@botiverse/raft-daemon 0.58.2 → 0.59.0-play.20260613155737

package/dist/{chunk-XA4ZPIWE.js → chunk-ETNYFP47.js}

@@ -1471,11 +1471,17 @@ function runtimeConfigToLaunchFields(config) {
 }
 var PLAN_CONFIG = {
   free: {
-    displayName: "Hobby",
+    displayName: "Free",
     limits: { maxMachines: 2, maxAgents: 5, maxChannels: 5, messageHistoryDays: 30, includedAgents: 5 },
     comingSoon: false,
     price: 0,
-    extraAgentPrice: 0
+    extraAgentPrice: 0,
+    displayFeatures: [
+      "Unlimited human seats",
+      "Up to 5 agent seats",
+      "30 days of message history",
+      "100 MB file uploads/month"
+    ]
   },
   founder: {
     displayName: "Founder",
@@ -1488,23 +1494,40 @@ var PLAN_CONFIG = {
 var DISPLAY_PLAN_CONFIG = {
   free: PLAN_CONFIG.free,
   pro: {
-    displayName: "Team",
-    limits: { maxMachines: 8, maxAgents: 40, maxChannels: 20, messageHistoryDays: -1, includedAgents: 40 },
-    comingSoon: true,
+    displayName: "Pro",
+    limits: { maxMachines: -1, maxAgents: 10, maxChannels: -1, messageHistoryDays: -1, includedAgents: 10 },
+    comingSoon: false,
     price: 20,
-    extraAgentPrice: 0
+    priceCadence: "/ seat pack / month",
+    extraAgentPrice: 0,
+    displayFeatures: [
+      "1 human seat + 10 agent seats per Pro Seat Pack",
+      "Unlimited message history",
+      "Higher file upload limits",
+      "Joint Channels",
+      "More professional features coming soon"
+    ],
+    displayNote: "$17.60 / seat pack / month when billed yearly"
   },
-  max: {
-    displayName: "Business",
-    limits: { maxMachines: 40, maxAgents: 200, maxChannels: -1, messageHistoryDays: -1, includedAgents: 200 },
-    comingSoon: true,
-    price: 200,
-    extraAgentPrice: 0
+  enterprise: {
+    displayName: "Enterprise",
+    limits: { maxMachines: -1, maxAgents: -1, maxChannels: -1, messageHistoryDays: -1, includedAgents: -1 },
+    comingSoon: false,
+    price: 0,
+    priceLabel: "Coming soon",
+    priceCadence: null,
+    extraAgentPrice: 0,
+    displayFeatures: [
+      "Custom commercial terms",
+      "Security and compliance review",
+      "Dedicated support and onboarding",
+      "Custom deployment planning"
+    ]
   }
 };
 
 // src/agentProcessManager.ts
-import { mkdirSync as mkdirSync4, readdirSync as readdirSync2, statSync, writeFileSync as writeFileSync4 } from "fs";
+import { mkdirSync as mkdirSync4, readdirSync as readdirSync3, statSync, writeFileSync as writeFileSync4 } from "fs";
 import { mkdir, writeFile, access, readdir as readdir2, stat as stat2, readFile, rm as rm2 } from "fs/promises";
 import { createHash as createHash3 } from "crypto";
 import path12 from "path";
@@ -1514,7 +1537,7 @@ import os6 from "os";
 import { spawn } from "child_process";
 
 // src/drivers/cliTransport.ts
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { createRequire } from "module";
 import path2 from "path";
 
@@ -2096,6 +2119,19 @@ function listLegacySlockStatePaths(slockHome = resolveSlockHome(), homeDir = os.
   return candidates.filter((candidate) => existsSync(candidate.path));
 }
 
