instar 0.28.76 → 0.28.77

package/dist/threadline/SpawnLedger.js

@@ -0,0 +1,194 @@
+/**
+ * SpawnLedger — SQLite-backed compare-and-swap ledger for relay-spawned sessions.
+ *
+ * Implements Component A of the Threadline Relay-Spawn Ghost-Reply
+ * Containment Spec. The ledger is the spawn-creation step itself, not a
+ * post-hoc check: tryReserve() atomically claims an eventId or returns null
+ * if another spawn already claimed it. This is the idempotency primitive
+ * that makes "Spawned session for X (twice)" structurally impossible.
+ *
+ * Per spec §Component A:
+ *  - Backed by SQLite (WAL mode, flock-coordinated for second-instar-on-host)
+ *  - Per-spawn HMAC nonce generated here, never written to a path the
+ *    spawned session can read after launch (handed to the session via FD-3
+ *    by SpawnNonce.ts).
+ *  - Per-peer rolling rate cap (1000 spawns / 24h) enforced on tryReserve
+ *  - Global hard cap of 100k rows; prune by TTL (30d) via a background job.
+ *
+ * Authority classification (per docs/signal-vs-authority.md): structural
+ * idempotency-key dedup at the transport layer. Permitted authority — not
+ * a judgment call, mechanics.
+ */
+import Database from 'better-sqlite3';
+import crypto from 'node:crypto';
+import path from 'node:path';
+import fs from 'node:fs';
+const DEFAULTS = {
+    perPeerCap: 1000,
+    perPeerWindowMs: 24 * 60 * 60 * 1000,
+    globalCap: 100_000,
+};
+// ── Implementation ───────────────────────────────────────────────────
+export class SpawnLedger {
+    db;
+    opts;
+    constructor(dbPath, opts = {}) {
+        fs.mkdirSync(path.dirname(dbPath), { recursive: true });
+        this.db = new Database(dbPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('synchronous = NORMAL');
+        this.db.pragma('foreign_keys = ON');
+        this.opts = { ...DEFAULTS, ...opts };
+        this.applySchema();
+    }
+    applySchema() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS spawn_ledger (
+        eventId TEXT PRIMARY KEY,
+        peerId TEXT NOT NULL,
+        spawnNonce BLOB NOT NULL,
+        spawnedAt INTEGER NOT NULL,
+        status TEXT NOT NULL CHECK (status IN ('spawning','verified','failed','completed')),
+        terminalAt INTEGER,
+        failureReason TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_spawn_ledger_peer_time
+        ON spawn_ledger (peerId, spawnedAt);
+      CREATE INDEX IF NOT EXISTS idx_spawn_ledger_status_time
+        ON spawn_ledger (status, spawnedAt);
+    `);
+    }
+    /**
+     * Atomically reserve a spawn slot for `eventId`. Returns the spawn nonce
+     * the caller must hand to the spawned session via FD-3, or a collision
+     * with the reason.
+     *
+     * This is the single point where a spawn is decided. If two relay
+     * threads race on the same eventId, exactly one tryReserve() returns
+     * {reserved: true}; the other gets {reserved: false, reason: 'duplicate-event'}.
+     */
+    tryReserve(eventId, peerId, now = Date.now()) {
+        if (!eventId || !peerId) {
+            throw new Error('SpawnLedger.tryReserve requires eventId and peerId');
+        }
+        // Global cap check (cheap COUNT — index on status covers it).
+        const total = this.db
+            .prepare('SELECT COUNT(*) AS n FROM spawn_ledger')
+            .get();
+        if (total.n >= this.opts.globalCap) {
+            return { reserved: false, reason: 'ledger-full' };
+        }
+        // Per-peer rolling rate cap.
+        const windowStart = now - this.opts.perPeerWindowMs;
+        const peerRecent = this.db
+            .prepare('SELECT COUNT(*) AS n FROM spawn_ledger WHERE peerId = ? AND spawnedAt >= ?')
+            .get(peerId, windowStart);
+        if (peerRecent.n >= this.opts.perPeerCap) {
+            return { reserved: false, reason: 'peer-rate-limit' };
+        }
+        const spawnNonce = crypto.randomBytes(32);
+        const insert = this.db.prepare(`INSERT INTO spawn_ledger (eventId, peerId, spawnNonce, spawnedAt, status, terminalAt, failureReason)
+       VALUES (?, ?, ?, ?, 'spawning', NULL, NULL)`);
+        try {
+            insert.run(eventId, peerId, spawnNonce, now);
+        }
+        catch (err) {
+            // SQLite UNIQUE constraint on PRIMARY KEY → another spawn won the race.
+            if (err instanceof Error &&
+                /UNIQUE|PRIMARY KEY/.test(err.message)) {
+                const existing = this.get(eventId);
+                return {
+                    reserved: false,
+                    reason: 'duplicate-event',
+                    existing: existing ?? undefined,
+                };
+            }
+            throw err;
+        }
+        const row = this.get(eventId);
+        return { reserved: true, spawnNonce, row };
+    }
+    /**
+     * Mark a reserved spawn as having moved to a terminal state. Verified =
+     * heartbeat HMAC validated. Failed = watchdog signal triggered. Completed
+     * = session exited cleanly.
+     */
+    markStatus(eventId, status, failureReason = null, now = Date.now()) {
+        const stmt = this.db.prepare(`UPDATE spawn_ledger
+         SET status = ?, terminalAt = ?, failureReason = ?
+       WHERE eventId = ? AND status != ?`);
+        const result = stmt.run(status, now, failureReason, eventId, status);
+        return result.changes > 0;
+    }
+    get(eventId) {
+        const row = this.db
+            .prepare('SELECT * FROM spawn_ledger WHERE eventId = ?')
+            .get(eventId);
+        return row ?? null;
+    }
+    /**
+     * Verify a heartbeat HMAC against the stored spawn nonce.
+     * Returns true if valid; false if no row or mismatch.
+     */
+    verifyHeartbeatHmac(eventId, payload, presentedHmac) {
+        const row = this.get(eventId);
+        if (!row)
+            return false;
+        const expected = crypto
+            .createHmac('sha256', row.spawnNonce)
+            .update(payload)
+            .digest('hex');
+        // Constant-time compare to avoid timing side channel.
+        const a = Buffer.from(expected, 'hex');
+        const b = Buffer.from(presentedHmac, 'hex');
+        if (a.length !== b.length)
+            return false;
+        return crypto.timingSafeEqual(a, b);
+    }
+    /**
+     * Prune rows older than `olderThanMs` AND in a terminal state.
+     * Spawning rows are NEVER pruned (they may still be in flight).
+     * Returns count of rows removed.
+     */
+    pruneTerminal(olderThanMs, now = Date.now()) {
+        const cutoff = now - olderThanMs;
+        const result = this.db
+            .prepare(`DELETE FROM spawn_ledger
+         WHERE status != 'spawning'
+           AND terminalAt IS NOT NULL
+           AND terminalAt < ?`)
+            .run(cutoff);
+        return result.changes;
+    }
+    /**
+     * List ALL rows currently in 'spawning' state, regardless of age.
+     * Used by HeartbeatWatchdog which applies its own grace-window filter.
+     */
+    listSpawning() {
+        return this.db
+            .prepare(`SELECT * FROM spawn_ledger WHERE status = 'spawning'`)
+            .all();
+    }
+    /** Sweep stale 'spawning' rows (heartbeat never confirmed, no terminal mark). */
+    sweepStaleSpawning(staleAfterMs, now = Date.now()) {
+        const cutoff = now - staleAfterMs;
+        const rows = this.db
+            .prepare(`SELECT * FROM spawn_ledger
+         WHERE status = 'spawning' AND spawnedAt < ?`)
+            .all(cutoff);
+        return rows;
+    }
+    count() {
+        return this.db.prepare('SELECT COUNT(*) AS n FROM spawn_ledger').get().n;
+    }
+    close() {
+        try {
+            this.db.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch {
+            /* db may already be closed; safe to ignore */
+        }
+        this.db.close();
+    }
+}
+//# sourceMappingURL=SpawnLedger.js.map

