paseo-agy-acp 2.2.0

package/dist/ACP Connector/admission/errors.d.ts

@@ -0,0 +1,18 @@
+export type ProviderFailureCategory = "provider_capacity" | "quota" | "auth" | "permission" | "timeout" | "transport" | "unknown";
+export interface ProviderFailureInput {
+    httpStatus?: number;
+    code?: string;
+    reason?: string;
+    timeout?: boolean;
+}
+export interface ClassifiedProviderFailure {
+    category: ProviderFailureCategory;
+    httpStatus: number | undefined;
+    code: string | undefined;
+    reason: string | undefined;
+}
+/**
+ * Classify the few provider signals v2 can safely retain. Unknown source text
+ * is deliberately discarded before an event or report can persist it.
+ */
+export declare function classifyProviderFailure(input: ProviderFailureInput): ClassifiedProviderFailure;

package/dist/ACP Connector/admission/errors.js

@@ -0,0 +1,46 @@
+const SAFE_CODES = new Set([
+    "UNAVAILABLE",
+    "MODEL_CAPACITY_EXHAUSTED",
+    "QUOTA_EXHAUSTED",
+    "UNAUTHENTICATED",
+    "PERMISSION_DENIED"
+]);
+/**
+ * Classify the few provider signals v2 can safely retain. Unknown source text
+ * is deliberately discarded before an event or report can persist it.
+ */
+export function classifyProviderFailure(input) {
+    const httpStatus = validHttpStatus(input.httpStatus);
+    const code = safeSignal(input.code);
+    const reason = safeSignal(input.reason);
+    if (httpStatus === 503 && (isCapacitySignal(code) || isCapacitySignal(reason))) {
+        return classified("provider_capacity", httpStatus, code, reason);
+    }
+    if (httpStatus === 429 && (code === "QUOTA_EXHAUSTED" || reason === "QUOTA_EXHAUSTED")) {
+        return classified("quota", httpStatus, code, reason);
+    }
+    if (httpStatus === 401 || code === "UNAUTHENTICATED" || reason === "UNAUTHENTICATED") {
+        return classified("auth", httpStatus, code, reason);
+    }
+    if (httpStatus === 403 || code === "PERMISSION_DENIED" || reason === "PERMISSION_DENIED") {
+        return classified("permission", httpStatus, code, reason);
+    }
+    if (httpStatus !== undefined)
+        return classified("transport", httpStatus, undefined, undefined);
+    if (input.timeout === true)
+        return classified("timeout", httpStatus, code, reason);
+    return classified("unknown", undefined, undefined, undefined);
+}
+function classified(category, httpStatus, code, reason) {
+    return { category, httpStatus, code, reason };
+}
+function validHttpStatus(value) {
+    return Number.isInteger(value) && value >= 100 && value <= 599 ? value : undefined;
+}
+function safeSignal(value) {
+    return value !== undefined && SAFE_CODES.has(value) ? value : undefined;
+}
+function isCapacitySignal(value) {
+    return value === "UNAVAILABLE" || value === "MODEL_CAPACITY_EXHAUSTED";
+}
+//# sourceMappingURL=errors.js.map

package/dist/ACP Connector/admission/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../ACP Connector/admission/errors.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,aAAa;IACb,0BAA0B;IAC1B,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA2B;IACjE,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,UAAU,CAAC,mBAAmB,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,KAAK,iBAAiB,CAAC,EAAE,CAAC;QACvF,OAAO,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,IAAI,KAAK,iBAAiB,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACrF,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,IAAI,KAAK,mBAAmB,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACzF,OAAO,UAAU,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnF,OAAO,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CACjB,QAAiC,EACjC,UAA8B,EAC9B,IAAwB,EACxB,MAA0B;IAE1B,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAM,IAAI,GAAG,IAAI,KAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,OAAO,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,OAAO,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,0BAA0B,CAAC;AACzE,CAAC"}