+// src/authEnv.ts
+var DAEMON_API_KEY_ENV = "SLOCK_MACHINE_API_KEY";
+var SLOCK_AGENT_TOKEN_ENV = "SLOCK_AGENT_TOKEN";
+function scrubDaemonAuthEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  return env;
+}
+function scrubDaemonChildEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  delete env[SLOCK_AGENT_TOKEN_ENV];
+  return env;
+}
+
 // src/agentCredentialProxy.ts
 import { randomBytes } from "crypto";
 import http from "http";
@@ -3583,8 +3619,36 @@ var LOOPBACK_NO_PROXY = "127.0.0.1,localhost";
 var CLI_TRANSPORT_TRACE_DIR_ENV = "SLOCK_CLI_TRANSPORT_TRACE_DIR";
 var safePathPart = (value) => value.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var RAW_CREDENTIAL_ENV_DENYLIST = [
-  "SLOCK_AGENT_CREDENTIAL_KEY"
+  "SLOCK_AGENT_TOKEN",
+  "SLOCK_AGENT_CREDENTIAL_KEY",
+  "SLOCK_AGENT_CREDENTIAL_KEY_FILE"
 ];
+function deriveCliFallbackCandidates(cliPath) {
+  if (!cliPath || cliPath === "__cli") return [];
+  const normalized = cliPath.split(path2.sep).join("/");
+  const marker = "/node_modules/";
+  const idx = normalized.indexOf(marker);
+  if (idx === -1) return [];
+  const globalRoot = cliPath.slice(0, idx + marker.length - 1);
+  const tail = path2.join("dist", "cli", "index.js");
+  return [
+    path2.join(globalRoot, "@botiverse", "raft-daemon", tail),
+    path2.join(globalRoot, "@slock-ai", "daemon", tail)
+  ].filter((candidate) => candidate !== cliPath);
+}
+function deriveOpencliFallbackCandidates(binPath) {
+  if (!binPath) return [];
+  const normalized = binPath.split(path2.sep).join("/");
+  const marker = "/node_modules/";
+  const first = normalized.indexOf(marker);
+  if (first === -1) return [];
+  const pkgMarker = "/node_modules/@jackwener/opencli/";
+  const last = normalized.lastIndexOf(pkgMarker);
+  if (last === -1) return [];
+  const suffix = normalized.slice(last + pkgMarker.length);
+  const candidate = path2.join(binPath.slice(0, first + marker.length - 1), "@jackwener", "opencli", ...suffix.split("/"));
+  return candidate === binPath ? [] : [candidate];
+}
 var cachedOpencliBinPath;
 function resolveOpencliBinPath() {
   if (cachedOpencliBinPath !== void 0) return cachedOpencliBinPath;
@@ -3619,6 +3683,64 @@ function resolveOpencliBinPath() {
     return null;
   }
 }
+function writeOpencliWrapper(slockDir, opencliBinPath, platform = process.platform) {
+  const fallbacks = deriveOpencliFallbackCandidates(opencliBinPath);
+  let binPath = opencliBinPath;
+  if (!existsSync2(binPath)) {
+    const fallback = fallbacks.find((candidate) => existsSync2(candidate));
+    if (fallback) binPath = fallback;
+  }
+  const posixFallbackBlock = fallbacks.length === 0 ? "" : `if [ ! -e "$OPENCLI_BIN" ]; then
+${fallbacks.map((candidate, i) => `  ${i === 0 ? "if" : "elif"} [ -e ${shellSingleQuote(candidate)} ]; then OPENCLI_BIN=${shellSingleQuote(candidate)};`).join("\n")}
+  fi
+fi
+`;
+  writeFileSync(
+    path2.join(slockDir, "opencli"),
+    `#!/usr/bin/env bash
+OPENCLI_BIN=${shellSingleQuote(binPath)}
+${posixFallbackBlock}exec ${shellSingleQuote(process.execPath)} "$OPENCLI_BIN" "$@"
+`,
+    { mode: 493 }
+  );
+  if (platform === "win32") {
+    const opencliCmdBody = [
+      "@echo off",
+      "set PYTHONIOENCODING=utf-8",
+      "set PYTHONUTF8=1",
+      "set LANG=C.UTF-8",
+      "set LC_ALL=C.UTF-8",
+      "chcp 65001 >NUL 2>NUL",
+      `set "OPENCLI_BIN=${binPath}"`,
+      ...fallbacks.map((candidate) => `if not exist "%OPENCLI_BIN%" set "OPENCLI_BIN=${candidate}"`),
+      `"${process.execPath}" "%OPENCLI_BIN%" %*`,
+      ""
+    ].join("\r\n") + "\r\n";
+    writeFileSync(path2.join(slockDir, "opencli.cmd"), opencliCmdBody);
+  }
+}
+function regenerateExistingOpencliWrappers(agentsRoot, platform = process.platform, opencliBinPath = resolveOpencliBinPath()) {
+  if (!opencliBinPath) return { scanned: 0, rewritten: 0 };
+  let entries;
+  try {
+    entries = readdirSync(agentsRoot);
+  } catch {
+    return { scanned: 0, rewritten: 0 };
+  }
+  let scanned = 0;
+  let rewritten = 0;
+  for (const entry of entries) {
+    const slockDir = path2.join(agentsRoot, entry, ".slock");
+    if (!existsSync2(path2.join(slockDir, "opencli"))) continue;
+    scanned++;
+    try {
+      writeOpencliWrapper(slockDir, opencliBinPath, platform);
+      rewritten++;
+    } catch {
+    }
+  }
+  return { scanned, rewritten };
+}
 function windowsUtf8Env() {
   return {
     PYTHONIOENCODING: "utf-8",
@@ -3676,6 +3798,21 @@ async function prepareCliTransport(ctx, extraEnv = {}, platform = process.platfo
   if (!ctx.slockCliPath) {
     throw new Error(`${ctx.config.runtime} driver: slockCliPath is required (daemon must inject it)`);
   }
+  let cliPath = ctx.slockCliPath;
+  const cliFallbackCandidates = deriveCliFallbackCandidates(cliPath);
+  if (cliPath !== "__cli" && !existsSync2(cliPath)) {
+    const fallback = cliFallbackCandidates.find((candidate) => existsSync2(candidate));
+    if (fallback) {
+      console.error(
+        `[cliTransport] bundled CLI missing at ${cliPath} (package tree mutated under a running daemon?); using ${fallback}. Restart the daemon from its current install to clear this.`
