@adhdev/mesh-shared 1.0.82-rc.16 → 1.0.82-rc.17

package/dist/launch-defaults.d.ts

@@ -0,0 +1,194 @@
+/** Daemon-local launch intent and command wire contract. P2P/local only;
+ * never include this document or its history in cloud status_report.
+ * Publication through mesh-shared's barrel is a later integration step. */
+export declare const LAUNCH_DEFAULT_ROLES: readonly ["assistant", "coordinator"];
+export type LaunchDefaultRole = typeof LAUNCH_DEFAULT_ROLES[number];
+export declare const LAUNCH_DEFAULT_SOURCES: readonly ["user", "stored_default", "project_default", "provider_default"];
+export type LaunchDefaultSource = typeof LAUNCH_DEFAULT_SOURCES[number];
+export declare const LAUNCH_DEFAULTS_NEXT_LAUNCH_NOTE = "Applies to the next launch; running sessions are unchanged.";
+export declare function isLaunchDefaultRole(value: unknown): value is LaunchDefaultRole;
+export declare function isLaunchDefaultSource(value: unknown): value is LaunchDefaultSource;
+export interface LaunchDefaultSelection {
+    provider: string;
+    /** Omission means pass no model/thinking argument, not inherit another provider. */
+    model?: string;
+    thinkingLevel?: string;
+}
+export type LaunchDefaultToolRestriction = 'enforced' | 'prompt_only';
+export type LaunchDefaultOrigin = 'owner' | 'human' | 'relay' | 'review' | 'review_tainted';
+export interface LaunchDefaultEntry extends LaunchDefaultSelection {
+    revision: number;
+    setBy: 'owner' | 'assistant';
+    setAt: number;
+}
+export interface LaunchDefaultChange {
+    at: number;
+    role: LaunchDefaultRole;
+    by: 'owner' | 'assistant';
+    origin: LaunchDefaultOrigin;
+    from: LaunchDefaultEntry | null;
+    to: LaunchDefaultEntry | null;
+}
+export interface LaunchDefaultsDocument {
+    version: 1;
+    /** Global document token, including clears; distinct from entry revisions. */
+    revision: number;
+    assistant?: LaunchDefaultEntry;
+    coordinator?: LaunchDefaultEntry;
+    history: LaunchDefaultChange[];
+}
+export interface LaunchDefaultRef {
+    role: LaunchDefaultRole;
+    scope: 'global' | 'project';
+    /** Entry revision for global defaults; host project token for project defaults. */
+    revision: number;
+    projectId?: string;
+}
+export type LaunchDefaultField = keyof LaunchDefaultSelection;
+export interface LaunchDefaultAxis {
+    value: string | null;
+    source: LaunchDefaultSource;
+    defaultRef?: LaunchDefaultRef;
+}
+export type LaunchDefaultWarning = 'catalog_unverified' | 'manual_mcp_setup_required';
+export type LaunchDefaultValidationReason = 'invalid_schema' | 'provider_unknown' | 'provider_not_cli' | 'provider_disabled' | 'provider_not_detected' | 'provider_not_eligible' | 'model_unsupported' | 'model_provider_mismatch' | 'model_not_offered' | 'thinking_unsupported' | 'thinking_not_offered' | 'catalog_unavailable';
+export type LaunchDefaultResolution = {
+    ok: true;
+    selection: LaunchDefaultSelection;
+    applied: Record<LaunchDefaultField, LaunchDefaultAxis>;
+    defaultRef?: LaunchDefaultRef;
+    documentRevision: number;
+    warnings: LaunchDefaultWarning[];
+    toolRestriction: LaunchDefaultToolRestriction;
+} | {
+    ok: false;
+    code: 'launch_default_required' | 'launch_default_unavailable' | 'launch_selection_invalid';
+    role: LaunchDefaultRole;
+    field: LaunchDefaultField;
+    reason: string;
+    source?: LaunchDefaultSource;
+    value?: string | null;
+    defaultRef?: LaunchDefaultRef;
+    candidates?: readonly string[];
+    hint: string;
+};
+export interface LaunchDefaultsRoleView {
+    stored: LaunchDefaultEntry | null;
+    /** The existing daemon resolver's result, including loud failures. */
+    effective: LaunchDefaultResolution;
+}
+type Target = {
+    role: 'assistant';
+    project?: never;
+} | {
+    role: 'coordinator';
+    project?: string;
+};
+export type LaunchDefaultsReadRequest = ({
+    action?: 'get';
+} & (Target | {
+    role?: never;
+    project?: never;
+})) | ({
+    action: 'check';
+} & Target & LaunchDefaultSelection);
