@schoolai/shipyard 3.11.0 → 3.11.1

package/dist/{chunk-Z37T5W6S.js → chunk-P2HZDIN7.js}

@@ -37,7 +37,7 @@ var EnvSchema = external_exports.object({
   SHIPYARD_DEV: external_exports.enum(["1", "true", "0", "false", ""]).optional().transform((v) => v === "1" || v === "true"),
   SHIPYARD_DAEMON_CHILD: external_exports.enum(["1", "true", "0", "false", ""]).optional().transform((v) => v === "1" || v === "true"),
   SHIPYARD_DATA_DIR: external_exports.string().optional().transform((v) => v ?? `~/${shipyardDirName()}/data`),
-  LOG_LEVEL: external_exports.enum(["debug", "info", "warn", "error"]).default("warn"),
+  LOG_LEVEL: external_exports.enum(["debug", "info", "warn", "error"]).default("info"),
   SHIPYARD_SIGNALING_URL: external_exports.string().url().optional(),
   SHIPYARD_PRODUCTION_SIGNALING_URL: external_exports.string().url().default(DEFAULT_PRODUCTION_SIGNALING_URL),
   SHIPYARD_METRICS_WORKER_URL: external_exports.string().url().default("https://shipyard-metrics.jacob-191.workers.dev"),
@@ -83,13 +83,18 @@ var EnvSchema = external_exports.object({
   SHIPYARD_STALL_PROFILER_ENABLED: external_exports.enum(["1", "true", "0", "false", ""]).optional().transform((v) => v !== "0" && v !== "false"),
   /**
    * Event-loop stall threshold (ms). Once `histogram.max` crosses this,
-   * the profiler starts a CPU profile. Raised from 250ms to 5000ms in
-   * May 2026 to prevent the profiler from amplifying the stalls it was
-   * trying to measure — V8 inspector `post()` itself consumed ~493ms of
-   * a measured 800ms capture window. At 5s only severe stalls are profiled.
+   * the profiler starts a CPU profile. History: raised 250ms → 5000ms in
+   * May 2026 because the capture itself amplified the stalls it measured
+   * (V8 inspector `post()` consumed ~493ms of an 800ms capture window);
+   * lowered 5000ms → 1000ms in Jun 2026 (#4484) because the dominant fleet
+   * stall volume is 1–10s jank that 5s never profiled. Amplification is now
+   * bounded by the profiler's own guards instead of the threshold: the 5-min
+   * SHIPYARD_STALL_PROFILER_MIN_INTERVAL_MS rate limit between captures, a
+   * capture-in-progress flag, and the 250ms sample window — worst case 12
+   * captures/hour (~3s of profiling per hour).
    * Override via `SHIPYARD_STALL_PROFILER_THRESHOLD_MS`.
    */
-  SHIPYARD_STALL_PROFILER_THRESHOLD_MS: external_exports.coerce.number().int().positive().default(5e3),
+  SHIPYARD_STALL_PROFILER_THRESHOLD_MS: external_exports.coerce.number().int().positive().default(1e3),
   /**
    * How long to sample the V8 CPU profile after a stall is detected.
    * Default 250ms — long enough for the post-stall queue drain and the
@@ -220,4 +225,4 @@ export {
   validateEnv,
   getStallProfilerConfig
 };
-//# sourceMappingURL=chunk-Z37T5W6S.js.map
+//# sourceMappingURL=chunk-P2HZDIN7.js.map

package/dist/chunk-P2HZDIN7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/env.ts"],"sourcesContent":["import { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { z } from 'zod';\n\n/**\n * Enable fine-grained tool streaming so MCP tool inputs stream token-by-token\n * via input_json_delta events instead of being buffered as complete JSON.\n * Set early so the subprocess inherits it.\n */\nprocess.env.CLAUDE_CODE_ENABLE_FINE_GRAINED_TOOL_STREAMING = '1';\n\n/**\n * Enable the Task system (TaskCreate/TaskGet/TaskList/TaskUpdate) which provides\n * structured task management with dependency tracking (blocks/blockedBy).\n * Replaces TodoWrite — when enabled, CC only has TaskCreate (not TodoWrite).\n */\nprocess.env.CLAUDE_CODE_ENABLE_TASKS = '1';\n\n/**\n * Bootstrap exception: reads `process.env` directly because it feeds the\n * `SHIPYARD_DATA_DIR` schema transform (via `shipyardDirName`). Routing it\n * through `validateEnv()` would recurse (validateEnv → parse → transform →\n * shipyardDirName → isDevMode → validateEnv).\n */\nexport function isDevMode(): boolean {\n  return process.env.SHIPYARD_DEV === '1' || process.env.SHIPYARD_DEV === 'true';\n}\n\n/**\n * When enabled, the agent runs with only Shipyard builtins (system prompt,\n * comment + visualize MCP servers) and no user/plugin MCP servers.\n * Useful for testing the harness in isolation without external interference.\n *\n * Set `SHIPYARD_VANILLA_AGENT=1` to activate.\n */\nexport function isVanillaAgentMode(): boolean {\n  return validateEnv().SHIPYARD_VANILLA_AGENT;\n}\n\n/**\n * Reuse Claude Code's macOS Keychain item (\"Claude Code-credentials\") as a\n * source for MCP connector OAuth clients/tokens.\n *\n * Default OFF. The daemon is a different binary than Claude Code, so reading\n * that Keychain item triggers a macOS password prompt in a GUI session (or a\n * silent denial when headless) — unacceptable in the connector status path,\n * which runs on every capability refresh. Shipyard's own token store is the\n * source of truth, mirroring how local MCPs work (no prompt). Opt back into\n * the legacy import behavior with `SHIPYARD_MCP_REUSE_CC_KEYCHAIN=1`.\n */\nexport function isClaudeCodeKeychainReadEnabled(): boolean {\n  return validateEnv().SHIPYARD_MCP_REUSE_CC_KEYCHAIN;\n}\n\n/**\n * Reuse Codex's macOS Keychain item (\"Codex MCP Credentials\") as a source for\n * per-MCP-connector OAuth clients/tokens (Codex DCRs its own atomic\n * client_id+token pairs, useful for borrowing on connectors Claude Code hasn't\n * registered with).