instar 1.3.61 → 1.3.63

package/dist/monitoring/ContextWedgeSentinel.js

@@ -0,0 +1,238 @@
+/**
+ * ContextWedgeSentinel — detects Claude Code's "thinking/redacted_thinking
+ * blocks in the latest assistant message cannot be modified" 400 wedge and
+ * recovers via a FRESH respawn.
+ *
+ * The failure (diagnosed 2026-05-28): a tool call is cancelled inside a
+ * parallel tool batch while extended thinking is on. Claude Code cancels every
+ * sibling call, and that cancellation corrupts the thinking block on the latest
+ * assistant turn. The Anthropic API then rejects EVERY resume of that session
+ * with `400 ... thinking blocks in the latest assistant message cannot be
+ * modified`. The session fast-fails instantly on every inbound message ("Cooked
+ * for 0s"); it is permanently dead yet still emitting output, so neither the
+ * silence sentinel (output never goes quiet) nor the socket sentinel (no
+ * disconnect string) catches it.
+ *
+ * Critical difference from the other silently-stopped sentinels: a send-keys
+ * nudge CANNOT recover this — re-engaging just re-sends the corrupted turn and
+ * hits the same 400. The only recovery is a clean respawn that does NOT
+ * `--resume` the corrupted transcript. That is the injected `recoverFn`
+ * (wired to SessionRefresh fresh-mode, which clears the topic's resume UUID
+ * before respawning).
+ *
+ * Because recovery is destructive (kills + respawns a session), detection is
+ * gated by a CONFIRM WINDOW: the signature must still be the non-progressing
+ * session tail after `confirmWindowMs` before a wedge is confirmed. This is the
+ * defense against false-positives — most importantly a session merely
+ * *discussing* this very error (its tail keeps changing as it works, so the
+ * signature does not persist as the tail). And the destructive recovery itself
+ * is opt-in (autoRecovery, default off) and rides the Graduated Feature Rollout
+ * track; in the default detect-only mode the sentinel only audits + escalates.
+ *
+ * Spec: docs/specs/context-wedge-sentinel.md (companion to silently-stopped-trio.md)
+ *
+ * Signal-vs-authority: the regex + confirm-window are detectors. The recoverFn
+ * is a bounded recovery primitive (SessionRefresh rate-guards respawns). User-
+ * facing escalation routes through the existing MessagingToneGate via the
+ * SentinelNotifier path. No new blocking authority.
+ */
+import { EventEmitter } from 'node:events';
+const DEFAULT_CONFIG = {
+    enabled: true,
+    tickIntervalMs: 20_000,
+    confirmWindowMs: 45_000,
+};
+/**
+ * Patterns for the thinking-block 400. Intentionally anchored on the unusual,
+ * API-specific phrase — natural prose almost never contains it, and the
+ * confirm-window + opt-in recovery cover the one case that does (a session
+ * discussing this very bug).
+ */
+export const CONTEXT_WEDGE_PATTERNS = [
+    /blocks in the latest assistant message cannot be modified/i,
+    /`?(?:thinking|redacted_thinking)`?\s+blocks.{0,80}cannot be modified/i,
+];
+/** Detector — true if `text` contains the thinking-block-400 signature. */
+export function detectContextWedge(text) {
+    if (!text)
+        return false;
+    for (const pat of CONTEXT_WEDGE_PATTERNS) {
+        if (pat.test(text))
+            return true;
+    }
+    return false;
+}
+/**
+ * Tail detector — is the signature present within the last `tailLines`
+ * non-empty lines of the capture? A genuinely wedged session shows the error as
+ * its live tail; a session that merely mentioned the error earlier and then
+ * kept working has scrolled it out of the tail.
+ */
+export function signatureIsTail(text, tailLines = 10) {
+    if (!text)
+        return false;
+    const lines = text.split('\n').map(l => l.trim()).filter(Boolean);
+    const tail = lines.slice(-tailLines).join('\n');
+    return detectContextWedge(tail);
+}
+export class ContextWedgeSentinel extends EventEmitter {
+    deps;
+    cfg;
+    states = new Map();
+    timers = new Map();
+    tickHandle = null;
+    constructor(deps, cfg = {}) {
+        super();
+        this.deps = deps;
+        this.cfg = { ...DEFAULT_CONFIG, ...cfg };
+    }
+    /** Begin the self-driving scan loop. No-op without listSessionNames. */
+    start() {
+        if (!this.cfg.enabled || this.tickHandle)
+            return;
+        if (!this.deps.listSessionNames)
+            return;
+        this.tickHandle = setInterval(() => this.tick(), this.cfg.tickIntervalMs);
+        if (typeof this.tickHandle.unref === 'function')
+            this.tickHandle.unref();
+    }
+    stop() {
+        if (this.tickHandle) {
+            clearInterval(this.tickHandle);
+            this.tickHandle = null;
+        }
+        this.shutdown();
+    }
+    /** One scan pass over every tracked session. */
+    tick() {
+        if (!this.cfg.enabled)
+            return;
+        const names = this.deps.listSessionNames?.() ?? [];
+        for (const name of names)
+            this.scanSession(name);
+    }
