teamshare-bridge 0.22.9 → 0.22.11

package/dist/bridge/daemon-support.js

@@ -70,8 +70,11 @@ function writeAgentStopFile(agentId) {
         (0, node_fs_1.mkdirSync)(exports.STOP_DIR, { recursive: true });
         (0, node_fs_1.writeFileSync)((0, node_path_1.join)(exports.STOP_DIR, `${agentId}.stop`), new Date().toISOString(), 'utf8');
     }
-    catch {
-        /* best-effort */
+    catch (err) {
+        // NOT best-effort. This file is the only thing the build loop and the
+        // orchestrator worker read to know the human said stop - a failed write
+        // means the stop never reaches them and the loop keeps spawning tasks.
+        console.error(`[stop] could not write ${(0, node_path_1.join)(exports.STOP_DIR, `${agentId}.stop`)}: ${err.code ?? String(err)} - the build loop and worker will NOT see this stop`);
     }
 }
 /**
@@ -98,13 +101,30 @@ function clearAgentBuildState(agentId, api) {
                 remaining = Array.isArray(parsed.skipped) ? parsed.skipped.length : 0;
             }
             catch {
-                /* corrupt state file - just remove it */
+                // Corrupt/locked state file: the removal below still runs, and a file
+                // that cannot be parsed has no projectId to report progress for.
+                console.warn(`[stop] build state ${full} was unreadable - removing it`);
             }
+            // `force: true` suppresses ENOENT only - EPERM/EBUSY still throw, and
+            // they are routine here: this runs right after the session was
+            // force-killed (`taskkill /F`), so the child can still hold the file,
+            // and Defender pauses it routinely. Swallowing that and reporting
+            // `stopped` anyway is CORRECT about the outcome (the daemon wrote the
+            // stop file first, so the build IS stopping) but it must not be silent:
+            // a surviving state file is what `wake-handler` reads as
+            // `hasBuildState`, so the failure costs one wasted respawn on the next
+            // `question.answered`. Log it so that respawn has an explanation.
+            let removed = false;
             try {
                 (0, node_fs_1.rmSync)(full, { force: true });
+                removed = !(0, node_fs_1.existsSync)(full);
             }
-            catch {
-                /* best-effort */
+            catch (err) {
+                removed = false;
+                console.error(`[stop] could not clear build state ${full}: ${err.code ?? String(err)} - the next question.answered will re-read it (the stop file still makes that session exit immediately)`);
+            }
+            if (!removed && (0, node_fs_1.existsSync)(full)) {
+                console.error(`[stop] build state ${full} survived - see the message above`);
             }
             if (projectId) {
                 void api

package/dist/bridge/daemon-support.js.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-support.js","sourceRoot":"","sources":["../../src/bridge/daemon-support.ts"],"names":[],"mappings":";;;AAwCA,wDAIC;AAGD,0DAKC;AAED,wDAIC;AAGD,wDAEC;AAgBD,gDAWC;AAQD,oDAyCC;AA8BD,4CAEC;AAWD,kDAGC;AAED,gDAEC;AAaD,gDAGC;AAED,4CAMC;AAGD,kBAcC;AAED,oCAaC;AArPD;;;;;;GAMG;AACH,qCAQiB;AACjB,qCAAkC;AAClC,yCAAiC;AAEjC,oDAAoE;AACpE,uDAK2B;AAE3B;;;;GAIG;AACH,IAAI,mBAAmB,GAAyD,IAAI,CAAC;AACrF;;;;GAIG;AACH,IAAI,mBAAmB,GAA0C,IAAI,CAAC;AAEtE,SAAgB,sBAAsB,CACpC,EAA+C;IAE/C,mBAAmB,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,2EAA2E;AAC3E,SAAgB,uBAAuB,CACrC,OAAe,EACf,QAAgB;IAEhB,mBAAmB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,sBAAsB,CACpC,EAAgC;IAEhC,mBAAmB,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,sBAAsB,CAAC,OAAe;IACpD,OAAO,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;AACjD,CAAC;AAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAC7D;2EAC2E;AAC3E,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACpE,+EAA+E;AAClE,QAAA,eAAe,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC1D,QAAA,