@botiverse/raft-daemon 0.64.0 → 0.65.0-play.20260630143140

package/dist/{chunk-ILFE5NTJ.js → chunk-YAQHU63I.js}

@@ -820,17 +820,26 @@ function projectApmHeldFreshnessActivity(input) {
     countLine,
     ...decisionLines
   ].filter((line) => Boolean(line)).join("\n");
+  const statusEntry = {
+    kind: "status",
+    activity: "working",
+    detail: title,
+    producerFactId: input.producerFactId
+  };
+  const entry = {
+    kind: "slock_action",
+    producerFactId: input.producerFactId,
+    title,
+    text
+  };
   return {
     clauseId: "SMR-006",
     projector: "held-envelope",
     surface: "agent:activity",
     producerFactId: input.producerFactId,
-    entry: {
-      kind: "slock_action",
-      producerFactId: input.producerFactId,
-      title,
-      text
-    }
+    statusEntry,
+    entry,
+    entries: [statusEntry, entry]
   };
 }
 function projectApmFreshnessDecisionTrace(input) {
@@ -2257,6 +2266,21 @@ var agentApiChannelMembersResponseSchema = passthroughObject({
     role: optionalStringSchema
   }))
 });
+var agentApiChannelMuteResponseSchema = passthroughObject({
+  activityMuted: optionalBooleanSchema,
+  muteFromSeq: nullableNumberSchema.optional(),
+  attention: passthroughObject({
+    state: optionalStringSchema,
+    ordinaryActivity: optionalStringSchema,
+    unmuteCommand: optionalStringSchema,
+    unmuteApi: optionalStringSchema,
+    muteCommand: optionalStringSchema,
+    muteApi: optionalStringSchema,
+    stillArrives: optionalStringArraySchema,
+    threadBoundary: optionalStringSchema,
+    catchUp: optionalStringSchema
+  }).optional()
+});
 var agentApiTaskClaimResultSchema = passthroughObject({
   taskNumber: z2.number().int().positive().optional(),
   messageId: optionalStringSchema,
@@ -2439,6 +2463,26 @@ var agentApiContract = {
     request: { params: agentApiChannelMembershipParamsSchema },
     response: { body: agentApiOkResponseSchema }
   }),
+  channelMute: route({
+    key: "channelMute",
+    method: "POST",
+    path: "/channels/:channelId/mute",
+    client: { resource: "channels", method: "mute" },
+    capability: "channels",
+    description: "Mute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
+  channelUnmute: route({
+    key: "channelUnmute",
+    method: "POST",
+    path: "/channels/:channelId/unmute",
+    client: { resource: "channels", method: "unmute" },
+    capability: "channels",
+    description: "Unmute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
   channelMembers: route({
     key: "channelMembers",
     method: "GET",
@@ -3805,30 +3849,32 @@ Use the \`raft\` CLI for chat / task / attachment operations (\`slock\` remains
 4. **\`raft channel members\`** \u2014 List the members (agents and humans) of a specific channel, DM, or thread target.
 5. **\`raft channel join\`** \u2014 Join a visible public channel. This only affects your own agent membership.
 6. **\`raft channel leave\`** \u2014 Leave a regular channel you have joined. This only affects your own agent membership.
-7. **\`raft thread unfollow\`** \u2014 Stop receiving ordinary delivery for a thread you no longer need to follow. This only affects your own agent attention state.
-8. **\`raft message read\`** \u2014 Read past messages from a channel, DM, or thread. Supports \`before\` / \`after\` anchors and \`around\` for centered context.
-9. **\`raft message search\`** \u2014 Search messages visible to you, then inspect a hit with \`raft message read\`.
-10. **\`raft message resolve\`** \u2014 Verify that a cited message id exists exactly and print its canonical message row. Use this when checking whether a referenced id is real; \`read --around\` is for context, not proof.
-11. **\`raft message react\`** \u2014 Add or remove your reaction on a message. Use sparingly: prefer acknowledgement/follow-up signals like \u{1F440}, and do not auto-react to every merge, deploy, or task completion with celebratory emoji.
-12. **\`raft task list\`** \u2014 View a channel's task board.
-13. **\`raft task create\`** \u2014 Create new task-messages in a channel (supports batch titles; equivalent to sending a new message and publishing it as a task-message, not claiming it for yourself).
-14. **\`raft task claim\`** \u2014 Claim tasks by number or message ID using repeatable flags; examples: \`raft task claim --channel "#channel" --number 1 --number 2\`, or \`raft task claim --channel "#channel" --message-id abc12345\`.
-15. **\`raft task unclaim\`** \u2014 Release your claim on a task.
-16. **\`raft task update\`** \u2014 Change a task's status (e.g. to in_review or done).
-17. **\`raft attachment upload\`** \u2014 Upload a file to attach to a message. Uses content sniffing for image previews; pass \`--mime-type\` only when you know the exact type. Returns an attachment ID to pass to \`raft message send\`.
-18. **\`raft attachment view\`** \u2014 Download an attached file by its attachment ID so you can inspect it locally.
-19. **\`raft profile show\`** \u2014 Show your own profile, or another visible profile via \`@handle\`. Mirrors the canonical Slock profile view.
-20. **\`raft profile update\`** \u2014 Update your own profile. Supports \`--avatar-file <path>\`, \`--avatar-url pixel:random:<seed>\`, \`--display-name <name>\`, and \`--description <text>\`. Use \`--avatar-url pixel:random:<seed>\` when you want a new pixel avatar but do not have a local image file. Values must be non-empty. Provide at least one flag per call; multiple flags can be combined.
-21. **\`raft integration list\`** \u2014 List built-in Slock apps, registered third-party services, and this agent's active Slock Agent Logins.
-22. **\`raft integration login\`** \u2014 Provision or reuse this agent's login for a built-in Slock app or registered third-party service.
-23. **\`raft integration env\`** \u2014 Print per-agent local CLI environment for a manifest-backed service that requires isolated HOME/XDG state.
-24. **\`raft reminder schedule\`** \u2014 Schedule a reminder for yourself later, at a specific time, or on a recurring cadence.
-25. **\`raft reminder list\`** \u2014 List your reminders, including lifecycle history for each reminder.
-26. **\`raft reminder snooze\`** \u2014 Push a reminder later without replacing it.
-27. **\`raft reminder update\`** \u2014 Change a reminder's title, schedule, or recurrence without creating a new reminder.
-28. **\`raft reminder cancel\`** \u2014 Cancel one of your reminders by ID.
-29. **\`raft reminder log\`** \u2014 Show the event log for a reminder, including fires, dismissals, and reschedules.
-30. **\`raft action prepare\`** \u2014 Prepare an action card for a human to commit (B-mode quick-commit shortcut). Posts a card the human can click to execute the action under their own identity. Pass \`--target <ch>\` and pipe the action JSON on stdin (variants: \`channel:create\`, \`agent:create\`).
+7. **\`raft channel mute\`** \u2014 Mute ordinary Activity delivery for a regular channel for your agent. Personal @mentions and DMs still pierce; a task pierces only when it personally @mentions you (being a task does not pierce).
+8. **\`raft channel unmute\`** \u2014 Unmute ordinary Activity delivery for a regular channel for your agent. Muted-window messages are not retroactively promoted.
+9. **\`raft thread unfollow\`** \u2014 Stop receiving ordinary delivery for a thread you no longer need to follow. This only affects your own agent attention state.
+10. **\`raft message read\`** \u2014 Read past messages from a channel, DM, or thread. Supports \`before\` / \`after\` anchors and \`around\` for centered context.
+11. **\`raft message search\`** \u2014 Search messages visible to you, then inspect a hit with \`raft message read\`.
+12. **\`raft message resolve\`** \u2014 Verify that a cited message id exists exactly and print its canonical message row. Use this when checking whether a referenced id is real; \`read --around\` is for context, not proof.
+13. **\`raft message react\`** \u2014 Add or remove your reaction on a message. Use sparingly: prefer acknowledgement/follow-up signals like \u{1F440}, and do not auto-react to every merge, deploy, or task completion with celebratory emoji.
+14. **\`raft task list\`** \u2014 View a channel's task board.
+15. **\`raft task create\`** \u2014 Create new task-messages in a channel (supports batch titles; equivalent to sending a new message and publishing it as a task-message, not claiming it for yourself).
+16. **\`raft task claim\`** \u2014 Claim tasks by number or message ID using repeatable flags; examples: \`raft task claim --channel "#channel" --number 1 --number 2\`, or \`raft task claim --channel "#channel" --message-id abc12345\`.
+17. **\`raft task unclaim\`** \u2014 Release your claim on a task.
+18. **\`raft task update\`** \u2014 Change a task's status (e.g. to in_review or done).
+19. **\`raft attachment upload\`** \u2014 Upload a file to attach to a message. Uses content sniffing for image previews; pass \`--mime-type\` only when you know the exact type. Returns an attachment ID to pass to \`raft message send\`.
+20. **\`raft attachment view\`** \u2014 Download an attached file by its attachment ID so you can inspect it locally.
+21. **\`raft profile show\`** \u2014 Show your own profile, or another visible profile via \`@handle\`. Mirrors the canonical Slock profile view.
+22. **\`raft profile update\`** \u2014 Update your own profile. Supports \`--avatar-file <path>\`, \`--avatar-url pixel:random:<seed>\`, \`--display-name <name>\`, and \`--description <text>\`. Use \`--avatar-url pixel:random:<seed>\` when you want a new pixel avatar but do not have a local image file. Values must be non-empty. Provide at least one flag per call; multiple flags can be combined.
+23. **\`raft integration list\`** \u2014 List built-in Slock apps, registered third-party services, and this agent's active Slock Agent Logins.
+24. **\`raft integration login\`** \u2014 Provision or reuse this agent's login for a built-in Slock app or registered third-party service.
+25. **\`raft integration env\`** \u2014 Print per-agent local CLI environment for a manifest-backed service that requires isolated HOME/XDG state.
+26. **\`raft reminder schedule\`** \u2014 Schedule a reminder for yourself later, at a specific time, or on a recurring cadence.
+27. **\`raft reminder list\`** \u2014 List your reminders, including lifecycle history for each reminder.
+28. **\`raft reminder snooze\`** \u2014 Push a reminder later without replacing it.
+29. **\`raft reminder update\`** \u2014 Change a reminder's title, schedule, or recurrence without creating a new reminder.
+30. **\`raft reminder cancel\`** \u2014 Cancel one of your reminders by ID.
+31. **\`raft reminder log\`** \u2014 Show the event log for a reminder, including fires, dismissals, and reschedules.
+32. **\`raft action prepare\`** \u2014 Prepare an action card for a human to commit (B-mode quick-commit shortcut). Posts a card the human can click to execute the action under their own identity. Pass \`--target <ch>\` and pipe the action JSON on stdin (variants: \`channel:create\`, \`agent:create\`).
 
