pi-daddy 0.28.0 → 0.32.0

package/dist/herdr-poll.js

@@ -1,222 +0,0 @@
-/**
- * Waiting for a herdr agent to settle, and reading what it printed on the way.
- *
- * Split out of `src/run-herdr.ts` when that file hit **404 of the 400-line ceiling** adding ADR-0032's output
- * polling. The seam was named in the plan before it was needed, and it is a real one: this module is about
- * *observing* an agent, `run-herdr.ts` is about *starting and cleaning up after* one. Nothing here creates or
- * destroys anything.
- *
- * The two facts it is built on were measured against real herdr 0.7.5 (`docs/probes/g16-herdr`) and both are
- * counter-intuitive enough to be worth the module comment: `agent wait --until idle` matches the state the
- * agent was **already** in, and `agent read` is the one command that does **not** return a JSON envelope.
- */
-import { parseReply } from "./herdr-cli.js";
-import { herdrSessionReference } from "./native-session.js";
-/** Statuses herdr reports for a settled agent. `blocked` counts: it is waiting for a human, not working. */
-const TERMINAL = new Set(["idle", "done", "blocked"]);
-/** The pre-prompt sequence from the native start reply; absent is unknown, never zero. */
-export function observeHerdrSession(agent, pane, sink) {
-    if (!pane || !sink)
-        return;
-    try {
-        const reference = herdrSessionReference(agent, pane);
-        if (reference)
-            sink(reference);
-    }
-    catch { /* optional observation */ }
-}
-export function seqOf(result) {
-    const agent = (result?.agent ?? {});
-    return typeof agent.state_change_seq === "number" ? agent.state_change_seq : -1;
-}
-/** How often to poll `agent get` while waiting for the child to settle. */
-export const POLL_INTERVAL_MS = 750;
-/**
- * A prompt accepted from a terminal state must produce an observable lifecycle change promptly.
- *
- * Herdr 0.8's `agent prompt --wait` documents this same five-second bound. We retain polling because it
- * supplies the bounded live pane snapshots, but refuse rather than holding a parent for twenty minutes when
- * the only reported state remains the pre-prompt terminal state. That is a detector/integration failure, not
- * evidence that a child settled.
- */
-export const FRESH_LIFECYCLE_TIMEOUT_MS = 5_000;
-/** Lines of pane tail reported per poll. Matches the status block's own tail, so nothing is fetched unused. */
-export const DEFAULT_SNAPSHOT_LINES = 3;
-/**
- * Wait for the child to settle, without accepting the state it was already in.
- *
- * **R-33, measured.** `herdr agent wait --until idle` called right after `agent prompt` returned
- * *immediately*, matching the agent's **pre-existing** idle state with `state_change_seq` unchanged — a
- * reply indistinguishable from a completed run. For fan-out that is not an inconvenience but a
- * correctness bug: an orchestrator would "collect" N children that never ran and merge N empty results
- * into a confident summary (R-03 with a new cause).
- *
- * So this polls `agent get` and requires **both** that the status is terminal **and** that
- * `state_change_seq` has advanced past the value observed before prompting. `agent wait` is deliberately
- * not used at all: its contract cannot express "settled *after* this point".
- */
-/**
- * Establish the bundled Pi lifecycle reporter's idle baseline before prompt dispatch.
- *
- * `screen_detection_skipped` is Herdr's reported fact that a full lifecycle authority owns this pane.
- * Waiting for it prevents the reporter's asynchronously queued initial idle report from becoming a
- * post-prompt sequence advance. This is not completion: no prompt has been sent at this point.
- */
-export async function waitForLifecycleBaseline(exec, request, deadline) {
-    const interval = request.pollIntervalMs ?? POLL_INTERVAL_MS;
-    for (;;) {
-        if (request.signal?.aborted)
-            return { aborted: true };
-        if (Date.now() >= deadline)
-            return { spawnError: "Herdr did not activate the bundled Pi lifecycle reporter before prompt dispatch" };
-        const reply = parseReply(await exec(["agent", "get", request.name]));
-        if (reply.error)
-            return { spawnError: `herdr agent get failed: ${reply.error}` };
