harnery 0.44.0 → 0.45.0

package/dist/core/workflow/run-state.d.ts

@@ -1,5 +1,6 @@
 import type { RepoSnapshot } from "../context/index.js";
 import { type NormalizedPolicy, type PolicyIsolation, type PolicyNetworkAccess } from "../policy/index.js";
+import { type WorkflowRecoveryAuthorization } from "./recovery-audit.js";
 import type { WorkflowAttemptContext, WorkflowDiagnosticAdmissionConfig, WorkflowSpecialistProfile, WorkflowWorkContext } from "./types.js";
 import type { WorkspaceBinding, WorkspaceCompatibilityExecutionEvidence } from "./workspaces/index.js";
 export declare const WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION: 2;
@@ -48,7 +49,23 @@ export declare function assertWorkflowRunResumable(coordRoot: string, runId: str
 export declare function assertWorkflowScriptUnchanged(manifest: WorkflowRunManifest): void;
 export declare function workflowRunManifestPath(coordRoot: string, runId: string): string;
 /** Acquire an exclusive lease shared by resume and reclaim. Existing locks
- * always refuse: a stale observation cannot authorize unlinking a new owner.
- * Crash recovery requires an audited ownership check outside this operation. */
+ * always refuse; explicit audited recovery is a separate operation. */
 export declare function acquireWorkflowResumeLease(coordRoot: string, runId: string): () => void;
+export interface WorkflowResumeRecoveryOptions extends Partial<WorkflowRecoveryAuthorization> {
+    yes?: boolean;
+    lockSha256?: string;
+}
+export interface WorkflowResumeRecoveryResult {
+    action: "preview" | "unlocked";
+    run_id: string;
+    lock_sha256: string | null;
+    owner_state: "dead" | "live" | "unknown" | "absent";
+    owner: {
+        pid: number;
+        host: string;
+        created_at: string;
+    } | null;
+    recovery_id?: string;
+}
+export declare function recoverWorkflowResumeLease(coordRoot: string, runId: string, options: WorkflowResumeRecoveryOptions): WorkflowResumeRecoveryResult;
 //# sourceMappingURL=run-state.d.ts.map

package/dist/core/workflow/run-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/run-state.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EACV,sBAAsB,EACtB,iCAAiC,EACjC,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAEV,gBAAgB,EAChB,uCAAuC,EACxC,MAAM,uBAAuB,CAAC;AAO/B,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAI/D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iBAAiB,EAAE,YAAY,CAAC;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,iCAAiC,CAAC;QACzD,iBAAiB,EAAE,OAAO,CAAC;QAC3B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,eAAe,CAAC;QAC3B,cAAc,EAAE,mBAAmB,CAAC;QACpC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACxD,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;QACrC,kBAAkB,CAAC,EAAE,uCAAuC,CAAC;KAC9D,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAgBrF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAgD7F;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA4BvD;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CASjF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED;;gFAEgF;AAChF,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CA2CvF"}
+{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/core/workflow/run-state.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EAEzB,MAAM,oBAAoB,CAAC;AAU5B,OAAO,EAAyB,KAAK,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAEhG,OAAO,KAAK,EACV,sBAAsB,EACtB,iCAAiC,EACjC,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,KAAK,EAEV,gBAAgB,EAChB,uCAAuC,EACxC,MAAM,uBAAuB,CAAC;AAQ/B,eAAO,MAAM,oCAAoC,EAAG,CAAU,CAAC;AAI/D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,oCAAoC,CAAC;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iBAAiB,EAAE,YAAY,CAAC;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,iCAAiC,CAAC;QACzD,iBAAiB,EAAE,OAAO,CAAC;QAC3B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,eAAe,CAAC;QAC3B,cAAc,EAAE,mBAAmB,CAAC;QACpC,MAAM,CAAC,EAAE,gBAAgB,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACxD,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;QACrC,kBAAkB,CAAC,EAAE,uCAAuC,CAAC;KAC9D,CAAC;CACH;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;CAC/B;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,MAAM,CAgBrF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAgD7F;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA4BvD;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CASjF;AAED,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED;uEACuE;AACvE,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,IAAI,CA6DvF;AAED,MAAM,WAAW,6BAA8B,SAAQ,OAAO,CAAC,6BAA6B,CAAC;IAC3F,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACpD,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,6BAA6B,GACrC,4BAA4B,CAkE9B"}