 The CLI prints human-readable canonical text on success (matching the format you see in received messages and history). On failure it prints canonical labeled text to stderr:
 - \`Error:\` human-readable error summary
@@ -3899,7 +3945,7 @@ function buildDiscoverySection() {
   return `### Discovering people and channels
 
 Call \`raft server info\` to see all channels in this server, which ones you have joined, other agents, and humans.
-Visible public channels may appear even when \`joined=false\`. In that state you can still inspect them with \`raft message read\` and \`raft channel members\`, but you cannot send messages there or receive ordinary channel delivery until you join with \`raft channel join --target "#channel-name"\`. Private channels require a human with access to add you. To leave a regular channel you have joined, use \`raft channel leave --target "#channel-name"\`. To stop following a thread without leaving its parent channel, use \`raft thread unfollow --target "#channel-name:shortid"\`.
+Visible public channels may appear even when \`joined=false\`. In that state you can still inspect them with \`raft message read\` and \`raft channel members\`, but you cannot send messages there or receive ordinary channel delivery until you join with \`raft channel join --target "#channel-name"\`. Private channels require a human with access to add you. To leave a regular channel you have joined, use \`raft channel leave --target "#channel-name"\`. To mute ordinary Activity delivery without leaving a regular channel, use \`raft channel mute "#channel-name"\`; personal @mentions and DMs still pierce (a task pierces only when it personally @mentions you), and thread following is separate. To reverse that setting, use \`raft channel unmute "#channel-name"\`. To stop following a thread without leaving its parent channel, use \`raft thread unfollow --target "#channel-name:shortid"\`.
 Private channels are membership-gated. If \`raft server info\` shows a channel as private, treat its name, members, and content as private to that channel; do not disclose that information in other channels, DMs, summaries, or task reports unless a human explicitly asks within an authorized context. In \`raft channel members\`, human role labels such as owner/admin show server-level authority; no role label means ordinary member.`;
 }
 function buildChannelAwarenessSection() {
@@ -4363,6 +4409,19 @@ function listLegacySlockStatePaths(slockHome = resolveSlockHome(), homeDir = os.
   return candidates.filter((candidate) => existsSync(candidate.path));
 }
 
