omo-ai 5.0.0-0.beta.21 → 5.0.0-0.beta.22

package/bin/lib/bun-runtime.js

@@ -1,8 +1,7 @@
-import { spawnSync } from "node:child_process"
 import { existsSync, realpathSync } from "node:fs"
 import { homedir as osHomedir } from "node:os"
 import { posix, win32 } from "node:path"
-import { propagateResult } from "./child-process.js"
+import { propagateResult, runChild } from "./child-process.js"
 
 // A bun global install lives under <BUN_ROOT>/install/global/, and `bun add -g` links the launcher
 // into <BUN_ROOT>/bin. The link TARGET is what identifies the install, so every comparison below
@@ -120,19 +119,23 @@ export function resolveBunReexec(input) {
 }
 
 /**
- * Runs the decision. Returns true when bun took over the process, in which case the caller must
+ * Runs the decision. Resolves true when bun took over the process, in which case the caller must
  * return immediately: the child has already run to completion and its exit status is propagated.
  *
+ * The wait is asynchronous for the same reason the engine spawn is: this is the outer half of the
+ * launcher chain, and a node process blocked in `spawnSync` here dies to a SIGTERM without ever
+ * telling the bun child - which owns the engine - that anything happened.
+ *
  * Node's execArgv is deliberately dropped - node flags are not bun flags, and forwarding them
  * would fail the very launch this re-exec is meant to make work.
  */
-export function maybeReexecUnderBun(input) {
+export async function maybeReexecUnderBun(input) {
   const decision = resolveBunReexec(input)
   if (!decision.reexec) return false
-  const spawn = input.spawn ?? spawnSync
+  const run = input.spawn ?? runChild
   const propagate = input.propagate ?? propagateResult
   const argv = input.argv ?? process.argv
-  const result = spawn(decision.bunPath, [input.scriptPath, ...argv.slice(2)], {
+  const result = await run(decision.bunPath, [input.scriptPath, ...argv.slice(2)], {
     stdio: "inherit",
     windowsHide: true,
   })

package/bin/lib/child-process.js

@@ -1,4 +1,23 @@
-import { spawnSync } from "node:child_process"
+import { spawn } from "node:child_process"
+
+// Signals a terminal or supervisor sends to the launcher, and what the launcher does with each.
+// SIGTERM and SIGHUP reach one process, so the child has to be told. SIGINT is delivered to the
+// whole foreground process group by the tty, so the child already has it and forwarding would
+// interrupt it twice - the launcher only waits for the child to finish reacting to its own copy.
+const HANDLED_SIGNALS = [
+  ["SIGTERM", true],
+  ["SIGHUP", true],
+  ["SIGINT", false],
+]
+
+// The engine's own shutdown drains in ~1.5-2.5s. Ten seconds is the ceiling before the launcher
+// stops waiting on a child that is not going to leave and reports the death it was asked for.
+const DEFAULT_GRACE_MS = 10_000
+
+function graceMs(env) {
+  const configured = Number(env.OMO_SIGNAL_GRACE_MS)
+  return Number.isFinite(configured) && configured > 0 ? configured : DEFAULT_GRACE_MS
+}
 
 export function propagateResult(result) {
   if (result.error) throw result.error
@@ -9,11 +28,79 @@ export function propagateResult(result) {
   process.exitCode = result.status ?? 1
 }
 
-export function spawnNode(scriptPath, args, options = {}) {
-  const result = spawnSync(process.execPath, [scriptPath, ...args], {
-    stdio: "inherit",
-    windowsHide: true,
-    ...options,
+/**
+ * Runs a child to completion without blocking this process's event loop, so the launcher can still
+ * answer signals while the engine is in the foreground.
+ *
+ * `spawnSync` cannot do this: no JS handler runs while it blocks, so a SIGTERM'd launcher dies
+ * instantly and leaves the engine reparented to init. Here the same signals are forwarded to the
+ * child, the child is given a bounded grace window to shut down on its own terms, and only then is
+ * the signal re-raised on this process.
+ *
+ * Windows has no POSIX signals: `process.on("SIGTERM")` never fires there and `subprocess.kill`
+ * would terminate the child abruptly, so nothing is forwarded and the wait is the whole behavior.
+ */
+export function runChild(command, args, options = {}) {
+  const env = options.env ?? process.env
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, {
+      stdio: "inherit",
+      windowsHide: true,
+      ...options,
+    })
+
+    let settled = false
+    let graceTimer
+    const listeners = []
+
+    const cleanup = () => {
+      for (const [signal, listener] of listeners) process.off(signal, listener)
+      if (graceTimer) clearTimeout(graceTimer)
+    }
+
+    const settle = (outcome) => {
+      if (settled) return
+      settled = true
+      cleanup()
+      outcome()
+    }
+
+    if (process.platform !== "win32") {
+      for (const [signal, forward] of HANDLED_SIGNALS) {
+        const listener = () => {
+          if (forward) {
+            try {
+              child.kill(signal)
+            } catch {
+              // The child is already gone; its exit event carries the real answer.
+            }
+          }
+          // A child that swallows the signal must not keep the launcher alive forever: after the
+          // grace window this process dies of the signal it was sent, exactly as it would have
+          // without a handler installed.
+          if (graceTimer) return
+          graceTimer = setTimeout(() => {
+            settle(() => {
+              // Every listener for this signal has to go, not just this module's: the re-raise only
+              // terminates the process when nothing is left to handle it.
+              process.removeAllListeners(signal)
+              process.kill(process.pid, signal)
+            })
+          }, graceMs(env))
+        }
+        listeners.push([signal, listener])
+        process.on(signal, listener)
+      }
+    }
+
+    child.on("error", (error) => settle(() => reject(error)))
+    // A child that died of the forwarded signal needs no special case: `propagateResult` turns a
+    // signaled result into this process dying by the same signal, which is exactly right.
+    child.on("exit", (status, signal) => settle(() => resolve({ status, signal })))
   })
+}
+
+export async function spawnNode(scriptPath, args, options = {}) {
+  const result = await runChild(process.execPath, [scriptPath, ...args], options)
   propagateResult(result)
 }

