pi-radar 0.9.0 → 0.11.0

package/dist/index.js

@@ -9,61 +9,14 @@ var radar_children_exports = {};
 __export(radar_children_exports, {
   createRadarChildren: () => createRadarChildren
 });
-
-// extension/radar-inspection.ts
-var radar_inspection_exports = {};
-__export(radar_inspection_exports, {
-  inspectRadarChild: () => inspectRadarChild,
-  provedRead: () => provedRead
-});
-var INSPECTION_LINES = 80;
-var INSPECTION_OUTPUT_BYTES = 16 * 1024;
-async function provedRead(client, target) {
-  const read = await client.agentGet(target.agentId);
-  return read.ok === true && read.value.verification === "verified" && read.value.location?.pane === target.paneId && (target.session === void 0 || read.value.contextSession === target.session) ? read.value : void 0;
-}
-async function inspectRadarChild(client, target) {
-  const before = await provedRead(client, target);
-  if (before === void 0)
-    throw new Error("Inspection target identity did not match");
-  const output = await client.output({
-    pane_id: target.paneId,
-    source: "recent_unwrapped",
-    lines: INSPECTION_LINES
-  });
-  if (output.ok === false)
-    throw new Error(
-      `Inspection output unavailable (${output.code}: ${output.message})`
-    );
-  const foreground = await client.processInfo({ pane_id: target.paneId });
-  const after = await provedRead(client, target);
-  if (after === void 0)
-    throw new Error("Inspection target changed during capture");
-  const lines = output.value.text.trim().split(/\r?\n/).slice(-INSPECTION_LINES);
-  const bounded2 = utf8Tail(lines.join("\n"), INSPECTION_OUTPUT_BYTES);
-  return Object.freeze({
-    capturedAt: Date.now(),
-    recentOutputTruncated: output.value.truncated || bounded2.truncated,
-    ...bounded2.text ? { recentOutput: bounded2.text } : {},
-    ...foreground.ok === true ? { foreground: foreground.value } : {},
-    ...after.activity !== void 0 ? { activity: after.activity } : {}
-  });
-}
-function utf8Tail(value, maxBytes) {
-  const bytes = Buffer.from(value);
-  if (bytes.length <= maxBytes) return { text: value, truncated: false };
-  let start = bytes.length - maxBytes;
-  while (start < bytes.length && (bytes[start] & 192) === 128) start++;
-  return { text: bytes.subarray(start).toString(), truncated: true };
-}
+import { randomUUID as randomUUID2 } from "node:crypto";
 
 // extension/radar-launch.ts
 var radar_launch_exports = {};
 __export(radar_launch_exports, {
+  launchFailure: () => launchFailure,
   launchRadarWorker: () => launchRadarWorker,
-  observeRadarChild: () => observeRadarChild,
-  readProcessGone: () => readProcessGone,
-  relaunchRefusalForChild: () => relaunchRefusalForChild
+  waitForChild: () => waitForChild
 });
 import { setTimeout as delay } from "node:timers/promises";
 
@@ -87,7 +40,6 @@ __export(radar_client_exports, {
   RADAR_SPAWN_CLOSE_CONTRACT: () => RADAR_SPAWN_CLOSE_CONTRACT,
   RADAR_SPAWN_CONTRACT: () => RADAR_SPAWN_CONTRACT,
   RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT: () => RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT,
-  RADAR_SPAWN_LIST_CONTRACT: () => RADAR_SPAWN_LIST_CONTRACT,
   boundedRadarAssignment: () => boundedRadarAssignment,
   boundedRadarFacts: () => boundedRadarFacts,
   boundedRadarSnapshot: () => boundedRadarSnapshot,
@@ -104,11 +56,10 @@ import { lstatSync } from "node:fs";
 import { createConnection } from "node:net";
 import { dirname, join } from "node:path";
 var RADAR_PROTOCOL_VERSION = 2;
-var RADAR_MINIMUM_REVISION = 7;
+var RADAR_MINIMUM_REVISION = 9;
 var RADAR_REGISTRY_CONTRACT = "registry.v1";
 var RADAR_REGISTRY_FACTS_CONTRACT = "registry.facts.v1";
 var RADAR_SPAWN_CONTRACT = "spawn.v1";
-var RADAR_SPAWN_LIST_CONTRACT = "spawn.list.v1";
 var RADAR_SPAWN_CLOSE_CONTRACT = "spawn.close.v1";
 var RADAR_LIFECYCLE_RESTART_CONTRACT = "lifecycle.restart.v1";
 var RADAR_SPAWN_LAUNCH_CONTEXT_CONTRACT = "spawn.launch_context.v1";
@@ -418,6 +369,9 @@ function spawnEdge(value) {
   const agentId = stringAt(bound, "registration_id");
   const subjectId = stringAt(bound, "subject_id");
   const exit = exitAt(recordAt(value, "exit_observation"));
+  const withdrawnRecord = recordAt(value, "withdrawn");
+  const withdrawnAt = stringAt(withdrawnRecord, "at");
+  const withdrawnReason = stringAt(withdrawnRecord, "reason");
   return {
     ok: true,
     value: {
@@ -434,7 +388,9 @@ function spawnEdge(value) {
           ...isUuid(subjectId) ? { subject_id: subjectId } : {}
         }
       } : {},
-      ...exit !== void 0 ? { exit_observation: exit } : {}
+      ...exit !== void 0 ? { exit_observation: exit } : {},
+      ...stringAt(value, "granted_at") !== void 0 ? { granted_at: stringAt(value, "granted_at") } : {},
+      ...withdrawnAt !== void 0 && withdrawnReason !== void 0 ? { withdrawn: { at: withdrawnAt, reason: withdrawnReason } } : {}
     }
   };
 }
@@ -444,6 +400,14 @@ var PROCESS_VERDICTS = [
   "mismatched",
   "unavailable"
 ];
+function subjectAt(value) {
+  const subjectId = recordAt(value, "subject_id");
+  const session = recordAt(value, "session_id");
+  const state = recordAt(value, "state");
+  if (!isUuid(subjectId) || session != null && !isUuid(session) || !["starting", "live", "detached", "unknown"].includes(String(state)))
+    return protocol("subject read carries no valid identity or attachment state");
+  return { ok: true, value };
+}
 function agentProcessAt(agent) {
   const process2 = recordAt(agent, "process");
   const claimed = recordAt(process2, "claimed");
@@ -836,7 +800,9 @@ function createRadarClient(options = {}) {
       return withRegistry(async () => {
         const answer = await call("agent.presence", { ...request });
         if (!answer.ok) return answer;
-        return decodePresenceAnswer(answer.value);
+        const decoded = decodePresenceAnswer(answer.value);
+        if (decoded.ok) processRegistrationId = decoded.value.registration_id;
+        return decoded;
       });
     },
     async releasePresence(request) {
@@ -871,9 +837,13 @@ function createRadarClient(options = {}) {
     },
     async acquire(request) {
