@botiverse/raft-daemon 1.0.12 → 1.0.13

package/dist/{chunk-RKNTK2UF.js → chunk-O5X5Y2AC.js}

@@ -5726,7 +5726,7 @@ async function collectFeedbackTranscriptAttachment(input) {
 import { spawn } from "child_process";
 
 // src/drivers/cliTransport.ts
-import { existsSync as existsSync2, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { createRequire } from "module";
 import path2 from "path";
 
@@ -8073,6 +8073,182 @@ var WORKSPACE_CLI_TRANSPORT_FILENAMES = [
   "opencli",
   "opencli.cmd"
 ];
+var SLOCK_AGENT_LAUNCH_DIR_ENV = "SLOCK_AGENT_LAUNCH_DIR";
+var DAEMON_GENERATED_MARKER = "slock-daemon-generated";
+var AGENT_CLI_TRANSPORT_WRAPPER_NAMES = [
+  "slock",
+  "slock.cmd",
+  "slock.ps1",
+  "raft",
+  "raft.cmd",
+  "raft.ps1"
+];
+function buildPosixLaunchForwardingGuard(ownSlockDir) {
+  const agentRoot = path2.dirname(ownSlockDir);
+  const ownLaunchPart = path2.basename(ownSlockDir);
+  return [
+    `# ${DAEMON_GENERATED_MARKER}`,
+    `SLOCK_AGENT_ROOT=${shellSingleQuote(agentRoot)}`,
+    `SLOCK_OWN_LAUNCH_DIR=${shellSingleQuote(ownLaunchPart)}`,
+    'if [ -n "${SLOCK_AGENT_LAUNCH_DIR:-}" ] && [ "$SLOCK_AGENT_LAUNCH_DIR" != "$SLOCK_OWN_LAUNCH_DIR" ]; then',
+    '  if [ "$SLOCK_AGENT_LAUNCH_DIR" != "." ] && [ "$SLOCK_AGENT_LAUNCH_DIR" != ".." ] && [[ ! "$SLOCK_AGENT_LAUNCH_DIR" =~ [/\\] ]]; then',
+    '    SLOCK_FORWARD_DIR="$SLOCK_AGENT_ROOT/$SLOCK_AGENT_LAUNCH_DIR"',
+    '    if [ -d "$SLOCK_FORWARD_DIR" ] && [ ! -L "$SLOCK_FORWARD_DIR" ]; then',
+    '      SLOCK_FORWARD_WRAPPER="$SLOCK_FORWARD_DIR/$(basename "$0")"',
+    '      if [ -f "$SLOCK_FORWARD_WRAPPER" ] && [ ! -L "$SLOCK_FORWARD_WRAPPER" ]; then',
+    '        exec "$SLOCK_FORWARD_WRAPPER" "$@"',
+    "      fi",
+    "    fi",
+    "  fi",
+    "fi"
+  ].join("\n");
+}
+function buildCmdLaunchForwardingGuard(ownSlockDir) {
+  const agentRoot = path2.dirname(ownSlockDir);
+  const ownLaunchPart = path2.basename(ownSlockDir);
+  return [
+    "@REM slock-daemon-generated",
+    "setlocal enabledelayedexpansion",
+    `set "SLOCK_AGENT_ROOT=${agentRoot}"`,
+    `set "SLOCK_OWN_LAUNCH_DIR=${ownLaunchPart}"`,
+    "if defined SLOCK_AGENT_LAUNCH_DIR (",
+    '  if /I not "!SLOCK_AGENT_LAUNCH_DIR!"=="!SLOCK_OWN_LAUNCH_DIR!" (',
+    '    set "SLOCK_SEL=!SLOCK_AGENT_LAUNCH_DIR!"',
+    '    set "SLOCK_INVALID="',
+    '    if "!SLOCK_SEL!"=="" set SLOCK_INVALID=1',
+    '    if "!SLOCK_SEL!"=="." set SLOCK_INVALID=1',
+    '    if "!SLOCK_SEL!"==".." set SLOCK_INVALID=1',
+    '    if not "!SLOCK_SEL:/=!"=="!SLOCK_SEL!" set SLOCK_INVALID=1',
+    '    if not "!SLOCK_SEL:\\=!"=="!SLOCK_SEL!" set SLOCK_INVALID=1',
+    "    if not defined SLOCK_INVALID (",
+    '      set "SLOCK_FORWARD_DIR=!SLOCK_AGENT_ROOT!\\!SLOCK_SEL!"',
+    '      if exist "!SLOCK_FORWARD_DIR!\\" (',
+    '        fsutil reparsepoint query "!SLOCK_FORWARD_DIR!" >nul 2>&1',
+    "        if errorlevel 1 (",
+    '          set "SLOCK_FORWARD_WRAPPER=!SLOCK_FORWARD_DIR!\\%~nx0"',
+    '          if exist "!SLOCK_FORWARD_WRAPPER!" if not exist "!SLOCK_FORWARD_WRAPPER!\\" (',
+    '            call "!SLOCK_FORWARD_WRAPPER!" %*',
+    "            exit /b !errorlevel!",
+    "          )",
+    "        )",
+    "      )",
+    "    )",
+    "  )",
+    ")",
+    "endlocal"
+  ].join("\r\n");
+}
+function buildPs1LaunchForwardingGuard(ownSlockDir) {
+  const agentRoot = path2.dirname(ownSlockDir);
+  const ownLaunchPart = path2.basename(ownSlockDir);
+  return [
+    `# ${DAEMON_GENERATED_MARKER}`,
+    `$SlockAgentRoot = ${powershellSingleQuote(agentRoot)}`,
+    `$SlockOwnLaunchDir = ${powershellSingleQuote(ownLaunchPart)}`,
+    "$SlockLaunchDir = $env:SLOCK_AGENT_LAUNCH_DIR",
+    "if ($SlockLaunchDir -and ($SlockLaunchDir -ne $SlockOwnLaunchDir)) {",
+    '    $invalid = ($SlockLaunchDir -in "", ".", "..") -or ($SlockLaunchDir -match "[/\\\\]")',
+    "    if (-not $invalid) {",
+    "        $ForwardDir = Join-Path $SlockAgentRoot $SlockLaunchDir",
+    "        $dirItem = Get-Item $ForwardDir -ErrorAction SilentlyContinue",
+    "        if ($dirItem -and $dirItem.PSIsContainer -and (-not $dirItem.LinkType)) {",
+    "            $ForwardTarget = Join-Path $ForwardDir (Split-Path -Leaf $PSCommandPath)",
+    "            $item = Get-Item $ForwardTarget -ErrorAction SilentlyContinue",
+    "            if ($item -and ($item.PSIsContainer -eq $false) -and (-not $item.LinkType)) {",
+    "                & $ForwardTarget @args",
+    "                exit $LASTEXITCODE",
+    "            }",
+    "        }",
+    "    }",
+    "}"
+  ].join("\r\n");
+}
+function isDaemonGeneratedWrapper(filePath) {
+  try {
+    const body = readFileSync(filePath, "utf8");
+    if (body.includes(DAEMON_GENERATED_MARKER)) return true;
+    return body.includes("SLOCK_AGENT_ID=") && body.includes("SLOCK_SERVER_URL=");