+      );
+      cliPath = fallback;
+    } else {
+      console.error(
+        `[cliTransport] bundled CLI missing at ${cliPath} and no global fallback found; wrappers will be broken until the daemon is restarted from a valid install.`
+      );
+    }
+  }
   const slockDir = path2.join(ctx.workingDirectory, ".slock");
   mkdirSync(slockDir, { recursive: true });
   const slockHome = resolveSlockHome();
@@ -3704,9 +3841,15 @@ async function prepareCliTransport(ctx, extraEnv = {}, platform = process.platfo
   const posixWrapper = path2.join(slockDir, "slock");
   const posixRaftWrapper = path2.join(slockDir, "raft");
   const posixCredentialPrefix = agentCredentialProxy ? `SLOCK_AGENT_PROXY_URL=${shellSingleQuote(agentCredentialProxy.proxyUrl)} SLOCK_AGENT_PROXY_TOKEN_FILE=${shellSingleQuote(agentCredentialProxyTokenFile)} SLOCK_AGENT_ACTIVE_CAPABILITIES=${shellSingleQuote(DEFAULT_ACTIVE_CAPABILITIES)} ` : "";
+  const posixCliFallbackBlock = cliPath === "__cli" || cliFallbackCandidates.length === 0 ? "" : `if [ ! -e "$SLOCK_CLI" ]; then
+${cliFallbackCandidates.map((candidate, i) => `  ${i === 0 ? "if" : "elif"} [ -e ${shellSingleQuote(candidate)} ]; then SLOCK_CLI=${shellSingleQuote(candidate)};`).join("\n")}
+  fi
+fi
+`;
   const posixBody = `#!/usr/bin/env bash
 ${posixLoopbackNoProxyPrelude()}
-${posixCredentialPrefix}exec ${shellSingleQuote(process.execPath)} ${shellSingleQuote(ctx.slockCliPath)} "$@"
+SLOCK_CLI=${shellSingleQuote(cliPath)}
+${posixCliFallbackBlock}${posixCredentialPrefix}exec ${shellSingleQuote(process.execPath)} "$SLOCK_CLI" "$@"
 `;
   writeFileSync(posixWrapper, posixBody, { mode: 493 });
   writeFileSync(posixRaftWrapper, posixBody, { mode: 493 });
@@ -3717,6 +3860,7 @@ ${posixCredentialPrefix}exec ${shellSingleQuote(process.execPath)} ${shellSingle
 set "SLOCK_AGENT_PROXY_TOKEN_FILE=${agentCredentialProxyTokenFile}"\r
 set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
 ` : "";
+    const cmdCliFallbackLines = cliPath === "__cli" ? [] : cliFallbackCandidates.map((candidate) => `if not exist "%SLOCK_CLI%" set "SLOCK_CLI=${candidate}"`);
     const cmdBody = [
       "@echo off",
       "set PYTHONIOENCODING=utf-8",
@@ -3726,7 +3870,9 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
       "chcp 65001 >NUL 2>NUL",
       ...cmdLoopbackNoProxyLines(),
       cmdCredentialLine.trimEnd(),
-      `"${process.execPath}" "${ctx.slockCliPath}" %*`,
+      `set "SLOCK_CLI=${cliPath}"`,
+      ...cmdCliFallbackLines,
+      `"${process.execPath}" "%SLOCK_CLI%" %*`,
       ""
     ].filter((line) => line.length > 0).join("\r\n") + "\r\n";
     writeFileSync(cmdWrapper, cmdBody);
@@ -3750,7 +3896,14 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
       ...powershellLoopbackNoProxyLines(),
       ...psCredentialLines,
       `$node = ${powershellSingleQuote(process.execPath)}`,
-      `$cli = ${powershellSingleQuote(ctx.slockCliPath)}`,
+      `$cli = ${powershellSingleQuote(cliPath)}`,
+      ...cliPath === "__cli" || cliFallbackCandidates.length === 0 ? [] : [
+        "if (-not (Test-Path $cli)) {",
+        `  foreach ($candidate in @(${cliFallbackCandidates.map(powershellSingleQuote).join(", ")})) {`,
+        "    if (Test-Path $candidate) { $cli = $candidate; break }",
+        "  }",
+        "}"
+      ],
       "if ($MyInvocation.ExpectingInput) {",
       "  $input | & $node $cli @args",
       "} else {",
@@ -3764,28 +3917,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
   }
   const opencliBinPath = resolveOpencliBinPath();
   if (opencliBinPath) {
-    const opencliPosixWrapper = path2.join(slockDir, "opencli");
-    writeFileSync(
-      opencliPosixWrapper,
-      `#!/usr/bin/env bash
-exec ${shellSingleQuote(process.execPath)} ${shellSingleQuote(opencliBinPath)} "$@"
-`,
-      { mode: 493 }
-    );
-    if (platform === "win32") {
-      const opencliCmdWrapper = path2.join(slockDir, "opencli.cmd");
-      const opencliCmdBody = [
-        "@echo off",
-        "set PYTHONIOENCODING=utf-8",
-        "set PYTHONUTF8=1",
-        "set LANG=C.UTF-8",
-        "set LC_ALL=C.UTF-8",
-        "chcp 65001 >NUL 2>NUL",
-        `"${process.execPath}" "${opencliBinPath}" %*`,
-        ""
-      ].join("\r\n") + "\r\n";
-      writeFileSync(opencliCmdWrapper, opencliCmdBody);
-    }
+    writeOpencliWrapper(slockDir, opencliBinPath, platform);
   }
   const wrapperPath = platform === "win32" ? path2.join(slockDir, "slock.cmd") : posixWrapper;
   const launchRuntimeFields = runtimeConfigToLaunchFields(ctx.config);
@@ -3804,7 +3936,7 @@ exec ${shellSingleQuote(process.execPath)} ${shellSingleQuote(opencliBinPath)} "
     ...agentCredentialProxy ? {} : { SLOCK_AGENT_TOKEN_FILE: tokenFile },
     PATH: `${slockDir}${path2.delimiter}${process.env.PATH ?? ""}`
   };
-  delete spawnEnv.SLOCK_AGENT_TOKEN;
+  scrubDaemonChildEnv(spawnEnv);
   for (const key of RAW_CREDENTIAL_ENV_DENYLIST) {
     delete spawnEnv[key];
   }
@@ -4079,7 +4211,7 @@ import path4 from "path";
 
