crewx-bridge 0.2.7 → 0.2.8

package/dist/daemon-lock.js

@@ -0,0 +1,257 @@
+import { execFileSync } from "node:child_process";
+import { createHash, randomUUID } from "node:crypto";
+import { constants as fsConstants, readFileSync } from "node:fs";
+import { lstat, link, mkdir, open, rmdir, unlink, } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { z } from "zod";
+import { bridgeStateDirectory, ensureSecureDirectory, readSecureText, } from "./config.js";
+import { BridgeError } from "./errors.js";
+const DaemonLockRecordSchema = z
+    .object({
+    version: z.literal(1),
+    pid: z.number().int().positive(),
+    nonce: z.uuid(),
+    started_at: z.iso.datetime({ offset: true }),
+    process_fingerprint: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .strict();
+export function bridgeDaemonLockPath(environment = process.env, platform = process.platform) {
+    return join(bridgeStateDirectory(environment, platform), "daemon.lock");
+}
+function processIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+function hashProcessIdentity(identity) {
+    return createHash("sha256").update(identity).digest("hex");
+}
+/**
+ * A PID alone is not an ownership proof: an OS can recycle it after the
+ * original daemon exits. Bind the lock to an immutable process-start identity
+ * so a replacement process with the same PID is still treated as stale.
+ */
+export function processFingerprint(pid, platform = process.platform) {
+    if (!processIsAlive(pid))
+        return undefined;
+    try {
+        if (platform === "linux") {
+            const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+            const commandEnd = stat.lastIndexOf(")");
+            if (commandEnd < 0)
+                return undefined;
+            // The fields after comm begin at field 3; process start time is field 22.
+            const fields = stat.slice(commandEnd + 1).trim().split(/\s+/);
+            const startTime = fields[19];
+            if (!startTime)
+                return undefined;
+            return hashProcessIdentity(`linux:${String(pid)}:${startTime}`);
+        }
+        if (platform === "darwin") {
+            const identity = execFileSync("/bin/ps", ["-ww", "-p", String(pid), "-o", "lstart=", "-o", "command="], {
+                encoding: "utf8",
+                timeout: 2_000,
+                maxBuffer: 64 * 1024,
+                stdio: ["ignore", "pipe", "ignore"],
+            }).trim();
+            if (!identity)
+                return undefined;
+            return hashProcessIdentity(`darwin:${String(pid)}:${identity}`);
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
+}
+function delay(milliseconds) {
+    return new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
+export class BridgeDaemonLock {
+    fingerprint;
+    now;
+    recoveryStaleMs;
+    path;
+    recoveryPath;
+    held;
+    constructor(environment = process.env, platform = process.platform, fingerprint = (pid) => processFingerprint(pid, platform), now = Date.now, recoveryStaleMs = 30_000) {
+        this.fingerprint = fingerprint;
+        this.now = now;
+        this.recoveryStaleMs = recoveryStaleMs;
+        this.path = bridgeDaemonLockPath(environment, platform);
+        this.recoveryPath = `${this.path}.recovery`;
+    }
+    async acquire() {
+        if (this.held)
+            return;
+        await ensureSecureDirectory(dirname(this.path));
+        const ownFingerprint = this.fingerprint(process.pid);
+        if (!ownFingerprint) {
+            throw new BridgeError("daemon_identity_unavailable", "CrewX Bridge could not verify the daemon process identity.", 1, { retryable: true });
+        }
+        const record = {
+            version: 1,
+            pid: process.pid,
+            nonce: randomUUID(),
+            started_at: new Date(this.now()).toISOString(),
+            process_fingerprint: ownFingerprint,
+        };
+        for (let attempt = 0; attempt < 100; attempt += 1) {
+            if (await this.tryCreate(record))
+                return;
+            let existing;
+            try {
+                existing = await this.readExisting();
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    continue;
+                throw error;
+            }
+            if (this.isCurrentOwner(existing)) {
+                throw this.alreadyRunning(existing.pid);
+            }
+            const ownsRecovery = await this.tryAcquireRecovery();
+            if (!ownsRecovery) {
+                await delay(10);
+                continue;
+            }
+            try {
+                // Recovery is serialized. Re-read after taking the recovery mutex so a
+                // replacement daemon created by another contender is never unlinked.
