@dsiloed/silo-link 1.19.15 → 1.19.16

package/dist/cli/claude-md-block.d.ts

@@ -4,5 +4,5 @@
  *
  * Keep this block SHORT. It loads into every SiloLink-launched agent's context.
  */
-export declare const SILOLINK_CLAUDE_MD_BLOCK = "## Remote Communication (SiloLink)\n\nApplies only when launched via SiloLink (prompt contains `conversation_id` or tells you to `remote_register`). Ignore otherwise.\n\n- Register with `remote_register({ conversation_id })`.\n- Call `remote_load_context()` ONLY on a fresh session. Skip it when you were resumed \u2014 you already have the history.\n- All communication via `remote_notify` / `remote_ask`. Never print to the terminal; the user is in Harmoniq, not watching.\n- **@-mention discipline.** Your launch prompt has a `**Dispatched by:** @<DispatcherHandle>` line. ANY message that needs your dispatcher to act \u2014 mid-task questions, blockers, errors, requests for direction, AND your final completion \u2014 MUST start with that `@<DispatcherHandle>` **AND be posted to the report conv** (`mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })`), not via `remote_notify` to the dispatch conv. Mention-dispatch only wakes the dispatcher's LlmAgent when the @-mention lands in a conversation they're a member of \u2014 the dispatch conv is per-session and they're typically not subscribed; the report conv is the channel they read. Routine progress notes (\"phase 2 done, starting tests\") still go via `remote_notify` (no @-mention needed).\n- Send a `remote_notify` after every major step (file edits, commits, merges, errors). Going silent = user blind.\n- Poll loop: `remote_poll()` blocks up to 30s server-side (longer blocks risk Claude killing the tool as hung \u2014 keep this value as-is). If `{pending:true}`, loop again. The poll loop is the **safety net**, not the primary exit path \u2014 see \"Self-kill when work is done\" below. After **~60 consecutive pending (~30 min idle)**, `remote_notify(\"Going idle\")`, `remote_unregister()`, exit.\n- Every polled message is new; the queue drops it on your next call. Never ignore one. `remote_load_context()` is history-only.\n- Prefer small/cheap models for mechanical work (running specs, PR creation, merges). Use one-shot sub-sessions when possible to keep the main polling session's context lean.\n\n### Two conversations are in play\n\nYou typically have TWO distinct conversation ids in your session:\n- **Dispatch conv** \u2014 the conv you `remote_register`'d on (e.g. `silolink-claude-convN`). SiloLink relays operator messages from this conv to your poll loop.\n- **Report conv** \u2014 the conv where the originating user is watching for your final findings. Passed to you as `report_to_conversation_id` in your launch prompt. Often different from the dispatch conv (e.g. dispatch is per-ticket, report is the user's group/DM channel).\n\nRouting rule, by message kind:\n\n| Message kind | Tool | Lands in | @-mention? |\n|---|---|---|---|\n| Routine progress (\"phase 2 done\", logs, heartbeats) | `remote_notify` | dispatch conv | no |\n| **Mid-task questions / blockers / requests for direction** | `mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })` | **report conv** | **YES \u2014 start with `@<DispatcherHandle>`** |\n| Final findings on completion | `mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })` | report conv | YES \u2014 start with `@<DispatcherHandle>` |\n\nWhy mid-task questions go to the **report conv** and not the dispatch conv: the dispatch conv (`silolink-claude-convN`) is per-session and the dispatcher's LlmAgent isn't typically subscribed to it. `remote_notify` with an @-mention there lands silently and the dispatcher never wakes. The report conv is the channel they read \u2014 @-mention dispatch fires there.\n\n### Self-kill when work is done\n\nDon't sit in the poll loop after your work for this dispatch is finished. When you reach a true terminal state, call `remote_notify(\"Done \u2014 unregistering\")` then `remote_unregister()` and exit cleanly. Orphan idle CCs each burn ~$0.50/hr on the safety-net timeout, so explicit self-kill is the primary exit path \u2014 when it's actually time.\n\n**HARD PRECONDITIONS \u2014 verify ALL before calling `remote_unregister()`. If any fails, do NOT self-kill; stay in the poll loop and finish.**\n\n1. **No uncommitted changes.** `git status --porcelain` returns empty in your cwd (and in any worktree you opened). If you made edits, commit them first.\n2. **No unpushed commits.** `git log @{u}..` returns empty on every branch you touched. Push before you exit.\n3. **MR opened if your runbook requires one.** Verify via `git_provider_tool get_mr` that the MR exists with `state: \"opened\"`. \"I plan to open it\" is not enough \u2014 open it, then verify.\n4. **No subprocess you started is still running.** Tests, builds, long scripts: wait for the exit code and capture the result. **\"Now running tests\" is NOT a terminal state** \u2014 \"tests passed (or failed with documented next steps)\" is.\n5. **Final findings posted, starting with `@<DispatcherHandle>`** per the @-mention discipline above. Final goes to `report_to_conversation_id` if set, otherwise the dispatch conv via `remote_notify`. Same rule applies to *any* mid-flight message that needed dispatcher action \u2014 they all required the mention, not just this last one.\n\nWhat counts as \"done\" is agent-specific (your runbook may add more preconditions on top of the five above). When in doubt: stay in the poll loop, `remote_notify` what you're waiting on, and let the operator decide.\n\nIf the work fails or you hit a question the operator must answer, do NOT self-kill. Stay in the poll loop and wait \u2014 exiting with unanswered questions strands the operator.\n\n### If a report-conv post fails\n\nIf `remote_post` to your `report_to_conversation_id` returns an error (404 not found, 403 forbidden, etc.):\n1. Retry once. Transient errors do happen.\n2. If the second attempt fails the same way, do NOT silently drop your findings. Post them to your **dispatch conv** instead with a clear note: `\u26A0 remote_post to report conv <X> returned <error> \u2014 posting findings here for triage`. Then exit.\n\nFindings landing somewhere a human can see them matters more than landing in the \"right\" channel. Never let an unreachable report conv strand a completed task.\n\n### Permissions\n\nYou were launched with `--dangerously-skip-permissions` and silolink has pre-cleared the bypass-permissions consent gate, so per-command permission prompts should not appear. If you DO hit one mid-task (usually CC's hardcoded circuit breaker on patterns like `rm -rf /` or `rm -rf ~`):\n\n- Do NOT sit waiting \u2014 there's no human at the keyboard to click \"Yes\".\n- Call `remote_ask` with the prompt text so the operator can decide.\n- The operator can also drive the prompt directly from the web UI's peek dialog (the `send_keys` control command sends keystrokes into your tmux pane).\n\nIf a prompt appeared on a routine command (not a circuit-breaker pattern), report it via `remote_notify` \u2014 it likely means the bypass-consent didn't get pre-written and silolink needs to be restarted.\n";
