@gajae-code/coding-agent 0.11.8 → 0.11.10

package/src/sdk/bus/telegram-cli.ts

@@ -21,7 +21,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { getAgentDir } from "@gajae-code/utils";
 import { tokenFingerprint } from "./config";
-import { type DaemonState, daemonPaths, isFreshLiveOwner } from "./telegram-daemon";
+import { isFreshLiveOwner, readOwnerFreshnessSnapshot } from "./telegram-daemon";
 import { runTelegramReferenceClient } from "./telegram-reference";
 
 interface CliArgs {
@@ -134,17 +134,9 @@ function pidAlive(pid: number): boolean {
 	}
 }
 
-function readDaemonState(): DaemonState | undefined {
-	try {
-		const raw = fs.readFileSync(daemonPaths(getAgentDir()).state, "utf8");
-		return JSON.parse(raw) as DaemonState;
-	} catch {
-		return undefined;
-	}
-}
-
-function activeDaemonOwnsToken(input: { botToken: string; chatId: string }): boolean {
-	const state = readDaemonState();
+async function activeDaemonOwnsToken(input: { botToken: string; chatId: string }): Promise<boolean> {
+	const snapshot = await readOwnerFreshnessSnapshot({ settings: { getAgentDir } as never });
+	const state = snapshot.state;
 	if (!state) return false;
 	return isFreshLiveOwner({
 		state,
@@ -152,6 +144,7 @@ function activeDaemonOwnsToken(input: { botToken: string; chatId: string }): boo
 		tokenFingerprint: tokenFingerprint(input.botToken),
 		chatId: input.chatId,
 		pidAlive,
+		effectiveHeartbeatAt: snapshot.effectiveHeartbeatAt,
 	});
 }
 
@@ -176,7 +169,7 @@ async function main(): Promise<void> {
 	}
 
 	const chatId = args.chatId ?? process.env.GJC_TG_CHAT_ID ?? (await resolveChatId(botToken, apiBase));
-	if (!args.force && activeDaemonOwnsToken({ botToken, chatId })) {
+	if (!args.force && (await activeDaemonOwnsToken({ botToken, chatId }))) {
 		process.stderr.write(
 			"an active gjc notifications daemon already owns this bot token; running a second poller will cause Telegram 409 conflicts. Re-run with --force to override.\n",
 		);

package/src/sdk/bus/telegram-daemon-cli.ts

@@ -14,6 +14,7 @@ import { daemonPaths, HEARTBEAT_TTL_MS } from "./daemon-paths";
 import {
 	type DaemonState,
 	readDaemonState,
+	readOwnerFreshnessSnapshot,
 	type TelegramDaemonOptions,
 	TelegramNotificationDaemon,
 } from "./telegram-daemon";
@@ -254,15 +255,19 @@ export async function runDaemonInternal(argv: string[], deps: RunDaemonInternalD
 		if (!watchdogActive || watchdogTickInFlight || stopRequested) return;
 		watchdogTickInFlight = true;
 		try {
-			const state = await readState(settings as Settings);
+			const snapshot = deps.readDaemonState
+				? { state: await readState(settings as Settings), effectiveHeartbeatAt: undefined }
+				: await readOwnerFreshnessSnapshot({ settings: settings as Settings });
+			const state = snapshot.state;
+			const heartbeatAt = snapshot.effectiveHeartbeatAt ?? state?.heartbeatAt;
 			if (!watchdogActive || !state) return;
 			if (state.ownerId !== ownerId) {
 				stopRequested = true;
 				daemon.requestStop("stop");
 				return;
 			}
-			if (lastHeartbeatAt === undefined || state.heartbeatAt !== lastHeartbeatAt) {
-				lastHeartbeatAt = state.heartbeatAt;
+			if (lastHeartbeatAt === undefined || heartbeatAt !== lastHeartbeatAt) {
+				lastHeartbeatAt = heartbeatAt;
 				stalledSince = now();
 				return;
 			}

package/src/sdk/bus/telegram-daemon-contract.ts

@@ -7,12 +7,9 @@
 export const NOTIFICATION_PROTOCOL_VERSION = 3;
 
 /**
- * Operational generation the current daemon build speaks. Decoupled from
- * {@link NOTIFICATION_PROTOCOL_VERSION} (#2304): additive `tool_activity` /
- * `reasoning_summary` frames do not bump the wire protocol version, but a
- * freshly-upgraded host must still recognize an older, still-live daemon that
- * predates capability-gated frame enforcement and trigger a reload. Bump this
- * on every daemon-behavior change independent of the wire version.
+ * Guarded behavior-inventory version for the current daemon build. Bump this
+ * on every guarded daemon-behavior change independent of the wire version; it
+ * does not force a live daemon reload by itself.
  * The current development baseline already includes #2299's generation 4,
  * incarnation fencing in generation 5, owner-lock authority in generation 6,
  * identity-atomic transition markers in generation 7, stable signaling plus
@@ -38,5 +35,16 @@ export const NOTIFICATION_PROTOCOL_VERSION = 3;
  * Generation 25 adds startup dead-root prune + leak-artifact self-heal
  * on TelegramNotificationDaemon.run (#2958). Generation 26 adds bounded reload
  * cooldown and lazy Telegram topic lifecycle safeguards (#2956, #2960, #2984).
+ * Generation 27 refreshes retained native path and process authority semantics.
+ * Generation 28 rejects special files before retained native authority opens.
+ * Generation 29 adds serving-epoch compatibility, sidecar heartbeat, root GC,
+ * and Bot API cooldown structural fixes (#2956, #2960, #3048).
  */
-export const DAEMON_GENERATION = 26;
+export const DAEMON_GENERATION = 29;
+
+/**
+ * Serving-compatibility boundary for daemon lifecycle requests. Epoch 1 covers
+ * all builds published before this field existed; bump this to force serving
+ * convergence and reload of compatible live predecessors.
+ */
+export const SERVING_EPOCH = 2;

