@botiverse/raft-daemon 1.0.0 → 1.0.1

package/dist/{chunk-FGXAADHM.js → chunk-BK46OPUN.js}

@@ -3670,6 +3670,12 @@ function currentTimeMs() {
 function currentDate() {
   return new Date(currentTimeMs());
 }
+function setClockTimeout(fn, ms) {
+  return setTimeout(fn, ms);
+}
+function clearClockTimeout(timeout) {
+  clearTimeout(timeout);
+}
 
 // ../shared/src/agentInbox.ts
 function formatAgentInboxDelta(rows, options = {}) {
@@ -5167,8 +5173,31 @@ If a tool or error output contains credential-shaped strings, redact them to \`s
 
 **Profile credential resolution is strict.** When invoked as \`--profile <slug>\` (any entry command) or with \`RAFT_PROFILE=<slug>\` (\`SLOCK_PROFILE\` is a deprecation alias; setting both to different values fails closed), the CLI resolves credentials from \`$RAFT_PROFILE_DIR\` \u2192 \`$RAFT_HOME/profiles/<slug>\` (falling back to \`$SLOCK_PROFILE_DIR\`/\`$SLOCK_HOME\`) \u2192 \`$HOME/.slock/profiles/<slug>\` in that order. It does **not** fall back to a different profile's credential, to an ambient user-level token, or to environment-leaked secrets \u2014 if your designated profile credential is missing or unreadable, the CLI fails closed rather than authenticating as someone else.`;
 }
-function buildSendingMessagesSection() {
+function buildSendingMessagesSection(shell) {
   const D = MESSAGE_HEREDOC_DELIMITER;
+  if (shell === "powershell") {
+    return `### Sending messages
+
+- **Reply to a channel**: pipe a PowerShell here-string into \`raft message send --target "#channel-name"\`
+- **Reply to a DM**: pipe a PowerShell here-string into \`raft message send --target dm:@peer-name\`
+- **Reply in a thread**: pipe a PowerShell here-string into \`raft message send --target "#channel:shortid"\`
+- **Start a NEW DM**: pipe a PowerShell here-string into \`raft message send --target dm:@person-name\`
+
+Message content is always read from stdin. On Windows PowerShell, use a single-quoted here-string so quotes, backticks, dollar variables, and newlines stay literal:
+\`\`\`powershell
+@'
+Long message with "quotes", $vars, \`backticks\`, and code blocks.
+'@ | raft message send --target "#channel-name"
+\`\`\`
+
+The closing \`'@\` must start at the beginning of its line. Do not use Bash heredoc syntax (\`<<\`) in PowerShell.
+
+If Slock says a message was not sent and was saved as a draft, choose one path:
+- To update the draft, pipe the revised here-string into a normal \`raft message send --target <target>\` command.
+- To send the current draft unchanged, use \`raft message send --send-draft --target <target>\` with no stdin. Do not use \`--send-draft\` when changing content.
+
+**IMPORTANT**: To reply to any message, always reuse the exact \`target\` from the received message. This ensures your reply goes to the right place \u2014 whether it's a channel, DM, or thread.`;
+  }
   return `### Sending messages
 
 - **Reply to a channel**: \`raft message send --target "#channel-name" <<'${D}'\` followed by the message body and \`${D}\`
@@ -5199,15 +5228,16 @@ When a reminder already exists, prefer \`raft reminder snooze\` to push it later
 Use \`raft reminder schedule\` rather than runtime-native wake or cron tools such as ScheduleWakeup or CronCreate for user-visible reminders, so reminders stay author-owned, persistent, observable, snoozable, updatable, and cancelable in Slock.
 Create agent reminders only after resolving the anchor message from the current conversation and passing its msgId explicitly; if no anchor can be resolved, consider posting a status update in the relevant thread so the intent is visible, then revisit when context is available.`;
 }
-function buildThreadsSection() {
+function buildThreadsSection(shell) {
   const D = MESSAGE_HEREDOC_DELIMITER;
+  const startThreadInstruction = shell === "powershell" ? 'pipe a PowerShell single-quoted here-string into `raft message send --target "#general:00000000"`' : `reply with \`raft message send --target "#general:00000000" <<'${D}'\` followed by the message body and \`${D}\``;
   return `### Threads
 
 Threads are sub-conversations attached to a specific message. They let you discuss a topic without cluttering the main channel.
 
