@raidiant/notifai 11.0.6 → 11.2.0

package/CHANGELOG.md

@@ -8,6 +8,55 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 This project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 and [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/).
 
+## [11.2.0](https://github.com/Raidiant-io/notifai/compare/v11.1.1...v11.2.0) (2026-09-20)
+
+
+### Features
+
+* **cli:** offer weekly updates with session-aware guidance ([#175](https://github.com/Raidiant-io/notifai/issues/175)) ([b4e56a2](https://github.com/Raidiant-io/notifai/commit/b4e56a2f45865720a3dc5478268fa726e880393c))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @raidiant/notifai-protocol bumped from 7.0.2 to 7.0.3
+
+## [11.1.1](https://github.com/Raidiant-io/notifai/compare/v11.1.0...v11.1.1) (2026-09-20)
+
+
+### Bug Fixes
+
+* **cli:** recover publication after registry processing delays ([#173](https://github.com/Raidiant-io/notifai/issues/173)) ([0ce6e0b](https://github.com/Raidiant-io/notifai/commit/0ce6e0be40e46be42441e0e22600937ef1b8be0a))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @raidiant/notifai-protocol bumped from 7.0.1 to 7.0.2
+
+## [11.1.0](https://github.com/Raidiant-io/notifai/compare/v11.0.6...v11.1.0) (2026-09-20)
+
+
+### Features
+
+* **cli:** deliver Codex answers through the thread's durable queue ([#169](https://github.com/Raidiant-io/notifai/issues/169)) ([4941c3f](https://github.com/Raidiant-io/notifai/commit/4941c3f60e7b82e679e3a90ca3ef187ec10004a0))
+
+
+### Bug Fixes
+
+* **cli:** avoid slow PowerShell module loading for Windows credentials ([#172](https://github.com/Raidiant-io/notifai/issues/172)) ([cd35b10](https://github.com/Raidiant-io/notifai/commit/cd35b1040ddde59e7360beb2d5ba031e02b04c93))
+* **cli:** make setup and queued-question retirement reliable ([#163](https://github.com/Raidiant-io/notifai/issues/163)) ([e4cee77](https://github.com/Raidiant-io/notifai/commit/e4cee77d2aaaf965544763a23cc0d3c4a636210c))
+* **cli:** preserve harness configuration during setup and cleanup ([#164](https://github.com/Raidiant-io/notifai/issues/164)) ([f8f82e6](https://github.com/Raidiant-io/notifai/commit/f8f82e62241d5ab841130070070a55cf50ae98dd))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @raidiant/notifai-protocol bumped from 7.0.0 to 7.0.1
+
 ## [11.0.6](https://github.com/Raidiant-io/notifai/compare/v11.0.5...v11.0.6) (2026-09-06)
 
 

package/README.md

@@ -18,6 +18,12 @@ bin, `npx --yes @raidiant/notifai@<version>` is supported. Pin the version.
 `hooks install` then writes that same pinned npx invocation into the harness
 adapter. This is slower than a real install and is not the default path.
 
+Run `notifai doctor` or `notifai update --check --json` to check for a newer
+CLI and inspect release notes, guidance, and session requirements. Enabled
+Projects give root agents a quiet update offer at most once every seven days
+across the machine. A release does not install itself or restart an Agent
+Session automatically. The package includes its changelog.
+
 Use `notifai update` for later global updates. It repairs the installation the
 shell actually selects and keeps the stable hook adapter on that same CLI. It
 fails instead of moving the command to a different PATH slot when it cannot

package/dist/agent-update-notice.d.ts

@@ -0,0 +1,7 @@
+/** One optional notice per machine-local state directory, across roots and harnesses. */
+export declare function agentUpdateNotice(options: {
+    env: NodeJS.ProcessEnv;
+    now: number;
+    updateCommand: string;
+    fetchImpl?: typeof fetch;
+}): Promise<string | undefined>;

