codekin 0.6.2 → 0.6.4

package/server/dist/orchestrator-session-router.js

@@ -0,0 +1,312 @@
+/**
+ * Session lifecycle, child session management, reports, and dashboard routes
+ * for the orchestrator.
+ */
+import { Router } from 'express';
+import { resolve } from 'path';
+import { existsSync, statSync, realpathSync } from 'fs';
+import { ensureOrchestratorRunning, getOrchestratorSessionId, getOrCreateOrchestratorId } from './orchestrator-manager.js';
+import { getAgentDisplayName, REPOS_ROOT, resolveRepoPathInRoot } from './config.js';
+import { scanRepoReports, readReport, getReportsSince } from './orchestrator-reports.js';
+// ---------------------------------------------------------------------------
+// Per-IP rate limiter for child-session spawn (mirrors auth-routes pattern).
+// Each spawn allocates a real subprocess, so we cap aggressively per IP and
+// hard-cap the tracking map to bound memory under DoS conditions.
+// ---------------------------------------------------------------------------
+/** Maximum tracked IPs in the spawn rate-limiter map (matches PR #418 cap). */
+const SPAWN_RATE_MAP_MAX_SIZE = 10_000;
+function createSpawnRateLimiter(maxRequests, windowMs) {
+    const ipTimestamps = new Map();
+    // Periodic cleanup of stale entries to bound memory growth.
+    const cleanup = setInterval(() => {
+        const now = Date.now();
+        for (const [ip, timestamps] of ipTimestamps) {
+            const recent = timestamps.filter(t => now - t < windowMs);
+            if (recent.length === 0)
+                ipTimestamps.delete(ip);
+            else
+                ipTimestamps.set(ip, recent);
+        }
+    }, Math.max(60_000, windowMs));
+    if (cleanup.unref)
+        cleanup.unref();
+    return (req, res, next) => {
+        const ip = req.ip || req.socket.remoteAddress || 'unknown';
+        const now = Date.now();
+        const timestamps = (ipTimestamps.get(ip) ?? []).filter(t => now - t < windowMs);
+        if (timestamps.length >= maxRequests) {
+            ipTimestamps.set(ip, timestamps);
+            return res.status(429).json({ error: 'Too Many Requests', retryAfter: Math.ceil(windowMs / 1000) });
+        }
+        // Reject new IPs once the map is full (DoS protection, matches PR #418).
+        if (timestamps.length === 0 && ipTimestamps.size >= SPAWN_RATE_MAP_MAX_SIZE) {
+            return res.status(429).json({ error: 'Too Many Requests', retryAfter: Math.ceil(windowMs / 1000) });
+        }
+        timestamps.push(now);
+        ipTimestamps.set(ip, timestamps);
+        next();
+    };
+}
+// ---------------------------------------------------------------------------
+// Router factory
+// ---------------------------------------------------------------------------
+export function createSessionRouter(verifyOrchestratorAuth, sessions, memory, children, monitorRef) {
+    const router = Router();
+    // 20 spawns per 5 minutes per IP — child sessions allocate real subprocesses,
+    // so this is intentionally tight. Tune via the constants if needed.
