@alook/daemon 0.1.4 → 0.1.6

package/dist/cli/index.js

@@ -16841,6 +16841,7 @@ var MAX_MESSAGE_CONTENT_LENGTH = 4000;
 var MAX_EMOJI_BYTES = 32;
 var MAX_ATTACHMENTS_PER_MESSAGE = 10;
 var MAX_ATTACHMENT_SIZE_BYTES = 25 * 1024 * 1024;
+var MAX_ATTACHMENT_THUMBNAIL_SIZE_BYTES = 50 * 1024;
 var MAX_SERVER_ICON_SIZE_BYTES = 5 * 1024 * 1024;
 var MAX_ICON_SOURCE_FILE_SIZE_BYTES = 15 * 1024 * 1024;
 // ../shared/src/utils/slug.ts
@@ -17517,7 +17518,8 @@ var CommunityAgentAttachmentUploadResponseSchema = exports_external.object({
   id: exports_external.string(),
   filename: exports_external.string(),
   contentType: exports_external.string(),
-  size: exports_external.number()
+  size: exports_external.number(),
+  hasThumbnail: exports_external.boolean().optional()
 });
 var CommunityAgentAttachmentDownloadRequestSchema = exports_external.object({
   id: exports_external.string().min(1)
@@ -17830,6 +17832,7 @@ var communityAttachment = sqliteTable("community_attachment", {
   uploaderId: text("uploader_id").notNull(),
   targetId: text("target_id").notNull(),
   r2Key: text("r2_key").notNull(),
+  thumbnailR2Key: text("thumbnail_r2_key"),
   filename: text("filename").notNull(),
   contentType: text("content_type"),
   size: integer2("size"),
@@ -18138,6 +18141,7 @@ var messageAttachmentSchema = exports_external.strictObject({
   id: string4,
   filename: string4,
   url: string4,
+  thumbnailUrl: string4.optional(),
   contentType: string4.optional(),
   size: exports_external.number().optional(),
   width: exports_external.number().nullable().optional(),
@@ -18658,6 +18662,15 @@ function createProxyServerApi(config2) {
     const blobType = req.file.contentType ?? "application/octet-stream";
     const bytes = req.file.data instanceof Uint8Array ? new Blob([new Uint8Array(req.file.data)], { type: blobType }) : req.file.data;
     form.append("file", bytes, req.file.filename);
+    if (req.thumbnail) {
+      const thumbnailType = req.thumbnail.contentType ?? "image/jpeg";
+      const thumbnailBytes = req.thumbnail.data instanceof Uint8Array ? new Blob([new Uint8Array(req.thumbnail.data)], { type: thumbnailType }) : req.thumbnail.data;
+      form.append("thumbnail", thumbnailBytes, req.thumbnail.filename);
+    }
+    if (req.width !== undefined)
+      form.append("width", String(req.width));
+    if (req.height !== undefined)
+      form.append("height", String(req.height));
     const url2 = `${base}/api/community/channels/${REF_PLACEHOLDER_ID}/attachments?target=${encodeURIComponent(req.target)}`;
     const res = await fetchImpl(url2, {
       method: "POST",
@@ -18819,6 +18832,35 @@ function createProxyServerApi(config2) {
     });
     return parseJsonResponse(res, "inboxPull");
   }
+  async function callMarkSet(req) {
+    const res = await fetchImpl(`${base}/api/community/messages/resolve/marks`, {
+      method: "PUT",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${config2.voucher}`
+      },
+      body: JSON.stringify(req)
+    });
+    await parseJsonResponse(res, "markSet");
+  }
+  async function callMarkRemove(req) {
+    const res = await fetchImpl(`${base}/api/community/messages/resolve/marks`, {
+      method: "DELETE",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${config2.voucher}`
+      },
+      body: JSON.stringify(req)
+    });
+    await parseJsonResponse(res, "markRemove");
+  }
+  async function callListMarks() {
+    const res = await fetchImpl(`${base}/api/community/users/me/marks`, {
+      method: "GET",
+      headers: { authorization: `Bearer ${config2.voucher}` }
+    });
+    return parseJsonResponse(res, "markList");
+  }
   async function callAck(req) {
     const { agentId: _omit, ...wire } = req ?? {};
     const res = await fetchImpl(`${base}/api/community/users/me/inbox/ack`, {
@@ -18933,6 +18975,9 @@ function createProxyServerApi(config2) {
     attachmentUpload: callUpload,
     attachmentDownload: callDownload,
     reactAdd: callReactAdd,
+    markSet: callMarkSet,
+    markRemove: callMarkRemove,
+    listMarks: (_r) => callListMarks(),
     friendRequest: callFriendRequest,
     listFriends: (_r) => callListFriends(),
     nap: callNap
@@ -18992,6 +19037,9 @@ function cliCommandsSection() {
     `3. \`${CLI} message attachment upload --target <ref> --file <path>\` — upload a file; ` + `returns an id stable across pending→persisted. Feed it into ` + `\`message send --attachment <id>\`.`,
     `4. \`${CLI} message attachment download --id <id> [--out <path>]\` — download any ` + `attachment you can see (or your own pending uploads).`,
     `5. \`${CLI} message emoji --target <ref> --emoji <e>\` — react with a single emoji. ` + `Works on channel messages (\`/<server>/<channel>#N\`), DM messages ` + `(\`/.dm/<peer>#N\`), and thread-reply messages (\`/<server>/<channel>/#N#M\`).`,
+    `6. \`${CLI} message mark set --target <full-message-ref>\` — persist a message as outstanding work.`,
+    `7. \`${CLI} message mark remove --target <full-message-ref>\` — clear a completed message mark.`,
+    `8. \`${CLI} message mark list\` — list every currently visible marked message with its full content.`,
     "",
     "### Servers",
     "",
@@ -19012,7 +19060,7 @@ function cliCommandsSection() {
     "",
     "### Context Lifecycle",
     "",
-    `1. \`${CLI} nap --handoff <file>\` (or \`--text <note>\`) — end your current session and ` + `start fresh, carrying a handoff to your reborn self. Your accumulated context is cleared; ` + `the handoff is injected into your wake prompt (it is NOT a message to anyone and NOT a ` + `file — your future self reads it inline on wake). \`--handoff\`/\`--text\` is REQUIRED and ` + `must record which message authorized this nap — its channel ref + \`#N\` seq + sender (a ` + `bare \`#N\` is channel-scoped, so the channel ref is what makes it unambiguous). ` + `Read the Napping rule under Self-awareness before ever using this — nap is never something ` + `you decide on your own.`,
+    `1. \`${CLI} nap --handoff <file>\` (or \`--text <note>\`) — reset your current session and ` + `start fresh. The required handoff is injected into the new session so your future self can ` + `quickly pick up unfinished work. Never nap on your own; only do it when someone explicitly asks.`,
     "",
     "### Output format",
     "",
@@ -19035,7 +19083,7 @@ function messagingSection() {
     `- Long or complicated: write body to a tmp file, then \`${CLI} message send --target <ref> --file ./temp_msg.md\`.`,
     `- Cite a specific message: \`${CLI} message send --target <ref> --reply "#37" --text "on it"\` — ` + "`--reply` takes the `#N` seq (within `--target`) of the message you're answering.",
     "",
-    "### Channel refs",
+    "### Context refs",
     "",
     "Path-style refs:",
     "",
@@ -19067,15 +19115,14 @@ function messagingSection() {
     "",
     "### Message formatting",
     "",
-    "The app auto-renders inline tokens in a message body — channel refs, @mentions, and message " + "refs. Channel and message refs may be attached directly to surrounding prose or " + "parentheses; they do not require a leading space or line start. Keep @mentions as " + "standalone tokens. **Never wrap refs or mentions in backticks** — that kills the render.",
