@adhdev/daemon-core 0.9.82-rc.26 → 0.9.82-rc.260

package/dist/shared-types.d.ts

@@ -14,6 +14,7 @@ import type { ActiveChatData as _ActiveChatData, ProviderErrorReason as _Provide
 import type { WorkspaceEntry } from './config/workspaces.js';
 import type { ProviderMeshCoordinatorConfig, ProviderResumeCapability } from './providers/contracts.js';
 import type { GitCompactSummary, GitWorkspaceUpdate, WorkspaceGitSubscriptionParams } from './git/git-types.js';
+import type { InteractivePrompt } from './providers/types/interactive-prompt.js';
 export type { GitCommandName, GitCompactSummary, GitDiffSummary, GitFailureReason, GitFileChange, GitFileChangeStatus, GitRepoIdentity, GitRepoStatus, GitSnapshot, GitSnapshotCompareSummary, GitSnapshotReason, GitWorkspaceUpdate, WorkspaceGitSubscriptionParams, } from './git/git-types.js';
 export interface SessionActiveChatData extends Omit<_ActiveChatData, 'messages'> {
     messages?: _ActiveChatData['messages'];
@@ -49,6 +50,14 @@ export interface ReadChatSyncResult {
         message: string;
         buttons: string[];
     } | null;
+    activeInteractivePrompt?: InteractivePrompt | null;
+    /**
+     * Chat source provenance from ChatSourceMachine (A2). Carries the
+     * selected source, transition cause, lock state, and legacy
+     * fallbackReason — opaque to the daemon-core, consumed by web-core
+     * for the source debug badge and SourceTimeline (A3).
+     */
+    messageSource?: Record<string, unknown>;
 }
 export interface ProviderSummaryItem {
     id: string;
@@ -268,6 +277,7 @@ export interface SessionEntry {
     runtimeRecoveryState?: string | null;
     resume?: ProviderResumeCapability;
     activeChat: SessionActiveChatData | null;
+    activeInteractivePrompt?: InteractivePrompt | null;
     capabilities?: SessionCapability[];
     /** Effective message input/media support for this session. Defaults fail-closed to text-only. */
     messageInput?: MessageInputSupport;
@@ -292,6 +302,11 @@ export interface SessionEntry {
     seenCompletionMarker?: string;
     surfaceHidden?: boolean;
     settings?: Record<string, any>;
+    /** Set when this session is acting as a mesh coordinator for the given mesh. */
+    coordinator?: {
+        meshId: string;
+        role: 'coordinator';
+    };
     meshQueueStats?: {
         total?: number;
         active?: number;
@@ -410,7 +425,33 @@ export interface AvailableProviderInfo {
     lastVerification?: MachineProviderCheckResult;
     /** Provider-declared Repo Mesh coordinator/MCP behavior. */
     meshCoordinator?: ProviderMeshCoordinatorConfig;
-}
+    /**
+     * Provider trust classification — derived from the on-disk layer the
+     * manifest came from and the shape of the manifest. Dashboards use
+     * this to render a trust badge and gate activation of
+     * `external-untrusted` providers behind a confirm modal.
+     */
+    trust?: ProviderTrust;
+    /** Daemon-side human-readable description of the trust value. */
+    trustDescription?: string;
+    /** True when activation needs a user-side confirmation step. */
+    requiresConfirmation?: boolean;
+    /** Which on-disk layer the manifest lives in. */
+    sourceLayer?: 'user' | 'upstream' | 'external';
+    /** For external providers, the source-name namespace it came from. */
+    sourceName?: string | null;
+    /** Manifest-declared version, e.g. "1.2.1". */
+    providerVersion?: string;
+    /** Underlying executable name (CLI/binary providers). */
+    binary?: string;
+    /** Lifecycle label from the manifest: "Stable", "Beta", … */
+    status?: string;
+    /** One-line provider description from the manifest. */
+    details?: string;
+    /** Manifest-declared links: homepage, docs, repo, … */
+    links?: Record<string, string>;
+}
+export type ProviderTrust = 'user-custom' | 'trusted' | 'trusted-with-scripts' | 'external-safe' | 'external-untrusted';
 export interface MachineProviderCheckResult {
     ok: boolean;
     stage?: 'detection' | 'runnable' | 'verification';

package/dist/status/normalize.d.ts

@@ -1,6 +1,6 @@
 import type { ActiveChatData } from '../providers/provider-instance.js';
 import type { SessionActiveChatData } from '../shared-types.js';
-export type ManagedStatus = 'idle' | 'generating' | 'waiting_approval' | 'error' | 'stopped' | 'starting' | 'panel_hidden' | 'not_monitored' | 'disconnected';
+export type ManagedStatus = 'idle' | 'generating' | 'waiting_approval' | 'waiting_choice' | 'error' | 'stopped' | 'starting' | 'panel_hidden' | 'not_monitored' | 'disconnected';
 export interface NormalizeActiveChatOptions {
     includeMessages?: boolean;
     includeInputContent?: boolean;

package/dist/status/normalize.js

@@ -119,6 +119,7 @@ function normalizeManagedStatus(status, opts) {
   if (hasApprovalButtons(opts?.activeModal)) return "waiting_approval";
   const normalized = String(status || "idle").trim().toLowerCase();
   if (normalized === "waiting_approval") return "waiting_approval";
+  if (normalized === "waiting_choice") return "waiting_choice";
   if (WORKING_STATUSES.has(normalized)) return "generating";
   if (normalized === "error") return "error";
   if (normalized === "stopped") return "stopped";