package/dist/core/workflow/run-state.js

@@ -1,15 +1,17 @@
 import { createHash, randomUUID } from "node:crypto";
-import { chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { hostname } from "node:os";
 import { dirname, isAbsolute, join, resolve } from "node:path";
 import { normalizePolicy, policyDigest, } from "../policy/index.js";
 import { stateFileMode } from "../storage/modes.js";
 import { assertWorkflowRunId, readWorkflowApproval } from "./approvals.js";
 import { isCanonicalWorkflowAttemptContext } from "./attempt-context.js";
-import { readJsonRecord, writeImmutableJson } from "./durable-record.js";
+import { fsyncParentDirectory, readJsonRecord, stableDigest, writeImmutableJson, } from "./durable-record.js";
+import { beginWorkflowRecovery } from "./recovery-audit.js";
 import { normalizeWorkflowSpecialists } from "./specialists.js";
 import { WORKFLOW_DIAGNOSTIC_ADMISSION_SCHEMA_VERSION } from "./types.js";
 import { isCanonicalWorkflowWorkContext } from "./work-context.js";
+import { acquireNoClobberLease } from "./workspaces/leases.js";
 import { assertWorkspaceManifestAuthority, isWorkspaceBinding, isWorkspaceCompatibilityExecutionEvidence, } from "./workspaces/validate.js";
 export const WORKFLOW_RUN_MANIFEST_SCHEMA_VERSION = 2;
 const MANIFEST_LIMIT_BYTES = 256 * 1024;
@@ -128,8 +130,7 @@ export function workflowRunManifestPath(coordRoot, runId) {
     return join(coordRoot, ".harnery", "workflows", runId, "run.json");
 }
 /** Acquire an exclusive lease shared by resume and reclaim. Existing locks
- * always refuse: a stale observation cannot authorize unlinking a new owner.
- * Crash recovery requires an audited ownership check outside this operation. */
+ * always refuse; explicit audited recovery is a separate operation. */
 export function acquireWorkflowResumeLease(coordRoot, runId) {
     assertWorkflowRunId(runId);
     const path = join(coordRoot, ".harnery", "workflows", runId, "resume.lock");
@@ -146,12 +147,15 @@ export function acquireWorkflowResumeLease(coordRoot, runId) {
             const fd = openSync(path, "wx", stateFileMode());
             try {
                 writeFileSync(fd, ownerBytes, "utf8");
+                fsyncSync(fd);
             }
             finally {
                 closeSync(fd);
             }
             chmodSync(path, stateFileMode());
-            return true;
+            fsyncParentDirectory(path);
+            const identity = lstatSync(path);
+            return { device: identity.dev, inode: identity.ino };
         }
         catch (error) {
             if (error.code !== "EEXIST")
@@ -159,7 +163,8 @@ export function acquireWorkflowResumeLease(coordRoot, runId) {
             return false;
         }
     };
-    if (!acquire()) {
+    const acquired = withResumeLeaseMutation(coordRoot, runId, acquire);
+    if (!acquired) {
         const existing = readResumeLease(path);
         const holder = existing
             ? ` by pid ${existing.pid} on ${existing.host}; its liveness has not been verified`
@@ -168,14 +173,113 @@ export function acquireWorkflowResumeLease(coordRoot, runId) {
     }
     return () => {
         try {
-            if (readFileSync(path, "utf8") === ownerBytes)
+            // Only this live process can release this nonce. Acquisition never
+            // replaces a present lock, and unlock requires ESRCH for its owner, so
+            // neither supported writer can replace this lock during synchronous
+            // release. Taking their mutation gate would strand a live owner's lock
+            // on ordinary contention. Pin both identity and bytes for stale closures.
+            const identity = lstatSync(path);
+            if (identity.isFile() &&
+                identity.dev === acquired.device &&
+                identity.ino === acquired.inode &&
+                readFileSync(path, "utf8") === ownerBytes) {
                 unlinkSync(path);
+                fsyncParentDirectory(path);
