@autohq/cli 0.1.286 → 0.1.288

package/dist/agent-bridge.js

@@ -23384,7 +23384,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.286",
+  version: "0.1.288",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -28362,6 +28362,9 @@ var ProjectTemplateSubscriptionSchema = external_exports.object({
 });
 
 // ../../packages/schemas/src/temporal.ts
+var SessionCheckTimeoutWorkflowInputSchema = external_exports.object({
+  checkId: external_exports.string().trim().min(1)
+});
 var ResourceReconciliationScopeSchema = external_exports.object({
   organizationId: external_exports.string().trim().min(1),
   projectId: external_exports.string().trim().min(1).nullable()
@@ -28428,6 +28431,42 @@ var SessionUsageResponseSchema = external_exports.object({
   firstUsageAt: external_exports.string().datetime().nullable(),
   lastUsageAt: external_exports.string().datetime().nullable()
 });
+var PROJECT_USAGE_RANGE_KEYS = ["7d", "30d"];
+var ProjectUsageRangeKeySchema = external_exports.enum(PROJECT_USAGE_RANGE_KEYS);
+var UtcDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+var ProjectUsageTotalsSchema = UsageTotalsSchema.extend({
+  sessionCount: NonNegativeTokenCountSchema,
+  // Share of all tokens served from prompt-cache reads (0..1); 0 when the
+  // window has no tokens at all.
+  cacheReadShare: external_exports.number().min(0).max(1)
+});
+var ProjectUsageAgentSummarySchema = UsageTotalsSchema.extend({
+  agentResourceId: external_exports.string().trim().min(1),
+  // Resolved from the agent resource (archived agents included); null only
+  // when the agent row no longer exists at all — the ledger deliberately
+  // outlives its attribution targets.
+  agentName: external_exports.string().trim().min(1).nullable(),
+  sessionCount: NonNegativeTokenCountSchema
+});
+var ProjectUsageModelSummarySchema = UsageTotalsSchema.extend({
+  model: external_exports.string().trim().min(1)
+});
+var ProjectUsageDayPointSchema = UsageTotalsSchema.extend({
+  date: UtcDateSchema
+});
+var ProjectUsageResponseSchema = external_exports.object({
+  organizationId: OrganizationIdSchema,
+  projectId: ProjectIdSchema,
+  range: external_exports.object({
+    key: ProjectUsageRangeKeySchema,
+    since: external_exports.string().datetime(),
+    until: external_exports.string().datetime()
+  }),
+  totals: ProjectUsageTotalsSchema,
+  byAgent: external_exports.array(ProjectUsageAgentSummarySchema),
+  byModel: external_exports.array(ProjectUsageModelSummarySchema),
+  daily: external_exports.array(ProjectUsageDayPointSchema)
+});
 
 // ../../node_modules/ai/node_modules/@ai-sdk/provider/dist/index.mjs
 var marker = "vercel.ai.error";
@@ -57304,6 +57343,12 @@ var claudeAgentBridgeRuntime = {
 var claudeAgentSdkRuntime = {
   startup: (input) => aj$(input)
 };
+var ClaudeMcpRegistryEmptyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry came up empty at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryEmptyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -57693,17 +57738,20 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade: pollMcpRegistration never rejects — on timeout, a
-  //   status-read failure, or a closed session it resolves, so the worst case
-  //   is today's immediate injection. The gate can never regress below the
-  //   status-quo race; it can only close it.
+  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
+  //   timeout, a status-read failure, or a closed session it resolves, so an
+  //   *unconfirmed* registry still degrades to today's immediate injection.
+  //   The one fail-closed exit is the confirmed-empty registry: every
+  //   configured server settled and none is serving tools, which is exactly
+  //   the state that produced silent toolless runs in production (FRA-3458).
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
   //   which cannot be reproduced deterministically without live credentials
   //   and a forced restart racing reconnect.
   // - Live confirmation comes from the agent_bridge_claude_mcp_gate_started/
-  //   _ready/_timeout diagnostics on the next real restart, not a CI fake.
+  //   _ready/_timeout/_empty diagnostics on the next real restart, not a CI
+  //   fake.