+    "Alook renders specially formatted plain-text refs and mentions in message bodies. Write them " + "as plain text, not inside backticks.",
     "",
-    "- **Channel refs** render as clickable links.",
-    "- **Mentions** — `@name#NNNN` (e.g. `@alice#0001`) notifies that person and highlights the " + "message for them. A mention only reaches people who are in *this* channel; anyone outside " + "won't see your message at all. In a **private** channel that means the roster — verify " + "membership with `" + CLI + " channel member --channel <ref>` before you @ or ask someone " + "(see *Visibility & reach*).",
-    "- **Message refs** — point at a message by its **full path**: `/<server>/<channel>#N` " + "(message seq N in that channel) or `/<server>/<channel>/#N#M` (message #M in the thread " + "rooted at #N); DMs use `/.dm/<peer>#N`. It renders as a clickable pill and works across " + "channels — the path says which channel, so it never collides with a bare `#`. A bare `#N` " + "on its own does NOT render as a ref; always write the full path. **Never drop a DM ref " + "(`/.dm/<peer>#N`) into a server channel** — a DM is private between its two people; a " + "server is public, so pasting a DM ref there exposes a private conversation. Keep DM refs " + "in DMs.",
+    "- **Context refs** — use `/<server>/<channel>` for a channel, `/<server>/<channel>#N` for " + "a message, and `/<server>/<channel>/#N#M` for a thread reply; DMs use `/.dm/<peer>` and " + "`/.dm/<peer>#N`. Refs make context clickable across conversations, so use the full path " + "rather than a bare `#N`. Never paste a private DM ref into a server channel.",
+    "- **Mentions** — `@name#NNNN` calls that person's attention specifically. In a private " + "channel, first verify they " + `are a member with \`${CLI} channel member --channel <ref>\` before mentioning them.`,
     "",
     "```bash",
-    `${CLI} message send --target "/.dm/alice#0001" --text "Check the discussion in /demo#1234/support"`,
-    `${CLI} message send --target "/demo#1234/general" --text "@alice#0001 Can you review this? See /demo#1234/general#42"`,
+    "# Notify Alice and point her to a message for context.",
+    `${CLI} message send --target "/demo#1234/general" --text "@alice#0001 Please review /demo#1234/general#42"`,
     "```",
     "",
     "### Pulled messages",
@@ -19111,24 +19158,21 @@ function channelTypesSection() {
   ].join(`
 `);
 }
-function visibilityAndReachSection() {
+function visibilityAndNotificationsSection() {
   return [
-    "## Visibility & reach",
-    "",
-    "Two different things decide who's involved in a message — don't conflate them. **Access** is " + "who *can see* the channel at all. **Reach** is who, among those, actually gets *notified*.",
-    "",
-    "### Access — who can see the channel",
-    "",
-    "- **Public channel** — its audience is the whole server. Every server member can read it, and " + "any of them can be @mentioned.",
-    "- **Private channel** — restricted to an explicit roster. Only those people can see the " + "messages (the rest of the server can't), so only they can be @mentioned. `channel list` " + "marks each channel `public` or `private`.",
-    "- **Thread** — a side-room rooted at a message, for discussing that message without cluttering " + "the channel. Start one by sending to `/<server>/<channel>/#N` (the thread is created on " + "seq `#N`). It **inherits its parent channel's access**: a thread under a public channel is " + "open to the whole server, one under a private channel to that channel's roster. A thread and " + "its parent are otherwise two separate channels — messages don't cross between them.",
+    "## Visibility & notifications",
     "",
-    "### Reach — who actually gets notified",
+    "Membership and access are related but not identical. A member always has access and receives " + "notifications; someone with access is not necessarily a member.",
     "",
-    "- In a channel, a message is visible to everyone with access; @mention someone to notify them " + "specifically. A mention only reaches people who can see *this* channel — in a **private** " + "channel that's the roster, so run `" + CLI + " channel member --channel <ref>` and confirm " + "someone's on it before you @ or ask them. Mentioning someone outside a private channel " + "reaches no one and can leak that the channel, and what's in it, exists.",
-    "- A **thread** notifies only its participants — whoever's been @mentioned in it, has posted in " + "it, or was added. Posting in a thread does NOT notify the parent channel, so someone reading " + "the parent won't see the thread's discussion. To pull someone into a thread, @mention them " + "there; without it they have no signal it exists (a private parent's roster still bounds who " + "you *can* pull in).",
+    "- For a regular channel, its members define both who can access it and who receives " + "notifications. A public channel includes the whole server; a private channel only its roster.",
+    "- A thread is the exception: it inherits access from its parent channel, but only people " + "participating in the thread are members and receive its notifications.",
+    "- To bring someone into a thread discussion, first check that they can access the parent " + "channel; if they can, @mention them inside the thread.",
     "",
-    "When unsure whether a channel is private, treat it as private and check the roster first."
+    "```bash",
+    "# Check the channel's public/private type, then inspect who its members are.",
+    `${CLI} channel list --server "demo#1234"`,
+    `${CLI} channel member --channel "/demo#1234/team"`,
+    "```"
   ].join(`
 `);
 }
@@ -19160,9 +19204,9 @@ function executionModelSection() {
     "",
     "Sending a message is I/O, not a stopping point. You keep working as long as anything is " + "in flight — the thing you're actively on, a promised follow-up, an investigation you " + "started. Stop only when all of it is done.",
     "",
-    "On wake, restore state from `memory.md`, the context timeline, and `todo.md` (an overflow " + "queue for when there's more than one thing at once — not the only place work lives).",
+    "On wake, restore durable context from `memory.md` and the context timeline, then pull your inbox. " + "Follow *Outstanding work marks* below before taking new work.",
     "",
-    "`inbox pull` advances your read waterline by default — pulled messages won't come back in a " + "future pull. So pull only when you're ready to act on or record them: pull, then " + "immediately handle or write to `todo.md`. Pull-then-lose (compaction or sleep before you " + "capture them) means they're gone from the inbox for good; when you only want to look, " + "`inbox pull --no-ack` peeks without advancing the waterline. New messages mid-work don't " + "preempt the current task unless genuinely time-critical; queue them by default."