package/dist/threadline/SpawnLedger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnLedger.js","sourceRoot":"","sources":["../../src/threadline/SpawnLedger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAuCzB,MAAM,QAAQ,GAAG;IACf,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACpC,SAAS,EAAE,OAAO;CACV,CAAC;AAEX,wEAAwE;AAExE,MAAM,OAAO,WAAW;IACd,EAAE,CAAoB;IACtB,IAAI,CAA+B;IAE3C,YAAY,MAAc,EAAE,OAA2B,EAAE;QACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;KAcZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,UAAU,CAAC,OAAe,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,wCAAwC,CAAC;aACjD,GAAG,EAAmB,CAAC;QAC1B,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACnC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACpD,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;aACvB,OAAO,CACN,4EAA4E,CAC7E;aACA,GAAG,CAAC,MAAM,EAAE,WAAW,CAAkB,CAAC;QAC7C,IAAI,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B;mDAC6C,CAC9C,CAAC;QACF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,wEAAwE;YACxE,IACE,GAAG,YAAY,KAAK;gBACpB,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EACtC,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,QAAQ,IAAI,SAAS;iBAChC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,UAAU,CACR,OAAe,EACf,MAAwC,EACxC,gBAA+B,IAAI,EACnC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B;;yCAEmC,CACpC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,OAAO,CAA+B,CAAC;QAC9C,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,mBAAmB,CACjB,OAAe,EACf,OAAe,EACf,aAAqB;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM;aACpB,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,sDAAsD;QACtD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,WAAmB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;;8BAGsB,CACvB;aACA,GAAG,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,EAAsB,CAAC;IAC/B,CAAC;IAED,iFAAiF;IACjF,kBAAkB,CAAC,YAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,GAAG,GAAG,YAAY,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;qDAC6C,CAC9C;aACA,GAAG,CAAC,MAAM,CAAqB,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK;QACH,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/threadline/SpawnNonce.d.ts

