pi-daddy 0.28.0 → 0.32.1

package/dist/ordinary-children.js

@@ -1,93 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { isExecutionId } from "./execution-id.js";
-import { dataDigest, detached, freeze, sha } from "./debrief-contract.js";
-import { controlShape } from "./dispatch-control.js";
-const sessions = new WeakMap(), ports = new WeakMap();
-const id = (v) => typeof v === "string" && /^[a-zA-Z0-9:_-]{1,128}$/.test(v);
-function target(value) { const t = detached(value); controlShape(t, ["executionId", "parentExecutionId", "toolCallId"]); if (!isExecutionId(t.executionId) || !(t.parentExecutionId === null || isExecutionId(t.parentExecutionId)) || !(t.toolCallId === null || typeof t.toolCallId === "string" && t.toolCallId.length > 0 && t.toolCallId.length <= 256))
-    throw Error("exact original occurrence identity required"); return t; }
-export function ordinaryCancellation(input) { const r = detached(input); controlShape(r, ["version", "requestId", "bindingDigest", "expectedRevision", "target"]); if (r.version !== "ordinary-cancel-v1" || !id(r.requestId) || !sha(r.bindingDigest) || !Number.isSafeInteger(r.expectedRevision) || r.expectedRevision < 0)
-    throw Error("invalid ordinary cancellation"); return freeze({ ...r, target: target(r.target) }); }
-export const ordinaryCancellationDigest = (r) => dataDigest(ordinaryCancellation(r));
-export const isOrdinaryChildren = (p) => typeof p === "object" && p !== null && ports.has(p);
-/** Extension-internal constructor. No disk discovery/recovery and no identity inferred from labels. */
-function initializeOrdinaryChildren(session) {
-    if (sessions.has(session))
-        throw Error("original session already registered");
-    const s = { holds: new Set(), enabled: false, coverageGap: false, bindingDigest: dataDigest({ occurrence: randomUUID() }), revision: 0, rows: new Map(), handles: new Map(), requests: new Map() };
-    const port = Object.freeze({ bindingDigest: s.bindingDigest,
-        quiescent: () => !s.coverageGap && [...s.rows.values()].every(r => r.state === "settled" && r.boundary === "not-assessed"),
-        inspect: () => freeze(detached({ bindingDigest: s.bindingDigest, revision: s.revision, children: [...s.rows.values()], admission: s.holds.size ? "held-by-original-owner" : "open", coverage: s.coverageGap ? "unretained-before-opt-in" : "original-registered-lifetimes-only", freshness: "snapshot-unknown", recovery: "unavailable", acceptance: "not-assessed" })),
-        cancel(input, authority) {
-            const r = ordinaryCancellation(input), digest = ordinaryCancellationDigest(input), old = s.requests.get(r.requestId);
-            if (old) {
-                if (old.digest !== digest)
-                    throw Error("immutable ordinary cancellation ID");
-                return freeze(detached(old.result));
-            }
-            if (r.bindingDigest !== s.bindingDigest || r.expectedRevision !== s.revision)
-                throw Error("stale original ordinary controller CAS");
-            if (!authority || authority.bindingDigest !== s.bindingDigest || !authority.requestDigests.includes(digest))
-                throw Error("independent exact ordinary cancellation authority required");
-            const row = s.rows.get(r.target.executionId), handle = s.handles.get(r.target.executionId);
-            if (!row || dataDigest(row.target) !== dataDigest(r.target) || row.state !== "active" || !handle)
-                throw Error("original live child handle unavailable; no recovery");
-            if (s.requests.size >= 1024)
-                throw Error("ordinary cancellation capacity exhausted");
-            // Synchronous original-handle operation: CAS cannot yield between checking and requesting abort.
-            const result = { state: "abort-requested", target: r.target, revision: ++s.revision, completion: "pending-original-caller", durability: "process-local" };
-            s.requests.set(r.requestId, { digest, result });
-            row.abortRequested = true;
-            handle.abort();
-            return freeze(detached(result));
-        } });
-    sessions.set(session, port);
-    ports.set(port, s);
-}
-/** Only the original session object can retrieve its retained port; spreading/copying cannot. */
-export function ordinaryChildrenFor(session) { const p = sessions.get(session); if (!p)
-    throw Error("original grants session required"); ports.get(p).enabled = true; return p; }
-/** Associate the actual extension API object at factory creation, never a label or path. */
-export function associateOrdinaryHost(host, session) { initializeOrdinaryChildren(session); const p = sessions.get(session); if (!p || sessions.has(host))
-    throw Error("original unbound extension host required"); sessions.set(host, p); }
-export function retainSessionChild(session, input, caller) { const p = sessions.get(session); if (!p)
-    return undefined; const s = ports.get(p); if (!s.enabled) {
-    s.coverageGap = true;
-    return undefined;
-} return retainOrdinaryChild(p, input, caller); }
-/** Internal host control seam, not a model tool or recovered capability. Reads never call it. */
-export function holdOrdinaryDispatch(port, key) {
-    const s = ports.get(port);
-    if (!s || !sha(key))
-        throw Error("original ordinary boundary required");
-    if (s.coverageGap || [...s.rows.values()].some(r => r.state !== "active" && r.boundary !== "not-assessed"))
-        throw Error("ordinary boundary unavailable; no recovery");
-    if (!s.holds.has(key)) {
-        if (s.holds.size >= 32)
-            throw Error("ordinary boundary capacity exhausted");
-        s.holds.add(key);
-        s.revision++;
-    }
-    return Object.freeze({ ready: () => port.quiescent(), release: () => { if (s.holds.delete(key))
-            s.revision++; } });
-}
-/** Extension executor seam; never exported through the package root or model tools. */
-export function retainOrdinaryChild(port, input, caller) {
-    const s = ports.get(port);
-    if (!s)
-        throw Error("original ordinary controller required");
-    const t = target(input);
-    if (s.holds.size)
-        throw Error("ordinary dispatch held at original control boundary");
-    if (s.rows.has(t.executionId) || s.rows.size >= 1024)
-        throw Error("ordinary occurrence reused or capacity exhausted");
-    const abort = new AbortController(), row = { target: t, state: "active", abortRequested: false, control: "not-assessed", boundary: "not-assessed", outcome: null };
-    s.rows.set(t.executionId, row);
-    s.handles.set(t.executionId, abort);
-    s.revision++;
-    let done = false;
-    return { signal: caller ? AbortSignal.any([caller, abort.signal]) : abort.signal,
-        settle(outcome, control, boundary = control) { if (done)
-            throw Error("original child already settled"); done = true; row.outcome = detached(outcome); row.control = control; row.boundary = boundary; row.state = boundary === "unknown" ? "unknown" : "settled"; s.handles.delete(t.executionId); s.revision++; } };
-}
-//# sourceMappingURL=ordinary-children.js.map