package/dist/agent-update-notice.js

@@ -0,0 +1,77 @@
+import { lstatSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { atomicWriteFileSync } from './atomic-file.js';
+import { stateDir } from './config.js';
+import { withFileLock } from './file-lock.js';
+import { latestPublishedCliVersion, newerPublishedCli, shouldConsultCliRegistry, thisCliVersion } from './cli-release.js';
+import { CLI_UPDATE_AVAILABLE } from './cli-contract.js';
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+const NOTICE_INTERVAL_MS = 7 * CHECK_INTERVAL_MS;
+function readState(file) {
+    try {
+        const stat = lstatSync(file);
+        if (!stat.isFile() || stat.size > 1024)
+            throw new Error('invalid update notice state');
+        const value = JSON.parse(readFileSync(file, 'utf8'));
+        if (typeof value !== 'object' || value === null)
+            throw new Error('invalid update notice state');
+        const state = value;
+        for (const timestamp of [state.checked_at, state.notified_at]) {
+            if (timestamp !== undefined && (!Number.isSafeInteger(timestamp) || timestamp < 0)) {
+                throw new Error('invalid update notice timestamp');
+            }
+        }
+        return state;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return {};
+        throw error;
+    }
+}
+function recent(timestamp, now, interval) {
+    // A clock rollback must not create another notice.
+    return timestamp !== undefined && now - timestamp < interval;
+}
+/** One optional notice per machine-local state directory, across roots and harnesses. */
+export async function agentUpdateNotice(options) {
+    if (!shouldConsultCliRegistry({ env: options.env }))
+        return undefined;
+    const file = path.join(stateDir(options.env), 'cli-update-notice.json');
+    const save = (state) => atomicWriteFileSync(file, `${JSON.stringify(state)}\n`);
+    try {
+        // Claim the lookup before doing network I/O. Another process neither waits
+        // for the registry nor emits a duplicate. Only short disk work holds a lock.
+        const claimed = withFileLock(`${file}.lock`, () => {
+            const state = readState(file);
+            if (recent(state.notified_at, options.now, NOTICE_INTERVAL_MS) ||
+                recent(state.checked_at, options.now, CHECK_INTERVAL_MS))
+                return false;
+            save({ ...state, checked_at: options.now });
+            return true;
+        }, { waitMs: 50 });
+        if (!claimed)
+            return undefined;
+        const latest = await latestPublishedCliVersion(options.fetchImpl, { useCache: false });
+        if (newerPublishedCli(thisCliVersion(), latest) === null)
+            return undefined;
+        const notify = withFileLock(`${file}.lock`, () => {
+            const state = readState(file);
+            if (recent(state.notified_at, options.now, NOTICE_INTERVAL_MS))
+                return false;
+            save({ ...state, notified_at: options.now });
+            return true;
+        }, { waitMs: 50 });
+        if (!notify)
+            return undefined;
+        return `${CLI_UPDATE_AVAILABLE} Run \`notifai update --check --json\`, read the release notes, and briefly offer to perform the update at a natural pause. ` +
+            `When authorized, use \`${options.updateCommand}\` and follow the new CLI guidance and session handoff. ` +
+            'Follow the User\'s instructions about updating; keep working if deferred. ' +
+            'Do not send a Notification Request just for this notice. It appears at most once every seven days on this machine.';
+    }
+    catch {
+        // Update discovery must never interrupt lifecycle guidance or routing.
+        return undefined;
+    }
+}
+//# sourceMappingURL=agent-update-notice.js.map

package/dist/agent-update-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-update-notice.js","sourceRoot":"","sources":["../src/agent-update-notice.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACzH,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAC7C,MAAM,kBAAkB,GAAG,CAAC,GAAG,iBAAiB,CAAA;AAOhD,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACtF,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;QAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAC/F,MAAM,KAAK,GAAG,KAAoB,CAAA;QAClC,KAAK,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9D,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;YACpD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAA;QACjE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,SAA6B,EAAE,GAAW,EAAE,QAAgB;IAC1E,mDAAmD;IACnD,OAAO,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,SAAS,GAAG,QAAQ,CAAA;AAC9D,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAKvC;IACC,IAAI,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QAAE,OAAO,SAAS,CAAA;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAQ,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClG,IAAI,CAAC;QACH,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,EAAE;YAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC;gBAC1D,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC1E,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YAC3C,OAAO,IAAI,CAAA;QACb,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAClB,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC9B,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACtF,IAAI,iBAAiB,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,EAAE;YAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC;gBAAE,OAAO,KAAK,CAAA;YAC5E,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;YAC5C,OAAO,IAAI,CAAA;QACb,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;QAClB,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QAC7B,OAAO,GAAG,oBAAoB,8HAA8H;YAC1J,0BAA0B,OAAO,CAAC,aAAa,0DAA0D;YACzG,4EAA4E;YAC5E,oHAAoH,CAAA;IACxH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/cli-release.d.ts

