issue-flow 0.11.1 → 0.13.0

package/dist/chunk-HQAHNIAR.js

@@ -0,0 +1,283 @@
+#!/usr/bin/env node
+import {
+  printInfo
+} from "./chunk-IYV6KNVF.js";
+import {
+  bindTelemetry
+} from "./chunk-6FDFRNXZ.js";
+import {
+  isoNow
+} from "./chunk-DIG5XKQQ.js";
+import {
+  STORAGE_SCHEMA_VERSION,
+  projectMetadataSchema
+} from "./chunk-NEZZ6KDR.js";
+import {
+  ISSUES_DIR_NAME,
+  PROVIDERS_HEALTH_FILENAME,
+  RUN_LOCK_FILENAME,
+  getGlobalRoot,
+  getIssuePaths,
+  getProjectDir,
+  getQueuePaths,
+  projectIdFromRemote
+} from "./chunk-TX5WIVYP.js";
+import {
+  getProjectRoot,
+  getRemoteUrl,
+  normalizeRemoteUrl
+} from "./chunk-KQHB7ZT3.js";
+import {
+  writeFileAtomic
+} from "./chunk-7Z4Y3VKM.js";
+
+// src/storage/resolve.ts
+import { stat as stat2 } from "fs/promises";
+import { basename, join as join2, resolve as resolve2 } from "path";
+
+// src/storage/compat.ts
+import { copyFile, mkdir, readdir, readFile, stat } from "fs/promises";
+import { join, resolve, sep } from "path";
+var LEGACY_ISSUES_DIR_NAME = "issues";
+var METADATA_FILENAME = "metadata.json";
+async function directoryExists(path) {
+  try {
+    return (await stat(path)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+async function pathExists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function resolveStorageMode(projectRoot, options = {}) {
+  const remoteUrl = normalizeRemoteUrl(await getRemoteUrl(projectRoot));
+  const projectId = projectIdFromRemote(remoteUrl, projectRoot);
+  const globalDir = getProjectDir(projectId, options);
+  const legacyDir = join(resolve(projectRoot), LEGACY_ISSUES_DIR_NAME);
+  const [globalExists, legacyExists] = await Promise.all([
+    directoryExists(globalDir),
+    directoryExists(legacyDir)
+  ]);
+  return {
+    // Only one state calls for work: legacy content that has nowhere to be read
+    // from yet. Everything else — including "neither exists" — is already the
+    // global layout.
+    mode: legacyExists && !globalExists ? "needs-migration" : "global",
+    projectId,
+    globalDir,
+    legacyDir,
+    globalExists,
+    legacyExists,
+    remoteUrl
+  };
+}
+function migrationFailure(issue, relativePath, err) {
+  const reason = err instanceof Error ? err.message : String(err);
+  return new Error(
+    `Failed to migrate '${relativePath}' (issue '${issue}'): ${reason}. The legacy directory was left untouched \u2014 fix the cause and run the migration again.`
+  );
+}
+function issueOf(relativePath) {
+  return relativePath.split(sep)[0] || ".";
+}
+async function copyTree(sourceRoot, targetRoot, relativeDir, result) {
+  const source = join(sourceRoot, relativeDir);
+  const target = join(targetRoot, relativeDir);
+  let entries;
+  try {
+    entries = await readdir(source, { withFileTypes: true });
+  } catch (err) {
+    throw migrationFailure(issueOf(relativeDir), relativeDir || ".", err);
+  }
+  try {
+    await mkdir(target, { recursive: true });
+  } catch (err) {
+    throw migrationFailure(issueOf(relativeDir), relativeDir || ".", err);
+  }
+  for (const entry of entries) {
+    const relativePath = join(relativeDir, entry.name);
+    if (entry.isDirectory()) {
+      await copyTree(sourceRoot, targetRoot, relativePath, result);
+      continue;
+    }
+    if (!entry.isFile()) {
+      continue;
+    }
+    const to = join(targetRoot, relativePath);
+    try {
+      if (await pathExists(to)) {
+        result.skipped.push(relativePath);
+        continue;
+      }
+      await copyFile(join(sourceRoot, relativePath), to);
+      result.copied.push(relativePath);
+    } catch (err) {
+      throw migrationFailure(issueOf(relativePath), relativePath, err);
+    }
+  }
+}
+async function readExistingMetadata(file) {
+  let raw;
+  try {
+    raw = await readFile(file, "utf-8");
+  } catch {
+    return null;
+  }
+  try {
+    const parsed = projectMetadataSchema.safeParse(JSON.parse(raw));
+    return parsed.success ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+async function migrateLegacyStorage(projectRoot, options = {}) {
+  const status = await resolveStorageMode(projectRoot, { env: options.env });
+  const result = { copied: [], skipped: [] };
+  try {
+    await mkdir(status.globalDir, { recursive: true });
+  } catch (err) {
+    throw migrationFailure(".", status.globalDir, err);
+  }
+  if (status.legacyExists) {
+    await copyTree(status.legacyDir, join(status.globalDir, ISSUES_DIR_NAME), "", result);
+  }
+  const now = (options.now ?? isoNow)();
+  const metadataFile = join(status.globalDir, METADATA_FILENAME);
+  const existing = await readExistingMetadata(metadataFile);
+  const metadata = {
+    schemaVersion: STORAGE_SCHEMA_VERSION,
+    projectId: status.projectId,
+    root: resolve(projectRoot),
+    remoteUrl: status.remoteUrl,
+    // The project was first seen whenever it was first written, not now.
+    createdAt: existing?.createdAt ?? now,
+    updatedAt: now,
+    lastAttemptAt: existing?.lastAttemptAt ?? null
+  };
+  await writeFileAtomic(metadataFile, `${JSON.stringify(metadata, null, 2)}
+`);
+  return {
+    projectId: status.projectId,
+    globalDir: status.globalDir,
+    legacyDir: status.legacyDir,
+    previousMode: status.mode,
+    ...result,
+    metadataFile,
+    metadata
+  };
+}
+async function recordUserStoryNumbering(projectRoot, decision, options = {}) {
+  const status = await resolveStorageMode(projectRoot, { env: options.env });
+  const metadataFile = join(status.globalDir, METADATA_FILENAME);
+  const existing = await readExistingMetadata(metadataFile);
+  const now = (options.now ?? isoNow)();
+  const metadata = {
+    schemaVersion: STORAGE_SCHEMA_VERSION,
+    projectId: status.projectId,
+    root: resolve(projectRoot),
+    remoteUrl: status.remoteUrl,
+    createdAt: existing?.createdAt ?? now,
+    updatedAt: now,
+    lastAttemptAt: existing?.lastAttemptAt ?? null,
+    userStoryNumbering: decision
+  };
+  await mkdir(status.globalDir, { recursive: true });
+  await writeFileAtomic(metadataFile, `${JSON.stringify(metadata, null, 2)}
+`);
+}
+
+// src/storage/resolve.ts
+var projectCache = /* @__PURE__ */ new Map();
+var checkedIssues = /* @__PURE__ */ new Set();
+function resetStorageResolutionCache() {
+  projectCache.clear();
+  checkedIssues.clear();
+}
+async function directoryExists2(path) {
+  try {
+    return (await stat2(path)).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function announceMigration(result) {
+  if (result.copied.length === 0) return;
+  const count = result.copied.length;
+  const target = join2(result.globalDir, ISSUES_DIR_NAME);
+  printInfo(
+    `Migrated ${count} file${count === 1 ? "" : "s"} from ${result.legacyDir} to ${target}`
+  );
+  printInfo(
+    `The legacy directory was not modified or removed \u2014 ${result.legacyDir} is kept as-is, read-only, for compatibility.`
+  );
+}
+async function resolveProject(projectRoot, options) {
+  const status = await resolveStorageMode(projectRoot, options);
+  if (status.mode === "needs-migration") {
+    announceMigration(await migrateLegacyStorage(projectRoot, options));
+  }
+  return {
+    projectId: status.projectId,
+    legacyDir: status.legacyDir
+  };
+}
+function getProjectResolution(projectRoot, options) {
+  const key = `${getGlobalRoot(options)}::${projectRoot}`;
+  const cached = projectCache.get(key);
+  if (cached) return cached;
+  const pending = resolveProject(projectRoot, options).catch((err) => {
+    projectCache.delete(key);
+    throw err;
+  });
+  projectCache.set(key, pending);
+  return pending;
+}
+async function resolveProjectPaths(options = {}) {
+  const { projectRoot: projectRootOption, ...rootOptions } = options;
+  const projectRoot = resolve2(projectRootOption ?? await getProjectRoot());
+  const project = await getProjectResolution(projectRoot, rootOptions);
+  const projectDir = getProjectDir(project.projectId, rootOptions);
+  return {
+    projectId: project.projectId,
+    projectDir,
+    issuesDir: join2(projectDir, ISSUES_DIR_NAME),
+    runLockFile: join2(projectDir, RUN_LOCK_FILENAME),
+    providersHealthFile: join2(projectDir, PROVIDERS_HEALTH_FILENAME)
+  };
+}
+async function resolveQueuePaths(queueId, options = {}) {
+  const { projectRoot: projectRootOption, ...rootOptions } = options;
+  const projectRoot = resolve2(projectRootOption ?? await getProjectRoot());
+  const project = await getProjectResolution(projectRoot, rootOptions);
+  return getQueuePaths(project.projectId, queueId, rootOptions);
+}
+async function resolveIssuePaths(issueNumber, options = {}) {
+  const { projectRoot: projectRootOption, ...rootOptions } = options;
+  const projectRoot = resolve2(projectRootOption ?? await getProjectRoot());
+  const project = await getProjectResolution(projectRoot, rootOptions);
+  const paths = getIssuePaths(project.projectId, issueNumber, rootOptions);
+  if (!checkedIssues.has(paths.issueDir)) {
+    const legacyIssueDir = join2(project.legacyDir, basename(paths.issueDir));
+    if (!await directoryExists2(paths.issueDir) && await directoryExists2(legacyIssueDir)) {
+      announceMigration(await migrateLegacyStorage(projectRoot, rootOptions));
+    }
+    checkedIssues.add(paths.issueDir);
+  }
+  bindTelemetry({ tasksPath: paths.tasksFile });
+  return paths;
+}
+
+export {
+  recordUserStoryNumbering,
+  resetStorageResolutionCache,
+  resolveProjectPaths,
+  resolveQueuePaths,
+  resolveIssuePaths
+};
+//# sourceMappingURL=chunk-HQAHNIAR.js.map

