@vincenthanxiaodu/pi-web 1.202608.1

package/dist/server/sessiond/sessionDaemonShutdown.js

@@ -0,0 +1,31 @@
+/** Quiesces ingress, disposes consumers, then tears down plugin providers and dependencies. */
+export async function runSessionDaemonShutdown(options) {
+    const { dependencies } = options;
+    const operations = [
+        ["quiesce server", () => dependencies.quiesceServer()],
+        // Between quiescing and disposal: no new work can arrive, and the runs
+        // already underway get a bounded chance to finish. An agent turn cannot be
+        // resumed after the process exits, so not interrupting it is the only way a
+        // restart is non-disruptive.
+        ...(dependencies.drainActiveWork === undefined
+            ? []
+            : [["drain active work", () => dependencies.drainActiveWork?.()]]),
+        ["dispose terminals", () => dependencies.terminals.dispose()],
+        ["dispose catalog refresher", () => dependencies.catalogRefresher.dispose()],
+        ["dispose sessions", () => dependencies.sessions.dispose()],
+        ["close server", () => dependencies.closeServer()],
+        ["stop server plugins", () => dependencies.serverPlugins.stop()],
+        ["dispose auth", () => dependencies.auth.dispose()],
+        ["flush session unread state", () => dependencies.unreadStore.flush()],
+    ];
+    for (const [operation, run] of operations) {
+        try {
+            await run();
+        }
+        catch (error) {
+            options.onFailure?.();
+            options.logger.error({ err: error, operation }, "session daemon shutdown operation failed");
+        }
+    }
+}
+//# sourceMappingURL=sessionDaemonShutdown.js.map

package/dist/server/sessiond/sessionDaemonShutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionDaemonShutdown.js","sourceRoot":"","sources":["../../../src/server/sessiond/sessionDaemonShutdown.ts"],"names":[],"mappings":"AA2BA,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAqC;IAClF,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACjC,MAAM,UAAU,GAA+D;QAC7E,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;QACtD,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,6BAA6B;QAC7B,GAAG,CAAC,YAAY,CAAC,eAAe,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAU,CAAC,CAAC;QAC7E,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC3D,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QAClD,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;QAChE,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;KACvE,CAAC;IAEF,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,0CAA0C,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/sessiond/sessionProxyRoutes.js

@@ -0,0 +1,61 @@
+import { WebSocket } from "ws";
+import { SessionDaemonClient, } from "../../sessiond/sessionDaemonClient.js";
+export function registerSessionProxyRoutes(app, daemon = new SessionDaemonClient(), prefix = "/api") {
+    const proxy = async (request, reply) => {
+        try {
+            const upstream = await daemon.request(request.method, stripPrefix(request.url, prefix), request.body);
+            reply.code(upstream.statusCode);
+            const contentType = upstream.headers["content-type"];
+            if (contentType !== undefined && contentType !== "")
+                reply.header("content-type", contentType);
+            return upstream.body !== "" ? parseJson(upstream.body) : undefined;
+        }
+        catch (error) {
+            requestFailed(reply, error);
+            return undefined;
+        }
+    };
+    app.get(`${prefix}/sessiond/health`, (_request, reply) => proxy({ method: "GET", url: `${prefix}/health` }, reply));
+    app.get(`${prefix}/sessiond/runtime`, (_request, reply) => proxy({ method: "GET", url: `${prefix}/runtime` }, reply));
+    app.get(`${prefix}/sessions/:sessionId/events`, { websocket: true }, (socket, request) => {
+        bridgeSockets(socket, daemon.connectWebSocket(stripPrefix(request.url, prefix)));
+    });
+    app.get(`${prefix}/sessions/events`, { websocket: true }, (socket) => {
+        bridgeSockets(socket, daemon.connectWebSocket("/sessions/events"));
+    });
+    app.get(`${prefix}/events`, { websocket: true }, (socket) => {
+        bridgeSockets(socket, daemon.connectWebSocket("/events"));
+    });
+    app.all(`${prefix}/status`, (request, reply) => proxy(request, reply));
+    app.all(`${prefix}/auth`, (request, reply) => proxy(request, reply));
+    app.all(`${prefix}/auth/*`, (request, reply) => proxy(request, reply));
+    app.all(`${prefix}/sessions`, (request, reply) => proxy(request, reply));
+    app.all(`${prefix}/sessions/*`, (request, reply) => proxy(request, reply));
+}
+function stripPrefix(url, prefix) {
+    const path = url.split("?", 1)[0] ?? url;
+    const query = url.slice(path.length);
+    const stripped = path.startsWith(prefix) ? `${path.slice(prefix.length)}${query}` : url;
+    return stripped === "" ? "/" : stripped;
+}
+function parseJson(text) {
+    const value = JSON.parse(text);
+    return value;
+}
+function requestFailed(reply, error) {
+    reply.code(502).send({ error: `Session daemon unavailable: ${error instanceof Error ? error.message : String(error)}` });
+}
+function bridgeSockets(client, upstream) {
+    client.on("message", (data) => { sendIfOpen(upstream, data); });
+    upstream.on("message", (data) => { sendIfOpen(client, data); });
+    client.on("close", () => { upstream.close(); });
+    upstream.on("close", () => { client.close(); });
+    upstream.on("error", () => { client.close(); });
+    client.on("error", () => { upstream.close(); });
+}
+function sendIfOpen(socket, data) {
+    if (socket.readyState === WebSocket.OPEN) {
+        socket.send(data);
+    }
+}
+//# sourceMappingURL=sessionProxyRoutes.js.map

