@with-logic/elwood 0.1.0

package/dist/runtime/update-lock.js

@@ -0,0 +1,183 @@
+/**
+ * Cross-process lease for globally mutating agent updates.
+ * Implements PRD §9.2, C-LIFE-09, and C-PERF-04: separate Elwood hosts for
+ * one macOS user serialize per-adapter updates and recover a killed owner's lease.
+ */
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, rename, rmdir, stat, unlink, writeFile } from "node:fs/promises";
+import { userInfo } from "node:os";
+import { join } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { errnoCode } from "../core/errors.js";
+const defaultPollMs = 50;
+const defaultStaleMs = 30_000;
+const ownerFile = "owner";
+function defaultLeaseRoot() {
+    const user = userInfo();
+    return join(user.homedir, "Library", "Caches", "elwood", `${user.uid}-updates`);
+}
+export function updateLockPath(adapter, root = defaultLeaseRoot()) {
+    return join(root, `${adapter}.lock`);
+}
+/**
+ * Runs `update` only for the lease owner. A contender waits until that owner
+ * settles and then returns without a duplicate update; callers re-read version
+ * state after this resolves. Waiting uses timers, never a blocking filesystem loop.
+ */
+export async function coordinatedAutoupdate(adapter, update, options = {}) {
+    const root = options.root ?? defaultLeaseRoot();
+    const path = updateLockPath(adapter, root);
+    const pollMs = options.pollMs ?? defaultPollMs;
+    const staleMs = options.staleMs ?? defaultStaleMs;
+    await mkdir(root, { recursive: true, mode: 0o700 });
+    await chmod(root, 0o700);
+    const owner = { pid: process.pid, token: randomUUID() };
+    const completion = join(root, `${adapter}.completed`);
+    const priorCompletion = await readCompletion(completion);
+    const observedActive = (await pathExists(path)) || (await pathExists(recoveryPath(path)));
+    let recoveredStale = false;
+    while (!(await claimLease(path, owner))) {
+        const waited = await waitForOwner(path, pollMs, staleMs);
+        if (waited === "released")
+            return;
+        recoveredStale = true;
+    }
+    if (!recoveredStale &&
+        (observedActive || (await readCompletion(completion)) !== priorCompletion)) {
+        await releaseLease(path, owner);
+        return;
+    }
+    try {
+        await update();
+    }
+    finally {
+        await Promise.allSettled([writeFile(completion, owner.token, { mode: 0o600 })]);
+        await releaseLease(path, owner);
+    }
+}
+async function claimLease(path, owner) {
+    if (await pathExists(recoveryPath(path)))
+        return false;
+    try {
+        await mkdir(path, { mode: 0o700 });
+    }
+    catch {
+        return false;
+    }
+    try {
+        await writeFile(join(path, ownerFile), serializeOwner(owner), { flag: "wx", mode: 0o600 });
+        if (await pathExists(recoveryPath(path))) {
+            await releaseLease(path, owner);
+            return false;
+        }
+        return true;
+    }
+    catch {
+        await rmdir(path).catch(() => undefined);
+        return false;
+    }
+}
+async function waitForOwner(path, pollMs, staleMs) {
+    for (;;) {
+        let lease;
+        try {
+            lease = await stat(path);
+        }
+        catch {
+            if (await restoreRecovery(path))
+                continue;
+            return "released";
+        }
+        if (Date.now() - lease.mtimeMs >= staleMs) {
+            const recovered = await recoverStaleLease(path);
+            if (recovered === "removed")
+                return "stale_removed";
+            if (recovered === "unrecoverable")
+                return "released";
+        }
+        await delay(pollMs);
+    }
+}
+async function recoverStaleLease(path) {
+    const expected = await readOwner(path);
+    if (expected !== undefined && ownerIsAlive(expected.pid))
+        return "alive";
+    const recovery = recoveryPath(path);
+    try {
+        await rename(path, recovery);
+    }
+    catch {
+        return (await pathExists(recovery)) ? "alive" : "unrecoverable";
+    }
+    const moved = await readOwner(recovery);
+    if (expected?.token !== moved?.token || (moved !== undefined && ownerIsAlive(moved.pid))) {
+        return "unrecoverable";
+    }
+    try {
+        if (moved !== undefined)
+            await unlink(join(recovery, ownerFile));
+        await rmdir(recovery);
+        return "removed";
+    }
+    catch {
+        return "unrecoverable";
+    }
+}
+async function restoreRecovery(path) {
+    try {
+        await rename(recoveryPath(path), path);
+        return true;
+    }
+    catch {
+        return pathExists(path);
+    }
+}
+function recoveryPath(path) {
+    return `${path}.recovery`;
+}
+async function pathExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function releaseLease(path, owner) {
+    const current = await readOwner(path);
+    if (current?.token !== owner.token)
+        return;
+    await unlink(join(path, ownerFile)).catch(() => undefined);
+    await rmdir(path).catch(() => undefined);
+}
+async function readOwner(path) {
+    try {
+        const match = /^(\d+):([0-9a-f-]+)$/.exec(await readFile(join(path, ownerFile), "utf8"));
+        return match ? { pid: Number(match[1]), token: match[2] } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function readCompletion(path) {
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+function serializeOwner(owner) {
+    return `${owner.pid}:${owner.token}`;
+}
+function ownerIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return errnoCode(error) !== "ESRCH";
+    }
+}
+//# sourceMappingURL=update-lock.js.map