+    const spawnRateLimiter = createSpawnRateLimiter(20, 5 * 60_000);
+    // -------------------------------------------------------------------------
+    // Session lifecycle
+    // -------------------------------------------------------------------------
+    /** Get orchestrator session status. */
+    router.get('/api/orchestrator/status', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const sessionId = getOrchestratorSessionId(sessions);
+        if (!sessionId) {
+            return res.json({ sessionId: null, status: 'stopped', agentName: getAgentDisplayName() });
+        }
+        const session = sessions.get(sessionId);
+        const status = session?.claudeProcess?.isAlive() ? 'active' : 'idle';
+        res.json({
+            sessionId,
+            status,
+            childSessions: children.activeCount(),
+            agentName: getAgentDisplayName(),
+        });
+    });
+    /** Ensure orchestrator is running and return its session ID. */
+    router.post('/api/orchestrator/start', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        try {
+            const sessionId = ensureOrchestratorRunning(sessions);
+            res.json({ sessionId, status: 'active', agentName: getAgentDisplayName() });
+        }
+        catch (err) {
+            console.error('[orchestrator] Failed to start:', err);
+            res.status(500).json({ error: `Failed to start Agent ${getAgentDisplayName()}` });
+        }
+    });
+    // -------------------------------------------------------------------------
+    // Reports
+    // -------------------------------------------------------------------------
+    /** Scan reports for a single repo. */
+    router.get('/api/orchestrator/reports', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const repoPath = req.query.repo;
+        const since = req.query.since;
+        if (repoPath) {
+            const resolvedRepoPath = resolveRepoPathInRoot(repoPath);
+            if (!resolvedRepoPath) {
+                return res.status(400).json({ error: 'Invalid repo path: must be an existing directory under the configured repos root' });
+            }
+            const reports = scanRepoReports(resolvedRepoPath);
+            res.json({ reports });
+        }
+        else if (since) {
+            const repoItems = memory.list({ memoryType: 'repo_context' });
+            const repoPaths = repoItems.map(r => r.scope).filter((s) => !!s);
+            const reports = getReportsSince(repoPaths, since);
+            res.json({ reports });
+        }
+        else {
+            res.status(400).json({ error: 'Provide ?repo=<path> or ?since=<YYYY-MM-DD>' });
+        }
+    });
+    /** Read a specific report's content. */
+    router.get('/api/orchestrator/reports/read', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const filePath = req.query.path;
+        if (!filePath)
+            return res.status(400).json({ error: 'Provide ?path=<filePath>' });
+        const report = readReport(filePath);
+        if (!report)
+            return res.status(404).json({ error: 'Report not found' });
+        res.json({ report });
+    });
+    // -------------------------------------------------------------------------
+    // Child sessions
+    // -------------------------------------------------------------------------
+    /** List child sessions. */
+    router.get('/api/orchestrator/children', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        res.json({ children: children.list() });
+    });
+    /** Spawn a child session. */
+    router.post('/api/orchestrator/children', spawnRateLimiter, async (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const { repo, task, branchName, completionPolicy, deployAfter, useWorktree, model, allowedTools } = req.body;
+        if (!repo || !task || !branchName) {
+            return res.status(400).json({ error: 'Missing required fields: repo, task, branchName' });
+        }
+        // Validate branchName to prevent prompt injection
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9/_.-]*$/.test(branchName)) {
+            return res.status(400).json({ error: 'Invalid branchName: only alphanumeric, /, _, ., and - are allowed' });
+        }
+        // Validate allowedTools if provided: must be an array of strings
+        if (allowedTools !== undefined) {
+            if (!Array.isArray(allowedTools) || !allowedTools.every((t) => typeof t === 'string')) {
+                return res.status(400).json({ error: 'Invalid allowedTools: must be an array of strings' });
+            }
+        }
+        // Validate repo path: must exist and be a directory
+        const absRepo = resolve(repo);
+        if (!existsSync(absRepo) || !statSync(absRepo).isDirectory()) {
+            return res.status(400).json({ error: 'Invalid repo path: directory does not exist' });
+        }
+        // Use realpathSync to resolve symlinks before boundary check (prevents symlink bypass)
+        const resolvedRepo = realpathSync(absRepo);
+        if (!resolvedRepo.startsWith(REPOS_ROOT + '/') && resolvedRepo !== REPOS_ROOT) {
+            return res.status(400).json({ error: 'Invalid repo path: must be under configured repos root' });
+        }
+        try {
+            const child = await children.spawn({
+                repo,
+                task,
+                branchName,
+                completionPolicy: completionPolicy ?? 'pr',