package/dist/chunk-HQAHNIAR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/storage/resolve.ts","../src/storage/compat.ts"],"sourcesContent":["import { stat } from 'node:fs/promises';\nimport { basename, join, resolve } from 'node:path';\nimport { bindTelemetry } from '../telemetry/recorder.js';\nimport { printInfo } from '../ui/logger.js';\nimport { getProjectRoot } from '../utils/git.js';\nimport { type MigrationResult, migrateLegacyStorage, resolveStorageMode } from './compat.js';\nimport {\n  type GetGlobalRootOptions,\n  getGlobalRoot,\n  getIssuePaths,\n  getProjectDir,\n  getQueuePaths,\n  ISSUES_DIR_NAME,\n  type IssuePaths,\n  PROVIDERS_HEALTH_FILENAME,\n  type QueuePaths,\n  RUN_LOCK_FILENAME,\n} from './paths.js';\n\n/**\n * The single entry point every pipeline command uses to learn where an issue's\n * artifacts live.\n *\n * `paths.ts` and `compat.ts` stay pure and explicit — they take a `projectId` or\n * a `projectRoot` and never decide anything on their own. This module is the\n * opposite end: it knows the current repository, resolves the storage mode,\n * triggers the legacy migration when one is due, and caches all of that for the\n * lifetime of the process, so a call site is reduced to one line.\n *\n * It deliberately does **not** create the issue directory. Callers that write\n * keep doing their own `mkdir(..., { recursive: true })`, which preserves the\n * rule in `storage/CLAUDE.md` that path resolution never touches the\n * filesystem's shape.\n */\n\nexport interface ResolveIssuePathsOptions extends GetGlobalRootOptions {\n  /**\n   * Repository root. Defaults to {@link getProjectRoot}, i.e. the git toplevel\n   * of the current working directory — which is what makes the result identical\n   * from the repo root and from any subdirectory.\n   */\n  projectRoot?: string;\n}\n\n/** Everything the process needs to know about a project, resolved once. */\ninterface ProjectResolution {\n  projectId: string;\n  legacyDir: string;\n}\n\n/**\n * Cached project resolutions, keyed by `<globalRoot>::<projectRoot>`.\n *\n * `projectRoot` is the identity of the project, but the global root takes part\n * in the key as well: `ISSUE_FLOW_HOME` decides *where* the resolution lands,\n * so two different roots must never share an entry (that would silently hand a\n * test the previous test's tree).\n *\n * The cached value is the in-flight promise rather than its result, so two\n * commands resolving concurrently share a single git call instead of racing\n * into two migrations.\n */\nconst projectCache = new Map<string, Promise<ProjectResolution>>();\n\n/**\n * Issues whose global directory has already been checked in this process, so\n * the per-issue fallback below stats each issue at most once.\n */\nconst checkedIssues = new Set<string>();\n\n/**\n * Drop every cached resolution.\n *\n * Exported for tests: the cache is keyed by project and global root, so a suite\n * that moves `ISSUE_FLOW_HOME` between cases must reset it in `beforeEach`.\n */\nexport function resetStorageResolutionCache(): void {\n  projectCache.clear();\n  checkedIssues.clear();\n}\n\nasync function directoryExists(path: string): Promise<boolean> {\n  try {\n    return (await stat(path)).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Tell the user that their artifacts moved, and that nothing was taken away.\n *\n * A migration that copied nothing stays silent: `migrateLegacyStorage` is\n * called speculatively (once per project, then once per issue seen for the\n * first time), and every one of those runs after the first copies zero files.\n * Printing on those would turn a one-time notice into noise on every command.\n *\n * The \"one notice per process\" guarantee falls out of the US-001 cache: the\n * project-level migration runs once, and the per-issue fallback only reaches a\n * second migration when an issue really is still legacy-only — in which case a\n * notice is the correct output, not a duplicate.\n */\nfunction announceMigration(result: MigrationResult): void {\n  if (result.copied.length === 0) return;\n\n  const count = result.copied.length;\n  const target = join(result.globalDir, ISSUES_DIR_NAME);\n\n  printInfo(\n    `Migrated ${count} file${count === 1 ? '' : 's'} from ${result.legacyDir} to ${target}`,\n  );\n  printInfo(\n    `The legacy directory was not modified or removed — ${result.legacyDir} is kept as-is, read-only, for compatibility.`,\n  );\n}\n\n/**\n * Resolve the project id, migrating the legacy tree when it is the only thing\n * that exists yet.\n *\n * A migration failure is not swallowed: `migrateLegacyStorage` already names the\n * issue and file that failed and states that the legacy directory was left\n * untouched, which is exactly what the user needs to fix it and retry.\n */\nasync function resolveProject(\n  projectRoot: string,\n  options: GetGlobalRootOptions,\n): Promise<ProjectResolution> {\n  // resolveStorageMode returns the project id *and* the remote in a single git\n  // call — calling getProjectId() afterwards would shell out to\n  // `git remote get-url origin` a second time for the same answer.\n  const status = await resolveStorageMode(projectRoot, options);\n\n  if (status.mode === 'needs-migration') {\n    announceMigration(await migrateLegacyStorage(projectRoot, options));\n  }\n\n  return {\n    projectId: status.projectId,\n    legacyDir: status.legacyDir,\n  };\n}\n\n/** Cached half of {@link resolveIssuePaths}: one git call per project, per process. */\nfunction getProjectResolution(\n  projectRoot: string,\n  options: GetGlobalRootOptions,\n): Promise<ProjectResolution> {\n  const key = `${getGlobalRoot(options)}::${projectRoot}`;\n\n  const cached = projectCache.get(key);\n  if (cached) return cached;\n\n  // A rejected resolution is evicted so the next command retries instead of\n  // inheriting a permanently failed promise.\n  const pending = resolveProject(projectRoot, options).catch((err) => {\n    projectCache.delete(key);\n    throw err;\n  });\n\n  projectCache.set(key, pending);\n  return pending;\n}\n\n/** Project-level directories of the current repository inside the global tree. */\nexport interface ProjectStoragePaths {\n  /** Deterministic id derived from the repository's remote (or its path). */\n  projectId: string;\n  /** `<globalRoot>/projects/<projectId>`. */\n  projectDir: string;\n  /** `<projectDir>/issues` — the parent of every issue directory. */\n  issuesDir: string;\n  /**\n   * `<projectDir>/run.lock` — who is running in this project right now.\n   *\n   * Project-level rather than per issue on purpose: two runs in one repository\n   * share a working tree and a branch, so \"a different issue\" is not a\n   * different lock.\n   */\n  runLockFile: string;\n  /** `<projectDir>/providers.json` — persisted health/cooldown per agent provider. */\n  providersHealthFile: string;\n}\n\n/**\n * Resolve the project-level directories, without naming an issue.\n *\n * The issue-agnostic half of {@link resolveIssuePaths}, for the two questions\n * that are about the project rather than about one issue: \"can I write here?\"\n * (`LocalFileIssueProvider.isAvailable`) and \"which identifiers are taken?\"\n * (`highestLocalNumber`, which walks `issuesDir`). It shares the same cache, so\n * asking here and then resolving an issue still costs a single git call.\n *\n * Like the rest of this module it creates nothing — a caller that needs the\n * directory to exist does its own `mkdir(..., { recursive: true })`.\n */\nexport async function resolveProjectPaths(\n  options: ResolveIssuePathsOptions = {},\n): Promise<ProjectStoragePaths> {\n  const { projectRoot: projectRootOption, ...rootOptions } = options;\n  const projectRoot = resolve(projectRootOption ?? (await getProjectRoot()));\n\n  const project = await getProjectResolution(projectRoot, rootOptions);\n  const projectDir = getProjectDir(project.projectId, rootOptions);\n\n  return {\n    projectId: project.projectId,\n    projectDir,\n    issuesDir: join(projectDir, ISSUES_DIR_NAME),\n    runLockFile: join(projectDir, RUN_LOCK_FILENAME),\n    providersHealthFile: join(projectDir, PROVIDERS_HEALTH_FILENAME),\n  };\n}\n\n/**\n * Resolve the paths of a multi-issue execution queue in the current project.\n *\n * Shares the project cache with {@link resolveIssuePaths}, so a run that\n * resolves both still costs a single git call. There is no legacy tree for\n * queues — the concept did not exist before — so no migration is attempted.\n */\nexport async function resolveQueuePaths(\n  queueId: string | number,\n  options: ResolveIssuePathsOptions = {},\n): Promise<QueuePaths> {\n  const { projectRoot: projectRootOption, ...rootOptions } = options;\n  const projectRoot = resolve(projectRootOption ?? (await getProjectRoot()));\n\n  const project = await getProjectResolution(projectRoot, rootOptions);\n  return getQueuePaths(project.projectId, queueId, rootOptions);\n}\n\n/**\n * Resolve every path of `issueNumber` under the global storage, migrating the\n * legacy `<projectRoot>/issues/` tree first when needed.\n *\n * The migration is triggered in two situations:\n *\n * 1. project level — the global project directory does not exist at all and the\n *    legacy one does (`mode === 'needs-migration'`);\n * 2. issue level — the project directory exists (so the mode is already\n *    `global`) but *this* issue is only present in the legacy tree. That\n *    happens whenever a project was migrated before an older issue was ever\n *    read, or when a collaborator on a previous version added an issue to the\n *    legacy directory afterwards. Re-running the migration is cheap and safe:\n *    it skips every destination that already exists.\n */\nexport async function resolveIssuePaths(\n  issueNumber: string | number,\n  options: ResolveIssuePathsOptions = {},\n): Promise<IssuePaths> {\n  const { projectRoot: projectRootOption, ...rootOptions } = options;\n  const projectRoot = resolve(projectRootOption ?? (await getProjectRoot()));\n\n  const project = await getProjectResolution(projectRoot, rootOptions);\n  const paths = getIssuePaths(project.projectId, issueNumber, rootOptions);\n\n  if (!checkedIssues.has(paths.issueDir)) {\n    // `getIssuePaths` already validated and normalized the identifier, so the\n    // last segment of issueDir is the safe form to look for under the legacy\n    // tree.\n    const legacyIssueDir = join(project.legacyDir, basename(paths.issueDir));\n\n    if (!