pi-daddy 0.45.0 → 0.46.0

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog — pi-daddy
 
+## 0.46.0 — 2026-10-08
+
+Qualify owned Herdr execution on Linux x64 with client/server 0.8.2 and protocol 20. Native ownership gates execution and independently reaps descendants after coordinator, launcher or server loss; final answers use the same Pi 1.0.4 settled/persisted checks as captured execution. Add a durable session settlement journal and trusted runtime snapshot bridge for one-shot Principal resume. Unsupported versions refuse without backend substitution.
+
 Newest first. **Breaking changes are marked and say what to do about them.**
 
 This file exists because the README had grown ninety lines of stacked version banners before a reader

package/README.md

@@ -1,58 +1,29 @@
 # pi-daddy
 
-Source target: **0.44.2**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.44.2` both resolve to this release.
+Source target: **0.46.0**. Before installation, verify that `npm view pi-daddy version` and Git tag `v0.46.0` both resolve to this release.
 
-Capability governance and coordination for [pi](https://github.com/badlogic/pi-mono)'s multi-level agent system. An
-orchestrator grants each sub-agent a deliberate subset of what it holds and withholds the rest; a sub-agent may delegate
-further, but only ever a subset of what it holds. Enforcement is pi's own `--tools` allowlist on a separate child
-process, with an optional append-only, hash-chained governance ledger.
+**Capability governance and coordination for [pi](https://github.com/badlogic/pi-mono)'s multi-level agent system.**
+An orchestrator grants each sub-agent a deliberate subset of what it holds and withholds the rest. A sub-agent may
+delegate further, but only ever a subset of what it holds. Enforcement is pi's own `--tools` allowlist on a separate
+child process, with an optional append-only, hash-chained governance ledger.
+
+This file is the product description, present tense. If code and this file disagree, fix this file. Agents start at
+`AGENTS.md`, which carries the rules, the decisions still in force, the measured facts and the roadmap.
+
+## Install and first run
 
 ```bash
 pi install npm:pi-daddy
 pi
 ```
 
-`/grants` shows the session's ceiling and spawnable definitions. `/grants init` writes the review copy at
+In the session, `/grants` shows the tool ceiling this session holds and the definitions it can spawn. Governance is
+on after installation unless `PI_DADDY_GOVERNANCE=off`; before initialization a root session is bounded by its
+observed tool surface, but no project grant or ledger consent has been stored. `/grants init` scans enabled packages
+that declare runtime skills, asks which withheld capabilities to grant, writes the review copy at
 `.pi/pi-daddy/settings.json`, stores the enforced grant outside the workspace, enables the project ledger, and applies
-the decisions to the running session; commit the review copy when the project's ignore rules permit it. A definition
-is an [Agent Skills](https://agentskills.io/specification) `SKILL.md` whose `allowed-tools` is the ceiling and whose
-body is the child's system prompt.
-
-```
-delegate({ agent: "review-security", task: "Review the diff." })
-delegate_all({ children: [ { agent: "review-security", task: "…" }, { agent: "review-perf", task: "…" } ] })
-delegate_chain({ steps: [ { agent: "plan", task: "…" }, { agent: "build", task: "Implement: {previous}" } ] })
-```
-
-```
-effective = ( requested ∩ parentGrant ∩ ceiling ) \ (gated \ approved)
-```
-
-Escalation is impossible by construction on the tool surface. It does not contain an agent holding an execution
-primitive: a child granted `bash` can start an ungoverned descendant, so `bash` is gated by default and every gate
-answer is recorded when a governance ledger is configured.
-
-This candidate targets Pi 1.0.4 and captured Linux x64 execution. Qualification is limited to Ubuntu WSL2,
-kernel `6.18.33.2-microsoft-standard-WSL2`, x86_64 and Node `v26.7.0`; other runtime/kernel combinations, native
-Windows and WSL-to-Windows worker interop remain unqualified. Governed Herdr execution refuses until separately qualified. Select captured execution with `PI_DADDY_HERDR=0`. A final must match Pi's settled
-JSON output and persisted current branch. Unknown subtree cleanup retains capacity and workspace exclusion.
-`PI_DADDY_FANOUT` limits active descendants using conservative subtree reservations, with capacity returned only
-after verified settlement. Complete results remain separate from optional recording failures.
-
-Pi and TypeBox are wildcard host-provided peers so Pi's extension loader supplies one shared runtime copy. Development and release qualification pin exact Pi **1.0.4**; later Pi versions require new qualification. Prefer a Pi-managed install under a host pinned to 1.0.4. An ordinary standalone npm install may resolve newer peer versions and is outside this qualification. In a Pi-managed no-peer install, standalone help, version and reporting remain available; run initialization inside Pi with `/grants init`. Use Principal **4.8.0** with this runtime's `delegate_describe` contract. Native phases use `plan`, `build`, `review`, `debug`, and `investigate` with their returned `definitionId`; independent parallel work uses one `delegate_all` batch.
-
-Final capture preserves whitespace and concatenates text blocks without inserting separators. Tool-call terminals, empty visible finals and non-`stop` reasons are unavailable. Persisted message comparisons ignore object key order while preserving array order and every field value. The shared `final-conformance.json` table checks these semantics in both runtime and harness. Capture remains bounded: 4 MiB visible final, 32 MiB protocol line, 64 MiB persisted session, and a 3-second bounded session read. Exceeding a limit reports an unavailable final and blocks dependent handoffs; it does not imply the worker failed to settle.
-
-Retained capacity is rechecked against the original bound ownership and settlement receipt before a new single, parallel or chain dispatch. Exact later proof refunds the reservation once; missing, malformed or mismatched proof and unbound ownership remain retained. Recovery does not rewrite the original failed/unknown outcome or mint new capacity on reload. A single delegation reserves its available subtree; use `delegate_all` to allocate independent parallel children.
-
-The package requires Node.js 22.19.0 or newer. `pi-daddy report` joins episode usage and attribution;
-`pi-daddy outcomes` adds Git, CI, amendment, and operator-correction signals for commits carrying a `Pi-Episode`
-trailer. A connected dashboard can change model/thinking defaults for its owning session without changing persistent
-settings or enforcement.
-
-The full product description is the repository [README](https://github.com/mojomanyana/pi-daddy#readme); the
-[CHANGELOG](./CHANGELOG.md) says what each release changed and what to do about breaking changes. The one shipped
-contract is `contracts/ledger-record/v1`.
+both decisions to the running session. Commit the review copy when the project's ignore rules permit it. The
+standalone `pi-daddy init` command scaffolds files only; it cannot mutate a live pi session.
 