+                deployAfter: deployAfter ?? false,
+                useWorktree: useWorktree ?? true,
+                model,
+                allowedTools,
+            });
+            res.json({ child });
+        }
+        catch (err) {
+            res.status(503).json({ error: err instanceof Error ? err.message : 'Failed to spawn child session' });
+        }
+    });
+    /** Get a specific child session. */
+    router.get('/api/orchestrator/children/:id', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const child = children.get(req.params.id);
+        if (!child)
+            return res.status(404).json({ error: 'Child session not found' });
+        res.json({ child });
+    });
+    // -------------------------------------------------------------------------
+    // Session prompts & approvals
+    // -------------------------------------------------------------------------
+    /** Get all sessions with pending prompts (waiting for approval or answer). */
+    router.get('/api/orchestrator/sessions/pending-prompts', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        res.json({ sessions: sessions.getPendingPrompts() });
+    });
+    /** Approve or deny a pending prompt in any session. */
+    router.post('/api/orchestrator/sessions/:id/respond', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const sessionId = req.params.id;
+        const { requestId, value } = req.body;
+        if (!value) {
+            return res.status(400).json({ error: 'Missing required field: value (e.g. "allow", "deny", or answer text)' });
+        }
+        const session = sessions.get(sessionId);
+        if (!session)
+            return res.status(404).json({ error: 'Session not found' });
+        // Verify there's actually a pending prompt (optionally for the specific requestId)
+        const hasPending = requestId
+            ? (session.pendingToolApprovals.has(requestId) || session.pendingControlRequests.has(requestId))
+            : (session.pendingToolApprovals.size > 0 || session.pendingControlRequests.size > 0);
+        if (!hasPending) {
+            return res.status(409).json({ error: 'No pending prompt to respond to' });
+        }
+        // Capture prompt details before responding (response clears them)
+        let promptToolName = 'unknown';
+        let promptType = 'permission';
+        if (requestId) {
+            const toolApproval = session.pendingToolApprovals.get(requestId);
+            const controlReq = session.pendingControlRequests.get(requestId);
+            if (toolApproval) {
+                promptToolName = toolApproval.toolName;
+                promptType = toolApproval.toolName === 'AskUserQuestion' ? 'question' : 'permission';
+            }
+            else if (controlReq) {
+                promptToolName = controlReq.toolName;
+                promptType = controlReq.toolName === 'AskUserQuestion' ? 'question' : 'permission';
+            }
+        }
+        sessions.sendPromptResponse(sessionId, value, requestId);
+        // Broadcast a notification to the orchestrator channel
+        const orchestratorId = getOrCreateOrchestratorId();
+        const orchestratorSession = sessions.get(orchestratorId);
+        if (orchestratorSession && orchestratorSession.clients.size > 0) {
+            const actionLabel = promptType === 'question'
+                ? `answered question from ${promptToolName}`
+                : `responded "${value}" to ${promptToolName}`;
+            const notifMsg = {
+                type: 'system_message',
+                subtype: 'info',
+                text: `[${getAgentDisplayName()}] ${actionLabel} in session "${session.name}"`,
+            };
+            for (const ws of orchestratorSession.clients) {
+                ws.send(JSON.stringify(notifMsg));
+            }
+        }
+        res.json({ ok: true });
+    });
+    // -------------------------------------------------------------------------
+    // Session cleanup & listing
+    // -------------------------------------------------------------------------
+    /** List all sessions (unfiltered, includes source field). */
+    router.get('/api/orchestrator/sessions', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        res.json({ sessions: sessions.listAll() });
+    });
+    /** Delete all automated sessions (source: workflow, webhook, stepflow, agent). */
+    router.delete('/api/orchestrator/sessions/cleanup', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const automatedSources = new Set(['workflow', 'webhook', 'stepflow', 'agent']);
+        const toDelete = sessions.listAll().filter((s) => automatedSources.has(s.source ?? ''));
+        let deleted = 0;
+        for (const s of toDelete) {
+            if (sessions.delete(s.id))
+                deleted++;
+        }
+        res.json({ deleted });
+    });
+    /** Delete a specific session by ID. */
+    router.delete('/api/orchestrator/sessions/:id', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const success = sessions.delete(req.params.id);
+        if (!success)
+            return res.status(404).json({ error: 'Session not found' });
+        res.json({ deleted: true });
+    });
+    // -------------------------------------------------------------------------
+    // Dashboard stats
+    // -------------------------------------------------------------------------
