@lore-co/cli 0.1.28 → 0.1.30

package/dist/recovery.js

@@ -7,15 +7,23 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { z } from "zod";
 import { IS_STANDALONE_BINARY } from "./version.js";
 import { openPty } from "./pty.js";
-import { captureRecoveryHook, createRecoveryRun, recoveryBrief, recoveryMetrics, recoveryRunKey, RecoveryRunSchema, recoveryStore, recordRecoveryMetric, workspaceSnapshot, requestRecoverySwitch, } from "./recovery-state.js";
-import { AGENTS, LAUNCHABLE_AGENTS, RECOVERY_SOURCES, findAgentExecutable, isInteractiveAgent, isLaunchable, isRecoverySource, launchArguments } from "./agents.js";
+import { createRecoveryPrompt } from "./recovery-prompt.js";
+import { captureRecoveryHook, createRecoveryRun, recoveryBrief, recoveryMetrics, recoveryRunKey, RecoveryRunSchema, recoveryStore, recordRecoveryMetric, workspaceSnapshot, requestRecoverySwitch, markRecoveryFailure, } from "./recovery-state.js";
+import { AGENTS, LAUNCHABLE_AGENTS, RECOVERY_SOURCES, agentShellCommands, findAgentExecutable, isInteractiveAgent, isLaunchable, isRecoverySource, launchArguments } from "./agents.js";
 import { openCodeRecoveryPluginSource } from "./recovery-opencode.js";
+import { mergeNativeRecoveryHooks, normalizeRecoveryHook } from "./recovery-hooks.js";
+import { observeCodexRecovery } from "./recovery-codex.js";
+import { observeCopilotRecovery } from "./recovery-copilot.js";
+import { observePolytokenRecovery, verifyPolytokenStopped } from "./recovery-polytoken.js";
+import { RemoteDestinationSchema } from "./recovery-transfer.js";
+import { launchRemoteRecovery, runRecoveryWorker, verifyRemoteDestination } from "./recovery-remote.js";
 const Settings = z.object({
     fallback: z.enum(LAUNCHABLE_AGENTS), shellPath: z.string(), shellPaths: z.array(z.string()).optional(),
     claudeSettings: z.string().optional(),
     routes: z.partialRecord(z.enum(RECOVERY_SOURCES), z.enum(LAUNCHABLE_AGENTS)).optional(),
     sourceFiles: z.array(z.object({ agent: z.enum(RECOVERY_SOURCES), path: z.string() })).optional(),
     openCodePlugin: z.string().optional(),
+    remotes: z.partialRecord(z.enum(RECOVERY_SOURCES), RemoteDestinationSchema).optional(),
 });
 const routesOf = (settings) => settings.routes ?? { claude: settings.fallback };
 const filesOf = (settings) => settings.sourceFiles ?? (settings.claudeSettings ? [{ agent: "claude", path: settings.claudeSettings }] : []);
@@ -104,8 +112,13 @@ export function mergeRecoveryHooks(value, command, events = ["UserPromptSubmit",
             const handlers = group.hooks.filter((handler) => typeof handler.command !== "string" || !handler.command.includes(OWNER));
             return handlers.length ? [{ ...group, hooks: handlers }] : [];
         });
-        if (command)
-            remaining.push({ ...(event === "StopFailure" ? { matcher: "rate_limit" } : {}), hooks: [{ type: "command", command, timeout: 10 }] });
+        if (command) {
+            const added = { ...(event === "StopFailure" ? { matcher: "rate_limit" } : {}), hooks: [{ type: "command", command, timeout: 10 }] };
+            // The ordinary connector keeps its owned hooks last. Preserve that order
+            // so reconnect does not rewrite the file or invalidate host hook approval.
