instar 1.3.1661 → 1.3.1663

package/dist/core/claudeKeyRecovery.js

@@ -0,0 +1,178 @@
+/**
+ * claudeKeyRecovery — what a conversation restarted after a dead sign-in key is told, and how we
+ * check it answered (follow-up to spec cloud-key-internal-calls, Part 2; upgrades/side-effects/cloud-key-recovery-reply.md).
+ *
+ * The 2026-11-04 nimbus drill: the restarted sessions got a bare prompt with no reply command and
+ * no copy of the held messages. Both posted their channel id as the reply; one person's messages
+ * were never answered while the restart reported success. So the prompt now carries the held
+ * messages and the exact reply command, and success means an answer seen in the conversation.
+ *
+ * Pure: no I/O, so both platforms and both sides of every decision are unit-tested.
+ */
+/** A Slack id the agent printed instead of a reply. Never counts as an answer. */
+const BARE_CHANNEL_ID = /^\s*[CDG](?=[A-Z0-9]*[0-9])[A-Z0-9]{8,11}\s*$/;
+function isFixedNotice(text, fixedTexts) {
+    const t = text.trim();
+    return fixedTexts.some((f) => f.trim() === t || t.startsWith(f.trim()));
+}
+/** An agent line that is a real reply: not one of the server's fixed notices, not a bare id. */
+function isRealAgentReply(line, fixedTexts) {
+    return line.fromAgent && line.text.trim().length > 0 && !BARE_CHANNEL_ID.test(line.text) && !isFixedNotice(line.text, fixedTexts);
+}
+/**
+ * Messages from people after the agent's last real reply. The server's own key notices don't
+ * count as replies: they say the agent can't answer, so what came before them is still held.
+ */
+export function heldMessages(lines, fixedTexts) {
+    const sorted = [...lines].sort((a, b) => a.at - b.at);
+    let lastReply = -1;
+    sorted.forEach((line, i) => { if (isRealAgentReply(line, fixedTexts))
+        lastReply = i; });
+    return sorted.slice(lastReply + 1)
+        .filter((l) => !l.fromAgent && l.text.trim().length > 0)
+        .map((l) => ({ who: l.who, text: l.text, at: l.at }));
+}
+/** True once the agent wrote a real reply after `sinceMs`. */
+export function answeredSince(lines, sinceMs, fixedTexts) {
+    return lines.some((l) => l.at >= sinceMs && isRealAgentReply(l, fixedTexts));
+}
+/**
+ * A Slack conversation as lines. Only this agent's bot user is the agent (another bot answering is
+ * not a reply), and of its posts only a session's count: the server's own (standby notes,
+ * notices) come from the same bot user and are nobody answering. Only the agent's authorized
+ * people are waiting. Everything else is left out.
+ */
+export function slackConversationLines(messages, opts) {
+    const lines = [];
+    for (const m of messages) {
+        if (m.unaddressed)
+            continue;
+        if (m.subtype && !['thread_broadcast', 'file_share', 'bot_message'].includes(m.subtype))
+            continue;
+        const at = Math.round(parseFloat(m.ts) * 1000);
+        if (!Number.isFinite(at))
+            continue;
+        const fromAgent = opts.botUserId !== null ? m.user === opts.botUserId : Boolean(m.bot_id);
+        if (fromAgent) {
+            if (!opts.isServerPost(m.ts))
+                lines.push({ at, fromAgent: true, who: 'agent', text: m.text ?? '' });
+            continue;
+        }
+        if (!m.bot_id && m.user && opts.isPerson(m.user))
+            lines.push({ at, fromAgent: false, who: m.user, text: m.text ?? '' });
+    }
+    return lines;
+}
+/** The reply command for this conversation, exactly as the agent should run it. */
+export function replyCommand(channel) {
+    if (channel.platform === 'slack') {
+        // A bound Slack session's binding picks the destination: no channel argument.
+        return ["cat <<'EOF' | .instar/scripts/slack-reply.sh", 'Your reply here', 'EOF'];
+    }
+    return [`cat <<'EOF' | .instar/scripts/telegram-reply.sh ${channel.topicId}`, 'Your reply here', 'EOF'];
+}
+const MAX_HELD = 20;
+const MAX_HELD_CHARS = 2000;
+/**
+ * The prompt a restarted conversation gets, with the held messages quoted and the reply command
+ * spelled out. A Slack prompt carries the `[slack:<channel>]` tag of an ordinary inbound message.
+ */
+export function buildKeyRecoveryPrompt(channel, held) {
+    // The Telegram respawn tags the message itself; the Slack respawn passes it through as is.
+    const tag = channel.platform === 'slack' ? `[slack:${channel.channelId}] ` : '';
+    const lines = [
+        `${tag}Your sign-in key stopped working for a while and has now been fixed. ` +