\n *\n * Default OFF for the same reason as {@link isClaudeCodeKeychainReadEnabled}:\n * the daemon is a different binary than Codex, so reading that Keychain item\n * triggers a macOS password prompt in a GUI session (or a silent denial when\n * headless) — unacceptable in the connector status path. The\n * `~/.codex/.credentials.json` file fallback is read regardless. Opt in with\n * `SHIPYARD_MCP_REUSE_CODEX_KEYCHAIN=1`.\n */\nexport function isCodexKeychainReadEnabled(): boolean {\n  return validateEnv().SHIPYARD_MCP_REUSE_CODEX_KEYCHAIN;\n}\n\nfunction shipyardDirName(): string {\n  return isDevMode() ? '.shipyard-dev' : '.shipyard';\n}\n\n/**\n * The signaling worker is a RENDEZVOUS point: a browser and this daemon only\n * meet if they hit the SAME worker. This MUST equal the web build's\n * `VITE_SESSION_SERVER_URL` (.github/workflows/ci.yml + publish-npm.yml) — all\n * live clients (web next+stable, daemons all channels) point here. Do not make\n * this per-channel; a staging worker is a CI/E2E fixture only. See AGENTS.md\n * Invariant #22 (the #4186 \"install daemon\" incident).\n */\nconst DEFAULT_PRODUCTION_SIGNALING_URL = 'https://shipyard-session-server.jacob-191.workers.dev';\nconst DEFAULT_PRODUCTION_WEB_URL = 'https://shipyard.computer';\n\n/**\n * Bootstrap exception: reads `process.env` directly (not `validateEnv()`)\n * because it computes the electron-utility startup-breadcrumb path BEFORE\n * `validateEnv()` runs — the breadcrumb must still resolve when validateEnv\n * itself throws (see apps/daemon/src/electron-utility.ts).\n */\nexport function getShipyardHome(): string {\n  if (process.env.SHIPYARD_HOME) return process.env.SHIPYARD_HOME;\n  return join(homedir(), shipyardDirName());\n}\n\n/**\n * The executable to fork JS subprocesses with (cursor-runner, the TS language\n * server, the cursor-hook shim).\n *\n * `child_process.fork`/`spawn` default to `process.execPath`. Inside an\n * Electron *utility* process (how the packaged daemon runs) that does NOT point\n * at the main app binary — it resolves to a per-platform helper executable\n * (e.g. `…/Frameworks/Shipyard Helper.app/Contents/MacOS/Shipyard Helper`) that\n * may not exist on disk in the shipped bundle. Forking it ENOENTs, which (with\n * the cursor-runner pre-warm running at boot) crash-looped the daemon on\n * 2026-06-01 (Dylan's log).\n *\n * The Electron *main* process has a guaranteed-valid `process.execPath` (the\n * main app binary, which also honors `ELECTRON_RUN_AS_NODE=1`) and forwards it\n * as `SHIPYARD_NODE_EXEC_PATH` (see apps/electron/src/main/daemon-host.ts). The\n * CLI daemon and dev leave it unset and fall back to `process.execPath`, which\n * is already correct there. Declared in `EnvSchema` so a malformed value fails\n * at boot. Re-exported from `spawn-as-node.ts` for call-site ergonomics.\n */\nexport function resolveNodeExecPath(): string {\n  return validateEnv().SHIPYARD_NODE_EXEC_PATH || process.execPath;\n}\n\nexport const EnvSchema = z.object({\n  ANTHROPIC_API_KEY: z.string().min(1).optional(),\n  SHIPYARD_DEV: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  SHIPYARD_DAEMON_CHILD: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  SHIPYARD_DATA_DIR: z\n    .string()\n    .optional()\n    .transform((v) => v ?? `~/${shipyardDirName()}/data`),\n  LOG_LEVEL: z.enum(['debug', 'info', 'warn', 'error']).default('info'),\n  SHIPYARD_SIGNALING_URL: z.string().url().optional(),\n  SHIPYARD_PRODUCTION_SIGNALING_URL: z.string().url().default(DEFAULT_PRODUCTION_SIGNALING_URL),\n  SHIPYARD_METRICS_WORKER_URL: z\n    .string()\n    .url()\n    .default('https://shipyard-metrics.jacob-191.workers.dev'),\n  SHIPYARD_TELEMETRY: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v !== '0' && v !== 'false'),\n  SHIPYARD_USER_TOKEN: z.string().optional(),\n  /**\n   * Worker URL for the `shipyard roi` report command (distinct from\n   * SHIPYARD_METRICS_WORKER_URL, which is the telemetry ingestion endpoint).\n   * Falls back to the `--worker-url` CLI flag when unset.\n   */\n  SHIPYARD_METRICS_URL: z.string().url().optional(),\n  SHIPYARD_USER_ID: z.string().optional(),\n  SHIPYARD_MACHINE_ID: z.string().optional(),\n  SHIPYARD_MACHINE_NAME: z.string().optional(),\n  SHIPYARD_USER_DISPLAY_NAME: z.string().optional(),\n  SHIPYARD_HOME: z.string().optional(),\n  SHIPYARD_WORKTREE_NAME: z.string().optional(),\n  /**\n   * Electron utility transport mode. Absent for the CLI daemon; set by\n   * apps/electron/src/main/daemon-host.ts when the daemon runs as an Electron\n   * utility process.\n   */\n  SHIPYARD_TRANSPORT: z.enum(['electron-port']).optional(),\n  /**\n   * Build artifact hosting this daemon. Electron disables the daemon's npm\n   * self-updater because electron-updater owns app replacement.\n   */\n  SHIPYARD_ARTIFACT: z.enum(['electron']).optional(),\n  SHIPYARD_VANILLA_AGENT: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  /**\n   * Opt in to reusing Claude Code's macOS Keychain credentials for MCP OAuth.\n   * Default OFF — see {@link isClaudeCodeKeychainReadEnabled} for why (prompt\n   * avoidance). Validated here so a typo fails at boot.