-        const agent = (reply.result?.agent ?? reply.result ?? {});
-        const seq = typeof agent.state_change_seq === "number" ? agent.state_change_seq : -1;
-        if (agent.screen_detection_skipped === true && agent.agent_status && TERMINAL.has(agent.agent_status) && seq >= 0)
-            return { before: seq };
-        await new Promise((resolve) => setTimeout(resolve, Math.min(interval, Math.max(0, deadline - Date.now()))));
-    }
-}
-export async function waitForSettled(exec, request, before, deadline, maxOutputBytes) {
-    const interval = request.pollIntervalMs ?? POLL_INTERVAL_MS;
-    // ADR-0032. The pane is read on every poll so the parent can show what the child is doing, rather than the
-    // one word `delegate` for up to twenty minutes by default.
-    //
-    // No cross-poll state is kept, deliberately: the previous design remembered what it had reported so it could
-    // send a diff, and that is what broke — see `tailLines`. A snapshot needs no memory.
-    const keep = request.snapshotLines ?? DEFAULT_SNAPSHOT_LINES;
-    let staleTerminalSince;
-    for (;;) {
-        if (request.signal?.aborted)
-            return { aborted: true };
-        if (Date.now() >= deadline)
-            return { timedOut: true };
-        const reply = parseReply(await exec(["agent", "get", request.name]));
-        if (reply.error)
-            return { spawnError: `herdr agent get failed: ${reply.error}` };
-        const agent = (reply.result?.agent ?? reply.result ?? {});
-        observeHerdrSession(agent, request.nativePaneId, request.onSessionReference);
-        const status = agent.agent_status;
-        const seq = typeof agent.state_change_seq === "number" ? agent.state_change_seq : -1;
-        if (request.onSnapshot) {
-            // Read BEFORE the terminal check returns, so a child that settles on this iteration still has its last
-            // output shown. `readFailed` is passed so a failed read renders as such instead of silently freezing the
-            // block on the previous frame — and, crucially, is never mistaken for the child's output.
-            const read = await readPane(exec, request.name, maxOutputBytes);
-            if (!read.readFailed) {
-                try {
-                    request.onObservation?.(Buffer.from(read.text));
-                }
-                catch { /* observation only */ }
-            }
-            try {
-                request.onSnapshot(read.readFailed ? ["[pane could not be read]"] : tailLines(read.text, keep));
-            }
-            catch {
-                /* display only — a renderer must not break a governed run */
-            }
-        }
-        if (status && TERMINAL.has(status)) {
-            if (seq > before)
-                return { status };
-            // Do not turn this pane's text into a completion signal. A known agent whose screen rule misses a new
-            // UI shape falls back to idle, precisely the state R-33 says is unsafe to accept. A stable stale
-            // terminal state for this bounded interval is instead a loud compatibility refusal (issue #43).
-            staleTerminalSince ??= Date.now();
-            if (Date.now() - staleTerminalSince >= FRESH_LIFECYCLE_TIMEOUT_MS) {
-                return {
-                    spawnError: `herdr reported ${status} without a post-prompt lifecycle change for ${FRESH_LIFECYCLE_TIMEOUT_MS}ms; ` +
-                        "refusing to treat the pre-prompt terminal state as completion. Update Herdr's Pi detector or inspect its lifecycle reporting.",
-                };
-            }
-        }
-        else {
-            staleTerminalSince = undefined;
-        }
-        await new Promise((resolve) => setTimeout(resolve, Math.min(interval, Math.max(0, deadline - Date.now()))));
-    }
-}
-/**
- * The last `keep` non-blank lines of a pane snapshot — what the display actually needs.
- *
- * **This replaces a `newSuffix` diff, and the replacement is a correction rather than a tune-up.** The old
- * design treated `agent read` as a *stream* and tried to report only what was new, by testing whether the new
- * text extended the old. That is wrong about the substrate: `agent read` returns a **snapshot of a bounded
- * terminal**, and a snapshot is not an append-only log. Two ordinary things break the prefix test forever —