   //
   // Block until the freshly-warmed query's MCP servers have left `pending`, so
   // the first turn's prompt is built with the mcp__* tools registered. Memoized
@@ -57727,15 +57775,22 @@ var ClaudeAgentBridgeSessionImpl = class {
         promise: this.pollMcpRegistration(query)
       };
     }
-    await this.mcpRegistrationGate.promise;
+    const result = await this.mcpRegistrationGate.promise;
+    if (result.outcome !== "empty") {
+      return;
+    }
+    this.close();
+    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
   // (connected/failed/needs-auth/disabled) all count as settled, so a server
   // that cannot connect in this runtime (e.g. an interactively-authed server in
-  // a headless sandbox) never holds the gate to the timeout. Never rejects:
+  // a headless sandbox) never holds the gate to the timeout. A settled state
+  // where no configured server is serving tools resolves "empty" — the caller
+  // fails the send rather than injecting a toolless turn. Never rejects:
   // status-read failure, timeout, or a closed session all resolve so the caller
-  // degrades to immediate injection.
+  // degrades to immediate injection when the registry state is uncertain.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -57745,7 +57800,7 @@ var ClaudeAgentBridgeSessionImpl = class {
     );
     while (true) {
       if (this.state.kind === "closed") {
-        return;
+        return { outcome: "closed" };
       }
       let statuses;
       try {
@@ -57754,19 +57809,26 @@ var ClaudeAgentBridgeSessionImpl = class {
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
         );
-        return;
+        return { outcome: "status_failed" };
       }
       if (mcpServersSettled(statuses, configuredNames)) {
+        if (!mcpRegistryHasTools(statuses, configuredNames)) {
+          const detail = mcpStatusDetailList(statuses);
+          this.input.writeOutput?.(
+            `agent_bridge_claude_mcp_gate_empty duration_ms=${Date.now() - startedAt} servers=${detail}`
+          );
+          return { outcome: "empty", detail };
+        }
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_ready duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
         );
-        return;
+        return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
         );
-        return;
+        return { outcome: "timeout" };
       }
       await delay(CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS);
     }
@@ -57909,9 +57971,20 @@ function mcpServersSettled(statuses, configuredNames) {
     return status !== void 0 && status !== "pending";
   });
 }
+function mcpRegistryHasTools(statuses, configuredNames) {
+  const configured = new Set(configuredNames);
+  return statuses.some(
+    (server) => configured.has(server.name) && server.status === "connected" && (server.tools === void 0 || server.tools.length > 0)
+  );
+}
 function mcpStatusList(statuses) {
   return statuses.map((server) => `${server.name}:${server.status}`).join(",");
 }
+function mcpStatusDetailList(statuses) {
+  return statuses.map(
+    (server) => server.error ? `${server.name}:${server.status}(${server.error})` : `${server.name}:${server.status}`
+  ).join(",");
+}
 function delay(ms) {
   return new Promise((resolve2) => {
     const timer = setTimeout(resolve2, ms);
@@ -58019,6 +58092,13 @@ var ClaudeCodeCommandHandler = class {
   agentSession = null;
   persistedAgentId = null;
   injectedCommands = /* @__PURE__ */ new Set();
+  // Message commands whose injection has started but not settled. A fresh SDK
+  // warm inside sendMessage can outlast the bridge's command-ack window, so a
+  // redelivery may arrive while the first attempt is still in flight; acking it
+  // "duplicate" then would let the worker accept a command whose injection
+  // later fails, silently stalling the turn (FRA-3458). The duplicate branch
+  // awaits the in-flight outcome here and relays it instead.