package/bin/lib/doctor.js

@@ -1,3 +1,4 @@
+import { spawnSync } from "node:child_process"
 import { existsSync, readFileSync } from "node:fs"
 import { join } from "node:path"
 import { canonicalAgentDir } from "./agent-dir.js"
@@ -51,7 +52,148 @@ function engineVersionOrUnresolved(senpi) {
   }
 }
 
-export function runDoctor(inventory) {
+// The interactive engine's own command line. A published install runs it as
+// `<runtime> .../@code-yeongyu/senpi/dist/cli.js --extension <plugin>`; every non-interactive
+// spelling carries an explicit `--mode`, and those are owned by whoever started them.
+const ENGINE_MARKER = "senpi/dist/cli.js"
+const MANAGED_MODE_FLAG = "--mode"
+
+/**
+ * Reads the live process table. `ps` is the portable answer on macOS and Linux alike, and reading
+ * it can never be a reason for diagnostics to fail, so an unavailable or unparsable listing is an
+ * empty list.
+ */
+function listProcesses() {
+  if (process.platform === "win32") return []
+  const listed = spawnSync("ps", ["-axo", "pid=,ppid=,etime=,tty=,args="], { encoding: "utf8" })
+  if (listed.status !== 0 || typeof listed.stdout !== "string") return []
+  const entries = []
+  for (const line of listed.stdout.split("\n")) {
+    const match = /^\s*(\d+)\s+(\d+)\s+(\S+)\s+(\S+)\s+(.*)$/.exec(line)
+    if (!match) continue
+    entries.push({
+      pid: Number(match[1]),
+      ppid: Number(match[2]),
+      elapsed: match[3],
+      tty: match[4],
+      command: match[5],
+    })
+  }
+  return entries
+}
+
+function isEngine(entry) {
+  return entry.command.includes(ENGINE_MARKER)
+}
+
+function isInteractive(entry) {
+  return !entry.command.includes(MANAGED_MODE_FLAG)
+}
+
+/**
+ * Splits every engine process this machine is running into the three groups that matter:
+ *   - stale:   interactive engines reparented to init, i.e. their launcher died underneath them
+ *   - attached: interactive engines still owned by a live parent (somebody's session)
+ *   - managed:  rpc / app-server engines, which are owned by whatever embeds them
+ * Only the first group is ever reportable, and even then only as a report.
+ */
+export function classifyEngineProcesses(entries) {
+  const stale = []
+  const attached = []
+  const managed = []
+  for (const entry of entries) {
+    if (!isEngine(entry)) continue
+    if (!isInteractive(entry)) managed.push(entry)
+    else if (entry.ppid === 1) stale.push(entry)
+    else attached.push(entry)
+  }
+  return { stale, attached, managed }
+}
+
+export function formatStaleEngineLines(stale) {
+  if (stale.length === 0) return []
+  const lines = stale.map((entry) =>
+    `WARN stale engine pid ${entry.pid} (age ${entry.elapsed}, tty ${entry.tty}) has no launcher; it was orphaned by a signaled launcher`
+  )
+  lines.push(`INFO reap them explicitly by pid: omo doctor --reap ${stale.map((entry) => entry.pid).join(" ")}`)
+  return lines
+}
+
+function parsePid(value) {
+  return /^[1-9]\d*$/.test(value) ? Number(value) : undefined
+}
+
+/**
+ * Terminates named pids and nothing else. Every refusal is deliberate: a pattern kill would reach
+ * live sessions, rpc hosts and app servers, so a pid is only ever signaled when the live process
+ * table still shows it as an orphaned interactive engine at the moment of the request.
+ */
+export function reapStaleEngines(args, options = {}) {
+  const lines = []
+  if (args.length === 0) {
+    lines.push("FAIL --reap needs the pids to terminate: omo doctor --reap <pid> [pid...]")
+    return { lines, failed: true, reaped: [] }
+  }
+
+  const requested = []
+  let failed = false
+  for (const arg of args) {
+    const pid = parsePid(arg)
+    if (pid === undefined) {
+      lines.push(`FAIL refusing ${JSON.stringify(arg)}: --reap takes process ids`)
+      failed = true
+      continue
+    }
+    requested.push(pid)
+  }
+  if (requested.length === 0) return { lines, failed: true, reaped: [] }
+
+  const list = options.list ?? listProcesses
+  const kill = options.kill ?? ((pid, signal) => process.kill(pid, signal))
+  const entries = list()
+  const reaped = []
+  for (const pid of requested) {
+    const entry = entries.find((candidate) => candidate.pid === pid)
+    if (!entry || !isEngine(entry)) {
+      lines.push(`FAIL refusing pid ${pid}: it is not an omo engine process`)
+      failed = true
+      continue
+    }
+    if (!isInteractive(entry)) {
+      lines.push(`FAIL refusing pid ${pid}: it is a managed engine (${MANAGED_MODE_FLAG}), owned by whatever started it`)
+      failed = true
+      continue
+    }
+    if (entry.ppid !== 1) {
+      lines.push(`FAIL refusing pid ${pid}: its launcher (pid ${entry.ppid}) is alive, so it is a live session`)
+      failed = true
+      continue
+    }
+    try {
+      kill(pid, "SIGTERM")
+      reaped.push(pid)
+      lines.push(`PASS reaped stale engine pid ${pid} (age ${entry.elapsed}, tty ${entry.tty})`)
+    } catch (error) {
+      lines.push(`FAIL could not signal pid ${pid}: ${error.message}`)
+      failed = true
+    }
+  }
+  return { lines, failed, reaped }
+}
+
+function staleEngineReport(options) {
+  const list = options.list ?? listProcesses
+  return formatStaleEngineLines(classifyEngineProcesses(list()).stale)
+}
+
+export function runDoctor(inventory, args = [], options = {}) {
+  if (args[0] === "--reap") {
+    const result = reapStaleEngines(args.slice(1), options)
+    console.log(result.lines.join("\n"))
+    process.exitCode = result.failed ? 1 : 0
+    return
+  }
+
   let failed = false
   const lines = []
   for (const [label, artifact] of artifacts) {
@@ -91,6 +233,7 @@ export function runDoctor(inventory) {
 