\n   */\n  SHIPYARD_MCP_REUSE_CC_KEYCHAIN: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  /**\n   * Opt in to reusing Codex's macOS Keychain credentials (\"Codex MCP\n   * Credentials\") for MCP OAuth. Default OFF — see\n   * {@link isCodexKeychainReadEnabled} for why (prompt avoidance). Validated\n   * here so a typo fails at boot.\n   */\n  SHIPYARD_MCP_REUSE_CODEX_KEYCHAIN: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  SHIPYARD_STALL_PROFILER_ENABLED: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v !== '0' && v !== 'false'),\n  /**\n   * Event-loop stall threshold (ms). Once `histogram.max` crosses this,\n   * the profiler starts a CPU profile. History: raised 250ms → 5000ms in\n   * May 2026 because the capture itself amplified the stalls it measured\n   * (V8 inspector `post()` consumed ~493ms of an 800ms capture window);\n   * lowered 5000ms → 1000ms in Jun 2026 (#4484) because the dominant fleet\n   * stall volume is 1–10s jank that 5s never profiled. Amplification is now\n   * bounded by the profiler's own guards instead of the threshold: the 5-min\n   * SHIPYARD_STALL_PROFILER_MIN_INTERVAL_MS rate limit between captures, a\n   * capture-in-progress flag, and the 250ms sample window — worst case 12\n   * captures/hour (~3s of profiling per hour).\n   * Override via `SHIPYARD_STALL_PROFILER_THRESHOLD_MS`.\n   */\n  SHIPYARD_STALL_PROFILER_THRESHOLD_MS: z.coerce.number().int().positive().default(1_000),\n  /**\n   * How long to sample the V8 CPU profile after a stall is detected.\n   * Default 250ms — long enough for the post-stall queue drain and the\n   * cascading sibling stall (if any) to land in the same profile, but\n   * short enough that the capture window does not itself amplify the\n   * stall on the same event loop. Lowered from 1000 → 250 in May 2026\n   * after profile evidence showed `#capture` consumed ~1s of inclusive\n   * time inside a 3.5s stall window — the profiler was contributing\n   * to the stalls it was trying to measure once #3204 dropped the\n   * threshold from 500ms to 250ms.\n   */\n  SHIPYARD_STALL_PROFILER_PROFILE_DURATION_MS: z.coerce.number().int().positive().default(250),\n  /**\n   * Cascading-stall suppression window. After one capture, subsequent\n   * stalls within this window log `stall_profile_suppressed` instead of\n   * starting a new profile. Raised from 30s to 300s (5min) in May 2026\n   * to prevent capture storms — at 30s a recurring stall every 60s would\n   * trigger 2 captures/min, each adding hundreds of ms of inspector overhead.\n   */\n  SHIPYARD_STALL_PROFILER_MIN_INTERVAL_MS: z.coerce.number().int().nonnegative().default(300_000),\n  /**\n   * Supervisor wedge detection: if the daemon child sends no IPC heartbeats\n   * for this many ms, the supervisor declares the event loop wedged, sends\n   * SIGUSR2 to capture a CPU profile (the inspector runs off the JS loop),\n   * waits 2s, then SIGKILLs and respawns via the normal abnormal-exit flow.\n   * Generous default — 30s tolerates GC pauses and other legitimate sync\n   * blocks well outside human-noticeable territory.\n   */\n  SHIPYARD_WEDGE_TIMEOUT_MS: z.coerce.number().int().positive().default(30_000),\n  /**\n   * Daemon child IPC heartbeat interval. Must be smaller than\n   * SHIPYARD_WEDGE_TIMEOUT_MS by a comfortable margin so a single missed\n   * heartbeat doesn't trip the wedge detector.\n   */\n  SHIPYARD_HEARTBEAT_INTERVAL_MS: z.coerce.number().int().positive().default(2_000),\n  /**\n   * When set to `'electron-safe-storage'`, the vault-key-manager wraps the\n   * master key via Electron's safeStorage API (macOS Keychain on macOS,\n   * Secret Service on Linux). Set by daemon-host.ts in the Electron main\n   * process. When absent, the daemon falls back to the existing AES-256-GCM\n   * file-based path (CLI daemon path — unchanged).\n   */\n  SHIPYARD_VAULT_BACKEND: z.enum(['electron-safe-storage']).optional(),\n  /**\n   * Absolute path to a Node-capable executable for forking JS subprocesses\n   * (cursor-runner, the TS language server, the cursor-hook shim). Set by\n   * apps/electron/src/main/daemon-host.ts to the Electron MAIN process's\n   * `process.execPath` (the main app binary), because the daemon utility\n   * process's own `process.execPath` resolves to a helper executable that may\n   * not exist in the packaged bundle. Absent for the CLI daemon, which falls\n   * back to its own `process.execPath`. See `resolveNodeExecPath()`.\n   */\n  SHIPYARD_NODE_EXEC_PATH: z.string().optional(),\n  /**\n   * TTL (ms) for the per-repo worktree list cache. Browser polls at 4-7/sec;\n   * this collapses redundant git subprocess invocations to 1 per TTL window.\n   * Set to 0 to disable caching (useful for tests that need fresh results).\n   */\n  SHIPYARD_WORKTREE_LIST_TTL_MS: z.coerce.number().int().min(0).default(30_000),\n  /**\n   * Override for the web app URL the daemon advertises. Absent → derived from\n   * the signaling URL (see `getWebAppUrl`). A malformed value fails at boot\n   * rather than propagating into URL concatenation.\n   */\n  SHIPYARD_WEB_URL: z.string().url().optional(),\n  SHIPYARD_PRODUCTION_WEB_URL: z.string().url().default(DEFAULT_PRODUCTION_WEB_URL),\n  /**\n   * Absolute path override for the Claude Code binary. When set and the file\n   * exists, the daemon spawns it instead of the SDK-bundled native binary.