package/dist/ACP Connector/admission/owner-instance.d.ts

@@ -0,0 +1,31 @@
+import { type LinuxProcessEvidenceReaders, type LinuxProcessIdentity, type LinuxProcessIdentityState } from "../../Admission Controller/process-evidence.js";
+/** A connector-local owner token paired with immutable Linux process evidence. */
+export interface LinuxConnectorOwnerIdentity extends LinuxProcessIdentity {
+    readonly ownerInstanceId: string;
+    readonly createdAt: string;
+}
+/** Conservative result of checking a persisted connector owner record. */
+export type LinuxConnectorOwnerIdentityState = LinuxProcessIdentityState;
+/** Injectable nondeterministic dependencies keep tests away from runtime state and real processes. */
+export interface OwnerInstanceDependencies {
+    readonly createOwnerInstanceId?: () => string;
+    readonly now?: () => Date;
+}
+export declare class ConnectorOwnerIdentityError extends Error {
+    constructor(message: string);
+}
+/**
+ * Capture the current connector owner record without persisting it. Callers
+ * must supply process-evidence readers explicitly so the boundary is visible.
+ */
+export declare function captureLinuxConnectorOwnerIdentity(pid: number, readers: LinuxProcessEvidenceReaders, dependencies?: OwnerInstanceDependencies): LinuxConnectorOwnerIdentity;
+/**
+ * Re-observe the persisted record's PID and return false for every malformed,
+ * unavailable, or mismatched condition. It never reads or writes runtime files.
+ */
+export declare function verifyPersistedLinuxConnectorOwnerIdentity(persisted: unknown, readers: LinuxProcessEvidenceReaders): boolean;
+/**
+ * Re-observe a persisted connector owner without treating PID existence as
+ * ownership. Malformed owner records and unreadable procfs both fail closed.
+ */
+export declare function observePersistedLinuxConnectorOwnerIdentity(persisted: unknown, readers: LinuxProcessEvidenceReaders): LinuxConnectorOwnerIdentityState;

