harnery 0.43.0 → 0.45.0

package/dist/core/inbox/peer-messages.d.ts

@@ -0,0 +1,37 @@
+import type { HarneryInboxLimits, HarneryInboxMessageRecordV1 } from "./contract.js";
+import { HarneryInboxService } from "./service.js";
+import { type MessageTargetInput } from "./targets.js";
+/** Preserve the existing ping body/count bounds. Pending messages have no TTL;
+ * the lifecycle planner protects them through the idle finalization window. */
+export declare const PEER_INBOX_LIMITS: HarneryInboxLimits;
+export declare function peerInbox(coordRoot: string): HarneryInboxService;
+/** CLI and web use this one path. A receipt proves a synced append, never that
+ * a process is awake or that the recipient has noticed the message. */
+export declare function sendPeerMessage(input: {
+    coordRoot: string;
+    target: MessageTargetInput;
+    senderInstanceId: string | null;
+    senderName: string;
+    body: string;
+}): {
+    ok: false;
+    code: "no_peer" | "ambiguous_peer" | "not_live" | "authority_unsafe";
+    message: string;
+    candidates?: string[];
+} | {
+    state: "queued" | "written-live";
+    message_id: string;
+    body_bytes: number;
+    synced: true;
+    ok: true;
+    target: {
+        instance_id: string;
+        name: string;
+        delivery: "written-live" | "queued";
+    };
+};
+export declare function formatPeerInbox(coordRoot: string, messages: readonly HarneryInboxMessageRecordV1[]): string;
+/** Wait for every earlier stdout write to finish before acknowledging context.
+ * If output fails, the caller throws and leaves the batch pending. */
+export declare function acknowledgeEmittedPeerInbox(coordRoot: string, instanceId: string, messageIds: readonly string[]): Promise<void>;
+//# sourceMappingURL=peer-messages.d.ts.map

package/dist/core/inbox/peer-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer-messages.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/peer-messages.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,kBAAkB,EAAwB,MAAM,cAAc,CAAC;AAI7E;+EAC+E;AAC/E,eAAO,MAAM,iBAAiB,EAAE,kBAY/B,CAAC;AAEF,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,CAEhE;AAED;uEACuE;AACvE,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;;;;;;;;;;;;;;;;EAWA;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,SAAS,2BAA2B,EAAE,GAC/C,MAAM,CA4BR;AAED;sEACsE;AACtE,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/core/inbox/peer-messages.js