package/dist/status/normalize.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/status/normalize.ts"],"sourcesContent":["import type { ActiveChatData } from '../providers/provider-instance.js';\nimport type { SessionActiveChatData } from '../shared-types.js';\n\nexport type ManagedStatus =\n    | 'idle'\n    | 'generating'\n    | 'waiting_approval'\n    | 'error'\n    | 'stopped'\n    | 'starting'\n    | 'panel_hidden'\n    | 'not_monitored'\n    | 'disconnected';\n\nconst WORKING_STATUSES = new Set([\n    'generating',\n    'streaming',\n    'loading',\n    'loading_reference',\n    'thinking',\n    'active',\n]);\n\nexport interface NormalizeActiveChatOptions {\n    includeMessages?: boolean;\n    includeInputContent?: boolean;\n    includeActiveModal?: boolean;\n    messageLimit?: number;\n    totalBytesLimit?: number;\n    stringLimit?: number;\n    fallbackStringLimit?: number;\n}\n\n// Full snapshots are still capped, but can carry recent chat context for API/inspection use.\nconst FULL_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: true,\n    includeInputContent: true,\n    includeActiveModal: true,\n    messageLimit: 60,\n    totalBytesLimit: 96 * 1024,\n    stringLimit: 4 * 1024,\n    fallbackStringLimit: 1024,\n};\n\n// Live/metadata snapshots only need routing + UI summary. Current chat text is loaded\n// on demand via `read_chat`, and older history via `chat_history`.\nexport const LIVE_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: false,\n    includeInputContent: false,\n    includeActiveModal: false,\n    messageLimit: 0,\n    totalBytesLimit: 0,\n    stringLimit: 512,\n    fallbackStringLimit: 256,\n};\n\nconst STATUS_MODAL_MESSAGE_LIMIT = 2 * 1024;\nconst STATUS_MODAL_BUTTON_LIMIT = 120;\n\nfunction truncateString(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(0, Math.max(0, maxChars));\n    return `${value.slice(0, maxChars - 12)}...[truncated]`;\n}\n\nfunction truncateStringTail(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(value.length - Math.max(0, maxChars));\n    return `...[truncated]${value.slice(value.length - (maxChars - 12))}`;\n}\n\nfunction trimStructuredStrings(value: unknown, maxChars: number): unknown {\n    if (typeof value === 'string') return truncateString(value, maxChars);\n    if (Array.isArray(value)) return value.map((item) => trimStructuredStrings(item, maxChars));\n    if (!value || typeof value !== 'object') return value;\n    return Object.fromEntries(\n        Object.entries(value).map(([key, nested]) => [key, trimStructuredStrings(nested, maxChars)]),\n    );\n}\n\nfunction estimateBytes(value: unknown): number {\n    try {\n        return JSON.stringify(value).length;\n    } catch {\n        return String(value ?? '').length;\n    }\n}\n\nfunction trimMessageForStatus(message: unknown, stringLimit: number): unknown {\n    if (!message || typeof message !== 'object') return message;\n    return trimStructuredStrings(message, stringLimit);\n}\n\n/**\n * Collapse timestamp / createdAt into receivedAt so downstream consumers\n * only ever need to read a single canonical time field.\n */\nfunction normalizeMessageTime(message: unknown): unknown {\n    if (!message || typeof message !== 'object') return message;\n    const msg = message as Record<string, unknown>;\n    if (msg.receivedAt == null) {\n        const fallback = msg.timestamp ?? msg.createdAt;\n        if (fallback != null) {\n            const ts = typeof fallback === 'string' ? Date.parse(fallback as string) : Number(fallback);\n            if (Number.isFinite(ts) && ts > 0) msg.receivedAt = ts;\n        }\n    }\n    return msg;\n}\n\nfunction trimMessagesForStatus(\n    messages: unknown[] | null | undefined,\n    options: Required<NormalizeActiveChatOptions>,\n): unknown[] {\n    if (!options.includeMessages || options.messageLimit <= 0 || options.totalBytesLimit <= 0) return [];\n    if (!Array.isArray(messages) || messages.length === 0) return [];\n\n    const recent = messages.slice(-options.messageLimit);\n    const kept: unknown[] = [];\n    let totalBytes = 0;\n\n    for (let i = recent.length - 1; i >= 0; i -= 1) {\n        let normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.stringLimit));\n        let size = estimateBytes(normalized);\n\n        if (size > options.totalBytesLimit) {\n            normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.fallbackStringLimit));\n            size = estimateBytes(normalized);\n        }\n\n        if (kept.length > 0 && (totalBytes + size) > options.totalBytesLimit) {\n            continue;\n        }\n\n        kept.push(normalized);\n        totalBytes += size;\n    }\n\n    return kept.reverse();\n}\n\nfunction hasApprovalButtons(activeModal?: { buttons?: unknown[] | null } | null): boolean {\n    return (activeModal?.buttons?.length ?? 0) > 0;\n}\n\nexport function normalizeManagedStatus(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): ManagedStatus {\n    if (hasApprovalButtons(opts?.activeModal)) return 'waiting_approval';\n\n    const normalized = String(status || 'idle').trim().toLowerCase();\n    if (normalized === 'waiting_approval') return 'waiting_approval';\n    if (WORKING_STATUSES.has(normalized)) return 'generating';\n    if (normalized === 'error') return 'error';\n    if (normalized === 'stopped') return 'stopped';\n    if (normalized === 'starting') return 'starting';\n    if (normalized === 'panel_hidden') return 'panel_hidden';\n    if (normalized === 'not_monitored') return 'not_monitored';\n    if (normalized === 'disconnected') return 'disconnected';\n    return 'idle';\n}\n\nexport function isManagedStatusWorking(status?: string | null): boolean {\n    return normalizeManagedStatus(status) === 'generating';\n}\n\nexport function isManagedStatusWaiting(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): boolean {\n    return normalizeManagedStatus(status, opts) === 'waiting_approval';\n}\n\nexport function normalizeActiveChatData<T extends ActiveChatData | null | undefined>(\n    activeChat: T,\n    options: NormalizeActiveChatOptions = FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n): T extends null | undefined ? T : SessionActiveChatData {\n    if (!activeChat) return activeChat as T extends null | undefined ? T : SessionActiveChatData;\n    const resolvedOptions: Required<NormalizeActiveChatOptions> = {\n        ...FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n        ...options,\n    };\n    const {\n        messages: _messages,\n        ...rest\n    } = activeChat;\n    const normalized: SessionActiveChatData = {\n        ...rest,\n        status: normalizeManagedStatus(activeChat.status, { activeModal: activeChat.activeModal }),\n        activeModal: resolvedOptions.includeActiveModal && activeChat.activeModal ? {\n            message: truncateString(activeChat.activeModal.message || '', STATUS_MODAL_MESSAGE_LIMIT),\n            buttons: (activeChat.activeModal.buttons || []).map((button) =>\n                truncateString(String(button || ''), STATUS_MODAL_BUTTON_LIMIT)\n            ),\n        } : null,\n        inputContent: resolvedOptions.includeInputContent && activeChat.inputContent\n            ? truncateString(activeChat.inputContent, 2 * 1024)\n            : undefined,\n    };\n    if (resolvedOptions.includeMessages) {\n        normalized.messages = trimMessagesForStatus(activeChat.messages, resolvedOptions) as SessionActiveChatData['messages'];\n    }\n    return normalized as T extends null | undefined ? T : SessionActiveChatData;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaD,IAAM,kCAAwE;AAAA,EAC1E,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB,KAAK;AAAA,EACtB,aAAa,IAAI;AAAA,EACjB,qBAAqB;AACzB;AAIO,IAAM,kCAAwE;AAAA,EACjF,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,qBAAqB;AACzB;AAEA,IAAM,6BAA6B,IAAI;AACvC,IAAM,4BAA4B;AAElC,SAAS,eAAe,OAAe,UAA0B;AAC7D,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,MAAI,YAAY,GAAI,QAAO,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,CAAC;AAC/D,SAAO,GAAG,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;AAC3C;AAQA,SAAS,sBAAsB,OAAgB,UAA2B;AACtE,MAAI,OAAO,UAAU,SAAU,QAAO,eAAe,OAAO,QAAQ;AACpE,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,QAAQ,CAAC;AAC1F,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACV,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,sBAAsB,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC/F;AACJ;AAEA,SAAS,cAAc,OAAwB;AAC3C,MAAI;AACA,WAAO,KAAK,UAAU,KAAK,EAAE;AAAA,EACjC,QAAQ;AACJ,WAAO,OAAO,SAAS,EAAE,EAAE;AAAA,EAC/B;AACJ;AAEA,SAAS,qBAAqB,SAAkB,aAA8B;AAC1E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,SAAO,sBAAsB,SAAS,WAAW;AACrD;AAMA,SAAS,qBAAqB,SAA2B;AACrD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,MAAI,IAAI,cAAc,MAAM;AACxB,UAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAI,YAAY,MAAM;AAClB,YAAM,KAAK,OAAO,aAAa,WAAW,KAAK,MAAM,QAAkB,IAAI,OAAO,QAAQ;AAC1F,UAAI,OAAO,SAAS,EAAE,KAAK,KAAK,EAAG,KAAI,aAAa;AAAA,IACxD;AAAA,EACJ;AACA,SAAO;AACX;AAEA,SAAS,sBACL,UACA,SACS;AACT,MAAI,CAAC,QAAQ,mBAAmB,QAAQ,gBAAgB,KAAK,QAAQ,mBAAmB,EAAG,QAAO,CAAC;AACnG,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAE/D,QAAM,SAAS,SAAS,MAAM,CAAC,QAAQ,YAAY;AACnD,QAAM,OAAkB,CAAC;AACzB,MAAI,aAAa;AAEjB,WAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;AAC5C,QAAI,aAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,WAAW,CAAC;AAC1F,QAAI,OAAO,cAAc,UAAU;AAEnC,QAAI,OAAO,QAAQ,iBAAiB;AAChC,mBAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,mBAAmB,CAAC;AAC9F,aAAO,cAAc,UAAU;AAAA,IACnC;AAEA,QAAI,KAAK,SAAS,KAAM,aAAa,OAAQ,QAAQ,iBAAiB;AAClE;AAAA,IACJ;AAEA,SAAK,KAAK,UAAU;AACpB,kBAAc;AAAA,EAClB;AAEA,SAAO,KAAK,QAAQ;AACxB;AAEA,SAAS,mBAAmB,aAA8D;AACtF,UAAQ,aAAa,SAAS,UAAU,KAAK;AACjD;AAEO,SAAS,uBACZ,QACA,MACa;AACb,MAAI,mBAAmB,MAAM,WAAW,EAAG,QAAO;AAElD,QAAM,aAAa,OAAO,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY;AAC/D,MAAI,eAAe,mBAAoB,QAAO;AAC9C,MAAI,iBAAiB,IAAI,UAAU,EAAG,QAAO;AAC7C,MAAI,eAAe,QAAS,QAAO;AACnC,MAAI,eAAe,UAAW,QAAO;AACrC,MAAI,eAAe,WAAY,QAAO;AACtC,MAAI,eAAe,eAAgB,QAAO;AAC1C,MAAI,eAAe,gBAAiB,QAAO;AAC3C,MAAI,eAAe,eAAgB,QAAO;AAC1C,SAAO;AACX;AAEO,SAAS,uBAAuB,QAAiC;AACpE,SAAO,uBAAuB,MAAM,MAAM;AAC9C;AAEO,SAAS,uBACZ,QACA,MACO;AACP,SAAO,uBAAuB,QAAQ,IAAI,MAAM;AACpD;AAEO,SAAS,wBACZ,YACA,UAAsC,iCACgB;AACtD,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,kBAAwD;AAAA,IAC1D,GAAG;AAAA,IACH,GAAG;AAAA,EACP;AACA,QAAM;AAAA,IACF,UAAU;AAAA,IACV,GAAG;AAAA,EACP,IAAI;AACJ,QAAM,aAAoC;AAAA,IACtC,GAAG;AAAA,IACH,QAAQ,uBAAuB,WAAW,QAAQ,EAAE,aAAa,WAAW,YAAY,CAAC;AAAA,IACzF,aAAa,gBAAgB,sBAAsB,WAAW,cAAc;AAAA,MACxE,SAAS,eAAe,WAAW,YAAY,WAAW,IAAI,0BAA0B;AAAA,MACxF,UAAU,WAAW,YAAY,WAAW,CAAC,GAAG;AAAA,QAAI,CAAC,WACjD,eAAe,OAAO,UAAU,EAAE,GAAG,yBAAyB;AAAA,MAClE;AAAA,IACJ,IAAI;AAAA,IACJ,cAAc,gBAAgB,uBAAuB,WAAW,eAC1D,eAAe,WAAW,cAAc,IAAI,IAAI,IAChD;AAAA,EACV;AACA,MAAI,gBAAgB,iBAAiB;AACjC,eAAW,WAAW,sBAAsB,WAAW,UAAU,eAAe;AAAA,EACpF;AACA,SAAO;AACX;","names":[]}