+/** Mandatory CAS: global document token, or host project token for project writes.
+ * 0 is explicit first setup; clears advance the token and never restore fallback. */
+export type LaunchDefaultsSetRequest = Target & {
+    expectedRevision: number;
+} & (({
+    action: 'set';
+} & LaunchDefaultSelection) | {
+    action: 'clear';
+    provider?: never;
+    model?: never;
+    thinkingLevel?: never;
+});
+/** Existing assistant routing envelope; session identity never supplies origin. */
+export type AssistantLaunchDefaultsReadRequest = LaunchDefaultsReadRequest & {
+    assistantSessionId?: string;
+};
+export type AssistantLaunchDefaultsSetRequest = LaunchDefaultsSetRequest & {
+    assistantSessionId?: string;
+};
+export declare const LAUNCH_DEFAULT_ERROR_CODES: readonly ["invalid_args", "launch_default_required", "launch_default_unavailable", "launch_selection_invalid", "launch_default_invalid", "revision_conflict", "store_unavailable", "store_busy", "persistence_failed", "project_not_found", "project_ambiguous", "project_not_hosted", "project_storage_unavailable", "staging_unavailable", "staging_failed", "review_turn_tool_denied"];
+export type LaunchDefaultsErrorCode = typeof LAUNCH_DEFAULT_ERROR_CODES[number];
+export interface LaunchDefaultsError {
+    success: false;
+    code: LaunchDefaultsErrorCode;
+    error: string;
+    reason?: string;
+    role?: LaunchDefaultRole;
+    field?: LaunchDefaultField;
+    source?: LaunchDefaultSource;
+    value?: string | null;
+    defaultRef?: LaunchDefaultRef;
+    candidates?: readonly string[];
+    actualRevision?: number;
+    /** 0 for an absent global document; absent when it cannot be read. */
+    documentRevision?: number;
+    /** A persistence failure can replace intent without confirming durability.
+     * Re-read before retrying; never report applied on committed:true alone. */
+    committed?: boolean;
+}
+export interface LaunchDefaultsReadSuccess {
+    success: true;
+    result: 'get';
+    documentRevision: number;
+    roles: Partial<Record<LaunchDefaultRole, LaunchDefaultsRoleView>>;
+    project?: {
+        projectId: string;
+        revision: number;
+        entry: LaunchDefaultEntry | null;
+    };
+}
+export interface LaunchDefaultsCheckSuccess {
+    success: true;
+    result: 'check';
+    role: LaunchDefaultRole;
+    selection: LaunchDefaultSelection;
+    warnings: LaunchDefaultWarning[];
+    toolRestriction: LaunchDefaultToolRestriction;
+    lowersToolLock: boolean;
+}
+export interface LaunchDefaultsApplied {
+    success: true;
+    result: 'applied';
+    role: LaunchDefaultRole;
+    scope: 'global' | 'project';
+    projectId?: string;
+    entry: LaunchDefaultEntry | null;
+    previous: LaunchDefaultEntry | null;
+    /** CAS token returned by the authority that performed the write. */
+    revision: number;
+    warnings: LaunchDefaultWarning[];
+    durable: true;
+    note: string;
+}
+export interface LaunchDefaultsStaged {
+    success: true;
+    result: 'staged';
+    role: LaunchDefaultRole;
+    stagedId: string;
+    previous: LaunchDefaultEntry | null;
+    selection: LaunchDefaultSelection | null;
+    expectedRevision: number;
+    warnings: LaunchDefaultWarning[];
+    note: string;
+}
+/** Existing owner Inbox adapter stores this proposal; it is not another default.
+ * Applying it must revalidate on the host and CAS via the same set handler. */
+export interface LaunchDefaultsProposal {
+    kind: 'launch_defaults';
+    role: LaunchDefaultRole;
+    project?: string;
+    selection: LaunchDefaultSelection | null;
+    previous: LaunchDefaultEntry | null;
+    expectedRevision: number;
+    origin: LaunchDefaultOrigin;
+    callerSessionId?: string;
+}
+export type LaunchDefaultsReadResponse = LaunchDefaultsReadSuccess | LaunchDefaultsCheckSuccess | LaunchDefaultsError;
+export type LaunchDefaultsSetResponse = LaunchDefaultsApplied | LaunchDefaultsStaged | LaunchDefaultsError;
+export type LaunchDefaultsResponse = LaunchDefaultsReadResponse | LaunchDefaultsSetResponse;
+export {};