package/dist/ACP Connector/admission/owner-instance.js

@@ -0,0 +1,105 @@
+import { randomUUID } from "node:crypto";
+import { captureLinuxProcessIdentity, isSameLinuxProcessIdentity, observeLinuxProcessIdentity } from "../../Admission Controller/process-evidence.js";
+const OWNER_INSTANCE_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
+const ISO_UTC_TIMESTAMP_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+export class ConnectorOwnerIdentityError extends Error {
+    constructor(message) {
+        super(`connector owner identity error: ${message}`);
+        this.name = "ConnectorOwnerIdentityError";
+    }
+}
+/**
+ * Capture the current connector owner record without persisting it. Callers
+ * must supply process-evidence readers explicitly so the boundary is visible.
+ */
+export function captureLinuxConnectorOwnerIdentity(pid, readers, dependencies = {}) {
+    const ownerInstanceId = createOwnerInstanceId(dependencies.createOwnerInstanceId ?? randomUUID);
+    const createdAt = captureTimestamp(dependencies.now ?? (() => new Date()));
+    const processIdentity = captureLinuxProcessIdentity(pid, readers);
+    return Object.freeze({
+        ownerInstanceId,
+        createdAt,
+        ...processIdentity
+    });
+}
+/**
+ * Re-observe the persisted record's PID and return false for every malformed,
+ * unavailable, or mismatched condition. It never reads or writes runtime files.
+ */
+export function verifyPersistedLinuxConnectorOwnerIdentity(persisted, readers) {
+    return observePersistedLinuxConnectorOwnerIdentity(persisted, readers) === "same";
+}
+/**
+ * Re-observe a persisted connector owner without treating PID existence as
+ * ownership. Malformed owner records and unreadable procfs both fail closed.
+ */
+export function observePersistedLinuxConnectorOwnerIdentity(persisted, readers) {
+    const expected = normalizePersistedOwnerIdentity(persisted);
+    return expected === null ? "unverifiable" : observeLinuxProcessIdentity(expected, readers);
+}
+function createOwnerInstanceId(factory) {
+    let ownerInstanceId;
+    try {
+        ownerInstanceId = factory();
+    }
+    catch {
+        throw new ConnectorOwnerIdentityError("owner instance ID generation failed");
+    }
+    return requireOwnerInstanceId(ownerInstanceId);
+}
+function captureTimestamp(now) {
+    let value;
+    try {
+        const date = now();
+        value = date instanceof Date ? date.toISOString() : undefined;
+    }
+    catch {
+        throw new ConnectorOwnerIdentityError("creation timestamp is unavailable");
+    }
+    return requireTimestamp(value, "creation timestamp");
+}
+function normalizePersistedOwnerIdentity(value) {
+    if (!isRecord(value))
+        return null;
+    try {
+        const processIdentity = {
+            bootId: value.bootId,
+            pid: value.pid,
+            startTimeTicks: value.startTimeTicks,
+            pidNamespaceInode: value.pidNamespaceInode,
+            ppid: value.ppid,
+            pgrp: value.pgrp,
+            session: value.session
+        };
+        if (!isSameLinuxProcessIdentity(processIdentity, processIdentity))
+            return null;
+        return Object.freeze({
+            ownerInstanceId: requireOwnerInstanceId(value.ownerInstanceId),
+            createdAt: requireTimestamp(value.createdAt, "persisted timestamp"),
+            ...processIdentity
+        });
+    }
+    catch {
+        return null;
+    }
+}
+function requireOwnerInstanceId(value) {
+    if (typeof value !== "string" || !OWNER_INSTANCE_ID_PATTERN.test(value)) {
+        throw new ConnectorOwnerIdentityError("owner instance ID must be a canonical UUID v4");
+    }
+    return value;
+}
+function requireTimestamp(value, name) {
+    if (typeof value !== "string" || !ISO_UTC_TIMESTAMP_PATTERN.test(value)) {
+        throw new ConnectorOwnerIdentityError(`${name} must be a canonical UTC timestamp`);
+    }
+    const timestamp = new Date(value);
+    if (!Number.isFinite(timestamp.getTime()) || timestamp.toISOString() !== value) {
+        throw new ConnectorOwnerIdentityError(`${name} must be a valid UTC timestamp`);
+    }
+    return value;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=owner-instance.js.map

package/dist/ACP Connector/admission/owner-instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-instance.js","sourceRoot":"","sources":["../../../ACP Connector/admission/owner-instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAI5B,MAAM,gDAAgD,CAAC;AAExD,MAAM,yBAAyB,GAAG,uEAAuE,CAAC;AAC1G,MAAM,yBAAyB,GAAG,+CAA+C,CAAC;AAiBlF,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAChD,GAAW,EACX,OAAoC,EACpC,YAAY,GAA8B,EAAE;IAE5C,MAAM,eAAe,GAAG,qBAAqB,CAAC,YAAY,CAAC,qBAAqB,IAAI,UAAU,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAElE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,eAAe;QACf,SAAS;QACT,GAAG,eAAe;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0CAA0C,CACxD,SAAkB,EAClB,OAAoC;IAEpC,OAAO,2CAA2C,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2CAA2C,CACzD,SAAkB,EAClB,OAAoC;IAEpC,MAAM,QAAQ,GAAG,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAC5D,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,2BAA2B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAqB;IAClD,IAAI,eAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,eAAe,GAAG,OAAO,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,qCAAqC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,sBAAsB,CAAC,eAAe,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAe;IACvC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,KAAK,GAAG,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,mCAAmC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,eAAe,GAAG;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACC,CAAC;QAC1B,IAAI,CAAC,0BAA0B,CAAC,eAAe,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/E,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC;YAC9D,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC;YACnE,GAAG,eAAe;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,2BAA2B,CAAC,+CAA+C,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,2BAA2B,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QAC/E,MAAM,IAAI,2BAA2B,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/ACP Connector/admission/runtime.d.ts

