@songsid/agend 2.1.4-beta.6 → 2.1.4-beta.60

package/dist/backend/types.d.ts

@@ -40,7 +40,7 @@ export interface CliBackendConfig {
 /** Action to take when an error pattern is detected in PTY output. */
 export type ErrorActionType = "notify" | "failover" | "restart" | "pause";
 /** Categorizes detected errors for logging and response. */
-export type ErrorType = "rate_limit" | "auth_error" | "crash" | "network" | "quota" | "timeout" | "model_error";
+export type ErrorType = "rate_limit" | "auth_error" | "crash" | "network" | "quota" | "timeout" | "model_error" | "config_error";
 export interface ErrorPattern {
     pattern: RegExp;
     type: ErrorType;
@@ -60,6 +60,12 @@ export interface ErrorPattern {
      * immediately) whose backend ready-pattern only matches the startup banner,
      * so waiting would block ALL future error detection forever. */
     skipRecoveryWait?: boolean;
+    /** This error is a property of the BACKEND (its service is unreachable), not
+     * of one instance: every instance on that CLI fails at once. The lifecycle
+     * then records a fleet-level backend outage, notifies ONCE fleet-wide instead
+     * of per instance, and the daemon stops spending `--resume` attempts (and
+     * sessions) on it while it lasts. Only meaningful with type "network". */
+    fleetWide?: boolean;
 }
 /** A selectable model, surfaced by `/model` (id is what gets applied). */
 export interface ModelOption {
@@ -74,6 +80,12 @@ export interface CliEnv {
     authenticated?: boolean;
     currentModel?: string;
     models: ModelOption[];
+    /**
+     * Extended account catalog behind the "/model → more models" tier (claude:
+     * live `GET /v1/models` plus [1m] variants). Kept separate from `models` so
+     * the quick-pick tier stays short.
+     */
+    apiModels?: ModelOption[];
     /** Epoch ms the probe ran (drives the cache TTL). */
     probedAt: number;
 }
@@ -87,9 +99,52 @@ export interface RuntimeDialog {
     keys: string[];
     /** Human-readable description for logging. */
     description: string;
+    /**
+     * While this dialog is on screen the pane is NOT deliverable: no paste, no
+     * Enter, no native-queue or steer hand-off. Opt-in on purpose — the delivery
+     * gate runs on every ordinary message against the whole viewport, so only
+     * patterns that cannot match transcript prose belong here (require the
+     * dialog's structure: selector glyph, numbered options, exact wording).
+     * Absent means the runtime scanner may still auto-dismiss the dialog, but
+     * delivery is not held for it.
+     */
+    blocksDelivery?: boolean;
+    /**
+     * When present, decides whether the dialog is the CURRENT interactive region
+     * of the pane — typically bottom-anchored: the menu rows are the last thing
+     * on screen apart from the dialog's own footer, and no ready prompt follows
+     * them. Used instead of `pattern` wherever a match would block delivery or
+     * send keys; `pattern` stays the cheap identity/pre-filter. Without it a
+     * transcript that quotes the dialog verbatim (a pasted pane capture, this
+     * very bug being discussed) would count as a live dialog and receive keys.
+     */
+    isActive?(pane: string): boolean;
+    /**
+     * Recognise the dialog but NEVER answer it. Implies `blocksDelivery`. If it
+     * persists, the daemon reports it for a human. Use for dialogs whose default
+     * option is destructive when the exact shape is not the one we know how to
+     * navigate — e.g. a variant of Claude's session-resume prompt, where a blind
+     * Enter picks "Resume from summary" and drops the full context. `keys` is
+     * ignored.
+     */
+    holdOnly?: boolean;
 }
-/** A dialog that may appear during CLI startup (trust prompts, session pickers, etc.). */
-export type StartupDialog = RuntimeDialog;
+/**
+ * A dialog that may appear during CLI startup (trust prompts, session pickers, etc.).
+ * With `fatal` set, the screen cannot be dismissed by keypresses (e.g. a corrupt
+ * claude.json modal whose only choices are "exit" and "reset config"): the daemon
+ * reports the error instead of sending keys — `keys` is ignored and should be [].
+ * This must be detected as a dialog, not left to the ready check: such modals
+ * often contain the `❯` selector that ready patterns match, so they would
+ * otherwise pass as ready and queued messages would be typed into the modal.
+ */
+export type StartupDialog = RuntimeDialog & {
+    fatal?: {
+        type: ErrorType;
+        action: ErrorActionType;
+        message: string;
+    };
+};
