@muggleai/works 5.31.0-staging.270 → 5.31.0-staging.271

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "muggleai",
       "source": "./plugin",
       "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-      "version": "5.31.0-staging.270"
+      "version": "5.31.0-staging.271"
     }
   ]
 }

package/dist/{chunk-W3HJBL5U.js → chunk-RQ43IPVN.js}

@@ -2830,6 +2830,13 @@ var ClaudeTurnStatus = /* @__PURE__ */ ((ClaudeTurnStatus2) => {
   ClaudeTurnStatus2["Waiting"] = "waiting";
   return ClaudeTurnStatus2;
 })(ClaudeTurnStatus || {});
+var ClaudeProcessStatus = /* @__PURE__ */ ((ClaudeProcessStatus2) => {
+  ClaudeProcessStatus2["Idle"] = "idle";
+  ClaudeProcessStatus2["Busy"] = "busy";
+  ClaudeProcessStatus2["Shell"] = "shell";
+  ClaudeProcessStatus2["Waiting"] = "waiting";
+  return ClaudeProcessStatus2;
+})(ClaudeProcessStatus || {});
 var ClaudeJobState = /* @__PURE__ */ ((ClaudeJobState2) => {
   ClaudeJobState2["Working"] = "working";
   ClaudeJobState2["Blocked"] = "blocked";
@@ -2932,6 +2939,12 @@ var CLAUDE_SESSION_REGISTRY_DIR_NAME = "sessions";
 var CLAUDE_PROJECTS_DIR_NAME = "projects";
 var CLAUDE_INSTALLED_PLUGINS_RELATIVE_PATH = ["plugins", "installed_plugins.json"];
 var CLAUDE_GLOBAL_CONFIG_FILE_NAME = ".claude.json";
+var CLAUDE_SETTINGS_FILE_NAME = "settings.json";
+var CLAUDE_CREDENTIALS_FILE_NAME = ".credentials.json";
+var REMOTE_CONTROL_MAX_RESTARTS = 2;
+var REMOTE_CONTROL_RESTART_WINDOW_MS = 24 * 60 * 6e4;
+var REMOTE_CONTROL_RESTART_COOLDOWN_MS = 30 * 6e4;
+var REMOTE_CONTROL_NAME_COLUMN_WIDTH = 32;
 var USAGE_WINDOW_EXHAUSTED_PERCENT = 100;
 var RELOAD_PLUGIN_SCOPE = "user";
 var MUGGLE_PLUGIN_ID = "muggleai@muggle-works";
@@ -2987,6 +3000,8 @@ function resolveWatchPaths(env = process.env) {
     claudeProjectsDir: join(claudeConfigDir, CLAUDE_PROJECTS_DIR_NAME),
     claudeInstalledPluginsFile: join(claudeConfigDir, ...CLAUDE_INSTALLED_PLUGINS_RELATIVE_PATH),
     claudeGlobalConfigFile: join(env.CLAUDE_CONFIG_DIR || homedir(), CLAUDE_GLOBAL_CONFIG_FILE_NAME),
+    claudeSettingsFile: join(claudeConfigDir, CLAUDE_SETTINGS_FILE_NAME),
+    claudeCredentialsFile: join(claudeConfigDir, CLAUDE_CREDENTIALS_FILE_NAME),
     codexSessionsDir: join(codexHome, "sessions"),
     muggleInstallLogFile: join(muggleDataDir, MUGGLE_INSTALL_LOG_FILE)
   };
@@ -4841,6 +4856,9 @@ function processSummary(snapshot) {
     `${countOf("pr-watch-loop" /* PrWatchLoop */)} PR watch loop processes`
   ].join(", ");
 }
+function countDecisions(report, action) {
+  return report.decisions.filter((decision) => decision.action === action).length;
+}
 function renderWatchStatus(snapshot, nowMs) {
   const lines = [];
   const snapshotAgeMs = nowMs - Date.parse(snapshot.takenAt);
@@ -4883,12 +4901,24 @@ function renderWatchStatus(snapshot, nowMs) {
     }
   }
   if (snapshot.reload) {
-    const countOf = (action) => snapshot.reload?.decisions.filter((decision) => decision.action === action).length ?? 0;
+    const reload = snapshot.reload;
     lines.push(
       "",
-      `Plugin reload: ${snapshot.reload.respawnedSessionIds.length} restarted, ${snapshot.reload.failedSessionIds.length} failed, ${countOf("defer" /* Defer */)} deferred, ${countOf("notify-manual" /* NotifyManual */) + (snapshot.reload.untrustedSessionIds?.length ?? 0)} need /reload-plugins by hand`
+      `Plugin reload: ${reload.respawnedSessionIds.length} restarted, ${reload.failedSessionIds.length} failed, ${countDecisions(reload, "defer" /* Defer */)} deferred, ${countDecisions(reload, "notify-manual" /* NotifyManual */) + (reload.untrustedSessionIds?.length ?? 0)} need /reload-plugins by hand`
     );
   }
+  if (snapshot.remoteControl) {
+    const remoteControl = snapshot.remoteControl;
+    lines.push(
+      "",
+      `Remote Control: ${remoteControl.connectedSessionIds.length} connected, ${remoteControl.respawnedSessionIds.length} restarted, ${remoteControl.failedSessionIds.length} failed, ${remoteControl.untrustedSessionIds.length} refused, ${countDecisions(remoteControl, "defer" /* Defer */)} waiting, ${countDecisions(remoteControl, "skip" /* Skip */) + countDecisions(remoteControl, "notify-manual" /* NotifyManual */)} skipped`
+    );
+    for (const decision of remoteControl.decisions) {
+      const outcome = remoteControl.untrustedSessionIds.includes(decision.sessionId) ? " \u2014 refused: its workspace takes no background restart, run /remote-control in it" : remoteControl.failedSessionIds.includes(decision.sessionId) ? " \u2014 restart failed" : "";
+      const label = (decision.name ?? "").slice(0, REMOTE_CONTROL_NAME_COLUMN_WIDTH).padEnd(REMOTE_CONTROL_NAME_COLUMN_WIDTH);
+      lines.push(`  ${decision.action.padEnd(14)} ${shortSessionId(decision.sessionId)} ${label} ${decision.reason}${outcome}`);
+    }
+  }
   return `${lines.join("\n")}
 `;
 }
@@ -4921,6 +4951,32 @@ function cwdFromSessionHead(head) {
   }
 }
 
