@muggleai/works 5.31.0-staging.270 → 5.31.0-staging.272

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
       "name": "muggleai",
       "source": "./plugin",
       "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-      "version": "5.31.0-staging.270"
+      "version": "5.31.0-staging.272"
     }
   ]
 }

package/dist/{chunk-W3HJBL5U.js → chunk-IZQGF3F2.js}

@@ -2830,6 +2830,13 @@ var ClaudeTurnStatus = /* @__PURE__ */ ((ClaudeTurnStatus2) => {
   ClaudeTurnStatus2["Waiting"] = "waiting";
   return ClaudeTurnStatus2;
 })(ClaudeTurnStatus || {});
+var ClaudeProcessStatus = /* @__PURE__ */ ((ClaudeProcessStatus2) => {
+  ClaudeProcessStatus2["Idle"] = "idle";
+  ClaudeProcessStatus2["Busy"] = "busy";
+  ClaudeProcessStatus2["Shell"] = "shell";
+  ClaudeProcessStatus2["Waiting"] = "waiting";
+  return ClaudeProcessStatus2;
+})(ClaudeProcessStatus || {});
 var ClaudeJobState = /* @__PURE__ */ ((ClaudeJobState2) => {
   ClaudeJobState2["Working"] = "working";
   ClaudeJobState2["Blocked"] = "blocked";
@@ -2932,6 +2939,12 @@ var CLAUDE_SESSION_REGISTRY_DIR_NAME = "sessions";
 var CLAUDE_PROJECTS_DIR_NAME = "projects";
 var CLAUDE_INSTALLED_PLUGINS_RELATIVE_PATH = ["plugins", "installed_plugins.json"];
 var CLAUDE_GLOBAL_CONFIG_FILE_NAME = ".claude.json";
+var CLAUDE_SETTINGS_FILE_NAME = "settings.json";
+var CLAUDE_CREDENTIALS_FILE_NAME = ".credentials.json";
+var REMOTE_CONTROL_MAX_RESTARTS = 2;
+var REMOTE_CONTROL_RESTART_WINDOW_MS = 24 * 60 * 6e4;
+var REMOTE_CONTROL_RESTART_COOLDOWN_MS = 30 * 6e4;
+var REMOTE_CONTROL_NAME_COLUMN_WIDTH = 32;
 var USAGE_WINDOW_EXHAUSTED_PERCENT = 100;
 var RELOAD_PLUGIN_SCOPE = "user";
 var MUGGLE_PLUGIN_ID = "muggleai@muggle-works";
@@ -2987,6 +3000,8 @@ function resolveWatchPaths(env = process.env) {
     claudeProjectsDir: join(claudeConfigDir, CLAUDE_PROJECTS_DIR_NAME),
     claudeInstalledPluginsFile: join(claudeConfigDir, ...CLAUDE_INSTALLED_PLUGINS_RELATIVE_PATH),
     claudeGlobalConfigFile: join(env.CLAUDE_CONFIG_DIR || homedir(), CLAUDE_GLOBAL_CONFIG_FILE_NAME),
+    claudeSettingsFile: join(claudeConfigDir, CLAUDE_SETTINGS_FILE_NAME),
+    claudeCredentialsFile: join(claudeConfigDir, CLAUDE_CREDENTIALS_FILE_NAME),
     codexSessionsDir: join(codexHome, "sessions"),
     muggleInstallLogFile: join(muggleDataDir, MUGGLE_INSTALL_LOG_FILE)
   };
@@ -4841,6 +4856,9 @@ function processSummary(snapshot) {
     `${countOf("pr-watch-loop" /* PrWatchLoop */)} PR watch loop processes`
   ].join(", ");
 }
+function countDecisions(report, action) {
+  return report.decisions.filter((decision) => decision.action === action).length;
+}
 function renderWatchStatus(snapshot, nowMs) {
   const lines = [];
   const snapshotAgeMs = nowMs - Date.parse(snapshot.takenAt);
@@ -4883,12 +4901,24 @@ function renderWatchStatus(snapshot, nowMs) {
     }
   }
   if (snapshot.reload) {
-    const countOf = (action) => snapshot.reload?.decisions.filter((decision) => decision.action === action).length ?? 0;
+    const reload = snapshot.reload;
     lines.push(
       "",
-      `Plugin reload: ${snapshot.reload.respawnedSessionIds.length} restarted, ${snapshot.reload.failedSessionIds.length} failed, ${countOf("defer" /* Defer */)} deferred, ${countOf("notify-manual" /* NotifyManual */) + (snapshot.reload.untrustedSessionIds?.length ?? 0)} need /reload-plugins by hand`
+      `Plugin reload: ${reload.respawnedSessionIds.length} restarted, ${reload.failedSessionIds.length} failed, ${countDecisions(reload, "defer" /* Defer */)} deferred, ${countDecisions(reload, "notify-manual" /* NotifyManual */) + (reload.untrustedSessionIds?.length ?? 0)} need /reload-plugins by hand`
     );
   }
+  if (snapshot.remoteControl) {
+    const remoteControl = snapshot.remoteControl;
+    lines.push(
+      "",
+      `Remote Control: ${remoteControl.connectedSessionIds.length} connected, ${remoteControl.respawnedSessionIds.length} restarted, ${remoteControl.failedSessionIds.length} failed, ${remoteControl.untrustedSessionIds.length} refused, ${countDecisions(remoteControl, "defer" /* Defer */)} waiting, ${countDecisions(remoteControl, "skip" /* Skip */) + countDecisions(remoteControl, "notify-manual" /* NotifyManual */)} skipped`
+    );
+    for (const decision of remoteControl.decisions) {
+      const outcome = remoteControl.untrustedSessionIds.includes(decision.sessionId) ? " \u2014 refused: its workspace takes no background restart, run /remote-control in it" : remoteControl.failedSessionIds.includes(decision.sessionId) ? " \u2014 restart failed" : "";
+      const label = (decision.name ?? "").slice(0, REMOTE_CONTROL_NAME_COLUMN_WIDTH).padEnd(REMOTE_CONTROL_NAME_COLUMN_WIDTH);
+      lines.push(`  ${decision.action.padEnd(14)} ${shortSessionId(decision.sessionId)} ${label} ${decision.reason}${outcome}`);
+    }
+  }
   return `${lines.join("\n")}
 `;
 }
@@ -4921,6 +4951,32 @@ function cwdFromSessionHead(head) {
   }
 }
 