\n   * See `resolveClaudeCodePath` / `resolveClaudeBinaryPath`.\n   */\n  CLAUDE_CODE_PATH: z.string().optional(),\n  /**\n   * Suppress auto-opening the verification URL in the browser during the\n   * CLI device-login flow. Default OFF (the browser opens).\n   */\n  SHIPYARD_NO_OPEN: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  /**\n   * Kill-switch for Loro CRDT recovery on startup. Default OFF (recovery runs).\n   */\n  SHIPYARD_DISABLE_LORO_RECOVERY: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v === '1' || v === 'true'),\n  /**\n   * Harness HTTP MCP server (Codex's endpoint). Default ON — Codex ships with\n   * every daemon and needs it. `SHIPYARD_HARNESS_HTTP=0` is the kill-switch for\n   * Codex-disabled deployments.\n   */\n  SHIPYARD_HARNESS_HTTP: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v !== '0' && v !== 'false'),\n  /**\n   * Use the shared `codex app-server` engine (single token owner — fixes the\n   * 401-storm). Default ON. Set to `0`/`false` for the legacy per-process path.\n   */\n  SHIPYARD_CODEX_SHARED_ENGINE: z\n    .enum(['1', 'true', '0', 'false', ''])\n    .optional()\n    .transform((v) => v !== '0' && v !== 'false'),\n  /**\n   * Browser-metrics sampling cadence. Kept as a raw string here — clamp /\n   * disable (`0`) / invalid-fallback semantics + logging live in\n   * `parseBrowserMetricsInterval` (services/metrics/browser-metrics-config.ts),\n   * which consumes this validated value.\n   */\n  SHIPYARD_BROWSER_METRICS_INTERVAL_MS: z.string().optional(),\n  /**\n   * Max concurrent file watchers before the guard sheds new subscriptions.\n   * Absent → default (450). An invalid value fails at boot.\n   */\n  SHIPYARD_FILE_WATCHER_MAX: z.coerce.number().int().positive().optional(),\n});\n\nexport type Env = z.infer<typeof EnvSchema>;\n\nexport function validateEnv(): Env {\n  return EnvSchema.parse(process.env);\n}\n\n/**\n * Resolved profiler tuning derived from the validated env. Re-parses the\n * schema so a typo in one of the *_MS vars (e.g. `THRESHOLD_MS=abc`) fails\n * here too — boot already failed in `validateEnv()` (start.ts / serve.ts\n * call it), this second parse is cheap and keeps the wiring side free of\n * `process.env.X` reads at the call site.\n */\nexport interface StallProfilerConfig {\n  enabled: boolean;\n  thresholdMs: number;\n  captureMs: number;\n  rateLimitMs: number;\n}\n\nexport function getStallProfilerConfig(): StallProfilerConfig {\n  const env = validateEnv();\n\n  /**\n   * Default OFF in packaged Electron when `SHIPYARD_STALL_PROFILER_ENABLED`\n   * is unset. Rationale: the V8 inspector `post()` blocks the event loop\n   * during capture — in a 2,959ms stall, `node:inspector:117 post` consumed\n   * 493.5ms of 800ms captured, i.e. the profiler was profiling itself.\n   * Trade: lose production stall visibility in packaged builds in exchange\n   * for not amplifying stalls for users. Dev sessions and CLI daemon keep\n   * profiling enabled by default. Override with `SHIPYARD_STALL_PROFILER_ENABLED=1`.\n   *\n   * `env.SHIPYARD_STALL_PROFILER_ENABLED` is `true` when the env var is\n   * absent (the Zod transform treats missing/empty as truthy). We detect\n   * \"explicitly set\" vs \"defaulted\" by reading `process.env` directly here\n   * — the schema transform already validated it, so this read is safe.\n   */\n  const explicitlySet =\n    process.env.SHIPYARD_STALL_PROFILER_ENABLED !== undefined &&\n    process.env.SHIPYARD_STALL_PROFILER_ENABLED !== '';\n\n  const enabled = explicitlySet\n    ? env.SHIPYARD_STALL_PROFILER_ENABLED\n    : env.SHIPYARD_ARTIFACT !== 'electron';\n\n  return {\n    enabled,\n    thresholdMs: env.SHIPYARD_STALL_PROFILER_THRESHOLD_MS,\n    captureMs: env.SHIPYARD_STALL_PROFILER_PROFILE_DURATION_MS,\n    rateLimitMs: env.SHIPYARD_STALL_PROFILER_MIN_INTERVAL_MS,\n  };\n}\n"],"mappings":";;;;;;AAAA,SAAS,eAAe;AACxB,SAAS,YAAY;AAQrB,QAAQ,IAAI,iDAAiD;AAO7D,QAAQ,IAAI,2BAA2B;AAQhC,SAAS,YAAqB;AACnC,SAAO,QAAQ,IAAI,iBAAiB,OAAO,QAAQ,IAAI,iBAAiB;AAC1E;AASO,SAAS,qBAA8B;AAC5C,SAAO,YAAY,EAAE;AACvB;AAaO,SAAS,kCAA2C;AACzD,SAAO,YAAY,EAAE;AACvB;AAeO,SAAS,6BAAsC;AACpD,SAAO,YAAY,EAAE;AACvB;AAEA,SAAS,kBAA0B;AACjC,SAAO,UAAU,IAAI,kBAAkB;AACzC;AAUA,IAAM,mCAAmC;AACzC,IAAM,6BAA6B;AAQ5B,SAAS,kBAA0B;AACxC,MAAI,QAAQ,IAAI,cAAe,QAAO,QAAQ,IAAI;AAClD,SAAO,KAAK,QAAQ,GAAG,gBAAgB,CAAC;AAC1C;AAqBO,SAAS,sBAA8B;AAC5C,SAAO,YAAY,EAAE,2BAA2B,QAAQ;AAC1D;AAEO,IAAM,YAAY,iBAAE,OAAO;AAAA,EAChC,mBAAmB,iBAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,cAAc,iBACX,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA,EAC7C,uBAAuB,iBACpB,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA,EAC7C,mBAAmB,iBAChB,OAAO,EACP,SAAS,EACT,UAAU,CAAC,MAAM,KAAK,KAAK,gBAAgB,CAAC,OAAO;AAAA,EACtD,WAAW,iBAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,OAAO,CAAC,EAAE,QAAQ,MAAM;AAAA,EACpE,wBAAwB,iBAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAClD,mCAAmC,iBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,gCAAgC;AAAA,EAC5F,6BAA6B,iBAC1B,OAAO,EACP,IAAI,EACJ,QAAQ,gDAAgD;AAAA,EAC3D,oBAAoB,iBACjB,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,OAAO;AAAA,EAC9C,qBAAqB,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMzC,sBAAsB,iBAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChD,kBAAkB,iBAAE,OAAO,EAAE,SAAS;AAAA,EACtC,qBAAqB,iBAAE,OAAO,EAAE,SAAS;AAAA,EACzC,uBAAuB,iBAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,4BAA4B,iBAAE,OAAO,EAAE,SAAS;AAAA,EAChD,eAAe,iBAAE,OAAO,EAAE,SAAS;AAAA,EACnC,wBAAwB,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,oBAAoB,iBAAE,KAAK,CAAC,eAAe,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvD,mBAAmB,iBAAE,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS;AAAA,EACjD,wBAAwB,iBACrB,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7C,gCAAgC,iBAC7B,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,mCAAmC,iBAChC,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA,EAC7C,iCAAiC,iBAC9B,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAc9C,sCAAsC,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYtF,6CAA6C,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ3F,yCAAyC,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,GAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS9F,2BAA2B,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5E,gCAAgC,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQhF,wBAAwB,iBAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUnE,yBAAyB,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7C,+BAA+B,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5E,kBAAkB,iBAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC5C,6BAA6B,iBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhF,kBAAkB,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,kBAAkB,iBACf,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA,EAI7C,gCAAgC,iBAC7B,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7C,uBAAuB,iBACpB,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9C,8BAA8B,iBAC3B,KAAK,CAAC,KAAK,QAAQ,KAAK,SAAS,EAAE,CAAC,EACpC,SAAS,EACT,UAAU,CAAC,MAAM,MAAM,OAAO,MAAM,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO9C,sCAAsC,iBAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,2BAA2B,iBAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzE,CAAC;AAIM,SAAS,cAAmB;AACjC,SAAO,UAAU,MAAM,QAAQ,GAAG;AACpC;AAgBO,SAAS,yBAA8C;AAC5D,QAAM,MAAM,YAAY;AAgBxB,QAAM,gBACJ,QAAQ,IAAI,oCAAoC,UAChD,QAAQ,IAAI,oCAAoC;AAElD,QAAM,UAAU,gBACZ,IAAI,kCACJ,IAAI,sBAAsB;AAE9B,SAAO;AAAA,IACL;AAAA,IACA,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,IACf,aAAa,IAAI;AAAA,EACnB;AACF;","names":[]}

package/dist/{chunk-ZRJTZLRF.js → chunk-QKJNVVQ3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   validateEnv
-} from "./chunk-Z37T5W6S.js";
+} from "./chunk-P2HZDIN7.js";
 import {
   external_exports
 } from "./chunk-CNR7O5YH.js";
@@ -18,8 +18,8 @@ function getDaemonVersion() {
   return cached;
 }
 function readDaemonVersion() {
-  if ("3.11.0".length > 0) {
-    return "3.11.0";
+  if ("3.11.1".length > 0) {
+    return "3.11.1";
   }
   try {
     const here = dirname(fileURLToPath(import.meta.url));
@@ -48,4 +48,4 @@ function readDaemonVersion() {
 export {
   getDaemonVersion
 };
-//# sourceMappingURL=chunk-ZRJTZLRF.js.map
+//# sourceMappingURL=chunk-QKJNVVQ3.js.map

package/dist/{chunk-2EQOL57Z.js → chunk-TFRYQDDG.js}

@@ -233,7 +233,7 @@ async function detectSkills(environments, lastKnown, mirrorEnabled = false) {
   try {
     return await detectSkillsInner(environments, mirrorEnabled);
   } catch (err) {
-    const { logger } = await import("./logger-2F3CBS3V.js");
+    const { logger } = await import("./logger-AN7EUK2B.js");
     if (lastKnown && lastKnown.length > 0) {
       logger.warn(
         { err, lastKnownCount: lastKnown.length },
@@ -406,4 +406,4 @@ export {
   detectSkills,
   _resolveBucketForTesting
 };
-//# sourceMappingURL=chunk-2EQOL57Z.js.map
+//# sourceMappingURL=chunk-TFRYQDDG.js.map

package/dist/{chunk-YXPPZQBJ.js → chunk-VL5RUCRF.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-X3MULCV5.js";
 import {
   logger
-} from "./chunk-QJP7JCIS.js";
+} from "./chunk-LRNGLC4V.js";
 import {
   external_exports
 } from "./chunk-CNR7O5YH.js";
@@ -24,6 +24,7 @@ var PRESENT_TOOL = "present";
 var VISUALIZE_READ_ME_QUALIFIED = `mcp__${HARNESS_SERVER_NAME}__${VISUALIZE_READ_ME_TOOL}`;
 var VISUALIZE_TOOL_QUALIFIED = `mcp__${HARNESS_SERVER_NAME}__${VISUALIZE_TOOL}`;
 var PRESENT_TOOL_QUALIFIED = `mcp__${HARNESS_SERVER_NAME}__${PRESENT_TOOL}`;
+var MERMAID_SECURITY_LEVEL = "loose";
 var COMMENT_ADD_TOOL = "add_comment";
 var COMMENT_LIST_TOOL = "list_comments";
 var COMMENT_READ_THREAD_TOOL = "read_comment_thread";
@@ -17921,6 +17922,12 @@ var CompactionStateSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({
     kind: external_exports.literal("compacting"),
     startedAt: external_exports.number(),
+    /**
+     * Last runtime/subprocess activity observed while compaction was in
+     * flight. Optional for persisted states written before the liveness
+     * watchdog existed; transition code falls back to `startedAt`.
+     */
+    lastActivityAt: external_exports.number().optional(),
     trigger: triggerSchema
   }),
   external_exports.object({
@@ -17937,11 +17944,12 @@ var CompactionStateSchema = external_exports.discriminatedUnion("kind", [
     trigger: triggerSchema,
     /**
      * Discriminates an ordinary failure (provider error text, subprocess
-     * sdk_error) from a watchdog timeout where the runtime went silent
-     * mid-compact. Persisted so the browser banner can render copy that
-     * reflects the actual stuck-vs-failed cause after daemon restart.
