@chorus-aidlc/chorus 0.17.0 → 0.17.1

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{},"eslint":{"ignoreDuringBuilds":false},"typescript":{"ignoreBuildErrors":false,"tsconfigPath":"tsconfig.json"},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[16,32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":60,"formats":["image/webp"],"maximumResponseBody":50000000,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","remotePatterns":[],"unoptimized":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"amp":{"canonicalBase":""},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"serverRuntimeConfig":{},"publicRuntimeConfig":{},"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/ubuntu/dev/ai-pm","experimental":{"useSkewCookie":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":4294967294}},"cacheHandlers":{},"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"serverSourceMaps":false,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"clientSegmentCache":false,"clientParamParsing":false,"dynamicOnHover":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","middlewarePrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":15,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"viewTransition":false,"routerBFCache":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"cacheComponents":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"devtoolSegmentExplorer":true,"browserDebugInfoInTerminal":false,"optimizeRouterScrolling":false,"middlewareClientMaxBodySize":10485760,"optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","serverExternalPackages":["pino"],"turbopack":{"resolveAlias":{"fs":{"browser":"./src/lib/empty.ts"}},"root":"/home/ubuntu/dev/ai-pm"}}
+const nextConfig = {"env":{},"eslint":{"ignoreDuringBuilds":false},"typescript":{"ignoreBuildErrors":false,"tsconfigPath":"tsconfig.json"},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[16,32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":60,"formats":["image/webp"],"maximumResponseBody":50000000,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","remotePatterns":[],"unoptimized":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"amp":{"canonicalBase":""},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"serverRuntimeConfig":{},"publicRuntimeConfig":{},"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/Chorus/Chorus","experimental":{"useSkewCookie":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":4294967294}},"cacheHandlers":{},"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"serverSourceMaps":false,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"clientSegmentCache":false,"clientParamParsing":false,"dynamicOnHover":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","middlewarePrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"viewTransition":false,"routerBFCache":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"cacheComponents":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"devtoolSegmentExplorer":true,"browserDebugInfoInTerminal":false,"optimizeRouterScrolling":false,"middlewareClientMaxBodySize":10485760,"optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","serverExternalPackages":["pino"],"turbopack":{"resolveAlias":{"fs":{"browser":"./src/lib/empty.ts"}},"root":"/home/runner/work/Chorus/Chorus"}}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/README.ja.md

@@ -38,6 +38,8 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 最近の更新
 
+**[v0.17.0–0.17.1](https://github.com/Chorus-AIDLC/Chorus/releases/tag/v0.17.1)** — 1 つの CLI で各コーディングエージェントに Chorus を導入・更新できるようになりました。Tracker、Graph、Idea 詳細ではデーモンの活動をリアルタイムに確認できます。
+
 **[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness（dsh）が 6 つ目の接続方法に。`@chorus-aidlc/chorus-dsh` バンドルが Chorus のスキル・ペルソナ・MCP 設定を任意の dsh プロファイルに追加します。現時点は対話的な利用のみ、デーモンウェイクは後日対応。
 
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — 1 つの `chorus daemon` が、互いに独立した複数のエージェントを同時に扱えるようになりました。各エージェントは `agents[]` 配列で自分のキー・作業ディレクトリ・バックエンド・権限を持ちます。エージェント同士は @メンションで作業を渡し合え、各ウェイクはそのエージェント自身のプロジェクトディレクトリに届きます。
@@ -59,7 +61,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 2 つのコマンドだけです — データベースも Docker も設定ファイルも不要です。
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.17.0
+npm install -g @chorus-aidlc/chorus@0.17.1
 chorus
 ```
 

package/README.ko.md

@@ -38,6 +38,8 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 최근 업데이트
 
+**[v0.17.0–0.17.1](https://github.com/Chorus-AIDLC/Chorus/releases/tag/v0.17.1)** — 하나의 CLI로 여러 코딩 에이전트에 Chorus를 설치하고 업데이트할 수 있습니다. 이제 Tracker, Graph, Idea 상세 화면에서 데몬 활동도 실시간으로 확인할 수 있습니다.
