toolroll 0.9.52 → 0.9.54

package/dist/held.d.ts

@@ -1,150 +0,0 @@
-/**
- * The HeldSessionCoordinator (Parity II Phase 2, spec v2 S0 as amended
- * through v6): the ONE owner of held attended sessions in an `up` process.
- *
- * Ownership transfer is the whole design: build() reaches its spawn point,
- * hands this coordinator the captured settlement record and returns `held`
- * WITHOUT settling anything — the watch loop keeps dispatching, and the
- * session's lease heartbeats, exact timers, turn ledger, and eventual
- * settlement all live here. A held run completes through the SAME
- * settleProviderOutcome → disposeBuildOutcome pair every other road uses,
- * or it is fenced to `interrupted` — never a third way.
- *
- * Phase 2D scope note, stated: this coordinator runs the attended
- * authorization road end-to-end — final proof, custody, the brief as turn
- * one, per-turn acceptance and marginal-delta settlement, expiry/lapse/
- * turn-timeout/lease fences, crash custody — and ends the hold at the
- * agent's first settled turn (terminal handoff, park, or silence, each
- * classified by the shared settlement). The multi-turn conversation loop
- * (operator turn box, answer injection, held repair) arrives with its
- * console surfaces in the next slice; nothing here forecloses it.
- */
-import { type CapturedBuild } from "./builder.js";
-import { type DisposeContext, type Disposition } from "./dispose.js";
-import { startClaudeHeldSession } from "./exec.js";
-import type { AttendedAuthorization, Store } from "./store.js";
-export type HeldLaunchArgs = {
-    store: Store;
-    captured: CapturedBuild;
-    authorization: AttendedAuthorization;
-    runId: number;
-    leaseId: string;
-    runner: string;
-    runnerToken?: string;
-    upIncarnation: string;
-    /** The composed brief — injected as turn one, source 'brief'. */
-    brief: string;
-    cwd: string;
-    /** A SHORT directory for control sockets (sun_path is unforgiving). */
-    socketDir: string;
-    releaseWorktree: (path: string) => Promise<unknown>;
-    liveLog: {
-        observe(event: Record<string, unknown>): void;
-        close(): void;
-    } | null;
-    omitEnv: readonly string[];
-    /** Fields the disposition service needs that the capture does not carry.
-     * `policy` distinguishes the continuation road (taskless dispositions,
-     * v4 Q7); absent = the ordinary tick policy. */
-    dispose: Pick<DisposeContext, "repo" | "origin" | "provider" | "model"> & {
-        policy?: DisposeContext["policy"];
-    };
-    clock: () => Date;
-    /** Test seams. */
-    starter?: typeof startClaudeHeldSession;
-    graceMs?: number;
-    onDisposed?: (disposition: Disposition | {
-        kind: "interrupted";
-        reason: string;
-    }) => void;
-    /** v28: enforced INSIDE the final custody transaction — two watch
-     * loops racing a cap of one cannot both insert. */
-    maxHeldSessions?: number;
-};
-export declare class HeldSessionCoordinator {
-    private readonly sessions;
-    count(): number;
-    /**
-     * The final proof, custody intent, brief recording, spawn, and timer
-     * arming — one road, refusals typed. Returns once the session is HELD
-     * (or refused); never awaits the hold itself.
-     */
-    launch(args: HeldLaunchArgs): Promise<{
-        ok: true;
-    } | {
-        ok: false;
-        reason: string;
-        message: string;
-    }>;
-    /** Shutdown: fence every controller under ONE absolute deadline (v2 S0f
-     * + parallel-sessions round 1, finding 7): the deadline timer is cleared
-     * when the fences win so it cannot hold the process open, and the runs
-     * that did NOT settle in time are RETURNED for the caller to page —
-     * silence here contradicted up's "settled or paged" promise. */
-    close(): Promise<number[]>;
-    /**
-     * The exact-run stop (v52): fence ONE held session now, through the
-     * supervisor's own handle — EOF → grace → kill, conservative settlement,
-     * the worktree preserved, the stop settled as `held` by the run's ending.
-     * The console calls this after the durable request; the lapse interval
-     * takes the same road for a stop filed by another process. Idempotent:
-     * a session already fencing or gone settles nothing twice.
-     */
-    stop(runId: number): Promise<void>;
-    /** The beat endpoint, answers, and revocation poke this directly (v2 S1d). */
-    poke(runId: number): void;
-    /**
-     * The operator's own turn (v2 S1g, ruling 12-as-accepted): session-grade
-     * speech, recorded through the SAME gated transaction every injection
-     * takes — cap, single-flight, budget, open-decision, lease — so every
-     * refusal is typed and atomic.
-     */
-    injectOperatorTurn(runId: number, author: string, text: string): {
-        ok: true;
-    } | {
-        ok: false;
-        reason: string;
-    };
-    private injectTurn;
-    private injectPendingAnswers;
-    private launches;
-    private makeController;
-    private armTurnTimer;
-    private onTurnInit;
-    private onTurnResult;
-    /**
-     * A park inside a held session (v2 S1f + round-6 finding 3): payload
-     * preserved as evidence and unlinked exactly like the ordinary road,
-     * the decision recorded WITHOUT ending anything, causally linked to the
-     * turn that produced it. A malformed payload takes the held repair road
-     * — a machine-authored ledger turn in the SAME session, correlated to
-     * the producing turn (a malformed mailbox has no decision id), bounded;
-     * exhaustion disposes through the shared malformed machinery.
-     */
-    private heldPark;
-    private onExit;
-    private conclude;
-    private fenceByRun;
-    /**
-     * The interruption road (v2 S2e): stop admission, EOF → grace → kill via
-     * the supervisor, conservative settlement, `interrupted`, worktree
-     * preserved, authorization closed with the reason. Idempotent.
-     */
-    private fence;
-    private clearClocks;
-    private drop;
-}
-/**
- * The DB-side orphan fence (v4 Q5 + v5 P3/P4 + v6 W6): sweep every open
- * custody row whose recorded lease is NO LONGER the task's current live
- * lease, seize it (CAS open→fencing + lease fence in one transaction),
- * order the kill through the supervisor's socket — the kernel-stable
- * road — and settle. A supervisor that cannot be reached keeps custody
- * and PAGES (never a guessed PID kill); a later sweep resumes from
- * wherever the CASes stand. Runs BEFORE generic recovery at every entry
- * point; recovery excludes fenced-open held rows.
- */
-export declare function sweepHeldOrphans(store: Store, fencer: string, now: () => Date): Promise<{
-    fenced: number;
-    paged: number;
-}>;