+  inFlightMessageCommands = /* @__PURE__ */ new Map();
   pendingQuestions = /* @__PURE__ */ new Map();
   outputBuffer;
   projector = new ClaudeCodeProjector();
@@ -58066,13 +58146,25 @@ var ClaudeCodeCommandHandler = class {
       });
     }
     if (this.injectedCommands.has(delivery.commandId)) {
+      const inFlight = this.inFlightMessageCommands.get(delivery.commandId);
+      const outcome2 = inFlight ? await inFlight : { status: "injected" };
       this.input.runtimeLogger?.info(
         "agent_bridge_claude_command_duplicate",
         commandLogContext(delivery, {
           socket_id: socketId,
-          duration_ms: Date.now() - startedAt
+          duration_ms: Date.now() - startedAt,
+          awaited_in_flight: Boolean(inFlight),
+          in_flight_status: outcome2.status
         })
       );
+      if (outcome2.status === "failed") {
+        return commandAck({
+          delivery,
+          socketId,
+          status: "failed",
+          error: outcome2.error
+        });
+      }
       return commandAck({
         delivery,
         socketId,
@@ -58123,6 +58215,53 @@ var ClaudeCodeCommandHandler = class {
       });
     }
     this.injectedCommands.add(delivery.commandId);
+    const injection = this.injectMessageCommand(
+      activeContext,
+      delivery,
+      message,
+      socketId
+    );
+    this.inFlightMessageCommands.set(delivery.commandId, injection);
+    let outcome;
+    try {
+      outcome = await injection;
+    } finally {
+      this.inFlightMessageCommands.delete(delivery.commandId);
+    }
+    if (outcome.status === "failed") {
+      this.injectedCommands.delete(delivery.commandId);
+      this.input.runtimeLogger?.warn(
+        "agent_bridge_claude_command_failed",
+        commandLogContext(delivery, {
+          socket_id: socketId,
+          duration_ms: Date.now() - startedAt,
+          error: outcome.error
+        })
+      );
+      return commandAck({
+        delivery,
+        socketId,
+        status: "failed",
+        error: outcome.error
+      });
+    }
+    this.input.runtimeLogger?.info(
+      "agent_bridge_claude_command_injected",
+      commandLogContext(delivery, {
+        socket_id: socketId,
+        duration_ms: Date.now() - startedAt
+      })
+    );
+    return commandAck({
+      delivery,
+      socketId,
+      status: "injected"
+    });
+  }
+  // Runs one message command's injection to a terminal outcome. Never rejects:
+  // the returned promise is stored in the in-flight map and awaited by both the
+  // original delivery and any redeliveries, so failures travel as values.
+  async injectMessageCommand(activeContext, delivery, message, socketId) {
     try {
       const emitStartedAt = Date.now();
       this.input.runtimeLogger?.info(
@@ -58168,35 +58307,13 @@ var ClaudeCodeCommandHandler = class {
           duration_ms: Date.now() - sendStartedAt
         })
       );
+      return { status: "injected" };
     } catch (error51) {
-      this.injectedCommands.delete(delivery.commandId);
-      this.input.runtimeLogger?.warn(
-        "agent_bridge_claude_command_failed",
-        commandLogContext(delivery, {
-          socket_id: socketId,
-          duration_ms: Date.now() - startedAt,
-          error: error51 instanceof Error ? error51.message : String(error51)
-        })
-      );
-      return commandAck({
-        delivery,
-        socketId,
+      return {
         status: "failed",
         error: error51 instanceof Error ? error51.message : String(error51)
-      });
+      };
     }
-    this.input.runtimeLogger?.info(
-      "agent_bridge_claude_command_injected",
-      commandLogContext(delivery, {
-        socket_id: socketId,
-        duration_ms: Date.now() - startedAt
-      })
-    );
-    return commandAck({
-      delivery,
-      socketId,
-      status: "injected"
-    });
   }
   // -----------------------------------------------------------------------------
   // Question answering

package/dist/index.js

@@ -20265,11 +20265,14 @@ var init_templates = __esm({
 });
 
 // ../../packages/schemas/src/temporal.ts
-var ResourceReconciliationScopeSchema;
+var SessionCheckTimeoutWorkflowInputSchema, ResourceReconciliationScopeSchema;
 var init_temporal = __esm({
   "../../packages/schemas/src/temporal.ts"() {
     "use strict";
     init_zod();
+    SessionCheckTimeoutWorkflowInputSchema = external_exports.object({
+      checkId: external_exports.string().trim().min(1)
+    });
     ResourceReconciliationScopeSchema = external_exports.object({
       organizationId: external_exports.string().trim().min(1),
       projectId: external_exports.string().trim().min(1).nullable()
@@ -20278,7 +20281,7 @@ var init_temporal = __esm({
 });
 
 // ../../packages/schemas/src/usage.ts
-var UsageHarnessSchema, ModelCredentialFundingSourceSchema, NonNegativeTokenCountSchema, NonNegativeUsdSchema, UsageEventSchema, UsageEventRecordSchema, UsageTotalsSchema, SessionUsageModelSummarySchema, SessionUsageResponseSchema;
+var UsageHarnessSchema, ModelCredentialFundingSourceSchema, NonNegativeTokenCountSchema, NonNegativeUsdSchema, UsageEventSchema, UsageEventRecordSchema, UsageTotalsSchema, SessionUsageModelSummarySchema, SessionUsageResponseSchema, PROJECT_USAGE_RANGE_KEYS, ProjectUsageRangeKeySchema, UtcDateSchema, ProjectUsageTotalsSchema, ProjectUsageAgentSummarySchema, ProjectUsageModelSummarySchema, ProjectUsageDayPointSchema, ProjectUsageResponseSchema;
 var init_usage = __esm({
   "../../packages/schemas/src/usage.ts"() {
     "use strict";
@@ -20345,6 +20348,42 @@ var init_usage = __esm({
       firstUsageAt: external_exports.string().datetime().nullable(),
       lastUsageAt: external_exports.string().datetime().nullable()
     });
+    PROJECT_USAGE_RANGE_KEYS = ["7d", "30d"];
+    ProjectUsageRangeKeySchema = external_exports.enum(PROJECT_USAGE_RANGE_KEYS);
+    UtcDateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+    ProjectUsageTotalsSchema = UsageTotalsSchema.extend({
+      sessionCount: NonNegativeTokenCountSchema,
+      // Share of all tokens served from prompt-cache reads (0..1); 0 when the
+      // window has no tokens at all.