 ## Optional local public evidence capture
 
@@ -101,3 +72,342 @@ local root deliberately. Hashes identify retained bytes; they do not authenticat
 running as the same user. Capture integrity establishes neither reviewer approval nor task completion and
 adds no grants, ledger events or automatic resumption. Future JEV/LoRA experiments may explicitly consume
 reviewed public evidence offline; this feature sends nothing to an external evaluator.
+
+## What a definition is
+
+An [Agent Skills](https://agentskills.io/specification) `SKILL.md`. Its `allowed-tools` is the ceiling; its body is
+the child's system prompt. The standard specifies `allowed-tools` as "pre-approved" and marks it experimental: it
+declares intent and blocks nothing. Passed through `--tools` it becomes structural. That is the contribution.
+
+```yaml
+---
+name: review-security
+description: Reviews a diff for authn/authz, injection and secrets handling.
+allowed-tools: Read, Grep
+---
+Review ONLY the diff you are given, for security. Report findings; never edit.
+```
+
+## The three tools
+
+```
+delegate({ agent: "review-security", task: "Review the diff." })
+delegate_all({ children: [ { agent: "review-security", task: "…" }, { agent: "review-perf", task: "…" } ] })
+delegate_chain({ steps: [ { agent: "plan", task: "…" }, { agent: "build", task: "Implement: {previous}" } ] })
+```
+
+Each child is a separate OS process with its own tool allowlist, its own instructions and no knowledge of its
+siblings. `delegate_all` runs children concurrently under the active descendant capacity limit.
+`delegate_chain` runs steps in sequence; each step receives its predecessor's complete verified final inside a
+fenced, labelled, nonce-delimited block. A required final exceeding the 32 KiB handoff bound stops dependent steps;
+the complete result remains available to the caller. The chain is planned and gated before any step runs. A child may itself hold `delegate` and spawn further, with the
+same tools, one level deeper, under the same rules.
+
+## What a child receives
+
+By default a child gets two things: its definition body as its system prompt, and the task. Anything more is a
+capability. `context:<mode>` names how much of the parent's own session crosses, and it attenuates like every other
+id, so a child can never receive a richer handoff than the definition's ceiling and the parent's grant allow.
+
+```
+delegate({ agent: "review", task: "Review the diff.",
+           context: { mode: "summary", summary: "we chose flock over mtime; the lease is a helper process" } })
+
+delegate({ agent: "build", task: "Implement it.",
+           context: { mode: "files", files: ["src/kernel/resolve.ts"] } })
+```
+
+| Mode | What crosses |
+| :--- | :--- |
+| `none` | nothing beyond the definition and the task; the default |
+| `files` | the contents of paths the parent names, confined to the working directory |
+| `pruned` | the last few turns of the parent's session, plus older turns naming those files |
+| `summary` | what the parent writes in its own words |
+| `fork` | the parent's whole session, as a fork; **gated**, so a human answers first |
+
+A `delegate_chain` step takes the same parameter, and because a chain is planned as one unit, a gate any step
+raises is answered before the first step runs.
+
+The modes are ordered, and each subsumes the weaker ones: a parent holding `context:fork` may hand a child
+`context:files`. What crosses arrives inside a labelled, nonce-delimited fence marked as data rather than
+instructions, capped at 32 KiB, with anything that did not fit said inside the fence. The capability decision record
+names the mode the child actually received and how much crossed.
+
+`pruned` keeps recent turns plus turns naming the given files. The deterministic selector keeps those candidates
+against the task, keeping a subset. A probe over the operator's sessions measured 0.737 delivered term recall at the
+20-turn default; that is not task-success evidence and is not enough to make `pruned` the default.
+
+## The guarantee, and its limit
+
+```
+effective = ( requested ∩ parentGrant ∩ ceiling ) \ (gated \ approved)
+```
+
+Escalation is impossible by construction on the tool surface: no policy engine, no model on the security path. Depth,
+active descendant capacity, approvals and workspace routing attenuate the same way. When a governance ledger is configured, each
+decision is recorded and the `denied` set is the signal: an agent repeatedly asking for what it does not hold is the
+escalation tell.
+
+What it does not do: contain an agent holding an execution primitive. A child granted `bash` can start a wholly
+ungoverned descendant. Containing that is the operating system's job, so `bash` is **gated by default** in a
+governed session and gating is closed under subsumption (gating `write` also gates `bash`). The escape is not made
+impossible; it is made loud, which is what matters when the realistic threat is a confused or prompt-injected agent.
+
+**`write`, `edit` and `edit-diff` are gated too, since 0.40.0, and the reason is the same one.** A review used
+pi's own `write` from a governed child to rewrite the operator's stored grant — widening it from `tool:read` to
+`tool:bash` — and to write the record that says which workspaces are routable. `write` takes an absolute path and
+performs no confinement, so it reaches every operator-state file on the same account. It is therefore much closer
+to `bash` than a tool allowlist suggests, and it is now loud for the same reason `bash` is. The cost is real:
+most useful delegations write something, so they ask once until an approval is banked. `PI_DADDY_GATED` is the
+escape hatch for an operator who wants the old behaviour, and an explicitly empty value gates nothing.
+
+## Approvals
+
+A gated capability needs the UI of the session executing the delegation. Captured children use Pi's JSON mode
+without a UI; a gate with neither an inherited approval nor an available UI is denied. The answer is **once**, **for this session**, or **always** (persisted for a bounded period, offered only for a
+named definition, keyed `capability@subject`). Approvals inherit down the subtree intersected with each child's grant;
+a `once` never crosses a spawn. The approval store and governance ledger never store raw task text. `/grants