- * the pane **scrolling** (its top lines are gone, so the new text is not an extension of the old) and
- * `readPane` **truncating to the tail** past `maxOutputBytes` (each read is a different window of a growing
- * buffer). Once either happens, every poll reported the whole buffer.
- *
- * Measured before the fix: **51 MiB streamed for ~600 bytes of real output — 89,000× amplification** in 37
- * seconds, per child, with a scrolling pane also delivering the same real lines three times each. The old
- * docstring named that exact failure as the thing it prevented.
- *
- * So the herdr path now reports a **bounded snapshot** and the consumer *replaces* rather than appends. There
- * is no diff to get wrong, the per-poll cost is `keep` lines regardless of buffer size, and a scrolling pane
- * simply shows its current tail — which is what a human looking at that pane would see.
- */
-export function tailLines(snapshot, keep) {
-    if (keep <= 0)
-        return [];
-    const lines = [];
-    // Walked from the END, so a 1 MiB buffer costs the last few lines rather than a full split.
-    let end = snapshot.length;
-    while (end > 0 && lines.length < keep) {
-        const start = snapshot.lastIndexOf("\n", end - 1);
-        const line = snapshot.slice(start + 1, end).replace(/\r/g, "").trimEnd();
-        if (line.length > 0)
-            lines.unshift(line);
-        if (start === -1)
-            break;
-        end = start;
-    }
-    return lines;
-}
-/**
- * Read the pane's contents.
- *
- * `agent read` is the ONE command that does not return herdr's JSON envelope — it writes the terminal's
- * text straight to stdout. Running it through `parseReply` turned every successful read into
- * "unparseable herdr reply", i.e. reported the child's actual answer as a failure to read it. Found by the
- * end-to-end run; the unit fake had been written to the envelope shape and so agreed with the bug.
- *
- * A JSON envelope is still accepted first, because an `error` reply here IS JSON and must not be mistaken
- * for terminal output.
- *
- * **`readFailed` is separate from `text`, and that separation is the fix for an R-03 defect.** A failed read
- * used to return its own diagnostic *as* `text` — so `runHerdrPane` returned
- * `[grants] could not read the agent pane: pane is gone` **as the child's answer, with `code: 0`**, and the
- * orchestrator read a failure message as a completed sub-agent's report. Measured. It mattered little when this
- * ran once per child; ADR-0032 made it run on every poll, up to 800 times for a ten-minute child, so a
- * transient failure went from unlikely to expected. The caller must now decide, and it cannot do so by
- * inspecting a string.
- */
-export async function readPane(exec, name, maxOutputBytes) {
-    const reply = await exec(["agent", "read", name]);
-    let text;
-    try {
-        const parsed = JSON.parse(reply.stdout);
-        if (parsed.error) {
-            return { text: "", truncated: false, readFailed: parsed.error.message ?? "unknown error" };
-        }
-        const raw = parsed.result?.output ?? parsed.result?.text ?? parsed.result?.content ?? "";
-        text = typeof raw === "string" ? raw : JSON.stringify(raw);
-    }
-    catch {
-        text = reply.stdout;
-    }
-    if (Buffer.byteLength(text) <= maxOutputBytes)
-        return { text, truncated: false };
-    // Keep the TAIL, not the head: a terminal's useful content is its most recent output, and the head is
-    // the startup banner. `runChild` keeps the head because it streams and must stop a runaway producer;
-    // here the output is already complete, so the choice is free and the tail is the answer.
-    //
-    // Sliced by BYTES via a Buffer round trip rather than by code units, for `takeBytes`'s reason in
-    // `run-child.ts`: `slice(-maxOutputBytes)` on a CJK pane overran the cap by three times. `toString` repairs
-    // a character split at the cut by replacing it, which is the right trade for a tail — one replacement
-    // character at the boundary, versus a cap that does not hold.
-    return { text: Buffer.from(text, "utf8").subarray(-maxOutputBytes).toString("utf8"), truncated: true };
-}
-//# sourceMappingURL=herdr-poll.js.map

