@with-logic/elwood 0.1.0

package/dist/state/private-read.js

@@ -0,0 +1,57 @@
+/**
+ * Symlink-safe, ownership-checked reads of Elwood's private (0600) files.
+ * Implements PRD §8.2 and §12A.5: a session record or loop sidecar is rejected as
+ * `state_corrupt` unless it is a regular file owned by the current user with no
+ * group/world bits. The file is opened with O_NOFOLLOW and the SAME descriptor is
+ * fstat()ed and read, so there is no check-then-use window between the privacy
+ * check and the read.
+ */
+import { closeSync, constants, fstatSync, openSync, readFileSync } from "node:fs";
+import { errnoCode, toError } from "../core/errors.js";
+/** The current user, or `undefined` where the platform reports no uid (never trusted as private). */
+export function currentFileOwner() {
+    const uid = process.getuid?.();
+    return uid === undefined ? undefined : { uid };
+}
+/**
+ * Read a private file. Returns `undefined` when the file is absent (ENOENT); throws
+ * `corrupt(reason)` when it is a symlink, not a regular file, owned by another user,
+ * group/world accessible, or cannot be read for any other reason.
+ */
+export function readPrivateFile(path, owner, corrupt) {
+    const outcome = inspect(path, owner);
+    if (outcome === undefined)
+        return undefined;
+    if ("fault" in outcome)
+        throw corrupt(outcome.fault);
+    return outcome.text;
+}
+function inspect(path, owner) {
+    let fd;
+    try {
+        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+        const fault = privacyFault(fstatSync(fd), owner);
+        return fault === undefined ? { text: readFileSync(fd, "utf8") } : { fault };
+    }
+    catch (error) {
+        if (errnoCode(error) === "ENOENT")
+            return undefined;
+        return { fault: toError(error).message };
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+function privacyFault(stat, owner) {
+    if (!stat.isFile())
+        return "not a regular file";
+    if (owner === undefined)
+        return "file owner cannot be verified";
+    if (stat.uid !== owner.uid)
+        return "not owned by the current user";
+    if ((stat.mode & 0o077) !== 0)
+        return "group or world accessible";
+    return undefined;
+}
+//# sourceMappingURL=private-read.js.map

package/dist/state/private-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-read.js","sourceRoot":"","sources":["../../src/state/private-read.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAc,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAIvD,qGAAqG;AACrG,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AACjD,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAA4B,EAC5B,OAAkC;IAElC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,IAAI,OAAO;QAAE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAA4B;IACzD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAW,EAAE,KAA4B;IAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,oBAAoB,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,+BAA+B,CAAC;IAChE,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;QAAE,OAAO,+BAA+B,CAAC;IACnE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAClE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/state/private-session.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Private, symlink-safe CLI session-record reads and identity cleanup.
+ * Implements PRD §12A.2/§12A.5 and C-CLI-08/C-CLI-15/C-CLI-16.
+ */
+import type { FileOwner } from "./private-read.ts";
+import { type SessionRecord } from "./store.ts";
+export type SessionOwner = FileOwner;
+/** Create or validate the CLI state root without following a planted root symlink. */
+export declare function ensurePrivateStateRoot(stateDir: string, owner?: SessionOwner): void;
+/**
+ * Read one CLI-owned record without following links or trusting shared metadata: every
+ * directory on the path must be a private directory owned by `owner`, and the record
+ * itself is read through the shared O_NOFOLLOW + fstat path (`readSessionRecord`).
+ */
+export declare function readPrivateSessionRecord(stateDir: string, id: string, owner?: SessionOwner): SessionRecord;
+/** Remove record and stable socket home when no live session object owns teardown. */
+export declare function removeSessionIdentity(stateDir: string, id: string, adapter: "claude" | "codex"): void;
+//# sourceMappingURL=private-session.d.ts.map

package/dist/state/private-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-session.d.ts","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAyC,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEvF,MAAM,MAAM,YAAY,GAAG,SAAS,CAAC;AAErC,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE,YAAyC,GAC/C,IAAI,CAIN;AAgBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,YAAyC,GAC/C,aAAa,CAsBf;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,QAAQ,GAAG,OAAO,GAC1B,IAAI,CAMN"}