+
 **[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness(dsh)가 여섯 번째 연결 방식으로 추가됩니다: `@chorus-aidlc/chorus-dsh` 번들이 Chorus의 스킬·페르소나·MCP 설정을 임의의 dsh 프로파일에 추가합니다. 현재는 대화식 사용만, 데몬 웨이크는 추후 지원.
 
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — 이제 하나의 `chorus daemon`이 서로 독립적인 여러 에이전트를 동시에 서비스합니다. 각 에이전트는 `agents[]` 배열로 자신의 키·작업 디렉터리·백엔드·권한을 가집니다. 에이전트끼리 @멘션으로 작업을 넘길 수 있고, 각 웨이크는 해당 에이전트 자신의 프로젝트 디렉터리에 도착합니다.
@@ -59,7 +61,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 두 개의 명령이면 됩니다. 데이터베이스도, Docker도, 설정 파일도 필요 없습니다.
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.17.0
+npm install -g @chorus-aidlc/chorus@0.17.1
 chorus
 ```
 

package/README.md

@@ -38,6 +38,8 @@ The labels under each stage are the **permissions** an actor needs there — gra
 
 ## What's New
 
+**[v0.17.0–0.17.1](https://github.com/Chorus-AIDLC/Chorus/releases/tag/v0.17.1)** — One CLI now installs and refreshes Chorus across your coding agents. Live daemon activity is visible directly on Ideas in Tracker, Graph, and detail views.
+
 **[v0.16.4](https://chorus-ai.dev/blog/chorus-v0.16.4-release/)** — DeepSeek Harness (dsh) is the sixth way to connect: the `@chorus-aidlc/chorus-dsh` bundle drops Chorus's skills, persona, and MCP config into any dsh profile. Interactive for now; daemon wake comes later.
 
 **[v0.16.1](https://chorus-ai.dev/blog/chorus-v0.16.1-release/)** — One `chorus daemon` now serves many independent agents at once — each with its own key, working directories, backend, and permissions via an `agents[]` array — and agents can hand work to each other by @-mention, with each wake landing in that agent's own project directory.
@@ -59,7 +61,7 @@ The labels under each stage are the **permissions** an actor needs there — gra
 Two commands. No database, no Docker, no config files.
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.17.0
+npm install -g @chorus-aidlc/chorus@0.17.1
 chorus
 ```
 

package/README.zh.md

@@ -29,6 +29,8 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 
 ## 最近更新
 
+**[v0.17.0–0.17.1](https://github.com/Chorus-AIDLC/Chorus/releases/tag/v0.17.1)** — 一个 CLI 即可为各类编程 Agent 安装和更新 Chorus。现在还能在 Tracker、Graph 和 Idea 详情中直接看到 daemon 的实时活动。
+
 **[v0.16.4](https://chorus-ai.dev/zh/blog/chorus-v0.16.4-release/)** — DeepSeek Harness（dsh）成为第六种接入方式：`@chorus-aidlc/chorus-dsh` bundle 把 Chorus 的 skill、persona 和 MCP 配置装进任意 dsh profile。目前仅交互式使用，daemon 唤醒稍后支持。
 
 **[v0.16.1](https://chorus-ai.dev/zh/blog/chorus-v0.16.1-release/)** — 一个 `chorus daemon` 现在可以同时服务多个互相独立的 agent，每个都有自己的密钥、工作目录、后端和权限（通过 `agents[]` 配置）；agent 之间还能通过 @ 把活递给对方，每次唤醒都落在该 agent 自己的项目目录里。
@@ -50,7 +52,7 @@ Idea ──> Proposal ──> [Document + Task DAG] ──> Execute ──> Veri
 两条命令即可，无需数据库、无需 Docker、无需配置文件。
 
 ```bash
-npm install -g @chorus-aidlc/chorus@0.17.0
+npm install -g @chorus-aidlc/chorus@0.17.1
 chorus
 ```
 

package/cli/claude-spawner.mjs

@@ -3,7 +3,7 @@
 // engineering point of the daemon: parsing stream-json is plain JS and
 // platform-neutral; the real work is spawning, and it is all Windows.
 //
-// Verified against Claude Code CLI 2.1.177:
+// Verified against Claude Code CLI 2.1.251:
 //   • `-p/--print` + `--output-format stream-json` emits NDJSON (one JSON object
 //     per line); every line carries `session_id`.