+     * sdk_error) from a liveness watchdog failure where the runtime produced
+     * no activity while compaction was in flight. Persisted so the browser
+     * banner can render copy that reflects the actual cause after daemon
+     * restart. `timeout` is kept for persisted pre-liveness states.
      */
-    reason: external_exports.enum(["error", "timeout"]).optional(),
+    reason: external_exports.enum(["error", "timeout", "runtime_silent"]).optional(),
     /**
      * The original `compacting.startedAt` carried forward across the
      * `compacting → failed` transition. Without it, a late `compact_complete`
@@ -17959,7 +17967,8 @@ var CompactionStateSchema = external_exports.discriminatedUnion("kind", [
 ]);
 var PRE_WARN_DURATION_MS = 5e3;
 var POST_FLASH_DURATION_MS = 2e3;
-var COMPACT_TIMEOUT_MS = 3e5;
+var COMPACTION_SILENCE_TIMEOUT_MS = 3e5;
+var COMPACTION_ACTIVITY_RESET_MIN_INTERVAL_MS = 3e4;
 function transition(state, event) {
   switch (state.kind) {
     case "idle":
@@ -17995,12 +18004,21 @@ function transitionIdle(event) {
     }
     case "user_compact": {
       return {
-        newState: { kind: "compacting", startedAt: event.now, trigger: "manual" },
+        newState: {
+          kind: "compacting",
+          startedAt: event.now,
+          lastActivityAt: event.now,
+          trigger: "manual"
+        },
         effects: [
           { kind: "RunPreCompactHook", trigger: "manual" },
           { kind: "BroadcastStatus", status: "compacting" },
           { kind: "CallProfileForceCompact", instructions: event.instructions },
-          { kind: "SetTimer", timerKind: "compact-timeout", durationMs: COMPACT_TIMEOUT_MS },
+          {
+            kind: "SetTimer",
+            timerKind: "compact-silence",
+            durationMs: COMPACTION_SILENCE_TIMEOUT_MS
+          },
           {
             kind: "EmitTelemetry",
             event: {
@@ -18014,11 +18032,20 @@ function transitionIdle(event) {
     }
     case "compact_started": {
       return {
-        newState: { kind: "compacting", startedAt: event.now, trigger: "auto" },
+        newState: {
+          kind: "compacting",
+          startedAt: event.now,
+          lastActivityAt: event.now,
+          trigger: "auto"
+        },
         effects: [
           { kind: "RunPreCompactHook", trigger: "auto" },
           { kind: "BroadcastStatus", status: "compacting" },
-          { kind: "SetTimer", timerKind: "compact-timeout", durationMs: COMPACT_TIMEOUT_MS },
+          {
+            kind: "SetTimer",
+            timerKind: "compact-silence",
+            durationMs: COMPACTION_SILENCE_TIMEOUT_MS
+          },
           {
             kind: "EmitTelemetry",
             event: {
@@ -18068,13 +18095,14 @@ function transitionIdle(event) {
     case "pre_warn_timer_elapsed":
     case "pre_warn_cancelled":
     case "compact_failed":
+    case "compact_activity":
     case "subprocess_died":
     case "orchestrator_restart_complete":
     case "flash_timer_elapsed":
     case "user_dismiss_failure":
     case "dismiss_compaction_failure":
     case "user_message_after_failure":
-    case "compact_timeout":
+    case "compact_silence_timeout":
       return { newState: state_idle, effects: [] };
     default:
       return assertNever2(event);
@@ -18092,7 +18120,12 @@ function transitionPreWarn(state, event) {
     case "user_compact": {
       const trigger = event.kind === "user_compact" ? "manual" : "auto";
       return {
-        newState: { kind: "compacting", startedAt: event.now, trigger },
+        newState: {
+          kind: "compacting",
+          startedAt: event.now,
+          lastActivityAt: event.now,
+          trigger
+        },
         effects: [
           { kind: "ClearTimer", timerKind: "pre-warn" },
           { kind: "RunPreCompactHook", trigger },
@@ -18101,7 +18134,11 @@ function transitionPreWarn(state, event) {
             kind: "CallProfileForceCompact",
             instructions: event.kind === "user_compact" ? event.instructions : void 0
           },
-          { kind: "SetTimer", timerKind: "compact-timeout", durationMs: COMPACT_TIMEOUT_MS },
+          {
+            kind: "SetTimer",
+            timerKind: "compact-silence",
+            durationMs: COMPACTION_SILENCE_TIMEOUT_MS
+          },
           {
             kind: "EmitTelemetry",
             event: {
@@ -18117,13 +18154,14 @@ function transitionPreWarn(state, event) {
     case "compact_started":
     case "compact_complete":
     case "compact_failed":
+    case "compact_activity":
     case "subprocess_died":
     case "orchestrator_restart_complete":
     case "flash_timer_elapsed":
     case "user_dismiss_failure":
     case "dismiss_compaction_failure":
     case "user_message_after_failure":
-    case "compact_timeout":
+    case "compact_silence_timeout":
       return { newState: state, effects: [] };
     default:
       return assertNever2(event);
@@ -18133,8 +18171,31 @@ function transitionCompacting(state, event) {
   switch (event.kind) {
     case "compact_started": {
       return {
-        newState: state,
-        effects: [{ kind: "BroadcastStatus", status: "compacting" }]
+        newState: { ...state, lastActivityAt: event.now },
+        effects: [
+          { kind: "BroadcastStatus", status: "compacting" },
+          {
+            kind: "SetTimer",
+            timerKind: "compact-silence",
+            durationMs: COMPACTION_SILENCE_TIMEOUT_MS
+          }
+        ]
+      };
+    }
+    case "compact_activity": {
+      const lastActivityAt = state.lastActivityAt ?? state.startedAt;
+      if (event.now - lastActivityAt < COMPACTION_ACTIVITY_RESET_MIN_INTERVAL_MS) {
+        return { newState: state, effects: [] };
+      }
+      return {
+        newState: { ...state, lastActivityAt: event.now },
+        effects: [
+          {
+            kind: "SetTimer",
+            timerKind: "compact-silence",
+            durationMs: COMPACTION_SILENCE_TIMEOUT_MS
+          }
+        ]
       };
     }
     case "compact_complete": {
@@ -18148,7 +18209,7 @@ function transitionCompacting(state, event) {
           trigger
         },
         effects: [
-          { kind: "ClearTimer", timerKind: "compact-timeout" },
+          { kind: "ClearTimer", timerKind: "compact-silence" },
           {
             kind: "EmitBoundaryBlock",