package/dist/runtime/update-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-lock.js","sourceRoot":"","sources":["../../src/runtime/update-lock.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAU9C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,SAAS,GAAG,OAAO,CAAC;AAI1B,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,IAAI,GAAG,gBAAgB,EAAE;IAC9E,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAsB,EACtB,MAA2B,EAC3B,UAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAClD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAuB,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,YAAY,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,OAAO,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO;QAClC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,IACE,CAAC,cAAc;QACf,CAAC,cAAc,IAAI,CAAC,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC,KAAK,eAAe,CAAC,EAC1E,CAAC;QACD,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAiB;IACvD,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,IAAI,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,MAAc,EACd,OAAe;IAEf,SAAS,CAAC;QACR,IAAI,KAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1C,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,eAAe,CAAC;YACpD,IAAI,SAAS,KAAK,eAAe;gBAAE,OAAO,UAAU,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACzE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,KAAK,KAAK,KAAK,EAAE,KAAK,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzF,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,GAAG,IAAI,WAAW,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAiB;IACzD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO;IAC3C,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;IACtC,CAAC;AACH,CAAC"}

package/dist/runtime/update-once.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Process-local autoupdate/cache guard layered over the cross-process update lease.
+ * Implements PRD §9.2 fleet-spawn dedupe, version caching, and the best-effort,
+ * never-poisoning update contract (C-LIFE-09, C-LIFE-11).
+ */
+import type { CommandResult } from "./seams.ts";
+import { coordinatedAutoupdate, type UpdateAdapter } from "./update-lock.ts";
+/** The outcome of a best-effort autoupdate: it NEVER rejects — a failure is a value. */
+export type AutoupdateOutcome = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly error: unknown;
+};
+/**
+ * Runs the adapter's update at most once per process; concurrent callers share the single
+ * in-flight attempt. NEVER rejects — a throwing `runUpdate` resolves to `{ok:false, error}` so the
+ * caller can contain it (warn + continue). The cross-process coordinator invalidates the local
+ * version cache whether this process owned the update or waited for a peer.
+ */
+export declare function cachedAutoupdate(adapter: UpdateAdapter, runUpdate: () => Promise<void>, afterAttempt?: () => void): Promise<AutoupdateOutcome>;
+/**
+ * Reads the adapter's `--version` at most once per process. Concurrent first callers share the
+ * single in-flight read; later callers reuse the settled result. A REJECTED read is evicted (not
+ * retained), so a transient failure does not poison later callers — they re-attempt. Invalidated
+ * after an autoupdate so the post-update version is re-read.
+ */
+export declare function cachedVersionRead(adapter: UpdateAdapter, read: () => Promise<CommandResult>): Promise<CommandResult>;
+export declare function invalidateVersionRead(adapter: UpdateAdapter): void;
+/**
+ * Share one in-flight promise per key, but EVICT the entry if it rejects, so a rejected result is
+ * never retained/replayed to a later caller (which would poison the process). A successful result
+ * stays cached for the process lifetime. This is the general guard against the "cached rejected
+ * promise poisons every later caller" class of bug (C-LIFE-11).
+ */
+export declare function dedupeInFlight<K, T>(cache: Map<K, Promise<T>>, key: K, run: () => Promise<T>): Promise<T>;
+export declare function resetAutoupdateForTests(): void;
+export declare function setUpdateCoordinatorForTests(coordinator: typeof coordinatedAutoupdate): void;
+export declare function resetPreflightCacheForTests(): void;
+//# sourceMappingURL=update-once.d.ts.map

package/dist/runtime/update-once.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-once.d.ts","sourceRoot":"","sources":["../../src/runtime/update-once.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAI7E,wFAAwF;AACxF,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAQpD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC9B,YAAY,CAAC,EAAE,MAAM,IAAI,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAsBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,GACjC,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAElE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EACzB,GAAG,EAAE,CAAC,EACN,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C;AAED,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,OAAO,qBAAqB,GAAG,IAAI,CAK5F;AAED,wBAAgB,2BAA2B,IAAI,IAAI,CAElD"}

