@botiverse/raft-daemon 0.68.0 → 0.69.0-play.20260704183824

package/dist/{chunk-RXK2KSYW.js → chunk-FRBMWZ3P.js}

@@ -3288,6 +3288,7 @@ var AGENT_ACTIVITY_DETAIL_KINDS = [
   "compaction_stale",
   "reviewing_changes",
   "review_finished",
+  "review_stale",
   "runtime_reconnecting",
   "runtime_error",
   "runtime_crashed",
@@ -4708,6 +4709,19 @@ function listLegacySlockStatePaths(slockHome = resolveSlockHome(), homeDir = os.
   return candidates.filter((candidate) => existsSync(candidate.path));
 }
 
+// src/authEnv.ts
+var DAEMON_API_KEY_ENV = "SLOCK_MACHINE_API_KEY";
+var SLOCK_AGENT_TOKEN_ENV = "SLOCK_AGENT_TOKEN";
+function scrubDaemonAuthEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  return env;
+}
+function scrubDaemonChildEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  delete env[SLOCK_AGENT_TOKEN_ENV];
+  return env;
+}
+
 // src/agentCredentialProxy.ts
 import { randomBytes } from "crypto";
 import http from "http";
@@ -6282,7 +6296,9 @@ var LOOPBACK_NO_PROXY = "127.0.0.1,localhost";
 var CLI_TRANSPORT_TRACE_DIR_ENV = "SLOCK_CLI_TRANSPORT_TRACE_DIR";
 var safePathPart = (value) => value.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var RAW_CREDENTIAL_ENV_DENYLIST = [
-  "SLOCK_AGENT_CREDENTIAL_KEY"
+  "SLOCK_AGENT_TOKEN",
+  "SLOCK_AGENT_CREDENTIAL_KEY",
+  "SLOCK_AGENT_CREDENTIAL_KEY_FILE"
 ];
 var WORKSPACE_CLI_TRANSPORT_FILENAMES = [
   "agent-token",
@@ -6637,7 +6653,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
     SLOCK_SERVER_URL: ctx.config.serverUrl,
     PATH: `${slockDir}${path2.delimiter}${process.env.PATH ?? ""}`
   };
-  delete spawnEnv.SLOCK_AGENT_TOKEN;
+  scrubDaemonChildEnv(spawnEnv);
   for (const key of RAW_CREDENTIAL_ENV_DENYLIST) {
     delete spawnEnv[key];
   }
@@ -7205,7 +7221,7 @@ function requiresWindowsShell(command, platform = process.platform) {
 }
 function resolveCommandOnPath(command, deps = {}) {
   const platform = deps.platform ?? process.platform;
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   const existsSyncFn = deps.existsSyncFn ?? existsSync3;
   if (platform === "win32") {
@@ -7231,7 +7247,7 @@ function firstExistingPath(candidates, deps = {}) {
   return null;
 }
 function readCommandVersion(command, args = [], deps = {}) {
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   try {
     const output = normalizeExecOutput(execFileSyncFn(command, [...args, "--version"], {
@@ -9315,11 +9331,11 @@ function detectCursorModels(runCommand = runCursorModelsCommand) {
   return parseCursorModelsOutput(String(result.stdout || ""));
 }
 function buildCursorModelProbeEnv(deps = {}) {
-  return withWindowsUserEnvironment({
+  return scrubDaemonChildEnv(withWindowsUserEnvironment({
     ...deps.env ?? process.env,
     FORCE_COLOR: "0",
     NO_COLOR: "1"
-  }, deps);
+  }, deps));
 }
 function runCursorModelsCommand() {
   return spawnSync("cursor-agent", ["models"], {
@@ -9375,7 +9391,7 @@ function resolveGeminiSpawn(commandArgs, deps = {}) {
   }
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync3;
   const existsSyncFn = deps.existsSyncFn ?? existsSync5;
-  const env = deps.env ?? process.env;
+  const env = scrubDaemonChildEnv({ ...deps.env ?? process.env });
   const winPath = path8.win32;
   let geminiEntry = null;
   try {
@@ -9512,12 +9528,15 @@ var GeminiDriver = class {
 // src/drivers/kimi.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import os4 from "os";
 import path9 from "path";
 var KIMI_WIRE_PROTOCOL_VERSION = "1.3";