package/dist/herdr-poll.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"herdr-poll.js","sourceRoot":"","sources":["../src/herdr-poll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAkB,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AA8B5D,4GAA4G;AAC5G,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtD,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,IAAwB,EAAE,IAAsC;IAClH,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QAAC,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAC,IAAI,SAAS;YAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;AACpI,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAA2C;IAC/D,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAkC,CAAC;IACrE,OAAO,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,+GAA+G;AAC/G,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAe,EACf,OAAmB,EACnB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAC5D,SAAS,CAAC;QACR,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,EAAE,UAAU,EAAE,iFAAiF,EAAE,CAAC;QACrI,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,UAAU,EAAE,2BAA2B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAA6F,CAAC;QACtJ,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,wBAAwB,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC1I,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAe,EACf,OAAmB,EACnB,MAAc,EACd,QAAgB,EAChB,cAAsB;IAEtB,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAC5D,2GAA2G;IAC3G,2DAA2D;IAC3D,EAAE;IACF,6GAA6G;IAC7G,qFAAqF;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC;IAC7D,IAAI,kBAAsC,CAAC;IAE3C,SAAS,CAAC;QACR,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAEtD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,UAAU,EAAE,2BAA2B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEjF,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAyD,CAAC;QAClH,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QAClC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAErF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,uGAAuG;YACvG,yGAAyG;YACzG,0FAA0F;YAC1F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;YAAC,CAAC;YACnH,IAAI,CAAC;gBACH,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAClG,CAAC;YAAC,MAAM,CAAC;gBACP,6DAA6D;YAC/D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,IAAI,GAAG,GAAG,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACpC,sGAAsG;YACtG,iGAAiG;YACjG,gGAAgG;YAChG,kBAAkB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,IAAI,0BAA0B,EAAE,CAAC;gBAClE,OAAO;oBACL,UAAU,EACR,kBAAkB,MAAM,+CAA+C,0BAA0B,MAAM;wBACvG,+HAA+H;iBAClI,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,kBAAkB,GAAG,SAAS,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAY;IACtD,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,4FAA4F;IAC5F,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1B,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM;QACxB,GAAG,GAAG,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAe,EACf,IAAY,EACZ,cAAsB;IAEtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAuE,CAAC;QAC9G,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACzF,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjF,sGAAsG;IACtG,qGAAqG;IACrG,yFAAyF;IACzF,EAAE;IACF,iGAAiG;IACjG,4GAA4G;IAC5G,sGAAsG;IACtG,8DAA8D;IAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACzG,CAAC"}