package/dist/runtime/update-once.js

@@ -0,0 +1,88 @@
+/**
+ * Process-local autoupdate/cache guard layered over the cross-process update lease.
+ * Implements PRD §9.2 fleet-spawn dedupe, version caching, and the best-effort,
+ * never-poisoning update contract (C-LIFE-09, C-LIFE-11).
+ */
+import { coordinatedAutoupdate } from "./update-lock.js";
+let coordinateUpdate = coordinatedAutoupdate;
+// The settled autoupdate outcome per adapter. Every `autoupdate: true` caller awaits the SAME
+// attempt (concurrent roster spawns run one update); a FAILURE is recorded as a resolved
+// `{ok:false}` value, NOT a rejected promise — so one failed update can neither reject the other
+// concurrent callers nor poison a later start (C-LIFE-09, C-LIFE-11). Best-effort → not retried.
+const autoupdates = new Map();
+/**
+ * Runs the adapter's update at most once per process; concurrent callers share the single
+ * in-flight attempt. NEVER rejects — a throwing `runUpdate` resolves to `{ok:false, error}` so the
+ * caller can contain it (warn + continue). The cross-process coordinator invalidates the local
+ * version cache whether this process owned the update or waited for a peer.
+ */
+export function cachedAutoupdate(adapter, runUpdate, afterAttempt) {
+    const existing = autoupdates.get(adapter);
+    if (existing)
+        return existing;
+    const pending = coordinateUpdate(adapter, runUpdate).then(() => finalizeAutoupdate(adapter, { ok: true }, afterAttempt), (error) => finalizeAutoupdate(adapter, { ok: false, error }, afterAttempt));
+    autoupdates.set(adapter, pending);
+    return pending;
+}
+function finalizeAutoupdate(adapter, outcome, afterAttempt) {
+    try {
+        // A failed installer may still have changed the binary. Invalidate after
+        // every attempt, including a peer-owned or failed one, before validation.
+        invalidateVersionRead(adapter);
+        afterAttempt?.();
+        return outcome;
+    }
+    catch (error) {
+        return { ok: false, error };
+    }
+}
+// The in-flight/settled `--version` read per adapter. Caching the PROMISE (not the value) means N
+// concurrent first spawns share ONE subprocess rather than each starting its own.
+const versionReads = new Map();
+/**
+ * Reads the adapter's `--version` at most once per process. Concurrent first callers share the
+ * single in-flight read; later callers reuse the settled result. A REJECTED read is evicted (not
+ * retained), so a transient failure does not poison later callers — they re-attempt. Invalidated
+ * after an autoupdate so the post-update version is re-read.
+ */
+export function cachedVersionRead(adapter, read) {
+    return dedupeInFlight(versionReads, adapter, read);
+}
+export function invalidateVersionRead(adapter) {
+    versionReads.delete(adapter);
+}
+/**
+ * Share one in-flight promise per key, but EVICT the entry if it rejects, so a rejected result is
+ * never retained/replayed to a later caller (which would poison the process). A successful result
+ * stays cached for the process lifetime. This is the general guard against the "cached rejected
+ * promise poisons every later caller" class of bug (C-LIFE-11).
+ */
+export function dedupeInFlight(cache, key, run) {
+    const existing = cache.get(key);
+    if (existing)
+        return existing;
+    const pending = run();
+    cache.set(key, pending);
+    // Evict on rejection so the next caller retries rather than inheriting the failure. Identity-
+    // guarded (only evict if THIS promise is still cached), so a later successful entry is never
+    // clobbered. The `.catch` also keeps the eviction chain from becoming an unhandled rejection.
+    pending.catch(() => {
+        if (cache.get(key) === pending)
+            cache.delete(key);
+    });
+    return pending;
+}
+export function resetAutoupdateForTests() {