 - **Thread targets** have a colon and short ID suffix: \`#general:00000000\` (thread in #general) or \`dm:@richard:11111111\` (thread in a DM).
 - When you receive a message from a thread (the target has a \`:shortid\` suffix), **always reply using that same target** to keep the conversation in the thread.
-- **Start a new thread**: Use the \`msg=\` field from the header as the thread suffix. For example, if you see \`[target=#general msg=00000000 ...]\`, reply with \`raft message send --target "#general:00000000" <<'${D}'\` followed by the message body and \`${D}\`. The thread will be auto-created if it doesn't exist yet. Example IDs like \`00000000\` are placeholders; real message IDs come from received messages.
+- **Start a new thread**: Use the \`msg=\` field from the header as the thread suffix. For example, if you see \`[target=#general msg=00000000 ...]\`, ${startThreadInstruction}. The thread will be auto-created if it doesn't exist yet. Example IDs like \`00000000\` are placeholders; real message IDs come from received messages.
 - When you send a message, the response includes the message ID. You can use it to start a thread on your own message.
 - You can read thread history: \`raft message read --target "#general:00000000"\`
 - Unfollowing a thread removes its follow record and stops its ordinary delivery while the parent channel is unmuted: \`raft thread unfollow --target "#general:00000000"\`. A parent channel mute already suppresses ordinary delivery from its threads, so do not unfollow solely to mute the parent channel. Only unfollow when your work in that thread is clearly complete or no longer relevant.
@@ -5404,12 +5434,13 @@ Your context will be periodically compressed to stay within limits. When this ha
 - Keep MEMORY.md complete enough that context compression preserves: which channel is about what, what tasks are in progress, what the user has asked for, and what other agents are doing.`;
 }
 function buildSlockCliGuideSections(options) {
+  const shell = options.shell ?? "posix";
   return {
     communication: buildCommunicationSection(options.audience),
     credentialHygiene: buildCredentialHygieneSection(),
-    sendingMessages: buildSendingMessagesSection(),
+    sendingMessages: buildSendingMessagesSection(shell),
     reminders: buildRemindersSection(),
-    threads: buildThreadsSection(),
+    threads: buildThreadsSection(shell),
     discovery: buildDiscoverySection(),
     channelAwareness: buildChannelAwarenessSection(),
     readingHistory: buildReadingHistorySection(),
@@ -5459,6 +5490,7 @@ function buildPrompt(config, opts) {
       handle: config.name,
       displayName: config.displayName || config.name
     },
+    shell: opts.commandShell,
     taskClaimCmd
   });
   const checkCmd = "`raft message check`";
@@ -8213,6 +8245,7 @@ var WINDOWS_ENVIRONMENT_SCRIPT = [
   "  $result | ConvertTo-Json -Compress -Depth 3",
   "}"
 ].join(" ");
+var WINDOWS_COMMAND_RESOLVE_TIMEOUT_MS = 1e3;
 function normalizeProcessEnv(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};
   const env = {};
@@ -8321,7 +8354,8 @@ function resolveCommandOnWindows(command, env, execFileSyncFn, existsSyncFn) {
       command
     ], {
       stdio: ["ignore", "pipe", "ignore"],
-      env
+      env,
+      timeout: WINDOWS_COMMAND_RESOLVE_TIMEOUT_MS
     }));
     const resolved = output.trim().split(/\r?\n/)[0];
     if (!resolved) return null;
@@ -11932,7 +11966,6 @@ import { mkdirSync as mkdirSync3, readdirSync as readdirSync3 } from "fs";
 import path12 from "path";
 import {
   AuthStorage,
-  createBashTool,
   createAgentSessionFromServices,
   createAgentSessionServices,
   getAgentDir,
@@ -11940,6 +11973,126 @@ import {
   SettingsManager,
   VERSION as PI_SDK_VERSION
 } from "@earendil-works/pi-coding-agent";
+
+// src/drivers/piCommandTool.ts
+import { spawn as spawn9 } from "child_process";
+import {
+  createBashTool
+} from "@earendil-works/pi-coding-agent";
+var POWERSHELL_STDIN_LOADER = [
+  "$raftReader = [System.IO.StreamReader]::new([Console]::OpenStandardInput(), [System.Text.Encoding]::ASCII, $false)",
+  "try { $raftEncodedScript = $raftReader.ReadToEnd() } finally { $raftReader.Dispose() }",
+  "$raftScript = [System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String($raftEncodedScript))",
+  "& ([ScriptBlock]::Create($raftScript))"
+].join("\r\n");
+var POWERSHELL_ARGS = [
+  "-NoLogo",
+  "-NoProfile",
+  "-NonInteractive",
+  "-ExecutionPolicy",
+  "Bypass",
+  "-Command",
+  POWERSHELL_STDIN_LOADER
