aicodeman 1.29.1 → 1.30.0

package/dist/web/reboot-restore-registry.d.ts

@@ -0,0 +1,107 @@
+/**
+ * @fileoverview The pending restore plan: what a host reboot destroyed, waiting on a click.
+ *
+ * The boot pass builds this plan inside `restoreMuxSessions()`, in the window
+ * where reconciliation has reported the dead sessions and `cleanupStaleSessions()`
+ * has not pruned their records yet. The board then offers "restore N sessions
+ * from before the reboot", and `web/routes/reboot-restore-routes` spends the plan
+ * when the user clicks.
+ *
+ * Invariants:
+ * - Entries are in-memory only. A server restart drops the plan, and nothing
+ *   re-builds it, because the records it was built from are pruned by then.
+ *   That costs the convenience this feature adds and never the conversation:
+ *   the conversation IS the transcript under `~/.claude/projects`, which
+ *   `services/unified-session-service.ts` reads for the Welcome screen's Resume
+ *   list and the Session Manager, and `resumeHistorySession()` in
+ *   `web/public/terminal-ui.js` resumes from a row there with no persisted
+ *   session record involved. A dropped plan therefore returns the user to
+ *   resuming by hand, one at a time, which is where they are without this
+ *   feature. What the plan held that a transcript does not is the owner, the
+ *   name, the env overrides, the effort and the lineage.
+ * - Module-level singleton in the style of `web/approval-inbox.ts`: no `Session`
+ *   import and no IO, which keeps it unit-testable and cycle-free.
+ * - Spending is take-then-build: `take()` removes entries synchronously, before
+ *   the route's first `await`, so a double-click or two devices cannot both
+ *   reach the same entry and put two panes on one conversation.
+ * - One restore runs at a time per owner. `beginSpending()` single-flights the
+ *   route, so two concurrent clicks cannot interleave pane creation for the same
+ *   user, while two different users never block each other.
+ *
+ * @dependencies reboot-restore (RebootRestoreEntry)
+ * @consumedby web/server (plan build at boot), web/routes/reboot-restore-routes
+ *
+ * @module web/reboot-restore-registry
+ */
+import type { RebootRestoreEntry } from '../reboot-restore.js';
+export declare class RebootRestoreRegistry {
+    /** Keyed by session id, in the order the boot pass found them. */
+    private entries;
+    /** When the boot pass built the plan, in ms since the epoch. */
+    private builtAt;
+    /**
+     * Entries handed to a restore that has not finished, by session id, each
+     * remembering which caller is spending it.
+     *
+     * A taken entry is still part of the offer until its restore resolves it, so
+     * it has to stay reachable by everything that can invalidate an offer. Holding
+     * the entries themselves — rather than a counter to compare against later —
+     * means `clear()` filters them by the SAME `canAccess(entry.owner)` predicate
+     * it already applies to the plan. A counter cannot do that, because the caller
+     * spending an entry need not be its owner: an admin may restore another user's
+     * sessions, and then the spender and the owner are different keys.
+     */
+    private parked;
+    /**
+     * Owners with a restore in flight, between its take and its last pane.
+     * Keyed by owner so one user's restore does not turn another user's click into
+     * a conflict; `take()` already guarantees no two callers get the same entry.
+     * Single-user mode has one key, `undefined`, so it behaves as one global flight.
+     */
+    private spending;
+    /** Replace the plan with what the boot pass found. An empty list clears it. */
+    set(entries: readonly RebootRestoreEntry[]): void;
+    /**
+     * The entries a viewer may see, newest plan first-come order preserved.
+     *
+     * @param canAccess Ownership predicate, so a user sees their own entries and
+     *   an admin sees all. Applied here rather than in the route so the count the
+     *   banner shows and the entries a click spends come from one filter.
+     */
+    list(canAccess: (owner: string | undefined) => boolean): RebootRestoreEntry[];
+    /**
+     * Remove and return the entries a click is about to spend.
+     *
+     * Synchronous and total: an entry leaves the plan here, before any pane is
+     * created, so a second click finds nothing to spend. Entries a caller may not
+     * access are left in place, and unknown ids are ignored.
+     *
+     * @param sessionIds The ids to spend, or undefined for every visible entry.
+     */
+    take(canAccess: (owner: string | undefined) => boolean, sessionIds: readonly string[] | undefined, spender: string | undefined): RebootRestoreEntry[];
+    /**
+     * Put entries back after a rebuild never got as far as creating a pane.
+     *
+     * Used for the click-time rejections that may resolve themselves: a workspace
+     * that comes back, a capacity limit the user makes room under, a CLI that
+     * starts once its binary is on the PATH. A conversation the user resumed by
+     * hand is NOT put back, because that one cannot stop being true, and an entry
+     * the banner keeps re-offering forever is noise only Dismiss can clear.
+     */
+    releaseFlight(spender: string | undefined, keep: readonly RebootRestoreEntry[]): void;
+    /** Drop the entries a viewer can see. Returns how many went. */
+    clear(canAccess: (owner: string | undefined) => boolean): number;
+    /**
+     * Claim the right to run a restore for one owner, or report that owner already
+     * has one running. Callers that get `true` must call `endSpending()` in a
+     * `finally` with the same owner.
+     */
+    beginSpending(owner?: string): boolean;
+    endSpending(owner?: string): void;
+    /** Test hook: forget everything, including the single-flight claim. */
+    reset(): void;
+    private dropIfExpired;
+}
+/** Process-wide singleton, mirroring `approvalInbox`. */
+export declare const rebootRestoreRegistry: RebootRestoreRegistry;
+//# sourceMappingURL=reboot-restore-registry.d.ts.map