+    /** Scan one session for the wedge signature. */
+    scanSession(sessionName) {
+        if (!this.cfg.enabled)
+            return;
+        if (this.states.has(sessionName))
+            return; // already handling
+        const output = this.deps.getRecentOutput(sessionName);
+        // Require the signature to be the live TAIL, not merely present somewhere in
+        // the scrollback — the discriminator against a session discussing the bug.
+        if (!signatureIsTail(output))
+            return;
+        this.report(sessionName);
+    }
+    /** Public entry: report a detected (not yet confirmed) wedge. Idempotent. */
+    report(sessionName) {
+        if (!this.cfg.enabled)
+            return;
+        if (this.states.has(sessionName))
+            return;
+        const now = (this.deps.now ?? Date.now)();
+        const state = {
+            sessionName,
+            detectedAt: now,
+            status: 'detected',
+        };
+        this.states.set(sessionName, state);
+        this.emit('detected', { sessionName });
+        // Enter the confirm window before any destructive action.
+        state.status = 'confirming';
+        const handle = this.setTimer(() => void this.confirm(sessionName), this.cfg.confirmWindowMs);
+        this.timers.set(sessionName, handle);
+    }
+    isRecoveryActive(sessionName) {
+        const s = this.states.get(sessionName);
+        return !!s && s.status !== 'recovered' && s.status !== 'escalated';
+    }
+    listActive() {
+        return Array.from(this.states.values());
+    }
+    clear(sessionName) {
+        const t = this.timers.get(sessionName);
+        if (t)
+            this.clearTimer(t);
+        this.timers.delete(sessionName);
+        this.states.delete(sessionName);
+    }
+    shutdown() {
+        for (const t of this.timers.values())
+            this.clearTimer(t);
+        this.timers.clear();
+        this.states.clear();
+    }
+    // ── Confirm + recover ────────────────────────────────────────────────
+    async confirm(sessionName) {
+        const state = this.states.get(sessionName);
+        if (!state)
+            return;
+        const output = this.deps.getRecentOutput(sessionName);
+        // Confirmation gate: the signature must STILL be the tail. If it scrolled
+        // out (the session progressed past the error), this was not a wedge — a
+        // false alarm (e.g. a session that quoted the error then kept working).
+        if (!signatureIsTail(output)) {
+            this.emit('false-alarm', { sessionName });
+            this.clear(sessionName);
+            return;
+        }
+        // Confirmed wedge → hand to the recovery policy.
+        let outcome = 'failed';
+        try {
+            outcome = await this.deps.recoverFn(sessionName);
+        }
+        catch (err) {
+            this.emit('recovery-error', { sessionName, err });
+            outcome = 'failed';
+        }
+        switch (outcome) {
+            case 'respawned':
+                state.status = 'recovered';
+                this.emit('recovered', { sessionName });
+                this.clear(sessionName);
+                return;
+            case 'dry-run':
+                // Housekeeping only — would-have-respawned. Keep state so we don't
+                // re-confirm the same wedge every tick; the dry-run log is the signal.
+                state.status = 'escalated';
+                this.emit('dry-run', { sessionName });
+                return;
+            case 'detect-only':
+            case 'failed':
+            default:
+                this.escalate(sessionName, outcome);
+                return;
+        }
+    }
+    escalate(sessionName, outcome) {
+        const state = this.states.get(sessionName);
+        if (!state)
+            return;
+        state.status = 'escalated';
+        const detail = outcome === 'failed'
+            ? `${friendlyName(sessionName)} is wedged on a stuck-context error and my respawn attempt did not clear it. Want me to dig in?`
+            : `${friendlyName(sessionName)} is wedged on a stuck-context error (it can only be fixed by a fresh restart, which is currently off). Want me to restart it?`;
+        void this.notify(sessionName, detail);
+        this.emit('escalated', { sessionName, outcome });
+        // Keep state so a subsequent scan doesn't re-report the same wedge.
+    }
+    async notify(sessionName, text) {
+        try {
+            await this.deps.notifyFn(sessionName, text);
+        }
+        catch (err) {
+            this.emit('notify-error', { sessionName, err });
+        }
+    }
+    setTimer(fn, ms) {
+        return (this.deps.setTimer ?? setTimeout)(fn, ms);
+    }
+    clearTimer(handle) {
+        (this.deps.clearTimer ?? clearTimeout)(handle);
+    }
+}
+function friendlyName(sessionName) {
+    return sessionName.replace(/^ai\.instar\./, '').replace(/-server$/, '').replace(/-lifeline$/, '');
+}
+//# sourceMappingURL=ContextWedgeSentinel.js.map