   lines.push(`INFO omo ${packageManifest().version} (engine: senpi ${engineVersionOrUnresolved(senpi)})`)
   lines.push(...warningsForSettings())
+  lines.push(...staleEngineReport(options))
   if (needsSetupSuggestion(inventory)) {
     lines.push("INFO no credentials found; run omo setup to review sibling stores")
   }

package/bin/lib/launcher.js

@@ -89,12 +89,12 @@ function senpiEnvironment(senpiRoot) {
   return env
 }
 
-function spawnSenpi(args, withExtension) {
+async function spawnSenpi(args, withExtension) {
   const senpi = resolveSenpi()
   const finalArgs = withExtension
     ? ["--extension", join(packageRoot, "plugin"), ...args]
     : args
-  spawnNode(senpi.cliPath, finalArgs, { env: senpiEnvironment(senpi.packageRoot) })
+  await spawnNode(senpi.cliPath, finalArgs, { env: senpiEnvironment(senpi.packageRoot) })
 }
 
 function isInteractiveDefault(args) {
@@ -135,11 +135,11 @@ export async function runLauncher(args = process.argv.slice(2)) {
   reportLegacyFlatAdoption()
   const command = args[0]
   if (command === "ulw-loop") {
-    spawnNode(join(packageRoot, "plugin", "runtime", "agent-toolkit", "ulw-loop", "cli.js"), args.slice(1))
+    await spawnNode(join(packageRoot, "plugin", "runtime", "agent-toolkit", "ulw-loop", "cli.js"), args.slice(1))
     return
   }
   if (command === "doctor") {
-    runDoctor(await detectHarnesses())
+    runDoctor(await detectHarnesses(), args.slice(1))
     return
   }
   if (command === "setup") {
@@ -161,7 +161,7 @@ export async function runLauncher(args = process.argv.slice(2)) {
     return
   }
   if (earlyCommands.has(command) || command === "update") {
-    spawnSenpi(args, false)
+    await spawnSenpi(args, false)
     return
   }
   if (isInteractiveDefault(args)) {
@@ -170,5 +170,5 @@ export async function runLauncher(args = process.argv.slice(2)) {
       console.error("omo: sibling credentials detected; run `omo setup` to review them")
     }
   }
-  spawnSenpi(args, true)
+  await spawnSenpi(args, true)
 }

package/bin/lib/package-paths.js

@@ -31,18 +31,35 @@ export function updateTarget(root = packageRoot, platform = process.platform) {
   return { manager: "npm", command: "npm i -g omo-ai@beta" }
 }
 
-export function resolveSenpi() {
+export function resolveSenpi(options = {}) {
+  const {
+    resolveIndex = () => fileURLToPath(import.meta.resolve("@code-yeongyu/senpi")),
+    platform = process.platform,
+  } = options
   let indexPath
   try {
-    indexPath = fileURLToPath(import.meta.resolve("@code-yeongyu/senpi"))
+    indexPath = resolveIndex()
   } catch (error) {
     throw new Error(`could not resolve @code-yeongyu/senpi; reinstall with: ${updateTarget().command} (${error.message})`)
   }
 