 // src/drivers/probe.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
 function normalizeExecOutput(raw) {
   return Buffer.isBuffer(raw) ? raw.toString("utf8") : String(raw ?? "");
@@ -4231,11 +4363,17 @@ function resolveCommandOnWindows(command, env, execFileSyncFn, existsSyncFn) {
     return null;
   }
 }
+function requiresWindowsShell(command, platform = process.platform) {
+  if (platform !== "win32") return false;
+  if (!command) return false;
+  const lower = command.toLowerCase();
+  return lower.endsWith(".cmd") || lower.endsWith(".bat");
+}
 function resolveCommandOnPath(command, deps = {}) {
   const platform = deps.platform ?? process.platform;
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
-  const existsSyncFn = deps.existsSyncFn ?? existsSync2;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync3;
   if (platform === "win32") {
     return resolveCommandOnWindows(command, env, execFileSyncFn, existsSyncFn);
   }
@@ -4252,14 +4390,14 @@ function resolveCommandOnPath(command, deps = {}) {
   }
 }
 function firstExistingPath(candidates, deps = {}) {
-  const exists = deps.existsSyncFn ?? existsSync2;
+  const exists = deps.existsSyncFn ?? existsSync3;
   for (const candidate of candidates) {
     if (exists(candidate)) return candidate;
   }
   return null;
 }
 function readCommandVersion(command, args = [], deps = {}) {
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   try {
     const output = normalizeExecOutput(execFileSyncFn(command, [...args, "--version"], {
@@ -4354,7 +4492,7 @@ function buildClaudeSpawnSpec(claudeCommand, platform = process.platform) {
 }
 