 export interface CliBackend {
     /** The CLI binary name (e.g. "claude", "gemini", "codex") */
     readonly binaryName: string;
@@ -109,6 +164,62 @@ export interface CliBackend {
      * at an empty prompt and during generation. Absent means false.
      */
     requiresDeliveryEnterRetry?(): boolean;
+    /**
+     * Whether the TUI DROPS an Enter that arrives while it is generating or
+     * running a tool, while still accepting the typed text as typeahead (Kiro's
+     * legacy UI, verified live on kiro-cli 2.21.0). For such a TUI, a quiet pane
+     * is not evidence of readiness: a shell/MCP tool can run for many seconds
+     * without painting anything, and a paste+Enter landing in that window leaves
+     * the text sitting unsubmitted in the prompt row until the next Enter — which
+     * then submits two messages as one. When true, the daemon requires the
+     * bottom-anchored ready marker (`getBottomReadyPattern`) before pasting and
+     * FAILS CLOSED without it (a non-blank pane whose bottom row is not the
+     * prompt is treated as busy — the prompt may simply have scrolled out of the
+     * viewport behind tool output), verifies SUBMISSION (not just "some output")
+     * after Enter, and submits any stranded text before pasting a new message.
+     * Return true only for a UI whose prompt row the pattern below recognises;
+     * other UI flavours of the same CLI should return false and keep the
+     * silence gate. Absent means false.
+     */
+    dropsEnterWhileBusy?(): boolean;
+    /**
+     * Ready marker tested against ONE pane row at a time (the LAST non-blank row
+     * for readiness), so `^` anchors the row start — anchor it: an unanchored
+     * marker matches ordinary tool output (`Progress 50% > /tmp/out`). Distinct
+     * from `getReadyPattern()`, which may match anywhere on screen (a prompt
+     * higher up is history). Required for `dropsEnterWhileBusy()` backends.
+     */
+    getBottomReadyPattern?(): RegExp | null;
+    /**
+     * Startup budget override, in ms, for reaching first output + ready state.
+     * `ctx.resume` is true when the CLI is launched with session resume. Return
+     * undefined to use `startup_timeout_ms` / the 25s default. Kiro's `--resume`
+     * needs a backend round trip before it paints anything (blank for >15s while
+     * the runtime host retried, live 2026-09-03) whereas a fresh prompt is local
+     * — so only the resume launch should get more time; a fresh start must stay
+     * tight. The daemon never lowers a user-configured `startup_timeout_ms`.
+     */
+    getStartupBudgetMs?(ctx: {
+        resume: boolean;
+    }): number | undefined;
+    /**
+     * Whether a failed resume launch should be retried ONCE with resume before
+     * the session is abandoned. For CLIs whose resume depends on a remote round
+     * trip, the first miss is usually the backend being slow, not the session
+     * being corrupt — and dropping to a fresh session loses the conversation.
+     * The daemon bounds this to one extra attempt. Absent means false.
+     */
+    retriesResumeOnStartupFailure?(): boolean;
+    /**
+     * Whether the TUI can emit terminal output while its visible pane is
+     * unchanged (for example, rerunning and repainting a status-line hook).
+     *
+     * The daemon normally treats every tmux control-mode output event as immediate
+     * evidence of work. Backends with periodic cosmetic redraws instead require a
+     * pane capture to confirm that visible content actually changed. Absent means
+     * false.
+     */
+    hasPeriodicPaneRedraw?(): boolean;
     /** Build the shell command string to launch the CLI in a tmux window. */
     buildCommand(config: CliBackendConfig): string;
     /** Write all config files the CLI needs before launch. */
@@ -193,6 +304,14 @@ export interface CliBackend {
      * verified equivalent. Used by the admin-only /clear fleet command.
      */
     getClearCommand(): string | null;
+    /**
+     * Optional confirmation shown after getClearCommand() is submitted. AgEnD
+     * already obtains an admin confirmation in the channel, so a backend that
+     * adds its own terminal prompt can be answered automatically. The daemon
+     * only consults this for /clear deliveries; ordinary runtime dialogs and
+     * manually typed commands are not affected.
+     */
+    getClearConfirmationDialog?(): RuntimeDialog | null;
     /**
      * The tmux key that interrupts the CLI's current generation WITHOUT quitting —
      * "Escape" for most, "C-c" (Ctrl+C) for kiro-cli. Used by the cancel button and

