harnery 0.43.0 → 0.45.0

package/dist/core/workflow/workspaces/ownership.js

@@ -0,0 +1,194 @@
+import { lstatSync, readdirSync, readFileSync, realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
+import { readJsonRecord, stableDigest } from "../durable-record.js";
+import { acquireNoClobberLease } from "./leases.js";
+import { containsPath } from "./paths.js";
+import { isWorkspaceAllocationRequest } from "./validate.js";
+const STALE_MS = 5 * 60 * 1_000;
+const RESERVATION_SCOPE = "workspace-reclaim";
+function leaseRoot(coordRoot, providerId) {
+    return join(resolve(coordRoot), ".harnery", "workspaces", providerId, ".leases");
+}
+/** Serialize only publication and reservation registration, never Git work. */
+function withPublicationGate(coordRoot, providerId, operation) {
+    const authority = stableDigest({ provider_id: providerId, scope: "workspace-publication" });
+    const gate = acquireNoClobberLease({
+        path: join(leaseRoot(coordRoot, providerId), "publication.lock"),
+        scope: "workspace-publication",
+        authoritySha256: authority,
+        staleAfterMs: STALE_MS,
+        validateStaleOwner: (owner) => owner.authority_sha256 === authority,
+    });
+    try {
+        return operation();
+    }
+    finally {
+        gate.release();
+    }
+}
+function reservationPath(coordRoot, claim) {
+    return join(leaseRoot(coordRoot, claim.provider_id), `reclaim-${claim.binding_id}.lock`);
+}
+function acquireReservation(coordRoot, claim) {
+    const authority = stableDigest(claim);
+    return acquireNoClobberLease({
+        path: reservationPath(coordRoot, claim),
+        scope: RESERVATION_SCOPE,
+        authoritySha256: authority,
+        staleAfterMs: STALE_MS,
+        metadata: { binding_id: claim.binding_id, request_sha256: claim.request_sha256 },
+        validateStaleOwner: (owner) => owner.authority_sha256 === authority &&
+            owner.metadata?.binding_id === claim.binding_id &&
+            owner.metadata?.request_sha256 === claim.request_sha256,
+    });
+}
+/** The immutable claim is the authority; the lease reserves its destructive path. */
+export function reserveWorkspaceReclaim(coordRoot, claim) {
+    assertClaimAuthority(claim, claim.provider_id, claim.binding_id);
+    const lease = withPublicationGate(coordRoot, claim.provider_id, () => acquireReservation(coordRoot, claim));
+    return {
+        assertCurrent() {
+            const path = reservationPath(coordRoot, claim);
+            const current = join(path, "current");
+            const pin = join(path, lease.owner.owner_file);
+            const a = lstatSync(current, { bigint: true });
+            const b = lstatSync(pin, { bigint: true });
+            if (!a.isFile() ||
+                !b.isFile() ||
+                a.dev !== b.dev ||
+                a.ino !== b.ino ||
+                readFileSync(current, "utf8") !== readFileSync(pin, "utf8") ||
+                stableDigest(readJsonRecord(current, "reclaim reservation")) !== stableDigest(lease.owner)) {
+                throw new Error("workspace reclaim reservation owner changed");
+            }
+            const persisted = readJsonRecord(join(dirname(dirname(path)), claim.binding_id, "claim.json"), "reserved workspace claim");
+            if (stableDigest(persisted) !== stableDigest(claim)) {
+                throw new Error("workspace reclaim reservation claim changed");
+            }
+        },
+        release: () => lease.release(),
+    };
+}
+export function publishWorkspaceClaim(coordRoot, claim, publish) {
+    assertClaimAuthority(claim, claim.provider_id, claim.binding_id);
+    return withPublicationGate(coordRoot, claim.provider_id, () => {
+        for (const entry of readdirSync(leaseRoot(coordRoot, claim.provider_id), {
+            withFileTypes: true,
+        })) {
+            if (!entry.name.startsWith("reclaim-") || !entry.name.endsWith(".lock"))
+                continue;
+            if (!entry.isDirectory())
+                throw new Error("workspace reclaim reservation is not a directory");
+            const path = join(leaseRoot(coordRoot, claim.provider_id), entry.name);
+            const current = join(path, "current");
+            try {
+                lstatSync(current);
+            }
+            catch (error) {
+                if (error.code === "ENOENT")
+                    continue;
+                throw error;
+            }
+            const id = entry.name.slice("reclaim-".length, -".lock".length);
+            const reserved = readJsonRecord(join(dirname(leaseRoot(coordRoot, claim.provider_id)), id, "claim.json"), "reserved workspace claim");
+            assertClaimAuthority(reserved, claim.provider_id, id);