package/dist/web/reboot-restore-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reboot-restore-registry.d.ts","sourceRoot":"","sources":["../../src/web/reboot-restore-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAQ/D,qBAAa,qBAAqB;IAChC,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAAyC;IACxD,gEAAgE;IAChE,OAAO,CAAC,OAAO,CAAK;IACpB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM,CAAiF;IAC/F;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAiC;IAEjD,+EAA+E;IAC/E,GAAG,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI;IAOjD;;;;;;OAMG;IACH,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,GAAG,kBAAkB,EAAE;IAK7E;;;;;;;;OAQG;IACH,IAAI,CACF,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,EACjD,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EACzC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,kBAAkB,EAAE;IAgBvB;;;;;;;;OAQG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI;IAiBrF,gEAAgE;IAChE,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,GAAG,MAAM;IAgBhE;;;;OAIG;IACH,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAMtC,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAIjC,uEAAuE;IACvE,KAAK,IAAI,IAAI;IAOb,OAAO,CAAC,aAAa;CAStB;AAED,yDAAyD;AACzD,eAAO,MAAM,qBAAqB,uBAA8B,CAAC"}

package/dist/web/reboot-restore-registry.js

@@ -0,0 +1,189 @@
+/**
+ * @fileoverview The pending restore plan: what a host reboot destroyed, waiting on a click.
+ *
+ * The boot pass builds this plan inside `restoreMuxSessions()`, in the window
+ * where reconciliation has reported the dead sessions and `cleanupStaleSessions()`
+ * has not pruned their records yet. The board then offers "restore N sessions
+ * from before the reboot", and `web/routes/reboot-restore-routes` spends the plan
+ * when the user clicks.
+ *
+ * Invariants:
+ * - Entries are in-memory only. A server restart drops the plan, and nothing
+ *   re-builds it, because the records it was built from are pruned by then.
+ *   That costs the convenience this feature adds and never the conversation:
+ *   the conversation IS the transcript under `~/.claude/projects`, which
+ *   `services/unified-session-service.ts` reads for the Welcome screen's Resume
+ *   list and the Session Manager, and `resumeHistorySession()` in
+ *   `web/public/terminal-ui.js` resumes from a row there with no persisted
+ *   session record involved. A dropped plan therefore returns the user to
+ *   resuming by hand, one at a time, which is where they are without this
+ *   feature. What the plan held that a transcript does not is the owner, the
+ *   name, the env overrides, the effort and the lineage.
+ * - Module-level singleton in the style of `web/approval-inbox.ts`: no `Session`
+ *   import and no IO, which keeps it unit-testable and cycle-free.
+ * - Spending is take-then-build: `take()` removes entries synchronously, before
+ *   the route's first `await`, so a double-click or two devices cannot both
+ *   reach the same entry and put two panes on one conversation.
+ * - One restore runs at a time per owner. `beginSpending()` single-flights the
+ *   route, so two concurrent clicks cannot interleave pane creation for the same
+ *   user, while two different users never block each other.
+ *
+ * @dependencies reboot-restore (RebootRestoreEntry)
+ * @consumedby web/server (plan build at boot), web/routes/reboot-restore-routes
+ *
+ * @module web/reboot-restore-registry
+ */
+/**
+ * A plan older than this is dropped on read. A machine that rebooted yesterday
+ * has moved on, and an offer nobody took by then is noise rather than a rescue.
+ */
+const PLAN_TTL_MS = 24 * 60 * 60 * 1000;
+export class RebootRestoreRegistry {
+    /** Keyed by session id, in the order the boot pass found them. */
+    entries = new Map();
+    /** When the boot pass built the plan, in ms since the epoch. */
+    builtAt = 0;
+    /**
+     * Entries handed to a restore that has not finished, by session id, each
+     * remembering which caller is spending it.
+     *
+     * A taken entry is still part of the offer until its restore resolves it, so
+     * it has to stay reachable by everything that can invalidate an offer. Holding
+     * the entries themselves — rather than a counter to compare against later —
+     * means `clear()` filters them by the SAME `canAccess(entry.owner)` predicate
+     * it already applies to the plan. A counter cannot do that, because the caller
+     * spending an entry need not be its owner: an admin may restore another user's
+     * sessions, and then the spender and the owner are different keys.
+     */
+    parked = new Map();
+    /**
+     * Owners with a restore in flight, between its take and its last pane.
+     * Keyed by owner so one user's restore does not turn another user's click into
+     * a conflict; `take()` already guarantees no two callers get the same entry.
+     * Single-user mode has one key, `undefined`, so it behaves as one global flight.
+     */
+    spending = new Set();
+    /** Replace the plan with what the boot pass found. An empty list clears it. */
+    set(entries) {
+        this.entries = new Map(entries.map((entry) => [entry.sessionId, entry]));
+        this.builtAt = entries.length > 0 ? Date.now() : 0;
