botmux 3.14.0 → 3.16.0

package/dist/cli/log-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-tail.js","sourceRoot":"","sources":["../../src/cli/log-tail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAc,MAAM,SAAS,CAAC;AAuB1F,MAAM,UAAU,aAAa,CAAC,MAAqB,EAAE,IAAY;IAC/D,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,CAAS;IACvD,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAC5D,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,qBAAqB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9C,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC;IAC3B,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IAC1E,KAAK,IAAI,MAAM,GAAG,yBAAyB,GAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,0EAA0E;QAC1E,sEAAsE;QACtE,IAAI,YAAY,GAAG,SAAS,GAAG,CAAC,IAAI,MAAM,IAAI,qBAAqB,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAoBD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAAgB;IACtB,SAAS,CAA8B;IACvC,cAAc,CAAS;IAChC,KAAK,CAA6B;IAE1C,YAAY,IAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS;SACvE,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC;IACnD,CAAC;IAED,6EAA6E;IAC7E,gBAAgB,CAAC,KAAa;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7C,IAAI,KAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChE,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChG,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACpC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBACrC,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,sEAAsE;IACtE,QAAQ;QACN,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAY,CAAC;YACjB,IAAI,CAAC;gBACH,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,wDAAwD;gBACxD,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;gBACzB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC;gBACtB,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;YAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClD,iEAAiE;gBACjE,mEAAmE;gBACnE,qEAAqE;gBACrE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;YACrB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrC,kEAAkE;gBAClE,oDAAoD;gBACpD,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACtB,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC1C,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC/F,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;YACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/cli/pm2-env.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Scrub the env handed to a pm2 invocation, in place.
+ *
+ * pm2 persists the CALLER's environment into every managed app it starts or
+ * restarts — and into dump.pm2, which `pm2 resurrect` replays after a reboot,
+ * bypassing this function entirely. So anything left here is not just handed to
+ * the fleet, it is written to disk under ~/.botmux/pm2 and readable from
+ * `pm2 describe` / `pm2 jlist` output for as long as that dump survives.
+ *
+ * Extracted from cli.ts's pm2Env() so the resulting env is assertable in a test
+ * (cli.ts is a multi-thousand-line command module with top-level side effects).
+ */
+export declare function scrubPm2CallerEnv(env: NodeJS.ProcessEnv): void;
+/** Build the env for a pm2 invocation with an isolated PM2_HOME. */
+export declare function pm2CallerEnv(base: NodeJS.ProcessEnv, home: string): NodeJS.ProcessEnv;
+//# sourceMappingURL=pm2-env.d.ts.map

package/dist/cli/pm2-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-env.d.ts","sourceRoot":"","sources":["../../src/cli/pm2-env.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CA0C9D;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAIrF"}