+  } catch {
+    return false;
+  }
+}
+function upgradeWrapperWithLaunchGuard(filePath, platform) {
+  let body;
+  try {
+    body = readFileSync(filePath, "utf8");
+  } catch {
+    return false;
+  }
+  if (body.includes(DAEMON_GENERATED_MARKER)) return false;
+  if (!isDaemonGeneratedWrapper(filePath)) return false;
+  const ownSlockDir = path2.dirname(filePath);
+  let newBody;
+  if (filePath.endsWith(".cmd")) {
+    const guard = buildCmdLaunchForwardingGuard(ownSlockDir);
+    const firstNewline = body.indexOf("\r\n");
+    if (firstNewline !== -1 && body.slice(0, firstNewline).trim().toLowerCase() === "@echo off") {
+      newBody = "@echo off\r\n" + guard + "\r\n" + body.slice(firstNewline + 2);
+    } else {
+      newBody = guard + "\r\n" + body;
+    }
+  } else if (filePath.endsWith(".ps1")) {
+    newBody = buildPs1LaunchForwardingGuard(ownSlockDir) + "\r\n" + body;
+  } else {
+    const guard = buildPosixLaunchForwardingGuard(ownSlockDir);
+    const firstNewline = body.indexOf("\n");
+    if (firstNewline !== -1 && body.slice(0, firstNewline).startsWith("#!")) {
+      newBody = body.slice(0, firstNewline) + "\n" + guard + "\n" + body.slice(firstNewline + 1);
+    } else {
+      newBody = guard + "\n" + body;
+    }
+  }
+  const tmpPath = `${filePath}.guard-upgrade.tmp`;
+  const mode = statSync(filePath).mode;
+  writeFileSync(tmpPath, newBody, { mode });
+  renameSync(tmpPath, filePath);
+  return true;
+}
+function upgradeExistingAgentWrappers(agentRoot, currentSlockDir, platform = process.platform) {
+  let scanned = 0;
+  let upgraded = 0;
+  let entries;
+  try {
+    entries = readdirSync(agentRoot);
+  } catch {
+    return { scanned, upgraded };
+  }
+  for (const entry of entries) {
+    const launchDir = path2.join(agentRoot, entry);
+    if (launchDir === currentSlockDir) continue;
+    let launchDirStats;
+    try {
+      launchDirStats = lstatSync(launchDir);
+    } catch {
+      continue;
+    }
+    if (!launchDirStats.isDirectory() || launchDirStats.isSymbolicLink()) continue;
+    let launchEntries;
+    try {
+      launchEntries = readdirSync(launchDir);
+    } catch {
+      continue;
+    }
+    for (const name of AGENT_CLI_TRANSPORT_WRAPPER_NAMES) {
+      const filePath = path2.join(launchDir, name);
+      if (!launchEntries.includes(name)) continue;
+      let stats;
+      try {
+        stats = lstatSync(filePath);
+      } catch {
+        continue;
+      }
+      if (!stats.isFile() || stats.isSymbolicLink()) continue;
+      scanned++;
+      if (upgradeWrapperWithLaunchGuard(filePath, platform)) upgraded++;
+    }
+  }
+  return { scanned, upgraded };
+}
 function deriveCliFallbackCandidates(cliPath) {
   if (!cliPath || cliPath === "__cli") return [];
   const normalized = cliPath.split(path2.sep).join("/");
@@ -8313,6 +8489,7 @@ ${cliFallbackCandidates.map((candidate, i) => `  ${i === 0 ? "if" : "elif"} [ -e
 fi
 `;
   const posixBody = `#!/usr/bin/env bash
+${buildPosixLaunchForwardingGuard(slockDir)}
 ${posixLoopbackNoProxyPrelude()}
 SLOCK_CLI=${shellSingleQuote(cliPath)}
 ${posixCliFallbackBlock}${execIsElectron ? "export ELECTRON_RUN_AS_NODE=1\n" : ""}${posixCredentialPrefix}exec ${shellSingleQuote(process.execPath)} "$SLOCK_CLI" "$@"
@@ -8333,6 +8510,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
     const cmdCliFallbackLines = cliPath === "__cli" ? [] : cliFallbackCandidates.map((candidate) => `if not exist "%SLOCK_CLI%" set "SLOCK_CLI=${candidate}"`);
     const cmdBody = [
       "@echo off",
+      buildCmdLaunchForwardingGuard(slockDir),
       "set PYTHONIOENCODING=utf-8",
       "set PYTHONUTF8=1",
       "set LANG=C.UTF-8",
@@ -8365,6 +8543,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
       ]
     ];
     const psBody = [
+      buildPs1LaunchForwardingGuard(slockDir),
       "$ErrorActionPreference = 'Stop'",
       "$utf8NoBom = [System.Text.UTF8Encoding]::new($false)",
       "[Console]::OutputEncoding = $utf8NoBom",
@@ -8400,6 +8579,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
   if (opencliBinPath) {
     writeOpencliWrapper(slockDir, opencliBinPath, platform, execIsElectron);
   }
+  upgradeExistingAgentWrappers(path2.dirname(slockDir), slockDir, platform);
   const wrapperPath = platform === "win32" ? path2.join(slockDir, "slock.cmd") : posixWrapper;
   const launchRuntimeFields = runtimeConfigToLaunchFields(hydrateRuntimeConfig(ctx.config));
   const spawnEnv = {
@@ -8414,6 +8594,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
     ...ctx.launchId ? { SLOCK_AGENT_LAUNCH_ID: ctx.launchId } : {},
     ...ctx.cliTransportTraceDir ? { [CLI_TRANSPORT_TRACE_DIR_ENV]: ctx.cliTransportTraceDir } : {},
     SLOCK_SERVER_URL: ctx.config.serverUrl,
+    [SLOCK_AGENT_LAUNCH_DIR_ENV]: path2.basename(slockDir),