package/dist/monitoring/ContextWedgeSentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContextWedgeSentinel.js","sourceRoot":"","sources":["../../src/monitoring/ContextWedgeSentinel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmD3C,MAAM,cAAc,GAAyC;IAC3D,OAAO,EAAE,IAAI;IACb,cAAc,EAAE,MAAM;IACtB,eAAe,EAAE,MAAM;CACxB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,4DAA4D;IAC5D,uEAAuE;CACxE,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,SAAS,GAAG,EAAE;IAC1D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAMvB;IALZ,GAAG,CAAuC;IAC1C,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC9C,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IACnE,UAAU,GAA0C,IAAI,CAAC;IAEjE,YAA6B,IAA8B,EAAE,MAAkC,EAAE;QAC/F,KAAK,EAAE,CAAC;QADmB,SAAI,GAAJ,IAAI,CAA0B;QAEzD,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,wEAAwE;IACxE,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QACjD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO;QACxC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1E,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3E,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,gDAAgD;IAChD,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,gDAAgD;IAChD,WAAW,CAAC,WAAmB;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO,CAAC,mBAAmB;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtD,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,WAAmB;QACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,OAAO;QACzC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAsB;YAC/B,WAAW;YACX,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,UAAU;SACnB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAEvC,0DAA0D;QAC1D,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;IACrE,CAAC;IAED,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAmB;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAED,QAAQ;QACN,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,wEAAwE;IAEhE,KAAK,CAAC,OAAO,CAAC,WAAmB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEtD,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,IAAI,OAAO,GAAyB,QAAQ,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAClD,OAAO,GAAG,QAAQ,CAAC;QACrB,CAAC;QAED,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,WAAW;gBACd,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACxB,OAAO;YACT,KAAK,SAAS;gBACZ,mEAAmE;gBACnE,uEAAuE;gBACvE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,KAAK,aAAa,CAAC;YACnB,KAAK,QAAQ,CAAC;YACd;gBACE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;gBACpC,OAAO;QACX,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,WAAmB,EAAE,OAA6B;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC;QAC3B,MAAM,MAAM,GACV,OAAO,KAAK,QAAQ;YAClB,CAAC,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,iGAAiG;YAC/H,CAAC,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,+HAA+H,CAAC;QAClK,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACjD,oEAAoE;IACtE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,IAAY;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,EAAc,EAAE,EAAU;QACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,UAAU,CAAC,MAAqC;QACtD,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;CACF;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,OAAO,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/monitoring/ReapLog.d.ts