+            'Messages sent during that time were not answered.',
+        '',
+    ];
+    const shown = held.slice(-MAX_HELD);
+    if (shown.length > 0) {
+        lines.push(`Messages still waiting for your answer (${shown.length}${held.length > shown.length ? ` of ${held.length}` : ''}, oldest first):`);
+        for (const m of shown) {
+            const text = m.text.length > MAX_HELD_CHARS ? `${m.text.slice(0, MAX_HELD_CHARS)}…` : m.text;
+            lines.push(`- ${new Date(m.at).toISOString()} ${m.who}: ${text}`);
+        }
+        lines.push('', 'Answer each of them now, in this conversation. One reply may cover several.');
+    }
+    else {
+        lines.push('Read the conversation and answer anything still unanswered. If nothing is waiting, send nothing.');
+    }
+    lines.push('', 'Your reply only reaches the person through this command. Write the reply text only:', ...replyCommand(channel));
+    if (channel.platform === 'slack') {
+        lines.push('Do not pass a channel id to the script: this session is already bound to the conversation.');
+    }
+    return lines.join('\n');
+}
+/**
+ * Send a fixed notice so a person can read it. True only when someone who reads it got it: the
+ * Telegram attention topic, a Slack alert channel with one of the agent's people in it, or a
+ * direct message. A post to an alert channel nobody is in is kept as a record but is not "told"
+ * (2026-11-04 drill: the notice went to an empty channel and the person text said "My operator
+ * has been told").
+ */
+export async function deliverOperatorNotice(routes, text) {
+    const warn = routes.warn ?? (() => { });
+    const why = (err) => (err instanceof Error ? err.message : String(err));
+    let delivered = false;
+    if (routes.telegram) {
+        try {
+            await routes.telegram(text);
+            delivered = true;
+        }
+        catch (err) { /* @silent-fallback-ok: `delivered` stays false, which drives the retry and its capped report */
+            warn(`Telegram notice failed: ${why(err)}`);
+        }
+    }
+    const slack = routes.slack;
+    if (!slack)
+        return delivered;
+    let channelRead = false;
+    if (slack.attentionChannel) {
+        let readers = null;
+        try {
+            readers = await slack.readersOf(slack.attentionChannel);
+        }
+        catch (err) { /* @silent-fallback-ok: unknown readers means the direct messages below still go */
+            warn(`could not read the alert channel's members: ${why(err)}`);
+        }
+        // A channel known to have none of the operators in it is skipped: a post there reaches
+        // nobody, and every retry would repeat it.
+        if (readers === null || readers.length > 0) {
+            try {
+                await slack.post(slack.attentionChannel, text);
+                channelRead = readers !== null;
+            }
+            catch (err) { /* @silent-fallback-ok: `channelRead` stays false, so the direct messages below go */
+                warn(`Slack notice failed: ${why(err)}`);
+            }
+        }
+    }
+    if (channelRead)
+        return true;
+    if (delivered)
+        return true; // Telegram reached the operator: no need to message people directly too
+    for (const userId of slack.people()) {
+        try {
+            await slack.directMessage(userId, text);
+            delivered = true;
+        }
+        catch (err) { /* @silent-fallback-ok: `delivered` stays false unless another person was reached */
+            warn(`direct message failed: ${why(err)}`);
+        }
+    }
+    return delivered;
+}
+/** Above this many authorized people with no owner or admin among them, nobody is messaged directly. */
+export const MAX_UNRANKED_OPERATORS = 3;
+/**
+ * Who the operator is on Slack: the authorized people whose user profile is an owner or admin.
+ * With no ranked profile, a small authorized list (a personal agent: the operator and perhaps a
+ * partner) stands in; a large one is a team, where a direct message to everyone is spam.
+ */
+export function operatorSlackIds(authorized, profiles) {
+    const ranked = authorized.filter((id) => profiles.some((p) => p.slackUserId === id && (p.role === 'owner' || p.role === 'admin')));
+    if (ranked.length > 0)
+        return ranked;
+    return authorized.length <= MAX_UNRANKED_OPERATORS ? [...authorized] : [];
+}
+//# sourceMappingURL=claudeKeyRecovery.js.map