package/dist/server/sessiond/sessionProxyRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/sessiond/sessionProxyRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAgB,MAAM,IAAI,CAAC;AAC7C,OAAO,EACL,mBAAmB,GAEpB,MAAM,uCAAuC,CAAC;AAY/C,MAAM,UAAU,0BAA0B,CAAC,GAAoB,EAAE,SAA6B,IAAI,mBAAmB,EAAE,EAAE,MAAM,GAAG,MAAM;IACtI,MAAM,KAAK,GAAG,KAAK,EAAE,OAAwD,EAAE,KAAmB,EAAE,EAAE;QACpG,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACtG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACrD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC/F,OAAO,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,kBAAkB,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACpH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,mBAAmB,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAEtH,GAAG,CAAC,GAAG,CAAoC,GAAG,MAAM,6BAA6B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAC1H,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;QACnE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1D,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,MAAc;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACxF,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB,EAAE,KAAc;IACxD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3H,CAAC;AAED,SAAS,aAAa,CAAC,MAAiB,EAAE,QAAmB;IAC3D,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,MAAiB,EAAE,IAAa;IAClD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/server/sessiond/sessionServiceDependencies.js

@@ -0,0 +1,34 @@
+/**
+ * Map sessiond's constructed collaborators onto the session service's
+ * dependencies.
+ *
+ * Extracted from `sessiond.ts`, which starts a daemon as an import side effect
+ * and so cannot be loaded by a test. This function performs no side effects and
+ * constructs nothing, so lifting it changes no startup ordering; it exists only
+ * so a test can build a service the way the daemon does and assert what a user
+ * is actually told.
+ */
+export function sessionServiceDependencies(input) {
+    return {
+        modelRuntime: input.modelRuntime,
+        agentDir: input.agentDir,
+        archiveStore: input.archiveStore,
+        workspaceActivity: input.workspaceActivity,
+        logger: input.logger,
+        ...(input.spawnTargets === undefined ? {} : { spawnTargets: input.spawnTargets }),
+        // Tracked subsessions share the spawn capability's project-scope resolver,
+        // so they stay off unless spawning is configured too.
+        subsessionsEnabled: input.spawnTargets !== undefined && input.subsessionsEnabled,
+        askUserEnabled: input.askUserEnabled,
+        appendSystemPromptSections: input.appendSystemPromptSections,
+        extensionDialogsTimeoutMs: input.extensionDialogsTimeoutMs,
+        notificationStore: input.notificationStore,
+        unreadStore: input.unreadStore,
+        onUnreadChanged: input.onUnreadChanged,
+        // Read-only, so session startup can tell a waiting user that provider
+        // model lists are refreshing at the same time.
+        catalogRefreshStatus: input.catalogRefreshStatus,
+        sessionManager: input.sessionManager,
+    };
+}
+//# sourceMappingURL=sessionServiceDependencies.js.map