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAClD,QAAA,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEnE;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,gBAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,IAAA,uBAAa,EACX,IAAA,gBAAI,EAAC,gBAAQ,EAAE,GAAG,OAAO,OAAO,CAAC,EACjC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAAe,EAAE,GAAiB;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,oBAAU,EAAC,uBAAe,CAAC;YAAE,OAAO;QACzC,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,uBAAe,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC3E,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,uBAAe,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,SAA6B,CAAC;YAClC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAInD,CAAC;gBACF,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC7B,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;YACD,IAAI,CAAC;gBACH,IAAA,gBAAM,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,GAAG;qBACL,iBAAiB,CAAC,OAAO,EAAE;oBAC1B,SAAS;oBACT,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE,IAAI,GAAG,SAAS;oBACvB,IAAI;oBACJ,SAAS;iBACV,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AACpC;0EAC0E;AAC7D,QAAA,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC;AACxC,uEAAuE;AAC1D,QAAA,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;AACzD,iFAAiF;AACpE,QAAA,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1D;;;;;GAKG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC;AACtC,kFAAkF;AAClF,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB;;;GAGG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAa,GAAE,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,SAAgB,kBAAkB;IAChC,IAAA,kCAAgB,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB;IAChC,IAAA,iCAAe,GAAE,CAAC;IAClB,IAAA,iCAAe,GAAE,CAAC;AACpB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAGD,SAAgB,GAAG,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,IAAA,wBAAc,EAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,gEAAgE;IAChE,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAA,+BAAiB,EAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,YAAY,CAC1B,UAA6D;IAE7D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC;AAClF,CAAC"}
+{"version":3,"file":"daemon-support.js","sourceRoot":"","sources":["../../src/bridge/daemon-support.ts"],"names":[],"mappings":";;;AAwCA,wDAIC;AAGD,0DAKC;AAED,wDAIC;AAGD,wDAEC;AAgBD,gDAkBC;AAQD,oDA8DC;AA8BD,4CAEC;AAWD,kDAGC;AAED,gDAEC;AAaD,gDAGC;AAED,4CAMC;AAGD,kBAcC;AAED,oCAaC;AAjRD;;;;;;GAMG;AACH,qCAQiB;AACjB,qCAAkC;AAClC,yCAAiC;AAEjC,oDAAoE;AACpE,uDAK2B;AAE3B;;;;GAIG;AACH,IAAI,mBAAmB,GAAyD,IAAI,CAAC;AACrF;;;;GAIG;AACH,IAAI,mBAAmB,GAA0C,IAAI,CAAC;AAEtE,SAAgB,sBAAsB,CACpC,EAA+C;IAE/C,mBAAmB,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,2EAA2E;AAC3E,SAAgB,uBAAuB,CACrC,OAAe,EACf,QAAgB;IAEhB,mBAAmB,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAgB,sBAAsB,CACpC,EAAgC;IAEhC,mBAAmB,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,sBAAsB,CAAC,OAAe;IACpD,OAAO,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;AACjD,CAAC;AAED,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAC7D;2EAC2E;AAC3E,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACpE,+EAA+E;AAClE,QAAA,eAAe,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC1D,QAAA,QAAQ,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAClD,QAAA,UAAU,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEnE;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,gBAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,IAAA,uBAAa,EACX,IAAA,gBAAI,EAAC,gBAAQ,EAAE,GAAG,OAAO,OAAO,CAAC,EACjC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,CAAC,KAAK,CACX,0BAA0B,IAAA,gBAAI,EAAC,gBAAQ,EAAE,GAAG,OAAO,OAAO,CAAC,KACxD,GAA6B,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CACnD,qDAAqD,CACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,OAAe,EAAE,GAAiB;IACrE,IAAI,CAAC;QACH,IAAI,CAAC,IAAA,oBAAU,EAAC,uBAAe,CAAC;YAAE,OAAO;QACzC,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,uBAAe,