@@ -0,0 +1,51 @@
+/**
+ * ReapLog — durable, JSON-encoded audit of every session reap and every
+ * skipped-reap (UNIFIED-SESSION-LIFECYCLE §P4).
+ *
+ * The pull-surface answer to "why did my session vanish?": one line per reap
+ * (`sessionReaped`) and one per refused/skipped terminate (`reapBlocked`), so a
+ * dropped kill (not-lease-holder / protected / a KEEP / in-flight) is never
+ * invisible. Mirrors `sentinel-events.jsonl`: append-only JSONL under
+ * `logs/`, written with JSON.stringify (never raw concat — closes
+ * newline-injection of user-controlled session names / reasons).
+ *
+ * Read-only from the API (`GET /sessions/reap-log`, Bearer-auth). The log never
+ * gates or mutates a session — it only records.
+ */
+export interface ReapLogEntry {
+    ts: string;
+    /** 'reaped' = a kill happened; 'skipped' = a terminate was refused/no-op. */
+    type: 'reaped' | 'skipped';
+    session: string;
+    tmuxSession: string;
+    /** The reason the killer requested (e.g. 'idle-zombie', 'age-limit'). */
+    reason: string;
+    disposition?: 'terminal' | 'recovery-bounce';
+    origin?: 'operator' | 'autonomous';
+    /** For 'skipped': why the authority refused (protected / not-lease-holder / a KEEP / in-flight). */
+    skipped?: string;
+    machine?: string;
+}
+export declare class ReapLog {
+    private readonly logPath;
+    private readonly machineId?;
+    constructor(stateDir: string, machineId?: () => string | undefined);
+    recordReaped(e: {
+        session: string;
+        tmuxSession: string;
+        reason: string;
+        disposition?: 'terminal' | 'recovery-bounce';
+        origin?: 'operator' | 'autonomous';
+    }): void;
+    recordSkipped(e: {
+        session: string;
+        tmuxSession: string;
+        reason: string;
+        skipped: string;
+        origin?: 'operator' | 'autonomous';
+    }): void;
+    private append;
+    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines. */
+    read(limit?: number): ReapLogEntry[];
+}
+//# sourceMappingURL=ReapLog.d.ts.map

package/dist/monitoring/ReapLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapLog.d.ts","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,6EAA6E;IAC7E,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;IAC7C,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IACnC,oGAAoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA2B;gBAE1C,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS;IAKlE,YAAY,CAAC,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;QAC7C,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;KACpC,GAAG,IAAI;IAaR,aAAa,CAAC,CAAC,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;KACpC,GAAG,IAAI;IAaR,OAAO,CAAC,MAAM;IASd,4FAA4F;IAC5F,IAAI,CAAC,KAAK,SAAM,GAAG,YAAY,EAAE;CAqBlC"}

package/dist/monitoring/ReapLog.js

@@ -0,0 +1,82 @@
+/**
+ * ReapLog — durable, JSON-encoded audit of every session reap and every
+ * skipped-reap (UNIFIED-SESSION-LIFECYCLE §P4).
+ *
+ * The pull-surface answer to "why did my session vanish?": one line per reap
+ * (`sessionReaped`) and one per refused/skipped terminate (`reapBlocked`), so a
+ * dropped kill (not-lease-holder / protected / a KEEP / in-flight) is never
+ * invisible. Mirrors `sentinel-events.jsonl`: append-only JSONL under
+ * `logs/`, written with JSON.stringify (never raw concat — closes
+ * newline-injection of user-controlled session names / reasons).
+ *
+ * Read-only from the API (`GET /sessions/reap-log`, Bearer-auth). The log never
+ * gates or mutates a session — it only records.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+export class ReapLog {
+    logPath;
+    machineId;
+    constructor(stateDir, machineId) {
+        this.logPath = path.join(stateDir, '..', 'logs', 'reap-log.jsonl');
+        this.machineId = machineId;
+    }
+    recordReaped(e) {
+        this.append({
+            ts: new Date().toISOString(),
+            type: 'reaped',
+            session: e.session,
+            tmuxSession: e.tmuxSession,
+            reason: e.reason,
+            disposition: e.disposition,
+            origin: e.origin,
+            machine: this.machineId?.(),
+        });
+    }
+    recordSkipped(e) {
+        this.append({
+            ts: new Date().toISOString(),
+            type: 'skipped',
+            session: e.session,
+            tmuxSession: e.tmuxSession,
+            reason: e.reason,
+            skipped: e.skipped,
+            origin: e.origin,
+            machine: this.machineId?.(),
+        });
+    }
+    append(entry) {
+        try {
+            fs.mkdirSync(path.dirname(this.logPath), { recursive: true });
+            fs.appendFileSync(this.logPath, JSON.stringify(entry) + '\n');
+        }
+        catch {
+            // never throw from the audit sink
+        }
+    }
+    /** Read the most-recent `limit` entries (newest last), tolerating partial/corrupt lines. */
+    read(limit = 200) {
+        let raw;
+        try {
+            raw = fs.readFileSync(this.logPath, 'utf-8');
+        }
+        catch {
+            // @silent-fallback-ok — no log file yet means no reaps recorded; an empty
+            // list is the correct answer, not a degraded one.
+            return [];
+        }
+        const lines = raw.split('\n').filter((l) => l.trim().length > 0);
+        const tail = limit > 0 ? lines.slice(-limit) : lines;
+        const out = [];
+        for (const line of tail) {
+            try {
+                out.push(JSON.parse(line));
+            }
+            catch {
+                // skip a corrupt/partial line rather than failing the whole read
+            }
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=ReapLog.js.map