(await directoryExists(paths.issueDir)) && (await directoryExists(legacyIssueDir))) {\n      announceMigration(await migrateLegacyStorage(projectRoot, rootOptions));\n    }\n\n    // Marked only once the check completed: a failed migration must be retried\n    // by the next command, not remembered as done.\n    checkedIssues.add(paths.issueDir);\n  }\n\n  bindTelemetry({ tasksPath: paths.tasksFile });\n  return paths;\n}\n","import type { Dirent } from 'node:fs';\nimport { copyFile, mkdir, readdir, readFile, stat } from 'node:fs/promises';\nimport { join, resolve, sep } from 'node:path';\nimport { isoNow } from '../core/state-manager.js';\nimport { writeFileAtomic } from '../utils/fs.js';\nimport { getRemoteUrl, normalizeRemoteUrl } from '../utils/git.js';\nimport {\n  type GetGlobalRootOptions,\n  getProjectDir,\n  ISSUES_DIR_NAME,\n  projectIdFromRemote,\n} from './paths.js';\nimport {\n  type ProjectMetadata,\n  projectMetadataSchema,\n  STORAGE_SCHEMA_VERSION,\n  type UserStoryNumberingDecision,\n} from './schemas.js';\n\n/**\n * Coexistence between the legacy per-project layout (`<projectRoot>/issues/`)\n * and the global storage tree (`~/.issue-flow/projects/<project-id>/`).\n *\n * The single rule of this module: **the legacy directory is read-only.** Nothing\n * here removes or rewrites a byte under `<projectRoot>/issues/` — not even\n * behind an opt-in flag — so adopting the global storage can never cost a user\n * their history. Migration is a copy, and a copy that refuses to overwrite.\n */\n\n/** Directory holding the legacy per-project artifacts. */\nexport const LEGACY_ISSUES_DIR_NAME = 'issues';\n\n/** File holding the per-project metadata inside the global storage. */\nexport const METADATA_FILENAME = 'metadata.json';\n\n/**\n * - `global`: the global directory is the source of truth (it already exists,\n *   or neither layout does and a fresh project starts there).\n * - `needs-migration`: only the legacy directory exists, so its content has not\n *   been copied over yet.\n */\nexport type StorageMode = 'global' | 'needs-migration';\n\nexport interface StorageStatus {\n  mode: StorageMode;\n  /** Deterministic id, derived from {@link projectIdFromRemote}. */\n  projectId: string;\n  /** `<globalRoot>/projects/<projectId>`. */\n  globalDir: string;\n  /** `<projectRoot>/issues`. */\n  legacyDir: string;\n  /** Whether `globalDir` currently exists on disk. */\n  globalExists: boolean;\n  /** Whether `legacyDir` currently exists on disk. */\n  legacyExists: boolean;\n  /**\n   * Normalized `origin` remote of `projectRoot`, or `null` without one.\n   * Resolved once here so `migrateLegacyStorage` can reuse it instead of\n   * shelling out to git a second time for `metadata.json`.\n   */\n  remoteUrl: string | null;\n}\n\nexport interface MigrationResult {\n  projectId: string;\n  globalDir: string;\n  legacyDir: string;\n  /** Mode observed *before* the migration ran. */\n  previousMode: StorageMode;\n  /** Paths copied, relative to `legacyDir`. */\n  copied: string[];\n  /** Paths left alone because the destination already had a file. */\n  skipped: string[];\n  /** Absolute path of the metadata file written by this run. */\n  metadataFile: string;\n  /** Metadata as persisted. */\n  metadata: ProjectMetadata;\n}\n\nexport interface MigrateLegacyStorageOptions extends GetGlobalRootOptions {\n  /** Timestamp source, injectable so tests can assert createdAt/updatedAt. */\n  now?: () => string;\n}\n\nasync function directoryExists(path: string): Promise<boolean> {\n  try {\n    return (await stat(path)).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Describe where a project's artifacts live, without touching anything.\n *\n * Read-only by construction: it stats the two candidate directories and reports\n * what it found. It never creates a directory, so a caller can ask the question\n * (a status command, a warning banner) without committing the user to the new\n * layout.\n *\n * An existing global directory always wins: once artifacts are there, that is\n * the source of truth, and a legacy directory left behind is simply preserved\n * rather than re-read or re-migrated.\n */\nexport async function resolveStorageMode(\n  projectRoot: string,\n  options: GetGlobalRootOptions = {},\n): Promise<StorageStatus> {\n  const remoteUrl = normalizeRemoteUrl(await getRemoteUrl(projectRoot));\n  const projectId = projectIdFromRemote(remoteUrl, projectRoot);\n  const globalDir = getProjectDir(projectId, options);\n  const legacyDir = join(resolve(projectRoot), LEGACY_ISSUES_DIR_NAME);\n\n  const [globalExists, legacyExists] = await Promise.all([\n    directoryExists(globalDir),\n    directoryExists(legacyDir),\n  ]);\n\n  return {\n    // Only one state calls for work: legacy content that has nowhere to be read\n    // from yet. Everything else — including \"neither exists\" — is already the\n    // global layout.\n    mode: legacyExists && !globalExists ? 'needs-migration' : 'global',\n    projectId,\n    globalDir,\n    legacyDir,\n    globalExists,\n    legacyExists,\n    remoteUrl,\n  };\n}\n\n/**\n * Wrap an IO failure with the issue and file it happened on, so a partial\n * migration is diagnosable instead of a bare `EACCES`.\n */\nfunction migrationFailure(issue: string, relativePath: string, err: unknown): Error {\n  const reason = err instanceof Error ? err.message : String(err);\n\n  return new Error(\n    `Failed to migrate '${relativePath}' (issue '${issue}'): ${reason}. ` +\n      'The legacy directory was left untouched — fix the cause and run the migration again.',\n  );\n}\n\n/** First path segment of a relative path — the issue a file belongs to. */\nfunction issueOf(relativePath: string): string {\n  return relativePath.split(sep)[0] || '.';\n}\n\n/**\n * Copy one directory level, recursing into subdirectories.\n *\n * Symlinks and other non-regular entries are skipped on purpose: following them\n * could copy content from outside the legacy directory into the global tree.\n */\nasync function copyTree(\n  sourceRoot: string,\n  targetRoot: string,\n  relativeDir: string,\n  result: { copied: string[]; skipped: string[] },\n): Promise<void> {\n  const source = join(sourceRoot, relativeDir);\n  const target = join(targetRoot, relativeDir);\n\n  let entries: Dirent[];\n  try {\n    entries = await readdir(source, { withFileTypes: true });\n  } catch (err) {\n    throw migrationFailure(issueOf(relativeDir), relativeDir || '.', err);\n  }\n\n  try {\n    // recursive: true also makes re-running a no-op on an existing directory.\n    await mkdir(target, { recursive: true });\n  } catch (err) {\n    throw migrationFailure(issueOf(relativeDir), relativeDir || '.', err);\n  }\n\n  for (const entry of entries) {\n    const relativePath = join(relativeDir, entry.name);\n\n    if (entry.isDirectory()) {\n      await copyTree(sourceRoot, targetRoot, relativePath, result);\n      continue;\n    }\n    if (!entry.isFile()) {\n      continue;\n    }\n\n    const to = join(targetRoot, relativePath);\n    try {\n      // Idempotency and safety in one check: a destination that already exists\n      // is never overwritten, so a second run copies nothing and a hand-edited\n      // artifact in the global tree survives.\n      if (await pathExists(to)) {\n        result.skipped.push(relativePath);\n        continue;\n      }\n      await copyFile(join(sourceRoot, relativePath), to);\n      result.copied.push(relativePath);\n    } catch (err) {\n      throw migrationFailure(issueOf(relativePath), relativePath, err);\n    }\n  }\n}\n\n/**\n * Read `metadata.json`, tolerating every failure.\n *\n * A missing, corrupt or schema-invalid file must not block a migration: the\n * caller simply writes a fresh one. The only thing worth recovering is\n * `createdAt`/`lastAttemptAt` from a valid previous file.\n */\nasync function readExistingMetadata(file: string): Promise<ProjectMetadata | null> {\n  let raw: string;\n  try {\n    raw = await readFile(file, 'utf-8');\n  } catch {\n    return null;\n  }\n\n  try {\n    const parsed = projectMetadataSchema.safeParse(JSON.parse(raw));\n    return parsed.success ? parsed.data : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Copy `<projectRoot>/issues/` into the project's global directory and stamp\n * its `metadata.json`.\n *\n * Non-destructive and idempotent, by design rather than by convention:\n *\n * - the source is only ever read — there is no removal option in this release;\n * - a destination file that already exists is skipped, never overwritten, so a\n *   second run reports everything as skipped and changes nothing but\n *   `updatedAt`;\n * - a failure mid-way leaves the legacy directory intact and names the issue\n *   and file that failed, so the run can be repeated after the fix and will\n *   resume by skipping what already made it across.\n *\n * Called on a project with no legacy directory it is still useful: it creates\n * the project directory and its metadata.\n */\nexport async function migrateLegacyStorage(\n  projectRoot: string,\n  options: MigrateLegacyStorageOptions = {},\n): Promise<MigrationResult> {\n  const status = await resolveStorageMode(projectRoot, { env: options.env });\n  const result = { copied: [] as string[], skipped: [] as string[] };\n\n  try {\n    await mkdir(status.globalDir, { recursive: true });\n  } catch (err) {\n    throw migrationFailure('.', status.globalDir, err);\n  }\n\n  if (status.legacyExists) {\n    await copyTree(status.legacyDir, join(status.globalDir, ISSUES_DIR_NAME), '', result);\n  }\n\n  const now = (options.now ?? isoNow)();\n  const metadataFile = join(status.globalDir, METADATA_FILENAME);\n  const existing = await readExistingMetadata(metadataFile);\n\n  const metadata: ProjectMetadata = {\n    schemaVersion: STORAGE_SCHEMA_VERSION,\n    projectId: status.projectId,\n    root: resolve(projectRoot),\n    remoteUrl: status.remoteUrl,\n    // The project was first seen whenever it was first written, not now.