+    autoupdates.clear();
+    coordinateUpdate = coordinatedAutoupdate;
+}
+export function setUpdateCoordinatorForTests(coordinator) {
+    // Unit tests provide in-memory command runners and must never contend with a
+    // real desktop host's global update lease. Cross-process coverage calls the
+    // production coordinator directly from fresh child processes.
+    coordinateUpdate = coordinator;
+}
+export function resetPreflightCacheForTests() {
+    versionReads.clear();
+}
+//# sourceMappingURL=update-once.js.map

package/dist/runtime/update-once.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-once.js","sourceRoot":"","sources":["../../src/runtime/update-once.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,qBAAqB,EAAsB,MAAM,kBAAkB,CAAC;AAE7E,IAAI,gBAAgB,GAAiC,qBAAqB,CAAC;AAO3E,8FAA8F;AAC9F,yFAAyF;AACzF,iGAAiG;AACjG,iGAAiG;AACjG,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6C,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAsB,EACtB,SAA8B,EAC9B,YAAyB;IAEzB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CACvD,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,YAAY,CAAC,EAC7D,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,CAAC,CAC3E,CAAC;IACF,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAsB,EACtB,OAA0B,EAC1B,YAAyB;IAEzB,IAAI,CAAC;QACH,yEAAyE;QACzE,0EAA0E;QAC1E,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,YAAY,EAAE,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,kFAAkF;AAClF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAyC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,IAAkC;IAElC,OAAO,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAsB;IAC1D,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAyB,EACzB,GAAM,EACN,GAAqB;IAErB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;IACtB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxB,8FAA8F;IAC9F,6FAA6F;IAC7F,8FAA8F;IAC9F,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QACjB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,gBAAgB,GAAG,qBAAqB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,WAAyC;IACpF,6EAA6E;IAC7E,4EAA4E;IAC5E,8DAA8D;IAC9D,gBAAgB,GAAG,WAAW,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/state/files.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Secure state path and file helpers for Elwood metadata.
+ * Implements PRD §6.2 and §8.2.
+ */
+export declare function newBridgeToken(): string;
+export declare function assertSessionId(id: string): void;
+export declare function safeSessionDir(stateDir: string, id: string): string;
+export declare function secureMkdir(path: string): void;
+export declare function sharedMkdir(path: string): void;
+export declare function writeSharedFile(path: string, content: string): void;
+export declare function writePrivateFile(path: string, content: string): void;
+/**
+ * Rename-atomic, fsync-backed private write (§8.2). The temp name carries a random
+ * suffix as well as the pid so two writers in one process (or a recycled pid) never
+ * share a temp file; on any failure the temp file is removed so a crashed write
+ * leaves no `*.tmp-*` litter beside the record.
+ */
+export declare function writePrivateFileAtomic(path: string, content: string): void;
+export declare function fsyncDir(path: string): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/state/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/state/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiBH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAIhD;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG9C;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG9C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAInE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAIpE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAkB1E;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQ3C"}

