Add session controller and root locks

[luokerenx4]

Summary

Add two explicit ownership layers for workspace sessions:

• Add a launcher-root process lock (state/runtime.lock) so two Alice backend processes cannot mutate the same workspace/session state root at the same time.
• Add session controller ownership to PersistentSession.attach() so a session has one active controller unless another client explicitly takes over.
• Pass controller identity through both browser WebSocket PTY and Electron IPC PTY transports.
• Show a locked terminal state instead of reconnecting forever, with a take over action for explicit control transfer.
• Make pnpm dev wait for Alice readiness before starting Vite, so a locked/failed Alice backend does not look like an /api/auth/status proxy/auth failure.

Why

Desktop/app mode exposed a deeper ownership problem: multiple frontends, future IM bridges, or multiple backend processes can all try to control the same agent runtime. The old model silently let the latest attach kick the prior one, while two backend processes sharing the same launcher root could corrupt session state through boot fixup and registry writes.

This PR separates the layers:

• process lock = only one Alice backend owns a launcher root;
• controller lease = only one interaction endpoint controls a live PTY session;
• takeover = explicit user/operator action, not accidental last-writer-wins.

Validation

• TDD red/green for root lock and session controller ownership.
• pnpm vitest run src/workspaces/process-lock.spec.ts src/workspaces/persistent-session.spec.ts
• npx tsc --noEmit
• cd ui && npx tsc -b
• npx tsc -p apps/desktop/tsconfig.json --noEmit
• pnpm test
• git diff --check

Notes

If Electron is already running on the default data/workspace root, pnpm dev is expected to fail to start Alice unless the dev run uses an isolated OPENALICE_HOME and AQ_LAUNCHER_ROOT. The dev guardian now surfaces that as an Alice startup/root ownership problem instead of letting Vite emit misleading auth proxy errors.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
openalice-demo	Ready	Preview, Comment	Jul 3, 2026 4:22pm