+// src/watch/claude-account.ts
+function isRemoteControlAtStartup(claudeSettingsFile) {
+  try {
+    const settings = JSON.parse(readFileSync(claudeSettingsFile, "utf-8"));
+    return settings.remoteControlAtStartup === true;
+  } catch {
+    return false;
+  }
+}
+function readClaudeLogin(claudeGlobalConfigFile, claudeCredentialsFile) {
+  let accountUuid;
+  try {
+    const config = JSON.parse(readFileSync(claudeGlobalConfigFile, "utf-8"));
+    accountUuid = optionalString(config.oauthAccount?.accountUuid);
+  } catch {
+    accountUuid = void 0;
+  }
+  let credentialsWrittenAtMs;
+  try {
+    credentialsWrittenAtMs = statSync(claudeCredentialsFile).mtimeMs;
+  } catch {
+    credentialsWrittenAtMs = void 0;
+  }
+  return { accountUuid, credentialsWrittenAtMs };
+}
+
 // src/watch/session-liveness.ts
 function hasLiveProcess(session) {
   if (session.agent !== "claude" /* Claude */) return true;
@@ -4931,25 +4987,30 @@ function isIdleBackgroundSession(session) {
 }
 
 // src/watch/claude-sessions.ts
-function readPidsBySessionId(registryDir) {
-  const pidsBySessionId = /* @__PURE__ */ new Map();
+function readRegistryBySessionId(registryDir) {
+  const entriesBySessionId = /* @__PURE__ */ new Map();
   let fileNames;
   try {
     fileNames = readdirSync(registryDir).filter((fileName) => fileName.endsWith(".json"));
   } catch {
-    return pidsBySessionId;
+    return entriesBySessionId;
   }
   for (const fileName of fileNames) {
     try {
       const entry = JSON.parse(readFileSync(join(registryDir, fileName), "utf-8"));
       if (typeof entry.pid === "number" && typeof entry.sessionId === "string") {
-        pidsBySessionId.set(entry.sessionId, entry.pid);
+        entriesBySessionId.set(entry.sessionId, {
+          pid: entry.pid,
+          processStatus: enumValueOf(ClaudeProcessStatus, entry.status),
+          processStatusSinceMs: typeof entry.statusUpdatedAt === "number" ? entry.statusUpdatedAt : void 0,
+          remoteControlSessionId: optionalString(entry.bridgeSessionId)
+        });
       }
     } catch {
       continue;
     }
   }
-  return pidsBySessionId;
+  return entriesBySessionId;
 }
 function waitForSessionExit(runCommand, registryDir, sessionId, sleep2 = blockFor) {
   for (let waitedMs = 0; ; waitedMs += SESSION_EXIT_POLL_MS) {
@@ -4971,11 +5032,12 @@ function readClaudeSessions(runCommand, registryDir) {
   } catch {
     return null;
   }
-  const pidsBySessionId = readPidsBySessionId(registryDir);
+  const registryBySessionId = readRegistryBySessionId(registryDir);
   const sessions = [];
   for (const listing of listings) {
     const sessionId = optionalString(listing.sessionId);
     if (!sessionId) continue;
+    const registryEntry = registryBySessionId.get(sessionId);
     sessions.push({
       agent: "claude" /* Claude */,
       sessionId,
@@ -4986,7 +5048,10 @@ function readClaudeSessions(runCommand, registryDir) {
       turnStatus: enumValueOf(ClaudeTurnStatus, listing.status),
       jobState: enumValueOf(ClaudeJobState, listing.state),
       startedAtMs: typeof listing.startedAt === "number" ? listing.startedAt : void 0,
-      pid: typeof listing.pid === "number" ? listing.pid : pidsBySessionId.get(sessionId)
+      pid: typeof listing.pid === "number" ? listing.pid : registryEntry?.pid,
+      processStatus: registryEntry?.processStatus,
+      processStatusSinceMs: registryEntry?.processStatusSinceMs,
+      remoteControlSessionId: registryEntry?.remoteControlSessionId
     });
   }
   return sessions;
@@ -5381,26 +5446,29 @@ function executeWatcherRecoveries(planned, attemptsByOwner, deps) {
 }
 