package/dist/ordinary-children.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ordinary-children.js","sourceRoot":"","sources":["../src/ordinary-children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAOrD,MAAM,QAAQ,GAAC,IAAI,OAAO,EAA2B,EAAC,KAAK,GAAC,IAAI,OAAO,EAAgB,CAAC;AACxF,MAAM,EAAE,GAAC,CAAC,CAAS,EAAC,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7E,SAAS,MAAM,CAAC,KAAoB,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA,YAAY,CAAC,CAAC,EAAC,CAAC,aAAa,EAAC,mBAAmB,EAAC,YAAY,CAAC,CAAC,CAAC,CAAA,IAAG,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAG,IAAI,IAAE,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAG,IAAI,IAAE,OAAO,CAAC,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,IAAE,GAAG,CAAC;IAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAA,CAAC;AACjZ,MAAM,UAAU,oBAAoB,CAAC,KAA0B,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA,YAAY,CAAC,CAAC,EAAC,CAAC,SAAS,EAAC,WAAW,EAAC,eAAe,EAAC,kBAAkB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,OAAO,KAAG,oBAAoB,IAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAE,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAE,CAAC,CAAC,gBAAgB,GAAC,CAAC;IAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,EAAC,GAAG,CAAC,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAA,CAAC;AACvZ,MAAM,CAAC,MAAM,0BAA0B,GAAC,CAAC,CAAsB,EAAC,EAAE,CAAA,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtG,MAAM,CAAC,MAAM,kBAAkB,GAAC,CAAC,CAAS,EAAuB,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,KAAG,IAAI,IAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/G,uGAAuG;AACvG,SAAS,0BAA0B,CAAC,OAAc;IAChD,IAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5E,MAAM,CAAC,GAAO,EAAC,KAAK,EAAC,IAAI,GAAG,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,UAAU,CAAC,EAAC,UAAU,EAAC,UAAU,EAAE,EAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,EAAC,IAAI,EAAC,IAAI,GAAG,EAAE,EAAC,OAAO,EAAC,IAAI,GAAG,EAAE,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE,EAAC,CAAC;IACnL,MAAM,IAAI,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,CAAC,CAAC,aAAa;QACtE,SAAS,EAAC,GAAE,EAAE,CAAA,CAAC,CAAC,CAAC,WAAW,IAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,SAAS,IAAE,CAAC,CAAC,QAAQ,KAAG,cAAc,CAAC;QAC7G,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,QAAQ,CAAC,EAAC,aAAa,EAAC,CAAC,CAAC,aAAa,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA,CAAC,CAAA,wBAAwB,CAAA,CAAC,CAAA,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC,WAAW,CAAA,CAAC,CAAA,0BAA0B,CAAA,CAAC,CAAA,oCAAoC,EAAC,SAAS,EAAC,kBAAkB,EAAC,QAAQ,EAAC,aAAa,EAAC,UAAU,EAAC,cAAc,EAAC,CAAC,CAAC;QAC3U,MAAM,CAAC,KAA0B,EAAC,SAAgC;YAChE,MAAM,CAAC,GAAC,oBAAoB,CAAC,KAAK,CAAC,EAAC,MAAM,GAAC,0BAA0B,CAAC,KAAK,CAAC,EAAC,GAAG,GAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7G,IAAG,GAAG,EAAC,CAAC;gBAAA,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM;oBAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAAA,CAAC;YACtH,IAAG,CAAC,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,IAAE,CAAC,CAAC,gBAAgB,KAAG,CAAC,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5H,IAAG,CAAC,SAAS,IAAE,SAAS,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,IAAE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAC/K,MAAM,GAAG,GAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAC,MAAM,GAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtF,IAAG,CAAC,GAAG,IAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,GAAG,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM;gBAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzJ,IAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAE,IAAI;gBAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACjF,iGAAiG;YACjG,MAAM,MAAM,GAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,EAAE,CAAC,CAAC,QAAQ,EAAC,UAAU,EAAC,yBAAyB,EAAC,UAAU,EAAC,eAAe,EAAC,CAAC;YAC7I,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC;YAAA,GAAG,CAAC,cAAc,GAAC,IAAI,CAAC;YAAA,MAAM,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrH,CAAC,EAAC,CAAC,CAAC;IACN,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AACD,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,OAAc,IAAoB,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,OAAO,GAAC,IAAI,CAAC,CAAA,OAAO,CAAC,CAAC,CAAA,CAAC;AAC/L,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAW,EAAC,OAAc,IAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAA,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,IAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;IAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,CAAA,CAAC;AAC5O,MAAM,UAAU,kBAAkB,CAAC,OAAc,EAAC,KAAoB,EAAC,MAAmB,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC;IAAC,OAAO,SAAS,CAAC,CAAA,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAA,IAAG,CAAC,CAAC,CAAC,OAAO,EAAC,CAAC;IAAA,CAAC,CAAC,WAAW,GAAC,IAAI,CAAC;IAAA,OAAO,SAAS,CAAC;AAAA,CAAC,CAAA,OAAO,mBAAmB,CAAC,CAAC,EAAC,KAAK,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC;AACvQ,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAAC,IAAqB,EAAC,GAAU;IACpE,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC,IAAE,CAAC,GAAG,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5F,IAAG,CAAC,CAAC,WAAW,IAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,CAAC,QAAQ,KAAG,cAAc,CAAC;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1J,IAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,CAAC;QAAA,IAAG,CAAC,CAAC,KAAK,CAAC,IAAI,IAAE,EAAE;YAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAA,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAA,CAAC,CAAC,QAAQ,EAAE,CAAC;IAAA,CAAC;IAC7H,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,SAAS,EAAE,EAAC,OAAO,EAAC,GAAE,EAAE,GAAC,IAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;AACvG,CAAC;AACD,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,IAAqB,EAAC,KAAoB,EAAC,MAAmB;IAChG,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAAA,MAAM,CAAC,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzG,IAAG,CAAC,CAAC,KAAK,CAAC,IAAI;QAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACnF,IAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAE,IAAI;QAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAChH,MAAM,KAAK,GAAC,IAAI,eAAe,EAAE,EAAC,GAAG,GAAK,EAAC,MAAM,EAAC,CAAC,EAAC,KAAK,EAAC,QAAQ,EAAC,cAAc,EAAC,KAAK,EAAC,OAAO,EAAC,cAAc,EAAC,QAAQ,EAAC,cAAc,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC;IAAA,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAC,GAAG,CAAC,CAAC;IAAA,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAC,KAAK,CAAC,CAAC;IAAA,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnO,IAAI,IAAI,GAAC,KAAK,CAAC;IAAA,OAAO,EAAC,MAAM,EAAC,MAAM,CAAA,CAAC,CAAA,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,MAAM;QACtF,MAAM,CAAC,OAAe,EAAC,OAAoB,EAAC,WAAsB,OAAO,IAAE,IAAG,IAAI;YAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,IAAI,GAAC,IAAI,CAAC,CAAA,GAAG,CAAC,OAAO,GAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA,GAAG,CAAC,OAAO,GAAC,OAAO,CAAC,CAAA,GAAG,CAAC,QAAQ,GAAC,QAAQ,CAAC,CAAA,GAAG,CAAC,KAAK,GAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;AAC1T,CAAC"}

