@with-logic/elwood 0.2.1 → 0.2.2

package/dist/core/warnings/update.d.ts

@@ -2,12 +2,15 @@
  * Builds the best-effort `agent_update_failed` warning (PRD §9.2, C-LIFE-11) shared by both
  * adapter preflights. A `claude update` / `codex update` that fails is contained (never fatal
  * when the installed CLI is compatible) and surfaced as this live warning with the diagnostics
- * the PRD allows — the installed version in use, the update probe's errno, and the updater's own
- * stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
+ * the PRD allows — the installed version in use, the update probe's exit status and errno, and
+ * the updater's own stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
  * prompts). Contention is not a failed update and reports differently: an error carrying
  * `updateReason: "active_owner"` — another process held the update lease until this caller's
  * wait expired — becomes `errorCode: "update_active"` with a message saying the update was
  * skipped, and no diagnostics, because no local updater ran to produce an errno or stderr.
+ * The user's login shell can also fail before the update command runs (§9.2): that reports
+ * `errorCode: "login_shell_failed"` with empty `raw`, since its stderr would be only the
+ * profile's startup output.
  */
 import type { ElwoodAgentKind } from "../activity/index.ts";
 import type { AgentUpdateFailedWarning } from "./lifecycle.ts";
@@ -21,8 +24,9 @@ export type DistributiveOmit<W, K extends PropertyKey> = W extends unknown ? Omi
 export type UpdateFailedWarning = Omit<AgentUpdateFailedWarning, "elwoodSessionId">;
 /**
  * Build the warning from the contained update error. `installedVersion` is the parsed version the
- * session will actually run (the preflight re-read it after the failed update). `errorCode` is the
- * update probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
+ * session will actually run (the preflight re-read it after the failed update). `errorCode` is
+ * `login_shell_failed` when the login shell failed before the update ran, else the update
+ * probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
  *
  * An error carrying `updateReason: "active_owner"` is contention, not failure: another process
  * held the update lease until this caller's wait expired, so no local update command ran. That

package/dist/core/warnings/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/core/warnings/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAEhG,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;AAkBpF;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,OAAO,GACb,mBAAmB,CAkBrB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/core/warnings/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;AAEhG,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;AAkBpF;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,gBAAgB,EAAE,MAAM,EACxB,KAAK,EAAE,OAAO,GACb,mBAAmB,CAoBrB"}

package/dist/core/warnings/update.js

@@ -2,12 +2,15 @@
  * Builds the best-effort `agent_update_failed` warning (PRD §9.2, C-LIFE-11) shared by both
  * adapter preflights. A `claude update` / `codex update` that fails is contained (never fatal
  * when the installed CLI is compatible) and surfaced as this live warning with the diagnostics
- * the PRD allows — the installed version in use, the update probe's errno, and the updater's own
- * stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
+ * the PRD allows — the installed version in use, the update probe's exit status and errno, and
+ * the updater's own stderr capped at 2 KB in `raw` (the CLI updater's output, never session transcripts or
  * prompts). Contention is not a failed update and reports differently: an error carrying
  * `updateReason: "active_owner"` — another process held the update lease until this caller's
  * wait expired — becomes `errorCode: "update_active"` with a message saying the update was
  * skipped, and no diagnostics, because no local updater ran to produce an errno or stderr.
+ * The user's login shell can also fail before the update command runs (§9.2): that reports
+ * `errorCode: "login_shell_failed"` with empty `raw`, since its stderr would be only the
+ * profile's startup output.
  */
 import { ElwoodError } from "../errors.js";
 // Cap on the stderr carried in the warning's `raw`, so a hostile/verbose updater cannot flood a
@@ -17,7 +20,7 @@ const maxStderr = 2_000;
  * Reasons an update was skipped rather than attempted, and how each reads to a user. A
  * skipped update carries no errno or updater stderr, because no local updater ran. Both
  * reach the consumer as `errorCode: "update_active"` and differ only in timing:
- * `active_owner` follows the full 60-second contention wait, while `cleanup_pending` is
+ * `active_owner` follows the full 165-second contention wait, while `cleanup_pending` is
  * immediate, because a surviving updater group may outlive any bound worth waiting out.
  */
 const skippedUpdates = new Map([
@@ -26,8 +29,9 @@ const skippedUpdates = new Map([
 ]);
 /**
  * Build the warning from the contained update error. `installedVersion` is the parsed version the
- * session will actually run (the preflight re-read it after the failed update). `errorCode` is the
- * update probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
+ * session will actually run (the preflight re-read it after the failed update). `errorCode` is
+ * `login_shell_failed` when the login shell failed before the update ran, else the update
+ * probe's allowlisted `errno` (e.g. `ETIMEDOUT`) when present, else a generic token.
  *
  * An error carrying `updateReason: "active_owner"` is contention, not failure: another process
  * held the update lease until this caller's wait expired, so no local update command ran. That
@@ -39,6 +43,7 @@ export function buildUpdateWarning(agent, installedVersion, error) {
     const details = error instanceof ElwoodError ? error.details : {};
     const errno = typeof details["errno"] === "string" ? details["errno"] : undefined;
     const stderr = typeof details["stderr"] === "string" ? details["stderr"] : "";
+    const exitStatus = typeof details["exitStatus"] === "number" ? details["exitStatus"] : undefined;
     const skipped = skippedUpdates.get(details["updateReason"]);
     return {
         agent,
@@ -49,8 +54,18 @@ export function buildUpdateWarning(agent, installedVersion, error) {
             ? `\`${agent} update\` failed; continuing with the installed CLI ${installedVersion}.`
             : `\`${agent} update\` skipped: ${skipped}; continuing with the installed CLI ${installedVersion}.`,
         installedVersion,
-        errorCode: skipped === undefined ? (errno ?? "update_failed") : "update_active",
+        errorCode: skipped === undefined ? failureCode(details, errno) : "update_active",
         raw: stderr.slice(0, maxStderr),
+        ...(exitStatus === undefined ? {} : { exitStatus }),
     };
 }
+/**
+ * A login shell that timed out or exited before running `update` is the user's profile, not the
+ * updater, so it reports as `login_shell_failed` rather than the probe's errno (§9.2, C-PERF-05).
+ */
+function failureCode(details, errno) {
+    if (details["phase"] === "login_shell")
+        return "login_shell_failed";
+    return errno ?? "update_failed";
+}
 //# sourceMappingURL=update.js.map

