nterminal 1.3.4 → 1.3.5

package/dist/server/hooks/lifecycle.js

@@ -0,0 +1,200 @@
+import { createHash } from 'node:crypto';
+// Per-tool-call events (sync or `async: true` registrations) and child-agent
+// events. They only ever mark a session working, so under queue pressure
+// they are coalesced or dropped before any start/stop/completion event.
+const LOW_PRIORITY_EVENTS = new Set(['PreToolUse', 'PostToolUse', 'PostToolUseFailure']);
+export function isLowPriorityLifecycleEvent(event) {
+    return LOW_PRIORITY_EVENTS.has(event.event) || event.event.startsWith('Subagent') || Boolean(event.agentId) || Boolean(event.background);
+}
+export function reduceLifecycle(previous, event) {
+    // Child hooks carry the parent's session ID in some providers. They must not
+    // change the parent's state or create a second parent completion.
+    if (event.agentId || event.background || event.event.startsWith('Subagent'))
+        return previous;
+    const at = Date.parse(event.occurredAt);
+    if (!Number.isFinite(at))
+        return previous;
+    if (previous && at < previous.lastEventAt)
+        return previous;
+    const sameSession = previous?.status.provider === event.provider && previous.status.sessionId === event.sessionId;
+    const old = sameSession ? previous : undefined;
+    if (old?.seen.includes(event.eventId) || (old && at < old.lastEventAt))
+        return previous;
+    const turn = event.turnId ?? event.promptId ?? null;
+    if (old && turn && old.finishedTurns.includes(turn))
+        return previous;
+    const closed = old && ['done', 'stopped', 'idle'].includes(old.status.state);
+    if (old?.recovery?.activeTurn && event.event === 'StopFailure') {
+        if (!turn)
+            return previous;
+        if (turn === old.recovery.turn) {
+            if (at < old.recovery.after || old.recovery.failure)
+                return previous;
+            // Candidate failure is not evidence against A. Keep A's watermark so
+            // an earlier-captured continuation can still invalidate this candidate.
+            return { ...old, seen: [...old.seen, event.eventId].slice(-128),
+                recovery: { ...old.recovery, failure: { eventId: event.eventId, occurredAt: event.occurredAt } } };
+        }
+    }
+    if (old && event.provider === 'claude' && event.event === 'Stop' && (turn ? turn !== old.turn && (old.turn || closed) : closed)) {
+        if (at <= old.lastEventAt || (old.recovery && at <= old.recovery.after))
+            return previous;
+        if (old.recovery?.failure) {
+            // Another provisional Stop cannot erase failure or move its proof
+            // boundary. A genuine prompt/current-turn continuation can supersede it.
+            if (turn !== old.recovery.turn)
+                return previous;
+            return { ...old, seen: [...old.seen, event.eventId].slice(-128) };
+        }
+        // Stop timestamps may be delivery times. A delayed hook is not enough
+        // to retire an active turn or prevent that turn's later hooks arriving.
+        return { ...old, seen: [...old.seen, event.eventId].slice(-128),
+            recovery: { turn, after: at, activeTurn: !closed } };
+    }
+    const recoveringNewTurn = Boolean(old && turn && old.turn !== turn && closed
+        && ['PreToolUse', 'PostToolUse', 'PostToolUseFailure', 'agent-turn-complete', 'StopFailure'].includes(event.event));
+    if (old?.turn && turn && old.turn !== turn && !recoveringNewTurn && !['UserPromptSubmit', 'SessionStart'].includes(event.event))
+        return previous;
+    const next = {
+        status: { provider: event.provider, sessionId: event.sessionId, state: 'idle', source: 'hook', ...old?.status },
+        turn: old?.turn ?? turn,
+        segment: old?.segment ?? 0,
+        lastEventAt: at,
+        seen: [...(old?.seen ?? []), event.eventId].slice(-128),
+        finishedTurns: old?.finishedTurns ?? [],
+        stopPending: old?.stopPending ?? false,
+        pendingWork: old?.pendingWork ?? false,
+        ...(old?.recovery ? { recovery: old.recovery } : {})
+    };
+    const finish = (outcome) => {
+        const identity = turn ?? next.turn ?? `segment:${next.segment}`;
+        const id = createHash('sha256').update(JSON.stringify([event.provider, event.sessionId, identity, outcome])).digest('hex');
+        next.status = { ...next.status, state: outcome === 'finished' ? 'done' : 'stopped', completion: { id, outcome, occurredAt: event.occurredAt } };
+        next.stopPending = false;
+        delete next.recovery;
+        if (turn ?? next.turn)
+            next.finishedTurns = [...next.finishedTurns, (turn ?? next.turn)].slice(-128);
+    };
+    if (recoveringNewTurn) {
+        if (old?.turn)
+            next.finishedTurns = [...next.finishedTurns, old.turn].slice(-128);
+        next.turn = turn;
+        next.segment++;
+        next.pendingWork = false;
+        delete next.recovery;
+    }
+    switch (event.event) {
+        case 'SessionStart':
+            // Compact/resume hooks are not proof that an active turn finished.