package/dist/server/sessiond/sessionServiceDependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionServiceDependencies.js","sourceRoot":"","sources":["../../../src/server/sessiond/sessionServiceDependencies.ts"],"names":[],"mappings":"AAmCA;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAoC;IAC7E,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,2EAA2E;QAC3E,sDAAsD;QACtD,kBAAkB,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,kBAAkB;QAChF,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,sEAAsE;QACtE,+CAA+C;QAC/C,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;AACJ,CAAC"}

package/dist/server/sessiond/sessiondStateOwnership.js

@@ -0,0 +1,235 @@
+/**
+ * Session daemon state ownership.
+ *
+ * The session daemon is the authority over a pi-web instance's durable state:
+ * projects, machines, session archives, and unread state all live in the data
+ * directory, and the daemon is the only process allowed to own it while
+ * running (the web/API process of the same instance shares the directory but
+ * never claims it). A second daemon resolving the same data directory would
+ * corrupt that state silently, so the daemon records its ownership in
+ * `<data dir>/sessiond-owner.json` at startup and refuses to start while a
+ * live owner holds the marker.
+ *
+ * Liveness uses the owning process's Linux `/proc` start-time ticks when both
+ * the marker and the probe have them: the recorded value distinguishes the
+ * original owner from a reused pid — including the same numeric pid in a
+ * recreated container's fresh PID namespace — so stale markers never block
+ * startup and live owners always do. Otherwise it falls back to a
+ * `kill(pid, 0)` probe. Detection is scoped to one PID namespace; two daemons
+ * in different containers sharing one data volume cannot see each other's
+ * processes, an operator error no pid-based mechanism can catch.
+ *
+ * Service and `tsx watch` restarts briefly overlap the outgoing daemon, so a
+ * claimant that finds a live owner waits a short grace for the owner to
+ * release (orderly shutdown removes the marker) before failing. When the
+ * owner persists past the grace window, startup fails with a
+ * {@link SessiondStateOwnershipConflictError} naming the owner and the
+ * configuration a second instance needs: a distinct `PI_WEB_DATA_DIR`,
+ * `PI_WEB_SESSIOND_SOCKET` (or `PI_WEB_SESSIOND_PORT` / `PI_WEB_SESSIOND_HOST`),
+ * and web port.
+ */
+import { readFileSync } from "node:fs";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { piWebDataDir } from "../../config.js";
+import { sessiondEndpointDescription } from "../../sessiond/config.js";
+/** Marker file recording the owning daemon, inside the instance data directory. */
+export const SESSIOND_OWNER_MARKER_FILENAME = "sessiond-owner.json";
+/**
+ * The daemon could not start because a live session daemon owns the state this
+ * one resolved. The message is the user- and agent-facing remediation, so it
+ * names the owner and the distinct configuration a second instance needs.
+ */
+export class SessiondStateOwnershipConflictError extends Error {
+    constructor(options) {
+        const { dataDir, markerPath, owner } = options;
+        super(`another pi-web session daemon already owns this state\n\n` +
+            `The data directory "${dataDir}" is owned by a live session daemon ` +
+            `(pid ${String(owner.pid)}, started ${owner.startedAt}, listening on ${owner.endpoint}; ` +
+            `ownership marker ${markerPath}). Two daemons sharing one data directory corrupt each other's state.\n\n` +
+            `To run a second pi-web instance, give it its own state and endpoints:\n` +
+            `- PI_WEB_DATA_DIR: a different data directory\n` +
+            `- PI_WEB_SESSIOND_SOCKET (or PI_WEB_SESSIOND_PORT / PI_WEB_SESSIOND_HOST): a different session daemon endpoint\n` +
+            `- PI_WEB_PORT: a different web/API port\n\n` +
+            `If pid ${String(owner.pid)} is not a running pi-web session daemon, remove the stale marker file and start again.`);
+        this.name = "SessiondStateOwnershipConflictError";
+        this.dataDir = dataDir;
+        this.owner = owner;
+    }
+}
+const DEFAULT_GRACE_MS = 15_000;
+const DEFAULT_POLL_INTERVAL_MS = 250;
+/**
+ * Claim ownership of the instance data directory for this daemon.
+ *
+ * Resolves once the marker records this daemon; throws
+ * {@link SessiondStateOwnershipConflictError} when a live owner persists past
+ * the grace window.
+ */
+export async function claimSessiondStateOwnership(options) {
+    const ownPid = options.ownPid ?? process.pid;
+    const isAlive = options.isAlive ?? isOwnershipRecordAlive;
+    const graceMs = options.graceMs ?? DEFAULT_GRACE_MS;
+    const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+    const sleep = options.sleep ?? defaultSleep;
+    const logger = options.logger;
+    const dataDir = options.dataDir ?? piWebDataDir(options.env);
+    const markerPath = join(dataDir, SESSIOND_OWNER_MARKER_FILENAME);
+    const processStartTime = readProcessStartTime(ownPid);
+    const record = {
+        pid: ownPid,
+        startedAt: new Date().toISOString(),
+        ...(processStartTime === undefined ? {} : { processStartTime }),
+        endpoint: sessiondEndpointDescription(options.env),
+    };
+    await mkdir(dataDir, { recursive: true });
+    const deadline = Date.now() + graceMs;
+    let waitedForOwner = false;
+    for (;;) {
+        const existing = await readOwnershipRecord(markerPath);
+        if (existing !== undefined && existing !== "invalid") {
