{"entries":[{"name":"active-session-state.ts","mode":"0100644","size":6001,"lastCommit":{"hash":"9661a1151525d5c967ec43774736eb14a39dc12a","oid":"9661a1151525d5c967ec43774736eb14a39dc12a","parents":["878410b3981f20c6d685faa210ad0e43426cf483"],"author":{"name":"Florian Brand","email":"46377542+xeophon@users.noreply.github.com","when":"2026-09-13T21:33:13+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-13T21:33:13+02:00"},"message":"fix(coding-agent): opening busy sessions no longer re-transfers the full transcript (#2260)\n\n* fix(coding-agent): replay withheld session events instead of re-transferring snapshots\n\nOpening a long live session re-sent the full transcript every time an event\narrived during the snapshot stream: the worker and supervisor withheld the\nevent, then streamed a whole fresh snapshot as a catch-up, so a busy session\nchained several full-transcript passes per attach. Withheld frames now\nreplay incrementally after the stream completes, the client defers events\nbetween attach and the first render instead of re-fetching get_messages,\nand resync/rebuild renders keep the initial open's transcript cap.\n\n* fix(tui): re-render only images when cell dimensions change\n\nThe cell-size response invalidated every component cache, so on\nimage-capable terminals the whole transcript re-parsed markdown once more\nafter startup. Images now keep the cell-dimensions version in their cache\nkey and a cell-size response re-renders only them.\n\n* fix(coding-agent): address deferred session review feedback (fixes #2260)\n\n* perf: streamline busy-session snapshots and rendering (fixes #2260)\n\n* fix: bound deferred event recovery and relay buffers (fixes #2260)\n\n* fix: cancel snapshots before forwarding session close (fixes #2260)\n\n* fix: discard superseded renders and snapshot attaches (fixes #2260)\n\n* fix: stop snapshot handling and recovery after closure (fixes #2260)\n\n* fix(coding-agent): bound snapshot deferral and preserve event order; fixes #2260\n\n* fix(coding-agent): release deferred updates after render and attach failures; fixes #2260\n\n* fix(coding-agent): reserve catch-up snapshots before capture; fixes #2260\n\n* fix(coding-agent): retain recovery gaps until snapshots succeed; fixes #2260\n\n* fix(coding-agent): isolate session catch-up failures; fixes #2260\n\n* fix(coding-agent): preserve notices and dialogs through snapshot recovery; fixes #2260\n\n* fix(coding-agent): retain extension prompts until subscription; fixes #2260\n\n* fix(coding-agent): discard stale prompts on update restart; fixes #2260\n\n* fix(coding-agent): bound pending extension UI requests; fixes #2260\n\n* fix(coding-agent): freeze deferred streaming events; fixes #2260","tree":"862f6a7e1b39b6129c923622c3f96cdade805c51"}},{"name":"agent-roster.ts","mode":"0100644","size":8293,"lastCommit":{"hash":"616557280fd39626dce82a89db386a172179c3aa","oid":"616557280fd39626dce82a89db386a172179c3aa","parents":["1c07eaad50dd8198a002e234b7522e3c0c03573a"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-03T23:00:02+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-03T17:00:02-04:00"},"message":"fix: count busy descendants in the agents-view subagents indicator (#1986)\n\n* fix: count busy descendants in the agents-view subagents indicator\n\nThe \"N subagents running\" indicator only tallied direct children whose\nrow classified as running, so a busy grandchild under an idle\nintermediate child left every ancestor reading \"N subagents\" with a zero\ncount. The tally is now a bottom-up pass over the built rows - the live\nper-descendant truth - replacing the direct-child increment.\n\nIndicator only, per policy: a session is Running when it works itself;\nidle ancestors of busy subtrees stay in Idle. Within Idle they now rank\nabove plain idle rows, and a collapsed group's summary row renders its\nrunning count in the success color instead of dimmed so the busy subtree\nis discoverable without expanding.\n\nDiagnosis credit: Vincent Bailly (VincentBailly/prime-agent#9) traced\nthe stale hasRunningRlmChildren snapshot and the row-walk mechanism;\nthis adopts his walk for the indicator while rejecting the section\npromotion.\n\nRES-1253\n\n* fix: tally busy descendants before heartbeat promotion inflates sections\n\nThe descendant tally read row sections after\npropagateHeartbeatStateToAncestors had promoted idle ancestors to\nrunning, so a heartbeat-active grandchild counted its promoted parent\ntoo. The tally now runs before the promotion pass and counts\nintrinsically busy rows only; once that propagation pass is deleted\n(#1967) the ordering is a no-op.\n\nRES-1253\n\n* fix: make the descendant tally iterative so deep chains cannot overflow\n\nThe recursive tally threw RangeError on a deep child chain just by\nopening the agents view. The nesting loop assigns every row at most one\nparent, so the tree is a forest: a reverse breadth-first pass over one\nwork list computes the same bottom-up counts iteratively, with the\npre-promotion ordering kept.\n\nRES-1253\n\n* fix: classify running from the session's own work, not delegated children\n\nSecond half of the RES-1253 policy, user-approved: Running means the\nsession you enter is doing work now. Delegated child work no longer\nclassifies a session as running - the busy-descendant badge, count, and\nidle ranking from the first half carry the delegation signal.\n\nhasRunningRlmChildren loses its section-classification role in both\nowners: classifySessionRosterStatus composes busy from the session's own\nactivity/isSessionActive, and isActiveSessionBusy (the worker's activity\naxis) no longer holds a settled parent at \"working\" for its children.\nThe \"subagents running\" status label dies with the section it had to\nagree with. The field itself stays on the wire, and isSessionSummaryBusy\nkeeps it on purpose for its residency and shutdown-safety consumers\n(worker eviction snapshots, empty-draft eviction, busy client-owned\nsession counts, daemon stop confirmation).\n\nRES-1253\n\n* chore: note the running-means-the-session policy in the changelog fragment\n\n* fix: split display activity from live-work safety in the busy predicates\n\nisActiveSessionBusy served two meanings after the classification change:\nthe display activity axis (session's own work only, correct) and worker\nrecovery plus draft-discard (where a running RLM child is live work that\ndies with the worker). The recovery journal recorded busy:false for a\nsettled parent with a running child, so a worker death skipped its\ninterruption record and notice.\n\nThe shared predicate is deleted and each meaning gets one named owner:\nactiveActivityForSession reads the session's own isSessionActive\ndirectly, and hasLiveSessionWork (own turn or running RLM child) backs\nrecordWorkerRecoveryState and isDiscardableDraft. No caller can grab the\nwrong meaning blind.\n\nRES-1253\n\n* fix: gate destructive agent actions on live work, not display section\n\nSince Running means the session's own work, an idle parent of a running\ncrew was branching into the delete path: killSubagent chose stop-vs-\ndelete from the display section and stopAgentForDeletion treated\nactivity==='working' as the only live work. Destructive actions are\nsafety consumers of the display/safety split: one row-level hasLiveWork\n(own section running, busy descendants, or the wire running-children\nflag) now drives the stop-first branch, the deletion flow, and the\nconfirmation verb.\n\nAlso trimmed the tally comment to current behavior.\n\nRES-1253\n\n* fix: stop live descendants when cancelling a settled child run\n\nStopping a subagent row whose own run already settled reported\n'Subagent already finished' while a nested descendant kept running:\ncancelRlmChildRun only cancelled the targeted run itself, and a fully\nreleased child (run removed, session retained) was never matched by id\nat all. Cancellation now descends where the tree lives: a settled target\nstops every running or queued run in its retained session's subtree\n(cancelRunningRlmDescendants, mirroring hasRunningRlmChildren's walk),\nand the returned flag stays truthful so the UI says stopped only when\nsomething stopped.\n\nRES-1253\n\n* chore: trim comments and fold overlapping pins on the indicator branch\n\nComment pass: multi-line narration cut to one-line invariant guards\n(destructive live-work gate, residency-vs-section busy split, worker-\ndeath live work) and code-readable notes deleted. Test pass: the direct-\nchild indicator pin folded into the grandchild pin (the general case),\nwhich now also carries the idle-label and wire-flag assertions.\n\n* fix: cancel and descend at every node of the rlm cancel walk\n\nCancelling a live child run aborts it, and abort cascades into the\nchild's ACTIVE runs - but running work retained under a settled\ndescendant of that child was the end of the line: neither the cascade\nnor the cancel walk visited it. cancelRlmChildRun now descends into the\ntarget's session after cancelling it, and cancelRunningRlmDescendants\ndescends at every node instead of treating running runs as leaves, so\ncancellation is exhaustive over the subtree regardless of each node's\nrun state. The returned flag stays truthful.\n\nRES-1253","tree":"91163e13665b6109773b3745e61727086504695f"}},{"name":"command-recovery-journal.ts","mode":"0100644","size":5512,"lastCommit":{"hash":"844e85545af6858dcb3d6cfe42bbfcf2ca0be4e5","oid":"844e85545af6858dcb3d6cfe42bbfcf2ca0be4e5","parents":["915c78f42c248b08238dd27fcd4bcab32c60beab"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-07T03:56:32+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-06T21:56:32-04:00"},"message":"Harden session persistence, worker recovery, and daemon refreshes (#2028)\n\n* refactor(coding-agent): move the semantic-edge ledger onto the event-log substrate\n\nThe recorder's private append/replay/repair IO is deleted; EventLog owns it, the same move #1987 made for the RLM spawn ledger. One durability rule is unified in the substrate rather than dropped: an unterminated final line is an uncommitted append, skipped on read and truncated before the next append — never newline-completed and never surfaced to a consumer whose next append destroys it.\n\n* fix(coding-agent): make the explicit ledger reader's ENOENT contract atomic\n\nreadSemanticEdgeLedger probed with statSync before reading through EventLog, which swallows ENOENT; a ledger deleted between the two returned [] instead of throwing. The missing-file decision now lives at the single open (replaySync missingFileThrows), so no check-then-read window exists.\n\n* docs(coding-agent): state the event-log tail rule once\n\nThe unterminated-tail contract was restated four times (module doc, replaySync doc, two test comments). It now lives once in the module doc; the method doc keeps only its own parse/missing-file semantics and the test comments reference the contract.\n\n* fix(coding-agent): write event-log appends fully and gate appends on tail repair\n\nwriteSync may write short (ENOSPC after a prefix); appendSync now loops until the payload is fully on disk so write-before-action callers never act on a torn record reported as success. A tail-repair failure (e.g. append-only ACL permitting O_APPEND but not r+) now propagates instead of being swallowed: writing through an unrepaired torn tail would weld it to the new record as permanent interior corruption. ENOENT and the concurrent-writer instability path keep their existing semantics.\n\n* fix(coding-agent): reclaim short event-log writes instead of completing them\n\nThe rlm spawn ledger is multi-writer by documented design (supervisor plus each worker over one file), so completing a short O_APPEND write with a second write could interleave with a rival append and weld two records. A short write now truncates its own torn prefix back off (only while this writer still owns the tail) and fails the append; a torn tail is read-tolerated, a weld is permanent corruption. The append fd opens a+ so the ownership check can read the tail.\n\n* fix(coding-agent): leave the torn tail on a short write instead of reclaiming it\n\nThe tail-match reclaim could truncate a rival's committed record whose final bytes coincide with our torn prefix - committed-data loss, strictly worse than the torn tail it prevented. A short write now just fails the append: the torn tail is the one tolerated shape, skipped on read and truncated by any writer's next repair (verified for both topologies: a resumed single-writer recorder repairs on its first append; every rlm-ledger writer repairs before each append).\n\n* refactor(coding-agent): compress event-log comments\n\n* fix(ai): omit the default service tier, reprice cache writes from message_delta, repoint the zai default\n\nIncorporates #2032 at f82c7fa3688b7e25cef80e2663fe77ed153c5cd9.\n\n* fix(tui,coding-agent): survive lone surrogates in table cells and terminate the WebP EXIF scan\n\nIncorporates #2033 at a3d1139ee6e1f77337ab134b0f0c0cede8c942af.\n\n* fix(coding-agent): restart dead kernels on ensure() and read mcp>=2 tool schemas\n\nIncorporates #2034 at 749e216e901304b310ead9f46c3813a032608d7b.\n\n* fix: one crash-safe owner for durable state writes\n\nIncorporates #2035 at f0f02d2fb090ec427307a65b9e9578ae3c8fc783.\n\n* fix(coding-agent): one zombie-aware process-liveness probe\n\nIncorporates #2041 at 92a0eacf47efc831444b0b4e412f35bd17ac3f28.\n\n* fix(coding-agent): snapshot transfer ids from the materialized cursor; mismatches settle the transfer, not the worker channel\n\nIncorporates #2044 at 5af3bbe8090240507d6b0297d0da007159e15305.\n\n* fix(coding-agent): failed workers recover on touch; roster gaps answer a structured recovering error\n\nIncorporates #2047 at 77b747afab402a9e2f5eada227ffe6fed626a634.\n\n* fix(coding-agent): seven session and IO correctness defects\n\nIncorporates #2037 at 41b5d72d7758723f22ba07f8738d217868ed7baf.\n\n* fix(coding-agent): coalesce child-usage attribution and gate agent-status persistence on real changes\n\nIncorporates #2050 at 6b0af5d2679ddff987ef3b4d43235a872fe2b315.\n\n* fix(coding-agent): incremental single-flight session metadata scans\n\nIncorporates #2043 at df032c1192dd2e38d35fcbaca589db7194f26b6c.\n\n* fix(coding-agent): memoize the passive RLM topology derivation\n\nIncorporates #2051 at 0ee114ce77942d9298136ca193ddc2c0b5d27d58.\n\n* fix(coding-agent): preserve accounting and metadata across deferred updates\n\nKeep durable child-usage aggregates separate from pending sibling usage. Retry optional topology metadata after transient reads. Completes #2050 and #2051 integration.