package/dist/cli/pm2-env.js

@@ -0,0 +1,63 @@
+import { scrubClaudeSessionMarkerEnv, scrubInvokerTerminalEnv, scrubSessionCliHomeEnv, scrubSessionTurnMarkerEnv, scrubWorkflowWorkerEnv, stripDashboardH5Env, } from '../utils/child-env.js';
+/**
+ * Scrub the env handed to a pm2 invocation, in place.
+ *
+ * pm2 persists the CALLER's environment into every managed app it starts or
+ * restarts — and into dump.pm2, which `pm2 resurrect` replays after a reboot,
+ * bypassing this function entirely. So anything left here is not just handed to
+ * the fleet, it is written to disk under ~/.botmux/pm2 and readable from
+ * `pm2 describe` / `pm2 jlist` output for as long as that dump survives.
+ *
+ * Extracted from cli.ts's pm2Env() so the resulting env is assertable in a test
+ * (cli.ts is a multi-thousand-line command module with top-level side effects).
+ */
+export function scrubPm2CallerEnv(env) {
+    // A `botmux start/restart` invoked from ANY process that carries a
+    // session-level CLI home pointer — most commonly a bot's own session during
+    // self-upgrade, whose env holds its injected CLAUDE_CONFIG_DIR — would poison
+    // ALL workers, making every non-isolated bot read/write a sibling bot's home.
+    // Strip at this boundary so the daemon stays session-agnostic; daemon/worker
+    // boot scrub the same keys against stale dumps (see SESSION_CLI_HOME_ENV_KEYS
+    // for the full story, including why GROK_HOME is exempt and why deleting
+    // beats pinning a default).
+    scrubSessionCliHomeEnv(env);
+    // Claude session markers ride the same pm2 env-persistence vector; baked in
+    // they eventually flip transcript saving off fleet-wide once the tmux server
+    // respawns from a poisoned daemon (see CLAUDE_SESSION_MARKER_ENV_KEYS).
+    scrubClaudeSessionMarkerEnv(env);
+    // Workflow/goal markers identify one short-lived node worker. Persisting
+    // them in PM2 would make every daemon — and then every ordinary chat worker
+    // it forks — run in workflow mode after a restart initiated from that node.
+    scrubWorkflowWorkerEnv(env);
+    // Dashboard-only Feishu H5 login family (BOTMUX_DASHBOARD_FEISHU_H5_*,
+    // APP_SECRET included). It is deliberately kept OUT of the baked PM2 env
+    // block (DAEMON_ENV_KEYS) so it never lands in ecosystem.config.json — but
+    // that is defeated if it rides in through the caller instead: `botmux
+    // restart` issued from the dashboard process (update/restart button) or from
+    // a shell that exported the family would bake the app secret into every
+    // managed app's pm2 metadata and into dump.pm2. The dashboard has the one
+    // legitimate consumer and loads the family itself (index-dashboard.ts), so
+    // nothing needs it here.
+    stripDashboardH5Env(env);
+    // Invoker-terminal fingerprints (NO_COLOR=1 / CODEX_CI=1 / PAGER=cat from
+    // an agent's non-interactive shell) ride the same persistence vector; baked
+    // in they turn every session PTY on the machine colorless. Same class, same
+    // boundary — see INVOKER_TERMINAL_ENV_KEYS.
+    scrubInvokerTerminalEnv(env);
+    // Turn-scoped session identity and capabilities of the invoking bot session
+    // must not become fleet-wide daemon env — the daemon stays session-agnostic
+    // (see SESSION_TURN_MARKER_ENV_KEYS for the per-key rationale).
+    scrubSessionTurnMarkerEnv(env);
+    // Re-pin TERM to the constant every botmux PTY already forces. Deleting it
+    // outright would make pm2 CLIENT output (e.g. `botmux status` on a real
+    // TTY) fail supports-color detection and render colorless; pinning keeps
+    // the baked value deterministic and invoker-independent instead of absent.
+    env.TERM = 'xterm-256color';
+}
+/** Build the env for a pm2 invocation with an isolated PM2_HOME. */
+export function pm2CallerEnv(base, home) {
+    const env = { ...base, PM2_HOME: home };
+    scrubPm2CallerEnv(env);
+    return env;
+}
+//# sourceMappingURL=pm2-env.js.map

package/dist/cli/pm2-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-env.js","sourceRoot":"","sources":["../../src/cli/pm2-env.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAsB;IACtD,mEAAmE;IACnE,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,4BAA4B;IAC5B,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5B,4EAA4E;IAC5E,6EAA6E;IAC7E,wEAAwE;IACxE,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACjC,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5B,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,yBAAyB;IACzB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,4CAA4C;IAC5C,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC7B,4EAA4E;IAC5E,4EAA4E;IAC5E,gEAAgE;IAChE,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/B,2EAA2E;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;AAC9B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,IAAY;IAChE,MAAM,GAAG,GAAsB,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3D,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/cli/pm2-fleet-lock.d.ts

@@ -0,0 +1,26 @@
+/**
+ * One lock for every botmux-internal mutation of the shared PM2_HOME
+ * (~/.botmux/pm2): core fleet stop/start/restart AND plugin service
+ * lifecycle. Core and plugin apps live under the same God, so two separate
+ * locks would let a concurrent plugin start slip between an include-pm2
+ * restart's plugin stop and its `pm2 kill`, or between the kill and the fresh
+ * fleet start. Computed lazily so tests can repoint HOME.
+ */
+export declare function pm2FleetMutationLockTarget(): string;
+/** True only within the async call chain that currently holds the lock. */
+export declare function pm2FleetMutationLockHeld(): boolean;
+/**
+ * Serialize a PM2_HOME mutation against every other botmux flow — other
+ * processes via the file lock, other async chains in THIS process via the
+ * same file lock (file-lock treats a live same-pid holder as held, not
+ * stale). Lock order is fixed: fleet lock FIRST, then the plugin service
+ * lock — never the reverse.
+ */
+export declare function withPm2FleetMutationLock<T>(fn: () => Promise<T> | T, opts?: {
+    maxWaitMs?: number;
+}): Promise<T>;
+/** Sync variant for sync call sites (plugin service lock wrapper). */
+export declare function withPm2FleetMutationLockSync<T>(fn: () => T, opts?: {
+    maxWaitMs?: number;
+}): T;
+//# sourceMappingURL=pm2-fleet-lock.d.ts.map

