@botiverse/raft-daemon 0.69.0 → 0.70.0

package/dist/{chunk-URPIDKXK.js → chunk-QDPBPYD7.js}

@@ -2225,7 +2225,12 @@ var agentApiIntegrationLoginResponseSchema = passthroughObject({
   status: z2.enum(["logged_in", "already_logged_in", "approval_required"]),
   service: agentApiIntegrationServiceSchema,
   scopes: z2.array(z2.string()),
-  requestId: z2.string(),
+  requestId: z2.string().optional(),
+  session: passthroughObject({
+    status: z2.literal("stored"),
+    source: z2.enum(["cache", "fresh"]),
+    path: nullableStringSchema
+  }).optional(),
   approval: passthroughObject({
     requestId: z2.string(),
     target: nullableStringSchema,
@@ -3739,6 +3744,8 @@ var DISPLAY_PLAN_CONFIG = {
   }
 };
 var FREE_MONTHLY_FILE_UPLOAD_LIMIT_BYTES = 100 * 1024 * 1024;
+var FREE_SINGLE_FILE_UPLOAD_LIMIT_BYTES = 50 * 1024 * 1024;
+var PRO_SINGLE_FILE_UPLOAD_LIMIT_BYTES = 200 * 1024 * 1024;
 var TRIAL_START_DATE = /* @__PURE__ */ new Date("2026-04-18T00:00:00Z");
 var TRIAL_END_DATE = /* @__PURE__ */ new Date("2026-06-23T12:00:00Z");
 var TRIAL_DURATION_DAYS = (TRIAL_END_DATE.getTime() - TRIAL_START_DATE.getTime()) / (24 * 60 * 60 * 1e3);
@@ -4237,7 +4244,7 @@ Threads are sub-conversations attached to a specific message. They let you discu
 - When you receive a message from a thread (the target has a \`:shortid\` suffix), **always reply using that same target** to keep the conversation in the thread.
 - **Start a new thread**: Use the \`msg=\` field from the header as the thread suffix. For example, if you see \`[target=#general msg=00000000 ...]\`, reply with \`raft message send --target "#general:00000000" <<'${D}'\` followed by the message body and \`${D}\`. The thread will be auto-created if it doesn't exist yet. Example IDs like \`00000000\` are placeholders; real message IDs come from received messages.
 - When you send a message, the response includes the message ID. You can use it to start a thread on your own message.
-- You can read thread history: \`raft message read --channel "#general:00000000"\`
+- You can read thread history: \`raft message read --target "#general:00000000"\`
 - You can stop receiving ordinary delivery for a thread with \`raft thread unfollow --target "#general:00000000"\`. Only do this when your work in that thread is clearly complete or no longer relevant.
 - Threads cannot be nested \u2014 you cannot start a thread inside a thread.`;
 }
@@ -4245,7 +4252,7 @@ function buildDiscoverySection() {
   return `### Discovering people and channels
 
 Call \`raft server info\` to see all channels in this server, which ones you have joined, other agents, and humans.
-Visible public channels may appear even when \`joined=false\`. In that state you can still inspect them with \`raft message read\` and \`raft channel members\`, but you cannot send messages there or receive ordinary channel delivery until you join with \`raft channel join --target "#channel-name"\`. Private channels require a human with access to add you. To leave a regular channel you have joined, use \`raft channel leave --target "#channel-name"\`. To mute ordinary Activity delivery without leaving a regular channel, use \`raft channel mute "#channel-name"\`; personal @mentions and DMs still pierce (a task pierces only when it personally @mentions you), and thread following is separate. To reverse that setting, use \`raft channel unmute "#channel-name"\`. To stop following a thread without leaving its parent channel, use \`raft thread unfollow --target "#channel-name:shortid"\`.