       return withRegistryChannel(request.channel, async () => {
-        const answer = await call("agent.acquire", {
-          registration_id: request.registration_id,
-          channel: request.channel,
+        const assignment = request.channel === "assignment";
+        if (assignment && processRegistrationId === void 0)
+          return { ok: false, code: "refused", message: "assignment requires a granted parent" };
+        if (assignment && request.subject_id === void 0)
+          return { ok: false, code: "bad_params", message: "an assignment names a child subject" };
+        const answer = await call(assignment ? "subject.assignment.acquire" : "agent.acquire", {
+          ...assignment ? { registration_id: processRegistrationId, subject_id: request.subject_id } : { registration_id: request.registration_id, channel: request.channel },
           publisher: request.publisher,
           ...request.replace !== void 0 ? { replace: request.replace } : {}
         });
@@ -900,15 +870,19 @@ function createRadarClient(options = {}) {
         }
       }
       return withRegistryChannel(request.channel, async () => {
-        const answer = await call("agent.publish", {
-          registration_id: request.registration_id,
-          channel: request.channel,
+        const update = {
           writer_handle: request.writer_handle,
           sequence: request.sequence,
           ...request.lease_ms !== void 0 ? { lease_ms: request.lease_ms } : {},
           ...request.observed_at !== void 0 ? { observed_at: request.observed_at } : {},
           snapshot
-        });
+        };
+        const assignment = request.channel === "assignment";
+        if (assignment && processRegistrationId === void 0)
+          return { ok: false, code: "refused", message: "assignment requires a granted parent" };
+        if (assignment && request.subject_id === void 0)
+          return { ok: false, code: "bad_params", message: "an assignment names a child subject" };
+        const answer = await call(assignment ? "subject.assignment.publish" : "agent.publish", assignment ? { registration_id: processRegistrationId, subject_id: request.subject_id, update } : { registration_id: request.registration_id, channel: request.channel, ...update });
         if (answer.ok === false) return answer;
         const channel = answer.value.channel;
         const writer = channel?.writer;
@@ -949,7 +923,15 @@ function createRadarClient(options = {}) {
     },
     async retire(request) {
       return withRegistryChannel(request.channel, async () => {
-        const answer = await call("agent.retire", request);
+        const assignment = request.channel === "assignment";
+        if (assignment && processRegistrationId === void 0)
+          return { ok: false, code: "refused", message: "assignment requires a granted parent" };
+        if (assignment && request.subject_id === void 0)
+          return { ok: false, code: "bad_params", message: "an assignment names a child subject" };
+        const answer = await call(assignment ? "subject.assignment.retire" : "agent.retire", {
+          ...assignment ? { registration_id: processRegistrationId, subject_id: request.subject_id } : { registration_id: request.registration_id, channel: request.channel },
+          writer_handle: request.writer_handle
+        });
         return answer.ok === true ? { ok: true, value: void 0 } : answer;
       });
     },
@@ -1024,14 +1006,73 @@ function createRadarClient(options = {}) {
           request.request_id
         );
         if (answer.ok === false) return answer;
-        return focusOutcome(recordAt(answer.value, "request"), request.request_id);
+        const settled = focusOutcome(recordAt(answer.value, "request"), request.request_id);
+        if (settled.ok === false) return settled;
+        const launch = recordAt(recordAt(answer.value, "request"), "launch_request_id");
+        if (!isUuid(launch)) return protocol("lifecycle.restart reply names no launch");
+        return { ok: true, value: { ...settled.value, launch_request_id: launch } };
+      });
+    },
+    async subjectChildren(request = {}) {
+      const registrationId = processRegistrationId;
+      if (registrationId === void 0)
+        return { ok: false, code: "refused", message: "this process has no Radar registration" };
+      return withRegistry(async () => {
+        const params = { ...request, registration_id: registrationId };
+        const answer = await call("subject.children", { ...params });
+        if (!answer.ok) return answer;
+        const subjects = recordAt(answer.value, "subjects");
+        const next = recordAt(answer.value, "next");
+        if (!Array.isArray(subjects) || next != null && !isUuid(next))
+          return protocol("subject.children reply carries no valid page");
+        for (const subject of subjects) {
+          const decoded = subjectAt(subject);
+          if (!decoded.ok) return decoded;
+        }
+        return { ok: true, value: answer.value };
+      });
+    },
+    async childGet(subject_id) {
+      const registrationId = processRegistrationId;
+      if (registrationId === void 0)
+        return { ok: false, code: "refused", message: "this process has no Radar registration" };
+      if (!isUuid(subject_id))
+        return { ok: false, code: "bad_params", message: "child requires a subject UUID" };
+      return withRegistry(async () => {
+        const params = { registration_id: registrationId, subject_id };
+        const answer = await call("subject.child.get", { ...params });
+        return answer.ok ? subjectAt(recordAt(answer.value, "subject")) : answer;
+      });
+    },
+    async childInspect(subject_id) {
+      const registration_id = processRegistrationId;
+      if (registration_id === void 0)
+        return { ok: false, code: "refused", message: "this process has no Radar registration" };
+      return withRegistry(async () => {
+        const answer = await call("subject.child.inspect", { registration_id, subject_id });
+        if (!answer.ok) return answer;
+        const subject = subjectAt(recordAt(answer.value, "subject"));