\n    createdAt: existing?.createdAt ?? now,\n    updatedAt: now,\n    lastAttemptAt: existing?.lastAttemptAt ?? null,\n  };\n\n  await writeFileAtomic(metadataFile, `${JSON.stringify(metadata, null, 2)}\\n`);\n\n  return {\n    projectId: status.projectId,\n    globalDir: status.globalDir,\n    legacyDir: status.legacyDir,\n    previousMode: status.mode,\n    ...result,\n    metadataFile,\n    metadata,\n  };\n}\n\nexport interface RecordUserStoryNumberingOptions extends GetGlobalRootOptions {\n  /** Timestamp source, injectable so tests can assert `updatedAt`. */\n  now?: () => string;\n}\n\n/**\n * Persist a `plan` run's User Story numbering decision into the project's\n * `metadata.json`, for audit (issue #36) — this is a read-modify-write on the\n * same file {@link migrateLegacyStorage} stamps, never a second file.\n *\n * The decision itself is never read back to resolve a *later* one: the next\n * `plan` run always re-scans `tasks.json` from scratch (see\n * `storage/user-story-numbering.ts`). Losing this field only costs an audit\n * trail entry, never correctness.\n *\n * A missing `metadata.json` (a project whose first command ever is a numbered\n * `plan`, with no legacy directory to trigger a migration) is created here\n * from scratch, exactly like {@link migrateLegacyStorage} would.\n */\nexport async function recordUserStoryNumbering(\n  projectRoot: string,\n  decision: UserStoryNumberingDecision,\n  options: RecordUserStoryNumberingOptions = {},\n): Promise<void> {\n  const status = await resolveStorageMode(projectRoot, { env: options.env });\n  const metadataFile = join(status.globalDir, METADATA_FILENAME);\n  const existing = await readExistingMetadata(metadataFile);\n  const now = (options.now ?? isoNow)();\n\n  const metadata: ProjectMetadata = {\n    schemaVersion: STORAGE_SCHEMA_VERSION,\n    projectId: status.projectId,\n    root: resolve(projectRoot),\n    remoteUrl: status.remoteUrl,\n    createdAt: existing?.createdAt ?? now,\n    updatedAt: now,\n    lastAttemptAt: existing?.lastAttemptAt ?? null,\n    userStoryNumbering: decision,\n  };\n\n  await mkdir(status.globalDir, { recursive: true });\n  await writeFileAtomic(metadataFile, `${JSON.stringify(metadata, null, 2)}\\n`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,QAAAA,aAAY;AACrB,SAAS,UAAU,QAAAC,OAAM,WAAAC,gBAAe;;;ACAxC,SAAS,UAAU,OAAO,SAAS,UAAU,YAAY;AACzD,SAAS,MAAM,SAAS,WAAW;AA4B5B,IAAM,yBAAyB;AAG/B,IAAM,oBAAoB;AAmDjC,eAAe,gBAAgB,MAAgC;AAC7D,MAAI;AACF,YAAQ,MAAM,KAAK,IAAI,GAAG,YAAY;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,WAAW,MAAgC;AACxD,MAAI;AACF,UAAM,KAAK,IAAI;AACf,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcA,eAAsB,mBACpB,aACA,UAAgC,CAAC,GACT;AACxB,QAAM,YAAY,mBAAmB,MAAM,aAAa,WAAW,CAAC;AACpE,QAAM,YAAY,oBAAoB,WAAW,WAAW;AAC5D,QAAM,YAAY,cAAc,WAAW,OAAO;AAClD,QAAM,YAAY,KAAK,QAAQ,WAAW,GAAG,sBAAsB;AAEnE,QAAM,CAAC,cAAc,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,IACrD,gBAAgB,SAAS;AAAA,IACzB,gBAAgB,SAAS;AAAA,EAC3B,CAAC;AAED,SAAO;AAAA;AAAA;AAAA;AAAA,IAIL,MAAM,gBAAgB,CAAC,eAAe,oBAAoB;AAAA,IAC1D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMA,SAAS,iBAAiB,OAAe,cAAsB,KAAqB;AAClF,QAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAE9D,SAAO,IAAI;AAAA,IACT,sBAAsB,YAAY,aAAa,KAAK,OAAO,MAAM;AAAA,EAEnE;AACF;AAGA,SAAS,QAAQ,cAA8B;AAC7C,SAAO,aAAa,MAAM,GAAG,EAAE,CAAC,KAAK;AACvC;AAQA,eAAe,SACb,YACA,YACA,aACA,QACe;AACf,QAAM,SAAS,KAAK,YAAY,WAAW;AAC3C,QAAM,SAAS,KAAK,YAAY,WAAW;AAE3C,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,QAAQ,QAAQ,EAAE,eAAe,KAAK,CAAC;AAAA,EACzD,SAAS,KAAK;AACZ,UAAM,iBAAiB,QAAQ,WAAW,GAAG,eAAe,KAAK,GAAG;AAAA,EACtE;AAEA,MAAI;AAEF,UAAM,MAAM,QAAQ,EAAE,WAAW,KAAK,CAAC;AAAA,EACzC,SAAS,KAAK;AACZ,UAAM,iBAAiB,QAAQ,WAAW,GAAG,eAAe,KAAK,GAAG;AAAA,EACtE;AAEA,aAAW,SAAS,SAAS;AAC3B,UAAM,eAAe,KAAK,aAAa,MAAM,IAAI;AAEjD,QAAI,MAAM,YAAY,GAAG;AACvB,YAAM,SAAS,YAAY,YAAY,cAAc,MAAM;AAC3D;AAAA,IACF;AACA,QAAI,CAAC,MAAM,OAAO,GAAG;AACnB;AAAA,IACF;AAEA,UAAM,KAAK,KAAK,YAAY,YAAY;AACxC,QAAI;AAIF,UAAI,MAAM,WAAW,EAAE,GAAG;AACxB,eAAO,QAAQ,KAAK,YAAY;AAChC;AAAA,MACF;AACA,YAAM,SAAS,KAAK,YAAY,YAAY,GAAG,EAAE;AACjD,aAAO,OAAO,KAAK,YAAY;AAAA,IACjC,SAAS,KAAK;AACZ,YAAM,iBAAiB,QAAQ,YAAY,GAAG,cAAc,GAAG;AAAA,IACjE;AAAA,EACF;AACF;AASA,eAAe,qBAAqB,MAA+C;AACjF,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,MAAM,OAAO;AAAA,EACpC,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,SAAS,sBAAsB,UAAU,KAAK,MAAM,GAAG,CAAC;AAC9D,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAmBA,eAAsB,qBACpB,aACA,UAAuC,CAAC,GACd;AAC1B,QAAM,SAAS,MAAM,mBAAmB,aAAa,EAAE,KAAK,QAAQ,IAAI,CAAC;AACzE,QAAM,SAAS,EAAE,QAAQ,CAAC,GAAe,SAAS,CAAC,EAAc;AAEjE,MAAI;AACF,UAAM,MAAM,OAAO,WAAW,EAAE,WAAW,KAAK,CAAC;AAAA,EACnD,SAAS,KAAK;AACZ,UAAM,iBAAiB,KAAK,OAAO,WAAW,GAAG;AAAA,EACnD;AAEA,MAAI,OAAO,cAAc;AACvB,UAAM,SAAS,OAAO,WAAW,KAAK,OAAO,WAAW,eAAe,GAAG,IAAI,MAAM;AAAA,EACtF;AAEA,QAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAM,eAAe,KAAK,OAAO,WAAW,iBAAiB;AAC7D,QAAM,WAAW,MAAM,qBAAqB,YAAY;AAExD,QAAM,WAA4B;AAAA,IAChC,eAAe;AAAA,IACf,WAAW,OAAO;AAAA,IAClB,MAAM,QAAQ,WAAW;AAAA,IACzB,WAAW,OAAO;AAAA;AAAA,IAElB,WAAW,UAAU,aAAa;AAAA,IAClC,WAAW;AAAA,IACX,eAAe,UAAU,iBAAiB;AAAA,EAC5C;AAEA,QAAM,gBAAgB,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAE5E,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,cAAc,OAAO;AAAA,IACrB,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AAqBA,eAAsB,yBACpB,aACA,UACA,UAA2C,CAAC,GAC7B;AACf,QAAM,SAAS,MAAM,mBAAmB,aAAa,EAAE,KAAK,QAAQ,IAAI,CAAC;AACzE,QAAM,eAAe,KAAK,OAAO,WAAW,iBAAiB;AAC7D,QAAM,WAAW,MAAM,qBAAqB,YAAY;AACxD,QAAM,OAAO,QAAQ,OAAO,QAAQ;AAEpC,QAAM,WAA4B;AAAA,IAChC,eAAe;AAAA,IACf,WAAW,OAAO;AAAA,IAClB,MAAM,QAAQ,WAAW;AAAA,IACzB,WAAW,OAAO;AAAA,IAClB,WAAW,UAAU,aAAa;AAAA,IAClC,WAAW;AAAA,IACX,eAAe,UAAU,iBAAiB;AAAA,IAC1C,oBAAoB;AAAA,EACtB;AAEA,QAAM,MAAM,OAAO,WAAW,EAAE,WAAW,KAAK,CAAC;AACjD,QAAM,gBAAgB,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAC9E;;;ADzRA,IAAM,eAAe,oBAAI,IAAwC;AAMjE,IAAM,gBAAgB,oBAAI,IAAY;AAQ/B,SAAS,8BAAoC;AAClD,eAAa,MAAM;AACnB,gBAAc,MAAM;AACtB;AAEA,eAAeC,iBAAgB,MAAgC;AAC7D,MAAI;AACF,YAAQ,MAAMC,MAAK,IAAI,GAAG,YAAY;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAeA,SAAS,kBAAkB,QAA+B;AACxD,MAAI,OAAO,OAAO,WAAW,EAAG;AAEhC,QAAM,QAAQ,OAAO,OAAO;AAC5B,QAAM,SAASC,MAAK,OAAO,WAAW,eAAe;AAErD;AAAA,IACE,YAAY,KAAK,QAAQ,UAAU,IAAI,KAAK,GAAG,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,EACvF;AACA;AAAA,IACE,2DAAsD,OAAO,SAAS;AAAA,EACxE;AACF;AAUA,eAAe,eACb,aACA,SAC4B;AAI5B,QAAM,SAAS,MAAM,mBAAmB,aAAa,OAAO;AAE5D,MAAI,OAAO,SAAS,mBAAmB;AACrC,sBAAkB,MAAM,qBAAqB,aAAa,OAAO,CAAC;AAAA,EACpE;AAEA,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB;AACF;AAGA,SAAS,qBACP,aACA,SAC4B;AAC5B,QAAM,MAAM,GAAG,cAAc,OAAO,CAAC,KAAK,WAAW;AAErD,QAAM,SAAS,aAAa,IAAI,GAAG;AACnC,MAAI,OAAQ,QAAO;AAInB,QAAM,UAAU,eAAe,aAAa,OAAO,EAAE,MAAM,CAAC,QAAQ;AAClE,iBAAa,OAAO,GAAG;AACvB,UAAM;AAAA,EACR,CAAC;AAED,eAAa,IAAI,KAAK,OAAO;AAC7B,SAAO;AACT;AAkCA,eAAsB,oBACpB,UAAoC,CAAC,GACP;AAC9B,QAAM,EAAE,aAAa,mBAAmB,GAAG,YAAY,IAAI;AAC3D,QAAM,cAAcC,SAAQ,qBAAsB,MAAM,eAAe,CAAE;AAEzE,QAAM,UAAU,MAAM,qBAAqB,aAAa,WAAW;AACnE,QAAM,aAAa,cAAc,QAAQ,WAAW,WAAW;AAE/D,SAAO;AAAA,IACL,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,WAAWD,MAAK,YAAY,eAAe;AAAA,IAC3C,aAAaA,MAAK,YAAY,iBAAiB;AAAA,IAC/C,qBAAqBA,MAAK,YAAY,yBAAyB;AAAA,EACjE;AACF;AASA,eAAsB,kBACpB,SACA,UAAoC,CAAC,GAChB;AACrB,QAAM,EAAE,aAAa,mBAAmB,GAAG,YAAY,IAAI;AAC3D,QAAM,cAAcC,SAAQ,qBAAsB,MAAM,eAAe,CAAE;AAEzE,QAAM,UAAU,MAAM,qBAAqB,aAAa,WAAW;AACnE,SAAO,cAAc,QAAQ,WAAW,SAAS,WAAW;AAC9D;AAiBA,eAAsB,kBACpB,aACA,UAAoC,CAAC,GAChB;AACrB,QAAM,EAAE,aAAa,mBAAmB,GAAG,YAAY,IAAI;AAC3D,QAAM,cAAcA,SAAQ,qBAAsB,MAAM,eAAe,CAAE;AAEzE,QAAM,UAAU,MAAM,qBAAqB,aAAa,WAAW;AACnE,QAAM,QAAQ,cAAc,QAAQ,WAAW,aAAa,WAAW;AAEvE,MAAI,CAAC,cAAc,IAAI,MAAM,QAAQ,GAAG;AAItC,UAAM,iBAAiBD,MAAK,QAAQ,WAAW,SAAS,MAAM,QAAQ,CAAC;AAEvE,QAAI,CAAE,MAAMF,iBAAgB,MAAM,QAAQ,KAAO,MAAMA,iBAAgB,cAAc,GAAI;AACvF,wBAAkB,MAAM,qBAAqB,aAAa,WAAW,CAAC;AAAA,IACxE;AAIA,kBAAc,IAAI,MAAM,QAAQ;AAAA,EAClC;AAEA,gBAAc,EAAE,WAAW,MAAM,UAAU,CAAC;AAC5C,SAAO;AACT;","names":["stat","join","resolve","directoryExists","stat","join","resolve"]}

package/dist/{chunk-GANSDJV7.js → chunk-IHIEXUTC.js}

@@ -1,17 +1,22 @@
 #!/usr/bin/env node
 import {
   resolvePackageDir
-} from "./chunk-HQYXVIH6.js";
-import {
-  getGlobalRoot,
-  webLockSchema
-} from "./chunk-VQ5VN7DF.js";
+} from "./chunk-MIVHK5YI.js";
 import {
   NullPublisher,
-  isoNow,
   printInfo,
   printWarning
-} from "./chunk-HC2MT7BX.js";
+} from "./chunk-IYV6KNVF.js";
+import {
+  isoNow
+} from "./chunk-DIG5XKQQ.js";
+import {
+  isProcessAlive,
+  webLockSchema
+} from "./chunk-NEZZ6KDR.js";
+import {
+  getGlobalRoot
+} from "./chunk-TX5WIVYP.js";
 
 // src/web/lock.ts
 import { spawn as nodeSpawn } from "child_process";
@@ -52,13 +57,15 @@ function publisherSessionSource(publisher) {
     get: (sessionId) => {
       const snapshot = publisher.snapshot();
       return snapshot.sessionId === sessionId ? snapshot : void 0;
-    }
+    },
+    events: async (sessionId) => publisher.snapshot().sessionId === sessionId ? [] : void 0
   };
 }
 function directorySessionSource(handle) {
   return {
     list: () => handle.sessions().map((entry) => entry.snapshot),
-    get: (sessionId) => handle.getSession(sessionId)?.snapshot
+    get: (sessionId) => handle.getSession(sessionId)?.snapshot,
+    events: (sessionId) => handle.events(sessionId)
   };
 }
 function resolveSessionSource(options) {
@@ -116,7 +123,7 @@ async function startWebServer(options) {
     statusCache.set(key, entry);
     return entry;
   };
-  const handleRequest = (req, res) => {
+  const handleRequest = async (req, res) => {
     baseHeaders(res);
     const requestUrl = new URL(req.url ?? "/", "http://localhost");
     const path = requestUrl.pathname;
@@ -176,11 +183,36 @@ async function startWebServer(options) {
           status: snapshot.status,
           startedAt: snapshot.startedAt,
           updatedAt: snapshot.updatedAt,
-          statusUrl: `/api/status?session=${encodeURIComponent(snapshot.sessionId ?? "")}`
+          // Resilience fields, for a card that has to answer "is this still
+          // moving" during a six-hour run. `updatedAt` is already the last
+          // activity; these two say how hard the run has had to work for it.
