wicked-crew 0.7.39 → 0.7.45

package/dist/api/seat-probe.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Seat credential PROBE (crew#630, crew#645): ask the seat's own CLI whether it can authenticate,
+ * under the seat's own configuration home, instead of inferring it from a file.
+ *
+ * # The defect
+ *
+ * `seat-signin.ts` reads presence: claude's `<worker home>/claude/.claude.json` with an
+ * `oauthAccount` reads signed in. Claude Code keeps the OAuth token itself in the OS keychain, under
+ * a service name keyed by a hash of `CLAUDE_CONFIG_DIR` — so a moved or renamed worker home keeps
+ * the file and loses the token, and an expired login keeps both. The roster said `signed_in`,
+ * launch trusted it, and every ballot / unit on the seat failed "Not logged in" (crew#630) or "OAuth
+ * session expired" (crew#645) after the run was already planned.
+ *
+ * # The probe
+ *
+ * The CLI's own auth-status command, where one exists, run with the SAME configuration-home variable
+ * the engine sets on that seat's workers (`wicked_apps_core::spawn::seat_config_for`):
+ *
+ *   claude — `claude auth status --json` with `CLAUDE_CONFIG_DIR=<root>/claude` → `loggedIn`.
+ *            It resolves the keychain entry for THAT config dir, so the moved-home case reads false.
+ *   codex  — `codex login status` with `CODEX_HOME=<root>/codex` → exit 0 = signed in.
+ *
+ * # A status command is not a session (crew#645, reopened)
+ *
+ * Both status commands read what is STORED; neither asks the provider. An OAuth login whose access
+ * token expired and whose refresh is refused ("OAuth session expired and could not be refreshed")
+ * still reads `loggedIn: true`. So when the status command says signed in, the probe makes ONE
+ * live, authenticated round-trip on the seat's cheapest path ({@link verifyCommand}), which is the
+ * only thing that observes a refused refresh:
+ *
+ *  - exit 0 → signed in, `check: 'live'`;
+ *  - its output says the seat has no credential (the same {@link isAuthRefusal} words ballots are
+ *    read with) → signed OUT, with the seat's own words as the evidence;
+ *  - anything else (timeout, quota, network) cannot tell → the status answer stands as
+ *    `check: 'status'`, and the roster says the login was not verified live.
+ *
+ * Seats with no status command (pi, copilot, opencode, agy) are not probed: their reading stays the
+ * credential-file heuristic plus the seat's own refusal (`seat-health.ts`), and the roster says the
+ * login is unverified (`seat-standing.ts`).
+ *
+ * # Cost
+ *
+ * The roster route is read on every studio poll, so the probe NEVER runs on the request path:
+ * `read()` answers from a cache synchronously and, when the entry is older than its TTL, starts
+ * one refresh in the background (deduplicated per seat, one probe process at a time host-wide
+ * for this daemon). A signed-in answer is kept for 5 minutes (so a live check costs at most one
+ * one-word request per seat per 5 minutes); a signed-out or unknown one for 30 s, so a seat signed
+ * in from the System page turns green on the next poll or two. The cache is keyed by (seat, worker
+ * home): changing `worker_config_root` discards every answer at once. A launch awaits a missing or
+ * stale answer, bounded, before it routes ({@link SeatProbe.ensureFresh}).