+];
+var MAX_TIMEOUT_SECONDS = 2147483647 / 1e3;
+function killWindowsProcessTree(pid) {
+  const killer = spawn9("taskkill.exe", ["/F", "/T", "/PID", String(pid)], {
+    detached: true,
+    stdio: "ignore",
+    windowsHide: true
+  });
+  killer.unref();
+}
+function buildPiPowerShellScript(command) {
+  return [
+    "$ErrorActionPreference = 'Stop'",
+    "$utf8NoBom = New-Object System.Text.UTF8Encoding($false)",
+    "[Console]::OutputEncoding = $utf8NoBom",
+    "$OutputEncoding = $utf8NoBom",
+    "$global:LASTEXITCODE = 0",
+    "& {",
+    command,
+    "}",
+    "$raftCommandSucceeded = $?",
+    "$raftNativeExitCode = $global:LASTEXITCODE",
+    "if ($raftNativeExitCode -ne 0) { exit $raftNativeExitCode }",
+    "if (-not $raftCommandSucceeded) { exit 1 }",
+    "exit 0",
+    ""
+  ].join("\r\n");
+}
+function createPiPowerShellOperations(deps = {}) {
+  const spawnProcess = deps.spawn ?? spawn9;
+  const killProcessTree = deps.killProcessTree ?? killWindowsProcessTree;
+  return {
+    exec: async (command, cwd, { onData, signal, timeout, env }) => {
+      if (signal?.aborted) throw new Error("aborted");
+      if (timeout !== void 0 && (!Number.isFinite(timeout) || timeout <= 0 || timeout > MAX_TIMEOUT_SECONDS)) {
+        throw new Error(
+          `Invalid timeout: must be between 0 and ${MAX_TIMEOUT_SECONDS} seconds`
+        );
+      }
+      const child = spawnProcess("powershell.exe", [...POWERSHELL_ARGS], {
+        cwd,
+        env,
+        stdio: ["pipe", "pipe", "pipe"],
+        windowsHide: true
+      });
+      child.stdout.on("data", onData);
+      child.stderr.on("data", onData);
+      child.stdin.on("error", () => void 0);
+      child.stdin.end(
+        Buffer.from(buildPiPowerShellScript(command), "utf16le").toString(
+          "base64"
+        )
+      );
+      let timedOut = false;
+      const terminate = () => {
+        if (child.pid) killProcessTree(child.pid);
+      };
+      const timeoutHandle = timeout === void 0 ? void 0 : setClockTimeout(() => {
+        timedOut = true;
+        terminate();
+      }, timeout * 1e3);
+      const onAbort = () => terminate();
+      signal?.addEventListener("abort", onAbort, { once: true });
+      if (signal?.aborted) terminate();
+      try {
+        const exitCode = await new Promise((resolve, reject) => {
+          child.once("error", reject);
+          child.once("close", resolve);
+        });
+        if (signal?.aborted) throw new Error("aborted");
+        if (timedOut) throw new Error(`timeout:${timeout}`);
+        return { exitCode };
+      } finally {
+        if (timeoutHandle) clearClockTimeout(timeoutHandle);
+        signal?.removeEventListener("abort", onAbort);
+      }
+    }
+  };
+}
+function createPiCommandTool(cwd, toolSpawnEnv, deps = {}) {
+  const platform = deps.platform ?? process.platform;
+  const tool = createBashTool(cwd, {
+    ...platform === "win32" ? { operations: createPiPowerShellOperations(deps) } : {},
+    spawnHook: (spawnContext) => ({
+      ...spawnContext,
+      env: {
+        ...spawnContext.env,
+        ...toolSpawnEnv
+      }
+    })
+  });
+  if (platform !== "win32") return tool;
+  return {
+    ...tool,
+    label: "PowerShell",
+    description: "Execute a Windows PowerShell 5.1 command in the current working directory. Use PowerShell syntax, not Bash syntax. Standard output and standard error are returned."
+  };
+}
+
+// src/drivers/pi.ts
 var PI_SESSION_DIR = ".pi-sessions";
 var BUILTIN_SESSION_DIR = ".builtin-sessions";
 var BUILTIN_AGENT_DIR = ".builtin-runtime";
@@ -12048,8 +12201,12 @@ async function withProcessEnvPatch(patch, fn, opts = {}) {
     }
   });
 }
-function resolvePiModelFromRegistry(modelId, modelRegistry) {
+function resolvePiModelFromRegistry(modelId, modelRegistry, runtimeConfig) {
   if (!modelId || modelId === "default") return void 0;
+  if (runtimeConfig.runtime === "builtin" && runtimeConfig.provider.kind === "gateway" && runtimeConfig.model.kind === "custom") {
+    const provider2 = runtimeConfig.provider.providerId === "openai-compatible" ? "openai" : "anthropic";
+    return modelRegistry.find(provider2, runtimeConfig.model.name);
+  }
   const [provider, ...modelParts] = modelId.split("/");
   if (provider && modelParts.length > 0) {
     return modelRegistry.find(provider, modelParts.join("/"));
@@ -12381,7 +12538,7 @@ async function createPiAgentSessionForContext(ctx, sessionId, opts = {}) {
       agent_dir_source: opts.agentDirSource ?? (spawnEnv.PI_CODING_AGENT_DIR ? "spawn_env" : "default"),