package/dist/core/warnings/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/core/warnings/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,cAAc,GAAiC,IAAI,GAAG,CAAC;IAC3D,CAAC,cAAc,EAAE,iCAAiC,CAAC;IACnD,CAAC,iBAAiB,EAAE,gDAAgD,CAAC;CACtE,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,gBAAwB,EACxB,KAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5D,OAAO;QACL,KAAK;QACL,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,OAAO,EACL,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,KAAK,KAAK,uDAAuD,gBAAgB,GAAG;YACtF,CAAC,CAAC,KAAK,KAAK,sBAAsB,OAAO,uCAAuC,gBAAgB,GAAG;QACvG,gBAAgB;QAChB,SAAS,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe;QAC/E,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../src/core/warnings/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAa3C,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,cAAc,GAAiC,IAAI,GAAG,CAAC;IAC3D,CAAC,cAAc,EAAE,iCAAiC,CAAC;IACnD,CAAC,iBAAiB,EAAE,gDAAgD,CAAC;CACtE,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,gBAAwB,EACxB,KAAc;IAEd,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5D,OAAO;QACL,KAAK;QACL,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,SAAS;QACnB,OAAO,EACL,OAAO,KAAK,SAAS;YACnB,CAAC,CAAC,KAAK,KAAK,uDAAuD,gBAAgB,GAAG;YACtF,CAAC,CAAC,KAAK,KAAK,sBAAsB,OAAO,uCAAuC,gBAAgB,GAAG;QACvG,gBAAgB;QAChB,SAAS,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe;QAChF,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QAC/B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,OAA0C,EAC1C,KAAyB;IAEzB,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,aAAa;QAAE,OAAO,oBAAoB,CAAC;IACpE,OAAO,KAAK,IAAI,eAAe,CAAC;AAClC,CAAC"}

package/dist/pty/exit-latch.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Latches one PTY's exit from a single subscription. node-pty never replays an exit to a
+ * later subscriber, so a waiter that subscribed only after the exit would sit out its
+ * whole timeout. Shared by termination (PRD §9.4, C-LIFE-10), which awaits a process-table
+ * sweep before any SIGKILL (after a SIGTERM only when the leader outlasts it), and by
+ * Codex's `setModel` restore (§5.3, C-CODEX-14), which waits for a closing CLI to exit
+ * before restoring `config.toml`.
+ */
+import type { PtyProcess } from "./types.ts";
+export declare class PtyExitLatch {
+    private observed;
+    private readonly waiters;
+    private readonly unsubscribe;
+    constructor(pty: Pick<PtyProcess, "onExit">);
+    /** Whether the exit has been observed. From then on the PTY's pid may be reused. */
+    get exited(): boolean;
+    /**
+     * Resolves `true` once the exit is observed, or `false` after `timeoutMs`, so a stuck
+     * CLI cannot hold its waiter. With `unref`, the pending timer does not keep the host
+     * process alive.
+     */
+    within(timeoutMs: number, options?: {
+        readonly unref?: boolean;
+    }): Promise<boolean>;
+    /** Drops the exit subscription; `exited` keeps what it last observed. */
+    dispose(): void;
+}
+//# sourceMappingURL=exit-latch.d.ts.map