 var KIMI_SYSTEM_PROMPT_FILE = ".slock-kimi-system.md";
 var KIMI_AGENT_FILE = ".slock-kimi-agent.yaml";
+var KIMI_GENERATED_CONFIG_FILE = ".slock-kimi-config.toml";
+var SLOCK_KIMI_CONFIG_CONTENT_ENV = "SLOCK_KIMI_CONFIG_CONTENT";
+var SLOCK_KIMI_CONFIG_FILE_ENV = "SLOCK_KIMI_CONFIG_FILE";
 function parseToolArguments(raw) {
   if (typeof raw !== "string") return raw;
   try {
@@ -9526,6 +9545,73 @@ function parseToolArguments(raw) {
     return raw;
   }
 }
+function readKimiConfigSource(home = os4.homedir(), env = process.env) {
+  const inlineConfig = env[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  if (inlineConfig && inlineConfig.trim()) {
+    return {
+      raw: inlineConfig,
+      explicitPath: null,
+      sourcePath: SLOCK_KIMI_CONFIG_CONTENT_ENV
+    };
+  }
+  const explicitPath = env[SLOCK_KIMI_CONFIG_FILE_ENV];
+  const configPath = explicitPath && explicitPath.trim() ? explicitPath : path9.join(home, ".kimi", "config.toml");
+  try {
+    return {
+      raw: readFileSync3(configPath, "utf8"),
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  } catch {
+    return {
+      raw: null,
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  }
+}
+function buildKimiSpawnEnv(env = process.env) {
+  const spawnEnv = { ...env, FORCE_COLOR: "0", NO_COLOR: "1" };
+  delete spawnEnv[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  delete spawnEnv[SLOCK_KIMI_CONFIG_FILE_ENV];
+  return scrubDaemonChildEnv(spawnEnv);
+}
+function buildKimiEffectiveEnv(ctx, overrideEnv) {
+  return {
+    ...process.env,
+    ...ctx.config.envVars || {},
+    ...overrideEnv || {}
+  };
+}
+function buildKimiLaunchOptions(ctx, opts = {}) {
+  const env = buildKimiEffectiveEnv(ctx, opts.env);
+  const source = readKimiConfigSource(opts.home ?? os4.homedir(), env);
+  const args = [];
+  let configFilePath = null;
+  let configContent = null;
+  if (source.explicitPath) {
+    configFilePath = source.explicitPath;
+  } else if (source.raw !== null && source.sourcePath === SLOCK_KIMI_CONFIG_CONTENT_ENV) {
+    configFilePath = path9.join(ctx.workingDirectory, KIMI_GENERATED_CONFIG_FILE);
+    configContent = source.raw;
+    if (opts.writeGeneratedConfig !== false) {
+      writeFileSync3(configFilePath, source.raw, { encoding: "utf8", mode: 384 });
+      chmodSync(configFilePath, 384);
+    }
+  }
+  if (configFilePath) {
+    args.push("--config-file", configFilePath);
+  }
+  if (ctx.config.model && ctx.config.model !== "default") {
+    args.push("--model", ctx.config.model);
+  }
+  return {
+    args,
+    env: buildKimiSpawnEnv(env),
+    configFilePath,
+    configContent
+  };
+}
 function resolveKimiSpawn(commandArgs, deps = {}) {
   return {
     command: resolveCommandOnPath("kimi", deps) ?? "kimi",
@@ -9549,7 +9635,25 @@ var KimiDriver = class {
   };
   model = {
     detectedModelsVerifiedAs: "launchable",
-    toLaunchSpec: (modelId) => ({ args: ["--model", modelId] })
+    toLaunchSpec: (modelId, ctx, opts) => {
+      if (!ctx) return { args: ["--model", modelId] };
+      const launchCtx = {
+        ...ctx,
+        config: {
+          ...ctx.config,
+          model: modelId
+        }
+      };
+      const launch = buildKimiLaunchOptions(launchCtx, {
+        home: opts?.home,
+        writeGeneratedConfig: false
+      });
+      return {
+        args: launch.args,
+        env: launch.env,
+        configFiles: launch.configFilePath ? [launch.configFilePath] : void 0
+      };
+    }
   };