@@ -0,0 +1,49 @@
+/**
+ * SpawnNonce — relay-side helpers for binding a SpawnLedger reservation
+ * to a freshly-spawned session via FD 3 inheritance, and for deriving a
+ * deterministic eventId from envelope material.
+ *
+ * Component A glue for RELAY-SPAWN-GHOST-REPLY-CONTAINMENT-SPEC. The
+ * reader counterpart (`readSpawnNonceFromFd3`) lives in HeartbeatWriter
+ * since it runs in the spawned session, not the relay.
+ *
+ * Why FD 3 and not env: round-1 review surfaced that env vars propagate
+ * to every fork-helper a session may spawn (build tools, shells), giving
+ * those processes the nonce. FD 3 is single-read by the spawned process
+ * and is closed by the relay immediately after handoff.
+ */
+import type { SpawnOptions, StdioOptions } from 'node:child_process';
+import type { MessageEnvelope } from '../messaging/types.js';
+/**
+ * Deterministic eventId from envelope material. Bound to:
+ *   - sender identity (signedBy or hmacBy on transport metadata)
+ *   - the transport-layer nonce (already used for replay prevention)
+ *   - the application-level message id
+ *
+ * Why this triple: any one alone is insufficient. The transport nonce is
+ * unique per delivery but not authenticated to a specific message body
+ * (a relay or attacker could re-route the same nonce with a different
+ * payload). Combining with the signed-by + message id binds the eventId
+ * to "this exact message from this exact sender via this exact relay
+ * delivery". Replays produce the same eventId → ledger CAS rejects.
+ */
+export declare function deriveEventId(envelope: MessageEnvelope): string;
+export interface NonceFdHandle {
+    /** Read FD to be passed as stdio[3] to child_process.spawn(). */
+    readFd: number;
+    /** Call after spawn returns to release the relay-side handle. */
+    close: () => void;
+}
+export declare function prepareNonceFd(spawnNonce: Buffer): NonceFdHandle;
+/**
+ * Build a stdio array suitable for child_process.spawn() that inherits
+ * stdin/stdout/stderr from the parent and binds FD 3 to the nonce read
+ * end. Caller owns calling handle.close() AFTER spawn returns.
+ */
+export declare function stdioWithNonceFd(handle: NonceFdHandle): StdioOptions;
+/**
+ * Convenience: enrich a SpawnOptions with FD-3 nonce binding. Returns a
+ * new options object plus the handle to close after spawn.
+ */
+export declare function withNonceFd(baseOpts: SpawnOptions, handle: NonceFdHandle): SpawnOptions;
+//# sourceMappingURL=SpawnNonce.d.ts.map