 // src/drivers/claudeProviderIsolation.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, symlinkSync } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, symlinkSync } from "fs";
 import os2 from "os";
 import path5 from "path";
 function isClaudeCustomProviderConfig(config) {
@@ -4372,7 +4510,7 @@ function getClaudeProviderStatePaths(workingDirectory) {
 }
 function linkIfPresent(source, target) {
   try {
-    if (!existsSync3(source) || existsSync3(target)) return;
+    if (!existsSync4(source) || existsSync4(target)) return;
     mkdirSync2(path5.dirname(target), { recursive: true, mode: 448 });
     symlinkSync(source, target, "dir");
   } catch {
@@ -4493,7 +4631,7 @@ var ClaudeDriver = class {
 
 // src/drivers/codex.ts
 import { spawn as spawn2, execFileSync as execFileSync2, execSync } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync2 } from "fs";
 import os3 from "os";
 import path6 from "path";
 
@@ -4882,7 +5020,7 @@ var CodexEventNormalizer = class {
 
 // src/drivers/codex.ts
 function ensureGitRepoForCodex(workingDirectory, deps = {}) {
-  const existsSyncFn = deps.existsSyncFn ?? existsSync4;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync5;
   const execSyncFn = deps.execSyncFn ?? execSync;
   const gitDir = path6.join(workingDirectory, ".git");
   if (existsSyncFn(gitDir)) return;
@@ -4900,7 +5038,7 @@ function isWindowsSandboxRunner(commandPath) {
   return path6.basename(commandPath).toLowerCase().startsWith("codex-command-runner");
 }
 function resolveWindowsNpmCodexEntry(deps = {}) {
-  const existsSyncFn = deps.existsSyncFn ?? existsSync4;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync5;
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync2;
   const env = deps.env ?? process.env;
   const winPath = path6.win32;
@@ -4922,7 +5060,7 @@ function resolveWindowsNpmCodexEntry(deps = {}) {
   return null;
 }
 function resolveWindowsCodexDesktopEntry(deps = {}) {
-  const existsSyncFn = deps.existsSyncFn ?? existsSync4;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync5;
   const env = deps.env ?? process.env;
   const homeDir = deps.homeDir;
   const winPath = path6.win32;
@@ -5037,7 +5175,7 @@ var CodexDriver = class {
       threadParams.config = { model_reasoning_effort: launchRuntimeFields.reasoningEffort };
     }
     if (launchRuntimeFields.mode.kind === "fast") {
-      threadParams.serviceTier = "priority";
+      threadParams.serviceTier = "fast";
     }
     if (ctx.config.sessionId) {
       return {
@@ -5237,10 +5375,11 @@ var ANTIGRAVITY_ENV_OVERRIDES = {
   SSH_TTY: void 0
 };
 function resolveAntigravitySpawn(commandArgs, deps = {}) {
+  const command = resolveCommandOnPath("agy", deps) ?? "agy";
   return {
-    command: resolveCommandOnPath("agy", deps) ?? "agy",
+    command,
     args: commandArgs,
-    shell: false
+    shell: requiresWindowsShell(command, deps.platform)
   };
 }
 function buildAntigravityArgs(ctx) {
@@ -5648,11 +5787,11 @@ function detectCursorModels(runCommand = runCursorModelsCommand) {
   return parseCursorModelsOutput(String(result.stdout || ""));
 }
 function buildCursorModelProbeEnv(deps = {}) {
-  return withWindowsUserEnvironment({
+  return scrubDaemonChildEnv(withWindowsUserEnvironment({
     ...deps.env ?? process.env,
     FORCE_COLOR: "0",
     NO_COLOR: "1"
-  }, deps);
+  }, deps));
 }
 function runCursorModelsCommand() {
   return spawnSync("cursor-agent", ["models"], {
@@ -5664,7 +5803,7 @@ function runCursorModelsCommand() {
 