+        // A fresh boot plan supersedes anything an in-flight restore still holds.
+        this.parked.clear();
+    }
+    /**
+     * The entries a viewer may see, newest plan first-come order preserved.
+     *
+     * @param canAccess Ownership predicate, so a user sees their own entries and
+     *   an admin sees all. Applied here rather than in the route so the count the
+     *   banner shows and the entries a click spends come from one filter.
+     */
+    list(canAccess) {
+        this.dropIfExpired();
+        return [...this.entries.values()].filter((entry) => canAccess(entry.owner));
+    }
+    /**
+     * Remove and return the entries a click is about to spend.
+     *
+     * Synchronous and total: an entry leaves the plan here, before any pane is
+     * created, so a second click finds nothing to spend. Entries a caller may not
+     * access are left in place, and unknown ids are ignored.
+     *
+     * @param sessionIds The ids to spend, or undefined for every visible entry.
+     */
+    take(canAccess, sessionIds, spender) {
+        this.dropIfExpired();
+        const wanted = sessionIds ? new Set(sessionIds) : undefined;
+        const taken = [];
+        for (const entry of [...this.entries.values()]) {
+            if (wanted && !wanted.has(entry.sessionId))
+                continue;
+            if (!canAccess(entry.owner))
+                continue;
+            this.entries.delete(entry.sessionId);
+            // Parked rather than forgotten: until this restore resolves the entry, a
+            // dismiss still has to be able to reach and cancel it.
+            this.parked.set(entry.sessionId, { entry, spender });
+            taken.push(entry);
+        }
+        return taken;
+    }
+    /**
+     * Put entries back after a rebuild never got as far as creating a pane.
+     *
+     * Used for the click-time rejections that may resolve themselves: a workspace
+     * that comes back, a capacity limit the user makes room under, a CLI that
+     * starts once its binary is on the PATH. A conversation the user resumed by
+     * hand is NOT put back, because that one cannot stop being true, and an entry
+     * the banner keeps re-offering forever is noise only Dismiss can clear.
+     */
+    releaseFlight(spender, keep) {
+        const wanted = new Set(keep.map((entry) => entry.sessionId));
+        let added = 0;
+        for (const [sessionId, held] of [...this.parked]) {
+            if (held.spender !== spender)
+                continue;
+            this.parked.delete(sessionId);
+            // Still parked means nothing cancelled it while the restore ran. A dismiss,
+            // an expiry or a fresh boot plan removes it from `parked`, and then it does
+            // not come back however the restore ended.
+            if (wanted.has(sessionId)) {
+                this.entries.set(sessionId, held.entry);
+                added += 1;
+            }
+        }
+        if (added > 0 && this.builtAt === 0)
+            this.builtAt = Date.now();
+    }
+    /** Drop the entries a viewer can see. Returns how many went. */
+    clear(canAccess) {
+        const removable = [...this.entries.values()].filter((entry) => canAccess(entry.owner));
+        for (const entry of removable)
+            this.entries.delete(entry.sessionId);
+        // Entries a restore is holding are dismissed by the same rule, so a dismiss
+        // that lands mid-restore wins. Judged on the ENTRY's owner, exactly as above,
+        // rather than on who happens to be restoring it.
+        let parkedRemoved = 0;
+        for (const [sessionId, held] of [...this.parked]) {
+            if (!canAccess(held.entry.owner))
+                continue;
+            this.parked.delete(sessionId);
+            parkedRemoved += 1;
+        }
+        if (this.entries.size === 0)
+            this.builtAt = 0;
+        return removable.length + parkedRemoved;
+    }
+    /**
+     * Claim the right to run a restore for one owner, or report that owner already
+     * has one running. Callers that get `true` must call `endSpending()` in a
+     * `finally` with the same owner.
+     */
+    beginSpending(owner) {
+        if (this.spending.has(owner))
+            return false;
+        this.spending.add(owner);
+        return true;
+    }
+    endSpending(owner) {
+        this.spending.delete(owner);
+    }
+    /** Test hook: forget everything, including the single-flight claim. */
+    reset() {
+        this.entries.clear();
+        this.parked.clear();
+        this.builtAt = 0;
+        this.spending.clear();
+    }
+    dropIfExpired() {
+        if (this.builtAt > 0 && Date.now() - this.builtAt > PLAN_TTL_MS) {
+            // A restore that took entries just before the expiry must not hand them
+            // back afterwards and give an expired plan another full day of life.
+            this.parked.clear();
+            this.entries.clear();
+            this.builtAt = 0;
+        }
+    }
+}
+/** Process-wide singleton, mirroring `approvalInbox`. */
+export const rebootRestoreRegistry = new RebootRestoreRegistry();
+//# sourceMappingURL=reboot-restore-registry.js.map