package/dist/threadline/SpawnNonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnNonce.d.ts","sourceRoot":"","sources":["../../src/threadline/SpawnNonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAErE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,eAAe,GAAG,MAAM,CAS/D;AAkBD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CA4BhE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAEpE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,aAAa,GACpB,YAAY,CAKd"}

package/dist/threadline/SpawnNonce.js

@@ -0,0 +1,99 @@
+/**
+ * SpawnNonce — relay-side helpers for binding a SpawnLedger reservation
+ * to a freshly-spawned session via FD 3 inheritance, and for deriving a
+ * deterministic eventId from envelope material.
+ *
+ * Component A glue for RELAY-SPAWN-GHOST-REPLY-CONTAINMENT-SPEC. The
+ * reader counterpart (`readSpawnNonceFromFd3`) lives in HeartbeatWriter
+ * since it runs in the spawned session, not the relay.
+ *
+ * Why FD 3 and not env: round-1 review surfaced that env vars propagate
+ * to every fork-helper a session may spawn (build tools, shells), giving
+ * those processes the nonce. FD 3 is single-read by the spawned process
+ * and is closed by the relay immediately after handoff.
+ */
+import crypto from 'node:crypto';
+/**
+ * Deterministic eventId from envelope material. Bound to:
+ *   - sender identity (signedBy or hmacBy on transport metadata)
+ *   - the transport-layer nonce (already used for replay prevention)
+ *   - the application-level message id
+ *
+ * Why this triple: any one alone is insufficient. The transport nonce is
+ * unique per delivery but not authenticated to a specific message body
+ * (a relay or attacker could re-route the same nonce with a different
+ * payload). Combining with the signed-by + message id binds the eventId
+ * to "this exact message from this exact sender via this exact relay
+ * delivery". Replays produce the same eventId → ledger CAS rejects.
+ */
+export function deriveEventId(envelope) {
+    const t = envelope.transport;
+    const signer = t.signedBy ?? t.hmacBy ?? '<unsigned>';
+    const nonce = t.nonce ?? '<no-nonce>';
+    const msgId = envelope.message?.id ?? '<no-msg-id>';
+    return crypto
+        .createHash('sha256')
+        .update(`${signer}\x00${nonce}\x00${msgId}`)
+        .digest('hex');
+}
+/**
+ * Open a pipe, write the per-spawn nonce into it, return both ends so
+ * the caller can hand the read end to child_process.spawn() via FD 3
+ * and close the write end after spawn returns.
+ *
+ * Node's child_process does not expose POSIX pipe(2) directly, so we use
+ * a tmpfile + open-for-read pattern as a portable substitute. The file
+ * is unlinked immediately after open so even root cannot read it from
+ * disk after the spawn returns.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { SafeFsExecutor } from '../core/SafeFsExecutor.js';
+export function prepareNonceFd(spawnNonce) {
+    if (spawnNonce.length !== 32) {
+        throw new Error('SpawnNonce.prepareNonceFd requires a 32-byte nonce');
+    }
+    // tmpfile in os.tmpdir(); 0o600; immediately unlinked after open.
+    const tmp = path.join(os.tmpdir(), `instar-spawn-nonce-${process.pid}-${crypto.randomBytes(6).toString('hex')}`);
+    fs.writeFileSync(tmp, spawnNonce, { mode: 0o600 });
+    const readFd = fs.openSync(tmp, 'r');
+    // Unlink immediately; the open FD keeps the inode alive only as long
+    // as one of the processes holds it.
+    try {
+        SafeFsExecutor.safeUnlinkSync(tmp, { operation: 'SpawnNonce.prepareNonceFd' });
+    }
+    catch {
+        /* best-effort */
+    }
+    return {
+        readFd,
+        close: () => {
+            try {
+                fs.closeSync(readFd);
+            }
+            catch {
+                /* already closed */
+            }
+        },
+    };
+}
+/**
+ * Build a stdio array suitable for child_process.spawn() that inherits
+ * stdin/stdout/stderr from the parent and binds FD 3 to the nonce read
+ * end. Caller owns calling handle.close() AFTER spawn returns.
+ */
+export function stdioWithNonceFd(handle) {
+    return ['inherit', 'inherit', 'inherit', handle.readFd];
+}
+/**
+ * Convenience: enrich a SpawnOptions with FD-3 nonce binding. Returns a
+ * new options object plus the handle to close after spawn.
+ */
+export function withNonceFd(baseOpts, handle) {
+    return {
+        ...baseOpts,
+        stdio: stdioWithNonceFd(handle),
+    };
+}
+//# sourceMappingURL=SpawnNonce.js.map