package/dist/state/private-session.js

@@ -0,0 +1,98 @@
+/**
+ * Private, symlink-safe CLI session-record reads and identity cleanup.
+ * Implements PRD §12A.2/§12A.5 and C-CLI-08/C-CLI-15/C-CLI-16.
+ */
+import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, } from "node:fs";
+import { join, resolve } from "node:path";
+import { ElwoodError, elwoodError, errnoCode } from "../core/errors.js";
+import { assertSessionId, safeSessionDir } from "./files.js";
+import { sessionSocketHome } from "./socket-home.js";
+import { readSessionRecord, removeSessionFiles } from "./store.js";
+/** Create or validate the CLI state root without following a planted root symlink. */
+export function ensurePrivateStateRoot(stateDir, owner = { uid: process.getuid() }) {
+    const root = resolve(stateDir);
+    ensurePrivateDirectory(root, owner);
+    ensurePrivateDirectory(join(root, "sessions"), owner);
+}
+function ensurePrivateDirectory(path, owner) {
+    let fd;
+    try {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+        fd = openSync(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        assertPrivateDirectory(fstatSync(fd), owner);
+    }
+    catch (error) {
+        if (error instanceof ElwoodError)
+            throw error;
+        throw corrupt("root");
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+/**
+ * Read one CLI-owned record without following links or trusting shared metadata: every
+ * directory on the path must be a private directory owned by `owner`, and the record
+ * itself is read through the shared O_NOFOLLOW + fstat path (`readSessionRecord`).
+ */
+export function readPrivateSessionRecord(stateDir, id, owner = { uid: process.getuid() }) {
+    assertSessionId(id);
+    const root = resolve(stateDir);
+    const sessionDir = safeSessionDir(root, id);
+    try {
+        assertPrivateDirectory(lstatSync(root), owner);
+        assertPrivateDirectory(lstatSync(join(root, "sessions")), owner);
+        assertPrivateDirectory(lstatSync(sessionDir), owner);
+    }
+    catch (error) {
+        if (errnoCode(error) === "ENOENT")
+            throw elwoodError("state_not_found", `No Elwood session found for ${id}`);
+        if (error instanceof ElwoodError)
+            throw error;
+        throw corrupt(id);
+    }
+    try {
+        return readSessionRecord(root, id, owner);
+    }
+    catch (error) {
+        // Absence stays `state_not_found`; any other read failure (unsafe file, unreadable,
+        // invalid) is this path's own `state_corrupt` (§12A.5).
+        if (errnoCode(error) === "state_not_found")
+            throw error;
+        throw corrupt(id);
+    }
+}
+/** Remove record and stable socket home when no live session object owns teardown. */
+export function removeSessionIdentity(stateDir, id, adapter) {
+    const root = resolve(stateDir);
+    assertPrivateDirectoryIfPresent(root);
+    assertPrivateDirectoryIfPresent(join(root, "sessions"));
+    const socketHome = sessionSocketHome({ stateDir: root, elwoodSessionId: id, adapter });
+    removeSessionFiles({ stateDir, elwoodSessionId: id, socketHome });
+}
+function assertPrivateDirectoryIfPresent(path) {
+    try {
+        assertPrivateDirectory(lstatSync(path), { uid: process.getuid() });
+    }
+    catch (error) {
+        if (errnoCode(error) === "ENOENT")
+            return;
+        if (error instanceof ElwoodError)
+            throw error;
+        throw corrupt("root");
+    }
+}
+function assertPrivateDirectory(stat, owner) {
+    if (!stat.isDirectory())
+        throw corrupt("record");
+    assertPrivate(stat, owner);
+}
+function assertPrivate(stat, owner) {
+    if (stat.uid !== owner.uid || (stat.mode & 0o077) !== 0)
+        throw corrupt("record");
+}
+function corrupt(id) {
+    return elwoodError("state_corrupt", `Session state is not private or valid for ${id}`);
+}
+//# sourceMappingURL=private-session.js.map