+    /** Get summary stats for the dashboard header. */
+    router.get('/api/orchestrator/dashboard', (req, res) => {
+        if (!verifyOrchestratorAuth(req))
+            return res.status(401).json({ error: 'Unauthorized' });
+        const repoItems = memory.list({ memoryType: 'repo_context' });
+        const pendingNotifications = monitorRef?.current?.getPending() ?? [];
+        const activeChildren = children.activeCount();
+        const trustRecords = memory.listTrustRecords();
+        const autoApproved = trustRecords.filter(t => t.effectiveLevel !== 'ask').length;
+        res.json({
+            stats: {
+                managedRepos: repoItems.length,
+                pendingNotifications: pendingNotifications.length,
+                activeChildSessions: activeChildren,
+                totalChildSessions: children.list().length,
+                trustRecords: trustRecords.length,
+                autoApprovedActions: autoApproved,
+                memoryItems: memory.list().length,
+            },
+        });
+    });
+    return router;
+}
+//# sourceMappingURL=orchestrator-session-router.js.map

package/server/dist/orchestrator-session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator-session-router.js","sourceRoot":"","sources":["../orchestrator-session-router.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAC9B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAEvD,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAC1H,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAKxF,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,kEAAkE;AAClE,8EAA8E;AAE9E,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAEtC,SAAS,sBAAsB,CAAC,WAAmB,EAAE,QAAgB;IACnE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAA;IAEhD,4DAA4D;IAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,YAAY,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;YACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;;gBAC3C,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACnC,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9B,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAElC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAA;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,UAAU,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;QAE/E,IAAI,UAAU,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACrC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;YAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;QACrG,CAAC;QAED,yEAAyE;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,IAAI,uBAAuB,EAAE,CAAC;YAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;QACrG,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpB,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;QAChC,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAsBD,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,MAAM,UAAU,mBAAmB,CACjC,sBAAiD,EACjD,QAAwB,EACxB,MAA0B,EAC1B,QAAkC,EAClC,UAAoD;IAEpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IACvB,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAA;IAE/D,4EAA4E;IAC5E,oBAAoB;IACpB,4EAA4E;IAE5E,uCAAuC;IACvC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAA;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;QAC3F,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,MAAM,MAAM,GAAG,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;QACpE,GAAG,CAAC,IAAI,CAAC;YACP,SAAS;YACT,MAAM;YACN,aAAa,EAAE,QAAQ,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,mBAAmB,EAAE;SACjC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,gEAAgE;IAChE,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAA;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAA;YACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAA;QACnF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAE5E,sCAAsC;IACtC,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAA2B,CAAA;QAEnD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACxD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kFAAkF,EAAE,CAAC,CAAA;YAC5H,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;YACjD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACvB,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;YAC7D,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7E,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACjD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAA;QAChF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,wCAAwC;IACxC,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QACrD,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAA;QAEjF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACnC,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAEvE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,iBAAiB;IACjB,4EAA4E;IAE5E,2BAA2B;IAC3B,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,6BAA6B;IAC7B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAA6D,EAAE,GAAG,EAAE,EAAE;QACvI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAI,CAAA;QAC5G,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAA;QAC3F,CAAC;QAED,kDAAkD;QAClD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC,CAAA;QAC7G,CAAC;QAED,iEAAiE;QACjE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC/F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC,CAAA;YAC7F,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAA;QACvF,CAAC;QACD,uFAAuF;QACvF,