+            }
         }
         catch {
             // Leave an unreadable or replaced lock untouched.
         }
     };
 }
+export function recoverWorkflowResumeLease(coordRoot, runId, options) {
+    assertWorkflowRunId(runId);
+    const path = join(coordRoot, ".harnery", "workflows", runId, "resume.lock");
+    const inspect = () => {
+        let lockSha256;
+        try {
+            const stat = lstatSync(path);
+            if (!stat.isFile() || stat.size > 8 * 1024)
+                throw new Error("resume lock is not a bounded regular file");
+            lockSha256 = stableDigest({
+                bytes: readFileSync(path, "utf8"),
+                device: stat.dev,
+                inode: stat.ino,
+            });
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            return {
+                action: "preview",
+                run_id: runId,
+                lock_sha256: null,
+                owner_state: "absent",
+                owner: null,
+            };
+        }
+        const owner = readResumeLease(path);
+        let ownerState = "unknown";
+        if (owner?.host === hostname()) {
+            try {
+                process.kill(owner.pid, 0);
+                ownerState = "live";
+            }
+            catch (error) {
+                if (error.code === "ESRCH")
+                    ownerState = "dead";
+            }
+        }
+        return {
+            action: "preview",
+            run_id: runId,
+            lock_sha256: lockSha256,
+            owner_state: ownerState,
+            owner,
+        };
+    };
+    if (!options.yes)
+        return inspect();
+    return withResumeLeaseMutation(coordRoot, runId, () => {
+        const observed = inspect();
+        if (observed.owner_state !== "dead")
+            throw new Error(`workflow resume unlock refused: owner is ${observed.owner_state}`);
+        if (!options.lockSha256 || options.lockSha256 !== observed.lock_sha256)
+            throw new Error("workflow resume unlock requires the exact current preview digest");
+        const audit = beginWorkflowRecovery(coordRoot, {
+            run_id: runId,
+            action: "unlock_resume",
+            target_sha256: options.lockSha256,
+            target: { lock: "resume.lock", owner: observed.owner },
+            actor: options.actor,
+            reason: options.reason,
+        });
+        const current = inspect();
+        if (current.lock_sha256 !== observed.lock_sha256 || current.owner_state !== "dead")
+            throw new Error("workflow resume lock authority changed before unlock");
+        audit.assertCurrent();
+        unlinkSync(path);
+        fsyncParentDirectory(path);
+        audit.complete();
+        return { ...observed, action: "unlocked", recovery_id: audit.intent.operation_id };
+    });
+}
+function withResumeLeaseMutation(coordRoot, runId, action) {
+    const authority = stableDigest({ run_id: runId, lock: "resume.lock" });
+    const lease = acquireNoClobberLease({
+        path: join(coordRoot, ".harnery", "workflows", runId, "resume-mutation.lease"),
+        scope: "workflow-resume-mutation",
+        authoritySha256: authority,
+        staleAfterMs: 300_000,
+        validateStaleOwner: (owner) => owner.authority_sha256 === authority,
+    });
+    try {
+        return action();
+    }
+    finally {
+        lease.release();
+    }
+}
 function readResumeLease(path) {
     try {
         const value = JSON.parse(readFileSync(path, "utf8"));
@@ -183,7 +287,8 @@ function readResumeLease(path) {
             Number.isSafeInteger(value.pid) &&
             value.pid > 0 &&
             typeof value.host === "string" &&
-            typeof value.created_at === "string"
+            value.host.length > 0 &&
+            validTimestamp(value.created_at)
             ? { pid: value.pid, host: value.host, created_at: value.created_at }
             : null;
     }