@@ -0,0 +1,72 @@
+import { resolveBinName } from "../config.js";
+import { HarneryInboxService } from "./service.js";
+import { resolveMessageTarget } from "./targets.js";
+const DAY = 24 * 60 * 60_000;
+/** Preserve the existing ping body/count bounds. Pending messages have no TTL;
+ * the lifecycle planner protects them through the idle finalization window. */
+export const PEER_INBOX_LIMITS = {
+    max_message_body_bytes: 4_000,
+    max_pending_count: 25,
+    max_pending_bytes: 100_000,
+    max_history_bytes: 1024 * 1024,
+    max_history_records: 10_000,
+    warning_pressure_ratio: 0.8,
+    max_surface_count: 10,
+    max_surface_bytes: 16_000,
+    max_surface_tokens: 4_000,
+    surfaced_grace_ms: 7 * DAY,
+    terminal_grace_ms: 7 * DAY,
+};
+export function peerInbox(coordRoot) {
+    return new HarneryInboxService({ coord_root: coordRoot, limits: PEER_INBOX_LIMITS });
+}
+/** CLI and web use this one path. A receipt proves a synced append, never that
+ * a process is awake or that the recipient has noticed the message. */
+export function sendPeerMessage(input) {
+    const target = resolveMessageTarget(input.coordRoot, input.target);
+    if (!target.ok)
+        return target;
+    const receipt = peerInbox(input.coordRoot).send({
+        sender_instance_id: input.senderInstanceId,
+        sender_display_name: input.senderName,
+        recipient_instance_id: target.target.instance_id,
+        recipient_display_name: target.target.name,
+        body: input.body.trim(),
+    });
+    return { ok: true, target: target.target, ...receipt, state: target.target.delivery };
+}
+export function formatPeerInbox(coordRoot, messages) {
+    if (messages.length === 0)
+        return "";
+    const onlyAgents = messages.every(({ sender_instance_id }) => sender_instance_id !== null);
+    const header = onlyAgents
+        ? messages.length === 1
+            ? "Message from a peer agent:"
+            : `${messages.length} messages from peer agents:`
+        : messages.length === 1
+            ? "Message for this task:"
+            : `${messages.length} messages for this task:`;
+    const body = messages
+        .map((message) => `  ${message.message_id} from ${message.sender_instance_id === null ? "Operator" : `agent-${message.sender_display_name}`} (${message.created_at}):\n` +
+        message.body
+            .split("\n")
+            .map((line) => `    ${line}`)
+            .join("\n"))
+        .join("\n\n");
+    const replyTarget = messages.find(({ sender_instance_id }) => sender_instance_id !== null);
+    return (`${header}\n\n${body}\n\nMessages are bound to this task instance.` +
+        (replyTarget
+            ? ` Reply with \`${resolveBinName(coordRoot)} agents ping ${replyTarget.sender_display_name} ` +
+                `--instance-id ${replyTarget.sender_instance_id} "<your reply>"\`.`
+            : ""));
+}
+/** Wait for every earlier stdout write to finish before acknowledging context.
+ * If output fails, the caller throws and leaves the batch pending. */
+export async function acknowledgeEmittedPeerInbox(coordRoot, instanceId, messageIds) {
+    if (messageIds.length === 0)
+        return;
+    await new Promise((resolve, reject) => {
+        process.stdout.write("", (error) => (error ? reject(error) : resolve()));
+    });
+    peerInbox(coordRoot).acknowledgeSurface(instanceId, messageIds);
+}

package/dist/core/inbox/service.d.ts

@@ -6,7 +6,7 @@ export interface HarneryInboxServiceOptions {
     id?: () => string;
 }
 export interface HarneryInboxSendInput {
-    sender_instance_id: string;
+    sender_instance_id: string | null;
     sender_display_name: string;
     recipient_instance_id: string;
     recipient_display_name: string;
@@ -26,6 +26,13 @@ export declare class HarneryInboxService {
     pending(recipientInstanceId: string): HarneryInboxMessageRecordV1[];
     status(recipientInstanceId: string): HarneryInboxStatusV1;
     surface(recipientInstanceId: string, emit: (messages: readonly HarneryInboxMessageRecordV1[]) => Promise<void> | void, budget?: HarneryInboxSurfaceBudget): Promise<HarneryInboxSurfaceResult>;
+    /** Preparing prompt text is read-only. A failed or abandoned emission must
+     * leave the same messages pending for the recipient's next prompt. */
+    prepareSurface(recipientInstanceId: string, budget?: HarneryInboxSurfaceBudget): HarneryInboxMessageRecordV1[];
+    /** Call only after the selected IDs have actually been emitted. A message
+     * appended while output is in flight remains pending rather than being
+     * included in an acknowledgement of an older batch. */
+    acknowledgeSurface(recipientInstanceId: string, messageIds: readonly string[]): void;
 }
 export declare function inboxPath(coordRoot: string, recipientInstanceId: string): string;
 export declare function project(records: readonly HarneryInboxRecordV1[]): {