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC3E,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,uBAAe,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,SAA6B,CAAC;YAClC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAInD,CAAC;gBACF,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC7B,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;gBACtE,iEAAiE;gBACjE,OAAO,CAAC,IAAI,CAAC,sBAAsB,IAAI,+BAA+B,CAAC,CAAC;YAC1E,CAAC;YACD,sEAAsE;YACtE,+DAA+D;YAC/D,sEAAsE;YACtE,kEAAkE;YAClE,sEAAsE;YACtE,wEAAwE;YACxE,yDAAyD;YACzD,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,IAAA,gBAAM,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9B,OAAO,GAAG,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;gBAChB,OAAO,CAAC,KAAK,CACX,sCAAsC,IAAI,KACvC,GAA6B,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CACnD,yGAAyG,CAC1G,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,mCAAmC,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,GAAG;qBACL,iBAAiB,CAAC,OAAO,EAAE;oBAC1B,SAAS;oBACT,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE,IAAI,GAAG,SAAS;oBACvB,IAAI;oBACJ,SAAS;iBACV,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,YAAY,GAAG,OAAO,CAAC;AACpC;0EAC0E;AAC7D,QAAA,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC;AACxC,uEAAuE;AAC1D,QAAA,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;AACzD,iFAAiF;AACpE,QAAA,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1D;;;;;GAKG;AACU,QAAA,eAAe,GAAG,MAAM,CAAC;AACtC,kFAAkF;AAClF,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB;;;GAGG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,YAAY,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAa,GAAE,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,SAAgB,kBAAkB;IAChC,IAAA,kCAAgB,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB;IAChC,IAAA,iCAAe,GAAE,CAAC;IAClB,IAAA,iCAAe,GAAE,CAAC;AACpB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAGD,SAAgB,GAAG,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,IAAA,wBAAc,EAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,gEAAgE;IAChE,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAA,+BAAiB,EAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,YAAY,CAC1B,UAA6D;IAE7D,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC;AAClF,CAAC"}

package/dist/bridge/daemon.js

@@ -15,6 +15,7 @@ exports.runDaemon = runDaemon;
  */
 const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
+const tail_file_1 = require("../lib/tail-file");
 const process_tree_1 = require("../lib/process-tree");
 const git_runner_1 = require("../lib/git/git-runner");
 const mirror_1 = require("../lib/workspace/mirror");
@@ -328,6 +329,14 @@ async function runDaemon(portOverride) {
     }
     /** How long to ask the hub to wait before re-offering a deferred wake. */
     const DEFER_RETRY_MS = 60_000;
+    /**
+     * Local attempts a single outbox-lane incarnation gets before its copy is
+     * dropped. Matches the hub `pending_wakes` bound so the two queues agree on
+     * what "giving up" means. At `LOCK_POLL_MS` that is ~2 minutes of local
+     * retries; after that the hub's `retryAfterMs` re-offers the row and the lane
+     * starts over with a fresh budget.
+     */
+    const OUTBOX_MAX_ATTEMPTS = 12;
     /**
      * Report every lane this agent still owes a terminal report for, and clear the
      * local debt (2026-10).
@@ -491,8 +500,15 @@ async function runDaemon(portOverride) {
     // foreground (only detached `start` used to leave a pid file behind).
     (0, daemon_support_1.writeDaemonPidFile)();
     // IMP-950: publish the probe port so shims + CLI tools can find the
-    // arbiter endpoints without scanning candidate ports.
-    (0, bus_1.writeRuntimeFile)({ port: boundPort, pid: process.pid, startedAt: new Date().toISOString() });
+    // arbiter endpoints without scanning candidate ports. The probe token rides
+    // along: every non-public endpoint now requires it (2026-10), and callers
+    // already read this file for the port.