package/dist/pty/exit-latch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-latch.d.ts","sourceRoot":"","sources":["../../src/pty/exit-latch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;gBAE7B,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;IAO3C,oFAAoF;IACpF,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAevF,yEAAyE;IACzE,OAAO,IAAI,IAAI;CAGhB"}

package/dist/pty/exit-latch.js

@@ -0,0 +1,50 @@
+/**
+ * Latches one PTY's exit from a single subscription. node-pty never replays an exit to a
+ * later subscriber, so a waiter that subscribed only after the exit would sit out its
+ * whole timeout. Shared by termination (PRD §9.4, C-LIFE-10), which awaits a process-table
+ * sweep before any SIGKILL (after a SIGTERM only when the leader outlasts it), and by
+ * Codex's `setModel` restore (§5.3, C-CODEX-14), which waits for a closing CLI to exit
+ * before restoring `config.toml`.
+ */
+export class PtyExitLatch {
+    observed = false;
+    waiters = new Set();
+    unsubscribe;
+    constructor(pty) {
+        this.unsubscribe = pty.onExit(() => {
+            this.observed = true;
+            for (const wake of this.waiters)
+                wake();
+        });
+    }
+    /** Whether the exit has been observed. From then on the PTY's pid may be reused. */
+    get exited() {
+        return this.observed;
+    }
+    /**
+     * Resolves `true` once the exit is observed, or `false` after `timeoutMs`, so a stuck
+     * CLI cannot hold its waiter. With `unref`, the pending timer does not keep the host
+     * process alive.
+     */
+    within(timeoutMs, options = {}) {
+        if (this.observed)
+            return Promise.resolve(true);
+        return new Promise((resolve) => {
+            const settle = (exited) => {
+                clearTimeout(timer);
+                this.waiters.delete(wake);
+                resolve(exited);
+            };
+            const wake = () => settle(true);
+            const timer = setTimeout(() => settle(false), timeoutMs);
+            if (options.unref === true)
+                timer.unref();
+            this.waiters.add(wake);
+        });
+    }
+    /** Drops the exit subscription; `exited` keeps what it last observed. */
+    dispose() {
+        this.unsubscribe();
+    }
+}
+//# sourceMappingURL=exit-latch.js.map

package/dist/pty/exit-latch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-latch.js","sourceRoot":"","sources":["../../src/pty/exit-latch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,OAAO,YAAY;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IAChC,WAAW,CAAa;IAEzC,YAAY,GAA+B;QACzC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,oFAAoF;IACpF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,UAAwC,EAAE;QAClE,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,CAAC,MAAe,EAAQ,EAAE;gBACvC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC;YACF,MAAM,IAAI,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,OAAO;QACL,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/runtime/exit-status.d.ts

@@ -0,0 +1,7 @@
+/**
+ * A process's exit as a shell reports it, shared by `elwood interactive` (PRD §12A.9,
+ * C-CLI-25) and the probe runner (§9.2, C-PERF-03).
+ */
+/** A signal-terminated process maps to the shell convention 128 + signal number. */
+export declare function exitStatus(code: number | null, signal: NodeJS.Signals | null): number;
+//# sourceMappingURL=exit-status.d.ts.map

package/dist/runtime/exit-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-status.d.ts","sourceRoot":"","sources":["../../src/runtime/exit-status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,MAAM,CAIrF"}

package/dist/runtime/exit-status.js

@@ -0,0 +1,13 @@
+/**
+ * A process's exit as a shell reports it, shared by `elwood interactive` (PRD §12A.9,
+ * C-CLI-25) and the probe runner (§9.2, C-PERF-03).
+ */
+import { constants } from "node:os";
+/** A signal-terminated process maps to the shell convention 128 + signal number. */
+export function exitStatus(code, signal) {
+    if (code !== null)
+        return code;
+    const number = signal === null ? undefined : constants.signals[signal];
+    return number === undefined ? 1 : 128 + number;
+}
+//# sourceMappingURL=exit-status.js.map