-  const cliPath = join(dirname(indexPath), "cli.js")
+  const distDir = dirname(indexPath)
+  const cliPath = join(distDir, "cli.js")
   if (!existsSync(cliPath)) {
     throw new Error(`senpi CLI is missing at ${cliPath}; reinstall with: ${updateTarget().command}`)
   }
+  // The engine imports this module on every boot, and it is the file interrupted upgrades lose in
+  // the wild (npm reify dies on a Windows-locked native module and leaves a partial tree), so
+  // checking it here turns the engine's raw ERR_MODULE_NOT_FOUND stack into one actionable line.
+  const brandPath = join(distDir, "core", "brand.js")
+  if (!existsSync(brandPath)) {
+    const windowsHint = platform === "win32"
+      ? " (close every running omo/senpi process first: Windows locks loaded native modules, so npm fails with EBUSY mid-upgrade and leaves exactly this partial state)"
+      : ""
+    throw new Error(
+      `senpi engine files are incomplete: ${brandPath} is missing, which usually means an interrupted or failed omo-ai upgrade; reinstall with: ${updateTarget().command}${windowsHint}`,
+    )
+  }
   return { cliPath, packageRoot: dirname(dirname(indexPath)) }
 }
 

package/bin/omo-agent-toolkit.js

@@ -7,7 +7,7 @@ const packageRoot = fileURLToPath(new URL("..", import.meta.url))
 const cliPath = join(packageRoot, "plugin", "runtime", "agent-toolkit", "cli.js")
 
 try {
-  spawnNode(cliPath, process.argv.slice(2))
+  await spawnNode(cliPath, process.argv.slice(2))
 } catch (error) {
   console.error(`omo-agent-toolkit: ${error.message}`)
   process.exitCode = 1

package/bin/omo.js

@@ -16,7 +16,7 @@ try {
   // it is quiet and fail-open by contract, and Windows/npm installs never enter it. The shebang
   // above and the bin mapping in package.json are all Windows shims ever read, and both stay.
   ensureBunBinShim({ scriptPath })
-  const reexeced = maybeReexecUnderBun({ scriptPath })
+  const reexeced = await maybeReexecUnderBun({ scriptPath })
   if (!reexeced) {
     if (process.argv[2] === "setup") await runSetup(process.argv.slice(3))
     else await runLauncher()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omo-ai",
-  "version": "5.0.0-0.beta.21",
+  "version": "5.0.0-0.beta.22",
   "type": "module",
   "description": "omo native edition - the senpi-based OMO harness. Beta channel only: npm i -g omo-ai@beta",
   "bin": {
@@ -15,7 +15,7 @@
   },
   "dependencies": {
     "@babel/parser": "8.0.4",
-    "@code-yeongyu/senpi": "2026.8.26"
+    "@code-yeongyu/senpi": "2026.8.26-2"
   },
   "repository": {
     "type": "git",