@@ -1,9 +1,9 @@
 export declare function shouldConsultCliRegistry(input: {
-    interactive?: boolean;
-    json?: boolean;
     env?: NodeJS.ProcessEnv;
 }): boolean;
-export declare function latestPublishedCliVersion(fetchImpl?: typeof fetch): Promise<string | null>;
+export declare function latestPublishedCliVersion(fetchImpl?: typeof fetch, options?: {
+    useCache?: boolean;
+}): Promise<string | null>;
 export declare function newerPublishedCli(local: string | null, latest: string | null): string | null;
 export declare function thisCliVersion(): string | null;
 export declare function resetLatestPublishedCliVersionForTest(): void;

package/dist/cli-release.js

@@ -1,28 +1,23 @@
 import { packageVersion } from './release.js';
 import { cliDistTagsUrl } from './cli-contract.js';
-import { compareVersions } from './version.js';
+import { compareVersions, isSemVer } from './version.js';
 /**
  * The newest published CLI, read from the registry that publishes it.
  *
  * Which version is newest is a registry fact. Doctor consults it as a
- * best-effort, cached, short-timeout hint: never fatal, and never on a
- * non-interactive or CI invocation — those callers already get structured
- * support state from the server when they are signed in.
+ * best-effort, cached, short-timeout hint in human and structured diagnostics.
+ * Automatic lifecycle notices have their own persistent throttle.
  */
 const DIST_TAGS_URL = cliDistTagsUrl();
 const REQUEST_TIMEOUT_MS = 2_000;
 const CACHE_TTL_MS = 60 * 60 * 1000;
 let cached = null;
 export function shouldConsultCliRegistry(input) {
-    if (input.json === true)
-        return false;
-    if (input.interactive !== true)
-        return false;
     const ci = input.env?.['CI'];
     return ci !== '1' && ci !== 'true';
 }
-export async function latestPublishedCliVersion(fetchImpl = fetch) {
-    if (cached !== null && Date.now() - cached.at < CACHE_TTL_MS)
+export async function latestPublishedCliVersion(fetchImpl = fetch, options = {}) {
+    if (options.useCache !== false && cached !== null && Date.now() - cached.at < CACHE_TTL_MS)
         return cached.value;
     try {
         const response = await fetchImpl(DIST_TAGS_URL, {
@@ -30,19 +25,20 @@ export async function latestPublishedCliVersion(fetchImpl = fetch) {
             signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
         });
         if (!response.ok)
-            return cached?.value ?? null;
+            return null;
         const body = await response.json();
         if (typeof body !== 'object' || body === null)
-            return cached?.value ?? null;
+            return null;
         const latest = body.latest;
-        if (typeof latest !== 'string' || compareVersions(latest, '0.0.0') === 'unparseable') {
-            return cached?.value ?? null;
+        if (typeof latest !== 'string' || !isSemVer(latest)) {
+            return null;
         }
-        cached = { value: latest, at: Date.now() };
+        if (options.useCache !== false)
+            cached = { value: latest, at: Date.now() };
         return latest;
     }
     catch {
-        return cached?.value ?? null;
+        return null;
     }
 }
 export function newerPublishedCli(local, latest) {