 // src/watch/findings.ts
-function resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, isProcessTableKnown, isHeardByService = false) {
+function resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, isProcessTableKnown, isHeardByService = false, isLoopDroppedByOwner = false) {
   const isHeartbeatWithin = (windowMs) => heartbeatAgeMs !== void 0 && heartbeatAgeMs <= windowMs;
   if (!isProcessTableKnown) {
     return isHeartbeatWithin(WATCH_HEARTBEAT_STALE_MS) ? "polling" /* Polling */ : "dead" /* Dead */;
   }
   if (loop) {
-    return isOwnerSessionActive === false && !isHeardByService ? "deaf" /* Deaf */ : "polling" /* Polling */;
+    const isUnheard = !isHeardByService && (isOwnerSessionActive === false || isLoopDroppedByOwner);
+    return isUnheard ? "deaf" /* Deaf */ : "polling" /* Polling */;
   }
   return isHeartbeatWithin(WATCHER_REARM_GRACE_MS) ? "rearming" /* Rearming */ : "dead" /* Dead */;
 }
 function oldestLoopFor(slug, processes) {
   return processes.filter((tracked) => tracked.kind === "pr-watch-loop" /* PrWatchLoop */ && tracked.watchSlotSlug === slug).sort((left, right) => (right.ageMs ?? 0) - (left.ageMs ?? 0))[0];
 }
-function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, nowMs) {
+function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, nowMs, idleSinceBySessionId2 = /* @__PURE__ */ new Map()) {
   const assessments = [];
   for (const slot of slots) {
     const loop = processes ? oldestLoopFor(slot.slug, processes) : void 0;
     const heartbeatAgeMs = slot.heartbeatMtimeMs === void 0 ? void 0 : Math.max(0, nowMs - slot.heartbeatMtimeMs);
     const isOwnerSessionActive = slot.ownerSessionId === void 0 || activeSessionIds === null ? void 0 : activeSessionIds.has(slot.ownerSessionId);
-    const watcher = resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, processes !== null, slot.isHeardByService);
+    const ownerIdleSinceMs = slot.ownerSessionId === void 0 ? void 0 : idleSinceBySessionId2.get(slot.ownerSessionId);
+    const isLoopDroppedByOwner = ownerIdleSinceMs !== void 0 && loop?.ageMs !== void 0 && ownerIdleSinceMs >= nowMs - loop.ageMs;
+    const watcher = resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, processes !== null, slot.isHeardByService, isLoopDroppedByOwner);
     const reportAgeMs = slot.serviceLoopReport === void 0 ? void 0 : Math.max(0, nowMs - slot.serviceLoopReport.writtenAtMs);
     for (const pr of slot.openPrs) {
       const live = liveStatusesByUrl.get(pr.url);
@@ -5415,6 +5483,7 @@ function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl,
         heartbeatAgeMs,
         ownerSessionId: slot.ownerSessionId,
         isOwnerSessionActive,
+        isLoopDroppedByOwner,
         live,
         ownerEscalation: resolveOwnerEscalation(slot.lastSeenJson, slot.followupLogLines, pr, live?.headSha),
         isHeardByService: slot.isHeardByService,
@@ -5461,11 +5530,12 @@ function watcherFinding(assessment, subject) {
     );
   }
   if (assessment.watcher === "deaf" /* Deaf */) {
+    const ownerState = assessment.isLoopDroppedByOwner ? "is running but no longer holds it" : "has ended";
     return finding(
       "WATCHER_DEAF" /* WatcherDeaf */,
       [assessment.pr.url, assessment.loopPid],
       subject,
-      `watch loop pid ${assessment.loopPid} reports to no session: its owner session ${shortSessionId(assessment.ownerSessionId ?? "")} has ended`
+      `watch loop pid ${assessment.loopPid} reports to no session: its owner session ${shortSessionId(assessment.ownerSessionId ?? "")} ${ownerState}`
     );
   }
   return void 0;
@@ -5906,6 +5976,75 @@ function advancePendingReload(pending, report) {
     skippedSessionIds: [...pending.skippedSessionIds, ...report.untrustedSessionIds]
   };
 }
+
+// src/watch/remote-control.ts
+function advanceClaudeLogin(previous, observed, nowMs) {
+  if (observed.accountUuid === void 0) return previous;
+  if (previous === void 0) return { accountUuid: observed.accountUuid, observedAtMs: nowMs };
+  if (previous.accountUuid === observed.accountUuid) return { ...previous, observedAtMs: nowMs };
+  const writtenAtMs = Math.min(observed.credentialsWrittenAtMs ?? nowMs, nowMs);
+  return { accountUuid: observed.accountUuid, effectiveAtMs: Math.max(previous.observedAtMs, writtenAtMs), observedAtMs: nowMs };
+}
+function remoteControlGapOf(session, login) {
+  if (session.remoteControlSessionId === void 0) return "no Remote Control link";
+  const isStartedBeforeLogin = login.effectiveAtMs !== void 0 && session.startedAtMs !== void 0 && session.startedAtMs < login.effectiveAtMs;