package/dist/core/workflow/workspaces/local-git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-git.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/local-git.ts"],"names":[],"mappings":"AA6CA,OAAO,EAML,KAAK,uBAAuB,EAE5B,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAiBtB,OAAO,KAAK,EAYV,gBAAgB,EAIhB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAUpB,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,OAAO,CACL,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,+BAA+B,GACvC,wBAAwB,CAkB1B;AAED,wBAAsB,KAAK,CACzB,KAAK,EAAE,mBAAmB,EAC1B,wBAAwB,GAAE,MAAM,OAAwC,GACvE,OAAO,CAAC,oBAAoB,CAAC,CA4E/B"}
+{"version":3,"file":"local-git.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/local-git.ts"],"names":[],"mappings":"AA8CA,OAAO,EAML,KAAK,uBAAuB,EAE5B,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAiBtB,OAAO,KAAK,EAYV,gBAAgB,EAIhB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EAElB,MAAM,YAAY,CAAC;AAUpB,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,OAAO,CACL,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,+BAA+B,GACvC,wBAAwB,CAkB1B;AAED,wBAAsB,KAAK,CACzB,KAAK,EAAE,mBAAmB,EAC1B,wBAAwB,GAAE,MAAM,OAAwC,GACvE,OAAO,CAAC,oBAAoB,CAAC,CA4E/B"}

