@awak-app/simy-cli 0.6.10 → 0.6.12

package/README.md

@@ -22,6 +22,18 @@ Both providers share one analysis deadline. A deterministic provider failure pau
 new claims and retains failed history until environment/settings change or **Retry
 analysis** is selected.
 
+After **6 consecutive SQM analysis failures**, this machine stops claiming new
+SQM analyses for the current Web/account/organization. Codex and Claude share the
+counter; a completed analysis resets it. Empty polls and user cancellations do
+not change it. The pause and partial failure count survive restart, sign-in and
+provider changes. A review interrupted by a host exit counts once on restart;
+graceful cancellation clears that unfinished marker without changing the count.
+Reconnecting or selecting Retry cannot clear this pause.
+Installing and running a **newer SIMY version** resets the counter and resumes
+claims automatically, subject to normal organization access and analysis settings.
+The native organization menu shows when an update is required. This pause does
+not change server analysis consent or stop ordinary implementation tasks.
+
 Agentic Loop preflight accepts the task's existing requirement, acceptance
 criteria, required checks and charter context alongside the repository/provider.
 Its `startup` summary lists all blockers, unverified conditions and recovery
@@ -41,6 +53,16 @@ remain available for history and usage warnings. The Web controller supports
 connected local Codex/Claude engines; unsupported cloud execution is refused
 before dispatch.
 
+A completed Agentic worker's structured result is saved privately before evidence
+collection and the final observation flush. If the controller restarts after that save,
+the authorized daemon recovers the same attempt and collects fresh evidence
+without dispatching the completed worker again. Collector read failures retry up
+to three times; exhausted reads retain the result for an explicit continuation.
+A result receipt does not prove acceptance. Stop, changed identity or objective,
+and an already consumed remote result prevent automatic recovery. An unfinished
+worker or a missing, invalid or redacted structured result still requires
+reconciliation; no unknown external operation is automatically replayed.
+
 For interrupted Agentic work, `GET /v1/agentic-loop/:id/recovery` provides a
 read-only objective and checkout fingerprint. Reconcile an uncertain side effect
 with `POST` to that endpoint (`action: reconcile`, authoritative
@@ -794,3 +816,29 @@ Only summary metadata is retained, without analysis prompts, source inputs,
 model responses or credentials. Historical summaries are not a replacement for
 signed proof files or delivery acceptance. Records from versions that kept
 analysis only in memory cannot be recovered after that process exits.
+
+
+### Reusing a running service and launch recovery
+
+`simy` and `simy --daemon` first inspect the private discovery record and verify
+its live PID, instance, Web origin, CLI/API version and saved account,
+organization and device. A compatible background service is reused: the entry
+prints its existing address and opens SIMY Web (or its sign-in page). The local
+interactive console is only created when this entry owns a new service.
+SQM authorization also reuses that service and leaves it running when SQM exits.
+Unreachable or incompatible live services produce diagnostics instead of a
+second daemon. A stale record with a dead PID permits normal startup.
+
+Web-led launches can omit their temporary challenge. The daemon requests a
+credential for the existing queued run using its authenticated device. An
+explicitly expired challenge can be renewed once; consumed, invalid or
+cross-scope credentials cannot. Refresh the original run/device before retrying
+a consumed credential because execution may have started before its ledger
+status was uploaded. This recovery requires the companion Web
+`/api/local-cli/challenges/issue` endpoint; existing valid challenges continue
+to work against older Web versions.
+
+Scope mismatch diagnostics identify the changed account, organization, device
+or Web host and tell the caller to restore the original identity. Launch and
+recovery operations do not switch identity automatically. The private
+`/v1/connection` endpoint rejects browser requests and never returns tokens.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.6.10",
+  "version": "0.6.12",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -43,7 +43,7 @@
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js",
-    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/login-shell-path.js && node --check ./src/hook-runtime.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js && node --check ./src/session-supervision/stop-notifications.js",
+    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/connection-diagnostics.js && node --check ./src/launch-authorization.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/login-shell-path.js && node --check ./src/hook-runtime.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js && node --check ./src/session-supervision/stop-notifications.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/agent.js