package/dist/state/private-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-session.js","sourceRoot":"","sources":["../../src/state/private-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,GAET,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAsB,MAAM,YAAY,CAAC;AAIvF,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAmB;IAC/D,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACvF,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,EAAU,EACV,QAAsB,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE;IAEhD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAC/B,MAAM,WAAW,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,oFAAoF;QACpF,wDAAwD;QACxD,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACxD,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,EAAU,EACV,OAA2B;IAE3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACtC,+BAA+B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,kBAAkB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAO,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO;QAC1C,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAW,EAAE,KAAmB;IAC9D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,IAAW,EAAE,KAAmB;IACrD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,WAAW,CAAC,eAAe,EAAE,6CAA6C,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/state/runtime-paths.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Per-launch runtime paths, bridge token, and socket for a session. Implements PRD §8.1
+ * and §8.2: none of these values are persisted in the session record. They live in
+ * memory only — a stored socket path or bridge token is never trusted from disk. The
+ * session-dir paths and the socket HOME are DERIVED deterministically from the session
+ * identity `(stateDir, id, adapter)`, so every launch of a session resolves the same
+ * ones; only the socket FILE inside the home and the bridge token are minted anew each
+ * launch. The socket home is ensured private (0700) here; teardown removes the whole
+ * home, while a failed launch removes only its own socket file (a concurrent launch may
+ * share the home).
+ */
+/** The in-memory runtime a session binds to for one launch (never persisted). */
+export type SessionRuntime = {
+    readonly sessionDir: string;
+    readonly settingsPath: string;
+    readonly bridgeScriptPath: string;
+    /** The session's STABLE private socket home; teardown removes it whole (§8.1). */
+    readonly socketHome: string;
+    /** A fresh, short per-launch socket FILE inside `socketHome` (§8.1). */
+    readonly socketPath: string;
+    /** A fresh bridge token minted for this launch (§8.2). */
+    readonly bridgeToken: string;
+};
+/** The identifying inputs a launch derives its per-launch runtime paths from. */
+export type SessionRuntimeInput = {
+    readonly stateDir: string;
+    readonly elwoodSessionId: string;
+    readonly adapter: "claude" | "codex";
+};
+/**
+ * Builds the per-launch runtime for a session. Session-dir paths are derived from
+ * `(stateDir, id, adapter)`. The socket lives in the session's STABLE home (outside
+ * stateDir, since macOS caps socket paths near 104 bytes) under a FRESH per-launch
+ * filename, so no stale socket is reused AND every launch's socket sits under the one
+ * home that TEARDOWN can sweep — even after a parent restart. (`stop` keeps the home for
+ * a later resume; the bridge unlinks its own socket file on stop.) The bridge token is
+ * minted anew so no stale token round-trips.
+ */
+export declare function sessionRuntime(input: SessionRuntimeInput): SessionRuntime;
+//# sourceMappingURL=runtime-paths.d.ts.map

package/dist/state/runtime-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-paths.d.ts","sourceRoot":"","sources":["../../src/state/runtime-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,iFAAiF;AACjF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;CACtC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAazE"}

package/dist/state/runtime-paths.js

@@ -0,0 +1,39 @@
+/**
+ * Per-launch runtime paths, bridge token, and socket for a session. Implements PRD §8.1
+ * and §8.2: none of these values are persisted in the session record. They live in
+ * memory only — a stored socket path or bridge token is never trusted from disk. The
+ * session-dir paths and the socket HOME are DERIVED deterministically from the session
+ * identity `(stateDir, id, adapter)`, so every launch of a session resolves the same
+ * ones; only the socket FILE inside the home and the bridge token are minted anew each
+ * launch. The socket home is ensured private (0700) here; teardown removes the whole
+ * home, while a failed launch removes only its own socket file (a concurrent launch may
+ * share the home).
+ */
+import { randomUUID } from "node:crypto";
+import { join } from "node:path";
+import { newBridgeToken, safeSessionDir } from "./files.js";
+import { ensureSocketHome, sessionSocketHome } from "./socket-home.js";
+/**
+ * Builds the per-launch runtime for a session. Session-dir paths are derived from
+ * `(stateDir, id, adapter)`. The socket lives in the session's STABLE home (outside
+ * stateDir, since macOS caps socket paths near 104 bytes) under a FRESH per-launch
+ * filename, so no stale socket is reused AND every launch's socket sits under the one
+ * home that TEARDOWN can sweep — even after a parent restart. (`stop` keeps the home for
+ * a later resume; the bridge unlinks its own socket file on stop.) The bridge token is
+ * minted anew so no stale token round-trips.
+ */
+export function sessionRuntime(input) {
+    const { stateDir, elwoodSessionId, adapter } = input;
+    const dir = safeSessionDir(stateDir, elwoodSessionId);
+    const socketHome = sessionSocketHome({ stateDir, elwoodSessionId, adapter });
+    ensureSocketHome(socketHome); // restores 0700 on a reused home; rejects a planted non-dir (§8.1)
+    return {
+        sessionDir: dir,
+        settingsPath: join(dir, `${adapter}-settings.json`),
+        bridgeScriptPath: join(dir, "hook-bridge.mjs"),
+        socketHome,
+        socketPath: join(socketHome, `${randomUUID().slice(0, 8)}.sock`),
+        bridgeToken: newBridgeToken(),
+    };
+}
+//# sourceMappingURL=runtime-paths.js.map