\n\n* fix: preserve session accounting and read-only persistence boundaries\n\n---------\n\nCo-authored-by: Seth ","tree":"fde2f307a92f71b52dffbe1ec5232617702f5b62"}},{"name":"compact-session-stream.ts","mode":"0100644","size":7259,"lastCommit":{"hash":"4d19005d4a25b10ce6d90fdd4961ed374c64ea17","oid":"4d19005d4a25b10ce6d90fdd4961ed374c64ea17","parents":["461bae098e0eec5cd03c3d63453ddd86222ed03a"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-07-13T17:47:15-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-13T17:47:15-07:00"},"message":"isolate daemon sessions in worker processes (#383)\n\n* perf(coding-agent): add large daemon attach benchmark\n\n* feat(coding-agent): isolate session execution in workers\n\n* fix(coding-agent): reconnect after supervisor replacement\n\n* fix(tui): preserve input across fullscreen handoff\n\n* fix(coding-agent): prevent archived heartbeat revival\n\n* fix(coding-agent): cancel orphan heartbeat sessions\n\n* fix(tui): preserve drafts across daemon refreshes\n\n* fix(coding-agent): separate daemon resyncs from replacements\n\n* fix(coding-agent): stabilize daemon streaming ui\n\n* refactor(coding-agent): remove obsolete subagent tree\n\n* feat(coding-agent): show subagent recaps inline\n\n* fix(coding-agent): refine subagent summary spacing\n\n* fix(coding-agent): preserve full subagent row selection\n\n* fix(coding-agent): align subagent summary rows\n\n* fix(coding-agent): preserve reasoning during daemon resync\n\n* fix(coding-agent): isolate heartbeat scheduling per worker (ENG-4527)\n\n* fix(coding-agent): retry partial daemon reconnects\n\n* fix(coding-agent): harden isolated daemon recovery\n\n* fix(coding-agent): close daemon recovery races\n\n* fix(coding-agent): validate daemon recovery state\n\n* fix(coding-agent): close isolated worker recovery gaps\n\n* fix(coding-agent): verify orphan process identity\n\n* fix(coding-agent): isolate worker client capabilities\n\n* fix(coding-agent): preserve daemon terminal ordering\n\n* fix(coding-agent): serialize durable daemon state\n\n* fix(coding-agent): avoid duplicate worker recovery\n\n* fix(coding-agent): isolate peer sync failures\n\n* fix(coding-agent): fail unanswered rpc commands\n\n* fix(coding-agent): distinguish lease contention","tree":"a3a976aeaaad976da0a455ac277039862d2c6da8"}},{"name":"crash-handlers.ts","mode":"0100644","size":6568,"lastCommit":{"hash":"9e09089b2ac775e427e112e948d2aca2d3b55043","oid":"9e09089b2ac775e427e112e948d2aca2d3b55043","parents":["b829ea92a84e0e787689dc000360a06cffb7f104"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"message":"fix(coding-agent): attribute worker exit reasons and defer heartbeat stops for busy workers\n","tree":"cedf930b57fc3e150d50a7b537bd3366853c2ed0"}},{"name":"daemon-catalog-entry.ts","mode":"0100644","size":295,"lastCommit":{"hash":"74c8d39ee16a94cc85fe6f388c2976e8d2593616","oid":"74c8d39ee16a94cc85fe6f388c2976e8d2593616","parents":["173d845a56f654fac8d82a6e47aec7a644207114"],"author":{"name":"Seth Karten","email":"32787133+sethkarten@users.noreply.github.com","when":"2026-09-01T07:54:14-04:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-01T13:54:14+02:00"},"message":"fix(coding-agent): harden daemon startup and recovery ownership (#1929)\n\n* fix(coding-agent): harden daemon recovery and socket ownership\n\n* fix(coding-agent): address daemon recovery review findings\n\n* fix(coding-agent): preserve prompt admission scheduling\n\n* test(coding-agent): consolidate daemon recovery coverage\n\n* fix(coding-agent): preserve safe shutdown outcomes\n\n* fix(coding-agent): close recovery admission gaps\n\n* refactor(coding-agent): one process-identity oracle for recovery verdicts\n\nAdoption and recovery classify liveness through processIdentity() instead of\nre-pairing isProcessAlive+getProcessStartId at each site; raw start-id reads\nremain only where the value itself is persisted. The sole surviving kill of a\nlive worker is the identity-verified pre-roster replacement, now pinned:\nadoption of a live pre-roster worker still kills-and-relaunches, while an\nunverifiable identity still parks failed with no replacement.\n\n* fix(coding-agent): bound live-worker probing at ten defer rounds\n\nA hung-but-alive worker (or a live pid with no verifiable start id) probed\nforever: ~11s probe pass, 5s defer, repeat. After MAX_DEFERRED_RECOVERY_ROUNDS\n(10 rounds, ~2.5 minutes) the worker parks failed — user-visible through the\nexisting roster failed status — with its process left alive for a manual\nretry_worker, which resets the round count like any successful recovery.\n\n* refactor(coding-agent): type the worker probe timeout\n\nisDaemonWorkerProbeTimeout classified by message prefixes defined in two\nother files. The timeout sites in daemon-worker-client.ts (hello, response)\nand the supervisor's connect deadline now throw DaemonWorkerProbeTimeoutError,\nand the classifier is a plain instanceof — one truth, same shape as\nDaemonWorkerAuthenticationError.\n\n* docs(coding-agent): state the leak-over-kill recovery tradeoff\n\nThe recovery SIGKILL removal applies to every failure class, not just probe\ntimeouts. Verified: a live verified-identity failed worker IS reclaimed by the\nnext fresh create (graceful stop), so the true leak is only the unverifiable\nsurvivor — the deliberate fail-safe. One comment at the decision point and a\nchangelog line make the tradeoff explicit.\n\n* fix(coding-agent): kill before cleanup in the pre-roster replacement\n\nThe carve ran recoverUncertainWorkerOperations (interruption marking, orphan\nreaping) before the identity-gated SIGKILL, so destructive cleanup hit a\nstill-active worker; pre-rebase the kill preceded cleanup inside the old\nhelper. Reordered: recheck + SIGKILL + bounded teardown wait first, cleanup\nonly after the predecessor is confirmed gone/replaced, and an unverifiable\nsurvivor parks failed with NO destructive cleanup at all (matching recovery's\nrule that a possibly-live worker is never cleaned destructively). The carve\npin asserts the order and the no-cleanup branch.\n\n* fix(coding-agent): never release a registry guard a successor reclaimed\n\nproper-lockfile verified: compromise detection is timer-driven (mtime updates),\nand release() removes the lockfile unconditionally when the steal has not been\ndetected yet — so a caller resuming from a stall past the stale threshold could\ndelete the successor'\"'\"'s lock. The guard directory'\"'\"'s inode is the ownership\nidentity (a steal is rmdir+mkdir): it is captured at acquisition and checked\nsynchronously where the timer cannot run — before returning an action'\"'\"'s result\nand before release. A stolen-but-undetected guard is left to its own updater,\nwhich notices the foreign mtime and cleans itself. A truly synchronous stall\nstill cannot be preempted mid-action; that limitation is stated at the guard.\n\n---------\n\nCo-authored-by: Sebastian ","tree":"c608592db1612fda74bb7a5b5fd699d172a3bcd9"}},{"name":"daemon-catalog-process.ts","mode":"0100644","size":15908,"lastCommit":{"hash":"90dc81bdde8eb3fc2fdaf271cbe811ac20f5704c","oid":"90dc81bdde8eb3fc2fdaf271cbe811ac20f5704c","parents":["182c084c1fc2ef9cf151387ee083392976027b50"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-13T18:25:57+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T06:41:46+03:00"},"message":"coding-agent/core: resolve session selectors from the transcript file name\n","tree":"c153f4d40a368c106f59e0b9c8464eb02d005f0e"}},{"name":"daemon-client-env.ts","mode":"0100644","size":3459,"lastCommit":{"hash":"f4cfde0c768da7e488909553f3e6c6885f129261","oid":"f4cfde0c768da7e488909553f3e6c6885f129261","parents":["c630b71ea9c281e8f882ec1a65519f56bdd73336"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-07-02T11:35:07-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-02T11:35:07-07:00"},"message":"scope client env to sessions so herdr extensions see the right pane (#303)\n\n* pass herdr client env through the daemon scoped per session\n\n* inherit client env in subagents and guard against watcher and cross-session env leaks\n\n* bind client env once at session creation and never rebind on reuse\n\n* scope env around the daemon reload command and adopt env on env-less session reuse\n\n* propagate adopted client env to subagents spawned before adoption\n\n* let the primary interactive attach adopt env for env-less sessions\n\n* scope client env around all runtime rebuilds via a runtime env scope hook\n\n* cover adopt-if-absent client env semantics on session reuse\n\n* pin allowlisted exec env per session so foreign env windows cannot leak into subprocesses\n\n* pin the full allowlist inside env windows so partial client env cannot mix with ambient values","tree":"960545a03ce99c02bf37ec29dd3117abe76d1939"}},{"name":"daemon-client.ts","mode":"0100644","size":25000,"lastCommit":{"hash":"02aa818cde550ab1d90df02c6a0547cd93287160","oid":"02aa818cde550ab1d90df02c6a0547cd93287160","parents":["c99e22f82d9399f55c3a1b714a9655f34b8ad4d1"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T12:50:51+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T12:50:51+03:00"},"message":"fix(coding-agent): survive daemon restarts and retry re-attachment with backoff\n","tree":"8ba4b150c182dc0481431e504cabceadce167019"}},{"name":"daemon-errors.ts","mode":"0100644","size":5641,"lastCommit":{"hash":"7d73c1026db8f70b7d475fe889633268fdcdf5e2","oid":"7d73c1026db8f70b7d475fe889633268fdcdf5e2","parents":["a0da0afc4f9be9584301609d30194cdf56b6b288"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T14:31:07+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T14:31:07+03:00"},"message":"fix(coding-agent): bound the daemon session reattach wait and report an unrestorable session\n","tree":"c122123a64ad4a9d34fb96bdb454fb19ea0ba40e"}},{"name":"daemon-extension-binding.ts","mode":"0100644","size":9188,"lastCommit":{"hash":"941576dbec6d388de6b9f3cb61bce90cce3f55c4","oid":"941576dbec6d388de6b9f3cb61bce90cce3f55c4","parents":["9808aa7fa5dbe9bc855e2f84ca936c9a69c8332c"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-08-03T09:56:37+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-08-03T09:56:37+02:00"},"message":"refactor(coding-agent): publish session action protocol (#575)\n\n* refactor(coding-agent): publish session action protocol\n\n* fix(coding-agent): restore queue projection guards and recovery validation\n\n* fix(coding-agent): repair test migrations for session action snapshots\n\n* correcting when multiple messages are sent, how it's counted\n\n* fix(coding-agent): await update supervisor teardown (fixes #575)\n\n---------\n\nCo-authored-by: Alex Zhang ","tree":"81546c387f4627eb678183955565f1596d53e0ce"}},{"name":"daemon-mode.ts","mode":"0100644","size":313272,"lastCommit":{"hash":"9e09089b2ac775e427e112e948d2aca2d3b55043","oid":"9e09089b2ac775e427e112e948d2aca2d3b55043","parents":["b829ea92a84e0e787689dc000360a06cffb7f104"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"message":"fix(coding-agent): attribute worker exit reasons and defer heartbeat stops for busy workers\n","tree":"cedf930b57fc3e150d50a7b537bd3366853c2ed0"}},{"name":"daemon-protocol.ts","mode":"0100644","size":52735,"lastCommit":{"hash":"02aa818cde550ab1d90df02c6a0547cd93287160","oid":"02aa818cde550ab1d90df02c6a0547cd93287160","parents":["c99e22f82d9399f55c3a1b714a9655f34b8ad4d1"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T12:50:51+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T12:50:51+03:00"},"message":"fix(coding-agent): survive daemon restarts and retry re-attachment with backoff\n","tree":"8ba4b150c182dc0481431e504cabceadce167019"}},{"name":"daemon-routed-client.ts","mode":"0100644","size":9132,"lastCommit":{"hash":"2ce443175b55a32075aa23ae41676a16b771d662","oid":"2ce443175b55a32075aa23ae41676a16b771d662","parents":["8a1e958008894705326de541b48e7d158b49ac4f"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-07T05:14:48+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-06T23:14:48-04:00"},"message":"fix: improve Windows session and Python reliability (#2036)\n\n* fix(coding-agent): resolve the kernel venv python under Scripts on win32\n\nuv creates /Scripts/python.exe on Windows, but both bootstrap sites\njoined /bin/python unconditionally, so first-run kernel bootstrap\nalways failed on native Windows. Mirror the existing win32 uv.exe branch\nwith one kernelVenvPython helper used at both sites.\n\n* fix(coding-agent): expand ~/ with the platform path separator\n\nTilde expansion concatenated homedir() with the posix remainder at three\nsites (expandPath, expandTildePath, and an inline PI_PACKAGE_DIR copy),\nproducing mixed-separator paths like C:\\Users\\u/rest on Windows. Join\nthrough the platform path module instead and route PI_PACKAGE_DIR through\nexpandTildePath.\n\n* fix(coding-agent): prefer non-System32 bash over the WSL trampoline on PATH\n\nfindBashOnPath took the first where-match, and System32\\bash.exe (the WSL\nlauncher, which executes Linux-side) precedes per-user Git Bash installs on\ndefault PATHs. Order matches so %SystemRoot% entries are only a last\nresort.\n\n* fix(coding-agent): dial the Herdr socket inside the named-pipe namespace on win32\n\nThe built-in Herdr reporter connected to the exported unix-style socket\npath verbatim; on Windows a local-domain connection must target\n\\\\.\\pipe\\, and the reporter swallows connect errors by design, so the\nmismatch was invisible. Map unmapped paths into the pipe namespace before\ndialing.\n\n* fix(coding-agent): cache the win32 process start id per pid for a short TTL\n\ngetWindowsProcessStartId spawns a synchronous powershell query that blocks\nthe event loop, and supervisor liveness checks plus daemon-ps poll loops\ncall it repeatedly for the same pid. Memoize successful ids for 5s so hot\npaths reuse one query.\n\n* fix(coding-agent): derive handshake budgets from the outer connect deadline\n\nconnectWorker granted every hello/worker_auth attempt a fixed 1s clock, so\na handshake that consistently needs longer (slow win32 boxes) failed every\nretry regardless of the 30s outer budget, and the adopt/recover paths\nshrank even the outer budget to 1.5-2s. Per-attempt waits now consume the\nremaining outer deadline, all connectWorker callers use the one 30s\nconstant, and the downward 1s hello/auth overrides in daemon-mode and the\nrouted client fall back to the client defaults.\n\n* fix(coding-agent): route background spawns through hidden-window wrappers\n\nwindowsHide defaults to false, so console-subsystem children of a\nwindowless daemon or detached worker allocate a fresh console and flash or\nsteal focus on every spawn; only one call site in the repo set the flag.\nAdd spawnHidden/spawnSyncHidden/execSyncHidden/execFileHidden/\nexecFileSyncHidden to utils/child-process.ts and migrate all 49\nnon-interactive coding-agent spawn/exec sites; the tui package's two\nbackground spawns set windowsHide inline. Interactive spawns (editors,\ninherit-stdio installers and relaunches) intentionally keep their console.\n\n* chore(coding-agent): add windows-seams changelog fragments; tighten new comments\n\n* test(coding-agent): align clipboard and login-dialog spawn assertions with hidden-window wrappers\n\n* revert(coding-agent): drop the win32 start-id TTL cache\n\nThe per-pid cache could hand a recycled pid the dead process's start id\nfor up to 5s. The start id exists solely to detect pid recycling, and its\nconsumers act on that identity: the orphan-process journal decides\ntaskkill /T from it and daemon-ps shutdown waits poll it for change, so a\nstale match can kill a replacement process tree or mask an exited owner.\nNo caller is both hot and staleness-tolerant; the handshake latency issue\nis already addressed by deriving budgets from the outer deadline.\n\n* fix(coding-agent): match Herdr pipe-namespace prefixes case-insensitively\n\nWindows pipe names are case-insensitive, but the pass-through check was\ncase-sensitive, so a valid \\\\.\\PIPE\\... target was re-joined into a\ndifferent pipe name and the error-swallowing reporter failed silently.\nLowercase only the prefix check; the returned path keeps its casing.\n\n* refactor(coding-agent): tighten windows-seam comments and consolidate pins\n\nCollapse the wrapper doc block to one line, drop test comments that restate\nassertions, share one recording wrapper in the child-process mock, unwrap\nsingle-test describes, and remove one posix assertion already covered by\nits sibling. No behavior coverage removed; all pins keep their failing\nassertions.\n\n* fix(coding-agent,tui): harden current-runtime Windows sessions\n\nImport selective Bun-independent fixes from #1994 at\nce2d04f872ae7df567e68695aa258a1a5cdf254c, relative to declared\n#1982 base 9680ac3dfa8bdafae0f9e53286e2274d8b9c9090.