package/dist/pane-reaper.d.ts

@@ -1,111 +0,0 @@
-/**
- * Close herdr panes this process opened but never got to close.
- *
- * **As of ADR-0032 a pane belongs to the AGENT RUN, not to the tool call.** `runHerdrPane` closes a tab only for
- * a child that did *not* settle — closing the tab is the only kill herdr offers, so a child still working must
- * lose its pane. A child that answered keeps its pane so a human can read it, and this module reaps those: at
- * `agent_settled` (async) and at process `exit` (sync backstop).
- *
- * The gap that remains is the one this module was created for. A pi session **killed outright** runs no `exit`
- * handler, so it leaves one pane per tracked child, and `docs/probes/g16-herdr` records that an orphaned pane is
- * not trivially closable afterwards. R-62 was re-rated L×L → M×L when ADR-0031 made panes the default path.
- *
- * **Registered on `exit` only, deliberately — not on SIGINT or SIGTERM.** That is the part worth reading,
- * because the obvious fix is the dangerous one. Adding a signal listener *suppresses Node's default
- * termination*, so a library that adds one takes over an application-level decision it has no standing to
- * make: pi uses SIGINT to interrupt a turn, and a listener here that re-raised would turn "cancel this
- * delegation" into "exit pi". A governance package quietly changing the host's interrupt semantics is a
- * worse defect than the leak it fixes, and it would land on **every** session rather than the opt-in ones.
- *
- * So the coverage is exact and stated rather than implied:
- *
- *  - **Covered:** normal exit, `process.exit()`, an uncaught exception that unwinds to the default handler.
- *  - **NOT covered:** SIGKILL, and SIGTERM/SIGINT where nothing else in the process has installed a
- *    listener. Node terminates without running `exit` handlers in those cases, by design. A pane can still
- *    be orphaned there, and `herdr tab close <id>` is the manual remedy.
- *
- * Everything here is **synchronous**, because an `exit` handler is: a promise scheduled there never runs.
- */
-import { type HerdrExec } from "./herdr-cli.ts";
-/**
- * How many panes may be open at once — ADR-0032.
- *
- * **Derived from `MAX_CHILDREN_PER_CALL` rather than declared, so the two cannot drift.** The bound is not
- * decoration: `delegate_all` is capped per call and the fan-out budget bounds a subtree, but a plain blocking
- * `delegate` spends **nothing** from that budget by design — so thirty sequential `delegate` calls in one agent
- * run would otherwise hold thirty panes open until it settled.
- */
-export declare const MAX_OPEN_PANES = 8;
-export interface OpenPane {
-    /** herdr tab id — what `tab close` takes. */
-    tab: string;
-    /** herdr agent name, for diagnostics. There is no `agent stop`, so nothing acts on it — see `closePane`. */
-    name: string;
-    /** Staged system-prompt directory, removed with the pane it belonged to. */
-    promptDir?: string;
-    /**
-     * True once the child has answered and stopped working.
-     *
-     * **The trim may only close a pane with this set**, and that is a correctness rule rather than politeness. pi
-     * executes tool calls in **parallel** by default, and a plain `delegate` spends nothing from the fan-out
-     * budget — so one assistant message can hold `delegate_all(8)` *and* a `delegate`, and the ninth pane's trim
-     * used to close the oldest **live sibling**. Measured: two `delegate_all(8)` in one message killed **8 of 16
-     * children mid-work**, each reported as "could not be started" with its partial output discarded, while the
-     * ledger recorded all sixteen as provisioned. ADR-0032 argued the cap from *sequential* delegates only.
-     */
-    settled?: boolean;
-    /**
-     * The operator asked to keep this tab (`PI_GRANTS_HERDR_KEEP_PANE=1`), so no sweep may close it.
-     *
-     * It is registered anyway, and only for its `promptDir`: that temp dir was otherwise unreachable by either
-     * sweep and leaked one directory per kept pane, forever. So `exit` removes the staged prompt and leaves the
-     * tab, which is exactly what the flag promises.
-     */
-    keepTab?: boolean;
-}
-/** A run has finished with its pane: the trim may now reclaim it. */
-export declare function markPaneSettled(tab: string): void;
-/** A run has opened a pane. Idempotent per tab, and installs the exit hook on first use only. */
-export declare function trackPane(pane: OpenPane): void;
-/** A run closed its own pane the normal way. */
-export declare function untrackPane(tab: string): void;
-/** How many panes are currently outstanding — for tests and for `/grants`. */
-export declare function openPaneCount(): number;
-/**
- * Close every outstanding pane and return the tab ids closed.
- *
- * Exported and parameterised so it can be tested without herdr installed: the exit hook is unreachable from
- * a test (registering a real `exit` handler would run during the test runner's own shutdown), so the hook is
- * one line and *this* is where the behaviour lives.
- *
- * Failures are swallowed per pane rather than per call — one pane herdr will not close must not strand the
- * other seven, and nothing at exit has anywhere to report to anyway.
- */
-export declare function reapOpenPanes(syncExec?: (args: string[]) => void, now?: () => number): string[];
-/**
- * Close every outstanding pane — the `agent_settled` path (ADR-0032).
- *
- * **A separate function from `reapOpenPanes` rather than a shared implementation**, and the reason is not
- * style. The sync one is `execFileSync` with a six-second total budget *by necessity*: an `exit` handler cannot
- * await. Running that at `agent_settled` would freeze pi for up to six seconds **every time the operator gets
- * their prompt back** — turning a feature that exists to make work visible into a stall.
- *
- * Both drain the same `Map`, keyed by tab id, so a double close is impossible and a pane herdr refused stays
- * registered for whichever sweep runs next.
- *
- * Sequential rather than concurrent: a fan-out's panes are at most `MAX_OPEN_PANES`, and eight `tab close`
- * calls in parallel against one herdr server buys nothing worth the burst.
- */
-export declare function reapOpenPanesAsync(exec?: HerdrExec): Promise<string[]>;
-/**
- * Keep at most `MAX_OPEN_PANES` open, closing the oldest first.
- *
- * The `Map`'s insertion order **is** the age order, so no timestamp is needed — and that is why `trackPane`
- * must never re-`set` an existing tab, which would move it to the back of the queue and make an old pane look
- * new.
- *
- * Whatever it closes is returned so the caller can **say so** rather than silently dropping a pane the operator
- * was reading (R-48's rule, applied to a display).
- */
-export declare function trimOpenPanes(exec?: HerdrExec): Promise<string[]>;
-//# sourceMappingURL=pane-reaper.d.ts.map

package/dist/pane-reaper.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pane-reaper.d.ts","sourceRoot":"","sources":["../src/pane-reaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,EAA2B,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,IAAwB,CAAC;AAEpD,MAAM,WAAW,QAAQ;IACvB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,4GAA4G;IAC5G,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAGjD;AAeD,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAO9C;AAED,gDAAgD;AAChD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE7C;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAyBD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,IAAsB,EAAE,GAAG,eAAW,GAAG,MAAM,EAAE,CAgD5G;AAsBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,GAAE,SAAuB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASzF;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE,SAAuB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmBpF"}