+    (0, bus_1.writeRuntimeFile)({
+        port: boundPort,
+        pid: process.pid,
+        startedAt: new Date().toISOString(),
+        ...((0, local_server_1.getProbeToken)() ? { probeToken: (0, local_server_1.getProbeToken)() } : {}),
+    });
     if (config.agents.length === 0) {
         (0, daemon_support_1.log)('no agents configured - run: teamshare-agent connect --agent <id> --key ts_...');
     }
@@ -511,64 +527,87 @@ async function runDaemon(portOverride) {
         const startedAt = Date.now();
         const timer = setTimeout(() => {
             spawnWatchTimers.delete(agentId);
-            try {
-                if (sessionRelay.current(agentId))
-                    return; // session came up
-                const lock = (0, lock_1.readLock)(agentId);
-                if (lock?.pid) {
+            // ASYNC FORENSICS (2026-10).
+            //
+            // This body used to run synchronously on the DAEMON'S event loop:
+            // `readdirSync` over `~/.teamshare/sessions` (every session transcript
+            // ever written, plus `launch-*.vbs`), a `statSync` per entry, then
+            // `readFileSync` of the ENTIRE newest `spawn-*.log` and
+            // `content.split(/\r?\n/)` before taking the last 15 lines. That log is
+            // an unbounded append of the child's stdout+stderr, so on a machine that
+            // has run a long build it is hundreds of MB - a multi-second freeze in
+            // which the 2-minute heartbeat, the 10s outbox drain and the
+            // bridge-state push all miss their cadence.
+            void (async () => {
+                try {
+                    if (sessionRelay.current(agentId))
+                        return; // session came up
+                    const lock = (0, lock_1.readLock)(agentId);
+                    if (lock?.pid) {
+                        try {
+                            process.kill(lock.pid, 0);
+                            return; // a live session process holds the lock - assume running
+                        }
+                        catch {
+                            /* dead pid - fall through to forensics */
+                        }
+                    }
+                    // No session, no live lock: look for a capture file written by this
+                    // spawn (hidden-launch creates it only if the chain actually ran).
+                    let launched = false;
+                    let captureInfo = 'no capture file - the hidden launcher never ran (Windows Script Host/wscript.exe may be disabled or blocked by antivirus)';
+                    const dir = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'sessions');
+                    let names = [];
                     try {
-                        process.kill(lock.pid, 0);
-                        return; // a live session process holds the lock - assume running
+                        names = await node_fs_1.promises.readdir(dir);
                     }
                     catch {
-                        /* dead pid - fall through to forensics */
+                        names = []; // folder never created, or cleaned up
                     }
-                }
-                // No session, no live lock: look for a capture file written by this
-                // spawn (hidden-launch creates it only if the chain actually ran).
-                let launched = false;
-                let captureInfo = 'no capture file - the hidden launcher never ran (Windows Script Host/wscript.exe may be disabled or blocked by antivirus)';
-                const dir = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'sessions');
-                let newest = null;
-                for (const f of (0, node_fs_1.readdirSync)(dir)) {
-                    if (!f.startsWith('spawn-') || !f.endsWith('.log'))
-                        continue;
-                    const st = (0, node_fs_1.statSync)((0, node_path_1.join)(dir, f), { throwIfNoEntry: false });
-                    if (!st)
-                        continue;
-                    if (st.mtimeMs >= startedAt - 2_000 &&
-                        (!newest || st.mtimeMs > newest.mtime)) {
-                        newest = { file: f, mtime: st.mtimeMs };
+                    const stamped = await Promise.all(names
+                        .filter((f) => f.startsWith('spawn-') && f.endsWith('.log'))
+                        .map(async (f) => {
+                        try {
+                            const st = await node_fs_1.promises.stat((0, node_path_1.join)(dir, f));
+                            return { f, mtime: st.mtimeMs };
+                        }
+                        catch {
+                            return null;
+                        }
+                    }));
+                    let newest = null;
+                    for (const entry of stamped) {
+                        if (!entry)
+                            continue;
+                        if (entry.mtime >= startedAt - 2_000 && (!newest || entry.mtime > newest.mtime)) {
+                            newest = { file: entry.f, mtime: entry.mtime };
+                        }
+                    }
+                    if (newest) {
+                        launched = true;
+                        // Tail-read: bounded no matter how much the child printed.