+Visible public channels may appear even when \`joined=false\`. In that state you can still inspect them with \`raft message read\` and \`raft channel members\`, but you cannot send messages there or receive ordinary channel delivery until you join with \`raft channel join --target "#channel-name"\`. Private channels require a human with access to add you. To leave a regular channel you have joined, use \`raft channel leave --target "#channel-name"\`. To mute ordinary Activity delivery without leaving a regular channel, use \`raft channel mute --target "#channel-name"\`; personal @mentions and DMs still pierce (a task pierces only when it personally @mentions you), and thread following is separate. To reverse that setting, use \`raft channel unmute --target "#channel-name"\`. To stop following a thread without leaving its parent channel, use \`raft thread unfollow --target "#channel-name:shortid"\`.
 Private channels are membership-gated. If \`raft server info\` shows a channel as private, treat its name, members, and content as private to that channel; do not disclose that information in other channels, DMs, summaries, or task reports unless a human explicitly asks within an authorized context. In \`raft channel members\`, human role labels such as owner/admin show server-level authority; no role label means ordinary member.`;
 }
 function buildChannelAwarenessSection() {
@@ -4259,9 +4266,9 @@ Each channel has a **name** and optionally a **description** that define its pur
 function buildReadingHistorySection() {
   return `### Reading history
 
-\`raft message read --channel "#channel-name"\` or \`raft message read --channel dm:@peer-name\` or \`raft message read --channel "#channel:shortid"\`
+\`raft message read --target "#channel-name"\` or \`raft message read --target dm:@peer-name\` or \`raft message read --target "#channel:shortid"\`
 
-To jump directly to a specific hit with nearby context, use \`raft message read --channel "..." --around "messageId"\` or \`raft message read --channel "..." --around 12345\`.`;
+To jump directly to a specific hit with nearby context, use \`raft message read --target "..." --around "messageId"\` or \`raft message read --target "..." --around 12345\`.`;
 }
 function buildHistoricalReferencesSection() {
   return `### Historical references
@@ -4290,7 +4297,7 @@ Only top-level channel / DM messages can become tasks. Messages inside threads a
 **Assignee** is independent from status \u2014 a task can be claimed or unclaimed at any status except \`done\`.
 
 **Workflow:**
-1. Receive a message that requires action \u2192 claim it first (by task number if already a task, or by message ID if it's a regular message). Use repeat flags: \`raft task claim --channel "#channel" --number 1 --number 2\` or \`raft task claim --channel "#channel" --message-id abc12345\`.
+1. Receive a message that requires action \u2192 claim it first (by task number if already a task, or by message ID if it's a regular message). Use repeat flags: \`raft task claim --target "#channel" --number 1 --number 2\` or \`raft task claim --target "#channel" --message-id abc12345\`.
 2. If the claim fails, someone else is working on it \u2014 do not work on that task unless an owner/admin explicitly redirects it to you
 3. Post updates in the task's thread: \`raft message send --target "#channel:msgShortId" <<'${D}'\` followed by the message body and \`${D}\`
 4. When done, set status to \`in_review\` so a human can validate via \`raft task update\`
@@ -4302,7 +4309,7 @@ Only top-level channel / DM messages can become tasks. Messages inside threads a
 - \`raft task create\` only creates the task \u2014 to own it, call \`raft task claim\` afterward.
 - Typical uses for \`raft task create\` are breaking down a larger task into parallel subtasks, or batch-creating genuinely new work for others to claim.
 - If someone already sent the work item as a message, just claim that existing message/task instead of creating a new one.
-- If the work already exists as a message, reuse it via \`raft task claim --channel "#channel" --message-id abc12345\`.
+- If the work already exists as a message, reuse it via \`raft task claim --target "#channel" --message-id abc12345\`.
 
 **Creating new tasks:**
 - The task system exists to prevent duplicate work. If you see an existing task for the work, either claim that task or leave it alone.