package/dist/mesh-tool-names.d.ts

@@ -18,10 +18,10 @@
  * Order mirrors mcp-server `ALL_MESH_TOOLS` for easy visual diffing, but the consistency
  * checks are set-based (order-insensitive).
  */
-export declare const CANONICAL_MESH_TOOL_NAMES: readonly ["mesh_status", "mesh_route_preview", "mesh_list_nodes", "mesh_enqueue_batch", "mesh_enqueue_task", "mesh_view_queue", "mesh_queue_cancel", "mesh_queue_requeue", "mesh_send_task", "mesh_read_chat", "mesh_read_debug", "mesh_read_terminal", "mesh_send_keys", "mesh_launch_session", "mesh_git_status", "mesh_read_node_logs", "mesh_fast_forward_node", "mesh_restart_daemon", "mesh_checkpoint", "mesh_approve", "mesh_answer_question", "mesh_list_pending_approvals", "mesh_create", "mesh_add_node", "mesh_clone_node", "mesh_remove_node", "mesh_cleanup_worktree_nodes", "mesh_refine_node", "mesh_refine_batch", "mesh_config", "mesh_init", "mesh_cleanup_sessions", "mesh_task_history", "mesh_ledger_query", "mesh_note", "mesh_reconcile_ledger", "mesh_mission_upsert", "mesh_mission_list", "mesh_review_inbox", "mesh_node_slots"];
+export declare const CANONICAL_MESH_TOOL_NAMES: readonly ["mesh_status", "mesh_route_preview", "mesh_list_nodes", "mesh_enqueue_batch", "mesh_enqueue_task", "mesh_view_queue", "mesh_queue_cancel", "mesh_queue_requeue", "mesh_send_task", "mesh_read_chat", "mesh_read_debug", "mesh_read_terminal", "mesh_send_keys", "mesh_launch_session", "mesh_git_status", "mesh_read_node_logs", "mesh_fast_forward_node", "mesh_restart_daemon", "mesh_checkpoint", "mesh_approve", "mesh_answer_question", "mesh_list_pending_approvals", "mesh_create", "mesh_add_node", "mesh_attach_remote", "mesh_clone_node", "mesh_remove_node", "mesh_cleanup_worktree_nodes", "mesh_refine_node", "mesh_refine_batch", "mesh_config", "mesh_init", "mesh_cleanup_sessions", "mesh_task_history", "mesh_ledger_query", "mesh_note", "mesh_reconcile_ledger", "mesh_mission_upsert", "mesh_mission_list", "mesh_review_inbox", "mesh_node_slots"];
 export type CanonicalMeshToolName = typeof CANONICAL_MESH_TOOL_NAMES[number];
 /** The count the `NN tools` barrel doc comments and consistency test assert against. */
-export declare const CANONICAL_MESH_TOOL_COUNT: 40;
+export declare const CANONICAL_MESH_TOOL_COUNT: 41;
 /**
  * Tool names retired by the 2026-09-26 tool-surface consolidation (60 → 48).
  * Every capability behind them is still reachable: each retired name maps to the