package/dist/core/claudeKeyRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeKeyRecovery.js","sourceRoot":"","sources":["../../src/core/claudeKeyRecovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,kFAAkF;AAClF,MAAM,eAAe,GAAG,+CAA+C,CAAC;AAExE,SAAS,aAAa,CAAC,IAAY,EAAE,UAA6B;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CAAC,IAAsB,EAAE,UAA6B;IAC7E,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AACpI,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAkC,EAAE,UAA6B;IAC5F,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC;QAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,KAAkC,EAAE,OAAe,EAAE,UAA6B;IAC9G,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,IAAI,gBAAgB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;AAC/E,CAAC;AAKD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAmC,EACnC,IAAgH;IAEhH,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW;YAAE,SAAS;QAC5B,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,kBAAkB,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QAClG,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YACpG,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAMD,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,OAAwB;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,8EAA8E;QAC9E,OAAO,CAAC,8CAA8C,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,mDAAmD,OAAO,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,IAA4B;IAC3F,2FAA2F;IAC3F,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,KAAK,GAAa;QACtB,GAAG,GAAG,uEAAuE;YAC3E,mDAAmD;QACrD,EAAE;KACH,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,2CAA2C,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC/I,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7F,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,6EAA6E,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;IACjH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,qFAAqF,EACrF,GAAG,YAAY,CAAC,OAAO,CAAC,CACzB,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA4B,EAAE,IAAY;IACpF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;QACtD,OAAO,GAAG,EAAE,CAAC,CAAC,gGAAgG;YAAC,IAAI,CAAC,2BAA2B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC/J,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAoB,IAAI,CAAC;QACpC,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAAC,CAAC;QAChE,OAAO,GAAG,EAAE,CAAC,CAAC,mFAAmF;YAAC,IAAI,CAAC,+CAA+C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACpK,uFAAuF;QACvF,2CAA2C;QAC3C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;gBAC/C,WAAW,GAAG,OAAO,KAAK,IAAI,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,CAAC,qFAAqF;gBAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QACnJ,CAAC;IACH,CAAC;IACD,IAAI,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,wEAAwE;IACpG,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;QAAC,CAAC;QAClE,OAAO,GAAG,EAAE,CAAC,CAAC,oFAAoF;YAAC,IAAI,CAAC,0BAA0B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAClJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAA6B,EAC7B,QAA+D;IAE/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IACnI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,UAAU,CAAC,MAAM,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC"}

package/dist/core/memorySessionPolicy.d.ts

@@ -26,6 +26,18 @@ export interface MemorySessionPaths {
     tempRoots: readonly string[];
 }
 export declare function buildMemorySessionSettings(p: MemorySessionPaths): Record<string, unknown>;
+/**
+ * Linux only: let the session's curl reach the agent server. bubblewrap gives the
+ * session its own network namespace, so localhost inside it is not the agent's
+ * server, and the sandbox's NO_PROXY sends localhost past the proxy that could
+ * carry it. Every reply script uses plain curl, so a curl config that clears
+ * NO_PROXY sends localhost through the sandbox proxy, which allows it (it is in
+ * allowedDomains). Reach is the same as on macOS, where the session shares the
+ * host's loopback. Measured with Claude Code 2.1.318 on Ubuntu 24.04: without
+ * this, curl exit 7; with it, HTTP 200 from the server and outside hosts unchanged.
+ * Returns the folder to pass as CURL_HOME, or null where nothing is needed.
+ */
+export declare function prepareSessionCurlHome(scopeDir: string, platform?: NodeJS.Platform): string | null;
 /** `--allowedTools` entries: the plain tools, and file tools on the scope folder only. */
 export declare function memorySessionAllowedTools(scopeDir: string): string[];
 /**