+            break;
+        case 'UserPromptSubmit':
+            if (!turn || turn !== old?.turn)
+                next.segment += 1;
+            // A new prompt also retires the preceding turn, even when it was
+            // interrupted before a completion hook could close it.
+            if (turn && old?.turn && turn !== old.turn)
+                next.finishedTurns = [...next.finishedTurns, old.turn].slice(-128);
+            next.turn = turn;
+            next.stopPending = false;
+            next.pendingWork = false;
+            delete next.recovery;
+            next.status.state = 'working';
+            break;
+        case 'PreToolUse':
+        case 'PostToolUse':
+        case 'PostToolUseFailure':
+            if (!turn && (old?.status.state === 'done' || old?.status.state === 'stopped'))
+                return previous;
+            next.turn = turn ?? next.turn;
+            next.stopPending = false;
+            delete next.recovery;
+            next.status.state = 'working';
+            break;
+        case 'PermissionRequest':
+            delete next.recovery;
+            next.status.state = 'waiting';
+            break;
+        case 'Notification':
+            if (event.notificationType === 'permission_prompt')
+                next.status.state = 'waiting';
+            else if (event.notificationType === 'idle_prompt' && next.stopPending && !old?.pendingWork && !next.recovery)
+                finish('finished');
+            else
+                return previous;
+            break;
+        case 'Stop':
+            delete next.recovery;
+            next.status.state = 'finishing';
+            next.stopPending = true;
+            if (typeof event.hasBackgroundTasks === 'boolean')
+                next.pendingWork = event.hasBackgroundTasks;
+            break;
+        case 'agent-turn-complete':
+            if (event.provider !== 'codex')
+                return previous;
+            finish('finished');
+            break;
+        case 'StopFailure':
+        case 'Interrupt':
+            finish('stopped');
+            break;
+        case 'SessionEnd':
+            if (old && ['working', 'finishing', 'waiting'].includes(old.status.state))
+                finish('stopped');
+            else
+                next.status.state = 'idle';
+            break;
+        default:
+            return previous;
+    }
+    return next;
+}
+/** Confirm from a post-turn marker, not from assistant text or inactivity. */
+export function reconcileLifecycle(previous, completion) {
+    if (!completion || (['done', 'stopped'].includes(previous.status.state) && !previous.recovery))
+        return previous;
+    const at = Date.parse(completion.occurredAt);
+    const turn = completion.turnId ?? completion.promptId;
+    const eventId = `transcript:${completion.id}`;
+    if (!Number.isFinite(at) || at < previous.lastEventAt || previous.seen.includes(eventId)
+        || (turn && previous.finishedTurns.includes(turn)))
+        return previous;
+    const recovery = previous.recovery;
+    let recovering = false;
+    if (recovery) {
+        if (at <= recovery.after)
+            return previous;
+        const matching = !turn || !recovery.turn || turn === recovery.turn;
+        // When another turn is still active, an anonymous marker cannot tell a
+        // lost new prompt from a delayed Stop. Require its explicit turn identity.