+            const core = remaining.findIndex(group => Array.isArray(group.hooks) && group.hooks.some((hook) => /--owner\s+lore(?:\s|$)/u.test(hook.command ?? "")));
+            remaining.splice(core < 0 ? remaining.length : core, 0, added);
+        }
         if (remaining.length)
             hooks[event] = remaining;
         else
@@ -132,11 +145,36 @@ function mergeOpenCodePlugin(value, plugin, enabled) {
         delete parsed.plugin;
     return parsed;
 }
-export async function prepareRecoveryInstallation(paths, fallback, env = process.env, requestedSources) {
+/** Fresh connects enable both directions; explicit routes and off are durable preferences. */
+export async function prepareAutomaticRecovery(paths, env = process.env) {
+    if (await recoveryStore(paths.home).readState("disabled"))
+        return;
+    const existing = Settings.safeParse(await recoveryStore(paths.home).readState("settings"));
+    const available = (await Promise.all(LAUNCHABLE_AGENTS.map(async (agent) => await findAgentExecutable(agent, env).then(() => agent, () => null)))).filter((agent) => agent !== null);
+    if (available.length < 2)
+        return;
+    const priorRoutes = existing.success ? routesOf(existing.data) : {};
+    const missing = available.filter(agent => !priorRoutes[agent]);
+    if (!missing.length)
+        return;
+    const fallback = existing.success && available.includes(existing.data.fallback) ? existing.data.fallback : available[0];
+    const alternate = available.find(agent => agent !== fallback);
+    const firstSources = missing.filter(agent => agent !== fallback);
+    const first = firstSources.length ? await prepareRecoveryInstallation(paths, fallback, env, firstSources) : undefined;
+    const install = async () => {
+        const message = first ? await first() : "";
+        return missing.includes(fallback) ? await (await prepareRecoveryInstallation(paths, alternate, env, [fallback]))() : message;
+    };
+    return Object.assign(install, { sources: missing, fallback });
+}
+export async function prepareRecoveryInstallation(paths, fallback, env = process.env, requestedSources, remote) {
     const { removeDevinShell } = await import("./devin-cli.js");
     if (!isLaunchable(fallback))
         throw new Error(`Choose a local fallback: ${LAUNCHABLE_AGENTS.join(", ")}.`);
-    await findAgentExecutable(fallback, env);
+    if (remote)
+        await verifyRemoteDestination(remote, fallback, env);
+    else
+        await findAgentExecutable(fallback, env);
     const sources = requestedSources ? [...new Set(requestedSources)] : (await Promise.all(RECOVERY_SOURCES.map(async (source) => source !== fallback && await findAgentExecutable(source, env).then(() => true, () => false) ? source : null))).filter((source) => source !== null);
     if (!sources.length)
         throw new Error("No supported source client is installed. Sources: " + RECOVERY_SOURCES.join(", "));
@@ -147,9 +185,16 @@ export async function prepareRecoveryInstallation(paths, fallback, env = process
     }
     const previousSettings = Settings.safeParse(await recoveryStore(paths.home).readState("settings"));
     const routes = previousSettings.success ? routesOf(previousSettings.data) : {};
-    for (const source of sources)
+    const remotes = previousSettings.success ? previousSettings.data.remotes ?? {} : {};
+    for (const source of sources) {
         routes[source] = fallback;
+        if (remote)
+            remotes[source] = remote;
+        else
+            delete remotes[source];
+    }
     const allSources = Object.keys(routes);
+    const shellCommands = new Map(await Promise.all(allSources.map(async (source) => [source, await agentShellCommands(source, env)])));
     const shell = basename(env.SHELL ?? "");
     if (shell !== "zsh" && shell !== "bash")
         throw new Error("Automatic recovery setup supports bash and zsh. Set SHELL to your shell before connecting.");
@@ -176,7 +221,7 @@ export async function prepareRecoveryInstallation(paths, fallback, env = process
         const document = await readOptional(path);
         shellDocuments.set(path, document);
         const withoutBlock = removeDevinShell(removeRecoveryShell(document.text));
-        for (const source of allSources)
+        for (const source of allSources.flatMap(source => shellCommands.get(source)))