+            if (existing.pid !== ownPid && isAlive(existing)) {
+                // A live different owner: wait out the grace window for an orderly
+                // restart to release, then fail loudly.
+                if (Date.now() >= deadline) {
+                    throw new SessiondStateOwnershipConflictError({ dataDir, markerPath, owner: existing });
+                }
+                if (!waitedForOwner) {
+                    logger?.warn({ markerPath, owner: existing }, "another live session daemon owns this state; waiting briefly for it to release ownership");
+                    waitedForOwner = true;
+                }
+                await sleep(pollIntervalMs);
+                continue;
+            }
+            if (existing.pid !== ownPid) {
+                logger?.info({ markerPath, previousOwner: existing }, "taking over session daemon state ownership from a stale marker");
+            }
+            await rm(markerPath, { force: true });
+        }
+        else if (existing === "invalid") {
+            // Possibly a torn write by a claimant mid-create; give it the grace
+            // window to finish before discarding the marker.
+            if (Date.now() < deadline) {
+                await sleep(pollIntervalMs);
+                continue;
+            }
+            logger?.warn({ markerPath }, "discarding an unreadable session daemon ownership marker");
+            await rm(markerPath, { force: true });
+        }
+        // No live owner holds the marker: claim it exclusively. The loser of a
+        // create race re-reads and re-evaluates the winner's marker above.
+        try {
+            await writeFile(markerPath, `${JSON.stringify(record, null, 2)}\n`, { flag: "wx" });
+            return {
+                markerPath,
+                record,
+                release: () => releaseOwnershipMarker(markerPath, record, logger),
+            };
+        }
+        catch (error) {
+            if (!isErrorCode(error, "EEXIST"))
+                throw error;
+        }
+    }
+}
+/** Parse marker content; `"invalid"` when it is not a readable ownership record. */
+export function parseOwnershipRecord(content) {
+    try {
+        const value = JSON.parse(content);
+        if (!isRecord(value))
+            return "invalid";
+        if (typeof value["pid"] !== "number" || typeof value["startedAt"] !== "string" || typeof value["endpoint"] !== "string") {
+            return "invalid";
+        }
+        if (value["processStartTime"] !== undefined && typeof value["processStartTime"] !== "string")
+            return "invalid";
+        return {
+            pid: value["pid"],
+            startedAt: value["startedAt"],
+            ...(value["processStartTime"] === undefined ? {} : { processStartTime: value["processStartTime"] }),
+            endpoint: value["endpoint"],
+        };
+    }
+    catch {
+        return "invalid";
+    }
+}
+/**
+ * Whether the process a marker records is still that same running process.
+ *
+ * With both the recorded and the current `/proc` start time available, a
+ * mismatch pins down pid reuse; otherwise the pid probe is all there is.
+ */
+export function isOwnershipRecordAlive(record) {
+    const currentStartTime = readProcessStartTime(record.pid);
+    if (currentStartTime !== undefined && record.processStartTime !== undefined) {
+        return currentStartTime === record.processStartTime;
+    }
+    return isProcessAlive(record.pid);
+}
+/**
+ * Linux-only precise process identity: `/proc/<pid>/stat` field 22 (start time
+ * in clock ticks since boot). `undefined` off Linux or when the process is
+ * gone. The `comm` field may contain spaces and parentheses, so parsing starts
+ * after its closing parenthesis.
+ */
+export function readProcessStartTime(pid) {
+    try {
+        const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+        const closeParen = stat.lastIndexOf(")");
+        if (closeParen === -1)
+            return undefined;
+        const afterComm = stat.slice(closeParen + 2).split(" ");
+        return afterComm[19];
+    }
+    catch {
+        return undefined;
+    }
+}
+async function readOwnershipRecord(markerPath) {
+    let content;
+    try {
+        content = await readFile(markerPath, "utf8");
+    }
+    catch (error) {
+        if (isErrorCode(error, "ENOENT"))
+            return undefined;
+        throw error;
+    }
+    return parseOwnershipRecord(content);
+}
+async function releaseOwnershipMarker(markerPath, record, logger) {
+    try {
+        const current = await readOwnershipRecord(markerPath);
+        if (current === undefined || current === "invalid")
+            return;
+        // Remove only our own marker: pid plus the wall-clock start makes a newer
+        // owner that reused the pid after a takeover race safe from deletion.
+        if (current.pid === record.pid && current.startedAt === record.startedAt) {
+            await rm(markerPath, { force: true });
+        }
+    }
+    catch (error) {
+        logger?.warn({ err: error, markerPath }, "could not release the session daemon ownership marker; the next start discards it as stale");
+    }
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        // EPERM means the process exists but belongs to someone else.
+        return isErrorCode(error, "EPERM");
+    }
+}
+function defaultSleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isErrorCode(error, code) {
+    return isRecord(error) && error["code"] === code;
+}
+//# sourceMappingURL=sessiondStateOwnership.js.map