package/dist/cli/pm2-fleet-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-fleet-lock.d.ts","sourceRoot":"","sources":["../../src/cli/pm2-fleet-lock.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD;AAeD,2EAA2E;AAC3E,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAC9C,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EACxB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,sEAAsE;AACtE,wBAAgB,4BAA4B,CAAC,CAAC,EAC5C,EAAE,EAAE,MAAM,CAAC,EACX,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,CAAC,CAOH"}

package/dist/cli/pm2-fleet-lock.js

@@ -0,0 +1,50 @@
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { withFileLock, withFileLockSync } from '../utils/file-lock.js';
+/**
+ * One lock for every botmux-internal mutation of the shared PM2_HOME
+ * (~/.botmux/pm2): core fleet stop/start/restart AND plugin service
+ * lifecycle. Core and plugin apps live under the same God, so two separate
+ * locks would let a concurrent plugin start slip between an include-pm2
+ * restart's plugin stop and its `pm2 kill`, or between the kill and the fresh
+ * fleet start. Computed lazily so tests can repoint HOME.
+ */
+export function pm2FleetMutationLockTarget() {
+    return join(homedir(), '.botmux', 'pm2-fleet-mutation');
+}
+/**
+ * Re-entrancy ownership is bound to the ASYNC CALL CHAIN, not the process: a
+ * module-level counter would let an unrelated concurrent flow in the same
+ * process (the dashboard serves POST /api/plugins/:id/services/* handlers
+ * concurrently) mistake "someone in this process holds the lock" for "I hold
+ * the lock" and skip the file lock entirely. AsyncLocalStorage context only
+ * flows into calls awaited UNDER the holder's callback, so nested calls
+ * (cmdRestart stopping plugin services while holding the lock) short-circuit
+ * while independent concurrent flows queue on the file lock like any other
+ * process.
+ */
+const lockOwnership = new AsyncLocalStorage();
+/** True only within the async call chain that currently holds the lock. */
+export function pm2FleetMutationLockHeld() {
+    return lockOwnership.getStore() !== undefined;
+}
+/**
+ * Serialize a PM2_HOME mutation against every other botmux flow — other
+ * processes via the file lock, other async chains in THIS process via the
+ * same file lock (file-lock treats a live same-pid holder as held, not
+ * stale). Lock order is fixed: fleet lock FIRST, then the plugin service
+ * lock — never the reverse.
+ */
+export async function withPm2FleetMutationLock(fn, opts = {}) {
+    if (lockOwnership.getStore())
+        return await fn();
+    return withFileLock(pm2FleetMutationLockTarget(), () => lockOwnership.run({ held: true }, async () => fn()), opts);
+}
+/** Sync variant for sync call sites (plugin service lock wrapper). */
+export function withPm2FleetMutationLockSync(fn, opts = {}) {
+    if (lockOwnership.getStore())
+        return fn();
+    return withFileLockSync(pm2FleetMutationLockTarget(), () => lockOwnership.run({ held: true }, fn), opts);
+}
+//# sourceMappingURL=pm2-fleet-lock.js.map

package/dist/cli/pm2-fleet-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-fleet-lock.js","sourceRoot":"","sources":["../../src/cli/pm2-fleet-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AAE9D,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACtC,OAAO,aAAa,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,EAAwB,EACxB,OAA+B,EAAE;IAEjC,IAAI,aAAa,CAAC,QAAQ,EAAE;QAAE,OAAO,MAAM,EAAE,EAAE,CAAC;IAChD,OAAO,YAAY,CACjB,0BAA0B,EAAE,EAC5B,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,EACzD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,4BAA4B,CAC1C,EAAW,EACX,OAA+B,EAAE;IAEjC,IAAI,aAAa,CAAC,QAAQ,EAAE;QAAE,OAAO,EAAE,EAAE,CAAC;IAC1C,OAAO,gBAAgB,CACrB,0BAA0B,EAAE,EAC5B,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAC3C,IAAI,CACL,CAAC;AACJ,CAAC"}