package/dist/runtime/exit-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-status.js","sourceRoot":"","sources":["../../src/runtime/exit-status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,IAAmB,EAAE,MAA6B;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC;AACjD,CAAC"}

package/dist/runtime/home-guard/index.d.ts

@@ -0,0 +1,45 @@
+/**
+ * What the e2e home guard (PRD §12, C-E2E-24) and the code that reads its stops share: the
+ * variable listing the suite's private homes, which home variables the guard checks, the
+ * guard's exit status, and the marker that starts the line it writes, followed by its reason.
+ * The marker ends in a token drawn once per parent process, so neither a startup file nor the
+ * agent or probe command can print it, and only a shell that exited `homeGuardExitCode` after
+ * writing it counts as stopped by the guard. Owned here, apart from the guard script in
+ * `shell.ts`, so the probe runner and the startup check that read it never load the shell
+ * helpers.
+ */
+import { StreamMarkerWatcher } from "../stream-marker.ts";
+/**
+ * The variable listing the e2e suite's private CLI homes as a JSON array of absolute paths,
+ * each home in its given and its real spelling.
+ */
+export declare const homeGuardHomesKey = "ELWOOD_E2E_PRIVATE_HOMES";
+/** The exit status of a login shell the e2e home guard stopped. */
+export declare const homeGuardExitCode = 97;
+/** The marker that starts the line the guard writes, before its reason, as it exits. */
+export declare const homeGuardStopMarker: string;
+/** Why a launch the e2e home guard stopped failed, for its start or probe error. */
+export declare const homeGuardStoppedReason: string;
+/** The private CLI homes and Claude temp root protected during e2e launches. */
+declare const homeVariables: readonly ["CLAUDE_CONFIG_DIR", "CODEX_HOME", "CLAUDE_CODE_TMPDIR"];
+export type HomeVariable = (typeof homeVariables)[number];
+/** The registered homes, or `undefined` when `raw` is not a JSON array of absolute paths. */
+export declare function privateHomes(raw: string): readonly string[] | undefined;
+/** The home variables the guard checks: those Elwood's own environment sets to one of `homes`. */
+export declare function guardedVariables(homes: readonly string[]): readonly HomeVariable[];
+/**
+ * Whether the guard checks a launch Elwood starts now, so that it can stop it and write the
+ * stop marker: the list is set, and either cannot be read, which stops every launch, or names a
+ * home that a guarded variable is set to.
+ */
+export declare function homeGuardChecksLaunch(): boolean;
+/**
+ * Whether a login shell that exited with `status` was stopped by the e2e home guard: only if
+ * its output also carried the stop marker (`sawMarker`, asked only after a status-97 exit),
+ * since the status alone could be the command's own.
+ */
+export declare function homeGuardStopped(status: number | null, sawMarker: () => boolean): boolean;
+/** A watcher for the stop marker in one stream. */
+export declare function watchForStopMarker(): StreamMarkerWatcher;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/home-guard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/home-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,iBAAiB,6BAA6B,CAAC;AAE5D,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,QAAgE,CAAC;AAEjG,oFAAoF;AACpF,eAAO,MAAM,sBAAsB,QAG2B,CAAC;AAE/D,gFAAgF;AAChF,QAAA,MAAM,aAAa,oEAAqE,CAAC;AAEzF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAQvE;AAED,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,YAAY,EAAE,CAElF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAK/C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,OAAO,CAEzF;AAID,mDAAmD;AACnD,wBAAgB,kBAAkB,IAAI,mBAAmB,CAExD"}

