@awak-app/simy-cli 0.5.15 → 0.5.17

package/README.md

@@ -42,6 +42,13 @@ SQM checks apply when you explicitly select `@simy`, invoke the SQM skill, or as
 After installation, restart Codex and find and install **SIMY** in **Plugins**
 before using `@simy` in a new task.
 
+The plugin also includes a non-blocking connection reminder. At task startup,
+resume, and prompt submission it reads the origin-scoped local discovery record
+and checks the loopback CLI health endpoint. It warns once per disconnected
+period in each Codex session, then rearms after the CLI reconnects. The hook does
+not start or install the CLI, read session tokens, enable SQM, or send email.
+Review and enable the plugin hooks through Codex's `/hooks` command.
+
 After that first installation, the daemon checks installed workflows at startup
 and every hour, including after a CLI automatic upgrade. It updates only existing
 platform installations and refreshes an already enabled SIMY Codex plugin through
@@ -49,6 +56,11 @@ platform installations and refreshes an already enabled SIMY Codex plugin throug
 receive a fresh cache. Use a new Codex task to pick up updated skills; running
 tasks are not restarted. Missing or disabled plugins are not enabled automatically.
 Failed refreshes retry on the next check without blocking daemon startup.
+Delivery Loop is a SIMY Web/CLI runtime workflow, not a local Codex skill.
+The plugin ships only SQM and PR review. Updating to this release removes the
+previously bundled Delivery Loop from managed plugin sources and refreshes the
+enabled cache. Older running CLI releases can restore their old bundled skill
+until upgraded; deleting a local skill alone does not change their updater.
 `--no-auto-update` or `SIMY_AUTO_UPDATE=0` disables these background updates too;
 `--no-workflow-prompt` only suppresses the initial installation prompt.
 
@@ -267,7 +279,7 @@ is not copied into the recovery contract.
 ## Provider token budget
 
 Each run accepts a configurable `token_budget` (or the explicit
-`provider_token_budget` alias) from 1 to 10,000,000 Provider tokens. The default
+`provider_token_budget` alias) from 1 to 15,000,000 Provider tokens. The default
 is 250,000. Provider tokens are the Codex or Claude Code usage reported for the
 run; they are a safety limit and are not billed as SIMY tokens.
 
@@ -277,6 +289,12 @@ limit. SIMY Web can edit that suggestion and call
 `provider_token_budget`. The CLI persists the higher limit and resumes the same
 run. SIMY token consumption remains a separate platform billing record.
 
+An in-flight provider call can report usage above the previous limit. Recovery
+keeps that full usage history, including reported cached input; it never resets
+the counter or increases the limit automatically. An explicitly approved higher
+limit must exceed usage already recorded and remain within the finite cap.
+Retry limits and all completion gates still apply after a budget increase.
+
 ## SQM local checks
 
 SQM deliberately has two identity-bound stages:
@@ -376,8 +394,16 @@ The local PR lifecycle is intentionally separate from deployment:
 2. Require explicit acceptance criteria plus an approved design summary for high-risk work.
 3. Run the coding executor and verify its result against local Git evidence.
 4. Run a separate AI audit session without granting it an implementation role.
-5. Mark the result `pr_ready_for_review` while GitHub checks or peer approval are pending.
-6. Mark it `merge_ready` only after the observed PR head/base, CI checks, merge state,
+5. Require eight revision-bound PR-preparation rows: latest base/head, current CI and
+   disclosed skips, exact companion revisions, E2E outcomes and zero residual fixtures,
+   security/privacy, browser/localization when applicable, final diff scope, and honest
+   residual/post-merge status. The CLI refreshes the remote base, requires it to be an
+   ancestor of the final head, and compares it with the PR base SHA.
+   Four additional conditional safeguards cover official-checklist ownership,
+   authoritative deployment-target mapping, live-test data safety, and saved-run/
+   checkpoint compatibility without forcing irrelevant work to execute them.
+6. Mark the result `pr_ready_for_review` while GitHub checks or peer approval are pending.
+7. Mark it `merge_ready` only after the observed PR head/base, CI checks, merge state,
    and human approval all pass.
 
 The Web UI can refresh review and CI evidence with
@@ -428,42 +454,79 @@ organization-wide bundle.
 