package/dist/pane-reaper.js

@@ -1,242 +0,0 @@
-/**
- * Close herdr panes this process opened but never got to close.
- *
- * **As of ADR-0032 a pane belongs to the AGENT RUN, not to the tool call.** `runHerdrPane` closes a tab only for
- * a child that did *not* settle — closing the tab is the only kill herdr offers, so a child still working must
- * lose its pane. A child that answered keeps its pane so a human can read it, and this module reaps those: at
- * `agent_settled` (async) and at process `exit` (sync backstop).
- *
- * The gap that remains is the one this module was created for. A pi session **killed outright** runs no `exit`
- * handler, so it leaves one pane per tracked child, and `docs/probes/g16-herdr` records that an orphaned pane is
- * not trivially closable afterwards. R-62 was re-rated L×L → M×L when ADR-0031 made panes the default path.
- *
- * **Registered on `exit` only, deliberately — not on SIGINT or SIGTERM.** That is the part worth reading,
- * because the obvious fix is the dangerous one. Adding a signal listener *suppresses Node's default
- * termination*, so a library that adds one takes over an application-level decision it has no standing to
- * make: pi uses SIGINT to interrupt a turn, and a listener here that re-raised would turn "cancel this
- * delegation" into "exit pi". A governance package quietly changing the host's interrupt semantics is a
- * worse defect than the leak it fixes, and it would land on **every** session rather than the opt-in ones.
- *
- * So the coverage is exact and stated rather than implied:
- *
- *  - **Covered:** normal exit, `process.exit()`, an uncaught exception that unwinds to the default handler.
- *  - **NOT covered:** SIGKILL, and SIGTERM/SIGINT where nothing else in the process has installed a
- *    listener. Node terminates without running `exit` handlers in those cases, by design. A pane can still
- *    be orphaned there, and `herdr tab close <id>` is the manual remedy.
- *
- * Everything here is **synchronous**, because an `exit` handler is: a promise scheduled there never runs.
- */
-import { execFileSync } from "node:child_process";
-import { rmSync } from "node:fs";
-import { rm } from "node:fs/promises";
-import { MAX_CHILDREN_PER_CALL } from "./fanout.js";
-import { defaultExec, parseReply } from "./herdr-cli.js";
-/**
- * How many panes may be open at once — ADR-0032.
- *
- * **Derived from `MAX_CHILDREN_PER_CALL` rather than declared, so the two cannot drift.** The bound is not
- * decoration: `delegate_all` is capped per call and the fan-out budget bounds a subtree, but a plain blocking
- * `delegate` spends **nothing** from that budget by design — so thirty sequential `delegate` calls in one agent
- * run would otherwise hold thirty panes open until it settled.
- */
-export const MAX_OPEN_PANES = MAX_CHILDREN_PER_CALL;
-/** A run has finished with its pane: the trim may now reclaim it. */
-export function markPaneSettled(tab) {
-    const pane = open.get(tab);
-    if (pane)
-        pane.settled = true;
-}
-/**
- * Panes opened by THIS process and not yet closed. Keyed by tab id, so a double close is impossible.
- *
- * **That keying rests on tab ids being unique, which was measured rather than assumed** (herdr 0.7.5): ids
- * are `w<workspace>:t<counter>`, allocated by the single server, and **not recycled** — creating a tab,
- * closing it, and creating again yields the next counter value, never the freed one. If that ever changed,
- * concurrent panes would collapse into one entry and an early finisher's `untrackPane` would drop a live
- * sibling. Recorded because the hazard is invisible in the code and the precondition lives in another
- * project.
- */
-const open = new Map();
-let hookInstalled = false;
-/** A run has opened a pane. Idempotent per tab, and installs the exit hook on first use only. */
-export function trackPane(pane) {
-    open.set(pane.tab, pane);
-    if (hookInstalled)
-        return;
-    hookInstalled = true;
-    // `once`, and only ever one, so a fan-out of eight children does not install eight handlers and trip
-    // Node's MaxListenersExceededWarning — which would be this package printing a warning about itself.
-    process.once("exit", () => void reapOpenPanes());
-}
-/** A run closed its own pane the normal way. */
-export function untrackPane(tab) {
-    open.delete(tab);
-}
-/** How many panes are currently outstanding — for tests and for `/grants`. */
-export function openPaneCount() {
-    return open.size;
-}
-/** Per-command wall clock. `SIGKILL` because `timeout` alone is not a bound — see `TOTAL_BUDGET_MS`. */
-const PER_CALL_MS = 2000;
-/**
- * Total wall clock the whole sweep may add to process exit.
- *
- * **Measured, and the reason this exists.** With eight panes and a hung herdr, a per-call timeout of 5s
- * across two calls per pane is **80 seconds of silent hang at shutdown** — `stdio: "ignore"`, so the process
- * looks wedged with no output. Worse, `timeout` is not a hard bound at all: `spawnSync` sends `SIGTERM` and
- * then waits for the child to actually die, so a process ignoring `SIGTERM` runs to its own completion
- * (measured: a 3s timeout took 59.8s against `trap '' TERM; sleep 60`). Hence `killSignal: "SIGKILL"` **and**
- * a budget across the whole sweep rather than per call.
- *
- * A pane left open because the budget ran out is the failure this whole module downgrades to, and it is the
- * right one: `herdr tab close <id>` is a five-second manual fix, whereas a shell that will not exit is not.
- */
-const TOTAL_BUDGET_MS = 6000;
-/** Run one herdr command synchronously, swallowing everything: at exit there is nowhere to report. */
-const defaultSyncExec = (args) => {
-    execFileSync("herdr", args, { stdio: "ignore", timeout: PER_CALL_MS, killSignal: "SIGKILL" });
-};
-/**
- * Close every outstanding pane and return the tab ids closed.
- *
- * Exported and parameterised so it can be tested without herdr installed: the exit hook is unreachable from
- * a test (registering a real `exit` handler would run during the test runner's own shutdown), so the hook is
- * one line and *this* is where the behaviour lives.
- *
- * Failures are swallowed per pane rather than per call — one pane herdr will not close must not strand the
- * other seven, and nothing at exit has anywhere to report to anyway.
- */
-export function reapOpenPanes(syncExec = defaultSyncExec, now = Date.now) {
-    const closed = [];
-    const deadline = now() + TOTAL_BUDGET_MS;
-    for (const pane of [...open.values()]) {
-        // Checked BEFORE each pane rather than after, so the budget bounds what we start, not what we finish.