+          retries: snapshot.execution.retries,
+          correctionCycle: snapshot.execution.correctionCycle,
+          attempt: snapshot.resilience.attempt,
+          provider: snapshot.resilience.provider,
+          lastFailureKind: snapshot.resilience.lastFailureKind,
+          cooldownUntil: snapshot.resilience.cooldownUntil,
+          lastActivityAt: snapshot.resilience.lastActivityAt,
+          statusUrl: `/api/status?session=${encodeURIComponent(snapshot.sessionId ?? "")}`,
+          eventsUrl: `/api/events?session=${encodeURIComponent(snapshot.sessionId ?? "")}`
         }))
       );
       return;
     }
+    if (path === "/api/events") {
+      const sessionId = requestUrl.searchParams.get("session");
+      if (sessionId === null) {
+        respondJson(res, 400, { error: "Pass ?session=<id>." });
+        return;
+      }
+      const entries = await source.events(sessionId);
+      if (entries === void 0) {
+        respondJson(res, 404, { error: `No active session with id '${sessionId}'.` });
+        return;
+      }
+      respondJson(res, 200, entries);
+      return;
+    }
     if (path === "/api/health") {
       respondJson(res, 200, {
         ok: true,
@@ -198,14 +230,12 @@ async function startWebServer(options) {
     respondJson(res, 404, { error: "Not found" });
   };
   const server = createServer((req, res) => {
-    try {
-      handleRequest(req, res);
-    } catch (err) {
+    void handleRequest(req, res).catch((err) => {
       try {
         respondJson(res, 500, { error: err instanceof Error ? err.message : String(err) });
       } catch {
       }
-    }
+    });
   });
   const listening = await new Promise((resolve) => {
     const onError = (err) => {
@@ -275,14 +305,6 @@ function getWebLockFile(options = {}) {
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
-function isProcessAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err) {
-    return err.code === "EPERM";
-  }
-}
 function probeUrl(host, port) {
   const probeHost = host === "0.0.0.0" ? "127.0.0.1" : host;
   return `http://${probeHost}:${port}/api/health`;
@@ -458,4 +480,4 @@ export {
   ensureSingleWebServer,
   ensureWebMonitor
 };
-//# sourceMappingURL=chunk-GANSDJV7.js.map
+//# sourceMappingURL=chunk-IHIEXUTC.js.map

package/dist/chunk-IHIEXUTC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/web/lock.ts","../src/web/server.ts"],"sourcesContent":["import { type ChildProcess, spawn as nodeSpawn } from 'node:child_process';\nimport { readFile, rm, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport chalk from 'chalk';\nimport { isoNow } from '../core/state-manager.js';\n// The liveness probe is shared with `storage/lock.ts`, which generalised this\n// module's guard into run ownership: one definition of \"is that pid alive\",\n// with one place to get the EPERM case right.\nimport { isProcessAlive } from '../storage/lock.js';\nimport { type GetGlobalRootOptions, getGlobalRoot } from '../storage/paths.js';\nimport { type WebLock, webLockSchema } from '../storage/schemas.js';\nimport { printInfo, printWarning } from '../ui/logger.js';\nimport { startWebServer, type WebServerHandle, type WebServerOptions } from './server.js';\n\n/**\n * Single-instance guard for the web monitoring server (`~/.issue-flow/web.lock`).\n *\n * A machine runs at most one monitoring server. Two entry points build on top\n * of the same lock:\n *\n * - `ensureSingleWebServer` binds (or reuses) a server **in the calling\n *   process**. It is the low-level primitive, used by the `web serve` command\n *   (the standalone process that ends up owning the lock) and by this\n *   module's own tests. Nothing else should call it directly.\n * - `ensureWebMonitor` (US-002) is what `run`/`execute` call: it reuses an\n *   active instance exactly like `ensureSingleWebServer`, but when none\n *   exists it spawns `web serve` as a **detached** child instead of binding\n *   locally, so the server outlives the pipeline process. Falls back to the\n *   legacy in-process `startWebServer` (US-006) when the global storage tree\n *   itself is unreachable.\n */\n\n/** Lock file name, sibling of `config.json` at the global storage root. */\nexport const WEB_LOCK_FILENAME = 'web.lock';\n\n/** How long a health probe against a candidate instance waits before giving up. */\nconst HEALTH_PROBE_TIMEOUT_MS = 1000;\n\n/**\n * A process that loses the atomic lock creation retries this many times,\n * waiting for the winner to finish starting up, before giving up.\n */\nconst LOCK_CLAIM_RETRIES = 5;\nconst LOCK_CLAIM_RETRY_DELAY_MS = 100;\n\nexport function getWebLockFile(options: GetGlobalRootOptions = {}): string {\n  return join(getGlobalRoot(options), WEB_LOCK_FILENAME);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** 0.0.0.0 is not a connectable address; probe loopback instead, same mapping\n * `startWebServer` uses to build its own display URL. */\nfunction probeUrl(host: string, port: number): string {\n  const probeHost = host === '0.0.0.0' ? '127.0.0.1' : host;\n  return `http://${probeHost}:${port}/api/health`;\n}\n\nasync function probeHealth(host: string, port: number): Promise<boolean> {\n  try {\n    const res = await fetch(probeUrl(host, port), {\n      signal: AbortSignal.timeout(HEALTH_PROBE_TIMEOUT_MS),\n    });\n    return res.ok;\n  } catch {\n    return false;\n  }\n}\n\n/** Malformed content (partial write, older/newer incompatible shape) reads as\n * \"no lock\" — the same degrade-to-absent behavior as `loadGlobalConfig()`. */\nexport async function readWebLock(lockFile: string): Promise<WebLock | null> {\n  let raw: string;\n  try {\n    raw = await readFile(lockFile, 'utf-8');\n  } catch {\n    return null;\n  }\n  try {\n    const result = webLockSchema.safeParse(JSON.parse(raw));\n    return result.success ? result.data : null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function removeWebLock(lockFile: string): Promise<void> {\n  try {\n    await rm(lockFile, { force: true });\n  } catch {\n    /* best-effort cleanup */\n  }\n}\n\n/**\n * A lock is only trustworthy when both signals agree: the owning process is\n * alive AND it answers `/api/health`. A dead pid is the obvious stale case;\n * a live pid that does not answer covers a process that still exists but\n * crashed before binding, was killed -9 leaving a zombie-adjacent state, or\n * whose port was reclaimed by something else entirely. Either way the lock is\n * removed so the next attempt starts clean instead of looping on it forever.\n */\nexport async function detectActiveInstance(lockFile: string): Promise<WebLock | null> {\n  const lock = await readWebLock(lockFile);\n  if (lock === null) return null;\n\n  if (isProcessAlive(lock.pid) && (await probeHealth(lock.host, lock.port))) {\n    return lock;\n  }\n\n  await removeWebLock(lockFile);\n  return null;\n}\n\n/**\n * Atomic exclusive create: `wx` fails with EEXIST when another process won\n * the race, which is what lets two concurrent invocations agree on a single\n * winner without a separate lock-of-the-lock.\n */\nasync function claimWebLock(lockFile: string, lock: WebLock): Promise<boolean> {\n  try {\n    await writeFile(lockFile, JSON.stringify(lock, null, 2), { encoding: 'utf-8', flag: 'wx' });\n    return true;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'EEXIST') return false;\n    throw err;\n  }\n}\n\n/** Handle returned when reusing an already-running instance instead of\n * binding a new one — there is no local `Server` to hold, and closing it\n * must not tear down a server another process owns. */\nfunction reusedHandle(lock: WebLock): WebServerHandle {\n  const displayHost = lock.host === '0.0.0.0' ? 'localhost' : lock.host;\n  return {\n    host: lock.host,\n    port: lock.port,\n    url: `http://${displayHost}:${lock.port}`,\n    close: async () => {},\n  };\n}\n\n/**\n * Start the web monitoring server, first checking whether a live instance\n * already owns `web.lock` and reusing it instead of binding a second one.\n *\n * The lock is claimed only *after* a successful bind, never before: claiming\n * it with the port the server is about to (but hasn't yet) listen on would\n * make that lock briefly answer no health probe at all, and a concurrent\n * invocation would misread that gap as \"stale\" and delete a perfectly good\n * lock out from under its owner. Binding first also means two invocations\n * racing for the same fixed port never both reach the claim step — the OS\n * itself lets only one `listen()` succeed. The `wx` claim then exists for the\n * remaining race: two invocations that *both* manage to bind (only possible\n * with an ephemeral port) still agree on exactly one winner. The loser closes\n * the server it just opened and defers to whichever lock exists.\n *\n * Returns null exactly when `startWebServer` would: nothing here may affect\n * the pipeline, so a lock we cannot resolve after every retry degrades to \"no\n * server\" rather than throwing.\n */\nexport async function ensureSingleWebServer(\n  options: WebServerOptions,\n  lockOptions: GetGlobalRootOptions = {},\n): Promise<WebServerHandle | null> {\n  const warn = options.warn ?? printWarning;\n  const info = options.info ?? printInfo;\n  const lockFile = getWebLockFile(lockOptions);\n\n  for (let attempt = 0; attempt <= LOCK_CLAIM_RETRIES; attempt++) {\n    const active = await detectActiveInstance(lockFile);\n    if (active !== null) {\n      info(`Reusing existing web monitor at ${reusedHandle(active).url}`);\n      return reusedHandle(active);\n    }\n\n    const handle = await startWebServer(options);\n    if (handle === null) {\n      // Could not bind. Most likely another instance's listen() won a race\n      // on the same fixed port between our detection above and this call —\n      // its lock should be visible shortly. Anything else (port taken by an\n      // unrelated process, invalid host, ...) fails the same way on the next\n      // retry too, and the loop's own limit stops it from spinning forever.\n      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);\n      continue;\n    }\n\n    let claimed: boolean;\n    try {\n      claimed = await claimWebLock(lockFile, {\n        pid: process.pid,\n        port: handle.port,\n        host: handle.host,\n        startedAt: isoNow(),\n      });\n    } catch (err) {\n      await handle.close();\n      throw err;\n    }\n\n    if (!claimed) {\n      // We bound successfully (an ephemeral port let both of us through),\n      // but another invocation's lock got written first. We are not the\n      // canonical instance: close what we just opened and defer to it.\n      await handle.close();\n      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);\n      continue;\n    }\n\n    const originalClose = handle.close;\n    handle.close = async () => {\n      await originalClose();\n      await removeWebLock(lockFile);\n    };\n    return handle;\n  }\n\n  warn('Could not determine the web monitor lock ownership. Continuing without the web server.');\n  return null;\n}\n\n/** Bounded wait for a freshly spawned `web serve` child to claim the lock. */\nconst DETACHED_CLAIM_TIMEOUT_MS = 5000;\nconst DETACHED_CLAIM_POLL_MS = 150;\n\nexport interface EnsureWebMonitorOptions extends GetGlobalRootOptions {\n  /** Injectable for tests. Defaults to `node:child_process`'s `spawn`. */\n  spawn?: (\n    command: string,\n    args: string[],\n    options: { detached: true; stdio: 'ignore' },\n  ) => ChildProcess;\n  /** Node executable to spawn. Defaults to `process.execPath`. */\n  execPath?: string;\n  /** CLI entry script re-invoked as `<entry> web serve ...