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAC9E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC;gBACjC,IAAI;gBACJ,IAAI;gBACJ,UAAU;gBACV,gBAAgB,EAAE,gBAAgB,IAAI,IAAI;gBAC1C,WAAW,EAAE,WAAW,IAAI,KAAK;gBACjC,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,KAAK;gBACL,YAAY;aACb,CAAC,CAAA;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,EAAE,CAAC,CAAA;QACvG,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,oCAAoC;IACpC,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAA;QAE7E,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACrB,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAE5E,8EAA8E;IAC9E,MAAM,CAAC,GAAG,CAAC,4CAA4C,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,uDAAuD;IACvD,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,CAAC,GAAyD,EAAE,GAAG,EAAE,EAAE;QACvH,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;QAC/B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAA;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC,CAAA;QAChH,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;QAEzE,mFAAmF;QACnF,MAAM,UAAU,GAAG,SAAS;YAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QAEtF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAA;QAC3E,CAAC;QAED,kEAAkE;QAClE,IAAI,cAAc,GAAG,SAAS,CAAA;QAC9B,IAAI,UAAU,GAA8B,YAAY,CAAA;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAChE,MAAM,UAAU,GAAG,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAChE,IAAI,YAAY,EAAE,CAAC;gBACjB,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAA;gBACtC,UAAU,GAAG,YAAY,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAA;YACtF,CAAC;iBAAM,IAAI,UAAU,EAAE,CAAC;gBACtB,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAA;gBACpC,UAAU,GAAG,UAAU,CAAC,QAAQ,KAAK,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAA;YACpF,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QAExD,uDAAuD;QACvD,MAAM,cAAc,GAAG,yBAAyB,EAAE,CAAA;QAClD,MAAM,mBAAmB,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QACxD,IAAI,mBAAmB,IAAI,mBAAmB,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,WAAW,GAAG,UAAU,KAAK,UAAU;gBAC3C,CAAC,CAAC,0BAA0B,cAAc,EAAE;gBAC5C,CAAC,CAAC,cAAc,KAAK,QAAQ,cAAc,EAAE,CAAA;YAC/C,MAAM,QAAQ,GAAG;gBACf,IAAI,EAAE,gBAAyB;gBAC/B,OAAO,EAAE,MAAe;gBACxB,IAAI,EAAE,IAAI,mBAAmB,EAAE,KAAK,WAAW,gBAAgB,OAAO,CAAC,IAAI,GAAG;aAC/E,CAAA;YACD,KAAK,MAAM,EAAE,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC;gBAC7C,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,4BAA4B;IAC5B,4EAA4E;IAE5E,6DAA6D;IAC7D,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,kFAAkF;IAClF,MAAM,CAAC,MAAM,CAAC,oCAAoC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9E,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;QAEvF,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAA;QACtC,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,uCAAuC;IACvC,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3D,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;QAEzE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAE5E,kDAAkD;IAClD,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAExF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;QAC7D,MAAM,oBAAoB,GAAG,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;QACpE,MAAM,cAAc,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;QAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAA;QAC9C,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,MAAM,CAAA;QAEhF,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE;gBACL,YAAY,EAAE,SAAS,CAAC,MAAM;gBAC9B,oBAAoB,EAAE,oBAAoB,CAAC,MAAM;gBACjD,mBAAmB,EAAE,cAAc;gBACnC,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;gBAC1C,YAAY,EAAE,YAAY,CAAC,MAAM;gBACjC,mBAAmB,EAAE,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM;aAClC;SACF,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/server/dist/process-coordinator.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Unified process lifecycle coordinator for a single session.
+ *
+ * Replaces the scattered flag/timer pattern (_restartTimer, _isStarting,
+ * _processGeneration, _apiRetry.timer) with a single promise-chain mutex
+ * and centralized timer management.
+ *
+ * Every lifecycle transition (start, stop, reconfigure) is serialized through
+ * the mutex so at most one operation is in-flight at a time.  All pending
+ * timers (restart, API retry) are cancelled on any new transition.
+ */
+export interface ProcessCoordinatorDeps {
+    /** Spawn the Claude process.  Returns true on success. */
+    startProcess(sessionId: string): boolean;
+    /** Stop the process and wait for it to fully exit. */
+    stopProcessAndWait(sessionId: string): Promise<void>;
+}
+export declare class ProcessCoordinator {
+    private readonly sessionId;
+    private readonly deps;
+    /** Monotonically increasing counter.  Bumped on every start.  Scheduled
+     *  timers capture the generation at schedule time and bail if it changed. */
+    private generation;
+    /** Promise chain that serializes lifecycle operations. */
+    private chain;
+    /** Active lifecycle timers, keyed by purpose (e.g. 'restart', 'apiRetry'). */
+    private timers;
+    /** True when the user (or idle reaper / delete / shutdown) explicitly stopped
+     *  the process.  Prevents scheduled restarts from firing. */
+    private _userStopped;
+    constructor(sessionId: string, deps: ProcessCoordinatorDeps);
+    /**
+     * Request a process start.  If another operation is in-flight, waits for it.