+// src/watch/claude-account.ts
+function isRemoteControlAtStartup(claudeSettingsFile) {
+  try {
+    const settings = JSON.parse(readFileSync(claudeSettingsFile, "utf-8"));
+    return settings.remoteControlAtStartup === true;
+  } catch {
+    return false;
+  }
+}
+function readClaudeLogin(claudeGlobalConfigFile, claudeCredentialsFile) {
+  let accountUuid;
+  try {
+    const config = JSON.parse(readFileSync(claudeGlobalConfigFile, "utf-8"));
+    accountUuid = optionalString(config.oauthAccount?.accountUuid);
+  } catch {
+    accountUuid = void 0;
+  }
+  let credentialsWrittenAtMs;
+  try {
+    credentialsWrittenAtMs = statSync(claudeCredentialsFile).mtimeMs;
+  } catch {
+    credentialsWrittenAtMs = void 0;
+  }
+  return { accountUuid, credentialsWrittenAtMs };
+}
+
 // src/watch/session-liveness.ts
 function hasLiveProcess(session) {
   if (session.agent !== "claude" /* Claude */) return true;
@@ -4931,31 +4987,50 @@ function isIdleBackgroundSession(session) {
 }
 
 // src/watch/claude-sessions.ts
-function readPidsBySessionId(registryDir) {
-  const pidsBySessionId = /* @__PURE__ */ new Map();
+function readRegistryBySessionId(registryDir) {
+  const entriesBySessionId = /* @__PURE__ */ new Map();
   let fileNames;
   try {
     fileNames = readdirSync(registryDir).filter((fileName) => fileName.endsWith(".json"));
   } catch {
-    return pidsBySessionId;
+    return entriesBySessionId;
   }
   for (const fileName of fileNames) {
     try {
       const entry = JSON.parse(readFileSync(join(registryDir, fileName), "utf-8"));
       if (typeof entry.pid === "number" && typeof entry.sessionId === "string") {
-        pidsBySessionId.set(entry.sessionId, entry.pid);
+        entriesBySessionId.set(entry.sessionId, {
+          pid: entry.pid,
+          processStatus: enumValueOf(ClaudeProcessStatus, entry.status),
+          processStatusSinceMs: typeof entry.statusUpdatedAt === "number" ? entry.statusUpdatedAt : void 0,
+          remoteControlSessionId: optionalString(entry.bridgeSessionId)
+        });
       }
     } catch {
       continue;
     }
   }
-  return pidsBySessionId;
+  return entriesBySessionId;
+}
+function isPidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+}
+function isSessionRunning(runCommand, registryDir, sessionId) {
+  const registryEntry = readRegistryBySessionId(registryDir).get(sessionId);
+  if (registryEntry !== void 0 && isPidAlive(registryEntry.pid)) return true;
+  const sessions = readClaudeSessions(runCommand, registryDir);
+  if (sessions === null) return null;
+  const session = sessions.find((listed) => listed.sessionId === sessionId);
+  return session !== void 0 && hasLiveProcess(session);
 }
 function waitForSessionExit(runCommand, registryDir, sessionId, sleep2 = blockFor) {
   for (let waitedMs = 0; ; waitedMs += SESSION_EXIT_POLL_MS) {
-    const sessions = readClaudeSessions(runCommand, registryDir);
-    const session = sessions?.find((listed) => listed.sessionId === sessionId);
-    if (sessions !== null && (session === void 0 || !hasLiveProcess(session))) return true;
+    if (isSessionRunning(runCommand, registryDir, sessionId) === false) return true;
     if (waitedMs >= SESSION_EXIT_WAIT_MS) return false;
     sleep2(SESSION_EXIT_POLL_MS);
   }
@@ -4971,11 +5046,12 @@ function readClaudeSessions(runCommand, registryDir) {
   } catch {
     return null;
   }
-  const pidsBySessionId = readPidsBySessionId(registryDir);
+  const registryBySessionId = readRegistryBySessionId(registryDir);
   const sessions = [];
   for (const listing of listings) {
     const sessionId = optionalString(listing.sessionId);
     if (!sessionId) continue;
+    const registryEntry = registryBySessionId.get(sessionId);
     sessions.push({
       agent: "claude" /* Claude */,
       sessionId,
@@ -4986,7 +5062,10 @@ function readClaudeSessions(runCommand, registryDir) {
       turnStatus: enumValueOf(ClaudeTurnStatus, listing.status),
       jobState: enumValueOf(ClaudeJobState, listing.state),
       startedAtMs: typeof listing.startedAt === "number" ? listing.startedAt : void 0,
-      pid: typeof listing.pid === "number" ? listing.pid : pidsBySessionId.get(sessionId)
+      pid: typeof listing.pid === "number" ? listing.pid : registryEntry?.pid,
+      processStatus: registryEntry?.processStatus,
+      processStatusSinceMs: registryEntry?.processStatusSinceMs,
+      remoteControlSessionId: registryEntry?.remoteControlSessionId
     });
   }
   return sessions;
@@ -5275,13 +5354,22 @@ function startServiceLoops(assessments, nowMs, isPollingDisabled, ownerSessionOf
 }
 
 // src/watch/session-restart.ts
-function resumeSession(target, runCommand, waitForExit) {
+function resumeSession(target, runCommand, waitForExit, isSessionRunning2) {
+  const runningSessionId = target.runningSessionId ?? target.sessionId;
   if (target.runningShortId !== void 0) {
     runCommand("claude", ["stop", target.runningShortId]);
-    if (!waitForExit(target.runningSessionId ?? target.sessionId)) return false;
-  }
-  const resumed = runCommand("claude", ["--resume", target.sessionId, "--bg", target.prompt], { cwd: target.cwd });
-  return resumed?.exitCode === 0;
+    if (!waitForExit(runningSessionId)) return { outcome: "still-running" /* StillRunning */ };
+  } else if (isSessionRunning2(runningSessionId)) {
+    return { outcome: "still-running" /* StillRunning */ };
+  }
+  const resumed = runCommand("claude", ["--resume", target.sessionId, "--bg", target.prompt], { cwd: target.cwd, isStderrCaptured: true });
+  if (resumed?.exitCode !== 0) return { outcome: "failed" /* Failed */ };
+  const backgroundedShortId = resumed.stdout.match(BACKGROUNDED_SESSION_ID_PATTERN)?.[1];
+  const ownShortIds = [shortSessionId(target.sessionId), shortSessionId(runningSessionId), target.runningShortId];
+  if (backgroundedShortId === void 0 || ownShortIds.includes(backgroundedShortId)) return { outcome: "continued" /* Continued */ };
+  const isCopyStopped = runCommand("claude", ["stop", backgroundedShortId])?.exitCode === 0;
+  const isCopyRemoved = isCopyStopped && runCommand("claude", ["rm", backgroundedShortId])?.exitCode === 0;
+  return { outcome: "copied" /* Copied */, copyShortId: backgroundedShortId, isCopyRemoved };
 }
 