package/dist/quota-freshness.d.ts

@@ -17,7 +17,7 @@ export interface QuotaFreshness {
     cue?: QuotaFreshnessCue;
     /**
      * Only the USER can produce a new reading (aged-out Claude statusline;
-     * antigravity expired token — the daemon never redeems it). The surface
+     * expired CLI access token — the daemon never redeems it). The surface
      * should say what to run, not promise a self-heal.
      */
     userMustAct: boolean;
@@ -49,9 +49,9 @@ export declare const QUOTA_BACKFILL_HORIZON_MS: number;
  *        a session must run). Codex's `no-data` is the daemon re-reading the
  *        rollout files itself (≈60s while a CLI is active, ≤60 min idle), so it
  *        is `stale` WITHOUT userMustAct;
- *      · antigravity `expired-token` — the daemon deliberately does not redeem
- *        the refresh token. Kimi's expired-token is NOT here: its CLI refreshes
- *        the token on its own cadence.
+ *      · `expired-token` on Grok/Kimi/antigravity — only the owning CLI
+ *        renews it on use. An idle CLI has no background renewal cadence.
+ *        A scheduled quota retry does not itself renew credentials.
  *  - `refreshing` — retained numbers after a transient failure with a retry
  *    actually pending. ★Honest about the end of the retry budget: once the
  *    daemon has stopped retrying (`metadata.retryExhausted`, or `retryAtMs`

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@adhdev/mesh-shared",
-  "version": "1.0.82-rc.16",
-  "description": "ADHDev mesh-shared \u2014 pure mesh/git status normalizers shared by daemon-core and web-core",
+  "version": "1.0.82-rc.17",
+  "description": "ADHDev mesh-shared — pure mesh/git status normalizers shared by daemon-core and web-core",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {

package/src/assistant-protocol.ts

@@ -25,6 +25,7 @@ export const ASSISTANT_TOOLS = [
     'project_send',
     'project_read',
     'project_add',
+    'project_attach_remote',
     'discover_repos',
     'memory',
     'skill_view',
@@ -53,6 +54,7 @@ export const ASSISTANT_VERB = {
     projectSend: 'assistant_project_send',
     projectRead: 'assistant_project_read',
     projectAdd: 'assistant_project_add',
+    projectAttachRemote: 'assistant_project_attach_remote',
     discoverRepos: 'assistant_discover_repos',
     memory: 'assistant_memory',
     skillView: 'assistant_skill_view',
@@ -79,6 +81,7 @@ export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>
     project_send: ASSISTANT_VERB.projectSend,
     project_read: ASSISTANT_VERB.projectRead,
     project_add: ASSISTANT_VERB.projectAdd,
+    project_attach_remote: ASSISTANT_VERB.projectAttachRemote,
     discover_repos: ASSISTANT_VERB.discoverRepos,
     memory: ASSISTANT_VERB.memory,
     skill_view: ASSISTANT_VERB.skillView,
@@ -92,7 +95,7 @@ export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>
  * because they cause effects (a coordinator message or launch, a new
  * project), and MCP clients use readOnlyHint to skip confirmation.
  */
-export const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[] = ['project_watch', 'assistant_action', 'memory', 'skill_manage', 'project_note', 'project_send', 'project_add']
+export const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[] = ['project_watch', 'assistant_action', 'memory', 'skill_manage', 'project_note', 'project_send', 'project_add', 'project_attach_remote']
 
 /** Owner-only verbs: never reachable from the assistant's MCP server (no `ipc`). */
 export const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[] = [

package/src/index.ts

@@ -44,3 +44,4 @@ export * from './mission-brief'
 export * from './keyed-doc-delta'
 export * from './provider-approval'
 export * from './provider-question'
+export * from './launch-defaults'

