@awak-app/simy-cli 0.6.0 → 0.6.2

package/README.md

@@ -104,6 +104,10 @@ Detached daemon and desktop-host diagnostics are saved to
 (`SIMY_HOME` defaults to `~/.simy`). Each log is limited to 1 MiB plus two
 backups; credentials, Cookie headers and URL queries are redacted. Installer
 handoff diagnostics remain in `~/.simy/installer/desktop-update.log`.
+The macOS window also saves the latest nonzero background-host exit in
+`$SIMY_HOME/logs/desktop-host-exit.log`, including its timestamp, exit status and
+up to 16 KiB of stderr. Credential-bearing lines are omitted; each abnormal exit
+replaces the previous record. This includes failures before JavaScript starts.
 `simy --version` or `simy -v` prints the package version without starting work.
 
 Closing the window keeps the agent running. Open the app again or choose
@@ -188,6 +192,22 @@ checks the bundled CLI in ChatGPT and Codex apps in system and user Applications
 Claude discovery likewise falls back to a compatible native or Desktop bundle
 when an older PATH installation cannot meet its version requirement.
 
+On macOS and Linux, the desktop host reads the user's interactive login-shell
+PATH once at startup, so providers installed through nvm, Volta or custom prefixes
+can be found from GUI launches, including Finder or the Dock on macOS. Shell paths
+take priority; existing launcher paths remain available. If the five-second shell
+probe cannot read PATH, startup uses the launcher PATH. Windows keeps its existing PATH.
+
+Installed Codex and Claude hooks use an absolute Node runtime path. When available,
+the SIMY installer's `current` link or Homebrew's `opt` link replaces a versioned
+runtime path, allowing hooks to follow updates without relying on the provider's PATH.
+
+Use `simy delivery activity --watch` for a read-only local snapshot every minute,
+or add `--json` for one JSON object per sample. It separates execution, waits,
+stops, failures and repeated attempts without new verified outcomes, with task
+identity, agent, reasons and outcome timestamps. Missing evidence is shown as
+unknown; open time is never counted as productive time. See [work activity](docs/work-activity.md).
+
 The plugin also provides an opt-in, hook-based Delivery Loop in the user's existing
 Codex or Claude Code conversation. Install the plugin, review and enable SIMY hooks
 with `/hooks`, then request `/simy:delivery-loop` for the task. Installing or updating

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -14,6 +14,7 @@
     "start": "node ./src/index.js",
     "test": "node --test",
     "test:e2e:console": "node ./scripts/console-e2e.js",
+    "test:e2e:work-activity": "node ./scripts/work-activity-e2e.js",
     "test:e2e:sqm-complete-loop": "node ./scripts/sqm-complete-loop-e2e.js",
     "test:e2e:sqm-local-review": "node ./scripts/sqm-local-review-e2e.js",
     "test:e2e:console:narrow": "CLI_E2E_COLUMNS=78 CLI_E2E_ROWS=40 node ./scripts/console-e2e.js",
@@ -42,7 +43,7 @@
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js",
-    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js",
+    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/login-shell-path.js && node --check ./src/hook-runtime.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.6.0";
+export const CLI_VERSION = "0.6.2";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/codex-plugins/simy/hooks/delivery-loop.mjs

@@ -689,6 +689,8 @@ function newVerifiedCriterion(run, id, now) {
     managed.verifiedCriterionHistory.push(id);
   } else if (Object.hasOwn(managed.verified, id)) return;
   managed.verifiedRevision += 1;
+  // Unlike the budget baseline, this is never initialized by enrollment/migration.
+  if (!Object.hasOwn(managed.verified, id)) managed.lastOutcomeAt = now;
   managed.lastVerifiedProgressAt = Math.max(managed.lastVerifiedProgressAt ?? run.startedAt, now);
 }
 export async function verifyAutomaticCriteria(record, now) {