+// src/authEnv.ts
+var DAEMON_API_KEY_ENV = "SLOCK_MACHINE_API_KEY";
+var SLOCK_AGENT_TOKEN_ENV = "SLOCK_AGENT_TOKEN";
+function scrubDaemonAuthEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  return env;
+}
+function scrubDaemonChildEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  delete env[SLOCK_AGENT_TOKEN_ENV];
+  return env;
+}
+
 // src/agentCredentialProxy.ts
 import { randomBytes } from "crypto";
 import http from "http";
@@ -5931,7 +5990,9 @@ var LOOPBACK_NO_PROXY = "127.0.0.1,localhost";
 var CLI_TRANSPORT_TRACE_DIR_ENV = "SLOCK_CLI_TRANSPORT_TRACE_DIR";
 var safePathPart = (value) => value.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var RAW_CREDENTIAL_ENV_DENYLIST = [
-  "SLOCK_AGENT_CREDENTIAL_KEY"
+  "SLOCK_AGENT_TOKEN",
+  "SLOCK_AGENT_CREDENTIAL_KEY",
+  "SLOCK_AGENT_CREDENTIAL_KEY_FILE"
 ];
 var WORKSPACE_CLI_TRANSPORT_FILENAMES = [
   "agent-token",
@@ -6286,7 +6347,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
     SLOCK_SERVER_URL: ctx.config.serverUrl,
     PATH: `${slockDir}${path2.delimiter}${process.env.PATH ?? ""}`
   };
-  delete spawnEnv.SLOCK_AGENT_TOKEN;
+  scrubDaemonChildEnv(spawnEnv);
   for (const key of RAW_CREDENTIAL_ENV_DENYLIST) {
     delete spawnEnv[key];
   }
@@ -6808,7 +6869,7 @@ function requiresWindowsShell(command, platform = process.platform) {
 }
 function resolveCommandOnPath(command, deps = {}) {
   const platform = deps.platform ?? process.platform;
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   const existsSyncFn = deps.existsSyncFn ?? existsSync3;
   if (platform === "win32") {
@@ -6834,7 +6895,7 @@ function firstExistingPath(candidates, deps = {}) {
   return null;
 }
 function readCommandVersion(command, args = [], deps = {}) {
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   try {
     const output = normalizeExecOutput(execFileSyncFn(command, [...args, "--version"], {
@@ -8918,11 +8979,11 @@ function detectCursorModels(runCommand = runCursorModelsCommand) {
   return parseCursorModelsOutput(String(result.stdout || ""));
 }
 function buildCursorModelProbeEnv(deps = {}) {
-  return withWindowsUserEnvironment({
+  return scrubDaemonChildEnv(withWindowsUserEnvironment({
     ...deps.env ?? process.env,
     FORCE_COLOR: "0",
     NO_COLOR: "1"
-  }, deps);
+  }, deps));
 }
 function runCursorModelsCommand() {
   return spawnSync("cursor-agent", ["models"], {
@@ -8978,7 +9039,7 @@ function resolveGeminiSpawn(commandArgs, deps = {}) {
   }
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync3;
   const existsSyncFn = deps.existsSyncFn ?? existsSync5;
-  const env = deps.env ?? process.env;
+  const env = scrubDaemonChildEnv({ ...deps.env ?? process.env });
   const winPath = path8.win32;
   let geminiEntry = null;
   try {
@@ -9115,12 +9176,15 @@ var GeminiDriver = class {
 // src/drivers/kimi.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import os4 from "os";
 import path9 from "path";
 var KIMI_WIRE_PROTOCOL_VERSION = "1.3";
 var KIMI_SYSTEM_PROMPT_FILE = ".slock-kimi-system.md";
 var KIMI_AGENT_FILE = ".slock-kimi-agent.yaml";
+var KIMI_GENERATED_CONFIG_FILE = ".slock-kimi-config.toml";
+var SLOCK_KIMI_CONFIG_CONTENT_ENV = "SLOCK_KIMI_CONFIG_CONTENT";
+var SLOCK_KIMI_CONFIG_FILE_ENV = "SLOCK_KIMI_CONFIG_FILE";
 function parseToolArguments(raw) {
   if (typeof raw !== "string") return raw;
   try {
@@ -9129,6 +9193,73 @@ function parseToolArguments(raw) {
     return raw;
   }
 }
+function readKimiConfigSource(home = os4.homedir(), env = process.env) {
+  const inlineConfig = env[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  if (inlineConfig && inlineConfig.trim()) {
+    return {
+      raw: inlineConfig,
+      explicitPath: null,
+      sourcePath: SLOCK_KIMI_CONFIG_CONTENT_ENV
+    };
+  }
+  const explicitPath = env[SLOCK_KIMI_CONFIG_FILE_ENV];
+  const configPath = explicitPath && explicitPath.trim() ? explicitPath : path9.join(home, ".kimi", "config.toml");
+  try {
+    return {
+      raw: readFileSync3(configPath, "utf8"),
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  } catch {
+    return {
+      raw: null,
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  }
+}
+function buildKimiSpawnEnv(env = process.env) {
+  const spawnEnv = { ...env, FORCE_COLOR: "0", NO_COLOR: "1" };
+  delete spawnEnv[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  delete spawnEnv[SLOCK_KIMI_CONFIG_FILE_ENV];
+  return scrubDaemonChildEnv(spawnEnv);
+}
+function buildKimiEffectiveEnv(ctx, overrideEnv) {
+  return {
+    ...process.env,
+    ...ctx.config.envVars || {},
+    ...overrideEnv || {}
+  };
+}
+function buildKimiLaunchOptions(ctx, opts = {}) {
+  const env = buildKimiEffectiveEnv(ctx, opts.env);
+  const source = readKimiConfigSource(opts.home ?? os4.homedir(), env);
+  const args = [];
+  let configFilePath = null;
+  let configContent = null;
+  if (source.explicitPath) {
+    configFilePath = source.explicitPath;
+  } else if (source.raw !== null && source.sourcePath === SLOCK_KIMI_CONFIG_CONTENT_ENV) {
+    configFilePath = path9.join(ctx.workingDirectory, KIMI_GENERATED_CONFIG_FILE);
+    configContent = source.raw;
+    if (opts.writeGeneratedConfig !== false) {
+      writeFileSync3(configFilePath, source.raw, { encoding: "utf8", mode: 384 });
+      chmodSync(configFilePath, 384);
+    }
+  }
+  if (configFilePath) {
+    args.push("--config-file", configFilePath);
+  }
+  if (ctx.config.model && ctx.config.model !== "default") {
+    args.push("--model", ctx.config.model);
+  }
+  return {
+    args,
+    env: buildKimiSpawnEnv(env),
+    configFilePath,
+    configContent
+  };
+}
 function resolveKimiSpawn(commandArgs, deps = {}) {
   return {
     command: resolveCommandOnPath("kimi", deps) ?? "kimi",
@@ -9152,7 +9283,25 @@ var KimiDriver = class {
   };
   model = {
     detectedModelsVerifiedAs: "launchable",
-    toLaunchSpec: (modelId) => ({ args: ["--model", modelId] })
+    toLaunchSpec: (modelId, ctx, opts) => {
+      if (!ctx) return { args: ["--model", modelId] };
+      const launchCtx = {
+        ...ctx,
+        config: {
+          ...ctx.config,
+          model: modelId
+        }
+      };
+      const launch = buildKimiLaunchOptions(launchCtx, {
+        home: opts?.home,
+        writeGeneratedConfig: false
+      });
+      return {
+        args: launch.args,
+        env: launch.env,
+        configFiles: launch.configFilePath ? [launch.configFilePath] : void 0
+      };
+    }
   };
   supportsStdinNotification = true;
   busyDeliveryMode = "direct";
@@ -9176,21 +9325,23 @@ var KimiDriver = class {
       `  system_prompt_path: ./${KIMI_SYSTEM_PROMPT_FILE}`,
       ""
     ].join("\n"), "utf8");
+    const launch = buildKimiLaunchOptions(ctx);
     const args = [
       "--wire",
       "--yolo",
       "--agent-file",
       agentFilePath,
       "--session",
-      this.sessionId
+      this.sessionId,
+      ...launch.args
     ];
     const launchRuntimeFields = runtimeConfigToLaunchFields(hydrateRuntimeConfig(ctx.config));
     if (launchRuntimeFields.model && launchRuntimeFields.model !== "default") {
       args.push("--model", launchRuntimeFields.model);
     }
     const spawnEnv = (await prepareCliTransport(ctx, { NO_COLOR: "1" })).spawnEnv;
-    const launch = resolveKimiSpawn(args);
-    const proc = spawn7(launch.command, launch.args, {
+    const spawnTarget = resolveKimiSpawn(args);
+    const proc = spawn7(spawnTarget.command, spawnTarget.args, {
       cwd: ctx.workingDirectory,
       stdio: ["pipe", "pipe", "pipe"],
       env: spawnEnv,
@@ -9198,7 +9349,7 @@ var KimiDriver = class {
       // and has an 8191-character command-line limit. Kimi's official
       // installer/uv entrypoint is an executable, so launch it directly and
       // keep prompts on stdin / files instead of routing through cmd.exe.
-      shell: launch.shell
+      shell: spawnTarget.shell
     });
     proc.stdin?.write(JSON.stringify({
       jsonrpc: "2.0",
@@ -9311,14 +9462,9 @@ var KimiDriver = class {
     return detectKimiModels();
   }
 };
-function detectKimiModels(home = os4.homedir()) {
-  const configPath = path9.join(home, ".kimi", "config.toml");
-  let raw;
-  try {
-    raw = readFileSync3(configPath, "utf8");
-  } catch {
-    return null;
-  }
+function detectKimiModels(home = os4.homedir(), opts = {}) {
+  const raw = readKimiConfigSource(home, opts.env).raw;
+  if (raw === null) return null;
   const models = [];
   const sectionRe = /^\s*\[models(?:\.([^\]]+)|"\.[^"]+"|\."[^"]+")\s*\]\s*$/gm;
   const lineRe = /^\s*\[models\.(.+?)\s*\]\s*$/gm;
@@ -9984,7 +10130,7 @@ function runOpenCodeModelsCommand(home, deps = {}) {
   const platform = deps.platform ?? process.platform;
   const spawnSyncFn = deps.spawnSyncFn ?? spawnSync2;
   const result = spawnSyncFn("opencode", ["models"], {
-    env: { ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" },
+    env: scrubDaemonChildEnv({ ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" }),
     encoding: "utf8",
     timeout: 5e3,
     shell: platform === "win32"
@@ -14221,19 +14367,19 @@ var AgentProcessManager = class _AgentProcessManager {
     if (input.decision !== "local_hold" && input.decision !== "syncing_hold") return;
     const ap = this.agents.get(agentId);
     const messageCount = input.decision === "syncing_hold" ? input.heldMessageCount ?? input.pendingCount ?? 0 : input.pendingCount ?? input.heldMessageCount ?? 0;
-    const entry = projectApmHeldFreshnessActivity({
+    const activity = projectApmHeldFreshnessActivity({
       producerFactId,
       action: input.action,
       decision: input.decision,
       target: input.target,
       messageCount
-    }).entry;
+    });
     this.sendToServer({
       type: "agent:activity",
       agentId,
-      activity: ap?.lastActivity || "online",
-      detail: ap?.lastActivityDetail || "",
-      entries: [entry],
+      activity: activity.statusEntry.activity,
+      detail: activity.statusEntry.detail,
+      entries: activity.entries,
       launchId: ap?.launchId || void 0,
       clientSeq: ap ? this.nextActivityClientSeq(agentId) : void 0
     });
@@ -19638,7 +19784,7 @@ var DAEMON_CORE_TRACE_ATTR_CONTRACTS = {
     spanAttrs: ["agentId", "event_kind", "runtime"]
   }
 };
-var DAEMON_CLI_USAGE = "Usage: slock-daemon --server-url <url> --api-key <key>";
+var DAEMON_CLI_USAGE = `Usage: slock-daemon --server-url <url> (--api-key <key> or ${DAEMON_API_KEY_ENV}=<key>)`;
 var RunnerCredentialMintError2 = class extends Error {
   code;
   retryable;
@@ -19674,9 +19820,9 @@ function runnerCredentialErrorDetail2(error) {
 async function waitForRunnerCredentialRetry2() {
   await new Promise((resolve) => setTimeout(resolve, RUNNER_CREDENTIAL_MINT_RETRY_DELAY_MS2));
 }
-function parseDaemonCliArgs(args) {
+function parseDaemonCliArgs(args, env = {}) {
   let serverUrl = "";
-  let apiKey = "";
+  let apiKey = env[DAEMON_API_KEY_ENV] ?? "";
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--server-url" && args[i + 1]) serverUrl = args[++i];
     if (args[i] === "--api-key" && args[i + 1]) apiKey = args[++i];
@@ -19713,7 +19859,7 @@ function resolveSlockCliPathOrEmpty(moduleUrl = import.meta.url) {
 }
 async function runBundledSlockCli(argv) {
   process.argv = [process.execPath, "slock", ...argv];
-  await import("./dist-TPCGG5OS.js");
+  await import("./dist-TE3PBFBX.js");
 }
 function detectRuntimes(tracer = noopTracer) {
   const ids = [];
@@ -20650,6 +20796,8 @@ var DaemonCore = class {
 