@@ -4521,7 +4528,7 @@ function buildPrompt(config, opts) {
   const channelAwarenessSection = cliGuideSections.channelAwareness;
   const thirdPartyIntegrationsSection = `### Third-party integrations
 
-If a built-in Slock app or registered third-party service requires login, use Slock Agent Login through the CLI instead of asking the human to copy tokens or complete human OAuth for you. If a human asks you to sign into, open, use, or fetch identity from a third-party app or built-in Slock app, first run \`raft integration list\` and match the app to a listed service before browsing the app. Use \`raft integration login --service <service>\` to provision or reuse your agent login for that service. If the service exposes manifest-backed HTTP API actions, prefer \`raft integration invoke --service <service> --list-actions\` and then \`raft integration invoke --service <service> --action <name>\`; the CLI performs the stateless Agent Login callback handoff and service-session setup for you. If the service exposes an agent behavior manifest and you need to run its local CLI, run \`raft integration env --service <service>\` before invoking that CLI; if it prints exports, apply them first so service credentials stay under a per-agent profile HOME/XDG tree instead of the host user's global HOME. If it reports that no local env is required, do not invent HOME/XDG overrides; for HTTP API action services, use \`raft integration invoke\` instead. If it fails, do not run that local CLI with the host user's HOME; report that the service manifest is unsupported. Slock does not execute local commands from remote manifests automatically. If the CLI reports that the \`integration\` command is unknown, the local daemon/CLI is too old for Slock Agent Login; report that the machine must be upgraded/restarted instead of calling internal HTTP endpoints yourself. When \`raft integration login\` returns \`Agent login ready\` or \`Already logged in\`, the agent-side login is ready. If the output includes a service callback handoff URL, treat it as a stateless Login with Raft API-action session handoff URL; prefer \`raft integration invoke\` over manually opening or curling it. Do not crawl third-party routes looking for a session before trying the registered-service login path. Do not open the human \`Login with Slock\` browser flow, use internal request IDs as OAuth callback codes outside the documented CLI flow, call internal Slock integration endpoints directly, or call third-party exchange endpoints unless a human explicitly asks you to debug that server-to-server protocol. If the service or human asks for your Slock Agent identity card, use \`raft profile show\`. Third-party pages may show \`Login with Slock\`; for agent-facing access, prefer the listed service / Slock Agent Login path.`;
+If a built-in Slock app or registered third-party service requires login, use Slock Agent Login through the CLI instead of asking the human to copy tokens or complete human OAuth for you. If a human asks you to sign into, open, use, or fetch identity from a third-party app or built-in Slock app, first run \`raft integration list\` and match the app to a listed service before browsing the app. Use \`raft integration login --service <service>\` to provision or reuse your agent login for that service; the CLI consumes the one-time Agent Login handoff internally and stores the service-owned session for this agent, so the successful output should be \`Agent login ready\` / \`Already logged in\`, not a raw request code you need to keep. If the service exposes manifest-backed HTTP API actions, prefer \`raft integration invoke --service <service> --list-actions\` and then \`raft integration invoke --service <service> --action <name>\`; the CLI uses the stored service session or refreshes it internally. If the service exposes an agent behavior manifest and you need to run its local CLI, run \`raft integration env --service <service>\` before invoking that CLI; if it prints exports, apply them first so service credentials stay under a per-agent profile HOME/XDG tree instead of the host user's global HOME. If it reports that no local env is required, do not invent HOME/XDG overrides; for HTTP API action services, use \`raft integration invoke\` instead. If it fails, do not run that local CLI with the host user's HOME; report