 //   • `--session-id <uuid>` sets the session id for a fresh run, and
@@ -32,6 +32,28 @@ const NOOP_LOGGER = { info() {}, warn() {}, error() {} };
 /** Matches a canonical lowercase UUID (any version). Chorus idea uuids are v4. */
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 
+/** Backend-neutral failure classification consumed by the wake orchestrator. */
+export const SESSION_CONFLICT_FAILURE = "session_conflict";
+
+const STDERR_BUFFER_LIMIT = 64 * 1024;
+const SESSION_CONFLICT_RE = /\bsession id\b[^\r\n]{0,200}\bis already in use\b/i;
+const CLAUDE_PROJECT_KEY_CAP = 200;
+
+/**
+ * Claude Code 2.1.251's Java-style signed 32-bit string hash, rendered as the
+ * absolute value in base36. Iterating by index intentionally hashes UTF-16 code
+ * units (including each surrogate in an astral character) rather than code points.
+ * @param {string} value
+ * @returns {string}
+ */
+function projectKeyHash(value) {
+  let hash = 0;
+  for (let index = 0; index < value.length; index += 1) {
+    hash = ((hash << 5) - hash + value.charCodeAt(index)) | 0;
+  }
+  return Math.abs(hash).toString(36);
+}
+
 /**
  * True iff `id` is a well-formed, lowercase UUID. The daemon anchors the Claude
  * session id on a Chorus idea uuid (already lowercase v4); we validate before
@@ -45,22 +67,27 @@ export function isValidSessionId(id) {
 }
 
 /**
- * Claude Code's transcript directory for a working directory. Verified against the
- * live install: claude escapes the ABSOLUTE cwd by replacing both `/` and `.` with
- * `-` (e.g. `/home/u/dev/ai-pm` → `-home-u-dev-ai-pm`,
- * `/home/u/.cfg/x` → `-home-u--cfg-x`). On Windows the separators/drive differ, so
- * we escape backslashes and colons too; the rule there is best-effort and must be
- * re-verified against a Windows claude before claiming Windows resume support.
+ * Claude Code's transcript directory for a working directory. Verified against
+ * Claude Code 2.1.251's live Linux install and on-disk transcripts: every
+ * non-ASCII-alphanumeric UTF-16 code unit becomes `-`. That includes separators,
+ * dots, spaces, underscores, and non-ASCII characters; existing hyphens remain
+ * byte-identical because replacing `-` with `-` is a no-op. Escaped keys longer
+ * than 200 characters use the first 200 characters plus `-` and the base36
+ * Java-style signed 32-bit hash of the original cwd. The same expression produces
+ * the established Windows fixture, though the Windows on-disk layout remains
+ * best-effort until verified on a Windows Claude installation.
  * @param {string} cwd  Absolute working directory.
  * @param {NodeJS.Platform} [platform]
  * @returns {string}
  */
 export function escapeCwd(cwd, platform = process.platform) {
-  // Replace path separators and dots with `-`. On POSIX that's `/` and `.`; on
-  // Windows also `\` and the drive-colon. Collapsing both `/` and `.` is what
-  // produces the verified double-dash on a leading-dot segment.
-  const re = platform === "win32" ? /[\\/.:]/g : /[/.]/g;
-  return cwd.replace(re, "-");
+  // `platform` remains in the signature for fixture/API compatibility. Claude's
+  // observed sanitizer is platform-independent; platform path syntax supplies
+  // the differing separator/drive characters that this expression normalizes.
+  void platform;
+  const escaped = cwd.replace(/[^a-zA-Z0-9]/g, "-");
+  if (escaped.length <= CLAUDE_PROJECT_KEY_CAP) return escaped;
+  return `${escaped.slice(0, CLAUDE_PROJECT_KEY_CAP)}-${projectKeyHash(cwd)}`;
 }
 
 /**
@@ -284,7 +311,8 @@ export class ClaudeSpawner {
    *   so the waker can store the handle in its execution registry for the interrupt
    *   path BEFORE this promise resolves. It is invoked once, synchronously, only on a
    *   successful spawn; a spawn failure never calls it.