 export {
   subscribeDaemonLogs,
+  DAEMON_API_KEY_ENV,
+  scrubDaemonAuthEnv,
   resolveWorkspaceDirectoryPath,
   scanWorkspaceDirectories,
   deleteWorkspaceDirectory,

package/dist/cli/index.js

@@ -43225,6 +43225,21 @@ var agentApiChannelMembersResponseSchema = passthroughObject({
     role: optionalStringSchema
   }))
 });
+var agentApiChannelMuteResponseSchema = passthroughObject({
+  activityMuted: optionalBooleanSchema,
+  muteFromSeq: nullableNumberSchema.optional(),
+  attention: passthroughObject({
+    state: optionalStringSchema,
+    ordinaryActivity: optionalStringSchema,
+    unmuteCommand: optionalStringSchema,
+    unmuteApi: optionalStringSchema,
+    muteCommand: optionalStringSchema,
+    muteApi: optionalStringSchema,
+    stillArrives: optionalStringArraySchema,
+    threadBoundary: optionalStringSchema,
+    catchUp: optionalStringSchema
+  }).optional()
+});
 var agentApiTaskClaimResultSchema = passthroughObject({
   taskNumber: external_exports.number().int().positive().optional(),
   messageId: optionalStringSchema,
@@ -43407,6 +43422,26 @@ var agentApiContract = {
     request: { params: agentApiChannelMembershipParamsSchema },
     response: { body: agentApiOkResponseSchema }
   }),
+  channelMute: route({
+    key: "channelMute",
+    method: "POST",
+    path: "/channels/:channelId/mute",
+    client: { resource: "channels", method: "mute" },
+    capability: "channels",
+    description: "Mute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
+  channelUnmute: route({
+    key: "channelUnmute",
+    method: "POST",
+    path: "/channels/:channelId/unmute",
+    client: { resource: "channels", method: "unmute" },
+    capability: "channels",
+    description: "Unmute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
   channelMembers: route({
     key: "channelMembers",
     method: "GET",
@@ -43648,9 +43683,6 @@ var agentApiContract = {
     response: { body: agentApiAttachmentUploadResponseSchema }
   })
 };
-function buildLegacyAgentApiPath(agentId, routePath) {
-  return `/internal/agent/${encodeURIComponent(agentId)}${routePath}`;
-}
 function parseAgentApiResponse(key, value) {
   return agentApiContract[key].response.body.parse(value);
 }
@@ -44181,6 +44213,9 @@ init_esm_shims();
 // ../shared/src/agentScopes.ts
 init_esm_shims();
 
+// ../shared/src/docs/crossPageInvariants.ts
+init_esm_shims();
+
 // ../shared/src/testing/failpoints.ts
 init_esm_shims();
 var NoopFailpointRegistry = class {
@@ -44615,39 +44650,18 @@ async function requestMultipartContractAgentApiRoute(client, routeKey, form) {
     });
   }
 }
-function createAgentApiClient2(client, agentId) {
-  const agentApi = createAgentApiClient(rawTransportForClient(client), {
-    pathPrefix: buildLegacyAgentApiPath(agentId, "")
-  });
+function createAgentApiSurfaceClient(client) {
+  const agentApi = createAgentApiClient(rawTransportForClient(client));
   return {
     server: {
       info: () => requestClientAsApiResponse(agentApi.server.info())
     },
-    history: {
-      read: (query) => requestClientAsApiResponse(agentApi.history.read(query))
-    },
-    messages: {
-      send: (body) => requestClientAsApiResponse(agentApi.messages.send(body)),
-      resolve: (params) => requestClientAsApiResponse(agentApi.messages.resolve(params)),
-      addReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.addReaction(params, body)),
-      removeReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.removeReaction(params, body))
-    },
-    channels: {
-      join: (params) => requestClientAsApiResponse(agentApi.channels.join(params)),
-      leave: (params) => requestClientAsApiResponse(agentApi.channels.leave(params))
-    },
-    mentions: {
-      pendingActions: (query) => requestClientAsApiResponse(agentApi.mentions.pendingActions(query ?? {})),
-      executeAction: (body) => requestClientAsApiResponse(agentApi.mentions.executeAction(body))
-    }
-  };
-}
-function createAgentApiSurfaceClient(client) {
-  const agentApi = createAgentApiClient(rawTransportForClient(client));
-  return {
     events: {
       get: (query) => requestClientAsApiResponse(agentApi.events.get(query))
     },
+    history: {
+      read: (query) => requestClientAsApiResponse(agentApi.history.read(query))
+    },
     tasks: {
       list: (query) => requestClientAsApiResponse(agentApi.tasks.list(query)),
       create: (body) => requestClientAsApiResponse(agentApi.tasks.create(body)),
@@ -44664,9 +44678,17 @@ function createAgentApiSurfaceClient(client) {
       log: (params) => requestClientAsApiResponse(agentApi.reminders.log(params))
     },
     messages: {
-      search: (query) => requestClientAsApiResponse(agentApi.messages.search(query))
+      send: (body) => requestClientAsApiResponse(agentApi.messages.send(body)),
+      resolve: (params) => requestClientAsApiResponse(agentApi.messages.resolve(params)),
+      search: (query) => requestClientAsApiResponse(agentApi.messages.search(query)),
+      addReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.addReaction(params, body)),
+      removeReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.removeReaction(params, body))
     },
     channels: {
+      join: (params) => requestClientAsApiResponse(agentApi.channels.join(params)),
+      leave: (params) => requestClientAsApiResponse(agentApi.channels.leave(params)),
+      mute: (params) => requestClientAsApiResponse(agentApi.channels.mute(params)),
+      unmute: (params) => requestClientAsApiResponse(agentApi.channels.unmute(params)),
       members: (query) => requestClientAsApiResponse(agentApi.channels.members(query)),
       resolve: (body) => requestClientAsApiResponse(agentApi.channels.resolve(body))
     },
@@ -44685,6 +44707,10 @@ function createAgentApiSurfaceClient(client) {
     actions: {
       prepare: (body) => requestClientAsApiResponse(agentApi.actions.prepare(body))
     },
+    mentions: {
+      pendingActions: (query) => requestClientAsApiResponse(agentApi.mentions.pendingActions(query ?? {})),
+      executeAction: (body) => requestClientAsApiResponse(agentApi.mentions.executeAction(body))
+    },
     attachments: {
       upload: (form) => requestMultipartContractAgentApiRoute(client, "attachmentUpload", form)
     }
@@ -44950,7 +44976,7 @@ var ApiClient = class {
     if (reaction) {
       return `/internal/agent-api/messages/${reaction[1]}/reactions`;
     }
-    const channelMembership = /^\/channels\/([^/]+)\/(join|leave)$/.exec(suffix);
+    const channelMembership = /^\/channels\/([^/]+)\/(join|leave|mute|unmute)$/.exec(suffix);
     if (channelMembership) {
       return `/internal/agent-api/channels/${channelMembership[1]}/${channelMembership[2]}`;
     }
@@ -47738,7 +47764,8 @@ var channelLeaveCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const infoRes = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const agentApi = createAgentApiSurfaceClient(client);
+    const infoRes = await agentApi.server.info();
     if (!infoRes.ok) {
       throw new CliError({
         code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
@@ -47756,7 +47783,7 @@ var channelLeaveCommand = defineCommand(
       writeText(ctx.io, formatAlreadyNotJoined(target) + "\n");
       return;
     }
-    const leaveRes = await createAgentApiClient2(client, agentContext.agentId).channels.leave({
+    const leaveRes = await agentApi.channels.leave({
       channelId: channel.id
     });
     if (!leaveRes.ok) {
@@ -47801,7 +47828,8 @@ var channelJoinCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const infoRes = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const agentApi = createAgentApiSurfaceClient(client);
+    const infoRes = await agentApi.server.info();
     if (!infoRes.ok) {
       throw new CliError({
         code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
@@ -47819,7 +47847,7 @@ var channelJoinCommand = defineCommand(
       writeText(ctx.io, formatAlreadyJoined(target) + "\n");
       return;
     }
-    const joinRes = await createAgentApiClient2(client, agentContext.agentId).channels.join({
+    const joinRes = await agentApi.channels.join({
       channelId: channel.id
     });
     if (!joinRes.ok) {
@@ -47835,6 +47863,84 @@ function registerChannelJoinCommand(parent, runtimeOptions) {
   registerCliCommand(parent, channelJoinCommand, runtimeOptions);
 }
 