that the service manifest is unsupported. Slock does not execute local commands from remote manifests automatically. If the CLI reports that the \`integration\` command is unknown, the local daemon/CLI is too old for Slock Agent Login; report that the machine must be upgraded/restarted instead of calling internal HTTP endpoints yourself. Do not store or reuse raw \`oauth_access_request\` request codes; those are one-time compatibility handoffs for services to exchange once for their own session/token. Prefer \`raft integration invoke\` over manually opening or curling callback URLs. Do not crawl third-party routes looking for a session before trying the registered-service login path. Do not open the human \`Login with Slock\` browser flow, use internal request IDs as OAuth callback codes outside the documented CLI flow, call internal Slock integration endpoints directly, or call third-party exchange endpoints unless a human explicitly asks you to debug that server-to-server protocol. If the service or human asks for your Slock Agent identity card, use \`raft profile show\`. Third-party pages may show \`Login with Slock\`; for agent-facing access, prefer the listed service / Slock Agent Login path.`;
   const readingHistorySection = cliGuideSections.readingHistory;
   const historicalReferenceSection = cliGuideSections.historicalReferences;
   const tasksSection = cliGuideSections.tasks;
@@ -13371,24 +13378,38 @@ function safeSessionFilename(value) {
   const normalized = value.replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return normalized || "unknown-session";
 }
-function writeRuntimeSessionHandoff(runtime, sessionId, fallbackDir) {
+function writeRuntimeSessionHandoff(runtime, sessionId, fallbackDir, join, resolve) {
   try {
     const dir = path14.join(fallbackDir, ".slock", "runtime-sessions");
     mkdirSync4(dir, { recursive: true });
     const filePath = path14.join(dir, `${runtime}-${safeSessionFilename(sessionId)}.jsonl`);
+    const searchedPaths = resolve?.searchedPaths ?? [];
     writeFileSync4(filePath, JSON.stringify({
       type: "runtime_session_handoff",
       runtime,
       sessionId,
+      // Persisted L1<->L2 join keys (#460 V3): without these the
+      // session->launch mapping lives only in daemon memory and old L1
+      // transcripts can never re-join their launch after restart/adopt.
+      // ids-only, closed fields (no content payload).
+      launchId: join?.launchId ?? null,
+      processInstanceId: join?.processInstanceId ?? null,
+      // Negative-space (fruit#0 pt2): a resolve-miss is explicit evidence, not a
+      // silent "not found". Recording the lookup method + the directories checked
+      // makes "looked in the wrong place" distinguishable from "looked in the right
+      // place and it is genuinely absent". ids/paths only — no transcript content.
+      resolveStatus: "transcript_resolve_missing",
+      lookupMethod: resolve?.lookupMethod ?? "none",
+      searchedPaths,
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      note: "The native runtime transcript file was not found on this machine; this daemon-created handoff records the runtime session identity for diagnostics."
+      note: "The native runtime transcript file was not found on this machine; this daemon-created handoff records the runtime session identity + the directories checked for diagnostics."
     }) + "\n", { mode: 384 });
     return {
       label: sessionId,
       path: filePath,
       runtime,
       reachable: true,
-      reason: "native session file path not found; using daemon handoff file"
+      reason: `native session file path not found; using daemon handoff file; searched=[${searchedPaths.join(", ")}]`
     };
   } catch {
     return null;
@@ -13413,12 +13434,16 @@ function ensureRuntimeHomeDir(config, defaultHomeDir, workspacePath, opts = {})
 function resolveRuntimeSessionRef(runtime, sessionId, homeDir = os6.homedir(), fallbackDir, opts) {
   let resolvedPath = null;
   let lookupMethod = "none";
+  const searchedPaths = [];
   if (runtime === "claude") {
     lookupMethod = "claude_jsonl";
-    resolvedPath = findSessionJsonl(path14.join(homeDir, ".claude", "projects"), (filename) => filename === `${sessionId}.jsonl`);
+    const claudeRoot = path14.join(homeDir, ".claude", "projects");
+    searchedPaths.push(claudeRoot);
