pi-daddy 0.28.0 → 0.32.0

package/dist/retention-json.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retention-json.js","sourceRoot":"","sources":["../src/retention-json.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;IACnE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAgE,EAAE,CAAC;IAC9E,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,KAAK,GAAG,EAAE,GAAG,EAAE,KAAK,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;aAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aAClD,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,GAAG,EAAE,MAAM;gBAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC;QAAC,CAAC;aACvD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAC;YACxC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC;QACrC,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/routing-authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"routing-authority.d.ts","sourceRoot":"","sources":["../src/routing-authority.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,CACnC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,QAAQ,EAAE,SAAS,UAAU,EAAE,GAC9B,cAAc,GAAG,IAAI,CA6BvB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,SAAS,UAAU,EAAE,EAChC,QAAQ,EAAE,SAAS,UAAU,EAAE,GAC9B,cAAc,GAAG,IAAI,CAUvB"}

package/dist/routing-authority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"routing-authority.js","sourceRoot":"","sources":["../src/routing-authority.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAgBzC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,gBAAoC,EACpC,QAA+B;IAE/B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,WAAW,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EACJ,gBAAgB,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,+CAA+C;gBAC/F,UAAU,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,8DAA8D;gBACnG,mGAAmG;SACtG,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,8FAA8F;IAC9F,oFAAoF;IACpF,MAAM,IAAI,GAAG,QAAQ;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;SAC5F,IAAI,EAAE,CAAC;IACV,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,sGAAsG;QACtG,kFAAkF;QAClF,MAAM,EAAE,CAAC,WAAW,CAAC;QACrB,MAAM,EACJ,sCAAsC,gBAAgB,kCAAkC,WAAW,IAAI;YACvG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACd,CAAC,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;gBACxC,CAAC,CAAC,4CAA4C,WAAW,kCAAkC,CAAC;KACjG,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAgC,EAChC,QAA+B;IAE/B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EACJ,gBAAgB,kBAAkB,kEAAkE;YACpG,oGAAoG;YACpG,mFAAmF;KACtF,CAAC;AACJ,CAAC"}

package/dist/run-child.d.ts

@@ -1,87 +0,0 @@
-/**
- * Run a governed child process under hard limits.
- *
- * G8 (review findings A-R1/B-I5, A-R3). `delegate` used to spawn `pi` with no output cap, no timeout,
- * an abort listener attached too late to observe an already-aborted signal, and a non-zero exit reported
- * to the model as an ordinary result. Each of those is a way for a child to outlive or overwhelm the
- * orchestrator that is supposed to be governing it — which is the whole premise of this package.
- *
- * It lives here, out of `extensions/grants.ts`, so it can be tested against real processes without pi.
- */
-/**
- * The longest prefix of `text` that fits in `budget` BYTES, never splitting a character.
- *
- * Both halves matter. Truncating by `String.prototype.slice` counts UTF-16 code units against a byte budget,
- * which overruns by the encoding width of whatever the child printed. Truncating the *buffer* instead would
- * respect the budget and split a multi-byte character or a surrogate pair, putting a lone `\ud83d` in the
- * result. So the walk is by code POINT (`for…of` iterates code points, keeping surrogate pairs whole) and the
- * budget is checked in bytes before each one is admitted.
- *
- * Exported for the test that feeds it CJK and emoji: an ASCII-only test cannot fail on any of this, which is
- * exactly why the original defect survived a test named for it.
- */
-export declare function takeBytes(text: string, budget: number): string;
-/**
- * Operator override for the child wall-clock limit, in seconds.
- *
- * Deliberately NOT in `GRANT_ENV_KEYS`: those are stripped from a child's environment and re-supplied
- * only by the spawn plan, which is right for capability state and wrong for an operator preference. This
- * one should simply inherit, so a bound set at the root applies all the way down.