@@ -0,0 +1,20 @@
+import { AdmissionController, type AdmissionRuntimeReaperReaders } from "../../Admission Controller/controller.js";
+import { type AdmissionRuntimeEnvironment } from "../../Admission Controller/runtime-config.js";
+export interface AdmissionRuntimeOptions {
+    readonly reaperReaders?: AdmissionRuntimeReaperReaders;
+    readonly reaperIntervalMs?: number;
+    readonly now?: () => number;
+}
+export declare class AdmissionRuntimeError extends Error {
+    constructor(message: string);
+}
+export declare class AdmissionRuntime {
+    #private;
+    constructor(controller: AdmissionController, options?: AdmissionRuntimeOptions);
+    get controller(): AdmissionController;
+    close(): void;
+    private assertOpen;
+    private reapOnce;
+}
+/** Build the opt-in shared queue runtime and reconcile exited local seats. */
+export declare function createAdmissionRuntime(environment?: AdmissionRuntimeEnvironment, options?: AdmissionRuntimeOptions): AdmissionRuntime | null;

package/dist/ACP Connector/admission/runtime.js

@@ -0,0 +1,157 @@
+import { closeSync, lstatSync, openSync } from "node:fs";
+import { AdmissionController } from "../../Admission Controller/controller.js";
+import { loadOrCreateAdmissionKey } from "../../Admission Controller/key-store.js";
+import { deriveAdmissionKeyBundle, zeroAdmissionKeyBundle } from "../../Admission Controller/key-derivation.js";
+import { parseAdmissionRuntimeConfig } from "../../Admission Controller/runtime-config.js";
+import { nativeAdmissionStartupRecoveryReaders, recoverExitedAdmissionSeats } from "./startup-recovery.js";
+const DEFAULT_RUNTIME_REAPER_INTERVAL_MS = 1_000;
+const MAX_RUNTIME_REAPER_INTERVAL_MS = 4_000;
+export class AdmissionRuntimeError extends Error {
+    constructor(message) {
+        super(`admission runtime error: ${message}`);
+        this.name = "AdmissionRuntimeError";
+    }
+}
+export class AdmissionRuntime {
+    #controller;
+    #reaperReaders;
+    #readNow;
+    #reaperTimer;
+    #reaping = false;
+    #closed = false;
+    constructor(controller, options = {}) {
+        this.#controller = controller;
+        this.#reaperReaders = options.reaperReaders ?? nativeAdmissionStartupRecoveryReaders;
+        this.#readNow = options.now ?? Date.now;
+        const intervalMs = normalizeReaperIntervalMs(options.reaperIntervalMs);
+        this.#reaperTimer = setInterval(() => this.reapOnce(), intervalMs);
+        this.#reaperTimer.unref?.();
+    }
+    get controller() {
+        this.assertOpen();
+        return this.#controller;
+    }
+    close() {
+        if (this.#closed)
+            return;
+        this.#closed = true;
+        if (this.#reaperTimer !== undefined) {
+            clearInterval(this.#reaperTimer);
+            this.#reaperTimer = undefined;
+        }
+        this.#controller.close();
+    }
+    assertOpen() {
+        if (this.#closed)
+            throw new AdmissionRuntimeError("runtime is closed");
+    }
+    reapOnce() {
+        if (this.#closed || this.#reaping)
+            return;
+        this.#reaping = true;
+        try {
+            this.#controller.reapSuspects(readNow(this.#readNow), this.#reaperReaders);
+        }
+        catch {
+            // Reaper evidence is best-effort and fail-closed; startup recovery remains separate.
+        }
+        finally {
+            this.#reaping = false;
+        }
+    }
+}
+/** Build the opt-in shared queue runtime and reconcile exited local seats. */
+export function createAdmissionRuntime(environment = process.env, options = {}) {
+    const config = parseAdmissionRuntimeConfig(environment);
+    if (!config.enabled)
+        return null;
+    rejectUnsafeExistingDatabase(config.databasePath);
+    const key = loadOrCreateAdmissionKey(config.stateDir);
+    let derivedKeys;
+    let controller;
+    try {
+        derivedKeys = deriveAdmissionKeyBundle(key);
+        ensureSecureDatabase(config);
+        controller = new AdmissionController({
+            databasePath: config.databasePath,
+            policy: config.policy,
+            encryptionKey: derivedKeys.encryption,
+            contentFingerprintKey: derivedKeys.contentFingerprint
+        });
+        controller.claimDurablePolicy(config.policy, config.agentId, Date.now());
+        recoverExitedAdmissionSeats(controller);
+        return new AdmissionRuntime(controller, options);
+    }
+    catch (error) {
+        try {
+            controller?.close();
+        }
+        catch {
+            // Preserve the factory failure while releasing any controller-owned copies.
+        }
+        throw error;
+    }
+    finally {
+        if (derivedKeys !== undefined)
+            zeroAdmissionKeyBundle(derivedKeys);
+        key.fill(0);
+    }
+}