+export declare const SILOLINK_CLAUDE_MD_BLOCK = "## Remote Communication (SiloLink)\n\nApplies only when launched via SiloLink (prompt contains `conversation_id` or tells you to `remote_register`). Ignore otherwise.\n\n- Register with `remote_register({ conversation_id })`.\n- Call `remote_load_context()` ONLY on a fresh session. Skip it when you were resumed \u2014 you already have the history.\n- All communication via `remote_notify` / `remote_ask`. Never print to the terminal; the user is in Harmoniq, not watching.\n- **@-mention discipline.** Your launch prompt has a `**Dispatched by:** @<DispatcherHandle>` line. ANY message that needs your dispatcher to act \u2014 mid-task questions, blockers, errors, requests for direction, AND your final completion \u2014 MUST start with that `@<DispatcherHandle>` **AND be posted to the report conv** (`mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })`), not via `remote_notify` to the dispatch conv. Mention-dispatch only wakes the dispatcher's LlmAgent when the @-mention lands in a conversation they're a member of \u2014 the dispatch conv is per-session and they're typically not subscribed; the report conv is the channel they read. Routine progress notes (\"phase 2 done, starting tests\") still go via `remote_notify` (no @-mention needed).\n- Send a `remote_notify` after every major step (file edits, commits, merges, errors). Going silent = user blind.\n- Poll loop: `remote_poll()` blocks up to 30s server-side (longer blocks risk Claude killing the tool as hung \u2014 keep this value as-is). If `{pending:true}`, loop again. The poll loop is the **safety net**, not the primary exit path \u2014 see \"Self-kill when work is done\" below. After **~60 consecutive pending (~30 min idle)**, `remote_notify(\"Going idle\")`, `remote_unregister()`, exit.\n- Every polled message is new; the queue drops it on your next call. Never ignore one. `remote_load_context()` is history-only.\n- Prefer small/cheap models for mechanical work (running specs, PR creation, merges). Use one-shot sub-sessions when possible to keep the main polling session's context lean.\n\n### Two conversations are in play\n\nYou typically have TWO distinct conversation ids in your session:\n- **Dispatch conv** \u2014 the conv you `remote_register`'d on (e.g. `silolink-claude-convN`). SiloLink relays operator messages from this conv to your poll loop.\n- **Report conv** \u2014 the conv where the originating user is watching for your final findings. Passed to you as `report_to_conversation_id` in your launch prompt. Often different from the dispatch conv (e.g. dispatch is per-ticket, report is the user's group/DM channel).\n\nRouting rule, by message kind:\n\n| Message kind | Tool | Lands in | @-mention? |\n|---|---|---|---|\n| Routine progress (\"phase 2 done\", logs, heartbeats) | `remote_notify` | dispatch conv | no |\n| **Mid-task questions / blockers / requests for direction** | `mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })` | **report conv** | **YES \u2014 start with `@<DispatcherHandle>`** |\n| Final findings on completion | `mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id>, final: true })` | report conv | YES \u2014 start with `@<DispatcherHandle>` |\n\nPass `final: true` on that ONE completion post (`remote_post` or `remote_notify`). It tags the message as your completion for the dispatcher and tells the daemon it may end this session gracefully once no new work arrives for ~2 minutes. Never set it on progress updates.\n\nWhy mid-task questions go to the **report conv** and not the dispatch conv: the dispatch conv (`silolink-claude-convN`) is per-session and the dispatcher's LlmAgent isn't typically subscribed to it. `remote_notify` with an @-mention there lands silently and the dispatcher never wakes. The report conv is the channel they read \u2014 @-mention dispatch fires there.\n\n### Self-kill when work is done\n\nDon't sit in the poll loop after your work for this dispatch is finished. When you reach a true terminal state, call `remote_notify(\"Done \u2014 unregistering\")` then `remote_unregister()` and exit cleanly. Orphan idle CCs each burn ~$0.50/hr on the safety-net timeout, so explicit self-kill is the primary exit path \u2014 when it's actually time.\n\n**HARD PRECONDITIONS \u2014 verify ALL before calling `remote_unregister()`. If any fails, do NOT self-kill; stay in the poll loop and finish.**\n\n1. **No uncommitted changes.** `git status --porcelain` returns empty in your cwd (and in any worktree you opened). If you made edits, commit them first.\n2. **No unpushed commits.** `git log @{u}..` returns empty on every branch you touched. Push before you exit.\n3. **MR opened if your runbook requires one.** Verify via `git_provider_tool get_mr` that the MR exists with `state: \"opened\"`. \"I plan to open it\" is not enough \u2014 open it, then verify.\n4. **No subprocess you started is still running.** Tests, builds, long scripts: wait for the exit code and capture the result. **\"Now running tests\" is NOT a terminal state** \u2014 \"tests passed (or failed with documented next steps)\" is.\n5. **Final findings posted, starting with `@<DispatcherHandle>`** per the @-mention discipline above. Final goes to `report_to_conversation_id` if set, otherwise the dispatch conv via `remote_notify`. Same rule applies to *any* mid-flight message that needed dispatcher action \u2014 they all required the mention, not just this last one.\n\nWhat counts as \"done\" is agent-specific (your runbook may add more preconditions on top of the five above). When in doubt: stay in the poll loop, `remote_notify` what you're waiting on, and let the operator decide.\n\nIf the work fails or you hit a question the operator must answer, do NOT self-kill. Stay in the poll loop and wait \u2014 exiting with unanswered questions strands the operator.\n\n### If a report-conv post fails\n\nIf `remote_post` to your `report_to_conversation_id` returns an error (404 not found, 403 forbidden, etc.):\n1. Retry once. Transient errors do happen.\n2. If the second attempt fails the same way, do NOT silently drop your findings. Post them to your **dispatch conv** instead with a clear note: `\u26A0 remote_post to report conv <X> returned <error> \u2014 posting findings here for triage`. Then exit.\n\nFindings landing somewhere a human can see them matters more than landing in the \"right\" channel. Never let an unreachable report conv strand a completed task.\n\n### Permissions\n\nYou were launched with `--dangerously-skip-permissions` and silolink has pre-cleared the bypass-permissions consent gate, so per-command permission prompts should not appear. If you DO hit one mid-task (usually CC's hardcoded circuit breaker on patterns like `rm -rf /` or `rm -rf ~`):\n\n- Do NOT sit waiting \u2014 there's no human at the keyboard to click \"Yes\".\n- Call `remote_ask` with the prompt text so the operator can decide.\n- The operator can also drive the prompt directly from the web UI's peek dialog (the `send_keys` control command sends keystrokes into your tmux pane).\n\nIf a prompt appeared on a routine command (not a circuit-breaker pattern), report it via `remote_notify` \u2014 it likely means the bypass-consent didn't get pre-written and silolink needs to be restarted.\n";
 //# sourceMappingURL=claude-md-block.d.ts.map