 Every CLI coding-loop promotion now requires a current two-layer observation
 matrix: the requested operation and result, plus independently checked final
-postcondition and integration. See the [minimum completion contract](src/codex-plugins/simy/skills/agentic-delivery-loop/references/minimum-completion.md)
+postcondition and integration. See the [minimum completion contract](src/orchestrator/delivery/references/minimum-completion.md)
 for the executable format. Missing mappings, mismatching observations, changed
 artifacts or stale revisions block promotion even when the executor reports
 success. Independent review checks original-request coverage and the test oracle.
 
 Existing v2 run history is retained; resumed/rechecked runs need the new evidence.
-The same checker ships in the standalone Delivery Loop skill, but it does not
-control the host's final response or establish deployment completion.
+The same checker ships under `src/orchestrator/delivery/scripts/` in the CLI
+package, independent of Codex plugin installation. It does not establish deployment
+completion or intercept another host application's final response.
+
+### PR closure and user-outcome transfer
+
+The Web/CLI executor and independent auditor receive the same
+[PR closure procedure](src/orchestrator/delivery/references/pr-closure.md).
+It requires a revision-bound before/after table, reachable normal-user paths
+(including no-workflow fallback), independent review, explicit authority,
+pre-close freshness checks and post-close remote reconciliation. A file match or
+successor link is not proof of UX inheritance; administrative transfer, approved
+retirement and complete inheritance have distinct decisions. Unresolved yellow/red comparison rows require
+remediation PRs (or exact existing open equivalents), mapped by criterion ID,
+owner and acceptance checks. Uncreated plans or unresolved authority/product
+decisions block transfer completion; creating a PR does not make a row green.
+Closure is not a new delivery completion state. This is runtime instruction and review guidance,
+not a GitHub hook that mechanically intercepts every external close command.
 
 ### Submit repaired local delivery evidence to SQM
 
 The bundled Delivery Loop maintains an external acceptance checklist with separate
 user-journey and technical-invariant results. It refreshes the table after each
 evaluated action and marks evidence pending when the code or runtime context
-changes. The [acceptance evidence guide](src/codex-plugins/simy/skills/agentic-delivery-loop/references/acceptance-evidence.md)
-documents the offline validator shipped inside the skill. Its result establishes
+changes. A non-green table is a checkpoint, not completion: the executor must
+perform feasible authorized repairs, missing verification and bounded waits,
+then re-observe and update the same criteria until the requested endpoint passes.
+A genuine safety/authority/dependency/budget stop remains explicitly unfinished
+with affected IDs and a concrete resumption condition; no automatic budget increase
+or background monitor is implied. Both executor and independent auditor receive
+this continuation contract. The [acceptance evidence guide](src/orchestrator/delivery/references/acceptance-evidence.md)
+documents the offline validator shipped inside the CLI runtime. Its result establishes
 record completeness and artifact integrity, not overall delivery or deployment.
 At the start of each new run, the loop recommends and confirms one of five
-[delivery levels](src/codex-plugins/simy/skills/agentic-delivery-loop/references/delivery-levels.md)
-in chat. Risk-based ceilings keep sensitive or consequential changes on the
-required safety level; the selection adjusts verification depth but grants no
-additional authority.
+[delivery levels](src/orchestrator/delivery/references/delivery-levels.md)
+in chat. Level 5 is highest assurance; level 1 is lightest. Every selection or
+recommendation shows all five levels (5 to 1), their content and verification scope,
+task-specific hour estimates, and the recommended level with its rationale.
+Estimates distinguish execution from external waits and state assumptions and
+uncertainty; there are no fixed durations by level. Risk-based floors preserve
+mandatory assurance. Historical selections retain their numbering version and
+meaning. These are executor/auditor instructions, not a new deterministic CLI
+selection validator; selecting a level grants no additional authority.
 
 `simy sqm submit-evidence --file delivery.json --host https://app-dev.simy.one`
 submits an explicit bounded summary through your existing organization-bound device
 session. `--dry-run` previews the exact document without uploading it. See the
-[local evidence contract](src/codex-plugins/simy/skills/agentic-delivery-loop/references/local-sqm-evidence.md).
+[local evidence contract](src/orchestrator/delivery/references/local-sqm-evidence.md).
 The receipt identifies the source digest and analysis job; it is not a declaration
 that an incident or blocking rule has been published.
 