+  return isStartedBeforeLogin ? "linked under an earlier login" : void 0;
+}
+function isTurnOver(session) {
+  if (session.processStatus !== void 0) {
+    return session.processStatus === "idle" /* Idle */ || session.processStatus === "shell" /* Shell */;
+  }
+  return session.turnStatus === "idle" /* Idle */;
+}
+function recentRestartsMs(restartsBySession, sessionId, nowMs) {
+  return (restartsBySession[sessionId] ?? []).map((restartedAt) => Date.parse(restartedAt)).filter((restartedAtMs) => !Number.isNaN(restartedAtMs) && nowMs - restartedAtMs < REMOTE_CONTROL_RESTART_WINDOW_MS);
+}
+function decide2(session, action, reason) {
+  return { sessionId: session.sessionId, shortId: session.shortId, name: session.name, cwd: session.cwd, action, reason };
+}
+function planRemoteControlRestarts(sessions, login, restartsBySession, nowMs, maxRestarts) {
+  let restartsPlanned = 0;
+  const connectedSessionIds = [];
+  const decisions = [];
+  for (const session of sessions) {
+    if (session.agent !== "claude" /* Claude */ || !hasLiveProcess(session)) continue;
+    const gap = remoteControlGapOf(session, login);
+    if (gap === void 0) {
+      connectedSessionIds.push(session.sessionId);
+      continue;
+    }
+    const restartsMs = recentRestartsMs(restartsBySession, session.sessionId, nowMs);
+    if (session.kind === "interactive" /* Interactive */) {
+      decisions.push(decide2(session, "notify-manual" /* NotifyManual */, `${gap} \u2014 terminal session, run /remote-control in it`));
+    } else if (session.kind !== "background" /* Background */ || !session.shortId) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} \u2014 not a background session the watch can restart`));
+    } else if (restartsMs.length >= REMOTE_CONTROL_MAX_RESTARTS) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} after ${restartsMs.length} restarts today`));
+    } else if (nowMs - Math.max(-Infinity, ...restartsMs) < REMOTE_CONTROL_RESTART_COOLDOWN_MS) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} \u2014 restarted recently, waiting for it to link`));
+    } else if (!isTurnOver(session)) {
+      decisions.push(decide2(session, "defer" /* Defer */, `${gap} \u2014 turn in flight (${session.processStatus ?? session.turnStatus ?? "unknown"})`));
+    } else if (restartsPlanned >= maxRestarts) {
+      decisions.push(decide2(session, "defer" /* Defer */, `${gap} \u2014 restart cap reached this pass`));
+    } else {
+      restartsPlanned++;
+      decisions.push(decide2(session, "respawn" /* Respawn */, gap));
+    }
+  }
+  return { connectedSessionIds, decisions };
+}
+function recordRemoteControlRestarts(restartsBySession, report, nowMs) {
+  const nowIso = new Date(nowMs).toISOString();
+  const nextRestartsBySession = {};
+  for (const sessionId of Object.keys(restartsBySession)) {
+    const recent = recentRestartsMs(restartsBySession, sessionId, nowMs).map((restartedAtMs) => new Date(restartedAtMs).toISOString());
+    if (recent.length > 0) nextRestartsBySession[sessionId] = recent;
+  }
+  for (const sessionId of [...report.respawnedSessionIds, ...report.failedSessionIds, ...report.untrustedSessionIds]) {
+    nextRestartsBySession[sessionId] = [...nextRestartsBySession[sessionId] ?? [], nowIso];
+  }
+  return nextRestartsBySession;
+}
 function resolvePluginRoot(env = process.env) {
   return env.CLAUDE_PLUGIN_ROOT || env.CURSOR_PLUGIN_ROOT || dirname(dirname(fileURLToPath(import.meta.url)));
 }
@@ -6273,6 +6412,7 @@ function createDefaultWatchTickDeps(options) {
     notify: createDesktopNotifier(process.platform, defaultCommandRunner),
     isAutoReloadEnabled: options.isAutoReloadEnabled,
     isRecoveryEnabled: options.isRecoveryEnabled,
+    isRemoteControlKeptOn: options.isRemoteControlKeptOn,
     launchServiceLoop: createServiceLoopLauncher(process.platform, defaultCommandRunner)
   };
 }
@@ -6292,18 +6432,26 @@ function observeSessions(deps, installs) {
   const sessions = [...claudeSessions ?? [], ...readCodexSessions(deps.paths.codexSessionsDir, deps.nowMs)];
   return { processes, claudeSessions, sessions };
 }
+function idleSinceBySessionId(runningSessions) {
+  return new Map(
+    runningSessions.flatMap(
+      (session) => session.processStatus === "idle" /* Idle */ && session.processStatusSinceMs !== void 0 ? [[session.sessionId, session.processStatusSinceMs]] : []
+    )
+  );
+}
 function isRestartAttempted(recovery) {
   return recovery.outcome === "resumed" /* Resumed */ || recovery.outcome === "resume-failed" /* ResumeFailed */;
 }
 function watchOwnersOf(slots) {