+        if (!subject.ok) return subject;
+        const output = recordAt(answer.value, "output");
+        const text = stringAt(output, "text");
+        if (text === void 0 || typeof recordAt(output, "truncated") !== "boolean")
+          return protocol("child inspection has no output evidence");
+        const foreground = recordAt(answer.value, "foreground");
+        const activity = subject.value.execution?.snapshot?.snapshot;
+        return { ok: true, value: {
+          capturedAt: Date.now(),
+          recentOutputTruncated: recordAt(output, "truncated"),
+          ...text ? { recentOutput: text } : {},
+          ...foreground ? { foreground } : {},
+          ...activity && "activity" in activity ? { activity: activity.activity } : {}
+        } };
       });
     },
     async spawnList(request) {
       const registrationId = processRegistrationId;
       if (registrationId === void 0)
         return { ok: false, code: "refused", message: "spawn.list requires this client's process registration" };
-      return withContract(RADAR_SPAWN_LIST_CONTRACT, async () => {
+      return withRegistry(async () => {
         const params = {
           registration_id: registrationId,
           ...request.after !== void 0 ? { after: request.after } : {},
@@ -1394,215 +1435,9 @@ function boundedRadarSnapshot(snapshot) {
   };
 }
 
-// extension/radar-location.ts
-var radar_location_exports = {};
-__export(radar_location_exports, {
-  radarLocalPane: () => radarLocalPane,
-  radarPaneHandle: () => radarPaneHandle,
-  resolveRadarProcessLocation: () => resolveRadarProcessLocation,
-  tmuxServerName: () => tmuxServerName
-});
-import { basename } from "node:path";
-function radarLocalPane(env) {
-  const pane = env.TMUX_PANE?.trim();
-  return pane && /^%\d+$/.test(pane) ? pane : void 0;
-}
-function radarPaneHandle(qualified) {
-  return qualified.slice(qualified.lastIndexOf(":") + 1);
-}
-function tmuxServerName(env) {
-  const socket = env.TMUX?.trim().split(",")[0];
-  return socket ? basename(socket) || void 0 : void 0;
-}
-function qualifiedOwnPane(env, backend, instance) {
-  if (backend !== "tmux")
-    return {
-      absent: `the daemon serves the ${backend} backend, and Herdsman drives only tmux`
-    };
-  if (instance === void 0 || instance === "")
-    return {
-      pending: "the daemon did not name the tmux server it addresses"
-    };
-  const server = tmuxServerName(env);
-  if (server === void 0)
-    return {
-      absent: "this process's own tmux client names no server, so it is not in the pane it would publish"
-    };
-  if (server !== instance)
-    return {
-      absent: `this process is attached to tmux server ${server}, not to ${instance}`
-    };
-  const pane = radarLocalPane(env);
-  if (pane === void 0)
-    return {
-      absent: "this process's own environment names no tmux pane of that server"
-    };
-  return { pane: `tmux:${instance}:${pane}` };
-}
-function observedContainment(inventory, paneId) {
-  const rows = inventory.panes.filter((pane) => pane.pane_id === paneId);
-  if (rows.length === 0) return void 0;
-  if (rows.length > 1) return { ambiguous: `topology reports pane ${paneId} twice` };
-  const row = rows[0];
-  const tab = inventory.tabs.find((candidate) => candidate.tab_id === row.tab_id);
-  if (tab !== void 0 && tab.workspace_id !== row.workspace_id)
-    return {
-      ambiguous: `pane ${paneId} is reported in ${row.workspace_id}, but its tab belongs to ${tab.workspace_id}`
-    };
-  return { pane: row };
-}
-async function resolveRadarProcessLocation(client, env = process.env) {
-  let ready;
-  try {
-    ready = await client.ping();
-  } catch {
-    return { state: "pending", reason: "the daemon did not answer this process" };
-  }
-  if (ready.ok === false)
-    return {
-      state: "pending",
-      reason: `the daemon did not answer this process (${ready.code})`
-    };
-  const backend = ready.value.backend;
-  if (backend === void 0 || backend === "none")
-    return { state: "absent", reason: "the daemon serves no physical backend" };
-  const instance = ready.value.instance ?? void 0;
-  const own = qualifiedOwnPane(env, backend, instance);
-  if ("absent" in own) return { state: "absent", reason: own.absent };
-  if ("pending" in own) return { state: "pending", reason: own.pending };
-  const paneId = own.pane;
-  if (paneId === env.PI_HERDSMAN_PARENT_PANE_ID?.trim())
-    return {
-      state: "absent",
-      reason: "this process is in the pane its launch was created beside, not in a pane of its own"
-    };
-  let inventory;
-  try {
-    inventory = await client.observe();
-  } catch {
-    return {
-      state: "pending",
-      reason: "the daemon's topology could not be read for this process's pane"
-    };
-  }
-  if (inventory.ok === false)
-    return {
-      state: "pending",
-      reason: `the daemon's topology could not be read (${inventory.code})`
-    };
-  const containment = observedContainment(inventory.value, paneId);
-  if (containment === void 0)
-    return {
-      state: "pending",
-      reason: `the daemon's topology does not report pane ${paneId} yet`
-    };
-  if ("ambiguous" in containment)
-    return { state: "pending", reason: containment.ambiguous };
-  const row = containment.pane;
-  return {
-    state: "resolved",
-    location: {
-      backend,
-      ...instance !== void 0 ? { instance } : {},
-      workspace: row.workspace_id,
-      tab: row.tab_id,
-      pane: paneId
-    }
-  };
-}
-
 // extension/radar-launch.ts
-function unknownChild(reason) {
-  return { kind: "unknown", diagnostic: trajectory(reason) };
-}
-function trajectory(reason) {
-  return `the daemon's current record of this launch's child is ${reason}`;
-}
-async function observeRadarChild(client, provenance) {
-  if (provenance.registration_id === void 0)
-    return unknownChild("not bound to a child by this launch");
-  if (provenance.pane_id === void 0)
-    return unknownChild("without a pane this launch recorded for it");
-  const read = await client.spawnGet(provenance.request_id);
-  if (read.ok === false)