+function normalizeReaperIntervalMs(value) {
+    const intervalMs = value ?? DEFAULT_RUNTIME_REAPER_INTERVAL_MS;
+    if (!Number.isSafeInteger(intervalMs) ||
+        intervalMs < 1 ||
+        intervalMs > MAX_RUNTIME_REAPER_INTERVAL_MS) {
+        throw new AdmissionRuntimeError("runtime reaper interval is invalid");
+    }
+    return intervalMs;
+}
+function readNow(now) {
+    const value = now();
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new AdmissionRuntimeError("runtime reaper clock is invalid");
+    }
+    return value;
+}
+function ensureSecureDatabase(config) {
+    try {
+        const file = openSync(config.databasePath, "wx", 0o600);
+        closeSync(file);
+    }
+    catch (error) {
+        if (!hasErrorCode(error, "EEXIST")) {
+            throw new AdmissionRuntimeError("could not create the admission database");
+        }
+    }
+    assertSecureDatabase(config.databasePath);
+}
+function rejectUnsafeExistingDatabase(databasePath) {
+    try {
+        assertSecureDatabase(databasePath);
+    }
+    catch (error) {
+        if (hasErrorCode(error, "ENOENT"))
+            return;
+        throw error;
+    }
+}
+function assertSecureDatabase(databasePath) {
+    const stat = lstatSync(databasePath);
+    if (stat.isSymbolicLink() || !stat.isFile()) {
+        throw new AdmissionRuntimeError("admission database path must be a regular file");
+    }
+    if ((stat.mode & 0o077) !== 0) {
+        throw new AdmissionRuntimeError("admission database must not grant group or other access");
+    }
+    const currentUid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (currentUid !== undefined && stat.uid !== currentUid) {
+        throw new AdmissionRuntimeError("admission database must be owned by the current user");
+    }
+    if (stat.nlink !== 1) {
+        throw new AdmissionRuntimeError("admission database must have exactly one link");
+    }
+}
+function hasErrorCode(error, expected) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === expected;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/ACP Connector/admission/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../ACP Connector/admission/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EACL,mBAAmB,EAEpB,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EAEvB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,EAG5B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,qCAAqC,EACrC,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,kCAAkC,GAAG,KAAK,CAAC;AACjD,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAQ7C,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAClB,WAAW,CAAsB;IACjC,cAAc,CAAgC;IAC9C,QAAQ,CAAe;IAChC,YAAY,CAA6C;IACzD,QAAQ,GAAG,KAAK,CAAC;IACjB,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,UAA+B,EAAE,OAAO,GAA4B,EAAE;QAChF,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,qCAAqC,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACxC,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,CAAC;QACnE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,UAAU;QACZ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CAEF;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CACpC,WAAW,GAAgC,OAAO,CAAC,GAAG,EACtD,OAAO,GAA4B,EAAE;IAErC,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEjC,4BAA4B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,WAA2C,CAAC;IAChD,IAAI,UAA2C,CAAC;IAChD,IAAI,CAAC;QACH,WAAW,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC5C,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC7B,UAAU,GAAG,IAAI,mBAAmB,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,WAAW,CAAC,UAAU;YACrC,qBAAqB,EAAE,WAAW,CAAC,kBAAkB;SACtD,CAAC,CAAC;QACH,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,2BAA2B,CAAC,UAAU,CAAC,CAAC;QACxC,OAAO,IAAI,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,UAAU,EAAE,KAAK,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,WAAW,KAAK,SAAS;YAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,MAAM,UAAU,GAAG,KAAK,IAAI,kCAAkC,CAAC;IAC/D,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QACjC,UAAU,GAAG,CAAC;QACd,UAAU,GAAG,8BAA8B,EAC3C,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,GAAiB;IAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAqC;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,qBAAqB,CAAC,yCAAyC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,4BAA4B,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,qBAAqB,CAAC,gDAAgD,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qBAAqB,CAAC,yDAAyD,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QACxD,MAAM,IAAI,qBAAqB,CAAC,sDAAsD,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,qBAAqB,CAAC,+CAA+C,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,QAAgB;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACnG,CAAC"}