+ */
+/** A probe process's outcome, as the runner reports it. `error` is set when it never ran to exit
+ *  (not installed, timed out, killed). */
+export interface ProbeOutput {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    error?: string;
+}
+/** Runs one probe command — injectable so tests never spawn a CLI. */
+export type ProbeRunner = (cmd: string, args: string[], env: NodeJS.ProcessEnv, timeoutMs: number) => Promise<ProbeOutput>;
+/** How far a probe's answer was checked: `live` — an authenticated request answered (or was
+ *  refused for want of a credential); `status` — only the CLI's status command answered. */
+export type ProbeCheck = 'live' | 'status';
+/** One seat's probe answer. */
+export interface SeatProbeReading {
+    /** `true` the seat authenticates, `false` it does not, `null` the probe could not tell. */
+    signedIn: boolean | null;
+    /** How far the answer was checked (see {@link ProbeCheck}). */
+    check: ProbeCheck;
+    /** ISO-8601 of the probe. */
+    probedAt: string;
+    /** A bounded excerpt of what the CLI said (its own words for a `false`). */
+    detail: string;
+}
+/** How long an answer is trusted before a background refresh (the stale answer is served meanwhile). */
+export declare const PROBE_TTL_SIGNED_IN_MS: number;
+export declare const PROBE_TTL_OTHER_MS: number;
+/** A status command is local and fast (~1 s); past this it is not answering. */
+export declare const PROBE_TIMEOUT_MS: number;
+/** The live check is one model request (a CLI start plus one short reply). */
+export declare const VERIFY_TIMEOUT_MS: number;
+/** How long a launch waits for missing or stale answers before it routes on what it has. */
+export declare const LAUNCH_PROBE_WAIT_MS: number;
+type Command = {
+    cmd: string;
+    args: string[];
+    env: NodeJS.ProcessEnv;
+};
+/** The probe command for a seat, or `null` when the seat's CLI has no auth-status command. */
+export declare function probeCommand(seatKey: string, workerRoot: string | undefined, env?: NodeJS.ProcessEnv, home?: string): Command | null;
+/** The live check for a seat whose status command said signed in (see the module doc). */
+export declare function verifyCommand(seatKey: string, workerRoot: string | undefined, env?: NodeJS.ProcessEnv, home?: string): Command | null;
+/** Read a probe's outcome: `null` when it did not run to an answer (missing CLI, timeout). */
+export declare function classifyProbe(seatKey: string, out: ProbeOutput): boolean | null;
+/** Read the live check: `true` it answered, `false` it was refused for want of a credential,
+ *  `null` it could not tell (timeout, quota, network, an unknown failure). */
+export declare function classifyVerify(out: ProbeOutput): boolean | null;
+/** The production runner: `execFile` with a timeout, never a shell, stdin closed (claude `-p`
+ *  otherwise waits for piped input). Runs in the OS temp dir, so no project context is loaded. */
+export declare const execProbe: ProbeRunner;
+export interface SeatProbeOptions {
+    run?: ProbeRunner;
+    now?: () => number;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+}
+/** The per-daemon probe cache (see the module doc). */
+export declare class SeatProbe {
+    private readonly cache;
+    private readonly inflight;
+    /** One probe process at a time: each refresh chains onto this. */
+    private queue;
+    private readonly run;
+    private readonly now;
+    private readonly env;
+    private readonly home;
+    constructor(opts?: SeatProbeOptions);
+    /** Whether this seat has a probe at all. */
+    probes(seatKey: string): boolean;
+    /**
+     * The cached answer for `seatKey` under `workerRoot` (`undefined` before the first probe
+     * finishes, or for a seat with no probe). Never waits: a missing or stale answer starts one
+     * background refresh.
+     */
+    read(seatKey: string, workerRoot: string | undefined): SeatProbeReading | undefined;
+    /**
+     * Before a launch routes: probe every probed seat whose answer is missing or stale and wait for
+     * the answers, at most `waitMs` (a probe that is slower keeps running in the background, and the
+     * seat reads as it would have without the wait).