package/dist/runtime/home-guard/index.js

@@ -0,0 +1,69 @@
+/**
+ * What the e2e home guard (PRD §12, C-E2E-24) and the code that reads its stops share: the
+ * variable listing the suite's private homes, which home variables the guard checks, the
+ * guard's exit status, and the marker that starts the line it writes, followed by its reason.
+ * The marker ends in a token drawn once per parent process, so neither a startup file nor the
+ * agent or probe command can print it, and only a shell that exited `homeGuardExitCode` after
+ * writing it counts as stopped by the guard. Owned here, apart from the guard script in
+ * `shell.ts`, so the probe runner and the startup check that read it never load the shell
+ * helpers.
+ */
+import { randomBytes } from "node:crypto";
+import { isStringArray } from "../../core/predicates.js";
+import { StreamMarkerWatcher } from "../stream-marker.js";
+/**
+ * The variable listing the e2e suite's private CLI homes as a JSON array of absolute paths,
+ * each home in its given and its real spelling.
+ */
+export const homeGuardHomesKey = "ELWOOD_E2E_PRIVATE_HOMES";
+/** The exit status of a login shell the e2e home guard stopped. */
+export const homeGuardExitCode = 97;
+/** The marker that starts the line the guard writes, before its reason, as it exits. */
+export const homeGuardStopMarker = `elwood-home-guard-stopped-${randomBytes(8).toString("hex")}`;
+/** Why a launch the e2e home guard stopped failed, for its start or probe error. */
+export const homeGuardStoppedReason = "the e2e home guard stopped its login shell: a startup file left CODEX_HOME, " +
+    "CLAUDE_CONFIG_DIR, or CLAUDE_CODE_TMPDIR unexported or not one of the suite's private homes, or " +
+    `${homeGuardHomesKey} is not a JSON array of absolute paths`;
+/** The private CLI homes and Claude temp root protected during e2e launches. */
+const homeVariables = ["CLAUDE_CONFIG_DIR", "CODEX_HOME", "CLAUDE_CODE_TMPDIR"];
+/** The registered homes, or `undefined` when `raw` is not a JSON array of absolute paths. */
+export function privateHomes(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return undefined;
+    }
+    return isStringArray(parsed) && parsed.every((home) => home.startsWith("/")) ? parsed : undefined;
+}
+/** The home variables the guard checks: those Elwood's own environment sets to one of `homes`. */
+export function guardedVariables(homes) {
+    return homeVariables.filter((name) => homes.includes(process.env[name] ?? ""));
+}
+/**
+ * Whether the guard checks a launch Elwood starts now, so that it can stop it and write the
+ * stop marker: the list is set, and either cannot be read, which stops every launch, or names a
+ * home that a guarded variable is set to.
+ */
+export function homeGuardChecksLaunch() {
+    const raw = process.env[homeGuardHomesKey] ?? "";
+    if (raw === "")
+        return false;
+    const homes = privateHomes(raw);
+    return homes === undefined || guardedVariables(homes).length > 0;
+}
+/**
+ * Whether a login shell that exited with `status` was stopped by the e2e home guard: only if
+ * its output also carried the stop marker (`sawMarker`, asked only after a status-97 exit),
+ * since the status alone could be the command's own.
+ */
+export function homeGuardStopped(status, sawMarker) {
+    return status === homeGuardExitCode && sawMarker();
+}
+const stopMarkerBytes = Buffer.from(homeGuardStopMarker);
+/** A watcher for the stop marker in one stream. */
+export function watchForStopMarker() {
+    return new StreamMarkerWatcher(stopMarkerBytes);
+}
+//# sourceMappingURL=index.js.map

package/dist/runtime/home-guard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/home-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAE5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAEpC,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAEjG,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GACjC,8EAA8E;IAC9E,kGAAkG;IAClG,GAAG,iBAAiB,wCAAwC,CAAC;AAE/D,gFAAgF;AAChF,MAAM,aAAa,GAAG,CAAC,mBAAmB,EAAE,YAAY,EAAE,oBAAoB,CAAU,CAAC;AAIzF,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACpG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB,EAAE,SAAwB;IAC9E,OAAO,MAAM,KAAK,iBAAiB,IAAI,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAEzD,mDAAmD;AACnD,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAClD,CAAC"}

package/dist/runtime/loop-restore.d.ts

@@ -1,10 +1,10 @@
-/** Restores persisted loop definitions before live resources start (PRD §5.9/§9.3). */
-import { type PersistedLoopDefinition, readLoopDefinitions, writeLoopDefinitions } from "../state/loop-store.ts";
-type LoopRestoreIo = {
-    readonly read: typeof readLoopDefinitions;
-    readonly write: typeof writeLoopDefinitions;
-};
-/** Read definitions and durably prune expiry before a resumed PTY or bridge is created. */
-export declare function loadRuntimeLoopDefinitions(stateDir: string, elwoodSessionId: string, now?: number, io?: LoopRestoreIo): readonly PersistedLoopDefinition[];
-export {};
+/** Restores persisted loop definitions before live resources start (PRD §5.9/§9.3, C-API-20). */
+import type { StateFileWriter } from "../state/launch-ownership.ts";
+import { type PersistedLoopDefinition, readLoopSidecar } from "../state/loop-store.ts";
+/**
+ * Read definitions and durably prune expiry before a resumed PTY or bridge is created. The prune
+ * goes through the launch's `write`, with the text it was read from, so a launch that then fails
+ * restores the sidecar it found (C-API-20, C-LOOP-13).
+ */
+export declare function loadRuntimeLoopDefinitions(stateDir: string, elwoodSessionId: string, write: StateFileWriter, now?: number, read?: typeof readLoopSidecar): readonly PersistedLoopDefinition[];
 //# sourceMappingURL=loop-restore.d.ts.map