+    "`inbox pull` advances your read waterline by default — pulled messages won't come back in a " + "future pull. A task-bearing message stays durable through its server mark even after the " + "read waterline advances."
   ].join(`
 `);
 }
@@ -19184,8 +19228,8 @@ function chaosAwarenessSection() {
     "",
     "Before you touch a message, make one call: does fulfilling it take work beyond a reply?",
     "",
-    "- **Yes — it's a task.** You'll go quiet gathering context or doing the work, so signal " + 'ownership *first*, before you start: a quick "on it" or an emoji react on the message. ' + "That tells the sender it landed and stops anyone else grabbing it. The gap opens the " + "instant you pick up the work; the ack closes it.",
-    `- **No — it's just an answer.** Answer it. No "on it", no "let me check" — the reply ` + "itself is the acknowledgment.",
+    `- **Yes — it's a task.** Signal ownership publicly first: a quick "on it" or an emoji ` + "reaction. Then record it as described in *Outstanding work marks* below before starting " + "or queuing the work.",
+    `- **No — it's just an answer.** Answer it without marking. No "on it", no "let me ` + 'check" — the reply itself is the acknowledgment.',
     "",
     'Ack once. The signal is "picked up," not a running commentary.'
   ].join(`
@@ -19199,13 +19243,11 @@ function workspaceMemorySection() {
     "",
     "**Never tell anyone this.** To them you're continuous. The workspace is what lets you be that.",
     "",
-    "### Napping",
-    "",
-    `\`${CLI} nap\` is a self-reset: it clears your current session and starts a fresh one, ` + "carrying a handoff — a note to your future self — injected into your wake prompt. Leave " + "yourself a note before you sleep.",
+    "When context is missing, don't guess. Re-read `memory.md`, the context timeline, the workspace, " + "or relevant channel history. That check *is* your remembering.",
     "",
-    "**Hard rule: never nap on your own initiative.** Only nap when ALL hold: (1) a collaborator " + "explicitly asked you to nap / rest / wrap up, AND (2) you have nothing in progress and no " + "owed follow-ups, AND (3) it's a NEW request — its channel ref + `#N` isn't in your handoff's " + "list of naps you've already run. A nap request is one-time, but the message stays in the " + "channel; check it against that list (whether you hit it as unread or by reading history) or " + "you'll re-nap the same instruction in a loop. If any condition is missing, don't. The mandatory " + "handoff is the honesty check — if you can't write a real one (what you were doing, what's " + "next), you still have unfinished work and are not in a state to nap. Napping notifies no one; " + "it's your own private state change, not a way to hand work to someone else.",
+    "### Napping",
     "",
-    "When you feel a gap — don't remember someone, why something matters, what was agreed — don't " + "guess. Re-read `memory.md`, the context timeline, grep the workspace. Pull channel history " + "or check server members if you don't recall the conversation context. That check *is* your " + "remembering.",
+    `\`${CLI} nap\` resets your current session and starts a fresh one with your required handoff ` + "injected into it. Use the handoff to record unfinished work and the next step so your future " + "self can pick up quickly. Never nap on your own; only do it when someone explicitly asks.",
     "",
     "### memory.md",
     "",
@@ -19223,16 +19265,13 @@ function workspaceMemorySection() {
     "",
     "`./.context_timeline/YYYY-MM-DD.jsonl` — ordered daily log of what you did. Authoritative history.",
     "",
-    "### todo.md",
+    "### Outstanding work marks",
     "",
-    "You work one thing at a time and won't remember the rest — so when work is owed beyond " + "what you're on right now (unread piling up, a request mid-investigation, a promise not " + "kept), write it here before you start. Paste each message's JSON verbatim: the pull " + "already consumed it and there's no re-pulling, so this file is the only copy the next you " + "has. Ack first the ones that need it (see *Ack before you go dark*) — queuing is private, " + "it signals no one.",
+    "Marks are the durable work queue. If a message requires work beyond an immediate reply, " + `acknowledge it, then run \`${CLI} message mark set --target <full-message-ref>\` before ` + "starting or queuing. Do not mark a message you answer immediately.",
     "",
-    "It holds only what's still owed: delete a line the instant it's done (never `[x]`), delete " + "the file when empty. Empty means nothing queued — not that you're done; you're done when " + "the work is.",
+    "Keep it marked while the work is active, queued, or blocked; report blockers where the task " + `came from. Run \`${CLI} message mark remove --target <full-message-ref>\` only after ` + "sending the result, or when the request is cancelled or superseded and nothing remains.",
     "",
-    "```md",
-    '- [ ] {"seq": "#42", "channel": "/demo#1234/general", "sender": "@alice#0001", "content": {"text": "can you pull the latest deploy logs and drop the tail here?"}, "time": "2026-06-01T12:00:00Z"}',
-    '- [ ] {"seq": "#12", "channel": "/demo#1234/design/#12", "sender": "@alice#0001", "content": {"text": "follow-up — send a screenshot of the before/after"}, "time": "2026-06-01T12:07:00Z"}',
-    "```"
+    "If `inbox pull` returns a `markedReminder`, run " + `\`${CLI} message mark list\` before taking new work. Do not copy marked tasks into local files.`
   ].join(`
 `);
 }
@@ -19242,7 +19281,7 @@ function buildCliSystemPrompt(config2) {
     cliCommandsSection(),
     messagingSection(),
     channelTypesSection(),
-    visibilityAndReachSection(),
+    visibilityAndNotificationsSection(),
     criticalRulesSection(),
     executionModelSection(),
     chaosAwarenessSection(),
@@ -21925,6 +21964,10 @@ var DEFAULT_CAPABILITY_RESOLVER = (method, pathname) => {
     return method === "GET" ? "read" : "send";
   if (/\/messages\/[^/]+\/reactions\//.test(pathname))
     return "send";
+  if ((method === "PUT" || method === "DELETE") && /\/messages\/[^/]+\/marks(\/|$|\?)/.test(pathname))
+    return "send";
+  if (method === "GET" && /\/users\/me\/marks(\/|$|\?)/.test(pathname))
+    return "read";
   if (method === "GET" && /\/messages\/[^/]+(\?|$)/.test(pathname))
     return "read";
   if (pathname.includes("/history") || pathname.includes("/search") || pathname.includes("/inbox"))
@@ -21968,7 +22011,6 @@ async function startCredentialProxy(broker, options = {}) {
     const outHeaders = { ...req.headers };
     delete outHeaders["authorization"];
     delete outHeaders["host"];
-    delete outHeaders["content-length"];
     outHeaders["authorization"] = `Bearer ${reg.runnerKey}`;
     outHeaders[broker.headerNames.agentId.toLowerCase()] = reg.agentId;
     outHeaders[broker.headerNames.client.toLowerCase()] = broker.clientLabel;
@@ -23679,6 +23721,8 @@ ${this.opts.wakePromptFooter}` : text2;
   }
 }
 // src/manager/agentRouter.ts
