harnery 0.45.0 → 0.45.2

package/dist/core/workflow/workspaces/ownership.js

@@ -1,135 +1,8 @@
-import { lstatSync, readdirSync, readFileSync, realpathSync } from "node:fs";
-import { basename, dirname, isAbsolute, join, resolve } from "node:path";
-import { readJsonRecord, stableDigest } from "../durable-record.js";
-import { acquireNoClobberLease } from "./leases.js";
+import { lstatSync, realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, resolve } from "node:path";
+import { stableDigest } from "../durable-record.js";
 import { containsPath } from "./paths.js";
 import { isWorkspaceAllocationRequest } from "./validate.js";
-const STALE_MS = 5 * 60 * 1_000;
-const RESERVATION_SCOPE = "workspace-reclaim";
-function leaseRoot(coordRoot, providerId) {
-    return join(resolve(coordRoot), ".harnery", "workspaces", providerId, ".leases");
-}
-/** Serialize only publication and reservation registration, never Git work. */
-function withPublicationGate(coordRoot, providerId, operation) {
-    const authority = stableDigest({ provider_id: providerId, scope: "workspace-publication" });
-    const gate = acquireNoClobberLease({
-        path: join(leaseRoot(coordRoot, providerId), "publication.lock"),
-        scope: "workspace-publication",
-        authoritySha256: authority,
-        staleAfterMs: STALE_MS,
-        validateStaleOwner: (owner) => owner.authority_sha256 === authority,
-    });
-    try {
-        return operation();
-    }
-    finally {
-        gate.release();
-    }
-}
-function reservationPath(coordRoot, claim) {
-    return join(leaseRoot(coordRoot, claim.provider_id), `reclaim-${claim.binding_id}.lock`);
-}
-function acquireReservation(coordRoot, claim) {
-    const authority = stableDigest(claim);
-    return acquireNoClobberLease({
-        path: reservationPath(coordRoot, claim),
-        scope: RESERVATION_SCOPE,
-        authoritySha256: authority,
-        staleAfterMs: STALE_MS,
-        metadata: { binding_id: claim.binding_id, request_sha256: claim.request_sha256 },
-        validateStaleOwner: (owner) => owner.authority_sha256 === authority &&
-            owner.metadata?.binding_id === claim.binding_id &&
-            owner.metadata?.request_sha256 === claim.request_sha256,
-    });
-}
-/** The immutable claim is the authority; the lease reserves its destructive path. */
-export function reserveWorkspaceReclaim(coordRoot, claim) {
-    assertClaimAuthority(claim, claim.provider_id, claim.binding_id);
-    const lease = withPublicationGate(coordRoot, claim.provider_id, () => acquireReservation(coordRoot, claim));
-    return {
-        assertCurrent() {
-            const path = reservationPath(coordRoot, claim);
-            const current = join(path, "current");
-            const pin = join(path, lease.owner.owner_file);
-            const a = lstatSync(current, { bigint: true });
-            const b = lstatSync(pin, { bigint: true });
-            if (!a.isFile() ||
-                !b.isFile() ||
-                a.dev !== b.dev ||
-                a.ino !== b.ino ||
-                readFileSync(current, "utf8") !== readFileSync(pin, "utf8") ||
-                stableDigest(readJsonRecord(current, "reclaim reservation")) !== stableDigest(lease.owner)) {
-                throw new Error("workspace reclaim reservation owner changed");
-            }
-            const persisted = readJsonRecord(join(dirname(dirname(path)), claim.binding_id, "claim.json"), "reserved workspace claim");
-            if (stableDigest(persisted) !== stableDigest(claim)) {
-                throw new Error("workspace reclaim reservation claim changed");