             if (new RegExp(`(?:^|\\n)\\s*(?:function\\s+${source}\\b|${source}\\s*\\(\\s*\\)|alias\\s+${source}=)`, "u").test(withoutBlock)) {
                 throw new Error(`An existing ${source} shell function or alias needs to be retained. Remove that override before enabling recovery.`);
             }
@@ -184,29 +229,33 @@ export async function prepareRecoveryInstallation(paths, fallback, env = process
     const sourcePaths = {
         claude: paths.claudeSettings, codex: paths.codexHooks, opencode: paths.openCodeConfig,
         devin: resolve(env.XDG_CONFIG_HOME || resolve(paths.home, ".config"), "devin/config.json"),
+        cursor: paths.cursorHooks, "copilot-cli": paths.copilotCliHooks, polytoken: paths.polytokenHooks,
     };
     const oldFiles = previousSettings.success ? filesOf(previousSettings.data) : [];
     const sourceFiles = allSources.map(agent => ({ agent, path: oldFiles.find(file => file.agent === agent)?.path ?? sourcePaths[agent] }));
     const openCodePlugin = previousSettings.success && previousSettings.data.openCodePlugin || resolve(paths.home, ".lore/recovery/opencode.mjs");
     for (const { agent, path } of sourceFiles) {
         const existing = await readOptional(path);
-        const value = existing.text ? JSON.parse(existing.text) : {};
+        const value = existing.text ? JSON.parse(existing.text) : agent === "polytoken" ? [] : {};
         if (agent === "opencode")
             mergeOpenCodePlugin(value, openCodePlugin, false);
+        else if (agent === "cursor" || agent === "copilot-cli" || agent === "polytoken")
+            mergeNativeRecoveryHooks(agent, value, null);
         else
             mergeRecoveryHooks(value, null, hookEvents(agent));
     }
     if (allSources.includes("opencode"))
         await readOptional(openCodePlugin);
     const invocation = `env -u BUN_OPTIONS -u BUN_BE_BUN LORE_HOME=${quote(paths.home)} ${cliInvocation().map(quote).join(" ")}`;
-    const block = `${START}\n${allSources.map(source => `${source}() { ${invocation} run ${source} -- "$@"; }`).join("\n")}\n${END}\n`;
+    const block = `${START}\n${allSources.flatMap(source => shellCommands.get(source).map(name => `${name}() { ${invocation} run ${source} -- "$@"; }`)).join("\n")}\n${END}\n`;
     const install = async () => {
         for (const { agent, path } of sourceFiles) {
             // Re-read because connect has just merged its ordinary context hooks.
             const previous = await readOptional(path);
-            const value = previous.text ? JSON.parse(previous.text) : {};
+            const value = previous.text ? JSON.parse(previous.text) : agent === "polytoken" ? [] : {};
             const command = `${invocation} recovery-hook --agent ${agent} ${OWNER}`;
-            const merged = agent === "opencode" ? mergeOpenCodePlugin(value, openCodePlugin, true) : mergeRecoveryHooks(value, command, hookEvents(agent));
+            const merged = agent === "opencode" ? mergeOpenCodePlugin(value, openCodePlugin, true) :
+                agent === "cursor" || agent === "copilot-cli" || agent === "polytoken" ? mergeNativeRecoveryHooks(agent, value, command) : mergeRecoveryHooks(value, command, hookEvents(agent));
             if (agent === "opencode")
                 await replaceFile(openCodePlugin, openCodeRecoveryPluginSource(cliInvocation(), paths.home), await readOptional(openCodePlugin));
             await replaceFile(path, `${JSON.stringify(merged, null, 2)}\n`, previous);
@@ -218,8 +267,9 @@ export async function prepareRecoveryInstallation(paths, fallback, env = process
             const base = removeRecoveryShell(currentShell.text);
             await replaceFile(path, `${base}${base && !base.endsWith("\n") ? "\n" : ""}${block}`, currentShell);
         }
-        await recoveryStore(paths.home).writeState("settings", { fallback, routes, shellPath, shellPaths, sourceFiles, openCodePlugin });
-        return `Recovery enabled: ${allSources.map(source => `${AGENTS[source].label} → ${AGENTS[routes[source]].label}`).join("; ")}.\nCtrl+] offers a switch from a saved checkpoint. Automatic triggers: Claude rate limits; OpenCode HTTP 429 or repeated provider retries.\nOpen a new terminal or run: source ${quote(shellPath)}`;
+        await recoveryStore(paths.home).deleteState("disabled");
+        await recoveryStore(paths.home).writeState("settings", { fallback, routes, remotes, shellPath, shellPaths, sourceFiles, openCodePlugin });