package/dist/cli-release.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-release.js","sourceRoot":"","sources":["../src/cli-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C;;;;;;;GAOG;AACH,MAAM,aAAa,GAAG,cAAc,EAAE,CAAA;AACtC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnC,IAAI,MAAM,GAAgD,IAAI,CAAA;AAE9D,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5B,OAAO,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,MAAM,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,YAA0B,KAAK;IAE/B,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,YAAY;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IACjF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;YAC9C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;QAC9C,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;QAC3E,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAA;QACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,aAAa,EAAE,CAAC;YACrF,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;QAC9B,CAAC;QACD,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QAC1C,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAoB,EAAE,MAAqB;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAClD,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,qCAAqC;IACnD,MAAM,GAAG,IAAI,CAAA;AACf,CAAC"}
+{"version":3,"file":"cli-release.js","sourceRoot":"","sources":["../src/cli-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAExD;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,cAAc,EAAE,CAAA;AACtC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnC,IAAI,MAAM,GAAgD,IAAI,CAAA;AAE9D,MAAM,UAAU,wBAAwB,CAAC,KAExC;IACC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC5B,OAAO,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,MAAM,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,YAA0B,KAAK,EAC/B,UAAkC,EAAE;IAEpC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,YAAY;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IAC/G,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;YAC9C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAA;QACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;YAAE,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QAC1E,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAoB,EAAE,MAAqB;IAC3E,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAClD,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,qCAAqC;IACnD,MAAM,GAAG,IAAI,CAAA;AACf,CAAC"}