-            }
-        },
-        release: () => lease.release(),
-    };
-}
-export function publishWorkspaceClaim(coordRoot, claim, publish) {
-    assertClaimAuthority(claim, claim.provider_id, claim.binding_id);
-    return withPublicationGate(coordRoot, claim.provider_id, () => {
-        for (const entry of readdirSync(leaseRoot(coordRoot, claim.provider_id), {
-            withFileTypes: true,
-        })) {
-            if (!entry.name.startsWith("reclaim-") || !entry.name.endsWith(".lock"))
-                continue;
-            if (!entry.isDirectory())
-                throw new Error("workspace reclaim reservation is not a directory");
-            const path = join(leaseRoot(coordRoot, claim.provider_id), entry.name);
-            const current = join(path, "current");
-            try {
-                lstatSync(current);
-            }
-            catch (error) {
-                if (error.code === "ENOENT")
-                    continue;
-                throw error;
-            }
-            const id = entry.name.slice("reclaim-".length, -".lock".length);
-            const reserved = readJsonRecord(join(dirname(leaseRoot(coordRoot, claim.provider_id)), id, "claim.json"), "reserved workspace claim");
-            assertClaimAuthority(reserved, claim.provider_id, id);
-            // Unknown reservation authority is never interpreted as an unrelated owner.
-            const owner = readJsonRecord(current, "reclaim reservation");
-            if (owner.schema_version !== 1 ||
-                typeof owner.owner_id !== "string" ||
-                !/^[a-f0-9-]{36}$/.test(owner.owner_id) ||
-                owner.owner_file !== `owner-${owner.owner_id}.json` ||
-                !Number.isSafeInteger(owner.pid) ||
-                owner.pid <= 0 ||
-                typeof owner.host !== "string" ||
-                owner.host.length === 0 ||
-                !Number.isFinite(Date.parse(owner.created_at)) ||
-                !Number.isFinite(Date.parse(owner.expires_at)) ||
-                Date.parse(owner.expires_at) < Date.parse(owner.created_at) ||
-                owner.scope !== RESERVATION_SCOPE ||
-                owner.authority_sha256 !== stableDigest(reserved) ||
-                owner.metadata?.binding_id !== id ||
-                owner.metadata?.request_sha256 !== reserved.request_sha256) {
-                throw new Error("workspace reclaim reservation authority is unproven");
-            }
-            const a = lstatSync(current, { bigint: true });
-            const pin = join(path, owner.owner_file);
-            const b = lstatSync(pin, { bigint: true });
-            if (!a.isFile() ||
-                !b.isFile() ||
-                a.dev !== b.dev ||
-                a.ino !== b.ino ||
-                readFileSync(current, "utf8") !== readFileSync(pin, "utf8"))
-                throw new Error("workspace reclaim reservation owner is unproven");
-            if (!claimOverlapsWorkspace(claim, reserved.workspace_root))
-                continue;
-            // This succeeds only for an expired, provably dead, exact prior owner.
-            // It retires the reservation, never the immutable claim or resource.
-            const recovered = acquireReservation(coordRoot, reserved);
-            recovered.release();
-        }
-        return publish();
-    });
-}
 export function assertClaimAuthority(claim, providerId, id) {
     if (claim?.schema_version !== 1 ||
         !/^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/.test(providerId) ||