+        return `Recovery enabled: ${allSources.map(source => `${AGENTS[source].label} → ${AGENTS[routes[source]].label}${remotes[source] ? ` on ${remotes[source].host}` : ""}`).join("; ")}.\nCtrl+] offers a switch from a saved checkpoint. Automatic triggers: native failure events and failed processes during checkpointed turns. Run lore recovery agents for host coverage.\nCodex requires one-time approval of new or changed hooks in /hooks.\nOpen a new terminal or run: source ${quote(shellPath)}`;
     };
     return Object.assign(install, { sources, fallback });
 }
@@ -227,8 +277,15 @@ export async function recoveryFallback(home, source) {
     const settings = Settings.safeParse(await recoveryStore(home).readState("settings"));
     return settings.success ? source ? routesOf(settings.data)[source] : settings.data.fallback : undefined;
 }
+export async function recoveryRoute(home, source) {
+    const settings = Settings.safeParse(await recoveryStore(home).readState("settings"));
+    const agent = settings.success ? routesOf(settings.data)[source] : undefined;
+    return agent && settings.success ? { agent, ...(settings.data.remotes?.[source] ? { remote: settings.data.remotes[source] } : {}) } : undefined;
+}
 export async function disableRecovery(home) {
     const store = recoveryStore(home);
+    await store.writeState("disabled", { disabled: true });
+    await (await import("./recovery-hosts.js")).disableExternalRecovery(home);
     const result = Settings.safeParse(await store.readState("settings"));
     if (!result.success)
         return;
@@ -242,7 +299,8 @@ export async function disableRecovery(home) {
         if (!previous.text)
             continue;
         const value = JSON.parse(previous.text);
-        const merged = agent === "opencode" && settings.openCodePlugin ? mergeOpenCodePlugin(value, settings.openCodePlugin, false) : mergeRecoveryHooks(value, null, hookEvents(agent));
+        const merged = agent === "opencode" && settings.openCodePlugin ? mergeOpenCodePlugin(value, settings.openCodePlugin, false) :
+            agent === "cursor" || agent === "copilot-cli" || agent === "polytoken" ? mergeNativeRecoveryHooks(agent, value, null) : mergeRecoveryHooks(value, null, hookEvents(agent));
         await replaceFile(path, `${JSON.stringify(merged, null, 2)}\n`, previous);
     }
     if (settings.openCodePlugin) {
@@ -253,11 +311,11 @@ export async function disableRecovery(home) {
     await store.deleteState("settings");
 }
 export async function runRecoveryHook(home, agent = "claude") {
-    const id = process.env.LORE_RECOVERY_RUN_ID;
+    let id = process.env.LORE_RECOVERY_RUN_ID;
     let body = "";
     let oversized = false;
     for await (const chunk of process.stdin) {
-        if (!id || oversized)
+        if (oversized)
             continue;
         body += String(chunk);
         if (Buffer.byteLength(body) > 1024 * 1024) {
@@ -265,17 +323,34 @@ export async function runRecoveryHook(home, agent = "claude") {
             body = "";
         }
     }
-    if (!id || oversized)
+    if (oversized)
         return;
     try {
-        let input = JSON.parse(body);
-        if (agent === "devin" && input && typeof input === "object") {
-            input.cwd ??= process.env.DEVIN_PROJECT_DIR ?? process.cwd();
-            if (input.hook_event_name === "PostToolUse" || input.hook_event_name === "PostCompaction") {
-                input = { ...input, hook_event_name: "Checkpoint", last_assistant_message: input.summary ?? `Tool ${String(input.tool_name ?? "result")}: ${JSON.stringify(input.tool_response ?? {})}` };
+        const input = normalizeRecoveryHook(agent, JSON.parse(body));
+        if (id)
+            await captureRecoveryHook(home, id, input, agent);
+        else {
+            const { captureDesktopRecovery } = await import("./recovery-desktop.js");
+            id = await captureDesktopRecovery(home, agent, input);
+        }
+        if (agent === "polytoken" && id && ["pre_user_prompt", "pre_model_turn"].includes(process.env.POLYTOKEN_HOOK_EVENT ?? "")) {
+            const deadline = Date.now() + 2500;
+            let ready = false;
+            while (Date.now() < deadline) {
+                const state = z.object({ sessionId: z.string(), pid: z.number().int().positive() }).safeParse(await recoveryStore(home).readState(`polytoken-ready-${id}`));