+{"version":3,"sources":["../../src/status/normalize.ts"],"sourcesContent":["import type { ActiveChatData } from '../providers/provider-instance.js';\nimport type { SessionActiveChatData } from '../shared-types.js';\n\nexport type ManagedStatus =\n    | 'idle'\n    | 'generating'\n    | 'waiting_approval'\n    | 'waiting_choice'\n    | 'error'\n    | 'stopped'\n    | 'starting'\n    | 'panel_hidden'\n    | 'not_monitored'\n    | 'disconnected';\n\nconst WORKING_STATUSES = new Set([\n    'generating',\n    'streaming',\n    'loading',\n    'loading_reference',\n    'thinking',\n    'active',\n]);\n\nexport interface NormalizeActiveChatOptions {\n    includeMessages?: boolean;\n    includeInputContent?: boolean;\n    includeActiveModal?: boolean;\n    messageLimit?: number;\n    totalBytesLimit?: number;\n    stringLimit?: number;\n    fallbackStringLimit?: number;\n}\n\n// Full snapshots are still capped, but can carry recent chat context for API/inspection use.\nconst FULL_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: true,\n    includeInputContent: true,\n    includeActiveModal: true,\n    messageLimit: 60,\n    totalBytesLimit: 96 * 1024,\n    stringLimit: 4 * 1024,\n    fallbackStringLimit: 1024,\n};\n\n// Live/metadata snapshots only need routing + UI summary. Current chat text is loaded\n// on demand via `read_chat`, and older history via `chat_history`.\nexport const LIVE_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: false,\n    includeInputContent: false,\n    includeActiveModal: false,\n    messageLimit: 0,\n    totalBytesLimit: 0,\n    stringLimit: 512,\n    fallbackStringLimit: 256,\n};\n\nconst STATUS_MODAL_MESSAGE_LIMIT = 2 * 1024;\nconst STATUS_MODAL_BUTTON_LIMIT = 120;\n\nfunction truncateString(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(0, Math.max(0, maxChars));\n    return `${value.slice(0, maxChars - 12)}...[truncated]`;\n}\n\nfunction truncateStringTail(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(value.length - Math.max(0, maxChars));\n    return `...[truncated]${value.slice(value.length - (maxChars - 12))}`;\n}\n\nfunction trimStructuredStrings(value: unknown, maxChars: number): unknown {\n    if (typeof value === 'string') return truncateString(value, maxChars);\n    if (Array.isArray(value)) return value.map((item) => trimStructuredStrings(item, maxChars));\n    if (!value || typeof value !== 'object') return value;\n    return Object.fromEntries(\n        Object.entries(value).map(([key, nested]) => [key, trimStructuredStrings(nested, maxChars)]),\n    );\n}\n\nfunction estimateBytes(value: unknown): number {\n    try {\n        return JSON.stringify(value).length;\n    } catch {\n        return String(value ?? '').length;\n    }\n}\n\nfunction trimMessageForStatus(message: unknown, stringLimit: number): unknown {\n    if (!message || typeof message !== 'object') return message;\n    return trimStructuredStrings(message, stringLimit);\n}\n\n/**\n * Collapse timestamp / createdAt into receivedAt so downstream consumers\n * only ever need to read a single canonical time field.\n */\nfunction normalizeMessageTime(message: unknown): unknown {\n    if (!message || typeof message !== 'object') return message;\n    const msg = message as Record<string, unknown>;\n    if (msg.receivedAt == null) {\n        const fallback = msg.timestamp ?? msg.createdAt;\n        if (fallback != null) {\n            const ts = typeof fallback === 'string' ? Date.parse(fallback as string) : Number(fallback);\n            if (Number.isFinite(ts) && ts > 0) msg.receivedAt = ts;\n        }\n    }\n    return msg;\n}\n\nfunction trimMessagesForStatus(\n    messages: unknown[] | null | undefined,\n    options: Required<NormalizeActiveChatOptions>,\n): unknown[] {\n    if (!options.includeMessages || options.messageLimit <= 0 || options.totalBytesLimit <= 0) return [];\n    if (!Array.isArray(messages) || messages.length === 0) return [];\n\n    const recent = messages.slice(-options.messageLimit);\n    const kept: unknown[] = [];\n    let totalBytes = 0;\n\n    for (let i = recent.length - 1; i >= 0; i -= 1) {\n        let normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.stringLimit));\n        let size = estimateBytes(normalized);\n\n        if (size > options.totalBytesLimit) {\n            normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.fallbackStringLimit));\n            size = estimateBytes(normalized);\n        }\n\n        if (kept.length > 0 && (totalBytes + size) > options.totalBytesLimit) {\n            continue;\n        }\n\n        kept.push(normalized);\n        totalBytes += size;\n    }\n\n    return kept.reverse();\n}\n\nfunction hasApprovalButtons(activeModal?: { buttons?: unknown[] | null } | null): boolean {\n    return (activeModal?.buttons?.length ?? 0) > 0;\n}\n\nexport function normalizeManagedStatus(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): ManagedStatus {\n    if (hasApprovalButtons(opts?.activeModal)) return 'waiting_approval';\n\n    const normalized = String(status || 'idle').trim().toLowerCase();\n    if (normalized === 'waiting_approval') return 'waiting_approval';\n    if (normalized === 'waiting_choice') return 'waiting_choice';\n    if (WORKING_STATUSES.has(normalized)) return 'generating';\n    if (normalized === 'error') return 'error';\n    if (normalized === 'stopped') return 'stopped';\n    if (normalized === 'starting') return 'starting';\n    if (normalized === 'panel_hidden') return 'panel_hidden';\n    if (normalized === 'not_monitored') return 'not_monitored';\n    if (normalized === 'disconnected') return 'disconnected';\n    return 'idle';\n}\n\nexport function isManagedStatusWorking(status?: string | null): boolean {\n    return normalizeManagedStatus(status) === 'generating';\n}\n\nexport function isManagedStatusWaiting(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): boolean {\n    return normalizeManagedStatus(status, opts) === 'waiting_approval';\n}\n\nexport function normalizeActiveChatData<T extends ActiveChatData | null | undefined>(\n    activeChat: T,\n    options: NormalizeActiveChatOptions = FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n): T extends null | undefined ? T : SessionActiveChatData {\n    if (!activeChat) return activeChat as T extends null | undefined ? T : SessionActiveChatData;\n    const resolvedOptions: Required<NormalizeActiveChatOptions> = {\n        ...FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n        ...options,\n    };\n    const {\n        messages: _messages,\n        ...rest\n    } = activeChat;\n    const normalized: SessionActiveChatData = {\n        ...rest,\n        status: normalizeManagedStatus(activeChat.status, { activeModal: activeChat.activeModal }),\n        activeModal: resolvedOptions.includeActiveModal && activeChat.activeModal ? {\n            message: truncateString(activeChat.activeModal.message || '', STATUS_MODAL_MESSAGE_LIMIT),\n            buttons: (activeChat.activeModal.buttons || []).map((button) =>\n                truncateString(String(button || ''), STATUS_MODAL_BUTTON_LIMIT)\n            ),\n        } : null,\n        inputContent: resolvedOptions.includeInputContent && activeChat.inputContent\n            ? truncateString(activeChat.inputContent, 2 * 1024)\n            : undefined,\n    };\n    if (resolvedOptions.includeMessages) {\n        normalized.messages = trimMessagesForStatus(activeChat.messages, resolvedOptions) as SessionActiveChatData['messages'];\n    }\n    return normalized as T extends null | undefined ? T : SessionActiveChatData;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaD,IAAM,kCAAwE;AAAA,EAC1E,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB,KAAK;AAAA,EACtB,aAAa,IAAI;AAAA,EACjB,qBAAqB;AACzB;AAIO,IAAM,kCAAwE;AAAA,EACjF,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,qBAAqB;AACzB;AAEA,IAAM,6BAA6B,IAAI;AACvC,IAAM,4BAA4B;AAElC,SAAS,eAAe,OAAe,UAA0B;AAC7D,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,MAAI,YAAY,GAAI,QAAO,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,CAAC;AAC/D,SAAO,GAAG,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;AAC3C;AAQA,SAAS,sBAAsB,OAAgB,UAA2B;AACtE,MAAI,OAAO,UAAU,SAAU,QAAO,eAAe,OAAO,QAAQ;AACpE,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,QAAQ,CAAC;AAC1F,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACV,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,sBAAsB,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC/F;AACJ;AAEA,SAAS,cAAc,OAAwB;AAC3C,MAAI;AACA,WAAO,KAAK,UAAU,KAAK,EAAE;AAAA,EACjC,QAAQ;AACJ,WAAO,OAAO,SAAS,EAAE,EAAE;AAAA,EAC/B;AACJ;AAEA,SAAS,qBAAqB,SAAkB,aAA8B;AAC1E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,SAAO,sBAAsB,SAAS,WAAW;AACrD;AAMA,SAAS,qBAAqB,SAA2B;AACrD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,MAAI,IAAI,cAAc,MAAM;AACxB,UAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAI,YAAY,MAAM;AAClB,YAAM,KAAK,OAAO,aAAa,WAAW,KAAK,MAAM,QAAkB,IAAI,OAAO,QAAQ;AAC1F,UAAI,OAAO,SAAS,EAAE,KAAK,KAAK,EAAG,KAAI,aAAa;AAAA,IACxD;AAAA,EACJ;AACA,SAAO;AACX;AAEA,SAAS,sBACL,UACA,SACS;AACT,MAAI,CAAC,QAAQ,mBAAmB,QAAQ,gBAAgB,KAAK,QAAQ,mBAAmB,EAAG,QAAO,CAAC;AACnG,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAE/D,QAAM,SAAS,SAAS,MAAM,CAAC,QAAQ,YAAY;AACnD,QAAM,OAAkB,CAAC;AACzB,MAAI,aAAa;AAEjB,WAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;AAC5C,QAAI,aAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,WAAW,CAAC;AAC1F,QAAI,OAAO,cAAc,UAAU;AAEnC,QAAI,OAAO,QAAQ,iBAAiB;AAChC,mBAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,mBAAmB,CAAC;AAC9F,aAAO,cAAc,UAAU;AAAA,IACnC;AAEA,QAAI,KAAK,SAAS,KAAM,aAAa,OAAQ,QAAQ,iBAAiB;AAClE;AAAA,IACJ;AAEA,SAAK,KAAK,UAAU;AACpB,kBAAc;AAAA,EAClB;AAEA,SAAO,KAAK,QAAQ;AACxB;AAEA,SAAS,mBAAmB,aAA8D;AACtF,UAAQ,aAAa,SAAS,UAAU,KAAK;AACjD;AAEO,SAAS,uBACZ,QACA,MACa;AACb,MAAI,mBAAmB,MAAM,WAAW,EAAG,QAAO;AAElD,QAAM,aAAa,OAAO,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY;AAC/D,MAAI,eAAe,mBAAoB,QAAO;AAC9C,MAAI,eAAe,iBAAkB,QAAO;AAC5C,MAAI,iBAAiB,IAAI,UAAU,EAAG,QAAO;AAC7C,MAAI,eAAe,QAAS,QAAO;AACnC,MAAI,eAAe,UAAW,QAAO;AACrC,MAAI,eAAe,WAAY,QAAO;AACtC,MAAI,eAAe,eAAgB,QAAO;AAC1C,MAAI,eAAe,gBAAiB,QAAO;AAC3C,MAAI,eAAe,eAAgB,QAAO;AAC1C,SAAO;AACX;AAEO,SAAS,uBAAuB,QAAiC;AACpE,SAAO,uBAAuB,MAAM,MAAM;AAC9C;AAEO,SAAS,uBACZ,QACA,MACO;AACP,SAAO,uBAAuB,QAAQ,IAAI,MAAM;AACpD;AAEO,SAAS,wBACZ,YACA,UAAsC,iCACgB;AACtD,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,kBAAwD;AAAA,IAC1D,GAAG;AAAA,IACH,GAAG;AAAA,EACP;AACA,QAAM;AAAA,IACF,UAAU;AAAA,IACV,GAAG;AAAA,EACP,IAAI;AACJ,QAAM,aAAoC;AAAA,IACtC,GAAG;AAAA,IACH,QAAQ,uBAAuB,WAAW,QAAQ,EAAE,aAAa,WAAW,YAAY,CAAC;AAAA,IACzF,aAAa,gBAAgB,sBAAsB,WAAW,cAAc;AAAA,MACxE,SAAS,eAAe,WAAW,YAAY,WAAW,IAAI,0BAA0B;AAAA,MACxF,UAAU,WAAW,YAAY,WAAW,CAAC,GAAG;AAAA,QAAI,CAAC,WACjD,eAAe,OAAO,UAAU,EAAE,GAAG,yBAAyB;AAAA,MAClE;AAAA,IACJ,IAAI;AAAA,IACJ,cAAc,gBAAgB,uBAAuB,WAAW,eAC1D,eAAe,WAAW,cAAc,IAAI,IAAI,IAChD;AAAA,EACV;AACA,MAAI,gBAAgB,iBAAiB;AACjC,eAAW,WAAW,sBAAsB,WAAW,UAAU,eAAe;AAAA,EACpF;AACA,SAAO;AACX;","names":[]}