   supportsStdinNotification = true;
   busyDeliveryMode = "direct";
@@ -9573,21 +9677,23 @@ var KimiDriver = class {
       `  system_prompt_path: ./${KIMI_SYSTEM_PROMPT_FILE}`,
       ""
     ].join("\n"), "utf8");
+    const launch = buildKimiLaunchOptions(ctx);
     const args = [
       "--wire",
       "--yolo",
       "--agent-file",
       agentFilePath,
       "--session",
-      this.sessionId
+      this.sessionId,
+      ...launch.args
     ];
     const launchRuntimeFields = runtimeConfigToLaunchFields(hydrateRuntimeConfig(ctx.config));
     if (launchRuntimeFields.model && launchRuntimeFields.model !== "default") {
       args.push("--model", launchRuntimeFields.model);
     }
     const spawnEnv = (await prepareCliTransport(ctx, { NO_COLOR: "1" })).spawnEnv;
-    const launch = resolveKimiSpawn(args);
-    const proc = spawn7(launch.command, launch.args, {
+    const spawnTarget = resolveKimiSpawn(args);
+    const proc = spawn7(spawnTarget.command, spawnTarget.args, {
       cwd: ctx.workingDirectory,
       stdio: ["pipe", "pipe", "pipe"],
       env: spawnEnv,
@@ -9595,7 +9701,7 @@ var KimiDriver = class {
       // and has an 8191-character command-line limit. Kimi's official
       // installer/uv entrypoint is an executable, so launch it directly and
       // keep prompts on stdin / files instead of routing through cmd.exe.
-      shell: launch.shell
+      shell: spawnTarget.shell
     });
     proc.stdin?.write(JSON.stringify({
       jsonrpc: "2.0",
@@ -9708,14 +9814,9 @@ var KimiDriver = class {
     return detectKimiModels();
   }
 };
-function detectKimiModels(home = os4.homedir()) {
-  const configPath = path9.join(home, ".kimi", "config.toml");
-  let raw;
-  try {
-    raw = readFileSync3(configPath, "utf8");
-  } catch {
-    return null;
-  }
+function detectKimiModels(home = os4.homedir(), opts = {}) {
+  const raw = readKimiConfigSource(home, opts.env).raw;
+  if (raw === null) return null;
   const models = [];
   const sectionRe = /^\s*\[models(?:\.([^\]]+)|"\.[^"]+"|\."[^"]+")\s*\]\s*$/gm;
   const lineRe = /^\s*\[models\.(.+?)\s*\]\s*$/gm;
@@ -10381,7 +10482,7 @@ function runOpenCodeModelsCommand(home, deps = {}) {
   const platform = deps.platform ?? process.platform;
   const spawnSyncFn = deps.spawnSyncFn ?? spawnSync2;
   const result = spawnSyncFn("opencode", ["models"], {
-    env: { ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" },
+    env: scrubDaemonChildEnv({ ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" }),
     encoding: "utf8",
     timeout: 5e3,
     shell: platform === "win32"
@@ -13560,11 +13661,12 @@ var RUNTIME_ERROR_DELIVERY_BACKOFF_MAX_MS = 5 * 6e4;
 var RUNTIME_ERROR_FINGERPRINT_FENCE_THRESHOLD = 3;
 var SPAWN_FAIL_BACKOFF_BASE_MS = 1e3;
 var SPAWN_FAIL_BACKOFF_MAX_MS = 3e4;
-var SPAWN_FAIL_BACKOFF_THRESHOLD = 3;
+var SPAWN_FAIL_BACKOFF_THRESHOLD = 0;
 var RUNNER_CREDENTIAL_MINT_BACKOFF_BASE_MS = 6e4;
 var RUNNER_CREDENTIAL_MINT_BACKOFF_MAX_MS = 10 * 6e4;
 var RUNNER_CREDENTIAL_MINT_BACKOFF_THRESHOLD = 0;
 var COMPACTION_STALE_MS = 5 * 6e4;
+var REVIEW_STALE_MS = 10 * 6e4;
 var RUNTIME_PROGRESS_STALE_MS = 15 * 6e4;
 var DEFAULT_RUNTIME_START_TIMEOUT_MS = 2 * 6e4;
 var DEFAULT_STALLED_RECOVERY_SIGTERM_TIMEOUT_MS = 1e4;
@@ -14653,10 +14755,10 @@ var AgentProcessManager = class _AgentProcessManager {
   }
   // ----- SPAWN-FAIL BACKOFF (per-agent) ----------------------------------
   // Anchored at auto_restart_from_idle (apm:3596) + runtime_profile_auto_restart (apm:4137).