-   * @returns {Promise<{ sessionId: string, backendSessionId: string|null, exitCode: number|null, isNew: boolean }>}
+   * @returns {Promise<{ sessionId: string, backendSessionId: string|null, exitCode: number|null, isNew: boolean,
+   *                     failureClassification?: "session_conflict" }>}
    *   `backendSessionId` is the Claude `--resume` anchor (the input `sessionId`) on a
    *   terminal resolution after a spawn, so the conversation UI can offer a resumable
    *   id — mirrors codex-spawner's shape. `null` on the pre-spawn failure paths (no
@@ -369,6 +397,8 @@ export class ClaudeSpawner {
       }
 
       let stdoutBuf = "";
+      let stderrBuf = "";
+      let sessionConflictSeen = false;
       let observedSessionId = id;
 
       child.stdout?.setEncoding?.("utf8");
@@ -392,7 +422,10 @@ export class ClaudeSpawner {
 
       child.stderr?.setEncoding?.("utf8");
       child.stderr?.on("data", (chunk) => {
-        const text = String(chunk).trim();
+        const rawText = String(chunk);
+        stderrBuf = (stderrBuf + rawText).slice(-STDERR_BUFFER_LIMIT);
+        if (SESSION_CONFLICT_RE.test(stderrBuf)) sessionConflictSeen = true;
+        const text = rawText.trim();
         if (text) this.logger.warn(`[Chorus] claude stderr: ${text}`);
       });
 
@@ -411,7 +444,11 @@ export class ClaudeSpawner {
         }
         // backendSessionId is the `--resume` anchor (`id`), NOT observedSessionId (see
         // the process-error handler above for why the anchor is the resumable value).
-        resolve({ sessionId: observedSessionId, backendSessionId: id, exitCode: code, isNew });
+        const result = { sessionId: observedSessionId, backendSessionId: id, exitCode: code, isNew };
+        if (code !== null && code !== 0 && sessionConflictSeen) {
+          result.failureClassification = SESSION_CONFLICT_FAILURE;
+        }
+        resolve(result);
       });
 
       // Guard against an ASYNC stdin error (EPIPE): if claude exits/closes

package/cli/credentials.mjs

@@ -18,15 +18,19 @@
 
 import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { join, resolve } from "node:path";
 
 /** Absolute path to the login file written by `chorus login`. */
 export function loginFilePath() {
+  const override = process.env.CHORUS_DAEMON_CONFIG_PATH?.trim();
+  if (override) return resolve(override);
   return join(homedir(), ".chorus", "daemon.json");
 }
 
 /** Absolute path to the Claude Code user settings file (plugin fallback source). */
 export function claudeSettingsPath() {
+  const override = process.env.CHORUS_CLAUDE_SETTINGS_PATH?.trim();
+  if (override) return resolve(override);
   return join(homedir(), ".claude", "settings.json");
 }
 

package/cli/init/contracts.mjs

@@ -108,6 +108,8 @@ export const FAILURE_ACTIONS = Object.freeze([OUTCOME_ACTIONS.FAILED]);
  * @property {string} [agentId]     The current agent id (per-agent steps only).
  * @property {AgentAdapter} [adapter] The current agent's adapter (per-agent steps only).
  * @property {object} flags         Parsed init flags (see cli/init-args.mjs).
+ *   `flags.updateInstalled` is the orchestrator-resolved, invocation-wide
+ *   decision to refresh selected installed plugin payloads.
  * @property {{ log: (m: string) => void, ask: Function, isTTY: boolean }} io
  * @property {(path: string) => (string|null)} backup  Copy a file to <path>.chorus-bak
  *   once before overwrite; returns the backup path or null if the source is absent.

package/cli/init/install-methods.mjs

@@ -66,9 +66,10 @@ function readJsonSafe(path) {
 }
 
 // ---------------------------------------------------------------------------
-// Claude Code — VERIFIED against Claude Code 2.1.235:
+// Claude Code — VERIFIED LIVE against Claude Code 2.1.250:
 //   `claude plugin marketplace add <url|path|repo>`
 //   `claude plugin install <plugin@marketplace> -y`  (-y required when non-TTY)
+//   `claude plugin update <plugin@marketplace> -y`
 // State is read from ~/.claude/plugins/installed_plugins.json (read-only).