package/dist/ACP Connector/admission/startup-recovery.d.ts

@@ -0,0 +1,22 @@
+import type { AdmissionController } from "../../Admission Controller/controller.js";
+import { type LinuxProcessEvidenceReaders } from "../../Admission Controller/process-evidence.js";
+export interface AdmissionStartupRecoveryReaders extends LinuxProcessEvidenceReaders {
+    listProcessIds(): readonly number[];
+}
+export interface AdmissionStartupRecoveryOptions {
+    readonly readers?: AdmissionStartupRecoveryReaders;
+    readonly now?: () => number;
+}
+export interface AdmissionStartupRecoverySummary {
+    readonly inspected: number;
+    readonly released: number;
+    readonly retained: number;
+    readonly markedRecoveryRequired: number;
+}
+export declare const nativeAdmissionStartupRecoveryReaders: AdmissionStartupRecoveryReaders;
+/**
+ * Conservatively reconcile durable seats when an enabled connector starts.
+ * This code can only inspect process evidence and settle an existing fence; it
+ * cannot enqueue, start, write, replay, or deliver a business prompt.
+ */
+export declare function recoverExitedAdmissionSeats(controller: AdmissionController, options?: AdmissionStartupRecoveryOptions): AdmissionStartupRecoverySummary;

package/dist/ACP Connector/admission/startup-recovery.js

@@ -0,0 +1,129 @@
+import { readdirSync } from "node:fs";
+import { captureLinuxProcessIdentity, nativeLinuxProcessEvidenceReaders, observeLinuxProcessIdentity } from "../../Admission Controller/process-evidence.js";
+import { observePersistedLinuxConnectorOwnerIdentity } from "./owner-instance.js";
+const MAX_PID = 2_147_483_647;
+export const nativeAdmissionStartupRecoveryReaders = Object.freeze({
+    ...nativeLinuxProcessEvidenceReaders,
+    listProcessIds() {
+        return readdirSync("/proc", { withFileTypes: true })
+            .filter((entry) => entry.isDirectory() && /^[1-9][0-9]*$/.test(entry.name))
+            .map((entry) => Number(entry.name))
+            .filter((pid) => Number.isSafeInteger(pid) && pid > 0 && pid <= MAX_PID);
+    }
+});
+/**
+ * Conservatively reconcile durable seats when an enabled connector starts.
+ * This code can only inspect process evidence and settle an existing fence; it
+ * cannot enqueue, start, write, replay, or deliver a business prompt.
+ */
+export function recoverExitedAdmissionSeats(controller, options = {}) {
+    const readers = options.readers ?? nativeAdmissionStartupRecoveryReaders;
+    const now = readNow(options.now ?? Date.now);
+    let processIds;
+    try {
+        processIds = normalizeProcessIds(readers.listProcessIds());
+    }
+    catch {
+        processIds = null;
+    }
+    let released = 0;
+    let retained = 0;
+    let markedRecoveryRequired = 0;
+    for (const queuedOwner of controller.listRecoverableQueuedOwners()) {
+        const owner = observePersistedLinuxConnectorOwnerIdentity(queuedOwner.owner, readers);
+        if (!isGoneIdentity(owner))
+            continue;
+        try {
+            controller.settleQueuedOwnerDeath(queuedOwner.requestId, queuedOwner.owner.ownerInstanceId, now);
+        }
+        catch {