@@ -1,8 +1,11 @@
+import { assertConnectionScope, connectionScope, connectionDiagnostic } from "./connection-diagnostics.js";
+import { authorizeLaunch } from "./launch-authorization.js";
 import { normalizePurposeVerification, assertPurposeActor, preparePurposeVerification, verifyPurposeLocalTask, purposeSigningKeyPath, purposeVerificationCapability, purposeWorkspaceBusy } from "./purpose-local-proof.js";
 import { startupRequirementChecks, summarizeStartupChecks } from "./startup-preflight.js";
 import { BROWSER_HANDOFF_TRANSPORT, browserHandoffPage, decryptBrowserHandoff } from "./browser-handoff.js";
 import { createAuthorizationWindow } from "./browser-authorization.js";
 import { createSqmHistoryStore, projectSqmHistory, sqmHistoryScope } from "./sqm/history-store.js";
+import { createSqmFailureCircuit, createSqmFailureCircuitStore } from "./sqm/failure-circuit.js";
 import { createDesktopAccessPolicy, desktopAccessReady, requireDesktopAccess } from './desktop-access.js';
 import { readSqmEnabled, writeSqmEnabled, readSqmSettings, writeSqmEngineFallback } from "./desktop-sqm-settings.js";
 import { createServer } from "node:http";
@@ -23,6 +26,7 @@ import {
   pauseLocalCodingRun,
   prepareLocalCodingRunRecovery,
   reconcileLocalCodingRun,
+  recoverCompletedLocalCodingRun,
   queueLocalCodingGuidance,
   recheckLocalCodingRun,
   publishRestoredLocalCodingRun,
@@ -35,7 +39,7 @@ import {
   toCompatibleCodingLoopState,
   toLedgerSnapshot,
 } from "./runner.js";
-import { assertRecoveryActor } from "./coding-run-recovery.js";
+import { assertRecoveryActor, preserveCompletedWorkerResult } from "./coding-run-recovery.js";
 import { codingRunsRoot, loadCodingRunSnapshots, saveCodingRunSnapshot } from "./coding-run-store.js";
 import {
   defaultSessionRoot,
@@ -538,7 +542,7 @@ export async function startAgent({
     })();
     return organizationRefresh;
   };
-  const requestDesktopLogin = (organizationId = null, { passive = false } = {}) => {
+  const requestDesktopLogin = (organizationId = null, { passive = false, reauthorize = false } = {}) => {
     const authorization = authorizationWindow.snapshot();
     if (authorization.state === "timed_out") {
       if (passive) return null;
@@ -566,7 +570,7 @@ export async function startAgent({
       refreshAvailableCapabilities();
       notifyDesktopStatusChange();
     } else if (isSessionValid(session, Date.now(), apiOrigin)) {
-      if (!enforceDesktopAccess || desktopAccess.snapshot().state !== 'signed_out') return null;
+      if (!reauthorize && (!enforceDesktopAccess || desktopAccess.snapshot().state !== 'signed_out')) return null;
       if (!passive || !loginUrl) {
         authNonce = randomBytes(16).toString("base64url");
         loginUrl = null;
@@ -635,7 +639,7 @@ export async function startAgent({
         if (remoteTime > localTime) {
           const repository = findRepository(repositoryInventory, snapshot.charter?.repository);
           const remoteRun = restoreRun({
-            snapshot, session, apiOrigin,
+            snapshot: preserveCompletedWorkerResult(localRun.snapshot, snapshot), session, apiOrigin,
             localPath: repository?.local_path || null,
             localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot,
           });
@@ -647,6 +651,7 @@ export async function startAgent({
             completedAt: remoteRun.completedAt,
             restoredFromState: remoteRun.restoredFromState,
             restoredObjectiveUnverified: remoteRun.restoredObjectiveUnverified,
+            restoredCompletedWorkerResult: remoteRun.restoredCompletedWorkerResult,
           });
           await saveCodingRunSnapshot(codingRunStateRoot, localRun.snapshot);
           await publishRestoredLocalCodingRun(localRun);
@@ -673,6 +678,23 @@ export async function startAgent({
     if (restored) notifyDesktopStatusChange();
   };
 