`. Defaults to `process.argv[1]`. */\n  entryScript?: string;\n  /** How long to wait for the spawned instance's lock to become healthy. */\n  claimTimeoutMs?: number;\n  claimPollIntervalMs?: number;\n}\n\n/**\n * Entry point for `run`/`execute`: get a web monitor without binding one in\n * this process (US-002).\n *\n * 1. Reuse a live, healthy instance exactly like `ensureSingleWebServer`.\n * 2. Otherwise, spawn `<node> <cli> web serve --port … --host … [--refresh …]`\n *    detached (`{ detached: true, stdio: 'ignore' }`) and `unref()`ed, so it\n *    survives this process exiting and never pipes its own stdio back here.\n * 3. Poll the lock file (bounded) until the spawned instance claims it, then\n *    return a *reused* handle for it — this process never owns that `Server`,\n *    the same shape `ensureSingleWebServer`'s reuse path already returns.\n *\n * Two failure modes degrade gracefully rather than affecting the pipeline:\n * the global storage tree being unreachable (no resolvable home directory)\n * falls back to `startWebServer` bound right here, exactly the pre-US-001\n * behavior (US-006); a spawn or claim failure with the storage tree otherwise\n * healthy just returns null, same contract `startWebServer` itself has.\n */\nexport async function ensureWebMonitor(\n  options: WebServerOptions,\n  monitorOptions: EnsureWebMonitorOptions = {},\n): Promise<WebServerHandle | null> {\n  const warn = options.warn ?? printWarning;\n  const info = options.info ?? printInfo;\n\n  let lockFile: string;\n  try {\n    lockFile = getWebLockFile(monitorOptions);\n  } catch (err) {\n    warn(\n      `Web monitor: global storage unavailable (${err instanceof Error ? err.message : String(err)}). Falling back to legacy in-process mode.`,\n    );\n    return startWebServer(options);\n  }\n\n  const active = await detectActiveInstance(lockFile);\n  if (active !== null) {\n    info(`Reusing existing web monitor at ${reusedHandle(active).url}`);\n    return reusedHandle(active);\n  }\n\n  const execPath = monitorOptions.execPath ?? process.execPath;\n  const entryScript = monitorOptions.entryScript ?? process.argv[1];\n  if (entryScript === undefined) {\n    warn('Web monitor: could not determine the CLI entry point to spawn a detached server.');\n    return null;\n  }\n\n  const args = [\n    entryScript,\n    'web',\n    'serve',\n    '--port',\n    String(options.port),\n    '--host',\n    options.host,\n  ];\n  if (options.refreshSeconds !== undefined) {\n    args.push('--refresh', String(options.refreshSeconds));\n  }\n\n  const spawnFn = monitorOptions.spawn ?? nodeSpawn;\n  try {\n    const child = spawnFn(execPath, args, { detached: true, stdio: 'ignore' });\n    child.unref();\n  } catch (err) {\n    warn(\n      `Web monitor: failed to start the detached server (${err instanceof Error ? err.message : String(err)}). Continuing without the web server.`,\n    );\n    return null;\n  }\n\n  const timeoutMs = monitorOptions.claimTimeoutMs ?? DETACHED_CLAIM_TIMEOUT_MS;\n  const pollMs = monitorOptions.claimPollIntervalMs ?? DETACHED_CLAIM_POLL_MS;\n  const deadline = Date.now() + timeoutMs;\n  while (Date.now() < deadline) {\n    const claimed = await detectActiveInstance(lockFile);\n    if (claimed !== null) {\n      info(`Web monitor running at ${chalk.bold.cyan(reusedHandle(claimed).url)}`);\n      return reusedHandle(claimed);\n    }\n    await sleep(pollMs);\n  }\n\n  warn(\n    'Web monitor: the detached server did not start in time. Continuing without the web server.',\n  );\n  return null;\n}\n","import { createHash } from 'node:crypto';\nimport { readFile } from 'node:fs/promises';\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport { createRequire } from 'node:module';\nimport type { AddressInfo } from 'node:net';\nimport { join } from 'node:path';\nimport chalk from 'chalk';\nimport type { JournalEntry } from '../core/journal.js';\nimport { resolvePackageDir } from '../core/prompt-resolver.js';\nimport {\n  NullPublisher,\n  type SessionPublisher,\n  type SessionSnapshot,\n} from '../core/session-state.js';\nimport { printInfo, printWarning } from '../ui/logger.js';\nimport type { SessionDirectoryHandle } from './session-directory.js';\n\n/**\n * HTTP server for the web monitoring mode. Plain node:http — no new runtime\n * dependencies. Serves the publisher's in-memory snapshot (it never re-reads\n * issues/N/session.json) and the static UI assets.\n *\n * Resilience contract: nothing here may ever affect the pipeline. Listen\n * failures (EADDRINUSE included) log a warning and the execution continues\n * without a server; the server is unref()'d so it cannot keep the process\n * alive; request handling is wrapped so a handler error answers 500 instead\n * of crashing the process.\n */\n\nconst require = createRequire(import.meta.url);\n\n/** Max length of `issueDescription` on GET /api/sessions (dashboard preview). */\nexport const SESSION_LIST_DESCRIPTION_MAX = 280;\n\nfunction readPackageVersion(): string {\n  try {\n    return (require('../../package.json') as { version: string }).version;\n  } catch {\n    return '0.0.0';\n  }\n}\n\n/** Collapse whitespace and truncate for the sessions list payload. */\nexport function truncateSessionDescription(\n  text: string | null | undefined,\n  max = SESSION_LIST_DESCRIPTION_MAX,\n): string | null {\n  if (text === null || text === undefined) return null;\n  const normalized = text.replace(/\\s+/g, ' ').trim();\n  if (normalized.length === 0) return normalized;\n  if (normalized.length <= max) return normalized;\n  return `${normalized.slice(0, max - 1).trimEnd()}…`;\n}\n\nexport interface WebServerOptions {\n  /**\n   * Legacy single-session mode (pre-US-003, still used by the US-006\n   * fallback): serves this publisher's in-memory snapshot directly, with no\n   * directory scan and no lock file involved. Mutually exclusive with\n   * `sessions` — when both are given, `sessions` wins.\n   */\n  publisher?: SessionPublisher;\n  /**\n   * Multi-session mode: sessions discovered by polling the global storage\n   * tree (`web/session-directory.ts`). This is what every current entry\n   * point (`web serve`) passes; `publisher` only exists for the legacy path.\n   */\n  sessions?: SessionDirectoryHandle;\n  port: number;\n  host: string;\n  /** Suggested UI polling interval, exposed via /api/health. */\n  refreshSeconds?: number;\n  /** Package version reported by /api/health. Default: read from package.json. */\n  version?: string;\n  /** Directory holding index.html/app.css/app.js. Default: auto-resolved. */\n  publicDir?: string;\n  /** Info logger. Default: printInfo. */\n  info?: (message: string) => void;\n  /** Warning logger. Default: printWarning. */\n  warn?: (message: string) => void;\n  /**\n   * Whether to `unref()` the underlying socket so it never keeps the process\n   * alive on its own. Default `true`, matching the historical contract for a\n   * server bound inline in the pipeline process. The standalone `web serve`\n   * process (the detached server itself) passes `false`: it has nothing else\n   * to do, so staying alive for as long as the server is bound *is* the job.\n   */\n  unref?: boolean;\n}\n\nexport interface WebServerHandle {\n  /**\n   * Absent when this handle represents an existing instance reused through\n   * `ensureSingleWebServer` (`web/lock.ts`) instead of one bound locally.\n   */\n  server?: Server;\n  /** Host the server is bound to. */\n  host: string;\n  /** Actual bound port (relevant when options.port is 0). */\n  port: number;\n  /** Human-facing access URL. */\n  url: string;\n  /** Close the server and release signal handlers. Idempotent, never rejects. */\n  close(): Promise<void>;\n}\n\ninterface StaticAsset {\n  body: string;\n  contentType: string;\n}\n\nconst JSON_TYPE = 'application/json; charset=utf-8';\n\n/**\n * Uniform view over \"whatever sessions this server knows about\", so the route\n * handlers below never care whether they are backed by a single in-memory\n * publisher (legacy mode) or by the global directory scan (US-003/US-004).\n */\ninterface SessionSource {\n  /** Every session currently considered active, in no particular order. */\n  list(): SessionSnapshot[];\n  /** A specific session by id, or undefined when it is not currently active. */\n  get(sessionId: string): SessionSnapshot | undefined;\n  events(sessionId: string): Promise<JournalEntry[] | undefined>;\n}\n\nfunction publisherSessionSource(publisher: SessionPublisher): SessionSource {\n  return {\n    list: () => {\n      const snapshot = publisher.snapshot();\n      return snapshot.sessionId === null ? [] : [snapshot];\n    },\n    get: (sessionId) => {\n      const snapshot = publisher.snapshot();\n      return snapshot.sessionId === sessionId ? snapshot : undefined;\n    },\n    events: async (sessionId) => (publisher.snapshot().sessionId === sessionId ? [] : undefined),\n  };\n}\n\nfunction directorySessionSource(handle: SessionDirectoryHandle): SessionSource {\n  return {\n    list: () => handle.sessions().map((entry) => entry.snapshot),\n    get: (sessionId) => handle.getSession(sessionId)?.snapshot,\n    events: (sessionId) => handle.events(sessionId),\n  };\n}\n\nfunction resolveSessionSource(options: WebServerOptions): SessionSource {\n  if (options.sessions) return directorySessionSource(options.sessions);\n  return publisherSessionSource(options.publisher ?? new NullPublisher());\n}\n\nconst STATIC_ROUTES: Record<string, { file: string; contentType: string }> = {\n  '/': { file: 'index.html', contentType: 'text/html; charset=utf-8' },\n  '/app.css': { file: 'app.css', contentType: 'text/css; charset=utf-8' },\n  '/app.js': { file: 'app.js', contentType: 'text/javascript; charset=utf-8' },\n};\n\n/** Assets are read once at startup; missing files simply 404. */\nasync function loadStaticAssets(publicDir: string | null): Promise<Map<string, StaticAsset>> {\n  const assets = new Map<string, StaticAsset>();\n  if (publicDir === null) return assets;\n  for (const [route, { file, contentType }] of Object.entries(STATIC_ROUTES)) {\n    try {\n      const body = await readFile(join(publicDir, file), 'utf-8');\n      assets.set(route, { body, contentType });\n    } catch {\n      // Asset not present (e.g. UI not built yet) — route answers 404.\n    }\n  }\n  return assets;\n}\n\n/** Headers applied to every response, including 304s and errors. */\nfunction baseHeaders(res: ServerResponse): void {\n  res.setHeader('Cache-Control', 'no-store');\n  res.setHeader('X-Content-Type-Options', 'nosniff');\n  res.setHeader('Referrer-Policy', 'no-referrer');\n  res.setHeader('X-Robots-Tag', 'noindex, nofollow');\n}\n\nfunction respond(res: ServerResponse, status: number, contentType: string, body: string): void {\n  res.statusCode = status;\n  res.setHeader('Content-Type', contentType);\n  res.end(body);\n}\n\nfunction respondJson(res: ServerResponse, status: number, payload: unknown): void {\n  respond(res, status, JSON_TYPE, JSON.stringify(payload));\n}\n\n/**\n * Start the monitoring HTTP server. Returns null when the server could not\n * listen (port in use, invalid host, ...) — the pipeline continues without\n * monitoring, it is never brought down by the server.\n */\nexport async function startWebServer(options: WebServerOptions): Promise<WebServerHandle | null> {\n  const info = options.info ?? printInfo;\n  const warn = options.warn ?? printWarning;\n  const version = options.version ?? readPackageVersion();\n  const startedAtMs = Date.now();\n\n  // The UI ships at the package root as web/public/ (sibling of prompts/),\n  // resolved the same way from src/ and from the published dist/ layout.