package/dist/state/runtime-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-paths.js","sourceRoot":"","sources":["../../src/state/runtime-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAsBvE;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACrD,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,mEAAmE;IACjG,OAAO;QACL,UAAU,EAAE,GAAG;QACf,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,gBAAgB,CAAC;QACnD,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAC9C,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;QAChE,WAAW,EAAE,cAAc,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/dist/state/socket-home.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Bridge socket homes kept OUTSIDE stateDir (macOS caps socket paths near 104 bytes,
+ * so they cannot live under a caller-structured stateDir). Implements PRD §8.1.
+ *
+ * A socket home is STABLE per session — `<tmpdir>/elwood-<fingerprint>` where the
+ * fingerprint is a bounded, collision-resistant hash of the session's FULL identity
+ * `(stateDir, id, adapter)` — so every start/resume of the same session resolves the
+ * SAME home directory even after a parent restart (the record persists nothing about
+ * it). Fingerprinting the whole identity, not the id alone, means two sessions that
+ * happen to share an explicit `elwoodSessionId` in different state dirs get DISTINCT
+ * homes, so one's teardown can never remove the other's live socket. Each launch binds
+ * a FRESH socket FILE inside that home (a per-launch nonce), so a stale socket is never
+ * reused; TEARDOWN removes ALL of a session's socket files by removing the one stable
+ * home, so no anonymous per-launch directory can leak undiscoverably across
+ * restart/resume cycles. (`stop` keeps the home for a later resume — the bridge unlinks
+ * its own socket file on stop; a failed START removes only its own socket file, so an
+ * overlapping failed launch never disturbs a live one.) Because teardown removes the
+ * WHOLE home, two live sessions sharing a full identity concurrently is unsupported
+ * (PRD §8.1) — a given identity has at most one live session at a time.
+ */
+/** The ONE prefix every Elwood socket home carries (shared by creation + cleanup). */
+export declare const SOCKET_HOME_PREFIX = "elwood-";
+/** The full identity a socket home is stable across — mirrors the session-dir key. */
+export type SocketHomeIdentity = {
+    readonly stateDir: string;
+    readonly elwoodSessionId: string;
+    readonly adapter: "claude" | "codex";
+};
+/**
+ * The STABLE socket-home directory for a session: `<tmpdir>/elwood-<fingerprint>`. The
+ * fingerprint is a bounded (16 hex chars = 64 bits) SHA-256 slice of the session's full
+ * identity `(stateDir, id, adapter)` — short enough to keep the socket path under the
+ * 104-byte cap, wide enough to make an accidental cross-session collision negligible.
+ * Deterministic, so any launch of the session finds the same home; identity-scoped, so
+ * a shared explicit id in a different state dir never aliases onto the same home. The
+ * state dir is resolved first so equivalent spellings (relative, `..`, trailing slash)
+ * of one directory map to one home, matching how session dirs are keyed (§8.1).
+ */
+export declare function sessionSocketHome(identity: SocketHomeIdentity): string;
+/** Whether `home` is a directory this naming scheme minted (owned cleanup). */
+export declare function ownsSocketHome(home: string): boolean;
+/**
+ * Ensures the stable socket home exists and is private (`0700`, PRD §8.1) for THIS
+ * launch. The home is deterministic and reused across a session's launches, so
+ * `mkdirSync(..., { mode })` alone is not enough — its mode applies only when the
+ * directory is freshly created, leaving a pre-existing home at whatever mode it had.
+ * We therefore chmod unconditionally after ensuring it. A pre-existing NON-directory
+ * (or symlink) at the predictable path is rejected rather than trusted, since binding
+ * a socket under an attacker-planted target would escape the private home.
+ */
+export declare function ensureSocketHome(home: string): void;
+/**
+ * Removes only THIS launch's own socket file, leaving the shared stable home in place.
+ * Used on failed startup: the home is shared by every concurrent launch of the same
+ * `(stateDir, adapter, session id)`, so a failing launch must NOT remove the whole home
+ * — that would delete a live overlapping launch's bound socket. Leaving an empty home
+ * is safe: it is deterministic, so the session's next start/resume/teardown collects
+ * it. Only removes files under a home this naming scheme owns.
+ */
+export declare function removeOwnSocketFile(socketPath: string): void;
+/**
+ * Removes a session's ENTIRE stable socket home (every launch's socket file), so a
+ * parent restart never leaves earlier launches' sockets undiscoverable. Called only on
+ * TEARDOWN — the terminal, single-owner path — never on a failed overlapping launch.
+ * Only removes homes this naming scheme owns; any other layout is left untouched.
+ */
+export declare function removeSocketHome(home: string): void;
+//# sourceMappingURL=socket-home.d.ts.map