package/dist/core/workflow/workspaces/reclaim.d.ts

@@ -14,11 +14,10 @@
  * always has. So reclaim adds no second removal path that could diverge from the
  * audited one, and a force-delete of live work exists nowhere in the codebase.
  */
-import type { WorkflowRecoveryAuthorization } from "../recovery-audit.js";
 import type { WorkflowLiveness } from "./recovery.js";
 import type { WorkspaceCleanupAttempt, WorkspaceCleanupReceipt } from "./types.js";
 export type ReclaimMode = "salvage" | "discard";
-export type WorkflowReclaimRefusalCode = "workflow_reclaim_run_live" | "workflow_reclaim_liveness_unknown" | "workflow_reclaim_recovery_mismatch" | "workflow_reclaim_ownership_unproven" | "workflow_reclaim_lease_held";
+export type WorkflowReclaimRefusalCode = "workflow_reclaim_run_live" | "workflow_reclaim_liveness_unknown" | "workflow_reclaim_ownership_unproven" | "workflow_reclaim_lease_held";
 export declare class WorkflowReclaimError extends Error {
     readonly code: WorkflowReclaimRefusalCode;
     constructor(code: WorkflowReclaimRefusalCode, message: string);
@@ -26,9 +25,8 @@ export declare class WorkflowReclaimError extends Error {
 export interface WorkspaceReclaimOptions {
     mode: ReclaimMode;
     yes?: boolean;
-    unknownLiveness?: WorkflowRecoveryAuthorization & {
-        evidenceSha256: string;
-    };
+    /** Admit missing or corrupt liveness evidence; active evidence still refuses. */
+    force?: boolean;
 }
 export interface ReclaimLeaseHolder {
     scope: "binding" | "repository" | "resume";
@@ -42,7 +40,6 @@ export interface WorkspaceReclaimPreview {
     run_id: string;
     mode: ReclaimMode;
     liveness: WorkflowLiveness;
-    evidence_sha256: string;
     ownership: "ok" | "unproven";
     ownership_detail?: string;
     dirty_paths: string[] | null;
@@ -72,7 +69,7 @@ export interface PrepareReclaimInput {
     worktreePath: string;
     mode: ReclaimMode;
     runId: string;
-    /** Revalidate the held reservation and peer authority immediately before effects. */
+    /** Recheck peer authority once, immediately before the first destructive step. */
     beforeEffect?: () => void;
 }
 /**

package/dist/core/workflow/workspaces/reclaim.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,0BAA0B,GAClC,2BAA2B,GAC3B,mCAAmC,GACnC,oCAAoC,GACpC,qCAAqC,GACrC,6BAA6B,CAAC;AAElC,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EACzC,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,6BAA6B,GAAG;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9E;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,UAAU,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,GAAG;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEP,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAwD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}
+{"version":3,"file":"reclaim.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/reclaim.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhD,MAAM,MAAM,0BAA0B,GAClC,2BAA2B,GAC3B,mCAAmC,GACnC,qCAAqC,GACrC,6BAA6B,CAAC;AAElC,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EACzC,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,IAAI,GAAG,UAAU,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,GAAG;IACzC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,EAAE,uBAAuB,GAAG,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEP,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,kBAAkB,CAoD7E;AAYD;qEACqE;AACrE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/core/workflow/workspaces/reclaim.js

@@ -51,7 +51,6 @@ export function prepareReclaim(input) {
         // cannot see. Running clean first would leave staged deletions behind.
         input.beforeEffect?.();
         git(input.worktreePath, ["reset", "--hard"]);
-        input.beforeEffect?.();
         git(input.worktreePath, ["clean", "-fd"]);
         return { action: "discarded", detail: "uncommitted changes were discarded on request" };
     }
@@ -71,13 +70,10 @@ export function prepareReclaim(input) {
     const before = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
     input.beforeEffect?.();
     git(input.worktreePath, ["add", "-A"]);
-    input.beforeEffect?.();
     git(input.worktreePath, ["commit", "--no-verify", "-m", salvageMessage(input.runId)]);
     const commit = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
     const branch = salvageBranch(input.runId);
-    input.beforeEffect?.();
     git(input.worktreePath, ["branch", "--force", branch, commit]);
-    input.beforeEffect?.();
     git(input.worktreePath, ["reset", "--hard", before]);
     return {
         action: "salvaged",

package/dist/core/workflow/workspaces/recovery.d.ts

@@ -1,5 +1,5 @@
 export type WorkflowLiveness = "active" | "inactive" | "unknown";
-/** Corruption must not hide a readable active marker from an audited override. */
+/** Corruption must not hide a readable active marker from a forced reclaim. */
 export declare function hasActiveWorkflowEvidence(coordRoot: string, runId: string): boolean;
 export declare function readWorkflowLiveness(coordRoot: string, runId: string): WorkflowLiveness;
 //# sourceMappingURL=recovery.d.ts.map

package/dist/core/workflow/workspaces/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAoBnF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA6DvF"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/recovery.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAEjE,+EAA+E;AAC/E,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAoBnF;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CA6DvF"}

package/dist/core/workflow/workspaces/recovery.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { readWorkflowProof } from "../proof.js";
-/** Corruption must not hide a readable active marker from an audited override. */
+/** Corruption must not hide a readable active marker from a forced reclaim. */
 export function hasActiveWorkflowEvidence(coordRoot, runId) {
     const path = join(resolve(coordRoot), ".harnery", "workflows", runId, "transcript.jsonl");
     if (!existsSync(path))