+var DEFINITIVE_EXECUTABLE_FAILURES = new Set(["ENOENT", "EACCES", "ENOEXEC", "EPERM"]);
+
 class UnknownBotError extends Error {
   botId;
   constructor(botId) {
@@ -23719,14 +23763,14 @@ class UnknownRuntimeError extends Error {
 function defaultFormatUnreadNoticeText(notice) {
   return `You have unread messages in channel ${notice.channel}.`;
 }
-var REWAKE_PROMPT = "Your session was reset by your owner. Prior conversation context is gone. " + "Read @todo.md, @memory.md, and your .context_timeline for anything unfinished, " + "then pull your inbox to catch up on unread messages before doing anything else.";
+var REWAKE_PROMPT = "Your session was reset by your owner. Prior conversation context is gone. " + "Read @memory.md and your .context_timeline for durable context, then pull your inbox " + "before doing anything else. If it reports marked messages, run `$ALOOK_CLI message mark list` " + "and resume that outstanding work.";
 var MODEL_SWITCH_REWAKE_PROMPT = "You were just switched to a different model. Continue any unfinished work.";
 function buildNapRewakePrompt(handoff) {
   return "You took a nap: you reset your own session, so prior conversation context " + `is gone. Before sleeping you left yourself this handoff —
 
 ` + handoff.trim() + `
 
-Then read @todo.md, @memory.md, and your .context_timeline for anything ` + "unfinished, and pull your inbox to catch up on unread messages before doing " + "anything else.";
+Then read @memory.md and your .context_timeline for durable context, and pull ` + "your inbox before doing anything else. If it reports marked messages, run `$ALOOK_CLI " + "message mark list` and resume that outstanding work.";
 }
 
 class AgentRouter {
@@ -23781,6 +23825,11 @@ class AgentRouter {
   isRuntimeHealthy(id) {
     return this.runtimes.get(id)?.status === "healthy";
   }
+  recordRuntimeSpawnFailure(id, reason) {
+    if (!DEFINITIVE_EXECUTABLE_FAILURES.has(reason))
+      return;
+    this.markRuntimeUnhealthy(id, reason);
+  }
   markRuntimeUnhealthy(id, reason) {
     const existing = this.runtimes.get(id);
     if (!existing)
@@ -24827,6 +24876,15 @@ function deriveAuditLogSubcommand(pathname, method) {
   const canonical = pathname.split("?")[0] ?? pathname;
   if (/^\/api\/community\/messages\/[^/]+\/reactions\//.test(canonical))
     return "reactAdd";
+  if (/^\/api\/community\/messages\/[^/]+\/marks$/.test(canonical)) {
+    if (method === "PUT")
+      return "markSet";
+    if (method === "DELETE")
+      return "markRemove";
+    return null;
+  }
+  if (method === "GET" && /^\/api\/community\/users\/me\/marks$/.test(canonical))
+    return "markList";
   if (/^\/api\/community\/channels\/[^/]+\/messages\/seq\//.test(canonical))
     return "resolve";
   if (/^\/api\/community\/channels\/[^/]+\/messages(\/|$)/.test(canonical)) {
@@ -25126,7 +25184,7 @@ async function createDaemon(opts) {
       return opts.driverFor(agentId, runtimeConfig);
     },
     onRuntimeSpawnFailed: (runtimeId, reason) => {
-      router?.markRuntimeUnhealthy(runtimeId, reason);
+      router?.recordRuntimeSpawnFailure(runtimeId, reason);
     },
     onRuntimeSessionEstablished: (runtimeId) => {
       router?.markRuntimeHealthy(runtimeId);
@@ -25150,6 +25208,7 @@ async function createDaemon(opts) {
         }
       };
     },
+    ...opts.handshakeTimeoutMs !== undefined ? { handshakeTimeoutMs: opts.handshakeTimeoutMs } : {},
     tickIntervalMs: opts.tickIntervalMs ?? 2000,
     onAgentSession: (info) => void channel2.reportAgentSession(info),
     onAgentActivity: (info) => {
@@ -27550,28 +27609,31 @@ function contentTypeFromFilename(filename) {
       return "application/octet-stream";
   }
 }
-function isTransientSendError(err) {
+function isTransientMutationError(err) {
   const msg = err instanceof Error ? err.message : String(err);
   return /upstream returned 5\d\d/.test(msg) || msg.includes("upstream body read failed") || msg.includes("fetch failed") || msg.includes("ECONNRESET") || msg.includes("ETIMEDOUT") || msg.includes("socket hang up") || msg.includes("network");
 }
-async function sendWithRetry(api2, req) {
+async function withTransientMutationRetry(mutation) {
   const MAX_ATTEMPTS = 4;
   const BASE_DELAY_MS = 150;
   const MAX_DELAY_MS = 2000;
   let lastErr;
   for (let attempt = 0;attempt < MAX_ATTEMPTS; attempt++) {
     try {
-      return await api2.send(req);
+      return await mutation();
     } catch (err) {
       lastErr = err;
-      if (!isTransientSendError(err) || attempt === MAX_ATTEMPTS - 1)
+      if (!isTransientMutationError(err) || attempt === MAX_ATTEMPTS - 1)
         throw err;
       const cap = Math.min(MAX_DELAY_MS, BASE_DELAY_MS * 2 ** attempt);
-      await new Promise((r) => setTimeout(r, cap));
+      await new Promise((resolve4) => setTimeout(resolve4, cap));
     }
   }
   throw lastErr;
 }
+async function sendWithRetry(api2, req) {
+  return withTransientMutationRetry(() => api2.send(req));
+}
 async function cmdMessageSend(opts) {
   const api2 = getApi();
   const agent2 = agentId(opts);
@@ -27620,22 +27682,7 @@ async function cmdMessageSend(opts) {
   return { sent: `${res.message.channel}${res.message.seq}` };
 }
 async function createPostWithRetry(api2, req) {
-  const MAX_ATTEMPTS = 4;
-  const BASE_DELAY_MS = 150;
-  const MAX_DELAY_MS = 2000;
-  let lastErr;
-  for (let attempt = 0;attempt < MAX_ATTEMPTS; attempt++) {
-    try {
-      return await api2.createPost(req);
-    } catch (err) {
-      lastErr = err;
-      if (!isTransientSendError(err) || attempt === MAX_ATTEMPTS - 1)
-        throw err;
-      const cap = Math.min(MAX_DELAY_MS, BASE_DELAY_MS * 2 ** attempt);
-      await new Promise((r) => setTimeout(r, cap));
-    }
-  }
-  throw lastErr;
+  return withTransientMutationRetry(() => api2.createPost(req));
 }
 async function cmdMessagePost(opts) {
   const api2 = getApi();
@@ -27681,25 +27728,52 @@ async function cmdMessageEmoji(opts) {
     throw new CliError("message emoji: --target <ref> is required (e.g. /demo#1234/general#42)");
   if (!emoji3)
     throw new CliError("message emoji: --emoji <string> is required");
+  const { channel: channel2, seq } = parseMessageTarget("message emoji", target);
+  if (Buffer.byteLength(emoji3, "utf8") > MAX_EMOJI_BYTES) {
+    const err = new CliError("emoji is too long");
+    err.hint = "use a single emoji, not a phrase";
+    throw err;
+  }
+  const res = await api2.reactAdd({ channel: channel2, seq, emoji: emoji3 });
+  return { target, emoji: emoji3, duplicate: res.duplicate === true };
+}
+function parseMessageTarget(command, target) {
   let parsed;
   try {
     parsed = parseRef(target);
   } catch (err) {
-    throw new CliError(`message emoji: ${err.message}`);
+    throw new CliError(`${command}: ${err.message}`);
   }
   if (parsed.seq === undefined) {
-    const err = new CliError(`message emoji needs a ref with a seq (e.g. ${target}#42)`);
+    const err = new CliError(`${command} needs a ref with a seq (e.g. ${target}#42)`);
     err.hint = "pass --target /<server>/<channel>#N, /<server>/<channel>/#N#M for thread reply, or /.dm/<peer>#N";