package/dist/cli/pm2-god-retirement.d.ts

@@ -0,0 +1,59 @@
+/**
+ * `restart --include-pm2` God retirement.
+ *
+ * A PID-addressed kill(2) cannot bind a signal to a PID+birth generation, so
+ * this module never signals the God by PID. The kill is addressed to the
+ * PM2_HOME control socket (`pm2 kill`) — i.e. to
+ * "whichever God owns this home", which is exactly the object being retired —
+ * and the recorded pid+birth identity is used only to VERIFY disappearance
+ * afterwards. Callers must run this strictly AFTER the managed core fleet has
+ * been retired and verified gone (and plugin services stopped): with an empty
+ * fleet the God holds no session state, so retiring it cannot interrupt a
+ * Riff prepare/persist/commit handshake.
+ */
+export interface Pm2GodRetirementRuntime {
+    /** Scan for God processes owning this PM2_HOME (cmdline-marker based). */
+    listGodPids(): number[];
+    /** Birth identity for verification only — never signalling authority. */
+    readStartIdentity(pid: number): string | undefined;
+    isAlive(pid: number): boolean;
+    /** Bounded `pm2 kill` against this PM2_HOME's control socket. */
+    pm2Kill(): void;
+    sleep(ms: number): Promise<void>;
+    now(): number;
+}
+export declare const PM2_GOD_RETIREMENT_VERIFY_TIMEOUT_MS = 15000;
+export interface RetiredPm2God {
+    pid: number;
+    startIdentity: string | undefined;
+}
+export interface Pm2RegistryRowLiveness {
+    name: string;
+    status: string | undefined;
+    pid: number | undefined;
+}
+/**
+ * `pm2 kill` slaughters every process the God still manages without any
+ * graceful handshake, so the God may only be retired once the WHOLE registry
+ * is quiescent: every row — core, plugin, or an orphaned row a plugin
+ * uninstall left behind — must be in a terminal status with no live pid. A
+ * plugin stop that failed (stop errors are collected into reports, not
+ * rethrown) or a leftover running `botmux-plugin-*` row therefore blocks the
+ * kill here, fail-closed, instead of being silently killed with the God.
+ */
+export declare function assertPm2RegistryQuiescentForGodRetirement(rows: readonly Pm2RegistryRowLiveness[]): void;
+/**
+ * Between God retirement and the fresh `pm2 start`, any pm2 client invocation
+ * (even a read-only jlist from another shell) lazily births a God from ITS
+ * environment, not from this restart's cleaned one. Accepting it would defeat
+ * the whole point of --include-pm2, so the start transaction refuses.
+ */
+export declare function assertNoReplacementPm2God(pids: readonly number[]): void;
+/**
+ * Retire the sole live PM2 God, or return null when none is alive. Fails
+ * closed — without mutating anything — on an invalid scan or multiple visible
+ * Gods, and fails closed after `pm2 kill` if the God's disappearance cannot
+ * be proven within the timeout.
+ */
+export declare function retireSoleLivePm2God(rt: Pm2GodRetirementRuntime, timeoutMs?: number): Promise<RetiredPm2God | null>;
+//# sourceMappingURL=pm2-god-retirement.d.ts.map

package/dist/cli/pm2-god-retirement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-god-retirement.d.ts","sourceRoot":"","sources":["../../src/cli/pm2-god-retirement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,WAAW,IAAI,MAAM,EAAE,CAAC;IACxB,yEAAyE;IACzE,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,iEAAiE;IACjE,OAAO,IAAI,IAAI,CAAC;IAChB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,GAAG,IAAI,MAAM,CAAC;CACf;AAED,eAAO,MAAM,oCAAoC,QAAS,CAAC;AAG3D,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAKD;;;;;;;;GAQG;AACH,wBAAgB,0CAA0C,CACxD,IAAI,EAAE,SAAS,sBAAsB,EAAE,GACtC,IAAI,CAeN;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAOvE;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,uBAAuB,EAC3B,SAAS,GAAE,MAA6C,GACvD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAqC/B"}