+                        const tail = await (0, tail_file_1.readTailLines)((0, node_path_1.join)(dir, newest.file), 15);
+                        captureInfo = tail
+                            ? `capture ${newest.file} tail:\n${tail}`
+                            : `capture ${newest.file} exists but is empty - the CLI exited before logging anything (native-module load failure?)`;
                     }
+                    (0, daemon_support_1.log)(`agent ${agentId}: spawn watch - no session started ${Math.round((Date.now() - startedAt) / 1000)}s after ${wakeType} wake`);
+                    (0, diagnostics_1.reportDiagnosticSafe)({
+                        kind: 'spawn_failure',
+                        severity: 'error',
+                        agentId,
+                        message: `Session never started after a ${wakeType} wake (${launched ? 'CLI exited before session:start' : 'hidden launcher never ran'})`,
+                        errorCode: launched
+                            ? 'SESSION_PREMATURE_EXIT'
+                            : 'SESSION_NEVER_LAUNCHED',
+                        context: { wakeType, capture: captureInfo.slice(0, 4_000) },
+                        includeDoctor: true,
+                    });
                 }
-                if (newest) {
-                    launched = true;
-                    const content = (0, node_fs_1.readFileSync)((0, node_path_1.join)(dir, newest.file), 'utf8');
-                    const tail = content
-                        .split(/\r?\n/)
-                        .filter(Boolean)
-                        .slice(-15)
-                        .join('\n');
-                    captureInfo = tail
-                        ? `capture ${newest.file} tail:\n${tail}`
-                        : `capture ${newest.file} exists but is empty - the CLI exited before logging anything (native-module load failure?)`;
+                catch (err) {
+                    (0, daemon_support_1.log)(`agent ${agentId}: spawn watch failed: ${(0, config_1.msg)(err)}`);
                 }
-                (0, daemon_support_1.log)(`agent ${agentId}: spawn watch - no session started ${Math.round((Date.now() - startedAt) / 1000)}s after ${wakeType} wake`);
-                (0, diagnostics_1.reportDiagnosticSafe)({
-                    kind: 'spawn_failure',
-                    severity: 'error',
-                    agentId,
-                    message: `Session never started after a ${wakeType} wake (${launched ? 'CLI exited before session:start' : 'hidden launcher never ran'})`,
-                    errorCode: launched
-                        ? 'SESSION_PREMATURE_EXIT'
-                        : 'SESSION_NEVER_LAUNCHED',
-                    context: { wakeType, capture: captureInfo.slice(0, 4_000) },
-                    includeDoctor: true,
-                });
-            }
-            catch (err) {
-                (0, daemon_support_1.log)(`agent ${agentId}: spawn watch failed: ${(0, config_1.msg)(err)}`);
-            }
+            })();
         }, 20_000);
         timer.unref();
         spawnWatchTimers.set(agentId, timer);
@@ -777,6 +816,8 @@ async function runDaemon(portOverride) {
         const config = getConfig;
         const agentTimers = [];
         let timersCreated = false;
+        /** At most one pending staggered first-beat; see the `connect` handler. */
+        let firstBeatTimer = null;
         /** Consecutive 401 "Invalid API key" heartbeats before we stop retrying. */
         let authFailures = 0;
         const isAuthError = (err) => err instanceof api_1.ApiError
@@ -926,10 +967,23 @@ async function runDaemon(portOverride) {
             // is safe. Later beats ride the 2-min heartbeat + 5-min push cadence.
             const seq = (0, daemon_support_1.nextAgentLoopSeq)();
             const firstBeatMs = Math.round(daemon_support_1.HEARTBEAT_MS * (0.25 + 0.5 * ((seq % 6) / 6)));
-            agentTimers.push(setTimeout(() => {
+            // ONE pending first-beat at a time. This block runs on EVERY `connect`,
+            // and a flapping socket used to push another `setTimeout` each time: the
+            // array grew for the life of the loop AND every stale timer still fired
+            // its own heartbeat + pushState, so a reconnect storm turned into a burst
+            // of duplicate beats instead of one.