 // ---------------------------------------------------------------------------
 export function installClaude(ctx) {
@@ -77,6 +78,11 @@ export function installClaude(ctx) {
   const source = env.CHORUS_MARKETPLACE_SOURCE || CHORUS_MARKETPLACE_SOURCE;
   const state = safeState(ctx);
   if (state.pluginInstalled) {
+    if (ctx.flags?.updateInstalled) {
+      const r = run("claude", ["plugin", "update", CHORUS_PLUGIN_ID, "-y"], { env });
+      if (!r.ok) return out("claude", FAILED, `claude plugin update failed: ${errText(r)}`);
+      return out("claude", REPAIRED, `updated ${CHORUS_PLUGIN_ID} to latest via claude plugin update`);
+    }
     return out("claude", SKIPPED, `already installed${state.version ? ` (v${state.version})` : ""}`);
   }
   if (!state.marketplaceRegistered) {
@@ -91,6 +97,7 @@ export function installClaude(ctx) {
 // ---------------------------------------------------------------------------
 // Codex — VERIFIED against codex-cli 0.146.1 / 0.150.1:
 //   `codex plugin marketplace add <SOURCE>`   (SOURCE = local path | owner/repo[@ref] | Git URL)
+//   `codex plugin marketplace upgrade [MARKETPLACE_NAME]`
 //   `codex plugin add <PLUGIN@MARKETPLACE> --json`
 // config.toml is backed up before the CLI mutates it.
 //
@@ -153,6 +160,21 @@ export function installCodex(ctx) {
 
   if (state.pluginInstalled) {
     ctx.backup?.(configPath); // back up before we normalize the MCP block
+    if (ctx.flags?.updateInstalled) {
+      if (!state.marketplaceRegistered) {
+        const ra = run("codex", ["plugin", "marketplace", "add", source], { env });
+        if (!ra.ok) return out("codex", FAILED, `codex plugin marketplace add failed: ${errText(ra)}`);
+      }
+      const ru = run("codex", ["plugin", "marketplace", "upgrade", CHORUS_MARKETPLACE_NAME], { env });
+      if (!ru.ok) return out("codex", FAILED, `codex plugin marketplace upgrade failed: ${errText(ru)}`);
+      const rp = run("codex", ["plugin", "add", CHORUS_PLUGIN_ID, "--json"], { env });
+      if (!rp.ok) return out("codex", FAILED, `codex plugin add failed: ${errText(rp)}`);
+      return out(
+        "codex",
+        REPAIRED,
+        `refreshed ${CHORUS_MARKETPLACE_NAME} and reinstalled ${CHORUS_PLUGIN_ID}${ensureMcp()}`,
+      );
+    }
     return out("codex", SKIPPED, `already installed (config.toml)${ensureMcp()}`);
   }
 
@@ -171,8 +193,9 @@ export function installCodex(ctx) {
 }
 
 // ---------------------------------------------------------------------------
-// opencode — VERIFIED against opencode 1.14.33:
+// opencode — VERIFIED LIVE against opencode 1.14.33:
 //   `opencode plugin <module>`  ("install plugin and update config")
+//   `--global` targets the user config; `--force` replaces an existing version.
 // module name "opencode-chorus" from public/install-opencode.sh. opencode.json
 // is backed up before the CLI mutates it.
 // ---------------------------------------------------------------------------
@@ -195,15 +218,21 @@ export function installOpencode(ctx) {
   const home = env.HOME || homedir();
   const dir = env.OPENCODE_CONFIG_DIR || join(home, ".config", "opencode");
   const state = safeState(ctx);
-  if (state.pluginInstalled) return out("opencode", SKIPPED, "already in opencode.json plugin list");
+  if (state.pluginInstalled && !ctx.flags?.updateInstalled) {
+    return out("opencode", SKIPPED, "already in opencode.json plugin list");
+  }
 
   ctx.backup?.(join(dir, "opencode.json")); // back up before the CLI edits it
   // `-g` writes the GLOBAL ~/.config/opencode/opencode.json (the same file
   // readOpencodeInstallState checks); without it opencode installs project-local
   // (cwd), which would defeat idempotency for a machine-wide `chorus init`.