 // src/drivers/gemini.ts
 import { execFileSync as execFileSync3, spawn as spawn6 } from "child_process";
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import path7 from "path";
 async function buildGeminiSpawnEnv(ctx, platform = process.platform) {
   const { spawnEnv } = await prepareCliTransport(ctx, { NO_COLOR: "1" }, platform);
@@ -5707,8 +5846,8 @@ function resolveGeminiSpawn(commandArgs, deps = {}) {
     return { command: resolveCommandOnPath("gemini", deps) ?? "gemini", args: commandArgs };
   }
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync3;
-  const existsSyncFn = deps.existsSyncFn ?? existsSync5;
-  const env = deps.env ?? process.env;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync6;
+  const env = scrubDaemonChildEnv({ ...deps.env ?? process.env });
   const winPath = path7.win32;
   let geminiEntry = null;
   try {
@@ -5845,12 +5984,15 @@ var GeminiDriver = class {
 // src/drivers/kimi.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync7, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import os4 from "os";
 import path8 from "path";
 var KIMI_WIRE_PROTOCOL_VERSION = "1.3";
 var KIMI_SYSTEM_PROMPT_FILE = ".slock-kimi-system.md";
 var KIMI_AGENT_FILE = ".slock-kimi-agent.yaml";
+var KIMI_GENERATED_CONFIG_FILE = ".slock-kimi-config.toml";
+var SLOCK_KIMI_CONFIG_CONTENT_ENV = "SLOCK_KIMI_CONFIG_CONTENT";
+var SLOCK_KIMI_CONFIG_FILE_ENV = "SLOCK_KIMI_CONFIG_FILE";
 function parseToolArguments(raw) {
   if (typeof raw !== "string") return raw;
   try {
@@ -5859,6 +6001,73 @@ function parseToolArguments(raw) {
     return raw;
   }
 }
+function readKimiConfigSource(home = os4.homedir(), env = process.env) {
+  const inlineConfig = env[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  if (inlineConfig && inlineConfig.trim()) {
+    return {
+      raw: inlineConfig,
+      explicitPath: null,
+      sourcePath: SLOCK_KIMI_CONFIG_CONTENT_ENV
+    };
+  }
+  const explicitPath = env[SLOCK_KIMI_CONFIG_FILE_ENV];
+  const configPath = explicitPath && explicitPath.trim() ? explicitPath : path8.join(home, ".kimi", "config.toml");
+  try {
+    return {
+      raw: readFileSync3(configPath, "utf8"),
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  } catch {
+    return {
+      raw: null,
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  }
+}
+function buildKimiSpawnEnv(env = process.env) {
+  const spawnEnv = { ...env, FORCE_COLOR: "0", NO_COLOR: "1" };
+  delete spawnEnv[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  delete spawnEnv[SLOCK_KIMI_CONFIG_FILE_ENV];
+  return scrubDaemonChildEnv(spawnEnv);
+}
+function buildKimiEffectiveEnv(ctx, overrideEnv) {
+  return {
+    ...process.env,
+    ...ctx.config.envVars || {},
+    ...overrideEnv || {}
+  };
+}
+function buildKimiLaunchOptions(ctx, opts = {}) {
+  const env = buildKimiEffectiveEnv(ctx, opts.env);
+  const source = readKimiConfigSource(opts.home ?? os4.homedir(), env);
+  const args = [];
+  let configFilePath = null;
+  let configContent = null;
+  if (source.explicitPath) {
+    configFilePath = source.explicitPath;
+  } else if (source.raw !== null && source.sourcePath === SLOCK_KIMI_CONFIG_CONTENT_ENV) {
+    configFilePath = path8.join(ctx.workingDirectory, KIMI_GENERATED_CONFIG_FILE);
+    configContent = source.raw;
+    if (opts.writeGeneratedConfig !== false) {
+      writeFileSync3(configFilePath, source.raw, { encoding: "utf8", mode: 384 });
+      chmodSync(configFilePath, 384);
+    }
+  }
+  if (configFilePath) {
+    args.push("--config-file", configFilePath);
+  }
+  if (ctx.config.model && ctx.config.model !== "default") {
+    args.push("--model", ctx.config.model);
+  }
+  return {
+    args,
+    env: buildKimiSpawnEnv(env),
+    configFilePath,
+    configContent
+  };
+}
 function resolveKimiSpawn(commandArgs, deps = {}) {
   return {
     command: resolveCommandOnPath("kimi", deps) ?? "kimi",
@@ -5882,7 +6091,25 @@ var KimiDriver = class {
   };
   model = {
     detectedModelsVerifiedAs: "launchable",
-    toLaunchSpec: (modelId) => ({ args: ["--model", modelId] })
+    toLaunchSpec: (modelId, ctx, opts) => {
+      if (!ctx) return { args: ["--model", modelId] };
+      const launchCtx = {
+        ...ctx,
+        config: {
+          ...ctx.config,
+          model: modelId
+        }
+      };
+      const launch = buildKimiLaunchOptions(launchCtx, {
+        home: opts?.home,
+        writeGeneratedConfig: false
+      });
+      return {
+        args: launch.args,
+        env: launch.env,
+        configFiles: launch.configFilePath ? [launch.configFilePath] : void 0
+      };
+    }
   };
   supportsStdinNotification = true;
   busyDeliveryMode = "direct";
@@ -5896,7 +6123,7 @@ var KimiDriver = class {
     this.promptRequestId = randomUUID2();
     const systemPromptPath = path8.join(ctx.workingDirectory, KIMI_SYSTEM_PROMPT_FILE);
     const agentFilePath = path8.join(ctx.workingDirectory, KIMI_AGENT_FILE);
-    if (!isResume || !existsSync6(systemPromptPath)) {
+    if (!isResume || !existsSync7(systemPromptPath)) {
       writeFileSync3(systemPromptPath, ctx.prompt, "utf8");
     }
     writeFileSync3(agentFilePath, [
@@ -5906,21 +6133,23 @@ var KimiDriver = class {
       `  system_prompt_path: ./${KIMI_SYSTEM_PROMPT_FILE}`,
       ""
     ].join("\n"), "utf8");
+    const launch = buildKimiLaunchOptions(ctx);
     const args = [
       "--wire",
       "--yolo",
       "--agent-file",
       agentFilePath,
       "--session",
-      this.sessionId
+      this.sessionId,
+      ...launch.args
     ];
     const launchRuntimeFields = runtimeConfigToLaunchFields(ctx.config);
     if (launchRuntimeFields.model && launchRuntimeFields.model !== "default") {
       args.push("--model", launchRuntimeFields.model);
     }
     const spawnEnv = (await prepareCliTransport(ctx, { NO_COLOR: "1" })).spawnEnv;
-    const launch = resolveKimiSpawn(args);
-    const proc = spawn7(launch.command, launch.args, {
+    const spawnTarget = resolveKimiSpawn(args);
+    const proc = spawn7(spawnTarget.command, spawnTarget.args, {
       cwd: ctx.workingDirectory,
       stdio: ["pipe", "pipe", "pipe"],
       env: spawnEnv,
@@ -5928,7 +6157,7 @@ var KimiDriver = class {
       // and has an 8191-character command-line limit. Kimi's official
       // installer/uv entrypoint is an executable, so launch it directly and
       // keep prompts on stdin / files instead of routing through cmd.exe.
-      shell: launch.shell
+      shell: spawnTarget.shell
     });
     proc.stdin?.write(JSON.stringify({
       jsonrpc: "2.0",
@@ -6041,14 +6270,9 @@ var KimiDriver = class {
     return detectKimiModels();
   }
 };
-function detectKimiModels(home = os4.homedir()) {
-  const configPath = path8.join(home, ".kimi", "config.toml");
-  let raw;
-  try {
-    raw = readFileSync3(configPath, "utf8");
-  } catch {
-    return null;
-  }
+function detectKimiModels(home = os4.homedir(), opts = {}) {
+  const raw = readKimiConfigSource(home, opts.env).raw;
+  if (raw === null) return null;
   const models = [];
   const sectionRe = /^\s*\[models(?:\.([^\]]+)|"\.[^"]+"|\."[^"]+")\s*\]\s*$/gm;
   const lineRe = /^\s*\[models\.(.+?)\s*\]\s*$/gm;
@@ -6069,7 +6293,7 @@ function detectKimiModels(home = os4.homedir()) {
 