package/src/delivery-hooks/activity.js

@@ -0,0 +1,125 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { listRecords, processIdentity } from '../codex-plugins/simy/hooks/delivery-loop.mjs';
+
+export const ACTIVITY_INTERVAL_MS = 60_000;
+const clean = value => typeof value === 'string'
+  ? value.replace(/[\x00-\x1f\x7f-\x9f\u202a-\u202e\u2066-\u2069]/g, ' ').trim() : '';
+const timestamp = (value, now) => Number.isFinite(value) && value >= 0 && value <= now ? value : null;
+const iso = value => value === null ? null : new Date(value).toISOString();
+
+function stateOf(record, now, liveRuntime) {
+  const run = record.run;
+  const state = run?.state;
+  if (['failed', 'stopped', 'completed', 'reported_done'].includes(state)) return state;
+  if (state === 'paused') return 'stopped';
+  if (['blocked', 'verification_pending', 'budget_exhausted'].includes(state)) return 'waiting';
+  const recent = value => timestamp(value, now) !== null && now - value < ACTIVITY_INTERVAL_MS;
+  const runtime = record.runtime;
+  // An open process alone is not execution evidence. A positive hook observation
+  // also needs a matching live identity and a recent timestamp.
+  if (runtime?.isRunning === true && liveRuntime && recent(runtime.observedAt)) return 'running';
+  const attempt = run?.managed?.executionAttempt;
+  if (state === 'auto_resuming' && attempt?.phase === 'dispatching' &&
+      recent(attempt.lastActivityAt)) return 'running';
+  if (state === 'recovery_required') return 'waiting';
+  if (runtime?.isRunning === false && recent(runtime.observedAt)) return 'waiting';
+  if (attempt?.phase === 'claimed' && recent(attempt.claimedAt)) return 'waiting';
+  return 'unknown';
+}
+
+export async function workActivitySnapshot(records, { now = Date.now(), inspectProcess = processIdentity } = {}) {
+  const items = [];
+  for (const record of records) {
+    const run = record.run;
+    if (!run && !record.monitor && !record.tracked) continue;
+    const managed = run?.managed;
+    const runtime = record.runtime;
+    let liveRuntime = false;
+    if (runtime?.isRunning === true && runtime.process?.identity &&
+        timestamp(runtime.observedAt, now) !== null && now - runtime.observedAt < ACTIVITY_INTERVAL_MS) {
+      try { liveRuntime = await inspectProcess(runtime.process.pid) === runtime.process.identity; }
+      catch { /* Unknown identity cannot prove execution. */ }
+    }
+    const executionState = stateOf(record, now, liveRuntime);
+    const lastOutcomeAt = timestamp(managed?.lastOutcomeAt, now);
+    const attempts = Number.isInteger(managed?.noProgress) && managed.noProgress >= 0 ? managed.noProgress : null;
+    const progressState = attempts >= 2 ? 'repeating_without_verified_progress'
+      : lastOutcomeAt !== null ? 'verified_outcome_recorded' : 'unknown';
+    const observed = [record.observedAt, runtime?.observedAt, managed?.executionAttempt?.lastActivityAt]
+      .map(value => timestamp(value, now)).filter(value => value !== null);
+    const observedAt = observed.length ? Math.max(...observed) : null;
+    items.push({
+      taskId: clean(managed?.taskId) || clean(record.associationTaskId) || null,
+      provider: clean(record.provider), session: clean(record.session),
+      agent: `${clean(record.provider)}:${clean(record.session)}`, humanAssignee: null,
+      objective: clean(run?.objective) || null, executionState, recordedState: clean(run?.state) || null,
+      progressState, noProgressAttempts: attempts,
+      lastOutcomeAt: iso(lastOutcomeAt),
+      minutesSinceOutcome: lastOutcomeAt === null ? null : Math.floor((now - lastOutcomeAt) / ACTIVITY_INTERVAL_MS),
+      observedAt: iso(observedAt), observationAgeMinutes: observedAt === null ? null : Math.floor((now - observedAt) / ACTIVITY_INTERVAL_MS),
+      reason: executionState === 'unknown' ? 'No fresh execution observation; activity is unknown.'
+        : clean(run?.reason) || (executionState === 'running' ? 'Recent execution observation.' : 'Provider turn is waiting.'),
+      recordedReason: clean(run?.reason) || null,
+      waitOwner: clean(managed?.dependencyWait?.owner) || null,
+      nextCheck: clean(managed?.dependencyWait?.nextCheck) || null,
+    });
+  }
+  items.sort((a, b) => a.agent.localeCompare(b.agent));
+  return { schemaVersion: 1, sampledAt: new Date(now).toISOString(), intervalMs: ACTIVITY_INTERVAL_MS,
+    measurement: 'point_in_time_observations_not_productive_duration', items };
+}
+
+function wrap(value, width = 78) {
+  const chars = Array.from(value);
+  const lines = [];
+  while (chars.length) lines.push(chars.splice(0, width).join(''));
+  return lines.join('\n');
+}
+
+export function formatWorkActivity(snapshot) {
+  const lines = [`Work activity | ${snapshot.sampledAt}`, 'Sampling: 60s. Observations are not productive time.'];
+  if (!snapshot.items.length) lines.push('No locally recorded tasks or monitored sessions.');
+  for (const item of snapshot.items) {
+    lines.push('', `Task: ${item.taskId || 'unassigned (see session)'}`,
+      `Agent: ${item.agent}`, 'Human assignee: unknown',
+      `State: ${item.executionState} | Progress: ${item.progressState}`,
+      `Last verified outcome: ${item.lastOutcomeAt || 'unknown'}`,
+      `Attempts without new verified outcome: ${item.noProgressAttempts ?? 'unknown'}`,
+      `Last observation: ${item.observedAt || 'unknown'}`,
+      `Reason: ${item.reason}`);
+    if (item.recordedReason && item.recordedReason !== item.reason) lines.push(`Recorded reason: ${item.recordedReason}`);
+    if (item.waitOwner) lines.push(`Waiting on: ${item.waitOwner}`);
+    if (item.nextCheck) lines.push(`Next check: ${item.nextCheck}`);
+  }
+  return lines.map(line => wrap(line)).join('\n');
+}
+
+export async function runActivityCommand(args, { root, output = console.log, now = Date.now,
+  readRecords = listRecords, inspectProcess = processIdentity, wait = delay, signal } = {}) {
+  const options = {};
+  for (let i = 0; i < args.length; i++) {
+    const key = args[i];
+    if (!['--watch', '--json', '--provider', '--session'].includes(key) || Object.hasOwn(options, key)) {
+      throw new Error('Use delivery activity [--watch] [--json] [--provider codex|claude] [--session ID].');
+    }
+    if (['--watch', '--json'].includes(key)) options[key] = true;
+    else {
+      const value = args[++i];
+      if (!value || value.startsWith('--')) throw new Error(`Missing value for ${key}.`);
+      options[key] = value;
+    }
+  }
+  if (options['--provider'] && !['codex', 'claude'].includes(options['--provider'])) throw new Error('Unsupported provider.');
+  do {
+    if (signal?.aborted) break;
+    const records = (await readRecords(root)).filter(record =>
+      (!options['--provider'] || record.provider === options['--provider']) &&
+      (!options['--session'] || record.session === options['--session']));
+    const snapshot = await workActivitySnapshot(records, { now: now(), inspectProcess });
+    output(options['--json'] ? JSON.stringify(snapshot) : formatWorkActivity(snapshot));
+    if (!options['--watch']) break;
+    try { await wait(ACTIVITY_INTERVAL_MS, undefined, { signal }); }
+    catch (error) { if (error.name === 'AbortError' && signal?.aborted) break; throw error; }
+  } while (!signal?.aborted);
+  return 0;
+}