+    resolvedPath = findSessionJsonl(claudeRoot, (filename) => filename === `${sessionId}.jsonl`);
   } else if (runtime === "codex") {
     lookupMethod = "codex_jsonl";
     for (const root of codexSessionRootCandidates(homeDir)) {
+      searchedPaths.push(root);
       resolvedPath = findSessionJsonl(root, (filename) => filename.endsWith(".jsonl") && filename.includes(sessionId));
       if (resolvedPath) break;
     }
@@ -13430,7 +13455,13 @@ function resolveRuntimeSessionRef(runtime, sessionId, homeDir = os6.homedir(), f
     resolvedPath = findPiSessionFile2(sessionId, opts?.workingDirectory, homeDir);
   }
   if (!resolvedPath && fallbackDir) {
-    const fallback = writeRuntimeSessionHandoff(runtime, sessionId, fallbackDir);
+    const fallback = writeRuntimeSessionHandoff(
+      runtime,
+      sessionId,
+      fallbackDir,
+      { launchId: opts?.launchId, processInstanceId: opts?.processInstanceId },
+      { lookupMethod, searchedPaths }
+    );
     if (fallback) {
       return {
         ...fallback,
@@ -13445,7 +13476,7 @@ function resolveRuntimeSessionRef(runtime, sessionId, homeDir = os6.homedir(), f
     reachable: Boolean(resolvedPath)
   };
   if (!resolvedPath) {
-    ref.reason = `session file path not found; attempted_lookup=${lookupMethod}`;
+    ref.reason = `session file path not found; attempted_lookup=${lookupMethod}; searched=[${searchedPaths.join(", ")}]`;
   }
   return ref;
 }
@@ -13499,7 +13530,7 @@ function formatIncomingMessage(message, options = {}) {
     `[Slock thread context: you were added to a new thread via @mention.]`,
     `parent: ${message.thread_join_context.parent_target}`,
     `thread: ${message.thread_join_context.thread_target}`,
-    `suggested next step: raft message read --channel "${message.thread_join_context.suggested_read_history_target}"`,
+    `suggested next step: raft message read --target "${message.thread_join_context.suggested_read_history_target}"`,
     "",
     "Parent message:",
     formatThreadContextMessage(message.thread_join_context.parent_message),
@@ -15329,7 +15360,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: activity.statusEntry.detailKind ?? "daemon_activity",
       entries: activity.entries,
       launchId: ap?.launchId || void 0,
-      clientSeq: ap ? this.nextActivityClientSeq(agentId) : void 0
+      clientSeq: ap ? this.nextActivityClientSeq(agentId) : void 0,
+      isHeartbeat: false
     });
   }
   recordRuntimeDiagnosticActivity(agentId, ap, event) {
@@ -15342,7 +15374,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: ap.lastActivityDetailKind || "none",
       entries: [runtimeDiagnosticTrajectoryEntry(event)],
       launchId: ap.launchId || void 0,
-      clientSeq: this.nextActivityClientSeq(agentId)
+      clientSeq: this.nextActivityClientSeq(agentId),
+      isHeartbeat: false
     });
     this.recordDaemonTrace("daemon.runtime.diagnostic", {
       agentId,
@@ -15393,7 +15426,8 @@ var AgentProcessManager = class _AgentProcessManager {
       detailKind: ap.lastActivityDetailKind || "none",
       entries: [runtimeRecoveryTrajectoryEntry(event)],
       launchId: ap.launchId || void 0,
-      clientSeq: this.nextActivityClientSeq(agentId)
+      clientSeq: this.nextActivityClientSeq(agentId),
+      isHeartbeat: false
     });
     this.recordDaemonTrace("daemon.runtime.recovery.visible", {
       agentId,
@@ -15641,7 +15675,8 @@ var AgentProcessManager = class _AgentProcessManager {
     this.lifecycleRecords.setRestartSnapshot(agentId, {
       config: this.buildRestartSafeConfig(ap.config, nextConfigSessionId),
       sessionId: nextConfigSessionId,
-      launchId: nextLaunchId
+      launchId: nextLaunchId,
+      processInstanceId: ap.processInstanceId
     });
     this.recordStartRebind(agentId, start, reason, previousLaunchId, nextLaunchId, nextSessionId);
     this.sendAgentStatus(agentId, "active", nextLaunchId);
@@ -16072,6 +16107,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
           config: this.buildRestartSafeConfig(runtimeConfig, runtimeConfig.sessionId || null),
           sessionId: runtimeConfig.sessionId || null,
           launchId: effectiveLaunchId
+          // No live AgentProcess in this adoption branch — omit rather than
+          // fabricate; the marker's processInstanceId is nullable by contract.