   return new Set(slots.flatMap((slot) => !isTerminalPrState(slot.live?.state) && slot.ownerSessionId ? [slot.ownerSessionId] : []));
 }
-function reloadEvents(report, at) {
+function reloadEvents(report, at, restartPurpose) {
   const decisionById = new Map(report.decisions.map((decision) => [decision.sessionId, decision]));
   const describe = (sessionId) => `session ${decisionById.get(sessionId)?.name ?? shortSessionId(sessionId)}`;
+  const purposeOf = (sessionId) => restartPurpose === void 0 ? {} : { message: `${restartPurpose}: ${decisionById.get(sessionId)?.reason ?? ""}` };
   return [
-    ...report.respawnedSessionIds.map((sessionId) => ({ at, kind: "respawned" /* Respawned */, subject: describe(sessionId) })),
-    ...report.failedSessionIds.map((sessionId) => ({ at, kind: "respawn-failed" /* RespawnFailed */, subject: describe(sessionId) })),
+    ...report.respawnedSessionIds.map((sessionId) => ({ at, kind: "respawned" /* Respawned */, subject: describe(sessionId), ...purposeOf(sessionId) })),
+    ...report.failedSessionIds.map((sessionId) => ({ at, kind: "respawn-failed" /* RespawnFailed */, subject: describe(sessionId), ...purposeOf(sessionId) })),
     ...report.untrustedSessionIds.map((sessionId) => ({
       at,
       kind: "restart-refused" /* RestartRefused */,
@@ -6321,6 +6469,15 @@ function runReloadPass(record, claudeSessions, watchOwnerSessionIds, deps, at) {
   const report = executeReloadFanOut(decisions, deps.runCommand, canRestartVia(deps));
   return { report, pendingReload: advancePendingReload(record, report), events: reloadEvents(report, at) };
 }
+function runRemoteControlPass(login, claudeSessions, restartsBySession, maxRestarts, deps, at) {
+  const plan = planRemoteControlRestarts(claudeSessions, login, restartsBySession, deps.nowMs, maxRestarts);
+  const executed = executeReloadFanOut(plan.decisions, deps.runCommand, canRestartVia(deps));
+  return {
+    report: { ...executed, connectedSessionIds: plan.connectedSessionIds },
+    restartsBySession: recordRemoteControlRestarts(restartsBySession, executed, deps.nowMs),
+    events: reloadEvents(executed, at, "restarted to reconnect Remote Control")
+  };
+}
 function canRestartVia(deps) {
   return (cwd) => canRestartSessionIn(cwd, deps.runCommand);
 }
@@ -6366,7 +6523,7 @@ function runTickUnlocked(deps) {
     at
   );
   for (const cachedStatus of cachedStatuses) liveStatusesByUrl.set(cachedStatus.url, cachedStatus);
-  const allAssessments = assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, deps.nowMs);
+  const allAssessments = assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, deps.nowMs, idleSinceBySessionId(runningSessions));
   const closeOut = closeOutTerminalSlots(allAssessments, deps, at);
   const assessments = allAssessments.filter((assessment) => !closeOut.closedOutSlugs.includes(assessment.slug));
   const findings = deriveWatchFindings(assessments, processes ?? [], isPollingDisabled);
@@ -6409,16 +6566,34 @@ function runTickUnlocked(deps) {
     serviceArms = started.serviceArms;
     events.push(...started.events);
   }
+  const restartedSessionIds = new Set(recoveries.filter(isRestartAttempted).map((recovery) => recovery.ownerSessionId));
   let pendingReload = state.pendingReload;
   let reload;
   const targetAtMs = reloadTargetAtMs(deps, installs);
   if (deps.isAutoReloadEnabled && targetAtMs !== void 0 && claudeSessions !== null) {
-    const restartedOwnerIds = new Set(recoveries.filter(isRestartAttempted).map((recovery) => recovery.ownerSessionId));
-    const reloadableSessions = claudeSessions.filter((session) => !restartedOwnerIds.has(session.sessionId));
+    const reloadableSessions = claudeSessions.filter((session) => !restartedSessionIds.has(session.sessionId));
     const pass = runReloadPass(reloadRecordFor(state, targetAtMs), reloadableSessions, watchOwnersOf(assessments), deps, at);
     pendingReload = pass.pendingReload;
     reload = pass.report;
     events.push(...pass.events);
+    for (const sessionId of [...reload.respawnedSessionIds, ...reload.failedSessionIds]) restartedSessionIds.add(sessionId);
+  }
+  const observedLogin = readClaudeLogin(deps.paths.claudeGlobalConfigFile, deps.paths.claudeCredentialsFile);
+  const claudeLogin = advanceClaudeLogin(state.claudeLogin, observedLogin, deps.nowMs);
+  let remoteControlRestartsBySession = state.remoteControlRestartsBySession ?? {};
+  let remoteControl;
+  if (deps.isRemoteControlKeptOn && claudeSessions !== null && claudeLogin !== void 0 && observedLogin.accountUuid !== void 0 && isRemoteControlAtStartup(deps.paths.claudeSettingsFile)) {