+approvals` lists what is persisted; `/grants revoke <capability>@<definition>` or `--all` removes it. The store lives
+in pi's agent directory, not in the workspace.
+
+Monetary usage is observational. It never pauses, stops or authorizes a child. Available usage remains in
+lifecycle records and episode reports; missing or partial coverage is not a zero-cost claim. Permission approvals,
+depth, fan-out limits and execution timeouts are separate controls.
+
+## The ledger
+
+When configured, `.pi/pi-daddy/grants.jsonl` holds capability decisions, child lifecycles, workspace leases, cost
+and session configuration, and episode outcomes. Each line is a **record envelope**
+`{v, seq, prev, at, kind, id, body, digest}`: `prev` is the hash of the previous line, `digest` the hash of the record.
+A damaged file is read up to the damage; the writer then refuses with `LEDGER_DAMAGED` until `pi-daddy ledger repair
+<path> --yes` drops the damaged tail. A ledger written before the envelope existed is imported once at session start
+(`pi-daddy ledger import <source> <target>` does it by hand) and never repaired. `/grants ledger` reports records,
+escalation attempts, integrity, executors and which definition bodies ran, by digest.
+
+The activity timeline (`activity.jsonl`, parent turns, child lifecycles, runtime-skill reads) uses the same envelope
+and is enabled by default. It may store private prompt and final content in `.pi/pi-daddy/content/`; set
+`PI_DADDY_ACTIVITY_CONTENT=metadata-only` (or `off`) to keep only digests, or
+`PI_DADDY_ACTIVITY_TIMELINE=off` to disable observation.
+
+`pi-daddy outcomes` reads Git history, optional GitHub Actions results from `gh`, and narrowly recognized corrections
+in the next recorded operator turn, then appends only changed `episode_outcome` signals. Only commits carrying a
+`Pi-Episode: <episode-id>` trailer is considered; `pi-daddy report` can display attribution only when matching episode
+data exists in the local ledgers and shows the latest label beside each such episode. These labels are delayed for 48 hours and are operational heuristics, not quality acceptance. The contract
+is `packages/pi-daddy/contracts/ledger-record/v1`.
+
+## Workspaces and leases
+
+A registered worktree is named `workspace:<id>` and routing a child there is a capability that attenuates like any
+other. Acceptance is trust on first use: the first session accepts and announces every id already in the registry.
+Later additions are refused until `/grants workspaces` accepts the current id set, effective next session. Each session
+pins accepted ids to their resolved destinations, so a destination changed during that session is refused; the next
+session repins an already accepted id without another acceptance step. A writer routed to a workspace holds an
+exclusive lease. A kernel `flock` serializes live writers; execution-bound helper receipts separately prove that
+the previous captured subtree settled. Unknown cleanup quarantines the workspace even after the lock disappears,
+refusing a successor until the original ownership evidence proves settlement. It coordinates governed children only; it is not a sandbox, path confinement, or proof of
+anything a child did.
+
+## Executors and the dashboard
+
+Captured and Herdr pane execution share the native owner and current-final validator on Linux x64. Qualification is limited to the measured Ubuntu WSL2 environment: kernel `6.18.33.2-microsoft-standard-WSL2`, x86_64, Node `v26.7.0`, and exact Pi 1.0.4. Other kernel/runtime combinations, native Windows, and WSL-to-Windows worker interop remain unqualified.
+A packaged native helper owns and reaps the cooperating child subtree. The final is accepted only when Pi's JSON
+protocol settles and matches the exact persisted current turn and active branch. Complete final text is preserved;
+work, final availability, subtree cleanup and optional observation completeness are separate result fields. A failed
+execution returns `isError` with its available evidence. Display, diagnostics and optional recording cannot replace
+the primary final. Unknown cleanup retains capacity and workspace exclusion.
+
+Pi and TypeBox are wildcard host-provided peers so Pi's extension loader supplies one shared runtime copy. Development and release qualification pin exact Pi **1.0.4**; later Pi versions require new qualification. Prefer a Pi-managed install under a host pinned to 1.0.4. An ordinary standalone npm install may resolve newer peer versions and is outside this qualification. In a Pi-managed no-peer install, standalone help, version and reporting remain available; run initialization inside Pi with `/grants init`. Use Principal **4.8.0** with this runtime's `delegate_describe` contract. Native phases use `plan`, `build`, `review`, `debug`, and `investigate` with their returned `definitionId`; independent parallel work uses one `delegate_all` batch.
+
+Final capture preserves whitespace and concatenates text blocks without inserting separators. Tool-call terminals, empty visible finals and non-`stop` reasons are unavailable. Persisted message comparisons ignore object key order while preserving array order and every field value. The shared `final-conformance.json` table checks these semantics in both runtime and harness. Capture remains bounded: 4 MiB visible final, 32 MiB protocol line, 64 MiB persisted session, and a 3-second bounded session read. Exceeding a limit reports an unavailable final and blocks dependent handoffs; it does not imply the worker failed to settle.
+
+Retained capacity is rechecked against the original bound ownership and settlement receipt before a new single, parallel or chain dispatch. Exact later proof refunds the reservation once; missing, malformed or mismatched proof and unbound ownership remain retained. Recovery does not rewrite the original failed/unknown outcome or mint new capacity on reload. A single delegation reserves its available subtree; use `delegate_all` to allocate independent parallel children.
+
+Set `PI_DADDY_HERDR=0` for captured execution or `PI_DADDY_HERDR=1` to demand Herdr panes. An unset value
+probes for a responding server. The qualified Herdr transport requires client/server 0.8.2 and protocol 20;