package/dist/herdr-stage.d.ts

@@ -1,40 +0,0 @@
-/**
- * Staging a definition's instructions to a file, because herdr cannot carry them in argv.
- *
- * Split out of `src/run-herdr.ts` at the 400-line ceiling. A real seam rather than an arbitrary cut: this is
- * the one place that works around a **herdr encoding limit**, and it is the only part of the herdr path that
- * touches the filesystem. `run-herdr.ts` starts and reaps agents; this prepares one argument.
- */
-/**
- * Move a multi-line `--append-system-prompt` out of argv, because herdr cannot encode it.
- *
- * **Measured.** `herdr agent start` types the argv into the pane's shell, so a value containing newlines
- * is rejected outright: `invalid_agent_argument — agent arguments cannot be encoded safely for the target
- * shell`. A definition's `SKILL.md` body is always multi-line, so every `delegate({agent})` spawn would
- * fail on this path.
- *
- * pi accepts a **file path** there as readily as literal text (`resolvePromptInput` + `existsSync` in
- * `dist/core/resource-loader.js`), so the fix is to write the body to a temp file and pass its path — one
- * short, shell-safe argument.
- *
- * The split lives here rather than in `planSpawn` because the constraint is **herdr's**, not pi's: the
- * direct executor passes the same text inline with no trouble, and a plan builder that pre-emptively wrote
- * temp files for everybody would be paying one executor's tax on both paths.
- */
-export declare function splitSystemPrompt(args: string[]): {
-    args: string[];
-    systemPrompt?: string;
-};
-/**
- * Move a multi-line system prompt into a temp file and return argv pointing at it.
- *
- * Returns the directory so the caller can remove it — and **every** early return on the herdr path must, because
- * nothing else can: a reviewer measured a permanent `/tmp/grants-herdr-*` per failed `tab create`, unreachable by
- * either pane sweep because the pane it belonged to never existed.
- */
-export declare function stageSystemPrompt(args: string[]): Promise<{
-    args: string[];
-    promptDir?: string;
-    error?: string;
-}>;
-//# sourceMappingURL=herdr-stage.d.ts.map

package/dist/herdr-stage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"herdr-stage.d.ts","sourceRoot":"","sources":["../src/herdr-stage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAI3F;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWjE"}

package/dist/herdr-stage.js

@@ -1,54 +0,0 @@
-/**
- * Staging a definition's instructions to a file, because herdr cannot carry them in argv.
- *
- * Split out of `src/run-herdr.ts` at the 400-line ceiling. A real seam rather than an arbitrary cut: this is
- * the one place that works around a **herdr encoding limit**, and it is the only part of the herdr path that
- * touches the filesystem. `run-herdr.ts` starts and reaps agents; this prepares one argument.
- */
-import { mkdtemp, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-/**
- * Move a multi-line `--append-system-prompt` out of argv, because herdr cannot encode it.
- *
- * **Measured.** `herdr agent start` types the argv into the pane's shell, so a value containing newlines
- * is rejected outright: `invalid_agent_argument — agent arguments cannot be encoded safely for the target
- * shell`. A definition's `SKILL.md` body is always multi-line, so every `delegate({agent})` spawn would
- * fail on this path.
- *
- * pi accepts a **file path** there as readily as literal text (`resolvePromptInput` + `existsSync` in
- * `dist/core/resource-loader.js`), so the fix is to write the body to a temp file and pass its path — one
- * short, shell-safe argument.
- *
- * The split lives here rather than in `planSpawn` because the constraint is **herdr's**, not pi's: the
- * direct executor passes the same text inline with no trouble, and a plan builder that pre-emptively wrote
- * temp files for everybody would be paying one executor's tax on both paths.
- */
-export function splitSystemPrompt(args) {
-    const at = args.indexOf("--append-system-prompt");
-    if (at === -1 || at + 1 >= args.length)
-        return { args };
-    return { args: [...args.slice(0, at), ...args.slice(at + 2)], systemPrompt: args[at + 1] };
-}
-/**
- * Move a multi-line system prompt into a temp file and return argv pointing at it.
- *
- * Returns the directory so the caller can remove it — and **every** early return on the herdr path must, because
- * nothing else can: a reviewer measured a permanent `/tmp/grants-herdr-*` per failed `tab create`, unreachable by
- * either pane sweep because the pane it belonged to never existed.
- */
-export async function stageSystemPrompt(args) {
-    const split = splitSystemPrompt(args);
-    if (split.systemPrompt === undefined)
-        return { args: split.args };
-    try {
-        const promptDir = await mkdtemp(join(tmpdir(), "grants-herdr-"));
-        const file = join(promptDir, "system-prompt.md");
-        await writeFile(file, split.systemPrompt, "utf8");
-        return { args: [...split.args, "--append-system-prompt", file], promptDir };
-    }
-    catch (error) {
-        return { args: split.args, error: `could not stage the system prompt for herdr: ${String(error)}` };
-    }
-}
-//# sourceMappingURL=herdr-stage.js.map