- */
-export declare const ENV_CHILD_TIMEOUT = "PI_GRANTS_CHILD_TIMEOUT";
-/** Read the override, falling back to the default on absent *or* malformed input (G7's rule). */
-export declare function timeoutFromEnv(raw: string | undefined): number;
-export interface ChildRunRequest {
-    command: string;
-    args: string[];
-    env: NodeJS.ProcessEnv;
-    cwd: string;
-    signal?: AbortSignal;
-    /** Hard cap on captured output. Beyond it the child is killed and the result flagged. */
-    maxOutputBytes?: number;
-    /** Soft wall-clock cap. On expiry: SIGTERM, then SIGKILL after `killGraceMs`. */
-    timeoutMs?: number;
-    killGraceMs?: number;
-    /** Absolute epoch-millisecond hard cap: SIGKILL fires here even when the SIGTERM grace has not elapsed. */
-    hardDeadlineAt?: number;
-    /**
-     * Called with each chunk as it arrives, for the parent's progress display (ADR-0032).
-     *
-     * **Display only, and the distinction is load-bearing.** The child's answer is still `text`, assembled here
-     * and returned; a caller must never treat what it saw streamed as the result. A partial stream that could be
-     * mistaken for a complete answer is R-03's defect — a missing result indistinguishable from an empty one —
-     * with a new cause.
-     *
-     * Bounded by the same `maxOutputBytes` as `text`, so the cap governs the transcript and not merely memory.
-     *
-     * Exceptions are swallowed: a renderer is not a governance control, and one that throws must not kill a
-     * governed child mid-task.
-     */
-    onOutput?: (chunk: string) => void;
-    /** Optional raw observation; isolated from control, never awaited, separate from display text. */
-    onObservation?: (stream: "stdout" | "stderr", bytes: Uint8Array) => void;
-    /** Passive EOF observation. Never a replacement child/settlement handle. Exceptions are isolated. */
-    onStreamEnd?: (stream: "stdout" | "stderr") => void;
-    /** Security hook called immediately after spawn, before output handling (for lease attachment). */
-    onSpawn?: (pid: number) => void;
-}
-export interface ChildRunResult {
-    /** Exit code, or `null` when nothing was spawned or the child was killed by a signal. */
-    code: number | null;
-    text: string;
-    truncated: boolean;
-    timedOut: boolean;
-    aborted: boolean;
-    /** Signal that ended the process, separate from the nullable numeric exit code. */
-    signal?: NodeJS.Signals | null;
-    /** Set when the process could not be started at all. */
-    spawnError?: string;
-}
-/** 1 MiB. A delegation returns a summary; anything larger is a runaway, not an answer. */
-export declare const DEFAULT_MAX_OUTPUT_BYTES: number;
-/** 20 minutes. Long-running sub-agent work often exceeded ten; a hang remains bounded. */
-export declare const DEFAULT_TIMEOUT_MS: number;
-/** Grace between SIGTERM and SIGKILL. A child that ignores SIGTERM must not make the timeout advisory. */
-export declare const DEFAULT_KILL_GRACE_MS = 5000;
-export declare function runChild(request: ChildRunRequest): Promise<ChildRunResult>;
-//# sourceMappingURL=run-child.d.ts.map

package/dist/run-child.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-child.d.ts","sourceRoot":"","sources":["../src/run-child.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAeH;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAY9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,4BAA4B,CAAC;AAE3D,iGAAiG;AACjG,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAK9D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2GAA2G;IAC3G,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,kGAAkG;IAClG,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACzE,qGAAqG;IACrG,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;IACpD,mGAAmG;IACnG,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,0FAA0F;AAC1F,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AACjD,0GAA0G;AAC1G,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAE1C,wBAAgB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAoL1E"}

package/dist/run-child.js

@@ -1,248 +0,0 @@
-/**
- * Run a governed child process under hard limits.
- *
- * G8 (review findings A-R1/B-I5, A-R3). `delegate` used to spawn `pi` with no output cap, no timeout,
- * an abort listener attached too late to observe an already-aborted signal, and a non-zero exit reported
- * to the model as an ordinary result. Each of those is a way for a child to outlive or overwhelm the
- * orchestrator that is supposed to be governing it — which is the whole premise of this package.
- *
- * It lives here, out of `extensions/grants.ts`, so it can be tested against real processes without pi.
- */
-import { spawn } from "node:child_process";
-import { StringDecoder } from "node:string_decoder";
-import { parseBound } from "./propagation.js";
-const TEST_CONTROL = Symbol.for("pi-daddy.internal.run-child-test-control");
-function currentRunChildTestControl() {
-    if (process.env.NODE_TEST_CONTEXT !== "child-v8")
-        return undefined;
-    const storage = globalThis[TEST_CONTROL];
-    return storage?.getStore();
-}
-/**
- * The longest prefix of `text` that fits in `budget` BYTES, never splitting a character.