+    const pass = runRemoteControlPass(
+      claudeLogin,
+      claudeSessions.filter((session) => !restartedSessionIds.has(session.sessionId)),
+      remoteControlRestartsBySession,
+      Math.max(0, MAX_RESPAWNS_PER_TICK - (reload ? reload.respawnedSessionIds.length + reload.failedSessionIds.length : 0)),
+      deps,
+      at
+    );
+    remoteControl = pass.report;
+    remoteControlRestartsBySession = pass.restartsBySession;
+    events.push(...pass.events);
   }
   appendWatchEvents(deps.paths.watchDir, events);
   notifyIfAny(deps, composeTickNotification(transitions.raised, recoveries, reload));
@@ -6426,7 +6601,9 @@ function runTickUnlocked(deps) {
     activeFindings: transitions.activeFindings,
     recoveryAttemptsByOwner,
     terminalPrsByUrl,
-    pendingReload
+    pendingReload,
+    claudeLogin,
+    remoteControlRestartsBySession
   });
   const snapshot = {
     takenAt: at,
@@ -6439,7 +6616,8 @@ function runTickUnlocked(deps) {
     findings,
     recoveries,
     serviceArms,
-    reload
+    reload,
+    remoteControl
   };
   writeWatchSnapshot(deps.paths.watchDir, snapshot);
   return snapshot;
@@ -6493,7 +6671,11 @@ function failWith(message) {
 function watchTickCommand(flags) {
   try {
     const snapshot = runWatchTick(
-      createDefaultWatchTickDeps({ isAutoReloadEnabled: flags.autoReload, isRecoveryEnabled: flags.recovery })
+      createDefaultWatchTickDeps({
+        isAutoReloadEnabled: flags.autoReload,
+        isRecoveryEnabled: flags.recovery,
+        isRemoteControlKeptOn: flags.remoteControl
+      })
     );
     if (flags.json) {
       process.stdout.write(`${JSON.stringify(snapshot, null, 2)}
@@ -6533,7 +6715,10 @@ function renderReloadReport(report, isDryRun) {
 function watchReloadPluginsCommand(flags) {
   try {
     const isDryRun = flags.dryRun === true;
-    const report = runReloadPluginsPass(createDefaultWatchTickDeps({ isAutoReloadEnabled: true, isRecoveryEnabled: false }), isDryRun);
+    const report = runReloadPluginsPass(
+      createDefaultWatchTickDeps({ isAutoReloadEnabled: true, isRecoveryEnabled: false, isRemoteControlKeptOn: false }),
+      isDryRun
+    );
     if (!report) {
       failWith("could not list Claude sessions (`claude agents --json` failed)");
       return;
@@ -6618,7 +6803,7 @@ function createProgram() {
   stack.command("status").description("Show every lease, the line, and the services prepare tracks").option("--json", "Print the full report as JSON").action(stackStatusCommand);
   program.command("ci-install").description("Add the Muggle walkthrough check to this repository's GitHub Actions").option("--force", "Replace an existing workflow file").action(ciInstallCommand);
   const watch = program.command("watch").description("Standing watch over Claude/Codex sessions, their processes, and PR watchers");
-  watch.command("tick").description("Run one watch pass (the scheduled task runs this)").option("--no-auto-reload", "Do not start a plugin reload fan-out when installed plugins change").option("--no-recovery", "Report dead watchers without resuming their owner sessions").option("--json", "Print the full snapshot as JSON").action(watchTickCommand);
+  watch.command("tick").description("Run one watch pass (the scheduled task runs this)").option("--no-auto-reload", "Do not start a plugin reload fan-out when installed plugins change").option("--no-recovery", "Report dead watchers without resuming their owner sessions").option("--no-remote-control", "Report sessions off Remote Control without restarting them").option("--json", "Print the full snapshot as JSON").action(watchTickCommand);
   watch.command("status").description("Show the last watch pass: sessions, processes, PR watches, findings").option("--json", "Print the snapshot as JSON").action(watchStatusCommand);
   watch.command("reload-plugins").description("Reload plugins across active Claude sessions (respawns idle background ones)").option("--dry-run", "Show what each session would get without respawning anything").option("--json", "Print the report as JSON").action(watchReloadPluginsCommand);
   watch.command("install").description("Schedule the watch with this OS's scheduler, or refresh the entry in place").option("--uninstall", "Remove the task; the ledger is kept").option("--no-wait", "Return once the task is registered, without waiting for its first pass").option("--from-preference", "Act on the autoInstallWatchService preference, as an install or upgrade does").action(watchInstallCommand);