+                try {
+                    existing = await this.readExisting();
+                    if (this.isCurrentOwner(existing)) {
+                        throw this.alreadyRunning(existing.pid);
+                    }
+                    await unlink(this.path);
+                }
+                catch (error) {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                }
+                if (await this.tryCreate(record))
+                    return;
+            }
+            finally {
+                await rmdir(this.recoveryPath).catch((error) => {
+                    if (error.code !== "ENOENT")
+                        throw error;
+                });
+            }
+        }
+        throw new BridgeError("daemon_lock_contended", "CrewX Bridge could not acquire its daemon lock because another process is starting.", 1, { retryable: true });
+    }
+    async tryCreate(record) {
+        const temporary = join(dirname(this.path), `.daemon.lock.${record.nonce}.tmp`);
+        try {
+            const handle = await open(temporary, fsConstants.O_WRONLY |
+                fsConstants.O_CREAT |
+                fsConstants.O_EXCL |
+                (fsConstants.O_NOFOLLOW ?? 0), 0o600);
+            try {
+                await handle.writeFile(`${JSON.stringify(record)}\n`, "utf8");
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            // link(2) publishes the fully-written inode only if the lock name does
+            // not exist, giving contenders an atomic create-with-content operation.
+            await link(temporary, this.path);
+            this.held = record;
+            return true;
+        }
+        catch (error) {
+            if (error.code === "EEXIST")
+                return false;
+            throw error;
+        }
+        finally {
+            await unlink(temporary).catch((error) => {
+                if (error.code !== "ENOENT")
+                    throw error;
+            });
+        }
+    }
+    async tryAcquireRecovery() {
+        try {
+            await mkdir(this.recoveryPath, { mode: 0o700 });
+            return true;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        const info = await lstat(this.recoveryPath);
+        if (!info.isDirectory() ||
+            info.isSymbolicLink() ||
+            (info.mode & 0o077) !== 0) {
+            throw new BridgeError("invalid_daemon_lock", `CrewX Bridge daemon recovery lock at ${this.recoveryPath} is unsafe.`, 1, { retryable: false });
+        }
+        if (this.now() - info.mtimeMs <= this.recoveryStaleMs)
+            return false;
+        // There is no portable compare-and-delete primitive for directories. An
+        // automatic stale cleanup could remove a fresh contender's mutex between
+        // lstat(2) and rmdir(2), admitting two recovery owners. Fail closed and
+        // require explicit operator inspection for this exceptionally narrow
+        // crash window instead.
+        throw new BridgeError("stale_daemon_recovery_lock", `CrewX Bridge found crash residue at ${this.recoveryPath}. Confirm no Bridge process is starting, then remove that directory and restart the service.`, 1, { retryable: false });
+    }
+    isCurrentOwner(record) {
+        return this.fingerprint(record.pid) === record.process_fingerprint;
+    }
+    alreadyRunning(pid) {
+        return new BridgeError("daemon_already_running", `CrewX Bridge is already running as PID ${pid}. Use \`crewx-bridge service status\` or \`crewx-bridge doctor\` to inspect it.`, 1, { retryable: false });
+    }
+    async release() {
+        const held = this.held;
+        this.held = undefined;
+        if (!held)
+            return;
+        let existing;
+        try {
+            existing = await this.readExisting();
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return;
+            throw error;
+        }
+        if (existing.pid !== held.pid || existing.nonce !== held.nonce)
+            return;
+        await unlink(this.path).catch((error) => {
+            if (error.code !== "ENOENT")
+                throw error;
+        });
+    }
+    async readExisting() {
+        const raw = await readSecureText(this.path, 4 * 1024);
+        if (!raw) {
+            const missing = new Error(`Bridge daemon lock disappeared: ${this.path}`);
+            missing.code = "ENOENT";
+            throw missing;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new BridgeError("invalid_daemon_lock", `CrewX Bridge daemon lock at ${this.path} is invalid JSON.`, 1, { cause: error, retryable: false });
+        }
+        const result = DaemonLockRecordSchema.safeParse(parsed);
+        if (!result.success) {
+            throw new BridgeError("invalid_daemon_lock", `CrewX Bridge daemon lock at ${this.path} has an unsupported shape.`, 1, { retryable: false });
+        }
+        const info = await lstat(this.path);