+            // Unknown reservation authority is never interpreted as an unrelated owner.
+            const owner = readJsonRecord(current, "reclaim reservation");
+            if (owner.schema_version !== 1 ||
+                typeof owner.owner_id !== "string" ||
+                !/^[a-f0-9-]{36}$/.test(owner.owner_id) ||
+                owner.owner_file !== `owner-${owner.owner_id}.json` ||
+                !Number.isSafeInteger(owner.pid) ||
+                owner.pid <= 0 ||
+                typeof owner.host !== "string" ||
+                owner.host.length === 0 ||
+                !Number.isFinite(Date.parse(owner.created_at)) ||
+                !Number.isFinite(Date.parse(owner.expires_at)) ||
+                Date.parse(owner.expires_at) < Date.parse(owner.created_at) ||
+                owner.scope !== RESERVATION_SCOPE ||
+                owner.authority_sha256 !== stableDigest(reserved) ||
+                owner.metadata?.binding_id !== id ||
+                owner.metadata?.request_sha256 !== reserved.request_sha256) {
+                throw new Error("workspace reclaim reservation authority is unproven");
+            }
+            const a = lstatSync(current, { bigint: true });
+            const pin = join(path, owner.owner_file);
+            const b = lstatSync(pin, { bigint: true });
+            if (!a.isFile() ||
+                !b.isFile() ||
+                a.dev !== b.dev ||
+                a.ino !== b.ino ||
+                readFileSync(current, "utf8") !== readFileSync(pin, "utf8"))
+                throw new Error("workspace reclaim reservation owner is unproven");
+            if (!claimOverlapsWorkspace(claim, reserved.workspace_root))
+                continue;
+            // This succeeds only for an expired, provably dead, exact prior owner.
+            // It retires the reservation, never the immutable claim or resource.
+            const recovered = acquireReservation(coordRoot, reserved);
+            recovered.release();
+        }
+        return publish();
+    });
+}
+export function assertClaimAuthority(claim, providerId, id) {
+    if (claim?.schema_version !== 1 ||
+        !/^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/.test(providerId) ||
+        claim.provider_id !== providerId ||
+        claim.provider_version !== "1" ||
+        claim.binding_id !== id ||
+        !/^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/.test(id) ||
+        !isWorkspaceAllocationRequest(claim.request) ||
+        claim.request.provider_id !== providerId ||
+        stableDigest(claim.request) !== claim.request_sha256 ||
+        !/^[a-f0-9]{64}$/.test(claim.recovery_token) ||
+        stableDigest(claim.writable_root) !== stableDigest(claim.request.selected_writable_root)) {
+        throw new Error("retained workspace claim authority is unproven");
+    }
+    for (const path of claimPaths(claim)) {
+        if (typeof path !== "string" || !isAbsolute(path) || resolve(path) !== path) {
+            throw new Error("retained workspace claim path is unproven");
+        }
+    }
+    if (!containsPath(claim.workspace_root, claim.active_root)) {
+        throw new Error("retained workspace active root escapes its claim");
+    }
+}
+function claimPaths(claim) {
+    return [
+        claim.workspace_root,
+        claim.active_root,
+        claim.repository?.source_root?.realpath,
+        claim.repository?.common_dir?.realpath,
+    ];
+}
+/** Include absent descendants without losing aliases in an existing ancestor. */
+function physicalPath(path) {
+    const tail = [];
+    let cursor = path;
+    for (;;) {
+        try {
+            lstatSync(cursor);
+            return resolve(realpathSync(cursor), ...tail);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT" || dirname(cursor) === cursor) {
+                throw error;
+            }
+            // A dangling symlink must fail, rather than be treated as an absent directory.
+            try {
+                if (lstatSync(cursor).isSymbolicLink())
+                    throw new Error("unresolved workspace alias");
+            }
+            catch (missing) {
+                if (missing.code !== "ENOENT")
+                    throw missing;
+            }
+            tail.unshift(basename(cursor));
+            cursor = dirname(cursor);
+        }
+    }
+}
+export function claimOverlapsWorkspace(claim, workspaceRoot) {
+    const targets = [workspaceRoot, physicalPath(workspaceRoot)];
+    return claimPaths(claim).some((path, index) => [path, physicalPath(path)].some((candidate) => targets.some((target) => containsPath(target, candidate) || (index < 2 && containsPath(candidate, target)))));
+}