package/dist/core/inbox/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/service.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,CAAC;CACd;AAED,qBAAa,mBAAmB;;gBAGlB,OAAO,EAAE,0BAA0B;IAK/C,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,uBAAuB;IA2C3D,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAO5D,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,2BAA2B,EAAE;IAInE,MAAM,CAAC,mBAAmB,EAAE,MAAM,GAAG,oBAAoB;IA0BnD,OAAO,CACX,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAChF,MAAM,GAAE,yBAIP,GACA,OAAO,CAAC,yBAAyB,CAAC;CAoCtC;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG;IACjE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACvC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAsBA"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/service.ts"],"names":[],"mappings":"AASA,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC/B,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,CAAC;CACd;AAED,qBAAa,mBAAmB;;gBAGlB,OAAO,EAAE,0BAA0B;IAK/C,IAAI,CAAC,KAAK,EAAE,qBAAqB,GAAG,uBAAuB;IA2C3D,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAS5D,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,2BAA2B,EAAE;IAInE,MAAM,CAAC,mBAAmB,EAAE,MAAM,GAAG,oBAAoB;IA0BnD,OAAO,CACX,mBAAmB,EAAE,MAAM,EAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAChF,MAAM,GAAE,yBAIP,GACA,OAAO,CAAC,yBAAyB,CAAC;IAiBrC;0EACsE;IACtE,cAAc,CACZ,mBAAmB,EAAE,MAAM,EAC3B,MAAM,GAAE,yBAIP,GACA,2BAA2B,EAAE;IAKhC;;2DAEuD;IACvD,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;CA2BrF;AA4BD,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG;IACjE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACvC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAsBA"}