package/src/sdk/bus/telegram-daemon-control.ts

@@ -40,6 +40,7 @@ import {
 	readAttestedLegacyDaemonOwner,
 	readDaemonRoots,
 	readDaemonState,
+	readOwnerFreshnessSnapshot,
 	spawnTelegramDaemonOwner,
 	type TelegramDaemonDeps,
 	type TelegramDaemonFs,
@@ -224,7 +225,8 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 		if (!configured) {
 			return { kind: this.kind, configured: false, health: "not_configured", runtime };
 		}
-		const state = await readDaemonState(this.settings, this.fsImpl);
+		const snapshot = await readOwnerFreshnessSnapshot({ settings: this.settings, fs: this.fsImpl });
+		const state = snapshot.state;
 		const roots = await readDaemonRoots(this.settings, this.fsImpl);
 		const health: DaemonHealth =
 			!state || state.stoppedAt !== undefined || !this.pidAlive(state.pid)
@@ -236,6 +238,7 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 							chatId: cfg.chatId as string,
 							pidAlive: this.pidAlive,
 							pidIncarnation: this.deps.pidIncarnation,
+							effectiveHeartbeatAt: snapshot.effectiveHeartbeatAt,
 						})
 					? "running"
 					: "stale";
@@ -246,7 +249,7 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 			pid: state?.pid,
 			ownerId: state?.ownerId,
 			startedAt: state?.startedAt,
-			heartbeatAt: state?.heartbeatAt,
+			heartbeatAt: snapshot.effectiveHeartbeatAt,
 			roots,
 			rootCount: roots.length,
 			runtime,
@@ -480,7 +483,8 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 		const gracefulTimeoutMs = opts.gracefulTimeoutMs ?? DEFAULT_GRACEFUL_TIMEOUT_MS;
 		const killTimeoutMs = opts.killTimeoutMs ?? DEFAULT_KILL_TIMEOUT_MS;
 
-		const state = await readDaemonState(this.settings, this.fsImpl);
+		const ownerSnapshot = await readOwnerFreshnessSnapshot({ settings: this.settings, fs: this.fsImpl });
+		const state = ownerSnapshot.state;
 		const attestedLegacyOwner = attestedLegacyUpgrade
 			? await readAttestedLegacyDaemonOwner({
 					settings: this.settings,
@@ -501,6 +505,7 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 					chatId,
 					pidAlive: this.pidAlive,
 					pidIncarnation: this.deps.pidIncarnation,
+					effectiveHeartbeatAt: ownerSnapshot.effectiveHeartbeatAt,
 				}) &&
 				isSignalableMatchingOwner({
 					state,
@@ -628,7 +633,8 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 		let dead = await this.waitForPidDeath(oldPid, gracefulTimeoutMs);
 		if (!dead) {
 			// Old pid still alive after the cooperative SIGTERM. Inspect current ownership.
-			const current = await readDaemonState(this.settings, this.fsImpl);
+			const currentSnapshot = await readOwnerFreshnessSnapshot({ settings: this.settings, fs: this.fsImpl });
+			const current = currentSnapshot.state;
 			const changedToLiveOwner =
 				current !== undefined &&
 				current.ownerId !== oldOwnerId &&
@@ -639,6 +645,7 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 					chatId,
 					pidAlive: this.pidAlive,
 					pidIncarnation: this.deps.pidIncarnation,
+					effectiveHeartbeatAt: currentSnapshot.effectiveHeartbeatAt,
 				});
 			if (changedToLiveOwner) {
 				await this.clearOwnRequest(requestId);
@@ -701,7 +708,8 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 		warnings.push(...spawned.warnings);
 		const after = await this.status();
 		if (spawned.result === "attached") {
-			const attachedState = await readDaemonState(this.settings, this.fsImpl);
+			const attachedSnapshot = await readOwnerFreshnessSnapshot({ settings: this.settings, fs: this.fsImpl });
+			const attachedState = attachedSnapshot.state;
 			if (
 				!isCurrentCompatibleOwner({
 					state: attachedState,
@@ -710,6 +718,7 @@ export class TelegramDaemonController implements BuiltInDaemonController {
 					chatId,
 					pidAlive: this.pidAlive,
 					pidIncarnation: this.deps.pidIncarnation,
+					effectiveHeartbeatAt: attachedSnapshot.effectiveHeartbeatAt,
 				})
 			) {
 				return this.result(