       ...launchTraceEvidenceAttrs
     });
-    const model = resolvePiModelFromRegistry(launchRuntimeFields.model, services.modelRegistry);
+    const model = resolvePiModelFromRegistry(launchRuntimeFields.model, services.modelRegistry, runtimeConfig);
     const resolvedModel = formatPiModelLogId(model);
     traceSpan?.addEvent(`${traceEventPrefix}.model_resolved`, {
       available_models_count: services.modelRegistry.getAvailable().length,
@@ -12437,15 +12594,7 @@ async function createPiAgentSessionForContext(ctx, sessionId, opts = {}) {
       model,
       thinkingLevel: launchRuntimeFields.reasoningEffort,
       customTools: [
-        createBashTool(ctx.workingDirectory, {
-          spawnHook: (spawnContext) => ({
-            ...spawnContext,
-            env: {
-              ...spawnContext.env,
-              ...toolSpawnEnv
-            }
-          })
-        })
+        createPiCommandTool(ctx.workingDirectory, toolSpawnEnv)
       ]
     }), { removeFirst: providerEnvScope });
     traceSpan?.addEvent(`${traceEventPrefix}.started`, {
@@ -12756,13 +12905,15 @@ var PiDriver = class {
     return null;
   }
   buildSystemPrompt(config, _agentId) {
+    const windowsPowerShell = process.platform === "win32";
     return buildCliTransportSystemPrompt(config, {
-      extraCriticalRules: [],
+      extraCriticalRules: windowsPowerShell ? ["- Pi's `bash` tool is a compatibility name on Windows: it executes native Windows PowerShell 5.1. Use PowerShell syntax and never Bash heredocs or Unix-only commands."] : [],
       postStartupNotes: [
         "**Pi runtime note:** Slock keeps Pi running as a persistent SDK session. While you are working, Slock may send inbox-count notifications into the current turn; call `raft message check` at natural breakpoints."
       ],
       includeStdinNotificationSection: true,
-      messageNotificationStyle: "direct"
+      messageNotificationStyle: "direct",
+      commandShell: windowsPowerShell ? "powershell" : "posix"
     });
   }
 };
@@ -12798,13 +12949,15 @@ var BuiltInDriver = class extends PiDriver {
     }));
   }
   buildSystemPrompt(config, _agentId) {
+    const windowsPowerShell = process.platform === "win32";
     return buildCliTransportSystemPrompt(config, {
-      extraCriticalRules: [],
+      extraCriticalRules: windowsPowerShell ? ["- This runtime's `bash` tool is a compatibility name on Windows: it executes native Windows PowerShell 5.1. Use PowerShell syntax and never Bash heredocs or Unix-only commands."] : [],
       postStartupNotes: [
         "**Built-in runtime note:** Slock keeps this runtime in an isolated SDK session. While you are working, Slock may send inbox-count notifications into the current turn; call `raft message check` at natural breakpoints."
       ],
       includeStdinNotificationSection: true,
-      messageNotificationStyle: "direct"
+      messageNotificationStyle: "direct",
+      commandShell: windowsPowerShell ? "powershell" : "posix"
     });
   }
 };
@@ -26512,6 +26665,11 @@ var DaemonCore = class {
     });
   }
   handleConnect() {
+    try {
+      this.options.lifecycleHooks?.onConnect?.();
+    } catch (err) {
+      logger.warn(`[Daemon] Connection lifecycle hook failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
     if (!this.opencliWrappersRegenerated) {
       this.opencliWrappersRegenerated = true;
       try {
@@ -26604,7 +26762,6 @@ var DaemonCore = class {
     for (const agentId of agentsForSnapshot) {
       this.connection.send({ type: "reminder.snapshot.request", agentId });
     }
-    this.options.lifecycleHooks?.onConnect?.();
   }
   handleDisconnect() {
     logger.warn("[Daemon] Lost connection \u2014 agents continue running locally");

package/dist/core.js

@@ -36,7 +36,7 @@ import {
   stageAgentMigrationObjectStoreBundle,
   subscribeDaemonLogs,
   verifyAgentMigrationAdoptPlan
-} from "./chunk-FGXAADHM.js";
+} from "./chunk-BK46OPUN.js";
 export {
   AGENT_MIGRATION_BUNDLE_SCHEMA_VERSION,
   AGENT_MIGRATION_CONTROL_SEAM_ENV,

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   DAEMON_CLI_USAGE,
   DaemonCore,
   parseDaemonCliArgs
-} from "./chunk-FGXAADHM.js";
+} from "./chunk-BK46OPUN.js";
 
 // src/index.ts
 var parsedArgs = parseDaemonCliArgs(process.argv.slice(2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/raft-daemon",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "type": "module",
   "bin": {
     "raft-daemon": "dist/raft-daemon.js",