 // src/watch/recovery.ts
@@ -5362,45 +5450,59 @@ function executeWatcherRecoveries(planned, attemptsByOwner, deps) {
       });
       return { ...recovery, cwd, outcome: "restart-refused" /* RestartRefused */ };
     }
-    const isResumed = resumeSession(
+    const resumed = resumeSession(
       { sessionId: recovery.ownerSessionId, cwd, prompt, runningShortId: recovery.ownerShortId, runningSessionId: recovery.ownerRunningSessionId },
       deps.runCommand,
-      deps.waitForExit
+      deps.waitForExit,
+      deps.isSessionRunning
     );
-    if (isResumed) markServiceLoopReportDelivered(recovery.slotDir);
-    else countAttempt(recovery.ownerSessionId);
-    events.push({
-      at: nowIso,
-      kind: isResumed ? "resumed" /* Resumed */ : "resume-failed" /* ResumeFailed */,
-      subject,
-      message: `${isResumed ? "woke it" : "could not wake it"} with ${prompt}`
-    });
-    return { ...recovery, cwd, outcome: isResumed ? "resumed" /* Resumed */ : "resume-failed" /* ResumeFailed */ };
+    if (resumed.outcome === "continued" /* Continued */) {
+      markServiceLoopReportDelivered(recovery.slotDir);
+      events.push({ at: nowIso, kind: "resumed" /* Resumed */, subject, message: `woke it with ${prompt}` });
+      return { ...recovery, cwd, outcome: "resumed" /* Resumed */ };
+    }
+    countAttempt(recovery.ownerSessionId);
+    if (resumed.outcome === "copied" /* Copied */) {
+      const copyNote = resumed.isCopyRemoved ? "stopped and removed the copy" : `could not remove the copy, run claude rm ${resumed.copyShortId}`;
+      events.push({
+        at: nowIso,
+        kind: "resume-forked" /* ResumeForked */,
+        subject,
+        message: `could not wake it: Claude still ran it and started copy ${resumed.copyShortId} instead; ${copyNote}`
+      });
+      return { ...recovery, cwd, outcome: "resume-forked" /* ResumeForked */ };
+    }
+    const reason = resumed.outcome === "still-running" /* StillRunning */ ? "it is still running, so a resume would start a copy" : `${prompt} did not start`;
+    events.push({ at: nowIso, kind: "resume-failed" /* ResumeFailed */, subject, message: `could not wake it: ${reason}` });
+    return { ...recovery, cwd, outcome: "resume-failed" /* ResumeFailed */ };
   });
   return { recoveries, attemptsByOwner: nextAttemptsByOwner, events };
 }
 