package/dist/monitoring/ReapLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapLog.js","sourceRoot":"","sources":["../../src/monitoring/ReapLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAiB7B,MAAM,OAAO,OAAO;IACD,OAAO,CAAS;IAChB,SAAS,CAA4B;IAEtD,YAAY,QAAgB,EAAE,SAAoC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,CAMZ;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,CAMb;QACC,IAAI,CAAC,MAAM,CAAC;YACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAmB;QAChC,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC,KAAK,GAAG,GAAG;QACd,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,kDAAkD;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrD,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/monitoring/ReapNotifier.d.ts

@@ -0,0 +1,66 @@
+/**
+ * ReapNotifier — the single coalescing listener for `sessionReaped`
+ * (UNIFIED-SESSION-LIFECYCLE §P3).
+ *
+ * `SessionManager.terminateSession` emits `sessionReaped` exactly once per kill
+ * at the one chokepoint. This listener turns a TERMINAL reap of a user-facing
+ * session into a "your session was shut down" notice so a session never silently
+ * vanishes (the 2026-05-27 incident). It stays SILENT for:
+ *   - `recovery-bounce` reaps (a kill-to-respawn is a bounce, not a disappearance),
+ *   - `origin:'operator'` reaps (the user clicked kill — telling them is noise).
+ *
+ * Coalescing (SE-7): terminal reaps within a short rolling window collapse onto a
+ * single shared timer. On flush:
+ *   - exactly ONE reap in the window → a per-session notice routed to its bound
+ *     topic (or the lifeline topic if unbound),
+ *   - MORE than one → ONE consolidated lifeline message stating the TOTAL count,
+ *     so a mass-reap burst that overflows the bounded buffer is never
+ *     under-reported (the reap-log P4 has the complete record regardless).
+ *
+ * Sanitization: session names follow user-controlled topic renames, so the
+ * dynamic fields (name, reason) are wrapped as inline-code spans — the downstream
+ * Telegram formatter renders code spans as literal, HTML-escaped text, never
+ * markup. The notifier never emits raw markup around user-controlled values.
+ */
+import type { Session } from '../core/types.js';
+export interface ReapEvent {
+    session: Pick<Session, 'name' | 'tmuxSession'>;
+    reason: string;
+    disposition?: 'terminal' | 'recovery-bounce';
+    origin?: 'operator' | 'autonomous';
+}
+export interface ReapNotifierDeps {
+    /** Bound messaging topic for a session, or null if unbound. */
+    resolveTopic: (tmuxSession: string) => number | null;
+    /** The always-on system/lifeline topic, or null if none is configured. */
+    lifelineTopic: () => number | null;
+    /** Deliver a (GFM) notice to a topic. Wiring decides the transport/tier. */
+    send: (topicId: number, text: string) => void | Promise<void>;
+    now?: () => number;
+}
+export interface ReapNotifierOptions {
+    enabled: boolean;
+    coalesceWindowMs: number;
+    /** Max reaps retained for the consolidated-message detail list (count is exact regardless). */
+    maxBuffer: number;
+}
+export declare const DEFAULT_REAP_NOTIFIER_OPTIONS: ReapNotifierOptions;
+export declare class ReapNotifier {
+    private readonly deps;
+    private readonly opts;
+    private readonly now;
+    private timer;
+    private buffer;
+    private windowCount;
+    constructor(deps: ReapNotifierDeps, opts?: Partial<ReapNotifierOptions>);
+    /** The `sessionReaped` event handler. */
+    onReaped(event: ReapEvent): void;
+    /**
+     * Emit the coalesced notice(s) for the closed window and reset. Public so the
+     * lifecycle (and tests) can drive it deterministically.
+     */
+    flush(): Promise<void>;
+    private formatSingle;
+    private formatBurst;
+}
+//# sourceMappingURL=ReapNotifier.d.ts.map

package/dist/monitoring/ReapNotifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapNotifier.d.ts","sourceRoot":"","sources":["../../src/monitoring/ReapNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,UAAU,GAAG,iBAAiB,CAAC;IAC7C,MAAM,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,0EAA0E;IAC1E,aAAa,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACnC,4EAA4E;IAC5E,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,+FAA+F;IAC/F,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,6BAA6B,EAAE,mBAI3C,CAAC;AAQF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,WAAW,CAAK;gBAEZ,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC;IAMvE,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAiBhC;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,WAAW;CAWpB"}