package/dist/core/workflow/workspaces/reclaim.d.ts

@@ -14,7 +14,45 @@
  * always has. So reclaim adds no second removal path that could diverge from the
  * audited one, and a force-delete of live work exists nowhere in the codebase.
  */
+import type { WorkflowRecoveryAuthorization } from "../recovery-audit.js";
+import type { WorkflowLiveness } from "./recovery.js";
+import type { WorkspaceCleanupAttempt, WorkspaceCleanupReceipt } from "./types.js";
 export type ReclaimMode = "salvage" | "discard";
+export type WorkflowReclaimRefusalCode = "workflow_reclaim_run_live" | "workflow_reclaim_liveness_unknown" | "workflow_reclaim_recovery_mismatch" | "workflow_reclaim_ownership_unproven" | "workflow_reclaim_lease_held";
+export declare class WorkflowReclaimError extends Error {
+    readonly code: WorkflowReclaimRefusalCode;
+    constructor(code: WorkflowReclaimRefusalCode, message: string);
+}
+export interface WorkspaceReclaimOptions {
+    mode: ReclaimMode;
+    yes?: boolean;
+    unknownLiveness?: WorkflowRecoveryAuthorization & {
+        evidenceSha256: string;
+    };
+}
+export interface ReclaimLeaseHolder {
+    scope: "binding" | "repository" | "resume";
+    owner_id?: string;
+    pid?: number;
+    host?: string;
+    detail?: string;
+}
+export interface WorkspaceReclaimPreview {
+    action: "preview";
+    run_id: string;
+    mode: ReclaimMode;
+    liveness: WorkflowLiveness;
+    evidence_sha256: string;
+    ownership: "ok" | "unproven";
+    ownership_detail?: string;
+    dirty_paths: string[] | null;
+    lease_holder: ReclaimLeaseHolder[];
+}
+export type WorkspaceReclaimResult = WorkspaceReclaimPreview | (Omit<WorkspaceReclaimPreview, "action"> & {
+    action: "reclaimed";
+    preparation: ReclaimPreparation;
+    cleanup: WorkspaceCleanupAttempt | WorkspaceCleanupReceipt;
+});
 export type ReclaimPreparation = {
     action: "salvaged";
     branch: string;
@@ -34,6 +72,8 @@ export interface PrepareReclaimInput {
     worktreePath: string;
     mode: ReclaimMode;
     runId: string;
+    /** Revalidate the held reservation and peer authority immediately before effects. */
+    beforeEffect?: () => void;
 }
 /**
  * Bring the worktree to a clean state so ordinary cleanup can release it.

package/dist/core/workflow/workspaces/reclaim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAkD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}
+{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,0BAA0B,GAClC,2BAA2B,GAC3B,mCAAmC,GACnC,oCAAoC,GACpC,qCAAqC,GACrC,6BAA6B,CAAC;AAElC,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EACzC,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,6BAA6B,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,UAAU,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,GAAG;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEP,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAwD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/core/workflow/workspaces/reclaim.js

@@ -16,6 +16,14 @@
  */
 import { existsSync } from "node:fs";
 import { git, gitMaybe } from "./git.js";
+export class WorkflowReclaimError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "WorkflowReclaimError";
+    }
+}
 /**
  * Bring the worktree to a clean state so ordinary cleanup can release it.
  *
@@ -41,7 +49,9 @@ export function prepareReclaim(input) {
     if (input.mode === "discard") {
         // Ordered: reset drops tracked modifications, clean removes what reset
         // cannot see. Running clean first would leave staged deletions behind.
+        input.beforeEffect?.();
         git(input.worktreePath, ["reset", "--hard"]);
+        input.beforeEffect?.();
         git(input.worktreePath, ["clean", "-fd"]);
         return { action: "discarded", detail: "uncommitted changes were discarded on request" };
     }
@@ -59,11 +69,15 @@ export function prepareReclaim(input) {
     // ref ends untouched, and the work lives on a ref cleanup has no reason to
     // touch.
     const before = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
+    input.beforeEffect?.();
     git(input.worktreePath, ["add", "-A"]);
+    input.beforeEffect?.();
     git(input.worktreePath, ["commit", "--no-verify", "-m", salvageMessage(input.runId)]);
     const commit = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
     const branch = salvageBranch(input.runId);
+    input.beforeEffect?.();
     git(input.worktreePath, ["branch", "--force", branch, commit]);
+    input.beforeEffect?.();
     git(input.worktreePath, ["reset", "--hard", before]);
     return {
         action: "salvaged",