package/dist/core/memorySessionPolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memorySessionPolicy.d.ts","sourceRoot":"","sources":["../../src/core/memorySessionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,eAAO,MAAM,oBAAoB,YAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAQ9H,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8CAA8C;IAC9C,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,sDAAsD;IACtD,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAID,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCzF;AAED,0FAA0F;AAC1F,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAOpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgBrG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAqBpI"}
+{"version":3,"file":"memorySessionPolicy.d.ts","sourceRoot":"","sources":["../../src/core/memorySessionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,eAAO,MAAM,oBAAoB,YAAI,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAQ9H,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8CAA8C;IAC9C,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,sDAAsD;IACtD,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAID,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCzF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,GAAG,IAAI,CAOpH;AAED,0FAA0F;AAC1F,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAOpE;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgBrG;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAqBpI"}

package/dist/core/memorySessionPolicy.js

@@ -57,6 +57,26 @@ export function buildMemorySessionSettings(p) {
         },
     };
 }
+/**
+ * Linux only: let the session's curl reach the agent server. bubblewrap gives the
+ * session its own network namespace, so localhost inside it is not the agent's
+ * server, and the sandbox's NO_PROXY sends localhost past the proxy that could
+ * carry it. Every reply script uses plain curl, so a curl config that clears
+ * NO_PROXY sends localhost through the sandbox proxy, which allows it (it is in
+ * allowedDomains). Reach is the same as on macOS, where the session shares the
+ * host's loopback. Measured with Claude Code 2.1.318 on Ubuntu 24.04: without
+ * this, curl exit 7; with it, HTTP 200 from the server and outside hosts unchanged.
+ * Returns the folder to pass as CURL_HOME, or null where nothing is needed.
+ */
+export function prepareSessionCurlHome(scopeDir, platform = process.platform) {
+    if (platform !== 'linux')
+        return null;
+    const curlHome = path.join(scopeDir, '.curl');
+    fs.mkdirSync(curlHome, { recursive: true, mode: 0o700 });
+    // Rewritten at every spawn: the folder is the session's own, so it may have changed it.
+    fs.writeFileSync(path.join(curlHome, '.curlrc'), 'noproxy = ""\n', { mode: 0o600 });
+    return curlHome;
+}
 /** `--allowedTools` entries: the plain tools, and file tools on the scope folder only. */
 export function memorySessionAllowedTools(scopeDir) {
     return [

package/dist/core/memorySessionPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"memorySessionPolicy.js","sourceRoot":"","sources":["../../src/core/memorySessionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAE9H,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhE,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAcjE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAS,EAAU,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC;AAElE,MAAM,UAAU,0BAA0B,CAAC,CAAqB;IAC9D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACL,mBAAmB,EAAE,CAAC,CAAC,QAAQ;QAC/B,WAAW,EAAE,EAAE,IAAI,EAAE;QACrB,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;YACvB,wBAAwB,EAAE,KAAK;YAC/B,wBAAwB,EAAE,IAAI;YAC9B,UAAU,EAAE;gBACV,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChE,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;gBAC1C,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACzB;YACD,OAAO,EAAE;gBACP,iBAAiB,EAAE,IAAI;gBACvB,gBAAgB,EAAE,EAAE;gBACpB,cAAc,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;aACxG;SACF;KACF,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,OAAO;QACL,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC;QAC7B,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC;QAC7B,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAc,EAAE,YAAoB,EAAE,QAAgB;IAC7F,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,CAAC;QAC3H,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG;QACX,mBAAmB,EAAE,SAAS;QAC9B,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QACzC,gBAAgB,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC;QACxD,qBAAqB,EAAE,cAAc,EAAE,mBAAmB;QAC1D,YAAY,EAAE,YAAY;KAC3B,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAwB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC1H,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,OAAO,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC9D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,uBAAuB;oBAAE,OAAO,KAAK,CAAC;gBAChF,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;gBACxE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"memorySessionPolicy.js","sourceRoot":"","sources":["../../src/core/memorySessionPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAE9H,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhE,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAcjE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,CAAS,EAAU,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC;AAElE,MAAM,UAAU,0BAA0B,CAAC,CAAqB;IAC9D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvC,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO;QACL,mBAAmB,EAAE,CAAC,CAAC,QAAQ;QAC/B,WAAW,EAAE,EAAE,IAAI,EAAE;QACrB,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;YACvB,wBAAwB,EAAE,KAAK;YAC/B,wBAAwB,EAAE,IAAI;YAC9B,UAAU,EAAE;gBACV,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChE,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;gBAC1C,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACzB;YACD,OAAO,EAAE;gBACP,iBAAiB,EAAE,IAAI;gBACvB,gBAAgB,EAAE,EAAE;gBACpB,cAAc,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC;aACxG;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IACnG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,wFAAwF;IACxF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,OAAO;QACL,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC;QAC7B,GAAG,CAAC,MAAM,EAAE,GAAG,QAAQ,KAAK,CAAC;QAC7B,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,KAAK,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAc,EAAE,YAAoB,EAAE,QAAgB;IAC7F,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,CAAC;QAC3H,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG;QACX,mBAAmB,EAAE,SAAS;QAC9B,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;QACzC,gBAAgB,EAAE,GAAG,yBAAyB,CAAC,QAAQ,CAAC;QACxD,qBAAqB,EAAE,cAAc,EAAE,mBAAmB;QAC1D,YAAY,EAAE,YAAY;KAC3B,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAwB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC1H,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,OAAO,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC9D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,uBAAuB;oBAAE,OAAO,KAAK,CAAC;gBAChF,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;gBACxE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/pickSessionByTmux.d.ts