package/dist/monitoring/ReapNotifier.js

@@ -0,0 +1,112 @@
+/**
+ * ReapNotifier — the single coalescing listener for `sessionReaped`
+ * (UNIFIED-SESSION-LIFECYCLE §P3).
+ *
+ * `SessionManager.terminateSession` emits `sessionReaped` exactly once per kill
+ * at the one chokepoint. This listener turns a TERMINAL reap of a user-facing
+ * session into a "your session was shut down" notice so a session never silently
+ * vanishes (the 2026-05-27 incident). It stays SILENT for:
+ *   - `recovery-bounce` reaps (a kill-to-respawn is a bounce, not a disappearance),
+ *   - `origin:'operator'` reaps (the user clicked kill — telling them is noise).
+ *
+ * Coalescing (SE-7): terminal reaps within a short rolling window collapse onto a
+ * single shared timer. On flush:
+ *   - exactly ONE reap in the window → a per-session notice routed to its bound
+ *     topic (or the lifeline topic if unbound),
+ *   - MORE than one → ONE consolidated lifeline message stating the TOTAL count,
+ *     so a mass-reap burst that overflows the bounded buffer is never
+ *     under-reported (the reap-log P4 has the complete record regardless).
+ *
+ * Sanitization: session names follow user-controlled topic renames, so the
+ * dynamic fields (name, reason) are wrapped as inline-code spans — the downstream
+ * Telegram formatter renders code spans as literal, HTML-escaped text, never
+ * markup. The notifier never emits raw markup around user-controlled values.
+ */
+export const DEFAULT_REAP_NOTIFIER_OPTIONS = {
+    enabled: true,
+    coalesceWindowMs: 60_000,
+    maxBuffer: 100,
+};
+/** Wrap a user-controlled value as a literal inline-code span (never markup). */
+function literal(value) {
+    // Neutralize backticks so the code span can't be broken out of.
+    return '`' + String(value).replace(/`/g, "'") + '`';
+}
+export class ReapNotifier {
+    deps;
+    opts;
+    now;
+    timer = null;
+    buffer = [];
+    windowCount = 0;
+    constructor(deps, opts) {
+        this.deps = deps;
+        this.opts = { ...DEFAULT_REAP_NOTIFIER_OPTIONS, ...(opts ?? {}) };
+        this.now = deps.now ?? (() => Date.now());
+    }
+    /** The `sessionReaped` event handler. */
+    onReaped(event) {
+        if (!this.opts.enabled)
+            return;
+        // Silent dispositions/origins: a bounce is not a disappearance, and the user
+        // already knows about their own operator kill.
+        if ((event.disposition ?? 'terminal') !== 'terminal')
+            return;
+        if (event.origin === 'operator')
+            return;
+        this.windowCount++;
+        this.buffer.push(event);
+        if (this.buffer.length > this.opts.maxBuffer)
+            this.buffer.shift(); // drop-oldest detail
+        if (!this.timer) {
+            this.timer = setTimeout(() => { void this.flush(); }, this.opts.coalesceWindowMs);
+            if (typeof this.timer.unref === 'function')
+                this.timer.unref();
+        }
+    }
+    /**
+     * Emit the coalesced notice(s) for the closed window and reset. Public so the
+     * lifecycle (and tests) can drive it deterministically.
+     */
+    async flush() {
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        const count = this.windowCount;
+        const detail = this.buffer;
+        this.windowCount = 0;
+        this.buffer = [];
+        if (count === 0)
+            return;
+        if (count === 1) {
+            const ev = detail[0];
+            const topic = this.deps.resolveTopic(ev.session.tmuxSession) ?? this.deps.lifelineTopic();
+            if (topic == null)
+                return; // unreachable channel — reap-log (P4) still has it
+            await this.deps.send(topic, this.formatSingle(ev));
+            return;
+        }
+        // Burst → ONE consolidated lifeline message stating the exact total count.
+        const topic = this.deps.lifelineTopic();
+        if (topic == null)
+            return;
+        await this.deps.send(topic, this.formatBurst(count, detail));
+    }
+    formatSingle(ev) {
+        return `🪦 Session ${literal(ev.session.name)} was shut down — ${literal(ev.reason)}. `
+            + `See the reap-log (\`GET /sessions/reap-log\`) for the full record.`;
+    }
+    formatBurst(count, detail) {
+        const lines = detail.map((e) => `• ${literal(e.session.name)} — ${literal(e.reason)}`);
+        const shownNote = count > detail.length
+            ? `\n\n(showing the latest ${detail.length}; full list in the reap-log)`
+            : '';
+        return `🪦 ${count} session${count === 1 ? '' : 's'} shut down in the last `
+            + `${Math.round(this.opts.coalesceWindowMs / 1000)}s:\n\n`
+            + lines.join('\n')
+            + shownNote
+            + `\n\nFull record: \`GET /sessions/reap-log\`.`;
+    }
+}
+//# sourceMappingURL=ReapNotifier.js.map