-    return unknownChild(
-      `not readable (${read.code}: ${read.message})`
-    );
-  const topology = read.value;
-  const edge = topology.edge;
-  if (edge.bound === void 0 || edge.bound.registration_id === void 0)
-    return unknownChild("not bound to a child by the daemon");
-  if (edge.bound.registration_id !== provenance.registration_id)
-    return unknownChild(
-      `bound to another subject (${edge.bound.registration_id}), not to ${provenance.registration_id}`
-    );
-  if (edge.location?.pane === void 0)
-    return unknownChild("recorded without a pane");
-  if (edge.location.pane !== provenance.pane_id)
-    return unknownChild(
-      `recorded on pane ${edge.location.pane}, not on ${provenance.pane_id}`
-    );
-  if (edge.exit_observation?.state !== "unknown")
-    return unknownChild("recorded with an observed process exit");
-  if (topology.freshness !== "fresh")
-    return unknownChild(
-      "on a pane the daemon's own inventory does not currently report"
-    );
-  if (topology.state !== "bound")
-    return unknownChild(
-      `not currently placed (state ${topology.state ?? "unreported"})`
-    );
-  const reply = await client.agentGet(edge.bound.registration_id);
-  if (reply.ok === false)
-    return unknownChild(
-      `process verdict not readable (${reply.code}: ${reply.message})`
-    );
-  const { verification, location, contextSession } = reply.value;
-  if (verification === "absent" || verification === "mismatched")
-    return {
-      kind: "gone",
-      verification,
-      diagnostic: trajectory(`the registered process is ${verification}`)
-    };
-  if (verification !== "verified")
-    return unknownChild(`process verdict is ${verification}`);
-  if (location?.pane !== provenance.pane_id)
-    return unknownChild(
-      `registered on ${location?.pane ?? "no pane"}, not on ${provenance.pane_id}`
-    );
-  if (provenance.session_id === void 0)
-    return unknownChild("without a session this launch recorded for it");
-  if (contextSession !== provenance.session_id)
-    return unknownChild(
-      `publishing session ${contextSession ?? "none"}, not ${provenance.session_id}`
-    );
-  return {
-    kind: "live",
-    evidence: {
-      request_id: provenance.request_id,
-      registration_id: edge.bound.registration_id,
-      source: edge.bound.source,
-      incarnation: edge.bound.incarnation,
-      pane_id: edge.location.pane
-    }
-  };
-}
-async function readProcessGone(client, agentId) {
-  const read = await client.agentGet(agentId);
-  if (read.ok === false) return void 0;
-  const { verification } = read.value;
-  return verification === "absent" || verification === "mismatched" ? verification : void 0;
-}
-async function relaunchRefusalForChild(client, agentId) {
-  const read = await client.agentGet(agentId);
-  if (read.ok === false)
-    return `the child's process cannot be read (${read.code}: ${read.message})`;
-  const { verification } = read.value;
-  if (verification === "absent" || verification === "mismatched") return void 0;
-  return `the child's registered process is ${verification === "verified" ? "still running" : "not proved gone"}`;
-}
 function refusedLaunch(message) {
-  return { kind: "refused", message };
+  return { kind: "failed", message };
 }
 function unresolvedLaunch(requestId, message) {
   return {
@@ -1611,14 +1446,6 @@ function unresolvedLaunch(requestId, message) {
     message: `spawn ${requestId} is unresolved (${message})`
   };
 }
-function edgeStanding(edge) {
-  if (edge.created === "refused" || edge.launched === "refused")
-    return "refused";
-  return edge.created === "completed" && edge.launched === "completed" ? "launched" : "unknown";
-}
-function edgeMessage(edge) {
-  return `the daemon's spawn record is created ${edge.created} and launched ${edge.launched}`;
-}
 var PRE_EFFECT_CODES = [
   "absent",
   "unsupported",
@@ -1631,14 +1458,12 @@ var PRE_EFFECT_CODES = [
   "busy",
   "backend_unavailable"
 ];
-function spawnFailure(result, requestId) {
+function launchFailure(result, requestId) {
   return PRE_EFFECT_CODES.includes(result.code) ? refusedLaunch(result.message) : unresolvedLaunch(requestId, result.message);
 }
 async function launchRadarWorker(options) {
   const { client, launch, signal } = options;
   const pollMs = options.pollMs ?? 250;
-  const deadline = Date.now() + options.timeoutMs;
-  const remaining = () => Math.max(0, deadline - Date.now());
   const parent = await options.publication.subject();
   if (parent === void 0 || !isUuid(parent.registration_id))
     return refusedLaunch(
@@ -1669,55 +1494,22 @@ async function launchRadarWorker(options) {
     ...Object.keys(launch.env).length > 0 ? { env: launch.env } : {}
   });
   if (spawned.ok === false) {
-    const refusal = spawnFailure(spawned, launch.request_id);
-    if (refusal.kind === "refused") return refusal;
-  }
-  if (spawned.ok === true) {
-    const standing = edgeStanding(spawned.value);
-    if (standing === "refused")
-      return refusedLaunch(edgeMessage(spawned.value));
-    if (standing === "unknown")
-      return unresolvedLaunch(launch.request_id, edgeMessage(spawned.value));
+    const refusal = launchFailure(spawned, launch.request_id);
+    if (refusal.kind === "failed") return refusal;
   }
   const bound = await waitForChild(client, launch.request_id, {
-    remaining,
     pollMs,
     ...signal !== void 0 ? { signal } : {}
   });
   if (bound.kind !== "bound") return bound;
-  const agentId = bound.registration_id;
-  try {
-    const state = await options.readers.waitForState(
-      launch.mailbox,
-      (candidate) => options.readers.startupAckMatches(candidate, {
-        generation: launch.generation,
-        runId: launch.identity.runId,
-        ownerSessionId: launch.identity.ownerSessionId,
-        workspaceId: launch.identity.workspaceId,
-        agentLabel: launch.identity.agentLabel,
-        // The child writes the raw TMUX_PANE of the pane it runs in. Requiring
-        // the pane the daemon created is what refuses a child that inherited
-        // another process's coordinates.