         });
         this.sendAgentStatus(agentId, "active", effectiveLaunchId);
         this.broadcastActivity(agentId, "online", "Process idle", [], void 0, "idle");
@@ -16161,7 +16198,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       this.lifecycleRecords.setRestartSnapshot(agentId, {
         config: this.buildRestartSafeConfig(runtimeConfig, restartSessionId),
         sessionId: restartSessionId,
-        launchId: effectiveLaunchId
+        launchId: effectiveLaunchId,
+        processInstanceId: agentProcess.processInstanceId
       });
       if (pendingStartRebind) {
         this.recordStartRebind(agentId, pendingStartRebind, "startup_registered", originalLaunchId, effectiveLaunchId, agentProcess.sessionId);
@@ -16363,7 +16401,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
               this.lifecycleRecords.setRestartSnapshot(agentId, {
                 config: nextConfig,
                 sessionId: ap.sessionId,
-                launchId: ap.launchId
+                launchId: ap.launchId,
+                processInstanceId: ap.processInstanceId
               });
               this.broadcastMessageReceivedActivity(agentId);
               this.lifecycleRecords.deleteRestartSnapshot(agentId);
@@ -16381,7 +16420,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
                   this.lifecycleRecords.setRestartSnapshot(agentId, {
                     config: nextConfig,
                     sessionId: ap.sessionId,
-                    launchId: ap.launchId
+                    launchId: ap.launchId,
+                    processInstanceId: ap.processInstanceId
                   });
                   const report = this.recordSpawnFailure(agentId, "runner_credential_mint");
                   this.assertStartPendingDeliveryInvariants("queued-continuation-runner-credential-mint-failure");
@@ -16401,7 +16441,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
                 this.lifecycleRecords.setRestartSnapshot(agentId, {
                   config: nextConfig,
                   sessionId: ap.sessionId,
-                  launchId: ap.launchId
+                  launchId: ap.launchId,
+                  processInstanceId: ap.processInstanceId
                 });
                 this.broadcastActivity(agentId, "online", "Process idle", [], void 0, "idle");
               });
@@ -16410,7 +16451,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
             this.lifecycleRecords.setRestartSnapshot(agentId, {
               config: this.buildRestartSafeConfig(ap.config, ap.sessionId),
               sessionId: ap.sessionId,
-              launchId: ap.launchId
+              launchId: ap.launchId,
+              processInstanceId: ap.processInstanceId
             });
             if (!ap.driver.supportsStdinNotification) {
               logger.info(`[Agent ${agentId}] Turn completed; cached idle state for future restart`);
@@ -16422,7 +16464,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
               this.lifecycleRecords.setRestartSnapshot(agentId, {
                 config: this.buildRestartSafeConfig(ap.config, ap.sessionId),
                 sessionId: ap.sessionId,
-                launchId: ap.launchId
+                launchId: ap.launchId,
+                processInstanceId: ap.processInstanceId
               });
               logger.warn(`[Agent ${agentId}] Recoverable provider stream failure (${reason}) \u2014 keeping agent wakeable`);
               this.sendAgentStatus(agentId, "active", ap.launchId);
@@ -16638,7 +16681,8 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
     this.lifecycleRecords.setRestartSnapshot(agentId, {
       config: retryConfig,
       sessionId: retrySessionId,
-      launchId: ap.launchId
+      launchId: ap.launchId,
+      processInstanceId: ap.processInstanceId
     });
     this.recordDaemonTrace("daemon.agent.startup_timeout.retry_config_cached", {
       agentId,
@@ -17552,7 +17596,7 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
     }
     return result;
   }
-  buildRuntimeProfileReport(agentId, config, sessionId, launchId, observedRuntimeHomeDir) {
+  buildRuntimeProfileReport(agentId, config, sessionId, launchId, observedRuntimeHomeDir, processInstanceId) {
     const workspacePath = path14.join(this.dataDir, agentId);
     const runtimeHomeDir = observedRuntimeHomeDir || resolveRuntimeHomeDir(config, this.runtimeSessionHomeDir, workspacePath, { agentId, slockHome: this.slockHome });
     return {
@@ -17568,7 +17612,16 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
           path: workspacePath,
           reachable: true
         },
-        sessionRef: sessionId ? resolveRuntimeSessionRef(config.runtime, sessionId, runtimeHomeDir, workspacePath, { agentId, workingDirectory: workspacePath }) : null
+        sessionRef: sessionId ? resolveRuntimeSessionRef(config.runtime, sessionId, runtimeHomeDir, workspacePath, {
+          agentId,
+          workingDirectory: workspacePath,
+          // Join keys come from the CALLER's context (running agent OR idle
+          // restart snapshot) — reading only live state here left the
+          // restart/adopt path writing launchId:null markers, exactly the
+          // V3 class this exists to close (Leiysky review on #3863).