+     */
+    ensureFresh(seatKeys: string[], workerRoot: string | undefined, waitMs?: number): Promise<void>;
+    /** Probe now (deduplicated per seat and worker home); resolves to the fresh answer. */
+    refresh(seatKey: string, workerRoot: string | undefined): Promise<SeatProbeReading | undefined>;
+    /** The status command, then — when it says signed in — the live check. */
+    private probeOnce;
+    private reading;
+    private stale;
+}
+export {};
+//# sourceMappingURL=seat-probe.d.ts.map

package/dist/api/seat-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-probe.d.ts","sourceRoot":"","sources":["../../src/api/seat-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AASH;0CAC0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,sEAAsE;AACtE,MAAM,MAAM,WAAW,GAAG,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B;4FAC4F;AAC5F,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3C,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB;IAC/B,2FAA2F;IAC3F,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,KAAK,EAAE,UAAU,CAAC;IAClB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wGAAwG;AACxG,eAAO,MAAM,sBAAsB,QAAgB,CAAC;AACpD,eAAO,MAAM,kBAAkB,QAAY,CAAC;AAC5C,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,QAAY,CAAC;AAC1C,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAC3C,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAU9C,KAAK,OAAO,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,CAAC;AAYvE,8FAA8F;AAC9F,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,GAAE,MAAkB,GACvB,OAAO,GAAG,IAAI,CAMhB;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,GAAE,MAAkB,GACvB,OAAO,GAAG,IAAI,CAUhB;AAED,8FAA8F;AAC9F,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,GAAG,IAAI,CAY/E;AAED;8EAC8E;AAC9E,wBAAgB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,GAAG,IAAI,CAG/D;AAED;kGACkG;AAClG,eAAO,MAAM,SAAS,EAAE,WAmBpB,CAAC;AAEL,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uDAAuD;AACvD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0D;IAChF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4D;IACrF,kEAAkE;IAClE,OAAO,CAAC,KAAK,CAAuC;IACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgC;IACpD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;gBAE9B,IAAI,GAAE,gBAAqB;IAOvC,4CAA4C;IAC5C,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIhC;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS;IAQnF;;;;OAIG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,GAAE,MAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB3H,uFAAuF;IACvF,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAqB/F,0EAA0E;YAC5D,SAAS;IAavB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,KAAK;CAId"}

package/dist/api/seat-probe.js

@@ -0,0 +1,257 @@
+/**
+ * Seat credential PROBE (crew#630, crew#645): ask the seat's own CLI whether it can authenticate,
+ * under the seat's own configuration home, instead of inferring it from a file.
+ *
+ * # The defect
+ *
+ * `seat-signin.ts` reads presence: claude's `<worker home>/claude/.claude.json` with an
+ * `oauthAccount` reads signed in. Claude Code keeps the OAuth token itself in the OS keychain, under
+ * a service name keyed by a hash of `CLAUDE_CONFIG_DIR` — so a moved or renamed worker home keeps
+ * the file and loses the token, and an expired login keeps both. The roster said `signed_in`,
+ * launch trusted it, and every ballot / unit on the seat failed "Not logged in" (crew#630) or "OAuth
+ * session expired" (crew#645) after the run was already planned.
+ *
+ * # The probe
+ *
+ * The CLI's own auth-status command, where one exists, run with the SAME configuration-home variable
+ * the engine sets on that seat's workers (`wicked_apps_core::spawn::seat_config_for`):
+ *
+ *   claude — `claude auth status --json` with `CLAUDE_CONFIG_DIR=<root>/claude` → `loggedIn`.
+ *            It resolves the keychain entry for THAT config dir, so the moved-home case reads false.
+ *   codex  — `codex login status` with `CODEX_HOME=<root>/codex` → exit 0 = signed in.
+ *
+ * # A status command is not a session (crew#645, reopened)
+ *
+ * Both status commands read what is STORED; neither asks the provider. An OAuth login whose access
+ * token expired and whose refresh is refused ("OAuth session expired and could not be refreshed")
+ * still reads `loggedIn: true`. So when the status command says signed in, the probe makes ONE
+ * live, authenticated round-trip on the seat's cheapest path ({@link verifyCommand}), which is the
+ * only thing that observes a refused refresh:
+ *
+ *  - exit 0 → signed in, `check: 'live'`;
+ *  - its output says the seat has no credential (the same {@link isAuthRefusal} words ballots are
+ *    read with) → signed OUT, with the seat's own words as the evidence;
+ *  - anything else (timeout, quota, network) cannot tell → the status answer stands as
+ *    `check: 'status'`, and the roster says the login was not verified live.
+ *
+ * Seats with no status command (pi, copilot, opencode, agy) are not probed: their reading stays the
+ * credential-file heuristic plus the seat's own refusal (`seat-health.ts`), and the roster says the
+ * login is unverified (`seat-standing.ts`).