package/dist/server/sessiond/sessiondStateOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessiondStateOwnership.js","sourceRoot":"","sources":["../../../src/server/sessiond/sessiondStateOwnership.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAEvE,mFAAmF;AACnF,MAAM,CAAC,MAAM,8BAA8B,GAAG,qBAAqB,CAAC;AAepE;;;;GAIG;AACH,MAAM,OAAO,mCAAoC,SAAQ,KAAK;IAI5D,YAAY,OAAqF;QAC/F,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC/C,KAAK,CACH,2DAA2D;YACzD,uBAAuB,OAAO,sCAAsC;YACpE,QAAQ,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,SAAS,kBAAkB,KAAK,CAAC,QAAQ,IAAI;YACzF,oBAAoB,UAAU,2EAA2E;YACzG,yEAAyE;YACzE,iDAAiD;YACjD,kHAAkH;YAClH,6CAA6C;YAC7C,UAAU,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,wFAAwF,CACtH,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qCAAqC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAkCD,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAA2C;IAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACpD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAiC;QAC3C,GAAG,EAAE,MAAM;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC/D,QAAQ,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC;KACnD,CAAC;IACF,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACrD,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,mEAAmE;gBACnE,wCAAwC;gBACxC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,mCAAmC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBACD,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,MAAM,EAAE,IAAI,CACV,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC/B,0FAA0F,CAC3F,CAAC;oBACF,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBACD,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,EAAE,IAAI,CACV,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,EACvC,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,oEAAoE;YACpE,iDAAiD;YACjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,0DAA0D,CAAC,CAAC;YACzF,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,OAAO;gBACL,UAAU;gBACV,MAAM;gBACN,OAAO,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC;aAClE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,kBAAkB,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,kBAAkB,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC/G,OAAO;YACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;YACjB,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;YAC7B,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnG,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;SAC5B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAsE;IAC3G,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC5E,OAAO,gBAAgB,KAAK,MAAM,CAAC,gBAAgB,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IACnD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAAkB,EAClB,MAAoC,EACpC,MAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAC3D,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACzE,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,4FAA4F,CAAC,CAAC;IACzI,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,8DAA8D;QAC9D,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;AACnD,CAAC"}