package/dist/core/workflow/workspaces/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/state.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACjD,UAAU,EAAE;QACV,WAAW,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjD,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,CAAC,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAIR;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,0BAA0B,GAAG,SAAS,CAKxC;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAErF;AAgBD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,EAAE,CAY3F;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,SAAS,CAG5B;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAK3F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAG9B;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,sBAAsB,CAwCxB;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,sBAAsB,EAAE,CA0C1B;AAOD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,4BAA4B,GAC5B,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CA4BzB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CAiBzB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,uBAAuB,EAAE,CAK3B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAK/F;AA8DD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,kBAAkB,GACxB,MAAM,CAUR;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,CAAC,GAAG,SAAS,CAGf;AAMD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/core/workflow/workspaces/state.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAMpB,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,0BAA0B,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACjD,UAAU,EAAE;QACV,WAAW,EAAE,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjD,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,CAAC,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAIR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,0BAA0B,GAClC,MAAM,CAIR;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,0BAA0B,GAAG,SAAS,CAKxC;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAYrF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,EAAE,CAY3F;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,cAAc,GAAG,SAAS,CAG5B;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAK3F;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,gBAAgB,GAAG,SAAS,CAG9B;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,sBAAsB,CAwCxB;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,sBAAsB,EAAE,CA0C1B;AAOD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,wBAAwB,GACxB,uBAAuB,GACvB,sBAAsB,GACtB,4BAA4B,GAC5B,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CA4BzB;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,KAAK,GAAG,iBAAiB,GAAG,eAAe,CAAC,GAChF,uBAAuB,CAiBzB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,uBAAuB,EAAE,CAK3B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,uBAAuB,EAAE,CAK/F;AA8DD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,kBAAkB,GACxB,MAAM,CAUR;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,CAAC,GAAG,SAAS,CAGf;AAMD,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,sBAAsB,CAAC"}

package/dist/core/workflow/workspaces/state.js

@@ -2,7 +2,7 @@ import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readd
 import { dirname, join, resolve } from "node:path";
 import { stateDirMode, stateFileMode } from "../../storage/modes.js";
 import { canonicalJson, fsyncParentDirectory, readJsonRecord, stableDigest, writeImmutableJson, } from "../durable-record.js";
-import { assertClaimAuthority, publishWorkspaceClaim } from "./ownership.js";
+import { assertClaimAuthority } from "./ownership.js";
 export { appendWorkflowTranscriptEvent } from "../transcript.js";
 const JSON_LIMIT = 512 * 1024;
 const WORKSPACE_EVENT_BYTES = 32 * 1024;
@@ -40,9 +40,6 @@ export function readWorkspaceRequest(coordRoot, runId) {
         : undefined;
 }
 export function writeWorkspaceClaim(coordRoot, claim) {
-    return publishWorkspaceClaim(coordRoot, claim, () => writeClaim(coordRoot, claim));
-}
-function writeClaim(coordRoot, claim) {
     const path = workspaceClaimPath(coordRoot, claim.provider_id, claim.binding_id);
     try {
         return writeImmutableJson(path, claim);

package/dist/lib/identities/assume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assume.d.ts","sourceRoot":"","sources":["../../../src/lib/identities/assume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,CAAC;AAExB,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAOD;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,KAAK,SAAa,EAClB,mBAAmB,GAAE,WAAW,CAAC,MAAM,CAAa,GACnD,gBAAgB,GAAG,IAAI,CA6BzB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CA6CT;AAuED,gEAAgE;AAChE,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,oBAAoB,CAyHtB"}
+{"version":3,"file":"assume.d.ts","sourceRoot":"","sources":["../../../src/lib/identities/assume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA0BH,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,iBAAiB,GACjB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,oBAAoB,GACpB,aAAa,GACb,mBAAmB,CAAC;AAExB,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,uBAAuB;gBAA7B,IAAI,EAAE,uBAAuB,EAC7C,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAOD;+EAC+E;AAC/E,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,KAAK,SAAa,EAClB,mBAAmB,GAAE,WAAW,CAAC,MAAM,CAAa,GACnD,gBAAgB,GAAG,IAAI,CA6BzB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAyCT;AAuED,gEAAgE;AAChE,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACjC,oBAAoB,CAyHtB"}