+ *
+ * # Cost
+ *
+ * The roster route is read on every studio poll, so the probe NEVER runs on the request path:
+ * `read()` answers from a cache synchronously and, when the entry is older than its TTL, starts
+ * one refresh in the background (deduplicated per seat, one probe process at a time host-wide
+ * for this daemon). A signed-in answer is kept for 5 minutes (so a live check costs at most one
+ * one-word request per seat per 5 minutes); a signed-out or unknown one for 30 s, so a seat signed
+ * in from the System page turns green on the next poll or two. The cache is keyed by (seat, worker
+ * home): changing `worker_config_root` discards every answer at once. A launch awaits a missing or
+ * stale answer, bounded, before it routes ({@link SeatProbe.ensureFresh}).
+ */
+import { execFile } from 'node:child_process';
+import { homedir, tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { childEnvWithBootEstateDb } from '../core/governance-store.js';
+import { isAuthRefusal } from './seat-health.js';
+/** How long an answer is trusted before a background refresh (the stale answer is served meanwhile). */
+export const PROBE_TTL_SIGNED_IN_MS = 5 * 60 * 1000;
+export const PROBE_TTL_OTHER_MS = 30 * 1000;
+/** A status command is local and fast (~1 s); past this it is not answering. */
+export const PROBE_TIMEOUT_MS = 15 * 1000;
+/** The live check is one model request (a CLI start plus one short reply). */
+export const VERIFY_TIMEOUT_MS = 60 * 1000;
+/** How long a launch waits for missing or stale answers before it routes on what it has. */
+export const LAUNCH_PROBE_WAIT_MS = 20 * 1000;
+const DETAIL_MAX = 240;
+const VERIFY_PROMPT = 'Reply with the single word OK.';
+function excerpt(s) {
+    const flat = s.replace(/\s+/g, ' ').trim();
+    return flat.length <= DETAIL_MAX ? flat : `${flat.slice(0, DETAIL_MAX - 1)}…`;
+}
+/** The seat's configuration-home variable, as the engine sets it on the seat's workers. */
+function seatEnv(seatKey, workerRoot, env, home) {
+    const name = seatKey === 'claude' ? 'CLAUDE_CONFIG_DIR' : seatKey === 'codex' ? 'CODEX_HOME' : null;
+    if (name === null)
+        return null;
+    // The engine's one hatch: set, every seat runs on the operator's own CLI homes (no override).
+    if (env['WICKED_WORKER_INHERIT_OPERATOR_CONFIG'] !== undefined)
+        return { ...env };
+    const root = workerRoot !== undefined && workerRoot !== '' ? workerRoot : join(home, '.wicked-worker');
+    return { ...env, [name]: join(root, seatKey) };
+}
+/** The probe command for a seat, or `null` when the seat's CLI has no auth-status command. */
+export function probeCommand(seatKey, workerRoot, env = process.env, home = homedir()) {
+    const e = seatEnv(seatKey, workerRoot, env, home);
+    if (e === null)
+        return null;
+    return seatKey === 'claude'
+        ? { cmd: 'claude', args: ['auth', 'status', '--json'], env: e }
+        : { cmd: 'codex', args: ['login', 'status'], env: e };
+}
+/** The live check for a seat whose status command said signed in (see the module doc). */
+export function verifyCommand(seatKey, workerRoot, env = process.env, home = homedir()) {
+    const e = seatEnv(seatKey, workerRoot, env, home);
+    if (e === null)
+        return null;
+    return seatKey === 'claude'
+        ? {
+            cmd: 'claude',
+            args: ['-p', '--no-session-persistence', '--strict-mcp-config', '--tools', '', '--model', 'haiku', VERIFY_PROMPT],
+            env: e,
+        }
+        : { cmd: 'codex', args: ['exec', '--skip-git-repo-check', '--ephemeral', '--sandbox', 'read-only', VERIFY_PROMPT], env: e };
+}
+/** Read a probe's outcome: `null` when it did not run to an answer (missing CLI, timeout). */
+export function classifyProbe(seatKey, out) {
+    if (out.error !== undefined || out.code === null)
+        return null;
+    if (seatKey === 'claude') {
+        try {
+            const parsed = JSON.parse(out.stdout);
+            if (typeof parsed.loggedIn === 'boolean')
+                return parsed.loggedIn;
+        }
+        catch {
+            /* not JSON: fall through to the exit code */
+        }
+    }
+    if (out.code === 0)
+        return true;
+    return /not logged in|logged out|not authenticated/i.test(`${out.stdout}\n${out.stderr}`) ? false : null;
+}
+/** Read the live check: `true` it answered, `false` it was refused for want of a credential,
+ *  `null` it could not tell (timeout, quota, network, an unknown failure). */
+export function classifyVerify(out) {
+    if (out.error === undefined && out.code === 0)
+        return true;
+    return isAuthRefusal(`${out.stdout}\n${out.stderr}`) ? false : null;
+}
+/** The production runner: `execFile` with a timeout, never a shell, stdin closed (claude `-p`
+ *  otherwise waits for piped input). Runs in the OS temp dir, so no project context is loaded. */
+export const execProbe = (cmd, args, env, timeoutMs) => new Promise((resolve) => {
+    // The engine-only store variables go back to their BOOT values, as for every crew child (crew#495).