+a version mismatch refuses governed work with no backend fallback. Each owned pane starts a packaged launcher
+connected to the coordinator over a private bounded Unix socket. The launcher uses the same pinned native
+subreaper, and the coordinator binds its identity before releasing the worker gate. Child environment and
+arguments come from the governed plan, without inheriting the Herdr daemon's environment. Only public text is
+shown in the pane; raw protocol/private reasoning is not used as a display channel.
+
+Native receipts, not pane closure or idle screen state, prove subtree cleanup. Model-free qualification covers
+actual Pi CLI success, retry, nested tool and failed-final cases, cancellation, coordinator SIGKILL and loss of
+the independently owned Herdr server, including detached descendants. Retained panes have no live Pi writer.
+An unavailable pane display cannot replace a missing final or cleanup receipt. Dashboard display remains independent.
+
+The trusted extension event `pi-daddy:runtime-snapshot:v1` supports Principal's explicitly armed resume checks.
+It reports the actual Pi session/canonical working directory, a stable owner scope, current backend qualification,
+outstanding execution identities and an exact settlement digest. A private runtime journal under the operator's
+Pi agent directory records pending launches before execution and native ownership before the gate opens. An OS
+lock excludes concurrent owners; clean same-session restart rechecks original receipts and preserves the digest.
+Missing or changed receipts, interrupted unbound launches, live owners and failed control finalization refuse
+resume. The journal contains process identities and receipts, never task text or an approval. A model-authored
+list of children, successful prose or a progress flag cannot supply these facts. Principal separately verifies
+operator authorization, candidate and artifacts before consuming its checkpoint and queueing a fixed continuation.
+This bridge never grants capabilities, approves work or calls JEV/OpenAI/other models. The ledger schema is unchanged.
+Same-user hostile filesystem or co-loaded-extension authenticity is outside this cooperative ownership boundary.
+
+`pi-daddy-dashboard` renders a ledger or activity timeline in a terminal; `/grants dashboard` opens it in a Herdr pane
+beside the session. Its execution history and current episode cost are
+read-only. A dashboard connected through `/grants dashboard` accepts
+`m <definition> <provider:model> <thinking>` (or `m all ...`) over a private session-local socket and applies the same
+in-memory overrides and `session_config` audit event as `/grants models`; a standalone dashboard is read-only, and
+neither form can affect enforcement.
+
+## Bounds and configuration
+
+Every variable is `PI_DADDY_*`. Operator-facing controls are grouped below; the environment overrides stored
+configuration where both exist.
+
+| Area | Variables |
+| :--- | :--- |
+| Governance | `PI_DADDY_GOVERNANCE`, `PI_DADDY_GRANT`, `PI_DADDY_GATED`, `PI_DADDY_MAX_DEPTH`, `PI_DADDY_FANOUT`, `PI_DADDY_LEDGER`, `PI_DADDY_APPROVAL_TIMEOUT` |
+| Child execution | `PI_DADDY_HERDR`, `PI_DADDY_HERDR_WORKSPACE`, `PI_DADDY_HERDR_KEEP_PANE`, `PI_DADDY_CHILD_IDLE_TIMEOUT`, `PI_DADDY_CHILD_TIMEOUT`, `PI_DADDY_ALLOW_UNRESOLVED_MODELS` |
+| Workspaces and retention | `PI_DADDY_WORKSPACE_REGISTRY`, `PI_DADDY_WORKSPACE_LEASE_DIR`, `PI_DADDY_EXECUTION_ARCHIVE`, `PI_DADDY_RETAIN_NATIVE_SESSIONS`, `PI_DADDY_NATIVE_SESSION_ROOT` |
+| Activity | `PI_DADDY_ACTIVITY_TIMELINE`, `PI_DADDY_ACTIVITY_CONTENT` |
+
+`PI_DADDY_FANOUT` bounds active cooperating descendant sessions. Its default remains 8; literal 0 means exhausted,
+and malformed values refuse. A reservation includes the child and its disjoint descendant allowance, so concurrent
+calls can refuse while an earlier subtree holds capacity even when that subtree is not using every slot. Repeated
+settled work returns capacity; unknown cleanup does not. The same live owner retains reservations through reload.
+Changing its capacity configuration requires a new owner after the old subtree has settled. Depth and per-call
+limits still apply independently; this is not a lifetime call quota.
+
+The retired `PI_DADDY_EPISODE_COST_CEILING`, `PI_DADDY_ADVISOR`, `PI_DADDY_ADVISOR_KEY`,
+`PI_DADDY_ADVISOR_MODEL` and `PI_DADDY_ADVISOR_TASK_EGRESS` inputs are inert compatibility inputs.
+
+`PI_DADDY_CHILD_IDLE_TIMEOUT` is seconds without activity before a child is stopped (default fifteen minutes);
+activity is output, a child-session-file change, or Linux process-tree CPU/descendant activity.
+`PI_DADDY_CHILD_TIMEOUT` is the runaway ceiling for a child that never goes quiet (default six hours). The remaining
+names in the source inventory are internal propagation, attribution, workspace-pin, or dashboard-transport fields;
+do not set them manually. Prelaunch refusals use stable codes (`CAPABILITY_ESCALATION`, `GATED_UNAPPROVED`,
+`DEPTH_EXCEEDED`, `FANOUT_EXCEEDED`, `WORKSPACE_NOT_AUTHORIZED`, `CHILD_TIMED_OUT`, `LEDGER_DAMAGED`, …); the full
+enumeration is `REFUSAL_CODES` and is pinned by the contract.
+
+### Child work attribution
+
+Every governed child receives `PI_DADDY_EPISODE` (the ledger episode), `PI_DADDY_DEFINITION` (the definition name),
+and `PI_DADDY_EXECUTION` (the lifecycle execution id). These are attribution metadata, not authority.
+
+### Per-definition model and thinking
+
+Child runtime defaults are reviewable beside each definition in `.pi/pi-daddy/settings.json`. Selection applies
+explicit argument → session override → project definition settings → an intact authored model/thinking preference
+row → normal defaults/current Pi. Authored rows are never combined into a new model/thinking pair. Unsupported
+explicit pairs refuse; the runtime does not clamp effort or select a substitute model. Use `/grants models`
+or a connected dashboard to edit session overrides. Delegation never opens an automatic model chooser.
+
+```json
+{
+  "defaults": { "model": "openai-codex:gpt-5.6-sol", "thinking": "medium" },
+  "definitions": [
+    {
+      "name": "review",
+      "declares": ["tool:read"],
+      "spawnable": true,
+      "model": "anthropic:claude-opus-4-6",
+      "thinking": "high"
+    }
+  ]
+}