package/dist/lib/identities/assume.js

@@ -85,7 +85,6 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
     let sessionId = conflict.instance_id;
     let ageSecs;
     const liveRow = readLiveCoordinationRow(coordRoot, conflict.instance_id);
-    let expectedGenerationId = liveRow?.v3_generation_id ?? null;
     if (liveRow) {
         adapter = adapterOf(liveRow.platform);
         sessionId = liveRow.session_id || conflict.instance_id;
@@ -100,10 +99,8 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
             // It is required to join the exact producer state when recording the sweep.
             adapter = adapterOf(hb.platform);
             sessionId = hb.session_id || conflict.instance_id;
-            expectedGenerationId = hb.v3_generation_id ?? null;
         }
         catch {
-            expectedGenerationId = null;
             /* content unreadable — still reclaim the file */
         }
         try {
@@ -119,7 +116,6 @@ export function reclaimAbandonedLocalConflict(coordRoot, conflict) {
         owner: conflict.instance_id,
         nativeSessionId: sessionId,
         adapter,
-        expectedGenerationId,
         observation: "stale_heartbeat",
         ageMs: Math.max(0, (ageSecs ?? 0) * 1_000),
     });

package/dist/lib/tunnel/state.d.ts

@@ -32,12 +32,10 @@ export interface TunnelState {
     provider: TunnelProvider;
     url: string;
     gate_pid: number;
-    gate_start_token?: string;
-    cloudflared_start_token?: string;
-    registration_id?: string;
-    provider_state?: "pending" | "ready";
     /** Present for Cloudflare quick tunnels; absent for Tailscale Serve/Funnel. */
     cloudflared_pid?: number;
+    /** Optional provider-side process when a provider owns one. */
+    provider_pid?: number;
     started_at: string;
     target: string;
     vhost: string;
@@ -59,14 +57,9 @@ export declare function clearState(name?: string, root?: string): void;
  */
 export declare function listStates(root?: string): TunnelState[];
 export declare function isProcessAlive(pid: number): boolean;
-export type TunnelReadiness = "ready" | "dead" | "unknown";
-export type TunnelProcessObservation = "same" | "absent" | "different" | "unknown";
-export interface TunnelReadinessVerifier {
-    observeProcess(pid: number, originalToken: string): TunnelProcessObservation;
-    withRegistration(state: TunnelState, inspect: () => TunnelReadiness): TunnelReadiness;
-}
-/** Classify saved original witnesses under the verifier's registration custody. */
-export declare function tunnelReadiness(state: TunnelState, verifier: TunnelReadinessVerifier): TunnelReadiness;
+export type ProcessAliveCheck = (pid: number) => boolean;
+/** True when both the local gate and its provider-side process are live. */
+export declare function isTunnelStateLive(state: TunnelState, processAlive?: ProcessAliveCheck): boolean;
 export declare function tunnelTargetPort(state: TunnelState): number | null;
 /**
  * Newest live tunnel that serves `vhost` on the requested local web port.
@@ -79,7 +72,7 @@ export declare function tunnelTargetPort(state: TunnelState): number | null;
  * link 400s. Matching the vhost too keeps the returned tunnel the one that
  * actually serves the caller's origin.
  */
-export declare function findLiveTunnelForOrigin(port: number, vhost: string, root: string, verifier: TunnelReadinessVerifier): TunnelState | null;
+export declare function findLiveTunnelForOrigin(port: number, vhost: string, root?: string, processAlive?: ProcessAliveCheck): TunnelState | null;
 /** True when the tunnel's path scope forwards every one of `paths`. */
 export declare function tunnelServesPaths(state: TunnelState, paths: readonly string[]): boolean;
 /**