package/plugin/extensions/memory-run-supervisor.mjs

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-// omo:UQEyIlCnnJoEfKWfEqgll2SE1XzNtk_hZtYhZ6IzbX8:QaTGHT4AwTnwTe1o51eVN7OHuqyRLlfPutn_RoDdOuQ
+// omo:MaszhefpRbL2YIuOej8EserwRUF7dG7-aI8f5gI8C9U:QaTGHT4AwTnwTe1o51eVN7OHuqyRLlfPutn_RoDdOuQ
 import{spawn as e}from"node:child_process";import{closeSync as t,openSync as r,writeSync as i}from"node:fs";import{join as n}from"node:path";import{fileURLToPath as o}from"node:url";import{randomUUID as a}from"node:crypto";import{open as s,readFile as l,rename as c,unlink as d}from"node:fs/promises";import{dirname as u}from"node:path";async function f(e){return JSON.parse(await l(e,"utf8"))}async function p(e,t,r=384){let i=`${e}.tmp-${process.pid}-${a()}`,n=await s(i,"wx",r);try{await n.writeFile(`${JSON.stringify(t,null,2)}\n`,"utf8"),await n.sync()}finally{await n.close()}await c(i,e),await async function(e){try{let t=await s(e,"r");try{await t.sync()}finally{await t.close()}}catch(e){let t=e instanceof Error&&"code"in e?e.code:void 0;if("win32"!==process.platform||!["EISDIR","EPERM"].includes(String(t)))throw e}}(u(e))}async function m(e,t){let r=await f(e);await p(e,{...r,...t})}async function w(e){try{await d(e)}catch(e){if(!(e instanceof Error&&"code"in e&&"ENOENT"===e.code))throw e}}import{execFile as h,spawn as y,spawnSync as v}from"node:child_process";import{readdirSync as g,watch as E,writeFileSync as I}from"node:fs";import{readFile as b}from"node:fs/promises";function S(){return"1"===process.env.OMO_MEMORY_SUPERVISOR_ALLOW_TEST_SEAMS}function O(){if(S()){let e=process.env.OMO_MEMORY_SUPERVISOR_PLATFORM;if("posix"===e||"win32"===e)return e}return"win32"===process.platform?"win32":"posix"}function _(e,t){let r=S()?process.env.OMO_MEMORY_SUPERVISOR_CLOCK_PATH:void 0;if(void 0===r){let r=setTimeout(t,Math.max(0,e-Date.now()));return()=>clearTimeout(r)}let i=!1,n=()=>{if(i)return;let n=P(r);!Number.isFinite(n)||n<e||(i=!0,o?.close(),clearInterval(a),t())};if(P(r)>=e)return i=!0,t(),()=>{};let o=E(r,n),a=setInterval(n,N);return n(),()=>{i||(i=!0,o.close(),clearInterval(a))}}var N=25;function P(e){let t=g(e).map(e=>/^(\d+)-(-?\d+(?:\.\d+)?)$/.exec(e)).filter(e=>null!==e).sort((e,t)=>Number(e[1])-Number(t[1])).at(-1);return void 0===t?Number.NaN:Number(t[2])}function M(e,t){if(!S())return;let r=process.env.OMO_MEMORY_SUPERVISOR_TASKKILL_RUN_DIR;void 0!==r&&I(`${r}/${e}-${process.pid}.json`,`${JSON.stringify({targetPid:t})}\n`,"utf8")}function x(e){if(!S())return;let t=process.env[e];if(void 0===t)return;let r=JSON.parse(t);if(!Array.isArray(r)||!r.every(e=>"string"==typeof e)||0===r.length)throw TypeError(`${e} must be a non-empty string array`);return r}function T(e,t,r){let[i,...n]=e;if(void 0===i)throw TypeError("termination command is required");if(r){let e=v(i,[...n,...t],{env:process.env,stdio:"ignore",windowsHide:!0});if(void 0!==e.error)throw e.error;return}y(i,[...n,...t],{env:process.env,stdio:"ignore",windowsHide:!0}).once("error",e=>process.stderr.write(`${e.message}\n`))}function R(e,t){M(`posix-${t}`,e);let r=x("OMO_MEMORY_SUPERVISOR_POSIX_SIGNAL_COMMAND");if(void 0===r)try{process.kill(-e,t)}catch(e){if(!(e instanceof Error&&"code"in e&&"ESRCH"===e.code))throw e}else T(r,["--signal-group",String(e),t],!1)}function k(e){void 0!==e&&M("win32-graceful",e)}function A(e,t){"win32"===e?(k(t.pid),t.kill()):void 0!==t.pid&&R(t.pid,"SIGTERM")}function $(e,t,r=!1){void 0!==t&&("win32"===e?function(e,t){T(x("OMO_MEMORY_SUPERVISOR_TASKKILL_COMMAND")??["taskkill"],["/pid",String(e),"/T","/F"],t)}(t,r):R(t,"SIGKILL"))}async function D(e){if("linux"===process.platform)return await async function(e){try{let t=await b(`/proc/${e}/stat`,"utf8"),r=t.lastIndexOf(")");if(r<0)return null;let i=t.slice(r+2).trim().split(/\s+/)[19];return void 0===i?null:`linux-proc-start-ticks:${i}`}catch{return null}}(e);if("darwin"===process.platform||"freebsd"===process.platform){let t=await async function(e,t){return await new Promise(r=>{h(e,[...t],{encoding:"utf8",timeout:2e3},(e,t)=>{if(null!