 ## Delivery Loop shared specification
 
+UX descriptions throughout the Web/CLI lifecycle follow the
+[behavioral-completeness standard](src/orchestrator/delivery/references/ux-specification.md).
+Observable interaction units explicitly cover intent/context, entry, perception,
+control, response, usable outcome, continuation, alternatives/recovery and evidence.
+Independent reconstruction, source coverage, causal continuity, branch closure,
+observability and traceability determine sufficient detail, not word counts or
+product-specific scenarios. Unknowns remain explicit; compact summaries link to
+the complete canonical specification. The same standard is supplied to the actual
+executor and independent auditor; it is not an additional automatic schema gate.
+
 The [Delivery Loop system specification](docs/systems/delivery-loop/README.md)
 explains its purpose, As-Is and proposed To-Be through twelve linked views. Keep
 these as shared team documents; each change updates affected views and checks
-cross-view consistency. The skill requires independent design, implementation-to-
+cross-view consistency. The workflow requires independent design, implementation-to-
 To-Be and PR reviews, plus explicitly opted-in SQM before and after PR creation.
-The [workflow reference](src/codex-plugins/simy/skills/agentic-delivery-loop/references/shared-system-specifications.md)
+The [workflow reference](src/orchestrator/delivery/references/shared-system-specifications.md)
 explains baseline updates, historical regression coverage and evidence limits.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.15",
+  "version": "0.5.17",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -40,7 +40,7 @@
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js",
-    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/codex-plugins/simy/skills/agentic-delivery-loop/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
+    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/agent.js

@@ -126,6 +126,10 @@ import {
   createSqmLocalReviewApi,
   createSqmLocalReviewWorker,
 } from "./sqm/review-worker.js";
+import {
+  publishConnectionDiscovery,
+  removeConnectionDiscovery,
+} from "./connection-discovery.js";
 
 const DEVICE_HEARTBEAT_INTERVAL_MS = 20_000;
 
@@ -510,14 +514,20 @@ export async function startAgent({
         res.once("close", releaseUpdateWork);
       }
       if (req.method === "GET" && url.pathname === "/v1/health") {
+        const sessionValid = isSessionValid(session, Date.now(), apiOrigin);
+        const connection = connectionStatus.snapshot({ authenticated: sessionValid });
         json(res, 200, {
           ok: true,
           cli_version: CLI_VERSION,
           api_contract_version: CLI_API_CONTRACT_VERSION,
           daemon,
           web_origin: apiOrigin,
-          session_valid: isSessionValid(session, Date.now(), apiOrigin),
+          session_valid: sessionValid,
           session_expires_at: session?.expires_at ?? null,
+          connection: {
+            state: connection.state,
+            lastSuccessAt: connection.lastSuccessAt,
+          },
           cli_update: updateManager?.snapshot?.() ?? null,
         });
         return;
@@ -1566,6 +1576,14 @@ export async function startAgent({
   await new Promise((resolve) => server.listen(requestedPort, "127.0.0.1", resolve));
   const address = server.address();
   port = typeof address === "object" && address ? address.port : requestedPort;
+  let connectionDiscovery = null;
+  try {
+    connectionDiscovery = await (
+      dependencies.publishConnectionDiscovery || publishConnectionDiscovery
+    )({ webOrigin: apiOrigin, port, sessionRoot });
+  } catch (error) {
+    reportConnectionDiscoveryError(error, quiet);
+  }
   if (!quiet) {
     console.log(`SIMY local agent listening on http://127.0.0.1:${port}`);
     console.log(`SIMY Web host: ${apiOrigin}`);
@@ -1598,6 +1616,13 @@ export async function startAgent({
       updateManager?.stop?.();
       await sqmLocalReviewWorker?.close?.();
       await durableLocalTaskWorker?.close?.();
+      try {
+        await (dependencies.removeConnectionDiscovery || removeConnectionDiscovery)(
+          connectionDiscovery,
+        );
+      } catch (error) {
+        reportConnectionDiscoveryError(error, quiet);
+      }
       registry.close();
       localTaskRegistry.close();
     })();
@@ -1850,6 +1875,13 @@ function reportHeartbeatError(error, quiet) {
   );
 }
 