package/dist/status/normalize.mjs

@@ -91,6 +91,7 @@ function normalizeManagedStatus(status, opts) {
   if (hasApprovalButtons(opts?.activeModal)) return "waiting_approval";
   const normalized = String(status || "idle").trim().toLowerCase();
   if (normalized === "waiting_approval") return "waiting_approval";
+  if (normalized === "waiting_choice") return "waiting_choice";
   if (WORKING_STATUSES.has(normalized)) return "generating";
   if (normalized === "error") return "error";
   if (normalized === "stopped") return "stopped";

package/dist/status/normalize.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/status/normalize.ts"],"sourcesContent":["import type { ActiveChatData } from '../providers/provider-instance.js';\nimport type { SessionActiveChatData } from '../shared-types.js';\n\nexport type ManagedStatus =\n    | 'idle'\n    | 'generating'\n    | 'waiting_approval'\n    | 'error'\n    | 'stopped'\n    | 'starting'\n    | 'panel_hidden'\n    | 'not_monitored'\n    | 'disconnected';\n\nconst WORKING_STATUSES = new Set([\n    'generating',\n    'streaming',\n    'loading',\n    'loading_reference',\n    'thinking',\n    'active',\n]);\n\nexport interface NormalizeActiveChatOptions {\n    includeMessages?: boolean;\n    includeInputContent?: boolean;\n    includeActiveModal?: boolean;\n    messageLimit?: number;\n    totalBytesLimit?: number;\n    stringLimit?: number;\n    fallbackStringLimit?: number;\n}\n\n// Full snapshots are still capped, but can carry recent chat context for API/inspection use.\nconst FULL_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: true,\n    includeInputContent: true,\n    includeActiveModal: true,\n    messageLimit: 60,\n    totalBytesLimit: 96 * 1024,\n    stringLimit: 4 * 1024,\n    fallbackStringLimit: 1024,\n};\n\n// Live/metadata snapshots only need routing + UI summary. Current chat text is loaded\n// on demand via `read_chat`, and older history via `chat_history`.\nexport const LIVE_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: false,\n    includeInputContent: false,\n    includeActiveModal: false,\n    messageLimit: 0,\n    totalBytesLimit: 0,\n    stringLimit: 512,\n    fallbackStringLimit: 256,\n};\n\nconst STATUS_MODAL_MESSAGE_LIMIT = 2 * 1024;\nconst STATUS_MODAL_BUTTON_LIMIT = 120;\n\nfunction truncateString(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(0, Math.max(0, maxChars));\n    return `${value.slice(0, maxChars - 12)}...[truncated]`;\n}\n\nfunction truncateStringTail(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(value.length - Math.max(0, maxChars));\n    return `...[truncated]${value.slice(value.length - (maxChars - 12))}`;\n}\n\nfunction trimStructuredStrings(value: unknown, maxChars: number): unknown {\n    if (typeof value === 'string') return truncateString(value, maxChars);\n    if (Array.isArray(value)) return value.map((item) => trimStructuredStrings(item, maxChars));\n    if (!value || typeof value !== 'object') return value;\n    return Object.fromEntries(\n        Object.entries(value).map(([key, nested]) => [key, trimStructuredStrings(nested, maxChars)]),\n    );\n}\n\nfunction estimateBytes(value: unknown): number {\n    try {\n        return JSON.stringify(value).length;\n    } catch {\n        return String(value ?? '').length;\n    }\n}\n\nfunction trimMessageForStatus(message: unknown, stringLimit: number): unknown {\n    if (!message || typeof message !== 'object') return message;\n    return trimStructuredStrings(message, stringLimit);\n}\n\n/**\n * Collapse timestamp / createdAt into receivedAt so downstream consumers\n * only ever need to read a single canonical time field.\n */\nfunction normalizeMessageTime(message: unknown): unknown {\n    if (!message || typeof message !== 'object') return message;\n    const msg = message as Record<string, unknown>;\n    if (msg.receivedAt == null) {\n        const fallback = msg.timestamp ?? msg.createdAt;\n        if (fallback != null) {\n            const ts = typeof fallback === 'string' ? Date.parse(fallback as string) : Number(fallback);\n            if (Number.isFinite(ts) && ts > 0) msg.receivedAt = ts;\n        }\n    }\n    return msg;\n}\n\nfunction trimMessagesForStatus(\n    messages: unknown[] | null | undefined,\n    options: Required<NormalizeActiveChatOptions>,\n): unknown[] {\n    if (!options.includeMessages || options.messageLimit <= 0 || options.totalBytesLimit <= 0) return [];\n    if (!Array.isArray(messages) || messages.length === 0) return [];\n\n    const recent = messages.slice(-options.messageLimit);\n    const kept: unknown[] = [];\n    let totalBytes = 0;\n\n    for (let i = recent.length - 1; i >= 0; i -= 1) {\n        let normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.stringLimit));\n        let size = estimateBytes(normalized);\n\n        if (size > options.totalBytesLimit) {\n            normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.fallbackStringLimit));\n            size = estimateBytes(normalized);\n        }\n\n        if (kept.length > 0 && (totalBytes + size) > options.totalBytesLimit) {\n            continue;\n        }\n\n        kept.push(normalized);\n        totalBytes += size;\n    }\n\n    return kept.reverse();\n}\n\nfunction hasApprovalButtons(activeModal?: { buttons?: unknown[] | null } | null): boolean {\n    return (activeModal?.buttons?.length ?? 0) > 0;\n}\n\nexport function normalizeManagedStatus(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): ManagedStatus {\n    if (hasApprovalButtons(opts?.activeModal)) return 'waiting_approval';\n\n    const normalized = String(status || 'idle').trim().toLowerCase();\n    if (normalized === 'waiting_approval') return 'waiting_approval';\n    if (WORKING_STATUSES.has(normalized)) return 'generating';\n    if (normalized === 'error') return 'error';\n    if (normalized === 'stopped') return 'stopped';\n    if (normalized === 'starting') return 'starting';\n    if (normalized === 'panel_hidden') return 'panel_hidden';\n    if (normalized === 'not_monitored') return 'not_monitored';\n    if (normalized === 'disconnected') return 'disconnected';\n    return 'idle';\n}\n\nexport function isManagedStatusWorking(status?: string | null): boolean {\n    return normalizeManagedStatus(status) === 'generating';\n}\n\nexport function isManagedStatusWaiting(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): boolean {\n    return normalizeManagedStatus(status, opts) === 'waiting_approval';\n}\n\nexport function normalizeActiveChatData<T extends ActiveChatData | null | undefined>(\n    activeChat: T,\n    options: NormalizeActiveChatOptions = FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n): T extends null | undefined ? T : SessionActiveChatData {\n    if (!activeChat) return activeChat as T extends null | undefined ? T : SessionActiveChatData;\n    const resolvedOptions: Required<NormalizeActiveChatOptions> = {\n        ...FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n        ...options,\n    };\n    const {\n        messages: _messages,\n        ...rest\n    } = activeChat;\n    const normalized: SessionActiveChatData = {\n        ...rest,\n        status: normalizeManagedStatus(activeChat.status, { activeModal: activeChat.activeModal }),\n        activeModal: resolvedOptions.includeActiveModal && activeChat.activeModal ? {\n            message: truncateString(activeChat.activeModal.message || '', STATUS_MODAL_MESSAGE_LIMIT),\n            buttons: (activeChat.activeModal.buttons || []).map((button) =>\n                