package/dist/core/workflow/workspaces/local-git.js

@@ -2,6 +2,7 @@ import { randomBytes } from "node:crypto";
 import { existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, writeFileSync, } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { stateDirMode, stateFileMode } from "../../storage/modes.js";
+import { beginWorkflowRecovery, validateWorkflowRecoveryAuthorization } from "../recovery-audit.js";
 import { acquireWorkflowResumeLease } from "../run-state.js";
 import { WorkspaceAttestationError } from "./attestation-error.js";
 import { cleanupWorkspace } from "./cleanup.js";
@@ -10,7 +11,7 @@ import { acquireNoClobberLease } from "./leases.js";
 import { claimOverlapsWorkspace, reserveWorkspaceReclaim, } from "./ownership.js";
 import { assertContainedExisting, assertPathIdentity, candidateUnderRoot, containsPath, createContainedDirectories, descriptorBackedPathsSupported, descriptorPath, filesystemIdentity, openContainedDirectory, sameFilesystemIdentity, validateConfiguredRoot, } from "./paths.js";
 import { prepareReclaim, WorkflowReclaimError, } from "./reclaim.js";
-import { readWorkflowLiveness } from "./recovery.js";
+import { hasActiveWorkflowEvidence, readWorkflowLiveness } from "./recovery.js";
 import { appendWorkspaceEvent, fileSha256, readWorkflowSupplement, readWorkspaceBinding, readWorkspaceClaim, readWorkspaceClaims, readWorkspaceEvents, stableDigest, workspaceClaimPath, workspaceLockPath, writeWorkspaceBinding, writeWorkspaceClaim, } from "./state.js";
 import { isWorkspaceAttestation } from "./validate.js";
 const PROVIDER_ID = "local-git-worktree";
@@ -597,6 +598,7 @@ function reclaimPreview(coordRoot, binding, mode) {
         run_id: binding.run_id,
         mode,
         liveness: readWorkflowLiveness(coordRoot, binding.run_id),
+        evidence_sha256: reclaimEvidenceDigest(coordRoot, binding),
         ownership: "unproven",
         dirty_paths: null,
         lease_holder: reclaimLeaseHolders(coordRoot, binding),
@@ -617,13 +619,36 @@ function reclaimPreview(coordRoot, binding, mode) {
     }
     return preview;
 }
-function assertReclaimLiveness(coordRoot, binding) {
+function reclaimEvidenceDigest(coordRoot, binding) {
+    const evidence = (name) => {
+        try {
+            return readFileSync(join(coordRoot, ".harnery", "workflows", binding.run_id, name), "utf8");
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+    };
+    return stableDigest({
+        binding,
+        proof: evidence("proof.json"),
+        transcript: evidence("transcript.jsonl"),
+    });
+}
+function assertReclaimLiveness(coordRoot, binding, recovery) {
     const liveness = readWorkflowLiveness(coordRoot, binding.run_id);
+    if (liveness === "active" || (recovery && hasActiveWorkflowEvidence(coordRoot, binding.run_id))) {
+        throw new WorkflowReclaimError("workflow_reclaim_run_live", `run ${binding.run_id} has active evidence; its workspace was left untouched`);
+    }
+    if (recovery && reclaimEvidenceDigest(coordRoot, binding) !== recovery.evidenceSha256) {
+        throw new WorkflowReclaimError("workflow_reclaim_recovery_mismatch", "workflow reclaim requires the exact current preview evidence digest");
+    }
     if (liveness === "inactive")
         return;
-    throw new WorkflowReclaimError(liveness === "active" ? "workflow_reclaim_run_live" : "workflow_reclaim_liveness_unknown", liveness === "active"
-        ? `run ${binding.run_id} is active; its workspace was left untouched`
-        : `run ${binding.run_id} has missing, corrupt, or ambiguous liveness evidence; its workspace was left untouched`);
+    if (liveness === "unknown" && recovery)
+        return;
+    throw new WorkflowReclaimError("workflow_reclaim_liveness_unknown", `run ${binding.run_id} has missing, corrupt, or ambiguous liveness evidence; its workspace was left untouched`);
 }
 function assertReclaimOwnership(coordRoot, binding) {
     try {
@@ -666,10 +691,10 @@ function assertPeerWorkspaceAuthority(coordRoot, claim) {
         throw new WorkflowReclaimError("workflow_reclaim_ownership_unproven", error.message);
     }
 }
-function reclaimAuthorityGuard(coordRoot, binding, claim, reservation) {
+function reclaimAuthorityGuard(coordRoot, binding, claim, reservation, recovery) {
     try {
         reservation.assertCurrent();
-        assertReclaimLiveness(coordRoot, binding);
+        assertReclaimLiveness(coordRoot, binding, recovery);
         assertReclaimOwnership(coordRoot, binding);
         assertPeerWorkspaceAuthority(coordRoot, claim);
     }
@@ -685,9 +710,11 @@ async function reclaim(coordRoot, provider, binding, options) {
     }
     if (!options.yes)
         return reclaimPreview(coordRoot, binding, options.mode);
+    if (options.unknownLiveness)
+        validateWorkflowRecoveryAuthorization(options.unknownLiveness);
     // Liveness comes before terminal-proof cleanup helpers. A live run may not
     // have a proof yet, and a missing proof must never be discovered after reset.
-    assertReclaimLiveness(coordRoot, binding);
+    assertReclaimLiveness(coordRoot, binding, options.unknownLiveness);
     const claim = assertReclaimOwnership(coordRoot, binding);
     let reservation;
     try {
@@ -697,7 +724,7 @@ async function reclaim(coordRoot, provider, binding, options) {
         throw new WorkflowReclaimError("workflow_reclaim_lease_held", error.message);
     }
     try {
-        reclaimAuthorityGuard(coordRoot, binding, claim, reservation);