package/dist/state/files.js

@@ -0,0 +1,78 @@
+/**
+ * Secure state path and file helpers for Elwood metadata.
+ * Implements PRD §6.2 and §8.2.
+ */
+import { randomUUID } from "node:crypto";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { elwoodError } from "../core/errors.js";
+export function newBridgeToken() {
+    return randomUUID();
+}
+export function assertSessionId(id) {
+    if (!/^[A-Za-z0-9._-]+$/.test(id) || id === "." || id === "..") {
+        throw elwoodError("state_not_found", `Invalid Elwood session id: ${id}`);
+    }
+}
+export function safeSessionDir(stateDir, id) {
+    assertSessionId(id);
+    const root = resolve(stateDir);
+    return join(root, "sessions", id);
+}
+export function secureMkdir(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    chmodSync(path, 0o700);
+}
+export function sharedMkdir(path) {
+    mkdirSync(path, { recursive: true, mode: 0o755 });
+    chmodSync(path, 0o755);
+}
+export function writeSharedFile(path, content) {
+    sharedMkdir(dirname(path));
+    writeFileSync(path, content, { mode: 0o644 });
+    chmodSync(path, 0o644);
+}
+export function writePrivateFile(path, content) {
+    secureMkdir(dirname(path));
+    writeFileSync(path, content, { mode: 0o600 });
+    chmodSync(path, 0o600);
+}
+/**
+ * Rename-atomic, fsync-backed private write (§8.2). The temp name carries a random
+ * suffix as well as the pid so two writers in one process (or a recycled pid) never
+ * share a temp file; on any failure the temp file is removed so a crashed write
+ * leaves no `*.tmp-*` litter beside the record.
+ */
+export function writePrivateFileAtomic(path, content) {
+    secureMkdir(dirname(path));
+    const tmp = `${path}.tmp-${process.pid}-${randomUUID().slice(0, 8)}`;
+    try {
+        const fd = openSync(tmp, "w", 0o600);
+        try {
+            writeFileSync(fd, content);
+            fsyncSync(fd);
+        }
+        finally {
+            closeSync(fd);
+        }
+        renameSync(tmp, path);
+    }
+    catch (error) {
+        rmSync(tmp, { force: true });
+        throw error;
+    }
+    chmodSync(path, 0o600);
+    fsyncDir(dirname(path));
+}
+export function fsyncDir(path) {
+    if (!existsSync(path))
+        return;
+    const fd = openSync(path, "r");
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/state/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/state/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,WAAW,CAAC,iBAAiB,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,EAAU;IACzD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAe;IAC3D,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAClE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3B,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/state/launch-posture.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Persisted launch posture: the resolved privilege and tool policy a session
+ * launched with. Implements PRD §5.2, §5.6, §8.2, C-STATE-13, and C-API-32.
+ */
+import type { CodexApprovalPolicy, CodexSandboxMode } from "../codex/session/types.ts";
+import type { ClaudePermissionMode, ClaudeToolRule } from "../core/types.ts";
+import type { SessionRecord } from "./store.ts";
+export type ClaudeLaunchPosture = {
+    readonly permissionMode?: ClaudePermissionMode;
+    readonly allowedTools?: readonly ClaudeToolRule[];
+    readonly disallowedTools?: readonly ClaudeToolRule[];
+    readonly tools?: readonly ClaudeToolRule[];
+};
+export type CodexLaunchPosture = {
+    readonly sandbox?: CodexSandboxMode;
+    readonly approvalPolicy?: CodexApprovalPolicy;
+};
+export type AdapterState<Posture> = {
+    readonly resumeId?: string;
+    readonly launch?: Posture;
+};
+export declare function compact<T extends object>(posture: {
+    [K in keyof T]: T[K] | undefined;
+}): T | undefined;
+export declare function claudeLaunchPosture(options: ClaudeLaunchPosture): ClaudeLaunchPosture | undefined;
+export declare function codexLaunchPosture(options: CodexLaunchPosture): CodexLaunchPosture | undefined;
+export declare function withClaudeLaunch(record: SessionRecord, launch: ClaudeLaunchPosture | undefined): SessionRecord;
+export declare function withCodexLaunch(record: SessionRecord, launch: CodexLaunchPosture | undefined): SessionRecord;
+/** Caller options override the persisted posture field by field (C-API-32). */
+export declare function effectivePosture<T extends object>(persisted: T | undefined, requested: T | undefined): T | undefined;
+//# sourceMappingURL=launch-posture.d.ts.map