package/dist/herdr-stage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"herdr-stage.js","sourceRoot":"","sources":["../src/herdr-stage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAClD,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc;IAEd,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACjD,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,gDAAgD,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACtG,CAAC;AACH,CAAC"}

package/dist/herdr-start.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"herdr-start.d.ts","sourceRoot":"","sources":["../src/herdr-start.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE5D,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,EACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAO/D"}

package/dist/herdr-start.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"herdr-start.js","sourceRoot":"","sources":["../src/herdr-start.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAkB,MAAM,gBAAgB,CAAC;AAE5D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAe,EACf,IAAY,EACZ,MAAc,EACd,IAAc,EACd,QAAgB;IAEhB,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAChH,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/init.d.ts

@@ -1,117 +0,0 @@
-/**
- * `pi-daddy init` — scaffold a governed project from the skill packages already installed (B2, P3).
- *
- * Legacy unregistered npm packages can be scaffolded per skill: create a directory, copy the
- * body and declaration copies plus a starting `PI_GRANTS_GRANT`. Configured enabled Pi resources
- * are referenced where installed instead (ADR-0074); no competing .pi/skills copy is created.
- *
- * **The line it does not cross, and the reason this module exists at all:** `init` writes files an operator
- * then **reviews, edits and commits**. It never chooses a ceiling. A skill that declares `allowed-tools` is
- * copied *verbatim* — the author's declaration is the ceiling, and re-deriving it here would put a second
- * opinion between the file and the enforcer. A skill that declares none is copied with a **commented**
- * placeholder and stays unspawnable until a human fills it in.
- *
- * **What it DOES choose is the starting grant, which is a stronger act** — ADR-0029, added after a reviewer
- * pointed out that ADR-0028 drew its boundary around the wrong object. The handoff's reason a third party
- * may safely author `allowed-tools` is that *"the operator's `PI_GRANTS_GRANT` still bounds it"*; a
- * generated union gives the bound and the bounded one author, and it is not the operator. So capabilities
- * that can change a machine are emitted **commented** (`./grant-env.ts`).
- *
- * The placeholder is deliberately not a working example. Uncommenting it unedited yields capability ids
- * like `tool:<list` which the catalog refuses as unknown — a loud failure, in the direction rule 8 asks
- * for, rather than a grant nobody decided.
- */
-import type { Capability } from "./resolve.ts";
-import type { SkillPackage } from "./skill-packages.ts";
-/**
- * Count declarations, not authorizations (R-73). Both pattern and needs-withheld mean the skill
- * declared a ceiling; only undeclared means it did not. The CLI must report the same distinction.
- */
-export declare function countDeclaring(skills: PlannedSkill[], from: string): number;
-export type WithholdReason = "undeclared" | "pattern" | "needs-withheld";
-export interface PlannedSkill {
-    name: string;
-    /** Which package it came from, as `name@version`. */
-    from: string;
-    sourcePath: string;
-    targetPath: string;
-    /** Configured skills stay at their installed/local source, including when --force is used. */
-    referenced?: boolean;
-    /** Exactly what would be written — the file verbatim, or the file plus a commented note. */
-    content: string;
-    /** The declared ceiling, empty when the declaration is absent or unusable. */
-    ceiling: Capability[];
-    withheld: WithholdReason | null;
-    /** e.g. a sub-tool pattern pi's `--tools` cannot express. Reported, never reinterpreted. */
-    notes: string[];
-}
-export interface InitPlan {
-    skills: PlannedSkill[];
-    /** Definitions two packages both declare. First wins; the loser is named rather than silently dropped. */
-    collisions: string[];
-    /** The live grant — what `source .pi/grants.env` actually sets. */
-    grant: Capability[];