truncateString(String(button || ''), STATUS_MODAL_BUTTON_LIMIT)\n            ),\n        } : null,\n        inputContent: resolvedOptions.includeInputContent && activeChat.inputContent\n            ? truncateString(activeChat.inputContent, 2 * 1024)\n            : undefined,\n    };\n    if (resolvedOptions.includeMessages) {\n        normalized.messages = trimMessagesForStatus(activeChat.messages, resolvedOptions) as SessionActiveChatData['messages'];\n    }\n    return normalized as T extends null | undefined ? T : SessionActiveChatData;\n}\n"],"mappings":";AAcA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaD,IAAM,kCAAwE;AAAA,EAC1E,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB,KAAK;AAAA,EACtB,aAAa,IAAI;AAAA,EACjB,qBAAqB;AACzB;AAIO,IAAM,kCAAwE;AAAA,EACjF,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,qBAAqB;AACzB;AAEA,IAAM,6BAA6B,IAAI;AACvC,IAAM,4BAA4B;AAElC,SAAS,eAAe,OAAe,UAA0B;AAC7D,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,MAAI,YAAY,GAAI,QAAO,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,CAAC;AAC/D,SAAO,GAAG,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;AAC3C;AAQA,SAAS,sBAAsB,OAAgB,UAA2B;AACtE,MAAI,OAAO,UAAU,SAAU,QAAO,eAAe,OAAO,QAAQ;AACpE,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,QAAQ,CAAC;AAC1F,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACV,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,sBAAsB,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC/F;AACJ;AAEA,SAAS,cAAc,OAAwB;AAC3C,MAAI;AACA,WAAO,KAAK,UAAU,KAAK,EAAE;AAAA,EACjC,QAAQ;AACJ,WAAO,OAAO,SAAS,EAAE,EAAE;AAAA,EAC/B;AACJ;AAEA,SAAS,qBAAqB,SAAkB,aAA8B;AAC1E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,SAAO,sBAAsB,SAAS,WAAW;AACrD;AAMA,SAAS,qBAAqB,SAA2B;AACrD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,MAAI,IAAI,cAAc,MAAM;AACxB,UAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAI,YAAY,MAAM;AAClB,YAAM,KAAK,OAAO,aAAa,WAAW,KAAK,MAAM,QAAkB,IAAI,OAAO,QAAQ;AAC1F,UAAI,OAAO,SAAS,EAAE,KAAK,KAAK,EAAG,KAAI,aAAa;AAAA,IACxD;AAAA,EACJ;AACA,SAAO;AACX;AAEA,SAAS,sBACL,UACA,SACS;AACT,MAAI,CAAC,QAAQ,mBAAmB,QAAQ,gBAAgB,KAAK,QAAQ,mBAAmB,EAAG,QAAO,CAAC;AACnG,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAE/D,QAAM,SAAS,SAAS,MAAM,CAAC,QAAQ,YAAY;AACnD,QAAM,OAAkB,CAAC;AACzB,MAAI,aAAa;AAEjB,WAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;AAC5C,QAAI,aAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,WAAW,CAAC;AAC1F,QAAI,OAAO,cAAc,UAAU;AAEnC,QAAI,OAAO,QAAQ,iBAAiB;AAChC,mBAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,mBAAmB,CAAC;AAC9F,aAAO,cAAc,UAAU;AAAA,IACnC;AAEA,QAAI,KAAK,SAAS,KAAM,aAAa,OAAQ,QAAQ,iBAAiB;AAClE;AAAA,IACJ;AAEA,SAAK,KAAK,UAAU;AACpB,kBAAc;AAAA,EAClB;AAEA,SAAO,KAAK,QAAQ;AACxB;AAEA,SAAS,mBAAmB,aAA8D;AACtF,UAAQ,aAAa,SAAS,UAAU,KAAK;AACjD;AAEO,SAAS,uBACZ,QACA,MACa;AACb,MAAI,mBAAmB,MAAM,WAAW,EAAG,QAAO;AAElD,QAAM,aAAa,OAAO,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY;AAC/D,MAAI,eAAe,mBAAoB,QAAO;AAC9C,MAAI,iBAAiB,IAAI,UAAU,EAAG,QAAO;AAC7C,MAAI,eAAe,QAAS,QAAO;AACnC,MAAI,eAAe,UAAW,QAAO;AACrC,MAAI,eAAe,WAAY,QAAO;AACtC,MAAI,eAAe,eAAgB,QAAO;AAC1C,MAAI,eAAe,gBAAiB,QAAO;AAC3C,MAAI,eAAe,eAAgB,QAAO;AAC1C,SAAO;AACX;AAEO,SAAS,uBAAuB,QAAiC;AACpE,SAAO,uBAAuB,MAAM,MAAM;AAC9C;AAEO,SAAS,uBACZ,QACA,MACO;AACP,SAAO,uBAAuB,QAAQ,IAAI,MAAM;AACpD;AAEO,SAAS,wBACZ,YACA,UAAsC,iCACgB;AACtD,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,kBAAwD;AAAA,IAC1D,GAAG;AAAA,IACH,GAAG;AAAA,EACP;AACA,QAAM;AAAA,IACF,UAAU;AAAA,IACV,GAAG;AAAA,EACP,IAAI;AACJ,QAAM,aAAoC;AAAA,IACtC,GAAG;AAAA,IACH,QAAQ,uBAAuB,WAAW,QAAQ,EAAE,aAAa,WAAW,YAAY,CAAC;AAAA,IACzF,aAAa,gBAAgB,sBAAsB,WAAW,cAAc;AAAA,MACxE,SAAS,eAAe,WAAW,YAAY,WAAW,IAAI,0BAA0B;AAAA,MACxF,UAAU,WAAW,YAAY,WAAW,CAAC,GAAG;AAAA,QAAI,CAAC,WACjD,eAAe,OAAO,UAAU,EAAE,GAAG,yBAAyB;AAAA,MAClE;AAAA,IACJ,IAAI;AAAA,IACJ,cAAc,gBAAgB,uBAAuB,WAAW,eAC1D,eAAe,WAAW,cAAc,IAAI,IAAI,IAChD;AAAA,EACV;AACA,MAAI,gBAAgB,iBAAiB;AACjC,eAAW,WAAW,sBAAsB,WAAW,UAAU,eAAe;AAAA,EACpF;AACA,SAAO;AACX;","names":[]}
+{"version":3,"sources":["../../src/status/normalize.ts"],"sourcesContent":["import type { ActiveChatData } from '../providers/provider-instance.js';\nimport type { SessionActiveChatData } from '../shared-types.js';\n\nexport type ManagedStatus =\n    | 'idle'\n    | 'generating'\n    | 'waiting_approval'\n    | 'waiting_choice'\n    | 'error'\n    | 'stopped'\n    | 'starting'\n    | 'panel_hidden'\n    | 'not_monitored'\n    | 'disconnected';\n\nconst WORKING_STATUSES = new Set([\n    'generating',\n    'streaming',\n    'loading',\n    'loading_reference',\n    'thinking',\n    'active',\n]);\n\nexport interface NormalizeActiveChatOptions {\n    includeMessages?: boolean;\n    includeInputContent?: boolean;\n    includeActiveModal?: boolean;\n    messageLimit?: number;\n    totalBytesLimit?: number;\n    stringLimit?: number;\n    fallbackStringLimit?: number;\n}\n\n// Full snapshots are still capped, but can carry recent chat context for API/inspection use.\nconst FULL_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: true,\n    includeInputContent: true,\n    includeActiveModal: true,\n    messageLimit: 60,\n    totalBytesLimit: 96 * 1024,\n    stringLimit: 4 * 1024,\n    fallbackStringLimit: 1024,\n};\n\n// Live/metadata snapshots only need routing + UI summary. Current chat text is loaded\n// on demand via `read_chat`, and older history via `chat_history`.\nexport const LIVE_STATUS_ACTIVE_CHAT_OPTIONS: Required<NormalizeActiveChatOptions> = {\n    includeMessages: false,\n    includeInputContent: false,\n    includeActiveModal: false,\n    messageLimit: 0,\n    totalBytesLimit: 0,\n    stringLimit: 512,\n    fallbackStringLimit: 256,\n};\n\nconst STATUS_MODAL_MESSAGE_LIMIT = 2 * 1024;\nconst STATUS_MODAL_BUTTON_LIMIT = 120;\n\nfunction truncateString(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(0, Math.max(0, maxChars));\n    return `${value.slice(0, maxChars - 12)}...[truncated]`;\n}\n\nfunction truncateStringTail(value: string, maxChars: number): string {\n    if (value.length <= maxChars) return value;\n    if (maxChars <= 12) return value.slice(value.length - Math.max(0, maxChars));\n    return `...[truncated]${value.slice(value.length - (maxChars - 12))}`;\n}\n\nfunction trimStructuredStrings(value: unknown, maxChars: number): unknown {\n    if (typeof value === 'string') return truncateString(value, maxChars);\n    if (Array.isArray(value)) return value.map((item) => trimStructuredStrings(item, maxChars));\n    if (!value || typeof value !== 'object') return value;\n    return Object.fromEntries(\n        Object.entries(value).map(([key, nested]) => [key, trimStructuredStrings(nested, maxChars)]),\n    );\n}\n\nfunction estimateBytes(value: unknown): number {\n    try {\n        return JSON.stringify(value).length;\n    } catch {\n        return String(value ?? '').length;\n    }\n}\n\nfunction trimMessageForStatus(message: unknown, stringLimit: number): unknown {\n    if (!message || typeof message !== 'object') return message;\n    return trimStructuredStrings(message, stringLimit);\n}\n\n/**\n * Collapse timestamp / createdAt into receivedAt so downstream consumers\n * only ever need to read a single canonical time field.\n */\nfunction normalizeMessageTime(message: unknown): unknown {\n    if (!message || typeof message !