+function reportConnectionDiscoveryError(error, quiet) {
+  if (quiet) return;
+  console.error(
+    `SIMY connection reminder metadata could not be updated: ${error instanceof Error ? error.message : String(error)}`,
+  );
+}
+
 function reportDurableLocalTaskError(error, quiet) {
   if (quiet) return;
   console.error(

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.15";
+export const CLI_VERSION = "0.5.17";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/codex-plugins/simy/.codex-plugin/plugin.json

@@ -1,25 +1,24 @@
 {
   "name": "simy",
   "version": "0.1.0",
-  "description": "Run SIMY quality, delivery, and pull request review workflows from the current Codex thread.",
+  "description": "Run SIMY quality and pull request review workflows from the current Codex thread.",
   "author": {
     "name": "Specialist Doctors Inc.",
     "url": "https://github.com/SpecialistDoctors-Inc"
   },
   "repository": "https://github.com/SpecialistDoctors-Inc/simy-cli",
   "license": "UNLICENSED",
-  "keywords": ["simy", "sqm", "delivery", "pull-request"],
+  "keywords": ["simy", "sqm", "pull-request"],
   "skills": "./skills/",
   "interface": {
     "displayName": "SIMY",
-    "shortDescription": "Quality, delivery, and PR workflows for SIMY.",
-    "longDescription": "SIMY turns the current Codex thread into a bounded quality check, a full evidence-driven delivery loop, or a read-only pull request review.",
+    "shortDescription": "Quality and PR review workflows for SIMY.",
+    "longDescription": "SIMY turns the current Codex thread into a bounded quality check or a read-only pull request review. Delivery Loop runs through SIMY Web and CLI, not a local Codex skill.",
     "developerName": "Specialist Doctors Inc.",
     "category": "Developer Tools",
-    "capabilities": ["Quality", "Delivery", "Review"],
+    "capabilities": ["Quality", "Review"],
     "defaultPrompt": [
       "Run the SIMY SQM Loop for the current thread.",
-      "Run the SIMY Delivery Loop for the current thread.",
       "Review the current pull request with SIMY."
     ]
   }

package/src/codex-plugins/simy/hooks/README.md

@@ -0,0 +1,17 @@
+# SIMY connection reminder
+
+The SIMY Codex plugin checks the origin-scoped local CLI connection when a task
+starts or resumes and when a prompt is submitted. The hook only reads the local
+daemon discovery record and its `/v1/health` endpoint. It never starts, installs,
+signs in to, or changes SIMY CLI, and it never sends email.
+
+The reminder is non-blocking. It stays silent while the latest cloud heartbeat is
+fresh, warns once for each disconnected period in a Codex session, and rearms
+after a successful probe. State is stored under `PLUGIN_DATA`; the fallback is
+the SIMY home directory. Installing the plugin does not trust its hooks
+automatically: review and enable them through Codex's `/hooks` command.
+
+When `SIMY_WEB_ORIGIN` or `SIMY_API_ORIGIN` is set, only that origin is accepted.
+Otherwise the hook checks at most 16 origin-keyed discovery records and accepts
+the first live, authenticated connection with a fresh cloud heartbeat. It never
+scans ports or reads stored session tokens.