             preTokens: event.preTokens,
@@ -18191,7 +18252,7 @@ function transitionCompacting(state, event) {
           startedAt: state.startedAt
         },
         effects: [
-          { kind: "ClearTimer", timerKind: "compact-timeout" },
+          { kind: "ClearTimer", timerKind: "compact-silence" },
           /*
            * G-1: a hard/terminal error (subprocess died, real provider error)
            * — no recovery is expected, so write the boundary CARD with a
@@ -18225,28 +18286,30 @@ function transitionCompacting(state, event) {
         ]
       };
     }
-    case "compact_timeout": {
-      const timeoutErrorMessage = "Compaction timed out \u2014 the runtime stopped responding.";
+    case "compact_silence_timeout": {
+      const lastActivityAt = state.lastActivityAt ?? state.startedAt;
+      const silenceMs = Math.max(0, event.now - lastActivityAt);
+      const runtimeSilentMessage = "Compaction stalled \u2014 the runtime produced no activity and may be unresponsive.";
       return {
         newState: {
           kind: "failed",
           failedAt: event.now,
-          error: timeoutErrorMessage,
+          error: runtimeSilentMessage,
           trigger: state.trigger,
-          reason: "timeout",
+          reason: "runtime_silent",
           startedAt: state.startedAt
         },
         effects: [
-          { kind: "ClearTimer", timerKind: "compact-timeout" },
+          { kind: "ClearTimer", timerKind: "compact-silence" },
           /*
-           * FIX 1: a watchdog timeout is NOT terminal — the runtime
+           * A silence-watchdog failure is NOT terminal — the runtime
            * (Codex/Cursor slow case) MAY still land a late `compact_complete`.
            * Do NOT write a boundary CARD here: keep `#pendingBoundaryBlock`
            * so a late `compact_complete` (G-6: `failed → post-flash`) can
-           * write the `completed` card once. The durable failed BANNER built
-           * in the web wave is what tells the user it timed out; the card is
-           * reserved for a real outcome. `ClearPendingStats` clears only the
-           * post-compact STATS slots and leaves the boundary block intact.
+           * write the `completed` card once. The durable failed BANNER is what
+           * tells the user the runtime went silent; the card is reserved for a
+           * real outcome. `ClearPendingStats` clears only the post-compact
+           * STATS slots and leaves the boundary block intact.
            */
           { kind: "ClearPendingStats" },
           { kind: "EmitBanner", variant: "failed" },
@@ -18258,8 +18321,9 @@ function transitionCompacting(state, event) {
               timestamp: event.now,
               trigger: state.trigger,
               durationMs: event.now - state.startedAt,
-              reason: "timeout",
-              error: timeoutErrorMessage
+              reason: "runtime_silent",
+              error: runtimeSilentMessage,
+              silenceMs
             }
           }
         ]
@@ -18269,7 +18333,7 @@ function transitionCompacting(state, event) {
       return {
         newState: { kind: "recovering", recoveryStartedAt: event.now },
         effects: [
-          { kind: "ClearTimer", timerKind: "compact-timeout" },
+          { kind: "ClearTimer", timerKind: "compact-silence" },
           {
             kind: "EmitTelemetry",
             event: {
@@ -18311,12 +18375,13 @@ function transitionPostFlash(state, event) {
     case "compact_started":
     case "compact_complete":
     case "compact_failed":
+    case "compact_activity":
     case "subprocess_died":
     case "orchestrator_restart_complete":
     case "user_dismiss_failure":
     case "dismiss_compaction_failure":
     case "user_message_after_failure":
-    case "compact_timeout":
+    case "compact_silence_timeout":
       return { newState: state, effects: [] };
     default:
       return assertNever2(event);
@@ -18364,7 +18429,7 @@ function transitionFailed(state, event) {
           trigger
         },
         effects: [
-          { kind: "ClearTimer", timerKind: "compact-timeout" },
+          { kind: "ClearTimer", timerKind: "compact-silence" },
           {
             kind: "EmitBoundaryBlock",
             preTokens: event.preTokens,
@@ -18402,9 +18467,10 @@ function transitionFailed(state, event) {
     case "pre_warn_cancelled":
     case "compact_started":
     case "compact_failed":
+    case "compact_activity":
     case "subprocess_died":
     case "flash_timer_elapsed":
-    case "compact_timeout":
+    case "compact_silence_timeout":
       return { newState: state, effects: [] };
     default:
       return assertNever2(event);
@@ -18425,12 +18491,13 @@ function transitionRecovering(state, event) {
     case "compact_started":
     case "compact_complete":
     case "compact_failed":
+    case "compact_activity":
     case "subprocess_died":
     case "flash_timer_elapsed":
     case "user_dismiss_failure":
     case "dismiss_compaction_failure":
     case "user_message_after_failure":
-    case "compact_timeout":
+    case "compact_silence_timeout":
       return { newState: state, effects: [] };
     default:
       return assertNever2(event);
@@ -25364,6 +25431,15 @@ function controlChannelOutboxChannel(side, sourceId) {
   return side === "daemon" ? `daemon-control-${sourceId}` : `control-${sourceId}`;
 }
 
+// ../../packages/loro-schema/src/transport/at-least-once/health.ts
+function shouldEmitHealthSummary(lastEmitMs, now, intervalMs) {
+  return now - lastEmitMs >= intervalMs;
+}
+function buildAloHealthPayload(counters) {
+  if (counters.resendsInWindow === 0 && counters.retryStateSize === 0) return null;
+  return { event: "alo_health", ...counters };
+}
+
 // ../../packages/loro-schema/src/transport/at-least-once/outbox.ts
 var InMemoryOutbox = class {
   #entries = [];
@@ -25423,6 +25499,7 @@ var MAX_DELIVER = 8;
 var DEFAULT_RESEND_TICK_MS = 250;
 var DEFAULT_MAX_RESENDS_PER_TICK = 32;
 var DEFAULT_ORPHAN_THRESHOLD_MS = 5 * 6e4;
+var DEFAULT_HEALTH_SUMMARY_INTERVAL_MS = 3e4;
 function nextAttemptAtMs(attempt, nowMs, backoffMs = RESEND_BACKOFF_MS) {
   if (backoffMs.length === 0) return nowMs;
   const idx = Math.min(Math.max(attempt - 1, 0), backoffMs.length - 1);
@@ -25753,6 +25830,11 @@ var AtLeastOnceShell = class {
    * is reaped after `orphanThresholdMs` rather than waiting forever.