package/dist/core/workflow/workspaces/recovery.d.ts

@@ -1,3 +1,5 @@
 export type WorkflowLiveness = "active" | "inactive" | "unknown";
+/** Corruption must not hide a readable active marker from an audited override. */
+export declare function hasActiveWorkflowEvidence(coordRoot: string, runId: string): boolean;
 export declare function readWorkflowLiveness(coordRoot: string, runId: string): WorkflowLiveness;
 //# sourceMappingURL=recovery.d.ts.map

package/dist/core/workflow/workspaces/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAiDvF"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAoBnF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA6DvF"}

package/dist/core/workflow/workspaces/recovery.js

@@ -1,18 +1,32 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { readWorkflowProof } from "../proof.js";
-export function readWorkflowLiveness(coordRoot, runId) {
-    const root = resolve(coordRoot);
-    const proofPath = join(root, ".harnery", "workflows", runId, "proof.json");
-    if (existsSync(proofPath)) {
+/** Corruption must not hide a readable active marker from an audited override. */
+export function hasActiveWorkflowEvidence(coordRoot, runId) {
+    const path = join(resolve(coordRoot), ".harnery", "workflows", runId, "transcript.jsonl");
+    if (!existsSync(path))
+        return false;
+    let active = false;
+    for (const line of readFileSync(path, "utf8").split("\n")) {
         try {
-            const proof = readWorkflowProof(root, runId);
-            return ["succeeded", "failed"].includes(proof.run.status) ? "inactive" : "unknown";
+            const event = JSON.parse(line);
+            if (event?.run_id !== runId)
+                continue;
+            if (["run.start", "run.resume", "agent.start"].includes(event.event))
+                active = true;
+            if (event.event === "run.parked" ||
+                (event.event === "run.end" && typeof event.ok === "boolean") ||
+                (event.event === "workspace.reattach.failed" && ["blocked", "lost"].includes(event.status)))
+                active = false;
         }
         catch {
-            return "unknown";
+            /* Unreadable evidence cannot establish inactivity. */
         }
     }
+    return active;
+}
+export function readWorkflowLiveness(coordRoot, runId) {
+    const root = resolve(coordRoot);
     const transcriptPath = join(root, ".harnery", "workflows", runId, "transcript.jsonl");
     if (!existsSync(transcriptPath))
         return "unknown";
@@ -26,12 +40,16 @@ export function readWorkflowLiveness(coordRoot, runId) {
     catch {
         return "unknown";
     }
-    if (events.some((item) => item.run_id !== runId || typeof item.event !== "string")) {
+    if (events.some((item) => !item ||
+        typeof item !== "object" ||
+        Array.isArray(item) ||
+        item.run_id !== runId ||
+        typeof item.event !== "string")) {
         return "unknown";
     }
     let liveness;
     for (const item of events) {
-        if (item.event === "run.start" || item.event === "run.resume")
+        if (item.event === "run.start" || item.event === "run.resume" || item.event === "agent.start")
             liveness = "active";
         if (item.event === "run.parked")
             liveness = "inactive";
@@ -46,5 +64,19 @@ export function readWorkflowLiveness(coordRoot, runId) {
             liveness = "inactive";
         }
     }
-    return liveness ?? "unknown";
+    // A terminal proof can predate a resumed run. Only the current transcript
+    // can establish that no later activity invalidated that terminal observation.
+    if (liveness !== "inactive")
+        return liveness ?? "unknown";
+    const proofPath = join(root, ".harnery", "workflows", runId, "proof.json");
+    if (existsSync(proofPath)) {
+        try {
+            const proof = readWorkflowProof(root, runId);
+            return ["succeeded", "failed"].includes(proof.run.status) ? "inactive" : "unknown";
+        }
+        catch {
+            return "unknown";
+        }
+    }
+    return "inactive";
 }