package/dist/core/inbox/service.js

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { existsSync, statSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { readCrashSafeJsonlFile, updateCrashSafeJsonlFile } from "../storage/durable-history.js";
+import { readCrashSafeJsonlFile, updateCrashSafeJsonlFile, } from "../storage/durable-history.js";
 import { HARNERY_INBOX_RECORD_SCHEMA, HARNERY_INBOX_STATUS_SCHEMA, HarneryInboxCapacityError, } from "./contract.js";
 export class HarneryInboxService {
     #options;
@@ -20,7 +20,7 @@ export class HarneryInboxService {
             schema: HARNERY_INBOX_RECORD_SCHEMA,
             kind: "message",
             message_id: `msg_${this.#options.id?.() ?? randomUUID()}`,
-            sender_instance_id: opaqueId(input.sender_instance_id, "sender instance"),
+            sender_instance_id: senderId(input.sender_instance_id),
             sender_display_name: boundedDisplay(input.sender_display_name),
             recipient_instance_id: recipient,
             recipient_display_name: boundedDisplay(input.recipient_display_name),
@@ -29,7 +29,7 @@ export class HarneryInboxService {
             body_bytes: bodyBytes,
         };
         const path = inboxPath(this.#options.coord_root, recipient);
-        return updateCrashSafeJsonlFile(path, readOptions(limits), (records) => {
+        return updateInboxHistory(path, readOptions(limits), (records) => {
             const projection = project(records);
             capacityCheck(projection, record, path, limits);
             return {
@@ -44,7 +44,10 @@ export class HarneryInboxService {
         });
     }
     records(recipientInstanceId) {
-        return readCrashSafeJsonlFile(inboxPath(this.#options.coord_root, opaqueId(recipientInstanceId, "recipient instance")), readOptions(this.#options.limits));
+        const records = readCrashSafeJsonlFile(inboxPath(this.#options.coord_root, opaqueId(recipientInstanceId, "recipient instance")), readOptions(this.#options.limits));
+        for (const record of records)
+            validateRecord(record);
+        return records;
     }
     pending(recipientInstanceId) {
         return project(this.records(recipientInstanceId)).pending;
@@ -75,18 +78,42 @@ export class HarneryInboxService {
         max_bytes: this.#options.limits.max_surface_bytes,
         max_tokens: this.#options.limits.max_surface_tokens,
     }) {
-        validateSurfaceBudget(budget);
         const recipient = opaqueId(recipientInstanceId, "recipient instance");
-        const selected = selectOldestFitting(this.pending(recipient), budget);
+        const selected = this.prepareSurface(recipient, budget);
         await emit(selected);
-        if (selected.length > 0) {
+        this.acknowledgeSurface(recipient, selected.map(({ message_id }) => message_id));
+        const remaining = this.pending(recipient);
+        return {
+            emitted: selected,
+            remaining_pending_count: remaining.length,
+            remaining_pending_bytes: remaining.reduce((sum, record) => sum + record.body_bytes, 0),
+            repeated_after_crash_possible: true,
+        };
+    }
+    /** Preparing prompt text is read-only. A failed or abandoned emission must
+     * leave the same messages pending for the recipient's next prompt. */
+    prepareSurface(recipientInstanceId, budget = {
+        max_count: this.#options.limits.max_surface_count,
+        max_bytes: this.#options.limits.max_surface_bytes,
+        max_tokens: this.#options.limits.max_surface_tokens,
+    }) {
+        validateSurfaceBudget(budget);
+        return selectOldestFitting(this.pending(recipientInstanceId), budget);
+    }
+    /** Call only after the selected IDs have actually been emitted. A message
+     * appended while output is in flight remains pending rather than being
+     * included in an acknowledgement of an older batch. */
+    acknowledgeSurface(recipientInstanceId, messageIds) {
+        const recipient = opaqueId(recipientInstanceId, "recipient instance");
+        const selected = new Set(messageIds);
+        if (selected.size > 0) {
             const surfacedAt = now(this.#options).toISOString();
-            updateCrashSafeJsonlFile(inboxPath(this.#options.coord_root, recipient), readOptions(this.#options.limits), (records) => {
+            updateInboxHistory(inboxPath(this.#options.coord_root, recipient), readOptions(this.#options.limits), (records) => {
                 const stillPending = new Set(project(records).pending.map(({ message_id }) => message_id));
                 return {
-                    append: selected
-                        .filter(({ message_id }) => stillPending.has(message_id))
-                        .map(({ message_id }) => ({
+                    append: [...selected]
+                        .filter((message_id) => stillPending.has(message_id))
+                        .map((message_id) => ({
                         schema: HARNERY_INBOX_RECORD_SCHEMA,
                         kind: "surfaced",
                         message_id,
@@ -96,13 +123,26 @@ export class HarneryInboxService {
                 };
             });
         }
-        const remaining = this.pending(recipient);
-        return {
-            emitted: selected,
-            remaining_pending_count: remaining.length,
-            remaining_pending_bytes: remaining.reduce((sum, record) => sum + record.body_bytes, 0),
-            repeated_after_crash_possible: true,
-        };
+    }
+}
+/** The shared writer refuses an occupied lease before invoking the update.
+ * Briefly retry only that exact refusal so concurrent peer senders both get
+ * a chance to append. All validation, authority and I/O failures still fail
+ * immediately, and an occupied live lease is never removed or overridden. */
+function updateInboxHistory(path, options, update) {
+    const deadline = performance.now() + 2_000;
+    const pause = new Int32Array(new SharedArrayBuffer(4));
+    while (true) {
+        try {
+            return updateCrashSafeJsonlFile(path, options, update);
+        }
+        catch (error) {
+            if (!(error instanceof Error) ||
+                error.message !== `durable history lease busy: ${path}.lease` ||
+                performance.now() >= deadline)
+                throw error;
+            Atomics.wait(pause, 0, 0, Math.min(10, deadline - performance.now()));
+        }
     }
 }
 export function inboxPath(coordRoot, recipientInstanceId) {
@@ -174,10 +214,13 @@ function now(options) {
     return options.now?.() ?? new Date();
 }
 function opaqueId(value, field) {
-    if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(value))
+    if (typeof value !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(value))
         throw new Error(`invalid ${field} id`);
     return value;
 }
+function senderId(value) {
+    return value === null ? null : opaqueId(value, "sender instance");
+}
 function boundedDisplay(value) {
     const result = value.trim();
     if (result.length === 0 || Buffer.byteLength(result) > 256)
@@ -187,8 +230,11 @@ function boundedDisplay(value) {
 function validateRecord(record) {
     if (record.schema !== HARNERY_INBOX_RECORD_SCHEMA)
         throw new Error("unknown inbox record schema");
-    if (record.kind === "message" && Buffer.byteLength(record.body) !== record.body_bytes) {
-        throw new Error(`inbox message ${record.message_id} has invalid body_bytes`);
+    if (record.kind === "message") {
+        senderId(record.sender_instance_id);
+        if (Buffer.byteLength(record.body) !== record.body_bytes) {
+            throw new Error(`inbox message ${record.message_id} has invalid body_bytes`);
+        }
     }
 }
 function validateLimits(limits) {