+            if (firstBeatTimer) {
+                clearTimeout(firstBeatTimer);
+                const staleIdx = agentTimers.indexOf(firstBeatTimer);
+                if (staleIdx >= 0)
+                    agentTimers.splice(staleIdx, 1);
+            }
+            firstBeatTimer = setTimeout(() => {
+                firstBeatTimer = null;
                 heartbeat();
                 pushState();
-            }, firstBeatMs));
+            }, firstBeatMs);
+            agentTimers.push(firstBeatTimer);
             // Only create persistent intervals on the first connect — reconnects
             // reuse the existing timers (they survive socket disconnects).
             if (!timersCreated) {
@@ -1170,7 +1224,34 @@ async function runDaemon(portOverride) {
                     orchestratorClient,
                 });
                 reportWakeOutcome(agent.agentId, socket, event, outcome);
-            })().catch((err) => (0, daemon_support_1.log)(`agent ${agent.agentId}: wake failed: ${(0, config_1.msg)(err)}`));
+            })().catch((err) => {
+                (0, daemon_support_1.log)(`agent ${agent.agentId}: wake failed: ${(0, config_1.msg)(err)}`);
+                // The receipt (`wake.received` / noteAck) was already emitted before
+                // `handleWake` ran, so without this the hub row sat `acknowledged`
+                // forever with no `wake.settled` and no `wake.defer` - the human saw
+                // "Wake received" and no work, with nothing in the run history to
+                // explain it. A deferred report is the negative ack that lets the hub's
+                // retry clock take over, and a diagnostic records WHY.
+                try {
+                    (0, diagnostics_1.reportDiagnosticSafe)({
+                        kind: 'wake_failure',
+                        severity: 'error',
+                        agentId: agent.agentId,
+                        errorCode: 'WAKE_HANDLER_THREW',
+                        message: `${String(event.type)}: ${(0, config_1.msg)(err)}`,
+                        includeDoctor: true,
+                    });
+                }
+                catch {
+                    /* reporting must never mask the wake failure */
+                }
+                try {
+                    reportWakeOutcome(agent.agentId, socket, event, 'deferred');
+                }
+                catch {
+                    /* socket already gone - the hub's reclaim sweep is the backstop */
+                }
+            });
         });
         sockets.push(socket);
         // 2026-09: restore this agent's queued wakes from disk instead of wiping
@@ -1372,6 +1453,9 @@ async function runDaemon(portOverride) {
                 const res = await fetch(`${apiBase}/agents/${agentId}/keys/rotate`, {
                     method: 'POST',
                     headers: { Authorization: `Bearer ${h.apiKey}` },
+                    // Node's fetch has NO default timeout, so one hung request stalled
+                    // this `for` loop and every agent queued behind it never rotated.
+                    signal: AbortSignal.timeout(30_000),
                 });
                 if (!res.ok)
                     continue;
@@ -1440,7 +1524,33 @@ async function runDaemon(portOverride) {
                         (0, daemon_support_1.log)(`agent ${agentId}: outbox drain paused after a lane took the lock`);
                         return;
                     }
-                    const outcome = await (0, wake_handler_1.handleWake)(api_1.TeamshareApi.forAgent(apiBase, agent), agentId, agent.apiKey, lane.event, getConfig(), { wakeQueue, settings, recentSpawns, orchestratorClient });
+                    let outcome;
+                    try {
+                        outcome = await (0, wake_handler_1.handleWake)(api_1.TeamshareApi.forAgent(apiBase, agent), agentId, agent.apiKey, lane.event, getConfig(), { wakeQueue, settings, recentSpawns, orchestratorClient });
+                    }
+                    catch (err) {
+                        // Per-lane, not per-tick: a throw anywhere in the loop used to be
+                        // caught only by the IIFE below, which logged a line and never
+                        // called `reportWakeOutcome` - so the row stayed `acknowledged` on
+                        // the hub AND every remaining lane for this agent was abandoned for
+                        // the tick. Convert it to the negative ack the rest of this body
+                        // already knows how to send.