package/dist/state/launch-posture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-posture.d.ts","sourceRoot":"","sources":["../../src/state/launch-posture.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACvF,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,YAAY,CAAC,OAAO,IAAI;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,wBAAgB,OAAO,CAAC,CAAC,SAAS,MAAM,EACtC,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS;CAAE,GAC5C,CAAC,GAAG,SAAS,CAGf;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,SAAS,CAajG;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAG9F;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACtC,aAAa,CAGf;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,aAAa,CAGf;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAC/C,SAAS,EAAE,CAAC,GAAG,SAAS,EACxB,SAAS,EAAE,CAAC,GAAG,SAAS,GACvB,CAAC,GAAG,SAAS,CAEf"}

package/dist/state/launch-posture.js

@@ -0,0 +1,41 @@
+/**
+ * Persisted launch posture: the resolved privilege and tool policy a session
+ * launched with. Implements PRD §5.2, §5.6, §8.2, C-STATE-13, and C-API-32.
+ */
+export function compact(posture) {
+    const entries = Object.entries(posture).filter((entry) => entry[1] !== undefined);
+    return entries.length > 0 ? Object.fromEntries(entries) : undefined;
+}
+export function claudeLaunchPosture(options) {
+    const { permissionMode, allowedTools, disallowedTools, tools } = options;
+    // COPY the tool arrays so the persisted posture never aliases the caller's array: a
+    // later mutation of the caller's array must not change what a resume launches with —
+    // otherwise a future resume could gain tools the original process never had
+    // (C-API-32/C-STATE-13). `readonly ClaudeToolRule` entries are strings, so a shallow
+    // copy is a full snapshot.
+    return compact({
+        permissionMode,
+        allowedTools: allowedTools && [...allowedTools],
+        disallowedTools: disallowedTools && [...disallowedTools],
+        tools: tools && [...tools],
+    });
+}
+export function codexLaunchPosture(options) {
+    const { sandbox, approvalPolicy } = options;
+    return compact({ sandbox, approvalPolicy });
+}
+export function withClaudeLaunch(record, launch) {
+    if (launch === undefined)
+        return record;
+    return { ...record, claude: { ...record.claude, launch } };
+}
+export function withCodexLaunch(record, launch) {
+    if (launch === undefined)
+        return record;
+    return { ...record, codex: { ...record.codex, launch } };
+}
+/** Caller options override the persisted posture field by field (C-API-32). */
+export function effectivePosture(persisted, requested) {
+    return compact({ ...persisted, ...requested });
+}
+//# sourceMappingURL=launch-posture.js.map