+      cacheReadShare: external_exports.number().min(0).max(1)
+    });
+    ProjectUsageAgentSummarySchema = UsageTotalsSchema.extend({
+      agentResourceId: external_exports.string().trim().min(1),
+      // Resolved from the agent resource (archived agents included); null only
+      // when the agent row no longer exists at all — the ledger deliberately
+      // outlives its attribution targets.
+      agentName: external_exports.string().trim().min(1).nullable(),
+      sessionCount: NonNegativeTokenCountSchema
+    });
+    ProjectUsageModelSummarySchema = UsageTotalsSchema.extend({
+      model: external_exports.string().trim().min(1)
+    });
+    ProjectUsageDayPointSchema = UsageTotalsSchema.extend({
+      date: UtcDateSchema
+    });
+    ProjectUsageResponseSchema = external_exports.object({
+      organizationId: OrganizationIdSchema,
+      projectId: ProjectIdSchema,
+      range: external_exports.object({
+        key: ProjectUsageRangeKeySchema,
+        since: external_exports.string().datetime(),
+        until: external_exports.string().datetime()
+      }),
+      totals: ProjectUsageTotalsSchema,
+      byAgent: external_exports.array(ProjectUsageAgentSummarySchema),
+      byModel: external_exports.array(ProjectUsageModelSummarySchema),
+      daily: external_exports.array(ProjectUsageDayPointSchema)
+    });
   }
 });
 
@@ -23134,7 +23173,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.286",
+      version: "0.1.288",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -34750,6 +34789,12 @@ var claudeAgentBridgeRuntime = {
 var claudeAgentSdkRuntime = {
   startup: (input) => startupClaudeAgent(input)
 };
+var ClaudeMcpRegistryEmptyError = class extends Error {
+  constructor(detail) {
+    super(`MCP tool registry came up empty at session start: ${detail}`);
+    this.name = "ClaudeMcpRegistryEmptyError";
+  }
+};
 var ClaudeAgentBridgeSessionImpl = class {
   input;
   inputQueue;
@@ -35139,17 +35184,20 @@ var ClaudeAgentBridgeSessionImpl = class {
   }
   // Why this gate is correct without a provider-backed test (it relies on real
   // SDK mcpServerStatus() timing that fakes cannot prove):
-  // - Safe-degrade: pollMcpRegistration never rejects — on timeout, a
-  //   status-read failure, or a closed session it resolves, so the worst case
-  //   is today's immediate injection. The gate can never regress below the
-  //   status-quo race; it can only close it.
+  // - Safe-degrade on uncertainty: pollMcpRegistration never rejects — on
+  //   timeout, a status-read failure, or a closed session it resolves, so an
+  //   *unconfirmed* registry still degrades to today's immediate injection.
+  //   The one fail-closed exit is the confirmed-empty registry: every
+  //   configured server settled and none is serving tools, which is exactly
+  //   the state that produced silent toolless runs in production (FRA-3458).
   // - Provider-path validation is deferred deliberately: the failure is the
   //   intermittent live-prod race on the chief-of-staff singleton (a real
   //   runtime restart dispatching turn-1 while real mcp__* servers reconnect),
   //   which cannot be reproduced deterministically without live credentials
   //   and a forced restart racing reconnect.