package/dist/threadline/SpawnNonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpawnNonce.js","sourceRoot":"","sources":["../../src/threadline/SpawnNonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAKjC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,QAAyB;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,aAAa,CAAC;IACpD,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,MAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAS3D,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,kEAAkE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,EAAE,CAAC,MAAM,EAAE,EACX,sBAAsB,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAC7E,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,qEAAqE;IACrE,oCAAoC;IACpC,IAAI,CAAC;QACH,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,QAAsB,EACtB,MAAqB;IAErB,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/threadline/TelegramBridgeConfig.d.ts

@@ -0,0 +1,79 @@
+/**
+ * TelegramBridgeConfig — settings surface for the threadline → telegram bridge.
+ *
+ * The bridge mirrors threadline messages into per-thread Telegram topics so the
+ * user has visibility into agent-to-agent conversations. To avoid noise, all
+ * topic-creating behavior is gated by user-controlled toggles. This class is
+ * the single source of truth for those toggles and the per-remote-agent
+ * allow/deny list.
+ *
+ * Stored under `threadline.telegramBridge` in the agent's `.instar/config.json`.
+ * Reads and writes go through LiveConfig so changes from the dashboard are
+ * picked up without a server restart.
+ *
+ * Defaults — the noise budget:
+ *   enabled            = false   master kill-switch (default OFF)
+ *   autoCreateTopics   = false   never spawn a brand-new topic unless an allow-list entry says so
+ *   mirrorExisting     = true    once a topic exists for a thread, mirror traffic into it
+ *   allowList          = []      remote-agent identifiers that always get auto-created topics
+ *   denyList           = []      remote-agent identifiers that never get auto-created topics
+ *
+ * Allow-list takes precedence over deny-list when both contain the same id.
+ */
+import { EventEmitter } from 'node:events';
+import type { LiveConfig } from '../config/LiveConfig.js';
+export interface TelegramBridgeSettings {
+    enabled: boolean;
+    autoCreateTopics: boolean;
+    mirrorExisting: boolean;
+    allowList: string[];
+    denyList: string[];
+}
+export declare const DEFAULT_TELEGRAM_BRIDGE_SETTINGS: TelegramBridgeSettings;
+export type TelegramBridgeConfigChangeEvent = {
+    field: keyof TelegramBridgeSettings;
+    before: unknown;
+    after: unknown;
+};
+export declare class TelegramBridgeConfig extends EventEmitter {
+    private readonly liveConfig;
+    constructor(liveConfig: LiveConfig);
+    getSettings(): TelegramBridgeSettings;
+    /**
+     * Apply a partial update. Returns the full settings after the update.
+     * Validation: booleans must be boolean; lists must be string[].
+     */
+    update(patch: Partial<TelegramBridgeSettings>): TelegramBridgeSettings;
+    addToAllowList(agentId: string): TelegramBridgeSettings;
+    removeFromAllowList(agentId: string): TelegramBridgeSettings;
+    addToDenyList(agentId: string): TelegramBridgeSettings;
+    removeFromDenyList(agentId: string): TelegramBridgeSettings;
+    /**
+     * Decide whether a brand-new Telegram topic should be auto-created for an
+     * inbound message from `remoteAgent`. The bridge module calls this on every
+     * inbound message that doesn't already have a bridged topic.
+     *
+     * Decision order (first match wins):
+     *   1. If bridge is disabled overall → false.
+     *   2. If allowList contains the agent (any matching id) → true. (allow > deny)
+     *   3. If denyList contains the agent → false.
+     *   4. Otherwise fall through to autoCreateTopics (the global default).
+     *
+     * `remoteAgent` is an opaque identifier — typically the remote agent's
+     * fingerprint, but the matcher accepts any string the dashboard surfaces
+     * (display name, fingerprint prefix). Allow/deny matching is case-sensitive
+     * exact-match.
+     */
+    shouldAutoCreateTopic(remoteAgent: string): boolean;
+    /**
+     * Decide whether to mirror an inbound/outbound message into a topic that
+     * already exists for this thread. Bridge module calls this when there's a
+     * known topic-id binding for the thread.
+     *
+     * Mirroring is independent of the deny-list — once the user has a topic
+     * for a thread (which they explicitly created or allow-listed), traffic
+     * keeps flowing unless the master switch is off or `mirrorExisting` is off.
+     */
+    shouldMirrorIntoExistingTopic(): boolean;
+}
+//# sourceMappingURL=TelegramBridgeConfig.d.ts.map