package/dist/state/socket-home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-home.d.ts","sourceRoot":"","sources":["../../src/state/socket-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAQH,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAE5C,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;CACtC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAKtE;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CASnD;AAUD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAG5D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGnD"}

package/dist/state/socket-home.js

@@ -0,0 +1,99 @@
+/**
+ * Bridge socket homes kept OUTSIDE stateDir (macOS caps socket paths near 104 bytes,
+ * so they cannot live under a caller-structured stateDir). Implements PRD §8.1.
+ *
+ * A socket home is STABLE per session — `<tmpdir>/elwood-<fingerprint>` where the
+ * fingerprint is a bounded, collision-resistant hash of the session's FULL identity
+ * `(stateDir, id, adapter)` — so every start/resume of the same session resolves the
+ * SAME home directory even after a parent restart (the record persists nothing about
+ * it). Fingerprinting the whole identity, not the id alone, means two sessions that
+ * happen to share an explicit `elwoodSessionId` in different state dirs get DISTINCT
+ * homes, so one's teardown can never remove the other's live socket. Each launch binds
+ * a FRESH socket FILE inside that home (a per-launch nonce), so a stale socket is never
+ * reused; TEARDOWN removes ALL of a session's socket files by removing the one stable
+ * home, so no anonymous per-launch directory can leak undiscoverably across
+ * restart/resume cycles. (`stop` keeps the home for a later resume — the bridge unlinks
+ * its own socket file on stop; a failed START removes only its own socket file, so an
+ * overlapping failed launch never disturbs a live one.) Because teardown removes the
+ * WHOLE home, two live sessions sharing a full identity concurrently is unsupported
+ * (PRD §8.1) — a given identity has at most one live session at a time.
+ */
+import { createHash } from "node:crypto";
+import { chmodSync, lstatSync, mkdirSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
+import { elwoodError } from "../core/errors.js";
+/** The ONE prefix every Elwood socket home carries (shared by creation + cleanup). */
+export const SOCKET_HOME_PREFIX = "elwood-";
+/**
+ * The STABLE socket-home directory for a session: `<tmpdir>/elwood-<fingerprint>`. The
+ * fingerprint is a bounded (16 hex chars = 64 bits) SHA-256 slice of the session's full
+ * identity `(stateDir, id, adapter)` — short enough to keep the socket path under the
+ * 104-byte cap, wide enough to make an accidental cross-session collision negligible.
+ * Deterministic, so any launch of the session finds the same home; identity-scoped, so
+ * a shared explicit id in a different state dir never aliases onto the same home. The
+ * state dir is resolved first so equivalent spellings (relative, `..`, trailing slash)
+ * of one directory map to one home, matching how session dirs are keyed (§8.1).
+ */
+export function sessionSocketHome(identity) {
+    const stateDir = resolve(identity.stateDir);
+    const key = `${stateDir}\0${identity.adapter}\0${identity.elwoodSessionId}`;
+    const fingerprint = createHash("sha256").update(key).digest("hex").slice(0, 16);
+    return join(tmpdir(), `${SOCKET_HOME_PREFIX}${fingerprint}`);
+}
+/** Whether `home` is a directory this naming scheme minted (owned cleanup). */
+export function ownsSocketHome(home) {
+    return basename(home).startsWith(SOCKET_HOME_PREFIX);
+}
+/**
+ * Ensures the stable socket home exists and is private (`0700`, PRD §8.1) for THIS
+ * launch. The home is deterministic and reused across a session's launches, so
+ * `mkdirSync(..., { mode })` alone is not enough — its mode applies only when the
+ * directory is freshly created, leaving a pre-existing home at whatever mode it had.
+ * We therefore chmod unconditionally after ensuring it. A pre-existing NON-directory
+ * (or symlink) at the predictable path is rejected rather than trusted, since binding
+ * a socket under an attacker-planted target would escape the private home.
+ */
+export function ensureSocketHome(home) {
+    const existing = lstatIfPresent(home);
+    if (existing && !existing.isDirectory()) {
+        throw elwoodError("hook_bridge_failed", "socket home path is not a private directory", {
+            home,
+        });
+    }
+    mkdirSync(home, { recursive: true, mode: 0o700 });
+    chmodSync(home, 0o700);
+}
+function lstatIfPresent(path) {
+    try {
+        return lstatSync(path);
+    }
+    catch {
+        return undefined; // absent: mkdir will create it fresh at 0700
+    }
+}
+/**
+ * Removes only THIS launch's own socket file, leaving the shared stable home in place.
+ * Used on failed startup: the home is shared by every concurrent launch of the same
+ * `(stateDir, adapter, session id)`, so a failing launch must NOT remove the whole home
+ * — that would delete a live overlapping launch's bound socket. Leaving an empty home
+ * is safe: it is deterministic, so the session's next start/resume/teardown collects
+ * it. Only removes files under a home this naming scheme owns.
+ */
+export function removeOwnSocketFile(socketPath) {
+    if (!ownsSocketHome(dirname(socketPath)))
+        return;
+    rmSync(socketPath, { force: true });
+}
+/**
+ * Removes a session's ENTIRE stable socket home (every launch's socket file), so a
+ * parent restart never leaves earlier launches' sockets undiscoverable. Called only on
+ * TEARDOWN — the terminal, single-owner path — never on a failed overlapping launch.
+ * Only removes homes this naming scheme owns; any other layout is left untouched.
+ */
+export function removeSocketHome(home) {
+    if (!ownsSocketHome(home))
+        return;
+    rmSync(home, { recursive: true, force: true });
+}
+//# sourceMappingURL=socket-home.js.map

