harnery 0.45.0 → 0.45.2

package/src/core/workflow/workspaces/reclaim.ts

@@ -16,7 +16,6 @@
  */
 
 import { existsSync } from "node:fs";
-import type { WorkflowRecoveryAuthorization } from "../recovery-audit.ts";
 import { git, gitMaybe } from "./git.ts";
 import type { WorkflowLiveness } from "./recovery.ts";
 import type { WorkspaceCleanupAttempt, WorkspaceCleanupReceipt } from "./types.ts";
@@ -26,7 +25,6 @@ export type ReclaimMode = "salvage" | "discard";
 export type WorkflowReclaimRefusalCode =
   | "workflow_reclaim_run_live"
   | "workflow_reclaim_liveness_unknown"
-  | "workflow_reclaim_recovery_mismatch"
   | "workflow_reclaim_ownership_unproven"
   | "workflow_reclaim_lease_held";
 
@@ -43,7 +41,8 @@ export class WorkflowReclaimError extends Error {
 export interface WorkspaceReclaimOptions {
   mode: ReclaimMode;
   yes?: boolean;
-  unknownLiveness?: WorkflowRecoveryAuthorization & { evidenceSha256: string };
+  /** Admit missing or corrupt liveness evidence; active evidence still refuses. */
+  force?: boolean;
 }
 
 export interface ReclaimLeaseHolder {
@@ -59,7 +58,6 @@ export interface WorkspaceReclaimPreview {
   run_id: string;
   mode: ReclaimMode;
   liveness: WorkflowLiveness;
-  evidence_sha256: string;
   ownership: "ok" | "unproven";
   ownership_detail?: string;
   dirty_paths: string[] | null;
@@ -84,7 +82,7 @@ export interface PrepareReclaimInput {
   worktreePath: string;
   mode: ReclaimMode;
   runId: string;
-  /** Revalidate the held reservation and peer authority immediately before effects. */
+  /** Recheck peer authority once, immediately before the first destructive step. */
   beforeEffect?: () => void;
 }
 
@@ -117,7 +115,6 @@ export function prepareReclaim(input: PrepareReclaimInput): ReclaimPreparation {
     // cannot see. Running clean first would leave staged deletions behind.
     input.beforeEffect?.();
     git(input.worktreePath, ["reset", "--hard"]);
-    input.beforeEffect?.();
     git(input.worktreePath, ["clean", "-fd"]);
     return { action: "discarded", detail: "uncommitted changes were discarded on request" };
   }
@@ -138,13 +135,10 @@ export function prepareReclaim(input: PrepareReclaimInput): ReclaimPreparation {
   const before = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
   input.beforeEffect?.();
   git(input.worktreePath, ["add", "-A"]);
-  input.beforeEffect?.();
   git(input.worktreePath, ["commit", "--no-verify", "-m", salvageMessage(input.runId)]);
   const commit = git(input.worktreePath, ["rev-parse", "HEAD"]).trim();
   const branch = salvageBranch(input.runId);
-  input.beforeEffect?.();
   git(input.worktreePath, ["branch", "--force", branch, commit]);
-  input.beforeEffect?.();
   git(input.worktreePath, ["reset", "--hard", before]);
   return {
     action: "salvaged",

package/src/core/workflow/workspaces/recovery.ts

@@ -4,7 +4,7 @@ import { readWorkflowProof } from "../proof.ts";
 
 export type WorkflowLiveness = "active" | "inactive" | "unknown";
 
-/** Corruption must not hide a readable active marker from an audited override. */
+/** Corruption must not hide a readable active marker from a forced reclaim. */
 export function hasActiveWorkflowEvidence(coordRoot: string, runId: string): boolean {
   const path = join(resolve(coordRoot), ".harnery", "workflows", runId, "transcript.jsonl");
   if (!existsSync(path)) return false;

package/src/core/workflow/workspaces/state.ts

@@ -19,7 +19,7 @@ import {
   stableDigest,
   writeImmutableJson,
 } from "../durable-record.ts";
-import { assertClaimAuthority, publishWorkspaceClaim } from "./ownership.ts";
+import { assertClaimAuthority } from "./ownership.ts";
 
 export { appendWorkflowTranscriptEvent } from "../transcript.ts";
 