-        paneId: radarPaneHandle(bound.pane_id)
-      }),
-      { timeoutMs: remaining(), ...signal !== void 0 ? { signal } : {} }
-    );
-    return {
-      kind: "ready",
-      value: {
-        request_id: launch.request_id,
-        subject_id: bound.subject_id,
-        pane_id: bound.pane_id,
-        state
-      }
-    };
-  } catch (error) {
-    const claimed = options.readers.readState(launch.mailbox)?.paneId;
-    return unresolvedLaunch(
-      launch.request_id,
-      claimed !== void 0 && claimed !== radarPaneHandle(bound.pane_id) ? `the bound child ${agentId} claims the pane ${claimed}, not the pane ${bound.pane_id} this launch created for it` : `the bound child ${agentId} has not acknowledged this launch's startup (${String(error)})`
-    );
-  }
+  return {
+    kind: "ready",
+    value: {
+      request_id: launch.request_id,
+      subject_id: bound.subject_id,
+      pane_id: bound.pane_id
+    }
+  };
 }
 async function waitForChild(client, requestId, options) {
   let last = "the daemon has not answered";
@@ -1726,37 +1518,21 @@ async function waitForChild(client, requestId, options) {
       return unresolvedLaunch(requestId, `the launch was cancelled (${last})`);
     const answer = await client.spawnGet(requestId);
     if (answer.ok === true) {
-      const { edge, state, freshness } = answer.value;
-      const standing = edgeStanding(edge);
-      if (standing === "refused")
-        return refusedLaunch(`${edgeMessage(edge)}`);
-      if (standing === "unknown")
-        return unresolvedLaunch(requestId, edgeMessage(edge));
+      const { edge } = answer.value;
+      if (edge.withdrawn !== void 0)
+        return refusedLaunch(`the daemon withdrew this launch: ${edge.withdrawn.reason}`);
+      if (edge.granted_at === void 0) {
+        await delay(options.pollMs);
+        continue;
+      }
       const pane = edge.location?.pane;
       if (pane === void 0 || pane === "")
         return unresolvedLaunch(
           requestId,
           "the daemon's launch recorded no pane to verify the child against"
         );
-      if (freshness !== "fresh")
-        return unresolvedLaunch(
-          requestId,
-          state === "unresolved" ? `the daemon's inventory does not report the pane ${pane} its own record names for this child` : `the daemon cannot confirm the pane ${pane} it recorded for this child`
-        );
-      if (edge.exit_observation?.state === "exited")
-        return unresolvedLaunch(
-          requestId,
-          "the daemon observed the launched child's process exit"
-        );
       const agentId = edge.bound?.registration_id;
       if (agentId !== void 0 && isUuid(agentId)) {
-        const source = edge.bound?.source;
-        const incarnation = edge.bound?.incarnation;
-        if (source === void 0 || source === "" || incarnation === void 0 || incarnation === "")
-          return unresolvedLaunch(
-            requestId,
-            `the daemon bound the child ${agentId} without recording the process it registered as`
-          );
         const subjectId = edge.bound?.subject_id;
         if (subjectId === void 0 || !isUuid(subjectId))
           return unresolvedLaunch(
@@ -1766,136 +1542,60 @@ async function waitForChild(client, requestId, options) {
         return {
           kind: "bound",
           subject_id: subjectId,
-          registration_id: agentId,
-          pane_id: pane,
-          source,
-          incarnation
+          pane_id: pane
         };
       }
       last = "no child has registered with this launch's token yet";
     } else {
-      last = answer.message;
+      return unresolvedLaunch(requestId, answer.message);
     }
-    if (options.remaining() <= 0)
-      return unresolvedLaunch(requestId, last);
-    await delay(options.pollMs, void 0, {
-      ...options.signal !== void 0 ? { signal: options.signal } : {}
-    });
+    await delay(options.pollMs);
   }
 }
 
 // extension/radar-children.ts
-var PAGE = 100;
-var MAX_PAGES = 20;
 function createRadarChildren(client, publication) {
-  const held = /* @__PURE__ */ new Map();
-  async function resolveAll() {
-    const newest = /* @__PURE__ */ new Map();
-    let after;
-    for (let page = 0; page < MAX_PAGES; page++) {
-      const read = await client.spawnList({ ...after !== void 0 ? { after } : {}, limit: PAGE });
-      if (read.ok === false) return read;
-      for (const edge of read.value.spawns) {
-        const bound = edge.bound;
-        if (!bound?.subject_id || !bound.registration_id || edge.launched !== "completed") continue;
-        const at = Date.parse(bound.bound_at);
-        if (Number.isNaN(at)) continue;
-        const current = newest.get(bound.subject_id);
-        if (current !== void 0 && current.at >= at) continue;
-        newest.set(bound.subject_id, {
-          at,
-          registration_id: bound.registration_id,
-          child: {
-            subject_id: bound.subject_id,
-            request_id: edge.request_id,
-            ...edge.location?.pane ? { pane_id: edge.location.pane } : {},
-            state: edge.state,
-            exited: edge.exit_observation != null && edge.exit_observation.state !== "unknown"
-          }
-        });
-      }
-      if (!read.value.next) return { ok: true, value: newest };
-      after = read.value.next;
-    }
-    return { ok: false, code: "protocol", message: "the caller's launches exceed the readable pages" };
-  }
-  async function resolve2(subject) {
-    const all = await resolveAll();
-    return all.ok ? all.value.get(subject) : void 0;
-  }
-  async function resolveAndFollow(subject) {
-    const all = await resolveAll();
-    if (!all.ok) return void 0;
-    follow(all.value);
-    return all.value.get(subject);
-  }
-  function follow(all) {
-    for (const [subject, entry] of held) {
-      const target = all.get(subject);
-      if (target !== void 0 && entry.published !== target.registration_id)