package/dist/state/socket-home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-home.js","sourceRoot":"","sources":["../../src/state/socket-home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAS5C;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA4B;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,kBAAkB,GAAG,WAAW,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACxC,MAAM,WAAW,CAAC,oBAAoB,EAAE,6CAA6C,EAAE;YACrF,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,6CAA6C;IACjE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO;IACjD,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO;IAClC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/dist/state/store.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Project-local Elwood session metadata persistence.
+ * Implements PRD §8: the record persists ONLY what resume genuinely needs (adapter,
+ * cwd, per-adapter resumeId + launch posture). Paths, bridge token, socket home,
+ * terminal size, status, warnings, metadata, and timestamps are NOT persisted — they
+ * are recomputed at each launch and live in memory only.
+ */
+import { safeSessionDir } from "./files.ts";
+import type { AdapterState, ClaudeLaunchPosture, CodexLaunchPosture } from "./launch-posture.ts";
+import { type FileOwner } from "./private-read.ts";
+export type SessionRecord = {
+    readonly schemaVersion: 1;
+    readonly elwoodSessionId: string;
+    readonly adapter: "claude" | "codex";
+    readonly cwd: string;
+    readonly claude: AdapterState<ClaudeLaunchPosture>;
+    readonly codex: AdapterState<CodexLaunchPosture>;
+};
+export declare function defaultStateDir(cwd: string): string;
+export { safeSessionDir as sessionDir };
+export declare function createSessionRecord(input: {
+    readonly cwd: string;
+    readonly id: string;
+    readonly adapter?: "claude" | "codex";
+}): SessionRecord;
+export declare function prepareStateDir(stateDir: string, options?: {
+    readonly gitignore?: boolean;
+}): void;
+/** Persist the record into its derived session directory (not stored on the record). */
+export declare function writeSessionRecord(record: SessionRecord, sessionDir: string): void;
+/**
+ * Read a session record without following symlinks and only when it is a private
+ * regular file owned by `owner` (§8.2): a planted link or a shared/foreign-owned
+ * record is `state_corrupt`, never trusted for resume. Absence is `state_not_found`.
+ */
+export declare function readSessionRecord(stateDir: string, id: string, owner?: FileOwner | undefined): SessionRecord;
+export declare function updateSessionResumeId(record: SessionRecord, adapter: "claude" | "codex", resumeId: string): SessionRecord;
+/** The identifying inputs for removing a session's derived files and socket home. */
+export type RemoveSessionFilesInput = {
+    readonly stateDir: string;
+    readonly elwoodSessionId: string;
+    /** The session's stable socket home directory (§8.1), removed whole. */
+    readonly socketHome: string;
+};
+/** Remove a session's derived directory AND its whole stable socket home (§8.1). */
+export declare function removeSessionFiles(input: RemoveSessionFilesInput): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/state/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/state/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EACL,cAAc,EAKf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAoB,KAAK,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAItF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAAC;CAClD,CAAC;AAEF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,OAAO,EAAE,cAAc,IAAI,UAAU,EAAE,CAAC;AAExC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;CACvC,GAAG,aAAa,CAUhB;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,IAAI,CAYN;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAElF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,SAAS,GAAG,SAA8B,GAChD,aAAa,CAcf;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,QAAQ,GAAG,OAAO,EAC3B,QAAQ,EAAE,MAAM,GACf,aAAa,CAEf;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAevE"}