\n  const assets = await loadStaticAssets(\n    options.publicDir ?? resolvePackageDir(join('web', 'public')),\n  );\n\n  const source = resolveSessionSource(options);\n\n  // JSON serialization memoized per session id: an unchanged poll answers 304\n  // with an empty body. Content-hashed rather than counter-based, unlike the\n  // pre-multi-session version — a directory-backed session has no in-process\n  // publisher to hand out a monotonic version(), and a hash works uniformly\n  // for both sources.\n  const statusCache = new Map<string, { body: string; etag: string }>();\n  const statusPayload = (snapshot: SessionSnapshot): { body: string; etag: string } => {\n    const key = snapshot.sessionId ?? '';\n    const body = JSON.stringify(snapshot);\n    const cached = statusCache.get(key);\n    if (cached !== undefined && cached.body === body) return cached;\n    const etag = `\"${createHash('sha1').update(body).digest('hex')}\"`;\n    const entry = { body, etag };\n    statusCache.set(key, entry);\n    return entry;\n  };\n\n  const handleRequest = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    baseHeaders(res);\n\n    const requestUrl = new URL(req.url ?? '/', 'http://localhost');\n    const path = requestUrl.pathname;\n\n    // POST /api/control/* is reserved for future write operations (pause,\n    // retry, ...); intentionally NOT registered — the v1 surface is\n    // read-only (snapshot.readOnly is true and capabilities is empty).\n    if (req.method !== 'GET' && req.method !== 'HEAD') {\n      respondJson(res, 404, { error: 'Not found' });\n      return;\n    }\n\n    if (path === '/api/status' || path === '/status.json') {\n      const sessionId = requestUrl.searchParams.get('session');\n      let snapshot: SessionSnapshot | undefined;\n      if (sessionId !== null) {\n        snapshot = source.get(sessionId);\n        if (snapshot === undefined) {\n          respondJson(res, 404, { error: `No active session with id '${sessionId}'.` });\n          return;\n        }\n      } else {\n        // Back-compat shorthand (US-005): with exactly one active session,\n        // GET /api/status with no query string still answers it directly, the\n        // same behavior a single-session run always had. Zero or several\n        // active sessions is genuinely ambiguous without an id and answers an\n        // explicit error instead of guessing.\n        const active = source.list();\n        if (active.length === 0) {\n          respondJson(res, 404, {\n            error: 'No active session. Pass ?session=<id> — see GET /api/sessions.',\n          });\n          return;\n        }\n        if (active.length > 1) {\n          respondJson(res, 409, {\n            error: 'Multiple active sessions; specify ?session=<id>.',\n            sessions: active.map((entry) => entry.sessionId),\n          });\n          return;\n        }\n        snapshot = active[0];\n      }\n\n      const { body, etag } = statusPayload(snapshot);\n      res.setHeader('ETag', etag);\n      if (req.headers['if-none-match'] === etag) {\n        res.statusCode = 304;\n        res.end();\n        return;\n      }\n      respond(res, 200, JSON_TYPE, body);\n      return;\n    }\n\n    if (path === '/api/sessions') {\n      // Summary fields for the multi-session dashboard (issue #35): the full\n      // SessionSnapshot is already in memory, so the client can render cards\n      // from this single list without N× /api/status fetches per poll.\n      // issueDescription is truncated — cards only need a short preview.\n      respondJson(\n        res,\n        200,\n        source.list().map((snapshot) => ({\n          sessionId: snapshot.sessionId,\n          issueNumber: snapshot.issue.number,\n          issueTitle: snapshot.issue.title,\n          issueDescription: truncateSessionDescription(snapshot.issue.description),\n          repositoryName: snapshot.repository.name,\n          currentPhase: snapshot.currentPhase,\n          progressPercent: snapshot.progress.percent,\n          elapsedSeconds: snapshot.elapsedSeconds,\n          status: snapshot.status,\n          startedAt: snapshot.startedAt,\n          updatedAt: snapshot.updatedAt,\n          // Resilience fields, for a card that has to answer \"is this still\n          // moving\" during a six-hour run. `updatedAt` is already the last\n          // activity; these two say how hard the run has had to work for it.\n          retries: snapshot.execution.retries,\n          correctionCycle: snapshot.execution.correctionCycle,\n          attempt: snapshot.resilience.attempt,\n          provider: snapshot.resilience.provider,\n          lastFailureKind: snapshot.resilience.lastFailureKind,\n          cooldownUntil: snapshot.resilience.cooldownUntil,\n          lastActivityAt: snapshot.resilience.lastActivityAt,\n          statusUrl: `/api/status?session=${encodeURIComponent(snapshot.sessionId ?? '')}`,\n          eventsUrl: `/api/events?session=${encodeURIComponent(snapshot.sessionId ?? '')}`,\n        })),\n      );\n      return;\n    }\n\n    if (path === '/api/events') {\n      const sessionId = requestUrl.searchParams.get('session');\n      if (sessionId === null) {\n        respondJson(res, 400, { error: 'Pass ?session=<id>.' });\n        return;\n      }\n      const entries = await source.events(sessionId);\n      if (entries === undefined) {\n        respondJson(res, 404, { error: `No active session with id '${sessionId}'.` });\n        return;\n      }\n      respondJson(res, 200, entries);\n      return;\n    }\n\n    if (path === '/api/health') {\n      respondJson(res, 200, {\n        ok: true,\n        uptime: Math.round((Date.now() - startedAtMs) / 1000),\n        version,\n        refreshSeconds: options.refreshSeconds ?? 5,\n      });\n      return;\n    }\n\n    const asset = assets.get(path);\n    if (asset) {\n      respond(res, 200, asset.contentType, asset.body);\n      return;\n    }\n\n    respondJson(res, 404, { error: 'Not found' });\n  };\n\n  const server = createServer((req, res) => {\n    void handleRequest(req, res).catch((err) => {\n      try {\n        respondJson(res, 500, { error: err instanceof Error ? err.message : String(err) });\n      } catch {\n        // Response already destroyed — nothing to do, never crash the process.\n      }\n    });\n  });\n\n  const listening = await new Promise<boolean>((resolve) => {\n    const onError = (err: NodeJS.ErrnoException): void => {\n      if (err.code === 'EADDRINUSE') {\n        warn(\n          `Web monitor port ${options.port} is already in use. Continuing without the web server.`,\n        );\n      } else {\n        warn(`Web monitor failed to start (${err.message}). Continuing without the web server.`);\n      }\n      resolve(false);\n    };\n    server.once('error', onError);\n    server.listen(options.port, options.host, () => {\n      server.removeListener('error', onError);\n      resolve(true);\n    });\n  });\n\n  if (!listening) return null;\n\n  // Never keep the process alive on its own, unless explicitly told not to\n  // unref: the pipeline ending must end the process. The one exception is the\n  // detached `web serve` process (options.unref === false) — it has no other\n  // work, so staying alive for as long as the server is bound is the point.\n  if (options.unref !== false) {\n    server.unref();\n  }\n  // Post-listen errors must never become uncaught exceptions.\n  server.on('error', (err) => {\n    warn(`Web monitor server error: ${err.message}`);\n  });\n\n  const address = server.address() as AddressInfo;\n  const port = address.port;\n  const displayHost = options.host === '0.0.0.0' ? 'localhost' : options.host;\n  const url = `http://${displayHost}:${port}`;\n\n  if (options.host === '0.0.0.0') {\n    warn('Web monitor bound to 0.0.0.0: anyone on your local network can view the session state.');\n  }\n  info(`Web monitor running at ${chalk.bold.cyan(url)}`);\n\n  let closed = false;\n  let closePromise: Promise<void> | null = null;\n\n  const doClose = (): Promise<void> =>\n    new Promise<void>((resolve) => {\n      process.removeListener('SIGINT', onSignal);\n      process.removeListener('SIGTERM', onSignal);\n      server.close(() => resolve());\n      // Drop idle keep-alive connections so close() never hangs.\n      server.closeAllConnections();\n    });\n\n  const close = (): Promise<void> => {\n    if (closed) return closePromise ?? Promise.resolve();\n    closed = true;\n    closePromise = doClose();\n    return closePromise;\n  };\n\n  // `handle.close` is built here, but ensureSingleWebServer/ensureWebMonitor\n  // and the `web serve` command each wrap it afterwards (to also remove the\n  // lock file, stop the session-directory poller, ...). onSignal below calls\n  // `handle.close()` — the *current* value of the property — rather than the\n  // `close` closed over here, so a `kill -TERM <pid>` (including `issue-flow\n  // web stop`) always runs the fully wrapped shutdown, not just this raw\n  // socket close. Capturing `close` directly here was a real bug: the wrapped\n  // behavior only ever ran for an *explicit* `handle.close()` call, leaving\n  // the lock file (and the poller) behind on every signal-driven shutdown.\n  const handle: WebServerHandle = { server, host: options.host, port, url, close };\n\n  // Explicit close on SIGINT/SIGTERM, then re-raise so the default\n  // termination behavior still applies.\n  const onSignal = (signal: NodeJS.Signals): void => {\n    void handle.close().finally(() => {\n      process.kill(process.pid, signal);\n    });\n  };\n  process.once('SIGINT', onSignal);\n  process.once('SIGTERM', onSignal);\n\n  return