package/dist/state/launch-posture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-posture.js","sourceRoot":"","sources":["../../src/state/launch-posture.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuBH,MAAM,UAAU,OAAO,CACrB,OAA6C;IAE7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAClF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAC9D,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACzE,oFAAoF;IACpF,qFAAqF;IACrF,4EAA4E;IAC5E,qFAAqF;IACrF,2BAA2B;IAC3B,OAAO,OAAO,CAAC;QACb,cAAc;QACd,YAAY,EAAE,YAAY,IAAI,CAAC,GAAG,YAAY,CAAC;QAC/C,eAAe,EAAE,eAAe,IAAI,CAAC,GAAG,eAAe,CAAC;QACxD,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAC5C,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAqB,EACrB,MAAuC;IAEvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAqB,EACrB,MAAsC;IAEtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAC9B,SAAwB,EACxB,SAAwB;IAExB,OAAO,OAAO,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,SAAS,EAA0C,CAAC,CAAC;AACzF,CAAC"}

package/dist/state/loop-store.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Private atomic persistence for recurring-loop definitions beside session.json.
+ * Implements PRD §8.2 and C-LOOP-11/C-LOOP-13/C-LOOP-21.
+ */
+import type { LoopDefinition } from "../core/loops/scheduler-state.ts";
+export type PersistedLoopDefinition = LoopDefinition;
+/** Read and validate a session's sidecar. Absence is the canonical empty state. */
+export declare function readLoopDefinitions(stateDir: string, elwoodSessionId: string): readonly PersistedLoopDefinition[];
+/** Atomically replace the sidecar with fresh, canonical, private definitions. */
+export declare function writeLoopDefinitions(stateDir: string, elwoodSessionId: string, definitions: readonly PersistedLoopDefinition[]): void;
+/** Remove definitions expired at or before `now`, without mutating the input. */
+export declare function pruneExpiredLoopDefinitions(definitions: readonly PersistedLoopDefinition[], now: number): readonly PersistedLoopDefinition[];
+//# sourceMappingURL=loop-store.d.ts.map

package/dist/state/loop-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop-store.d.ts","sourceRoot":"","sources":["../../src/state/loop-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAKvE,MAAM,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAIrD,mFAAmF;AACnF,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,GACtB,SAAS,uBAAuB,EAAE,CAgBpC;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,SAAS,uBAAuB,EAAE,GAC9C,IAAI,CAWN;AAED,iFAAiF;AACjF,wBAAgB,2BAA2B,CACzC,WAAW,EAAE,SAAS,uBAAuB,EAAE,EAC/C,GAAG,EAAE,MAAM,GACV,SAAS,uBAAuB,EAAE,CAEpC"}