package/dist/state/store.js

@@ -0,0 +1,103 @@
+/**
+ * Project-local Elwood session metadata persistence.
+ * Implements PRD §8: the record persists ONLY what resume genuinely needs (adapter,
+ * cwd, per-adapter resumeId + launch posture). Paths, bridge token, socket home,
+ * terminal size, status, warnings, metadata, and timestamps are NOT persisted — they
+ * are recomputed at each launch and live in memory only.
+ */
+import { existsSync, rmSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { elwoodError, toError } from "../core/errors.js";
+import { safeSessionDir, secureMkdir, sharedMkdir, writePrivateFileAtomic, writeSharedFile, } from "./files.js";
+import { currentFileOwner, readPrivateFile } from "./private-read.js";
+import { removeSocketHome } from "./socket-home.js";
+import { validateSessionRecord } from "./validate.js";
+export function defaultStateDir(cwd) {
+    return join(resolve(cwd), ".elwood");
+}
+export { safeSessionDir as sessionDir };
+export function createSessionRecord(input) {
+    const adapter = input.adapter ?? "claude";
+    return {
+        schemaVersion: 1,
+        elwoodSessionId: input.id,
+        adapter,
+        cwd: resolve(input.cwd),
+        claude: {},
+        codex: {},
+    };
+}
+export function prepareStateDir(stateDir, options = {}) {
+    const root = resolve(stateDir);
+    if (options.gitignore === true) {
+        sharedMkdir(root);
+    }
+    else {
+        secureMkdir(root);
+    }
+    const gitignorePath = join(root, ".gitignore");
+    if (options.gitignore === true && !existsSync(gitignorePath)) {
+        writeSharedFile(gitignorePath, "*\n");
+    }
+    secureMkdir(join(root, "sessions"));
+}
+/** Persist the record into its derived session directory (not stored on the record). */
+export function writeSessionRecord(record, sessionDir) {
+    writePrivateFileAtomic(recordPath(sessionDir), `${JSON.stringify(record, null, 2)}\n`);
+}
+/**
+ * Read a session record without following symlinks and only when it is a private
+ * regular file owned by `owner` (§8.2): a planted link or a shared/foreign-owned
+ * record is `state_corrupt`, never trusted for resume. Absence is `state_not_found`.
+ */
+export function readSessionRecord(stateDir, id, owner = currentFileOwner()) {
+    const corrupt = (cause) => elwoodError("state_corrupt", `Session state is corrupt for ${id}`, { cause });
+    const text = readPrivateFile(recordPath(safeSessionDir(stateDir, id)), owner, corrupt);
+    if (text === undefined)
+        throw elwoodError("state_not_found", `No Elwood session found for ${id}`);
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (error) {
+        throw corrupt(toError(error).message);
+    }
+    const parsed = validateSessionRecord(raw, id);
+    if (!parsed)
+        throw elwoodError("state_corrupt", `Session state is invalid for ${id}`);
+    return parsed;
+}
+export function updateSessionResumeId(record, adapter, resumeId) {
+    return { ...record, [adapter]: { ...record[adapter], resumeId } };
+}
+/** Remove a session's derived directory AND its whole stable socket home (§8.1). */
+export function removeSessionFiles(input) {
+    const dir = safeSessionDir(input.stateDir, input.elwoodSessionId);
+    // Attempt BOTH removals independently (§8.4 attempt-all): a socket-home removal
+    // failure must NOT prevent the session-directory removal that leaves resumable
+    // metadata + runtime files behind. Collect the first failure and report it after
+    // both ran, so teardown removes everything it can and still surfaces the fault.
+    let firstError;
+    firstError = tryRemove(() => removeSocketHome(input.socketHome), firstError);
+    firstError = tryRemove(() => rmSync(dir, { recursive: true, force: true }), firstError);
+    if (firstError !== undefined) {
+        throw elwoodError("teardown_failed", "Could not remove Elwood session files.", {
+            cause: firstError instanceof Error ? firstError.message : String(firstError),
+            sessionDir: dir,
+        });
+    }
+}
+/** Run a removal step, keeping the FIRST error so every step is still attempted. */
+function tryRemove(step, prior) {
+    try {
+        step();
+        return prior;
+    }
+    catch (error) {
+        return prior ?? error;
+    }
+}
+function recordPath(dir) {
+    return join(dir, "session.json");
+}
+//# sourceMappingURL=store.js.map