+     * If the process is already running, the underlying startProcess decides
+     * whether to replace it (current behavior: kills old, spawns new).
+     */
+    requestStart(): Promise<boolean>;
+    /**
+     * Request a full stop.  Cancels all timers, marks userStopped.
+     */
+    requestStop(): Promise<void>;
+    /**
+     * Stop the current process, apply a config change, then start a new one.
+     * Used by setModel, setProvider, setPermissionMode.
+     *
+     * @param apply — callback that mutates session config (model, provider, etc.)
+     *                before the new process is spawned.
+     */
+    requestReconfigure(apply: () => void): Promise<boolean>;
+    /**
+     * Schedule a delayed restart (crash recovery).  The timer is automatically
+     * cancelled if any other lifecycle transition happens before it fires.
+     *
+     * @param onBeforeStart — optional callback invoked after the timer fires but
+     *        before startProcess.  Return false to abort the restart.
+     * @param onAfterStart — optional callback invoked after startProcess completes
+     *        successfully, for post-restart context injection.
+     */
+    scheduleRestart(delayMs: number, onBeforeStart?: () => boolean, onAfterStart?: () => void): void;
+    /**
+     * Schedule an API retry.  Tied to the current generation — if the process
+     * restarts or stops before the timer fires, the retry is silently dropped.
+     */
+    scheduleApiRetry(delayMs: number, sendRetry: () => void): void;
+    /** Cancel a pending API retry timer (e.g. on successful result). */
+    cancelApiRetry(): void;
+    /**
+     * Cancel all timers and mark as user-stopped.  Used by delete() and
+     * shutdown() which handle process killing themselves.
+     */
+    teardown(): void;
+    /** Current generation counter. */
+    get currentGeneration(): number;
+    /** Whether the user has explicitly stopped the process. */
+    get isUserStopped(): boolean;
+    /** Clear the userStopped flag (e.g. when sendInput reactivates an idle-reaped session). */
+    clearUserStopped(): void;
+    private enqueue;
+    private doStart;
+    private doStop;
+    private setTimer;
+    private cancelAllTimers;
+}

package/server/dist/process-coordinator.js

@@ -0,0 +1,167 @@
+/**
+ * Unified process lifecycle coordinator for a single session.
+ *
+ * Replaces the scattered flag/timer pattern (_restartTimer, _isStarting,
+ * _processGeneration, _apiRetry.timer) with a single promise-chain mutex
+ * and centralized timer management.
+ *
+ * Every lifecycle transition (start, stop, reconfigure) is serialized through
+ * the mutex so at most one operation is in-flight at a time.  All pending
+ * timers (restart, API retry) are cancelled on any new transition.
+ */
+export class ProcessCoordinator {
+    sessionId;
+    deps;
+    /** Monotonically increasing counter.  Bumped on every start.  Scheduled
+     *  timers capture the generation at schedule time and bail if it changed. */
+    generation = 0;
+    /** Promise chain that serializes lifecycle operations. */
+    chain = Promise.resolve();
+    /** Active lifecycle timers, keyed by purpose (e.g. 'restart', 'apiRetry'). */
+    timers = new Map();
+    /** True when the user (or idle reaper / delete / shutdown) explicitly stopped
+     *  the process.  Prevents scheduled restarts from firing. */
+    _userStopped = false;
+    constructor(sessionId, deps) {
+        this.sessionId = sessionId;
+        this.deps = deps;
+    }
+    // ---------------------------------------------------------------------------
+    // Public intent-based API
+    // ---------------------------------------------------------------------------
+    /**
+     * Request a process start.  If another operation is in-flight, waits for it.
+     * If the process is already running, the underlying startProcess decides
+     * whether to replace it (current behavior: kills old, spawns new).
+     */
+    requestStart() {
+        this._userStopped = false;
+        return this.enqueue('start', () => this.doStart());
+    }
+    /**
+     * Request a full stop.  Cancels all timers, marks userStopped.
+     */
+    requestStop() {
+        this._userStopped = true;
+        this.cancelAllTimers();
+        return this.enqueue('stop', () => this.doStop());
+    }
+    /**
+     * Stop the current process, apply a config change, then start a new one.