@@ -143,10 +143,6 @@ export function readWorkspaceRequest(
 }
 
 export function writeWorkspaceClaim(coordRoot: string, claim: WorkspaceClaim): boolean {
-  return publishWorkspaceClaim(coordRoot, claim, () => writeClaim(coordRoot, claim));
-}
-
-function writeClaim(coordRoot: string, claim: WorkspaceClaim): boolean {
   const path = workspaceClaimPath(coordRoot, claim.provider_id, claim.binding_id);
   try {
     return writeImmutableJson(path, claim);

package/src/lib/identities/assume.ts

@@ -140,7 +140,6 @@ export function reclaimAbandonedLocalConflict(
   let sessionId = conflict.instance_id;
   let ageSecs: number | undefined;
   const liveRow = readLiveCoordinationRow(coordRoot, conflict.instance_id);
-  let expectedGenerationId = liveRow?.v3_generation_id ?? null;
   if (liveRow) {
     adapter = adapterOf(liveRow.platform);
     sessionId = liveRow.session_id || conflict.instance_id;
@@ -154,9 +153,7 @@ export function reclaimAbandonedLocalConflict(
       // It is required to join the exact producer state when recording the sweep.
       adapter = adapterOf(hb.platform);
       sessionId = hb.session_id || conflict.instance_id;
-      expectedGenerationId = hb.v3_generation_id ?? null;
     } catch {
-      expectedGenerationId = null;
       /* content unreadable — still reclaim the file */
     }
     try {
@@ -171,7 +168,6 @@ export function reclaimAbandonedLocalConflict(
     owner: conflict.instance_id,
     nativeSessionId: sessionId,
     adapter,
-    expectedGenerationId,
     observation: "stale_heartbeat",
     ageMs: Math.max(0, (ageSecs ?? 0) * 1_000),
   });

package/src/lib/tunnel/state.ts

@@ -2,7 +2,6 @@
 // <cwd>/.cache/tunnel/; gitignored, so the allowlist is per-machine.
 
 import { spawnSync } from "node:child_process";
-import { randomUUID } from "node:crypto";
 import {
   accessSync,
   chmodSync,
@@ -11,7 +10,6 @@ import {
   mkdirSync,
   readdirSync,
   readFileSync,
-  renameSync,
   statSync,
   unlinkSync,
   writeFileSync,
@@ -106,12 +104,10 @@ export interface TunnelState {
   provider: TunnelProvider;
   url: string;
   gate_pid: number;
-  gate_start_token?: string;
-  cloudflared_start_token?: string;
-  registration_id?: string;
-  provider_state?: "pending" | "ready";
   /** Present for Cloudflare quick tunnels; absent for Tailscale Serve/Funnel. */
   cloudflared_pid?: number;
+  /** Optional provider-side process when a provider owns one. */
+  provider_pid?: number;
   started_at: string;
   target: string;
   vhost: string;
@@ -172,15 +168,7 @@ export function readState(
 }
 
 export function writeState(state: TunnelState, root: string = process.cwd()): void {
-  const path = cachePath(stateFile(state.name), root);
-  const temporary = `${path}.${randomUUID()}.tmp`;
-  try {
-    writeFileSync(temporary, JSON.stringify(state, null, 2), { flag: "wx", mode: 0o600 });
-    renameSync(temporary, path);
-  } catch (error) {
-    if (existsSync(temporary)) unlinkSync(temporary);
-    throw error;
-  }
+  writeFileSync(cachePath(stateFile(state.name), root), JSON.stringify(state, null, 2));
 }
 
 export function clearState(name: string = DEFAULT_INSTANCE, root: string = process.cwd()): void {
@@ -214,60 +202,17 @@ export function isProcessAlive(pid: number): boolean {
   }
 }
 
-export type TunnelReadiness = "ready" | "dead" | "unknown";
-export type TunnelProcessObservation = "same" | "absent" | "different" | "unknown";
-
-export interface TunnelReadinessVerifier {
-  observeProcess(pid: number, originalToken: string): TunnelProcessObservation;
-  withRegistration(state: TunnelState, inspect: () => TunnelReadiness): TunnelReadiness;
-}
+export type ProcessAliveCheck = (pid: number) => boolean;
 