== 'object') return message;\n    const msg = message as Record<string, unknown>;\n    if (msg.receivedAt == null) {\n        const fallback = msg.timestamp ?? msg.createdAt;\n        if (fallback != null) {\n            const ts = typeof fallback === 'string' ? Date.parse(fallback as string) : Number(fallback);\n            if (Number.isFinite(ts) && ts > 0) msg.receivedAt = ts;\n        }\n    }\n    return msg;\n}\n\nfunction trimMessagesForStatus(\n    messages: unknown[] | null | undefined,\n    options: Required<NormalizeActiveChatOptions>,\n): unknown[] {\n    if (!options.includeMessages || options.messageLimit <= 0 || options.totalBytesLimit <= 0) return [];\n    if (!Array.isArray(messages) || messages.length === 0) return [];\n\n    const recent = messages.slice(-options.messageLimit);\n    const kept: unknown[] = [];\n    let totalBytes = 0;\n\n    for (let i = recent.length - 1; i >= 0; i -= 1) {\n        let normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.stringLimit));\n        let size = estimateBytes(normalized);\n\n        if (size > options.totalBytesLimit) {\n            normalized = normalizeMessageTime(trimMessageForStatus(recent[i], options.fallbackStringLimit));\n            size = estimateBytes(normalized);\n        }\n\n        if (kept.length > 0 && (totalBytes + size) > options.totalBytesLimit) {\n            continue;\n        }\n\n        kept.push(normalized);\n        totalBytes += size;\n    }\n\n    return kept.reverse();\n}\n\nfunction hasApprovalButtons(activeModal?: { buttons?: unknown[] | null } | null): boolean {\n    return (activeModal?.buttons?.length ?? 0) > 0;\n}\n\nexport function normalizeManagedStatus(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): ManagedStatus {\n    if (hasApprovalButtons(opts?.activeModal)) return 'waiting_approval';\n\n    const normalized = String(status || 'idle').trim().toLowerCase();\n    if (normalized === 'waiting_approval') return 'waiting_approval';\n    if (normalized === 'waiting_choice') return 'waiting_choice';\n    if (WORKING_STATUSES.has(normalized)) return 'generating';\n    if (normalized === 'error') return 'error';\n    if (normalized === 'stopped') return 'stopped';\n    if (normalized === 'starting') return 'starting';\n    if (normalized === 'panel_hidden') return 'panel_hidden';\n    if (normalized === 'not_monitored') return 'not_monitored';\n    if (normalized === 'disconnected') return 'disconnected';\n    return 'idle';\n}\n\nexport function isManagedStatusWorking(status?: string | null): boolean {\n    return normalizeManagedStatus(status) === 'generating';\n}\n\nexport function isManagedStatusWaiting(\n    status?: string | null,\n    opts?: { activeModal?: { buttons?: unknown[] | null } | null },\n): boolean {\n    return normalizeManagedStatus(status, opts) === 'waiting_approval';\n}\n\nexport function normalizeActiveChatData<T extends ActiveChatData | null | undefined>(\n    activeChat: T,\n    options: NormalizeActiveChatOptions = FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n): T extends null | undefined ? T : SessionActiveChatData {\n    if (!activeChat) return activeChat as T extends null | undefined ? T : SessionActiveChatData;\n    const resolvedOptions: Required<NormalizeActiveChatOptions> = {\n        ...FULL_STATUS_ACTIVE_CHAT_OPTIONS,\n        ...options,\n    };\n    const {\n        messages: _messages,\n        ...rest\n    } = activeChat;\n    const normalized: SessionActiveChatData = {\n        ...rest,\n        status: normalizeManagedStatus(activeChat.status, { activeModal: activeChat.activeModal }),\n        activeModal: resolvedOptions.includeActiveModal && activeChat.activeModal ? {\n            message: truncateString(activeChat.activeModal.message || '', STATUS_MODAL_MESSAGE_LIMIT),\n            buttons: (activeChat.activeModal.buttons || []).map((button) =>\n                truncateString(String(button || ''), STATUS_MODAL_BUTTON_LIMIT)\n            ),\n        } : null,\n        inputContent: resolvedOptions.includeInputContent && activeChat.inputContent\n            ? truncateString(activeChat.inputContent, 2 * 1024)\n            : undefined,\n    };\n    if (resolvedOptions.includeMessages) {\n        normalized.messages = trimMessagesForStatus(activeChat.messages, resolvedOptions) as SessionActiveChatData['messages'];\n    }\n    return normalized as T extends null | undefined ? T : SessionActiveChatData;\n}\n"],"mappings":";AAeA,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ,CAAC;AAaD,IAAM,kCAAwE;AAAA,EAC1E,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB,KAAK;AAAA,EACtB,aAAa,IAAI;AAAA,EACjB,qBAAqB;AACzB;AAIO,IAAM,kCAAwE;AAAA,EACjF,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,aAAa;AAAA,EACb,qBAAqB;AACzB;AAEA,IAAM,6BAA6B,IAAI;AACvC,IAAM,4BAA4B;AAElC,SAAS,eAAe,OAAe,UAA0B;AAC7D,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,MAAI,YAAY,GAAI,QAAO,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,CAAC;AAC/D,SAAO,GAAG,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;AAC3C;AAQA,SAAS,sBAAsB,OAAgB,UAA2B;AACtE,MAAI,OAAO,UAAU,SAAU,QAAO,eAAe,OAAO,QAAQ;AACpE,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,QAAQ,CAAC;AAC1F,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,SAAO,OAAO;AAAA,IACV,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,sBAAsB,QAAQ,QAAQ,CAAC,CAAC;AAAA,EAC/F;AACJ;AAEA,SAAS,cAAc,OAAwB;AAC3C,MAAI;AACA,WAAO,KAAK,UAAU,KAAK,EAAE;AAAA,EACjC,QAAQ;AACJ,WAAO,OAAO,SAAS,EAAE,EAAE;AAAA,EAC/B;AACJ;AAEA,SAAS,qBAAqB,SAAkB,aAA8B;AAC1E,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,SAAO,sBAAsB,SAAS,WAAW;AACrD;AAMA,SAAS,qBAAqB,SAA2B;AACrD,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,MAAM;AACZ,MAAI,IAAI,cAAc,MAAM;AACxB,UAAM,WAAW,IAAI,aAAa,IAAI;AACtC,QAAI,YAAY,MAAM;AAClB,YAAM,KAAK,OAAO,aAAa,WAAW,KAAK,MAAM,QAAkB,IAAI,OAAO,QAAQ;AAC1F,UAAI,OAAO,SAAS,EAAE,KAAK,KAAK,EAAG,KAAI,aAAa;AAAA,IACxD;AAAA,EACJ;AACA,SAAO;AACX;AAEA,SAAS,sBACL,UACA,SACS;AACT,MAAI,CAAC,QAAQ,mBAAmB,QAAQ,gBAAgB,KAAK,QAAQ,mBAAmB,EAAG,QAAO,CAAC;AACnG,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO,CAAC;AAE/D,QAAM,SAAS,SAAS,MAAM,CAAC,QAAQ,YAAY;AACnD,QAAM,OAAkB,CAAC;AACzB,MAAI,aAAa;AAEjB,WAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;AAC5C,QAAI,aAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,WAAW,CAAC;AAC1F,QAAI,OAAO,cAAc,UAAU;AAEnC,QAAI,OAAO,QAAQ,iBAAiB;AAChC,mBAAa,qBAAqB,qBAAqB,OAAO,CAAC,GAAG,QAAQ,mBAAmB,CAAC;AAC9F,aAAO,cAAc,UAAU;AAAA,IACnC;AAEA,QAAI,KAAK,SAAS,KAAM,aAAa,OAAQ,QAAQ,iBAAiB;AAClE;AAAA,IACJ;AAEA,SAAK,KAAK,UAAU;AACpB,kBAAc;AAAA,EAClB;AAEA,SAAO,KAAK,QAAQ;AACxB;AAEA,SAAS,mBAAmB,aAA8D;AACtF,UAAQ,aAAa,SAAS,UAAU,KAAK;AACjD;AAEO,SAAS,uBACZ,QACA,MACa;AACb,MAAI,mBAAmB,MAAM,WAAW,EAAG,QAAO;AAElD,QAAM,aAAa,OAAO,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY;AAC/D,MAAI,eAAe,mBAAoB,QAAO;AAC9C,MAAI,eAAe,iBAAkB,QAAO;AAC5C,MAAI,iBAAiB,IAAI,UAAU,EAAG,QAAO;AAC7C,MAAI,eAAe,QAAS,QAAO;AACnC,MAAI,eAAe,UAAW,QAAO;AACrC,MAAI,eAAe,WAAY,QAAO;AACtC,MAAI,eAAe,eAAgB,QAAO;AAC1C,MAAI,eAAe,gBAAiB,QAAO;AAC3C,MAAI,eAAe,eAAgB,QAAO;AAC1C,SAAO;AACX;AAEO,SAAS,uBAAuB,QAAiC;AACpE,SAAO,uBAAuB,MAAM,MAAM;AAC9C;AAEO,SAAS,uBACZ,QACA,MACO;AACP,SAAO,uBAAuB,QAAQ,IAAI,MAAM;AACpD;AAEO,SAAS,wBACZ,YACA,UAAsC,iCACgB;AACtD,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,kBAAwD;AAAA,IAC1D,GAAG;AAAA,IACH,GAAG;AAAA,EACP;AACA,QAAM;AAAA,IACF,UAAU;AAAA,IACV,GAAG;AAAA,EACP,IAAI;AACJ,QAAM,aAAoC;AAAA,IACtC,GAAG;AAAA,IACH,QAAQ,uBAAuB,WAAW,QAAQ,EAAE,aAAa,WAAW,YAAY,CAAC;AAAA,IACzF,aAAa,gBAAgB,sBAAsB,WAAW,cAAc;AAAA,MACxE,SAAS,eAAe,WAAW,YAAY,WAAW,IAAI,0BAA0B;AAAA,MACxF,UAAU,WAAW,YAAY,WAAW,CAAC,GAAG;AAAA,QAAI,CAAC,WACjD,eAAe,OAAO,UAAU,EAAE,GAAG,yBAAyB;AAAA,MAClE;AAAA,IACJ,IAAI;AAAA,IACJ,cAAc,gBAAgB,uBAAuB,WAAW,eAC1D,eAAe,WAAW,cAAc,IAAI,IAAI,IAChD;AAAA,EACV;AACA,MAAI,gBAAgB,iBAAiB;AACjC,eAAW,WAAW,sBAAsB,WAAW,UAAU,eAAe;AAAA,EACpF;AACA,SAAO;AACX;","names":[]}