+    const child = execFile(cmd, args, { env: childEnvWithBootEstateDb(env), cwd: tmpdir(), timeout: timeoutMs, windowsHide: true, maxBuffer: 256 * 1024 }, (err, stdout, stderr) => {
+        // A non-zero exit carries its exit code as a NUMBER `code`; a spawn failure (ENOENT) a
+        // string one; a timeout kills the child (`killed`, no code).
+        const e = err;
+        const out = { stdout: String(stdout ?? ''), stderr: String(stderr ?? '') };
+        if (e === null)
+            resolve({ code: 0, ...out });
+        else if (typeof e.code === 'number' && e.killed !== true)
+            resolve({ code: e.code, ...out });
+        else
+            resolve({ code: null, ...out, error: e.message });
+    });
+    child.stdin?.on('error', () => undefined);
+    child.stdin?.end();
+});
+/** The per-daemon probe cache (see the module doc). */
+export class SeatProbe {
+    cache = new Map();
+    inflight = new Map();
+    /** One probe process at a time: each refresh chains onto this. */
+    queue = Promise.resolve();
+    run;
+    now;
+    env;
+    home;
+    constructor(opts = {}) {
+        this.run = opts.run ?? execProbe;
+        this.now = opts.now ?? Date.now;
+        this.env = opts.env;
+        this.home = opts.home;
+    }
+    /** Whether this seat has a probe at all. */
+    probes(seatKey) {
+        return probeCommand(seatKey, undefined, this.env ?? process.env, this.home) !== null;
+    }
+    /**
+     * The cached answer for `seatKey` under `workerRoot` (`undefined` before the first probe
+     * finishes, or for a seat with no probe). Never waits: a missing or stale answer starts one
+     * background refresh.
+     */
+    read(seatKey, workerRoot) {
+        if (!this.probes(seatKey))
+            return undefined;
+        const hit = this.cache.get(cacheKey(seatKey, workerRoot));
+        if (hit === undefined || this.stale(hit))
+            void this.refresh(seatKey, workerRoot);
+        if (hit === undefined)
+            return undefined;
+        return { signedIn: hit.signedIn, check: hit.check, probedAt: hit.probedAt, detail: hit.detail };
+    }
+    /**
+     * Before a launch routes: probe every probed seat whose answer is missing or stale and wait for
+     * the answers, at most `waitMs` (a probe that is slower keeps running in the background, and the
+     * seat reads as it would have without the wait).