+        reclaimAuthorityGuard(coordRoot, binding, claim, reservation, options.unknownLiveness);
         let releaseResume;
         try {
             releaseResume = acquireWorkflowResumeLease(coordRoot, binding.run_id);
@@ -722,9 +749,24 @@ async function reclaim(coordRoot, provider, binding, options) {
                     throw new WorkflowReclaimError("workflow_reclaim_lease_held", error.message);
                 }
                 try {
-                    assertReclaimLiveness(coordRoot, binding);
+                    assertReclaimLiveness(coordRoot, binding, options.unknownLiveness);
                     assertReclaimOwnership(coordRoot, binding);
                     const preview = reclaimPreview(coordRoot, binding, options.mode);
+                    const audit = options.unknownLiveness
+                        ? beginWorkflowRecovery(coordRoot, {
+                            run_id: binding.run_id,
+                            action: "reclaim_unknown_liveness",
+                            actor: options.unknownLiveness.actor,
+                            reason: options.unknownLiveness.reason,
+                            target_sha256: options.unknownLiveness.evidenceSha256,
+                            target: {
+                                binding_id: binding.binding_id,
+                                workspace_root: binding.workspace_root,
+                                mode: options.mode,
+                                liveness: preview.liveness,
+                            },
+                        })
+                        : undefined;
                     let preparation;
                     // Keep ordinary cleanup's terminal-evidence checks, intent and receipts.
                     // Its provider callback uses the leases already held here instead of
@@ -736,11 +778,22 @@ async function reclaim(coordRoot, provider, binding, options) {
                         provider: {
                             ...provider,
                             cleanup: async (candidate, intent) => {
-                                assertReclaimLiveness(coordRoot, candidate);
+                                assertReclaimLiveness(coordRoot, candidate, options.unknownLiveness);
                                 assertReclaimOwnership(coordRoot, candidate);
                                 return cleanupUnderLease(coordRoot, candidate, claim, intent, {
                                     mode: options.mode,
-                                    beforeEffect: () => reclaimAuthorityGuard(coordRoot, candidate, claim, reservation),
+                                    recovery: options.unknownLiveness,
+                                    beforeEffect: () => {
+                                        audit?.assertCurrent();
+                                        reclaimAuthorityGuard(coordRoot, candidate, claim, reservation, options.unknownLiveness);
+                                    },
+                                    beforeRefEffect: () => {
+                                        audit?.assertCurrent();
+                                        reservation.assertCurrent();
+                                        assertReclaimLiveness(coordRoot, candidate, options.unknownLiveness);
+                                        requiredClaim(coordRoot, candidate);
+                                        assertPeerWorkspaceAuthority(coordRoot, claim);
+                                    },
                                     prepared: (value) => {
                                         preparation = value;
                                     },
@@ -754,6 +807,8 @@ async function reclaim(coordRoot, provider, binding, options) {
                         throw new WorkflowReclaimError("workflow_reclaim_ownership_unproven", ("reason" in cleanupResult ? cleanupResult.reason : undefined) ??
                             "workspace cleanup preconditions could not be proved");
                     }
+                    if (cleanupResult.status === "released" || cleanupResult.status === "already_released")
+                        audit?.complete();
                     return {
                         ...preview,
                         action: "reclaimed",
@@ -891,7 +946,7 @@ function cleanupUnderLease(coordRoot, binding, claim, intent, reclaimRequest, be
         };
     }
     const liveness = readWorkflowLiveness(coordRoot, binding.run_id);
-    if (liveness !== "inactive") {
+    if (liveness !== "inactive" && !(liveness === "unknown" && reclaimRequest?.recovery)) {
         return {
             ...base,
             status: "blocked",
@@ -962,7 +1017,7 @@ function cleanupUnderLease(coordRoot, binding, claim, intent, reclaimRequest, be
         };
     }
     if (reclaimRequest) {
-        assertReclaimLiveness(coordRoot, binding);
+        assertReclaimLiveness(coordRoot, binding, reclaimRequest.recovery);
         assertReclaimOwnership(coordRoot, binding);
         revalidateClaimResources(claim, root);
         reclaimRequest.prepared(prepareReclaim({
@@ -1002,6 +1057,7 @@ function cleanupUnderLease(coordRoot, binding, claim, intent, reclaimRequest, be
             return { ...base, status: "blocked", reason: "workspace ref changed during cleanup" };
         }
         revalidateClaimResources(claim, root);
+        reclaimRequest?.beforeRefEffect();
         const deleted = gitMaybe(repository.source_root.realpath, [
             "update-ref",
             "-d",