package/dist/cli/claude-md-block.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-md-block.d.ts","sourceRoot":"","sources":["../../src/cli/claude-md-block.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,o3NA8DpC,CAAC"}
+{"version":3,"file":"claude-md-block.d.ts","sourceRoot":"","sources":["../../src/cli/claude-md-block.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,opOAgEpC,CAAC"}

package/dist/cli/claude-md-block.js

@@ -29,7 +29,9 @@ Routing rule, by message kind:
 |---|---|---|---|
 | Routine progress ("phase 2 done", logs, heartbeats) | \`remote_notify\` | dispatch conv | no |
 | **Mid-task questions / blockers / requests for direction** | \`mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })\` | **report conv** | **YES — start with \`@<DispatcherHandle>\`** |
-| Final findings on completion | \`mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id> })\` | report conv | YES — start with \`@<DispatcherHandle>\` |
+| Final findings on completion | \`mcp__silolink__remote_post({ conversation_id: <report_to_conversation_id>, final: true })\` | report conv | YES — start with \`@<DispatcherHandle>\` |
+
+Pass \`final: true\` on that ONE completion post (\`remote_post\` or \`remote_notify\`). It tags the message as your completion for the dispatcher and tells the daemon it may end this session gracefully once no new work arrives for ~2 minutes. Never set it on progress updates.
 
 Why mid-task questions go to the **report conv** and not the dispatch conv: the dispatch conv (\`silolink-claude-convN\`) is per-session and the dispatcher's LlmAgent isn't typically subscribed to it. \`remote_notify\` with an @-mention there lands silently and the dispatcher never wakes. The report conv is the channel they read — @-mention dispatch fires there.
 

package/dist/cli/claude-md-block.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-md-block.js","sourceRoot":"","sources":["../../src/cli/claude-md-block.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DvC,CAAC"}
+{"version":3,"file":"claude-md-block.js","sourceRoot":"","sources":["../../src/cli/claude-md-block.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEvC,CAAC"}

package/dist/cli/file-log.d.ts

@@ -7,15 +7,70 @@
  * the file with O_TRUNC before the CLI prints anything. The daemon now owns its log —
  * opened with O_APPEND, under ~/.silolink/logs/ — so no wrapper is needed and a
  * double-start can never clobber history.
+ *
+ * 2026-08-24 (doug daemon, pop-os): a start script that redirected
+ * `>> ~/.silolink/logs/silolink-doug.log 2>&1` made fd 1/2 the SAME file the tee
+ * appends to, so 107 of 471 boot lines were doubled — and nothing in the file
+ * carried a timestamp except the boot banner. The tee now (1) fstat-compares fd 1/2
+ * against the log file and skips the tee for an fd that already IS the log,
+ * (2) stamps every line it writes to the file with an ISO-8601 timestamp, and
+ * (3) mutes console output for non-TTY fds (the file is the single sink) unless
+ * SILOLINK_CONSOLE=1 asks to keep it.
  */
 export declare function logFilePath(env?: string): string;
+/** Per-fd line-boundary tracker so a timestamp is only ever inserted at a line start. */
+export interface LineStampState {
+    atLineStart: boolean;
+}
+/**
+ * Prefix every line START in `text` with `<iso timestamp> `. Chunks may hold many
+ * newlines or none at all; the state carries the "are we at a line start" bit across
+ * chunks so a line split over several writes is stamped exactly once. Empty lines
+ * (a bare "\n" at a line start) are left blank rather than stamped.
+ */
+export declare function stampLines(text: string, state: LineStampState, now?: () => string): string;
+/** True when `fd` refers to the same inode as `filePath` (i.e. the fd IS the log file). */
+export declare function fdIsFile(fd: number, filePath: string): boolean;
+export interface FileLogStatus {
+    path: string;
+    bytes: number;
+    stdout_is_log: boolean;
+    stderr_is_log: boolean;
+    console_muted: boolean;
+}
+/** Snapshot of the attached file log for the health block (null when not attached). */
+export declare function getFileLogStatus(): FileLogStatus | null;
+export interface AttachOptions {
+    /** Override for tests: explicit log file path (default: logFilePath(env)). */
+    path?: string;
+    /** Override for tests: which fds back stdout/stderr (default 1 and 2). */
+    fds?: {
+        stdout: number;
+        stderr: number;
+    };
+    /** Override for tests: TTY-ness of each std stream (default: the real isTTY). */
+    isTTY?: {
+        stdout: boolean;
+        stderr: boolean;
+    };
+    /** Override for tests: SILOLINK_CONSOLE value (default: process.env). */
+    consoleEnv?: string | undefined;
+    /** Override for tests: timestamp source. */
+    now?: () => string;
+}
 /**
  * Tee all stdout/stderr writes of THIS process into the env's append-mode log file,
- * prefixed by a timestamped session-start banner. Console behavior is unchanged —
- * tmux operators still see live output; the file is additive.
+ * prefixed by a timestamped session-start banner, with every subsequent line stamped.
+ *
+ * Per fd:
+ *  - fd IS the log file (operator redirected `>> silolink-<env>.log`): write the stamped
+ *    chunk through the ORIGINAL fd only — never also through the tee (no doubled lines).
+ *  - fd is a TTY, or SILOLINK_CONSOLE=1: tee to the file (stamped) AND echo raw to the fd.
+ *  - otherwise (fd is /dev/null, a pipe, some other file): file only — the file is the
+ *    single sink and the redirect target stops accumulating a second copy.
  *
  * Returns the log path (for printing), or null when the log file could not be
  * opened — logging must never prevent the bridge from starting.
  */
-export declare function attachFileLog(env: string | undefined, version: string): string | null;
+export declare function attachFileLog(env: string | undefined, version: string, opts?: AttachOptions): string | null;
 //# sourceMappingURL=file-log.d.ts.map