package/dist/server/sessiond/workspaceCatalogRoutes.js

@@ -0,0 +1,31 @@
+/** Internal sessiond protocol; browser-facing routes consume it through a typed client. */
+export function registerWorkspaceCatalogRoutes(app, dependencies, prefix = "/workspace-catalog") {
+    app.get(`${prefix}/provider-runtime`, () => dependencies.providerRuntime);
+    app.get(`${prefix}/projects/:projectId/workspaces`, async (request, reply) => {
+        try {
+            const project = await dependencies.projects.requireProject(request.params.projectId);
+            return await dependencies.workspaces.resolve(project);
+        }
+        catch (error) {
+            return catalogRequestFailed(reply, error);
+        }
+    });
+    app.get(`${prefix}/projects/:projectId/workspaces/:workspaceId`, async (request, reply) => {
+        try {
+            const project = await dependencies.projects.requireProject(request.params.projectId);
+            const resolution = await dependencies.workspaces.resolve(project);
+            const workspace = resolution.workspaces.find((candidate) => candidate.id === request.params.workspaceId);
+            if (workspace === undefined)
+                return await reply.code(404).send({ error: "Workspace not found" });
+            return workspace;
+        }
+        catch (error) {
+            return catalogRequestFailed(reply, error);
+        }
+    });
+}
+function catalogRequestFailed(reply, error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return reply.code(message === "Project not found" ? 404 : 500).send({ error: message });
+}
+//# sourceMappingURL=workspaceCatalogRoutes.js.map

package/dist/server/sessiond/workspaceCatalogRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceCatalogRoutes.js","sourceRoot":"","sources":["../../../src/server/sessiond/workspaceCatalogRoutes.ts"],"names":[],"mappings":"AAmBA,2FAA2F;AAC3F,MAAM,UAAU,8BAA8B,CAC5C,GAAoB,EACpB,YAA+C,EAC/C,MAAM,GAAG,oBAAoB;IAE7B,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,mBAAmB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAE1E,GAAG,CAAC,GAAG,CAAoC,GAAG,MAAM,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrF,OAAO,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAyD,GAAG,MAAM,8CAA8C,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChJ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzG,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACjG,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB,EAAE,KAAc;IAC/D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/server/sessiond/workspaceRemovalRoutes.js

@@ -0,0 +1,41 @@
+import { parseWorkspaceRemovalRequest, WORKSPACE_REMOVAL_REQUEST_BODY_MAX_BYTES, } from "../../shared/workspaceRemovalProtocol.js";
+import { requestCancellation } from "../requestCancellation.js";
+import { workspaceRemovalHttpStatus } from "../workspaces/workspaceRemovalService.js";
+/** Internal sessiond endpoint for host-orchestrated provider workspace removal. */
+export function registerWorkspaceRemovalRoutes(app, dependencies, prefix = "/workspace-removals") {
+    app.delete(`${prefix}/projects/:projectId/workspaces/:workspaceId`, { bodyLimit: WORKSPACE_REMOVAL_REQUEST_BODY_MAX_BYTES }, async (request, reply) => {
+        let precondition;
+        try {
+            precondition = parseWorkspaceRemovalRequest(request.body).precondition;
+        }
+        catch (error) {
+            return reply.code(400).send({ error: errorMessage(error) });
+        }
+        let project;
+        try {
+            project = await dependencies.projects.requireProject(request.params.projectId);
+        }
+        catch (error) {
+            const message = errorMessage(error);
+            return reply.code(message === "Project not found" ? 404 : 500).send({ error: message });
+        }
+        const cancellation = requestCancellation(request, reply);
+        try {
+            return await dependencies.removals.remove(project, request.params.workspaceId, precondition, cancellation.signal);
+        }
+        catch (error) {
+            return await removalRequestFailed(reply, error);
+        }
+        finally {
+            dependencies.onWorkspacesMutated();
+            cancellation.dispose();
+        }
+    });
+}
+function removalRequestFailed(reply, error) {
+    return reply.code(workspaceRemovalHttpStatus(error)).send({ error: errorMessage(error) });
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=workspaceRemovalRoutes.js.map

package/dist/server/sessiond/workspaceRemovalRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceRemovalRoutes.js","sourceRoot":"","sources":["../../../src/server/sessiond/workspaceRemovalRoutes.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,4BAA4B,EAC5B,wCAAwC,GACzC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AA0BtF,mFAAmF;AACnF,MAAM,UAAU,8BAA8B,CAC5C,GAAoB,EACpB,YAA+C,EAC/C,MAAM,GAAG,qBAAqB;IAE9B,GAAG,CAAC,MAAM,CACR,GAAG,MAAM,8CAA8C,EACvD,EAAE,SAAS,EAAE,wCAAwC,EAAE,EACvD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,CACvC,OAAO,EACP,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,YAAY,EACZ,YAAY,CAAC,MAAM,CACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,mBAAmB,EAAE,CAAC;YACnC,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAmB,EAAE,KAAc;IAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}