package/dist/threadline/TelegramBridgeConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelegramBridgeConfig.d.ts","sourceRoot":"","sources":["../../src/threadline/TelegramBridgeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,eAAO,MAAM,gCAAgC,EAAE,sBAM9C,CAAC;AAQF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,KAAK,EAAE,MAAM,sBAAsB,CAAC;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,qBAAa,oBAAqB,SAAQ,YAAY;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,UAAU;IAInD,WAAW,IAAI,sBAAsB;IAUrC;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,sBAAsB;IAuCtE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB;IAMvD,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB;IAK5D,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB;IAMtD,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB;IAK3D;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAQnD;;;;;;;;OAQG;IACH,6BAA6B,IAAI,OAAO;CAIzC"}

package/dist/threadline/TelegramBridgeConfig.js

@@ -0,0 +1,168 @@
+/**
+ * TelegramBridgeConfig — settings surface for the threadline → telegram bridge.
+ *
+ * The bridge mirrors threadline messages into per-thread Telegram topics so the
+ * user has visibility into agent-to-agent conversations. To avoid noise, all
+ * topic-creating behavior is gated by user-controlled toggles. This class is
+ * the single source of truth for those toggles and the per-remote-agent
+ * allow/deny list.
+ *
+ * Stored under `threadline.telegramBridge` in the agent's `.instar/config.json`.
+ * Reads and writes go through LiveConfig so changes from the dashboard are
+ * picked up without a server restart.
+ *
+ * Defaults — the noise budget:
+ *   enabled            = false   master kill-switch (default OFF)
+ *   autoCreateTopics   = false   never spawn a brand-new topic unless an allow-list entry says so
+ *   mirrorExisting     = true    once a topic exists for a thread, mirror traffic into it
+ *   allowList          = []      remote-agent identifiers that always get auto-created topics
+ *   denyList           = []      remote-agent identifiers that never get auto-created topics
+ *
+ * Allow-list takes precedence over deny-list when both contain the same id.
+ */
+import { EventEmitter } from 'node:events';
+export const DEFAULT_TELEGRAM_BRIDGE_SETTINGS = {
+    enabled: false,
+    autoCreateTopics: false,
+    mirrorExisting: true,
+    allowList: [],
+    denyList: [],
+};
+const KEY_ENABLED = 'threadline.telegramBridge.enabled';
+const KEY_AUTO_CREATE = 'threadline.telegramBridge.autoCreateTopics';
+const KEY_MIRROR_EXISTING = 'threadline.telegramBridge.mirrorExisting';
+const KEY_ALLOW_LIST = 'threadline.telegramBridge.allowList';
+const KEY_DENY_LIST = 'threadline.telegramBridge.denyList';
+export class TelegramBridgeConfig extends EventEmitter {
+    liveConfig;
+    constructor(liveConfig) {
+        super();
+        this.liveConfig = liveConfig;
+    }
+    getSettings() {
+        return {
+            enabled: this.liveConfig.get(KEY_ENABLED, DEFAULT_TELEGRAM_BRIDGE_SETTINGS.enabled),
+            autoCreateTopics: this.liveConfig.get(KEY_AUTO_CREATE, DEFAULT_TELEGRAM_BRIDGE_SETTINGS.autoCreateTopics),
+            mirrorExisting: this.liveConfig.get(KEY_MIRROR_EXISTING, DEFAULT_TELEGRAM_BRIDGE_SETTINGS.mirrorExisting),
+            allowList: [...this.liveConfig.get(KEY_ALLOW_LIST, DEFAULT_TELEGRAM_BRIDGE_SETTINGS.allowList)],
+            denyList: [...this.liveConfig.get(KEY_DENY_LIST, DEFAULT_TELEGRAM_BRIDGE_SETTINGS.denyList)],
+        };
+    }
+    /**
+     * Apply a partial update. Returns the full settings after the update.
+     * Validation: booleans must be boolean; lists must be string[].
+     */
+    update(patch) {
+        const before = this.getSettings();
+        if (patch.enabled !== undefined) {
+            if (typeof patch.enabled !== 'boolean')
+                throw new Error('enabled must be boolean');
+            this.liveConfig.set(KEY_ENABLED, patch.enabled);
+        }
+        if (patch.autoCreateTopics !== undefined) {
+            if (typeof patch.autoCreateTopics !== 'boolean')
+                throw new Error('autoCreateTopics must be boolean');
+            this.liveConfig.set(KEY_AUTO_CREATE, patch.autoCreateTopics);