package/dist/cli/file-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-log.d.ts","sourceRoot":"","sources":["../../src/cli/file-log.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BrF"}
+{"version":3,"file":"file-log.d.ts","sourceRoot":"","sources":["../../src/cli/file-log.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAuC,GAAG,MAAM,CAc1H;AAED,2FAA2F;AAC3F,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQ9D;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;CACxB;AAID,uFAAuF;AACvF,wBAAgB,gBAAgB,IAAI,aAAa,GAAG,IAAI,CAKvD;AAED,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iFAAiF;IACjF,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7C,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,GAAG,IAAI,CA8D/G"}

package/dist/cli/file-log.js

@@ -10,39 +10,142 @@ import { getConfigDir } from '../config/config-manager.js';
  * the file with O_TRUNC before the CLI prints anything. The daemon now owns its log —
  * opened with O_APPEND, under ~/.silolink/logs/ — so no wrapper is needed and a
  * double-start can never clobber history.
+ *
+ * 2026-08-24 (doug daemon, pop-os): a start script that redirected
+ * `>> ~/.silolink/logs/silolink-doug.log 2>&1` made fd 1/2 the SAME file the tee
+ * appends to, so 107 of 471 boot lines were doubled — and nothing in the file
+ * carried a timestamp except the boot banner. The tee now (1) fstat-compares fd 1/2
+ * against the log file and skips the tee for an fd that already IS the log,
+ * (2) stamps every line it writes to the file with an ISO-8601 timestamp, and
+ * (3) mutes console output for non-TTY fds (the file is the single sink) unless
+ * SILOLINK_CONSOLE=1 asks to keep it.
  */
 export function logFilePath(env) {
     const slug = env || 'default';
     return path.join(getConfigDir(), 'logs', `silolink-${slug}.log`);
 }
+/**
+ * Prefix every line START in `text` with `<iso timestamp> `. Chunks may hold many
+ * newlines or none at all; the state carries the "are we at a line start" bit across
+ * chunks so a line split over several writes is stamped exactly once. Empty lines
+ * (a bare "\n" at a line start) are left blank rather than stamped.
+ */
+export function stampLines(text, state, now = () => new Date().toISOString()) {
+    if (!text)
+        return text;
+    let out = '';
+    let i = 0;
+    while (i < text.length) {
+        const nl = text.indexOf('\n', i);
+        const end = nl === -1 ? text.length : nl + 1;
+        const seg = text.slice(i, end);
+        if (state.atLineStart && seg !== '\n')
+            out += `${now()} `;
+        out += seg;
+        state.atLineStart = seg.endsWith('\n');
+        i = end;
+    }
+    return out;
+}
+/** True when `fd` refers to the same inode as `filePath` (i.e. the fd IS the log file). */
+export function fdIsFile(fd, filePath) {
+    try {
+        const a = fs.fstatSync(fd);
+        const b = fs.statSync(filePath);
+        return a.dev === b.dev && a.ino === b.ino;
+    }
+    catch {
+        return false;
+    }
+}
+let current = null;
+/** Snapshot of the attached file log for the health block (null when not attached). */
+export function getFileLogStatus() {
+    if (!current)
+        return null;
+    let bytes = 0;
+    try {
+        bytes = fs.statSync(current.path).size;
+    }
+    catch { /* unreadable → 0 */ }
+    return { ...current, bytes };
+}
 /**
  * Tee all stdout/stderr writes of THIS process into the env's append-mode log file,
- * prefixed by a timestamped session-start banner. Console behavior is unchanged —
- * tmux operators still see live output; the file is additive.
+ * prefixed by a timestamped session-start banner, with every subsequent line stamped.
+ *
+ * Per fd:
+ *  - fd IS the log file (operator redirected `>> silolink-<env>.log`): write the stamped
+ *    chunk through the ORIGINAL fd only — never also through the tee (no doubled lines).
+ *  - fd is a TTY, or SILOLINK_CONSOLE=1: tee to the file (stamped) AND echo raw to the fd.
+ *  - otherwise (fd is /dev/null, a pipe, some other file): file only — the file is the
+ *    single sink and the redirect target stops accumulating a second copy.
  *
  * Returns the log path (for printing), or null when the log file could not be
  * opened — logging must never prevent the bridge from starting.
  */
-export function attachFileLog(env, version) {
+export function attachFileLog(env, version, opts = {}) {
     try {
-        const logPath = logFilePath(env);
+        const logPath = opts.path ?? logFilePath(env);
         fs.mkdirSync(path.dirname(logPath), { recursive: true });
         const stream = fs.createWriteStream(logPath, { flags: 'a' });
         stream.write(`\n===== SiloLink session start ${new Date().toISOString()} ` +
             `(env=${env || 'default'} pid=${process.pid} v${version}) =====\n`);
-        for (const std of [process.stdout, process.stderr]) {
+        // Make sure the file exists on disk before fstat comparison (createWriteStream opens lazily).
+        try {
+            fs.closeSync(fs.openSync(logPath, 'a'));
+        }
+        catch { /* best effort */ }
+        const fds = opts.fds ?? { stdout: 1, stderr: 2 };
+        const tty = opts.isTTY ?? { stdout: !!process.stdout.isTTY, stderr: !!process.stderr.isTTY };
+        const consoleEnv = 'consoleEnv' in opts ? opts.consoleEnv : process.env.SILOLINK_CONSOLE;
+        const keepConsole = consoleEnv === '1';
+        const now = opts.now;
+        const streams = [
+            ['stdout', process.stdout],
+            ['stderr', process.stderr],
+        ];
+        const isLog = { stdout: false, stderr: false };
+        let muted = false;
+        for (const [name, std] of streams) {
+            const fdIsLog = fdIsFile(fds[name], logPath);
+            isLog[name] = fdIsLog;
+            const echo = tty[name] || keepConsole;
+            if (!fdIsLog && !echo)
+                muted = true;
+            const state = { atLineStart: true };
             const orig = std.write.bind(std);
             // eslint-disable-next-line @typescript-eslint/no-explicit-any
             std.write = (chunk, ...args) => {
+                const encoding = typeof args[0] === 'string' ? args[0] : undefined;
+                const text = typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString(encoding || 'utf8');
+                let stamped;
+                try {
+                    stamped = stampLines(text, state, now);
+                }
+                catch {
+                    stamped = text;
+                }
+                if (fdIsLog) {
+                    // The fd already lands in the log: write the stamped text there once.
+                    return orig(stamped, ...args.filter((a) => typeof a !== 'string'));
+                }
                 try {
-                    stream.write(chunk);
+                    stream.write(stamped);
                 }
                 catch {
                     // Never let file-log failures break console output.
                 }
-                return orig(chunk, ...args);
+                if (echo)
+                    return orig(chunk, ...args);
+                // Muted: honor a trailing callback so callers awaiting drain never hang.
+                const cb = args[args.length - 1];
+                if (typeof cb === 'function')
+                    process.nextTick(cb);
+                return true;
             };
         }
+        current = { path: logPath, stdout_is_log: isLog.stdout, stderr_is_log: isLog.stderr, console_muted: muted };
         return logPath;
     }
     catch {