package/dist/codex-wake.d.ts

@@ -1,86 +1,67 @@
 import { type EscalationDeliveryRoute } from './hook-types.js';
-/** Codex's per-thread writer lock directory, relative to `$CODEX_HOME`. */
-export declare const CODEX_THREAD_LOCK_DIR = "thread-writer-locks";
-export type CodexWakeObservation = 
-/** A live writer owns this thread. Resuming it would create a divergent ghost. */
-{
-    state: 'live';
-}
-/** No process holds the thread's writer lock; a cold resume can own it. */
- | {
-    state: 'stopped';
-} | {
-    state: 'unknown';
-    reason: string;
-};
-export interface CodexWakeAdapters {
-    /** Non-blocking writer-lock probe. Never holds the lock beyond the probe. */
-    probeThreadWriter(lockPath: string): CodexWakeObservation;
-    /** Is the harness process that will read this hook's stdout still running? */
-    sourceAlive(pid: number): boolean;
-    resume(threadId: string, cwd: string, context: string): Promise<void>;
-}
 /**
- * The one cross-process oracle for "who owns this Codex thread".
+ * The per-thread durable inbox `codex queue` writes to, relative to `$CODEX_HOME`.
  *
- * Codex's thread store takes a non-blocking `flock(LOCK_EX)` on a zero-byte
- * file per thread and holds it for as long as that process owns the thread —
- * verified against both a hosted app-server thread sitting idle and an
- * in-process `codex exec` run (2026-08-12). Because the kernel holds it, a
- * crash, SIGKILL, or reboot releases it instantly, and the leftover file proves
- * nothing: only the lock does. Codex fails closed itself with `-32600` when a
- * second writer contends, but that is the backstop; this is the gate.
+ * Named for diagnostics only. Notifai never opens it: the schema is private to
+ * Codex, versioned by its own migration table, and the supported writer is the
+ * CLI. Reading it here would couple Notifai to an internal shape it does not own.
  */
-export declare function observeCodexThread(threadId: string, env: NodeJS.ProcessEnv, adapters: Pick<CodexWakeAdapters, 'probeThreadWriter'>): CodexWakeObservation;
-export declare function codexThreadLockPath(threadId: string, env: NodeJS.ProcessEnv): string;
-export declare function codexThreadLockDirectory(env: NodeJS.ProcessEnv): string;
-export type CodexResumeReadiness = {
+export declare const CODEX_QUEUE_STORE_FILE = "queue_1.sqlite";
+export interface CodexWakeAdapters {
+    /** Write one message into the thread's durable inbox via `codex queue`. */
+    queue(threadId: string, cwd: string, context: string): Promise<void>;
+}
+export type CodexQueueReadiness = {
     state: 'ready';
-    lockDirectory: string;
+    threadId: string;
 } | {
     state: 'unavailable';
     reason: string;
 };
+export declare function codexHome(env: NodeJS.ProcessEnv): string;
+export declare function codexQueueStorePath(env: NodeJS.ProcessEnv): string;
 /**
- * Whether a Codex thread whose Stop hook has already returned could still be
- * cold-resumed, decided without taking any lock or spawning anything.
+ * Whether this Stop hook could queue an answer into its own thread.
  *
- * Two things have to hold: this platform must implement the non-blocking
- * `flock` the probe is built on, and `$CODEX_HOME` must actually have a
- * thread-writer-lock directory — its absence is not evidence that a thread is
- * unowned, so the gate fails closed and the answer waits for the next turn.
- * Neither affects the ordinary path, where the hook's own stdout continues the
- * held turn.
+ * The only precondition the route actually has is an exact thread id: queueing
+ * needs no writer lock, no daemon, no socket and no platform syscall, and it
+ * succeeds against a live, busy or stopped thread alike. The absence of the
+ * queue store is deliberately *not* a blocker — Codex creates it on first
+ * write — so this reports readiness, never a store-existence gate.
  */
-export declare function inspectCodexResume(env: NodeJS.ProcessEnv, options: {
-    platform: NodeJS.Platform;
-    directoryExists: (directory: string) => boolean;
-}): CodexResumeReadiness;
+export declare function inspectCodexQueue(threadId: string | undefined, _env: NodeJS.ProcessEnv): CodexQueueReadiness;
 /**
- * Codex's answer-delivery route: the blocking Stop hook, then nothing else.
+ * Codex's answer-delivery route: the thread's own durable inbox.
+ *
+ * `codex queue --thread <id> --message <text>` is not an IPC call into a live
+ * process. It writes one FIFO item into a per-thread inbox in `$CODEX_HOME`,
+ * and whichever client owns that thread drains it: a live idle session within
+ * seconds, a busy one at its next turn boundary, a stopped one the next time it
+ * is opened. The answer arrives as an ordinary user turn, firing
+ * `UserPromptSubmit` with the queued text.
+ *
+ * That is why this route replaced the writer-lock probe rather than joining it.
+ * The probe existed so a cold resume could never ghost-write a thread another
+ * process owned; queueing cannot ghost-write, because the message is delivered
+ * *by* the owner and simply waits when there is none. There is no race to lose,
+ * and nothing here depends on a BSD `O_EXLOCK`.
  *
- * The default is the hook continuation itself. While the Codex process that
- * invoked this hook is alive it is reading this process's stdout, and
- * `{"decision":"block"}` there creates a real new user turn — no launch
- * ownership, no control plane, no probe required. That path must never depend
- * on the lock probe: printing to a dead pipe cannot ghost-write anything, so
- * an unreadable `$CODEX_HOME` is not a reason to withhold a continuation.
+ * Two limits are load-bearing and are honoured here:
  *
- * Only when that process is gone does the answer need another last meter, and
- * then exactly one is safe: a cold `codex exec resume` of a thread no live
- * writer owns. Anything else — a live writer, an unprobeable platform, a thread
- * id we cannot name — is journaled and replayed at the session's next Stop.
- * That accepted gap is the honest floor of the Codex adapter: a session that
- * went idle after its Stop returned, which Notifai did not launch, cannot be
- * woken in place.
+ * 1. **Exit 0 is not delivery.** `codex queue` reports the same success against
+ *    an exited session as a live one, so this route never claims `delivered`.
+ *    It reports `queued`, and Notifai's own `UserPromptSubmit` hook is what
+ *    observes actual consumption.
+ * 2. **Never queue and cold-resume the same answer.** `codex exec resume <id>
+ *    "<prompt>"` drains the pending queue *and* runs the prompt, delivering it
+ *    twice. This module therefore has no resume path at all: the routes must be
+ *    mutually exclusive per answer, and the simplest way to guarantee that is
+ *    for only one of them to exist.
  */
 export declare function codexWakeRoute(options: {
     threadId: string;
     cwd: string;
-    sourcePid: number;
     env?: NodeJS.ProcessEnv;
     adapters?: CodexWakeAdapters;
-    /** False for a detached recovery owner whose stdout no harness will read. */
-    continuationActive?: boolean;
 }): EscalationDeliveryRoute;
 export declare function systemCodexWakeAdapters(env?: NodeJS.ProcessEnv): CodexWakeAdapters;