package/dist/lib/tunnel/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAsBA,qGAAqG;AACrG,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAsB,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAUD,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAG9E;AAgBD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC;IACrC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAgBD,wBAAgB,UAAU,IAAI,YAAY,CAezC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAyB,EAC/B,IAAI,GAAE,MAAsB,GAC3B,WAAW,GAAG,IAAI,CAQpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAUjF;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAG9F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAsB,GAAG,WAAW,EAAE,CAWtE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAC7E,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe,GAAG,eAAe,CAAC;CACvF;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,uBAAuB,GAChC,eAAe,CA0CjB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,uBAAuB,GAChC,WAAW,GAAG,IAAI,CASpB;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEvF;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,cAAc,GAAE,MAAM,GAAG,SAAyC,GACjE,MAAM,CAoDR"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/lib/tunnel/state.ts"],"names":[],"mappings":"AAoBA,qGAAqG;AACrG,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,yEAAyE;AACzE,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAsB,EAC5B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAUD,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAW1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,CAG9E;AAgBD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,WAAW,CAAC;AACxD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,cAAc,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAgBD,wBAAgB,UAAU,IAAI,YAAY,CAezC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEnD;AAED,wBAAgB,SAAS,CACvB,IAAI,GAAE,MAAyB,EAC/B,IAAI,GAAE,MAAsB,GAC3B,WAAW,GAAG,IAAI,CAQpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAEjF;AAED,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAyB,EAAE,IAAI,GAAE,MAAsB,GAAG,IAAI,CAG9F;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAsB,GAAG,WAAW,EAAE,CAWtE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAEzD,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,WAAW,EAClB,YAAY,GAAE,iBAAkC,GAC/C,OAAO,CAKT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAsB,EAC5B,YAAY,GAAE,iBAAkC,GAC/C,WAAW,GAAG,IAAI,CASpB;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEvF;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,cAAc,GAAE,MAAM,GAAG,SAAyC,GACjE,MAAM,CAoDR"}