-/** Classify saved original witnesses under the verifier's registration custody. */
-export function tunnelReadiness(
+/** True when both the local gate and its provider-side process are live. */
+export function isTunnelStateLive(
   state: TunnelState,
-  verifier: TunnelReadinessVerifier,
-): TunnelReadiness {
-  if (
-    !state ||
-    typeof state !== "object" ||
-    Object.hasOwn(state, "provider_pid") ||
-    Object.hasOwn(state, "provider_start_token") ||
-    typeof state.registration_id !== "string" ||
-    !state.registration_id ||
-    !Number.isSafeInteger(state.gate_pid) ||
-    state.gate_pid < 1 ||
-    typeof state.gate_start_token !== "string" ||
-    !state.gate_start_token
-  )
-    return "unknown";
-  const targets = [{ pid: state.gate_pid, token: state.gate_start_token }];
-  if (state.provider === "tailscale") {
-    if (
-      state.provider_state !== "ready" ||
-      state.cloudflared_pid !== undefined ||
-      state.cloudflared_start_token !== undefined
-    )
-      return "unknown";
-  } else if (state.provider === "cloudflare") {
-    if (
-      !Number.isSafeInteger(state.cloudflared_pid) ||
-      state.cloudflared_pid! < 1 ||
-      typeof state.cloudflared_start_token !== "string" ||
-      !state.cloudflared_start_token
-    )
-      return "unknown";
-    targets.push({ pid: state.cloudflared_pid!, token: state.cloudflared_start_token });
-  } else return "unknown";
-  try {
-    return verifier.withRegistration(state, () => {
-      const observed = targets.map(({ pid, token }) => verifier.observeProcess(pid, token));
-      if (observed.every((value) => value === "absent")) return "dead";
-      if (observed.every((value) => value === "same")) return "ready";
-      return "unknown";
-    });
-  } catch {
-    return "unknown";
-  }
+  processAlive: ProcessAliveCheck = isProcessAlive,
+): boolean {
+  if (!processAlive(state.gate_pid)) return false;
+  if (state.provider === "tailscale") return true;
+  const providerPid = state.cloudflared_pid ?? state.provider_pid;
+  return typeof providerPid === "number" && processAlive(providerPid);
 }
 
 export function tunnelTargetPort(state: TunnelState): number | null {
@@ -297,15 +242,15 @@ export function tunnelTargetPort(state: TunnelState): number | null {
 export function findLiveTunnelForOrigin(
   port: number,
   vhost: string,
-  root: string,
-  verifier: TunnelReadinessVerifier,
+  root: string = process.cwd(),
+  processAlive: ProcessAliveCheck = isProcessAlive,
 ): TunnelState | null {
   return (
     listStates(root).find(
       (state) =>
         tunnelTargetPort(state) === port &&
         state.vhost === vhost &&
-        tunnelReadiness(state, verifier) === "ready",
+        isTunnelStateLive(state, processAlive),
     ) ?? null
   );
 }

package/dist/commands/turn-rollback.d.ts

@@ -1,5 +0,0 @@
-import type { Command } from "commander";
-import type { EmitContext, HarneryProgramContext } from "../commander.js";
-/** Explicit turn boundaries; hooks cannot infer provider ownership or path scope. */
-export declare function registerTurnRollbackCommand(program: Command, emit: EmitContext, context?: HarneryProgramContext): void;
-//# sourceMappingURL=turn-rollback.d.ts.map

package/dist/commands/turn-rollback.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"turn-rollback.d.ts","sourceRoot":"","sources":["../../src/commands/turn-rollback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAa1E,qFAAqF;AACrF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,IAAI,CA2FN"}