-  // Generic spawn errors keep a threshold > 1 so single-transient hiccups behave as today.
-  // Runner credential mint failures are different: one outer spawn failure already means the
-  // inner credential-mint loop exhausted RUNNER_CREDENTIAL_MINT_MAX_ATTEMPTS. Those enter a
-  // longer cooldown immediately so repeated wakes don't keep burning three network fetches.
+  // One outer spawn failure enters cooldown immediately so repeated wakes cannot burn one
+  // full spawn attempt per delivery. Runner credential mint failures keep a longer cooldown
+  // because one outer failure already means the inner credential-mint loop exhausted
+  // RUNNER_CREDENTIAL_MINT_MAX_ATTEMPTS.
   // Successful spawn resets state. State lives outside AgentProcess because spawn fails BEFORE
   // ap exists and the rate-window must persist across stop/respawn (else stop/start churn
   // bypasses the cap — CC1 lifecycle pattern). Never advances any consume cursor or model-seen
@@ -14809,14 +14911,22 @@ var AgentProcessManager = class _AgentProcessManager {
       this.sendStdinNotification(agentId);
     }, delayMs);
   }
-  flushAsyncRejectedIdleDelivery(agentId) {
+  scheduleIdleInboxDeliveryRetry(agentId, ap, notificationCount, source, traceName) {
+    if (notificationCount <= 0 || !ap.driver.supportsStdinNotification || !ap.sessionId) return false;
+    ap.notifications.add(notificationCount);
+    ap.notifications.clearTimer();
+    return ap.notifications.schedule(() => {
+      this.flushIdleInboxDeliveryRetry(agentId, source, traceName);
+    }, this.stdinNotificationRetryMs);
+  }
+  flushIdleInboxDeliveryRetry(agentId, source, traceName) {
     const ap = this.agents.get(agentId);
     if (!ap) return false;
     const count = ap.notifications.takePendingAndClearTimer();
     if (count === 0) return false;
     if (!ap.driver.supportsStdinNotification || !ap.sessionId || ap.inbox.length === 0) {
       ap.notifications.add(count);
-      this.recordDaemonTrace("daemon.agent.stdin_delivery.async_rejected.retry", {
+      this.recordDaemonTrace(traceName, {
         agentId,
         runtime: ap.config.runtime,
         model: ap.config.model,
@@ -14837,7 +14947,7 @@ var AgentProcessManager = class _AgentProcessManager {
     ap.notifications.pruneContributedToPending(ap.inbox, ap.sessionId);
     const messages = ap.notifications.filterUncontributedMessages(ap.inbox, ap.sessionId);
     if (messages.length === 0) {
-      this.recordDaemonTrace("daemon.agent.stdin_delivery.async_rejected.retry", {
+      this.recordDaemonTrace(traceName, {
         agentId,
         runtime: ap.config.runtime,
         model: ap.config.model,
@@ -14851,16 +14961,16 @@ var AgentProcessManager = class _AgentProcessManager {
       return false;
     }
     this.commitApmIdleState(agentId, ap, false);
-    this.startRuntimeTrace(agentId, ap, "async-rejected-idle-delivery-retry", messages);
+    this.startRuntimeTrace(agentId, ap, source.replaceAll("_", "-"), messages);
     this.broadcastMessageReceivedActivity(agentId);
     const accepted = this.deliverInboxUpdateViaStdin(
       agentId,
       ap,
       messages,
       "idle",
-      "async_rejected_idle_delivery_retry"
+      source
     );
-    this.recordDaemonTrace("daemon.agent.stdin_delivery.async_rejected.retry", {