+```
+
+Valid thinking values are `off`, `minimal`, `low`, `medium`, `high`, `xhigh`, and `max`. `/grants` shows the
+resolved value and source for every displayed definition.
+
+## Retired intervention inputs
+
+External advisors, monetary cost gates and the first-delegation model chooser were removed. These recognized old
+inputs are inert, including malformed values; the package does not rewrite existing configuration or history:
+
+| Input | Compatibility behavior |
+|---|---|
+| Tool argument `episodeCostCeiling` on single/all/chain | Removed before Pi validates the remaining arguments |
+| Settings `episodeCostCeiling`, `advisor`, `sessionModelPrompt` | Ignored; active model and authority fields still validate |
+| `PI_DADDY_EPISODE_COST_CEILING`, `PI_DADDY_ADVISOR`, `PI_DADDY_ADVISOR_KEY`, `PI_DADDY_ADVISOR_MODEL`, `PI_DADDY_ADVISOR_TASK_EGRESS` | Never select or execute an intervention; reserved environment stripping remains |
+
+Historical advice/cost-gate records remain readable. Manual model choices and permission approvals remain active.
+For future JEV or learned-policy experiments, existing versioned decision/lifecycle records and harness result exports
+remain the observation boundary. A separately selected experimental adviser may propose a choice for evaluation; it
+must never grant capabilities, approve work, start retries or silently change the selected model. No automatic remote
+advisor call or training pipeline is installed. Dataset consent, supported training method and comparative value need
+separate qualification.
+
+## Command-line reference
+
+```text
+pi-daddy init [--force] [--dir <path>]
+pi-daddy ledger repair <path> [--yes]
+pi-daddy ledger import <source> <target>
+pi-daddy report [--since <date>] [--definition <name>] [--model <id>]
+                [--group-by definition|model|thinking] [--json]
+pi-daddy outcomes
+
+pi-daddy-dashboard [--ledger <path>] [--once] [--details] [--no-color]
+```
+
+`pi-daddy init` prepares the review files but cannot apply a grant to an already-running session; use `/grants init`
+for that. `--force` rewrites copied legacy runtime-skill definitions, never `settings.json`.
+
+## Programmatic API
+
+The package requires Node.js 22.19.0 or newer. Code is exported only from `pi-daddy`; schemas and fixtures are exported
+from `pi-daddy/contracts/*`. Layer subpaths are private. The root exports kernel, governance, executor, and product
+primitives, including `resolve`, `planSpawn`, `appendLedgerEvent`, `readRecords`, `runChild`, and `buildCatalog`.
+
+## The layers
+
+The Files column names the main modules of each layer, not all of them; the module docstrings are the
+specification of who owns what.
+
+
+| Layer | Answers | Files |
+| :--- | :--- | :--- |
+| `src/kernel` | What may a child hold, and how is that carried? Mostly pure; the readers that discover what exists are the exception, and they are bounded. | `resolve`, `spawn`, `propagation`, `catalog`, `definitions`, `capabilities`, `approval`, `chain`, `context-handoff`, `fanout`, `correlation`, `refusals`, `env-names`, `project-paths`, `workspace`, `bounded-read` |
+| `src/governance` | What was decided, and where is it written? | `record`, `ledger`, `ledger-events`, `ledger-report`, `approval-store`, `approval-prompt`, `grant-store`, `init`, `workspace-lease`, `execution-retention` |
+| `src/executors` | How does a child process start and end? | `executor`, `run-herdr`, `herdr-*`, `pane-reaper` |
+| `src/products` | What does the operator see or report? | `activity-timeline`, `dashboard-*`, `episode-report`, `episode-outcomes` |
+| `extensions/` | The pi extension and its wiring: hooks, the three tools, approvals flow, `/grants`. | `grants.ts` is the entry point |
+
+## Tests
+
+```bash
+npm run format:check
+npm run typecheck
+npm test
+npm run build --workspace=pi-daddy
+npm run test:integration:ci --workspace=pi-daddy # model-free CI subset
+npm run test:integration --workspace=pi-daddy    # real Pi; Herdr creates and stops only its own named test server
+npm run test:smoke --workspace=pi-daddy          # pack, install into a scratch project, import and use it
+PI_DADDY_IT_MODEL=1 npm run test:integration --workspace=pi-daddy # opt-in real-model tier; consumes tokens
+```
+
+`pi-daddy` under `packages/pi-daddy` is the only published package; the workspace root is private.
+
+
+### Exact definition runtime choices (candidate)
+
+A selected definition may author a single-line `runtime-preferences` JSON array:
+
+```yaml
+runtime-preferences: '[{"model":"provider/model-id","thinking":"high"},{"model":"provider/other-id","thinking":"medium"}]'
+```
+
+Call arguments, per-definition session controls, and per-definition project settings win per field.
+The complete needed authored list validates before any candidate is selected. A partial override filters
+intact rows; ordinary configured/current defaults may fill missing fields without being labeled an authored
+pair. Unsupported explicit effort refuses rather than clamping. Resolution checks only named local models
+and passive auth status. Unknown authentication stays unknown; there are no credential commands, remote
+health probes, provider-wide searches, or post-launch substitution. With no explicit/current model supplied,
+Pi's ordinary configured default remains in effect; this does not attest a resolved pair.
+
+On Pi 1.0.4, the first request or native delegation reads the public selected skill inventory once. Native
+`plan`, `build`, `review`, `debug`, and `investigate` binding requires the selected Principal package's
+`principal-agents.json` paths and hashes. It freezes the generated delegated body and the intersection of
+inline and delegated ceilings. An unrelated skill with the same name is never labeled Principal. Failed
+binding has no inline fallback. Reload creates a new snapshot; observing provider tools never rereads bodies.
+
+Call `delegate_describe({agent:"build"})` and carry its `definitionId` into `delegate`, a `delegate_all`
+child, or a `delegate_chain` step. Principal bindings require that precondition. Description starts no child
+and grants no authority. A stale ID refuses before approval or launch. This hash is an observation and
+precondition, not an approval record or a learned-policy authorization.