+     */
+    async ensureFresh(seatKeys, workerRoot, waitMs = LAUNCH_PROBE_WAIT_MS) {
+        const jobs = seatKeys
+            .filter((k) => this.probes(k))
+            .filter((k) => {
+            const hit = this.cache.get(cacheKey(k, workerRoot));
+            return hit === undefined || this.stale(hit);
+        })
+            .map((k) => this.refresh(k, workerRoot));
+        if (jobs.length === 0)
+            return;
+        let timer;
+        const deadline = new Promise((resolve) => {
+            timer = setTimeout(resolve, waitMs);
+            timer.unref();
+        });
+        await Promise.race([Promise.all(jobs).then(() => undefined), deadline]);
+        clearTimeout(timer);
+    }
+    /** Probe now (deduplicated per seat and worker home); resolves to the fresh answer. */
+    refresh(seatKey, workerRoot) {
+        const key = cacheKey(seatKey, workerRoot);
+        const running = this.inflight.get(key);
+        if (running !== undefined)
+            return running;
+        const env = this.env ?? process.env;
+        const command = probeCommand(seatKey, workerRoot, env, this.home);
+        if (command === null)
+            return Promise.resolve(undefined);
+        const job = this.queue
+            .catch(() => undefined)
+            .then(() => this.probeOnce(seatKey, command, verifyCommand(seatKey, workerRoot, env, this.home)))
+            .then((reading) => {
+            this.cache.set(key, { ...reading, atMs: Date.parse(reading.probedAt) });
+            return reading;
+        })
+            .catch(() => undefined)
+            .finally(() => this.inflight.delete(key));
+        this.queue = job;
+        this.inflight.set(key, job);
+        return job;
+    }
+    /** The status command, then — when it says signed in — the live check. */
+    async probeOnce(seatKey, status, verify) {
+        const out = await this.run(status.cmd, status.args, status.env, PROBE_TIMEOUT_MS);
+        const said = classifyProbe(seatKey, out);
+        const statusWords = excerpt(out.error ?? `${out.stdout}\n${out.stderr}`);
+        if (said !== true || verify === null)
+            return this.reading(said, 'status', statusWords);
+        const live = await this.run(verify.cmd, verify.args, verify.env, VERIFY_TIMEOUT_MS);
+        const verdict = classifyVerify(live);
+        const liveWords = excerpt(live.error ?? `${live.stdout}\n${live.stderr}`);
+        if (verdict === false)
+            return this.reading(false, 'live', liveWords);
+        if (verdict === true)
+            return this.reading(true, 'live', statusWords);
+        return this.reading(true, 'status', `the live check could not tell (${liveWords}); status: ${statusWords}`);
+    }
+    reading(signedIn, check, detail) {
+        return { signedIn, check, probedAt: new Date(this.now()).toISOString(), detail };
+    }
+    stale(hit) {
+        const ttl = hit.signedIn === true ? PROBE_TTL_SIGNED_IN_MS : PROBE_TTL_OTHER_MS;
+        return this.now() - hit.atMs >= ttl;
+    }
+}
+function cacheKey(seatKey, workerRoot) {
+    return `${seatKey}\u0000${workerRoot ?? ''}`;
+}
+//# sourceMappingURL=seat-probe.js.map

package/dist/api/seat-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-probe.js","sourceRoot":"","sources":["../../src/api/seat-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAmCjD,wGAAwG;AACxG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAEvD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC;AAChF,CAAC;AAID,2FAA2F;AAC3F,SAAS,OAAO,CAAC,OAAe,EAAE,UAA8B,EAAE,GAAsB,EAAE,IAAY;IACpG,MAAM,IAAI,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,IAAI,GAAG,CAAC,uCAAuC,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACvG,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,UAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG,EACpC,OAAe,OAAO,EAAE;IAExB,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;QAC/D,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,UAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG,EACpC,OAAe,OAAO,EAAE;IAExB,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,OAAO,KAAK,QAAQ;QACzB,CAAC,CAAC;YACE,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC;YACjH,GAAG,EAAE,CAAC;SACP;QACH,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAChI,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,GAAgB;IAC7D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAC;YAChE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,6CAA6C,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3G,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,cAAc,CAAC,GAAgB;IAC7C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,aAAa,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED;kGACkG;AAClG,MAAM,CAAC,MAAM,SAAS,GAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAClE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,oGAAoG;IACpG,MAAM,KAAK,GAAG,QAAQ,CACpB,GAAG,EACH,IAAI,EACJ,EAAE,GAAG,EAAE,wBAAwB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,EACnH,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACtB,uFAAuF;QACvF,6DAA6D;QAC7D,MAAM,CAAC,GAAG,GAAmE,CAAC;QAC9E,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;aACxC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;;YACvF,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC,CACF,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AASL,uDAAuD;AACvD,MAAM,OAAO,SAAS;IACH,KAAK,GAAG,IAAI,GAAG,EAA+C,CAAC;IAC/D,QAAQ,GAAG,IAAI,GAAG,EAAiD,CAAC;IACrF,kEAAkE;IAC1D,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACnC,GAAG,CAAc;IACjB,GAAG,CAAe;IAClB,GAAG,CAAgC;IACnC,IAAI,CAAqB;IAE1C,YAAY,OAAyB,EAAE;QACrC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,4CAA4C;IAC5C,MAAM,CAAC,OAAe;QACpB,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,OAAe,EAAE,UAA8B;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjF,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAClG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,UAA8B,EAAE,SAAiB,oBAAoB;QACzG,MAAM,IAAI,GAAG,QAAQ;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YACpD,OAAO,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,KAAiC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC7C,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QACxE,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,uFAAuF;IACvF,OAAO,CAAC,OAAe,EAAE,UAA8B;QACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK;aACnB,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;aAChG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACtB,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,MAAe,EAAE,MAAsB;QAC9E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACrE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,kCAAkC,SAAS,cAAc,WAAW,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,OAAO,CAAC,QAAwB,EAAE,KAAiB,EAAE,MAAc;QACzE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,GAAwC;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAChF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;IACtC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,UAA8B;IAC/D,OAAO,GAAG,OAAO,SAAS,UAAU,IAAI,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/dist/api/seat-record.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The seat record: each seat's week, folded from the runs' durable event logs (studio's weekly
+ * 1:1 per agent). `GET /roster/record?days=7`.