package/src/delivery-hooks/command.js

@@ -2,6 +2,7 @@ import { readFile } from 'node:fs/promises';
 import { startDelivery, checkpointDelivery, controlDelivery, listRecords, rootDirectory, verifyDelivery } from '../codex-plugins/simy/hooks/delivery-loop.mjs';
 import { continueSession } from '../session-supervision/index.js';
 import { cancelHandoffSession, handoffSession } from '../session-supervision/handoff.js';
+import { runActivityCommand } from './activity.js';
 
 async function readCheckpointInput(input) {
   const chunks = [];
@@ -17,7 +18,9 @@ async function readCheckpointInput(input) {
 
 export async function runDeliveryCommand(argv, { root = rootDirectory(), cwd = process.cwd(), input = process.stdin, output = console.log } = {}) {
   const [action, ...args] = argv;
+  if (action === 'activity') return runActivityCommand(args, { root, output });
   if (!action || action === '--help') {
+    output('simy delivery activity [--watch] [--json] [--provider codex|claude] [--session ID] — local observations every 60 seconds; not productive time.');
     output('Progress: --continuation-policy progress [--hard-max-minutes 1440] [--hard-max-continuations 50] [--provider-token-ceiling 15000000 (Codex only)]. Soft thresholds warn; approvals, missing usage and no verified progress still stop.');
     output('simy delivery continuation_policy --provider PROVIDER --session ID --task-id ID --continuation-policy bounded|progress');
     output('simy delivery extend --provider PROVIDER --session ID --task-id ID --hard-max-minutes N|--hard-max-continuations N|--provider-token-ceiling N');