   // - Live confirmation comes from the agent_bridge_claude_mcp_gate_started/
-  //   _ready/_timeout diagnostics on the next real restart, not a CI fake.
+  //   _ready/_timeout/_empty diagnostics on the next real restart, not a CI
+  //   fake.
   //
   // Block until the freshly-warmed query's MCP servers have left `pending`, so
   // the first turn's prompt is built with the mcp__* tools registered. Memoized
@@ -35173,15 +35221,22 @@ var ClaudeAgentBridgeSessionImpl = class {
         promise: this.pollMcpRegistration(query)
       };
     }
-    await this.mcpRegistrationGate.promise;
+    const result = await this.mcpRegistrationGate.promise;
+    if (result.outcome !== "empty") {
+      return;
+    }
+    this.close();
+    throw new ClaudeMcpRegistryEmptyError(result.detail);
   }
   // Poll the live query's MCP server status until no configured server is still
   // `pending`, bounded by CLAUDE_MCP_REGISTRATION_TIMEOUT_MS. Terminal states
   // (connected/failed/needs-auth/disabled) all count as settled, so a server
   // that cannot connect in this runtime (e.g. an interactively-authed server in
-  // a headless sandbox) never holds the gate to the timeout. Never rejects:
+  // a headless sandbox) never holds the gate to the timeout. A settled state
+  // where no configured server is serving tools resolves "empty" — the caller
+  // fails the send rather than injecting a toolless turn. Never rejects:
   // status-read failure, timeout, or a closed session all resolve so the caller
-  // degrades to immediate injection.
+  // degrades to immediate injection when the registry state is uncertain.
   async pollMcpRegistration(query) {
     const configuredNames = Object.keys(this.options.mcpServers ?? {});
     const startedAt = Date.now();
@@ -35191,7 +35246,7 @@ var ClaudeAgentBridgeSessionImpl = class {
     );
     while (true) {
       if (this.state.kind === "closed") {
-        return;
+        return { outcome: "closed" };
       }
       let statuses;
       try {
@@ -35200,19 +35255,26 @@ var ClaudeAgentBridgeSessionImpl = class {
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_status_failed duration_ms=${Date.now() - startedAt} error=${error51 instanceof Error ? error51.message : String(error51)}`
         );
-        return;
+        return { outcome: "status_failed" };
       }
       if (mcpServersSettled(statuses, configuredNames)) {
+        if (!mcpRegistryHasTools(statuses, configuredNames)) {
+          const detail = mcpStatusDetailList(statuses);
+          this.input.writeOutput?.(
+            `agent_bridge_claude_mcp_gate_empty duration_ms=${Date.now() - startedAt} servers=${detail}`
+          );
+          return { outcome: "empty", detail };
+        }
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_ready duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
         );
-        return;
+        return { outcome: "ready" };
       }
       if (Date.now() >= deadline) {
         this.input.writeOutput?.(
           `agent_bridge_claude_mcp_gate_timeout duration_ms=${Date.now() - startedAt} servers=${mcpStatusList(statuses)}`
         );
-        return;
+        return { outcome: "timeout" };
       }
       await delay(CLAUDE_MCP_REGISTRATION_POLL_INTERVAL_MS);
     }
@@ -35355,9 +35417,20 @@ function mcpServersSettled(statuses, configuredNames) {
     return status !== void 0 && status !== "pending";
   });
 }
+function mcpRegistryHasTools(statuses, configuredNames) {
+  const configured = new Set(configuredNames);
+  return statuses.some(
+    (server) => configured.has(server.name) && server.status === "connected" && (server.tools === void 0 || server.tools.length > 0)
+  );
+}
 function mcpStatusList(statuses) {
   return statuses.map((server) => `${server.name}:${server.status}`).join(",");
 }
+function mcpStatusDetailList(statuses) {
+  return statuses.map(
+    (server) => server.error ? `${server.name}:${server.status}(${server.error})` : `${server.name}:${server.status}`
+  ).join(",");
+}
 function delay(ms) {
   return new Promise((resolve4) => {
     const timer = setTimeout(resolve4, ms);
@@ -35465,6 +35538,13 @@ var ClaudeCodeCommandHandler = class {
   agentSession = null;
   persistedAgentId = null;
   injectedCommands = /* @__PURE__ */ new Set();
+  // Message commands whose injection has started but not settled. A fresh SDK
+  // warm inside sendMessage can outlast the bridge's command-ack window, so a
+  // redelivery may arrive while the first attempt is still in flight; acking it
+  // "duplicate" then would let the worker accept a command whose injection
+  // later fails, silently stalling the turn (FRA-3458). The duplicate branch
+  // awaits the in-flight outcome here and relays it instead.