\n\nPreserve #2036 Windows seams and current Node runtime. Keep Bun,\ninstaller, shell-policy rollout, scratch directories, and CPython\nbatch overrides outside this consolidation. #1994 remains partial.\nAtomic writer and bootstrap-lock overlap awaits canonical #2035\nreconciliation after parent stacks land.\n\n* fix(coding-agent): normalize Windows bash candidate paths\n\n---------\n\nCo-authored-by: Seth ","tree":"d8a9dec4332c83f71b05ba702c027932cab8ac19"}},{"name":"daemon-runtime-identity.ts","mode":"0100644","size":960,"lastCommit":{"hash":"10a5de8f4595f7a60d9fa58ebd820248276698c6","oid":"10a5de8f4595f7a60d9fa58ebd820248276698c6","parents":["6c883334cb3229b8640ea1403df2cae9f53bede2"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-07-17T13:30:17-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-17T13:30:17-07:00"},"message":"make daemon mismatches self-healing (#466)\n\n* fix daemon mismatch recovery for ENG-4687\n\n* fix daemon review findings for ENG-4687\n\n* bound daemon shutdown discovery for ENG-4687\n\n* fix daemon shutdown convergence state for ENG-4687\n\n* document isolated daemon message logging failure\n\n* fix daemon startup and update recovery for ENG-4687\n\n* isolate daemon recovery listeners for ENG-4687\n\n* preserve protocol 3 heartbeat support for ENG-4687","tree":"9340e9ead14ddbf8df2fcf5b050efd6bb887fdac"}},{"name":"daemon-session-id.ts","mode":"0100644","size":91,"lastCommit":{"hash":"b0a77adeb9f7e9c219803e25829c83a92c639ebb","oid":"b0a77adeb9f7e9c219803e25829c83a92c639ebb","parents":["97b9fab154ff88b4c81477af74d8cc6237921da2"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-07-20T13:28:04-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-20T13:28:04-07:00"},"message":"reject invalid resume session ids (#479)\n\n* fix(coding-agent): reject invalid resume selectors (ENG-4722)\n\n* fix(coding-agent): resolve ambiguous session selectors\n\nfixes #479\n\n* fix(coding-agent): prefer exact session ids\n\nfixes #479","tree":"4fb4646e797d914d41fc4324000e5b0a54f44a10"}},{"name":"daemon-session-list.ts","mode":"0100644","size":19997,"lastCommit":{"hash":"d9058cafe0916d6ad2c3e29abc07c72db037d1cb","oid":"d9058cafe0916d6ad2c3e29abc07c72db037d1cb","parents":["21cdadfc1e70a98a89006fa2b4b53d65e2b2be98"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-09T18:25:13+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T06:14:47+03:00"},"message":"feat(coding-agent): add prompt cache timer and usage indicator to tray and agents view\n","tree":"9cc1d865c52beda0e41a2fbed5d3a48bec96ee15"}},{"name":"daemon-session-summarizer.ts","mode":"0100644","size":19434,"lastCommit":{"hash":"ba0ddb1062a6f6de20c25a892addeca7092d9fe7","oid":"ba0ddb1062a6f6de20c25a892addeca7092d9fe7","parents":["bebad881b47634cff2ea4322af7c151b19fd8536"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T20:24:08+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T20:24:08+03:00"},"message":"coding-agent: add a sessionRecap.enabled off switch for the daemon status recap\n","tree":"b2f1d61f17991dec26c6f8d7fd6a4e41b8127152"}},{"name":"daemon-socket.ts","mode":"0100644","size":9481,"lastCommit":{"hash":"74c8d39ee16a94cc85fe6f388c2976e8d2593616","oid":"74c8d39ee16a94cc85fe6f388c2976e8d2593616","parents":["173d845a56f654fac8d82a6e47aec7a644207114"],"author":{"name":"Seth Karten","email":"32787133+sethkarten@users.noreply.github.com","when":"2026-09-01T07:54:14-04:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-01T13:54:14+02:00"},"message":"fix(coding-agent): harden daemon startup and recovery ownership (#1929)\n\n* fix(coding-agent): harden daemon recovery and socket ownership\n\n* fix(coding-agent): address daemon recovery review findings\n\n* fix(coding-agent): preserve prompt admission scheduling\n\n* test(coding-agent): consolidate daemon recovery coverage\n\n* fix(coding-agent): preserve safe shutdown outcomes\n\n* fix(coding-agent): close recovery admission gaps\n\n* refactor(coding-agent): one process-identity oracle for recovery verdicts\n\nAdoption and recovery classify liveness through processIdentity() instead of\nre-pairing isProcessAlive+getProcessStartId at each site; raw start-id reads\nremain only where the value itself is persisted. The sole surviving kill of a\nlive worker is the identity-verified pre-roster replacement, now pinned:\nadoption of a live pre-roster worker still kills-and-relaunches, while an\nunverifiable identity still parks failed with no replacement.\n\n* fix(coding-agent): bound live-worker probing at ten defer rounds\n\nA hung-but-alive worker (or a live pid with no verifiable start id) probed\nforever: ~11s probe pass, 5s defer, repeat. After MAX_DEFERRED_RECOVERY_ROUNDS\n(10 rounds, ~2.5 minutes) the worker parks failed — user-visible through the\nexisting roster failed status — with its process left alive for a manual\nretry_worker, which resets the round count like any successful recovery.\n\n* refactor(coding-agent): type the worker probe timeout\n\nisDaemonWorkerProbeTimeout classified by message prefixes defined in two\nother files. The timeout sites in daemon-worker-client.ts (hello, response)\nand the supervisor's connect deadline now throw DaemonWorkerProbeTimeoutError,\nand the classifier is a plain instanceof — one truth, same shape as\nDaemonWorkerAuthenticationError.\n\n* docs(coding-agent): state the leak-over-kill recovery tradeoff\n\nThe recovery SIGKILL removal applies to every failure class, not just probe\ntimeouts. Verified: a live verified-identity failed worker IS reclaimed by the\nnext fresh create (graceful stop), so the true leak is only the unverifiable\nsurvivor — the deliberate fail-safe. One comment at the decision point and a\nchangelog line make the tradeoff explicit.\n\n* fix(coding-agent): kill before cleanup in the pre-roster replacement\n\nThe carve ran recoverUncertainWorkerOperations (interruption marking, orphan\nreaping) before the identity-gated SIGKILL, so destructive cleanup hit a\nstill-active worker; pre-rebase the kill preceded cleanup inside the old\nhelper. Reordered: recheck + SIGKILL + bounded teardown wait first, cleanup\nonly after the predecessor is confirmed gone/replaced, and an unverifiable\nsurvivor parks failed with NO destructive cleanup at all (matching recovery's\nrule that a possibly-live worker is never cleaned destructively). The carve\npin asserts the order and the no-cleanup branch.\n\n* fix(coding-agent): never release a registry guard a successor reclaimed\n\nproper-lockfile verified: compromise detection is timer-driven (mtime updates),\nand release() removes the lockfile unconditionally when the steal has not been\ndetected yet — so a caller resuming from a stall past the stale threshold could\ndelete the successor'\"'\"'s lock. The guard directory'\"'\"'s inode is the ownership\nidentity (a steal is rmdir+mkdir): it is captured at acquisition and checked\nsynchronously where the timer cannot run — before returning an action'\"'\"'s result\nand before release. A stolen-but-undetected guard is left to its own updater,\nwhich notices the foreign mtime and cleans itself. A truly synchronous stall\nstill cannot be preempted mid-action; that limitation is stated at the guard.\n\n---------\n\nCo-authored-by: Sebastian ","tree":"c608592db1612fda74bb7a5b5fd699d172a3bcd9"}},{"name":"daemon-state-root.ts","mode":"0100644","size":4127,"lastCommit":{"hash":"9c59b394cac2bad490a38d7eee55efe8b0d03d86","oid":"9c59b394cac2bad490a38d7eee55efe8b0d03d86","parents":["ebe299ee599d2e7444c034d1b38af38808036e74"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-09-15T11:58:21-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-15T11:58:21-07:00"},"message":"fix issues found while validating native releases (#2361)\n\n* add platform fidelity telemetry: libc, cpu baseline, os release\n\nos_family + architecture cannot answer whether Linux users are on musl or\nwhether x86_64 users have AVX2. Both gate replacing the 377 MB standalone-Node\nbootstrap with a single native binary.\n\nbaseProperties() now also reports libc, libc_version, cpu_baseline, os_release\nand os_product_version. Detection lives in core/platform-fidelity.ts: no\nsubprocesses, bounded reads, memoized per process, and every failure path\ndegrades to \"unknown\" instead of throwing.\n\n* make the version check and npm bridge suites hermetic\n\nthese two suites read update and daemon-worker environment variables, so running\nthem from inside a live prime-agent session inherited that session's own settings\nand produced 4 and 24 failures while ci stayed green.\n\na shared test/ambient-env.ts helper now lists every variable the code under test\nreads, clears them for in-process tests, and strips them from the environment\nhanded to spawned children. no test behaviour was weakened; cases that need a\nvariable set it themselves.\n\n* route commands written after global flags\n\nprime-agent only treated argv[1] as a subcommand, so forms like\n`--offline model list` and `--daemon-socket status --json` were sent to\nthe model as chat messages. Share the positional scan used by the early daemon\nlaunch decision with public command routing and rotate leading global flags\nbehind a recognized command. `--` and one-shot print runs still keep their\npositional as message text.\n\n* scope daemon discovery to the state root it runs in\n\n* give the compiled executable probe a workable timeout\n\ncold rosetta 2 translation of the 51 mb darwin-x64 binary takes about 11s, so the flat 10s probe deadline failed every install on apple silicon. raise the default budget to 60s, allow PRIME_AGENT_PROBE_TIMEOUT_SECONDS to override it, and report a probe timeout as a timeout instead of claiming the machine cannot run the executable.\n\n* keep hidden supervisors in scope for home-scoped daemon discovery\n\nA supervisor that hands its runtime to a successor is no longer the\nregistered owner, so the ownership registry cannot name it and only the OS\nsocket sweep can still see it. Scoping discovery to the socket dir plus the\nregistry therefore put those hidden supervisors out of reach of daemon ps\nand shutdown --force, leaking them permanently (ENG-4603 regression).\n\nA socket inside our agent dir is unambiguously ours, because another HOME\nresolves to another agent dir, so the matcher now honours it. That restores\nthe reach the regression test expects without widening scope back to the\nwhole machine.\n\n* keep rotated global flags ahead of the -- separator\n\n* treat help written after global flags as a help request\n\n* trust the glibc runtime over an installed musl loader in telemetry\n\n* describe os_release honestly in the telemetry disclosure\n\n* read leading-zero probe timeout overrides as decimal\n\n* fix(coding-agent): spawn the eng-4603 supervisor fixture in-process for shutdown discovery\n\nThe tsx CLI wrapper forks: the spawned pid owns only tsx IPC pipes while\nthe real supervisor (and its daemon socket) hides in an untracked child\npid, so the shimmed OS socket sweep only ever saw the wrapper pipes.\nPre-merge shutdown --force passed by force-killing those wrappers; the\nstate-root scoping correctly disowns them (they sit in TMPDIR/tsx-,\nnot our socket dir, agent dir, or registry), which left the chain\nstopped-nowhere and failed the regression. Run the fixture with\nnode --import tsx's ESM loader so the spawned pid is the listener again.\n\n* keep the help topic when an explicit help flag follows it\n\n* fix(coding-agent): include the legacy registry and skip stale records in scoped daemon discovery\n\nScoped discovery reads only the current supervisor ownership registry,\nso daemons started before the registry moved out of the socket dir became\ninvisible to daemon ps and shutdown --force under the same agent dir;\nand one record whose agent dir can no longer be canonicalized aborted\nthe whole sweep. Read the legacy location too (mirroring the fence and\nowner-assert paths, gated off when the registry is overridden) and skip\nper-record canonicalization failures so one stale record cannot hide the\nrest. Document why the socket dir stays part of the state root.\n\n* mirror parseArgs value consumption in the command scanner\n\n* keep a version request ahead of command routing\n\n* keep short version flags ahead of command routing too\n\n* treat system prompt runs as prompt runs instead of rotating their message\n\n* boot the daemon early for prompt-value runs that keep their word on the chat path","tree":"60925a23a51ec5149017e18e8c799ee875d88bcc"}},{"name":"daemon-supervisor-ownership.ts","mode":"0100644","size":35188,"lastCommit":{"hash":"cf07c5a3f5eca98e7744f2df83050044c920252a","oid":"cf07c5a3f5eca98e7744f2df83050044c920252a","parents":["66abc2a604fc42a220292a1ca4cf33ee60cb5733"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-09-16T13:28:13-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-16T16:28:13-04:00"},"message":"delete dead tests and fix the races the flaky ones were hiding (#2336)\n\n* add an objective testing policy to AGENTS.md\n\n* fix flaky daemon supervisor monitor test\n\nThe supervisor availability check is a real async chain (registry stat,\nsocket probe, replacement launch) started from a timer callback, so the\ntest drove a bounded fake-timer pump and asserted on a probe counter.\nUnder a loaded CI shard the chain did not finish inside the iteration\nbudget, and the variant mixing fake timers with a real probe promise\ncould deadlock for the full 30s test timeout.\n\nExpose a settled promise per armed availability check and await it in\nthe tests, so each assertion runs after the check finished instead of\nafter an arbitrary number of clock advances.\n\n* remove vitest retry masking from ai and attach-image tests\n\nDeleted all 548 `retry:` options in packages/ai/test and the 2 in\nkernel-attach-image-skill.test.ts. Retries hid non-determinism instead of\nfixing it, so a broken code path could still go green.\n\n- Deleted 17 live-only cross-provider E2E matrices whose every case sits behind\n skipIf(!API_KEY) and never runs in CI; stream.test.ts stays as the survivor\n that owns the provider table.\n- Stripped the retry option from the 198 stream.test.ts cases and dropped the\n live E2E describe (plus its now-unused helpers) from\n anthropic-thinking-disable.test.ts, keeping its mocked payload contract.\n- Removed retry: 1 from the two attach-image kernel cases; they pass without it.\n\nMocked wire/SSE contract tests are untouched. Tests only, no product code.\n\n* make agent trace upload tests deterministic\n\nThe suite pumped a synthetic clock with advanceTimersUntil() and hoped real\nfs and promise work settled inside a 200-step budget, asserted schedule\ndelays through a global setTimeout spy whose fake clock had drifted, and\nremoved its temp dir while catch-up and cursor writers were still running.\nUnder a loaded CI shard that produced \"Timed out advancing fake timers\",\n\"expected 1000 to be 60000\" and \"ENOTEMPTY rmdir /tmp/agent-traces-test-*\".\n\nThe upload scheduler now reports the delay it arms and the outcome of each\ncycle, the upload reports every wait it arms before the next request, and\ninstallAgentTraceUpload returns a handle that resolves when the startup\ncatch-up and any in-flight upload have finished writing. Tests await those\nsignals and advance the fake clock by the exact reported delay, and teardown\nwaits for in-flight writers before removing the temp dir.\n\nThe ~15 retry, backoff and Retry-After variants collapse into one\ntable-driven it.each, per the MERGE verdict: 1569 -> 1141 lines, 44 -> 27\ntest blocks, with no lost coverage.