+                if (state.success && state.data.sessionId === process.env.POLYTOKEN_SESSION_ID) {
+                    try {
+                        process.kill(state.data.pid, 0);
+                        ready = true;
+                        break;
+                    }
+                    catch { /* stale observer */ }
+                }
+                await new Promise(done => setTimeout(done, 50));
             }
+            if (!ready)
+                process.stderr.write("Lore could not subscribe to Polytoken's local failure stream; automatic cap switching is unavailable for this turn.\n");
         }
-        await captureRecoveryHook(home, id, input, agent);
     }
     catch {
         process.stderr.write("Lore could not save this recovery checkpoint. Automatic switching may be unavailable.\n");
@@ -296,6 +371,11 @@ export function isInteractiveClaude(args, stdinIsTty, stdoutIsTty) {
 }
 /** The wrapper owns input routing; hooks only checkpoint. No terminal text matching. */
 export async function superviseRecovery(home, command, args, run, env = process.env) {
+    if (run.sourceAgent === "polytoken") {
+        const flag = args.indexOf("--sessions-dir");
+        if (flag >= 0 && args[flag + 1])
+            env = { ...env, LORE_POLYTOKEN_SESSIONS_DIR: resolve(run.cwd, args[flag + 1]) };
+    }
     const store = recoveryStore(home);
     const sourceLabel = AGENTS[run.sourceAgent].label;
     const targetLabel = AGENTS[run.targetAgent].label;
@@ -319,7 +399,7 @@ export async function superviseRecovery(home, command, args, run, env = process.
     let accepted;
     let finishing = false;
     let polling = false;
-    let response = "";
+    let promptInput;
     const seen = new Set();
     const metric = async (event, current) => {
         await recordRecoveryMetric(home, run.id, current.failure.id, event).catch(() => { });
@@ -339,9 +419,11 @@ export async function superviseRecovery(home, command, args, run, env = process.
         if (!current || finishing)
             return;
         offered = undefined;
+        promptInput?.dispose();
+        promptInput = undefined;
         if (!yes) {
             await metric("declined", current);
-            process.stdout.write(`\r\nStaying with ${sourceLabel}.\r\n`);
+            process.stdout.write(exited ? "\r\nRecovery cancelled.\r\n" : `\r\nStaying with ${sourceLabel}.\r\n`);
             pending = false;
             if (exited)
                 finish();
@@ -364,23 +446,7 @@ export async function superviseRecovery(home, command, args, run, env = process.
     };
     const onInput = (chunk) => {
         if (offered) {
-            const text = chunk.toString("utf8");
-            if (text.includes("\u0003") || text.includes("\u001b")) {
-                void choose(false);
-                return;
-            }
-            response += text;
-            if (/[\r\n]/u.test(response)) {
-                const answer = response.split(/[\r\n]/u)[0].trim().toLowerCase();
-                if (answer === "" || answer === "y" || answer === "yes")
-                    void choose(true);
-                else if (answer === "n" || answer === "no")
-                    void choose(false);
-                else {
-                    response = "";
-                    process.stdout.write("\r\nEnter Y to switch or N to stay: ");
-                }
-            }
+            promptInput?.write(chunk);
         }
         else if (!pending && !finishing && !exited) {
             if (chunk.length === 1 && chunk[0] === 0x1d) {
@@ -409,24 +475,36 @@ export async function superviseRecovery(home, command, args, run, env = process.
         polling = true;
         try {
             const parsed = RecoveryRunSchema.safeParse(await store.readState(recoveryRunKey(run.id)));
-            const current = parsed.success ? parsed.data : undefined;
+            let current = parsed.success ? parsed.data : undefined;
+            if (current && exited && exitCode !== null && exitCode !== 0 && ![130, 143, 137, 129].includes(exitCode)) {
+                await markRecoveryFailure(home, current, "process_exit");
+                current = RecoveryRunSchema.parse(await store.readState(recoveryRunKey(run.id)));
+            }
             if (current?.failure && !seen.has(current.failure.id)) {
                 seen.add(current.failure.id);
                 // Verify fallback availability before offering a choice.