+            // A concurrent owner may have admitted, cancelled, or otherwise settled the request.
+        }
+    }
+    const dispatches = controller.listRecoverableDispatches();
+    for (const dispatch of dispatches) {
+        const identity = dispatch.processIdentity;
+        if (identity === null || processIds === null) {
+            retained += 1;
+            continue;
+        }
+        const connector = observePersistedLinuxConnectorOwnerIdentity(identity.connector, readers);
+        if (connector === "same" || connector === "unverifiable") {
+            retained += 1;
+            continue;
+        }
+        const child = observeLinuxProcessIdentity(identity.child, readers);
+        const residue = inspectProcessGroup(identity.child, processIds, readers);
+        if (isGoneIdentity(child) && residue === "empty") {
+            try {
+                controller.releaseExitedRecoverySeat(dispatch.fence, now);
+                released += 1;
+                continue;
+            }
+            catch {
+                retained += 1;
+                continue;
+            }
+        }
+        if (child !== "unverifiable" && residue !== "unverifiable") {
+            try {
+                controller.markExecutionRecoveryRequired(dispatch.fence, now);
+                markedRecoveryRequired += 1;
+            }
+            catch {
+                // A concurrent owner may have advanced or settled the exact fence.
+            }
+        }
+        retained += 1;
+    }
+    return Object.freeze({
+        inspected: dispatches.length,
+        released,
+        retained,
+        markedRecoveryRequired
+    });
+}
+function inspectProcessGroup(expected, processIds, readers) {
+    let unverifiable = false;
+    for (const pid of processIds) {
+        let observed;
+        try {
+            observed = captureLinuxProcessIdentity(pid, readers);
+        }
+        catch (error) {
+            if (isGone(error))
+                continue;
+            unverifiable = true;
+            continue;
+        }
+        if (observed.bootId === expected.bootId &&
+            observed.pidNamespaceInode === expected.pidNamespaceInode &&
+            observed.pgrp === expected.pgrp &&
+            observed.session === expected.session) {
+            return "present";
+        }
+    }
+    return unverifiable ? "unverifiable" : "empty";
+}
+function normalizeProcessIds(value) {
+    if (!Array.isArray(value))
+        return null;
+    const ids = value.slice();
+    if (ids.some((pid) => !Number.isSafeInteger(pid) || pid < 1 || pid > MAX_PID))
+        return null;
+    return Object.freeze([...new Set(ids)].sort((left, right) => left - right));
+}
+function isGoneIdentity(value) {
+    return value === "gone" || value === "pid_reused";
+}
+function isGone(error) {
+    return typeof error === "object" && error !== null && "code" in error &&
+        (error.code === "ENOENT" || error.code === "ESRCH");
+}
+function readNow(now) {
+    const value = now();
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new Error("admission startup recovery clock is invalid");
+    return value;
+}
+//# sourceMappingURL=startup-recovery.js.map