+        if (!info.isFile() || info.isSymbolicLink() || (info.mode & 0o077) !== 0) {
+            throw new BridgeError("invalid_daemon_lock", `CrewX Bridge daemon lock at ${this.path} is unsafe.`, 1, { retryable: false });
+        }
+        return result.data;
+    }
+}
+//# sourceMappingURL=daemon-lock.js.map

package/dist/daemon-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-lock.js","sourceRoot":"","sources":["../src/daemon-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EACL,KAAK,EACL,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,GAEf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxD,CAAC;KACD,MAAM,EAAE,CAAC;AASZ,MAAM,UAAU,oBAAoB,CAClC,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,UAAU,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACrC,0EAA0E;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YACjC,OAAO,mBAAmB,CAAC,SAAS,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,YAAY,CAC3B,SAAS,EACT,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,EAC7D;gBACE,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,EAAE,GAAG,IAAI;gBACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CACF,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAChC,OAAO,mBAAmB,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,gBAAgB;IAQR;IAEA;IACA;IAVV,IAAI,CAAS;IACb,YAAY,CAAS;IACtB,IAAI,CAA+B;IAE3C,YACE,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ,EACV,cAAmD,CAAC,GAAG,EAAE,EAAE,CAC1E,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAClB,MAAoB,IAAI,CAAC,GAAG,EAC5B,kBAAkB,MAAM;QAHxB,gBAAW,GAAX,WAAW,CACO;QAClB,QAAG,GAAH,GAAG,CAAyB;QAC5B,oBAAe,GAAf,eAAe,CAAS;QAEzC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,WAAW,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CACnB,6BAA6B,EAC7B,4DAA4D,EAC5D,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAqB;YAC/B,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,UAAU,EAAE;YACnB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC9C,mBAAmB,EAAE,cAAc;SACpC,CAAC;QAEF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,OAAO;YAEzC,IAAI,QAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACjE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,uEAAuE;gBACvE,qEAAqE;gBACrE,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;oBACrC,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC1C,CAAC;oBACD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACtE,CAAC;gBACD,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;oBAAE,OAAO;YAC3C,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACtD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBACtE,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,qFAAqF,EACrF,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAwB;QAC9C,MAAM,SAAS,GAAG,IAAI,CACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAClB,gBAAgB,MAAM,CAAC,KAAK,MAAM,CACnC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,SAAS,EACT,WAAW,CAAC,QAAQ;gBAClB,WAAW,CAAC,OAAO;gBACnB,WAAW,CAAC,MAAM;gBAClB,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,EAC/B,KAAK,CACN,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IACE,CAAC,IAAI,CAAC,WAAW,EAAE;YACnB,IAAI,CAAC,cAAc,EAAE;YACrB,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EACzB,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,wCAAwC,IAAI,CAAC,YAAY,aAAa,EACtE,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QAEpE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,wBAAwB;QACxB,MAAM,IAAI,WAAW,CACnB,4BAA4B,EAC5B,uCAAuC,IAAI,CAAC,YAAY,8FAA8F,EACtJ,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,MAAwB;QAC7C,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,mBAAmB,CAAC;IACrE,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,OAAO,IAAI,WAAW,CACpB,wBAAwB,EACxB,0CAA0C,GAAG,iFAAiF,EAC9H,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,IAAI,QAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO;QACvE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC/C,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,OAAiC,CAAC,IAAI,GAAG,QAAQ,CAAC;YACnD,MAAM,OAAO,CAAC;QAChB,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+BAA+B,IAAI,CAAC,IAAI,mBAAmB,EAC3D,CAAC,EACD,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+BAA+B,IAAI,CAAC,IAAI,4BAA4B,EACpE,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+BAA+B,IAAI,CAAC,IAAI,aAAa,EACrD,CAAC,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF"}

package/dist/daemon.d.ts

@@ -1,26 +1,42 @@
-import { type AgentAdapter, type BridgeCapabilities, type BridgeClaimedCommand, type BridgePolicySummary } from "crewx-agent-protocol";
+import { probeAdapter } from "crewx-agent-cli/adapters";
+import { type AgentAdapter, type BridgeCapabilities, type BridgeClaimedCommand, type BridgeHealth, type BridgePolicySummary } from "crewx-agent-protocol";
 import { BridgeApi } from "./api.js";
 import { type BridgeConfig } from "./config.js";
+import { type BridgeDaemonLockLike } from "./daemon-lock.js";
 import { BridgeJournal } from "./journal.js";