package/dist/cli/pm2-god-retirement.js

@@ -0,0 +1,95 @@
+/**
+ * `restart --include-pm2` God retirement.
+ *
+ * A PID-addressed kill(2) cannot bind a signal to a PID+birth generation, so
+ * this module never signals the God by PID. The kill is addressed to the
+ * PM2_HOME control socket (`pm2 kill`) — i.e. to
+ * "whichever God owns this home", which is exactly the object being retired —
+ * and the recorded pid+birth identity is used only to VERIFY disappearance
+ * afterwards. Callers must run this strictly AFTER the managed core fleet has
+ * been retired and verified gone (and plugin services stopped): with an empty
+ * fleet the God holds no session state, so retiring it cannot interrupt a
+ * Riff prepare/persist/commit handshake.
+ */
+export const PM2_GOD_RETIREMENT_VERIFY_TIMEOUT_MS = 15_000;
+const VERIFY_POLL_INTERVAL_MS = 200;
+/** Registry statuses that prove no process is running for the row. */
+const TERMINAL_PM2_ROW_STATUSES = new Set(['stopped', 'errored']);
+/**
+ * `pm2 kill` slaughters every process the God still manages without any
+ * graceful handshake, so the God may only be retired once the WHOLE registry
+ * is quiescent: every row — core, plugin, or an orphaned row a plugin
+ * uninstall left behind — must be in a terminal status with no live pid. A
+ * plugin stop that failed (stop errors are collected into reports, not
+ * rethrown) or a leftover running `botmux-plugin-*` row therefore blocks the
+ * kill here, fail-closed, instead of being silently killed with the God.
+ */
+export function assertPm2RegistryQuiescentForGodRetirement(rows) {
+    const live = rows.filter(row => {
+        const status = (row.status ?? '').trim();
+        const pidLive = typeof row.pid === 'number' && Number.isSafeInteger(row.pid) && row.pid > 0;
+        return pidLive || !TERMINAL_PM2_ROW_STATUSES.has(status);
+    });
+    if (live.length === 0)
+        return;
+    const detail = live
+        .map(row => `${row.name}:${row.status ?? 'unknown'}${row.pid ? `:pid ${row.pid}` : ''}`)
+        .join(', ');
+    throw new Error(`[restart --include-pm2] refusing pm2 kill: PM2 registry still has live/unproven row(s): ${detail}; `
+        + 'stop or delete them first (e.g. a plugin service that failed to stop, or a leftover '
+        + 'botmux-plugin-* row from an uninstalled plugin); the God and every remaining process were left untouched');
+}
+/**
+ * Between God retirement and the fresh `pm2 start`, any pm2 client invocation
+ * (even a read-only jlist from another shell) lazily births a God from ITS
+ * environment, not from this restart's cleaned one. Accepting it would defeat
+ * the whole point of --include-pm2, so the start transaction refuses.
+ */
+export function assertNoReplacementPm2God(pids) {
+    if (pids.length === 0)
+        return;
+    throw new Error(`[restart --include-pm2] a replacement PM2 God (pid ${pids.join(', ')}) appeared between God `
+        + 'retirement and the fleet start; it was not born from this restart\'s cleaned environment — '
+        + 'rerun `botmux restart --include-pm2`');
+}
+/**
+ * Retire the sole live PM2 God, or return null when none is alive. Fails
+ * closed — without mutating anything — on an invalid scan or multiple visible
+ * Gods, and fails closed after `pm2 kill` if the God's disappearance cannot
+ * be proven within the timeout.
+ */
+export async function retireSoleLivePm2God(rt, timeoutMs = PM2_GOD_RETIREMENT_VERIFY_TIMEOUT_MS) {
+    const scanned = rt.listGodPids();
+    const canonical = [...new Set(scanned)]
+        .filter(pid => Number.isSafeInteger(pid) && pid > 1)
+        .sort((a, b) => a - b);
+    if (canonical.length !== scanned.length) {
+        throw new Error('[restart --include-pm2] PM2 God scan returned invalid/duplicate PIDs; no process was signalled');
+    }
+    if (canonical.length === 0)
+        return null;
+    if (canonical.length > 1) {
+        throw new Error(`[restart --include-pm2] multiple PM2 God daemons are visible `
+            + `(pids: ${canonical.join(', ')}); no process was signalled`);
+    }
+    const pid = canonical[0];
+    const startIdentity = rt.readStartIdentity(pid);
+    rt.pm2Kill();
+    const deadline = rt.now() + timeoutMs;
+    for (;;) {
+        // Two independent proofs: the marker scan finds no God for this home, and
+        // the original pid is gone (or its slot was reused by a different birth).
+        const scanEmpty = rt.listGodPids().length === 0;
+        const originalGone = !rt.isAlive(pid)
+            || (startIdentity !== undefined && rt.readStartIdentity(pid) !== startIdentity);
+        if (scanEmpty && originalGone)
+            return { pid, startIdentity };
+        if (rt.now() >= deadline) {
+            throw new Error(`[restart --include-pm2] PM2 God pid ${pid} is still observable after pm2 kill; `
+                + 'the core fleet is already retired and nothing further was mutated — '
+                + 'inspect the God process, then rerun `botmux restart` (with or without --include-pm2) to bring the fleet back');
+        }
+        await rt.sleep(VERIFY_POLL_INTERVAL_MS);
+    }
+}
+//# sourceMappingURL=pm2-god-retirement.js.map