- *
- * Both halves matter. Truncating by `String.prototype.slice` counts UTF-16 code units against a byte budget,
- * which overruns by the encoding width of whatever the child printed. Truncating the *buffer* instead would
- * respect the budget and split a multi-byte character or a surrogate pair, putting a lone `\ud83d` in the
- * result. So the walk is by code POINT (`for…of` iterates code points, keeping surrogate pairs whole) and the
- * budget is checked in bytes before each one is admitted.
- *
- * Exported for the test that feeds it CJK and emoji: an ASCII-only test cannot fail on any of this, which is
- * exactly why the original defect survived a test named for it.
- */
-export function takeBytes(text, budget) {
-    if (budget <= 0)
-        return "";
-    if (Buffer.byteLength(text) <= budget)
-        return text;
-    let out = "";
-    let used = 0;
-    for (const character of text) {
-        const size = Buffer.byteLength(character);
-        if (used + size > budget)
-            break;
-        out += character;
-        used += size;
-    }
-    return out;
-}
-/**
- * Operator override for the child wall-clock limit, in seconds.
- *
- * Deliberately NOT in `GRANT_ENV_KEYS`: those are stripped from a child's environment and re-supplied
- * only by the spawn plan, which is right for capability state and wrong for an operator preference. This
- * one should simply inherit, so a bound set at the root applies all the way down.
- */
-export const ENV_CHILD_TIMEOUT = "PI_GRANTS_CHILD_TIMEOUT";
-/** Read the override, falling back to the default on absent *or* malformed input (G7's rule). */
-export function timeoutFromEnv(raw) {
-    const seconds = parseBound(raw);
-    // `null` (malformed) and `0` both fall back rather than disabling the limit: a timeout that can be
-    // switched off by a typo is the A-S4 defect wearing different clothes.
-    return seconds === undefined || seconds === null || seconds === 0 ? DEFAULT_TIMEOUT_MS : seconds * 1000;
-}
-/** 1 MiB. A delegation returns a summary; anything larger is a runaway, not an answer. */
-export const DEFAULT_MAX_OUTPUT_BYTES = 1024 * 1024;
-/** 20 minutes. Long-running sub-agent work often exceeded ten; a hang remains bounded. */
-export const DEFAULT_TIMEOUT_MS = 20 * 60 * 1000;
-/** Grace between SIGTERM and SIGKILL. A child that ignores SIGTERM must not make the timeout advisory. */
-export const DEFAULT_KILL_GRACE_MS = 5000;
-export function runChild(request) {
-    const testControl = currentRunChildTestControl();
-    const maxOutputBytes = request.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
-    const timeoutMs = request.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const killGraceMs = request.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
-    const hardDeadlineAt = request.hardDeadlineAt;
-    // A-R3: checked BEFORE spawning. `AbortSignal` does not replay, so a listener attached after an
-    // `await` cannot observe an abort that already happened — and the child would then run to completion
-    // outside the cancellation that was supposed to stop it. Nothing is started at all here.
-    if (request.signal?.aborted) {
-        return Promise.resolve({ code: null, text: "", truncated: false, timedOut: false, aborted: true });
-    }
-    return new Promise((settle) => {
-        let child;
-        try {
-            child = spawn(request.command, request.args, {
-                env: request.env,
-                cwd: request.cwd,
-                stdio: ["ignore", "pipe", "pipe"],
-            });
-        }
-        catch (error) {
-            settle({ code: null, text: "", truncated: false, timedOut: false, aborted: false, spawnError: String(error) });
-            return;
-        }
-        try {
-            if (child.pid !== undefined)
-                request.onSpawn?.(child.pid);
-        }
-        catch (error) {
-            const failed = { code: null, text: "", truncated: false, timedOut: false, aborted: false, spawnError: String(error) };
-            child.stdout?.destroy();
-            child.stderr?.destroy();
-            child.once("error", () => settle(failed));
-            child.once("close", () => settle(failed));
-            child.kill("SIGKILL");
-            return;
-        }
-        // One decoder for BOTH streams is deliberate: they are already interleaved into one `text`, and two
-        // decoders would each hold their own partial character, so a split byte could surface out of order.