package/dist/status/reporter.d.ts

@@ -46,6 +46,8 @@ export declare class DaemonStatusReporter {
     private lastStatusSentAt;
     private statusPendingThrottle;
     private lastP2PStatusHash;
+    private lastP2PStatusSentAt;
+    private p2pDebounceTimer;
     private lastServerStatusHash;
     private lastStatusSummary;
     private statusTimer;

package/dist/status/snapshot.d.ts

@@ -75,6 +75,7 @@ export declare function getSessionCompletionMarker(session: {
             receivedAt?: number | string;
             timestamp?: number | string;
             _turnKey?: string;
+            kind?: string;
         }> | null;
     } | null;
 }): string;

package/dist/types.d.ts

@@ -36,6 +36,11 @@ export interface ChatMessage {
     index?: number;
     timestamp?: number;
     receivedAt?: number;
+    /** (A2.3) Monotonic sequence number per (session, source). Producer-asserted
+     *  when emitted by v2-aware providers (transcript v2 schema); otherwise
+     *  derived by the daemon from receivedAt/timestamp/index. ChatSourceMachine
+     *  uses this as the native peak watermark for regression detection. */
+    sequence?: number;
     _turnKey?: string;
     /** Tool calls associated with this message */
     toolCalls?: ToolCallInfo[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adhdev/daemon-core",
-  "version": "0.9.82-rc.26",
+  "version": "0.9.82-rc.260",
   "description": "ADHDev daemon core — CDP, IDE detection, providers, command execution",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -27,7 +27,7 @@
   "scripts": {
     "build": "tsup && npm run build:types",
     "build:types": "tsc -p tsconfig.json --emitDeclarationOnly --declaration --declarationMap false",
-    "dev": "tsup --watch",
+    "dev": "tsup --watch --no-clean",
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit -p tsconfig.json"
@@ -48,7 +48,9 @@
   "dependencies": {
     "@adhdev/session-host-core": "*",
     "@agentclientprotocol/sdk": "^0.16.1",
-    "@xterm/xterm": "^6.0.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "better-sqlite3": "^12.10.0",
     "chalk": "^5.3.0",
     "chokidar": "^4.0.3",
     "conf": "^13.0.0",
@@ -60,6 +62,7 @@
     "@adhdev/ghostty-vt-node": "*"
   },
   "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "@types/ws": "^8.18.1",

package/src/agent-stream/poller.ts

@@ -19,7 +19,7 @@ import type { SessionRegistry } from '../sessions/registry.js';
 import { reconcileIdeRuntimeSessions } from '../sessions/reconcile.js';
 import { LOG } from '../logging/logger.js';
 import type { AgentStreamState } from './types.js';
-import { formatAutoApprovalMessage, pickApprovalButton } from '../providers/approval-utils.js';
+import { formatAutoApprovalMessage, pickAutoApprovalButton } from '../providers/approval-utils.js';
 import type { ProviderModule } from '../providers/contracts.js';
 import { buildRuntimeSystemChatMessage } from '../providers/chat-message-normalization.js';
 
@@ -210,8 +210,7 @@ export class AgentStreamPoller {
                 if (stream?.status === 'waiting_approval') {
                     const autoApprove = providerLoader.getSettings(stream.agentType).autoApprove !== false;
                     if (autoApprove && resolvedActiveSessionId) {
-                        const provider = providerLoader.getMeta(stream.agentType);
-                        const { label: buttonLabel } = pickApprovalButton(stream.activeModal?.buttons, provider);
+                        const { label: buttonLabel } = pickAutoApprovalButton(stream.activeModal?.buttons);
                         const approved = await agentStreamManager.resolveSessionAction(cdp, resolvedActiveSessionId, 'approve', buttonLabel);
                         if (approved) {
                             const effectId = [

package/src/boot/daemon-lifecycle.ts

@@ -37,6 +37,9 @@ import type { PtyTransportFactory } from '../cli-adapters/pty-transport.js';
 import type { IdeProviderInstance } from '../providers/ide-provider-instance.js';
 import { createDefaultGitCommandServices } from '../git/git-commands.js';
 import { setupMeshEventForwarding } from '../mesh/mesh-events.js';
+import { loadMeshCoordinatorRegistry } from '../mesh/coordinator-registry.js';
+import { applyProcessHardening } from './process-hardening.js';
+import { installProviderProcessShim } from '../providers/sdk/v1/sandbox/require-whitelist.js';
 