package/dist/cli/file-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-log.js","sourceRoot":"","sources":["../../src/cli/file-log.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,GAAG,IAAI,SAAS,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,GAAuB,EAAE,OAAe;IACpE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CACV,kCAAkC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG;YAC3D,QAAQ,GAAG,IAAI,SAAS,QAAQ,OAAO,CAAC,GAAG,KAAK,OAAO,WAAW,CACrE,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,8DAA8D;YAC7D,GAAW,CAAC,KAAK,GAAG,CAAC,KAAU,EAAE,GAAG,IAAW,EAAW,EAAE;gBAC3D,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,oDAAoD;gBACtD,CAAC;gBACD,OAAQ,IAAqC,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;YAChE,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"file-log.js","sourceRoot":"","sources":["../../src/cli/file-log.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,IAAI,GAAG,GAAG,IAAI,SAAS,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM,CAAC,CAAC;AACnE,CAAC;AAOD;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAqB,EAAE,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAChH,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,WAAW,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,IAAI,GAAG,GAAG,EAAE,GAAG,CAAC;QAC1D,GAAG,IAAI,GAAG,CAAC;QACX,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,GAAG,GAAG,CAAC;IACV,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD,IAAI,OAAO,GAAwC,IAAI,CAAC;AAExD,uFAAuF;AACvF,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QAAC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC9E,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,GAAuB,EAAE,OAAe,EAAE,OAAsB,EAAE;IAC9F,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CACV,kCAAkC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG;YAC3D,QAAQ,GAAG,IAAI,SAAS,QAAQ,OAAO,CAAC,GAAG,KAAK,OAAO,WAAW,CACrE,CAAC;QACF,8FAA8F;QAC9F,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7F,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACzF,MAAM,WAAW,GAAG,UAAU,KAAK,GAAG,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAErB,MAAM,OAAO,GAAqD;YAChE,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;SAC3B,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC;YACtC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;gBAAE,KAAK,GAAG,IAAI,CAAC;YACpC,MAAM,KAAK,GAAmB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAiC,CAAC;YACjE,8DAA8D;YAC7D,GAAW,CAAC,KAAK,GAAG,CAAC,KAAU,EAAE,GAAG,IAAW,EAAW,EAAE;gBAC3D,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,CAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvF,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;gBACjG,IAAI,OAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,IAAI,OAAO,EAAE,CAAC;oBACZ,sEAAsE;oBACtE,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACrE,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,oDAAoD;gBACtD,CAAC;gBACD,IAAI,IAAI;oBAAE,OAAO,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;gBACtC,yEAAyE;gBACzE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACjC,IAAI,OAAO,EAAE,KAAK,UAAU;oBAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC5G,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/agent-launcher.d.ts