     PATH: `${slockDir}${path2.delimiter}${process.env.PATH ?? ""}`
   };
   delete spawnEnv.SLOCK_AGENT_TOKEN;
@@ -8427,6 +8608,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
   delete spawnEnv.SLOCK_AGENT_TOKEN_FILE;
   return {
     slockDir,
+    slockHome,
     tokenFile,
     agentCredentialProxyUrl: agentCredentialProxy?.proxyUrl ?? null,
     wrapperPath,
@@ -12561,11 +12743,12 @@ import path11 from "path";
 import { createRequire as createRequire2 } from "module";
 import {
   createKimiHarness,
-  resolveKimiHome
+  resolveKimiHome,
+  LocalKaos
 } from "@botiverse/kimi-code-sdk";
 var requireFromHere = createRequire2(import.meta.url);
 var KIMI_CODE_USER_AGENT_PRODUCT = "kimi-code-cli";
-var KIMI_CODE_HOST_VERSION = "0.26.0-botiverse.2";
+var KIMI_CODE_HOST_VERSION = "0.28.1-botiverse.0";
 function getDaemonVersion() {
   try {
     const pkg = requireFromHere("../../package.json");
@@ -12658,6 +12841,7 @@ function mapKimiSdkEventToParsedEvents(event, state) {
     case "tool.progress":
     case "shell.output":
     case "shell.started":
+    case "shell.completed":
     case "hook.result":
     // status / meta updates
     case "agent.status.updated":
@@ -12722,24 +12906,8 @@ var KIMI_SDK_RUNTIME_SESSION_DESCRIPTOR = {
   postTurn: "keep_alive"
 };
 function composeStandingRoleAdditional(standingPrompt, wrapperPath) {
-  const sections = [];
-  if (standingPrompt) {
-    sections.push(standingPrompt);
-  }
-  if (wrapperPath) {
-    sections.push(
-      `## CLI invocation note (Kimi SDK in-process runtime)
-
-When you run \`raft\` CLI commands from your bash tool, **use this absolute path** because PATH is not pre-injected for the in-process Kimi SDK:
-
-\`\`\`
-${wrapperPath}
-\`\`\`
-
-So instead of \`raft message send ...\`, run \`${wrapperPath} message send ...\` (every \`raft\` reference in the protocol above maps to this wrapper). The wrapper carries this agent's identity automatically; do not pass auth tokens explicitly.`
-    );
-  }
-  return sections.join("\n\n---\n\n");
+  void wrapperPath;
+  return standingPrompt ?? "";
 }
 async function createKimiAgentSessionForContext(ctx, sessionId, deps = {}) {
   const createHarnessImpl = deps.createHarness ?? createKimiHarness;
@@ -12749,6 +12917,15 @@ async function createKimiAgentSessionForContext(ctx, sessionId, deps = {}) {
   const cliTransport = await prepareTransportImpl(ctx, { NO_COLOR: "1" });
   const spawnEnv = cliTransport.spawnEnv;
   const wrapperPath = cliTransport.wrapperPath;
+  const slockDir = cliTransport.slockDir;
+  const slockHome = cliTransport.slockHome;
+  const localKaos = await (deps.createLocalKaos ?? LocalKaos.create)();
+  const toolKaos = localKaos.withEnv({
+    PATH: `${slockDir}${path11.delimiter}${process.env.PATH ?? ""}`,
+    NO_COLOR: "1",
+    SLOCK_HOME: slockHome,
+    [SLOCK_AGENT_LAUNCH_DIR_ENV]: path11.basename(slockDir)
+  });
   const homeDir = resolveKimiHome(spawnEnv.KIMI_CODE_HOME);
   mkdirSync2(homeDir, { recursive: true });
   const harness = createHarnessImpl({
@@ -12763,6 +12940,8 @@ async function createKimiAgentSessionForContext(ctx, sessionId, deps = {}) {
   const roleAdditional = composeStandingRoleAdditional(ctx.standingPrompt, wrapperPath);
   const sessionFields = {
     workDir: ctx.workingDirectory,
+    kaos: toolKaos,
+    persistenceKaos: localKaos,
     ...launchRuntimeFields.model && launchRuntimeFields.model !== "default" ? { model: launchRuntimeFields.model } : {},
     ...roleAdditional ? { roleAdditional } : {}
   };
@@ -14684,7 +14863,7 @@ import {
   mkdirSync as mkdirSync4,
   readFileSync as readFileSync6,
   readdirSync as readdirSync4,
-  statSync,
+  statSync as statSync2,
   writeFileSync as writeFileSync4
 } from "fs";
 import os8 from "os";
@@ -14787,7 +14966,7 @@ function findGrokSessionTranscript(root, sessionId) {
         for (const filename of preferredFiles) {
           const candidate = path14.join(child, filename);
           try {
-            if (statSync(candidate).isFile()) return candidate;
+            if (statSync2(candidate).isFile()) return candidate;
           } catch {
           }
         }
@@ -14806,7 +14985,7 @@ function findPiSessionFile2(sessionId, workingDirectory, homeDir) {
       const files = readdirSync4(piSessionsDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map((entry) => ({
         name: entry.name,
         path: path14.join(piSessionsDir, entry.name),
-        stat: statSync(path14.join(piSessionsDir, entry.name))
+        stat: statSync2(path14.join(piSessionsDir, entry.name))
       })).filter((entry) => entry.stat.isFile() && entry.name.includes(sessionId)).sort((a, b) => b.stat.mtimeMs - a.stat.mtimeMs);
       if (files[0]) return files[0].path;
     } catch {
@@ -24302,7 +24481,7 @@ var ReminderCache = class {
 