package/dist/core/inbox/targets.d.ts

@@ -0,0 +1,22 @@
+export interface MessageTargetInput {
+    name?: string;
+    instanceId?: string;
+    requireLive?: boolean;
+    now?: Date;
+}
+export type MessageTargetResult = {
+    ok: true;
+    target: {
+        instance_id: string;
+        name: string;
+        delivery: "written-live" | "queued";
+    };
+} | {
+    ok: false;
+    code: "no_peer" | "ambiguous_peer" | "not_live" | "authority_unsafe";
+    message: string;
+    candidates?: string[];
+};
+/** Resolve one immutable recipient without extending presence or claiming attention. */
+export declare function resolveMessageTarget(coordRoot: string, input: MessageTargetInput): MessageTargetResult;
+//# sourceMappingURL=targets.d.ts.map

package/dist/core/inbox/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../../src/core/inbox/targets.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,cAAc,GAAG,QAAQ,CAAA;KAAE,CAAC;CACpF,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,SAAS,GAAG,gBAAgB,GAAG,UAAU,GAAG,kBAAkB,CAAC;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEN,wFAAwF;AACxF,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,kBAAkB,GACxB,mBAAmB,CAwFrB"}

package/dist/core/inbox/targets.js

@@ -0,0 +1,108 @@
+import { resolveName } from "../agents/state/names.js";
+import { coordFreshnessSeconds } from "../config.js";
+import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../events/v3/coordination-view.js";
+import { liveInstanceIdV3, nativeInstanceIdV3, observeLiveEventLedgerRouteV3, } from "../events/v3/live-route-observer.js";
+/** Resolve one immutable recipient without extending presence or claiming attention. */
+export function resolveMessageTarget(coordRoot, input) {
+    const requestedName = normalizeName(input.name);
+    const requestedInstance = input.instanceId?.trim();
+    if (!requestedName && !requestedInstance) {
+        return { ok: false, code: "no_peer", message: "Supply an exact agent name or instance id." };
+    }
+    const now = input.now?.getTime() ?? Date.now();
+    if (!Number.isFinite(now))
+        return unsafe("The message addressing clock is invalid.");
+    let view;
+    try {
+        if (observeLiveEventLedgerRouteV3(coordRoot).state === "blocked") {
+            return unsafe("The event ledger cannot establish message recipient authority.");
+        }
+        view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(coordRoot));
+        if (!view.source_complete)
+            return unsafe("The event ledger read is incomplete.");
+    }
+    catch {
+        return unsafe("The event ledger cannot establish message recipient authority.");
+    }
+    // Address historical instances without reopening them. A current generation
+    // wins over its own terminal history; otherwise use its last ledger position.
+    const byInstance = new Map();
+    for (const generation of Object.values(view.terminal_generations)) {
+        const prior = byInstance.get(generation.instance_id);
+        if (!prior || laterPosition(generation, prior))
+            byInstance.set(generation.instance_id, generation);
+    }
+    for (const generation of Object.values(view.instances))
+        byInstance.set(generation.instance_id, generation);
+    const freshnessMs = coordFreshnessSeconds(coordRoot) * 1_000;
+    const candidates = [...byInstance.values()].flatMap((generation) => {
+        const instanceId = nativeInstanceIdV3(generation.instance_id);
+        const name = resolveName(coordRoot, instanceId)?.name;
+        if (!name)
+            return [];
+        if (requestedInstance && liveInstanceIdV3(requestedInstance) !== generation.instance_id)
+            return [];
+        if (requestedName && normalizeName(name) !== requestedName)
+            return [];
+        const age = now - Date.parse(generation.last_observed_at);
+        const diagnostics = view.diagnostics_by_generation[generation.generation_id] ?? [];
+        return [
+            {
+                instanceId,
+                name,
+                safe: !diagnostics.some((diagnostic) => diagnostic.authority_blocking),
+                fresh: generation.phase === "live" && Number.isFinite(age) && age >= 0 && age <= freshnessMs,
+            },
+        ];
+    });
+    if (candidates.length === 0) {
+        return {
+            ok: false,
+            code: "no_peer",
+            message: "No known agent matches that exact name and instance.",
+        };
+    }
+    if (candidates.some((candidate) => !candidate.safe)) {
+        return unsafe("A matching agent generation does not have safe coordination authority.");
+    }
+    const fresh = candidates.filter((candidate) => candidate.fresh);
+    const selected = requestedInstance ? candidates : fresh.length > 0 ? fresh : candidates;
+    if (selected.length !== 1) {
+        return {
+            ok: false,
+            code: "ambiguous_peer",
+            message: "Several agent instances hold that exact name; specify --instance-id.",
+            candidates: selected.map(({ instanceId }) => instanceId).sort(),
+        };
+    }
+    const target = selected[0];
+    if (input.requireLive && !target.fresh) {
+        return {
+            ok: false,
+            code: "not_live",
+            message: "That agent is known but outside live presence; omit --require-live to queue its message.",
+        };
+    }
+    return {
+        ok: true,
+        target: {
+            instance_id: target.instanceId,
+            name: target.name,
+            delivery: target.fresh ? "written-live" : "queued",
+        },
+    };
+}
+function laterPosition(left, right) {
+    return (left.source_position.segment_ordinal > right.source_position.segment_ordinal ||
+        (left.source_position.segment_ordinal === right.source_position.segment_ordinal &&
+            left.source_position.byte_offset > right.source_position.byte_offset));
+}
+function normalizeName(name) {
+    return (name ?? "")
+        .trim()
+        .replace(/^agent-/i, "")
+        .toLowerCase();
+}
+function unsafe(message) {
+    return { ok: false, code: "authority_unsafe", message };
+}