package/dist/cli/pm2-god-retirement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-god-retirement.js","sourceRoot":"","sources":["../../src/cli/pm2-god-retirement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,MAAM,CAAC,MAAM,oCAAoC,GAAG,MAAM,CAAC;AAC3D,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAapC,sEAAsE;AACtE,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvF;;;;;;;;GAQG;AACH,MAAM,UAAU,0CAA0C,CACxD,IAAuC;IAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAC5F,OAAO,OAAO,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,IAAI;SAChB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACvF,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,IAAI,KAAK,CACb,2FAA2F,MAAM,IAAI;UACnG,sFAAsF;UACtF,0GAA0G,CAC7G,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAuB;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,IAAI,KAAK,CACb,sDAAsD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB;UAC5F,6FAA6F;UAC7F,sCAAsC,CACzC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAA2B,EAC3B,YAAoB,oCAAoC;IAExD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;SACpC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,+DAA+D;cAC7D,UAAU,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,aAAa,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChD,EAAE,CAAC,OAAO,EAAE,CAAC;IAEb,MAAM,QAAQ,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACtC,SAAS,CAAC;QACR,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;eAChC,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,aAAa,CAAC,CAAC;QAClF,IAAI,SAAS,IAAI,YAAY;YAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;QAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,uCAAuC;kBAC/E,sEAAsE;kBACtE,8GAA8G,CACjH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/cli/session-list-wake.d.ts

@@ -0,0 +1,41 @@
+import type { PersistentBackendTarget, SessionProbe } from '../adapters/backend/types.js';
+export interface SessionListWakeRequestContext {
+    signal: AbortSignal;
+    deadlineMs: number;
+}
+export type SessionListWakeRequest = (context: SessionListWakeRequestContext) => Promise<{
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+}>;
+export type SessionListWakeResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+    lastProbe?: SessionProbe;
+};
+export declare function canWakeDormantBackendForAttach(input: {
+    isAdopt: boolean;
+    probe: SessionProbe;
+    realManagedSession: boolean;
+    attachBackend?: 'tmux' | 'zmx';
+    target?: PersistentBackendTarget;
+}): boolean;
+/**
+ * Ask the owning daemon to materialize a dormant session, then wait until its
+ * exact persistent backend target is attachable. The daemon request is the
+ * concurrency fence; this helper only observes the backing target afterwards.
+ */
+export declare function wakeDormantBackendForAttach(options: {
+    target: PersistentBackendTarget;
+    wake: SessionListWakeRequest;
+    probe: (target: PersistentBackendTarget) => SessionProbe;
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+    signal?: AbortSignal;
+    now?: () => number;
+}): Promise<SessionListWakeResult>;
+//# sourceMappingURL=session-list-wake.d.ts.map

package/dist/cli/session-list-wake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-list-wake.d.ts","sourceRoot":"","sources":["../../src/cli/session-list-wake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG1F,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,6BAA6B,KAAK,OAAO,CACpF;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAC/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC;AAE3D,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC/B,MAAM,CAAC,EAAE,uBAAuB,CAAC;CAClC,GAAG,OAAO,CAMV;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,KAAK,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,YAAY,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4EjC"}

package/dist/cli/session-list-wake.js

@@ -0,0 +1,102 @@
+import { SESSION_WAKE_TIMEOUT_MS } from '../core/session-wake-deadline.js';
+export function canWakeDormantBackendForAttach(input) {
+    return !input.isAdopt
+        && input.probe === 'missing'
+        && input.realManagedSession
+        && !!input.attachBackend
+        && !!input.target;
+}
+/**
+ * Ask the owning daemon to materialize a dormant session, then wait until its
+ * exact persistent backend target is attachable. The daemon request is the
+ * concurrency fence; this helper only observes the backing target afterwards.
+ */
+export async function wakeDormantBackendForAttach(options) {
+    const now = options.now ?? Date.now;
+    const timeoutMs = Math.max(0, options.timeoutMs ?? SESSION_WAKE_TIMEOUT_MS);
+    const deadlineMs = now() + timeoutMs;
+    const pollIntervalMs = Math.max(1, options.pollIntervalMs ?? 100);
+    const sleep = options.sleep ?? ((ms) => new Promise(resolve => setTimeout(resolve, ms)));
+    const controller = new AbortController();
+    let deadlineExpired = false;
+    let lastProbe;
+    const aborted = Symbol('aborted');
+    const onCallerAbort = () => controller.abort(options.signal?.reason);
+    if (options.signal?.aborted)
+        onCallerAbort();
+    else
+        options.signal?.addEventListener('abort', onCallerAbort, { once: true });
+    const deadlineTimer = setTimeout(() => {
+        deadlineExpired = true;
+        controller.abort(new Error('session wake deadline exceeded'));
+    }, Math.max(0, deadlineMs - now()));
+    deadlineTimer.unref?.();
+    const abortPromise = new Promise(resolve => {
+        if (controller.signal.aborted)
+            resolve(aborted);
+        else
+            controller.signal.addEventListener('abort', () => resolve(aborted), { once: true });
+    });
+    const interrupted = () => ({
+        ok: false,
+        error: deadlineExpired || now() >= deadlineMs ? '恢复超时' : '恢复已取消',
+        ...(lastProbe ? { lastProbe } : {}),
+    });
+    const probeTimeout = () => ({
+        ok: false,
+        error: lastProbe === 'unknown'
+            ? '后端已唤醒，但持久后端状态无法确认'
+            : '后端已唤醒，但等待持久会话启动超时',
+        ...(lastProbe ? { lastProbe } : {}),
+    });
+    try {
+        if (controller.signal.aborted)
+            return interrupted();
+        if (now() >= deadlineMs) {
+            deadlineExpired = true;
+            controller.abort(new Error('session wake deadline exceeded'));
+            return interrupted();
+        }
+        const wake = await Promise.race([
+            options.wake({ signal: controller.signal, deadlineMs }),
+            abortPromise,
+        ]);
+        if (wake === aborted)
+            return interrupted();
+        if (now() >= deadlineMs) {
+            deadlineExpired = true;
+            controller.abort(new Error('session wake deadline exceeded'));
+            return interrupted();
+        }
+        if (!wake.ok)
+            return wake;
+        for (;;) {
+            if (controller.signal.aborted)
+                return interrupted();
+            if (now() >= deadlineMs)
+                return probeTimeout();
+            lastProbe = options.probe(options.target);
+            if (lastProbe === 'exists')
+                return { ok: true };
+            const remainingMs = deadlineMs - now();
+            if (remainingMs <= 0)
+                return probeTimeout();
+            const wait = await Promise.race([
+                sleep(Math.min(pollIntervalMs, remainingMs)).then(() => 'slept'),
+                abortPromise,
+            ]);
+            if (wait === aborted)
+                return interrupted();
+        }
+    }
+    catch (err) {
+        if (controller.signal.aborted)
+            return interrupted();
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+    finally {
+        clearTimeout(deadlineTimer);
+        options.signal?.removeEventListener('abort', onCallerAbort);
+    }
+}
+//# sourceMappingURL=session-list-wake.js.map