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { runCli } from './chunk-W3HJBL5U.js';
+import { runCli } from './chunk-RQ43IPVN.js';
 import './chunk-XUANXZ2O.js';
 
 // src/cli/main.ts

package/dist/index.js

@@ -1,2 +1,2 @@
-export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-W3HJBL5U.js';
+export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-RQ43IPVN.js';
 export { createChildLogger, e2e_exports as e2e, getConfig, getLocalQaTools, getLogger, getQaTools, local_exports as localQa, mcp_exports as mcp, e2e_exports as qa, src_exports as shared } from './chunk-XUANXZ2O.js';

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "muggle",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/dist/plugin/.codex-mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.271",
         "serve"
       ],
       "env": {

package/dist/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
   "author": {
     "name": "Muggle AI",

package/dist/plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "muggle",
   "displayName": "Muggle AI",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/dist/plugin/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.271",
         "serve"
       ]
     }

package/dist/release-manifest.json

@@ -1,7 +1,7 @@
 {
   "release": "5.26.0",
-  "buildId": "run-270-1",
-  "commitSha": "09e34fedf072b7a5ab4fdce746bd0c0bfbe53c4a",
-  "buildTime": "2026-10-31T23:24:31Z",
+  "buildId": "run-271-1",
+  "commitSha": "5036fc9c7a6ea65a6269500436e8eb9b6c443413",
+  "buildTime": "2026-11-01T05:29:33Z",
   "serviceName": "muggle-ai-works-mcp"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@muggleai/works",
   "mcpName": "io.github.multiplex-ai/muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "description": "13 years of Microsoft hyperscale engineering, packaged as a harness for your AI coding agent.",
   "type": "module",
   "main": "dist/index.js",

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "muggle",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/plugin/.codex-mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.271",
         "serve"
       ],
       "env": {

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
   "author": {
     "name": "Muggle AI",

package/plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "muggle",
   "displayName": "Muggle AI",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.271",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/plugin/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.271",
         "serve"
       ]
     }

package/scripts/muggle-watch/README.md

@@ -4,10 +4,11 @@ A standing per-user scheduled job that runs `muggle watch tick` every few minute
 