-    /** Withheld capability → the definitions that declared it (ADR-0029). Emitted commented. */
-    withheldCapabilities: Map<Capability, string[]>;
-    /** `workspace:<id>` this project could route to (ADR-0035). Always commented — `init` does not choose. */
-    routableWorkspaces: Capability[];
-    grantEnvPath: string;
-    grantEnvContent: string;
-    /** Capabilities a declared ceiling names that pi 0.84.1 has no tool for — a caution, not a verdict. */
-    cautions: string[];
-}
-/**
- * The file to write for one skill: verbatim when it declares a usable ceiling, plus a commented note when
- * it does not.
- *
- * Inserted at the END of the frontmatter block, so the rest of the file — including its own key order and
- * its body — is byte-identical to the package's. A `#` line is a YAML comment and this package's
- * frontmatter reader skips it, so an undeclared copy is still *undeclared*: not spawnable until a human
- * edits it, which is the whole point.
- */
-export declare function withPlaceholder(text: string, declared: boolean, note?: string[]): string;
-/**
- * Decide what `init` would write. Pure: no filesystem, no npm, no decisions taken on the operator's behalf.
- *
- * The grant is **the read-only part** of what the copied skills declare, plus one `agent:` id per definition
- * that can actually run within it, plus `tool:delegate` — without which the session registers no delegation
- * tools at all and the whole file is inert. Everything else is emitted commented, named, and one uncomment
- * away (ADR-0029).
- */
-export declare function planInit(packages: SkillPackage[], cwd: string, 
-/**
- * Ids from the operator's workspace registry, when one is configured — read by the CALLER, because
- * `planInit` is pure and stays that way.
- *
- * ADR-0035 made routing a capability and said `init` "scaffolds the registered ids so the common path is a
- * one-line grant edit". It did not: `init` had never heard of the registry, so the ADR's own stated
- * migration path for a breaking change did not exist. These are emitted **commented**, never live —
- * offering the ids while refusing to choose among them is exactly ADR-0028's position.
- */
-registeredWorkspaceIds?: readonly string[]): InitPlan;
-export interface InitOutcome {
-    written: string[];
-    /** Present already, so left alone. `init` never silently overwrites an edited ceiling. */
-    kept: string[];
-    failed: {
-        path: string;
-        error: string;
-    }[];
-}
-/**
- * Apply a plan.
- *
- * **Existing files are kept, not overwritten**, and that default is load-bearing rather than polite: the
- * edit an operator makes to one of these files IS the capability decision, and the second run of a
- * scaffolding command is exactly when it would be destroyed.
- *
- * **`--force` never regenerates `.pi/grants.env`** (R-79). It rewrites the definition copies, which is the
- * documented re-sync path for R-74 — but the grant file is the *reviewed artifact*, and an operator who had
- * deleted `agent:build` and added a ledger path would have had both silently restored to generated defaults
- * by a command whose usage text mentions only `allowed-tools`. Deleting the file is how to regenerate it,
- * and that is not something anyone does by accident.
- */
-export declare function applyInit(plan: InitPlan, options?: {
-    force?: boolean;
-}): Promise<InitOutcome>;
-//# sourceMappingURL=init.d.ts.map

package/dist/init.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AASH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,4FAA4F;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,4FAA4F;IAC5F,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,0GAA0G;IAC1G,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mEAAmE;IACnE,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,4FAA4F;IAC5F,oBAAoB,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,0GAA0G;IAC1G,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,uGAAuG;IACvG,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAyBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAE,MAAM,EAAgB,GAAG,MAAM,CASrG;AAUD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,YAAY,EAAE,EACxB,GAAG,EAAE,MAAM;AACX;;;;;;;;GAQG;AACH,sBAAsB,GAAE,SAAS,MAAM,EAAO,GAC7C,QAAQ,CA+IV;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAiDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CA2BvG"}