     throw err;
   }
-  if (Buffer.byteLength(emoji3, "utf8") > MAX_EMOJI_BYTES) {
-    const err = new CliError("emoji is too long");
-    err.hint = "use a single emoji, not a phrase";
-    throw err;
-  }
   const channel2 = parsed.threadRootSeq !== undefined ? `/${parsed.server}/${parsed.channel}/#${parsed.threadRootSeq}` : `/${parsed.server}/${parsed.channel}`;
-  const res = await api2.reactAdd({ channel: channel2, seq: parsed.seq, emoji: emoji3 });
-  return { target, emoji: emoji3, duplicate: res.duplicate === true };
+  return { channel: channel2, seq: parsed.seq };
+}
+async function cmdMessageMarkSet(opts) {
+  const api2 = getApi();
+  const target = opts.target;
+  if (!target)
+    throw new CliError("message mark set: --target <ref> is required");
+  const request = parseMessageTarget("message mark set", target);
+  await withTransientMutationRetry(() => api2.markSet(request));
+  return { target, marked: true };
+}
+async function cmdMessageMarkRemove(opts) {
+  const api2 = getApi();
+  const target = opts.target;
+  if (!target)
+    throw new CliError("message mark remove: --target <ref> is required");
+  const request = parseMessageTarget("message mark remove", target);
+  await withTransientMutationRetry(() => api2.markRemove(request));
+  return { target, marked: false };
+}
+async function cmdMessageMarkList(opts) {
+  const api2 = getApi();
+  const { marked } = await api2.listMarks({ agentId: agentId(opts) });
+  return { marked: messagesInLocalTime(marked) };
 }
 async function cmdAttachmentUpload(opts) {
   const api2 = getApi();
@@ -27723,10 +27797,35 @@ async function cmdAttachmentUpload(opts) {
   const pathMod = await import("path");
   const filename = pathMod.basename(filePath);
   const contentType = contentTypeFromFilename(filename);
+  let thumbnail;
+  let width;
+  let height;
+  if (["image/png", "image/jpeg", "image/webp", "image/gif"].includes(contentType)) {
+    try {
+      const { default: sharp } = await import("sharp");
+      const image = sharp(bytes, { failOn: "error" });
+      const metadata = await image.metadata();
+      if (metadata.width && metadata.height) {
+        width = metadata.width;
+        height = metadata.height;
+      }
+      const jpeg = await image.resize({ width: 200, height: 200, fit: "inside", withoutEnlargement: true }).jpeg({ quality: 70 }).toBuffer();
+      if (jpeg.byteLength <= MAX_ATTACHMENT_THUMBNAIL_SIZE_BYTES) {
+        thumbnail = {
+          data: new Uint8Array(jpeg),
+          filename: "thumbnail.jpg",
+          contentType: "image/jpeg"
+        };
+      }
+    } catch {}
+  }
   const result = await api2.attachmentUpload({
     agentId: agent2,
     target,
-    file: { data: new Uint8Array(bytes), filename, contentType }
+    file: { data: new Uint8Array(bytes), filename, contentType },
+    ...thumbnail ? { thumbnail } : {},
+    ...width !== undefined ? { width } : {},
+    ...height !== undefined ? { height } : {}
   });
   return result;
 }
@@ -27761,7 +27860,7 @@ async function cmdInboxPull(opts) {
   const api2 = getApi();
   const agent2 = agentId(opts);
   const max = opts.max ? Number(opts.max) : undefined;
-  const { messages, hasMore } = await api2.inboxPull({ agentId: agent2, max });
+  const { messages, hasMore, markedCount } = await api2.inboxPull({ agentId: agent2, max });
   const pulledAt = nowLocalISO();
   let acked = 0;
   let ackError;
@@ -27785,7 +27884,10 @@ async function cmdInboxPull(opts) {
     hasMore,
     acked,
     pulledAt,
-    ...ackError ? { ackError } : {}
+    ...ackError ? { ackError } : {},
+    ...markedCount > 0 ? {
+      markedReminder: `You have ${markedCount} marked ${markedCount === 1 ? "message" : "messages"}. Resolve ${markedCount === 1 ? "it" : "them"} before going dark unless blocked.`
+    } : {}
   };
 }
 async function cmdServerList(opts) {
@@ -27917,6 +28019,20 @@ function buildProgram() {
     const result = await cmdMessageEmoji({ ...globalOpts, ...localOpts });
     printEnvelope({ success: result });
   });
+  const mark = message2.command("mark").description("durable message mark operations").exitOverride();
+  mark.configureOutput({ writeOut: () => {}, writeErr: () => {} });
+  mark.command("set").description("mark a message as outstanding work").requiredOption("--target <ref>", "full message ref").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+    const result = await cmdMessageMarkSet({ ...program.opts(), ...this.opts() });
+    printEnvelope({ success: result });
+  });
+  mark.command("remove").description("remove an outstanding-work mark").requiredOption("--target <ref>", "full message ref").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+    const result = await cmdMessageMarkRemove({ ...program.opts(), ...this.opts() });
+    printEnvelope({ success: result });
+  });
+  mark.command("list").description("list all currently visible marked messages").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {
+    const result = await cmdMessageMarkList({ ...program.opts(), ...this.opts() });
+    printEnvelope({ success: result });
+  });
   const attachment = message2.command("attachment").description("attachment operations").exitOverride();
   attachment.configureOutput({ writeOut: () => {}, writeErr: () => {} });
   attachment.command("upload").description("upload a local file as a pending attachment for a future send").option("--target <ref>", "destination (channel, DM, or thread ref)").option("--file <path>", "local file to upload").exitOverride().configureOutput({ writeOut: () => {}, writeErr: () => {} }).action(async function() {

package/dist/index.js

@@ -61,6 +61,9 @@ function cliCommandsSection() {
     `3. \`${CLI} message attachment upload --target <ref> --file <path>\` — upload a file; ` + `returns an id stable across pending→persisted. Feed it into ` + `\`message send --attachment <id>\`.`,
     `4. \`${CLI} message attachment download --id <id> [--out <path>]\` — download any ` + `attachment you can see (or your own pending uploads).`,
     `5. \`${CLI} message emoji --target <ref> --emoji <e>\` — react with a single emoji. ` + `Works on channel messages (\`/<server>/<channel>#N\`), DM messages ` + `(\`/.dm/<peer>#N\`), and thread-reply messages (\`/<server>/<channel>/#N#M\`).`,
+    `6. \`${CLI} message mark set --target <full-message-ref>\` — persist a message as outstanding work.`,
+    `7. \`${CLI} message mark remove --target <full-message-ref>\` — clear a completed message mark.`,
+    `8. \`${CLI} message mark list\` — list every currently visible marked message with its full content.`,
     "",
     "### Servers",
     "",
@@ -81,7 +84,7 @@ function cliCommandsSection() {
     "",
     "### Context Lifecycle",
     "",