+        recovering = matching && (!recovery.activeTurn || Boolean(turn && turn === recovery.turn));
+        if (!recovering && (!turn || turn !== previous.turn))
+            return previous;
+    }
+    if (!recovering && turn && previous.turn && turn !== previous.turn)
+        return previous;
+    const failure = recovering ? recovery?.failure : undefined;
+    const confirmedTurn = recovering ? turn ?? recovery.turn : turn ?? previous.turn;
+    const next = { ...previous, status: { ...previous.status }, lastEventAt: Math.max(at, failure ? Date.parse(failure.occurredAt) : at),
+        turn: confirmedTurn ?? null, seen: [...previous.seen, eventId].slice(-128), pendingWork: completion.pending };
+    delete next.recovery;
+    if (recovering) {
+        next.segment++;
+        next.stopPending = true;
+        if (previous.turn && previous.turn !== confirmedTurn)
+            next.finishedTurns = [...next.finishedTurns, previous.turn].slice(-128);
+    }
+    if (completion.pending && !failure) {
+        next.status.state = 'waiting';
+        return next;
+    }
+    const outcome = failure || completion.kind === 'turn_aborted' ? 'stopped' : 'finished';
+    const identity = confirmedTurn ?? `transcript:${completion.id}`;
+    const id = createHash('sha256').update(JSON.stringify([previous.status.provider, previous.status.sessionId, identity, outcome])).digest('hex');
+    next.status = { ...next.status, state: outcome === 'finished' ? 'done' : 'stopped', completion: { id, outcome, occurredAt: failure?.occurredAt ?? completion.occurredAt } };
+    next.stopPending = false;
+    if (confirmedTurn)
+        next.finishedTurns = [...next.finishedTurns, confirmedTurn].slice(-128);
+    return next;
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/server/hooks/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/server/hooks/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqCzC,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAEzF,MAAM,UAAU,2BAA2B,CAAC,KAA+D;IACzG,OAAO,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3I,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAoC,EAAE,KAAqB;IACzF,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7F,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,IAAI,QAAQ,IAAI,EAAE,GAAG,QAAQ,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC;IAC3D,MAAM,WAAW,GAAG,QAAQ,EAAE,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC;IAClH,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,IAAI,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;IACpD,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrE,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,GAAG,EAAE,QAAQ,EAAE,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC;QAC3B,IAAI,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,QAAQ,CAAC;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;gBAC7D,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;QACvG,CAAC;IACH,CAAC;IACD,IAAI,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChI,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACzF,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC1B,kEAAkE;YAClE,yEAAyE;YACzE,IAAI,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,IAAI;gBAAE,OAAO,QAAQ,CAAC;YAChD,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,OAAO,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YAC7D,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM;WACvE,CAAC,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACtH,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjJ,MAAM,IAAI,GAAmB;QAC3B,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE;QAC/G,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;QACvB,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC;QAC1B,WAAW,EAAE,EAAE;QACf,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;QACvD,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,EAAE;QACvC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,KAAK;QACtC,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,KAAK;QACtC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,OAA+B,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3H,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QAChJ,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACrB,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IACxG,CAAC,CAAC;IACF,IAAI,iBAAiB,EAAE,CAAC;QACtB,IAAI,GAAG,EAAE,IAAI;YAAE,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,cAAc;YACjB,mEAAmE;YACnE,MAAM;QACR,KAAK,kBAAkB;YACrB,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,IAAI;gBAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACnD,iEAAiE;YACjE,uDAAuD;YACvD,IAAI,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI;gBAAE,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/G,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,OAAO,IAAI,CAAC,QAAQ,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;YAC9B,MAAM;QACR,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa,CAAC;QACnB,KAAK,oBAAoB;YACvB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAChG,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,OAAO,IAAI,CAAC,QAAQ,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;YAC9B,MAAM;QACR,KAAK,mBAAmB;YACtB,OAAO,IAAI,CAAC,QAAQ,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;YAC9B,MAAM;QACR,KAAK,cAAc;YACjB,IAAI,KAAK,CAAC,gBAAgB,KAAK,mBAAmB;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;iBAC7E,IAAI,KAAK,CAAC,gBAAgB,KAAK,aAAa,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,UAAU,CAAC,CAAC;;gBAC5H,OAAO,QAAQ,CAAC;YACrB,MAAM;QACR,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,QAAQ,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,OAAO,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,kBAAkB,CAAC;YAC/F,MAAM;QACR,KAAK,qBAAqB;YACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;gBAAE,OAAO,QAAQ,CAAC;YAChD,MAAM,CAAC,UAAU,CAAC,CAAC;YACnB,MAAM;QACR,KAAK,aAAa,CAAC;QACnB,KAAK,WAAW;YACd,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,MAAM;QACR,KAAK,YAAY;YACf,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,SAAS,CAAC,CAAC;;gBACxF,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC;YAChC,MAAM;QACR;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,UAAiD;IAC5G,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC;IACtD,MAAM,OAAO,GAAG,cAAc,UAAU,CAAC,EAAE,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;WACnF,CAAC,IAAI,IAAI,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC;QAC1C,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;QACnE,uEAAuE;QACvE,2EAA2E;QAC3E,UAAU,GAAG,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IACpF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,QAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;IAClF,MAAM,IAAI,GAAmB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClJ,IAAI,EAAE,aAAa,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;IAChH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACrB,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;YAAE,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACvF,MAAM,QAAQ,GAAG,aAAa,IAAI,cAAc,UAAU,CAAC,EAAE,EAAE,CAAC;IAChE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/I,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;IAC5K,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IACzB,IAAI,aAAa;QAAE,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/hooks/publicationLock.d.ts

@@ -0,0 +1,3 @@
+import { type LockIdentity } from './verifiedLock.js';
+/** Caller must hold the distinct verified publication guard through release. */
+export declare function acquirePublicationGate(directory: string, owner: LockIdentity, procRoot?: string): Promise<() => Promise<void>>;

package/dist/server/hooks/publicationLock.js

@@ -0,0 +1,137 @@
+import { constants } from 'node:fs';
+import { link, lstat, open, unlink } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { missing, safeParents, syncDirectory } from './hookFiles.js';
+import { VerifiedLockError, isLockIdentity, ownerIsDead } from './verifiedLock.js';
+const UUID = '[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}';
+const unavailable = () => new VerifiedLockError('publication_lock_unsafe');
+// This reader alone accepts two links: the gate plus its exactly identified
+// prepared file. Generic helper/config snapshots still reject all hard links.