-        // Panes left behind stay in the map; there is no later sweep, and saying so is the honest position —
-        // `openPaneCount()` is non-zero afterwards precisely so a caller could report it if it ever wanted to.
-        if (now() >= deadline)
-            break;
-        // No `agent stop`: it is not a herdr command (see `closePane`). Closing the tab is the kill.
-        //
-        // A `keepTab` pane is registered only for its staged prompt: remove that and leave the tab alone, which is
-        // the whole of what `PI_GRANTS_HERDR_KEEP_PANE=1` promises.
-        let closedThisPane = pane.keepTab === true;
-        if (pane.keepTab) {
-            if (pane.promptDir) {
-                try {
-                    rmSync(pane.promptDir, { recursive: true, force: true });
-                }
-                catch {
-                    /* /tmp litter, not correctness */
-                }
-            }
-            open.delete(pane.tab);
-            continue;
-        }
-        try {
-            syncExec(["tab", "close", pane.tab]);
-            closed.push(pane.tab);
-            closedThisPane = true;
-        }
-        catch {
-            /* an orphan we could not close: `herdr tab close` is the manual remedy, as documented above */
-        }
-        // **The staged prompt is deleted only when the tab is provably gone.** It used to be removed
-        // unconditionally, so a pane herdr refused to close lost its `--append-system-prompt` file — and pi treats a
-        // missing path there as **literal text, with no warning** (`resource-loader.js`: `existsSync` fails, the
-        // input is returned). Re-running that pane's echoed argv would hand the child a pathname as its
-        // instructions. Litter is cheaper than silently swapping a definition's body for its filename.
-        if (closedThisPane && pane.promptDir) {
-            try {
-                rmSync(pane.promptDir, { recursive: true, force: true });
-            }
-            catch {
-                /* /tmp litter, not correctness */
-            }
-        }
-        // Untracked either way, and only here: at `exit` there is no later sweep, so keeping an unclosable pane
-        // registered buys nothing. `closePane`'s async path deliberately differs — another sweep may still run.
-        open.delete(pane.tab);
-    }
-    return closed;
-}
-/**
- * Close one tracked pane. Shared by the async sweep and the trim so they cannot disagree about what "closed"
- * means — which is the whole of R-62's lesson, one layer up.
- *
- * Returns whether the tab is **provably** gone. A close herdr refused leaves the pane tracked, so the `exit`
- * handler retries it; untracking on a failed close is what disabled the one control built for that failure.
- */
-async function closePane(exec, pane) {
-    // **No `agent stop`.** It is not a herdr command — measured against 0.7.5, where it prints the usage banner
-    // and exits 0, which `defaultExec` reports as success. Two call sites here and one in `run-herdr.ts` issued it
-    // for nothing, and `docs/probes/g16-herdr` asserted it worked from a block that was never run. Closing the tab
-    // is the only kill herdr offers, and it does kill the child.
-    const reply = await exec(["tab", "close", pane.tab]).catch(() => undefined);
-    const closed = reply !== undefined && !parseReply(reply).error;
-    if (!closed)
-        return false;
-    if (pane.promptDir)
-        await rm(pane.promptDir, { recursive: true, force: true }).catch(() => undefined);
-    open.delete(pane.tab);
-    return true;
-}
-/**
- * Close every outstanding pane — the `agent_settled` path (ADR-0032).
- *
- * **A separate function from `reapOpenPanes` rather than a shared implementation**, and the reason is not
- * style. The sync one is `execFileSync` with a six-second total budget *by necessity*: an `exit` handler cannot
- * await. Running that at `agent_settled` would freeze pi for up to six seconds **every time the operator gets
- * their prompt back** — turning a feature that exists to make work visible into a stall.
- *
- * Both drain the same `Map`, keyed by tab id, so a double close is impossible and a pane herdr refused stays
- * registered for whichever sweep runs next.
- *
- * Sequential rather than concurrent: a fan-out's panes are at most `MAX_OPEN_PANES`, and eight `tab close`
- * calls in parallel against one herdr server buys nothing worth the burst.
- */
-export async function reapOpenPanesAsync(exec = defaultExec) {
-    const closed = [];
-    for (const pane of [...open.values()]) {
-        // `keepTab` panes are registered only so their staged prompt can be reaped at `exit`; the tab itself is the
-        // operator's to close.
-        if (pane.keepTab)
-            continue;
-        if (await closePane(exec, pane))
-            closed.push(pane.tab);
-    }
-    return closed;
-}
-/**
- * Keep at most `MAX_OPEN_PANES` open, closing the oldest first.
- *
- * The `Map`'s insertion order **is** the age order, so no timestamp is needed — and that is why `trackPane`
- * must never re-`set` an existing tab, which would move it to the back of the queue and make an old pane look
- * new.
- *
- * Whatever it closes is returned so the caller can **say so** rather than silently dropping a pane the operator
- * was reading (R-48's rule, applied to a display).
- */
-export async function trimOpenPanes(exec = defaultExec) {
-    if (open.size <= MAX_OPEN_PANES)
-        return [];
-    const closed = [];
-    // **Only SETTLED panes are candidates, oldest first.** A live sibling's pane is its child's only terminal, and
-    // closing a tab kills the child — see `OpenPane.settled`. If every open pane is live the cap is exceeded and
-    // nothing is closed, which is the right failure: a pane too many costs an operator a keystroke, and a killed
-    // child costs them the work.
-    //
-    // **Walks past what it cannot close**, rather than attempting `excess` panes from the front and calling it
-    // done. A pane herdr refuses to close used to sit at the head forever, so the cap silently stopped holding
-    // (measured: 30 panes for 30 delegates when every close was refused) and the same corpse was re-attacked on
-    // every spawn — O(n²) round-trips.
-    for (const pane of [...open.values()]) {
-        if (open.size - closed.length <= MAX_OPEN_PANES)
-            break;
-        if (!pane.settled || pane.keepTab)
-            continue;
-        if (await closePane(exec, pane))
-            closed.push(pane.tab);
-    }
-    return closed;
-}
-//# sourceMappingURL=pane-reaper.js.map