+  const recoverCompletedCodingRuns = async () => {
+    if (!daemon || shuttingDown || !desktopWorkAllowed() || !isSessionValid(session, Date.now(), apiOrigin)) return;
+    const requestedSession = session;
+    for (const run of registry.list()) {
+      if (!run.restoredCompletedWorkerResult || run.operation || run.child) continue;
+      try {
+        const scope = await authorizeDesktopWork();
+        if (shuttingDown || session !== requestedSession || !desktopWorkAllowed()) return;
+        assertRecoveryActor(run);
+        await authorizeDesktopWork(scope);
+        // Claim synchronously before starting the asynchronous controller. The
+        // normal process lease still protects this run against another daemon.
+        void recoverCompletedLocalCodingRun(run, dependencies.runOptions).catch(error => reportStartupConnectionError(error, quiet));
+      } catch (error) { reportStartupConnectionError(error, quiet); }
+    }
+  };
+
   const restoreLocalCodingRuns = async () => {
     if (!desktopWorkAllowed()) return;
     const requestedSession = session;
@@ -822,6 +844,7 @@ export async function startAgent({
     try {
       await restoreLocalCodingRuns();
       await restoreRemoteRuns();
+      await recoverCompletedCodingRuns();
       startCodingRunMonitor();
     } catch (error) {
       reportStartupConnectionError(error, quiet);
@@ -933,6 +956,7 @@ export async function startAgent({
       dependencies.createSqmLocalReviewWorker || createSqmLocalReviewWorker;
     sqmLocalReviewWorker = createWorker({
       api: sqmApi,
+      failureCircuit: createSqmFailureCircuit({ version: CLI_VERSION, store: createSqmFailureCircuitStore({ root: sessionRoot }) }),
       beginWork: () => acquireUpdateWork(updateManager),
       runReview: async (request, provider, context = {}) => {
         const scope = await authorizeDesktopWork();
@@ -1005,14 +1029,17 @@ export async function startAgent({
     );
   };
 