 // src/watch/findings.ts
-function resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, isProcessTableKnown, isHeardByService = false) {
+function resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, isProcessTableKnown, isHeardByService = false, isLoopDroppedByOwner = false) {
   const isHeartbeatWithin = (windowMs) => heartbeatAgeMs !== void 0 && heartbeatAgeMs <= windowMs;
   if (!isProcessTableKnown) {
     return isHeartbeatWithin(WATCH_HEARTBEAT_STALE_MS) ? "polling" /* Polling */ : "dead" /* Dead */;
   }
   if (loop) {
-    return isOwnerSessionActive === false && !isHeardByService ? "deaf" /* Deaf */ : "polling" /* Polling */;
+    const isUnheard = !isHeardByService && (isOwnerSessionActive === false || isLoopDroppedByOwner);
+    return isUnheard ? "deaf" /* Deaf */ : "polling" /* Polling */;
   }
   return isHeartbeatWithin(WATCHER_REARM_GRACE_MS) ? "rearming" /* Rearming */ : "dead" /* Dead */;
 }
 function oldestLoopFor(slug, processes) {
   return processes.filter((tracked) => tracked.kind === "pr-watch-loop" /* PrWatchLoop */ && tracked.watchSlotSlug === slug).sort((left, right) => (right.ageMs ?? 0) - (left.ageMs ?? 0))[0];
 }
-function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, nowMs) {
+function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, nowMs, idleSinceBySessionId2 = /* @__PURE__ */ new Map()) {
   const assessments = [];
   for (const slot of slots) {
     const loop = processes ? oldestLoopFor(slot.slug, processes) : void 0;
     const heartbeatAgeMs = slot.heartbeatMtimeMs === void 0 ? void 0 : Math.max(0, nowMs - slot.heartbeatMtimeMs);
     const isOwnerSessionActive = slot.ownerSessionId === void 0 || activeSessionIds === null ? void 0 : activeSessionIds.has(slot.ownerSessionId);
-    const watcher = resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, processes !== null, slot.isHeardByService);
+    const ownerIdleSinceMs = slot.ownerSessionId === void 0 ? void 0 : idleSinceBySessionId2.get(slot.ownerSessionId);
+    const isLoopDroppedByOwner = ownerIdleSinceMs !== void 0 && loop?.ageMs !== void 0 && ownerIdleSinceMs >= nowMs - loop.ageMs;
+    const watcher = resolveWatcherLiveness(loop, heartbeatAgeMs, isOwnerSessionActive, processes !== null, slot.isHeardByService, isLoopDroppedByOwner);
     const reportAgeMs = slot.serviceLoopReport === void 0 ? void 0 : Math.max(0, nowMs - slot.serviceLoopReport.writtenAtMs);
     for (const pr of slot.openPrs) {
       const live = liveStatusesByUrl.get(pr.url);
@@ -5415,6 +5517,7 @@ function assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl,
         heartbeatAgeMs,
         ownerSessionId: slot.ownerSessionId,
         isOwnerSessionActive,
+        isLoopDroppedByOwner,
         live,
         ownerEscalation: resolveOwnerEscalation(slot.lastSeenJson, slot.followupLogLines, pr, live?.headSha),
         isHeardByService: slot.isHeardByService,
@@ -5461,11 +5564,12 @@ function watcherFinding(assessment, subject) {
     );
   }
   if (assessment.watcher === "deaf" /* Deaf */) {
+    const ownerState = assessment.isLoopDroppedByOwner ? "is running but no longer holds it" : "has ended";
     return finding(
       "WATCHER_DEAF" /* WatcherDeaf */,
       [assessment.pr.url, assessment.loopPid],
       subject,
-      `watch loop pid ${assessment.loopPid} reports to no session: its owner session ${shortSessionId(assessment.ownerSessionId ?? "")} has ended`
+      `watch loop pid ${assessment.loopPid} reports to no session: its owner session ${shortSessionId(assessment.ownerSessionId ?? "")} ${ownerState}`
     );
   }
   return void 0;
@@ -5906,6 +6010,75 @@ function advancePendingReload(pending, report) {
     skippedSessionIds: [...pending.skippedSessionIds, ...report.untrustedSessionIds]
   };
 }
+
+// src/watch/remote-control.ts
+function advanceClaudeLogin(previous, observed, nowMs) {
+  if (observed.accountUuid === void 0) return previous;
+  if (previous === void 0) return { accountUuid: observed.accountUuid, observedAtMs: nowMs };
+  if (previous.accountUuid === observed.accountUuid) return { ...previous, observedAtMs: nowMs };
+  const writtenAtMs = Math.min(observed.credentialsWrittenAtMs ?? nowMs, nowMs);
+  return { accountUuid: observed.accountUuid, effectiveAtMs: Math.max(previous.observedAtMs, writtenAtMs), observedAtMs: nowMs };
+}
+function remoteControlGapOf(session, login) {
+  if (session.remoteControlSessionId === void 0) return "no Remote Control link";
+  const isStartedBeforeLogin = login.effectiveAtMs !== void 0 && session.startedAtMs !== void 0 && session.startedAtMs < login.effectiveAtMs;
+  return isStartedBeforeLogin ? "linked under an earlier login" : void 0;
+}
+function isTurnOver(session) {
+  if (session.processStatus !== void 0) {
+    return session.processStatus === "idle" /* Idle */ || session.processStatus === "shell" /* Shell */;
+  }
+  return session.turnStatus === "idle" /* Idle */;
+}
+function recentRestartsMs(restartsBySession, sessionId, nowMs) {
+  return (restartsBySession[sessionId] ?? []).map((restartedAt) => Date.parse(restartedAt)).filter((restartedAtMs) => !Number.isNaN(restartedAtMs) && nowMs - restartedAtMs < REMOTE_CONTROL_RESTART_WINDOW_MS);
+}
+function decide2(session, action, reason) {
+  return { sessionId: session.sessionId, shortId: session.shortId, name: session.name, cwd: session.cwd, action, reason };
+}
+function planRemoteControlRestarts(sessions, login, restartsBySession, nowMs, maxRestarts) {
+  let restartsPlanned = 0;
+  const connectedSessionIds = [];
+  const decisions = [];
+  for (const session of sessions) {
+    if (session.agent !== "claude" /* Claude */ || !hasLiveProcess(session)) continue;
+    const gap = remoteControlGapOf(session, login);
+    if (gap === void 0) {
+      connectedSessionIds.push(session.sessionId);
+      continue;
+    }
+    const restartsMs = recentRestartsMs(restartsBySession, session.sessionId, nowMs);
+    if (session.kind === "interactive" /* Interactive */) {
+      decisions.push(decide2(session, "notify-manual" /* NotifyManual */, `${gap} \u2014 terminal session, run /remote-control in it`));
+    } else if (session.kind !== "background" /* Background */ || !session.shortId) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} \u2014 not a background session the watch can restart`));
+    } else if (restartsMs.length >= REMOTE_CONTROL_MAX_RESTARTS) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} after ${restartsMs.length} restarts today`));
+    } else if (nowMs - Math.max(-Infinity, ...restartsMs) < REMOTE_CONTROL_RESTART_COOLDOWN_MS) {
+      decisions.push(decide2(session, "skip" /* Skip */, `${gap} \u2014 restarted recently, waiting for it to link`));
+    } else if (!isTurnOver(session)) {
+      decisions.push(decide2(session, "defer" /* Defer */, `${gap} \u2014 turn in flight (${session.processStatus ?? session.turnStatus ?? "unknown"})`));
+    } else if (restartsPlanned >= maxRestarts) {
+      decisions.push(decide2(session, "defer" /* Defer */, `${gap} \u2014 restart cap reached this pass`));
+    } else {
+      restartsPlanned++;
+      decisions.push(decide2(session, "respawn" /* Respawn */, gap));
+    }
+  }
+  return { connectedSessionIds, decisions };
+}
+function recordRemoteControlRestarts(restartsBySession, report, nowMs) {
+  const nowIso = new Date(nowMs).toISOString();
+  const nextRestartsBySession = {};
+  for (const sessionId of Object.keys(restartsBySession)) {
+    const recent = recentRestartsMs(restartsBySession, sessionId, nowMs).map((restartedAtMs) => new Date(restartedAtMs).toISOString());
+    if (recent.length > 0) nextRestartsBySession[sessionId] = recent;
+  }
+  for (const sessionId of [...report.respawnedSessionIds, ...report.failedSessionIds, ...report.untrustedSessionIds]) {
+    nextRestartsBySession[sessionId] = [...nextRestartsBySession[sessionId] ?? [], nowIso];
+  }
+  return nextRestartsBySession;
+}
 function resolvePluginRoot(env = process.env) {
   return env.CLAUDE_PLUGIN_ROOT || env.CURSOR_PLUGIN_ROOT || dirname(dirname(fileURLToPath(import.meta.url)));
 }
@@ -6273,6 +6446,7 @@ function createDefaultWatchTickDeps(options) {
     notify: createDesktopNotifier(process.platform, defaultCommandRunner),
     isAutoReloadEnabled: options.isAutoReloadEnabled,
     isRecoveryEnabled: options.isRecoveryEnabled,
+    isRemoteControlKeptOn: options.isRemoteControlKeptOn,
     launchServiceLoop: createServiceLoopLauncher(process.platform, defaultCommandRunner)
   };
 }
@@ -6292,18 +6466,26 @@ function observeSessions(deps, installs) {
   const sessions = [...claudeSessions ?? [], ...readCodexSessions(deps.paths.codexSessionsDir, deps.nowMs)];
   return { processes, claudeSessions, sessions };
 }
+function idleSinceBySessionId(runningSessions) {
+  return new Map(
+    runningSessions.flatMap(
+      (session) => session.processStatus === "idle" /* Idle */ && session.processStatusSinceMs !== void 0 ? [[session.sessionId, session.processStatusSinceMs]] : []
+    )
+  );
+}
 function isRestartAttempted(recovery) {
-  return recovery.outcome === "resumed" /* Resumed */ || recovery.outcome === "resume-failed" /* ResumeFailed */;
+  return recovery.outcome === "resumed" /* Resumed */ || recovery.outcome === "resume-failed" /* ResumeFailed */ || recovery.outcome === "resume-forked" /* ResumeForked */;
 }
 function watchOwnersOf(slots) {
   return new Set(slots.flatMap((slot) => !isTerminalPrState(slot.live?.state) && slot.ownerSessionId ? [slot.ownerSessionId] : []));
 }
-function reloadEvents(report, at) {
+function reloadEvents(report, at, restartPurpose) {
   const decisionById = new Map(report.decisions.map((decision) => [decision.sessionId, decision]));