+     * Used by setModel, setProvider, setPermissionMode.
+     *
+     * @param apply — callback that mutates session config (model, provider, etc.)
+     *                before the new process is spawned.
+     */
+    requestReconfigure(apply) {
+        this.cancelAllTimers();
+        return this.enqueue('reconfigure', async () => {
+            await this.doStop();
+            apply();
+            this._userStopped = false;
+            return this.doStart();
+        });
+    }
+    /**
+     * Schedule a delayed restart (crash recovery).  The timer is automatically
+     * cancelled if any other lifecycle transition happens before it fires.
+     *
+     * @param onBeforeStart — optional callback invoked after the timer fires but
+     *        before startProcess.  Return false to abort the restart.
+     * @param onAfterStart — optional callback invoked after startProcess completes
+     *        successfully, for post-restart context injection.
+     */
+    scheduleRestart(delayMs, onBeforeStart, onAfterStart) {
+        if (this._userStopped)
+            return;
+        const gen = this.generation;
+        this.setTimer('restart', delayMs, () => {
+            if (this.generation !== gen || this._userStopped)
+                return;
+            // Enqueue through the mutex so it doesn't race with other operations
+            void this.enqueue('scheduledRestart', async () => {
+                // Re-check after acquiring the mutex
+                if (this.generation !== gen || this._userStopped)
+                    return false;
+                if (onBeforeStart && !onBeforeStart())
+                    return false;
+                const started = await this.doStart();
+                if (started && onAfterStart)
+                    onAfterStart();
+                return started;
+            });
+        });
+    }
+    /**
+     * Schedule an API retry.  Tied to the current generation — if the process
+     * restarts or stops before the timer fires, the retry is silently dropped.
+     */
+    scheduleApiRetry(delayMs, sendRetry) {
+        const gen = this.generation;
+        this.setTimer('apiRetry', delayMs, () => {
+            if (this.generation !== gen || this._userStopped)
+                return;
+            sendRetry();
+        });
+    }
+    /** Cancel a pending API retry timer (e.g. on successful result). */
+    cancelApiRetry() {
+        const timer = this.timers.get('apiRetry');
+        if (timer) {
+            clearTimeout(timer);
+            this.timers.delete('apiRetry');
+        }
+    }
+    /**
+     * Cancel all timers and mark as user-stopped.  Used by delete() and
+     * shutdown() which handle process killing themselves.
+     */
+    teardown() {
+        this._userStopped = true;
+        this.cancelAllTimers();
+    }
+    /** Current generation counter. */
+    get currentGeneration() { return this.generation; }
+    /** Whether the user has explicitly stopped the process. */
+    get isUserStopped() { return this._userStopped; }
+    /** Clear the userStopped flag (e.g. when sendInput reactivates an idle-reaped session). */
+    clearUserStopped() { this._userStopped = false; }
+    // ---------------------------------------------------------------------------
+    // Internal machinery
+    // ---------------------------------------------------------------------------
+    enqueue(label, op) {
+        this.cancelAllTimers();
+        let resolve;
+        let reject;
+        const result = new Promise((res, rej) => { resolve = res; reject = rej; });
+        this.chain = this.chain
+            .then(() => {
+            console.log(`[coordinator] ${this.sessionId} enqueue=${label} gen=${this.generation}`);
+            return op().then(resolve, reject);
+        })
+            .catch((err) => { console.warn(`[coordinator] ${this.sessionId} enqueue=${label} swallowed error:`, err); });
+        return result;
+    }
+    async doStart() {
+        this.generation++;
+        return this.deps.startProcess(this.sessionId);
+    }
+    async doStop() {
+        await this.deps.stopProcessAndWait(this.sessionId);
+    }
+    setTimer(key, delayMs, callback) {
+        const existing = this.timers.get(key);
+        if (existing)
+            clearTimeout(existing);