package/dist/executors/captured-execution.d.ts

@@ -1,4 +1,4 @@
-import { type OwnedChildRunRequest, type OwnedChildRunResult } from "./owned-worker.ts";
+import { runOwnedChild, type OwnedChildRunRequest, type OwnedChildRunResult } from "./owned-worker.ts";
 import type { BoundedReadCleanupError } from "../kernel/bounded-read.ts";
 import { type ChildFinal } from "./child-final.ts";
 export interface CapturedExecutionResult extends OwnedChildRunResult {
@@ -9,5 +9,5 @@ export interface CapturedExecutionResult extends OwnedChildRunResult {
 export declare function runCapturedExecution(request: Omit<OwnedChildRunRequest, "ownershipDir" | "captureStdout"> & {
     sessionPath: string;
     onReadCleanup?: (error: BoundedReadCleanupError) => void;
-}): Promise<CapturedExecutionResult>;
+}, runOwned?: typeof runOwnedChild): Promise<CapturedExecutionResult>;
 //# sourceMappingURL=captured-execution.d.ts.map

package/dist/executors/captured-execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"captured-execution.d.ts","sourceRoot":"","sources":["../../src/executors/captured-execution.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,KAAK,oBAAoB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACtE,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AACD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,GAAG,eAAe,CAAC,GAAG;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;CAC1D,GACA,OAAO,CAAC,uBAAuB,CAAC,CA2ClC"}
+{"version":3,"file":"captured-execution.d.ts","sourceRoot":"","sources":["../../src/executors/captured-execution.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,KAAK,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACtE,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB;IAClE,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AACD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,GAAG,eAAe,CAAC,GAAG;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;CAC1D,EACD,QAAQ,GAAE,OAAO,aAA6B,GAC7C,OAAO,CAAC,uBAAuB,CAAC,CA2ClC"}

package/dist/executors/captured-execution.js

@@ -4,7 +4,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { runOwnedChild } from "./owned-worker.js";
 import { ChildFinalCapture } from "./child-final.js";
-export async function runCapturedExecution(request) {
+export async function runCapturedExecution(request, runOwned = runOwnedChild) {
     let directory;
     try {
         directory = await mkdtemp(join(tmpdir(), "pi-daddy-owner-"));
@@ -26,7 +26,7 @@ export async function runCapturedExecution(request) {
     }
     const capture = new ChildFinalCapture(request.onOutput, request.onReadCleanup);
     const args = [...request.args.slice(0, -1), "--mode", "json", request.args.at(-1)];
-    const output = await runOwnedChild({
+    const output = await runOwned({
         ...request,
         args,
         ownershipDir: join(directory, "ownership"),