@@ -48,6 +48,14 @@ export interface AgentProcess {
  * provider-specific process lifecycle: spawning, health checks, resumption,
  * and cleanup.
  */
+import type { LaunchBindingRegistry, LaunchLinkage } from './launch-binding.js';
+export interface WedgeVerdict {
+    wedged: boolean;
+    /** Human-readable why (logged by callers): 'no-pane' | 'pane-gone' | 'pane-active' | 'frozen-Nmin' … */
+    reason: string;
+    /** The tmux pane name at decision time (null when the launcher tracks none). */
+    paneName: string | null;
+}
 export interface AgentLauncher {
     /**
      * Launch a new agent process.
@@ -87,6 +95,8 @@ export interface AgentLauncher {
      * @returns true if any processes were nudged.
      */
     nudge(): boolean;
+    /** Nudge ONE conversation's pane (no backoff). @returns false when it has no pane. */
+    nudgeConversation?(conversationId: number, message?: string): boolean;
     /**
      * Whether this launcher is properly configured and ready to use.
      */
@@ -130,6 +140,14 @@ export interface AgentLauncher {
     sendTextAndSubmit(conversationId: number, text: string): boolean;
     /** Store the last resume/session ID for future resume */
     setLastResumeId(resumeId: string, conversationId?: number): void;
+    /** Share the launch→transport binding registry (see launch-binding.ts). */
+    setLaunchBindings?(registry: LaunchBindingRegistry): void;
+    /** One-shot: backend linkage (agent_session_id / launch_correlation_id) for the NEXT launch. */
+    setLaunchLinkage?(linkage: LaunchLinkage | null): void;
+    /** The resume id minted at launch for a conversation (Claude `--session-id`), if any. */
+    getMintedResumeId?(conversationId: number): string | undefined;
+    /** Pin the conversation's resume id on its registered Session now (minted id or discovery). */
+    syncResumeId?(conversationId: number): void;
     /** Launch a session triggered by an inbound message */
     launchOnMessage(conversationId?: number, triggerMessage?: string, llmAgentId?: number): Promise<boolean>;
     /** Internal launch — called by Bridge control channel handler */
@@ -144,6 +162,14 @@ export interface AgentLauncher {
     };
     /** Kill the session associated with a specific conversation */
     killByConversation(conversationId: number, reason?: string): void;
+    /**
+     * Is the conversation's pane wedged — present, NOT actively producing output,
+     * and frozen at least the launcher's FROZEN threshold? Built from the same
+     * primitives the periodic wedged-session reaper uses, so an inbound message
+     * can never recycle a pane the reaper would leave alone. Optional so
+     * non-tmux launchers may skip it (callers treat "absent" as not wedged).
+     */
+    isSessionWedged?(conversationId: number): WedgeVerdict;
     /** Kill all sessions */
     kill(): void;
     /** Send an interrupt to a session */

package/dist/core/agent-launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-launcher.d.ts","sourceRoot":"","sources":["../../src/core/agent-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mGAAmG;IACnG,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oCAAoC;IACpC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE3D;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE7E;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAEvC;;OAEG;IACH,YAAY,IAAI,IAAI,CAAC;IAErB;;OAEG;IACH,YAAY,IAAI,YAAY,EAAE,CAAC;IAE/B;;OAEG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAEpE;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC;IAEjB;;OAEG;IACH,SAAS,IAAI,OAAO,CAAC;IAErB;;OAEG;IACH,oBAAoB,IAAI,OAAO,CAAC;IAEhC;;OAEG;IACH,gBAAgB,IAAI,IAAI,CAAC;IAEzB;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAIhB,kEAAkE;IAClE,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;IAE/D,uEAAuE;IACvE,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,sCAAsC;IACtC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAE5C,6CAA6C;IAC7C,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAElD;;;;;;;;OAQG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAErD;;;;;OAKG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAEjE,yDAAyD;IACzD,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjE,uDAAuD;IACvD,eAAe,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzG,iEAAiE;IACjE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;;OAGG;IACH,oBAAoB,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAE1E,+DAA+D;IAC/D,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAElE,wBAAwB;IACxB,IAAI,IAAI,IAAI,CAAC;IAEb,qCAAqC;IACrC,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtE,+EAA+E;IAC/E,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAErE,oCAAoC;IACpC,cAAc,IAAI,OAAO,CAAC;IAI1B;;;;;OAKG;IACH,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7D;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD"}
+{"version":3,"file":"agent-launcher.d.ts","sourceRoot":"","sources":["../../src/core/agent-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mGAAmG;IACnG,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oCAAoC;IACpC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,wGAAwG;IACxG,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE3D;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAE7E;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAEvC;;OAEG;IACH,YAAY,IAAI,IAAI,CAAC;IAErB;;OAEG;IACH,YAAY,IAAI,YAAY,EAAE,CAAC;IAE/B;;OAEG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAEpE;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC;IAEjB,sFAAsF;IACtF,iBAAiB,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAEtE;;OAEG;IACH,SAAS,IAAI,OAAO,CAAC;IAErB;;OAEG;IACH,oBAAoB,IAAI,OAAO,CAAC;IAEhC;;OAEG;IACH,gBAAgB,IAAI,IAAI,CAAC;IAEzB;;OAEG;IACH,OAAO,IAAI,IAAI,CAAC;IAIhB,kEAAkE;IAClE,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;IAE/D,uEAAuE;IACvE,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,sCAAsC;IACtC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAE5C,6CAA6C;IAC7C,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAElD;;;;;;;;OAQG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAErD;;;;;OAKG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAEjE,yDAAyD;IACzD,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjE,2EAA2E;IAC3E,iBAAiB,CAAC,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAE1D,gGAAgG;IAChG,gBAAgB,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;IAEvD,yFAAyF;IACzF,iBAAiB,CAAC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAE/D,+FAA+F;IAC/F,YAAY,CAAC,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5C,uDAAuD;IACvD,eAAe,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzG,iEAAiE;IACjE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;;OAGG;IACH,oBAAoB,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAE1E,+DAA+D;IAC/D,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAElE;;;;;;OAMG;IACH,eAAe,CAAC,CAAC,cAAc,EAAE,MAAM,GAAG,YAAY,CAAC;IAEvD,wBAAwB;IACxB,IAAI,IAAI,IAAI,CAAC;IAEb,qCAAqC;IACrC,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtE,+EAA+E;IAC/E,6BAA6B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAErE,oCAAoC;IACpC,cAAc,IAAI,OAAO,CAAC;IAI1B;;;;;OAKG;IACH,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IAE7D;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD"}

package/dist/core/auto-updater.d.ts

@@ -6,7 +6,16 @@ export interface AutoUpdaterDeps {
     env?: string;
     isIdle: () => boolean;
     gracefulStop: () => Promise<void>;
+    exec?: (file: string, args: string[], opts: {
+        timeout: number;
+        maxBuffer: number;
+    }) => Promise<{
+        stdout: string;
+    }>;
+    installLockPath?: string;
 }
+/** Verify tarball bytes against an SRI string (sha512-…). Exported for tests. */
+export declare function tarballMatchesIntegrity(data: Buffer, expectedIntegrity: string): boolean;
 /**
  * Self-update orchestrator. Periodically reconciles the installed version
  * against (a) the npm registry — "what's published" — and (b) the hub's policy
@@ -25,6 +34,8 @@ export declare class AutoUpdater {
     private readonly env?;
     private readonly isIdle;
     private readonly gracefulStop;
+    private readonly exec;
+    private readonly installLockPath;
     private timer;
     private initialTimer;
     private checking;