-                await findAgentExecutable(run.targetAgent);
+                if (run.targetRemote) {
+                    process.stdout.write(`\r\n${sourceLabel} stopped. Checking ${targetLabel} on ${run.targetRemote.host}…\r\n`);
+                    await verifyRemoteDestination(run.targetRemote, run.targetAgent, env);
+                }
+                else
+                    await findAgentExecutable(run.targetAgent, env);
                 pending = true;
                 offered = current;
-                response = "";
+                promptInput = createRecoveryPrompt(yes => { void choose(yes); }, () => { process.stdout.write("\r\nEnter Y to switch or N to stay: "); });
                 await store.writeState(`attempt-${run.id}`, current);
                 await metric("offered", current);
                 const reason = current.failure.reason === "rate_limit" ? `${sourceLabel} reached a rate limit. ` :
-                    current.failure.reason === "provider_retry" ? `${sourceLabel} is repeatedly retrying a failed provider request. ` : "";
-                process.stdout.write(`\r\n\u001b[0m${reason}Continue with ${targetLabel}? [Y/n] `);
+                    current.failure.reason === "provider_retry" ? `${sourceLabel} is repeatedly retrying a failed provider request. ` :
+                        current.failure.reason === "agent_error" ? `${sourceLabel} stopped with an error. ` :
+                            current.failure.reason === "process_exit" ? `${sourceLabel} exited with code ${exitCode} before completing the turn. ` : "";
+                process.stdout.write(`\r\n\u001b[0m${reason}Continue with ${targetLabel}${run.targetRemote ? ` on ${run.targetRemote.host}` : ""}? [Y/n] `);
             }
             if (exited && !offered)
                 finish();
         }
-        catch {
+        catch (error) {
+            process.stderr.write(`\r\nLore could not offer recovery: ${error.message}\r\n`);
             if (exited)
                 finish();
         }
@@ -434,6 +512,9 @@ export async function superviseRecovery(home, command, args, run, env = process.
             polling = false;
         }
     };
+    const stopObserver = run.sourceAgent === "codex" ? observeCodexRecovery(home, run.id, command, env) :
+        run.sourceAgent === "copilot-cli" ? observeCopilotRecovery(home, run.id, env) :
+            run.sourceAgent === "polytoken" ? observePolytokenRecovery(home, run.id, env) : () => { };
     const timer = setInterval(() => { void poll(); }, 150);
     void sourceExit.then(poll);
     try {
@@ -441,6 +522,8 @@ export async function superviseRecovery(home, command, args, run, env = process.
     }
     finally {
         clearInterval(timer);
+        promptInput?.dispose();
+        stopObserver();
         process.stdin.off("data", onInput);
         process.stdout.off("resize", onResize);
         process.off("SIGTERM", onSignal);
@@ -458,31 +541,49 @@ export async function superviseRecovery(home, command, args, run, env = process.
         process.exitCode = exitCode ?? 130;
         return;
     }
-    const selected = accepted;
+    await launchRecoveredRun(home, accepted, env);
+}
+export async function launchRecoveredRun(home, selected, env = process.env, onLaunch = async () => { }, onRestored = async () => { }) {
+    const sourceLabel = AGENTS[selected.sourceAgent].label;
+    const targetLabel = AGENTS[selected.targetAgent].label;
+    const metric = async (event, current) => {
+        await recordRecoveryMetric(home, current.id, current.failure.id, event);
+    };
     try {
+        if (await recoveryStore(home).readState("disabled"))
+            throw new Error("Recovery is disabled");
+        if (selected.sourceAgent === "polytoken" && selected.failure?.reason !== "process_exit")
+            await verifyPolytokenStopped(selected, env);
         const snapshot = await workspaceSnapshot(selected.cwd);
         if (snapshot.root !== selected.failure.snapshot.root || snapshot.branch !== selected.failure.snapshot.branch || snapshot.head !== selected.failure.snapshot.head) {
             throw new Error(`The source branch or checkout changed while the switch was pending. Resume ${sourceLabel} and retry from the correct working tree.`);
         }
-        const target = await findAgentExecutable(run.targetAgent);
+        // Every launch path must preserve the attempt used by feedback and brief.