+                        (0, daemon_support_1.log)(`agent ${agentId}: outbox lane ${lane.lane} threw: ${(0, config_1.msg)(err)}`);
+                        try {
+                            (0, diagnostics_1.reportDiagnosticSafe)({
+                                kind: 'wake_failure',
+                                severity: 'error',
+                                agentId,
+                                errorCode: 'WAKE_HANDLER_THREW',
+                                message: `${String(lane.event.type)}: ${(0, config_1.msg)(err)}`,
+                                includeDoctor: true,
+                            });
+                        }
+                        catch {
+                            /* reporting must never mask the failure */
+                        }
+                        outcome = 'deferred';
+                    }
                     // Anything that is NOT finished with the lane stays queued. That covers
                     // 'queued', 'deferred' and 'blocked' - the three outcomes that mean
                     // "ask again later" - plus a thrown error handled below.
@@ -1478,15 +1588,50 @@ async function runDaemon(portOverride) {
                         // report for a deliberately failed 'blocked') is what stops the row
                         // sitting `acknowledged` on the hub while the outbox holds it.
                         reportWakeOutcome(agentId, h.socket, lane.event, outcome);
+                        // Bound the LOCAL retry (2026-10).
+                        //
+                        // `noteAttempt` has been exported since the outbox was written and
+                        // had ZERO call sites, so `OutboxLane.attempts` was persisted on
+                        // every enqueue and never incremented: a lane that could not make
+                        // progress was retried every LOCK_POLL_MS forever, each tick costing
+                        // an authenticated `GET /agents/:id/settings` on top of the full
+                        // `handleWake` pass. This is the same "wired but zero readers"
+                        // failure `AGENTS.md` records for Jira's `markPulled`/`touchSynced`.
+                        //
+                        // Dropping the local copy is safe BECAUSE the report above sent
+                        // `retryAfterMs`: the hub re-offers the row in 60 s, which enqueues
+                        // a FRESH lane with `attempts` back at 0. So the hub - not this file
+                        // - is the retry clock, and the cap only stops one incarnation of a
+                        // stuck lane from spinning.
+                        const kept = (0, wake_outbox_1.noteAttempt)(agentId, lane.lane, OUTBOX_MAX_ATTEMPTS);
+                        if (!kept) {
+                            (0, daemon_support_1.log)(`agent ${agentId}: outbox lane ${lane.lane} gave up after ` +
+                                `${OUTBOX_MAX_ATTEMPTS} attempts (${outcome}) - local copy dropped; ` +
+                                `the hub's PendingWake row (retryAfterMs) is the recovery path`);
+                        }
                     }
                 }
             })().catch((err) => {
+                // Only `freshSettings` (above the loop) can reject now - each lane's
+                // `handleWake` is caught per-lane. Without a report here the settings
+                // fetch failing left the row `acknowledged` indefinitely.
                 (0, daemon_support_1.log)(`agent ${agentId}: outbox drain failed: ${(0, config_1.msg)(err)}`);
+                try {
+                    (0, diagnostics_1.reportDiagnosticSafe)({
+                        kind: 'wake_failure',
+                        severity: 'error',
+                        agentId,
+                        errorCode: 'OUTBOX_DRAIN_THREW',
+                        message: (0, config_1.msg)(err),
+                    });
+                }
+                catch {
+                    /* best-effort */
+                }
             });
         }
     }, lock_1.LOCK_POLL_MS);
     timers.push(flushInterval);
-    timers.push(flushInterval);
     // ── Silent auto-upgrade (2026-09) ──────────────────────────────────────
     // The daemon installs the newest published `teamshare-bridge` on its own
     // once THIS machine is not EXECUTING anything. Opt out with
@@ -1566,6 +1711,12 @@ async function runDaemon(portOverride) {
         catch { /* best-effort */ }
         for (const t of timers)
             clearInterval(t);
+        // Pending spawn-watchdog timers. They are `.unref()`'d so they never hold
+        // the process open, but they are created outside `timers` (one per agent,
+        // rescheduled on every spawn) and so were never cleared here.
+        for (const t of spawnWatchTimers.values())
+            clearTimeout(t);
+        spawnWatchTimers.clear();
         // Graceful shutdown SETTLES what this boot owes (2026-10). Sockets are still
         // open here, so the reports land — and settling is honest on a clean stop,
         // unlike the crash path, which deliberately reports nothing so the hub can