 - **Tracks** active Claude Code sessions (`claude agents --json`) and Codex sessions (recent `~/.codex/sessions` rollouts). It also tracks their processes: claude, codex, muggle MCP servers, and PR watch loops. Each live Claude session is stamped with when it last loaded its plugins (its process start, or its newest muggle MCP server start after a `/reload-plugins`) and the muggle works build installed then, read off `~/.muggle-ai/postinstall.log`.
 - **Checks every open PR-watch slot** under `~/.muggle-ai/muggle-do/sessions/`. Is its loop running, and heard by a live session? Is CI red? Is the branch behind or conflicting? Are review threads unresolved?
-- **Keeps registered watchers running.** A slot carrying `watch-registration.json` (written by `pr-watch-arm.sh` on every arm) has its owner session resumed in the background when its loop is gone and the owner is down, or idle in the background (stopped first, once a throwaway launch confirms Claude will resume it there). A resume that only hit the usage limit is retried without counting against the per-owner cap. The resumed session's `/muggle:muggle-pr-followup reconcile` re-arms it with that session's own context. The service never addresses a review, pushes, or kills a process.
+- **Keeps registered watchers running.** A slot carrying `watch-registration.json` (written by `pr-watch-arm.sh` on every arm) whose loop is dead or unheard gets a loop the service starts itself, as a program outside every session. When that loop reports new activity or the PR ending, the owner session is woken with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>` for that one PR, but only between its turns. The service never addresses a review, pushes, or pushes anything else into a session.
 - **Closes out finished slots.** A slot whose PR GitHub reports merged or closed, with no loop and no running owner, is finalized the way a watcher's terminal tick would: `prs.json` takes the state, `followup.log` the terminal line, and `result.md` is written. Only local files change; post-merge cleanup is left to a session and recorded as not run.
-- **Keeps sessions on the installed build.** A session loaded before the newest global install (or a later user-scope update of the muggle plugin) is behind; other plugins updating restart nothing. Idle background sessions are restarted onto the new build, up to 3 per tick: a session that owns open PR watches is stopped and resumed on `/muggle:muggle-pr-followup reconcile`, so its watchers come back with it; any other is respawned. A resume waits for the stopped process to exit and passes no flag beyond `--bg`, so the session continues under its own id and name. Resuming a session that is still running, or adding flags, starts a copy that the agent view lists beside the original. Before either, a throwaway background launch in the session's workspace confirms Claude will bring it back; a workspace that refuses is left running and named once. Busy or waiting sessions wait for a later tick, and terminal sessions get one notification to run `/reload-plugins`. No interface runs a slash command inside another session.
-- **Records and alerts.** Results go to `status.json` (last snapshot, with open-PR coverage per repo), `state.json` (active findings, recovery attempts, reload progress) and `events.jsonl` (raise/clear/resume/respawn/close-out history) under `~/.muggle-ai/watch/`. New alerts raise one desktop notification per tick.
+- **Keeps sessions on the installed build.** A session loaded before the newest global install (or a later user-scope update of the muggle plugin) is behind; other plugins updating restart nothing. Idle background sessions are respawned onto the new build, up to 3 per tick, keeping their own id and name. A session that owns open PR watches is left running. Before a restart, a throwaway background launch in the session's workspace confirms Claude will bring it back; a workspace that refuses is left running and named once. Busy or waiting sessions wait for a later tick, and terminal sessions get one notification to run `/reload-plugins`. No interface runs a slash command inside another session.
+- **Keeps sessions on Remote Control.** With `remoteControlAtStartup` on in Claude's settings, a live background session is off when its `~/.claude/sessions/<pid>.json` entry has no Remote Control link, or its process started before the current claude.ai login took effect, so its link serves another account. Such a session is respawned once its turn is over (registry status `idle` or `shell`), sharing the 3-per-tick cap with the reload. That keeps the same session id, so there is no duplicate in the agent view, and nothing is typed into it. Background commands carry over to the restarted process, PR watch loops included, so they keep reporting to that session. Each restart opens a new Remote Control session, so a session already on is never restarted. A restarted session gets 30 minutes to link, and one still off after 2 restarts in a day is left alone. Terminal sessions that are off are listed for `/remote-control`.
+- **Records and alerts.** Results go to `status.json` (last snapshot, with open-PR and Remote Control coverage), `state.json` (active findings, recovery attempts, reload progress, the login last seen, Remote Control restarts) and `events.jsonl` (raise/clear/resume/respawn/close-out history) under `~/.muggle-ai/watch/`. New alerts raise one desktop notification per tick.
 
 ## Install
 
@@ -43,6 +44,7 @@ On Windows the PowerShell installer also takes flags directly:
 | `-IntervalMinutes <n>` | Tick interval, default 2 |
 | `-NoRecovery` | Report dead watchers without resuming their owners |
 | `-NoAutoReload` | Never restart sessions onto a new build |
+| `-NoRemoteControl` | Report sessions off Remote Control without restarting them |
 | `-NoWait` | Return once the task is registered, before its first tick |
 | `-MuggleEntry <path>` | Run a specific `bin\muggle.js` instead of the global install |
 | `-Uninstall` | Remove the task; the ledger is kept |

package/scripts/muggle-watch/install-muggle-watch.ps1

@@ -1,8 +1,9 @@
 # Installs the MuggleWatch scheduled task for the current user (no elevation):
 # every -IntervalMinutes it runs `muggle watch tick`, which snapshots Claude and
 # Codex sessions, their processes and every PR-watch slot, alerts on dead or deaf
-# watchers, red CI and stale branches, resumes the owner session of a registered
-# slot whose watcher died, and fans plugin reloads out across sessions.
+# watchers, red CI and stale branches, restarts the loop of a registered slot
+# whose watcher died, fans plugin reloads out across sessions, and restarts
+# sessions that are off Remote Control under the current login.
 #
 # The task runs the global @muggleai/works install, whose path survives
 # `muggle upgrade`, so the service always runs the current release. Only the
@@ -20,6 +21,7 @@ param(
     [string]$MuggleEntry,
     [switch]$NoAutoReload,
     [switch]$NoRecovery,
+    [switch]$NoRemoteControl,
     # Return once the task is registered; its trigger runs the first tick a minute later.
     [switch]$NoWait,
     [switch]$Uninstall
@@ -61,6 +63,7 @@ Copy-Item (Join-Path $PSScriptRoot "muggle-watch-hidden.vbs") $installedLauncher
 $tickFlags = @()
 if ($NoAutoReload) { $tickFlags += "--no-auto-reload" }
 if ($NoRecovery) { $tickFlags += "--no-recovery" }
+if ($NoRemoteControl) { $tickFlags += "--no-remote-control" }
 $launcherArguments = @("`"$installedLauncher`"", "`"$($nodeCommand.Source)`"", "`"$MuggleEntry`"") + $tickFlags
 
 # wscript.exe rather than node.exe is what keeps every run off the desktop; see