-        const decoder = new StringDecoder("utf8");
-        let text = "";
-        let bytes = 0;
-        let truncated = false;
-        let timedOut = false;
-        let aborted = false;
-        let done = false;
-        const timers = [];
-        const clearTimers = () => timers.forEach(clearTimeout);
-        /** SIGTERM, then SIGKILL if the child is still alive — so a handler cannot ignore its way out. */
-        const stop = () => {
-            child.kill("SIGTERM");
-            timers.push(setTimeout(() => child.kill("SIGKILL"), killGraceMs));
-        };
-        // A timer phase may run before libuv delivers an exit that the OS already observed, especially after the
-        // controller event loop was blocked across the deadline. Give pending child-process events one turn to
-        // publish exitCode/signalCode before deciding that a governed PID is still live.
-        const controlIfRunning = (control) => {
-            setImmediate(() => {
-                if (done || child.exitCode !== null || child.signalCode !== null)
-                    return;
-                control();
-            });
-        };
-        /** How much of `text` the progress display has already been shown. */
-        let emittedUpTo = 0;
-        /**
-         * Stream whatever `text` has gained since the last call.
-         *
-         * **Derived from `text` rather than from the incoming chunk**, and that is the whole correctness argument:
-         * what gets streamed is then *by construction* a prefix of what gets returned, so the output cap bounds the
-         * parent's transcript exactly as it bounds the result. The first version emitted the raw chunk and pushed
-         * 1924 bytes through a 1024-byte cap on the truncating write — the cap bounded memory and not the screen
-         * it had just been extended to protect. Found by the test, not by reading it.
-         *
-         * Swallowing is deliberate: `onOutput` renders, and a renderer that throws must not become a way to kill a
-         * governed child. Nothing downstream depends on it having run.
-         */
-        const flush = () => {
-            if (!request.onOutput || text.length <= emittedUpTo)
-                return;
-            const chunk = text.slice(emittedUpTo);
-            emittedUpTo = text.length;
-            try {
-                request.onOutput(chunk);
-            }
-            catch {
-                /* display only */
-            }
-        };
-        const capture = (chunk) => {
-            if (truncated)
-                return;
-            // **Decoded through a StringDecoder, not `String(chunk)`.** A pipe splits on byte boundaries, not
-            // character ones, so a multi-byte character straddling two `data` events was decoded as two invalid
-            // halves and became U+FFFD — in the child's ANSWER, not merely the display. Measured: 300,000 bytes of
-            // CJK produced **twelve** replacement characters, because 65536 % 3 == 1. Emoji happened to survive
-            // (65536 % 4 == 0), which is why width-dependent corruption went unnoticed. The decoder holds the
-            // partial bytes until the rest arrives.
-            const s = decoder.write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
-            if (s.length === 0)
-                return;
-            const size = Buffer.byteLength(s);
-            if (bytes + size > maxOutputBytes) {
-                // Keep what fits, mark it, and stop the child: an unbounded producer must not be able to exhaust the
-                // orchestrator's memory just because it was granted a tool that prints.
-                //
-                // **Trimmed by BYTES, and that is a fix rather than a refinement.** This was
-                // `text.slice(0, maxOutputBytes)` — a count of UTF-16 code units against a budget measured in bytes,
-                // so any non-ASCII output overran the cap by its own encoding width: 300 bytes of CJK through a
-                // 100-byte cap, and a measured **2048 bytes through the real 1024 default**. It is the same defect as
-                // the 1924-byte one already fixed here, one layer down: that fix bounded the *unit* count, and the
-                // budget was never in units. An odd cap also split a surrogate pair, putting a lone `\ud83d` into
-                // both the transcript and the returned answer.
-                text += takeBytes(s, maxOutputBytes - bytes);
-                bytes = maxOutputBytes;
-                truncated = true;
-                flush();
-                stop();
-                return;
-            }
-            bytes += size;
-            text += s;
-            flush();
-        };
-        const observe = (stream, chunk) => {
-            capture(chunk);
-            try {
-                request.onObservation?.(stream, chunk);
-            }
-            catch { /* observation only */ }
-        };
-        child.stdout?.on("data", (chunk) => observe("stdout", chunk));
-        child.stderr?.on("data", (chunk) => observe("stderr", chunk));
-        for (const stream of ["stdout", "stderr"])
-            child[stream]?.on("end", () => {
-                try {
-                    request.onStreamEnd?.(stream);
-                }
-                catch { /* passive observation only */ }
-            });
-        timers.push(setTimeout(() => controlIfRunning(() => {
-            timedOut = true;
-            stop();
-        }), timeoutMs));
-        const activeHardDeadlineAt = testControl?.hardDeadlineAtAfterSpawn() ?? hardDeadlineAt;
-        if (activeHardDeadlineAt !== undefined) {
-            // Independent of the soft timer and measured from the recorded epoch, not from `spawn`: neither a
-            // delayed soft callback nor spawn/setup time may start a fresh grace period beyond the lifecycle bound.