package/dist/monitoring/ReapNotifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReapNotifier.js","sourceRoot":"","sources":["../../src/monitoring/ReapNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AA4BH,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,OAAO,EAAE,IAAI;IACb,gBAAgB,EAAE,MAAM;IACxB,SAAS,EAAE,GAAG;CACf,CAAC;AAEF,iFAAiF;AACjF,SAAS,OAAO,CAAC,KAAa;IAC5B,gEAAgE;IAChE,OAAO,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,YAAY;IACN,IAAI,CAAmB;IACvB,IAAI,CAAsB;IAC1B,GAAG,CAAe;IAC3B,KAAK,GAA0B,IAAI,CAAC;IACpC,MAAM,GAAgB,EAAE,CAAC;IACzB,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,IAAsB,EAAE,IAAmC;QACrE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,QAAQ,CAAC,KAAgB;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC/B,6EAA6E;QAC7E,+CAA+C;QAC/C,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,UAAU,CAAC,KAAK,UAAU;YAAE,OAAO;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QAExC,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,qBAAqB;QAExF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAClF,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO;QAExB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1F,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,CAAC,mDAAmD;YAC9E,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,YAAY,CAAC,EAAa;QAChC,OAAO,cAAc,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI;cACnF,oEAAoE,CAAC;IAC3E,CAAC;IAEO,WAAW,CAAC,KAAa,EAAE,MAAmB;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM;YACrC,CAAC,CAAC,2BAA2B,MAAM,CAAC,MAAM,8BAA8B;YACxE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,MAAM,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yBAAyB;cACxE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,QAAQ;cACxD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;cAChB,SAAS;cACT,8CAA8C,CAAC;IACrD,CAAC;CACF"}

package/dist/monitoring/SentinelNotifier.d.ts

@@ -28,7 +28,7 @@
  *
  * Spec: docs/specs/silently-stopped-trio.md
  */
-export type SentinelEventKind = 'detected' | 'nudged' | 'recovered' | 'escalated' | 'escalation-sent' | 'escalation-suppressed' | 'nudge-error' | 'recovery-error' | 'notify-error';
+export type SentinelEventKind = 'detected' | 'nudged' | 'recovered' | 'escalated' | 'escalation-sent' | 'escalation-suppressed' | 'nudge-error' | 'recovery-error' | 'notify-error' | 'dry-run' | 'false-alarm';
 export interface SentinelLogEntry {
     ts: string;
     kind: SentinelEventKind;

package/dist/monitoring/SentinelNotifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SentinelNotifier.d.ts","sourceRoot":"","sources":["../../src/monitoring/SentinelNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,QAAQ,GACR,WAAW,GACX,WAAW,GACX,iBAAiB,GACjB,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,GAAG,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACvC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAOD,qBAAa,gBAAgB;IAMzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IALvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,WAAW,CAA8C;gBAG9C,IAAI,EAAE,oBAAoB,EAC3C,GAAG,GAAE,sBAA2B;IAKlC,wDAAwD;IACxD,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAI7F;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAUnE,yDAAyD;IACnD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B,oDAAoD;IACpD,IAAI,IAAI,IAAI;IAKZ,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,UAAU;YAOJ,KAAK;IA2BnB,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,KAAK;CAcd"}
+{"version":3,"file":"SentinelNotifier.d.ts","sourceRoot":"","sources":["../../src/monitoring/SentinelNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,QAAQ,GACR,WAAW,GACX,WAAW,GACX,iBAAiB,GACjB,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,cAAc,GAEd,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,GAAG,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACvC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAOD,qBAAa,gBAAgB;IAMzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IALvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,WAAW,CAA8C;gBAG9C,IAAI,EAAE,oBAAoB,EAC3C,GAAG,GAAE,sBAA2B;IAKlC,wDAAwD;IACxD,IAAI,eAAe,IAAI,OAAO,CAE7B;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAI7F;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAUnE,yDAAyD;IACnD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B,oDAAoD;IACpD,IAAI,IAAI,IAAI;IAKZ,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,UAAU;YAOJ,KAAK;IA2BnB,+EAA+E;IAC/E,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,KAAK;CAcd"}