    */
   #lastAckAtMs;
+  /** Resend count since the last `alo_health` emission; reset each interval. */
+  #resendsInWindow = 0;
+  /** When the last `alo_health` summary was emitted. Seeded at construction so the first summary fires after one full interval, not immediately. */
+  #lastHealthSummaryAtMs;
+  #healthSummaryIntervalMs;
   #tickIntervalMs;
   #backoffMs;
   #maxDeliver;
@@ -25769,9 +25851,11 @@ var AtLeastOnceShell = class {
     this.#maxDeliver = deps.maxDeliver ?? MAX_DELIVER;
     this.#orphanThresholdMs = deps.orphanThresholdMs ?? DEFAULT_ORPHAN_THRESHOLD_MS;
     this.#maxResendsPerTick = deps.maxResendsPerTick ?? DEFAULT_MAX_RESENDS_PER_TICK;
+    this.#healthSummaryIntervalMs = deps.healthSummaryIntervalMs ?? DEFAULT_HEALTH_SUMMARY_INTERVAL_MS;
     this.#setInterval = deps.setInterval ?? ((fn, ms) => setInterval(fn, ms));
     this.#clearInterval = deps.clearInterval ?? ((handle) => clearInterval(handle));
     this.#lastAckAtMs = this.#now();
+    this.#lastHealthSummaryAtMs = this.#now();
     deps.log?.({ event: "alo_shell_created", streamId: deps.streamId });
   }
   /**
@@ -25840,6 +25924,10 @@ var AtLeastOnceShell = class {
   }
   async setConnected(connected) {
     if (this.#disposed) return;
+    const wasConnected = this.#sendState.connected;
+    if (connected && !wasConnected) {
+      this.#retryState.clear();
+    }
     const sendStep = nextSendState(this.#sendState, {
       kind: "connection_state_change",
       connected
@@ -26260,10 +26348,38 @@ var AtLeastOnceShell = class {
       for (const re of capped) {
         this.#processResend(re, now);
       }
+      this.#emitHealthSummary(now);
     } finally {
       this.#tickInFlight = false;
     }
   }
+  /**
+   * Emit a periodic `alo_health` warn log if the summary interval has elapsed.
+   * Delegates to `shouldEmitHealthSummary`/`buildAloHealthPayload` in `health.ts`.
+   * `#disposed` guard: skip log callbacks after external `dispose()` during a
+   * `#processDeadLetter` await. Extracted from `#tick` for complexity budget.
+   */
+  #emitHealthSummary(now) {
+    if (this.#disposed) return;
+    if (!shouldEmitHealthSummary(this.#lastHealthSummaryAtMs, now, this.#healthSummaryIntervalMs))
+      return;
+    let oldestMessageAgeMs = 0;
+    for (const re of this.#retryState.values()) {
+      const age = now - re.entry.ts;
+      if (age > oldestMessageAgeMs) oldestMessageAgeMs = age;
+    }
+    const payload = buildAloHealthPayload({
+      streamId: this.#deps.streamId,
+      resendsInWindow: this.#resendsInWindow,
+      retryStateSize: this.#retryState.size,
+      dropsInWindow: this.#dropsCounter.count(now),
+      oldestMessageAgeMs,
+      msSinceLastAck: now - this.#lastAckAtMs
+    });
+    if (payload !== null) this.#deps.log?.(payload);
+    this.#resendsInWindow = 0;
+    this.#lastHealthSummaryAtMs = now;
+  }
   /**
    * Pure orphan predicate. Reaps when retry state has accumulated and the
    * idle timer has elapsed; an empty retry state means there is nothing
@@ -26298,6 +26414,14 @@ var AtLeastOnceShell = class {
       msgId: re.entry.msgId,
       attempts: re.attempt
     });
+    this.#deps.log?.({
+      event: "alo_resend_exhausted",
+      level: "error",
+      streamId: this.#deps.streamId,
+      seqNo: re.entry.seqNo,
+      msgId: re.entry.msgId,
+      attempts: re.attempt
+    });
     if (this.#deps.onDeadLetter) {
       try {
         this.#deps.onDeadLetter(re.entry, re.attempt);
@@ -26349,8 +26473,10 @@ var AtLeastOnceShell = class {
     re.consecutiveDrainPendingCount = 0;
     re.attempt = nextAttempt;
     re.nextAttemptAtMs = nextAttemptAtMs(re.attempt, now, this.#backoffMs);
+    this.#resendsInWindow += 1;
     this.#deps.log?.({
       event: "alo_resend",
+      level: "debug",
       streamId: this.#deps.streamId,
       seqNo: re.entry.seqNo,
       msgId: re.entry.msgId,
@@ -27755,6 +27881,7 @@ export {
   VISUALIZE_READ_ME_TOOL,
   VISUALIZE_TOOL,
   PRESENT_TOOL,
+  MERMAID_SECURITY_LEVEL,
   COMMENT_ADD_TOOL,
   COMMENT_LIST_TOOL,
   COMMENT_READ_THREAD_TOOL,
@@ -27816,7 +27943,7 @@ export {
   ScheduleRecordSchema,
   SCHEDULE_STORE_VERSION,
   migrateScheduleStore,
-  COMPACT_TIMEOUT_MS,
+  COMPACTION_SILENCE_TIMEOUT_MS,
   transition,
   taskStatuses,
   structuredTaskStatuses,
@@ -27930,4 +28057,4 @@ export {
   toRecord,
   buildCursorUserPrompt
 };
-//# sourceMappingURL=chunk-YXPPZQBJ.js.map
+//# sourceMappingURL=chunk-VL5RUCRF.js.map