+    this.recordDaemonTrace(traceName, {
       agentId,
       runtime: ap.config.runtime,
       model: ap.config.model,
@@ -14873,6 +14983,13 @@ var AgentProcessManager = class _AgentProcessManager {
     });
     return accepted;
   }
+  flushAsyncRejectedIdleDelivery(agentId) {
+    return this.flushIdleInboxDeliveryRetry(
+      agentId,
+      "async_rejected_idle_delivery_retry",
+      "daemon.agent.stdin_delivery.async_rejected.retry"
+    );
+  }
   isApmIdle(ap) {
     return ap.gatedSteering.isIdle;
   }
@@ -14936,6 +15053,7 @@ var AgentProcessManager = class _AgentProcessManager {
     if (options.includeCompactionWatchdog ?? true) {
       this.clearCompactionWatchdog(ap);
     }
+    this.clearReviewWatchdog(ap);
     this.clearStalledRecoverySigtermWatchdog(ap);
   }
   clearRuntimeErrorDeliveryBackoffWithTrace(agentId, ap, resetSource) {
@@ -15311,7 +15429,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: activity.statusEntry.detailKind ?? "daemon_activity",
       entries: activity.entries,
       launchId: ap?.launchId || void 0,
-      clientSeq: ap ? this.nextActivityClientSeq(agentId) : void 0
+      clientSeq: ap ? this.nextActivityClientSeq(agentId) : void 0,
+      isHeartbeat: false
     });
   }
   recordRuntimeDiagnosticActivity(agentId, ap, event) {
@@ -15324,7 +15443,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: ap.lastActivityDetailKind || "none",
       entries: [runtimeDiagnosticTrajectoryEntry(event)],
       launchId: ap.launchId || void 0,
-      clientSeq: this.nextActivityClientSeq(agentId)
+      clientSeq: this.nextActivityClientSeq(agentId),
+      isHeartbeat: false
     });
     this.recordDaemonTrace("daemon.runtime.diagnostic", {
       agentId,
@@ -15375,7 +15495,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: ap.lastActivityDetailKind || "none",
       entries: [runtimeRecoveryTrajectoryEntry(event)],
       launchId: ap.launchId || void 0,
-      clientSeq: this.nextActivityClientSeq(agentId)
+      clientSeq: this.nextActivityClientSeq(agentId),
+      isHeartbeat: false
     });
     this.recordDaemonTrace("daemon.runtime.recovery.visible", {
       agentId,
@@ -16112,6 +16233,7 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
         readinessTransition: null,
         activation: { kind: "idle" },
         compaction: { kind: "none" },
+        review: { kind: "none" },
         runtimeProgress: new RuntimeProgressState(Date.now()),
         runtimeTraceSpan: null,
         runtimeTraceCounters: createRuntimeTraceCounters(),
@@ -18232,7 +18354,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       entries,
       launchId,
       clientSeq,
-      producerFactId
+      producerFactId,
+      isHeartbeat: false
     });
     this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, entries, ap, launchId, clientSeq, producerFactId);
     if (ap) {
@@ -18260,7 +18383,10 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
               detailKind: ap.lastActivityDetailKind,
               launchId: heartbeatLaunchId,
               clientSeq: heartbeatClientSeq,
-              producerFactId: heartbeatProducerFactId
+              producerFactId: heartbeatProducerFactId,
+              // The one knowing site: this timer re-broadcasts stale
+              // lastActivity, so it declares its replay provenance.