package/dist/commands/turn-rollback.js

@@ -1,76 +0,0 @@
-import { monorepoRoot } from "../core/agents/index.js";
-import { applyTurnRollback, beginTurnRollback, inspectTurnRollback, prepareTurnRollback, sealTurnRollback, } from "../core/turn-rollback/index.js";
-import { readJsonRecord } from "../core/workflow/durable-record.js";
-import { readWorkspaceBinding } from "../core/workflow/workspaces/state.js";
-/** Explicit turn boundaries; hooks cannot infer provider ownership or path scope. */
-export function registerTurnRollbackCommand(program, emit, context) {
-    const command = program
-        .command("turn-rollback")
-        .description("Capture and review exact-path content rollback in an owned workspace");
-    const run = (operation) => async (options) => {
-        try {
-            const coordRoot = context?.resolveCoordRoot?.() ?? context?.repoRoot ?? monorepoRoot();
-            if (!coordRoot)
-                throw new Error("project coordination root is unavailable");
-            emit.config({ format: "json" });
-            const result = await operation(coordRoot, options);
-            emit.data(result);
-            if (result &&
-                typeof result === "object" &&
-                "status" in result &&
-                result.status === "unknown")
-                emit.setExitCode(1);
-        }
-        catch (error) {
-            emit.error({ code: "turn_rollback_refused", message: String(error) });
-            emit.setExitCode(1);
-        }
-    };
-    const binding = (root, options) => {
-        const value = readWorkspaceBinding(root, "local-git-worktree", options.binding);
-        if (!value)
-            throw new Error("immutable workspace binding was not found");
-        return value;
-    };
-    command
-        .command("begin")
-        .description("Capture exact literal paths before a turn")
-        .requiredOption("--binding <id>", "Owned workspace binding ID")
-        .requiredOption("--turn <id>", "Caller turn identity")
-        .requiredOption("--generation <number>", "Increasing turn generation")
-        .requiredOption("--path <file...>", "Exact relative file paths, including planned new files")
-        .action(run((root, options) => beginTurnRollback(root, {
-        binding: binding(root, options),
-        turn: { turn_id: options.turn, generation: Number(options.generation) },
-        paths: options.path,
-    })));
-    for (const operation of ["seal", "prepare", "show"]) {
-        command
-            .command(`${operation} <capture-id>`)
-            .description(`${operation} an exact turn capture`)
-            .requiredOption("--binding <id>", "Owned workspace binding ID")
-            .action((id, options) => run((root, opts) => {
-            const input = { binding: binding(root, opts), capture_id: id };
-            return operation === "seal"
-                ? sealTurnRollback(root, input)
-                : operation === "prepare"
-                    ? prepareTurnRollback(root, input)
-                    : inspectTurnRollback(root, input);
-        })(options));
-    }
-    command
-        .command("apply")
-        .description("Preview a saved proposal, or apply it after exact confirmation")
-        .requiredOption("--binding <id>", "Owned workspace binding ID")
-        .requiredOption("--plan <file>", "Saved JSON proposal returned by prepare")
-        .option("--yes", "Apply this exact proposal; preview is the default")
-        .option("--actor <name>", "Who authorized the restore")
-        .option("--reason <text>", "Why this turn is being restored")
-        .action(run((root, options) => applyTurnRollback(root, {
-        binding: binding(root, options),
-        plan: readJsonRecord(options.plan, "rollback proposal"),
-        yes: options.yes,
-        actor: options.actor,
-        reason: options.reason,
-    })));
-}