package/dist/pane-reaper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pane-reaper.js","sourceRoot":"","sources":["../src/pane-reaper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAkB,MAAM,gBAAgB,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AA8BpD,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,IAAI;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;AAChC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;AACzC,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,iGAAiG;AACjG,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,IAAI,aAAa;QAAE,OAAO;IAC1B,aAAa,GAAG,IAAI,CAAC;IACrB,qGAAqG;IACrG,oGAAoG;IACpG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,wGAAwG;AACxG,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,sGAAsG;AACtG,MAAM,eAAe,GAAG,CAAC,IAAc,EAAQ,EAAE;IAC/C,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;AAChG,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,WAAqC,eAAe,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,eAAe,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACtC,sGAAsG;QACtG,qGAAqG;QACrG,uGAAuG;QACvG,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM;QAC7B,6FAA6F;QAC7F,EAAE;QACF,2GAA2G;QAC3G,4DAA4D;QAC5D,IAAI,cAAc,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACP,kCAAkC;gBACpC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,QAAQ,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,+FAA+F;QACjG,CAAC;QACD,6FAA6F;QAC7F,6GAA6G;QAC7G,yGAAyG;QACzG,gGAAgG;QAChG,+FAA+F;QAC/F,IAAI,cAAc,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,wGAAwG;QACxG,wGAAwG;QACxG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,IAAc;IACtD,4GAA4G;IAC5G,+GAA+G;IAC/G,+GAA+G;IAC/G,6DAA6D;IAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAkB,WAAW;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACtC,4GAA4G;QAC5G,uBAAuB;QACvB,IAAI,IAAI,CAAC,OAAO;YAAE,SAAS;QAC3B,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAkB,WAAW;IAC/D,IAAI,IAAI,CAAC,IAAI,IAAI,cAAc;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,+GAA+G;IAC/G,6GAA6G;IAC7G,6GAA6G;IAC7G,6BAA6B;IAC7B,EAAE;IACF,2GAA2G;IAC3G,2GAA2G;IAC3G,4GAA4G;IAC5G,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc;YAAE,MAAM;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5C,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/pi-tools.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-tools.d.ts","sourceRoot":"","sources":["../src/pi-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,6EAA6E;AAC7E,eAAO,MAAM,QAAQ,EAAE,UAAqB,CAAC;AAG7C,kGAAkG;AAClG,eAAO,MAAM,gBAAgB,2FAEnB,CAAC"}