==e)return void r(null);let i=t.trim();r(i.length>0?i:null)})})}("/bin/ps",["-o","lstart=","-p",String(e)]);return null===t?null:`ps-lstart:${t.replace(/\s+/g," ")}`}return null}import{existsSync as L,readFileSync as C}from"node:fs";import{join as j}from"node:path";var U=new Set(["providermodelnotfounderror","ratelimiterror","modelunavailableerror","providerconnectionerror","authenticationerror"]),F=new Set(["quotaexceedederror","insufficientcreditserror","freeusagelimiterror"]),q=new Set(["messageabortederror","permissiondeniederror","contextlengtherror","timeouterror","validationerror","syntaxerror","usererror"]),J=["rate_limit","rate limit","usage_limit_reached","usage limit has been reached","quota","all credentials for model","cooling down","exhausted your capacity","not found","unavailable","insufficient","too many requests","over limit","overloaded","bad gateway","bad request","unknown provider","provider not found","model_not_supported","model not supported","model is not supported","connection error","network error","timeout","service unavailable","internal_server_error","free usage","usage exceeded","credit","balance","temporarily unavailable","try again","请稍后重试","503","502","504","429","529","selected provider is forbidden","provider is forbidden","频率限制","请求过于频繁","暂时不可用","服务不可用","server_error","an error occurred while processing","upstream request failed"],G=["quota will reset after","quota exceeded","free usage limit","billing limit","billing hard limit","monthly limit","plan limit","subscription quota","subscription limit","payment required","out of credits","credits exhausted","insufficient credits","insufficient balance","credit balance","usage limit for this month","exhausted your capacity","daily call limit","daily limit","usage limit reached for","in arrears","fair use policy","recharge and try","使用上限","额度不足","余额不足","已耗尽"],V=["rate limit","cooling down","credentials for model"];function Y(e){if(e.name){let t=e.name.toLowerCase();if(q.has(t))return!1;if(F.has(t))return!1;if(U.has(t))return!0}let t=e.message?.toLowerCase()??"";return!G.some(e=>t.includes(e))&&(!(!(r=t).includes("retrying in")||!V.some(e=>r.includes(e)))||(null!=e.statusCode&&(429===e.statusCode||503===e.statusCode||529===e.statusCode)||J.some(e=>t.includes(e))));var r}var H=/^Error: Model "([^"]+)" not found\. Use --list-models to see available models\.$/m,K=/^(?:Error:\s*)?No API key found for\s+([^\s.]+)/m,z=/(?:^|\s)(\d{3})\s*:/;function B(e){if(e.timedOut||0===e.code)return;let t=`${e.stderr}\n${e.stdout}`,r=H.exec(t)?.[1];if(void 0!==r)return{kind:"model_not_visible",id:r};let i=K.exec(t)?.[1];if(void 0!==i)return{kind:"auth_missing",provider:i};let n=function(e){for(let t of[e.stderr,e.stdout]){let e=t.split("\n").map(e=>e.trim()).find(e=>e.length>0);if(void 0!==e)return e.slice(0,200)}return}(e);if(void 0===n)return;let o=Number.parseInt(z.exec(n)?.[1]??"",10);return Y({message:n,...Number.isNaN(o)?{}:{statusCode:o}})?{kind:"provider_unavailable",detail:n}:void 0}import{randomUUID as X}from"node:crypto";import{closeSync as W,fsyncSync as Q,linkSync as Z,openSync as ee,readFileSync as te,unlinkSync as re,writeFileSync as ie}from"node:fs";import{dirname as ne,join as oe}from"node:path";import{randomUUID as ae}from"node:crypto";import{link as se,mkdir as le,open as ce,readFile as de,stat as ue,unlink as fe}from"node:fs/promises";import{hostname as pe}from"node:os";import me from"node:path";import{randomUUID as we}from"node:crypto";import{hostname as he}from"node:os";import{execFile as ye}from"node:child_process";import{readFile as ve}from"node:fs/promises";async function ge(e){if("linux"===process.platform)return await async function(e){try{let t=await ve(`/proc/${e}/stat`,"utf8"),r=t.lastIndexOf(")");if(r<0)return null;let i=t.slice(r+2).trim().split(/\s+/)[19];return void 0===i?null:`linux-proc-start-ticks:${i}`}catch{return null}}(e);if("darwin"===process.platform||"freebsd"===process.platform){let t=await async function(e,t){return await new Promise(r=>{ye(e,t,{encoding:"utf8",timeout:2e3},(e,t)=>{if(null!==e)return void r(null);let i=t.trim();r(i.length>0?i:null)})})}("/bin/ps",["-o","lstart=","-p",String(e)]);return null===t?null:`ps-lstart:${t.replace(/\s+/g," ")}`}return null}function Ee(e){try{return process.kill(e,0),"alive"}catch(e){let t=function(e){if(e instanceof Error&&"code"in e)return"string"==typeof e.code?e.code:void 0}(e);return"ESRCH"===t?"dead":"EPERM"===t?"alive":"unknown"}}function Ie(e){return"string"==typeof e&&e.length>0}function be(e){let t;try{t=JSON.parse(e)}catch{return null}if("object"!=typeof t||null===t||Array.isArray(t))return null;let r=t;return!Number.isInteger(r.pid)||Number(r.pid)<=0?null:Ie(r.process_start)&&Ie(r.hostname)&&Ie(r.nonce)?!Ie(r.created_at)||Number.isNaN(Date.parse(r.created_at))?null:Ie(r.purpose)&&(void 0===r.run_id||Ie(r.run_id))?{pid:Number(r.pid),process_start:r.process_start,hostname:r.hostname,nonce:r.nonce,created_at:r.created_at,purpose:r.purpose,...void 0===r.run_id?{}:{run_id:r.run_id}}:null:null}async function Se(e,t={}){if(0===e.length)throw Error("lock purpose must not be empty");let r=await ge(process.pid);return{pid:process.pid,process_start:r??"unavailable",hostname:he(),nonce:we(),created_at:(new Date).toISOString(),purpose:e,...void 0===t.runId?