package/dist/state/loop-store.js

@@ -0,0 +1,54 @@
+/**
+ * Private atomic persistence for recurring-loop definitions beside session.json.
+ * Implements PRD §8.2 and C-LOOP-11/C-LOOP-13/C-LOOP-21.
+ */
+import { join } from "node:path";
+import { elwoodError } from "../core/errors.js";
+import { safeSessionDir, writePrivateFileAtomic } from "./files.js";
+import { currentFileOwner, readPrivateFile } from "./private-read.js";
+import { LOOP_SIDECAR_SCHEMA_VERSION, validateLoopSidecar } from "./validate-loops.js";
+const LOOP_SIDECAR_NAME = "loops.json";
+/** Read and validate a session's sidecar. Absence is the canonical empty state. */
+export function readLoopDefinitions(stateDir, elwoodSessionId) {
+    const corrupt = () => corruptState(elwoodSessionId);
+    let text;
+    try {
+        text = readPrivateFile(sidecarPath(stateDir, elwoodSessionId), currentFileOwner(), corrupt);
+    }
+    catch {
+        throw corrupt(); // an invalid session id or an unsafe/unreadable sidecar
+    }
+    if (text === undefined)
+        return [];
+    try {
+        const definitions = validateLoopSidecar(JSON.parse(text));
+        if (definitions === null)
+            throw corrupt();
+        return definitions;
+    }
+    catch {
+        throw corrupt();
+    }
+}
+/** Atomically replace the sidecar with fresh, canonical, private definitions. */
+export function writeLoopDefinitions(stateDir, elwoodSessionId, definitions) {
+    const canonical = validateLoopSidecar({
+        schemaVersion: LOOP_SIDECAR_SCHEMA_VERSION,
+        loops: definitions,
+    });
+    if (canonical === null)
+        throw new TypeError("Loop definitions are invalid.");
+    const sidecar = { schemaVersion: LOOP_SIDECAR_SCHEMA_VERSION, loops: canonical };
+    writePrivateFileAtomic(sidecarPath(stateDir, elwoodSessionId), `${JSON.stringify(sidecar, null, 2)}\n`);
+}
+/** Remove definitions expired at or before `now`, without mutating the input. */
+export function pruneExpiredLoopDefinitions(definitions, now) {
+    return definitions.filter((definition) => definition.expiresAt > now);
+}
+function sidecarPath(stateDir, elwoodSessionId) {
+    return join(safeSessionDir(stateDir, elwoodSessionId), LOOP_SIDECAR_NAME);
+}
+function corruptState(elwoodSessionId) {
+    return elwoodError("state_corrupt", `Loop state is corrupt for ${elwoodSessionId}`);
+}
+//# sourceMappingURL=loop-store.js.map

package/dist/state/loop-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop-store.js","sourceRoot":"","sources":["../../src/state/loop-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAIvF,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,eAAuB;IAEvB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IACpD,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,EAAE,CAAC,CAAC,wDAAwD;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,WAAW,KAAK,IAAI;YAAE,MAAM,OAAO,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,eAAuB,EACvB,WAA+C;IAE/C,MAAM,SAAS,GAAG,mBAAmB,CAAC;QACpC,aAAa,EAAE,2BAA2B;QAC1C,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,2BAA2B,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACjF,sBAAsB,CACpB,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC,EACtC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACxC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CACzC,WAA+C,EAC/C,GAAW;IAEX,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,eAAuB;IAC5D,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,eAAuB;IAC3C,OAAO,WAAW,CAAC,eAAe,EAAE,6BAA6B,eAAe,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/dist/state/private-read.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Symlink-safe, ownership-checked reads of Elwood's private (0600) files.
+ * Implements PRD §8.2 and §12A.5: a session record or loop sidecar is rejected as
+ * `state_corrupt` unless it is a regular file owned by the current user with no
+ * group/world bits. The file is opened with O_NOFOLLOW and the SAME descriptor is
+ * fstat()ed and read, so there is no check-then-use window between the privacy
+ * check and the read.
+ */
+export type FileOwner = {
+    readonly uid: number;
+};
+/** The current user, or `undefined` where the platform reports no uid (never trusted as private). */
+export declare function currentFileOwner(): FileOwner | undefined;
+/**
+ * Read a private file. Returns `undefined` when the file is absent (ENOENT); throws
+ * `corrupt(reason)` when it is a symlink, not a regular file, owned by another user,
+ * group/world accessible, or cannot be read for any other reason.
+ */
+export declare function readPrivateFile(path: string, owner: FileOwner | undefined, corrupt: (reason: string) => Error): string | undefined;
+//# sourceMappingURL=private-read.d.ts.map

package/dist/state/private-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-read.d.ts","sourceRoot":"","sources":["../../src/state/private-read.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,qGAAqG;AACrG,wBAAgB,gBAAgB,IAAI,SAAS,GAAG,SAAS,CAGxD;AAID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,GAAG,SAAS,EAC5B,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,KAAK,GACjC,MAAM,GAAG,SAAS,CAKpB"}