+ *
+ * Nothing new is stored. The fold reads what the engine already records per run:
+ *
+ * - who ran a unit: `unitDistributed.cli`, moved by `unitReassigned.newCli`; a unit no frame
+ *   names falls back to the unit row's `assigned_cli`;
+ * - units run: the distinct units a seat was dispatched on (`unitDispatched`) inside the window;
+ * - first pass: the unit's FIRST `gateEvaluated` in the window passed (`combined` and no `denial`);
+ *   `gated` is how many units had a gate evaluation at all;
+ * - rework: a unit dispatched more than once (a retry or a send-back) or given a
+ *   `unitReworkAmended`, counted against the seat that ran its first dispatch;
+ * - stalls: distinct units that went quiet (`workerStalled`, the engine's or the daemon
+ *   watchdog's), against the seat running the unit then;
+ * - benched: runs whose `benched_seats` names the seat, with the reasons;
+ * - cost: the sum of `cliUsage.costUsd` where a price was known; `null` when none was.
+ *
+ * The window is by event time (`ts`, millis). A run that ended before the window opened is not
+ * read at all; the reads are capped at {@link SEAT_RECORD_RUN_CAP} runs, newest first, and the
+ * answer says when the cap cut.
+ */
+import type { RecordedEvent, SeatRecord, SeatRecordResponse, SessionView } from '../core/types.js';
+export declare const SEAT_RECORD_DEFAULT_DAYS = 7;
+export declare const SEAT_RECORD_MAX_DAYS = 30;
+export declare const SEAT_RECORD_RUN_CAP = 200;
+/** Whether a run can have any event inside the window: it ended in it, or has not ended. */
+export declare function runTouchesWindow(view: SessionView, since: number): boolean;
+/** Fold one run's events into the seat map. `since` is the window start, unix millis. */
+export declare function foldRunIntoSeats(seats: Map<string, SeatRecord>, view: SessionView, events: readonly RecordedEvent[], since: number): void;
+/**
+ * The whole read: pick the runs that can touch the window (newest first, capped), read each log,
+ * fold. `readEvents` answers `null` when the engine has no event-log binding — the caller turns
+ * that into a 503 (a missing binding is not an empty week).
+ */
+export declare function seatRecord(views: readonly SessionView[], readEvents: (runId: string) => Promise<readonly RecordedEvent[] | null>, opts: {
+    days: number;
+    now: number;
+}): Promise<SeatRecordResponse | null>;
+//# sourceMappingURL=seat-record.d.ts.map

package/dist/api/seat-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-record.d.ts","sourceRoot":"","sources":["../../src/api/seat-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAEV,aAAa,EAEb,UAAU,EACV,kBAAkB,EAClB,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAavC,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM1E;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EAC9B,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,SAAS,aAAa,EAAE,EAChC,KAAK,EAAE,MAAM,GACZ,IAAI,CA6HN;AAOD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,aAAa,EAAE,GAAG,IAAI,CAAC,EACvE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAwBpC"}