package/dist/core/workflow/workspaces/reclaim.d.ts

@@ -14,10 +14,11 @@
  * always has. So reclaim adds no second removal path that could diverge from the
  * audited one, and a force-delete of live work exists nowhere in the codebase.
  */
+import type { WorkflowRecoveryAuthorization } from "../recovery-audit.js";
 import type { WorkflowLiveness } from "./recovery.js";
 import type { WorkspaceCleanupAttempt, WorkspaceCleanupReceipt } from "./types.js";
 export type ReclaimMode = "salvage" | "discard";
-export type WorkflowReclaimRefusalCode = "workflow_reclaim_run_live" | "workflow_reclaim_liveness_unknown" | "workflow_reclaim_ownership_unproven" | "workflow_reclaim_lease_held";
+export type WorkflowReclaimRefusalCode = "workflow_reclaim_run_live" | "workflow_reclaim_liveness_unknown" | "workflow_reclaim_recovery_mismatch" | "workflow_reclaim_ownership_unproven" | "workflow_reclaim_lease_held";
 export declare class WorkflowReclaimError extends Error {
     readonly code: WorkflowReclaimRefusalCode;
     constructor(code: WorkflowReclaimRefusalCode, message: string);
@@ -25,6 +26,9 @@ export declare class WorkflowReclaimError extends Error {
 export interface WorkspaceReclaimOptions {
     mode: ReclaimMode;
     yes?: boolean;
+    unknownLiveness?: WorkflowRecoveryAuthorization & {
+        evidenceSha256: string;
+    };
 }
 export interface ReclaimLeaseHolder {
     scope: "binding" | "repository" | "resume";
@@ -38,6 +42,7 @@ export interface WorkspaceReclaimPreview {
     run_id: string;
     mode: ReclaimMode;
     liveness: WorkflowLiveness;
+    evidence_sha256: string;
     ownership: "ok" | "unproven";
     ownership_detail?: string;
     dirty_paths: string[] | null;

package/dist/core/workflow/workspaces/reclaim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,0BAA0B,GAClC,2BAA2B,GAC3B,mCAAmC,GACnC,qCAAqC,GACrC,6BAA6B,CAAC;AAElC,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EACzC,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,IAAI,GAAG,UAAU,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,GAAG;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEP,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAwD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}
+{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,0BAA0B,GAClC,2BAA2B,GAC3B,mCAAmC,GACnC,oCAAoC,GACpC,qCAAqC,GACrC,6BAA6B,CAAC;AAElC,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EACzC,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,6BAA6B,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,UAAU,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,GAAG;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEP,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAwD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/core/workflow/workspaces/recovery.d.ts

@@ -1,3 +1,5 @@
 export type WorkflowLiveness = "active" | "inactive" | "unknown";
+/** Corruption must not hide a readable active marker from an audited override. */
+export declare function hasActiveWorkflowEvidence(coordRoot: string, runId: string): boolean;
 export declare function readWorkflowLiveness(coordRoot: string, runId: string): WorkflowLiveness;
 //# sourceMappingURL=recovery.d.ts.map

package/dist/core/workflow/workspaces/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA6DvF"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAoBnF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA6DvF"}

package/dist/core/workflow/workspaces/recovery.js

@@ -1,6 +1,30 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { readWorkflowProof } from "../proof.js";
+/** Corruption must not hide a readable active marker from an audited override. */
+export function hasActiveWorkflowEvidence(coordRoot, runId) {
+    const path = join(resolve(coordRoot), ".harnery", "workflows", runId, "transcript.jsonl");
+    if (!existsSync(path))
+        return false;
+    let active = false;
+    for (const line of readFileSync(path, "utf8").split("\n")) {
+        try {
+            const event = JSON.parse(line);
+            if (event?.run_id !== runId)
+                continue;
+            if (["run.start", "run.resume", "agent.start"].includes(event.event))
+                active = true;
+            if (event.event === "run.parked" ||
+                (event.event === "run.end" && typeof event.ok === "boolean") ||
+                (event.event === "workspace.reattach.failed" && ["blocked", "lost"].includes(event.status)))
+                active = false;
+        }
+        catch {
+            /* Unreadable evidence cannot establish inactivity. */
+        }
+    }
+    return active;
+}
 export function readWorkflowLiveness(coordRoot, runId) {
     const root = resolve(coordRoot);
     const transcriptPath = join(root, ".harnery", "workflows", runId, "transcript.jsonl");