+        await recoveryStore(home).writeState(`attempt-${selected.id}`, selected);
+        if (selected.targetRemote) {
+            await launchRemoteRecovery(selected, selected.targetRemote, env, async () => { await metric("launched", selected); await onLaunch(); }, onRestored);
+            return;
+        }
+        const target = await findAgentExecutable(selected.targetAgent, env);
+        await onRestored();
         process.stdout.write(`\r\nContinuing in ${targetLabel} with the existing files and recent context.\r\n`);
         // The destination inherits its own permission settings, never source flags.
-        const nextRoute = isRecoverySource(run.targetAgent) && await recoveryFallback(home, run.targetAgent);
+        const nextRoute = isRecoverySource(selected.targetAgent) && await recoveryFallback(home, selected.targetAgent);
         let launched = Promise.resolve();
         await new Promise((done, reject) => {
-            const env = { ...process.env, LORE_HOME: home };
-            delete env.LORE_RECOVERY_RUN_ID;
-            delete env.LORE_RECOVERY_SOURCE;
-            delete env.LORE_PARENT_SESSION_ID;
-            const promptArgs = launchArguments(run.targetAgent, recoveryBrief(selected, snapshot));
-            const invocation = nextRoute ? [...cliInvocation(), "run", run.targetAgent, "--", ...promptArgs] : [target, ...promptArgs];
-            const child = spawn(invocation[0], invocation.slice(1), { cwd: snapshot.cwd, env, stdio: "inherit" });
-            child.once("spawn", () => { launched = metric("launched", selected); });
+            const targetEnv = { ...env, LORE_HOME: home };
+            delete targetEnv.LORE_RECOVERY_RUN_ID;
+            delete targetEnv.LORE_RECOVERY_SOURCE;
+            delete targetEnv.LORE_PARENT_SESSION_ID;
+            const promptArgs = launchArguments(selected.targetAgent, recoveryBrief(selected, snapshot));
+            const invocation = nextRoute ? [...cliInvocation(), "run", selected.targetAgent, "--", ...promptArgs] : [target, ...promptArgs];
+            const child = spawn(invocation[0], invocation.slice(1), { cwd: snapshot.cwd, env: targetEnv, stdio: "inherit" });
+            child.once("spawn", () => { launched = metric("launched", selected).then(onLaunch); });
             child.once("error", reject);
             child.once("exit", (code, signal) => { process.exitCode = code ?? (signal ? 130 : 1); done(); });
         });
         await launched;
-        process.stdout.write(`\nWas the handoff useful? Record it with: lore recovery feedback ${run.id} useful|not-useful\n`);
+        process.stdout.write(`\nWas the handoff useful? Record it with: lore recovery feedback ${selected.id} useful|not-useful\n`);
     }
     catch (error) {
         await metric("launch_failed", selected);
@@ -491,16 +592,44 @@ export async function superviseRecovery(home, command, args, run, env = process.