 // ─── Init Config ───
 
@@ -60,6 +63,7 @@ export interface DaemonInitConfig {
 
     /** Router transport-specific callbacks */
     onStatusChange?: () => void;
+    onMeshStateChange?: (meshId: string) => void;
     onPostChatCommand?: () => void;
     sessionHostControl?: SessionHostControlPlane | null;
     getCdpLogFn?: (ideType: string) => (msg: string) => void;
@@ -88,6 +92,8 @@ export interface DaemonInitConfig {
     dispatchMeshCommand?: (daemonId: string, command: string, args: Record<string, unknown>) => Promise<any>;
     /** Returns selected-coordinator mesh peer telemetry for a target daemon when available. */
     getMeshPeerConnectionStatus?: (daemonId: string) => Record<string, unknown> | null;
+    /** Cloud-only: P2P dashboard metadata sync after the core forwarder handles a mesh event. */
+    onMeshCoordinatorEventForwarded?: (payload: Record<string, unknown>) => void;
 }
 
 // ─── Result ───
@@ -106,6 +112,11 @@ export interface DaemonComponents {
     detectedIdes: { value: IDEInfo[] };
     refreshProviderAvailability: (providerType?: string) => Promise<void>;
     dispatchMeshCommand?: (daemonId: string, command: string, args: Record<string, unknown>) => Promise<any>;
+    // Cloud-only hook: after the single core forwarder handles a mesh coordinator event, cloud
+    // uses this to keep its P2P dashboard view in sync (mesh-owned session metadata + flush
+    // subscriptions). Injected by daemon-cloud; absent/no-op on standalone. Replaces cloud's
+    // former separate instanceManager.onEvent listener so the event path stays single-listener.
+    onMeshCoordinatorEventForwarded?: (payload: Record<string, unknown>) => void;
 }
 
 export interface DaemonDevSupportOptions {
@@ -129,8 +140,16 @@ export interface DaemonDevSupportOptions {
  *   8. Start instance ticking
  */
 export async function initDaemonComponents(config: DaemonInitConfig): Promise<DaemonComponents> {
+    // 0. Process-level hardening (must run before any provider script is loaded).
+    //    Freezes built-in prototypes (Object/Array/Function/String/Number/Boolean/Promise)
+    //    and shadows process.exit/kill/abort/binding/dlopen so provider-script callers
+    //    throw instead of killing the daemon. See ./process-hardening.ts for details.
+    applyProcessHardening();
+    installProviderProcessShim();
+
     // 1. Global log interceptor
     installGlobalInterceptor();
+    loadMeshCoordinatorRegistry();
 
     // 2. ProviderLoader (provider source mode from config.json)
     const appConfig = loadConfig();
@@ -142,16 +161,11 @@ export async function initDaemonComponents(config: DaemonInitConfig): Promise<Da
         userDir: appConfig.providerDir,
     });
 
-    // If no upstream providers exist, fetch them first (blocking — critical for new users)
-    if (!disableUpstream && !providerLoader.hasUpstream()) {
-        LOG.info('Provider', 'No upstream providers found — downloading from GitHub...');
-        try {
-            await providerLoader.fetchLatest();
-        } catch (e: any) {
-            LOG.warn('Provider', `⚠ Failed to fetch providers: ${e?.message}`);
-        }
-    }
-
+    // Boot-time auto-sync is intentionally disabled. The user picks which
+    // providers to install via the dashboard onboarding / Providers tab; the
+    // daemon ships empty and only contains what the user explicitly installs.
+    // Manual sync is still available via the install / check_provider_updates
+    // commands (and the REST endpoint at /api/v1/providers/updates).
     providerLoader.loadAll();
     providerLoader.registerToDetector();
 
@@ -304,11 +318,13 @@ export async function initDaemonComponents(config: DaemonInitConfig): Promise<Da
         },
         onIdeConnected: () => poller?.start(),
         onStatusChange: config.onStatusChange,
+        onMeshStateChange: config.onMeshStateChange,
         onPostChatCommand: config.onPostChatCommand,
         sessionHostControl: config.sessionHostControl,
         statusInstanceId: config.statusInstanceId,
         statusVersion: config.statusVersion,
         getMeshPeerConnectionStatus: config.getMeshPeerConnectionStatus,
+        dispatchMeshCommand: config.dispatchMeshCommand,
         getCdpLogFn: config.getCdpLogFn || ((ideType: string) => LOG.forComponent(`CDP:${ideType}`).asLogFn()),
     });
 
@@ -339,11 +355,15 @@ export async function initDaemonComponents(config: DaemonInitConfig): Promise<Da
         detectedIdes: detectedIdesRef,
         refreshProviderAvailability,
         dispatchMeshCommand: config.dispatchMeshCommand,
+        onMeshCoordinatorEventForwarded: config.onMeshCoordinatorEventForwarded,
     };
 
     // 11. Setup Mesh Event Forwarding
     setupMeshEventForwarding(components);
 
+    // 12. Resume any refine jobs that were interrupted by a previous daemon restart.
+    setImmediate(() => void router.resumePendingRefineJobsOnStartup());
+
     return components;
 }
 

package/src/boot/process-hardening.ts

@@ -0,0 +1,89 @@
+/**
+ * Process-level hardening — boot-time mitigations against provider scripts.
+ *
+ * Provider scripts run in-process (see providers/sdk/v1/sandbox/README-design.ts).
+ * The require() whitelist (sandbox/require-whitelist.ts) blocks the obvious
+ * attack surfaces (no `child_process.exec`, no `fs.writeFile`, no `net`, etc.)
+ * but a malicious or buggy script can still:
+ *
+ *   1. Pollute Object.prototype to influence the daemon's downstream consumers
+ *      (e.g. `Object.prototype.toString = () => '...'` makes every untagged
+ *      object stringify to that value across the whole process).
+ *   2. Mutate Array/Function/String prototypes for similar effect.
+ *   3. Call `process.exit()` / `process.kill()` to kill the daemon.
+ *
+ * Sandbox isolation (isolated-vm) is the proper fix but has a real perf cost
+ * and a real marshalling-complexity cost. As a cheaper layer we just freeze
+ * the built-in prototypes at boot, which is irreversible and catches every
+ * prototype-pollution variant for the lifetime of the process.
+ *
+ * `applyProcessHardening()` is idempotent — calling it twice is a no-op the
+ * second time. The function intentionally swallows any "cannot redefine
+ * property" errors that would arise if some upstream code already froze
+ * the same prototype: the post-condition (prototype is frozen) is satisfied
+ * either way.
+ *
+ * Trade-offs:
+ *   - Read-only access to prototype methods (`Object.prototype.hasOwnProperty.call`,
+ *     `Array.prototype.slice.call`, etc.) is unaffected — only writes throw.
+ *   - Some older npm libraries patch Array.prototype or Function.prototype at
+ *     import time. If a daemon-core dep does this, the import will throw. The
+ *     daemon-core vitest suite is the canonical regression check for this.
+ *   - We deliberately do NOT freeze RegExp.prototype, Error.prototype, Map/Set
+ *     prototypes, or Date.prototype because at least one of those tends to be
+ *     mutated by mainstream test/runtime libs and the value of freezing them
+ *     is low (no useful prototype-pollution attack surface).
+ */
+
+let _hardened = false;
+
+/** Prototypes that get frozen at boot. */
+const HARDENED_PROTOS: Array<{ name: string; proto: object }> = [
+    { name: 'Object', proto: Object.prototype },
+    { name: 'Array', proto: Array.prototype },
+    { name: 'Function', proto: Function.prototype },
+    { name: 'String', proto: String.prototype },
+    { name: 'Number', proto: Number.prototype },
+    { name: 'Boolean', proto: Boolean.prototype },
+    { name: 'Promise', proto: Promise.prototype },
+];
+
+/**
+ * Freeze the canonical built-in prototypes so provider scripts (and anything
+ * else running in this process) cannot mutate them. Idempotent.
+ *
+ * Returns the list of prototype names that were newly frozen — primarily for
+ * tests / observability. Already-frozen prototypes are not re-reported.
+ */
+export function applyProcessHardening(): string[] {
+    if (_hardened) return [];
+    _hardened = true;
+
+    const newlyFrozen: string[] = [];
+    for (const entry of HARDENED_PROTOS) {
+        if (Object.isFrozen(entry.proto)) continue;
+        try {
+            Object.freeze(entry.proto);
+            newlyFrozen.push(entry.name);
+        } catch {
+            // Some host/runtime combinations refuse to freeze a built-in
+            // prototype (e.g. it has a non-configurable accessor). We treat
+            // this as best-effort — log nothing here (logger not guaranteed
+            // to be initialized this early) and move on. Subsequent reads
+            // of `Object.isFrozen(proto)` will reveal the gap.
+        }
+    }
+    return newlyFrozen;
+}
+
+/** For tests only — clears the internal "already hardened" flag. The
+ *  prototypes themselves cannot be un-frozen, so this is mostly useful for
+ *  testing the idempotency guard. */
+export function _resetProcessHardeningForTest(): void {
+    _hardened = false;
+}
+
+/** For tests only — peek at the hardened state. */
+export function _isProcessHardened(): boolean {
+    return _hardened;
+}