@@ -0,0 +1,11 @@
+/**
+ * A tmux name is reused when a conversation comes back to a machine, so several session
+ * records can carry one name. The live one is the one callers mean: a running record
+ * wins, otherwise the newest. Never reorders the caller's list.
+ */
+export declare function pickSessionByTmux<T extends {
+    tmuxSession: string;
+    status?: string;
+    startedAt?: string;
+}>(records: readonly T[], tmuxSession: string): T | undefined;
+//# sourceMappingURL=pickSessionByTmux.d.ts.map

package/dist/core/pickSessionByTmux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pickSessionByTmux.d.ts","sourceRoot":"","sources":["../../src/core/pickSessionByTmux.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EACtG,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,WAAW,EAAE,MAAM,GAClB,CAAC,GAAG,SAAS,CAIf"}

package/dist/core/pickSessionByTmux.js

@@ -0,0 +1,11 @@
+/**
+ * A tmux name is reused when a conversation comes back to a machine, so several session
+ * records can carry one name. The live one is the one callers mean: a running record
+ * wins, otherwise the newest. Never reorders the caller's list.
+ */
+export function pickSessionByTmux(records, tmuxSession) {
+    const matches = records.filter((s) => s.tmuxSession === tmuxSession);
+    return matches.find((s) => s.status === 'running')
+        ?? matches.sort((x, y) => String(y.startedAt ?? '').localeCompare(String(x.startedAt ?? '')))[0];
+}
+//# sourceMappingURL=pickSessionByTmux.js.map

package/dist/core/pickSessionByTmux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pickSessionByTmux.js","sourceRoot":"","sources":["../../src/core/pickSessionByTmux.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAqB,EACrB,WAAmB;IAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;WAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC"}

package/dist/core/types.d.ts

@@ -5816,6 +5816,20 @@ export interface ThreadlineListenerConfig {
 export interface ThreadlineConfig {
     /** Whether cloud relay is enabled (default: false, opt-in) */
     relayEnabled: boolean;
+    /**
+     * A sender is never left guessing (docs/specs/a2a-required-acknowledgment.md).
+     * On unless `enabled: false`, which turns off sending, watching and the instruction;
+     * inbound kinded acks are always consumed safely.
+     */
+    requiredAck?: {
+        enabled?: boolean;
+        /** Reminder to an interactive session. Default 5 minutes. */
+        reminderMs?: number;
+        /** Tell the sender `unacknowledged`. Default 15 minutes. */
+        attentionMs?: number;
+        /** Reminders per peer per day. Default 20. */
+        reminderDailyCap?: number;
+    };
     /** Cloud relay URL (default: 'wss://threadline-relay.fly.dev/v1/connect') */
     relayUrl?: string;
     /** Agent visibility on the relay network: 'public' (discoverable), 'unlisted' (direct only), 'private' (no relay) */