package/dist/web/reboot-restore-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reboot-restore-registry.js","sourceRoot":"","sources":["../../src/web/reboot-restore-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH;;;GAGG;AACH,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,OAAO,qBAAqB;IAChC,kEAAkE;IAC1D,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,gEAAgE;IACxD,OAAO,GAAG,CAAC,CAAC;IACpB;;;;;;;;;;;OAWG;IACK,MAAM,GAAG,IAAI,GAAG,EAAsE,CAAC;IAC/F;;;;;OAKG;IACK,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEjD,+EAA+E;IAC/E,GAAG,CAAC,OAAsC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,SAAiD;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;;OAQG;IACH,IAAI,CACF,SAAiD,EACjD,UAAyC,EACzC,OAA2B;QAE3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,MAAM,KAAK,GAAyB,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,SAAS;YACrD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrC,yEAAyE;YACzE,uDAAuD;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACH,aAAa,CAAC,OAA2B,EAAE,IAAmC;QAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;gBAAE,SAAS;YACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,4EAA4E;YAC5E,4EAA4E;YAC5E,2CAA2C;YAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxC,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjE,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,SAAiD;QACrD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,KAAK,IAAI,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpE,4EAA4E;QAC5E,8EAA8E;QAC9E,iDAAiD;QACjD,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,aAAa,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,KAAc;QAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW,CAAC,KAAc;QACxB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,uEAAuE;IACvE,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;YAChE,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,EAAE,CAAC"}