package/dist/monitoring/SentinelNotifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"SentinelNotifier.js","sourceRoot":"","sources":["../../src/monitoring/SentinelNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAqDH,MAAM,cAAc,GAAqC;IACvD,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,KAAK;CACxB,CAAC;AAEF,MAAM,OAAO,gBAAgB;IAMR;IALF,GAAG,CAAmC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,WAAW,GAAyC,IAAI,CAAC;IAEjE,YACmB,IAA0B,EAC3C,MAA8B,EAAE;QADf,SAAI,GAAJ,IAAI,CAAsB;QAG3C,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,wDAAwD;IACxD,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,UAAU,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAuB,EAAE,QAAgB,EAAE,WAAmB,EAAE,MAAe;QACpF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAAgB,EAAE,WAAmB,EAAE,IAAY;QAC1D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,oDAAoD;IACpD,IAAI;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,8CAA8C;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,WAAW,IAAI,OAAQ,IAAI,CAAC,WAAsC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChG,IAAI,CAAC,WAAqC,CAAC,KAAK,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CACR,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,EAC9C,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACvC,SAAS,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,iCAAiC,CAC/F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CACR,cAAc,EACd,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACvC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IACvE,cAAc,CAAC,OAAgC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,OAAO,CACL,GAAG,OAAO,CAAC,MAAM,qGAAqG;YACtH,GAAG,KAAK,MAAM;YACd,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAuB,EAAE,QAAgB,EAAE,WAAmB,EAAE,MAAe;QAC3F,MAAM,KAAK,GAAqB;YAC9B,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACzD,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,WAAmB;IACnC,OAAO,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}
+{"version":3,"file":"SentinelNotifier.js","sourceRoot":"","sources":["../../src/monitoring/SentinelNotifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAwDH,MAAM,cAAc,GAAqC;IACvD,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,KAAK;CACxB,CAAC;AAEF,MAAM,OAAO,gBAAgB;IAMR;IALF,GAAG,CAAmC;IACtC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,WAAW,GAAyC,IAAI,CAAC;IAEjE,YACmB,IAA0B,EAC3C,MAA8B,EAAE;QADf,SAAI,GAAJ,IAAI,CAAsB;QAG3C,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,wDAAwD;IACxD,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,UAAU,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAuB,EAAE,QAAgB,EAAE,WAAmB,EAAE,MAAe;QACpF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,QAAgB,EAAE,WAAmB,EAAE,IAAY;QAC1D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,oDAAoD;IACpD,IAAI;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,8CAA8C;QAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,WAAW,IAAI,OAAQ,IAAI,CAAC,WAAsC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChG,IAAI,CAAC,WAAqC,CAAC,KAAK,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CACR,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,EAC9C,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACvC,SAAS,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,iCAAiC,CAC/F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CACR,cAAc,EACd,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACvC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+EAA+E;IACvE,cAAc,CAAC,OAAgC;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,OAAO,CACL,GAAG,OAAO,CAAC,MAAM,qGAAqG;YACtH,GAAG,KAAK,MAAM;YACd,2BAA2B,CAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAuB,EAAE,QAAgB,EAAE,WAAmB,EAAE,MAAe;QAC3F,MAAM,KAAK,GAAqB;YAC9B,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACzD,IAAI;YACJ,QAAQ;YACR,WAAW;YACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,WAAmB;IACnC,OAAO,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/monitoring/SessionReaper.d.ts

@@ -103,6 +103,10 @@ export declare class SessionReaper extends EventEmitter {
     /** Flips to true (forcing dry-run) after any ambiguous/failed reap. */
     private autoDisabled;
     private lastTickAt;
+    /** Shared stateless KEEP-guards (UNIFIED-SESSION-LIFECYCLE §P2). The reaper
+     *  consults this first, then layers its stateful transcript-growth + positive-idle
+     *  checks — so the same guard backs both the reaper and terminateSession(). */
+    private readonly guard;
     constructor(deps: SessionReaperDeps, cfg?: Partial<SessionReaperConfig>);
     start(): void;
     stop(): void;