package/dist/ACP Connector/admission/startup-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-recovery.js","sourceRoot":"","sources":["../../../ACP Connector/admission/startup-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,EACjC,2BAA2B,EAI5B,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,2CAA2C,EAAE,MAAM,qBAAqB,CAAC;AAElF,MAAM,OAAO,GAAG,aAAa,CAAC;AAkB9B,MAAM,CAAC,MAAM,qCAAqC,GAAoC,MAAM,CAAC,MAAM,CAAC;IAClG,GAAG,iCAAiC;IACpC,cAAc;QACZ,OAAO,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAA+B,EAC/B,OAAO,GAAoC,EAAE;IAE7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,qCAAqC,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,UAAoC,CAAC;IACzC,IAAI,CAAC;QACH,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,WAAW,IAAI,UAAU,CAAC,2BAA2B,EAAE,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,2CAA2C,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,UAAU,CAAC,sBAAsB,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACnG,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;QACvF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,yBAAyB,EAAE,CAAC;IAC1D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7C,QAAQ,IAAI,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,2CAA2C,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3F,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YACzD,QAAQ,IAAI,CAAC,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,UAAU,CAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC1D,QAAQ,IAAI,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,IAAI,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,KAAK,KAAK,cAAc,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,UAAU,CAAC,6BAA6B,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC9D,sBAAsB,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,UAAU,CAAC,MAAM;QAC5B,QAAQ;QACR,QAAQ;QACR,sBAAsB;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA8B,EAC9B,UAA6B,EAC7B,OAAoC;IAEpC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,QAA8B,CAAC;QACnC,IAAI,CAAC;YACH,QAAQ,GAAG,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC5B,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;YACzD,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC/B,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EACrC,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,cAAc,CAAC,KAAgC;IACtD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QACnE,CAAE,KAA4B,CAAC,IAAI,KAAK,QAAQ,IAAK,KAA4B,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,OAAO,CAAC,GAAiB;IAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/ACP Connector/admission/turn-coordinator.d.ts

@@ -0,0 +1,57 @@
+import { type AdmissionController } from "../../Admission Controller/controller.js";
+import { type LinuxConnectorOwnerIdentity } from "./owner-instance.js";
+import { type AgyAdmissionDispatchBoundary } from "./dispatch-boundary.js";
+import type { TurnClaim } from "../acp/session/turn-scheduler.js";
+export interface AdmissionTurnProgress {
+    readonly state: "queued";
+    readonly position: number;
+    readonly eligiblePosition: number | null;
+    readonly waitedMs: number;
+    readonly cooldownUntil: number | null;
+}
+export interface AdmissionTurnExecutionResult {
+    readonly stopReason: "end_turn" | "cancelled";
+}
+export interface AdmissionTurnInput {
+    readonly sessionId: string;
+    readonly model: string;
+    readonly promptText: string;
+    readonly claim: TurnClaim;
+    readonly reportProgress?: (progress: AdmissionTurnProgress) => void | Promise<void>;
+    readonly execute: (boundary: AgyAdmissionDispatchBoundary) => Promise<AdmissionTurnExecutionResult>;
+}
+export interface AdmissionTurnCoordinatorOptions {
+    readonly controller: AdmissionController;
+    readonly agentId?: string;
+    readonly parentId?: string;
+    readonly connectorPid?: number;
+    readonly now?: () => number;
+    readonly createRequestId?: () => string;
+    readonly queuePollIntervalMs?: number;
+    readonly progressIntervalMs?: number;
+    readonly heartbeatIntervalMs?: number;
+    readonly wait?: (milliseconds: number, signal: AbortSignal) => Promise<void>;
+}
+export declare class AdmissionQueueTimeoutError extends Error {
+    constructor();
+}
+export declare class AdmissionTurnRecoveryRequiredError extends Error {
+    constructor();
+}
+/**
+ * Wraps the existing online ACP turn with the shared queue and one exact stdin
+ * write boundary. It never translates output or performs delivery replay.
+ */
+export declare class AdmissionTurnCoordinator {
+    #private;
+    constructor(options: AdmissionTurnCoordinatorOptions);
+    get ownerIdentity(): LinuxConnectorOwnerIdentity;
+    admit(input: AdmissionTurnInput): Promise<"end_turn" | "cancelled">;
+    close(): void;
+    private waitForLease;
+    private settleFailure;
+    private cancelQueuedQuietly;
+    private reportProgress;
+    private readNow;
+    private assertOpen;
+}