-            timers.push(setTimeout(() => controlIfRunning(() => {
-                timedOut = true;
-                child.kill("SIGKILL");
-            }), Math.max(0, activeHardDeadlineAt - Date.now())));
-        }
-        const onAbort = () => {
-            aborted = true;
-            stop();
-        };
-        request.signal?.addEventListener("abort", onAbort, { once: true });
-        const finish = (result) => {
-            if (done)
-                return;
-            done = true;
-            clearTimers();
-            request.signal?.removeEventListener("abort", onAbort);
-            child.stdout?.destroy();
-            child.stderr?.destroy();
-            settle(result);
-        };
-        child.on("error", (error) => finish({ code: null, text, truncated, timedOut, aborted, spawnError: String(error) }));
-        // `close` waits for every inherited pipe, including one retained by a detached grandchild. Once the
-        // governed PID exits, allow a short drain and settle anyway so timeout/output bounds remain bounds.
-        child.on("exit", (code, signal) => {
-            timers.push(setTimeout(() => finish({ code, signal, text, truncated, timedOut, aborted }), 100));
-        });
-        child.on("close", (code, signal) => finish({ code, signal, text, truncated, timedOut, aborted }));
-    });
-}
-//# sourceMappingURL=run-child.js.map

package/dist/run-child.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-child.js","sourceRoot":"","sources":["../src/run-child.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;AAE5E,SAAS,0BAA0B;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IACnE,MAAM,OAAO,GAAI,UAA8E,CAAC,YAAY,CAAC,CAAC;IAC9G,OAAO,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAc;IACpD,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,IAAI,GAAG,MAAM;YAAE,MAAM;QAChC,GAAG,IAAI,SAAS,CAAC;QACjB,IAAI,IAAI,IAAI,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,mGAAmG;IACnG,uEAAuE;IACvE,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;AAC1G,CAAC;AAkDD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,0GAA0G;AAC1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,MAAM,UAAU,QAAQ,CAAC,OAAwB;IAC/C,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAC;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IACjE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAE9C,gGAAgG;IAChG,qGAAqG;IACrG,yFAAyF;IACzF,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,IAAI,OAAO,CAAiB,CAAC,MAAM,EAAE,EAAE;QAC5C,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBAC3C,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACtH,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,oGAAoG;QACpG,oGAAoG;QACpG,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,GAAG,KAAK,CAAC;QAEjB,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAEvD,kGAAkG;QAClG,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,yGAAyG;QACzG,uGAAuG;QACvG,iFAAiF;QACjF,MAAM,gBAAgB,GAAG,CAAC,OAAmB,EAAE,EAAE;YAC/C,YAAY,CAAC,GAAG,EAAE;gBAChB,IAAI,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;oBAAE,OAAO;gBACzE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,sEAAsE;QACtE,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB;;;;;;;;;;;WAWG;QACH,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW;gBAAE,OAAO;YAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACtC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,IAAI,SAAS;gBAAE,OAAO;YACtB,kGAAkG;YAClG,oGAAoG;YACpG,uGAAuG;YACvG,oGAAoG;YACpG,kGAAkG;YAClG,wCAAwC;YACxC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAE3B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,KAAK,GAAG,IAAI,GAAG,cAAc,EAAE,CAAC;gBAClC,qGAAqG;gBACrG,wEAAwE;gBACxE,EAAE;gBACF,6EAA6E;gBAC7E,qGAAqG;gBACrG,gGAAgG;gBAChG,sGAAsG;gBACtG,mGAAmG;gBACnG,kGAAkG;gBAClG,+CAA+C;gBAC/C,IAAI,IAAI,SAAS,CAAC,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC,CAAC;gBAC7C,KAAK,GAAG,cAAc,CAAC;gBACvB,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,EAAE,CAAC;gBACR,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,KAAK,IAAI,IAAI,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,KAAK,EAAE,CAAC;QACV,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,MAA2B,EAAE,KAAa,EAAE,EAAE;YAC7D,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,IAAI,CAAC;gBAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;QAClF,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU;YAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBAChF,IAAI,CAAC;oBAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,EAAE,SAAS,CAAC,CACf,CAAC;QACF,MAAM,oBAAoB,GAAG,WAAW,EAAE,wBAAwB,EAAE,IAAI,cAAc,CAAC;QACvF,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,kGAAkG;YAClG,wGAAwG;YACxG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE;gBACjD,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,EAAE;YACxC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC,CAAC;QAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CACtF,CAAC;QACF,oGAAoG;QACpG,oGAAoG;QACpG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/run-herdr.d.ts

@@ -1,119 +0,0 @@
-/**
- * Run a governed child in a herdr pane — ADR-0016 point 6.