+  let connectionDiscovery = null;
+  const launchingRuns = new Set();
   const server = createServer(async (req, res) => {
+    let reservedLaunch = null;
     try {
       const url = new URL(req.url || "/", `http://${req.headers.host || "127.0.0.1"}`);
       const localHandoff = url.pathname === "/v1/auth/browser-complete";
       const localOrigin = `http://127.0.0.1:${port}`;
       if (localHandoff ? (req.headers.origin !== localOrigin || req.headers.host !== `127.0.0.1:${port}`)
           : !isRequestOriginAllowed(req.headers.origin, apiOrigin)) {
-        json(res, 403, { error: "request origin does not match the configured SIMY Web host" });
+        json(res, 403, connectionDiagnostic("connection_scope_changed", "web_origin"));
         return;
       }
       applyCors(req, res, apiOrigin);
@@ -1028,7 +1055,7 @@ export async function startAgent({
         return;
       }
       const agenticLoopPath = canonicalAgenticLoopPath(url.pathname);
-      const desktopRecoveryRoute = ['/v1/health', '/v1/capabilities', '/v1/auth/complete', '/v1/auth/browser-complete'].includes(url.pathname) ||
+      const desktopRecoveryRoute = ['/v1/health', '/v1/connection', '/v1/capabilities', '/v1/auth/complete', '/v1/auth/browser-complete'].includes(url.pathname) ||
         req.method === 'POST' && (/^\/v1\/local-tasks\/[^/]+\/control$/.test(url.pathname) || /^\/v1\/agentic-loop\/[^/]+\/control$/.test(agenticLoopPath));
       let requestAccessScope;
       if (enforceDesktopAccess && !desktopRecoveryRoute) {
@@ -1053,6 +1080,28 @@ export async function startAgent({
         res.once("finish", releaseUpdateWork);
         res.once("close", releaseUpdateWork);
       }
+      if (["GET", "POST"].includes(req.method) && url.pathname === "/v1/connection") {
+        // Private local entry points only. Browser origins must not read account
+        // bindings, instance identifiers or the pending authorization nonce.
+        if (req.headers.origin !== undefined || req.headers.host !== `127.0.0.1:${port}`) {
+          json(res, 403, { error: "Local connection discovery only.", code: "local_connection_only" }); return;
+        }
+        let authorizationUrl;
+        if (req.method === "POST") {
+          const body = await readJson(req);
+          if (!connectionDiscovery?.instanceId || body.instance_id !== connectionDiscovery.instanceId) {
+            json(res, 409, connectionDiagnostic("connection_service_mismatch")); return;
+          }
+          try { assertConnectionScope(body.scope, connectionScope(session || reclaimableSession, apiOrigin)); }
+          catch (error) { json(res, 409, { error: error.message, code: error.code, field: error.field, recovery: error.recovery }); return; }
+          authorizationUrl = requestDesktopLogin(null, { reauthorize: body.reauthorize === true });
+        } else authorizationUrl = requestDesktopLogin(null, { passive: true });
+        json(res, 200, { ok: true, cli_version: CLI_VERSION, api_contract_version: CLI_API_CONTRACT_VERSION,
+          daemon, web_origin: apiOrigin, instance_id: connectionDiscovery?.instanceId || null, pid: process.pid,
+          scope: connectionScope(session || reclaimableSession, apiOrigin), session_valid: isSessionValid(session, Date.now(), apiOrigin),
+          login_url: authorizationUrl });
+        return;
+      }
       if (req.method === "GET" && url.pathname === "/v1/health") {
         const sessionValid = isSessionValid(session, Date.now(), apiOrigin);
         const connection = connectionStatus.snapshot({ authenticated: sessionValid });
@@ -1965,25 +2014,23 @@ export async function startAgent({
             return;
           }
         }
-        const verified = await verifyLaunchChallenge({
-          apiOrigin,
-          apiBaseUrl: session.api_base_url,
-          token: session.token,
-          runId: String(body.run_id || ""),
-          challenge: String(body.challenge || ""),
-        });
-        if (!verified.ok) {
-          json(res, 403, { error: verified.error || "launch challenge rejected" });
-          return;
-        }
         const runId = String(body.run_id || "");
-        if (!runId) {
-          json(res, 400, { error: "run_id is required" });
-          return;
-        }
+        if (!runId) { json(res, 400, { error: "run_id is required" }); return; }
+        const launchSession = session;
+        try { assertConnectionScope(body.connection_scope, connectionScope(launchSession, apiOrigin)); }
+        catch (error) { json(res, 409, { error: error.message, code: error.code, field: error.field, recovery: error.recovery }); return; }
+        if (launchingRuns.has(runId)) { json(res, 409, { error: "This launch is still being checked. Refresh its status before retrying.", code: "launch_in_progress" }); return; }
+        launchingRuns.add(runId);
+        reservedLaunch = runId;
+        const verified = await authorizeLaunch({ apiOrigin, apiBaseUrl: launchSession.api_base_url,
+          token: launchSession.token, runId, challenge: String(body.challenge || ""),
+          fetchImpl: dependencies.fetch || globalThis.fetch });
+        if (session !== launchSession || !isSessionValid(session, Date.now(), apiOrigin)) {
+          json(res, 409, changedLaunchSession(launchSession, session, apiOrigin)); return;
+        }
+        if (!verified.ok) { json(res, verified.status, connectionDiagnostic(verified.code)); return; }
         if (registry.has(runId)) {
-          json(res, 409, { error: "agentic loop run already exists" });
-          return;
+          json(res, 409, { error: "agentic loop run already exists" }); return;
         }
         let executionTarget;
         try {
@@ -2047,6 +2094,10 @@ export async function startAgent({
           });
           return;
         }
+        if (session !== launchSession || !isSessionValid(session, Date.now(), apiOrigin)) {
+          await cleanupRunAttachments(stagedAttachments);
+          json(res, 409, changedLaunchSession(launchSession, session, apiOrigin)); return;
+        }
         const run = createRun({
           runId,
           request: {
@@ -2114,6 +2165,9 @@ export async function startAgent({
           throw error;
         }
         await authorizeDesktopWork(requestAccessScope);
+        if (session !== launchSession || !isSessionValid(session, Date.now(), apiOrigin)) {
+          json(res, 409, changedLaunchSession(launchSession, session, apiOrigin)); return;
+        }
         void startLocalCodingRun(run, dependencies.runOptions);
         json(res, 202, { ok: true, run_id: run.id });
         return;
@@ -2194,7 +2248,7 @@ export async function startAgent({
             json(res, 200, { recovery, run_id: run.id, resumed: false });
           }
         } catch (error) {
-          json(res, 409, { error: error instanceof Error ? error.message : "Recovery could not be verified.", code: error.code || "recovery_rejected" });
+          json(res, 409, { error: error instanceof Error ? error.message : "Recovery could not be verified.", code: error.code || "recovery_rejected", ...(error.field ? { field: error.field, recovery: error.recovery } : {}) });
         }
         return;
       }
@@ -2427,13 +2481,16 @@ export async function startAgent({
       }
       if (String(err?.code || "").startsWith("purpose_verification_")) { json(res, err.status || 409, { error: err.message, code: err.code }); return; }
       json(res, 500, { error: err instanceof Error ? err.message : "internal error" });
+    } finally {
+      // An aborted HTTP response must not leave a permanent launch reservation.
+      // Keep the reservation until all asynchronous preparation has settled.
+      if (reservedLaunch) launchingRuns.delete(reservedLaunch);
     }
   });
 