package/dist/lib/tunnel/state.js

@@ -1,8 +1,7 @@
 // Tunnel config + state persistence + provider helpers. Commands default to
 // <cwd>/.cache/tunnel/; gitignored, so the allowlist is per-machine.
 import { spawnSync } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { accessSync, chmodSync, constants, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
+import { accessSync, chmodSync, constants, existsSync, mkdirSync, readdirSync, readFileSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
 import { homedir } from "node:os";
 import { delimiter, join, resolve } from "node:path";
 import { isPathAllowed } from "./path-scope.js";
@@ -105,17 +104,7 @@ export function readState(name = DEFAULT_INSTANCE, root = process.cwd()) {
     }
 }
 export function writeState(state, root = process.cwd()) {
-    const path = cachePath(stateFile(state.name), root);
-    const temporary = `${path}.${randomUUID()}.tmp`;
-    try {
-        writeFileSync(temporary, JSON.stringify(state, null, 2), { flag: "wx", mode: 0o600 });
-        renameSync(temporary, path);
-    }
-    catch (error) {
-        if (existsSync(temporary))
-            unlinkSync(temporary);
-        throw error;
-    }
+    writeFileSync(cachePath(stateFile(state.name), root), JSON.stringify(state, null, 2));
 }
 export function clearState(name = DEFAULT_INSTANCE, root = process.cwd()) {
     const p = cachePath(stateFile(name), root);
@@ -150,49 +139,14 @@ export function isProcessAlive(pid) {
         return false;
     }
 }
-/** Classify saved original witnesses under the verifier's registration custody. */
-export function tunnelReadiness(state, verifier) {
-    if (!state ||
-        typeof state !== "object" ||
-        Object.hasOwn(state, "provider_pid") ||
-        Object.hasOwn(state, "provider_start_token") ||
-        typeof state.registration_id !== "string" ||
-        !state.registration_id ||
-        !Number.isSafeInteger(state.gate_pid) ||
-        state.gate_pid < 1 ||
-        typeof state.gate_start_token !== "string" ||
-        !state.gate_start_token)
-        return "unknown";
-    const targets = [{ pid: state.gate_pid, token: state.gate_start_token }];
-    if (state.provider === "tailscale") {
-        if (state.provider_state !== "ready" ||
-            state.cloudflared_pid !== undefined ||
-            state.cloudflared_start_token !== undefined)
-            return "unknown";
-    }
-    else if (state.provider === "cloudflare") {
-        if (!Number.isSafeInteger(state.cloudflared_pid) ||
-            state.cloudflared_pid < 1 ||
-            typeof state.cloudflared_start_token !== "string" ||
-            !state.cloudflared_start_token)
-            return "unknown";
-        targets.push({ pid: state.cloudflared_pid, token: state.cloudflared_start_token });
-    }
-    else
-        return "unknown";
-    try {
-        return verifier.withRegistration(state, () => {
-            const observed = targets.map(({ pid, token }) => verifier.observeProcess(pid, token));
-            if (observed.every((value) => value === "absent"))
-                return "dead";
-            if (observed.every((value) => value === "same"))
-                return "ready";
-            return "unknown";
-        });
-    }
-    catch {
-        return "unknown";
-    }
+/** True when both the local gate and its provider-side process are live. */
+export function isTunnelStateLive(state, processAlive = isProcessAlive) {
+    if (!processAlive(state.gate_pid))
+        return false;
+    if (state.provider === "tailscale")
+        return true;
+    const providerPid = state.cloudflared_pid ?? state.provider_pid;
+    return typeof providerPid === "number" && processAlive(providerPid);
 }
 export function tunnelTargetPort(state) {
     const value = /^[a-z][a-z\d+.-]*:\/\//i.test(state.target)
@@ -219,10 +173,10 @@ export function tunnelTargetPort(state) {
  * link 400s. Matching the vhost too keeps the returned tunnel the one that
  * actually serves the caller's origin.
  */
-export function findLiveTunnelForOrigin(port, vhost, root, verifier) {
+export function findLiveTunnelForOrigin(port, vhost, root = process.cwd(), processAlive = isProcessAlive) {
     return (listStates(root).find((state) => tunnelTargetPort(state) === port &&
         state.vhost === vhost &&
-        tunnelReadiness(state, verifier) === "ready") ?? null);
+        isTunnelStateLive(state, processAlive)) ?? null);
 }
 /** True when the tunnel's path scope forwards every one of `paths`. */
 export function tunnelServesPaths(state, paths) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnery",
-  "version": "0.45.0",
+  "version": "0.45.2",
   "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",
@@ -67,11 +67,6 @@
       "types": "./dist/core/context/index.d.ts",
       "import": "./dist/core/context/index.js"
     },
-    "./core/turn-rollback": {
-      "bun": "./src/core/turn-rollback/index.ts",
-      "types": "./dist/core/turn-rollback/index.d.ts",
-      "import": "./dist/core/turn-rollback/index.js"
-    },
     "./core/workflow": {
       "bun": "./src/core/workflow/index.ts",
       "types": "./dist/core/workflow/index.d.ts",

package/src/commander.ts

@@ -795,16 +795,6 @@ function harneryCommandBundles({
       load: async (program) =>
         (await import("./commands/workflow.ts")).registerWorkflowCommand(program, emit),
     },
-    lazy(
-      "turn-rollback",
-      "Capture and review exact turn paths before restoring owned content.",
-      async (program) =>
-        (await import("./commands/turn-rollback.ts")).registerTurnRollbackCommand(
-          program,
-          emit,
-          context,
-        ),
-    ),
     lazy("work", "Track durable objectives across bounded workflow attempts.", async (program) =>
       (await import("./commands/work.ts")).registerWorkCommand(program, emit),
     ),

package/src/commands/files.ts

@@ -4,7 +4,6 @@ import type { Command } from "commander";
 import type { EmitContext, HarneryProgramContext } from "../commander.ts";
 import { resolveCoordRoot } from "../core/agents/coord-client.ts";
 import { DEFAULT_WEB_PORT, resolveWebPort } from "../core/config.ts";
-import { createTunnelReadinessVerifier } from "../core/servers/index.ts";
 import { coordRootId, localCoordRootIdUrl } from "../lib/coord-root-id.ts";
 import {
   encodedRepoPath,
@@ -15,10 +14,10 @@ import {
 } from "../lib/local-file-url.ts";
 import { isPathAllowed } from "../lib/tunnel/path-scope.ts";
 import {
+  isTunnelStateLive,
   listStates,
-  type TunnelReadinessVerifier,
+  type ProcessAliveCheck,
   type TunnelState,
-  tunnelReadiness,
   tunnelTargetPort,
 } from "../lib/tunnel/state.ts";
 