package/dist/runtime/loop-restore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop-restore.d.ts","sourceRoot":"","sources":["../../src/runtime/loop-restore.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAGvF,OAAO,EACL,KAAK,uBAAuB,EAE5B,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAEhC,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,IAAI,EAAE,OAAO,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;CAC7C,CAAC;AAOF,2FAA2F;AAC3F,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,GAAG,SAAa,EAChB,EAAE,GAAE,aAAyB,GAC5B,SAAS,uBAAuB,EAAE,CAcpC"}
+{"version":3,"file":"loop-restore.d.ts","sourceRoot":"","sources":["../../src/runtime/loop-restore.ts"],"names":[],"mappings":"AAAA,iGAAiG;AAGjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACL,KAAK,uBAAuB,EAE5B,eAAe,EAEhB,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,KAAK,EAAE,eAAe,EACtB,GAAG,SAAa,EAChB,IAAI,yBAAkB,GACrB,SAAS,uBAAuB,EAAE,CAgBpC"}

package/dist/runtime/loop-restore.js

@@ -1,19 +1,19 @@
-/** Restores persisted loop definitions before live resources start (PRD §5.9/§9.3). */
+/** Restores persisted loop definitions before live resources start (PRD §5.9/§9.3, C-API-20). */
 import { elwoodError } from "../core/errors.js";
-import { pruneExpiredLoopDefinitions, readLoopDefinitions, writeLoopDefinitions, } from "../state/loop-store.js";
-const defaultIo = {
-    read: readLoopDefinitions,
-    write: writeLoopDefinitions,
-};
-/** Read definitions and durably prune expiry before a resumed PTY or bridge is created. */
-export function loadRuntimeLoopDefinitions(stateDir, elwoodSessionId, now = Date.now(), io = defaultIo) {
-    const definitions = io.read(stateDir, elwoodSessionId);
+import { pruneExpiredLoopDefinitions, readLoopSidecar, writeLoopDefinitions, } from "../state/loop-store.js";
+/**
+ * Read definitions and durably prune expiry before a resumed PTY or bridge is created. The prune
+ * goes through the launch's `write`, with the text it was read from, so a launch that then fails
+ * restores the sidecar it found (C-API-20, C-LOOP-13).
+ */
+export function loadRuntimeLoopDefinitions(stateDir, elwoodSessionId, write, now = Date.now(), read = readLoopSidecar) {
+    const { definitions, text } = read(stateDir, elwoodSessionId);
     const expired = definitions.find((definition) => definition.expiresAt <= now);
     if (expired === undefined)
         return definitions;
     const active = pruneExpiredLoopDefinitions(definitions, now);
     try {
-        io.write(stateDir, elwoodSessionId, active);
+        writeLoopDefinitions(stateDir, elwoodSessionId, active, (path, next) => write(path, next, text));
     }
     catch {
         // Details name only the loop id, never its prompt (§10 loop_persistence_failed).

package/dist/runtime/loop-restore.js.map

@@ -1 +1 @@
-{"version":3,"file":"loop-restore.js","sourceRoot":"","sources":["../../src/runtime/loop-restore.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAEvF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAEL,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAOhC,MAAM,SAAS,GAAkB;IAC/B,IAAI,EAAE,mBAAmB;IACzB,KAAK,EAAE,oBAAoB;CAC5B,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,eAAuB,EACvB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,KAAoB,SAAS;IAE7B,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC9C,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;QACjF,MAAM,WAAW,CAAC,yBAAyB,EAAE,qCAAqC,EAAE;YAClF,MAAM,EAAE,OAAO,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"loop-restore.js","sourceRoot":"","sources":["../../src/runtime/loop-restore.ts"],"names":[],"mappings":"AAAA,iGAAiG;AAEjG,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAEL,2BAA2B,EAC3B,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,eAAuB,EACvB,KAAsB,EACtB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAChB,IAAI,GAAG,eAAe;IAEtB,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC9C,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,oBAAoB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACrE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;QACjF,MAAM,WAAW,CAAC,yBAAyB,EAAE,qCAAqC,EAAE;YAClF,MAAM,EAAE,OAAO,CAAC,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/probe/capped-buffer.d.ts