+  inFlightMessageCommands = /* @__PURE__ */ new Map();
   pendingQuestions = /* @__PURE__ */ new Map();
   outputBuffer;
   projector = new ClaudeCodeProjector();
@@ -35512,13 +35592,25 @@ var ClaudeCodeCommandHandler = class {
       });
     }
     if (this.injectedCommands.has(delivery.commandId)) {
+      const inFlight = this.inFlightMessageCommands.get(delivery.commandId);
+      const outcome2 = inFlight ? await inFlight : { status: "injected" };
       this.input.runtimeLogger?.info(
         "agent_bridge_claude_command_duplicate",
         commandLogContext(delivery, {
           socket_id: socketId,
-          duration_ms: Date.now() - startedAt
+          duration_ms: Date.now() - startedAt,
+          awaited_in_flight: Boolean(inFlight),
+          in_flight_status: outcome2.status
         })
       );
+      if (outcome2.status === "failed") {
+        return commandAck({
+          delivery,
+          socketId,
+          status: "failed",
+          error: outcome2.error
+        });
+      }
       return commandAck({
         delivery,
         socketId,
@@ -35569,6 +35661,53 @@ var ClaudeCodeCommandHandler = class {
       });
     }
     this.injectedCommands.add(delivery.commandId);
+    const injection = this.injectMessageCommand(
+      activeContext,
+      delivery,
+      message,
+      socketId
+    );
+    this.inFlightMessageCommands.set(delivery.commandId, injection);
+    let outcome;
+    try {
+      outcome = await injection;
+    } finally {
+      this.inFlightMessageCommands.delete(delivery.commandId);
+    }
+    if (outcome.status === "failed") {
+      this.injectedCommands.delete(delivery.commandId);
+      this.input.runtimeLogger?.warn(
+        "agent_bridge_claude_command_failed",
+        commandLogContext(delivery, {
+          socket_id: socketId,
+          duration_ms: Date.now() - startedAt,
+          error: outcome.error
+        })
+      );
+      return commandAck({
+        delivery,
+        socketId,
+        status: "failed",
+        error: outcome.error
+      });
+    }
+    this.input.runtimeLogger?.info(
+      "agent_bridge_claude_command_injected",
+      commandLogContext(delivery, {
+        socket_id: socketId,
+        duration_ms: Date.now() - startedAt
+      })
+    );
+    return commandAck({
+      delivery,
+      socketId,
+      status: "injected"
+    });
+  }
+  // Runs one message command's injection to a terminal outcome. Never rejects:
+  // the returned promise is stored in the in-flight map and awaited by both the
+  // original delivery and any redeliveries, so failures travel as values.
+  async injectMessageCommand(activeContext, delivery, message, socketId) {
     try {
       const emitStartedAt = Date.now();
       this.input.runtimeLogger?.info(
@@ -35614,35 +35753,13 @@ var ClaudeCodeCommandHandler = class {
           duration_ms: Date.now() - sendStartedAt
         })
       );
+      return { status: "injected" };
     } catch (error51) {
-      this.injectedCommands.delete(delivery.commandId);
-      this.input.runtimeLogger?.warn(
-        "agent_bridge_claude_command_failed",
-        commandLogContext(delivery, {
-          socket_id: socketId,
-          duration_ms: Date.now() - startedAt,
-          error: error51 instanceof Error ? error51.message : String(error51)
-        })
-      );
-      return commandAck({
-        delivery,
-        socketId,
+      return {
         status: "failed",
         error: error51 instanceof Error ? error51.message : String(error51)
-      });
+      };
     }
-    this.input.runtimeLogger?.info(
-      "agent_bridge_claude_command_injected",
-      commandLogContext(delivery, {
-        socket_id: socketId,
-        duration_ms: Date.now() - startedAt
-      })
-    );
-    return commandAck({
-      delivery,
-      socketId,
-      status: "injected"
-    });
   }
   // -----------------------------------------------------------------------------
   // Question answering

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.286",
+  "version": "0.1.288",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"