package/dist/cli/session-list-wake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-list-wake.js","sourceRoot":"","sources":["../../src/cli/session-list-wake.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAgB3E,MAAM,UAAU,8BAA8B,CAAC,KAM9C;IACC,OAAO,CAAC,KAAK,CAAC,OAAO;WAChB,KAAK,CAAC,KAAK,KAAK,SAAS;WACzB,KAAK,CAAC,kBAAkB;WACxB,CAAC,CAAC,KAAK,CAAC,aAAa;WACrB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OASjD;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,SAAmC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,aAAa,EAAE,CAAC;;QACxC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9E,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,eAAe,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAChE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;IACpC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,MAAM,YAAY,GAAG,IAAI,OAAO,CAAiB,OAAO,CAAC,EAAE;QACzD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC;;YAC3C,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,GAA0B,EAAE,CAAC,CAAC;QAChD,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,eAAe,IAAI,GAAG,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAChE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,GAA0B,EAAE,CAAC,CAAC;QACjD,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,mBAAmB;QACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QACpD,IAAI,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;YACxB,eAAe,GAAG,IAAI,CAAC;YACvB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC9D,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;YACvD,YAAY;SACb,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QAC3C,IAAI,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;YACxB,eAAe,GAAG,IAAI,CAAC;YACvB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC9D,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE1B,SAAS,CAAC;YACR,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;YACpD,IAAI,GAAG,EAAE,IAAI,UAAU;gBAAE,OAAO,YAAY,EAAE,CAAC;YAC/C,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,SAAS,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAEhD,MAAM,WAAW,GAAG,UAAU,GAAG,GAAG,EAAE,CAAC;YACvC,IAAI,WAAW,IAAI,CAAC;gBAAE,OAAO,YAAY,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAgB,CAAC;gBACzE,YAAY;aACb,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,OAAO;gBAAE,OAAO,WAAW,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/cli/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AAAA,iEAAiE;AA4BjE,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB5E;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB5E"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAmCjE,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC5E;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB5E"}