+          launchId: launchId || void 0,
+          processInstanceId: processInstanceId ?? this.agents.get(agentId)?.processInstanceId
+        }) : null
       }
     };
   }
@@ -17580,12 +17633,13 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
         running.config,
         running.sessionId,
         running.launchId,
-        running.runtime.currentRuntimeHomeDir
+        running.runtime.currentRuntimeHomeDir,
+        running.processInstanceId
       );
     }
     const idle = this.lifecycleRecords.getRestartSnapshot(agentId);
     if (idle) {
-      return this.buildRuntimeProfileReport(agentId, idle.config, idle.sessionId, idle.launchId);
+      return this.buildRuntimeProfileReport(agentId, idle.config, idle.sessionId, idle.launchId, null, idle.processInstanceId);
     }
     return null;
   }
@@ -17983,7 +18037,9 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
     }
     const ref = resolveRuntimeSessionRef(runtime, actualSessionId, homeDir, workspaceDir, {
       agentId,
-      workingDirectory: workspaceDir
+      workingDirectory: workspaceDir,
+      launchId: this.agents.get(agentId)?.launchId || void 0,
+      processInstanceId: this.agents.get(agentId)?.processInstanceId
     });
     const tier = runtimeTier(runtime);
     const span = this.tracer.startSpan("daemon.session_transcript.read", {
@@ -18251,9 +18307,10 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       entries,
       launchId,
       clientSeq,
-      producerFactId
+      producerFactId,
+      isHeartbeat: false
     });
-    this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, entries, ap, launchId, clientSeq, producerFactId);
+    this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, entries, ap, launchId, clientSeq, producerFactId, false);
     if (ap) {
       ap.lastActivityKind = activityKind;
       ap.lastActivity = activityDisplay;
@@ -18279,9 +18336,12 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
               detailKind: ap.lastActivityDetailKind,
               launchId: heartbeatLaunchId,
               clientSeq: heartbeatClientSeq,
-              producerFactId: heartbeatProducerFactId
+              producerFactId: heartbeatProducerFactId,
+              // The one knowing site: this timer re-broadcasts stale
+              // lastActivity, so it declares its replay provenance.