package/dist/core/inbox/watcher.js

@@ -17,10 +17,14 @@ export async function* watchInbox(service, recipientInstanceId, options) {
 }
 function delay(ms, signal) {
     return new Promise((resolve) => {
-        const timer = setTimeout(resolve, ms);
-        signal.addEventListener("abort", () => {
+        const finish = () => {
             clearTimeout(timer);
+            signal.removeEventListener("abort", finish);
             resolve();
-        }, { once: true });
+        };
+        const timer = setTimeout(finish, ms);
+        signal.addEventListener("abort", finish, { once: true });
+        if (signal.aborted)
+            finish();
     });
 }

package/dist/core/journal/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/journal/index.ts"],"names":[],"mappings":"AAuBA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,iFAQrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAC3C,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAC5C,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,eAAe,QACyF,CAAC;AAEtH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAID,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtD;AAeD,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,CAAC,GAAE,IAAiB,GAAG,MAAM,CAW1D;AAID,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAwEtE;AAED,+CAA+C;AAC/C,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAkBxD;AAmBD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAAoB,GAAG,SAAS,EAAE,CA2DrF;AAID,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,GACX,UAAU,CAiEZ;AAID,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,IAAI,SAAyB,GAAG,MAAM,CAkBnE;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAc9C;AAED,qDAAqD;AACrD,wBAAgB,YAAY,IAAI;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,EAAE,CAWF;AAID,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAIjE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/journal/index.ts"],"names":[],"mappings":"AA+BA;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,iFAQrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAC3C,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAC5C,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,6DAA6D;AAC7D,eAAO,MAAM,eAAe,QACyF,CAAC;AAEtH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf;AAID,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAInC;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGtD;AAeD,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,CAAC,GAAE,IAAiB,GAAG,MAAM,CAW1D;AAID,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAwEtE;AAED,+CAA+C;AAC/C,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAkBxD;AAmBD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,SAAoB,GAAG,SAAS,EAAE,CA2DrF;AAID,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,eAAe,EACzB,IAAI,EAAE,MAAM,GACX,UAAU,CAiEZ;AAID,wGAAwG;AACxG,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,IAAI,SAAyB,GAAG,MAAM,CAkBnE;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAuB9C;AAED,qDAAqD;AACrD,wBAAgB,YAAY,IAAI;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,EAAE,CAWF;AAID,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAIjE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ9D"}