   await new Promise((resolve) => server.listen(requestedPort, "127.0.0.1", resolve));
   const address = server.address();
   port = typeof address === "object" && address ? address.port : requestedPort;
-  let connectionDiscovery = null;
   try {
     connectionDiscovery = await (
       dependencies.publishConnectionDiscovery || publishConnectionDiscovery
@@ -2463,6 +2520,7 @@ export async function startAgent({
       await restoreLocalCodingRuns();
       if (shuttingDown) return;
       await restoreRemoteRuns();
+      await recoverCompletedCodingRuns();
       startCodingRunMonitor();
     } catch (error) {
       reportStartupConnectionError(error, quiet);
@@ -2571,6 +2629,9 @@ export async function startAgent({
         activeJobId: sqmLocalReviewWorker?.snapshot?.().active_job_id ?? null,
         issue: sqmLocalReviewWorker?.snapshot?.().issue ?? null,
         providerPause: sqmLocalReviewWorker?.snapshot?.().provider_pause ?? null,
+        consecutiveFailures: sqmLocalReviewWorker?.snapshot?.().consecutive_failures ?? 0,
+        pausedUntilUpdate: sqmLocalReviewWorker?.snapshot?.().paused_until_update === true,
+        pausedAtVersion: sqmLocalReviewWorker?.snapshot?.().paused_at_version ?? null,
         providerReady: [codex, claude].some(provider => provider?.state === "ready") },
       ...projectSqmHistory(await historyForCurrentScope(), sqmLocalReviewWorker?.desktopTasks?.()),
       update: updateManager?.snapshot?.() ?? null,
@@ -3112,6 +3173,7 @@ function capabilitiesFromInspections(codex, claude) {
       workflow_terminal_contract: true,
       workflow_deliverable_upload: true,
       sqm_local_review: codex.compatible || claude.compatible,
+      sqm_failure_pause_until_update: true,
       codex_work_pattern_source: codex.compatible || claude.compatible,
     },
     session_ttl_hours: 48,
@@ -3265,26 +3327,6 @@ function backendPreflightSummary(backend, inspection) {
   return `${label} is not available. Install or update it: ${inspection.update_command}`;
 }
 
-async function verifyLaunchChallenge({ apiOrigin, apiBaseUrl, token, runId, challenge }) {
-  try {
-    const response = await fetch(
-      webApiUrl("challenges/verify", { webOrigin: apiOrigin, apiBaseUrl }),
-      {
-        method: "POST",
-        headers: webApiHeaders(
-          { token },
-          { "Content-Type": "application/json" },
-        ),
-        body: JSON.stringify({ run_id: runId, challenge }),
-      },
-    );
-    if (response.ok) return { ok: true };
-    const payload = await response.json().catch(() => null);
-    return { ok: false, error: webApiErrorMessage(payload, response.status) };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : "challenge check failed" };
-  }
-}
 
 function canonicalAgenticLoopPath(pathname) {
   return pathname.replace(/^\/v1\/coding-loop(?=\/|$)/, "/v1/agentic-loop");
@@ -3546,3 +3588,9 @@ function providerAuthenticationFailure(provider, status) {
     }),
   };
 }
+
+function changedLaunchSession(previous, current, origin) {
+  try { assertConnectionScope(connectionScope(previous, origin), connectionScope(current, origin)); }
+  catch (error) { return { error: error.message, code: error.code, field: error.field, recovery: error.recovery }; }
+  return connectionDiagnostic("connection_session_changed");
+}

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.6.10";
+export const CLI_VERSION = "0.6.12";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(