{}:{run_id:t.runId}}}class Oe extends Error{lockPath;owner;retriable=!0;constructor(e,t){super(`Lock is held: ${e}`),this.lockPath=e,this.owner=t,this.name="LockContentionError"}}function _e(e){if(e instanceof Error&&"code"in e)return"string"==typeof e.code?e.code:void 0}function Ne(e,t){return t?.throwIfAborted(),new Promise((r,i)=>{let n=setTimeout(a,e),o=()=>a(t?.reason??new DOMException("The operation was aborted","AbortError"));function a(e){clearTimeout(n),t?.removeEventListener("abort",o),void 0===e?r():i(e)}t?.addEventListener("abort",o,{once:!0})})}async function Pe(e){try{let t=await de(e,"utf8");return{raw:t,record:be(t)}}catch(e){let t=_e(e);if("ENOENT"===t)return null;if("\\"===me.sep&&"EPERM"===t)return{raw:"",record:null};throw e}}async function Me(e,t){await le(me.dirname(e),{recursive:!0,mode:448});let r=`${e}.candidate-${ae()}`;try{let i=await ce(r,"wx",384);try{await i.writeFile(`${JSON.stringify(t)}\n`,"utf8"),await i.sync()}finally{await i.close()}try{return await se(r,e),!0}catch(e){if("EEXIST"===_e(e))return!1;throw e}}finally{await fe(r).catch(e=>{if("ENOENT"!==_e(e))throw e})}}async function xe(e){if(e.hostname!==pe())return!1;let t=Ee(e.pid);if("dead"===t)return!0;if("unknown"===t)return!1;let r=await ge(e.pid);return null!==r&&"unavailable"!==e.process_start&&r!==e.process_start}async function Te(e,t,r){if(null===t.record||!await xe(t.record))return!1;let i=`${e}.recovery`,n={...r,nonce:ae(),created_at:(new Date).toISOString(),purpose:`${r.purpose}:recovery`};if(!await Me(i,n))return!1;try{let r=await Pe(e);return null===r||r.raw===t.raw&&null!==r.record&&(!!await xe(r.record)&&(await fe(e),!0))}finally{await Re(i,n)}}async function Re(e,t){let r=await Pe(e);if(null===r||r.record?.nonce!==t.nonce)return!1;try{return await fe(e),!0}catch(e){if("ENOENT"===_e(e))return!1;throw e}}async function ke(e,t,r,i){await async function(e,t,r={}){let i=r.waitTimeoutMs??0,n=r.retryDelayMs??25;if(i<0||n<=0)throw Error("lock wait options must be positive");let o=Date.now()+i;for(;;){if(r.signal?.throwIfAborted(),await Me(e,t))return;r.signal?.throwIfAborted();let i=await Pe(e);if(null!==i&&!await Te(e,i,t)){if(r.signal?.throwIfAborted(),Date.now()>=o)throw new Oe(e,i.record);await Ne(Math.min(n,Math.max(1,o-Date.now())),r.signal)}}}(e,t,i);try{return await r()}finally{await Re(e,t)}}new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0});import{dirname as Ae,join as $e}from"node:path";import{fileURLToPath as De}from"node:url";Ae(De(import.meta.url));import{dirname as Le,join as Ce}from"node:path";import{fileURLToPath as je}from"node:url";var Ue=Le(je(import.meta.url));Ce(Ue,"reflection-persona.md"),Ce(Ue,"dream-persona.md"),new Date(0).toISOString();function Fe(e){return oe(e,"terminal-claim.json")}function qe(e,t,r){return e.runId===t.runId&&e.attempt===t.attempt&&(void 0===r||e.kind===r)}function Je(e,t){let r=`${e}.${process.pid}.${X()}.candidate`;!function(e,t){let r=ee(e,"wx",384);try{ie(r,`${JSON.stringify(t,null,2)}\n`,"utf8"),Q(r)}finally{W(r)}}(r,t);try{Z(r,e)}catch(e){if("EEXIST"===ze(e))return!1;throw e}finally{Ye(r)}return function(e){let t;try{t=ee(e,"r")}catch(e){if("win32"===process.platform&&["EISDIR","EPERM"].includes(ze(e)??""))return;throw e}try{Q(t)}catch(e){if("win32"!==process.platform||!["EPERM","EACCES","EINVAL"].includes(ze(e)??""))throw e}finally{W(t)}}(ne(e)),!0}function Ge(e){let t;try{t=te(e,"utf8")}catch(e){if("ENOENT"===ze(e))return;throw e}try{return{raw:t,claim:Ke(JSON.parse(t))}}catch{return{raw:t,claim:void 0}}}async function Ve(e,t,r,i,n,o){let a=await Se("reflection-finalize",{runId:n.runId});return ke(oe(e,"terminal-claim-recovery.lock"),a,async()=>{let e=Ge(t);if(void 0!==e){if(e.raw!==r.raw)return e.claim;if("invalid"===i){if(void 0!==e.claim)return e.claim}else{if(void 0===e.claim)return;if("publish"!==e.claim.kind||!He(e.claim,o))return e.claim}Ye(t)}},{waitTimeoutMs:Number.POSITIVE_INFINITY})}function Ye(e){try{re(e)}catch(e){if("ENOENT"!==ze(e))throw e}}function He(e,t){return"dead"===(t.getPidLiveness??Ee)(e.claimantPid)}function Ke(e){if(!function(e){return null!==e&&"object"==typeof e&&!Array.isArray(e)}(e)||1!==e.version||"publish"!==e.kind&&"abandon"!==e.kind||"string"!=typeof e.runId||!Number.isInteger(e.attempt)||!Number.isInteger(e.claimantPid)||Number(e.claimantPid)<=0)throw TypeError("Invalid run terminal claim");return{version:1,kind:e.kind,runId:e.runId,attempt:Number(e.attempt),claimantPid:Number(e.claimantPid)}}function ze(e){return e instanceof Error&&"code"in e?String(e.code):void 0}import{join as Be}from"node:path";async function Xe(e,t,r){let i={runId:t.runId,attempt:t.attempt??1},n=await async function(e,t,r,i={},n=process.pid){let o=Fe(e),a={version:1,kind:r,runId:t.runId,attempt:t.attempt,claimantPid:n},s=0;for(;;){if(Je(o,a))return a;let n=Ge(o);if(void 0===n)continue;let l=n.claim;if(void 0===l){if(s>0)throw TypeError("Invalid run terminal claim");s+=1,await(i.beforeRecovery?.