package/dist/executors/captured-execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"captured-execution.js","sourceRoot":"","sources":["../../src/executors/captured-execution.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAuD,MAAM,mBAAmB,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAmB,MAAM,kBAAkB,CAAC;AAMtE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAGC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,yDAAyD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE;YACzC,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE;YACvC,WAAW,EAAE,EAAE;YACf,oBAAoB,EAAE,KAAK;SAC5B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,GAAG,OAAO;QACV,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QAC1C,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,KAAK;QACxB,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,OAAO;QACL,GAAG,MAAM;QACT,KAAK;QACL,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,oBAAoB,EAAE,MAAM,CAAC,SAAS;QACtC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"captured-execution.js","sourceRoot":"","sources":["../../src/executors/captured-execution.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAuD,MAAM,mBAAmB,CAAC;AAEvG,OAAO,EAAE,iBAAiB,EAAmB,MAAM,kBAAkB,CAAC;AAMtE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAGC,EACD,WAAiC,aAAa;IAE9C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,yDAAyD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE;YACzC,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE;YACvC,WAAW,EAAE,EAAE;YACf,oBAAoB,EAAE,KAAK;SAC5B,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,GAAG,OAAO;QACV,IAAI;QACJ,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QAC1C,aAAa,EAAE,KAAK;QACpB,iBAAiB,EAAE,KAAK;QACxB,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpG,OAAO;QACL,GAAG,MAAM;QACT,KAAK;QACL,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,oBAAoB,EAAE,MAAM,CAAC,SAAS;QACtC,IAAI,EAAE,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC"}

package/dist/executors/executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE3D;AAED,eAAO,MAAM,wBAAwB,QAE+E,CAAC;AAErH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,cAAc,CAQhG"}
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,OAAO,CAAC;IAChB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE3D;AAED,eAAO,MAAM,wBAAwB,QAE+E,CAAC;AAErH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,cAAc,CAUhG"}

package/dist/executors/executor.js

@@ -20,15 +20,17 @@ export { ENV_HERDR } from "../kernel/env-names.js";
 export function needsProbe(raw) {
     return raw === undefined || raw === "1";
 }
-export const HERDR_UNQUALIFIED_REASON = "Herdr governed execution is not qualified for complete current finals and subtree cleanup in this release. " +
+export const HERDR_UNQUALIFIED_REASON = "Herdr governed execution is not qualified for complete current finals and subtree cleanup on the detected transport. " +
     "Delegation is refused; set PI_DADDY_HERDR=0 explicitly to select captured execution. No backend fallback occurs.";
 export function chooseExecutor(raw, probe) {
     const choice = selectExecutor(raw, probe);
     if (choice.kind !== "herdr")
         return choice;
+    if (!choice.refusal && probe?.qualified === true)
+        return { ...choice, disclosure: `${choice.disclosure} — qualified native ownership` };
     return {
         ...choice,
-        refusal: [choice.refusal, HERDR_UNQUALIFIED_REASON].filter(Boolean).join(" "),
+        refusal: [choice.refusal, HERDR_UNQUALIFIED_REASON, probe?.qualificationReason].filter(Boolean).join(" "),
         disclosure: `${choice.disclosure} — unqualified; governed delegation will refuse`,
     };
 }

package/dist/executors/executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,cAAc,EAAqB,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAmBnD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,6GAA6G;IAC7G,kHAAkH,CAAC;AAErH,MAAM,UAAU,cAAc,CAAC,GAAuB,EAAE,KAAwB;IAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,iDAAiD;KAClF,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,GAAuB,EAAE,KAAwB;IACvE,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,oEAAoE;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC;QACrG,CAAC;QACD,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,uEAAuE;QACvE,MAAM,GAAG,GAAG,KAAK,EAAE,KAAK,IAAI,iCAAiC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,OAAO,EACL,2EAA2E,GAAG,KAAK;gBACnF,kGAAkG;gBAClG,0FAA0F;gBAC1F,2FAA2F;YAC7F,UAAU,EAAE,yCAAyC,GAAG,kCAAkC;SAC3F,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,qGAAqG;QACrG,yGAAyG;QACzG,4FAA4F;QAC5F,oDAAoD;QACpD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK,KAAK,IAAI;YACtB,UAAU,EACR,wFAAwF;gBACxF,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,wGAAwG;QACxG,4GAA4G;QAC5G,wGAAwG;QACxG,0GAA0G;QAC1G,8BAA8B;QAC9B,EAAE;QACF,2GAA2G;QAC3G,sGAAsG;QACtG,+FAA+F;QAC/F,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,4CAA4C;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,IAAI;QACZ,kGAAkG;QAClG,yGAAyG;QACzG,UAAU,EACR,mDAAmD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC9F,uCAAuC;KAC1C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/executors/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,cAAc,EAAqB,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAmBnD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,uHAAuH;IACvH,kHAAkH,CAAC;AAErH,MAAM,UAAU,cAAc,CAAC,GAAuB,EAAE,KAAwB;IAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI;QAC9C,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,+BAA+B,EAAE,CAAC;IACxF,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACzG,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,iDAAiD;KAClF,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,GAAuB,EAAE,KAAwB;IACvE,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,oEAAoE;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,gCAAgC,EAAE,CAAC;QACrG,CAAC;QACD,yGAAyG;QACzG,yGAAyG;QACzG,yGAAyG;QACzG,uEAAuE;QACvE,MAAM,GAAG,GAAG,KAAK,EAAE,KAAK,IAAI,iCAAiC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,OAAO,EACL,2EAA2E,GAAG,KAAK;gBACnF,kGAAkG;gBAClG,0FAA0F;gBAC1F,2FAA2F;YAC7F,UAAU,EAAE,yCAAyC,GAAG,kCAAkC;SAC3F,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,qGAAqG;QACrG,yGAAyG;QACzG,4FAA4F;QAC5F,oDAAoD;QACpD,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK,KAAK,IAAI;YACtB,UAAU,EACR,wFAAwF;gBACxF,4EAA4E;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,EAAE,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,2CAA2C,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,wGAAwG;QACxG,4GAA4G;QAC5G,wGAAwG;QACxG,0GAA0G;QAC1G,8BAA8B;QAC9B,EAAE;QACF,2GAA2G;QAC3G,sGAAsG;QACtG,+FAA+F;QAC/F,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,4CAA4C;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,IAAI;QACZ,kGAAkG;QAClG,yGAAyG;QACzG,UAAU,EACR,mDAAmD,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK;YAC9F,uCAAuC;KAC1C,CAAC;AACJ,CAAC"}