+async function readGate(file) {
+    await safeParents(file);
+    let handle;
+    try {
+        handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    }
+    catch (error) {
+        if (missing(error))
+            return null;
+        throw unavailable();
+    }
+    try {
+        const info = await handle.stat();
+        if (!info.isFile() || info.uid !== process.getuid?.() || (info.mode & 0o777) !== 0o600
+            || info.size > 4096 || (info.nlink !== 1 && info.nlink !== 2))
+            throw unavailable();
+        const buffer = Buffer.alloc(4097);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        if (bytesRead > 4096)
+            throw unavailable();
+        const text = new TextDecoder('utf-8', { fatal: true }).decode(buffer.subarray(0, bytesRead));
+        let value;
+        try {
+            value = JSON.parse(text);
+        }
+        catch {
+            throw unavailable();
+        }
+        if (!value || value.version !== 1 || value.kind !== 'nterminal-hook-publication' || !isLockIdentity(value.owner)
+            || typeof value.token !== 'string' || !new RegExp(`^${UUID}$`).test(value.token)
+            || value.prepared !== `.endpoint-owner-${value.token}.tmp`)
+            throw unavailable();
+        if (info.nlink === 2) {
+            const prepared = await lstat(path.join(path.dirname(file), value.prepared)).catch(() => null);
+            if (!prepared?.isFile() || prepared.ino !== info.ino || prepared.dev !== info.dev || prepared.nlink !== 2)
+                throw unavailable();
+        }
+        return { value, text, ino: info.ino, dev: info.dev, nlink: info.nlink };
+    }
+    finally {
+        await handle.close();
+    }
+}
+function same(a, b) {
+    return !!a && a.ino === b.ino && a.dev === b.dev && a.text === b.text;
+}
+async function removeGate(file, expected) {
+    const current = await readGate(file);
+    if (!same(current, expected))
+        throw unavailable();
+    if (current.nlink === 2) {
+        await unlink(path.join(path.dirname(file), current.value.prepared));
+        if (!same(await readGate(file), expected))
+            throw unavailable();
+    }
+    await unlink(file);
+    await syncDirectory(path.dirname(file));
+}
+/** Caller must hold the distinct verified publication guard through release. */
+export async function acquirePublicationGate(directory, owner, procRoot = '/proc') {
+    const file = path.join(directory, '.endpoint-lock');
+    const existing = await readGate(file);
+    if (existing) {
+        if (!await ownerIsDead(existing.value.owner, owner, procRoot))
+            throw new VerifiedLockError('publication_busy', true);
+        await removeGate(file, existing);
+    }
+    const token = randomUUID();
+    const value = { version: 1, kind: 'nterminal-hook-publication', owner, token, prepared: `.endpoint-owner-${token}.tmp` };
+    const temporary = path.join(directory, value.prepared);
+    const text = JSON.stringify(value);
+    let acquired;
+    let created;
+    try {
+        const handle = await open(temporary, 'wx', 0o600);
+        try {
+            const info = await handle.stat();
+            created = { value, text, ino: info.ino, dev: info.dev, nlink: 1 };
+            await handle.chmod(0o600);
+            await handle.writeFile(text);
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        try {
+            await link(temporary, file);
+        }
+        catch (error) {
+            // Never remove an EEXIST replacement: an old mkdir publisher can win the
+            // gap following stale-record reclamation. Unknown old locks fail closed.