 // src/machineLock.ts
 import { createHash as createHash5, randomUUID as randomUUID8 } from "crypto";
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync8, rmSync as rmSync3, statSync as statSync2, writeFileSync as writeFileSync5 } from "fs";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync8, rmSync as rmSync3, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
 import os10 from "os";
 import path17 from "path";
 var INCOMPLETE_LOCK_STALE_MS = 3e4;
@@ -24337,7 +24516,7 @@ function readOwner(lockDir) {
 }
 function lockAgeMs(lockDir) {
   try {
-    return Date.now() - statSync2(lockDir).mtimeMs;
+    return Date.now() - statSync3(lockDir).mtimeMs;
   } catch {
     return null;
   }
@@ -24417,7 +24596,7 @@ function acquireDaemonMachineLock(options) {
 }
 
 // ../trace-client/src/localTraceSink.ts
-import { appendFileSync, mkdirSync as mkdirSync6, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync6 } from "fs";
+import { appendFileSync, mkdirSync as mkdirSync6, readdirSync as readdirSync5, rmSync as rmSync4, statSync as statSync4, writeFileSync as writeFileSync6 } from "fs";
 import path18 from "path";
 var DEFAULT_MAX_FILE_BYTES = 5 * 1024 * 1024;
 var DEFAULT_MAX_FILE_AGE_MS = 5 * 60 * 1e3;
@@ -24498,7 +24677,7 @@ var LocalRotatingTraceSink = class {
         `daemon-trace-${safeTimestamp(nowMs)}-${process.pid}-${String(this.sequence++).padStart(4, "0")}.jsonl`
       );
       writeFileSync6(this.currentFile, "", { flag: "a", mode: 384 });
-      this.currentSize = statSync3(this.currentFile).size;
+      this.currentSize = statSync4(this.currentFile).size;
       this.currentFileOpenedAtMs = nowMs;
       this.pruneOldFiles();
     }