+              isHeartbeat: true
             });
-            this.recordActivityProducedTrace(agentId, ap.lastActivityKind, ap.lastActivityDetail, ap.lastActivityDetailKind, [], ap, heartbeatLaunchId, heartbeatClientSeq, heartbeatProducerFactId);
+            this.recordActivityProducedTrace(agentId, ap.lastActivityKind, ap.lastActivityDetail, ap.lastActivityDetailKind, [], ap, heartbeatLaunchId, heartbeatClientSeq, heartbeatProducerFactId, true);
           }, ACTIVITY_HEARTBEAT_MS);
           ap.activityHeartbeat = { kind: "active", timer };
         }
@@ -18290,7 +18350,7 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       }
     }
   }
-  recordActivityProducedTrace(agentId, activityKind, detail, detailKind, entries, ap, launchId, clientSeq, producerFactId) {
+  recordActivityProducedTrace(agentId, activityKind, detail, detailKind, entries, ap, launchId, clientSeq, producerFactId, isHeartbeat) {
     const runtimeContext = ap?.config.runtimeContext;
     this.recordDaemonTrace("daemon.agent.activity.produced", {
       agentId,
@@ -18312,6 +18372,11 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       client_seq_present: typeof clientSeq === "number",
       producerFactId,
       producer_fact_id: producerFactId,
+      // #460 V1: the wire's producer-declared replay-provenance bit must be
+      // independently verifiable from daemon-side evidence (L2<->L3 seam);
+      // closed boolean, mirrors the agent:activity isHeartbeat field exactly.
+      isHeartbeat,
+      is_heartbeat: isHeartbeat,
       correlation_id: `agent:${agentId}:daemonActivity:${launchId ?? "legacy"}:${clientSeq ?? "unsequenced"}`,
       session_id_present: Boolean(ap?.sessionId),
       runtime: ap?.config.runtime
@@ -18360,9 +18425,10 @@ Use \`raft message read\` to catch up on the channels listed above, then stop. R
       launchId,
       probeId,
       clientSeq,
-      producerFactId
+      producerFactId,
+      isHeartbeat: false
     });
-    this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, [], ap, launchId, clientSeq, producerFactId);
+    this.recordActivityProducedTrace(agentId, activityKind, detail, detailKind, [], ap, launchId, clientSeq, producerFactId, false);
   }
   flushPendingTrajectory(agentId) {
     const ap = this.agents.get(agentId);
@@ -21409,7 +21475,17 @@ var DAEMON_CORE_TRACE_ATTR_CONTRACTS = {
     spanAttrs: ["running_agents_count", "idle_agents_count"]
   },
   "daemon.agent.activity.produced": {
-    spanAttrs: ["agentId", "agent_id", "server_id", "machine_id", "activity", "detail_present", "entry_kinds", "ap_present", "launchId", "launch_id", "launch_id_present", "clientSeq", "client_seq", "client_seq_present", "correlation_id", "session_id_present", "runtime"]
+    // isHeartbeat/is_heartbeat (#460 V1) and process_instance_id (#460 V3)
+    // were emitted by agentProcessManager but scrubbed here (pilot violation
+    // V4): this list is a RUNTIME allowlist (SpanAttrContractTracer), so an
+    // emission-site key that is not added here silently dies before disk.
+    // Witness for the pair lives in agentProcessManager.builtin.e2e.test.ts
+    // behind a contract-wrapped tracer (production-isomorphic oracle).
+    // producerFactId/producer_fact_id and activity_kind/detail_kind are ALSO
+    // emitted-and-scrubbed today; deliberately NOT added here — banned-join-
+    // key discipline for the fact id (#460 classification ruling) means
+    // widening needs its own ruling, not a drive-by.
+    spanAttrs: ["agentId", "agent_id", "server_id", "machine_id", "activity", "detail_present", "entry_kinds", "ap_present", "launchId", "launch_id", "launch_id_present", "clientSeq", "client_seq", "client_seq_present", "correlation_id", "session_id_present", "runtime", "isHeartbeat", "is_heartbeat", "process_instance_id"]
   },
   "daemon.agent.activity.skipped": {
     spanAttrs: ["agentId", "event_kind", "reason", "text_length"]
@@ -21493,7 +21569,7 @@ function resolveSlockCliPathOrEmpty(moduleUrl = import.meta.url) {
 }
 async function runBundledSlockCli(argv) {
   process.argv = [process.execPath, "slock", ...argv];
-  await import("./dist-P3SAWND7.js");
+  await import("./dist-I6ATP6I5.js");
 }
 function detectRuntimes(tracer = noopTracer) {
   const ids = [];