package/src/launch-defaults.ts

@@ -0,0 +1,168 @@
+/** Daemon-local launch intent and command wire contract. P2P/local only;
+ * never include this document or its history in cloud status_report.
+ * Publication through mesh-shared's barrel is a later integration step. */
+export const LAUNCH_DEFAULT_ROLES = ['assistant', 'coordinator'] as const;
+export type LaunchDefaultRole = typeof LAUNCH_DEFAULT_ROLES[number];
+export const LAUNCH_DEFAULT_SOURCES = ['user', 'stored_default', 'project_default', 'provider_default'] as const;
+export type LaunchDefaultSource = typeof LAUNCH_DEFAULT_SOURCES[number];
+export const LAUNCH_DEFAULTS_NEXT_LAUNCH_NOTE = 'Applies to the next launch; running sessions are unchanged.';
+export function isLaunchDefaultRole(value: unknown): value is LaunchDefaultRole {
+    return typeof value === 'string' && (LAUNCH_DEFAULT_ROLES as readonly string[]).includes(value);
+}
+export function isLaunchDefaultSource(value: unknown): value is LaunchDefaultSource {
+    return typeof value === 'string' && (LAUNCH_DEFAULT_SOURCES as readonly string[]).includes(value);
+}
+export interface LaunchDefaultSelection {
+    provider: string;
+    /** Omission means pass no model/thinking argument, not inherit another provider. */
+    model?: string;
+    thinkingLevel?: string;
+}
+export type LaunchDefaultToolRestriction = 'enforced' | 'prompt_only';
+export type LaunchDefaultOrigin = 'owner' | 'human' | 'relay' | 'review' | 'review_tainted';
+export interface LaunchDefaultEntry extends LaunchDefaultSelection {
+    revision: number;
+    setBy: 'owner' | 'assistant';
+    setAt: number;
+}
+export interface LaunchDefaultChange {
+    at: number;
+    role: LaunchDefaultRole;
+    by: 'owner' | 'assistant';
+    origin: LaunchDefaultOrigin;
+    from: LaunchDefaultEntry | null;
+    to: LaunchDefaultEntry | null;
+}
+export interface LaunchDefaultsDocument {
+    version: 1;
+    /** Global document token, including clears; distinct from entry revisions. */
+    revision: number;
+    assistant?: LaunchDefaultEntry;
+    coordinator?: LaunchDefaultEntry;
+    history: LaunchDefaultChange[];
+}
+export interface LaunchDefaultRef {
+    role: LaunchDefaultRole;
+    scope: 'global' | 'project';
+    /** Entry revision for global defaults; host project token for project defaults. */
+    revision: number;
+    projectId?: string;
+}
+export type LaunchDefaultField = keyof LaunchDefaultSelection;
+export interface LaunchDefaultAxis {
+    value: string | null;
+    source: LaunchDefaultSource;
+    defaultRef?: LaunchDefaultRef;
+}
+export type LaunchDefaultWarning = 'catalog_unverified' | 'manual_mcp_setup_required';
+export type LaunchDefaultValidationReason =
+    | 'invalid_schema' | 'provider_unknown' | 'provider_not_cli' | 'provider_disabled'
+    | 'provider_not_detected' | 'provider_not_eligible' | 'model_unsupported'
+    | 'model_provider_mismatch' | 'model_not_offered' | 'thinking_unsupported'
+    | 'thinking_not_offered' | 'catalog_unavailable';
+export type LaunchDefaultResolution =
+    | { ok: true; selection: LaunchDefaultSelection; applied: Record<LaunchDefaultField, LaunchDefaultAxis>;
+        defaultRef?: LaunchDefaultRef; documentRevision: number; warnings: LaunchDefaultWarning[];
+        toolRestriction: LaunchDefaultToolRestriction }
+    | { ok: false; code: 'launch_default_required' | 'launch_default_unavailable' | 'launch_selection_invalid';
+        role: LaunchDefaultRole; field: LaunchDefaultField; reason: string; source?: LaunchDefaultSource;
+        value?: string | null; defaultRef?: LaunchDefaultRef; candidates?: readonly string[]; hint: string };
+export interface LaunchDefaultsRoleView {
+    stored: LaunchDefaultEntry | null;
+    /** The existing daemon resolver's result, including loud failures. */
+    effective: LaunchDefaultResolution;
+}
+type Target = { role: 'assistant'; project?: never } | { role: 'coordinator'; project?: string };
+export type LaunchDefaultsReadRequest =
+    | ({ action?: 'get' } & (Target | { role?: never; project?: never }))