+            if (error.code === 'EEXIST') {
+                const winner = await readGate(file);
+                if (winner && !await ownerIsDead(winner.value.owner, owner, procRoot))
+                    throw new VerifiedLockError('publication_busy', true);
+                throw unavailable();
+            }
+            throw new VerifiedLockError('lock_link_unavailable');
+        }
+        acquired = created;
+        await syncDirectory(directory);
+        if (!same(await readGate(file), acquired))
+            throw unavailable();
+        await unlink(temporary);
+        await syncDirectory(directory);
+        const lease = acquired;
+        return () => removeGate(file, lease);
+    }
+    catch (error) {
+        if (acquired)
+            await removeGate(file, acquired);
+        throw error;
+    }
+    finally {
+        // Only this unique, verified prepared inode belongs to us.
+        if (created) {
+            const remaining = await lstat(temporary).catch((error) => { if (!missing(error))
+                throw error; return null; });
+            if (remaining) {
+                if (!remaining.isFile() || remaining.ino !== created.ino || remaining.dev !== created.dev)
+                    throw unavailable();
+                await unlink(temporary);
+            }
+        }
+    }
+}
+//# sourceMappingURL=publicationLock.js.map

package/dist/server/hooks/publicationLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicationLock.js","sourceRoot":"","sources":["../../../src/server/hooks/publicationLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAqB,MAAM,mBAAmB,CAAC;AAItG,MAAM,IAAI,GAAG,8DAA8D,CAAC;AAC5E,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;AAE3E,4EAA4E;AAC5E,8EAA8E;AAC9E,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACpG,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAAC,MAAM,WAAW,EAAE,CAAC;IAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;eACjF,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,SAAS,GAAG,IAAI;YAAE,MAAM,WAAW,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7F,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,WAAW,EAAE,CAAC;QAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;eAC3G,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;eAC7E,KAAK,CAAC,QAAQ,KAAK,mBAAmB,KAAK,CAAC,KAAK,MAAM;YAAE,MAAM,WAAW,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9F,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC;gBAAE,MAAM,WAAW,EAAE,CAAC;QACjI,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,CAAkB,EAAE,CAAW;IAC3C,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,QAAkB;IACxD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,MAAM,WAAW,EAAE,CAAC;IAClD,IAAI,OAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,KAAmB,EAAE,QAAQ,GAAG,OAAO;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACrH,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,KAAK,MAAM,EAAE,CAAC;IACrI,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,QAA8B,CAAC;IACnC,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,OAAO,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/E,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACnC,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACpC,OAAO,KAAK,EAAE,CAAC;YACb,yEAAyE;YACzE,yEAAyE;YACzE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBAC7H,MAAM,WAAW,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,QAAQ,GAAG,OAAO,CAAC;QACnB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;YAAE,MAAM,WAAW,EAAE,CAAC;QAC/D,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ;YAAE,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,2DAA2D;QAC3D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvH,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;oBAAE,MAAM,WAAW,EAAE,CAAC;gBAC/G,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/hooks/verifiedLock.d.ts

@@ -0,0 +1,24 @@
+import { HookControlError } from './hookFiles.js';
+export declare class VerifiedLockError extends HookControlError {
+    readonly retryable: boolean;
+    readonly detail: string;
+    constructor(code: string, retryable?: boolean, detail?: string);
+}
+export interface VerifiedLockLease {
+    identity: LockIdentity;
+    token: string;
+    release(): Promise<void>;
+}
+export type LockIdentity = {
+    host: string;
+    boot: string;
+    namespace: string;
+    pid: number;
+    ticks: string;
+};
+export declare function readLockIdentity(procRoot?: string, machineIdPath?: string): Promise<LockIdentity>;
+export declare function acquireVerifiedLock(directory: string, procRoot?: string, machineIdPath?: string): Promise<VerifiedLockLease>;
+export declare function isLockIdentity(value: unknown): value is LockIdentity;
+export declare function ownerIsDead(owner: Omit<LockIdentity, 'host'> & {
+    host: string | null;
+}, own: LockIdentity, procRoot?: string): Promise<boolean>;