+              isHeartbeat: true
             });
             this.recordActivityProducedTrace(agentId, ap.lastActivityKind, ap.lastActivityDetail, ap.lastActivityDetailKind, [], ap, heartbeatLaunchId, heartbeatClientSeq, heartbeatProducerFactId);
           }, ACTIVITY_HEARTBEAT_MS);
@@ -18341,7 +18467,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       launchId,
       probeId,
       clientSeq,
-      producerFactId
+      producerFactId,
+      isHeartbeat: false
     });
     this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, [], ap, launchId, clientSeq, producerFactId);
   }
@@ -18489,6 +18616,29 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
     ap.compaction = { ...ap.compaction, watchdog: null };
     this.broadcastActivity(agentId, "working", "Context compaction still running; no finish event observed", [], void 0, "compaction_stale");
   }
+  startReviewWatchdog(agentId, ap) {
+    this.clearReviewWatchdog(ap);
+    const startedAt = Date.now();
+    const watchdog = setTimeout(() => {
+      this.markReviewStale(agentId, startedAt);
+    }, REVIEW_STALE_MS);
+    ap.review = { kind: "active", startedAt, watchdog };
+  }
+  clearReviewWatchdog(ap) {
+    if (ap.review.kind === "active" && ap.review.watchdog) {
+      clearTimeout(ap.review.watchdog);
+    }
+    ap.review = { kind: "none" };
+  }
+  markReviewStale(agentId, startedAt) {
+    const ap = this.agents.get(agentId);
+    if (!ap || ap.review.kind !== "active" || ap.review.startedAt !== startedAt) return;
+    ap.review = { ...ap.review, watchdog: null };
+    this.broadcastActivity(agentId, "working", "Review mode still active; no finish event observed", [], void 0, "review_stale");
+    const reduction = reduceApmGatedReview(ap.gatedSteering, { kind: "review_finished" });
+    this.commitGatedSteeringDecisionState(agentId, ap, reduction.nextState, { event: "review_finished", inferred: true });
+    this.flushReviewBoundaryMessages(agentId, ap);
+  }
   completeCompactionIfActive(agentId, detail = "Context compaction finished", options = {}) {
     const ap = this.agents.get(agentId);
     if (!ap || ap.compaction.kind !== "active") return;
@@ -19428,11 +19578,15 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
         if (ap) {
           const reduction = reduceApmGatedReview(ap.gatedSteering, { kind: "review_started" });
           this.commitGatedSteeringDecisionState(agentId, ap, reduction.nextState, { event: "review_started" });
+          this.startReviewWatchdog(agentId, ap);
         }
         break;
       case "review_finished":
         this.flushPendingTrajectory(agentId);
-        if (ap) this.recordRuntimeTraceEvent(agentId, ap, "runtime.review_mode.finished");
+        if (ap) {
+          this.clearReviewWatchdog(ap);
+          this.recordRuntimeTraceEvent(agentId, ap, "runtime.review_mode.finished");
+        }
         this.broadcastActivity(agentId, "working", "Review finished", [], void 0, "review_finished");
         if (ap) {
           const reduction = reduceApmGatedReview(ap.gatedSteering, { kind: "review_finished" });
@@ -19953,6 +20107,15 @@ ${RESPONSE_TARGET_HINT}`;
       `${mode} inbox update`
     );
     if (!sendResult.ok) {
+      const retryNotificationCount = mode === "idle" && ap.driver.supportsStdinNotification && ap.sessionId ? messages.length : 0;
+      const retrySource = source.endsWith("_retry") ? source : `${source}_retry`;
+      const retryScheduled = mode === "idle" ? this.scheduleIdleInboxDeliveryRetry(
+        agentId,
+        ap,
+        retryNotificationCount,
+        retrySource,
+        "daemon.agent.stdin_delivery.idle_retry"