package/src/codex-plugins/simy/hooks/connection-reminder.mjs

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+
+import { createHash } from "node:crypto";
+import { mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+
+const HEARTBEAT_FRESHNESS_MS = 90_000;
+const PROBE_TIMEOUT_MS = 750;
+const MAX_INPUT_BYTES = 64 * 1024;
+const MAX_DISCOVERY_RECORDS = 16;
+
+export async function runConnectionReminder({
+  env = process.env,
+  input = {},
+  fetchImpl = globalThis.fetch,
+  now = () => Date.now(),
+} = {}) {
+  const explicitWebOrigin = resolveExplicitWebOrigin(env);
+  const sessionRoot = env.SIMY_HOME?.trim() || join(homedir(), ".simy");
+  const pluginData = env.PLUGIN_DATA?.trim() || join(sessionRoot, "plugin-data", "simy");
+  const sessionId = String(input.session_id || input.sessionId || env.CODEX_THREAD_ID || "unknown");
+  const statePath = reminderStatePath(pluginData, explicitWebOrigin || "any-origin", sessionId);
+  const connected = explicitWebOrigin
+    ? await probeConnection({ webOrigin: explicitWebOrigin, sessionRoot, fetchImpl, now })
+    : await probeAnyConnection({ sessionRoot, fetchImpl, now });
+  const previous = await readState(statePath);
+  if (connected) {
+    if (previous?.disconnected) await writeState(statePath, { disconnected: false }).catch(() => {});
+    return { continue: true };
+  }
+  if (previous?.disconnected) return { continue: true };
+  await writeState(statePath, { disconnected: true }).catch(() => {});
+  return { continue: true, systemMessage: disconnectedMessage(env) };
+}
+
+export async function probeConnection({ webOrigin, sessionRoot, fetchImpl, now }) {
+  let discovery;
+  try {
+    discovery = JSON.parse(await readFile(discoveryPath(webOrigin, sessionRoot), "utf8"));
+  } catch {
+    return false;
+  }
+  if (
+    discovery?.schema_version !== 1 ||
+    discovery?.web_origin !== webOrigin ||
+    !Number.isInteger(discovery?.port) ||
+    discovery.port < 1 ||
+    discovery.port > 65_535
+  ) return false;
+
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+  timeout.unref?.();
+  try {
+    const response = await fetchImpl(`http://127.0.0.1:${discovery.port}/v1/health`, {
+      headers: { Origin: webOrigin },
+      redirect: "error",
+      signal: controller.signal,
+    });
+    if (!response.ok) return false;
+    const health = await response.json();
+    const lastSuccess = Date.parse(health?.connection?.lastSuccessAt || "");
+    const sampledAt = typeof now === "function" ? now() : now;
+    return Boolean(
+      health?.ok === true &&
+        health?.web_origin === webOrigin &&
+        health?.session_valid === true &&
+        health?.connection?.state === "online" &&
+        Number.isFinite(lastSuccess) &&
+        sampledAt - lastSuccess >= 0 &&
+        sampledAt - lastSuccess <= HEARTBEAT_FRESHNESS_MS,
+    );
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+export async function probeAnyConnection({ sessionRoot, fetchImpl, now }) {
+  let entries;
+  try {
+    entries = (await readdir(join(sessionRoot, "connections")))
+      .filter((entry) => entry.endsWith(".json"))
+      .sort()
+      .slice(0, MAX_DISCOVERY_RECORDS);
+  } catch {
+    return false;
+  }
+  if (!entries.length) return false;
+  const probes = entries.map(async (entry) => {
+    try {
+      const record = JSON.parse(await readFile(join(sessionRoot, "connections", entry), "utf8"));
+      const webOrigin = normalizeOrigin(record?.web_origin);
+      if (!webOrigin || entry !== `${sha256(webOrigin)}.json`) return false;
+      return probeConnection({ webOrigin, sessionRoot, fetchImpl, now });
+    } catch {
+      return false;
+    }
+  });
+  return (await Promise.all(probes)).some(Boolean);
+}
+
+function resolveExplicitWebOrigin(env) {
+  const raw = env.SIMY_WEB_ORIGIN || env.SIMY_API_ORIGIN;
+  if (!raw) return null;
+  return normalizeOrigin(raw) || "invalid-origin";
+}
+
+function normalizeOrigin(raw) {
+  try {
+    const url = new URL(raw);
+    if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) {
+      return null;
+    }
+    if ((url.pathname && url.pathname !== "/") || url.search || url.hash) {
+      return null;
+    }
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+
+function discoveryPath(webOrigin, sessionRoot) {
+  return join(sessionRoot, "connections", `${sha256(webOrigin)}.json`);
+}
+
+function reminderStatePath(pluginData, webOrigin, sessionId) {
+  return join(pluginData, "connection-reminders", `${sha256(`${webOrigin}\0${sessionId}`)}.json`);
+}
+
+async function readState(target) {
+  try {
+    return JSON.parse(await readFile(target, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
+async function writeState(target, state) {
+  await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+  const temporary = `${target}.${process.pid}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(state)}\n`, { encoding: "utf8", mode: 0o600 });
+  await rename(temporary, target);
+}
+
+function disconnectedMessage(env) {
+  const locale = String(env.LC_ALL || env.LC_MESSAGES || env.LANG || "").toLowerCase();
+  return locale.startsWith("ja")
+    ? "SIMY CLI に接続できません。SIMY CLI を起動し、ログイン状態をご確認ください。作業はこのまま続けられます。"
+    : "SIMY CLI is not connected. Start SIMY CLI and check that you are signed in. You can keep working in the meantime.";
+}
+
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+async function readHookInput(stream = process.stdin) {
+  let raw = "";
+  for await (const chunk of stream) {
+    raw += String(chunk);
+    if (Buffer.byteLength(raw) > MAX_INPUT_BYTES) return {};
+  }
+  try {
+    const parsed = JSON.parse(raw || "{}");
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+
+export async function main() {
+  try {
+    const result = await runConnectionReminder({ input: await readHookInput() });
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+  } catch {
+    process.stdout.write(`${JSON.stringify({ continue: true })}\n`);
+  }
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) await main();