package/dist/server/hooks/verifiedLock.js

@@ -0,0 +1,207 @@
+import { lstat, mkdir, readdir, readlink, rmdir, unlink } from 'node:fs/promises';
+import { createHash, randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { HookControlError, ensureDirectory, missing, replace, snapshot } from './hookFiles.js';
+export class VerifiedLockError extends HookControlError {
+    retryable;
+    detail;
+    constructor(code, retryable = false, detail = code) {
+        super(code);
+        this.retryable = retryable;
+        this.detail = detail;
+    }
+}
+function record(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+function digest(text) { return createHash('sha256').update(text).digest('hex'); }
+const UUID = '[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}';
+const CLAIM_NAME = new RegExp(`^v2-([a-f0-9]{64})-(${UUID})-(\\d{1,20})-([1-9]\\d{0,9})-(\\d{1,20})-(${UUID})$`);
+const LEGACY_CLAIM_NAME = new RegExp(`^v1-(${UUID})-(\\d{1,20})-([1-9]\\d{0,9})-(\\d{1,20})-(${UUID})$`);
+const MAX_LIVE_CLAIMS = 128;
+const MAX_CLAIM_SCAN = 256;
+async function processIdentity(procRoot, pid) {
+    const saved = await snapshot(path.join(procRoot, String(pid), 'stat'), false);
+    if (!saved)
+        return null;
+    const end = saved.text.lastIndexOf(')');
+    const fields = saved.text.slice(end + 2).trim().split(/\s+/);
+    if (!saved.text.startsWith(`${pid} (`) || end < 0 || !/^[A-Za-z]$/.test(fields[0] ?? '')
+        || !/^\d{1,20}$/.test(fields[19] ?? ''))
+        throw new VerifiedLockError('lock_identity_unavailable');
+    return { ticks: fields[19], exited: fields[0] === 'Z' || fields[0] === 'X' };
+}
+export async function readLockIdentity(procRoot = '/proc', machineIdPath = '/etc/machine-id') {
+    try {
+        // Android/container hosts may omit or deny machine-id. Boot/process identity
+        // remains mandatory; only stable cross-boot recovery is lost in that case.
+        const machineId = (await snapshot(machineIdPath, false).catch(() => null))?.text.trim().toLowerCase();
+        const boot = (await snapshot(path.join(procRoot, 'sys/kernel/random/boot_id'), false))?.text.trim();
+        const namespace = /^pid:\[(\d{1,20})\]$/.exec(await readlink(path.join(procRoot, 'self/ns/pid')))?.[1];
+        const own = await processIdentity(procRoot, process.pid);
+        if (!boot || !new RegExp(`^${UUID}$`).test(boot) || !namespace || !own || own.exited)
+            throw new Error();
+        const host = machineId && /^[a-f0-9]{32}$/.test(machineId) && !/^0+$/.test(machineId)
+            ? digest(`nterminal-hook-lock-host\0${machineId}`) : digest(`nterminal-hook-lock-boot\0${boot}`);
+        return { host, boot, namespace, pid: process.pid, ticks: own.ticks };
+    }
+    catch {
+        throw new VerifiedLockError('lock_identity_unavailable');
+    }
+}
+async function legacyLockAbsent(directory) {
+    try {
+        await lstat(directory);
+    }
+    catch (error) {
+        if (missing(error))
+            return;
+        throw error;
+    }
+    // Old empty mkdir locks carry no owner identity and cannot be safely reclaimed.
+    throw new VerifiedLockError('installation_busy');
+}
+async function snapshotClaimFile(target) {
+    try {
+        return await snapshot(target);
+    }
+    catch (error) {
+        if (error instanceof HookControlError && error.code === 'unsafe_path') {
+            // Another cleanup can unlink an opened ticket before snapshot checks nlink.
+            // Only confirmed disappearance is benign; existing replacements still fail.
+            try {
+                await lstat(target);
+            }
+            catch (currentError) {
+                if (missing(currentError))
+                    return null;
+                throw currentError;
+            }
+        }
+        throw error;
+    }
+}
+async function removeClaim(directory) {
+    let names;
+    try {
+        names = await readdir(directory);
+    }
+    catch (error) {
+        if (missing(error))
+            return;
+        throw error;
+    }
+    if (names.length > 16 || names.some((name) => name !== 'ticket.json'
+        && !new RegExp(`^ticket\\.json\\.nterminal-${UUID}\\.tmp$`).test(name)))
+        throw new VerifiedLockError('installation_busy');
+    for (const name of names) {
+        const target = path.join(directory, name);
+        await snapshotClaimFile(target);
+        await unlink(target).catch((error) => { if (!missing(error))
+            throw error; });
+    }
+    await rmdir(directory).catch((error) => { if (!missing(error))
+        throw error; });
+}
+async function claims(directory, own, procRoot) {
+    const result = [];
+    const names = await readdir(directory);
+    // Oversized sets still make bounded cleanup progress. Never admit an owner
+    // without inspecting the entire remaining contention set.