package/dist/pi-tools.js

@@ -1,21 +0,0 @@
-/**
- * Facts about pi itself: its built-in tool names, and the capability that means "all of them".
- *
- * These lived in `agent-types.ts` until ADR-0016 deleted that module along with the rest of the
- * `@tintinweb/pi-subagents` port. They are not about agent types at all — `PI_BUILTIN_TOOLS` is how the
- * catalog tells a built-in from an extension tool, and `WILDCARD` is a capability id — so they outlive
- * the port and belong somewhere that does not name a package we no longer depend on.
- *
- * **`PI_BUILTIN_TOOLS` is a pinned observation, and it has already drifted once** (R-31): pi 0.84.1
- * exposes a `parallel` tool that the 0.83.0 list did not contain, which made it classify as an
- * *extension* capability. The list is used for classification only — never for enforcement, which is
- * `--tools`' job — so drift misfiles a capability rather than granting one. Keep it current anyway; a
- * misfiled capability is a confusing catalog.
- */
-/** Capability held only by a delegator authorised to hand out everything. */
-export const WILDCARD = "tool:*";
-/** pi's built-in tools, observed against 0.84.1. `parallel` was added since 0.83.0 — see R-31. */
-export const PI_BUILTIN_TOOLS = [
-    "bash", "edit", "edit-diff", "find", "grep", "ls", "parallel", "read", "write",
-];
-//# sourceMappingURL=pi-tools.js.map

package/dist/pi-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-tools.js","sourceRoot":"","sources":["../src/pi-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAe,QAAQ,CAAC;AAG7C,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO;CACtE,CAAC"}

package/dist/producer-ipc-contract.d.ts

@@ -1,29 +0,0 @@
-import type { AttemptDemand } from "./resource-budget.ts";
-export declare const PRODUCER_IPC_LIMITS: Readonly<{
-    frameBytes: 1024;
-    referenceBytes: 128;
-    childMs: 3000;
-    graceMs: 50;
-    maxElapsedMs: 30000;
-}>;
-export interface ProducerIpcBinding {
-    version: "producer-ipc-v1";
-    budgetDigest: string;
-    orderId: string;
-    experimentId: string;
-    executionId: string;
-    charterSha256: string;
-    invocationId: string;
-}
-export interface ProducerIpcReferences {
-    claimRef: string;
-    responseRef: string;
-}
-export declare function ipcShape(value: unknown, keys: readonly string[]): asserts value is Record<string, unknown>;
-export declare function producerIpcBinding(value: ProducerIpcBinding): Readonly<ProducerIpcBinding>;
-export declare const producerIpcBindingDigest: (value: ProducerIpcBinding) => string;
-export declare const producerIpcFrame: (value: ProducerIpcBinding) => Buffer;
-/** Existing v4 reservation schema, not a new model/effort/skills experiment operation. */
-export declare function producerIpcDemand(value: ProducerIpcBinding): AttemptDemand;
-export declare function ipcReferences(value: ProducerIpcReferences): Readonly<ProducerIpcReferences>;
-//# sourceMappingURL=producer-ipc-contract.d.ts.map