   const describe = (sessionId) => `session ${decisionById.get(sessionId)?.name ?? shortSessionId(sessionId)}`;
+  const purposeOf = (sessionId) => restartPurpose === void 0 ? {} : { message: `${restartPurpose}: ${decisionById.get(sessionId)?.reason ?? ""}` };
   return [
-    ...report.respawnedSessionIds.map((sessionId) => ({ at, kind: "respawned" /* Respawned */, subject: describe(sessionId) })),
-    ...report.failedSessionIds.map((sessionId) => ({ at, kind: "respawn-failed" /* RespawnFailed */, subject: describe(sessionId) })),
+    ...report.respawnedSessionIds.map((sessionId) => ({ at, kind: "respawned" /* Respawned */, subject: describe(sessionId), ...purposeOf(sessionId) })),
+    ...report.failedSessionIds.map((sessionId) => ({ at, kind: "respawn-failed" /* RespawnFailed */, subject: describe(sessionId), ...purposeOf(sessionId) })),
     ...report.untrustedSessionIds.map((sessionId) => ({
       at,
       kind: "restart-refused" /* RestartRefused */,
@@ -6321,12 +6503,24 @@ function runReloadPass(record, claudeSessions, watchOwnerSessionIds, deps, at) {
   const report = executeReloadFanOut(decisions, deps.runCommand, canRestartVia(deps));
   return { report, pendingReload: advancePendingReload(record, report), events: reloadEvents(report, at) };
 }
+function runRemoteControlPass(login, claudeSessions, restartsBySession, maxRestarts, deps, at) {
+  const plan = planRemoteControlRestarts(claudeSessions, login, restartsBySession, deps.nowMs, maxRestarts);
+  const executed = executeReloadFanOut(plan.decisions, deps.runCommand, canRestartVia(deps));
+  return {
+    report: { ...executed, connectedSessionIds: plan.connectedSessionIds },
+    restartsBySession: recordRemoteControlRestarts(restartsBySession, executed, deps.nowMs),
+    events: reloadEvents(executed, at, "restarted to reconnect Remote Control")
+  };
+}
 function canRestartVia(deps) {
   return (cwd) => canRestartSessionIn(cwd, deps.runCommand);
 }
 function waitForExitVia(deps) {
   return (sessionId) => waitForSessionExit(deps.runCommand, deps.paths.claudeSessionRegistryDir, sessionId, deps.sleep);
 }
+function isSessionRunningVia(deps) {
+  return (sessionId) => isSessionRunning(deps.runCommand, deps.paths.claudeSessionRegistryDir, sessionId) !== false;
+}
 function reloadTargetAtMs(deps, installs) {
   return resolveReloadTargetAtMs(installs, readMugglePluginUpdatedAtMs(deps.paths.claudeInstalledPluginsFile));
 }
@@ -6366,7 +6560,7 @@ function runTickUnlocked(deps) {
     at
   );
   for (const cachedStatus of cachedStatuses) liveStatusesByUrl.set(cachedStatus.url, cachedStatus);
-  const allAssessments = assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, deps.nowMs);
+  const allAssessments = assessWatchSlots(slots, processes, activeSessionIds, liveStatusesByUrl, deps.nowMs, idleSinceBySessionId(runningSessions));
   const closeOut = closeOutTerminalSlots(allAssessments, deps, at);
   const assessments = allAssessments.filter((assessment) => !closeOut.closedOutSlugs.includes(assessment.slug));
   const findings = deriveWatchFindings(assessments, processes ?? [], isPollingDisabled);
@@ -6394,7 +6588,8 @@ function runTickUnlocked(deps) {
       claudeProjectsDir: deps.paths.claudeProjectsDir,
       nowMs: deps.nowMs,
       canRestartIn: canRestartVia(deps),
-      waitForExit: waitForExitVia(deps)
+      waitForExit: waitForExitVia(deps),
+      isSessionRunning: isSessionRunningVia(deps)
     });
     recoveries = executed.recoveries;
     recoveryAttemptsByOwner = executed.attemptsByOwner;
@@ -6409,16 +6604,34 @@ function runTickUnlocked(deps) {
     serviceArms = started.serviceArms;
     events.push(...started.events);
   }
+  const restartedSessionIds = new Set(recoveries.filter(isRestartAttempted).map((recovery) => recovery.ownerSessionId));
   let pendingReload = state.pendingReload;
   let reload;
   const targetAtMs = reloadTargetAtMs(deps, installs);
   if (deps.isAutoReloadEnabled && targetAtMs !== void 0 && claudeSessions !== null) {
-    const restartedOwnerIds = new Set(recoveries.filter(isRestartAttempted).map((recovery) => recovery.ownerSessionId));
-    const reloadableSessions = claudeSessions.filter((session) => !restartedOwnerIds.has(session.sessionId));
+    const reloadableSessions = claudeSessions.filter((session) => !restartedSessionIds.has(session.sessionId));
     const pass = runReloadPass(reloadRecordFor(state, targetAtMs), reloadableSessions, watchOwnersOf(assessments), deps, at);
     pendingReload = pass.pendingReload;
     reload = pass.report;
     events.push(...pass.events);
+    for (const sessionId of [...reload.respawnedSessionIds, ...reload.failedSessionIds]) restartedSessionIds.add(sessionId);
+  }
+  const observedLogin = readClaudeLogin(deps.paths.claudeGlobalConfigFile, deps.paths.claudeCredentialsFile);
+  const claudeLogin = advanceClaudeLogin(state.claudeLogin, observedLogin, deps.nowMs);
+  let remoteControlRestartsBySession = state.remoteControlRestartsBySession ?? {};
+  let remoteControl;
+  if (deps.isRemoteControlKeptOn && claudeSessions !== null && claudeLogin !== void 0 && observedLogin.accountUuid !== void 0 && isRemoteControlAtStartup(deps.paths.claudeSettingsFile)) {
+    const pass = runRemoteControlPass(
+      claudeLogin,
+      claudeSessions.filter((session) => !restartedSessionIds.has(session.sessionId)),
+      remoteControlRestartsBySession,
+      Math.max(0, MAX_RESPAWNS_PER_TICK - (reload ? reload.respawnedSessionIds.length + reload.failedSessionIds.length : 0)),
+      deps,
+      at
+    );
+    remoteControl = pass.report;
+    remoteControlRestartsBySession = pass.restartsBySession;
+    events.push(...pass.events);
   }
   appendWatchEvents(deps.paths.watchDir, events);
   notifyIfAny(deps, composeTickNotification(transitions.raised, recoveries, reload));
@@ -6426,7 +6639,9 @@ function runTickUnlocked(deps) {
     activeFindings: transitions.activeFindings,
     recoveryAttemptsByOwner,
     terminalPrsByUrl,
-    pendingReload
+    pendingReload,
+    claudeLogin,
+    remoteControlRestartsBySession
   });
   const snapshot = {
     takenAt: at,
@@ -6439,7 +6654,8 @@ function runTickUnlocked(deps) {
     findings,
     recoveries,
     serviceArms,
-    reload
+    reload,
+    remoteControl
   };
   writeWatchSnapshot(deps.paths.watchDir, snapshot);
   return snapshot;
@@ -6493,7 +6709,11 @@ function failWith(message) {
 function watchTickCommand(flags) {
   try {
     const snapshot = runWatchTick(
-      createDefaultWatchTickDeps({ isAutoReloadEnabled: flags.autoReload, isRecoveryEnabled: flags.recovery })
+      createDefaultWatchTickDeps({
+        isAutoReloadEnabled: flags.autoReload,
+        isRecoveryEnabled: flags.recovery,
+        isRemoteControlKeptOn: flags.remoteControl
+      })
     );
     if (flags.json) {
       process.stdout.write(`${JSON.stringify(snapshot, null, 2)}
@@ -6533,7 +6753,10 @@ function renderReloadReport(report, isDryRun) {
 function watchReloadPluginsCommand(flags) {
   try {
     const isDryRun = flags.dryRun === true;
-    const report = runReloadPluginsPass(createDefaultWatchTickDeps({ isAutoReloadEnabled: true, isRecoveryEnabled: false }), isDryRun);
+    const report = runReloadPluginsPass(
+      createDefaultWatchTickDeps({ isAutoReloadEnabled: true, isRecoveryEnabled: false, isRemoteControlKeptOn: false }),
+      isDryRun
+    );
     if (!report) {
       failWith("could not list Claude sessions (`claude agents --json` failed)");
       return;
@@ -6618,7 +6841,7 @@ function createProgram() {
   stack.command("status").description("Show every lease, the line, and the services prepare tracks").option("--json", "Print the full report as JSON").action(stackStatusCommand);
   program.command("ci-install").description("Add the Muggle walkthrough check to this repository's GitHub Actions").option("--force", "Replace an existing workflow file").action(ciInstallCommand);
   const watch = program.command("watch").description("Standing watch over Claude/Codex sessions, their processes, and PR watchers");
-  watch.command("tick").description("Run one watch pass (the scheduled task runs this)").option("--no-auto-reload", "Do not start a plugin reload fan-out when installed plugins change").option("--no-recovery", "Report dead watchers without resuming their owner sessions").option("--json", "Print the full snapshot as JSON").action(watchTickCommand);
+  watch.command("tick").description("Run one watch pass (the scheduled task runs this)").option("--no-auto-reload", "Do not start a plugin reload fan-out when installed plugins change").option("--no-recovery", "Report dead watchers without resuming their owner sessions").option("--no-remote-control", "Report sessions off Remote Control without restarting them").option("--json", "Print the full snapshot as JSON").action(watchTickCommand);
   watch.command("status").description("Show the last watch pass: sessions, processes, PR watches, findings").option("--json", "Print the snapshot as JSON").action(watchStatusCommand);
   watch.command("reload-plugins").description("Reload plugins across active Claude sessions (respawns idle background ones)").option("--dry-run", "Show what each session would get without respawning anything").option("--json", "Print the report as JSON").action(watchReloadPluginsCommand);
   watch.command("install").description("Schedule the watch with this OS's scheduler, or refresh the entry in place").option("--uninstall", "Remove the task; the ledger is kept").option("--no-wait", "Return once the task is registered, without waiting for its first pass").option("--from-preference", "Act on the autoInstallWatchService preference, as an install or upgrade does").action(watchInstallCommand);