-    `1. \`${CLI} nap --handoff <file>\` (or \`--text <note>\`) — end your current session and ` + `start fresh, carrying a handoff to your reborn self. Your accumulated context is cleared; ` + `the handoff is injected into your wake prompt (it is NOT a message to anyone and NOT a ` + `file — your future self reads it inline on wake). \`--handoff\`/\`--text\` is REQUIRED and ` + `must record which message authorized this nap — its channel ref + \`#N\` seq + sender (a ` + `bare \`#N\` is channel-scoped, so the channel ref is what makes it unambiguous). ` + `Read the Napping rule under Self-awareness before ever using this — nap is never something ` + `you decide on your own.`,
+    `1. \`${CLI} nap --handoff <file>\` (or \`--text <note>\`) — reset your current session and ` + `start fresh. The required handoff is injected into the new session so your future self can ` + `quickly pick up unfinished work. Never nap on your own; only do it when someone explicitly asks.`,
     "",
     "### Output format",
     "",
@@ -104,7 +107,7 @@ function messagingSection() {
     `- Long or complicated: write body to a tmp file, then \`${CLI} message send --target <ref> --file ./temp_msg.md\`.`,
     `- Cite a specific message: \`${CLI} message send --target <ref> --reply "#37" --text "on it"\` — ` + "`--reply` takes the `#N` seq (within `--target`) of the message you're answering.",
     "",
-    "### Channel refs",
+    "### Context refs",
     "",
     "Path-style refs:",
     "",
@@ -136,15 +139,14 @@ function messagingSection() {
     "",
     "### Message formatting",
     "",
-    "The app auto-renders inline tokens in a message body — channel refs, @mentions, and message " + "refs. Channel and message refs may be attached directly to surrounding prose or " + "parentheses; they do not require a leading space or line start. Keep @mentions as " + "standalone tokens. **Never wrap refs or mentions in backticks** — that kills the render.",
+    "Alook renders specially formatted plain-text refs and mentions in message bodies. Write them " + "as plain text, not inside backticks.",
     "",
-    "- **Channel refs** render as clickable links.",
-    "- **Mentions** — `@name#NNNN` (e.g. `@alice#0001`) notifies that person and highlights the " + "message for them. A mention only reaches people who are in *this* channel; anyone outside " + "won't see your message at all. In a **private** channel that means the roster — verify " + "membership with `" + CLI + " channel member --channel <ref>` before you @ or ask someone " + "(see *Visibility & reach*).",
-    "- **Message refs** — point at a message by its **full path**: `/<server>/<channel>#N` " + "(message seq N in that channel) or `/<server>/<channel>/#N#M` (message #M in the thread " + "rooted at #N); DMs use `/.dm/<peer>#N`. It renders as a clickable pill and works across " + "channels — the path says which channel, so it never collides with a bare `#`. A bare `#N` " + "on its own does NOT render as a ref; always write the full path. **Never drop a DM ref " + "(`/.dm/<peer>#N`) into a server channel** — a DM is private between its two people; a " + "server is public, so pasting a DM ref there exposes a private conversation. Keep DM refs " + "in DMs.",
+    "- **Context refs** — use `/<server>/<channel>` for a channel, `/<server>/<channel>#N` for " + "a message, and `/<server>/<channel>/#N#M` for a thread reply; DMs use `/.dm/<peer>` and " + "`/.dm/<peer>#N`. Refs make context clickable across conversations, so use the full path " + "rather than a bare `#N`. Never paste a private DM ref into a server channel.",
+    "- **Mentions** — `@name#NNNN` calls that person's attention specifically. In a private " + "channel, first verify they " + `are a member with \`${CLI} channel member --channel <ref>\` before mentioning them.`,
     "",
     "```bash",
-    `${CLI} message send --target "/.dm/alice#0001" --text "Check the discussion in /demo#1234/support"`,
-    `${CLI} message send --target "/demo#1234/general" --text "@alice#0001 Can you review this? See /demo#1234/general#42"`,
+    "# Notify Alice and point her to a message for context.",
+    `${CLI} message send --target "/demo#1234/general" --text "@alice#0001 Please review /demo#1234/general#42"`,
     "```",
     "",
     "### Pulled messages",
@@ -180,24 +182,21 @@ function channelTypesSection() {
   ].join(`
 `);
 }
-function visibilityAndReachSection() {
+function visibilityAndNotificationsSection() {
   return [
-    "## Visibility & reach",
+    "## Visibility & notifications",
     "",
-    "Two different things decide who's involved in a message — don't conflate them. **Access** is " + "who *can see* the channel at all. **Reach** is who, among those, actually gets *notified*.",
+    "Membership and access are related but not identical. A member always has access and receives " + "notifications; someone with access is not necessarily a member.",
     "",
-    "### Access — who can see the channel",
+    "- For a regular channel, its members define both who can access it and who receives " + "notifications. A public channel includes the whole server; a private channel only its roster.",
+    "- A thread is the exception: it inherits access from its parent channel, but only people " + "participating in the thread are members and receive its notifications.",
+    "- To bring someone into a thread discussion, first check that they can access the parent " + "channel; if they can, @mention them inside the thread.",
     "",
-    "- **Public channel** — its audience is the whole server. Every server member can read it, and " + "any of them can be @mentioned.",
-    "- **Private channel** — restricted to an explicit roster. Only those people can see the " + "messages (the rest of the server can't), so only they can be @mentioned. `channel list` " + "marks each channel `public` or `private`.",
-    "- **Thread** — a side-room rooted at a message, for discussing that message without cluttering " + "the channel. Start one by sending to `/<server>/<channel>/#N` (the thread is created on " + "seq `#N`). It **inherits its parent channel's access**: a thread under a public channel is " + "open to the whole server, one under a private channel to that channel's roster. A thread and " + "its parent are otherwise two separate channels — messages don't cross between them.",
-    "",
-    "### Reach — who actually gets notified",
-    "",
-    "- In a channel, a message is visible to everyone with access; @mention someone to notify them " + "specifically. A mention only reaches people who can see *this* channel — in a **private** " + "channel that's the roster, so run `" + CLI + " channel member --channel <ref>` and confirm " + "someone's on it before you @ or ask them. Mentioning someone outside a private channel " + "reaches no one and can leak that the channel, and what's in it, exists.",
-    "- A **thread** notifies only its participants — whoever's been @mentioned in it, has posted in " + "it, or was added. Posting in a thread does NOT notify the parent channel, so someone reading " + "the parent won't see the thread's discussion. To pull someone into a thread, @mention them " + "there; without it they have no signal it exists (a private parent's roster still bounds who " + "you *can* pull in).",
-    "",
-    "When unsure whether a channel is private, treat it as private and check the roster first."