handle;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,SAA4B,SAAS,iBAAiB;AACtD,SAAS,YAAAA,WAAU,IAAI,iBAAiB;AACxC,SAAS,QAAAC,aAAY;AACrB,OAAOC,YAAW;;;ACHlB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,oBAA4E;AACrF,SAAS,qBAAqB;AAE9B,SAAS,YAAY;AACrB,OAAO,WAAW;AAuBlB,IAAMC,WAAU,cAAc,YAAY,GAAG;AAGtC,IAAM,+BAA+B;AAE5C,SAAS,qBAA6B;AACpC,MAAI;AACF,WAAQA,SAAQ,oBAAoB,EAA0B;AAAA,EAChE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,2BACd,MACA,MAAM,8BACS;AACf,MAAI,SAAS,QAAQ,SAAS,OAAW,QAAO;AAChD,QAAM,aAAa,KAAK,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAClD,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,MAAI,WAAW,UAAU,IAAK,QAAO;AACrC,SAAO,GAAG,WAAW,MAAM,GAAG,MAAM,CAAC,EAAE,QAAQ,CAAC;AAClD;AA2DA,IAAM,YAAY;AAelB,SAAS,uBAAuB,WAA4C;AAC1E,SAAO;AAAA,IACL,MAAM,MAAM;AACV,YAAM,WAAW,UAAU,SAAS;AACpC,aAAO,SAAS,cAAc,OAAO,CAAC,IAAI,CAAC,QAAQ;AAAA,IACrD;AAAA,IACA,KAAK,CAAC,cAAc;AAClB,YAAM,WAAW,UAAU,SAAS;AACpC,aAAO,SAAS,cAAc,YAAY,WAAW;AAAA,IACvD;AAAA,IACA,QAAQ,OAAO,cAAe,UAAU,SAAS,EAAE,cAAc,YAAY,CAAC,IAAI;AAAA,EACpF;AACF;AAEA,SAAS,uBAAuB,QAA+C;AAC7E,SAAO;AAAA,IACL,MAAM,MAAM,OAAO,SAAS,EAAE,IAAI,CAAC,UAAU,MAAM,QAAQ;AAAA,IAC3D,KAAK,CAAC,cAAc,OAAO,WAAW,SAAS,GAAG;AAAA,IAClD,QAAQ,CAAC,cAAc,OAAO,OAAO,SAAS;AAAA,EAChD;AACF;AAEA,SAAS,qBAAqB,SAA0C;AACtE,MAAI,QAAQ,SAAU,QAAO,uBAAuB,QAAQ,QAAQ;AACpE,SAAO,uBAAuB,QAAQ,aAAa,IAAI,cAAc,CAAC;AACxE;AAEA,IAAM,gBAAuE;AAAA,EAC3E,KAAK,EAAE,MAAM,cAAc,aAAa,2BAA2B;AAAA,EACnE,YAAY,EAAE,MAAM,WAAW,aAAa,0BAA0B;AAAA,EACtE,WAAW,EAAE,MAAM,UAAU,aAAa,iCAAiC;AAC7E;AAGA,eAAe,iBAAiB,WAA6D;AAC3F,QAAM,SAAS,oBAAI,IAAyB;AAC5C,MAAI,cAAc,KAAM,QAAO;AAC/B,aAAW,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC1E,QAAI;AACF,YAAM,OAAO,MAAM,SAAS,KAAK,WAAW,IAAI,GAAG,OAAO;AAC1D,aAAO,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,YAAY,KAA2B;AAC9C,MAAI,UAAU,iBAAiB,UAAU;AACzC,MAAI,UAAU,0BAA0B,SAAS;AACjD,MAAI,UAAU,mBAAmB,aAAa;AAC9C,MAAI,UAAU,gBAAgB,mBAAmB;AACnD;AAEA,SAAS,QAAQ,KAAqB,QAAgB,aAAqB,MAAoB;AAC7F,MAAI,aAAa;AACjB,MAAI,UAAU,gBAAgB,WAAW;AACzC,MAAI,IAAI,IAAI;AACd;AAEA,SAAS,YAAY,KAAqB,QAAgB,SAAwB;AAChF,UAAQ,KAAK,QAAQ,WAAW,KAAK,UAAU,OAAO,CAAC;AACzD;AAOA,eAAsB,eAAe,SAA4D;AAC/F,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,UAAU,QAAQ,WAAW,mBAAmB;AACtD,QAAM,cAAc,KAAK,IAAI;AAI7B,QAAM,SAAS,MAAM;AAAA,IACnB,QAAQ,aAAa,kBAAkB,KAAK,OAAO,QAAQ,CAAC;AAAA,EAC9D;AAEA,QAAM,SAAS,qBAAqB,OAAO;AAO3C,QAAM,cAAc,oBAAI,IAA4C;AACpE,QAAM,gBAAgB,CAAC,aAA8D;AACnF,UAAM,MAAM,SAAS,aAAa;AAClC,UAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,UAAM,SAAS,YAAY,IAAI,GAAG;AAClC,QAAI,WAAW,UAAa,OAAO,SAAS,KAAM,QAAO;AACzD,UAAM,OAAO,IAAI,WAAW,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK,CAAC;AAC9D,UAAM,QAAQ,EAAE,MAAM,KAAK;AAC3B,gBAAY,IAAI,KAAK,KAAK;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,OAAO,KAAsB,QAAuC;AACxF,gBAAY,GAAG;AAEf,UAAM,aAAa,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AAC7D,UAAM,OAAO,WAAW;AAKxB,QAAI,IAAI,WAAW,SAAS,IAAI,WAAW,QAAQ;AACjD,kBAAY,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAC5C;AAAA,IACF;AAEA,QAAI,SAAS,iBAAiB,SAAS,gBAAgB;AACrD,YAAM,YAAY,WAAW,aAAa,IAAI,SAAS;AACvD,UAAI;AACJ,UAAI,cAAc,MAAM;AACtB,mBAAW,OAAO,IAAI,SAAS;AAC/B,YAAI,aAAa,QAAW;AAC1B,sBAAY,KAAK,KAAK,EAAE,OAAO,8BAA8B,SAAS,KAAK,CAAC;AAC5E;AAAA,QACF;AAAA,MACF,OAAO;AAML,cAAM,SAAS,OAAO,KAAK;AAC3B,YAAI,OAAO,WAAW,GAAG;AACvB,sBAAY,KAAK,KAAK;AAAA,YACpB,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AACA,YAAI,OAAO,SAAS,GAAG;AACrB,sBAAY,KAAK,KAAK;AAAA,YACpB,OAAO;AAAA,YACP,UAAU,OAAO,IAAI,CAAC,UAAU,MAAM,SAAS;AAAA,UACjD,CAAC;AACD;AAAA,QACF;AACA,mBAAW,OAAO,CAAC;AAAA,MACrB;AAEA,YAAM,EAAE,MAAM,KAAK,IAAI,cAAc,QAAQ;AAC7C,UAAI,UAAU,QAAQ,IAAI;AAC1B,UAAI,IAAI,QAAQ,eAAe,MAAM,MAAM;AACzC,YAAI,aAAa;AACjB,YAAI,IAAI;AACR;AAAA,MACF;AACA,cAAQ,KAAK,KAAK,WAAW,IAAI;AACjC;AAAA,IACF;AAEA,QAAI,SAAS,iBAAiB;AAK5B;AAAA,QACE;AAAA,QACA;AAAA,QACA,OAAO,KAAK,EAAE,IAAI,CAAC,cAAc;AAAA,UAC/B,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,MAAM;AAAA,UAC5B,YAAY,SAAS,MAAM;AAAA,UAC3B,kBAAkB,2BAA2B,SAAS,MAAM,WAAW;AAAA,UACvE,gBAAgB,SAAS,WAAW;AAAA,UACpC,cAAc,SAAS;AAAA,UACvB,iBAAiB,SAAS,SAAS;AAAA,UACnC,gBAAgB,SAAS;AAAA,UACzB,QAAQ,SAAS;AAAA,UACjB,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA;AAAA;AAAA;AAAA,UAIpB,SAAS,SAAS,UAAU;AAAA,UAC5B,iBAAiB,SAAS,UAAU;AAAA,UACpC,SAAS,SAAS,WAAW;AAAA,UAC7B,UAAU,SAAS,WAAW;AAAA,UAC9B,iBAAiB,SAAS,WAAW;AAAA,UACrC,eAAe,SAAS,WAAW;AAAA,UACnC,gBAAgB,SAAS,WAAW;AAAA,UACpC,WAAW,uBAAuB,mBAAmB,SAAS,aAAa,EAAE,CAAC;AAAA,UAC9E,WAAW,uBAAuB,mBAAmB,SAAS,aAAa,EAAE,CAAC;AAAA,QAChF,EAAE;AAAA,MACJ;AACA;AAAA,IACF;AAEA,QAAI,SAAS,eAAe;AAC1B,YAAM,YAAY,WAAW,aAAa,IAAI,SAAS;AACvD,UAAI,cAAc,MAAM;AACtB,oBAAY,KAAK,KAAK,EAAE,OAAO,sBAAsB,CAAC;AACtD;AAAA,MACF;AACA,YAAM,UAAU,MAAM,OAAO,OAAO,SAAS;AAC7C,UAAI,YAAY,QAAW;AACzB,oBAAY,KAAK,KAAK,EAAE,OAAO,8BAA8B,SAAS,KAAK,CAAC;AAC5E;AAAA,MACF;AACA,kBAAY,KAAK,KAAK,OAAO;AAC7B;AAAA,IACF;AAEA,QAAI,SAAS,eAAe;AAC1B,kBAAY,KAAK,KAAK;AAAA,QACpB,IAAI;AAAA,QACJ,QAAQ,KAAK,OAAO,KAAK,IAAI,IAAI,eAAe,GAAI;AAAA,QACpD;AAAA,QACA,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AAEA,UAAM,QAAQ,OAAO,IAAI,IAAI;AAC7B,QAAI,OAAO;AACT,cAAQ,KAAK,KAAK,MAAM,aAAa,MAAM,IAAI;AAC/C;AAAA,IACF;AAEA,gBAAY,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EAC9C;AAEA,QAAM,SAAS,aAAa,CAAC,KAAK,QAAQ;AACxC,SAAK,cAAc,KAAK,GAAG,EAAE,MAAM,CAAC,QAAQ;AAC1C,UAAI;AACF,oBAAY,KAAK,KAAK,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,MACnF,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,QAAM,YAAY,MAAM,IAAI,QAAiB,CAAC,YAAY;AACxD,UAAM,UAAU,CAAC,QAAqC;AACpD,UAAI,IAAI,SAAS,cAAc;AAC7B;AAAA,UACE,oBAAoB,QAAQ,IAAI;AAAA,QAClC;AAAA,MACF,OAAO;AACL,aAAK,gCAAgC,IAAI,OAAO,uCAAuC;AAAA,MACzF;AACA,cAAQ,KAAK;AAAA,IACf;AACA,WAAO,KAAK,SAAS,OAAO;AAC5B,WAAO,OAAO,QAAQ,MAAM,QAAQ,MAAM,MAAM;AAC9C,aAAO,eAAe,SAAS,OAAO;AACtC,cAAQ,IAAI;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,UAAW,QAAO;AAMvB,MAAI,QAAQ,UAAU,OAAO;AAC3B,WAAO,MAAM;AAAA,EACf;AAEA,SAAO,GAAG,SAAS,CAAC,QAAQ;AAC1B,SAAK,6BAA6B,IAAI,OAAO,EAAE;AAAA,EACjD,CAAC;AAED,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,OAAO,QAAQ;AACrB,QAAM,cAAc,QAAQ,SAAS,YAAY,cAAc,QAAQ;AACvE,QAAM,MAAM,UAAU,WAAW,IAAI,IAAI;AAEzC,MAAI,QAAQ,SAAS,WAAW;AAC9B,SAAK,wFAAwF;AAAA,EAC/F;AACA,OAAK,0BAA0B,MAAM,KAAK,KAAK,GAAG,CAAC,EAAE;AAErD,MAAI,SAAS;AACb,MAAI,eAAqC;AAEzC,QAAM,UAAU,MACd,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAQ,eAAe,UAAU,QAAQ;AACzC,YAAQ,eAAe,WAAW,QAAQ;AAC1C,WAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,WAAO,oBAAoB;AAAA,EAC7B,CAAC;AAEH,QAAM,QAAQ,MAAqB;AACjC,QAAI,OAAQ,QAAO,gBAAgB,QAAQ,QAAQ;AACnD,aAAS;AACT,mBAAe,QAAQ;AACvB,WAAO;AAAA,EACT;AAWA,QAAM,SAA0B,EAAE,QAAQ,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM;AAI/E,QAAM,WAAW,CAAC,WAAiC;AACjD,SAAK,OAAO,MAAM,EAAE,QAAQ,MAAM;AAChC,cAAQ,KAAK,QAAQ,KAAK,MAAM;AAAA,IAClC,CAAC;AAAA,EACH;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,UAAQ,KAAK,WAAW,QAAQ;AAEhC,SAAO;AACT;;;ADhaO,IAAM,oBAAoB;AAGjC,IAAM,0BAA0B;AAMhC,IAAM,qBAAqB;AAC3B,IAAM,4BAA4B;AAE3B,SAAS,eAAe,UAAgC,CAAC,GAAW;AACzE,SAAOC,MAAK,cAAc,OAAO,GAAG,iBAAiB;AACvD;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAIA,SAAS,SAAS,MAAc,MAAsB;AACpD,QAAM,YAAY,SAAS,YAAY,cAAc;AACrD,SAAO,UAAU,SAAS,IAAI,IAAI;AACpC;AAEA,eAAe,YAAY,MAAc,MAAgC;AACvE,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AAAA,MAC5C,QAAQ,YAAY,QAAQ,uBAAuB;AAAA,IACrD,CAAC;AACD,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,YAAY,UAA2C;AAC3E,MAAI;AACJ,MAAI;AACF,UAAM,MAAMC,UAAS,UAAU,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,SAAS,cAAc,UAAU,KAAK,MAAM,GAAG,CAAC;AACtD,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,cAAc,UAAiC;AACnE,MAAI;AACF,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AAUA,eAAsB,qBAAqB,UAA2C;AACpF,QAAM,OAAO,MAAM,YAAY,QAAQ;AACvC,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI,eAAe,KAAK,GAAG,KAAM,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,GAAI;AACzE,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,QAAQ;AAC5B,SAAO;AACT;AAOA,eAAe,aAAa,UAAkB,MAAiC;AAC7E,MAAI;AACF,UAAM,UAAU,UAAU,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAC1F,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,UAAM;AAAA,EACR;AACF;AAKA,SAAS,aAAa,MAAgC;AACpD,QAAM,cAAc,KAAK,SAAS,YAAY,cAAc,KAAK;AACjE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,KAAK,UAAU,WAAW,IAAI,KAAK,IAAI;AAAA,IACvC,OAAO,YAAY;AAAA,IAAC;AAAA,EACtB;AACF;AAqBA,eAAsB,sBACpB,SACA,cAAoC,CAAC,GACJ;AACjC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,WAAW,eAAe,WAAW;AAE3C,WAAS,UAAU,GAAG,WAAW,oBAAoB,WAAW;AAC9D,UAAM,SAAS,MAAM,qBAAqB,QAAQ;AAClD,QAAI,WAAW,MAAM;AACnB,WAAK,mCAAmC,aAAa,MAAM,EAAE,GAAG,EAAE;AAClE,aAAO,aAAa,MAAM;AAAA,IAC5B;AAEA,UAAM,SAAS,MAAM,eAAe,OAAO;AAC3C,QAAI,WAAW,MAAM;AAMnB,YAAM,MAAM,yBAAyB;AACrC;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,aAAa,UAAU;AAAA,QACrC,KAAK,QAAQ;AAAA,QACb,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,WAAW,OAAO;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,OAAO,MAAM;AACnB,YAAM;AAAA,IACR;AAEA,QAAI,CAAC,SAAS;AAIZ,YAAM,OAAO,MAAM;AACnB,YAAM,MAAM,yBAAyB;AACrC;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,YAAY;AACzB,YAAM,cAAc;AACpB,YAAM,cAAc,QAAQ;AAAA,IAC9B;AACA,WAAO;AAAA,EACT;AAEA,OAAK,wFAAwF;AAC7F,SAAO;AACT;AAGA,IAAM,4BAA4B;AAClC,IAAM,yBAAyB;AAoC/B,eAAsB,iBACpB,SACA,iBAA0C,CAAC,GACV;AACjC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAE7B,MAAI;AACJ,MAAI;AACF,eAAW,eAAe,cAAc;AAAA,EAC1C,SAAS,KAAK;AACZ;AAAA,MACE,4CAA4C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9F;AACA,WAAO,eAAe,OAAO;AAAA,EAC/B;AAEA,QAAM,SAAS,MAAM,qBAAqB,QAAQ;AAClD,MAAI,WAAW,MAAM;AACnB,SAAK,mCAAmC,aAAa,MAAM,EAAE,GAAG,EAAE;AAClE,WAAO,aAAa,MAAM;AAAA,EAC5B;AAEA,QAAM,WAAW,eAAe,YAAY,QAAQ;AACpD,QAAM,cAAc,eAAe,eAAe,QAAQ,KAAK,CAAC;AAChE,MAAI,gBAAgB,QAAW;AAC7B,SAAK,kFAAkF;AACvF,WAAO;AAAA,EACT;AAEA,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,QAAQ,IAAI;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,mBAAmB,QAAW;AACxC,SAAK,KAAK,aAAa,OAAO,QAAQ,cAAc,CAAC;AAAA,EACvD;AAEA,QAAM,UAAU,eAAe,SAAS;AACxC,MAAI;AACF,UAAM,QAAQ,QAAQ,UAAU,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACzE,UAAM,MAAM;AAAA,EACd,SAAS,KAAK;AACZ;AAAA,MACE,qDAAqD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACvG;AACA,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,eAAe,kBAAkB;AACnD,QAAM,SAAS,eAAe,uBAAuB;AACrD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,UAAM,UAAU,MAAM,qBAAqB,QAAQ;AACnD,QAAI,YAAY,MAAM;AACpB,WAAK,0BAA0BC,OAAM,KAAK,KAAK,aAAa,OAAO,EAAE,GAAG,CAAC,EAAE;AAC3E,aAAO,aAAa,OAAO;AAAA,IAC7B;AACA,UAAM,MAAM,MAAM;AAAA,EACpB;AAEA;AAAA,IACE;AAAA,EACF;AACA,SAAO;AACT;","names":["readFile","join","chalk","require","join","readFile","chalk"]}

package/dist/chunk-IV5SS4JN.js

@@ -0,0 +1,84 @@
+#!/usr/bin/env node
+import {
+  getShutdownSignal
+} from "./chunk-CNBYCMSU.js";
+import {
+  getSessionPublisher,
+  printRetry
+} from "./chunk-IYV6KNVF.js";
+import {
+  isoNow
+} from "./chunk-DIG5XKQQ.js";
+import {
+  fixedBackoffPolicy,
+  withRetry
+} from "./chunk-KQHB7ZT3.js";
+import {
+  classify
+} from "./chunk-XEYH6ZZI.js";
+
+// src/core/phase-runner.ts
+import { readFile } from "fs/promises";
+var DEFAULT_PHASE_RETRY_LIMIT = 3;
+var DEFAULT_BACKOFF_BASE_SECONDS = 15;
+var DEFAULT_BACKOFF_MAX_SECONDS = 120;
+async function runPhaseWithRetry(options) {
+  const retryLimit = options.retryLimit ?? DEFAULT_PHASE_RETRY_LIMIT;
+  const backoffBaseSeconds = options.backoffBaseSeconds ?? DEFAULT_BACKOFF_BASE_SECONDS;
+  const backoffMaxSeconds = options.backoffMaxSeconds ?? DEFAULT_BACKOFF_MAX_SECONDS;
+  if (retryLimit < 1) return { ok: false, error: "Phase never attempted" };
+  const outcome = await withRetry((attempt) => options.attempt(attempt), {
+    policy: fixedBackoffPolicy(retryLimit, backoffBaseSeconds, backoffMaxSeconds),
+    // The caller's own signal when it has one, and the process-wide shutdown
+    // otherwise: a backoff nobody can interrupt is a `Ctrl+C` that appears to
+    // do nothing for two minutes.
+    signal: options.signal ?? getShutdownSignal(),
+    evaluate: (result) => result.ok ? null : phaseFailure(result),
+    onAttempt: ({ attempt, failure, willRetry, delayMs }) => {
+      if (failure === null || !willRetry) return;
+      const delaySeconds = delayMs / 1e3;
+      getSessionPublisher().publish({
+        type: "retry",
+        at: isoNow(),
+        attempt,
+        delaySeconds,
+        reason: failure.message,
+        kind: failure.kind
+      });
+      printRetry(
+        `Phase ${options.phase} hit a recoverable failure (attempt ${attempt}/${retryLimit}): ${failure.message}. Retrying in ${delaySeconds}s.`
+      );
+    }
+  });
+  return outcome.value;
+}
+function phaseFailure(result) {
+  const message = result.error ?? "Phase failed";
+  return {
+    ...classify({ source: "agent", stdout: message }),
+    message,
+    retryable: result.transient === true
+  };
+}
+async function readFileWithGrace(path, delaysMs = [300, 800]) {
+  for (let i = 0; ; i++) {
+    try {
+      return await readFile(path, "utf-8");
+    } catch (err) {
+      if (i >= delaysMs.length) throw err;
+      await new Promise((resolve) => setTimeout(resolve, delaysMs[i]));
+    }
+  }
+}
+
+// src/utils/retry.ts
+function isTransientFailure(exitCode, output) {
+  return classify({ source: "agent", exitCode, stdout: output }).retryable;
+}
+
+export {
+  runPhaseWithRetry,
+  readFileWithGrace,
+  isTransientFailure
+};
+//# sourceMappingURL=chunk-IV5SS4JN.js.map