@@ -0,0 +1,16 @@
+/**
+ * A probe's captured stream, bounded by the per-stream byte cap. Implements the output bound of
+ * PRD §9.2 (C-PERF-03): a CLI that floods its output cannot flood Elwood's memory.
+ */
+/** Each captured stream's own byte cap, not the probe's total (C-PERF-03). */
+export declare const maxProbeStreamOutputBytes = 1000000;
+/** Accumulates stream chunks up to a hard byte cap, tracking overflow. */
+export declare class CappedBuffer {
+    private chunks;
+    private byteLength;
+    overflowed: boolean;
+    append(chunk: Buffer): void;
+    text(): string;
+    release(): void;
+}
+//# sourceMappingURL=capped-buffer.d.ts.map

package/dist/runtime/probe/capped-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capped-buffer.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/capped-buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,UAAY,CAAC;AAEnD,0EAA0E;AAC1E,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,UAAU,CAAK;IACvB,UAAU,UAAS;IAEnB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAc3B,IAAI,IAAI,MAAM;IASd,OAAO,IAAI,IAAI;CAGhB"}

package/dist/runtime/probe/capped-buffer.js

@@ -0,0 +1,38 @@
+/**
+ * A probe's captured stream, bounded by the per-stream byte cap. Implements the output bound of
+ * PRD §9.2 (C-PERF-03): a CLI that floods its output cannot flood Elwood's memory.
+ */
+import { completeUtf8Length } from "../../core/utf8.js";
+/** Each captured stream's own byte cap, not the probe's total (C-PERF-03). */
+export const maxProbeStreamOutputBytes = 1_000_000;
+/** Accumulates stream chunks up to a hard byte cap, tracking overflow. */
+export class CappedBuffer {
+    chunks = [];
+    byteLength = 0;
+    overflowed = false;
+    append(chunk) {
+        // Once the cap is hit the probe is aborted and its pipes destroyed, so no chunk
+        // ever arrives after `overflowed` is set; the first over-cap chunk is the last.
+        const remaining = maxProbeStreamOutputBytes - this.byteLength;
+        if (chunk.length > remaining) {
+            this.chunks.push(chunk.subarray(0, remaining));
+            this.byteLength = maxProbeStreamOutputBytes;
+            this.overflowed = true;
+            return;
+        }
+        this.chunks.push(chunk);
+        this.byteLength += chunk.length;
+    }
+    text() {
+        // Byte capping can split a multibyte code point at the boundary. Drop any
+        // incomplete trailing UTF-8 sequence so the decoded string re-encodes to
+        // at most the byte cap (C-PERF-03) rather than growing via a replacement
+        // character.
+        const bytes = Buffer.concat(this.chunks);
+        return bytes.subarray(0, completeUtf8Length(bytes)).toString("utf8");
+    }
+    release() {
+        this.chunks = [];
+    }
+}
+//# sourceMappingURL=capped-buffer.js.map

package/dist/runtime/probe/capped-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capped-buffer.js","sourceRoot":"","sources":["../../../src/runtime/probe/capped-buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,OAAO,YAAY;IACf,MAAM,GAAa,EAAE,CAAC;IACtB,UAAU,GAAG,CAAC,CAAC;IACvB,UAAU,GAAG,KAAK,CAAC;IAEnB,MAAM,CAAC,KAAa;QAClB,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,SAAS,GAAG,yBAAyB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC;YAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,IAAI;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,aAAa;QACb,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/runtime/probe/capture.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Where a probe's output is captured, bounded by the per-stream byte cap (PRD §9.2, C-PERF-03,
+ * C-PERF-05). A directly spawned command owns its stdout and stderr pipes, so they are captured
+ * as they arrive. A login shell's pipes are shared with everything its startup files run. A
+ * DEBUG or ZERR trap writes to them while the command runs, an EXIT trap and `.zlogout` write
+ * after it, and a background helper can write at any time, so no marker can tell their output
+ * from the command's. A probe script therefore `exec`s its command with stdout and stderr
+ * redirected into two named pipes in a directory made for that probe alone (`probeScript`), and
+ * the shell's own pipes are drained and never kept.
+ */
+import type { Readable } from "node:stream";
+/** The probe process: what a capture reads, and the exit after which only its heirs write. */
+export type ProbeChild = {
+    readonly stdout: Readable;
+    readonly stderr: Readable;
+    once(event: "exit", listener: () => void): unknown;
+};
+/** What a capture reports while it reads. */
+export type CaptureEvents = {
+    /** A stream passed the cap. */
+    readonly overflowed: () => void;
+    /**
+     * Every named pipe has ended after the probe exited: nothing holds its write end. Only named
+     * pipes send it. A process's own pipes end before its `close`, so a capture of them is
+     * complete by then.
+     */
+    readonly ended: () => void;
+};
+/** One probe's output capture. */
+export type ProbeCapture = {
+    /** The probe's arguments as the capture runs them: a probe script's output pointed at it. */
+    args(args: readonly string[]): readonly string[];
+    /** Captures `child`'s output. */
+    watch(child: ProbeChild, events: CaptureEvents): void;
+    /**
+     * Whether the capture is complete, once the probe's process has closed. A capture of the
+     * process's own pipes always is. Named pipes are complete once nothing holds their write ends,
+     * which a process the command started can delay past the `close`.
+     */
+    ended(): boolean;
+    /** Each stream's capture, stdout then stderr, at most the cap. */
+    text(): [string, string];
+    /**
+     * Drops the capture, closes what it opened, and removes it. Named pipes' directory is removed
+     * at once, unless the command changed it: then the removal runs off the event loop and can
+     * finish after this returns. Safe to call twice.
+     */
+    release(): void;
+};
+/**
+ * The capture for a probe: named pipes for a script that `exec`s its command into them,
+ * nothing for a script answered by its status alone, and the pipes of any other command.
+ */
+export declare function probeCapture(args: readonly string[]): Promise<ProbeCapture>;
+//# sourceMappingURL=capture.d.ts.map