package/dist/core/agents/state/process-handle.d.ts

@@ -1,26 +0,0 @@
-import type { ProcessGenerationVerdict } from "./proc-start.js";
-export interface ProcessHandleSignalResult {
-    sent: boolean;
-    verdict: ProcessGenerationVerdict;
-}
-export type NativeProcessHelperRunner = (command: string, args: string[], options: {
-    input: string;
-    encoding: "utf8";
-    timeout: number;
-    maxBuffer: number;
-    windowsHide: boolean;
-}) => {
-    status: number | null;
-    stdout: string | Buffer | null;
-    error?: Error;
-};
-export declare const LINUX_PROCESS_HANDLE_SCRIPT = "\nimport json, os, pathlib, signal, sys\nresult = {\"sent\": False, \"verdict\": \"unknown\"}\nfd = None\ntry:\n    request = json.loads(sys.stdin.readline())\n    if not hasattr(os, \"pidfd_open\") or not hasattr(signal, \"pidfd_send_signal\"):\n        raise RuntimeError(\"pidfd support unavailable\")\n    fd = os.pidfd_open(request[\"pid\"])\n    stat = pathlib.Path(\"/proc/%d/stat\" % request[\"pid\"]).read_text()\n    ticks = stat[stat.rfind(\") \") + 2:].split()[19]\n    boot = pathlib.Path(\"/proc/sys/kernel/random/boot_id\").read_text().strip().replace(\"-\", \"\")[:8]\n    token = \"l%s.%s\" % (boot, ticks)\n    result[\"token\"] = token\n    recorded = request.get(\"token\")\n    result[\"verdict\"] = \"same\" if token == recorded else \"different\"\n    if request[\"mode\"] == \"signal\" and result[\"verdict\"] == \"same\":\n        print(json.dumps({\"phase\": \"verified\"}), flush=True)\n        if sys.stdin.readline().strip() == \"signal\":\n            signal.pidfd_send_signal(fd, request[\"signal\"])\n            result[\"sent\"] = True\nexcept Exception:\n    pass\nfinally:\n    if fd is not None:\n        os.close(fd)\nprint(json.dumps(result), flush=True)\n";
-export declare const WINDOWS_PROCESS_HANDLE_SCRIPT = "\n$ErrorActionPreference = 'Stop'\n$result = @{ sent = $false; verdict = 'unknown' }\n$handle = [IntPtr]::Zero\ntry {\n  Add-Type -TypeDefinition @'\nusing System;\nusing System.Runtime.InteropServices;\npublic static class HarneryProcessHandle {\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern IntPtr OpenProcess(uint access, bool inherit, uint processId);\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern bool GetProcessTimes(IntPtr handle, out long creation, out long exit, out long kernel, out long user);\n  [DllImport(\"kernel32.dll\", SetLastError=true)] public static extern bool TerminateProcess(IntPtr handle, uint exitCode);\n  [DllImport(\"kernel32.dll\")] public static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);\n  [DllImport(\"kernel32.dll\")] public static extern bool CloseHandle(IntPtr handle);\n}\n'@\n  $request = [Console]::In.ReadLine() | ConvertFrom-Json\n  $access = [uint32]0x101000\n  if ($request.mode -eq 'signal') { $access = $access -bor 1 }\n  $handle = [HarneryProcessHandle]::OpenProcess($access, $false, [uint32]$request.pid)\n  if ($handle -eq [IntPtr]::Zero) { throw 'process handle unavailable' }\n  [long]$creation = 0; [long]$exitTime = 0; [long]$kernel = 0; [long]$userTime = 0\n  if (-not [HarneryProcessHandle]::GetProcessTimes($handle, [ref]$creation, [ref]$exitTime, [ref]$kernel, [ref]$userTime)) { throw 'process time unavailable' }\n  $token = 'w' + $creation.ToString([Globalization.CultureInfo]::InvariantCulture)\n  $result.token = $token\n  $result.verdict = if ($token -ceq $request.token) { 'same' } else { 'different' }\n  if ($request.mode -eq 'signal' -and $result.verdict -eq 'same') {\n    [Console]::Out.WriteLine('{\"phase\":\"verified\"}')\n    [Console]::Out.Flush()\n    if ([Console]::In.ReadLine() -eq 'signal' -and [HarneryProcessHandle]::WaitForSingleObject($handle, 0) -eq 258) {\n      $result.sent = [HarneryProcessHandle]::TerminateProcess($handle, 1)\n    }\n  }\n} catch {} finally {\n  if ($handle -ne [IntPtr]::Zero) { [void][HarneryProcessHandle]::CloseHandle($handle) }\n}\n$result | ConvertTo-Json -Compress\n";
-/** Windows creation FILETIME, read from an OpenProcess handle. */
-export declare function windowsProcessStartToken(pid: number, run?: NativeProcessHelperRunner): string | null;
-/** No numeric-PID signaling fallback is permitted when an exact handle fails. */
-export declare function signalProcessWithHandle(pid: number, recordedToken: string, signal: NodeJS.Signals | number, options?: {
-    platform?: NodeJS.Platform;
-    run?: NativeProcessHelperRunner;
-}): ProcessHandleSignalResult;
-//# sourceMappingURL=process-handle.d.ts.map

package/dist/core/agents/state/process-handle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-handle.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/process-handle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,wBAAwB,CAAC;CACnC;AAMD,MAAM,MAAM,yBAAyB,GAAG,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACP,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB,KACE;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAI9E,eAAO,MAAM,2BAA2B,+qCA2BvC,CAAC;AAEF,eAAO,MAAM,6BAA6B,qnEAqCzC,CAAC;AAwCF,kEAAkE;AAClE,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,yBAAqC,GACzC,MAAM,GAAG,IAAI,CAGf;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,EAC/B,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,GAAG,CAAC,EAAE,yBAAyB,CAAA;CAAO,GAC5E,yBAAyB,CAgB3B"}