- *
- * The second executor for the same plan. `runChild` spawns `pi` directly and captures its stdout;
- * `runHerdrPane` asks herdr to launch it in a visible, attachable terminal pane. `planSpawn` produces the
- * argv either way, so the grant is identical and only the *place it runs* differs.
- *
- * **Why go through herdr's CLI rather than the third-party `pi-herdr` extension.** That extension exposes
- * `agentArgs` and `env` as MODEL-facing tool parameters (R-30), which hands a model an argv array and the
- * environment variable the grant travels on. Here the model chooses a definition and a task; this package
- * builds the argv. Measured facts this relies on (`docs/probes/g16-herdr`):
- *
- *  - `herdr agent start … -- <args>` delivers argv **verbatim**, echoed back in the reply.
- *  - `--tools` is enforced inside a pane exactly as it is for a direct spawn; `--no-tools` yields none.
- *  - `herdr agent start` has **no `--env`**, but `tab create` / `pane split` do, and a pane's environment
- *    reaches the shell that launches the agent — verified by reading `$PI_GRANTS_GRANT` back out of a
- *    pane created with it. That is how the grant, depth and ledger path propagate on this path.
- *
- * **What a pane is not: a boundary.** It is a terminal. `--tools` remains the enforcement point, ADR-0012's
- * `bash` escape is unchanged, and a pane is *attachable by design*, so a human can type into a governed
- * child. Humans are not this project's threat model, but nothing here should be read as containing one.
- */
-import type { ChildRunResult } from "./run-child.ts";
-import { type HerdrExec } from "./herdr-cli.ts";
-import { type PollTarget } from "./herdr-poll.ts";
-/**
- * Re-exported so importers of the executor still reach the protocol at the name they always used.
- *
- * Deliberate rather than lazy: `test/run-herdr.test.ts` imports `HerdrExec` from here and must pass
- * **unmodified** across this extraction — that is the only available proof the move changed no behaviour.
- */
-export { type HerdrExec, parseReply } from "./herdr-cli.ts";
-/** Re-exported: `splitSystemPrompt` moved to `./herdr-stage.ts` under the ceiling, its tests import it here. */
-export { splitSystemPrompt, stageSystemPrompt } from "./herdr-stage.ts";
-/** Re-exported: the name rules moved to `./herdr-name.ts` under the ceiling; tests import them here. */
-export { uniqueAgentName } from "./herdr-name.ts";
-/** Re-exported after startup retry extraction; existing executor importers keep this public constant. */
-export { PANE_READY_POLL_MS } from "./herdr-start.ts";
-/**
- * Re-exported so `test/run-herdr.test.ts` and any importer keep reaching these where they always were.
- *
- * `POLL_INTERVAL_MS` and `newSuffix` moved to `./herdr-poll.ts` under the 400-line ceiling; the names are part
- * of this module's surface and moving a file should not move an export.
- */
-export { DEFAULT_SNAPSHOT_LINES, POLL_INTERVAL_MS, readPane, tailLines, waitForLifecycleBaseline, waitForSettled, type PollTarget } from "./herdr-poll.ts";
-export interface HerdrRunRequest {
-    /** `planSpawn` args **without** the prompt — see `prompt`. */
-    args: string[];
-    /**
-     * The task, delivered with `herdr agent prompt` rather than as an argv element.