package/dist/core.js

@@ -36,7 +36,7 @@ import {
   stageAgentMigrationObjectStoreBundle,
   subscribeDaemonLogs,
   verifyAgentMigrationAdoptPlan
-} from "./chunk-RKNTK2UF.js";
+} from "./chunk-O5X5Y2AC.js";
 export {
   AGENT_MIGRATION_BUNDLE_SCHEMA_VERSION,
   AGENT_MIGRATION_CONTROL_SEAM_ENV,

package/dist/index.js

@@ -3,7 +3,7 @@ import {
   DAEMON_CLI_USAGE,
   DaemonCore,
   parseDaemonCliArgs
-} from "./chunk-RKNTK2UF.js";
+} from "./chunk-O5X5Y2AC.js";
 
 // src/index.ts
 var parsedArgs = parseDaemonCliArgs(process.argv.slice(2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/raft-daemon",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "type": "module",
   "bin": {
     "raft-daemon": "dist/raft-daemon.js",
@@ -46,7 +46,7 @@
     "release:alpha": "node scripts/release-runtime-sdk-preflight.mjs && npm version prerelease --preid=alpha --no-git-tag-version && cd ../.. && pnpm install --lockfile-only && git add packages/daemon/package.json packages/daemon/runtime-sdk-release-preflight.json pnpm-lock.yaml packages/shared/src/piBuiltinModels.generated.ts packages/shared/src/generated/runtimeProviderDisplayNames.ts && git commit -m \"chore: bump @botiverse/raft-daemon to v$(node -p \"require('./packages/daemon/package.json').version\")\" && git tag daemon-v$(node -p \"require('./packages/daemon/package.json').version\") && git push && git push --tags"
   },
   "dependencies": {
-    "@botiverse/kimi-code-sdk": "0.26.0-botiverse.2",
+    "@botiverse/kimi-code-sdk": "0.28.1-botiverse.0",
     "@earendil-works/pi-ai": "0.80.10",
     "@earendil-works/pi-coding-agent": "0.80.10",
     "@jackwener/opencli": "^1.8.3",