package/dist/web/routes/index.d.ts

@@ -10,6 +10,7 @@ export { registerCronRoutes } from './cron-routes.js';
 export { registerSystemRoutes } from './system-routes.js';
 export { registerHookEventRoutes } from './hook-event-routes.js';
 export { registerApprovalRoutes } from './approval-routes.js';
+export { registerRebootRestoreRoutes } from './reboot-restore-routes.js';
 export { registerReadMyMindRoutes } from './readmymind-routes.js';
 export { registerStatusTelemetryRoutes } from './status-telemetry-routes.js';
 export { registerCaseRoutes } from './case-routes.js';

package/dist/web/routes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/web/routes/index.js

@@ -10,6 +10,7 @@ export { registerCronRoutes } from './cron-routes.js';
 export { registerSystemRoutes } from './system-routes.js';
 export { registerHookEventRoutes } from './hook-event-routes.js';
 export { registerApprovalRoutes } from './approval-routes.js';
+export { registerRebootRestoreRoutes } from './reboot-restore-routes.js';
 export { registerReadMyMindRoutes } from './readmymind-routes.js';
 export { registerStatusTelemetryRoutes } from './status-telemetry-routes.js';
 export { registerCaseRoutes } from './case-routes.js';

package/dist/web/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/web/routes/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/web/routes/reboot-restore-routes.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @fileoverview Reboot-restore routes: offer back the sessions a host reboot destroyed.
+ *
+ * The boot pass leaves a plan in `web/reboot-restore-registry` when the machine
+ * plausibly rebooted. The board reads it, shows a banner, and the user decides:
+ * - `GET  /api/reboot-restore`: what is on offer, ownership-scoped
+ * - `POST /api/reboot-restore/restore`: rebuild some or all of it
+ * - `POST /api/reboot-restore/dismiss`: drop the offer
+ *
+ * A click, not the heuristic, is what creates panes. The heuristic only decides
+ * whether the banner appears, so a wrong yes costs a line of text the user
+ * dismisses rather than N CLI processes nobody asked for.
+ *
+ * Rebuilding is take-then-build: entries leave the plan synchronously at the top
+ * of the route, before the first `await`, and the whole route is single-flighted,
+ * so a double-click or two devices cannot put two panes on one conversation.
+ * Three things are re-checked at click time rather than trusted from boot: the
+ * owner's privilege grant, the workspace still being on disk, and the
+ * conversation not already being live because the user resumed it by hand.
+ *
+ * A rebuilt session comes back attached, idle and disarmed. Respawn controllers
+ * and Ralph loops are deliberately not re-armed, and its terminal scrollback is
+ * gone, because the pane is new. The banner says so.
+ */
+import { FastifyInstance } from 'fastify';
+import type { SessionPort, EventPort, ConfigPort, InfraPort } from '../ports/index.js';
+type RebootRestoreCtx = SessionPort & EventPort & ConfigPort & InfraPort;
+export declare function registerRebootRestoreRoutes(app: FastifyInstance, ctx: RebootRestoreCtx): void;
+export {};
+//# sourceMappingURL=reboot-restore-routes.d.ts.map

package/dist/web/routes/reboot-restore-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reboot-restore-routes.d.ts","sourceRoot":"","sources":["../../../src/web/routes/reboot-restore-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAuB1C,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEvF,KAAK,gBAAgB,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAazE,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAyP7F"}