 // src/drivers/opencode.ts
 import { spawn as spawn8, spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync7, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync4 } from "fs";
 import os5 from "os";
 import path9 from "path";
 var SLOCK_AGENT_NAME = "slock";
@@ -6286,7 +6510,7 @@ function runOpenCodeModelsCommand(home, deps = {}) {
   const platform = deps.platform ?? process.platform;
   const spawnSyncFn = deps.spawnSyncFn ?? spawnSync2;
   const result = spawnSyncFn("opencode", ["models"], {
-    env: { ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" },
+    env: scrubDaemonChildEnv({ ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" }),
     encoding: "utf8",
     timeout: 5e3,
     shell: platform === "win32"
@@ -6317,7 +6541,7 @@ function openCodeSpecForEntry(entry, commandArgs) {
   return { command: process.execPath, args: [entry, ...commandArgs], shell: false };
 }
 function resolveWindowsOpenCodePackageEntry(commandPath, deps = {}) {
-  const existsSyncFn = deps.existsSyncFn ?? existsSync7;
+  const existsSyncFn = deps.existsSyncFn ?? existsSync8;
   const execFileSyncFn = deps.execFileSyncFn;
   const env = deps.env ?? process.env;
   const winPath = path9.win32;
@@ -6545,7 +6769,7 @@ var OpenCodeDriver = class {
 // src/drivers/pi.ts
 import { randomUUID as randomUUID3 } from "crypto";
 import { EventEmitter } from "events";
-import { mkdirSync as mkdirSync3, readdirSync } from "fs";
+import { mkdirSync as mkdirSync3, readdirSync as readdirSync2 } from "fs";
 import path10 from "path";
 import {
   AuthStorage,
@@ -6589,7 +6813,7 @@ function resolvePiModelFromRegistry(modelId, modelRegistry) {
 function findPiSessionFile(sessionDir, sessionId) {
   let entries;
   try {
-    entries = readdirSync(sessionDir);
+    entries = readdirSync2(sessionDir);
   } catch {
     return null;
   }
@@ -7819,7 +8043,7 @@ function findSessionJsonl(root, predicate) {
     if (depth < 0 || visited >= maxEntries) return null;
     let entries;
     try {
-      entries = readdirSync2(dir, { withFileTypes: true }).sort((a, b) => b.name.localeCompare(a.name));
+      entries = readdirSync3(dir, { withFileTypes: true }).sort((a, b) => b.name.localeCompare(a.name));
     } catch {
       return null;
     }
@@ -13428,7 +13652,7 @@ function acquireDaemonMachineLock(options) {
 }
 