-  const r = run("opencode", ["plugin", OPENCODE_PLUGIN_MODULE, "-g"], { env });
+  const args = ["plugin", OPENCODE_PLUGIN_MODULE, "-g"];
+  if (state.pluginInstalled) args.push("--force");
+  const r = run("opencode", args, { env });
   if (!r.ok) return out("opencode", FAILED, `opencode plugin install failed: ${errText(r)}`);
-  return out("opencode", INSTALLED, `installed ${OPENCODE_PLUGIN_MODULE} via opencode plugin -g`);
+  return state.pluginInstalled
+    ? out("opencode", REPAIRED, `updated ${OPENCODE_PLUGIN_MODULE} to latest via opencode plugin -g --force`)
+    : out("opencode", INSTALLED, `installed ${OPENCODE_PLUGIN_MODULE} via opencode plugin -g`);
 }
 
 // ---------------------------------------------------------------------------
@@ -225,18 +254,35 @@ const DSH_BUNDLE = "@chorus-aidlc/chorus-dsh";
 export function readDshInstallState({ env = process.env, profile } = {}) {
   // Best-effort, per-profile idempotency probe. A dsh profile is a pnpm workspace
   // root under $DSH_HOME (docs/CONNECT_DSH.md); a profile that has added the bundle
-  // records it in that root's package.json. The exact layout is NOT verifiable here,
-  // so this degrades to "not installed" if it differs (dsh's own `add` is idempotent)
-  // — never a false positive, never a throw. Called with no `profile` (registry-level
-  // detection, which does not know the user's pick) it reports not-installed.
-  if (!profile) return { marketplaceRegistered: false, pluginInstalled: false };
+  // records it in that root's package.json. Before an interactive profile has
+  // been chosen, inspect the live profiles/<name> store so runInit can include
+  // dsh in its one invocation-wide installed-plugin refresh decision.
   const home = env.HOME || homedir();
   const dshHome = env.DSH_HOME || join(home, ".dsh");
-  const pkg = readJsonSafe(join(dshHome, profile, "package.json"));
-  const deps = { ...(pkg?.dependencies ?? {}), ...(pkg?.devDependencies ?? {}) };
+  let candidates;
+  if (profile) {
+    candidates = [
+      join(dshHome, "profiles", profile, "package.json"),
+      join(dshHome, profile, "package.json"),
+    ];
+  } else {
+    try {
+      candidates = readdirSync(join(dshHome, "profiles"), { withFileTypes: true })
+        .filter((entry) => entry.isDirectory())
+        .map((entry) => join(dshHome, "profiles", entry.name, "package.json"));
+    } catch {
+      candidates = [];
+    }
+  }
+  const packagePath = candidates.find((path) => {
+    const pkg = readJsonSafe(path);
+    const deps = { ...(pkg?.dependencies ?? {}), ...(pkg?.devDependencies ?? {}) };
+    return Object.prototype.hasOwnProperty.call(deps, DSH_BUNDLE);
+  });
   return {
     marketplaceRegistered: false, // dsh has no marketplace concept
-    pluginInstalled: Object.prototype.hasOwnProperty.call(deps, DSH_BUNDLE),
+    pluginInstalled: !!packagePath,
+    packagePath: packagePath ?? (profile ? candidates[0] : undefined),
   };
 }
 
@@ -276,11 +322,16 @@ export async function installDsh(ctx) {
 
   // Idempotency: skip when the chosen profile already carries the bundle.
   const state = safeState(ctx, { profile });
-  if (state.pluginInstalled) return out("dsh", SKIPPED, `already installed in dsh profile '${profile}'`);
+  if (state.pluginInstalled && !ctx.flags?.updateInstalled) {
+    return out("dsh", SKIPPED, `already installed in dsh profile '${profile}'`);
+  }
+  if (state.pluginInstalled) ctx.backup?.(state.packagePath);
 
   const r = run("dsh", ["plugin", "--profile", profile, "add", DSH_BUNDLE, "-w"], { env });
   if (!r.ok) return out("dsh", FAILED, `dsh plugin add failed: ${errText(r)}`);
-  return out("dsh", INSTALLED, `installed ${DSH_BUNDLE} into dsh profile '${profile}'`);
+  return state.pluginInstalled
+    ? out("dsh", REPAIRED, `updated ${DSH_BUNDLE} to latest in dsh profile '${profile}'`)
+    : out("dsh", INSTALLED, `installed ${DSH_BUNDLE} into dsh profile '${profile}'`);
 }
 
 // ---------------------------------------------------------------------------
@@ -377,7 +428,7 @@ export function installOpenclaw(ctx) {
 
   // Already installed AND enabled → nothing to do. No version probe needed: an
   // enabled-and-loaded plugin necessarily already satisfied the host floor.