package/dist/core/journal/index.js

@@ -3,6 +3,8 @@ import { dirname, resolve } from "node:path";
 import { resolveMachineLabel } from "../../lib/machine.js";
 import { assertSafeInstanceId, monorepoRoot, resolveContainedFile, resolveOwner, } from "../agents/index.js";
 import { readLiveCoordinationRow, readLiveCoordinationRows, } from "../agents/state/live-coordination-view.js";
+import { readCoordinationViewV3, requireAuthoritySafeCoordinationViewV3, } from "../events/v3/coordination-view.js";
+import { liveInstanceIdV3, observeLiveEventLedgerRouteV3, } from "../events/v3/live-route-observer.js";
 /**
  * Agent journal: per-agent markdown journal at `.harnery/journal/<instance_id>.md`.
  *
@@ -340,12 +342,25 @@ export function sweepOrphanJournals() {
     const dir = journalDir();
     const root = monorepoRoot();
     const archived = [];
+    if (!root)
+        return archived;
+    let view;
+    try {
+        if (observeLiveEventLedgerRouteV3(root).state === "blocked")
+            return archived;
+        view = requireAuthoritySafeCoordinationViewV3(readCoordinationViewV3(root));
+        if (!view.source_complete)
+            return archived;
+    }
+    catch {
+        // A missing or unsafe read does not prove that an owner has ended.
+        return archived;
+    }
     for (const f of readdirSync(dir)) {
         if (!f.endsWith(".md"))
             continue;
         const instanceId = f.replace(/\.md$/, "");
-        const hb = root ? readLiveCoordinationRow(root, instanceId) : null;
-        if (!hb) {
+        if (!view.instances[liveInstanceIdV3(instanceId)]) {
             const dest = archiveJournal(instanceId);
             if (dest)
                 archived.push(dest);

package/dist/core/resources/contract.d.ts

@@ -1,3 +1,4 @@
+import type { ProcessGenerationVerdict } from "../agents/state/proc-start.js";
 export declare const RESOURCE_SNAPSHOT_SCHEMA_VERSION = 2;
 export declare const RESOURCE_SERVICE_STATUS_SCHEMA_VERSION = 1;
 export type ResourceSupportState = "supported" | "partial" | "unsupported" | "error";
@@ -140,6 +141,8 @@ export interface ResourceServiceStatusRecord {
 export interface ResourceServiceStatus {
     running: boolean;
     stale: boolean;
+    generation: ProcessGenerationVerdict;
+    liveness: "running" | "stopped" | "unknown";
     record?: ResourceServiceStatusRecord;
     status_path: string;
     snapshot_path: string;

package/dist/core/resources/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/core/resources/contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE;QACP,KAAK,EAAE,oBAAoB,CAAC;QAC5B,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;QACvD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,EAAE,CAAC,EAAE,gBAAgB,CAAC;IACtB,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,gFAAgF;IAChF,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,EAAE,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAClC,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/core/resources/contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAClD,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,CAAC;AAErF,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,OAAO,gCAAgC,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE;QACP,KAAK,EAAE,oBAAoB,CAAC;QAC5B,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;QACvD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,qBAAqB,CAAC;IAC/B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC7B,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,EAAE,CAAC,EAAE,gBAAgB,CAAC;IACtB,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,0BAA0B,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,gFAAgF;IAChF,GAAG,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACtC,EAAE,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAClC,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC3C,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,sCAAsC,CAAC;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,wBAAwB,CAAC;IACrC,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C,MAAM,CAAC,EAAE,2BAA2B,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B"}

package/dist/core/resources/service-status.d.ts

@@ -1,3 +1,16 @@
+import { type ProcessGenerationVerdict } from "../agents/state/proc-start.js";
 import { type ResourceServiceStatus } from "./contract.js";
-export declare function readResourceServiceStatus(coordRoot: string, nowMs?: number): ResourceServiceStatus;
+export interface ResourceProcessDependencies {
+    readToken?: (pid: number) => string | null;
+    probePid?: (pid: number) => unknown;
+}
+export declare function readResourceServiceStatus(coordRoot: string, nowMs?: number, dependencies?: ResourceProcessDependencies): ResourceServiceStatus;
+export declare function resourceProcessLiveness(owner: {
+    pid: number;
+    host: string;
+    start_token?: string;
+}, dependencies?: ResourceProcessDependencies): {
+    generation: ProcessGenerationVerdict;
+    liveness: ResourceServiceStatus["liveness"];
+};
 //# sourceMappingURL=service-status.d.ts.map