 // src/localTraceSink.ts
-import { appendFileSync, mkdirSync as mkdirSync6, readdirSync as readdirSync3, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync6 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync6, readdirSync as readdirSync4, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync6 } from "fs";
 import path14 from "path";
 var DEFAULT_MAX_FILE_BYTES = 5 * 1024 * 1024;
 var DEFAULT_MAX_FILE_AGE_MS = 5 * 60 * 1e3;
@@ -13507,7 +13731,7 @@ var LocalRotatingTraceSink = class {
     }
   }
   pruneOldFiles() {
-    const files = readdirSync3(this.traceDir).filter((name) => name.startsWith("daemon-trace-") && name.endsWith(".jsonl")).sort();
+    const files = readdirSync4(this.traceDir).filter((name) => name.startsWith("daemon-trace-") && name.endsWith(".jsonl")).sort();
     const excess = files.length - this.maxFiles;
     if (excess <= 0) return;
     for (const file of files.slice(0, excess)) {
@@ -14091,7 +14315,7 @@ var DAEMON_CORE_TRACE_ATTR_CONTRACTS = {
     spanAttrs: ["running_agents_count", "idle_agents_count"]
   }
 };
-var DAEMON_CLI_USAGE = "Usage: slock-daemon --server-url <url> --api-key <key>";
+var DAEMON_CLI_USAGE = `Usage: slock-daemon --server-url <url> (--api-key <key> or ${DAEMON_API_KEY_ENV}=<key>)`;
 var RunnerCredentialMintError2 = class extends Error {
   code;
   retryable;
@@ -14127,9 +14351,9 @@ function runnerCredentialErrorDetail2(error) {
 async function waitForRunnerCredentialRetry2() {
   await new Promise((resolve) => setTimeout(resolve, RUNNER_CREDENTIAL_MINT_RETRY_DELAY_MS2));
 }
-function parseDaemonCliArgs(args) {
+function parseDaemonCliArgs(args, env = {}) {
   let serverUrl = "";
-  let apiKey = "";
+  let apiKey = env[DAEMON_API_KEY_ENV] ?? "";
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--server-url" && args[i + 1]) serverUrl = args[++i];
     if (args[i] === "--api-key" && args[i + 1]) apiKey = args[++i];
@@ -14166,7 +14390,7 @@ function resolveSlockCliPathOrEmpty(moduleUrl = import.meta.url) {
 }
 async function runBundledSlockCli(argv) {
   process.argv = [process.execPath, "slock", ...argv];
-  await import("./dist-ADWW7UHH.js");
+  await import("./dist-QQ3DYJPK.js");
 }
 function detectRuntimes(tracer = noopTracer) {
   const ids = [];
@@ -14302,6 +14526,11 @@ var DaemonCore = class {
   computerVersion;
   slockCliPath;
   slockHome;
+  agentsDataDir;
+  // One-shot guard: rewrite stale per-agent opencli wrappers to the current
+  // self-healing form on the first connect of this daemon process (a SEA
+  // computer switch / daemon upgrade restarts the daemon → triggers this).
+  opencliWrappersRegenerated = false;
   runtimeDetector;
   agentManager;
   connection;
@@ -14328,8 +14557,9 @@ var DaemonCore = class {
       onFire: (job) => this.onReminderFire(job)
     });
     let connection;
+    this.agentsDataDir = options.dataDir ?? resolveSlockHomePath("agents", this.slockHome);
     const agentManagerOptions = {
-      dataDir: options.dataDir ?? resolveSlockHomePath("agents", this.slockHome),
+      dataDir: this.agentsDataDir,
       serverUrl: options.serverUrl,
       defaultAgentEnvVarsProvider: options.defaultAgentEnvVarsProvider,
       slockCliPath: this.slockCliPath,
@@ -14859,6 +15089,17 @@ var DaemonCore = class {
     const { ids: runtimes, versions: runtimeVersions } = this.runtimeDetector();
     const runtimeInfo = runtimes.map((id) => runtimeVersions[id] ? `${id} (${runtimeVersions[id]})` : id);
     logger.info(`[Daemon] Detected runtimes: ${runtimeInfo.join(", ") || "none"}`);
+    if (!this.opencliWrappersRegenerated) {
+      this.opencliWrappersRegenerated = true;
+      try {
+        const { scanned, rewritten } = regenerateExistingOpencliWrappers(this.agentsDataDir);
+        if (scanned > 0) {
+          logger.info(`[Daemon] Refreshed ${rewritten}/${scanned} opencli wrapper(s) to current self-healing form`);
+        }
+      } catch (err) {
+        logger.warn(`[Daemon] opencli wrapper refresh skipped: ${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
     const runningAgentIds = this.agentManager.getRunningAgentIds();
     const idleAgentSessions = this.agentManager.getIdleAgentSessionIds();
     const runtimeProfileReports = this.agentManager.getAgentRuntimeProfileReports();
@@ -14948,6 +15189,8 @@ var DaemonCore = class {
 };
 
 export {
+  DAEMON_API_KEY_ENV,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs,
   resolveWorkspaceDirectoryPath,
   scanWorkspaceDirectories,