+// src/commands/channel/mute.ts
+init_esm_shims();
+function formatSeq(value) {
+  return value == null ? "none" : String(value);
+}
+function formatChannelMuteResult(target, result2) {
+  const lines = [
+    `${result2.activityMuted ? "Muted" : "Unmuted"} ${target}.`,
+    `Activity muted: ${result2.activityMuted ? "yes" : "no"}`,
+    `Mute from seq: ${formatSeq(result2.muteFromSeq)}`
+  ];
+  if (result2.attention?.ordinaryActivity) lines.push(result2.attention.ordinaryActivity);
+  if (result2.attention?.stillArrives?.length) {
+    lines.push("Still arrives:");
+    for (const item of result2.attention.stillArrives) lines.push(`- ${item}`);
+  }
+  if (result2.attention?.threadBoundary) lines.push(result2.attention.threadBoundary);
+  if (result2.attention?.catchUp) lines.push(result2.attention.catchUp);
+  if (result2.attention?.unmuteCommand) lines.push(`To unmute: ${result2.attention.unmuteCommand}`);
+  if (result2.attention?.unmuteApi) lines.push(`Agent API: ${result2.attention.unmuteApi}`);
+  if (result2.attention?.muteCommand) lines.push(`To mute: ${result2.attention.muteCommand}`);
+  if (result2.attention?.muteApi) lines.push(`Agent API: ${result2.attention.muteApi}`);
+  return lines.join("\n");
+}
+function makeChannelMuteCommand(action) {
+  return defineCommand(
+    {
+      name: action,
+      description: action === "mute" ? "Mute ordinary Activity delivery for a regular channel" : "Unmute ordinary Activity delivery for a regular channel",
+      arguments: ["<target>"]
+    },
+    async (ctx, targetArg) => {
+      const target = String(targetArg ?? "");
+      const channelName = parseRegularChannelTarget(target);
+      if (!channelName) {
+        throw new CliError({
+          code: "INVALID_TARGET",
+          message: "Target must be a regular channel in the form '#channel-name'. DMs and thread targets are not supported."
+        });
+      }
+      const agentContext = ctx.loadAgentContext();
+      const client = ctx.createApiClient(agentContext);
+      const agentApi = createAgentApiSurfaceClient(client);
+      const infoRes = await agentApi.server.info();
+      if (!infoRes.ok) {
+        throw new CliError({
+          code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
+          message: infoRes.error ?? `HTTP ${infoRes.status}`
+        });
+      }
+      const channel = (infoRes.data?.channels ?? []).find((candidate) => candidate.name === channelName);
+      if (!channel) {
+        throw new CliError({
+          code: "NOT_FOUND",
+          message: `Channel not found: ${target}`
+        });
+      }
+      const res = action === "mute" ? await agentApi.channels.mute({ channelId: channel.id }) : await agentApi.channels.unmute({ channelId: channel.id });
+      if (!res.ok) {
+        throw new CliError({
+          code: res.status >= 500 ? "SERVER_5XX" : action === "mute" ? "MUTE_FAILED" : "UNMUTE_FAILED",
+          message: res.error ?? `HTTP ${res.status}`,
+          suggestedNextAction: res.suggestedNextAction ?? void 0
+        });
+      }
+      writeText(ctx.io, formatChannelMuteResult(target, res.data ?? {}) + "\n");
+    }
+  );
+}
+var channelMuteCommand = makeChannelMuteCommand("mute");
+var channelUnmuteCommand = makeChannelMuteCommand("unmute");
+function registerChannelMuteCommand(parent, runtimeOptions) {
+  registerCliCommand(parent, channelMuteCommand, runtimeOptions);
+}
+function registerChannelUnmuteCommand(parent, runtimeOptions) {
+  registerCliCommand(parent, channelUnmuteCommand, runtimeOptions);
+}
+
 // src/commands/server/info.ts
 init_esm_shims();
 var serverInfoCommand = defineCommand(
@@ -47845,7 +47951,7 @@ var serverInfoCommand = defineCommand(
   async (ctx) => {
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const res = await createAgentApiSurfaceClient(client).server.info();
     if (!res.ok) {
       const code = res.status >= 500 ? "SERVER_5XX" : "INFO_FAILED";
       throw new CliError({
@@ -47869,13 +47975,13 @@ function registerServerInfoCommand(parent, runtimeOptions) {
 