package/dist/runtime/probe/capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../../src/runtime/probe/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAK5C,8FAA8F;AAC9F,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACpD,CAAC;AAEF,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG;IAC1B,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;CAC5B,CAAC;AAEF,kCAAkC;AAClC,MAAM,MAAM,YAAY,GAAG;IACzB,6FAA6F;IAC7F,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAAC;IACjD,iCAAiC;IACjC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IACtD;;;;OAIG;IACH,KAAK,IAAI,OAAO,CAAC;IACjB,kEAAkE;IAClE,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB;;;;OAIG;IACH,OAAO,IAAI,IAAI,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAG3E"}

package/dist/runtime/probe/capture.js

@@ -0,0 +1,71 @@
+/**
+ * Where a probe's output is captured, bounded by the per-stream byte cap (PRD §9.2, C-PERF-03,
+ * C-PERF-05). A directly spawned command owns its stdout and stderr pipes, so they are captured
+ * as they arrive. A login shell's pipes are shared with everything its startup files run. A
+ * DEBUG or ZERR trap writes to them while the command runs, an EXIT trap and `.zlogout` write
+ * after it, and a background helper can write at any time, so no marker can tell their output
+ * from the command's. A probe script therefore `exec`s its command with stdout and stderr
+ * redirected into two named pipes in a directory made for that probe alone (`probeScript`), and
+ * the shell's own pipes are drained and never kept.
+ */
+import { CappedBuffer } from "./capped-buffer.js";
+import { NamedPipeCapture } from "./named-pipes.js";
+import { announcesStart, probeOutputRedirect } from "./start.js";
+/**
+ * The capture for a probe: named pipes for a script that `exec`s its command into them,
+ * nothing for a script answered by its status alone, and the pipes of any other command.
+ */
+export function probeCapture(args) {
+    if (args.at(-1)?.endsWith(probeOutputRedirect))
+        return NamedPipeCapture.create();
+    return Promise.resolve(announcesStart(args) ? new DiscardedCapture() : new PipeCapture());
+}
+/** A directly spawned command's own stdout and stderr pipes. */
+class PipeCapture {
+    buffers = [new CappedBuffer(), new CappedBuffer()];
+    args(args) {
+        return args;
+    }
+    watch(child, events) {
+        [child.stdout, child.stderr].forEach((stream, index) => {
+            const buffer = this.buffers[index];
+            stream.on("data", (chunk) => {
+                buffer.append(chunk);
+                if (buffer.overflowed)
+                    events.overflowed();
+            });
+        });
+    }
+    ended() {
+        return true; // the process's `close` waits for its pipes
+    }
+    text() {
+        return [this.buffers[0].text(), this.buffers[1].text()];
+    }
+    release() {
+        // An unresolved probe's reaper retains the child and its listeners, and through them
+        // these chunks, so they are dropped here rather than left for the reaper to outlive.
+        for (const buffer of this.buffers)
+            buffer.release();
+    }
+}
+/** A login shell whose command's output went to `/dev/null`: its own pipes are drained. */
+class DiscardedCapture {
+    args(args) {
+        return args;
+    }
+    watch(child) {
+        child.stdout.resume();
+        child.stderr.resume();
+    }
+    ended() {
+        return true;
+    }
+    text() {
+        return ["", ""];
+    }
+    release() {
+        // Nothing was kept.
+    }
+}
+//# sourceMappingURL=capture.js.map