-        entry.publish?.(target);
-    }
-  }
   return {
-    async list() {
-      const all = await resolveAll();
-      if (!all.ok) return all;
-      follow(all.value);
-      return { ok: true, value: [...all.value.values()].map((entry) => entry.child) };
+    async list(selection) {
+      const children = [];
+      let after;
+      do {
+        const page = await client.subjectChildren({ selection, after, limit: 100 });
+        if (!page.ok) return page;
+        children.push(...page.value.subjects);
+        if (page.value.next === after)
+          return { ok: false, code: "protocol", message: "child page did not advance" };
+        after = page.value.next ?? void 0;
+      } while (after !== void 0);
+      return { ok: true, value: children };
     },
-    assignment(subject, owner) {
-      const existing = held.get(subject);
-      if (existing !== void 0) return existing.writer;
-      let latest;
-      const entry = { writer: void 0 };
-      const send = (target) => {
-        if (latest === void 0) return;
-        if (entry.published !== void 0 && entry.published !== target.registration_id)
-          publication.retireAssignment(entry.published);
-        entry.published = target.registration_id;
-        publication.assignment(target.registration_id, owner).update(latest);
-      };
-      entry.publish = send;
-      entry.writer = {
-        update(snapshot) {
-          latest = snapshot;
-          void resolve2(subject).then((target) => {
-            if (target !== void 0) send(target);
-          });
-        },
-        retire() {
-          latest = void 0;
-          if (entry.published !== void 0) publication.retireAssignment(entry.published);
-          entry.published = void 0;
-        }
-      };
-      held.set(subject, entry);
-      return entry.writer;
-    },
-    retire(subject) {
-      held.get(subject)?.writer.retire();
-      held.delete(subject);
-    },
-    async observe(subject, session_id) {
-      const target = await resolveAndFollow(subject);
-      if (target === void 0)
-        return { kind: "unknown", diagnostic: "the daemon records no bound launch for this child" };
-      return observeRadarChild(client, {
-        request_id: target.child.request_id,
-        pane_id: target.child.pane_id,
-        registration_id: target.registration_id,
-        session_id
+    async restart(subject, program, options) {
+      const parent = await publication.subject();
+      if (parent?.subject_id === void 0)
+        return { kind: "failed", message: "this process has no granted subject" };
+      const request_id = randomUUID2();
+      const requested = await client.restart({ request_id, parent: parent.registration_id, subject_id: subject, ...program });
+      if (!requested.ok) return launchFailure(requested, request_id);
+      const bound = await waitForChild(client, requested.value.launch_request_id, {
+        pollMs: options?.pollMs ?? 250,
+        ...options?.signal !== void 0 ? { signal: options.signal } : {}
       });
+      if (bound.kind !== "bound") return bound;
+      return { kind: "ready", value: { request_id: requested.value.launch_request_id, subject_id: bound.subject_id, pane_id: bound.pane_id } };
     },
-    async inspect(subject, session_id) {
-      const target = await resolveAndFollow(subject);
-      if (target?.child.pane_id === void 0)
-        throw new Error("Inspection target is not a bound child with a pane");
-      return inspectRadarChild(client, {
-        agentId: target.registration_id,
-        paneId: target.child.pane_id,
-        ...session_id !== void 0 ? { session: session_id } : {}
-      });
+    assignment: (subject, owner) => publication.assignment(subject, owner),
+    retire: (subject) => publication.retireAssignment(subject),
+    async observe(subject) {
+      const read = await client.childGet(subject);
+      if (!read.ok) return { kind: "unknown", diagnostic: `${read.code}: ${read.message}` };
+      if (read.value.state === "live") return { kind: "live", subject: read.value };
+      if (read.value.state === "detached") return { kind: "gone", subject: read.value };
+      return { kind: "unknown", diagnostic: `child attachment is ${read.value.state}` };
+    },
+    async inspect(subject) {
+      const read = await client.childInspect(subject);
+      if (!read.ok) throw new Error(`Child inspection unavailable (${read.code}: ${read.message})`);
+      return read.value;
     }
   };
 }
@@ -1964,7 +1664,7 @@ __export(radar_publication_exports, {
   radarProcessSlot: () => radarProcessSlot,
   readProcessBirth: () => readProcessBirth
 });
-import { createHash, randomUUID as randomUUID2 } from "node:crypto";
+import { createHash, randomUUID as randomUUID3 } from "node:crypto";
 import {
   closeSync,
   constants,
@@ -2094,7 +1794,7 @@ function createPublicationStore(root) {
       ensureDirectory(directory);
       const temporary = join2(
         directory,
-        `.${name.slice(name.lastIndexOf("/") + 1)}.${randomUUID2()}.tmp`
+        `.${name.slice(name.lastIndexOf("/") + 1)}.${randomUUID3()}.tmp`
       );
       const bytes = Buffer.from(JSON.stringify(value), "utf8");
       if (bytes.length > MAX_RECORD_BYTES)
@@ -2150,7 +1850,7 @@ function radarProcessSlot() {
   return host[PROCESS_SLOT];
 }
 function radarProcessIncarnation(slot = radarProcessSlot()) {
-  return slot.incarnation ??= randomUUID2();
+  return slot.incarnation ??= randomUUID3();
 }
 function radarBindingKey(run, owner, label) {
   return createHash("sha256").update(`${run}\0${owner}\0${label}`).digest("hex").slice(0, 32);
@@ -2310,15 +2010,18 @@ function createChannelWriter(input) {
   function blank(agentId) {
     return {
       version: RADAR_PUBLICATION_VERSION,
-      registration_id: agentId,
+      target_id: agentId,
       channel,
       publisher,
       sequence: 0
     };
   }
+  function addressed(target) {