+        }
+        if (patch.mirrorExisting !== undefined) {
+            if (typeof patch.mirrorExisting !== 'boolean')
+                throw new Error('mirrorExisting must be boolean');
+            this.liveConfig.set(KEY_MIRROR_EXISTING, patch.mirrorExisting);
+        }
+        if (patch.allowList !== undefined) {
+            if (!Array.isArray(patch.allowList) || !patch.allowList.every(s => typeof s === 'string')) {
+                throw new Error('allowList must be string[]');
+            }
+            this.liveConfig.set(KEY_ALLOW_LIST, dedupeAndTrim(patch.allowList));
+        }
+        if (patch.denyList !== undefined) {
+            if (!Array.isArray(patch.denyList) || !patch.denyList.every(s => typeof s === 'string')) {
+                throw new Error('denyList must be string[]');
+            }
+            this.liveConfig.set(KEY_DENY_LIST, dedupeAndTrim(patch.denyList));
+        }
+        const after = this.getSettings();
+        for (const k of Object.keys(after)) {
+            const b = before[k];
+            const a = after[k];
+            const changed = Array.isArray(b) || Array.isArray(a)
+                ? JSON.stringify(b) !== JSON.stringify(a)
+                : b !== a;
+            if (changed)
+                this.emit('change', { field: k, before: b, after: a });
+        }
+        return after;
+    }
+    addToAllowList(agentId) {
+        const list = this.getSettings().allowList;
+        if (list.includes(agentId))
+            return this.getSettings();
+        return this.update({ allowList: [...list, agentId] });
+    }
+    removeFromAllowList(agentId) {
+        const list = this.getSettings().allowList.filter(a => a !== agentId);
+        return this.update({ allowList: list });
+    }
+    addToDenyList(agentId) {
+        const list = this.getSettings().denyList;
+        if (list.includes(agentId))
+            return this.getSettings();
+        return this.update({ denyList: [...list, agentId] });
+    }
+    removeFromDenyList(agentId) {
+        const list = this.getSettings().denyList.filter(a => a !== agentId);
+        return this.update({ denyList: list });
+    }
+    /**
+     * Decide whether a brand-new Telegram topic should be auto-created for an
+     * inbound message from `remoteAgent`. The bridge module calls this on every
+     * inbound message that doesn't already have a bridged topic.
+     *
+     * Decision order (first match wins):
+     *   1. If bridge is disabled overall → false.
+     *   2. If allowList contains the agent (any matching id) → true. (allow > deny)
+     *   3. If denyList contains the agent → false.
+     *   4. Otherwise fall through to autoCreateTopics (the global default).
+     *
+     * `remoteAgent` is an opaque identifier — typically the remote agent's
+     * fingerprint, but the matcher accepts any string the dashboard surfaces
+     * (display name, fingerprint prefix). Allow/deny matching is case-sensitive
+     * exact-match.
+     */
+    shouldAutoCreateTopic(remoteAgent) {
+        const s = this.getSettings();
+        if (!s.enabled)
+            return false;
+        if (s.allowList.includes(remoteAgent))
+            return true;
+        if (s.denyList.includes(remoteAgent))
+            return false;
+        return s.autoCreateTopics;
+    }
+    /**
+     * Decide whether to mirror an inbound/outbound message into a topic that
+     * already exists for this thread. Bridge module calls this when there's a
+     * known topic-id binding for the thread.
+     *
+     * Mirroring is independent of the deny-list — once the user has a topic
+     * for a thread (which they explicitly created or allow-listed), traffic
+     * keeps flowing unless the master switch is off or `mirrorExisting` is off.
+     */
+    shouldMirrorIntoExistingTopic() {
+        const s = this.getSettings();
+        return s.enabled && s.mirrorExisting;
+    }
+}
+function dedupeAndTrim(list) {
+    const seen = new Set();
+    const out = [];
+    for (const raw of list) {
+        const v = raw.trim();
+        if (!v || seen.has(v))
+            continue;
+        seen.add(v);
+        out.push(v);
+    }
+    return out;
+}
+//# sourceMappingURL=TelegramBridgeConfig.js.map