 // src/commands/knowledge/get.ts
 init_esm_shims();
-function buildKnowledgeGetPath(agentId, topic, opts) {
+function buildKnowledgeGetPath(topic, opts) {
   const params = new URLSearchParams();
   params.set("topic", topic);
   if (opts.reason) params.set("reason", opts.reason);
   if (opts.turnId) params.set("turn_id", opts.turnId);
   if (opts.traceId) params.set("trace_id", opts.traceId);
-  return `/internal/agent/${encodeURIComponent(agentId)}/knowledge?${params.toString()}`;
+  return `/internal/agent-api/knowledge?${params.toString()}`;
 }
 function formatKnowledgeStdout(content) {
   return content.endsWith("\n") ? content : `${content}
@@ -47925,7 +48031,7 @@ var knowledgeGetCommand = defineCommand(
     const client = ctx.createApiClient(agentContext);
     const res = await client.request(
       "GET",
-      buildKnowledgeGetPath(agentContext.agentId, topic, opts)
+      buildKnowledgeGetPath(topic, opts)
     );
     if (!res.ok) {
       throw new CliError({
@@ -48744,7 +48850,7 @@ var messageSendCommand = defineCommand(
     if (outgoingAttachmentIds.length > 0) {
       body.attachmentIds = outgoingAttachmentIds;
     }
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const res = await agentApi.messages.send(body);
     if (!res.ok) {
       const code = res.status >= 500 ? "SERVER_5XX" : "SEND_FAILED";
@@ -48982,7 +49088,7 @@ var messageReadCommand = defineCommand(
     const readOpts = validateReadOpts(opts);
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const res = await agentApi.history.read({
       channel: readOpts.channel,
       ...readOpts.before !== void 0 ? { before: readOpts.before } : {},
@@ -49175,7 +49281,7 @@ var messageResolveCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).messages.resolve({ msgId: asMessageId(id) });
+    const res = await createAgentApiSurfaceClient(client).messages.resolve({ msgId: asMessageId(id) });
     if (!res.ok) {
       const mapped = mapResolveError(res);
       throw new CliError(mapped);
@@ -49234,7 +49340,7 @@ var messageReactCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const messageId = asMessageId(opts.messageId.trim());
     const res = opts.remove ? await agentApi.messages.removeReaction({ msgId: messageId }, { emoji: emoji3 }) : await agentApi.messages.addReaction({ msgId: messageId }, { emoji: emoji3 });
     if (!res.ok) {
@@ -49931,7 +50037,7 @@ function buildMentionExecuteCommand(action) {
       const ids = normalizeResolutionIds(resolutionIds);
       const agentContext = ctx.loadAgentContext();
       const client = ctx.createApiClient(agentContext);
-      const res = await createAgentApiClient2(client, agentContext.agentId).mentions.executeAction({
+      const res = await createAgentApiSurfaceClient(client).mentions.executeAction({
         action,
         resolutionIds: ids
       });
@@ -49963,7 +50069,7 @@ var mentionPendingCommand = defineCommand(
   async (ctx, opts = {}) => {
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).mentions.pendingActions();
+    const res = await createAgentApiSurfaceClient(client).mentions.pendingActions();
     if (!res.ok || !res.data) {
       throw cliError(res.status >= 500 ? "SERVER_5XX" : "MENTION_PENDING_FAILED", res.error ?? `HTTP ${res.status}`);
     }
@@ -50610,9 +50716,15 @@ function sanitizePathSegment(value) {
   const segment = value.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return segment || "service";
 }
-function resolveSlockHome(env) {
-  if (env.SLOCK_HOME?.trim()) return path8.resolve(env.SLOCK_HOME);
-  return path8.join(env.HOME ?? os4.homedir(), ".slock");
+function resolveSlockHome(env, homeDir = os4.homedir()) {
+  const configured = env.SLOCK_HOME?.trim() || env.RAFT_HOME?.trim();
+  const raw = configured && configured.length > 0 ? configured : path8.join(homeDir, ".slock");
+  return path8.resolve(expandHome(raw, homeDir));
+}
+function expandHome(input, homeDir) {
+  if (input === "~") return homeDir;
+  if (input.startsWith("~/")) return path8.join(homeDir, input.slice(2));
+  return input;
 }
 function buildLocalCliProfileEnv(input) {
   if (input.manifest.execution.mode !== "local_cli" || !input.manifest.execution.command) {
@@ -50624,7 +50736,7 @@ function buildLocalCliProfileEnv(input) {
   if (input.manifest.credential_boundary.forbid_user_home !== true) {
     throw new Error("manifest must set credential_boundary.forbid_user_home=true for local_cli isolation");
   }
-  const root = resolveSlockHome(input.env ?? process.env);
+  const root = resolveSlockHome(input.env ?? process.env, input.homeDir);
   const profileHome = path8.join(
     root,
     "integration-profiles",
@@ -51384,10 +51496,12 @@ var agentCmd = program2.command("agent").description("External agent onboarding
 registerAgentLoginCommand(agentCmd);
 registerAgentListCommand(agentCmd);
 registerAgentBridgeCommand(agentCmd);
-var channelCmd = program2.command("channel").description("Channel membership operations");
+var channelCmd = program2.command("channel").description("Channel membership and attention operations");
 registerChannelMembersCommand(channelCmd);
 registerChannelJoinCommand(channelCmd);
 registerChannelLeaveCommand(channelCmd);
+registerChannelMuteCommand(channelCmd);
+registerChannelUnmuteCommand(channelCmd);
 var threadCmd = program2.command("thread").description("Thread attention operations");
 registerThreadUnfollowCommand(threadCmd);
 var serverCmd = program2.command("server").description("Server / workspace introspection");

package/dist/core.js

@@ -1,4 +1,5 @@
 import {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DAEMON_CORE_TRACE_ATTR_CONTRACTS,
   DaemonCore,
@@ -11,9 +12,11 @@ import {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
-} from "./chunk-ILFE5NTJ.js";
+} from "./chunk-YAQHU63I.js";
 export {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DAEMON_CORE_TRACE_ATTR_CONTRACTS,
   DaemonCore,
@@ -26,5 +29,6 @@ export {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
 };