package/dist/executors/herdr-cli.d.ts

@@ -35,6 +35,8 @@ export declare function parseReply(reply: {
 export declare const PROBE_TIMEOUT_MS = 2000;
 export interface HerdrProbe {
     ok: boolean;
+    qualified?: boolean;
+    qualificationReason?: string;
     /** herdr's own words when it is not reachable. Carried so the disclosure line can name the reason. */
     error?: string;
 }

package/dist/executors/herdr-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"herdr-cli.d.ts","sourceRoot":"","sources":["../../src/executors/herdr-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,oGAAoG;AACpG,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE7G,eAAO,MAAM,WAAW,EAAE,SAatB,CAAC;AAEL;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAcA;AAED,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,sGAAsG;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAsB5G;AAED,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD,oGAAoG;AAEpG;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAI3E"}
+{"version":3,"file":"herdr-cli.d.ts","sourceRoot":"","sources":["../../src/executors/herdr-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,oGAAoG;AACpG,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE7G,eAAO,MAAM,WAAW,EAAE,SAkBtB,CAAC;AAEL;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAcA;AAED,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAErC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sGAAsG;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAsB5G;AAED,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAEzD,oGAAoG;AAEpG;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAI3E"}

package/dist/executors/herdr-cli.js

@@ -13,7 +13,7 @@ import { execFile } from "node:child_process";
 import { ENV_HERDR_WORKSPACE } from "../kernel/env-names.js";
 export { ENV_HERDR_WORKSPACE } from "../kernel/env-names.js";
 export const defaultExec = (args) => new Promise((settle) => {
-    execFile("herdr", args, { maxBuffer: 32 * 1024 * 1024 }, (error, stdout, stderr) => {
+    execFile("herdr", args, { maxBuffer: 32 * 1024 * 1024, timeout: 10000, killSignal: "SIGKILL" }, (error, stdout, stderr) => {
         const raw = error?.code;
         const code = typeof raw === "number" ? raw : error ? 1 : 0;
         // **A string `code` is a spawn failure, and it used to be thrown away.** `ENOENT` — herdr not installed —
@@ -34,7 +34,7 @@ export const defaultExec = (args) => new Promise((settle) => {
  */
 export function parseReply(reply) {
     try {
-        const parsed = JSON.parse(reply.stdout);
+        const parsed = JSON.parse(reply.stdout.trim() || reply.stderr.trim());
         if (parsed.error)
             return { error: parsed.error.message ?? parsed.error.code ?? "herdr reported an error" };
         return { result: parsed.result };

package/dist/executors/herdr-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"herdr-cli.js","sourceRoot":"","sources":["../../src/executors/herdr-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAK7D,MAAM,CAAC,MAAM,WAAW,GAAc,CAAC,IAAI,EAAE,EAAE,CAC7C,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACrB,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACjF,MAAM,GAAG,GAAI,KAAmC,EAAE,IAAI,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,0GAA0G;QAC1G,yGAAyG;QACzG,qGAAqG;QACrG,2GAA2G;QAC3G,+CAA+C;QAC/C,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,GAAG,MAAM,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAyC;IAIlE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAGrC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC3G,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,sGAAsG;QACtG,0FAA0F;QAC1F,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClG,OAAO,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;IACxF,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAQrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAoD,EAAE;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAa;YACpC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC1E,CAAC,CAAC;YACF,IAAI,OAAO,CAAa,CAAC,MAAM,EAAE,EAAE;gBACjC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,SAAS,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5G,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,oGAAoG;QACpG,yFAAyF;QACzF,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAEzD,oGAAoG;AAEpG;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxD,CAAC"}
+{"version":3,"file":"herdr-cli.js","sourceRoot":"","sources":["../../src/executors/herdr-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAK7D,MAAM,CAAC,MAAM,WAAW,GAAc,CAAC,IAAI,EAAE,EAAE,CAC7C,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;IACrB,QAAQ,CACN,OAAO,EACP,IAAI,EACJ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EACtE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxB,MAAM,GAAG,GAAI,KAAmC,EAAE,IAAI,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,0GAA0G;QAC1G,yGAAyG;QACzG,qGAAqG;QACrG,2GAA2G;QAC3G,+CAA+C;QAC/C,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,GAAG,MAAM,KAAK,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAyC;IAIlE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAGnE,CAAC;QACF,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC3G,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,sGAAsG;QACtG,0FAA0F;QAC1F,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClG,OAAO,EAAE,KAAK,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;IACxF,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAUrC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAoD,EAAE;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAExD,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAa;YACpC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;gBACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC1E,CAAC,CAAC;YACF,IAAI,OAAO,CAAa,CAAC,MAAM,EAAE,EAAE;gBACjC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,SAAS,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC5G,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,oGAAoG;QACpG,yFAAyF;QACzF,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAEzD,oGAAoG;AAEpG;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxD,CAAC"}

package/dist/executors/herdr-launcher.d.ts

@@ -0,0 +1,2 @@
+export declare function launchHerdrWorker(socketPath: string, token: string): Promise<void>;
+//# sourceMappingURL=herdr-launcher.d.ts.map

package/dist/executors/herdr-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"herdr-launcher.d.ts","sourceRoot":"","sources":["../../src/executors/herdr-launcher.ts"],"names":[],"mappings":"AAMA,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgHxF"}