-  if (state.pluginInstalled && state.pluginEnabled) {
+  if (state.pluginInstalled && state.pluginEnabled && !ctx.flags?.updateInstalled) {
     return out("openclaw", SKIPPED, "already installed and enabled");
   }
 
@@ -395,18 +446,26 @@ export function installOpenclaw(ctx) {
   }
 
   // Installed-but-disabled → enable only (repair).
-  if (state.pluginInstalled) {
+  if (state.pluginInstalled && !ctx.flags?.updateInstalled) {
     const re = run("openclaw", ["plugins", "enable", OPENCLAW_PLUGIN_ID], { env });
     if (!re.ok) return out("openclaw", FAILED, `openclaw plugins enable failed: ${errText(re)}`);
     return out("openclaw", REPAIRED, `enabled ${OPENCLAW_PLUGIN_ID} (was installed but disabled)`);
   }
 
-  // Fresh → install from npm, then enable.
+  // Fresh or accepted refresh → install from npm, then ensure enabled. Back up
+  // the mutable host config before an installed payload is refreshed.
+  if (state.pluginInstalled) {
+    const home = env.HOME || homedir();
+    const dir = env.OPENCLAW_CONFIG_DIR || join(home, ".openclaw");
+    ctx.backup?.(join(dir, "openclaw.json"));
+  }
   const ri = run("openclaw", ["plugins", "install", OPENCLAW_NPM_SPEC], { env });
   if (!ri.ok) return out("openclaw", FAILED, `openclaw plugins install failed: ${errText(ri)}`);
   const re = run("openclaw", ["plugins", "enable", OPENCLAW_PLUGIN_ID], { env });
   if (!re.ok) return out("openclaw", FAILED, `openclaw plugins enable failed: ${errText(re)}`);
-  return out("openclaw", INSTALLED, `installed ${OPENCLAW_NPM_SPEC} and enabled ${OPENCLAW_PLUGIN_ID}`);
+  return state.pluginInstalled
+    ? out("openclaw", REPAIRED, `reinstalled latest ${OPENCLAW_NPM_SPEC} and ensured ${OPENCLAW_PLUGIN_ID} is enabled`)
+    : out("openclaw", INSTALLED, `installed ${OPENCLAW_NPM_SPEC} and enabled ${OPENCLAW_PLUGIN_ID}`);
 }
 
 // ---------------------------------------------------------------------------
@@ -457,14 +516,16 @@ export async function installKiro(ctx) {
   const chorusUrl = nonEmpty(ctx.flags?.url) ?? nonEmpty(env.CHORUS_URL);
 
   const state = safeState(ctx);
-  if (state.pluginInstalled) return out("kiro", SKIPPED, `already installed (${kiroDir})`);
+  if (state.pluginInstalled && !ctx.flags?.updateInstalled) {
+    return out("kiro", SKIPPED, `already installed (${kiroDir})`);
+  }
 
   if (!chorusUrl) {
     return out("kiro", FAILED, "no Chorus URL — pass --url or set CHORUS_URL so the .kiro/ template can be downloaded from the connected instance");
   }
 
   // Any chorus-* asset already present ⇒ this is a delta repair, not a fresh drop.
-  const repairing = !!(state.skillsPresent || state.agentPresent || state.mcpServerPresent);
+  const repairing = !!(state.pluginInstalled || state.skillsPresent || state.agentPresent || state.mcpServerPresent);
   try {
     const res = await installFileTemplate({
       chorusUrl,

package/cli/init-args.mjs

@@ -113,7 +113,8 @@ OPTIONS
                            auto-start is unsupported (e.g. Windows). In an
                            interactive TTY run the daemon-setup step prompts instead
                            (default: No).
-  -y, --yes                Skip confirmation prompts (implied when non-TTY).
+  -y, --yes                Accept confirmation prompts, including refreshing
+                           installed plugins to latest (implied when non-TTY).
   -h, --help               Show this help message.