@@ -209,10 +208,10 @@ export function tunnelFileUrl(
   local: LocalFileUrl,
   port: number,
   states: TunnelState[],
-  verifier: TunnelReadinessVerifier,
+  processAlive?: ProcessAliveCheck,
 ): string {
   const live = states.filter(
-    (state) => tunnelTargetPort(state) === port && tunnelReadiness(state, verifier) === "ready",
+    (state) => tunnelTargetPort(state) === port && isTunnelStateLive(state, processAlive),
   );
   if (local.mode === "raw") {
     const path = `/${encodedRepoPath(local.relPath)}`;
@@ -310,14 +309,7 @@ export function registerFilesCommand(
             mode: opts.raw ? "raw" : opts.viewer ? "viewer" : "auto",
           });
           if (opts.verify !== false) await verifyDashboardRoot(coordRoot, port);
-          const url = opts.tunnel
-            ? tunnelFileUrl(
-                result,
-                port,
-                listStates(coordRoot),
-                createTunnelReadinessVerifier({ coordRoot }),
-              )
-            : result.url;
+          const url = opts.tunnel ? tunnelFileUrl(result, port, listStates(coordRoot)) : result.url;
           emit.text(`${url}\n`);
         } catch (error) {
           if (error instanceof TunnelLinkError) {

package/src/commands/servers.ts

@@ -1,4 +1,5 @@
 import { existsSync, readFileSync, statSync } from "node:fs";
+import { hostname } from "node:os";
 import type { Command } from "commander";
 import type { EmitContext, HarneryProgramContext } from "../commander.ts";
 import { resolveCoordRoot } from "../core/agents/coord-client.ts";
@@ -110,13 +111,23 @@ export function registerServersCommand(
           const preview = Boolean(options.type) && !options.yes;
           const results: Array<StopResult | { id: string; would_stop: true }> = [];
           for (const stray of strays) {
-            const receipt = adoptServer(stray.pid, {
-              coordRoot,
-              type: "unregistered",
-              owner: "none",
-              dependencies: { listServers: () => report },
-            });
-            results.push(await stopServer(receipt, { coordRoot }));
+            results.push(
+              await stopServer(
+                {
+                  schema_version: 1,
+                  id: `pid-${stray.pid}`,
+                  kind: "session",
+                  type: "unregistered",
+                  label: stray.command,
+                  pid: stray.pid,
+                  ...(stray.start_token ? { start_token: stray.start_token } : {}),
+                  host: hostname(),
+                  started_at: new Date().toISOString(),
+                  registered_at: new Date().toISOString(),
+                },
+                { coordRoot },
+              ),
+            );
           }
           for (const view of selected) {
             if (preview && !ids.includes(view.record.id))
@@ -397,14 +408,14 @@ export function registerServersCommand(
 
   cmd
     .command("unregister <id>")
-    .description("Remove the exact observed server registration (optionally require --pid)")
+    .description("Remove a server's record (with --pid, only if the record still names that pid)")
     .option("--pid <pid>", "Only remove when the record names this pid")
     .action((id: string, options: { pid?: string }) => {
       try {
-        const coordRoot = root();
-        const record = readServer(id, { coordRoot });
-        const matchesPid = !options.pid || record?.pid === integer(options.pid, "--pid");
-        const removed = !!record && matchesPid && unregisterServer(record, { coordRoot });
+        const removed = unregisterServer(id, {
+          coordRoot: root(),
+          ...(options.pid ? { pid: integer(options.pid, "--pid") } : {}),
+        });
         emit.config({ format: "json" });
         emit.data({ id, removed });
       } catch (error) {