\n\n* make the compiled artifact and installer probe tests deterministic\n\nThe compiled-artifact afterEach polled for supervisor exit with the same\n10s budget as vitest's hook timeout, so the poll could never report on the\nslower standalone runners. The teardown now escalates to SIGKILL and every\ninner deadline stays below the surrounding hook and test budgets.\n\nnative-probe-timeout decided pass/fail from wall-clock deadlines around a\nreal 10s installer probe. The installer probe deadline is now injectable\nthrough PRIME_AGENT_PROBE_TIMEOUT_SECONDS, the blocked probe records the\ninstall lock itself, and the spawn deadlines are gone.\n\n* fix daemon shutdown admission loss during slow scans\n\nshutdown --force holds a 5s admission lease refreshed by a 1s timer, but it\nblocks its own event loop in synchronous ps/lsof/ss scans. On a loaded runner a\nscan outlasts the lease, the elapsed record is treated as abandoned, and the\nholder's next assertOrRenew throws \"Daemon shutdown admission was lost\".\n\n- A late renew re-arms a record that is still ours; only a missing or foreign\n record ends the admission.\n- A renew that could not read the registry no longer retires the lease.\n- isDaemonShutdownAdmissionActive is read-only, so a bystander probe cannot\n delete a live holder's record.\n- stopHiddenSupervisors renews before the blocking scan.\n\nThe 4603 regression drops its 11s sleep for a post-shutdown listener assertion\nand uses mkdtemp for the child TMPDIR.\n\n* delete 148 dead test files\n\nRemoves test files judged CUT by a full 480-file audit: duplicates of a named survivor, mock-asserting tests, rendered-copy assertions, private-internals casts, and live-API matrices behind skipIf(!API_KEY) that never ran in CI.\n\n* merge interactive-mode and agents-view test suites\n\n* merge tui render, overlay and helper test suites\n\n* test: slim daemon-mode and agent-connection-daemon suites\n\ndaemon-mode: keep passive hydration/passivation, delete_subagent durability, agent-message concurrency and rate limits, attach-snapshot backpressure; drop per-race internal regressions already covered process-level by daemon-supervisor-process.\nagent-connection-daemon: keep reconnect, update-restart, chunked-snapshot assembly and disposal races; drop tautological daemon-protocol pass-through cases.\n\n* merge tui editor, markdown and autocomplete test suites\n\n* test: merge audited session-core test bloat\n\nExecute MERGE verdicts from the 480-file test audit for the agent-session\ncore suites: collapse near-identical blocks into it.each tables, drop\nmock-return/rendered-copy assertions and private-cast white-box cases,\nand fold one-off files into the owning suite.\n\nDeleted (folded into their owning suite):\n- agent-session-concurrent.test.ts, suite/agent-session-action-races.test.ts,\n suite/agent-session-action-contracts.test.ts -> suite/agent-session-queue.test.ts\n- suite/agent-session-compaction-continuation.test.ts,\n suite/agent-session-compact-skill.test.ts -> suite/agent-session-compaction.test.ts\n- agent-session-runtime-events.test.ts -> suite/agent-session-runtime.test.ts\n\nPreserved: process boundaries (daemon RPC, ACP), on-disk formats,\nconcurrency/ordering, crash/restart/resume and load coverage.\n\n* address review: octal probe timeout, truncated deadline, dead schedule field\n\n* test: merge redundant coding-agent test cases into case tables\n\nExecutes the MERGE verdicts from the 480-file test-bloat audit for the\nmisc lanes. Repeated near-identical blocks collapse into single it.each\ncase tables, and ticket-numbered one-off files fold into the owning\nmodule suite.\n\nRemoved throughout the touched files: assertions on mock return values,\nassertions on rendered text/copy, `as unknown as` casts into privates,\nand suites gated behind skipIf(!API_KEY) (which never ran in CI).\n\nPreserved: process boundaries (daemon RPC, ACP), on-disk formats,\nconcurrency and ordering, crash/restart/resume, and load.\n\nDeleted files, folded into their module suite:\n- compaction-extensions -> deleted outright (whole file behind skipIf(!API_KEY))\n- compaction-serialization -> compaction\n- heartbeat-catalog -> daemon-client\n- child-process -> exec\n- edit-tool-legacy-input -> tools\n- kernel-goal-skill, kernel-rlm-heartbeat-skill -> kernel-agent-message-skill\n- kernel-agent-observe-skill -> kernel-attach-image-skill\n- kernel-windows-process -> kernel-bootstrap-windows\n- extensions-input-event -> extensions-runner\n- sdk-skills -> sdk-session-manager\n- session-manager/{agent-status,has-user-content} -> session-manager/session-state\n- session-manager/migration -> session-manager/file-operations\n- session-manager/custom-session-id -> session-manager/tree-traversal\n\n* slim ai + regression tests (lanes A/B/D/E)\n\nExecute MERGE verdicts from the test audit for packages/ai and the\nupdate-restart / snapshot / session-view regression files.\n\n- fold ticket-numbered regression cases into the owning suites\n- collapse near-identical blocks into it.each tables\n- drop mock-return, rendered-copy and live-API-gated assertions\n\n* test: collapse package-manager tables and fold small daemon selector suites\n\npackage-manager: git-URL parsing, top-level/manifest/package glob filters and npm install-argv cases are now table-driven.\ndaemon-session-id: absorbs daemon-catalog-process selector case, drops display-id formatting trivia.\ndaemon-worker-windows-timeouts: absorbs the connection-deadline budget cases from daemon-worker-connect.\ndaemon-catalog-startup: drops the src-directory one-off.\n\n* test: collapse refinement, settings and config suites into case tables\n\nFinal misc lane of the test-bloat audit.\n\n- refinement: per-kind create/update/delete becomes one it.each lifecycle;\n 8 rejection suites become one 18-row invalid-edit table that also asserts\n state and the refinement log stay untouched; truncation/parse errors,\n scope permutations, ranking and the tokenizer each become one table.\n System-prompt and user-prompt copy assertions removed.\n- settings-manager: per-setting default getters removed; unknown-key\n preservation, invalid-file guards and project-vs-global precedence kept.\n- config: install-method detection becomes one table; session-dir env\n permutations collapse into one precedence test.\n- builtin-skills, repl-kernel-abort, session-cwd, truncate: repeated blocks\n collapsed; one ReplInternals reach-in dropped.\n- child-process folds into exec as one process lifecycle suite.\n\n* slim regression tests (lane C)\n\nFold the remaining ticket-numbered regression files into the owning\nmodule suites and collapse duplicate cases into it.each tables.\n\n- 19 regression files deleted after their kept cases moved into\n agent-session-queue, auth-storage, acp-features, resource-loader,\n agent-session-runtime/compaction/retry-events/recursion,\n model-registry, slash-commands, daemon-supervisor-process\n- 3 files slimmed in place where the named target no longer exists\n- drop rendered-copy, mock-return and private-cast assertions\n\n* test: collapse daemon protocol, command, list, ps and package-command suites\n\ndaemon-protocol: two gating tables replace 16 near-identical capability/schema cases.\ndaemon-command: table-driven argv parsing plus the --goal leak guards; drops help/usage copy assertions.\ndaemon-session-list: activity, recap and model-fallback projections are table-driven.\ndaemon-ps: keeps planReap/planShutdownAll safety rules, drops ss/lsof parsers, sorting and uptime trivia.\ndaemon-stop-confirm: one busy-guard table, no prompt copy.\npackage-command-paths: one shared self-update fixture for the install-spec cases; drops help and removed-flag copy.\nacp-events: keeps only the cases the ACP suite does not cover end to end.\ndaemon-session-summarizer: one recap/status parse table.\ndaemon-extension-binding: keeps the duplicated-partial-message strip.\n\n* test: tighten the daemon stop-confirm busy-guard table\n\n* fix ci: biome forEach body, vacuous autocomplete case, missing prompt before second compaction\n\n* fix ci: restore escaped template literals in prompt-template cases\n\n* fix codeql: single-pass path escaping in test helpers\n\n* address review: flush debounced trace uploads, restore probe timeout guards, drop dead test scaffolding\n\n* respect retry-after and throttle window when flushing trace uploads\n\n* await in-flight trace uploads before a drain returns\n\n* extend deterministic test policy to python\n\n* harden deterministic test policy checks\n\n* close test policy edge cases\n\n* finish deterministic policy edge coverage\n\n* fix policy lexer and macos signature setup\n\n* mask regex literals in test policy checks\n\n* distinguish postfix division in policy lexer\n\n* close native migration signal race\n\n* keep native migration force timer owned\n\n---------\n\nCo-authored-by: prime-agent ","tree":"131da3f1685960d3617420e73df0692f0b0fadf9"}},{"name":"daemon-supervisor.ts","mode":"0100644","size":294107,"lastCommit":{"hash":"9e09089b2ac775e427e112e948d2aca2d3b55043","oid":"9e09089b2ac775e427e112e948d2aca2d3b55043","parents":["b829ea92a84e0e787689dc000360a06cffb7f104"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"message":"fix(coding-agent): attribute worker exit reasons and defer heartbeat stops for busy workers\n","tree":"cedf930b57fc3e150d50a7b537bd3366853c2ed0"}},{"name":"daemon-worker-client.ts","mode":"0100644","size":11887,"lastCommit":{"hash":"9661a1151525d5c967ec43774736eb14a39dc12a","oid":"9661a1151525d5c967ec43774736eb14a39dc12a","parents":["878410b3981f20c6d685faa210ad0e43426cf483"],"author":{"name":"Florian Brand","email":"46377542+xeophon@users.noreply.github.com","when":"2026-09-13T21:33:13+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-13T21:33:13+02:00"},"message":"fix(coding-agent): opening busy sessions no longer re-transfers the full transcript (#2260)\n\n* fix(coding-agent): replay withheld session events instead of re-transferring snapshots\n\nOpening a long live session re-sent the full transcript every time an event\narrived during the snapshot stream: the worker and supervisor withheld the\nevent, then streamed a whole fresh snapshot as a catch-up, so a busy session\nchained several full-transcript passes per attach. Withheld frames now\nreplay incrementally after the stream completes, the client defers events\nbetween attach and the first render instead of re-fetching get_messages,\nand resync/rebuild renders keep the initial open's transcript cap.\n\n* fix(tui): re-render only images when cell dimensions change\n\nThe cell-size response invalidated every component cache, so on\nimage-capable terminals the whole transcript re-parsed markdown once more\nafter startup. Images now keep the cell-dimensions version in their cache\nkey and a cell-size response re-renders only them.\n\n* fix(coding-agent): address deferred session review feedback (fixes #2260)\n\n* perf: streamline busy-session snapshots and rendering (fixes #2260)\n\n* fix: bound deferred event recovery and relay buffers (fixes #2260)\n\n* fix: cancel snapshots before forwarding session close (fixes #2260)\n\n* fix: discard superseded renders and snapshot attaches (fixes #2260)\n\n* fix: stop snapshot handling and recovery after closure (fixes #2260)\n\n* fix(coding-agent): bound snapshot deferral and preserve event order; fixes #2260\n\n* fix(coding-agent): release deferred updates after render and attach failures; fixes #2260\n\n* fix(coding-agent): reserve catch-up snapshots before capture; fixes #2260\n\n* fix(coding-agent): retain recovery gaps until snapshots succeed; fixes #2260\n\n* fix(coding-agent): isolate session catch-up failures; fixes #2260\n\n* fix(coding-agent): preserve notices and dialogs through snapshot recovery; fixes #2260\n\n* fix(coding-agent): retain extension prompts until subscription; fixes #2260\n\n* fix(coding-agent): discard stale prompts on update restart; fixes #2260\n\n* fix(coding-agent): bound pending extension UI requests; fixes #2260\n\n* fix(coding-agent): freeze deferred streaming events; fixes #2260","tree":"862f6a7e1b39b6129c923622c3f96cdade805c51"}},{"name":"daemon-worker-protocol.ts","mode":"0100644","size":11017,"lastCommit":{"hash":"173d845a56f654fac8d82a6e47aec7a644207114","oid":"173d845a56f654fac8d82a6e47aec7a644207114","parents":["71c010826df872cb7f79bc2c631792fef61b0b92"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-01T12:41:36+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-01T12:41:36+02:00"},"message":"feat(coding-agent): direct session transport between TUI and worker (ENG-5817) (#1926)\n\n* feat(coding-agent): protocol groundwork for direct worker peer transport\n\nSchema revision 25 adds the capability-gated get_direct_worker_transport\ncommand, the single-use DaemonPeerTransportTicket shape, and the peer grant,\npeer_auth, and worker_register_peer_transport wire types. DAEMON_COMMAND_PLANE\nclassifies every daemon command as session- or control-plane at compile time\nso unclassified commands can never route to a direct transport, and the\nper-command hello compatibility predicate moves to daemon-protocol.ts so the\nrouted client and DaemonClient share one check. Worker descriptors gain the\nper-incarnation workerInstanceId that peer grants bind to.\n\n* feat(coding-agent): worker-side direct peer transport admission\n\nWorkers accept supervisor-registered single-use peer grants\n(worker_register_peer_transport; bounded, TTL-capped, burned before their\ntoken is compared with sha256 + timingSafeEqual) and authenticate direct\nsession clients via peer_auth on their own socket. A pre-auth socket may only\nauthenticate; a failed peer_auth or any other command ends it. Authenticated\npeers are pinned to the session plane of their granted session, so worker\ncontrol commands, other sessions, and unknown command types are rejected.\nGrants and live peers are fenced during update preparation, archive shutdown,\nand worker shutdown; compact assistant deltas stay a supervisor-only encoding.\nSession summaries report directAttachedClients so the supervisor roster,\nattachment counts, and idle eviction can stay honest.\n\n* feat(coding-agent): supervisor issues direct worker transport tickets\n\nget_direct_worker_transport asks the supervisor for a single-use ticket to a\nresident worker's own socket. The supervisor pre-registers a 10s grant in the\nworker over its authenticated channel, binds it to the fresh per-incarnation\nworkerInstanceId (launched via env, echoed in worker_auth, persisted on the\ndescriptor), verifies the worker process identity is current, and stamps the\nsocket's dev/ino into the ticket so clients can detect a swapped socket.\nWorkers advertise peer-transport support in their worker_auth capabilities;\nolder workers never get grants and client-owned workers are refused at issue\ntime. Public summaries and idle-eviction snapshots add worker-reported direct\nattachments to the supervisor-side count so eviction and the roster stay\nhonest.\n\n* feat(coding-agent): route session commands over a direct worker transport\n\nDaemonAgentConnection.attach upgrades its supervisor connection with a direct\nlink to the session's worker when the supervisor advertises\ndirect_peer_transport: it redeems a single-use ticket, verifies the socket's\ndev/ino, and wraps both sockets in a DaemonRoutedClient. Session-plane\ncommands the worker's own hello serves go direct; control-plane commands, an\nold worker, or any direct-path failure fall back silently to supervisor\nrouting, and a malformed direct frame closes the link instead of throwing\ninto the client. An established direct link outlives supervisor-socket loss:\nthe session keeps streaming while the control plane reconnects in the\nbackground. Watchers and owned sessions stay on the shared supervisor socket,\nand a successful reattach drops the now-stale direct link.