("invalid"));let r=await Ve(e,o,n,"invalid",t,i);if(void 0!==r)return r;continue}if(qe(l,t,r))return l;if("publish"!==l.kind||!He(l,i))return l;await(i.beforeRecovery?.("dead-publish"));let c=await Ve(e,o,n,"dead-publish",t,i);if(void 0!==c)return c}}(e,i,"publish");qe(n,i,"publish")&&(await p(j(e,"publishing.json"),{version:1,...i,finishedAt:r.finishedAt}),await async function(e,t,r,i=ke,n=Se){let o=await n("reflection-finalize",{runId:t});return i(Be(e,"terminalization.lock"),o,r,{waitTimeoutMs:Number.POSITIVE_INFINITY})}(e,t.runId,async()=>{if(L(j(e,"final.json"))||L(j(e,"abandoned.json")))return;if(!qe(function(e){return Ke(JSON.parse(te(Fe(e),"utf8")))}(e),i,"publish"))return;let n=void 0!==B({code:r.childExit.code,stdout:C(t.stdoutPath,"utf8"),stderr:C(t.stderrPath,"utf8"),timedOut:r.timedOut});n&&void 0!==t.nextAttempt&&await m(j(e,"ledger.json"),{attempt:t.nextAttempt.attempt,model:t.nextAttempt.model,...void 0===t.nextAttempt.thinking?{thinking:void 0}:{thinking:t.nextAttempt.thinking},launching:!0,pid:void 0,processStart:void 0,childPid:void 0,childProcessStart:void 0}),await p(j(e,"outcome.json"),r),n&&await w(Fe(e))}))}function We(e){try{i(3,`${JSON.stringify(e)}\n`)}catch(e){if(!(e instanceof Error&&"code"in e&&["EPIPE","EBADF"].includes(String(e.code))))throw e}}var Qe=process.argv.slice(2);try{if("--child-bootstrap"===Qe[0]){if(void 0===Qe[1])throw TypeError("run directory is required");await async function(t){if(!await async function(){for await(let e of process.stdin)if(Buffer.byteLength(e)>0)return!0;return!1}())return;let r=await f(n(t,"launch.json")),i=O(),o=e(r.command,[...r.args],{cwd:r.cwd,env:r.env,detached:!1,stdio:["ignore","inherit","inherit"],windowsHide:!0});We({code:o.pid??null,signal:"MODEL_PID"});let a=()=>{"win32"!==i&&"win32"!==process.platform||o.kill()};process.on("SIGTERM",a),process.on("SIGINT",a);let s=_(r.hardDeadlineAt,()=>{"win32"===i?A(i,o):R(process.pid,"SIGTERM")}),l=_(r.hardDeadlineAt+r.terminationGraceMs,()=>{$(i,process.pid)});We(await new Promise(e=>{let t=!1;o.once("error",()=>{t||(t=!0,e({code:null,signal:null}))}),o.once("close",(r,i)=>{t||(t=!0,e({code:r,signal:i}))})}).finally(()=>{s(),l()}))}(Qe[1])}else{if(void 0===Qe[0])throw TypeError("run directory is required");await async function(i){let a=n(i,"launch.json"),s=n(i,"ledger.json"),l=await f(a),c=O();await m(s,{launching:!1,pid:process.pid,processStart:await D(process.pid)});let d,u=r(l.stdoutPath,"w"),p=r(l.stderrPath,"w"),h=e(process.execPath,[o(import.meta.url),"--child-bootstrap",i],{env:process.env,detached:!0,stdio:["pipe",u,p,"pipe"],windowsHide:!0}),y=h.pid,v="",g=h.stdio[3];null!=g&&"setEncoding"in g&&(g.setEncoding("utf8"),g.on("data",e=>{v+=e;for(let e of v.split("\n"))try{let t=JSON.parse(e);"MODEL_PID"===t.signal&&"number"==typeof t.code&&(d=t.code)}catch(e){if(!(e instanceof SyntaxError))throw e}}));let E=(e=!1)=>{try{$(c,y,e)}catch(e){process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`)}};if(process.once("exit",()=>E(!0)),process.once("SIGTERM",()=>{E(),y=void 0,process.exit(143)}),process.once("SIGINT",()=>{E(),y=void 0,process.exit(130)}),void 0===h.pid)throw Error("child bootstrap did not receive a pid");await m(s,{childPid:h.pid,childProcessStart:await D(h.pid)}),h.stdin?.end("1\n");let I,b=!1,N=Promise.resolve();"win32"===c&&(N=new Promise(e=>{I=e}));let M=_(l.hardDeadlineAt,()=>{b=!0,"win32"===c?k(h.pid):A(c,h)}),x=_(l.hardDeadlineAt+l.terminationGraceMs,()=>{$(c,d??y),I?.()}),T=await new Promise((e,t)=>{let r=!1;h.once("error",e=>{r||(r=!0,t(e))}),h.once("close",(t,i)=>{r||(r=!0,e({code:t,signal:i}))})}),R=function(e){let t=e.trim().split("\n").at(-1);if(void 0!==t&&0!==t.length)try{let e=JSON.parse(t),r="number"==typeof e.code||null===e.code?e.code:void 0,i="string"==typeof e.signal||null===e.signal?e.signal:void 0;return void 0===r||void 0===i||"MODEL_PID"===i?void 0:{code:r,signal:i}}catch{return}}(v);"win32"===c&&b&&void 0===R&&await N,M(),x(),y=void 0,t(u),t(p);let L=function(){let e=S()?process.env.OMO_MEMORY_SUPERVISOR_CLOCK_PATH:void 0;return void 0===e?Date.now():P(e)}(),C=(new Date).toISOString(),j={version:1,runId:l.runId,attempt:l.attempt,finishedAt:C,childExit:R??T,timedOut:b||Number.isFinite(L)&&L>=l.hardDeadlineAt};await Xe(i,l,j),await w(a),process.exit(0)}(Qe[0])}}catch(e){process.stderr.write(`${e instanceof Error?e.stack??e.message:String(e)}\n`),process.exitCode=1}