+    "```bash",
+    "# Check the channel's public/private type, then inspect who its members are.",
+    `${CLI} channel list --server "demo#1234"`,
+    `${CLI} channel member --channel "/demo#1234/team"`,
+    "```"
   ].join(`
 `);
 }
@@ -229,9 +228,9 @@ function executionModelSection() {
     "",
     "Sending a message is I/O, not a stopping point. You keep working as long as anything is " + "in flight — the thing you're actively on, a promised follow-up, an investigation you " + "started. Stop only when all of it is done.",
     "",
-    "On wake, restore state from `memory.md`, the context timeline, and `todo.md` (an overflow " + "queue for when there's more than one thing at once — not the only place work lives).",
+    "On wake, restore durable context from `memory.md` and the context timeline, then pull your inbox. " + "Follow *Outstanding work marks* below before taking new work.",
     "",
-    "`inbox pull` advances your read waterline by default — pulled messages won't come back in a " + "future pull. So pull only when you're ready to act on or record them: pull, then " + "immediately handle or write to `todo.md`. Pull-then-lose (compaction or sleep before you " + "capture them) means they're gone from the inbox for good; when you only want to look, " + "`inbox pull --no-ack` peeks without advancing the waterline. New messages mid-work don't " + "preempt the current task unless genuinely time-critical; queue them by default."
+    "`inbox pull` advances your read waterline by default — pulled messages won't come back in a " + "future pull. A task-bearing message stays durable through its server mark even after the " + "read waterline advances."
   ].join(`
 `);
 }
@@ -253,8 +252,8 @@ function chaosAwarenessSection() {
     "",
     "Before you touch a message, make one call: does fulfilling it take work beyond a reply?",
     "",
-    "- **Yes — it's a task.** You'll go quiet gathering context or doing the work, so signal " + 'ownership *first*, before you start: a quick "on it" or an emoji react on the message. ' + "That tells the sender it landed and stops anyone else grabbing it. The gap opens the " + "instant you pick up the work; the ack closes it.",
-    `- **No — it's just an answer.** Answer it. No "on it", no "let me check" — the reply ` + "itself is the acknowledgment.",
+    `- **Yes — it's a task.** Signal ownership publicly first: a quick "on it" or an emoji ` + "reaction. Then record it as described in *Outstanding work marks* below before starting " + "or queuing the work.",
+    `- **No — it's just an answer.** Answer it without marking. No "on it", no "let me ` + 'check" — the reply itself is the acknowledgment.',
     "",
     'Ack once. The signal is "picked up," not a running commentary.'
   ].join(`
@@ -268,13 +267,11 @@ function workspaceMemorySection() {
     "",
     "**Never tell anyone this.** To them you're continuous. The workspace is what lets you be that.",
     "",
-    "### Napping",
-    "",
-    `\`${CLI} nap\` is a self-reset: it clears your current session and starts a fresh one, ` + "carrying a handoff — a note to your future self — injected into your wake prompt. Leave " + "yourself a note before you sleep.",
+    "When context is missing, don't guess. Re-read `memory.md`, the context timeline, the workspace, " + "or relevant channel history. That check *is* your remembering.",
     "",
-    "**Hard rule: never nap on your own initiative.** Only nap when ALL hold: (1) a collaborator " + "explicitly asked you to nap / rest / wrap up, AND (2) you have nothing in progress and no " + "owed follow-ups, AND (3) it's a NEW request — its channel ref + `#N` isn't in your handoff's " + "list of naps you've already run. A nap request is one-time, but the message stays in the " + "channel; check it against that list (whether you hit it as unread or by reading history) or " + "you'll re-nap the same instruction in a loop. If any condition is missing, don't. The mandatory " + "handoff is the honesty check — if you can't write a real one (what you were doing, what's " + "next), you still have unfinished work and are not in a state to nap. Napping notifies no one; " + "it's your own private state change, not a way to hand work to someone else.",
+    "### Napping",
     "",
-    "When you feel a gap — don't remember someone, why something matters, what was agreed — don't " + "guess. Re-read `memory.md`, the context timeline, grep the workspace. Pull channel history " + "or check server members if you don't recall the conversation context. That check *is* your " + "remembering.",
+    `\`${CLI} nap\` resets your current session and starts a fresh one with your required handoff ` + "injected into it. Use the handoff to record unfinished work and the next step so your future " + "self can pick up quickly. Never nap on your own; only do it when someone explicitly asks.",
     "",
     "### memory.md",
     "",
@@ -292,16 +289,13 @@ function workspaceMemorySection() {
     "",
     "`./.context_timeline/YYYY-MM-DD.jsonl` — ordered daily log of what you did. Authoritative history.",
     "",
-    "### todo.md",
+    "### Outstanding work marks",
     "",
-    "You work one thing at a time and won't remember the rest — so when work is owed beyond " + "what you're on right now (unread piling up, a request mid-investigation, a promise not " + "kept), write it here before you start. Paste each message's JSON verbatim: the pull " + "already consumed it and there's no re-pulling, so this file is the only copy the next you " + "has. Ack first the ones that need it (see *Ack before you go dark*) — queuing is private, " + "it signals no one.",
+    "Marks are the durable work queue. If a message requires work beyond an immediate reply, " + `acknowledge it, then run \`${CLI} message mark set --target <full-message-ref>\` before ` + "starting or queuing. Do not mark a message you answer immediately.",
     "",
-    "It holds only what's still owed: delete a line the instant it's done (never `[x]`), delete " + "the file when empty. Empty means nothing queued — not that you're done; you're done when " + "the work is.",
+    "Keep it marked while the work is active, queued, or blocked; report blockers where the task " + `came from. Run \`${CLI} message mark remove --target <full-message-ref>\` only after ` + "sending the result, or when the request is cancelled or superseded and nothing remains.",
     "",
-    "```md",
-    '- [ ] {"seq": "#42", "channel": "/demo#1234/general", "sender": "@alice#0001", "content": {"text": "can you pull the latest deploy logs and drop the tail here?"}, "time": "2026-06-01T12:00:00Z"}',