+    | ({ action: 'check' } & Target & LaunchDefaultSelection);
+/** Mandatory CAS: global document token, or host project token for project writes.
+ * 0 is explicit first setup; clears advance the token and never restore fallback. */
+export type LaunchDefaultsSetRequest = Target & { expectedRevision: number } & (
+    | ({ action: 'set' } & LaunchDefaultSelection)
+    | { action: 'clear'; provider?: never; model?: never; thinkingLevel?: never }
+);
+/** Existing assistant routing envelope; session identity never supplies origin. */
+export type AssistantLaunchDefaultsReadRequest = LaunchDefaultsReadRequest & { assistantSessionId?: string };
+export type AssistantLaunchDefaultsSetRequest = LaunchDefaultsSetRequest & { assistantSessionId?: string };
+export const LAUNCH_DEFAULT_ERROR_CODES = [
+    'invalid_args', 'launch_default_required', 'launch_default_unavailable', 'launch_selection_invalid',
+    'launch_default_invalid', 'revision_conflict', 'store_unavailable', 'store_busy', 'persistence_failed',
+    'project_not_found', 'project_ambiguous', 'project_not_hosted', 'project_storage_unavailable',
+    'staging_unavailable', 'staging_failed', 'review_turn_tool_denied',
+] as const;
+export type LaunchDefaultsErrorCode = typeof LAUNCH_DEFAULT_ERROR_CODES[number];
+export interface LaunchDefaultsError {
+    success: false;
+    code: LaunchDefaultsErrorCode;
+    error: string;
+    reason?: string;
+    role?: LaunchDefaultRole;
+    field?: LaunchDefaultField;
+    source?: LaunchDefaultSource;
+    value?: string | null;
+    defaultRef?: LaunchDefaultRef;
+    candidates?: readonly string[];
+    actualRevision?: number;
+    /** 0 for an absent global document; absent when it cannot be read. */
+    documentRevision?: number;
+    /** A persistence failure can replace intent without confirming durability.
+     * Re-read before retrying; never report applied on committed:true alone. */
+    committed?: boolean;
+}
+export interface LaunchDefaultsReadSuccess {
+    success: true;
+    result: 'get';
+    documentRevision: number;
+    roles: Partial<Record<LaunchDefaultRole, LaunchDefaultsRoleView>>;
+    project?: { projectId: string; revision: number; entry: LaunchDefaultEntry | null };
+}
+export interface LaunchDefaultsCheckSuccess {
+    success: true;
+    result: 'check';
+    role: LaunchDefaultRole;
+    selection: LaunchDefaultSelection;
+    warnings: LaunchDefaultWarning[];
+    toolRestriction: LaunchDefaultToolRestriction;
+    lowersToolLock: boolean;
+}
+export interface LaunchDefaultsApplied {
+    success: true;
+    result: 'applied';
+    role: LaunchDefaultRole;
+    scope: 'global' | 'project';
+    projectId?: string;
+    entry: LaunchDefaultEntry | null;
+    previous: LaunchDefaultEntry | null;
+    /** CAS token returned by the authority that performed the write. */
+    revision: number;
+    warnings: LaunchDefaultWarning[];
+    durable: true;
+    note: string;
+}
+export interface LaunchDefaultsStaged {
+    success: true;
+    result: 'staged';
+    role: LaunchDefaultRole;
+    stagedId: string;
+    previous: LaunchDefaultEntry | null;
+    selection: LaunchDefaultSelection | null;
+    expectedRevision: number;
+    warnings: LaunchDefaultWarning[];
+    note: string;
+}
+/** Existing owner Inbox adapter stores this proposal; it is not another default.
+ * Applying it must revalidate on the host and CAS via the same set handler. */
+export interface LaunchDefaultsProposal {
+    kind: 'launch_defaults';
+    role: LaunchDefaultRole;
+    project?: string;
+    selection: LaunchDefaultSelection | null;
+    previous: LaunchDefaultEntry | null;
+    expectedRevision: number;
+    origin: LaunchDefaultOrigin;
+    callerSessionId?: string;
+}
+export type LaunchDefaultsReadResponse = LaunchDefaultsReadSuccess | LaunchDefaultsCheckSuccess | LaunchDefaultsError;
+export type LaunchDefaultsSetResponse = LaunchDefaultsApplied | LaunchDefaultsStaged | LaunchDefaultsError;
+export type LaunchDefaultsResponse = LaunchDefaultsReadResponse | LaunchDefaultsSetResponse;