+      ) : false;
       if (mode === "idle") {
         this.commitApmIdleState(agentId, ap, true);
       }
@@ -19977,7 +20140,9 @@ ${RESPONSE_TARGET_HINT}`;
         outcome: runtimeSendFailureOutcome(sendResult),
         failure_reason: sendResult.reason,
         failure_error: sendResult.error,
-        requeued_messages_count: 0,
+        requeued_messages_count: retryNotificationCount,
+        retry_scheduled: retryScheduled,
+        notification_timer_present: ap.notifications.hasTimer,
         cursors_advanced: "none"
       }, "error");
       return false;
@@ -20162,6 +20327,14 @@ var systemClock = {
   clearTimeout: (timer) => clearTimeout(timer)
 };
 var INBOUND_WATCHDOG_MS = 7e4;
+function normalizeHandshakeReason(value) {
+  const raw = Array.isArray(value) ? value[0] : value;
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  if (!trimmed) return null;
+  if (!/^[a-z0-9_:-]{1,80}$/i.test(trimmed)) return "invalid_header";
+  return trimmed;
+}
 function durationMsBucket(ms) {
   if (ms == null || !Number.isFinite(ms) || ms < 0) return "unknown";
   if (ms === 0) return "0";
@@ -20254,6 +20427,7 @@ var DaemonConnection = class {
     });
     const ws = this.options.wsFactory ? this.options.wsFactory(wsUrl, wsOptions) : new WebSocket(wsUrl, wsOptions);
     this.ws = ws;
+    let handshakeRejected = false;
     ws.on("open", () => {
       if (this.ws !== ws) return;
       if (!this.shouldConnect) return;
@@ -20314,8 +20488,27 @@ var DaemonConnection = class {
       this.options.onDisconnect();
       this.scheduleReconnect();
     });
+    ws.on("unexpected-response", (_request, response) => {
+      if (this.ws !== ws) return;
+      handshakeRejected = true;
+      const reason = normalizeHandshakeReason(response.headers["slock-reason"]);
+      const statusCode = response.statusCode ?? 0;
+      const reasonText = reason ? `, slock_reason=${reason}` : "";
+      logger.error(`[Daemon] WebSocket handshake rejected (status=${statusCode}${reasonText})`);
+      this.trace("daemon.connection.handshake_rejected", {
+        status_code: statusCode,
+        slock_reason_present: Boolean(reason),
+        slock_reason: reason
+      }, "error");
+      response.resume();
+      try {
+        ws.terminate();
+      } catch {
+      }
+    });
     ws.on("error", (err) => {
       if (this.ws !== ws) return;
+      if (handshakeRejected) return;
       logger.error(`[Daemon] WebSocket error: ${err.message}`);
       this.trace("daemon.connection.error", {
         error_class: err.name || "Error"
@@ -21333,7 +21526,7 @@ var DAEMON_CORE_TRACE_ATTR_CONTRACTS = {
     spanAttrs: ["agentId", "event_kind", "runtime"]
   }
 };
-var DAEMON_CLI_USAGE = "Usage: slock-daemon --server-url <url> --api-key <key>";
+var DAEMON_CLI_USAGE = `Usage: slock-daemon --server-url <url> (--api-key <key> or ${DAEMON_API_KEY_ENV}=<key>)`;
 var RunnerCredentialMintError2 = class extends Error {
   code;
   retryable;
@@ -21369,9 +21562,9 @@ function runnerCredentialErrorDetail2(error) {
 async function waitForRunnerCredentialRetry2() {
   await new Promise((resolve) => setTimeout(resolve, RUNNER_CREDENTIAL_MINT_RETRY_DELAY_MS2));
 }
-function parseDaemonCliArgs(args) {
+function parseDaemonCliArgs(args, env = {}) {
   let serverUrl = "";
-  let apiKey = "";
+  let apiKey = env[DAEMON_API_KEY_ENV] ?? "";
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--server-url" && args[i + 1]) serverUrl = args[++i];
     if (args[i] === "--api-key" && args[i + 1]) apiKey = args[++i];
@@ -21408,7 +21601,7 @@ function resolveSlockCliPathOrEmpty(moduleUrl = import.meta.url) {
 }