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { runCli } from './chunk-W3HJBL5U.js';
+import { runCli } from './chunk-IZQGF3F2.js';
 import './chunk-XUANXZ2O.js';
 
 // src/cli/main.ts

package/dist/index.js

@@ -1,2 +1,2 @@
-export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-W3HJBL5U.js';
+export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-IZQGF3F2.js';
 export { createChildLogger, e2e_exports as e2e, getConfig, getLocalQaTools, getLogger, getQaTools, local_exports as localQa, mcp_exports as mcp, e2e_exports as qa, src_exports as shared } from './chunk-XUANXZ2O.js';

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "muggle",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/dist/plugin/.codex-mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.272",
         "serve"
       ],
       "env": {

package/dist/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
   "author": {
     "name": "Muggle AI",

package/dist/plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "muggle",
   "displayName": "Muggle AI",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/dist/plugin/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.272",
         "serve"
       ]
     }

package/dist/plugin/skills/muggle-pr-followup/state-schemas.md

@@ -61,7 +61,7 @@ The slot's opt-in to recovery by the muggle watch service (`muggle watch`, a per
 
 Recovery requires all of: the slot is registered, the PR is open on GitHub, no loop is heard (no loop process carries the slot's `--slot` path, or the one that does prints into a session that has ended), the heartbeat is older than the re-arm hand-off, `polling.disabled` is absent, `owner.json` names an owner, and that owner is not mid-turn. The service then runs `pr-watch-arm.sh` itself, detached, with `MUGGLE_PR_WATCH_LISTENER=muggle-watch`. The loop records [`watch-listener`](#watch-listener) and writes its output to [`watch-service.out`](#watch-serviceout), and no session spends a turn on it.
 