+    return channel === "assignment" ? { subject_id: target } : { registration_id: target };
+  }
   function loadRecord() {
     const value = store.read(recordName);
-    const agentId = textAt(value, "registration_id");
+    const agentId = textAt(value, "target_id");
     const storedPublisher = recordAt2(value, "publisher");
     if (numberAt2(value, "version") !== RADAR_PUBLICATION_VERSION || agentId === void 0 || !isUuid(agentId) || textAt(value, "channel") !== channel || textAt(storedPublisher, "source") !== publisher.source || textAt(storedPublisher, "incarnation") !== publisher.incarnation || textAt(storedPublisher, "reporting_owner") !== publisher.reporting_owner)
       return blank("");
@@ -2333,7 +2036,7 @@ function createChannelWriter(input) {
     const sentAt = numberAt2(acceptedValue, "sent_at");
     return {
       version: RADAR_PUBLICATION_VERSION,
-      registration_id: agentId,
+      target_id: agentId,
       channel,
       publisher,
       ...handle !== void 0 && generation !== void 0 ? { writer: { handle, generation } } : {},
@@ -2374,15 +2077,11 @@ function createChannelWriter(input) {
     if (record.writer !== void 0) return true;
     const agentId = await input.subject(recovering);
     if (agentId === void 0) return false;
-    if (record.registration_id !== agentId) {
+    if (record.target_id !== agentId) {
       record = blank(agentId);
       save();
     }
-    const answer = await client.acquire({
-      registration_id: agentId,
-      channel,
-      publisher
-    });
+    const answer = await client.acquire({ ...addressed(agentId), channel, publisher });
     if (answer.ok === false) {
       if (answer.code === "not_found") {
         recovering = true;
@@ -2409,7 +2108,7 @@ function createChannelWriter(input) {
     const writer = record.writer;
     if (writer === void 0) return;
     const answer = await client.publish({
-      registration_id: record.registration_id,
+      ...addressed(record.target_id),
       channel,
       writer_handle: writer.handle,
       sequence: pending.sequence,
@@ -2503,9 +2202,9 @@ function createChannelWriter(input) {
       stopPump();
       const writer = record.writer;
       if (writer === void 0) return;
-      const agentId = record.registration_id;
+      const agentId = record.target_id;
       try {
-        void client.retire({ registration_id: agentId, channel, writer_handle: writer.handle }).then((answer) => {
+        void client.retire({ ...addressed(agentId), channel, writer_handle: writer.handle }).then((answer) => {
           if (answer.ok === true) {
             try {
               record.retired_at = new Date(scheduler.now()).toISOString();
@@ -2595,6 +2294,7 @@ function createPresenceReporter(input) {
       }
       claim.registration_id = answer.value.registration_id;
       claim.subject_id = answer.value.standing === "granted" ? answer.value.subject_id ?? void 0 : void 0;
+      if (claim.subject_id !== void 0) input.granted?.(claim.subject_id);
       standing = answer.value.standing === "granted" ? { state: "managed", subject_id: claim.subject_id } : answer.value.standing === "duplicate" ? { state: "duplicate" } : answer.value.standing === "pending" ? { state: "pending" } : { state: "unmanaged" };
       diagnostic = answer.value.standing === "duplicate" ? DUPLICATE_SESSION_DIAGNOSTIC : void 0;
       save();
@@ -2618,7 +2318,7 @@ function createPresenceReporter(input) {
         releases.push({ registration_id: state.registration_id, claim_id: state.claim_id });
       }
       standing = void 0;
-      state = { version: 2, session, claim_id: randomUUID2(), releases };
+      state = { version: 2, session, claim_id: randomUUID3(), releases };
       save();
       stopped = false;
       void ensure();
@@ -2655,7 +2355,7 @@ var STORE_IDENTITY = /* @__PURE__ */ new WeakMap();
 function storeIdentity(store) {
   const known = STORE_IDENTITY.get(store);
   if (known !== void 0) return known;
-  const created = randomUUID2();
+  const created = randomUUID3();
   STORE_IDENTITY.set(store, created);
   return created;
 }
@@ -2776,7 +2476,7 @@ function createRadarPublicationInner(options) {
       agentId = registered;
       processRecord = { ...record, registration_id: agentId };
       store.write(registrationName, processRecord);
-      if (options.binding !== void 0) writeBinding(options.binding);
+      if (options.binding !== void 0) writeBinding(options.binding, grantedSubject());
       return agentId;
     })();
     try {
@@ -2785,11 +2485,16 @@ function createRadarPublicationInner(options) {
       subjectReady = void 0;
     }
   }
-  function writeBinding(binding) {
+  function grantedSubject() {
+    const standing = presence.management();
+    return standing?.state === "managed" ? standing.subject_id : void 0;
+  }
+  function writeBinding(binding, subjectId) {
     if (agentId === void 0) return;
     store.write(`bindings/${binding.key}.json`, {
       version: RADAR_PUBLICATION_VERSION,
       registration_id: agentId,
+      ...subjectId !== void 0 ? { subject_id: subjectId } : {},
       incarnation,
       run: binding.run,
       owner: binding.owner,
@@ -2829,6 +2534,9 @@ function createRadarPublicationInner(options) {
         ...launchRegistrationId ? { registration_id: launchRegistrationId } : {}
       };
     },
+    granted: (subjectId) => {
+      if (options.binding !== void 0) writeBinding(options.binding, subjectId);
+    },
     heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS
   });
   const facts = createChannelWriter({
@@ -2860,8 +2568,7 @@ function createRadarPublicationInner(options) {
           channel: "assignment",
           publisher: publisher("herdsman-owner", reportingOwner),
           codec: assignmentCodec,
-          // The owner publishes about a subject it did not register: the exact
-          // registration_id from the child's sidecar is the whole correlation.