\n\n* docs(coding-agent): add the direct session transport changelog fragment\n\n* fix(coding-agent): schedule supervisor recovery from the socket role, not the live claim\n\nThe fence check revokes a stale supervisor claim before ending its socket, so\nthe disconnect cleanup can no longer consult supervisorClaims to decide\nwhether to probe supervisor availability; the authentication role survives\nrevocation and excludes direct session peers. Also drop the redundant\nshuttingDown clause from peer_auth (shutdown already fences admissions and\nclears grants) and teach the affected daemon fakes the fields the transport\nnow touches.\n\n* fix(coding-agent): keep reasoned closes authoritative on the direct transport\n\nReview fixes for the direct session transport:\n- Peer fencing now writes daemon_closing with the real reason before ending\n direct sockets, and the archive shutdown closes sessions first so direct\n peers read session_closed \"killed\" instead of a fake daemon shutdown; a\n clean daemon stop therefore stays terminal and never respawns the daemon.\n- The connection checks the authoritative shutdown/update close reason before\n the surviving-direct-link reroute, so reasoned closes stay terminal (stop)\n or take the update restoration path (restart) even while the direct link is\n healthy.\n- worker_auth enforces the instance binding only when the authenticating\n supervisor presents one, so a downgraded supervisor still adopts live\n workers; the peer-transport fencing between current builds is unchanged.\n- One helper owns the direct-plus-supervisor attachment sum; peer_auth drops\n the same-process re-check of the worker's own instance id (registration is\n the single enforcement point; the client-presented field stays checked) and\n the peer command gate drops the updateRestart clause that fencing makes\n unreachable.\n\n* chore(coding-agent): slim direct-transport comments to genuine ambiguity\n\nDrop comments that narrate the adjacent code and squeeze multi-line docs to\none line, keeping the load-bearing notes: grant burn-before-compare, the\narchive close-before-fence ordering, the reason-before-FIN contract, the\nfail-fast rule on dropped request options, the shutdown-window fence\nreachability, and the command-plane classification rule.\n\n* fix(coding-agent): resync only when a reconnect re-established session state\n\nControl-plane recovery with a healthy direct link completed a reconnect cycle\nper supervisor-socket flap (attach rides the direct link, so every cycle\nsucceeded instantly) and each cycle emitted session_resynced, re-rendering an\nunchanged transcript up to 15 times during one supervisor replacement. The\nreconnect loop now emits session_resynced only when the session transport\nitself was re-established through a supervisor attach; a held direct link\nstreamed state throughout, so recovery emits just the connected status.\n\n* fix(coding-agent): one close-handler owner; direct loss always falls back\n\nA direct-transport loss is never itself a session loss: the connection now\nreconnects through a supervisor re-attach even without a recoverDaemon hook\n(the supervisor socket is still healthy; a worker that actually died keeps\nsignalling through the authoritative session_closed path). The transport\nclose handler is extracted into one method and the control-plane close saved\nduring an initial direct attach replays through it, so a daemon shutdown\nduring initial attach stays terminal instead of respawning the daemon.\n\n* fix(coding-agent): flush the roster when direct viewers attach or detach\n\nA direct peer joining or leaving an idle session changes\ndirectAttachedClients without any session event to carry it, so the\nsupervisor's roster (and roster-based idle eviction) held a stale count until\nunrelated activity. The attach handler and the shared detach path now\nschedule a roster flush for session_client sockets; supervisor-relayed\nviewers keep their existing event-driven cadence.\n\n* test(coding-agent): supervisor-swap E2E expects no resync while the direct link holds\n\nThe resident-worker restart test predates the direct transport: its client\nnow rides the worker's own socket through the supervisor swap, so the\nrecovery emits connected without a session_resynced. The end-to-end pin now\nasserts the new semantics (no resync, no close, state queryable), matching\nthe unit pins from the resync-emission fix.\n\n* fix(coding-agent): reject the attach when a shutdown lands during initial direct attach\n\nReplaying a saved supervisor-shutdown close through the close handler inside\nthe static attach emitted the terminal event before any listener could\nsubscribe, and terminalCloseEmitted then swallowed every later signal: a\ndaemon stop during first attach produced a zombie connected TUI. No listener\ncan exist during construction, so a terminal saved close now rejects the\nattach with the socket-close error — the pre-transport semantics every call\nsite already handles; non-terminal saved closes keep replaying through the\nsingle close handler.\n\n* fix(coding-agent): compose pause invalidation with direct-loss fallback; re-acquire direct after reattach\n\nA direct-socket drop while a session input pause was held hit the fail-closed\npause branch before the recoverable-direct-loss ordering, terminalizing a\nsession the supervisor could still serve and skipping update restoration. The\nfence stays fail-closed only for control-plane losses; a lost direct link\nclears it (holders still learn through the invalidation generation) and falls\nthrough to the normal close ordering.\n\nA successful in-window reattach dropped the stale direct link but never\nacquired one for the target, leaving the session supervisor-routed for good.\nThe routed client can now upgrade itself with the same silent ticket dance as\nthe initial attach (one shared acquisition helper), and reattachSession\ninvokes it on success only — a rejected reattach still keeps the old link.\n\n* fix(coding-agent): revert the reattach transport upgrade; never park the ticket request\n\nThe post-reattach upgradeDirectTransport was half a mechanism: its own pin\nshowed no attach ever crosses the new link, so events stayed on the\nsupervisor relay while requests silently switched sockets, and supervisor\nattachment bookkeeping leaked. Post-reattach supervisor routing is the honest\nstate until a designed-as-one-piece re-upgrade exists. With its only other\ncaller gone, the ticket acquisition folds back into\ncreateDaemonSessionTransport, and the ticket request now opts out of\nreconnect parking (recoverable:false) so a supervisor drop mid-acquire fails\ninto supervisor routing instead of pending the attach forever.\n\n* fix(coding-agent): held-direct recovery is control-plane only and unbounded\n\nWhile the direct link is held, the reconnect loop's success is connect plus\nhello: no re-attach and no snapshot cross a socket that never stopped serving\nthe session, which deletes the snapshot-restream-over-live-socket failure\nclass and makes the resync skip structural. The bounded reconnect deadline\narms only once the direct link is gone (re-armed at the transition), so a\nsupervisor staying down never terminally closes a healthy direct stream; a\nmid-recovery direct death reruns the loop as a normal bounded session-plane\nreconnect.\n\n* docs(coding-agent): state the peer grant's scope and threat model on its type\n\nThe session pin is scoped to the active-session slot and guards against\nrouting accidents, not privilege escalation: ticket holders already hold\nsupervisor access.\n\n* fix(coding-agent): rebind the roster subscription during held-direct recovery\n\nControl-plane-only recovery skips attach(), which was the roster store's only\nrebind seam, so a supervisor blip under a healthy direct link left the agents\nview subscribed to the dead hello. The subscription is a control-plane\naccessory: held-direct recovery now re-attaches the store non-fatally after\nconnect + hello, and the session-plane path keeps its single rebind inside\nattach().\n\n* chore(coding-agent): slim transport comments and one subsumed test assert\n\nDrop docs that restate their declarations (transport interface, role union),\nthe close-handler narration the predicate name now carries, and squeeze three\nmulti-line whys to one line each. The half-open handshake test loses its\nzero-resync assert: the deadline-policy pin and the supervisor-swap E2E both\npin held-mode zero-resync across the whole recovery.\n\n* fix(coding-agent): unparkable fallback attach; one liveness check after the held-recovery awaits\n\nThe supervisor-side retry of a failed initial direct attach owns its bounded\noutcome, so it now opts out of reconnect parking and, on failure, rejects with\nthe control-plane close saved during the window — a daemon stop racing the\nretry reaches the caller as the authoritative reason instead of a pend or a\ngeneric socket error. Held-direct recovery revalidates once after its last\nawait (the roster re-attach): a terminal close inside the window stops the\nloop without emitting connected, and a direct loss inside it falls through to\nthe bounded session-plane rerun instead of joining the finished recovery.\n\n* fix(coding-agent): held recovery stands down for an in-flight update restoration\n\nThe post-await validation only re-derived two of the close handler's three\noutcomes, so an update close landing inside the held roster re-attach fell\ninto the bounded session-plane rerun, whose deadline could close the client\nunder the running restoration. The check now consults the handler's own\ndispatch outputs — terminalCloseEmitted, updateRestartPending, or the\nrecoverable close that joined this loop — so a window close lands in exactly\nthe branch the handler chose.","tree":"8f950a61bd2030fc1e00513705f6844c911dd246"}},{"name":"heartbeat-catalog.ts","mode":"0100644","size":976,"lastCommit":{"hash":"173d845a56f654fac8d82a6e47aec7a644207114","oid":"173d845a56f654fac8d82a6e47aec7a644207114","parents":["71c010826df872cb7f79bc2c631792fef61b0b92"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-01T12:41:36+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-01T12:41:36+02:00"},"message":"feat(coding-agent): direct session transport between TUI and worker (ENG-5817) (#1926)\n\n* feat(coding-agent): protocol groundwork for direct worker peer transport\n\nSchema revision 25 adds the capability-gated get_direct_worker_transport\ncommand, the single-use DaemonPeerTransportTicket shape, and the peer grant,\npeer_auth, and worker_register_peer_transport wire types. DAEMON_COMMAND_PLANE\nclassifies every daemon command as session- or control-plane at compile time\nso unclassified commands can never route to a direct transport, and the\nper-command hello compatibility predicate moves to daemon-protocol.ts so the\nrouted client and DaemonClient share one check. Worker descriptors gain the\nper-incarnation workerInstanceId that peer grants bind to.\n\n* feat(coding-agent): worker-side direct peer transport admission\n\nWorkers accept supervisor-registered single-use peer grants\n(worker_register_peer_transport; bounded, TTL-capped, burned before their\ntoken is compared with sha256 + timingSafeEqual) and authenticate direct\nsession clients via peer_auth on their own socket. A pre-auth socket may only\nauthenticate; a failed peer_auth or any other command ends it. Authenticated\npeers are pinned to the session plane of their granted session, so worker\ncontrol commands, other sessions, and unknown command types are rejected.\nGrants and live peers are fenced during update preparation, archive shutdown,\nand worker shutdown; compact assistant deltas stay a supervisor-only encoding.\nSession summaries report directAttachedClients so the supervisor roster,\nattachment counts, and idle eviction can stay honest.\n\n* feat(coding-agent): supervisor issues direct worker transport tickets\n\nget_direct_worker_transport asks the supervisor for a single-use ticket to a\nresident worker's own socket. The supervisor pre-registers a 10s grant in the\nworker over its authenticated channel, binds it to the fresh per-incarnation\nworkerInstanceId (launched via env, echoed in worker_auth, persisted on the\ndescriptor), verifies the worker process identity is current, and stamps the\nsocket's dev/ino into the ticket so clients can detect a swapped socket.\nWorkers advertise peer-transport support in their worker_auth capabilities;\nolder workers never get grants and client-owned workers are refused at issue\ntime. Public summaries and idle-eviction snapshots add worker-reported direct\nattachments to the supervisor-side count so eviction and the roster stay\nhonest.\n\n* feat(coding-agent): route session commands over a direct worker transport\n\nDaemonAgentConnection.attach upgrades its supervisor connection with a direct\nlink to the session's worker when the supervisor advertises\ndirect_peer_transport: it redeems a single-use ticket, verifies the socket's\ndev/ino, and wraps both sockets in a DaemonRoutedClient. Session-plane\ncommands the worker's own hello serves go direct; control-plane commands, an\nold worker, or any direct-path failure fall back silently to supervisor\nrouting, and a malformed direct frame closes the link instead of throwing\ninto the client. An established direct link outlives supervisor-socket loss:\nthe session keeps streaming while the control plane reconnects in the\nbackground. Watchers and owned sessions stay on the shared supervisor socket,\nand a successful reattach drops the now-stale direct link.\n\n* docs(coding-agent): add the direct session transport changelog fragment\n\n* fix(coding-agent): schedule supervisor recovery from the socket role, not the live claim\n\nThe fence check revokes a stale supervisor claim before ending its socket, so\nthe disconnect cleanup can no longer consult supervisorClaims to decide\nwhether to probe supervisor availability; the authentication role survives\nrevocation and excludes direct session peers. Also drop the redundant\nshuttingDown clause from peer_auth (shutdown already fences admissions and\nclears grants) and teach the affected daemon fakes the fields the transport\nnow touches.\n\n* fix(coding-agent): keep reasoned closes authoritative on the direct transport\n\nReview fixes for the direct session transport:\n- Peer fencing now writes daemon_closing with the real reason before ending\n direct sockets, and the archive shutdown closes sessions first so direct\n peers read session_closed \"killed\" instead of a fake daemon shutdown; a\n clean daemon stop therefore stays terminal and never respawns the daemon.\n- The connection checks the authoritative shutdown/update close reason before\n the surviving-direct-link reroute, so reasoned closes stay terminal (stop)\n or take the update restoration path (restart) even while the direct link is\n healthy.\n- worker_auth enforces the instance binding only when the authenticating\n supervisor presents one, so a downgraded supervisor still adopts live\n workers; the peer-transport fencing between current builds is unchanged.\n- One helper owns the direct-plus-supervisor attachment sum; peer_auth drops\n the same-process re-check of the worker's own instance id (registration is\n the single enforcement point; the client-presented field stays checked) and\n the peer command gate drops the updateRestart clause that fencing makes\n unreachable.