+        this.timers.set(key, setTimeout(() => {
+            this.timers.delete(key);
+            callback();
+        }, delayMs));
+    }
+    cancelAllTimers() {
+        for (const timer of this.timers.values())
+            clearTimeout(timer);
+        this.timers.clear();
+    }
+}
+//# sourceMappingURL=process-coordinator.js.map

package/server/dist/process-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-coordinator.js","sourceRoot":"","sources":["../process-coordinator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,MAAM,OAAO,kBAAkB;IAaV;IACA;IAbnB;iFAC6E;IACrE,UAAU,GAAG,CAAC,CAAA;IACtB,0DAA0D;IAClD,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAChD,8EAA8E;IACtE,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAA;IACjE;iEAC6D;IACrD,YAAY,GAAG,KAAK,CAAA;IAE5B,YACmB,SAAiB,EACjB,IAA4B;QAD5B,cAAS,GAAT,SAAS,CAAQ;QACjB,SAAI,GAAJ,IAAI,CAAwB;IAC5C,CAAC;IAEJ,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAE9E;;;;OAIG;IACH,YAAY;QACV,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IACpD,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QACxB,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAClD,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,KAAiB;QAClC,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;YACnB,KAAK,EAAE,CAAA;YACP,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA;YACzB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,OAAe,EAAE,aAA6B,EAAE,YAAyB;QACvF,IAAI,IAAI,CAAC,YAAY;YAAE,OAAM;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAA;QAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;YACrC,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAM;YACxD,qEAAqE;YACrE,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;gBAC/C,qCAAqC;gBACrC,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY;oBAAE,OAAO,KAAK,CAAA;gBAC9D,IAAI,aAAa,IAAI,CAAC,aAAa,EAAE;oBAAE,OAAO,KAAK,CAAA;gBACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;gBACpC,IAAI,OAAO,IAAI,YAAY;oBAAE,YAAY,EAAE,CAAA;gBAC3C,OAAO,OAAO,CAAA;YAChB,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,OAAe,EAAE,SAAqB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAA;QAC3B,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE;YACtC,IAAI,IAAI,CAAC,UAAU,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAM;YACxD,SAAS,EAAE,CAAA;QACb,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,oEAAoE;IACpE,cAAc;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QACxB,IAAI,CAAC,eAAe,EAAE,CAAA;IACxB,CAAC;IAED,kCAAkC;IAClC,IAAI,iBAAiB,KAAa,OAAO,IAAI,CAAC,UAAU,CAAA,CAAC,CAAC;IAE1D,2DAA2D;IAC3D,IAAI,aAAa,KAAc,OAAO,IAAI,CAAC,YAAY,CAAA,CAAC,CAAC;IAEzD,2FAA2F;IAC3F,gBAAgB,KAAW,IAAI,CAAC,YAAY,GAAG,KAAK,CAAA,CAAC,CAAC;IAEtD,8EAA8E;IAC9E,qBAAqB;IACrB,8EAA8E;IAEtE,OAAO,CAAI,KAAa,EAAE,EAA8B;QAC9D,IAAI,CAAC,eAAe,EAAE,CAAA;QACtB,IAAI,OAAwB,CAAA;QAC5B,IAAI,MAA6B,CAAA;QACjC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,CAAA,CAAC,CAAC,CAAC,CAAA;QAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;aACpB,IAAI,CAAC,GAAG,EAAE;YACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,YAAY,KAAK,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;YACtF,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAmC,EAAE,MAAM,CAAC,CAAA;QAC/D,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,YAAY,KAAK,mBAAmB,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QAC7G,OAAO,MAAM,CAAA;IACf,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACpD,CAAC;IAEO,QAAQ,CAAC,GAAW,EAAE,OAAe,EAAE,QAAoB;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACvB,QAAQ,EAAE,CAAA;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;IACd,CAAC;IAEO,eAAe;QACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;CACF"}

package/server/dist/prompt-router.js

@@ -10,6 +10,7 @@
  */
 import { randomUUID } from 'crypto';
 import { ApprovalManager } from './approval-manager.js';
+import { jsonParse } from './json-parse.js';
 export class PromptRouter {
     deps;
     constructor(deps) {
@@ -473,7 +474,7 @@ export class PromptRouter {
         if (typeof value === 'string') {
             // Try parsing as JSON answers map (multi-question flow)
             try {
-                const parsed = JSON.parse(value);
+                const parsed = jsonParse(value);
                 if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
                     answers = parsed;
                 }