     }
 }
 export async function runRecoveryCommand(args, paths) {
+    if (args[0] === "editor-hook") {
+        let body = "";
+        for await (const chunk of process.stdin) {
+            body += chunk;
+            if (Buffer.byteLength(body) > 1024 * 1024)
+                return;
+        }
+        await (await import("./recovery-hosts.js")).invalidateEditorRecovery(paths.home, JSON.parse(body));
+        return;
+    }
+    if (args[0] === "monitor") {
+        await (await import("./recovery-hosts.js")).runExternalMonitor(paths.home);
+        return;
+    }
+    if (args[0] === "external-checkpoint") {
+        await (await import("./recovery-hosts.js")).externalCheckpointCommand(paths.home);
+        return;
+    }
+    if (args[0] === "offer" || args[0] === "watch" || args[0] === "watch-polytoken" || args[0] === "watch-copilot" || args[0] === "launch-accepted") {
+        const { runDesktopRecovery } = await import("./recovery-desktop.js");
+        await runDesktopRecovery(args, paths.home);
+        return;
+    }
+    if (args[0]?.startsWith("worker-")) {
+        await runRecoveryWorker(args, paths.home);
+        return;
+    }
     if (args[0] === "enable") {
-        const parsed = z.object({ from: z.enum(RECOVERY_SOURCES), to: z.enum(LAUNCHABLE_AGENTS) });
+        const parsed = z.object({ from: z.enum(RECOVERY_SOURCES), to: z.enum(LAUNCHABLE_AGENTS), ssh: z.string().optional(), directory: z.string().optional() });
         const flags = {};
         for (let i = 1; i < args.length; i += 2) {
-            if (!["--from", "--to"].includes(args[i]) || !args[i + 1] || flags[args[i].slice(2)])
+            if (!["--from", "--to", "--ssh", "--directory"].includes(args[i]) || !args[i + 1] || flags[args[i].slice(2)])
                 throw new Error("Usage: lore recovery enable --from <agent> --to <agent>");
             flags[args[i].slice(2)] = args[i + 1];
         }
         const route = parsed.parse(flags);
-        process.stdout.write(`${await (await prepareRecoveryInstallation(paths, route.to, process.env, [route.from]))()}\n`);
+        const remote = route.ssh || route.directory ? RemoteDestinationSchema.parse({ host: route.ssh, directory: route.directory }) : undefined;
+        process.stdout.write(`${await (await prepareRecoveryInstallation(paths, route.to, process.env, [route.from], remote))()}\n`);
         return;
     }
     if (args[0] === "agents") {
@@ -508,12 +637,12 @@ export async function runRecoveryCommand(args, paths) {
             agent, label: AGENTS[agent].label, executable: await findAgentExecutable(agent).catch(() => null),
             localDestination: true, checkpointSource: isRecoverySource(agent), automaticTrigger: AGENTS[agent].automatic,
         })));
-        process.stdout.write(`${JSON.stringify({ agents, briefOnly: ["t3code", "cowork", "copilot-vscode", "devin-cloud"] }, null, 2)}\n`);
+        process.stdout.write(`${JSON.stringify({ agents, desktopAdapters: { t3code: "structured session failures", "copilot-vscode": "saved response errors; editor notification", cowork: "shared-folder checkpoints; cap hook unverified" }, briefOnly: ["devin-cloud"] }, null, 2)}\n`);
         return;
     }
     if (args[0] === "status") {
         const settings = Settings.safeParse(await recoveryStore(paths.home).readState("settings"));
-        process.stdout.write(`${JSON.stringify({ fallback: await recoveryFallback(paths.home) ?? null, routes: settings.success ? routesOf(settings.data) : {}, metrics: await recoveryMetrics(paths.home) }, null, 2)}\n`);
+        process.stdout.write(`${JSON.stringify({ fallback: await recoveryFallback(paths.home) ?? null, routes: settings.success ? routesOf(settings.data) : {}, remotes: settings.success ? settings.data.remotes ?? {} : {}, hosts: await recoveryStore(paths.home).readState("external-health"), metrics: await recoveryMetrics(paths.home) }, null, 2)}\n`);
         return;
     }
     if (args[0] === "off") {
@@ -552,7 +681,8 @@ export async function runWrappedAgent(args, paths, captureDevin = false) {
         }
         let run;
         try {
-            run = await createRecoveryRun(paths.home, process.cwd(), agent, fallback);
+            const settings = Settings.safeParse(await recoveryStore(paths.home).readState("settings"));
+            run = await createRecoveryRun(paths.home, process.cwd(), agent, fallback, settings.success ? settings.data.remotes?.[agent] : undefined);
         }
         catch {
             process.stderr.write(`Lore recovery needs a readable git working tree. Starting ${AGENTS[agent].label} normally.\n`);