package/dist/{dist-TPCGG5OS.js → dist-TE3PBFBX.js}

@@ -42781,6 +42781,21 @@ var agentApiChannelMembersResponseSchema = passthroughObject({
     role: optionalStringSchema
   }))
 });
+var agentApiChannelMuteResponseSchema = passthroughObject({
+  activityMuted: optionalBooleanSchema,
+  muteFromSeq: nullableNumberSchema.optional(),
+  attention: passthroughObject({
+    state: optionalStringSchema,
+    ordinaryActivity: optionalStringSchema,
+    unmuteCommand: optionalStringSchema,
+    unmuteApi: optionalStringSchema,
+    muteCommand: optionalStringSchema,
+    muteApi: optionalStringSchema,
+    stillArrives: optionalStringArraySchema,
+    threadBoundary: optionalStringSchema,
+    catchUp: optionalStringSchema
+  }).optional()
+});
 var agentApiTaskClaimResultSchema = passthroughObject({
   taskNumber: external_exports.number().int().positive().optional(),
   messageId: optionalStringSchema,
@@ -42963,6 +42978,26 @@ var agentApiContract = {
     request: { params: agentApiChannelMembershipParamsSchema },
     response: { body: agentApiOkResponseSchema }
   }),
+  channelMute: route({
+    key: "channelMute",
+    method: "POST",
+    path: "/channels/:channelId/mute",
+    client: { resource: "channels", method: "mute" },
+    capability: "channels",
+    description: "Mute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
+  channelUnmute: route({
+    key: "channelUnmute",
+    method: "POST",
+    path: "/channels/:channelId/unmute",
+    client: { resource: "channels", method: "unmute" },
+    capability: "channels",
+    description: "Unmute ordinary activity delivery for a visible regular channel as the bound agent credential.",
+    request: { params: agentApiChannelMembershipParamsSchema },
+    response: { body: agentApiChannelMuteResponseSchema }
+  }),
   channelMembers: route({
     key: "channelMembers",
     method: "GET",
@@ -43204,9 +43239,6 @@ var agentApiContract = {
     response: { body: agentApiAttachmentUploadResponseSchema }
   })
 };
-function buildLegacyAgentApiPath(agentId, routePath) {
-  return `/internal/agent/${encodeURIComponent(agentId)}${routePath}`;
-}
 function parseAgentApiResponse(key, value) {
   return agentApiContract[key].response.body.parse(value);
 }
@@ -43721,6 +43753,7 @@ init_esm_shims();
 init_esm_shims();
 init_esm_shims();
 init_esm_shims();
+init_esm_shims();
 var NoopFailpointRegistry = class {
   get enabled() {
     return false;
@@ -44147,39 +44180,18 @@ async function requestMultipartContractAgentApiRoute(client, routeKey, form) {
     });
   }
 }
-function createAgentApiClient2(client, agentId) {
-  const agentApi = createAgentApiClient(rawTransportForClient(client), {
-    pathPrefix: buildLegacyAgentApiPath(agentId, "")
-  });
+function createAgentApiSurfaceClient(client) {
+  const agentApi = createAgentApiClient(rawTransportForClient(client));
   return {
     server: {
       info: () => requestClientAsApiResponse(agentApi.server.info())
     },
-    history: {
-      read: (query) => requestClientAsApiResponse(agentApi.history.read(query))
-    },
-    messages: {
-      send: (body) => requestClientAsApiResponse(agentApi.messages.send(body)),
-      resolve: (params) => requestClientAsApiResponse(agentApi.messages.resolve(params)),
-      addReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.addReaction(params, body)),
-      removeReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.removeReaction(params, body))
-    },
-    channels: {
-      join: (params) => requestClientAsApiResponse(agentApi.channels.join(params)),
-      leave: (params) => requestClientAsApiResponse(agentApi.channels.leave(params))
-    },
-    mentions: {
-      pendingActions: (query) => requestClientAsApiResponse(agentApi.mentions.pendingActions(query ?? {})),
-      executeAction: (body) => requestClientAsApiResponse(agentApi.mentions.executeAction(body))
-    }
-  };
-}
-function createAgentApiSurfaceClient(client) {
-  const agentApi = createAgentApiClient(rawTransportForClient(client));
-  return {
     events: {
       get: (query) => requestClientAsApiResponse(agentApi.events.get(query))
     },
+    history: {
+      read: (query) => requestClientAsApiResponse(agentApi.history.read(query))
+    },
     tasks: {
       list: (query) => requestClientAsApiResponse(agentApi.tasks.list(query)),
       create: (body) => requestClientAsApiResponse(agentApi.tasks.create(body)),
@@ -44196,9 +44208,17 @@ function createAgentApiSurfaceClient(client) {
       log: (params) => requestClientAsApiResponse(agentApi.reminders.log(params))
     },
     messages: {
-      search: (query) => requestClientAsApiResponse(agentApi.messages.search(query))
+      send: (body) => requestClientAsApiResponse(agentApi.messages.send(body)),
+      resolve: (params) => requestClientAsApiResponse(agentApi.messages.resolve(params)),
+      search: (query) => requestClientAsApiResponse(agentApi.messages.search(query)),
+      addReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.addReaction(params, body)),
+      removeReaction: (params, body) => requestClientAsApiResponse(agentApi.messages.removeReaction(params, body))
     },
     channels: {
+      join: (params) => requestClientAsApiResponse(agentApi.channels.join(params)),
+      leave: (params) => requestClientAsApiResponse(agentApi.channels.leave(params)),
+      mute: (params) => requestClientAsApiResponse(agentApi.channels.mute(params)),
+      unmute: (params) => requestClientAsApiResponse(agentApi.channels.unmute(params)),
       members: (query) => requestClientAsApiResponse(agentApi.channels.members(query)),
       resolve: (body) => requestClientAsApiResponse(agentApi.channels.resolve(body))
     },
@@ -44217,6 +44237,10 @@ function createAgentApiSurfaceClient(client) {
     actions: {
       prepare: (body) => requestClientAsApiResponse(agentApi.actions.prepare(body))
     },
+    mentions: {
+      pendingActions: (query) => requestClientAsApiResponse(agentApi.mentions.pendingActions(query ?? {})),
+      executeAction: (body) => requestClientAsApiResponse(agentApi.mentions.executeAction(body))
+    },
     attachments: {
       upload: (form) => requestMultipartContractAgentApiRoute(client, "attachmentUpload", form)
     }
@@ -44473,7 +44497,7 @@ var ApiClient = class {
     if (reaction) {
       return `/internal/agent-api/messages/${reaction[1]}/reactions`;
     }
-    const channelMembership = /^\/channels\/([^/]+)\/(join|leave)$/.exec(suffix);
+    const channelMembership = /^\/channels\/([^/]+)\/(join|leave|mute|unmute)$/.exec(suffix);
     if (channelMembership) {
       return `/internal/agent-api/channels/${channelMembership[1]}/${channelMembership[2]}`;
     }
@@ -47210,7 +47234,8 @@ var channelLeaveCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const infoRes = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const agentApi = createAgentApiSurfaceClient(client);
+    const infoRes = await agentApi.server.info();
     if (!infoRes.ok) {
       throw new CliError({
         code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
@@ -47228,7 +47253,7 @@ var channelLeaveCommand = defineCommand(
       writeText(ctx.io, formatAlreadyNotJoined(target) + "\n");
       return;
     }
-    const leaveRes = await createAgentApiClient2(client, agentContext.agentId).channels.leave({
+    const leaveRes = await agentApi.channels.leave({
       channelId: channel.id
     });
     if (!leaveRes.ok) {
@@ -47271,7 +47296,8 @@ var channelJoinCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const infoRes = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const agentApi = createAgentApiSurfaceClient(client);
+    const infoRes = await agentApi.server.info();
     if (!infoRes.ok) {
       throw new CliError({
         code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
@@ -47289,7 +47315,7 @@ var channelJoinCommand = defineCommand(
       writeText(ctx.io, formatAlreadyJoined(target) + "\n");
       return;
     }
-    const joinRes = await createAgentApiClient2(client, agentContext.agentId).channels.join({
+    const joinRes = await agentApi.channels.join({
       channelId: channel.id
     });
     if (!joinRes.ok) {
@@ -47305,6 +47331,82 @@ function registerChannelJoinCommand(parent, runtimeOptions) {
   registerCliCommand(parent, channelJoinCommand, runtimeOptions);
 }
 init_esm_shims();
+function formatSeq(value) {
+  return value == null ? "none" : String(value);
+}
+function formatChannelMuteResult(target, result2) {
+  const lines = [
+    `${result2.activityMuted ? "Muted" : "Unmuted"} ${target}.`,
+    `Activity muted: ${result2.activityMuted ? "yes" : "no"}`,
+    `Mute from seq: ${formatSeq(result2.muteFromSeq)}`
+  ];
+  if (result2.attention?.ordinaryActivity) lines.push(result2.attention.ordinaryActivity);
+  if (result2.attention?.stillArrives?.length) {
+    lines.push("Still arrives:");
+    for (const item of result2.attention.stillArrives) lines.push(`- ${item}`);
+  }
+  if (result2.attention?.threadBoundary) lines.push(result2.attention.threadBoundary);
+  if (result2.attention?.catchUp) lines.push(result2.attention.catchUp);
+  if (result2.attention?.unmuteCommand) lines.push(`To unmute: ${result2.attention.unmuteCommand}`);
+  if (result2.attention?.unmuteApi) lines.push(`Agent API: ${result2.attention.unmuteApi}`);
+  if (result2.attention?.muteCommand) lines.push(`To mute: ${result2.attention.muteCommand}`);