-    '- [ ] {"seq": "#12", "channel": "/demo#1234/design/#12", "sender": "@alice#0001", "content": {"text": "follow-up — send a screenshot of the before/after"}, "time": "2026-06-01T12:07:00Z"}',
-    "```"
+    "If `inbox pull` returns a `markedReminder`, run " + `\`${CLI} message mark list\` before taking new work. Do not copy marked tasks into local files.`
   ].join(`
 `);
 }
@@ -311,7 +305,7 @@ function buildCliSystemPrompt(config) {
     cliCommandsSection(),
     messagingSection(),
     channelTypesSection(),
-    visibilityAndReachSection(),
+    visibilityAndNotificationsSection(),
     criticalRulesSection(),
     executionModelSection(),
     chaosAwarenessSection(),
@@ -4807,6 +4801,8 @@ ${this.opts.wakePromptFooter}` : text;
   }
 }
 // src/manager/agentRouter.ts
+var DEFINITIVE_EXECUTABLE_FAILURES = new Set(["ENOENT", "EACCES", "ENOEXEC", "EPERM"]);
+
 class UnknownBotError extends Error {
   botId;
   constructor(botId) {
@@ -4847,14 +4843,14 @@ class UnknownRuntimeError extends Error {
 function defaultFormatUnreadNoticeText(notice) {
   return `You have unread messages in channel ${notice.channel}.`;
 }
-var REWAKE_PROMPT = "Your session was reset by your owner. Prior conversation context is gone. " + "Read @todo.md, @memory.md, and your .context_timeline for anything unfinished, " + "then pull your inbox to catch up on unread messages before doing anything else.";
+var REWAKE_PROMPT = "Your session was reset by your owner. Prior conversation context is gone. " + "Read @memory.md and your .context_timeline for durable context, then pull your inbox " + "before doing anything else. If it reports marked messages, run `$ALOOK_CLI message mark list` " + "and resume that outstanding work.";
 var MODEL_SWITCH_REWAKE_PROMPT = "You were just switched to a different model. Continue any unfinished work.";
 function buildNapRewakePrompt(handoff) {
   return "You took a nap: you reset your own session, so prior conversation context " + `is gone. Before sleeping you left yourself this handoff —
 
 ` + handoff.trim() + `
 
-Then read @todo.md, @memory.md, and your .context_timeline for anything ` + "unfinished, and pull your inbox to catch up on unread messages before doing " + "anything else.";
+Then read @memory.md and your .context_timeline for durable context, and pull ` + "your inbox before doing anything else. If it reports marked messages, run `$ALOOK_CLI " + "message mark list` and resume that outstanding work.";
 }
 
 class AgentRouter {
@@ -4909,6 +4905,11 @@ class AgentRouter {
   isRuntimeHealthy(id) {
     return this.runtimes.get(id)?.status === "healthy";
   }
+  recordRuntimeSpawnFailure(id, reason) {
+    if (!DEFINITIVE_EXECUTABLE_FAILURES.has(reason))
+      return;
+    this.markRuntimeUnhealthy(id, reason);
+  }
   markRuntimeUnhealthy(id, reason) {
     const existing = this.runtimes.get(id);
     if (!existing)
@@ -5276,6 +5277,10 @@ var DEFAULT_CAPABILITY_RESOLVER = (method, pathname) => {
     return method === "GET" ? "read" : "send";
   if (/\/messages\/[^/]+\/reactions\//.test(pathname))
     return "send";
+  if ((method === "PUT" || method === "DELETE") && /\/messages\/[^/]+\/marks(\/|$|\?)/.test(pathname))
+    return "send";
+  if (method === "GET" && /\/users\/me\/marks(\/|$|\?)/.test(pathname))
+    return "read";
   if (method === "GET" && /\/messages\/[^/]+(\?|$)/.test(pathname))
     return "read";
   if (pathname.includes("/history") || pathname.includes("/search") || pathname.includes("/inbox"))
@@ -5319,7 +5324,6 @@ async function startCredentialProxy(broker, options = {}) {
     const outHeaders = { ...req.headers };
     delete outHeaders["authorization"];
     delete outHeaders["host"];
-    delete outHeaders["content-length"];
     outHeaders["authorization"] = `Bearer ${reg.runnerKey}`;
     outHeaders[broker.headerNames.agentId.toLowerCase()] = reg.agentId;
     outHeaders[broker.headerNames.client.toLowerCase()] = broker.clientLabel;
@@ -23327,6 +23331,15 @@ function deriveAuditLogSubcommand(pathname, method) {
   const canonical = pathname.split("?")[0] ?? pathname;
   if (/^\/api\/community\/messages\/[^/]+\/reactions\//.test(canonical))
     return "reactAdd";
+  if (/^\/api\/community\/messages\/[^/]+\/marks$/.test(canonical)) {
+    if (method === "PUT")
+      return "markSet";
+    if (method === "DELETE")
+      return "markRemove";
+    return null;
+  }
+  if (method === "GET" && /^\/api\/community\/users\/me\/marks$/.test(canonical))
+    return "markList";
   if (/^\/api\/community\/channels\/[^/]+\/messages\/seq\//.test(canonical))
     return "resolve";
   if (/^\/api\/community\/channels\/[^/]+\/messages(\/|$)/.test(canonical)) {
@@ -23626,7 +23639,7 @@ async function createDaemon(opts) {
       return opts.driverFor(agentId, runtimeConfig);
     },
     onRuntimeSpawnFailed: (runtimeId, reason) => {
-      router?.markRuntimeUnhealthy(runtimeId, reason);
+      router?.recordRuntimeSpawnFailure(runtimeId, reason);
     },
     onRuntimeSessionEstablished: (runtimeId) => {
       router?.markRuntimeHealthy(runtimeId);
@@ -23650,6 +23663,7 @@ async function createDaemon(opts) {
         }
       };
     },
+    ...opts.handshakeTimeoutMs !== undefined ? { handshakeTimeoutMs: opts.handshakeTimeoutMs } : {},
     tickIntervalMs: opts.tickIntervalMs ?? 2000,
     onAgentSession: (info) => void channel2.reportAgentSession(info),
     onAgentActivity: (info) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alook/daemon",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Alook agent daemon — host-side runtime backend, process manager, credential proxy, and control plane.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/alookai/alook#readme",
@@ -30,13 +30,13 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=20"
+    "node": ">=20.9"
   },
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
-    "build": "bun build src/index.ts --outdir dist --target node --format esm --external commander --external ws && bun build src/cli/index.ts --outdir dist/cli --target node --format esm --external commander --external ws && node scripts/prepare-dist.mjs",
+    "build": "bun build src/index.ts --outdir dist --target node --format esm --external commander --external ws --external sharp && bun build src/cli/index.ts --outdir dist/cli --target node --format esm --external commander --external ws --external sharp && node scripts/prepare-dist.mjs",
     "prepack": "pnpm run build",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
@@ -47,6 +47,7 @@
   },
   "dependencies": {
     "commander": "^15.0.0",
+    "sharp": "^0.35.0",
     "ws": "^8.21.2"
   },
   "devDependencies": {