package/src/desktop-host.js

@@ -23,7 +23,8 @@ import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { startAgent } from "./agent.js";
-import { createRuntimeDiagnostics } from "./runtime-diagnostics.js";
+import { createRuntimeDiagnostics, captureRuntimeOutput } from "./runtime-diagnostics.js";
+import { applyLoginShellPath } from "./login-shell-path.js";
 import { createCliAutoUpdater, readCliPackageInfo } from "./auto-update.js";
 import { createAgentShutdown } from "./shutdown.js";
 import { resolveWebOrigin } from "./web-origin.js";
@@ -735,7 +736,7 @@ export async function openProviderLogin(provider, root, {
   const directory = await mkdtemp(join(root, `${provider}-login-`));
   const script = join(directory, `Sign in to ${label}.command`);
   const quote = (s) => `'${s.replaceAll("'", "'\\''")}'`;
-  await writeFile(script, `#!/bin/bash\nexport PATH="/opt/homebrew/bin:/usr/local/bin:$HOME/.local/bin:$PATH"\n${quote(executable.executable)} ${args.join(" ")}\nresult=$?\nrm -f -- ${quote(script)}\nrmdir -- ${quote(directory)}\nexit "$result"\n`, { mode: 0o700 });
+  await writeFile(script, `#!/bin/bash\nexport PATH=${quote(env.PATH || "/usr/bin:/bin")}\n${quote(executable.executable)} ${args.join(" ")}\nresult=$?\nrm -f -- ${quote(script)}\nrmdir -- ${quote(directory)}\nexit "$result"\n`, { mode: 0o700 });
   await chmod(script, 0o700);
   try { await execFileImpl("/usr/bin/open", ["-a", "Terminal", script], { timeout: 10_000 }); }
   catch (error) { await rm(directory, { recursive: true, force: true }); throw error; }
@@ -750,8 +751,12 @@ if (isDesktopHostEntry()) {
   let host;
   const stop = () => { void host?.close().finally(() => process.exit(0)); };
   process.once("SIGTERM", stop); process.once("SIGINT", stop);
-  startDesktopHost().then((value) => { host = value; }).catch((error) => {
-    createRuntimeDiagnostics(process.env.SIMY_HOME?.trim() || join(homedir(), ".simy"), { name: "desktop-host" }).write(`startup failed: ${error?.stack || error}`);
+  const diagnostics = createRuntimeDiagnostics(process.env.SIMY_HOME?.trim() || join(homedir(), ".simy"), { name: "desktop-host" });
+  // stdout is the native JSONL channel; stderr is the only unstructured output
+  // and the native window does not display it, so keep it for support.
+  captureRuntimeOutput(diagnostics, { stderr: process.stderr });
+  applyLoginShellPath({ diagnostics }).catch(() => {}).then(() => startDesktopHost()).then((value) => { host = value; }).catch((error) => {
+    diagnostics.write(`startup failed: ${error?.stack || error}`);
     const conflict = error?.code === PROCESS_CONFLICT_CODE;
     process.stdout.write(`${JSON.stringify({
       type: "error",

package/src/hook-runtime.js

@@ -0,0 +1,29 @@
+import { existsSync } from "node:fs";
+
+// Version-specific runtimes are replaced by the stable alias that follows
+// upgrades: the installer's `current` release link and Homebrew's `opt` link.
+const STABLE_RUNTIME_ALIASES = [
+  [/^(.*)\/installer\/releases\/[^/]+\/[^/]+\.app\/(Contents\/Resources\/runtime\/bin\/node)$/, "$1/installer/current/$2"],
+  [/^(.*)\/Cellar\/([^/]+)\/[^/]+\/(bin\/node)$/, "$1/opt/$2/$3"],
+];
+
+// Provider hooks are persisted into Codex/Claude configuration and run long
+// after this process exits, often from GUI apps without the user's shell PATH.
+// They must therefore name an absolute runtime that survives SIMY and Node updates.
+export function stableHookRuntime({ execPath = process.execPath, fileExists = existsSync } = {}) {
+  for (const [pattern, replacement] of STABLE_RUNTIME_ALIASES) {
+    if (!pattern.test(execPath)) continue;
+    const alias = execPath.replace(pattern, replacement);
+    if (fileExists(alias)) return alias;
+  }
+  return execPath;
+}
+
+export function hookRuntimeCommand(command, { platform = process.platform, ...options } = {}) {
+  if (typeof command !== "string" || !command.startsWith("node ")) return command;
+  return `${quoteRuntime(stableHookRuntime(options), platform)} ${command.slice("node ".length)}`;
+}
+
+function quoteRuntime(value, platform) {
+  return platform === "win32" ? `"${value.replaceAll('"', '""')}"` : `'${value.replaceAll("'", "'\\''")}'`;
+}

