOnBoot.d.ts","sourceRoot":"","sources":["../../../src/services/sessions/autoResumeOnBoot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mDAAmD,CAAC;AAG3F,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD,gEAAgE;AAChE,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,iBAAiB,GACjB,SAAS,GACT,iBAAiB,GACjB,yBAAyB,GACzB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,aAAa,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC;CACpD;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,iBAAiB,GACtB,oBAAoB,GAAG,IAAI,CAQ7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,iBAAiB,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACzE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,iBAAiB,GAAG,cAAc,CAejG"}

package/dist/services/sessions/codexRolloutOwner.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Who is holding a Codex rollout JSONL open right now.
+ *
+ * Codex enforces a single-writer rule per rollout and only reports it *after*
+ * `codex resume` has started ("already has an active writer (code -32600)"),
+ * by which point the streamer has already spawned a PTY and answered 201. The
+ * heuristic pre-flight in conversationBusy.ts cannot see that owner: a Codex
+ * process need not carry the rollout UUID in its argv, and a quiet-but-owned
+ * rollout has an mtime well outside the busy window (the 2026-08-09 incident:
+ * pid 9935 held the file open with an mtime older than 120 s).
+ *
+ * An open file handle on the exact rollout is direct evidence of the condition
+ * Codex itself rejects, so it is the one pre-spawn signal worth paying for.
+ *
+ * It is an OPTIMISATION, never a proof of the negative: `lsof` is POSIX-only,
+ * may be absent, may be denied, and cannot see another user's process. A null
+ * result means "no evidence", and the caller must still rely on the
+ * authoritative post-spawn handshake.
+ */
+/** Hard cap on the probe. Resume is latency-sensitive — a slow lsof is a miss. */
+export declare const ROLLOUT_OWNER_TIMEOUT_MS = 800;
+/**
+ * How the owning process is best described to a client.
+ *
+ * Only a process whose command is exactly `codex` is classified, and even then
+ * only as "terminal". A VS Code / desktop `codex app-server` can host several
+ * unrelated threads, so mis-labelling one as a standalone TUI is what would
+ * make a destructive recovery action look safe. Everything else stays
+ * "unknown", and no takeover is ever offered from this signal.
+ */
+export type CodexOwnerSource = "terminal" | "unknown";
+export interface CodexRolloutOwner {
+    pid: number;
+    command: string;
+    source: CodexOwnerSource;
+}
+export interface FindRolloutOwnerOptions {
+    platform?: NodeJS.Platform;
+    timeoutMs?: number;
+    /** Our own pid — the streamer's handles on the file are not a collision. */
+    selfPid?: number;
+    /** Injection point for tests; defaults to a bounded `lsof` call. */
+    run?: (rolloutPath: string, timeoutMs: number) => Promise<string>;
+}
+/** Parse `lsof -F pc` output into (pid, command) pairs, in file order. */
+export declare function parseLsofFieldOutput(stdout: string): Array<{
+    pid: number;
+    command: string;
+}>;
+/**
+ * First foreign process holding `rolloutPath` open, or null when there is no
+ * evidence of one (no match, unsupported platform, missing/denied/slow lsof).
+ */
+export declare function findRolloutOwner(rolloutPath: string, options?: FindRolloutOwnerOptions): Promise<CodexRolloutOwner | null>;
+//# sourceMappingURL=codexRolloutOwner.d.ts.map

package/dist/services/sessions/codexRolloutOwner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexRolloutOwner.d.ts","sourceRoot":"","sources":["../../../src/services/sessions/codexRolloutOwner.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnE;AA2CD,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAa5F;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAsBnC"}