package/dist/cli/workflow.js

@@ -1,4 +1,8 @@
 /** Workflow command dispatch after the v2 runtime retirement. */
+import { isWorkflowFeatureEnabled } from '../global-config.js';
+const WORKFLOW_DISABLED_CLI_MESSAGE = '⛔ 本机已关闭「工作流(Workflow)」功能：即兴 grill、architect 编排与 Saved Workflow 的运行/保存均不可用。' +
+    '如需开启，请在 Dashboard 设置页打开「工作流功能」开关，或设置环境变量 BOTMUX_WORKFLOW_ENABLED=true。' +
+    '（进行中的 run 仍可用 `botmux workflow cancel/retry/grant` 管理。）';
 const LEGACY_TEMPLATE_RETIRED = 'v2 workflow runtime 已下线；请先用 `botmux template migrate-v3` 迁移定义，' +
     '再用 `botmux workflow run <名称|workflowId>` 执行 Saved Workflow。';
 const V3_HOST_SUBCOMMANDS = new Set([
@@ -22,6 +26,17 @@ const RETIRED_TEMPLATE_SUBCOMMANDS = new Set([
     'show',
 ]);
 export async function cmdWorkflow(sub, rest) {
+    // Machine-wide workflow kill-switch. Authoring (host verbs) and launching
+    // (saved `run` / `save`) are refused when the feature is off; read-only
+    // `list`/`show` and `help` stay available so an operator can still inspect
+    // existing definitions. In-flight run management (`cancel`/`retry`/`grant`)
+    // is handled by cli.ts before reaching here and is intentionally NOT gated.
+    const workflowEnabled = isWorkflowFeatureEnabled();
+    const isAuthoringOrLaunch = V3_HOST_SUBCOMMANDS.has(sub) || sub === 'run' || sub === 'save';
+    if (!workflowEnabled && isAuthoringOrLaunch) {
+        console.error(WORKFLOW_DISABLED_CLI_MESSAGE);
+        process.exit(2);
+    }
     if (V3_HOST_SUBCOMMANDS.has(sub)) {
         const { cmdWorkflowHost } = await import('../workflows/v3/host.js');
         await cmdWorkflowHost(sub, rest);
@@ -76,6 +91,17 @@ function failRetired(command) {
     process.exit(1);
 }
 function printWorkflowHelp() {
+    // Surface the machine-wide kill-switch in the CLI help too, so `botmux
+    // workflow help` on a disabled host doesn't advertise commands that refuse
+    // (mirrors the IM `/help` omission). In-flight management stays listed since
+    // cancel/retry/grant remain available.
+    if (!isWorkflowFeatureEnabled()) {
+        console.log(`⛔ 本机已关闭「工作流(Workflow)」功能：即兴编排与 Saved Workflow 的运行/保存不可用（如需开启，见 Dashboard 设置页「工作流功能」或设置 BOTMUX_WORKFLOW_ENABLED=true）。
+进行中的 run 仍可管理: botmux workflow <cancel|retry|grant> [...]
+v2 资产离线处理: botmux template <migrate-v3|archive-runs>
+`);
+        return;
+    }
     console.log(`用法: botmux workflow <目标控制|save|run|list|show|start|cancel|retry|grant> [...]
 
 Saved Workflow:

package/dist/cli/workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,MAAM,uBAAuB,GAC3B,gEAAgE;IAChE,6DAA6D,CAAC;AAEhE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,eAAe;IACf,cAAc;IACd,aAAa;IACb,WAAW;IACX,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IAC3D,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACpE,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,iBAAiB,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,WAAW,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACxC,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IAC3D,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC5E,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACzE,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,EAAE;YACL,iBAAiB,EAAE,CAAC;YACpB,OAAO;QACT;YACE,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,WAAW,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;YACxC,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYb,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../src/cli/workflow.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,6BAA6B,GACjC,4EAA4E;IAC5E,wEAAwE;IACxE,yDAAyD,CAAC;AAE5D,MAAM,uBAAuB,GAC3B,gEAAgE;IAChE,6DAA6D,CAAC;AAEhE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,KAAK;IACL,eAAe;IACf,cAAc;IACd,aAAa;IACb,WAAW;IACX,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACtE,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IAC3D,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,eAAe,GAAG,wBAAwB,EAAE,CAAC;IACnD,MAAM,mBAAmB,GACvB,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,CAAC;IAClE,IAAI,CAAC,eAAe,IAAI,mBAAmB,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACpE,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,iBAAiB,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,WAAW,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACxC,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IAC3D,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC5E,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACzE,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,EAAE;YACL,iBAAiB,EAAE,CAAC;YACpB,OAAO;QACT;YACE,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,WAAW,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;YACxC,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB;IACxB,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,uCAAuC;IACvC,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC;;;CAGf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYb,CAAC,CAAC;AACH,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA6vHA,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA+mPtE;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,qBAAqB,EAAE,SAAS,CAAC,EAC9F,KAAK,EAAE,MAAM,EACb,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC;AAC1F;qDACqD;AACrD,wBAAwB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC,GAClH,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuL7B"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAy0HA,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AA6mQtE;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,qBAAqB,EAAE,SAAS,CAAC,EAC9F,KAAK,EAAE,MAAM,EACb,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC;AAC1F;qDACqD;AACrD,wBAAwB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC,GAClH,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAuL7B"}