\n\n* chore(coding-agent): slim direct-transport comments to genuine ambiguity\n\nDrop comments that narrate the adjacent code and squeeze multi-line docs to\none line, keeping the load-bearing notes: grant burn-before-compare, the\narchive close-before-fence ordering, the reason-before-FIN contract, the\nfail-fast rule on dropped request options, the shutdown-window fence\nreachability, and the command-plane classification rule.\n\n* fix(coding-agent): resync only when a reconnect re-established session state\n\nControl-plane recovery with a healthy direct link completed a reconnect cycle\nper supervisor-socket flap (attach rides the direct link, so every cycle\nsucceeded instantly) and each cycle emitted session_resynced, re-rendering an\nunchanged transcript up to 15 times during one supervisor replacement. The\nreconnect loop now emits session_resynced only when the session transport\nitself was re-established through a supervisor attach; a held direct link\nstreamed state throughout, so recovery emits just the connected status.\n\n* fix(coding-agent): one close-handler owner; direct loss always falls back\n\nA direct-transport loss is never itself a session loss: the connection now\nreconnects through a supervisor re-attach even without a recoverDaemon hook\n(the supervisor socket is still healthy; a worker that actually died keeps\nsignalling through the authoritative session_closed path). The transport\nclose handler is extracted into one method and the control-plane close saved\nduring an initial direct attach replays through it, so a daemon shutdown\nduring initial attach stays terminal instead of respawning the daemon.\n\n* fix(coding-agent): flush the roster when direct viewers attach or detach\n\nA direct peer joining or leaving an idle session changes\ndirectAttachedClients without any session event to carry it, so the\nsupervisor's roster (and roster-based idle eviction) held a stale count until\nunrelated activity. The attach handler and the shared detach path now\nschedule a roster flush for session_client sockets; supervisor-relayed\nviewers keep their existing event-driven cadence.\n\n* test(coding-agent): supervisor-swap E2E expects no resync while the direct link holds\n\nThe resident-worker restart test predates the direct transport: its client\nnow rides the worker's own socket through the supervisor swap, so the\nrecovery emits connected without a session_resynced. The end-to-end pin now\nasserts the new semantics (no resync, no close, state queryable), matching\nthe unit pins from the resync-emission fix.\n\n* fix(coding-agent): reject the attach when a shutdown lands during initial direct attach\n\nReplaying a saved supervisor-shutdown close through the close handler inside\nthe static attach emitted the terminal event before any listener could\nsubscribe, and terminalCloseEmitted then swallowed every later signal: a\ndaemon stop during first attach produced a zombie connected TUI. No listener\ncan exist during construction, so a terminal saved close now rejects the\nattach with the socket-close error — the pre-transport semantics every call\nsite already handles; non-terminal saved closes keep replaying through the\nsingle close handler.\n\n* fix(coding-agent): compose pause invalidation with direct-loss fallback; re-acquire direct after reattach\n\nA direct-socket drop while a session input pause was held hit the fail-closed\npause branch before the recoverable-direct-loss ordering, terminalizing a\nsession the supervisor could still serve and skipping update restoration. The\nfence stays fail-closed only for control-plane losses; a lost direct link\nclears it (holders still learn through the invalidation generation) and falls\nthrough to the normal close ordering.\n\nA successful in-window reattach dropped the stale direct link but never\nacquired one for the target, leaving the session supervisor-routed for good.\nThe routed client can now upgrade itself with the same silent ticket dance as\nthe initial attach (one shared acquisition helper), and reattachSession\ninvokes it on success only — a rejected reattach still keeps the old link.\n\n* fix(coding-agent): revert the reattach transport upgrade; never park the ticket request\n\nThe post-reattach upgradeDirectTransport was half a mechanism: its own pin\nshowed no attach ever crosses the new link, so events stayed on the\nsupervisor relay while requests silently switched sockets, and supervisor\nattachment bookkeeping leaked. Post-reattach supervisor routing is the honest\nstate until a designed-as-one-piece re-upgrade exists. With its only other\ncaller gone, the ticket acquisition folds back into\ncreateDaemonSessionTransport, and the ticket request now opts out of\nreconnect parking (recoverable:false) so a supervisor drop mid-acquire fails\ninto supervisor routing instead of pending the attach forever.\n\n* fix(coding-agent): held-direct recovery is control-plane only and unbounded\n\nWhile the direct link is held, the reconnect loop's success is connect plus\nhello: no re-attach and no snapshot cross a socket that never stopped serving\nthe session, which deletes the snapshot-restream-over-live-socket failure\nclass and makes the resync skip structural. The bounded reconnect deadline\narms only once the direct link is gone (re-armed at the transition), so a\nsupervisor staying down never terminally closes a healthy direct stream; a\nmid-recovery direct death reruns the loop as a normal bounded session-plane\nreconnect.\n\n* docs(coding-agent): state the peer grant's scope and threat model on its type\n\nThe session pin is scoped to the active-session slot and guards against\nrouting accidents, not privilege escalation: ticket holders already hold\nsupervisor access.\n\n* fix(coding-agent): rebind the roster subscription during held-direct recovery\n\nControl-plane-only recovery skips attach(), which was the roster store's only\nrebind seam, so a supervisor blip under a healthy direct link left the agents\nview subscribed to the dead hello. The subscription is a control-plane\naccessory: held-direct recovery now re-attaches the store non-fatally after\nconnect + hello, and the session-plane path keeps its single rebind inside\nattach().\n\n* chore(coding-agent): slim transport comments and one subsumed test assert\n\nDrop docs that restate their declarations (transport interface, role union),\nthe close-handler narration the predicate name now carries, and squeeze three\nmulti-line whys to one line each. The half-open handshake test loses its\nzero-resync assert: the deadline-policy pin and the supervisor-swap E2E both\npin held-mode zero-resync across the whole recovery.\n\n* fix(coding-agent): unparkable fallback attach; one liveness check after the held-recovery awaits\n\nThe supervisor-side retry of a failed initial direct attach owns its bounded\noutcome, so it now opts out of reconnect parking and, on failure, rejects with\nthe control-plane close saved during the window — a daemon stop racing the\nretry reaches the caller as the authoritative reason instead of a pend or a\ngeneric socket error. Held-direct recovery revalidates once after its last\nawait (the roster re-attach): a terminal close inside the window stops the\nloop without emitting connected, and a direct loss inside it falls through to\nthe bounded session-plane rerun instead of joining the finished recovery.\n\n* fix(coding-agent): held recovery stands down for an in-flight update restoration\n\nThe post-await validation only re-derived two of the close handler's three\noutcomes, so an update close landing inside the held roster re-attach fell\ninto the bounded session-plane rerun, whose deadline could close the client\nunder the running restoration. The check now consults the handler's own\ndispatch outputs — terminalCloseEmitted, updateRestartPending, or the\nrecoverable close that joined this loop — so a window close lands in exactly\nthe branch the handler chose.","tree":"8f950a61bd2030fc1e00513705f6844c911dd246"}},{"name":"mutation-drain-latch.ts","mode":"0100644","size":1114,"lastCommit":{"hash":"3fc0ac54fad747871c0d2797bce5b21530aecffc","oid":"3fc0ac54fad747871c0d2797bce5b21530aecffc","parents":["874ca5a0f7adf81fcff73ff277313caa5798228f"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-07-30T17:38:19+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-30T17:38:19+02:00"},"message":"feat: canonical session-input scheduling with durable, queueable commands (#540)\n\n* feat(agent): stop before scheduling another turn\n\n* test(agent): remove redundant option forwarding coverage\n\n* test(agent): consolidate turn-boundary coverage\n\n* test(coding-agent): skip staged temp files in 4606 status scan\n\n* test(coding-agent): stabilize process-suite cleanup races\n\n* test(process): allow exact supervisor cleanup to settle\n\n* feat(daemon): checkpoint session inputs for restart\n\n* fix(daemon): harden restart checkpoint transactions\n\n* feat(daemon): unify session input admission\n\n* fix(daemon): complete restart transactions safely\n\n* fix(headless): surface command outcomes\n\n* fix(daemon): fence restart manifest capture\n\n* test(process): isolate daemon client environment\n\n* fix(daemon): restore checkpoint handoff state\n\n* fix(daemon): preserve admission completion contracts\n\n* fix(daemon): fence full queued turns before restart\n\n* fix(daemon): settle queued input outcomes\n\n* fix(daemon): preserve restart transaction ownership\n\n* fix(daemon): report prompt admission rejection\n\n* refactor(daemon): collapse update restart state machines\n\n* feat(coding-agent): unify session input scheduling\n\n* test(daemon): consolidate cron admission coverage\n\n* fix(daemon): bound prepare deadline and fence direct prompt acceptance\n\n* fix(headless): drain session-owned inputs before exit\n\n* fix(daemon): settle queued prompt completions\n\n* fix(daemon): fence stale commit clients and injected prompt sections\n\n* test(coding-agent): remove scheduler implementation assertions\n\n* fix(daemon): keep cleared prompts cancelled\n\n* fix(daemon): fence injected dispatch on delivery and env adoption\n\n* fix(coding-agent): harden session input admission\n\n* refactor(coding-agent): unify agent message outcomes\n\n* fix(daemon): fence injected prompts until target handoff\n\n* fix(coding-agent): align command dispatch parsing\n\n* fix(coding-agent): reject re-armed completions for delivered message ids\n\n* fix(daemon): fence admitted work during restart\n\n* fix(coding-agent): serialize command admission\n\n* fix(coding-agent): drop generated prompt-wait outcomes after completion\n\n* fix(daemon): cancel stalled restart checkpoints\n\n* fix(coding-agent): preserve queued continuation semantics\n\n* fix(daemon): preserve scheduled input contracts\n\n* fix(daemon): close restart admission before checkpoint\n\n* fix(coding-agent): avoid redundant continuation turns\n\n* fix(daemon): settle command delivery outcomes\n\n* fix(daemon): preserve merged queue checkpoints\n\n* fix(coding-agent): serialize all turn admission\n\n* test(daemon): preserve merged delivery coverage\n\n* fix(daemon): make drain cancellation terminal\n\n* fix(tui): unify durable compaction presentation\n\n* test(coding-agent): consolidate scheduler coverage\n\n* refactor(coding-agent): route TUI inputs through session admission\n\n* fix(daemon): bound message delivery outcomes\n\n* fix(daemon): preserve restart checkpoint semantics\n\n* test(tui): consolidate compaction presentation coverage\n\n* test(coding-agent): synchronize scheduler integration coverage\n\n* fix(tui): preserve admission ordering\n\n* fix(daemon): cancel pending prompt admission\n\n* fix(daemon): align admission restart integration\n\n* fix(tui): retain successful context usage\n\n* fix(coding-agent): harden queued input lifecycle\n\n* fix(tui): preserve admission errors and retry spacing\n\n* style(daemon): format combined protocol\n\n* fix(daemon): clear restart-rejected admission\n\n* fix(coding-agent): disclose non-durable compaction outcomes\n\n* refactor(coding-agent): consolidate scheduler predicates and coverage\n\n* fix(tui): preserve editor input during startup\n\n* fix(daemon): close prompt admission edge cases\n\n* fix(daemon): release stale parsed admissions\n\n* refactor(coding-agent): simplify compaction outcome handling\n\n* fix(coding-agent): harden queued prompt handoff and refine parsing\n\n* fix(tui): retry startup prompts until admitted\n\n* fix(daemon): close prompt admission races\n\n* fix(daemon): revoke late stale claims\n\n* fix(coding-agent): restore the session file after a torn outcome append\n\n* fix(coding-agent): snapshot prepared prompts adjacent to handoff\n\n* fix(tui): bound startup and follow-up admission\n\n* test(daemon): ignore private handler arity\n\n* fix(daemon): serialize replay admission\n\n* fix(compaction): preserve durable outcomes in headless mode\n\n* fix(coding-agent): suspend the input pump for update-restart aborts\n\n* refactor(tui): simplify startup prompt delivery\n\n* fix(daemon): reconcile prompt admission outcomes\n\n* test(daemon): extend fixture cleanup retries\n\n* fix(session): preserve symlinked atomic rewrites\n\n* fix(scheduler): cancel continuations at abort boundaries\n\n* fix(tui): drop superseded command paths and stop startup prompts at run exit\n\n* fix(daemon): observe cancelled admission work\n\n* fix(daemon): clear restart-rejected admission\n\n* fix(compaction): preserve merged event handling\n\n* fix(scheduler): preserve queued input ownership\n\n* fix(tui): drop submits resumed by run teardown\n\n* fix(daemon): settle admission-only work once\n\n* test(daemon): assert cron admission completion\n\n* feat(coding-agent): add session command primitives\n\n* fix(session): preserve atomic rewrite ownership\n\n* fix(scheduler): derive steering stop from live queue\n\n* fix(tui): preserve stash on lifecycle cancellation\n\n* fix(daemon): preserve steer and follow-up lanes\n\n* fix(daemon): wake checkpoint at prompt handoff\n\n* test(coding-agent): consolidate command message coverage\n\n* fix(tui): preserve transcript on rebuild failure\n\n* fix(scheduler): run checkpoints before steering stop\n\n* fix(tui): cancel startup admission on lifecycle exit\n\n* fix(daemon): preserve definitive prompt failures\n\n* fix(daemon): finish publish after owner loss\n\n* fix(coding-agent): validate command metadata consistency\n\n* fix(compaction): persist outcomes before events\n\n* fix(scheduler): hand off injected follow-ups\n\n* fix(tui): integrate side conversations with admission\n\n* test(daemon): model idle lane insertion\n\n* fix(daemon): adopt deferred attach env on rollback\n\n* fix(coding-agent): align command dispatch parsing\n\n* fix(headless): skip malformed outcome suffix entries\n\n* fix(scheduler): preserve ordered input ownership\n\n* fix(tui): retain rejected rich drafts\n\n* fix(scheduler): observe pre-aborted admission waits\n\n* fix(daemon): reserve update shutdown for publish\n\n* fix(coding-agent): keep multiline slash input literal\n\n* fix(compaction): order equal-time legacy messages after summary\n\n* test(process): sweep late supervisor owners before cleanup\n\n* test(process): terminate late exact supervisor owners\n\n* fix(agent): recheck stop after steering poll\n\n* fix(scheduler): recheck pause at direct admission\n\n* fix(tui): retain lifecycle drafts in submission order\n\n* fix(daemon): preserve client identity and safe markers\n\n* fix(agent): never drop steering drained by the stop-window poll\n\nA stop that flips during the post-tool-batch steering poll no longer ends\nthe loop when that poll returned messages; drained steering owns the turn\nboundary and is injected before the loop can stop.