package/src/codex-plugins/simy/hooks/hooks.json

@@ -0,0 +1,27 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node --input-type=module -e \"import { pathToFileURL } from 'node:url'; import { join } from 'node:path'; const hook = await import(pathToFileURL(join(process.env.PLUGIN_ROOT, 'hooks', 'connection-reminder.mjs')).href); await hook.main();\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node --input-type=module -e \"import { pathToFileURL } from 'node:url'; import { join } from 'node:path'; const hook = await import(pathToFileURL(join(process.env.PLUGIN_ROOT, 'hooks', 'connection-reminder.mjs')).href); await hook.main();\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ]
+  }
+}

package/src/connection-discovery.js

@@ -0,0 +1,49 @@
+import { createHash, randomBytes } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+
+import { normalizeWebOrigin } from "./web-origin.js";
+
+export function connectionDiscoveryPath(webOrigin, sessionRoot) {
+  const origin = normalizeWebOrigin(webOrigin);
+  const originHash = createHash("sha256").update(origin).digest("hex");
+  return join(sessionRoot || defaultSessionRoot(), "connections", `${originHash}.json`);
+}
+
+export async function publishConnectionDiscovery({ webOrigin, port, sessionRoot }) {
+  const origin = normalizeWebOrigin(webOrigin);
+  const target = connectionDiscoveryPath(origin, sessionRoot || defaultSessionRoot());
+  const instanceId = randomBytes(16).toString("hex");
+  const record = {
+    schema_version: 1,
+    web_origin: origin,
+    port,
+    pid: process.pid,
+    instance_id: instanceId,
+    started_at: new Date().toISOString(),
+  };
+  await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+  const temporary = `${target}.${process.pid}.${instanceId}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, {
+    encoding: "utf8",
+    mode: 0o600,
+  });
+  await rename(temporary, target);
+  return { path: target, instanceId };
+}
+
+function defaultSessionRoot() {
+  return process.env.SIMY_HOME?.trim() || join(homedir(), ".simy");
+}
+
+export async function removeConnectionDiscovery(discovery) {
+  if (!discovery?.path || !discovery.instanceId) return;
+  try {
+    const current = JSON.parse(await readFile(discovery.path, "utf8"));
+    if (current?.instance_id !== discovery.instanceId) return;
+    await rm(discovery.path, { force: true });
+  } catch (error) {
+    if (error?.code !== "ENOENT" && !(error instanceof SyntaxError)) throw error;
+  }
+}

package/src/console/app.js

@@ -96,7 +96,7 @@ export function AgenticLoopConsole({ agent, onQuit = () => {} }) {
 
   useEffect(() => {
     if (selectedRun?.status === "pr_ready_for_review") {
-      setNotice("Review the pull request, then use /recheck to refresh readiness.");
+      setNotice("Unfinished: resolve the pending gates, then use /recheck to refresh readiness.");
     } else if (
       selectedRun?.status === "waiting_human" ||
       selectedRun?.controlState === "waiting_human"
@@ -1174,7 +1174,7 @@ function nextActionForRun(run, repositoryMissing = false) {
     return { tone: "yellow", text: "Press p to resume the local agent." };
   }
   if (run.status === "pr_ready_for_review") {
-    return { tone: "yellow", text: "Review the pull request, then press r to refresh its evidence." };
+    return { tone: "yellow", text: "Unfinished: resolve pending gates, then press r to refresh evidence." };
   }
   if (run.status === "merge_ready") {
     return {