package/dist/core/resources/service-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-status.d.ts","sourceRoot":"","sources":["../../../src/core/resources/service-status.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,eAAe,CAAC;AAKvB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,GACjB,qBAAqB,CA0BvB"}
+{"version":3,"file":"service-status.d.ts","sourceRoot":"","sources":["../../../src/core/resources/service-status.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,wBAAwB,EAE9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,eAAe,CAAC;AAKvB,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CACrC;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,SAAa,EAClB,YAAY,GAAE,2BAAgC,GAC7C,qBAAqB,CA2BvB;AAcD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1D,YAAY,GAAE,2BAAgC,GAC7C;IAAE,UAAU,EAAE,wBAAwB,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAA;CAAE,CAgBvF"}

package/dist/core/resources/service-status.js

@@ -1,29 +1,31 @@
+import { existsSync } from "node:fs";
 import { hostname } from "node:os";
-import { checkPidToken } from "../agents/state/proc-start.js";
+import { verifyProcessGeneration, } from "../agents/state/proc-start.js";
 import { RESOURCE_SERVICE_STATUS_SCHEMA_VERSION, } from "./contract.js";
 import { readResourceServiceRecord, resourcePaths } from "./storage.js";
 const STALE_HEARTBEAT_MS = 15_000;
-export function readResourceServiceStatus(coordRoot, nowMs = Date.now()) {
+export function readResourceServiceStatus(coordRoot, nowMs = Date.now(), dependencies = {}) {
     const paths = resourcePaths(coordRoot);
     const record = readResourceServiceRecord(coordRoot);
     if (!validRecord(record)) {
         return {
             running: false,
             stale: false,
+            generation: "unknown",
+            liveness: existsSync(paths.service) ? "unknown" : "stopped",
             status_path: paths.service,
             snapshot_path: paths.snapshot,
         };
     }
     const heartbeatAt = Date.parse(record.heartbeat_at);
     const stale = !Number.isFinite(heartbeatAt) || nowMs - heartbeatAt > STALE_HEARTBEAT_MS;
-    const local = record.host === hostname();
-    const running = local &&
-        !stale &&
-        (record.state === "starting" || record.state === "running" || record.state === "stopping") &&
-        pidStillMatches(record.pid, record.start_token);
+    const owner = resourceProcessLiveness(record, dependencies);
+    const liveness = owner.generation === "same" && record.state === "stopped" ? "stopped" : owner.liveness;
     return {
-        running,
+        running: liveness === "running" && !stale,
         stale,
+        generation: owner.generation,
+        liveness,
         record,
         status_path: paths.service,
         snapshot_path: paths.snapshot,
@@ -36,13 +38,21 @@ function validRecord(value) {
         typeof value.host === "string" &&
         typeof value.heartbeat_at === "string");
 }
-function pidStillMatches(pid, startToken) {
+export function resourceProcessLiveness(owner, dependencies = {}) {
+    if (owner.host !== hostname())
+        return { generation: "unknown", liveness: "unknown" };
     try {
-        process.kill(pid, 0);
+        (dependencies.probePid ?? ((pid) => process.kill(pid, 0)))(owner.pid);
     }
     catch (error) {
-        if (error.code !== "EPERM")
-            return false;
+        return {
+            generation: "unknown",
+            liveness: error.code === "ESRCH" ? "stopped" : "unknown",
+        };
     }
-    return checkPidToken(pid, startToken) !== "mismatch";
+    const generation = verifyProcessGeneration(owner.pid, owner.start_token, dependencies.readToken);
+    return {
+        generation,
+        liveness: generation === "same" ? "running" : generation === "different" ? "stopped" : "unknown",
+    };
 }