 import { BridgeRunLogs } from "./run-logs.js";
 import { ProcessSupervisor } from "./supervisor.js";
 export type BridgeLog = (message: string) => void;
-export declare function probeCapabilities(): Promise<BridgeCapabilities>;
+export declare function adaptiveIdleClaimDelay(serverMinimumMs: number, consecutiveEmptyClaims: number, random?: () => number): number;
+export declare function probeCapabilities(runtimeProbe?: typeof probeAdapter): Promise<BridgeCapabilities>;
 export declare function policySummary(config: BridgeConfig): BridgePolicySummary;
+export declare function bridgeHealth(journal: BridgeJournal): BridgeHealth;
 export declare class BridgeDaemon {
     readonly config: BridgeConfig;
     readonly api: BridgeApi;
     readonly journal: BridgeJournal;
     readonly supervisor: ProcessSupervisor;
-    readonly capabilities: BridgeCapabilities;
+    private capabilities;
     readonly log: BridgeLog;
     readonly runLogs: BridgeRunLogs;
+    readonly capabilityProbe: () => Promise<BridgeCapabilities>;
+    readonly now: () => number;
+    readonly random: () => number;
     private lastHeartbeat;
-    constructor(config: BridgeConfig, api: BridgeApi, journal: BridgeJournal, supervisor: ProcessSupervisor, capabilities: BridgeCapabilities, log?: BridgeLog, runLogs?: BridgeRunLogs);
+    private lastCapabilityProbe;
+    private outcomeReconcileFailures;
+    private nextOutcomeReconcileAt;
+    private consecutiveEmptyClaims;
+    private nextClaimAt;
+    constructor(config: BridgeConfig, api: BridgeApi, journal: BridgeJournal, supervisor: ProcessSupervisor, capabilities: BridgeCapabilities, log?: BridgeLog, runLogs?: BridgeRunLogs, capabilityProbe?: () => Promise<BridgeCapabilities>, now?: () => number, random?: () => number);
     initialize(): Promise<void>;
     heartbeat(): Promise<void>;
     tick(): Promise<number>;
+    private delayUntilHeartbeat;
+    reconcileOutcomes(force?: boolean): Promise<void>;
     execute(command: BridgeClaimedCommand): Promise<void>;
+    private reportOutcome;
+    private recoverAppliedOutcome;
     private start;
     private stop;
 }
@@ -34,6 +50,7 @@ export declare function runBridge(options: {
     capabilities?: BridgeCapabilities;
     log?: BridgeLog;
     runLogs?: BridgeRunLogs;
+    daemonLock?: BridgeDaemonLockLike;
 }): Promise<void>;
 export declare function supportedAdapters(): readonly AgentAdapter[];
 //# sourceMappingURL=daemon.d.ts.map

package/dist/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAGzB,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAwBlD,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAYrE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAOvE;AAYD,qBAAa,YAAY;IAIrB,QAAQ,CAAC,MAAM,EAAE,YAAY;IAC7B,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,UAAU,EAAE,iBAAiB;IACtC,QAAQ,CAAC,YAAY,EAAE,kBAAkB;IACzC,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IATjC,OAAO,CAAC,aAAa,CAAK;gBAGf,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,iBAAiB,EAC7B,YAAY,EAAE,kBAAkB,EAChC,GAAG,GAAE,SAA2B,EAChC,OAAO,GAAE,aAAmC;IAGjD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAoF1B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAavB,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;YA+C7C,KAAK;YAgGL,IAAI;CA6CnB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgHhB;AAED,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAIzB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAMlD,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,MAAM,EACvB,sBAAsB,EAAE,MAAM,EAC9B,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAWR;AAED,wBAAsB,iBAAiB,CACrC,YAAY,GAAE,OAAO,YAA2B,GAC/C,OAAO,CAAC,kBAAkB,CAAC,CAY7B;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAOvE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CA2DjE;AAkBD,qBAAa,YAAY;IASrB,QAAQ,CAAC,MAAM,EAAE,YAAY;IAC7B,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,UAAU,EAAE,iBAAiB;IACtC,OAAO,CAAC,YAAY;IACpB,QAAQ,CAAC,GAAG,EAAE,SAAS;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC;IAC3D,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM;IAjB/B,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,mBAAmB,CAAS;IACpC,OAAO,CAAC,wBAAwB,CAAK;IACrC,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,sBAAsB,CAAK;IACnC,OAAO,CAAC,WAAW,CAAK;gBAGb,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,aAAa,EACtB,UAAU,EAAE,iBAAiB,EAC9B,YAAY,EAAE,kBAAkB,EAC/B,GAAG,GAAE,SAA2B,EAChC,OAAO,GAAE,aAAmC,EAC5C,eAAe,GAAE,MAAM,OAAO,CAAC,kBAAkB,CAAqB,EACtE,GAAG,GAAE,MAAM,MAAiB,EAC5B,MAAM,GAAE,MAAM,MAAoB;IAKvC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAyG1B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAgC7B,OAAO,CAAC,mBAAmB;IAQrB,iBAAiB,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAiH/C,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;YA2D7C,aAAa;YAkCb,qBAAqB;YAmErB,KAAK;YAyHL,IAAI;CAkDnB;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsIhB;AAED,wBAAgB,iBAAiB,IAAI,SAAS,YAAY,EAAE,CAE3D"}