package/src/index.js

@@ -57,6 +57,9 @@ if (!configuredWebOrigin) {
 } else if (dispatchArgv[0] === "doctor") {
   const { runDoctor } = await import("./doctor.js");
   process.exitCode = await runDoctor({ webOrigin: configuredWebOrigin, cliVersion: packageInfo.version });
+} else if (dispatchArgv[0] === "delivery" && dispatchArgv[1] === "activity") {
+  // A local observation must not install updates or require a network connection.
+  await runCommand();
 } else if (dispatchArgv[0] === "update") {
   const checkOnly = args.has("--check");
   const result = await runCliUpdateGate({

package/src/login-shell-path.js

@@ -0,0 +1,67 @@
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import path from "node:path";
+
+const START = "__SIMY_LOGIN_PATH_START__";
+const END = "__SIMY_LOGIN_PATH_END__";
+
+// Apps opened from Finder or the Dock inherit launchd's minimal PATH, not the
+// user's shell profile. Provider CLIs installed through nvm, volta, fnm, asdf,
+// pnpm or custom prefixes are therefore invisible unless we ask the user's own
+// login shell once. A slow or broken profile must never prevent startup.
+export async function resolveLoginShellPath({
+  platform = process.platform,
+  env = process.env,
+  execFileImpl = execFile,
+  fileExists = existsSync,
+  timeoutMs = 5_000,
+} = {}) {
+  if (platform === "win32") return null;
+  const shell = loginShell({ platform, env, fileExists });
+  if (!shell) return null;
+  const output = await new Promise((resolve) => {
+    // Read the exported environment rather than expanding $PATH in the shell:
+    // fish expands a quoted $PATH with spaces, but exports it colon-separated.
+    const child = execFileImpl(shell, ["-l", "-i", "-c", `echo ${START}; /usr/bin/env; echo ${END}`], {
+      env: { ...env, TERM: "dumb", DISABLE_AUTO_UPDATE: "true" },
+      timeout: timeoutMs,
+      killSignal: "SIGKILL",
+      maxBuffer: 1024 * 1024,
+    }, (_error, stdout) => resolve(String(stdout || "")));
+    child?.stdin?.end();
+  });
+  const start = output.lastIndexOf(START);
+  const end = output.indexOf(END, start);
+  if (start < 0 || end < 0) return null;
+  const line = output.slice(start + START.length, end).split(/\r?\n/).find((item) => item.startsWith("PATH="));
+  return line?.slice("PATH=".length) || null;
+}
+
+// Login-shell entries take priority, matching what the user sees in Terminal.
+// Existing entries (including the launcher's fallback directories) are kept.
+export function mergePathEntries(...values) {
+  const entries = [];
+  for (const value of values) {
+    for (const entry of String(value || "").split(path.delimiter)) {
+      if (path.isAbsolute(entry) && !entries.includes(entry)) entries.push(entry);
+    }
+  }
+  return entries.join(path.delimiter);
+}
+
+export async function applyLoginShellPath({ env = process.env, platform = process.platform, diagnostics, ...options } = {}) {
+  if (platform === "win32") return false;
+  const loginPath = await resolveLoginShellPath({ env, platform, ...options });
+  if (!loginPath) {
+    diagnostics?.write("login shell PATH unavailable; using launcher PATH");
+    return false;
+  }
+  env.PATH = mergePathEntries(loginPath, env.PATH);
+  diagnostics?.write(`login shell PATH applied (${env.PATH.split(path.delimiter).length} entries)`);
+  return true;
+}
+
+function loginShell({ platform, env, fileExists }) {
+  const candidates = [env.SHELL, platform === "darwin" ? "/bin/zsh" : null, "/bin/sh"];
+  return candidates.find((candidate) => candidate && path.isAbsolute(candidate) && fileExists(candidate)) || null;
+}

package/src/sqm/agent-skill.js

@@ -3,6 +3,7 @@ import { cp, lstat, mkdir, readFile, readdir, rename, rm, writeFile } from "node
 import { homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { hookRuntimeCommand } from "../hook-runtime.js";
 
 import { inspectClaudePlugin, installClaudePlugin } from "./claude-plugin.js";
 