-When that loop exits on an `EVENT` or `TERMINAL` line, the service wakes the owner with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>`, naming that slot and PR only. It resumes the owner in the background from the project dir its transcript records. A running owner is woken only as a background session idle between turns: it is stopped first, and only after a throwaway background launch confirms Claude will resume it in that workspace. An owner that is mid-turn, waiting on its user, or open in a terminal keeps the report, and the service alerts once the report is overdue. The service never wakes the ended owner of a merged or closed PR; it closes that slot out instead. An `EXPIRED` loop is restarted without waking anyone. The service caps loop starts and wakes per pass, caps failed wakes per owner, and holds every wake while the account sits at a usage limit.
+When that loop exits on an `EVENT` or `TERMINAL` line, the service wakes the owner with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>`, naming that slot and PR only. It resumes the owner in the background from the project dir its transcript records. A running owner is woken only as a background session idle between turns: it is stopped first, and only after a throwaway background launch confirms Claude will resume it in that workspace. The resume runs only once neither `claude agents` nor Claude's own session registry shows a process for the owner. If Claude still answers with a copy under a new id, the service stops and removes that copy and counts the wake as failed, so the agent view never gains a duplicate. An owner that is mid-turn, waiting on its user, or open in a terminal keeps the report, and the service alerts once the report is overdue. The service never wakes the ended owner of a merged or closed PR; it closes that slot out instead. An `EXPIRED` loop is restarted without waking anyone. The service caps loop starts and wakes per pass, caps failed wakes per owner, and holds every wake while the account sits at a usage limit.
 
 **Absent ⇒ observed only.** The service still reports on the slot's watcher, CI and branch standing, but never starts its loop or wakes its owner. Slots armed before this file existed stay that way until their next arm. The file lives in the slot, so a `.stopped` rename or a `result.md` retires it with the slot.
 

package/dist/release-manifest.json

@@ -1,7 +1,7 @@
 {
   "release": "5.26.0",
-  "buildId": "run-270-1",
-  "commitSha": "09e34fedf072b7a5ab4fdce746bd0c0bfbe53c4a",
-  "buildTime": "2026-10-31T23:24:31Z",
+  "buildId": "run-272-1",
+  "commitSha": "76a7b1d3658b798a4b809e758e42e7128e23aba1",
+  "buildTime": "2026-11-01T06:59:53Z",
   "serviceName": "muggle-ai-works-mcp"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@muggleai/works",
   "mcpName": "io.github.multiplex-ai/muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "description": "13 years of Microsoft hyperscale engineering, packaged as a harness for your AI coding agent.",
   "type": "module",
   "main": "dist/index.js",

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "muggle",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/plugin/.codex-mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.272",
         "serve"
       ],
       "env": {

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "muggle",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
   "author": {
     "name": "Muggle AI",

package/plugin/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "muggle",
   "displayName": "Muggle AI",
   "description": "Real-browser E2E acceptance for your coding agent: test the flows you changed and open the PR with screenshots. Built for flows other tools can't reach: managed test identities with live inboxes (magic links, email OTP and 2FA, verification mail, password resets), an encrypted secret store for login and test credentials, and a test graph that runs prerequisite flows first. Plain-English tests become replayable scripts on localhost or preview URLs.",
-  "version": "5.31.0-staging.270",
+  "version": "5.31.0-staging.272",
   "author": {
     "name": "Muggle AI",
     "email": "support@muggle-ai.com"

package/plugin/.mcp.json

@@ -4,7 +4,7 @@
       "command": "npx",
       "args": [
         "-y",
-        "@muggleai/works@5.31.0-staging.270",
+        "@muggleai/works@5.31.0-staging.272",
         "serve"
       ]
     }

package/plugin/skills/muggle-pr-followup/state-schemas.md

@@ -61,7 +61,7 @@ The slot's opt-in to recovery by the muggle watch service (`muggle watch`, a per
 
 Recovery requires all of: the slot is registered, the PR is open on GitHub, no loop is heard (no loop process carries the slot's `--slot` path, or the one that does prints into a session that has ended), the heartbeat is older than the re-arm hand-off, `polling.disabled` is absent, `owner.json` names an owner, and that owner is not mid-turn. The service then runs `pr-watch-arm.sh` itself, detached, with `MUGGLE_PR_WATCH_LISTENER=muggle-watch`. The loop records [`watch-listener`](#watch-listener) and writes its output to [`watch-service.out`](#watch-serviceout), and no session spends a turn on it.
 
-When that loop exits on an `EVENT` or `TERMINAL` line, the service wakes the owner with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>`, naming that slot and PR only. It resumes the owner in the background from the project dir its transcript records. A running owner is woken only as a background session idle between turns: it is stopped first, and only after a throwaway background launch confirms Claude will resume it in that workspace. An owner that is mid-turn, waiting on its user, or open in a terminal keeps the report, and the service alerts once the report is overdue. The service never wakes the ended owner of a merged or closed PR; it closes that slot out instead. An `EXPIRED` loop is restarted without waking anyone. The service caps loop starts and wakes per pass, caps failed wakes per owner, and holds every wake while the account sits at a usage limit.
+When that loop exits on an `EVENT` or `TERMINAL` line, the service wakes the owner with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>`, naming that slot and PR only. It resumes the owner in the background from the project dir its transcript records. A running owner is woken only as a background session idle between turns: it is stopped first, and only after a throwaway background launch confirms Claude will resume it in that workspace. The resume runs only once neither `claude agents` nor Claude's own session registry shows a process for the owner. If Claude still answers with a copy under a new id, the service stops and removes that copy and counts the wake as failed, so the agent view never gains a duplicate. An owner that is mid-turn, waiting on its user, or open in a terminal keeps the report, and the service alerts once the report is overdue. The service never wakes the ended owner of a merged or closed PR; it closes that slot out instead. An `EXPIRED` loop is restarted without waking anyone. The service caps loop starts and wakes per pass, caps failed wakes per owner, and holds every wake while the account sits at a usage limit.
 