package/dist/producer-ipc-contract.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"producer-ipc-contract.d.ts","sourceRoot":"","sources":["../src/producer-ipc-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,eAAO,MAAM,mBAAmB;;;;;;EAAuG,CAAC;AACxI,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAC,iBAAiB,CAAC;IAAC,YAAY,EAAC,MAAM,CAAC;IAAC,OAAO,EAAC,MAAM,CAAC;IAAC,YAAY,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,YAAY,EAAC,MAAM,CAAA;CAAE;AAC1L,MAAM,WAAW,qBAAqB;IAAG,QAAQ,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAA;CAAE;AAG9E,wBAAgB,QAAQ,CAAC,KAAK,EAAC,OAAO,EAAE,IAAI,EAAC,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,CAEvG;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAC,kBAAkB,GAAE,QAAQ,CAAC,kBAAkB,CAAC,CAIxF;AACD,eAAO,MAAM,wBAAwB,GAAI,OAAM,kBAAkB,WAAyF,CAAC;AAC3J,eAAO,MAAM,gBAAgB,GAAI,OAAM,kBAAkB,KAAE,MAAkG,CAAC;AAC9J,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,KAAK,EAAC,kBAAkB,GAAE,aAAa,CAExE;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAC,qBAAqB,GAAE,QAAQ,CAAC,qBAAqB,CAAC,CAGzF"}

package/dist/producer-ipc-contract.js

@@ -1,29 +0,0 @@
-import { createHash } from "node:crypto";
-import { isExecutionId } from "./execution-id.js";
-export const PRODUCER_IPC_LIMITS = Object.freeze({ frameBytes: 1024, referenceBytes: 128, childMs: 3000, graceMs: 50, maxElapsedMs: 30000 });
-const id = (v) => typeof v === "string" && /^[a-zA-Z0-9:_-]{1,128}$/.test(v);
-const hash = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v);
-export function ipcShape(value, keys) {
-    if (!value || typeof value !== "object" || ![Object.prototype, null].includes(Object.getPrototypeOf(value)) || Reflect.ownKeys(value).length !== keys.length || keys.some(k => { const d = Object.getOwnPropertyDescriptor(value, k); return !d || !d.enumerable || !Object.hasOwn(d, "value"); }))
-        throw new TypeError("closed producer IPC data required");
-}
-export function producerIpcBinding(value) {
-    ipcShape(value, ["version", "budgetDigest", "orderId", "experimentId", "executionId", "charterSha256", "invocationId"]);
-    if (value.version !== "producer-ipc-v1" || !hash(value.budgetDigest) || !hash(value.charterSha256) || !isExecutionId(value.executionId) || ![value.orderId, value.experimentId, value.invocationId].every(id))
-        throw new TypeError("exact producer IPC binding required");
-    return Object.freeze({ version: value.version, budgetDigest: value.budgetDigest, orderId: value.orderId, experimentId: value.experimentId, executionId: value.executionId, charterSha256: value.charterSha256, invocationId: value.invocationId });
-}
-export const producerIpcBindingDigest = (value) => createHash("sha256").update(JSON.stringify(producerIpcBinding(value))).digest("hex");
-export const producerIpcFrame = (value) => Buffer.from(JSON.stringify({ id: producerIpcBinding(value).invocationId, sequence: 1 }) + "\n");
-/** Existing v4 reservation schema, not a new model/effort/skills experiment operation. */
-export function producerIpcDemand(value) {
-    const b = producerIpcBinding(value);
-    return { attemptId: b.executionId, orderId: b.orderId, experimentId: b.experimentId, kind: "primary", parentAttemptId: null, inputBytes: Buffer.byteLength(JSON.stringify(b)), inputDigest: producerIpcBindingDigest(b) };
-}
-export function ipcReferences(value) {
-    ipcShape(value, ["claimRef", "responseRef"]);
-    if (!id(value.claimRef) || !id(value.responseRef))
-        throw new TypeError("bounded evidence references required");
-    return Object.freeze({ claimRef: value.claimRef, responseRef: value.responseRef });
-}
-//# sourceMappingURL=producer-ipc-contract.js.map

package/dist/producer-ipc-contract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"producer-ipc-contract.js","sourceRoot":"","sources":["../src/producer-ipc-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAC,IAAI,EAAE,cAAc,EAAC,GAAG,EAAE,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,EAAE,EAAE,YAAY,EAAC,KAAK,EAAE,CAAC,CAAC;AAGxI,MAAM,EAAE,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAAsB;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,GAAC,MAAM,CAAC,GAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,UAAU,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;AACjV,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,QAAQ,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,cAAc,EAAC,SAAS,EAAC,cAAc,EAAC,aAAa,EAAC,eAAe,EAAC,cAAc,CAAC,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,OAAO,KAAG,iBAAiB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACtQ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,CAAC,CAAC;AACtO,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAwB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3J,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAwB,EAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,YAAY,EAAC,QAAQ,EAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;AAC9J,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,CAAC,GAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAAA,OAAO,EAAC,SAAS,EAAC,CAAC,CAAC,WAAW,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,IAAI,EAAC,SAAS,EAAC,eAAe,EAAC,IAAI,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAC,WAAW,EAAC,wBAAwB,CAAC,CAAC,CAAC,EAAC,CAAC;AAC/O,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAA2B;IACvD,QAAQ,CAAC,KAAK,EAAC,CAAC,UAAU,EAAC,aAAa,CAAC,CAAC,CAAC;IAAA,IAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACtJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,CAAC,CAAC;AAChF,CAAC"}