package/dist/threadline/TelegramBridgeConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelegramBridgeConfig.js","sourceRoot":"","sources":["../../src/threadline/TelegramBridgeConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3C,MAAM,CAAC,MAAM,gCAAgC,GAA2B;IACtE,OAAO,EAAE,KAAK;IACd,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,EAAE;IACb,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,WAAW,GAAG,mCAAmC,CAAC;AACxD,MAAM,eAAe,GAAG,4CAA4C,CAAC;AACrE,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AACvE,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAQ3D,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IACvB;IAA7B,YAA6B,UAAsB;QACjD,KAAK,EAAE,CAAC;QADmB,eAAU,GAAV,UAAU,CAAY;IAEnD,CAAC;IAED,WAAW;QACT,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAU,WAAW,EAAE,gCAAgC,CAAC,OAAO,CAAC;YAC5F,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAU,eAAe,EAAE,gCAAgC,CAAC,gBAAgB,CAAC;YAClH,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAU,mBAAmB,EAAE,gCAAgC,CAAC,cAAc,CAAC;YAClH,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAW,cAAc,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;YACzG,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAW,aAAa,EAAE,gCAAgC,CAAC,QAAQ,CAAC,CAAC;SACvG,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAsC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAElC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACnF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACjG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAqC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACZ,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc,CAAC,OAAe;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,WAAmB;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,OAAO,CAAC,CAAC,gBAAgB,CAAC;IAC5B,CAAC;IAED;;;;;;;;OAQG;IACH,6BAA6B;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,cAAc,CAAC;IACvC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/threadline/ThreadlineBootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ThreadlineBootstrap.d.ts","sourceRoot":"","sources":["../../src/threadline/ThreadlineBootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAI3D,MAAM,WAAW,yBAAyB;IACxC,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,UAAU,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IAC/C,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,8CAA8C;IAC9C,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,8BAA8B;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,wBAAwB;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,iDAAiD;IACjD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,oBAAoB;IACpB,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAQD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAsPpC"}
+{"version":3,"file":"ThreadlineBootstrap.d.ts","sourceRoot":"","sources":["../../src/threadline/ThreadlineBootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAK3D,MAAM,WAAW,yBAAyB;IACxC,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,UAAU,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IAC/C,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC,8CAA8C;IAC9C,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,8BAA8B;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,wBAAwB;IACxB,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,+CAA+C;IAC/C,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,iDAAiD;IACjD,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,oBAAoB;IACpB,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAQD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAqPpC"}

package/dist/threadline/ThreadlineBootstrap.js

@@ -22,6 +22,7 @@ import { generateIdentityKeyPair } from './ThreadlineCrypto.js';
 import { ThreadlineClient } from './client/ThreadlineClient.js';
 import { InboundMessageGate } from './InboundMessageGate.js';
 import { AgentTrustManager } from './AgentTrustManager.js';
+import { SafeFsExecutor } from '../core/SafeFsExecutor.js';
 // ── Constants ────────────────────────────────────────────────────────
 const IDENTITY_KEY_FILE = 'identity-keys.json';
 // ── Implementation ───────────────────────────────────────────────────
@@ -91,9 +92,8 @@ export async function bootstrapThreadline(config) {
             }
             catch {
                 // PID file exists but process is dead — clean up stale PID
-                // safe-git-allow: incremental-migration
                 try {
-                    fs.unlinkSync(daemonPidPath);
+                    SafeFsExecutor.safeUnlinkSync(daemonPidPath, { operation: 'src/threadline/ThreadlineBootstrap.ts:153' });
                 }
                 catch { /* ignore */ }
             }