 **Absent ⇒ observed only.** The service still reports on the slot's watcher, CI and branch standing, but never starts its loop or wakes its owner. Slots armed before this file existed stay that way until their next arm. The file lives in the slot, so a `.stopped` rename or a `result.md` retires it with the slot.
 

package/scripts/muggle-watch/README.md

@@ -4,10 +4,11 @@ A standing per-user scheduled job that runs `muggle watch tick` every few minute
 
 - **Tracks** active Claude Code sessions (`claude agents --json`) and Codex sessions (recent `~/.codex/sessions` rollouts). It also tracks their processes: claude, codex, muggle MCP servers, and PR watch loops. Each live Claude session is stamped with when it last loaded its plugins (its process start, or its newest muggle MCP server start after a `/reload-plugins`) and the muggle works build installed then, read off `~/.muggle-ai/postinstall.log`.
 - **Checks every open PR-watch slot** under `~/.muggle-ai/muggle-do/sessions/`. Is its loop running, and heard by a live session? Is CI red? Is the branch behind or conflicting? Are review threads unresolved?
-- **Keeps registered watchers running.** A slot carrying `watch-registration.json` (written by `pr-watch-arm.sh` on every arm) has its owner session resumed in the background when its loop is gone and the owner is down, or idle in the background (stopped first, once a throwaway launch confirms Claude will resume it there). A resume that only hit the usage limit is retried without counting against the per-owner cap. The resumed session's `/muggle:muggle-pr-followup reconcile` re-arms it with that session's own context. The service never addresses a review, pushes, or kills a process.
+- **Keeps registered watchers running.** A slot carrying `watch-registration.json` (written by `pr-watch-arm.sh` on every arm) whose loop is dead or unheard gets a loop the service starts itself, as a program outside every session. When that loop reports new activity or the PR ending, the owner session is woken with `/muggle:muggle-pr-followup <slug> <n> --wake=<event|terminal>` for that one PR, but only between its turns. A wake that Claude answers with a copy of the session under a new id counts as failed, and the copy is stopped and removed. The service never addresses a review, pushes, or pushes anything else into a session.
 - **Closes out finished slots.** A slot whose PR GitHub reports merged or closed, with no loop and no running owner, is finalized the way a watcher's terminal tick would: `prs.json` takes the state, `followup.log` the terminal line, and `result.md` is written. Only local files change; post-merge cleanup is left to a session and recorded as not run.
-- **Keeps sessions on the installed build.** A session loaded before the newest global install (or a later user-scope update of the muggle plugin) is behind; other plugins updating restart nothing. Idle background sessions are restarted onto the new build, up to 3 per tick: a session that owns open PR watches is stopped and resumed on `/muggle:muggle-pr-followup reconcile`, so its watchers come back with it; any other is respawned. A resume waits for the stopped process to exit and passes no flag beyond `--bg`, so the session continues under its own id and name. Resuming a session that is still running, or adding flags, starts a copy that the agent view lists beside the original. Before either, a throwaway background launch in the session's workspace confirms Claude will bring it back; a workspace that refuses is left running and named once. Busy or waiting sessions wait for a later tick, and terminal sessions get one notification to run `/reload-plugins`. No interface runs a slash command inside another session.
-- **Records and alerts.** Results go to `status.json` (last snapshot, with open-PR coverage per repo), `state.json` (active findings, recovery attempts, reload progress) and `events.jsonl` (raise/clear/resume/respawn/close-out history) under `~/.muggle-ai/watch/`. New alerts raise one desktop notification per tick.
+- **Keeps sessions on the installed build.** A session loaded before the newest global install (or a later user-scope update of the muggle plugin) is behind; other plugins updating restart nothing. Idle background sessions are respawned onto the new build, up to 3 per tick, keeping their own id and name. A session that owns open PR watches is left running. Before a restart, a throwaway background launch in the session's workspace confirms Claude will bring it back; a workspace that refuses is left running and named once. Busy or waiting sessions wait for a later tick, and terminal sessions get one notification to run `/reload-plugins`. No interface runs a slash command inside another session.
+- **Keeps sessions on Remote Control.** With `remoteControlAtStartup` on in Claude's settings, a live background session is off when its `~/.claude/sessions/<pid>.json` entry has no Remote Control link, or its process started before the current claude.ai login took effect, so its link serves another account. Such a session is respawned once its turn is over (registry status `idle` or `shell`), sharing the 3-per-tick cap with the reload. That keeps the same session id, so there is no duplicate in the agent view, and nothing is typed into it. Background commands carry over to the restarted process, PR watch loops included, so they keep reporting to that session. Each restart opens a new Remote Control session, so a session already on is never restarted. A restarted session gets 30 minutes to link, and one still off after 2 restarts in a day is left alone. Terminal sessions that are off are listed for `/remote-control`.
+- **Records and alerts.** Results go to `status.json` (last snapshot, with open-PR and Remote Control coverage), `state.json` (active findings, recovery attempts, reload progress, the login last seen, Remote Control restarts) and `events.jsonl` (raise/clear/resume/respawn/close-out history) under `~/.muggle-ai/watch/`. New alerts raise one desktop notification per tick.
 
 ## Install
 
@@ -43,6 +44,7 @@ On Windows the PowerShell installer also takes flags directly:
 | `-IntervalMinutes <n>` | Tick interval, default 2 |
 | `-NoRecovery` | Report dead watchers without resuming their owners |
 | `-NoAutoReload` | Never restart sessions onto a new build |
+| `-NoRemoteControl` | Report sessions off Remote Control without restarting them |
 | `-NoWait` | Return once the task is registered, before its first tick |
 | `-MuggleEntry <path>` | Run a specific `bin\muggle.js` instead of the global install |
 | `-Uninstall` | Remove the task; the ledger is kept |

package/scripts/muggle-watch/install-muggle-watch.ps1

@@ -1,8 +1,9 @@
 # Installs the MuggleWatch scheduled task for the current user (no elevation):
 # every -IntervalMinutes it runs `muggle watch tick`, which snapshots Claude and
 # Codex sessions, their processes and every PR-watch slot, alerts on dead or deaf
-# watchers, red CI and stale branches, resumes the owner session of a registered
-# slot whose watcher died, and fans plugin reloads out across sessions.
+# watchers, red CI and stale branches, restarts the loop of a registered slot
+# whose watcher died, fans plugin reloads out across sessions, and restarts
+# sessions that are off Remote Control under the current login.
 #
 # The task runs the global @muggleai/works install, whose path survives
 # `muggle upgrade`, so the service always runs the current release. Only the
@@ -20,6 +21,7 @@ param(
     [string]$MuggleEntry,
     [switch]$NoAutoReload,
     [switch]$NoRecovery,
+    [switch]$NoRemoteControl,
     # Return once the task is registered; its trigger runs the first tick a minute later.
     [switch]$NoWait,
     [switch]$Uninstall
@@ -61,6 +63,7 @@ Copy-Item (Join-Path $PSScriptRoot "muggle-watch-hidden.vbs") $installedLauncher
 $tickFlags = @()
 if ($NoAutoReload) { $tickFlags += "--no-auto-reload" }
 if ($NoRecovery) { $tickFlags += "--no-recovery" }
+if ($NoRemoteControl) { $tickFlags += "--no-remote-control" }
 $launcherArguments = @("`"$installedLauncher`"", "`"$($nodeCommand.Source)`"", "`"$MuggleEntry`"") + $tickFlags
 
 # wscript.exe rather than node.exe is what keeps every run off the desktop; see