 async function runBundledSlockCli(argv) {
   process.argv = [process.execPath, "slock", ...argv];
-  await import("./dist-Y3VRAU5E.js");
+  await import("./dist-IHHGSWH2.js");
 }
 function detectRuntimes(tracer = noopTracer) {
   const ids = [];
@@ -22350,6 +22543,8 @@ var DaemonCore = class {
 
 export {
   subscribeDaemonLogs,
+  DAEMON_API_KEY_ENV,
+  scrubDaemonAuthEnv,
   resolveWorkspaceDirectoryPath,
   scanWorkspaceDirectories,
   deleteWorkspaceDirectory,

package/dist/cli/index.js

@@ -44746,6 +44746,9 @@ init_esm_shims();
 // ../shared/src/agentScopes.ts
 init_esm_shims();
 
+// ../shared/src/docs/crossPageInvariants.ts
+init_esm_shims();
+
 // ../shared/src/testing/failpoints.ts
 init_esm_shims();
 var NoopFailpointRegistry = class {
@@ -44853,6 +44856,7 @@ var AGENT_ACTIVITY_DETAIL_KINDS = [
   "compaction_stale",
   "reviewing_changes",
   "review_finished",
+  "review_stale",
   "runtime_reconnecting",
   "runtime_error",
   "runtime_crashed",
@@ -51041,6 +51045,9 @@ function formatClaimResults(channel, data) {
       const msgShort = r.messageId ? r.messageId.slice(0, 8) : "";
       return `${label} (msg:${msgShort}): claimed`;
     }
+    if (r.reason === "already claimed by you") {
+      return `${label}: already claimed by you.`;
+    }
     return `${label}: FAILED \u2014 ${r.reason || "already claimed"}. Do not work on this task unless an owner/admin explicitly redirects it to you.`;
   });
   const succeeded = data.results.filter((r) => r.success).length;

package/dist/core.js

@@ -1,4 +1,5 @@
 import {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DAEMON_CORE_TRACE_ATTR_CONTRACTS,
   DaemonCore,
@@ -11,9 +12,11 @@ import {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
-} from "./chunk-RXK2KSYW.js";
+} from "./chunk-FRBMWZ3P.js";
 export {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DAEMON_CORE_TRACE_ATTR_CONTRACTS,
   DaemonCore,
@@ -26,5 +29,6 @@ export {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
 };

package/dist/{dist-Y3VRAU5E.js → dist-IHHGSWH2.js}

@@ -44281,6 +44281,7 @@ init_esm_shims();
 init_esm_shims();
 init_esm_shims();
 init_esm_shims();
+init_esm_shims();
 var NoopFailpointRegistry = class {
   get enabled() {
     return false;
@@ -44382,6 +44383,7 @@ var AGENT_ACTIVITY_DETAIL_KINDS = [
   "compaction_stale",
   "reviewing_changes",
   "review_finished",
+  "review_stale",
   "runtime_reconnecting",
   "runtime_error",
   "runtime_crashed",
@@ -50421,6 +50423,9 @@ function formatClaimResults(channel, data) {
       const msgShort = r.messageId ? r.messageId.slice(0, 8) : "";
       return `${label} (msg:${msgShort}): claimed`;
     }
+    if (r.reason === "already claimed by you") {
+      return `${label}: already claimed by you.`;
+    }
     return `${label}: FAILED \u2014 ${r.reason || "already claimed"}. Do not work on this task unless an owner/admin explicitly redirects it to you.`;
   });
   const succeeded = data.results.filter((r) => r.success).length;

package/dist/index.js

@@ -2,11 +2,13 @@
 import {
   DAEMON_CLI_USAGE,
   DaemonCore,
-  parseDaemonCliArgs
-} from "./chunk-RXK2KSYW.js";
+  parseDaemonCliArgs,
+  scrubDaemonAuthEnv
+} from "./chunk-FRBMWZ3P.js";
 
 // src/index.ts
-var parsedArgs = parseDaemonCliArgs(process.argv.slice(2));
+var parsedArgs = parseDaemonCliArgs(process.argv.slice(2), process.env);
+scrubDaemonAuthEnv(process.env);
 if (!parsedArgs) {
   console.error(DAEMON_CLI_USAGE);
   process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/raft-daemon",
-  "version": "0.68.0",
+  "version": "0.69.0-play.20260704183824",
   "type": "module",
   "bin": {
     "raft-daemon": "dist/raft-daemon.js",