@timurproko/a1 0.1.8-dev.277 → 0.1.8-dev.282

package/dist/foundation/supervision/server.d.ts

@@ -1,7 +1,17 @@
+import { rename, rm, writeFile } from "node:fs/promises";
 import { type SupervisorSnapshot } from "../lifecycle/index.js";
 import { type MaterializedRelease } from "../release/index.js";
 import { ControlStore } from "../storage/index.js";
 import { type ProductPaths } from "./paths.js";
+interface EndpointMetadataCommitOperations {
+    readonly platform?: NodeJS.Platform;
+    readonly write?: typeof writeFile;
+    readonly replace?: typeof rename;
+    readonly remove?: typeof rm;
+    readonly wait?: (delayMs: number) => Promise<void>;
+}
+/** Atomically replaces endpoint metadata while tolerating bounded Windows reader sharing. */
+export declare function commitEndpointMetadata(path: string, source: string, operations?: EndpointMetadataCommitOperations): Promise<void>;
 /** Owns one release-cohort endpoint and the authenticated launch instances registered through it. */
 export declare class SupervisorServer {
     #private;
@@ -38,3 +48,4 @@ export declare class SupervisorServer {
     close(stopAgents?: boolean): Promise<void>;
     closeForReleaseReplacement(stopAgents: boolean): Promise<void>;
 }
+export {};

package/dist/foundation/supervision/server.js

@@ -9,6 +9,36 @@ import { processIsAlive } from "../release/index.js";
 import { ControlStore } from "../storage/index.js";
 import { resolveProductPaths } from "./paths.js";
 import { PRODUCT_IDENTITY, PRODUCT_TEXT } from "../../product-identity.js";
+const WINDOWS_METADATA_REPLACE_RETRY_DELAYS_MS = [5, 10, 20, 40, 80, 160];
+/** Atomically replaces endpoint metadata while tolerating bounded Windows reader sharing. */
+export async function commitEndpointMetadata(path, source, operations = {}) {
+    const temporary = `${path}.${process.pid}.tmp`;
+    const write = operations.write ?? writeFile;
+    const replace = operations.replace ?? rename;
+    const remove = operations.remove ?? rm;
+    const wait = operations.wait ?? (delayMs => new Promise(resolvePromise => setTimeout(resolvePromise, delayMs)));
+    let committed = false;
+    try {
+        await write(temporary, source, { mode: 0o600 });
+        for (let attempt = 0;; attempt += 1) {
+            try {
+                await replace(temporary, path);
+                committed = true;
+                return;
+            }
+            catch (error) {
+                const delayMs = WINDOWS_METADATA_REPLACE_RETRY_DELAYS_MS[attempt];
+                if ((operations.platform ?? platform()) !== "win32" || delayMs === undefined || !isWindowsSharingViolation(error))
+                    throw error;
+                await wait(delayMs);
+            }
+        }
+    }
+    finally {
+        if (!committed)
+            await remove(temporary, { force: true }).catch(() => undefined);
+    }
+}
 /** Owns one release-cohort endpoint and the authenticated launch instances registered through it. */
 export class SupervisorServer {
     store;
@@ -464,11 +494,10 @@ export class SupervisorServer {
                 uncertainInstanceIds: [...this.#uncertainInstances],
             },
         };
-        const temporary = `${this.paths.endpointMetadataPath}.${process.pid}.tmp`;
-        this.#metadataWrites = this.#metadataWrites.then(async () => {
-            await writeFile(temporary, JSON.stringify(metadata, null, 2), { mode: 0o600 });
-            await rename(temporary, this.paths.endpointMetadataPath);
-        });
+        const commit = () => commitEndpointMetadata(this.paths.endpointMetadataPath, JSON.stringify(metadata, null, 2));
+        // Platform: one exhausted filesystem replacement must fail its command, but it must not
+        // poison every later ownership revision after the sharing condition has cleared.
+        this.#metadataWrites = this.#metadataWrites.then(commit, commit);
         return this.#metadataWrites;
     }
     #send(socket, message) {
@@ -492,6 +521,10 @@ function sameContainmentIdentity(left, right) {
 function isMessageType(value, type) {
     return typeof value === "object" && value !== null && "type" in value && value.type === type;
 }
+function isWindowsSharingViolation(error) {
+    return error instanceof Error && "code" in error
+        && (error.code === "EPERM" || error.code === "EACCES" || error.code === "EBUSY");
+}
 async function ensureManagedEndpointDirectory(path) {
     await mkdir(path, { recursive: true, mode: 0o700 });
     const metadata = await lstat(path);

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:25:38.527Z",
+  "builtAt": "2026-09-08T08:10:40.090Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "dc03605e5780e2aeebb4ecafd62868dc673e22ddd38b024a369aff704ff136dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:25:31.488Z",
+  "builtAt": "2026-09-08T08:10:24.232Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "ee8a00eaaf79c707459bbbfb52518e9739314967049fbe5fa625f36ce33db9ee",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-07T08:27:38.736Z",
+  "builtAt": "2026-09-08T08:11:13.440Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "96f8b06771b8295aa89e52c773efb62d4a128ac71e0588875c603376ba58c3a0",
+    "sha256": "b6daac4921fa900e544d9db45f85177267934415ecdf2935c2d6d1ae8bc59b0a",
     "size": 177664
   },
   "provenance": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.277",
+  "version": "0.1.8-dev.282",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "packageManager": "npm@11.13.0",