package/dist/core/workflow/workspaces/state.d.ts

@@ -44,6 +44,7 @@ export declare function workspaceLockPath(coordRoot: string, providerId: string,
 export declare function writeWorkspaceRequest(coordRoot: string, request: WorkspaceAllocationRequest): string;
 export declare function readWorkspaceRequest(coordRoot: string, runId: string): WorkspaceAllocationRequest | undefined;
 export declare function writeWorkspaceClaim(coordRoot: string, claim: WorkspaceClaim): boolean;
+export declare function readWorkspaceClaims(coordRoot: string, providerId: string): WorkspaceClaim[];
 export declare function readWorkspaceClaim(coordRoot: string, providerId: string, bindingId: string): WorkspaceClaim | undefined;
 export declare function writeWorkspaceBinding(coordRoot: string, binding: WorkspaceBinding): boolean;
 export declare function readWorkspaceBinding(coordRoot: string, providerId: string, bindingId: string): WorkspaceBinding | undefined;

package/dist/core/workflow/workspaces/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/state.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACjD,UAAU,EAAE;QACV,WAAW,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjD,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,CAAC,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAIR;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,0BAA0B,GAAG,SAAS,CAKxC;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAYrF;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,SAAS,CAG5B;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAK3F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAG9B;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,sBAAsB,CAwCxB;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,sBAAsB,EAAE,CA0C1B;AAOD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,4BAA4B,GAC5B,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CA4BzB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CAiBzB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,uBAAuB,EAAE,CAK3B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAK/F;AA8DD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,kBAAkB,GACxB,MAAM,CAUR;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,CAAC,GAAG,SAAS,CAGf;AAMD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/state.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACjD,UAAU,EAAE;QACV,WAAW,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjD,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,CAAC,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAIR;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,0BAA0B,GAAG,SAAS,CAKxC;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAErF;AAgBD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,EAAE,CAY3F;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,SAAS,CAG5B;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAK3F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAG9B;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,sBAAsB,CAwCxB;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,sBAAsB,EAAE,CA0C1B;AAOD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,4BAA4B,GAC5B,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CA4BzB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CAiBzB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,uBAAuB,EAAE,CAK3B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAK/F;AA8DD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,kBAAkB,GACxB,MAAM,CAUR;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,CAAC,GAAG,SAAS,CAGf;AAMD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,sBAAsB,CAAC"}

package/dist/core/workflow/workspaces/state.js

@@ -1,7 +1,8 @@
-import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, statSync, writeFileSync, } from "node:fs";
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readdirSync, readFileSync, statSync, writeFileSync, } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { stateDirMode, stateFileMode } from "../../storage/modes.js";
 import { canonicalJson, fsyncParentDirectory, readJsonRecord, stableDigest, writeImmutableJson, } from "../durable-record.js";
+import { assertClaimAuthority, publishWorkspaceClaim } from "./ownership.js";
 export { appendWorkflowTranscriptEvent } from "../transcript.js";
 const JSON_LIMIT = 512 * 1024;
 const WORKSPACE_EVENT_BYTES = 32 * 1024;
@@ -39,6 +40,9 @@ export function readWorkspaceRequest(coordRoot, runId) {
         : undefined;
 }
 export function writeWorkspaceClaim(coordRoot, claim) {
+    return publishWorkspaceClaim(coordRoot, claim, () => writeClaim(coordRoot, claim));
+}
+function writeClaim(coordRoot, claim) {
     const path = workspaceClaimPath(coordRoot, claim.provider_id, claim.binding_id);
     try {
         return writeImmutableJson(path, claim);
@@ -52,6 +56,22 @@ export function writeWorkspaceClaim(coordRoot, claim) {
         throw error;
     }
 }
+export function readWorkspaceClaims(coordRoot, providerId) {
+    const root = join(resolve(coordRoot), ".harnery", "workspaces", providerId);
+    if (!existsSync(root))
+        return [];
+    return readdirSync(root, { withFileTypes: true })
+        .filter((entry) => entry.name !== ".leases")
+        .map((entry) => {
+        if (!entry.isDirectory())
+            throw new Error("retained workspace inventory is unproven");
+        const claim = readWorkspaceClaim(coordRoot, providerId, entry.name);
+        if (!claim)
+            throw new Error("retained workspace ownership claim is missing");
+        assertClaimAuthority(claim, providerId, entry.name);
+        return claim;
+    });
+}
 export function readWorkspaceClaim(coordRoot, providerId, bindingId) {
     const path = workspaceClaimPath(coordRoot, providerId, bindingId);
     return existsSync(path) ? readJsonRecord(path, "workspace claim") : undefined;