package/dist/core/auto-updater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-updater.d.ts","sourceRoot":"","sources":["../../src/core/auto-updater.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,0BAA0B,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMxD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IAEtB,GAAG,CAAC,EAAE,MAAM,CAAC;IAGb,MAAM,EAAE,MAAM,OAAO,CAAC;IAGtB,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IAGzB,OAAO,CAAC,mBAAmB,CAAuB;IAGlD,OAAO,CAAC,aAAa,CAAuB;IAG5C,OAAO,CAAC,mBAAmB,CAAuB;gBAEtC,IAAI,EAAE,eAAe;IAQjC,OAAO,KAAK,OAAO,GAGlB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,KAAK,IAAI,IAAI;IAmBb,IAAI,IAAI,IAAI;IAWZ,yEAAyE;IACnE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAwChC;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAiCrB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,MAAM;IA+Bd,OAAO,CAAC,MAAM;IAcd,4EAA4E;IAC5E,OAAO,CAAC,cAAc;IAItB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;;;OAKG;YACW,sBAAsB;IAiBpC;;;;;OAKG;YACW,aAAa;IAqF3B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;CAQxB;AAiBD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,QAAQ,SAAoB,GAAG,OAAO,CAuBxE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,SAAoB,GAAG,IAAI,CAMrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,SAAiB,GAAG,IAAI,CAiD9F;AAcD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,SAA+B,GACzC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAexB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA8B7F"}
+{"version":3,"file":"auto-updater.d.ts","sourceRoot":"","sources":["../../src/core/auto-updater.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,0BAA0B,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOxD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IAEtB,GAAG,CAAC,EAAE,MAAM,CAAC;IAGb,MAAM,EAAE,MAAM,OAAO,CAAC;IAGtB,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAMxF;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuC;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IAErD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,YAAY,CAA8C;IAClE,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IAGzB,OAAO,CAAC,mBAAmB,CAAuB;IAGlD,OAAO,CAAC,aAAa,CAAuB;IAG5C,OAAO,CAAC,mBAAmB,CAAuB;gBAEtC,IAAI,EAAE,eAAe;IAUjC,OAAO,KAAK,OAAO,GAGlB;IAED,OAAO,KAAK,UAAU,GAErB;IAED,KAAK,IAAI,IAAI;IAmBb,IAAI,IAAI,IAAI;IAWZ,yEAAyE;IACnE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAgDhC;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAiCrB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,MAAM;IA+Bd,OAAO,CAAC,MAAM;IAcd,4EAA4E;IAC5E,OAAO,CAAC,cAAc;IAItB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAiBnB;;;;;OAKG;YACW,sBAAsB;IAiBpC;;;;;OAKG;YACW,aAAa;IA8H3B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;CAQxB;AAiBD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,QAAQ,SAAoB,GAAG,OAAO,CAuBxE;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,SAAoB,GAAG,IAAI,CAMrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,SAAiB,GAAG,IAAI,CAiD9F;AAcD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,SAA+B,GACzC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAexB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA8B7F"}