@@ -328,25 +329,14 @@ async function bundledPluginManifest({ overrides = new Map() } = {}) {
 async function installedPluginOverrides() {
   const relative = "hooks/hooks.json";
   const source = JSON.parse(await readFile(path.join(BUNDLED_CODEX_PLUGIN_ROOT, relative), "utf8"));
-  const commandPrefix = "node ";
-  const runtime = shellQuote(process.execPath);
   for (const groups of Object.values(source.hooks || {})) {
     for (const group of groups || []) {
-      for (const hook of group.hooks || []) {
-        if (typeof hook.command === "string" && hook.command.startsWith(commandPrefix)) {
-          hook.command = `${runtime} ${hook.command.slice(commandPrefix.length)}`;
-        }
-      }
+      for (const hook of group.hooks || []) hook.command = hookRuntimeCommand(hook.command);
     }
   }
   return new Map([[relative, `${JSON.stringify(source, null, 2)}\n`]]);
 }
 
-function shellQuote(value) {
-  if (process.platform === "win32") return `"${value.replaceAll('"', '""')}"`;
-  return `'${value.replaceAll("'", "'\\''")}'`;
-}
-
 async function directoryDigest(root, { missing = "throw", manifest, overrides = new Map() } = {}) {
   let rootStat;
   try {

package/src/sqm/claude-plugin.js

@@ -3,6 +3,7 @@ import { mkdir, readFile, readdir, rename, rm, lstat, writeFile } from "node:fs/
 import { homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { hookRuntimeCommand } from "../hook-runtime.js";
 
 const SOURCE = fileURLToPath(new URL("../codex-plugins/simy/", import.meta.url));
 export const CLAUDE_MARKETPLACE = "simy-local";
@@ -43,7 +44,7 @@ export async function claudePluginFiles() {
         } else if (event === "Notification") {
           hook.statusMessage = "SIMY Delivery Loop permission-notification tracking";
         }
-        hook.command = hook.command.replace(/^node /, `${quoteRuntime(process.execPath)} `)
+        hook.command = hookRuntimeCommand(hook.command)
           .replaceAll("process.env.PLUGIN_ROOT", "process.env.CLAUDE_PLUGIN_ROOT")
           .replaceAll("hook.main('codex')", "hook.main('claude')");
       }
@@ -136,6 +137,3 @@ function json(value) { return `${JSON.stringify(value, null, 2)}\n`; }
 async function optionalRead(file) {
   try { return await readFile(file, "utf8"); } catch (error) { if (error.code === "ENOENT") return null; throw error; }
 }
-function quoteRuntime(value) {
-  return process.platform === "win32" ? `"${value.replaceAll('"', '""')}"` : `'${value.replaceAll("'", "'\\''")}'`;
-}

package/src/workflow-observation-sender.js

@@ -95,6 +95,7 @@ export function createWorkflowObservationSender({
   let terminal = null;
   let startPromise = null;
   let admittedAtMs = null;
+  let submittedTerminalAt = null;
 
   async function post(path, body, attempts) {
     let response = null;
@@ -191,10 +192,13 @@ export function createWorkflowObservationSender({
     // A very short provider turn can finish before the start RPC commits.
     // For a new run, record when the terminal event is submitted after
     // admission; the event itself remains the real provider event.
-    const observedAt = new Date(Math.max(now().getTime(), admittedAtMs + 1)).toISOString();
+    // The intake's immutable replay identity includes observed_at. Freeze it
+    // before the first send so another flush after a lost response (including
+    // concurrent flushes) resubmits the exact same event.
+    submittedTerminalAt ??= new Date(Math.max(now().getTime(), admittedAtMs + 1)).toISOString();
     return sendTypedTerminal({
       idempotencyKey: terminalIdempotencyKey(normalizedIntent, normalizedBinding),
-      observedAt,
+      observedAt: submittedTerminalAt,
     });
   }