package/dist/lib/browser/windows-chrome.d.ts

@@ -28,31 +28,119 @@ interface CdpCookie {
 }
 /** Keep the sign-in site's cookies and normalize them to the store's shape. */
 export declare function cookiesForDomain(cdpCookies: CdpCookie[], domain: string): Cookie[];
+/**
+ * Regular expression, valid in both JavaScript and .NET, that matches a Chrome
+ * command line running on `profileWindows`. It matches the `--user-data-dir`
+ * argument exactly, with or without quotes around the path, so `...\profile`
+ * never matches `...\profile-2`. Quotes are written as `\x22` so the pattern
+ * survives being passed to PowerShell as an argument. Case-insensitive use is
+ * intended, as Windows paths are.
+ */
+export declare function profileCommandLinePattern(profileWindows: string): string;
+/**
+ * PowerShell that sets the profile's startup preference to "continue where
+ * you left off". Chrome deletes browser-session cookies (cookies with no
+ * expiry) when it exits normally unless that preference is set, and many
+ * sign-ins keep the signed-in state only in such cookies. With it set, the
+ * person can simply close the window and the sign-in survives for the
+ * harvest, and the next sign-in window reopens where they left off.
+ *
+ * The preference is protected against edits to the profile's files, so the
+ * script sets it the way the settings page does: it opens the profile
+ * headless, loads the settings page, and calls the settings API there. When
+ * the profile's preference files already show the value, Chrome is not
+ * started. The script prints `{"changed":bool,"value":n}`.
+ */
+export declare function keepSessionScript(): string;
 /**
  * PowerShell that does the whole read on the Windows side: start Chrome
- * headless on the profile, wait for the DevToolsActivePort file it writes,
- * read every cookie with `Storage.getCookies`, write the raw response to
- * stdout, and close the browser. WSL never touches the profile folder, which
- * it may not be able to list. Every wait carries a deadline.
+ * headless on the profile with its last session restored, read every cookie
+ * with `Storage.getCookies`, list the open pages with `Target.getTargets`,
+ * write both raw responses to stdout as one JSON object, and close the
+ * browser. WSL never touches the profile folder, which it may not be able to
+ * list. Every wait carries a deadline.
+ *
+ * Restoring the session keeps browser-session cookies that a forced stop left
+ * on disk, and it reopens the tabs the person had open, so the harvest can
+ * report the last page they reached on the sign-in site. That page's URL may
+ * carry a per-session token that cookies alone do not replace. The page list
+ * is polled for up to `$PageSeconds` until a page on `$Domain` appears.
  */
 export declare function harvestScript(): string;
+/** Shape `Target.getTargets` returns; extra fields are ignored. */
+interface CdpTargetInfo {
+    type: string;
+    url: string;
+}
 /**
- * Reopen the Windows profile headless, read its cookies for `domain`, and
- * close it. Returns the cookies in the store's shape.
+ * URLs of the open pages on the sign-in site, in the order Chrome lists them,
+ * without duplicates.
+ */
+export declare function sitePages(targets: CdpTargetInfo[], domain: string): string[];
+export interface WindowsChromeHarvest {
+    /** The sign-in site's cookies, browser-session cookies included. */
+    cookies: Cookie[];
+    /** Open pages on the sign-in site; the first is the one to resume from. */
+    pages: string[];
+}
+/** Parse the harvest script's stdout. */
+export declare function parseHarvestOutput(stdout: string, domain: string): WindowsChromeHarvest;
+/**
+ * Reopen the Windows profile headless with its last session restored, read
+ * its cookies for `domain` and its open pages on that site, and close it.
+ * The profile must already be closed; see `stopWindowsChromeProfile`.
  */
 export declare function harvestWindowsChromeCookies(input: {
     chromeWindows: string;
     profileWindows: string;
     domain: string;
     startupTimeoutSeconds?: number;
-}): Cookie[];
+    pageTimeoutSeconds?: number;
+}): WindowsChromeHarvest;
+export interface WindowsChromeKeepSession {
+    /** True when the preference was already set or is now set. */
+    kept: boolean;
+    /** True when this call changed the preference. */
+    changed: boolean;
+}
+/**
+ * Set the profile to keep browser-session cookies across a normal exit; see
+ * `keepSessionScript`. Throws when Chrome is already open on the profile,
+ * since a second sign-in window would hand off to it. Any other failure
+ * returns `kept: false` so the caller can warn and continue.
+ */
+export declare function keepWindowsChromeSession(input: {
+    chromeWindows: string;
+    profileWindows: string;
+    startupTimeoutSeconds?: number;
+}): WindowsChromeKeepSession;
+/**
+ * PowerShell that closes every Chrome whose command line matches `$Pattern`. It asks each window to
+ * close, repeating so a profile with several windows closes them all, which
+ * lets Chrome write its cookies and session to disk. Whatever is still
+ * running after `$CloseSeconds` is stopped by force. The script prints
+ * `{found, forced, remaining}` as JSON; `remaining` lists process ids that
+ * survived even the forced stop.
+ */
+export declare function stopScript(): string;
+export interface WindowsChromeStop {
+    /** Chrome processes running on the profile when the stop began. */
+    found: number;
+    /** Processes that ignored the close request and were stopped by force. */
+    forced: number;
+}
+/** Parse the stop script's stdout; throws when a process survived. */
+export declare function parseStopOutput(stdout: string, profileWindows: string): WindowsChromeStop;
 /**
- * Close any Chrome still running on `profileWindows`, for when the person ends
- * the sign-in from the terminal while the window is open. The profile must be
- * closed before its cookies can be read. Closing the window first lets Chrome
- * write recent cookies to disk; a forced stop is the fallback after 15 s.
+ * Close every Chrome still running on `profileWindows`, for when the person
+ * ends the sign-in from the terminal while the window is open. The profile
+ * must be closed before its cookies can be read. Closing the windows lets
+ * Chrome write recent cookies to disk; a forced stop is the fallback after
+ * `closeSeconds`, and it can lose cookies Chrome had not yet written. Throws
+ * when the stop cannot be confirmed, so the harvest never runs against a
+ * profile that is still open.
  */
-export declare function stopWindowsChromeProfile(profileWindows: string): void;
+export declare function stopWindowsChromeProfile(profileWindows: string, closeSeconds?: number): WindowsChromeStop;
 /** Windows form of a `/mnt/<drive>/...` path. */
 export declare function wslPathToWindows(linuxPath: string): string;
 export {};