package/src/mesh-tool-names.ts

@@ -44,6 +44,7 @@ export const CANONICAL_MESH_TOOL_NAMES = [
     'mesh_list_pending_approvals',
     'mesh_create',
     'mesh_add_node',
+    'mesh_attach_remote',
     'mesh_clone_node',
     'mesh_remove_node',
     'mesh_cleanup_worktree_nodes',

package/src/quota-freshness.ts

@@ -19,7 +19,7 @@ export interface QuotaFreshness {
     cue?: QuotaFreshnessCue
     /**
      * Only the USER can produce a new reading (aged-out Claude statusline;
-     * antigravity expired token — the daemon never redeems it). The surface
+     * expired CLI access token — the daemon never redeems it). The surface
      * should say what to run, not promise a self-heal.
      */
     userMustAct: boolean
@@ -88,9 +88,9 @@ function backfillCheckAt(quota: MeshNodeFactsProviderQuota, now: number): number
  *        a session must run). Codex's `no-data` is the daemon re-reading the
  *        rollout files itself (≈60s while a CLI is active, ≤60 min idle), so it
  *        is `stale` WITHOUT userMustAct;
- *      · antigravity `expired-token` — the daemon deliberately does not redeem
- *        the refresh token. Kimi's expired-token is NOT here: its CLI refreshes
- *        the token on its own cadence.
+ *      · `expired-token` on Grok/Kimi/antigravity — only the owning CLI
+ *        renews it on use. An idle CLI has no background renewal cadence.
+ *        A scheduled quota retry does not itself renew credentials.
  *  - `refreshing` — retained numbers after a transient failure with a retry
  *    actually pending. ★Honest about the end of the retry budget: once the
  *    daemon has stopped retrying (`metadata.retryExhausted`, or `retryAtMs`
@@ -103,12 +103,20 @@ export function assessQuotaFreshness(quota: MeshNodeFactsProviderQuota, now: num
     const meta = quota.metadata
     const kind = meta?.failureKind
     const userMustAct = (kind === 'no-data' && quota.provider !== 'codex-cli')
-        || (kind === 'expired-token' && quota.provider === 'antigravity-cli')
+        || (kind === 'expired-token' && ['grok-cli', 'kimi', 'antigravity-cli'].includes(quota.provider))
     // Order matters: the aged-out Claude shape and the retained antigravity
     // shape both ALSO mark lastGoodWindows (mesh routing trusts retained numbers
     // until their reset), so they must be classified before the generic branch.
-    if (userMustAct && hasReading(quota)) return { cue: 'stale', userMustAct: true }
-    if (meta?.lastGoodWindows !== true) return { userMustAct }
+    if (userMustAct) return hasReading(quota) ? { cue: 'stale', userMustAct: true } : { userMustAct: true }
+    if (meta?.lastGoodWindows !== true) {
+        // A successful fetch is not a perpetual live reading. Use the DATA
+        // clock; a recent failed attempt must never rejuvenate old numbers.
+        const measuredAt = finiteMs(quota.updatedAt)
+        if (hasReading(quota) && (measuredAt === undefined || now - measuredAt >= QUOTA_BACKFILL_HORIZON_MS)) {
+            return { cue: 'stale', userMustAct }
+        }
+        return { userMustAct }
+    }
 
     const retryAtMs = finiteMs(meta?.retryAtMs)
     const retryStopped = meta?.retryExhausted === true