package/dist/lib/tunnel/state.d.ts

@@ -32,10 +32,12 @@ export interface TunnelState {
     provider: TunnelProvider;
     url: string;
     gate_pid: number;
+    gate_start_token?: string;
+    cloudflared_start_token?: string;
+    registration_id?: string;
+    provider_state?: "pending" | "ready";
     /** Present for Cloudflare quick tunnels; absent for Tailscale Serve/Funnel. */
     cloudflared_pid?: number;
-    /** Optional provider-side process when a provider owns one. */
-    provider_pid?: number;
     started_at: string;
     target: string;
     vhost: string;
@@ -57,9 +59,14 @@ export declare function clearState(name?: string, root?: string): void;
  */
 export declare function listStates(root?: string): TunnelState[];
 export declare function isProcessAlive(pid: number): boolean;
-export type ProcessAliveCheck = (pid: number) => boolean;
-/** True when both the local gate and its provider-side process are live. */
-export declare function isTunnelStateLive(state: TunnelState, processAlive?: ProcessAliveCheck): boolean;
+export type TunnelReadiness = "ready" | "dead" | "unknown";
+export type TunnelProcessObservation = "same" | "absent" | "different" | "unknown";
+export interface TunnelReadinessVerifier {
+    observeProcess(pid: number, originalToken: string): TunnelProcessObservation;
+    withRegistration(state: TunnelState, inspect: () => TunnelReadiness): TunnelReadiness;
+}
+/** Classify saved original witnesses under the verifier's registration custody. */
+export declare function tunnelReadiness(state: TunnelState, verifier: TunnelReadinessVerifier): TunnelReadiness;
 export declare function tunnelTargetPort(state: TunnelState): number | null;
 /**
  * Newest live tunnel that serves `vhost` on the requested local web port.
@@ -72,7 +79,7 @@ export declare function tunnelTargetPort(state: TunnelState): number | null;
  * link 400s. Matching the vhost too keeps the returned tunnel the one that
  * actually serves the caller's origin.
  */
-export declare function findLiveTunnelForOrigin(port: number, vhost: string, root?: string, processAlive?: ProcessAliveCheck): TunnelState | null;
+export declare function findLiveTunnelForOrigin(port: number, vhost: string, root: string, verifier: TunnelReadinessVerifier): TunnelState | null;
 /** True when the tunnel's path scope forwards every one of `paths`. */
 export declare function tunnelServesPaths(state: TunnelState, paths: readonly string[]): boolean;
 /**

package/dist/lib/tunnel/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAoBA,qGAAqG;AACrG,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAsB,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAUD,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAG9E;AAgBD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAgBD,wBAAgB,UAAU,IAAI,YAAY,CAezC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAyB,EAC/B,IAAI,GAAE,MAAsB,GAC3B,WAAW,GAAG,IAAI,CAQpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAEjF;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAG9F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAsB,GAAG,WAAW,EAAE,CAWtE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAEzD,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,WAAW,EAClB,YAAY,GAAE,iBAAkC,GAC/C,OAAO,CAKT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAsB,EAC5B,YAAY,GAAE,iBAAkC,GAC/C,WAAW,GAAG,IAAI,CASpB;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEvF;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,cAAc,GAAE,MAAM,GAAG,SAAyC,GACjE,MAAM,CAoDR"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAsBA,qGAAqG;AACrG,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAsB,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAUD,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAG9E;AAgBD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IACrC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAgBD,wBAAgB,UAAU,IAAI,YAAY,CAezC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAyB,EAC/B,IAAI,GAAE,MAAsB,GAC3B,WAAW,GAAG,IAAI,CAQpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAUjF;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAG9F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAsB,GAAG,WAAW,EAAE,CAWtE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAC7E,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe,GAAG,eAAe,CAAC;CACvF;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,uBAAuB,GAChC,eAAe,CA0CjB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,uBAAuB,GAChC,WAAW,GAAG,IAAI,CASpB;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEvF;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,cAAc,GAAE,MAAM,GAAG,SAAyC,GACjE,MAAM,CAoDR"}