-     *
-     * This is strictly safer than the direct-spawn path, which has to defend a model-authored string from
-     * pi's argv parser by prefixing a space (`neutralisePrompt`, `docs/probes/g1-argv`). Here the task never
-     * reaches argv at all, so there is no parser in front of it.
-     */
-    prompt: string;
-    /** Grant/depth/ledger variables. Set on the PANE, which the agent's shell inherits. */
-    env: Record<string, string>;
-    cwd: string;
-    /** Unique pane and agent name. */
-    name: string;
-    /** herdr workspace to create the tab in. Omitted lets herdr choose. */
-    workspace?: string;
-    signal?: AbortSignal;
-    timeoutMs?: number;
-    maxOutputBytes?: number;
-    /**
-     * Leave the pane open after the run so a human can read or resume it.
-     *
-     * Default **false**: a fan-out that leaks a pane per child fills the operator's workspace, and
-     * `docs/probes/g16-herdr` records that panes are not trivially closable once orphaned.
-     */
-    keepPane?: boolean;
-    exec?: HerdrExec;
-    /**
-     * The pane's last few lines, re-reported every poll — a SNAPSHOT the consumer REPLACES, not appends.
-     *
-     * **Display only**, exactly as in `runChild`: the child's answer is still the returned `text`. Unlike
-     * `runChild`'s `onOutput`, this is not a stream: `agent read` returns a snapshot of a bounded terminal, and
-     * the previous append-shaped design produced an 89,000× amplification once a pane scrolled or passed the
-     * output cap. See `tailLines` in `./herdr-poll.ts`.
-     *
-     * Exceptions are swallowed; a renderer must not be able to break a governed run.
-     */
-    onSnapshot?: (lines: string[]) => void;
-    /** Available pane snapshots only, not a structured session transcript. Never awaited. */
-    onObservation?: (bytes: Uint8Array) => void;
-    /** How many pane lines to report per poll. Defaults to `DEFAULT_SNAPSHOT_LINES`. */
-    snapshotLines?: number;
-    /**
-     * The pane id, reported as soon as `tab create` returns it.
-     *
-     * Separate from `onOutput` because it arrives once and arrives *early*: it is what lets the parent print a
-     * name a human can switch to **while the child is alive**, which is the whole point of the pane surviving.
-     */
-    onPane?: (paneId: string, agentName: string) => void;
-    /** Called only after agent start and prompt both succeed; pane creation alone is still `starting`. */
-    onRunning?: (paneId: string, agentName: string) => void;
-    /** Security hook for attaching a writer lease to the tab. Unlike display callbacks, errors fail the run. */
-    onTab?: (tabId: string) => void;
-    /** Optional observation, unlike the required lease hook above. */
-    onNativeTab?: (tabId: string) => void;
-    onSessionReference?: PollTarget["onSessionReference"];
-    /** Close even a settled pane before releasing a writer lease; no post-lease prompt may remain live. */
-    closeOnSettle?: boolean;
-    /** Poll cadence override. Exists so tests do not wait `POLL_INTERVAL_MS` per state transition. */
-    pollIntervalMs?: number;
-}
-export declare class HerdrWriterCloseError extends Error {
-    constructor(tabId: string);
-}
-/**
- * Run one governed child in a pane and return its output.
- *
- * Deliberately returns `ChildRunResult` — the same shape as `runChild` — so the extension can choose an
- * executor without knowing which one it got.
- */
-export declare function runHerdrPane(request: HerdrRunRequest): Promise<ChildRunResult>;
-//# sourceMappingURL=run-herdr.d.ts.map

package/dist/run-herdr.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"run-herdr.d.ts","sourceRoot":"","sources":["../src/run-herdr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,OAAO,EAA2B,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAuG,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAMvJ;;;;;GAKG;AACH,OAAO,EAAE,KAAK,SAAS,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5D,gHAAgH;AAChH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACxE,wGAAwG;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,yGAAyG;AACzG,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD;;;;;GAKG;AACH,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,wBAAwB,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE3J,MAAM,WAAW,eAAe;IAC9B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACvC,yFAAyF;IACzF,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IAC5C,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACrD,sGAAsG;IACtG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,4GAA4G;IAC5G,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,kEAAkE;IAClE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,kBAAkB,CAAC,EAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACtD,uGAAuG;IACvG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAGD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,KAAK,EAAE,MAAM;CAI1B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA2PpF"}