package/dist/state/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/state/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,cAAc,EACd,WAAW,EACX,WAAW,EACX,sBAAsB,EACtB,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAkB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAWtD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,OAAO,EAAE,cAAc,IAAI,UAAU,EAAE,CAAC;AAExC,MAAM,UAAU,mBAAmB,CAAC,KAInC;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC1C,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,KAAK,CAAC,EAAE;QACzB,OAAO;QACP,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QACvB,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,UAA4C,EAAE;IAE9C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,MAAqB,EAAE,UAAkB;IAC1E,sBAAsB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,EAAU,EACV,QAA+B,gBAAgB,EAAE;IAEjD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAChC,WAAW,CAAC,eAAe,EAAE,gCAAgC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,WAAW,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;IAClG,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,MAAM,WAAW,CAAC,eAAe,EAAE,gCAAgC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,MAAqB,EACrB,OAA2B,EAC3B,QAAgB;IAEhB,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC;AACpE,CAAC;AAUD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAClE,gFAAgF;IAChF,+EAA+E;IAC/E,iFAAiF;IACjF,gFAAgF;IAChF,IAAI,UAAmB,CAAC;IACxB,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7E,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACxF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,WAAW,CAAC,iBAAiB,EAAE,wCAAwC,EAAE;YAC7E,KAAK,EAAE,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC5E,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,IAAgB,EAAE,KAAc;IACjD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,KAAK,IAAI,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACnC,CAAC"}

package/dist/state/validate-loops.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Runtime validation for canonical persisted recurring-loop definitions.
+ * Implements PRD §8.2 and C-LOOP-04/C-LOOP-07/C-LOOP-11/C-LOOP-13/C-LOOP-21.
+ */
+import type { PersistedLoopDefinition } from "./loop-store.ts";
+export declare const LOOP_SIDECAR_SCHEMA_VERSION = 1;
+/** Return fresh allowlisted definitions, or null when any part is unsafe. */
+export declare function validateLoopSidecar(value: unknown): readonly PersistedLoopDefinition[] | null;
+//# sourceMappingURL=validate-loops.d.ts.map

package/dist/state/validate-loops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-loops.d.ts","sourceRoot":"","sources":["../../src/state/validate-loops.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAG/D,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,uBAAuB,EAAE,GAAG,IAAI,CAa7F"}