+  if (result2.attention?.muteApi) lines.push(`Agent API: ${result2.attention.muteApi}`);
+  return lines.join("\n");
+}
+function makeChannelMuteCommand(action) {
+  return defineCommand(
+    {
+      name: action,
+      description: action === "mute" ? "Mute ordinary Activity delivery for a regular channel" : "Unmute ordinary Activity delivery for a regular channel",
+      arguments: ["<target>"]
+    },
+    async (ctx, targetArg) => {
+      const target = String(targetArg ?? "");
+      const channelName = parseRegularChannelTarget(target);
+      if (!channelName) {
+        throw new CliError({
+          code: "INVALID_TARGET",
+          message: "Target must be a regular channel in the form '#channel-name'. DMs and thread targets are not supported."
+        });
+      }
+      const agentContext = ctx.loadAgentContext();
+      const client = ctx.createApiClient(agentContext);
+      const agentApi = createAgentApiSurfaceClient(client);
+      const infoRes = await agentApi.server.info();
+      if (!infoRes.ok) {
+        throw new CliError({
+          code: infoRes.status >= 500 ? "SERVER_5XX" : "INFO_FAILED",
+          message: infoRes.error ?? `HTTP ${infoRes.status}`
+        });
+      }
+      const channel = (infoRes.data?.channels ?? []).find((candidate) => candidate.name === channelName);
+      if (!channel) {
+        throw new CliError({
+          code: "NOT_FOUND",
+          message: `Channel not found: ${target}`
+        });
+      }
+      const res = action === "mute" ? await agentApi.channels.mute({ channelId: channel.id }) : await agentApi.channels.unmute({ channelId: channel.id });
+      if (!res.ok) {
+        throw new CliError({
+          code: res.status >= 500 ? "SERVER_5XX" : action === "mute" ? "MUTE_FAILED" : "UNMUTE_FAILED",
+          message: res.error ?? `HTTP ${res.status}`,
+          suggestedNextAction: res.suggestedNextAction ?? void 0
+        });
+      }
+      writeText(ctx.io, formatChannelMuteResult(target, res.data ?? {}) + "\n");
+    }
+  );
+}
+var channelMuteCommand = makeChannelMuteCommand("mute");
+var channelUnmuteCommand = makeChannelMuteCommand("unmute");
+function registerChannelMuteCommand(parent, runtimeOptions) {
+  registerCliCommand(parent, channelMuteCommand, runtimeOptions);
+}
+function registerChannelUnmuteCommand(parent, runtimeOptions) {
+  registerCliCommand(parent, channelUnmuteCommand, runtimeOptions);
+}
+init_esm_shims();
 var serverInfoCommand = defineCommand(
   {
     name: "info",
@@ -47313,7 +47415,7 @@ var serverInfoCommand = defineCommand(
   async (ctx) => {
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).server.info();
+    const res = await createAgentApiSurfaceClient(client).server.info();
     if (!res.ok) {
       const code = res.status >= 500 ? "SERVER_5XX" : "INFO_FAILED";
       throw new CliError({
@@ -47335,13 +47437,13 @@ function registerServerInfoCommand(parent, runtimeOptions) {
   registerCliCommand(parent, serverInfoCommand, runtimeOptions);
 }
 init_esm_shims();
-function buildKnowledgeGetPath(agentId, topic, opts) {
+function buildKnowledgeGetPath(topic, opts) {
   const params = new URLSearchParams();
   params.set("topic", topic);
   if (opts.reason) params.set("reason", opts.reason);
   if (opts.turnId) params.set("turn_id", opts.turnId);
   if (opts.traceId) params.set("trace_id", opts.traceId);
-  return `/internal/agent/${encodeURIComponent(agentId)}/knowledge?${params.toString()}`;
+  return `/internal/agent-api/knowledge?${params.toString()}`;
 }
 function formatKnowledgeStdout(content) {
   return content.endsWith("\n") ? content : `${content}
@@ -47391,7 +47493,7 @@ var knowledgeGetCommand = defineCommand(
     const client = ctx.createApiClient(agentContext);
     const res = await client.request(
       "GET",
-      buildKnowledgeGetPath(agentContext.agentId, topic, opts)
+      buildKnowledgeGetPath(topic, opts)
     );
     if (!res.ok) {
       throw new CliError({
@@ -48180,7 +48282,7 @@ var messageSendCommand = defineCommand(
     if (outgoingAttachmentIds.length > 0) {
       body.attachmentIds = outgoingAttachmentIds;
     }
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const res = await agentApi.messages.send(body);
     if (!res.ok) {
       const code = res.status >= 500 ? "SERVER_5XX" : "SEND_FAILED";
@@ -48410,7 +48512,7 @@ var messageReadCommand = defineCommand(
     const readOpts = validateReadOpts(opts);
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const res = await agentApi.history.read({
       channel: readOpts.channel,
       ...readOpts.before !== void 0 ? { before: readOpts.before } : {},
@@ -48599,7 +48701,7 @@ var messageResolveCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).messages.resolve({ msgId: asMessageId(id) });
+    const res = await createAgentApiSurfaceClient(client).messages.resolve({ msgId: asMessageId(id) });
     if (!res.ok) {
       const mapped = mapResolveError(res);
       throw new CliError(mapped);
@@ -48656,7 +48758,7 @@ var messageReactCommand = defineCommand(
     }
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const agentApi = createAgentApiClient2(client, agentContext.agentId);
+    const agentApi = createAgentApiSurfaceClient(client);
     const messageId = asMessageId(opts.messageId.trim());
     const res = opts.remove ? await agentApi.messages.removeReaction({ msgId: messageId }, { emoji: emoji3 }) : await agentApi.messages.addReaction({ msgId: messageId }, { emoji: emoji3 });
     if (!res.ok) {
@@ -49326,7 +49428,7 @@ function buildMentionExecuteCommand(action) {
       const ids = normalizeResolutionIds(resolutionIds);
       const agentContext = ctx.loadAgentContext();
       const client = ctx.createApiClient(agentContext);
-      const res = await createAgentApiClient2(client, agentContext.agentId).mentions.executeAction({
+      const res = await createAgentApiSurfaceClient(client).mentions.executeAction({
         action,
         resolutionIds: ids
       });
@@ -49356,7 +49458,7 @@ var mentionPendingCommand = defineCommand(
   async (ctx, opts = {}) => {
     const agentContext = ctx.loadAgentContext();
     const client = ctx.createApiClient(agentContext);
-    const res = await createAgentApiClient2(client, agentContext.agentId).mentions.pendingActions();
+    const res = await createAgentApiSurfaceClient(client).mentions.pendingActions();
     if (!res.ok || !res.data) {
       throw cliError(res.status >= 500 ? "SERVER_5XX" : "MENTION_PENDING_FAILED", res.error ?? `HTTP ${res.status}`);
     }
@@ -49976,9 +50078,15 @@ function sanitizePathSegment(value) {
   const segment = value.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return segment || "service";
 }
-function resolveSlockHome(env) {
-  if (env.SLOCK_HOME?.trim()) return path8.resolve(env.SLOCK_HOME);
-  return path8.join(env.HOME ?? os4.homedir(), ".slock");
+function resolveSlockHome(env, homeDir = os4.homedir()) {
+  const configured = env.SLOCK_HOME?.trim() || env.RAFT_HOME?.trim();
+  const raw = configured && configured.length > 0 ? configured : path8.join(homeDir, ".slock");
+  return path8.resolve(expandHome(raw, homeDir));
+}
+function expandHome(input, homeDir) {
+  if (input === "~") return homeDir;
+  if (input.startsWith("~/")) return path8.join(homeDir, input.slice(2));
+  return input;
 }
 function buildLocalCliProfileEnv(input) {
   if (input.manifest.execution.mode !== "local_cli" || !input.manifest.execution.command) {
@@ -49990,7 +50098,7 @@ function buildLocalCliProfileEnv(input) {
   if (input.manifest.credential_boundary.forbid_user_home !== true) {
     throw new Error("manifest must set credential_boundary.forbid_user_home=true for local_cli isolation");
   }
-  const root = resolveSlockHome(input.env ?? process.env);
+  const root = resolveSlockHome(input.env ?? process.env, input.homeDir);
   const profileHome = path8.join(
     root,
     "integration-profiles",
@@ -50720,10 +50828,12 @@ var agentCmd = program2.command("agent").description("External agent onboarding
 registerAgentLoginCommand(agentCmd);
 registerAgentListCommand(agentCmd);
 registerAgentBridgeCommand(agentCmd);
-var channelCmd = program2.command("channel").description("Channel membership operations");
+var channelCmd = program2.command("channel").description("Channel membership and attention operations");
 registerChannelMembersCommand(channelCmd);
 registerChannelJoinCommand(channelCmd);
 registerChannelLeaveCommand(channelCmd);
+registerChannelMuteCommand(channelCmd);
+registerChannelUnmuteCommand(channelCmd);
 var threadCmd = program2.command("thread").description("Thread attention operations");
 registerThreadUnfollowCommand(threadCmd);
 var serverCmd = program2.command("server").description("Server / workspace introspection");

package/dist/index.js

@@ -2,11 +2,13 @@
 import {
   DAEMON_CLI_USAGE,
   DaemonCore,
-  parseDaemonCliArgs
-} from "./chunk-ILFE5NTJ.js";
+  parseDaemonCliArgs,
+  scrubDaemonAuthEnv
+} from "./chunk-YAQHU63I.js";
 
 // src/index.ts
-var parsedArgs = parseDaemonCliArgs(process.argv.slice(2));
+var parsedArgs = parseDaemonCliArgs(process.argv.slice(2), process.env);
+scrubDaemonAuthEnv(process.env);
 if (!parsedArgs) {
   console.error(DAEMON_CLI_USAGE);
   process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/raft-daemon",
-  "version": "0.64.0",
+  "version": "0.65.0-play.20260630143140",
   "type": "module",
   "bin": {
     "raft-daemon": "dist/raft-daemon.js",