package/dist/core/agents/state/process-handle.js

@@ -1,121 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { constants } from "node:os";
-// The helper owns the descriptor throughout observation and effect. The second
-// input line authorizes the effect; EOF releases the handle without signaling.
-export const LINUX_PROCESS_HANDLE_SCRIPT = `
-import json, os, pathlib, signal, sys
-result = {"sent": False, "verdict": "unknown"}
-fd = None
-try:
-    request = json.loads(sys.stdin.readline())
-    if not hasattr(os, "pidfd_open") or not hasattr(signal, "pidfd_send_signal"):
-        raise RuntimeError("pidfd support unavailable")
-    fd = os.pidfd_open(request["pid"])
-    stat = pathlib.Path("/proc/%d/stat" % request["pid"]).read_text()
-    ticks = stat[stat.rfind(") ") + 2:].split()[19]
-    boot = pathlib.Path("/proc/sys/kernel/random/boot_id").read_text().strip().replace("-", "")[:8]
-    token = "l%s.%s" % (boot, ticks)
-    result["token"] = token
-    recorded = request.get("token")
-    result["verdict"] = "same" if token == recorded else "different"
-    if request["mode"] == "signal" and result["verdict"] == "same":
-        print(json.dumps({"phase": "verified"}), flush=True)
-        if sys.stdin.readline().strip() == "signal":
-            signal.pidfd_send_signal(fd, request["signal"])
-            result["sent"] = True
-except Exception:
-    pass
-finally:
-    if fd is not None:
-        os.close(fd)
-print(json.dumps(result), flush=True)
-`;
-export const WINDOWS_PROCESS_HANDLE_SCRIPT = `
-$ErrorActionPreference = 'Stop'
-$result = @{ sent = $false; verdict = 'unknown' }
-$handle = [IntPtr]::Zero
-try {
-  Add-Type -TypeDefinition @'
-using System;
-using System.Runtime.InteropServices;
-public static class HarneryProcessHandle {
-  [DllImport("kernel32.dll", SetLastError=true)] public static extern IntPtr OpenProcess(uint access, bool inherit, uint processId);
-  [DllImport("kernel32.dll", SetLastError=true)] public static extern bool GetProcessTimes(IntPtr handle, out long creation, out long exit, out long kernel, out long user);
-  [DllImport("kernel32.dll", SetLastError=true)] public static extern bool TerminateProcess(IntPtr handle, uint exitCode);
-  [DllImport("kernel32.dll")] public static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);
-  [DllImport("kernel32.dll")] public static extern bool CloseHandle(IntPtr handle);
-}
-'@
-  $request = [Console]::In.ReadLine() | ConvertFrom-Json
-  $access = [uint32]0x101000
-  if ($request.mode -eq 'signal') { $access = $access -bor 1 }
-  $handle = [HarneryProcessHandle]::OpenProcess($access, $false, [uint32]$request.pid)
-  if ($handle -eq [IntPtr]::Zero) { throw 'process handle unavailable' }
-  [long]$creation = 0; [long]$exitTime = 0; [long]$kernel = 0; [long]$userTime = 0
-  if (-not [HarneryProcessHandle]::GetProcessTimes($handle, [ref]$creation, [ref]$exitTime, [ref]$kernel, [ref]$userTime)) { throw 'process time unavailable' }
-  $token = 'w' + $creation.ToString([Globalization.CultureInfo]::InvariantCulture)
-  $result.token = $token
-  $result.verdict = if ($token -ceq $request.token) { 'same' } else { 'different' }
-  if ($request.mode -eq 'signal' -and $result.verdict -eq 'same') {
-    [Console]::Out.WriteLine('{"phase":"verified"}')
-    [Console]::Out.Flush()
-    if ([Console]::In.ReadLine() -eq 'signal' -and [HarneryProcessHandle]::WaitForSingleObject($handle, 0) -eq 258) {
-      $result.sent = [HarneryProcessHandle]::TerminateProcess($handle, 1)
-    }
-  }
-} catch {} finally {
-  if ($handle -ne [IntPtr]::Zero) { [void][HarneryProcessHandle]::CloseHandle($handle) }
-}
-$result | ConvertTo-Json -Compress
-`;
-function runHelper(request, platform, run) {
-    const unknown = { sent: false, verdict: "unknown" };
-    if (!Number.isInteger(request.pid) || request.pid <= 0)
-        return unknown;
-    if (platform !== "linux" && platform !== "win32")
-        return unknown;
-    try {
-        const command = platform === "linux" ? "python3" : "powershell.exe";
-        const args = platform === "linux"
-            ? ["-I", "-c", LINUX_PROCESS_HANDLE_SCRIPT]
-            : ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", WINDOWS_PROCESS_HANDLE_SCRIPT];
-        const output = run(command, args, {
-            input: `${JSON.stringify(request)}\nsignal\n`,
-            encoding: "utf8",
-            timeout: 10_000,
-            maxBuffer: 64 * 1024,
-            windowsHide: true,
-        });
-        if (output.error || output.status !== 0)
-            return unknown;
-        const lines = String(output.stdout ?? "")
-            .trim()
-            .split(/\r?\n/);
-        const parsed = JSON.parse(lines.at(-1) ?? "");
-        if (typeof parsed.sent !== "boolean" ||
-            !["same", "different", "unknown"].includes(parsed.verdict) ||
-            (parsed.sent && parsed.verdict !== "same"))
-            return unknown;
-        return parsed;
-    }
-    catch {
-        return unknown;
-    }
-}
-/** Windows creation FILETIME, read from an OpenProcess handle. */
-export function windowsProcessStartToken(pid, run = spawnSync) {
-    const result = runHelper({ mode: "probe", pid }, "win32", run);
-    return typeof result.token === "string" && /^w\d+$/.test(result.token) ? result.token : null;
-}
-/** No numeric-PID signaling fallback is permitted when an exact handle fails. */
-export function signalProcessWithHandle(pid, recordedToken, signal, options = {}) {
-    const platform = options.platform ?? process.platform;
-    const number = typeof signal === "number" ? signal : constants.signals[signal];
-    if (!Number.isInteger(number) ||
-        number <= 0 ||
-        (platform === "linux" && !/^l[0-9a-f]{8}\.\d+$/.test(recordedToken)) ||
-        (platform === "win32" && (!/^w\d+$/.test(recordedToken) || ![9, 15].includes(number))))
-        return { sent: false, verdict: "unknown" };
-    const result = runHelper({ mode: "signal", pid, token: recordedToken, signal: number }, platform, options.run ?? spawnSync);
-    return { sent: result.sent, verdict: result.verdict };
-}