 
 NON-INTERACTIVE
@@ -121,6 +122,8 @@ NON-INTERACTIVE
   will not guess which agents to configure and aborts otherwise. The daemon boot service is
   installed non-interactively ONLY when you pass --daemon-autostart; otherwise the
   daemon config is written and you start it yourself with 'chorus daemon'.
+  With an explicit selection, --yes and non-TTY runs refresh selected installed
+  plugins to their latest available versions without prompting.
 
 SCOPE
   This installs the plugin SURFACE, seeds credentials into the daemon config, and

package/cli/init.mjs

@@ -97,11 +97,26 @@ export async function runInit(argv = [], deps = {}) {
 
   io.log(`[chorus agents add] Configuring: ${selectedIds.join(", ")}`);
 
+  // Resolve adapters once: update-intent detection and per-agent steps must see
+  // the same adapter instances/state readers.
+  const adapters = new Map();
+  for (const agentId of selectedIds) {
+    adapters.set(agentId, await getAdapter(agentId));
+  }
+  const updateInstalled = await resolveUpdateInstalled({
+    selectedIds,
+    adapters,
+    flags,
+    env,
+    io,
+  });
+  const resolvedFlags = { ...flags, updateInstalled };
+
   const steps = await orderedSteps();
   // `ctxExtras` lets a caller/test inject step-context collaborators (e.g. a
   // fake credential validator or command runner) so an end-to-end run is
   // hermetic; production passes none and steps use their real defaults.
-  const baseCtx = { selection: selectedIds, flags, io, env, backup, ...(deps.ctxExtras ?? {}) };
+  const baseCtx = { selection: selectedIds, flags: resolvedFlags, io, env, backup, ...(deps.ctxExtras ?? {}) };
   /** @type {import("./init/contracts.mjs").StepOutcome[]} */
   const outcomes = [];
 
@@ -109,7 +124,7 @@ export async function runInit(argv = [], deps = {}) {
     try {
       if (step.scope === STEP_SCOPES.PER_AGENT) {
         for (const agentId of selectedIds) {
-          const adapter = await getAdapter(agentId);
+          const adapter = adapters.get(agentId);
           outcomes.push(await step.run({ ...baseCtx, agentId, adapter }));
         }
       } else {
@@ -129,6 +144,36 @@ export async function runInit(argv = [], deps = {}) {
   return outcomes.flat().some(isFailureOutcome) ? 1 : 0;
 }
 
+/**
+ * Resolve one installed-plugin update decision for the whole invocation.
+ * Unsupported/guided adapters and selected adapters without an installed
+ * Chorus payload do not trigger the question. `--yes` and non-TTY runs accept
+ * automatically; an interactive answer defaults to no.
+ */
+export async function resolveUpdateInstalled({ selectedIds, adapters, flags, env, io }) {
+  let anyInstalled = false;
+  for (const agentId of selectedIds) {
+    const adapter = adapters.get(agentId);
+    if (!adapter || typeof adapter.readInstallState !== "function") continue;
+    try {
+      const profile = flags.dshProfile ?? env.CHORUS_DSH_PROFILE;
+      const state = await adapter.readInstallState({ env, profile });
+      if (state?.supported === true && state?.pluginInstalled === true) {
+        anyInstalled = true;
+        break;
+      }
+    } catch {
+      // State probes are advisory and read-only. A broken probe must not block
+      // normal repair/install work; the installer will report its own outcome.
+    }
+  }
+  if (!anyInstalled) return false;
+  if (flags.yes || !io.isTTY) return true;
+  if (typeof io.ask !== "function") return false;
+  const answer = String(await io.ask("Update installed Chorus plugins to the latest available versions? [y/N] ")).trim();
+  return /^(?:y|yes)$/i.test(answer);
+}
+
 /** Print the per-outcome summary table. */
 export function summarize(outcomes, io, selectedIds = []) {
   io.log("");

package/cli/kiro-spawner.mjs

@@ -222,6 +222,7 @@ export function pickNewSessionId(before, after) {
 export class KiroSpawner {
   /** @param {KiroSpawnerOptions} [opts] */
   constructor(opts = {}) {
+    this.sessionDecision = { probeIsAuthoritative: false };
     this.kiroPath = opts.kiroPath ?? null;
     this.spawnImpl = opts.spawnImpl ?? spawn;
     this.logger = opts.logger ?? NOOP_LOGGER;