\n\n* fix(scheduler): invalidate queued prompt preparation on branch navigation\n\nCached before_agent_start preparation survives a deferral requeue, so a\nbranch switch during the pause could deliver extension messages prepared\nagainst the old branch. Clear queued prompt preparation when tree\nnavigation rebuilds the session context.\n\n* fix(tui): honor cancellation in pause waits and pin deferred stash release\n\n- forward the abort signal into the queued-work admission wait taken when\n a pause appears between admission acquire and the ownership commit, so\n a cancelled prompt rejects instead of blocking until the pause clears\n- capture the stash session id and state when a release is deferred by\n in-flight submissions, so a /new rebind cannot redirect the deferred\n release at the new session's state\n- align the prompt-stash submit harness with the submission fields so the\n draft-retention paths run instead of throwing on missing state\n\n* fix(daemon): keep cancelled admissions definitive across repeated cancels\n\nA second cancel_prompt_admission for an already-cancelled admission now\nshort-circuits with cancelled instead of forwarding to the worker, and a\nworker unknown response can no longer downgrade a cancellation that\nraced in during the round-trip.\n\n* fix(coding-agent): require dispatch proof before releasing the prompt fence\n\nAgent.prompt() resolves even when a lifecycle listener failure produced a\nsynthetic error turn without the injected message ever reaching agent\nstate. Treat a resolved prompt as dispatched only when the dispatch\nobserver fired or the message is present in agent state, so the direct-\nprompt checkpoint section cannot release with the accepted input missing\nfrom both the queue and the run.\n\n* chore(scheduler): tighten fix comments\n\n* chore(tui): tighten fix comments\n\n* chore(agent): tighten fix comments\n\n* chore(daemon): tighten fix comments\n\n* chore(coding-agent): tighten fix comment\n\n* test(agent): flip the stop only on the post-tool-batch steering poll\n\nThe pre-loop poll also set stopRequested, so the pre-steering check\nstopped the loop and the post-empty-poll recheck under test never ran.\nVerified the test now fails when the recheck is removed.\n\n* fix(scheduler): treat pump-owned work as busy for post-compaction continue\n\nThe continuation timer only checked pendingMessageCount, but the pump\nmoves items into _activeSessionInput before handoff, so the timer could\ncall agent.continue() and forget continuations the pump still owned.\nIdle now also requires no active input, no running pump, and no pump\nrequest.\n\n* fix(tui): bind barrier-paused submissions to their original session\n\nA submit paused on the startup-prompt barrier could resume after /new\nrebound the live stash fields, delivering the prompt to and stashing the\ndraft in the wrong session. The submission now captures its session and\nstash state up front, bails out of prompting when the session changed,\nand retains drafts in the captured state.\n\n* fix(scheduler): let queueIfBusy join pending work at direct admission\n\nDirect-turn admission drained queued work before queueIfBusy callers\ncould see it, so heartbeats and accepted agent messages blocked until\nthe queue emptied and then started direct turns. Admission now returns\nimmediately for queueIfBusy callers (allowPendingQueue) and preflight\nenqueues behind the pending work, which also removes the pump-reschedule\nspin while the queue is blocked by bash/compaction/retry.\n\n* chore(agent): tighten test comment\n\n* chore(tui): tighten fix comments\n\n* chore(scheduler): tighten fix comments\n\n* fix(compaction): retain unpersisted outcome disclosures across rebuilds\n\nAn outcome whose session-file append failed lived only in live agent\nstate, so transcript rebuilds from buildSessionContext dropped the\ndisclosure. Failed appends are now retained and appended to rebuilt\ncontexts.\n\n* fix(tui): observe admission cancellation on the streaming prompt path\n\nWhile streaming, _prompt skips direct-turn admission, so an aborted\nadmission signal was never checked and a cancelled startup prompt could\nstill enqueue into a session the user already left. The streaming path\nnow treats its entry as the commit point and rejects already-aborted\nprompts.\n\n* fix(compaction): keep unpersisted outcome disclosures in transcript order\n\nRebuilds appended retained disclosures after every persisted message, so\nturns persisted after the failed append rendered above the notice. The\ndisclosures now merge into the rebuilt context by timestamp.\n\n* fix(daemon): gate admission cancellation on a minimum schema revision\n\nschemaRevision is monotonic, but the admission gates compared it with\nexact equality, so a newer daemon failed signal-backed prompt\ncancellation against an older client even while still advertising\nprompt_admission_cancellation. Both gates now require a minimum\nrevision, matching the protocol.version check.\n\n* fix(compaction): keep unpersisted outcome disclosures across state reloads\n\nSuccessful compaction and tree navigation reload agent.state.messages\nfrom the session file, which dropped disclosures that only exist in\nmemory after a failed append. The timestamp merge now runs on every\nrebuild path via a shared helper.\n\n* chore(tui): tighten fix comment\n\n* chore(daemon): drop redundant gate comment\n\n* chore(compaction): tighten fix comments\n\n* fix(scheduler): treat a skipped compaction as benign in queued commands\n\nA too-short or already-compacted /compact throws CompactionSkippedError,\nwhich compaction_end already surfaces as a warning; the queued-command\nexecutor also recorded a durable 'Command failed' error row for the same\nskip. The executor now ignores the skip.\n\n* fix(daemon): re-validate field-gated requests before reconnect replay\n\nA prompt carrying admissionId that was pending across a reconnect was\nreplayed without re-checking the new daemon_hello, so a replaced or\ndowngraded daemon would silently ignore the admission field and take\nownership of an uncancellable prompt. Pending requests now remember\ntheir schema requirement and reject with the capability error when the\nnew hello no longer satisfies it. Also awaits the newer-revision test's\nrequest so closing the client cannot leak an unhandled rejection.\n\n* fix(tui): keep every deferred prompt-stash release across rebinds\n\nA teardown release after a /new rebind overwrote the pending release\npair captured at the original deferral, so the first session's stash\nstate was never released. Deferred releases now accumulate per session\nand all drain once pending submissions settle.\n\n* fix(tui): restore the compaction loader without a start-event edge\n\nThe compaction spinner was created only on the compaction_start event,\nso a compaction already running when the client attached or returned to\nthe chat (e.g. a /compact queued from the agents view) showed no\nprogress at all until it finished. syncWorkingLoader now restores the\nloader from the connection's isCompacting state, and the loader\ncreation is shared with the event path. Adds core coverage proving the\ncompaction lifecycle events fire for /compact queued behind a running\nturn on both lanes.\n\n* test: consolidate scheduler tests into e2e scenario journeys\n\nReplace ~50 fine-grained scheduler test cases with 7 end-to-end scenario\ntests (S1-S7) that drive the real AgentSession through gated faux-model\nruns with staged, phase-labeled assertions:\n\n- S1: mid-run steering/follow-up/command/custom input ordering\n- S2: queue editing (coalescing, removal APIs, steering-stop reconciliation)\n- S3: pause-lease preparation with anchor re-preparation and direct handoff\n- S4: update-restart abort snapshots and envelope-vs-literal restore\n- S5: queued command delivery vs gated completion outcomes\n- S6: auto-refine via real turns (interval review, busy deferral, branch\n navigation invalidation) instead of _maybeAutoRefine internals\n- S7: accepted agent-message lifecycle (busy queueing, delivery-before-\n completion, literal slash commands, cleared-during-admission cleanup)\n\nAlso shrink the 300-iteration outcome-leak loop to 3, drop a typeof-only\nassertion, redundant whitespace-variant and duplicate guard tests.\n\nWhite-box tests for admission-boundary races, cooldown stamping, and\nfault-injection windows are kept; those interleavings have no public\ntrigger. Coverage on agent-session.ts is unchanged (59.7% lines before\nand after) at -516 net test lines.\n\n* fix: close session-input scheduler race windows around admission and restart checkpoints\n\nThree bugbot findings on the scheduler plus one hardening pass:\n\n- promptUntilAccepted no longer waits for the session-input pump after\n admission: it resolves at ownership commit while queued work (including\n slash commands) executes, restoring its documented contract.\n- waitForSessionInputCheckpoint now waits for an executing queued session\n command; the pump shifts commands off the queue before running them, so\n a restart snapshot could otherwise proceed mid-/compact or /refine and\n drop the command from durable queued input.\n- The queued-prompt handoff holds a checkpoint section until dispatch is\n observed. The phase flipped to handedOff (notifying checkpoint waiters)\n before agent.prompt() ran, so a checkpoint could drain a stale event\n queue snapshot and flush before the accepted messages persisted.\n- waitForPromiseOrAbort rechecks signal.aborted after registering its\n abort listener, matching waitForPromptAdmission.\n\nEach fix has a regression test verified to fail against the unfixed code.\n\n* chore: trim comments in scheduler scenarios and race fixes\n\n* fix: fence triggerTurn custom messages for restart checkpoints\n\nsendCustomMessage with triggerTurn took direct-turn admission but never\nentered a direct prompt section, so waitForSessionInputCheckpoint could\nsnapshot between admission and dispatch and miss the in-flight turn.\nHold a checkpoint section from admission until the message dispatches,\nmirroring the queued-handoff fence.\n\n* fix: keep pump-owned session inputs visible as pending\n\nWhen the session-input pump moved prompts or commands into\n_activeSessionInput, they left the typed queues before delivery, so\npendingMessageCount, queue previews, snapshots, and queue_update briefly\nreported an empty queue during preparation and long-running queued\ncommands, and agent-message backpressure undercounted.\n\nCount still-preparing prompts and executing commands as pending, emit\nqueue updates at prompt handoff and command completion, and clear\nownership before the deferred-requeue emit so items are not\ndouble-counted.\n\n* fix: harden durable command persistence and cleared-input accounting\n\nTwo bugbot findings on the queued session-command path:\n\n- _appendDurableSessionCommandMessage now persists through\n appendCustomMessageEntryWithRollback before touching live state, so a\n failed write cannot leave an unsaved leaf or a transcript/file\n divergence; the failure-row append no longer masks the original\n command error.\n\n- clearQueue marks the preparing active input cancelled;\n _undeliveredActiveSessionInputs now excludes cancelled items so\n pendingMessageCount, previews, and queue updates drop cleared work\n immediately instead of waiting for the pump to unwind.\n\n* fix: stop coalescing follow-up keys against handed-off prompts\n\nFollow-up queueKey coalescing treated all _activeSessionInput prompt\nitems as pending owners. After handoff the prompt is committed to the\nrunning turn, so a later same-key follow-up (e.g. a heartbeat) was\nrejected for the rest of that turn instead of queueing behind it.\nCoalesce only against a preparing, non-cancelled active input, shared by\n_enqueueSessionInput and hasQueuedFollowUp.\n\n* fix: count session-owned queues as queued work after compaction\n\nPost-compaction decisions only consulted agent.hasQueuedMessages(), but\nqueued prompts and commands now live in the session-owned steer and\nfollow-up queues. Include pendingMessageCount so auto-refine defers to\nthe next turn boundary instead of running before queued input turns,\nand post-compaction continue is scheduled when only session-owned work\nis waiting (manual, auto, and failure-resume paths).\n\n* fix(daemon): centralize prompt admission compatibility\n\n* fix(daemon): recheck command compatibility on replay","tree":"804061a0c8266a29e281e2b1f09dacb8245c7ab4"}},{"name":"rlm-ledger.ts","mode":"0100644","size":35291,"lastCommit":{"hash":"a4bc34d8fbffde6e90b1966563980f19b679b835","oid":"a4bc34d8fbffde6e90b1966563980f19b679b835","parents":["6d2a1eaac18ce638199a08733d20b8fdfc99ad98"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T09:19:59+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T09:19:59+03:00"},"message":"fix(coding-agent): reconcile the auth and daemon clusters with the fork's design\n\nAuth:\n- credential resolution fails closed: a provider with stored credentials\n that none of them can supply no longer falls through to an ambient\n environment key, which silently charged XAI_API_KEY after a failed\n subscription refresh (ENG-6059)\n- upstream's Prime Inference import/isolation suite asserted the opposite\n of this fork's Prime CLI bridge, so it is replaced by a suite for what\n this fork ships: a `prime login` makes Prime Inference usable here, and\n no CLI config is read when the bridge is off\n\nDaemon:\n- the supervisor test runner inherited PRIME_AGENT_INTERNAL_DAEMON_WORKER\n from the parent, so the spawned supervisor booted in worker mode and\n never sent daemon_hello; the spawn now uses the suite's fixture env\n- restore the fork's artifact-dir scheduled-job index (scheduledJobSessionPaths\n plus the ledger's onlyPaths filter) that the rebase had traded for\n upstream's family(metadataArtifact) scan, and keep the fallback walk\n filtered to conventionally named transcripts so boot does not fold a\n large catalog to list armed heartbeats\n","tree":"6b2852a1f832104f3a3d452dc5d7982d6e27f335"}},{"name":"rlm-subagent-display.ts","mode":"0100644","size":3532,"lastCommit":{"hash":"2ce443175b55a32075aa23ae41676a16b771d662","oid":"2ce443175b55a32075aa23ae41676a16b771d662","parents":["8a1e958008894705326de541b48e7d158b49ac4f"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-07T05:14:48+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-06T23:14:48-04:00"},"message":"fix: improve Windows session and Python reliability (#2036)\n\n* fix(coding-agent): resolve the kernel venv python under Scripts on win32\n\nuv creates /Scripts/python.exe on Windows, but both bootstrap sites\njoined /bin/python unconditionally, so first-run kernel bootstrap\nalways failed on native Windows. Mirror the existing win32 uv.exe branch\nwith one kernelVenvPython helper used at both sites.\n\n* fix(coding-agent): expand ~/ with the platform path separator\n\nTilde expansion concatenated homedir() with the posix remainder at three\nsites (expandPath, expandTildePath, and an inline PI_PACKAGE_DIR copy),\nproducing mixed-separator paths like C:\\Users\\u/rest on Windows. Join\nthrough the platform path module instead and route PI_PACKAGE_DIR through\nexpandTildePath.\n\n* fix(coding-agent): prefer non-System32 bash over the WSL trampoline on PATH\n\nfindBashOnPath took the first where-match, and System32\\bash.exe (the WSL\nlauncher, which executes Linux-side) precedes per-user Git Bash installs on\ndefault PATHs. Order matches so %SystemRoot% entries are only a last\nresort.\n\n* fix(coding-agent): dial the Herdr socket inside the named-pipe namespace on win32\n\nThe built-in Herdr reporter connected to the exported unix-style socket\npath verbatim; on Windows a local-domain connection must target\n\\\\.