package/dist/core/agents/state/unchanged-file.d.ts

@@ -1,44 +0,0 @@
-export interface FileRevision {
-    readonly bytes: Buffer;
-    readonly dev: bigint;
-    readonly ino: bigint;
-    readonly size: bigint;
-    readonly mtimeNs: bigint;
-    readonly ctimeNs: bigint;
-}
-export type DeleteFileResult = {
-    state: "deleted" | "changed" | "missing" | "rejected";
-} | {
-    state: "recovery-required";
-    recoveryPath: string;
-    error?: string;
-} | {
-    state: "error";
-    recoveryPath?: string;
-    error: string;
-};
-export interface FileRecoveryResult {
-    state: "restored" | "retained" | "error";
-    recoveryPath: string;
-    sourcePath?: string;
-    error?: string;
-}
-/** A stable read of one regular file, including its exact bytes and revision. */
-export declare function captureFileRevision(filePath: string): FileRevision | null;
-export declare function fileRevisionMatches(filePath: string, expected: FileRevision): boolean;
-/**
- * Writers must publish by atomic rename, never by an open descriptor to the old
- * inode. The private directory is outside their publication namespace. Moving
- * the row gives deletion custody over that inode without owning its live name.
- * The caller owns the state parent and keeps its topology stable. Its platform
- * permissions define which principals can modify it; this protocol does not
- * exclude principals already authorized to change that parent.
- */
-export declare function deleteFileIfUnchanged(filePath: string, expected: FileRevision, validate: (pinned: FileRevision) => boolean): DeleteFileResult;
-/**
- * Recover same-host/platform/PID-namespace pins after process termination. File fsync
- * protects manifest contents; directory entries are not fsynced, so this does
- * not promise recovery after an OS crash or power loss.
- */
-export declare function recoverInterruptedFileDeletions(directoryPath: string, validate: (sourcePath: string) => boolean): FileRecoveryResult[];
-//# sourceMappingURL=unchanged-file.d.ts.map

package/dist/core/agents/state/unchanged-file.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unchanged-file.d.ts","sourceRoot":"","sources":["../../../../src/core/agents/state/unchanged-file.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAA;CAAE,GACzD;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAsED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAoCzE;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAGrF;AAsGD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,GAC1C,gBAAgB,CAmFlB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,GACxC,kBAAkB,EAAE,CA+FtB"}