+    for (const name of names.slice(0, MAX_CLAIM_SCAN)) {
+        const match = CLAIM_NAME.exec(name);
+        const legacy = match ? null : LEGACY_CLAIM_NAME.exec(name);
+        if (!match && !legacy)
+            throw new VerifiedLockError('installation_busy');
+        const parts = match ? match.slice(2) : legacy.slice(1);
+        const claim = { name, host: match?.[1] ?? null, boot: parts[0], namespace: parts[1], pid: Number(parts[2]), ticks: parts[3] };
+        const location = path.join(directory, name);
+        let info;
+        try {
+            info = await lstat(location);
+        }
+        catch (error) {
+            if (missing(error))
+                continue;
+            throw error;
+        }
+        if (!info.isDirectory() || info.isSymbolicLink() || (process.getuid && info.uid !== process.getuid())) {
+            throw new VerifiedLockError('unsafe_path');
+        }
+        const dead = await ownerIsDead(claim, own, procRoot);
+        if (dead) {
+            await removeClaim(location);
+            continue;
+        }
+        const saved = await snapshotClaimFile(path.join(location, 'ticket.json'));
+        if (!saved) {
+            result.push({ ...claim, ticket: null });
+            continue;
+        }
+        let value;
+        try {
+            value = JSON.parse(saved.text);
+        }
+        catch {
+            throw new VerifiedLockError('installation_busy');
+        }
+        if (!record(value) || value.version !== 1 || typeof value.ticket !== 'string' || !/^[1-9]\d{0,19}$/.test(value.ticket)) {
+            throw new VerifiedLockError('installation_busy');
+        }
+        result.push({ ...claim, ticket: BigInt(value.ticket) });
+    }
+    if (names.length > MAX_CLAIM_SCAN || result.length > MAX_LIVE_CLAIMS)
+        throw new VerifiedLockError('installation_busy', true, 'capacity');
+    return result;
+}
+export async function acquireVerifiedLock(directory, procRoot = '/proc', machineIdPath = '/etc/machine-id') {
+    await legacyLockAbsent(directory);
+    const identity = await readLockIdentity(procRoot, machineIdPath);
+    const owners = `${directory}.owners`;
+    await ensureDirectory(owners);
+    const token = randomUUID();
+    const name = `v2-${identity.host}-${identity.boot}-${identity.namespace}-${identity.pid}-${identity.ticks}-${token}`;
+    const location = path.join(owners, name);
+    // A fail-fast Lamport bakery lock: publish "choosing" atomically in the
+    // identity-bearing directory name, then choose max(ticket)+1. Later entrants
+    // cannot outrank an admitted owner. Unique claim paths make both crash cleanup
+    // and release safe without a check-then-unlink race on a shared lock pathname.
+    await mkdir(location, { mode: 0o700 });
+    const release = () => removeClaim(location);
+    try {
+        const observed = await claims(owners, identity, procRoot);
+        const ticket = observed.reduce((max, claim) => claim.ticket !== null && claim.ticket > max ? claim.ticket : max, 0n) + 1n;
+        if (ticket.toString().length > 20)
+            throw new VerifiedLockError('installation_busy');
+        await replace(path.join(location, 'ticket.json'), null, JSON.stringify({ version: 1, ticket: ticket.toString() }));
+        await legacyLockAbsent(directory);
+        for (const claim of await claims(owners, identity, procRoot)) {
+            if (claim.name !== name && (claim.ticket === null || claim.ticket < ticket || (claim.ticket === ticket && claim.name < name))) {
+                throw new VerifiedLockError('installation_busy', true, 'contended');
+            }
+        }
+        return { identity, token, release };
+    }
+    catch (error) {
+        await release();
+        throw error;
+    }
+}
+export function isLockIdentity(value) {
+    return record(value) && typeof value.host === 'string' && /^[a-f0-9]{64}$/.test(value.host)
+        && typeof value.boot === 'string' && new RegExp(`^${UUID}$`).test(value.boot)
+        && typeof value.namespace === 'string' && /^\d{1,20}$/.test(value.namespace)
+        && Number.isSafeInteger(value.pid) && Number(value.pid) > 0 && Number(value.pid) <= 0x7fffffff
+        && typeof value.ticks === 'string' && /^\d{1,20}$/.test(value.ticks);
+}
+export async function ownerIsDead(owner, own, procRoot = '/proc') {
+    if (owner.host !== null && owner.host !== own.host)
+        throw new VerifiedLockError('lock_host_mismatch');
+    if (owner.host === null && owner.boot !== own.boot)
+        throw new VerifiedLockError('lock_host_unknown');
+    if (owner.boot !== own.boot)
+        return true;
+    if (owner.namespace !== own.namespace)
+        throw new VerifiedLockError('installation_busy', false, 'foreign_namespace');
+    const current = await processIdentity(procRoot, owner.pid);
+    return !current || current.exited || current.ticks !== owner.ticks;
+}
+//# sourceMappingURL=verifiedLock.js.map