package/dist/lib/browser/windows-chrome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"windows-chrome.d.ts","sourceRoot":"","sources":["../../../src/lib/browser/windows-chrome.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA4BnD,sEAAsE;AACtE,wBAAgB,iBAAiB,CAC/B,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,EAC9C,iBAAiB,CAAC,EAAE,MAAM,GACzB,MAAM,GAAG,SAAS,CAKpB;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAOxD;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG5E;AAED,oEAAoE;AACpE,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAelF;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAyBtC;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,MAAM,EAAE,CA2CX;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAkBrE;AAED,iDAAiD;AACjD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI1D"}
+{"version":3,"file":"windows-chrome.d.ts","sourceRoot":"","sources":["../../../src/lib/browser/windows-chrome.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA6BnD,sEAAsE;AACtE,wBAAgB,iBAAiB,CAC/B,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,EAC9C,iBAAiB,CAAC,EAAE,MAAM,GACzB,MAAM,GAAG,SAAS,CAKpB;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAOxD;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG5E;AAED,oEAAoE;AACpE,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAelF;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAGxE;AAmDD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAkB1C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,IAAI,MAAM,CActC;AAED,mEAAmE;AACnE,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAa5E;AAED,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,yCAAyC;AACzC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAcvF;AAiCD;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,oBAAoB,CA0BvB;AAED,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,IAAI,EAAE,OAAO,CAAC;IACd,kDAAkD;IAClD,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,wBAAwB,CA8B3B;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAcnC;AAED,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,iBAAiB,CAkBzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,MAAM,EACtB,YAAY,SAAK,GAChB,iBAAiB,CAanB;AAED,iDAAiD;AACjD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI1D"}