package/dist/core/auto-updater.js

@@ -1,11 +1,22 @@
 import { execFile, execFileSync, spawn } from 'node:child_process';
-import { closeSync, mkdirSync, openSync, statSync, unlinkSync, writeSync } from 'node:fs';
-import { homedir } from 'node:os';
+import { closeSync, mkdirSync, mkdtempSync, openSync, readFileSync, rmSync, statSync, unlinkSync, writeSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
 import { join } from 'node:path';
+import ssri from 'ssri';
 import { promisify } from 'node:util';
 import { PACKAGE_NAME, PACKAGE_VERSION } from './version.js';
 import * as semver from './semver-lite.js';
+import { healthMonitor } from './health-monitor.js';
 const execFileAsync = promisify(execFile);
+/** Verify tarball bytes against an SRI string (sha512-…). Exported for tests. */
+export function tarballMatchesIntegrity(data, expectedIntegrity) {
+    try {
+        return !!ssri.checkData(data, expectedIntegrity);
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Self-update orchestrator. Periodically reconciles the installed version
  * against (a) the npm registry — "what's published" — and (b) the hub's policy
@@ -24,6 +35,8 @@ export class AutoUpdater {
     env;
     isIdle;
     gracefulStop;
+    exec;
+    installLockPath;
     timer = null;
     initialTimer = null;
     checking = false;
@@ -43,6 +56,8 @@ export class AutoUpdater {
         this.env = deps.env;
         this.isIdle = deps.isIdle;
         this.gracefulStop = deps.gracefulStop;
+        this.exec = deps.exec ?? ((file, args, opts) => execFileAsync(file, args, opts));
+        this.installLockPath = deps.installLockPath;
     }
     get enabled() {
         // Default ON unless explicitly disabled.
@@ -88,11 +103,15 @@ export class AutoUpdater {
         this.checking = true;
         try {
             const current = PACKAGE_VERSION;
+            healthMonitor.setUpdater({ state: this.enabled ? 'checking' : 'disabled' });
             const policy = await this.client.getVersionPolicy();
             const npmLatest = await this.fetchNpmLatest();
+            healthMonitor.setUpdater({ latest: npmLatest });
             const target = this.resolveTarget(current, npmLatest, policy);
-            if (!target)
+            if (!target) {
+                healthMonitor.setUpdater({ state: this.enabled ? 'current' : 'disabled', pinned: !!policy?.expected_integrity });
                 return; // already current / nothing actionable
+            }
             const bump = semver.diffType(current, target.version);
             const decision = this.decide(current, target.version, bump, target.belowMin, policy);
             // Apply the hub's supply-chain pin only when it names the exact version
@@ -101,11 +120,13 @@ export class AutoUpdater {
             const expectedIntegrity = (policy?.target_version && target.version === policy.target_version)
                 ? (policy.expected_integrity ?? null)
                 : null;
+            healthMonitor.setUpdater({ pinned: expectedIntegrity !== null });
             if (decision === 'auto') {
                 if (this.isIdle()) {
                     await this.performUpdate(target.version, expectedIntegrity);
                 }
                 else {
+                    healthMonitor.setUpdater({ state: 'deferred' });
                     if (this.lastDeferredVersion !== target.version) {
                         console.log(`  Auto-update: v${target.version} ready — deferring until idle (a coding session is active)`);
                         this.lastDeferredVersion = target.version;
@@ -113,6 +134,7 @@ export class AutoUpdater {
                 }
             }
             else if (decision === 'notify') {
+                healthMonitor.setUpdater({ state: 'notify' });
                 this.notify(current, target.version, bump, target.belowMin);
             }
         }
@@ -312,37 +334,83 @@ export class AutoUpdater {
         // One installer at a time per machine; losers defer to their next check,
         // by which time the winner has installed the version and the retry is a
         // fast no-op.
-        if (!acquireInstallLock()) {
+        if (!acquireInstallLock(this.installLockPath)) {
             console.log(`  Auto-update: another daemon on this machine is installing — deferring v${target} to the next check.`);
             return;
         }
         this.updating = true;
         this.stop(); // no more checks while we update/restart
+        healthMonitor.setUpdater({ state: 'installing' });
         const spec = `${PACKAGE_NAME}@${target}`;
-        console.log(`  Auto-update: installing ${spec} ...`);
+        const execOpts = { timeout: 300_000, maxBuffer: 16 * 1024 * 1024 };
+        let packDir = null;
+        const fail = (state, message, hint) => {
+            this.updating = false;
+            releaseInstallLock(this.installLockPath);
+            if (packDir) {
+                try {
+                    rmSync(packDir, { recursive: true, force: true });
+                }
+                catch { /* best-effort */ }
+            }
+            healthMonitor.setUpdater({ state });
+            console.error(`  Auto-update: ${message}`);
+            if (hint)
+                console.error(`  Auto-update: ${hint}`);
+            // Restart the check timer so we retry later (e.g. once perms are fixed).
+            this.timer = setInterval(() => { void this.checkOnce(); }, this.intervalMs);
+            if (this.timer.unref)
+                this.timer.unref();
+        };
+        // Pinned install: verify the TARBALL ITSELF, not just the registry's
+        // metadata. `npm pack` fetches the exact tgz the install would use; its
+        // bytes are hashed with ssri and compared to the hub's expected_integrity
+        // before anything is installed. The registry pre-check above still runs
+        // first (cheap, and it catches a stale pin with a clear message).
+        let installSpec = spec;
+        if (expectedIntegrity) {
+            try {
+                packDir = mkdtempSync(join(tmpdir(), 'silolink-update-'));
+                const { stdout } = await this.exec('npm', ['pack', spec, '--pack-destination', packDir, '--ignore-scripts', '--no-fund', '--no-audit'], execOpts);
+                const file = stdout.trim().split('\n').filter(Boolean).pop() ?? '';
+                const tgz = join(packDir, file);
+                const data = readFileSync(tgz);
+                if (!tarballMatchesIntegrity(data, expectedIntegrity)) {
+                    const actual = ssri.fromData(data, { algorithms: ['sha512'] }).toString();
+                    fail('pinned-refused', `TARBALL INTEGRITY MISMATCH for v${target} — refusing install. expected ${expectedIntegrity}, downloaded ${actual}. (Possible npm tampering, or a stale pin in the hub policy.)`);
+                    return;
+                }
+                console.log(`  Auto-update: tarball integrity verified for v${target} (${file}).`);
+                installSpec = tgz;
+            }
+            catch (err) {
+                fail('failed', `could not fetch/verify the v${target} tarball — ${err.message}`);
+                return;
+            }
+        }
+        console.log(`  Auto-update: installing ${installSpec} ...`);
         try {
             // --ignore-scripts: do NOT run the fetched package's lifecycle scripts
             // (pre/postinstall) — silo-link needs none at install time, and this
             // removes the install-script RCE vector if a published version is ever
             // malicious. Bin-linking still happens (it's core npm, not a script).
-            const { stdout } = await execFileAsync('npm', ['install', '-g', spec, '--ignore-scripts', '--no-fund', '--no-audit'], { timeout: 300_000, maxBuffer: 16 * 1024 * 1024 });
+            const { stdout } = await this.exec('npm', ['install', '-g', installSpec, '--ignore-scripts', '--no-fund', '--no-audit'], execOpts);
             const tail = stdout.trim().split('\n').slice(-1)[0] ?? '';
             console.log(`  Auto-update: install complete (${tail || 'ok'}). Restarting onto v${target}.`);
         }
         catch (err) {
             // Most common real-world failure: global prefix needs sudo. Don't crash —
             // log a clear, actionable banner and resume report-only behavior.
-            this.updating = false;
-            releaseInstallLock();
-            console.error(`  Auto-update: install FAILED — ${err.message}`);
-            console.error(`  Auto-update: leaving daemon on v${PACKAGE_VERSION}. Run "npm i -g ${spec}" manually (with sudo if your global npm prefix needs it), or set auto_update_enabled:false to silence this.`);
-            // Restart the check timer so we retry later (e.g. once perms are fixed).
-            this.timer = setInterval(() => { void this.checkOnce(); }, this.intervalMs);
-            if (this.timer.unref)
-                this.timer.unref();
+            fail('failed', `install FAILED — ${err.message}`, `leaving daemon on v${PACKAGE_VERSION}. Run "npm i -g ${spec}" manually (with sudo if your global npm prefix needs it), or set auto_update_enabled:false to silence this.`);
             return;
         }
-        releaseInstallLock();
+        releaseInstallLock(this.installLockPath);
+        if (packDir) {
+            try {
+                rmSync(packDir, { recursive: true, force: true });
+            }
+            catch { /* best-effort */ }
+        }
         this.scheduleRestart();
         // Safety net: if the graceful drain wedges (a stuck usage POST, an
         // unresponsive transport close), the daemon would keep running the OLD
@@ -357,6 +425,7 @@ export class AutoUpdater {
         // Drain and exit. In managed mode the supervisor brings us back; otherwise
         // the detached waiter scheduled above does.
         await this.gracefulStop();
+        clearTimeout(hardExit);
     }
     /**
      * Arrange for the daemon to come back on the freshly-installed version.