package/dist/server/hooks/verifiedLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedLock.js","sourceRoot":"","sources":["../../../src/server/hooks/verifiedLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAqB,MAAM,gBAAgB,CAAC;AAElH,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IAClB;IAA4B;IAA/D,YAAY,IAAY,EAAW,YAAY,KAAK,EAAW,SAAS,IAAI;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAAzD,cAAS,GAAT,SAAS,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAO;IAAiB,CAAC;CAC/F;AAMD,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClJ,SAAS,MAAM,CAAC,IAAY,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAGjG,MAAM,IAAI,GAAG,8DAA8D,CAAC;AAC5E,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,uBAAuB,IAAI,8CAA8C,IAAI,IAAI,CAAC,CAAC;AACjH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,8CAA8C,IAAI,IAAI,CAAC,CAAC;AACzG,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,GAAW;IAC1D,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;WACnF,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;IACpG,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAQ,GAAG,OAAO,EAAE,aAAa,GAAG,iBAAiB;IAC1F,IAAI,CAAC;QACH,6EAA6E;QAC7E,2EAA2E;QAC3E,MAAM,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtG,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpG,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACxG,MAAM,IAAI,GAAG,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACnF,CAAC,CAAC,MAAM,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;IAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAC/B,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC1D,gFAAgF;IAChF,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAc;IAC7C,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IACtC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACtE,4EAA4E;YAC5E,4EAA4E;YAC5E,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAC5B,OAAO,YAAY,EAAE,CAAC;gBAAC,IAAI,OAAO,CAAC,YAAY,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAAC,MAAM,YAAY,CAAC;YAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB;IAC1C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IACzC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa;WAC/D,CAAC,IAAI,MAAM,CAAC,8BAA8B,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IAC5H,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,SAAiB,EAAE,GAAiB,EAAE,QAAgB;IAC1E,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,2EAA2E;IAC3E,0DAA0D;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;QACjI,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAClG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACtG,MAAM,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrD,IAAI,IAAI,EAAE,CAAC;YAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClE,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvH,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe;QAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACzI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,QAAQ,GAAG,OAAO,EAAE,aAAa,GAAG,iBAAiB;IAChH,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,GAAG,SAAS,SAAS,CAAC;IACrC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;IACrH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,wEAAwE;IACxE,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QAC1H,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QACpF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACnH,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC9H,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,EAAE,CAAC;QAChB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;WACtF,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;WAC1E,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;WACzE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU;WAC3F,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAA2D,EAAE,GAAiB,EAAE,QAAQ,GAAG,OAAO;IAClI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IACtG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;AACrE,CAAC"}

package/dist/server/http.d.ts

@@ -12,8 +12,12 @@ import { type PushNotificationRouteServices } from './routes/pushNotificationRou
 import { type CodeServerRouteServices } from './routes/codeServerRoutes.js';
 import { type AccountRouteServices } from './routes/accountRoutes.js';
 import { type FavoriteRouteServices } from './routes/favoriteRoutes.js';
+import { type HookRouteServices } from './routes/hookRoutes.js';
+import type { TerminalActivityChannel } from './terminal/activityChannel.js';
 export interface BuildAppServices extends AuthRouteServices, TerminalRouteServices, TerminalLayoutRouteServices, UploadRouteServices, FileRouteServices, AgentRouteServices, AgentManagementRouteServices, NotificationAssetRouteServices, PushNotificationRouteServices, FavoriteRouteServices, Omit<Partial<AccountRouteServices>, 'authService'> {
     codeServerManager?: CodeServerRouteServices['codeServerManager'];
+    hookInstallation?: NonNullable<HookRouteServices['hookInstallation']>;
+    activityChannel?: TerminalActivityChannel;
 }
 export declare const webSocketMaxPayloadBytes: number;
 export declare function buildApp(config: AppConfig, services: BuildAppServices): Promise<FastifyInstance>;