\\pipe\\, and the reporter swallows connect errors by design, so the\nmismatch was invisible. Map unmapped paths into the pipe namespace before\ndialing.\n\n* fix(coding-agent): cache the win32 process start id per pid for a short TTL\n\ngetWindowsProcessStartId spawns a synchronous powershell query that blocks\nthe event loop, and supervisor liveness checks plus daemon-ps poll loops\ncall it repeatedly for the same pid. Memoize successful ids for 5s so hot\npaths reuse one query.\n\n* fix(coding-agent): derive handshake budgets from the outer connect deadline\n\nconnectWorker granted every hello/worker_auth attempt a fixed 1s clock, so\na handshake that consistently needs longer (slow win32 boxes) failed every\nretry regardless of the 30s outer budget, and the adopt/recover paths\nshrank even the outer budget to 1.5-2s. Per-attempt waits now consume the\nremaining outer deadline, all connectWorker callers use the one 30s\nconstant, and the downward 1s hello/auth overrides in daemon-mode and the\nrouted client fall back to the client defaults.\n\n* fix(coding-agent): route background spawns through hidden-window wrappers\n\nwindowsHide defaults to false, so console-subsystem children of a\nwindowless daemon or detached worker allocate a fresh console and flash or\nsteal focus on every spawn; only one call site in the repo set the flag.\nAdd spawnHidden/spawnSyncHidden/execSyncHidden/execFileHidden/\nexecFileSyncHidden to utils/child-process.ts and migrate all 49\nnon-interactive coding-agent spawn/exec sites; the tui package's two\nbackground spawns set windowsHide inline. Interactive spawns (editors,\ninherit-stdio installers and relaunches) intentionally keep their console.\n\n* chore(coding-agent): add windows-seams changelog fragments; tighten new comments\n\n* test(coding-agent): align clipboard and login-dialog spawn assertions with hidden-window wrappers\n\n* revert(coding-agent): drop the win32 start-id TTL cache\n\nThe per-pid cache could hand a recycled pid the dead process's start id\nfor up to 5s. The start id exists solely to detect pid recycling, and its\nconsumers act on that identity: the orphan-process journal decides\ntaskkill /T from it and daemon-ps shutdown waits poll it for change, so a\nstale match can kill a replacement process tree or mask an exited owner.\nNo caller is both hot and staleness-tolerant; the handshake latency issue\nis already addressed by deriving budgets from the outer deadline.\n\n* fix(coding-agent): match Herdr pipe-namespace prefixes case-insensitively\n\nWindows pipe names are case-insensitive, but the pass-through check was\ncase-sensitive, so a valid \\\\.\\PIPE\\... target was re-joined into a\ndifferent pipe name and the error-swallowing reporter failed silently.\nLowercase only the prefix check; the returned path keeps its casing.\n\n* refactor(coding-agent): tighten windows-seam comments and consolidate pins\n\nCollapse the wrapper doc block to one line, drop test comments that restate\nassertions, share one recording wrapper in the child-process mock, unwrap\nsingle-test describes, and remove one posix assertion already covered by\nits sibling. No behavior coverage removed; all pins keep their failing\nassertions.\n\n* fix(coding-agent,tui): harden current-runtime Windows sessions\n\nImport selective Bun-independent fixes from #1994 at\nce2d04f872ae7df567e68695aa258a1a5cdf254c, relative to declared\n#1982 base 9680ac3dfa8bdafae0f9e53286e2274d8b9c9090.\n\nPreserve #2036 Windows seams and current Node runtime. Keep Bun,\ninstaller, shell-policy rollout, scratch directories, and CPython\nbatch overrides outside this consolidation. #1994 remains partial.\nAtomic writer and bootstrap-lock overlap awaits canonical #2035\nreconciliation after parent stacks land.\n\n* fix(coding-agent): normalize Windows bash candidate paths\n\n---------\n\nCo-authored-by: Seth ","tree":"d8a9dec4332c83f71b05ba702c027932cab8ac19"}},{"name":"saved-session-catalog.ts","mode":"0100644","size":3428,"lastCommit":{"hash":"e41e55f2da320ed324e7bae6fde1043d3d83ad9b","oid":"e41e55f2da320ed324e7bae6fde1043d3d83ad9b","parents":["6e1c74a85086204e714665a3a51adee0c23b8fc0"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T09:29:01+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T09:29:01+03:00"},"message":"fix(coding-agent): close the tray and catalog leftovers\n\n- the tray ticker reads the goal state defensively, so a session without\n one does not throw while re-rendering\n- listing saved sessions asks the client for its stream-only capability\n only when the client answers that question, so a minimal transport\n still lists the catalog instead of failing the scan\n- unglue the recap-currency tests the rebase had nested inside another\n test body\n","tree":"1ce91f229b9f9116ad040000ff46460b075911ab"}},{"name":"saved-session-info.ts","mode":"0100644","size":1395,"lastCommit":{"hash":"163dd5798cd40e86b540aa9ecb68201920a83a1b","oid":"163dd5798cd40e86b540aa9ecb68201920a83a1b","parents":["d4bc773d85348220b9134a646bcaa03b3bba74d2"],"author":{"name":"Sebastian Müller","email":"sebastian@primeintellect.ai","when":"2026-09-10T11:30:41+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-10T11:30:41+02:00"},"message":"agents view: show the recorded model on inactive sessions (#2148)\n\n* show the recorded model on inactive agents-view rows\n\n* show the recorded model in the actions panel for inactive rows","tree":"d1c6ebff4a1edb39dda6595f48977f1faae3537a"}},{"name":"snapshot-transcript-cache.ts","mode":"0100644","size":8044,"lastCommit":{"hash":"9661a1151525d5c967ec43774736eb14a39dc12a","oid":"9661a1151525d5c967ec43774736eb14a39dc12a","parents":["878410b3981f20c6d685faa210ad0e43426cf483"],"author":{"name":"Florian Brand","email":"46377542+xeophon@users.noreply.github.com","when":"2026-09-13T21:33:13+02:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-13T21:33:13+02:00"},"message":"fix(coding-agent): opening busy sessions no longer re-transfers the full transcript (#2260)\n\n* fix(coding-agent): replay withheld session events instead of re-transferring snapshots\n\nOpening a long live session re-sent the full transcript every time an event\narrived during the snapshot stream: the worker and supervisor withheld the\nevent, then streamed a whole fresh snapshot as a catch-up, so a busy session\nchained several full-transcript passes per attach. Withheld frames now\nreplay incrementally after the stream completes, the client defers events\nbetween attach and the first render instead of re-fetching get_messages,\nand resync/rebuild renders keep the initial open's transcript cap.\n\n* fix(tui): re-render only images when cell dimensions change\n\nThe cell-size response invalidated every component cache, so on\nimage-capable terminals the whole transcript re-parsed markdown once more\nafter startup. Images now keep the cell-dimensions version in their cache\nkey and a cell-size response re-renders only them.\n\n* fix(coding-agent): address deferred session review feedback (fixes #2260)\n\n* perf: streamline busy-session snapshots and rendering (fixes #2260)\n\n* fix: bound deferred event recovery and relay buffers (fixes #2260)\n\n* fix: cancel snapshots before forwarding session close (fixes #2260)\n\n* fix: discard superseded renders and snapshot attaches (fixes #2260)\n\n* fix: stop snapshot handling and recovery after closure (fixes #2260)\n\n* fix(coding-agent): bound snapshot deferral and preserve event order; fixes #2260\n\n* fix(coding-agent): release deferred updates after render and attach failures; fixes #2260\n\n* fix(coding-agent): reserve catch-up snapshots before capture; fixes #2260\n\n* fix(coding-agent): retain recovery gaps until snapshots succeed; fixes #2260\n\n* fix(coding-agent): isolate session catch-up failures; fixes #2260\n\n* fix(coding-agent): preserve notices and dialogs through snapshot recovery; fixes #2260\n\n* fix(coding-agent): retain extension prompts until subscription; fixes #2260\n\n* fix(coding-agent): discard stale prompts on update restart; fixes #2260\n\n* fix(coding-agent): bound pending extension UI requests; fixes #2260\n\n* fix(coding-agent): freeze deferred streaming events; fixes #2260","tree":"862f6a7e1b39b6129c923622c3f96cdade805c51"}},{"name":"supervisor-link.ts","mode":"0100644","size":4868,"lastCommit":{"hash":"f87021bf2de379855e0bedc55ac67bad57d825a0","oid":"f87021bf2de379855e0bedc55ac67bad57d825a0","parents":["2a461b0de77c47d780639c680ca898939a9afda2"],"author":{"name":"Seth Karten","email":"32787133+sethkarten@users.noreply.github.com","when":"2026-09-14T02:53:36-04:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-09-14T08:53:36+02:00"},"message":"[RSI] Persistent SupervisorLink for cross-worker requests (#2242)\n\n* perf(daemon): persistent SupervisorLink for cross-worker requests\n\nEvery cross-worker interaction in daemon-mode.ts opened a fresh\nsupervisor connection - connect, hello, request, close - per call:\neach agent-to-agent message, every roster peer read, every\nrlm.create_session, and every worker-local rename. The supervisor\nhandled N transient connections per worker instead of one.\n\n- New SupervisorLink (modes/daemon/supervisor-link.ts): one persistent\n connection per daemon process, multiplexed requests, single-flighted\n connects, teardown on socket close so the next request reconnects.\n Requests are NEVER retried in-flight: daemon commands like create\n and send_message are not idempotent, so a rejected or timed-out\n request must not resend. Call sites keep their own error handling\n and fallbacks.\n- sendRemoteAgentSessionMessage keeps its 30s supervisor-startup window\n but only around connection establishment; the message itself is sent\n exactly once. The link no longer requires a worker token, matching\n the old anonymous-client path.\n- createRlmRootSession, listSupervisorAgentPeers, and\n setStateSessionNameViaSupervisor route through the link.\n- AgentDaemon.shutdown closes the link (no fd leak on worker exit).\n- Tests: SupervisorLink unit tests (reuse, single-flight, reconnect\n after close, no-retry contract, close() semantics); fake-supervisor\n cleanups in daemon-mode.test.ts now destroy lingering link sockets\n (server.close() waits for open connections, which hangs tests).\n\n* docs: changelog fragment for SupervisorLink (ENG-6097)\n\n* fix(daemon): SupervisorLink handshake cleanup, socket-scoped teardown\n\nReview findings from Cursor Bug Bot (all valid):\n\n- ensureConnected leaked the inner DaemonClient when connect or\n waitForHello failed: DaemonClient fires onClose only after a\n successful connect, so a failed handshake must close its own socket.\n- request() tore down the shared link on ANY error, including command\n timeouts; concurrent multiplexed requests on a healthy socket were\n killed. Teardown now happens only for DaemonSocketClosedError - the\n socket-level failure class - while command-level failures leave the\n link serving other in-flight requests.\n- The class header still narrated the removed in-flight retry; it now\n states current behavior only.\n\nTests: handshake failure closes the client (leak regression); a failed\nrequest keeps the healthy socket while a socket-death error tears\ndown and reconnects.\n\n* fix(daemon): close mid-handshake supervisor connections during teardown\n\nMacroscope review (valid): AgentDaemon.shutdown -> SupervisorLink.close()\nonly closed the published client; a client still inside connect() or\nwaitForHello() was invisible to teardown, leaving the worker's socket\nopen at SIGTERM. Track pendingClient during the handshake; teardown and\nclose() close it, and a handshake that completes against a torn-down\nlink fails instead of publishing a dead client.\n\nThe two connection-accumulation findings describe the pre-fix handshake\npath (fixed in 429b24c31 and covered by the \"closes the client when\nthe handshake fails\" test); the orphan-window finding is pre-existing\non connection loss mid-create and unchanged by this link.\n\n* fix(daemon): keep single-flight reconnect when a handshake settles late\n\nMacroscope review (valid): when teardown cleared this.connecting during a handshake, a later caller installed a newer in-flight promise, and the earlier attempt finished by unconditionally clearing it. A third caller then opened a second concurrent connection while the newer handshake stayed pending and unjoined. Only clear this.connecting when it still refers to the promise this awaiter awaited.\n\nAlso updates the request() contract doc (Cursor review): only DaemonSocketClosedError tears the link down; command-level failures keep the shared connection serving other in-flight requests.\n\nTests: deterministic reconnect-race regression - a third caller must join the newer in-flight handshake instead of opening a third connection - with every wait bounded by withTimeout so a hang fails the test.","tree":"c8c412041584a5ecf278afab2ad91466a16206b1"}},{"name":"worker-recovery-journal.ts","mode":"0100644","size":2737,"lastCommit":{"hash":"4d19005d4a25b10ce6d90fdd4961ed374c64ea17","oid":"4d19005d4a25b10ce6d90fdd4961ed374c64ea17","parents":["461bae098e0eec5cd03c3d63453ddd86222ed03a"],"author":{"name":"kt","email":"kevin.jt2007@gmail.com","when":"2026-07-13T17:47:15-07:00"},"committer":{"name":"GitHub","email":"noreply@github.com","when":"2026-07-13T17:47:15-07:00"},"message":"isolate daemon sessions in worker processes (#383)\n\n* perf(coding-agent): add large daemon attach benchmark\n\n* feat(coding-agent): isolate session execution in workers\n\n* fix(coding-agent): reconnect after supervisor replacement\n\n* fix(tui): preserve input across fullscreen handoff\n\n* fix(coding-agent): prevent archived heartbeat revival\n\n* fix(coding-agent): cancel orphan heartbeat sessions\n\n* fix(tui): preserve drafts across daemon refreshes\n\n* fix(coding-agent): separate daemon resyncs from replacements\n\n* fix(coding-agent): stabilize daemon streaming ui\n\n* refactor(coding-agent): remove obsolete subagent tree\n\n* feat(coding-agent): show subagent recaps inline\n\n* fix(coding-agent): refine subagent summary spacing\n\n* fix(coding-agent): preserve full subagent row selection\n\n* fix(coding-agent): align subagent summary rows\n\n* fix(coding-agent): preserve reasoning during daemon resync\n\n* fix(coding-agent): isolate heartbeat scheduling per worker (ENG-4527)\n\n* fix(coding-agent): retry partial daemon reconnects\n\n* fix(coding-agent): harden isolated daemon recovery\n\n* fix(coding-agent): close daemon recovery races\n\n* fix(coding-agent): validate daemon recovery state\n\n* fix(coding-agent): close isolated worker recovery gaps\n\n* fix(coding-agent): verify orphan process identity\n\n* fix(coding-agent): isolate worker client capabilities\n\n* fix(coding-agent): preserve daemon terminal ordering\n\n* fix(coding-agent): serialize durable daemon state\n\n* fix(coding-agent): avoid duplicate worker recovery\n\n* fix(coding-agent): isolate peer sync failures\n\n* fix(coding-agent): fail unanswered rpc commands\n\n* fix(coding-agent): distinguish lease contention","tree":"a3a976aeaaad976da0a455ac277039862d2c6da8"}}],"lastCommit":{"hash":"9e09089b2ac775e427e112e948d2aca2d3b55043","oid":"9e09089b2ac775e427e112e948d2aca2d3b55043","parents":["b829ea92a84e0e787689dc000360a06cffb7f104"],"author":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"committer":{"name":"dawn","email":"90008@klbr.net","when":"2026-09-17T22:18:11+03:00"},"message":"fix(coding-agent): attribute worker exit reasons and defer heartbeat stops for busy workers\n","tree":"cedf930b57fc3e150d50a7b537bd3366853c2ed0"}}