+          // Radar owns this assignment across the child's process replacements.
           subject: async () => target,
           leaseMs: options.leaseMs ?? RADAR_LEASE_MS,
           heartbeatMs: options.heartbeatMs ?? RADAR_HEARTBEAT_MS
@@ -2882,16 +2589,18 @@ function createRadarPublicationInner(options) {
         return void 0;
       }
       const bound = textAt(value, "registration_id");
+      const subjectId = textAt(value, "subject_id");
       const boundIncarnation = textAt(value, "incarnation");
       const run = textAt(value, "run");
       const owner = textAt(value, "owner");
       const label = textAt(value, "label");
       const observedAt = textAt(value, "observed_at");
-      if (!isUuid(bound) || !isUuid(boundIncarnation) || run === void 0 || owner === void 0 || label === void 0 || observedAt === void 0)
+      if (!isUuid(bound) || subjectId !== void 0 && !isUuid(subjectId) || !isUuid(boundIncarnation) || run === void 0 || owner === void 0 || label === void 0 || observedAt === void 0)
         return void 0;
       return {
         version: RADAR_PUBLICATION_VERSION,
         registration_id: bound,
+        ...subjectId !== void 0 ? { subject_id: subjectId } : {},
         incarnation: boundIncarnation,
         run,
         owner,
@@ -3182,6 +2891,126 @@ function createRadarExecutionAdapter(pi, options) {
   };
 }
 
+// extension/radar-inspection.ts
+var radar_inspection_exports = {};
+
+// extension/radar-location.ts
+var radar_location_exports = {};
+__export(radar_location_exports, {
+  radarLocalPane: () => radarLocalPane,
+  radarPaneHandle: () => radarPaneHandle,
+  resolveRadarProcessLocation: () => resolveRadarProcessLocation,
+  tmuxServerName: () => tmuxServerName
+});
+import { basename } from "node:path";
+function radarLocalPane(env) {
+  const pane = env.TMUX_PANE?.trim();
+  return pane && /^%\d+$/.test(pane) ? pane : void 0;
+}
+function radarPaneHandle(qualified) {
+  return qualified.slice(qualified.lastIndexOf(":") + 1);
+}
+function tmuxServerName(env) {
+  const socket = env.TMUX?.trim().split(",")[0];
+  return socket ? basename(socket) || void 0 : void 0;
+}
+function qualifiedOwnPane(env, backend, instance) {
+  if (backend !== "tmux")
+    return {
+      absent: `the daemon serves the ${backend} backend, and Herdsman drives only tmux`
+    };
+  if (instance === void 0 || instance === "")
+    return {
+      pending: "the daemon did not name the tmux server it addresses"
+    };
+  const server = tmuxServerName(env);
+  if (server === void 0)
+    return {
+      absent: "this process's own tmux client names no server, so it is not in the pane it would publish"
+    };
+  if (server !== instance)
+    return {
+      absent: `this process is attached to tmux server ${server}, not to ${instance}`
+    };
+  const pane = radarLocalPane(env);
+  if (pane === void 0)
+    return {
+      absent: "this process's own environment names no tmux pane of that server"
+    };
+  return { pane: `tmux:${instance}:${pane}` };
+}
+function observedContainment(inventory, paneId) {
+  const rows = inventory.panes.filter((pane) => pane.pane_id === paneId);
+  if (rows.length === 0) return void 0;
+  if (rows.length > 1) return { ambiguous: `topology reports pane ${paneId} twice` };
+  const row = rows[0];
+  const tab = inventory.tabs.find((candidate) => candidate.tab_id === row.tab_id);
+  if (tab !== void 0 && tab.workspace_id !== row.workspace_id)
+    return {
+      ambiguous: `pane ${paneId} is reported in ${row.workspace_id}, but its tab belongs to ${tab.workspace_id}`
+    };
+  return { pane: row };
+}
+async function resolveRadarProcessLocation(client, env = process.env) {
+  let ready;
+  try {
+    ready = await client.ping();
+  } catch {
+    return { state: "pending", reason: "the daemon did not answer this process" };
+  }
+  if (ready.ok === false)
+    return {
+      state: "pending",
+      reason: `the daemon did not answer this process (${ready.code})`
+    };
+  const backend = ready.value.backend;
+  if (backend === void 0 || backend === "none")
+    return { state: "absent", reason: "the daemon serves no physical backend" };
+  const instance = ready.value.instance ?? void 0;
+  const own = qualifiedOwnPane(env, backend, instance);
+  if ("absent" in own) return { state: "absent", reason: own.absent };
+  if ("pending" in own) return { state: "pending", reason: own.pending };
+  const paneId = own.pane;
+  if (paneId === env.PI_HERDSMAN_PARENT_PANE_ID?.trim())
+    return {
+      state: "absent",
+      reason: "this process is in the pane its launch was created beside, not in a pane of its own"
+    };
+  let inventory;
+  try {
+    inventory = await client.observe();
+  } catch {
+    return {
+      state: "pending",
+      reason: "the daemon's topology could not be read for this process's pane"
+    };
+  }
+  if (inventory.ok === false)
+    return {
+      state: "pending",
+      reason: `the daemon's topology could not be read (${inventory.code})`
+    };
+  const containment = observedContainment(inventory.value, paneId);
+  if (containment === void 0)
+    return {
+      state: "pending",
+      reason: `the daemon's topology does not report pane ${paneId} yet`
+    };
+  if ("ambiguous" in containment)
+    return { state: "pending", reason: containment.ambiguous };
+  const row = containment.pane;
+  return {
+    state: "resolved",
+    location: {
+      backend,
+      ...instance !== void 0 ? { instance } : {},
+      workspace: row.workspace_id,
+      tab: row.tab_id,
+      pane: paneId
+    }
+  };
+}
+
 // extension/radar-runtime.ts
 var radar_runtime_exports = {};
 __export(radar_runtime_exports, {
@@ -3192,7 +3021,7 @@ __export(radar_runtime_exports, {
   requestRadarRuntime: () => requestRadarRuntime
 });
 var RADAR_RUNTIME_REQUEST = "pi-radar/runtime-request";
-var RADAR_RUNTIME_VERSION = 3;
+var RADAR_RUNTIME_VERSION = 5;
 function lazyRadarRuntime(start) {
   let pending;
   return {