package/dist/backend/types.js

@@ -73,7 +73,11 @@ export function resolveBinary(name, fallbackDirs) {
  * Throws if `model` contains anything else, since `buildCommand` returns a
  * shell string consumed by tmux and we cannot rely on argv-style quoting.
  */
-const SAFE_MODEL_RE = /^[A-Za-z0-9._:/-]+$/;
+// Brackets admit Claude Code's 1M-context suffix (opus[1m] — binary-verified
+// "append [1m] to the model name for 1M"). They are shell GLOB characters,
+// so every command-line embed of a model MUST go through shellQuote(): an
+// unquoted opus[1m] can pathname-expand in bash and aborts zsh outright.
+const SAFE_MODEL_RE = /^[A-Za-z0-9._:/[\]-]+$/;
 /**
  * Guard an effort level before it reaches a shell command line. Same reasoning
  * as validateModel: the value originates from a chat message, and the launch

package/dist/backend/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA0F1C,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAgMD;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC;QACrC,gBAAgB;QAChB,UAAU;QACV,MAAM;KACP,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEjC,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAEvD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAgC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,YAAY,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,wDAAwD;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,sBAAsB,GAA2B;IACrD,aAAa,EAAE,kDAAkD;IACjE,UAAU,EAAE,iEAAiE;IAC7E,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,GAAG,EAAG,iDAAiD;IACnE,0EAA0E;IAC1E,8DAA8D;IAC9D,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,QAAQ,EAAG,gDAAgD;CACpE,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,KAAa;IAClE,MAAM,OAAO,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAa;IACpE,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,uCAAuC,WAAW,0BAA0B,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsG1C,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AA2SD;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC;QACrC,gBAAgB;QAChB,UAAU;QACV,MAAM;KACP,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEjC,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAEvD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAgC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,YAAY,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,wDAAwD;AACvE,CAAC;AAED;;;;;;GAMG;AACH,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,sBAAsB,GAA2B;IACrD,aAAa,EAAE,kDAAkD;IACjE,UAAU,EAAE,iEAAiE;IAC7E,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,GAAG,EAAG,iDAAiD;IACnE,0EAA0E;IAC1E,8DAA8D;IAC9D,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,QAAQ,EAAG,gDAAgD;CACpE,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,KAAa;IAClE,MAAM,OAAO,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAa;IACpE,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,uCAAuC,WAAW,0BAA0B,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/backend-outage.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Fleet-level "is this CLI's backend reachable?" memory.
+ *
+ * Some failures are a property of the BACKEND, not of one instance: when
+ * runtime.us-east-1.kiro.dev stopped answering (2026-09-03, hours), every kiro
+ * instance printed the same `dispatch failure (timeout)` line every 10s, every
+ * `--resume` launch sat blank past its startup budget, and the daemon's
+ * "resume failed → clear the session and start fresh" fallback turned a
+ * transient outage into permanent conversation loss across the fleet.
+ *
+ * One tracker per fleet, keyed by backend name. Sightings come from the
+ * lifecycle's pty_error handler (running instances) and from the daemon's
+ * startup path (a failed launch whose pane shows the outage text). "Active"
+ * means seen within the last BACKEND_OUTAGE_ACTIVE_MS; nothing has to report
+ * recovery — the memory simply ages out once the CLI stops printing the error.
+ */
+/**
+ * How long after the last sighting a backend is still considered down.
+ *
+ * Longer than the longest startup-retry backoff (15 min) plus a startup budget:
+ * in an all-down fleet nothing is running to refresh the memory, and a retry
+ * that begins after it expired would clear the session it was meant to keep.
+ * Recovery is also cleared POSITIVELY — a successful `--resume` launch on the
+ * backend proves it reachable (see Daemon.spawnClaudeWindow) — so the long TTL
+ * costs nothing once the service is back.
+ */
+export declare const BACKEND_OUTAGE_ACTIVE_MS: number;
+export interface BackendOutageSighting {
+    firstSeenAt: number;
+    lastSeenAt: number;
+    /** Last human-readable detail (the formatted error message), if any. */
+    detail?: string;
+    /** Instances that reported it during this outage. */
+    instances: Set<string>;
+}
+export declare class BackendOutageTracker {
+    private readonly now;
+    private readonly outages;
+    constructor(now?: () => number);
+    /**
+     * Record a sighting. Returns `isNew` when this opens an outage (first
+     * sighting, or the previous one had aged out) — the moment to notify.
+     */
+    record(backend: string, instance?: string, detail?: string): {
+        isNew: boolean;
+        sighting: BackendOutageSighting;
+    };
+    isActive(backend: string): boolean;
+    /** The active sighting, or null once it has aged out. */
+    active(backend: string): BackendOutageSighting | null;
+    /** Forget a backend (e.g. an operator-confirmed recovery). */
+    clear(backend: string): void;
+}
+/** The subset a Daemon needs; lets tests pass a plain object. */
+export interface BackendOutageView {
+    isActive(backend: string): boolean;
+    record(backend: string, instance?: string, detail?: string): {
+        isNew: boolean;
+    };
+    clear(backend: string): void;
+}

package/dist/backend-outage.js

@@ -0,0 +1,71 @@
+/**
+ * Fleet-level "is this CLI's backend reachable?" memory.
+ *
+ * Some failures are a property of the BACKEND, not of one instance: when
+ * runtime.us-east-1.kiro.dev stopped answering (2026-09-03, hours), every kiro
+ * instance printed the same `dispatch failure (timeout)` line every 10s, every
+ * `--resume` launch sat blank past its startup budget, and the daemon's
+ * "resume failed → clear the session and start fresh" fallback turned a
+ * transient outage into permanent conversation loss across the fleet.
+ *
+ * One tracker per fleet, keyed by backend name. Sightings come from the
+ * lifecycle's pty_error handler (running instances) and from the daemon's
+ * startup path (a failed launch whose pane shows the outage text). "Active"
+ * means seen within the last BACKEND_OUTAGE_ACTIVE_MS; nothing has to report
+ * recovery — the memory simply ages out once the CLI stops printing the error.
+ */
+/**
+ * How long after the last sighting a backend is still considered down.
+ *
+ * Longer than the longest startup-retry backoff (15 min) plus a startup budget:
+ * in an all-down fleet nothing is running to refresh the memory, and a retry
+ * that begins after it expired would clear the session it was meant to keep.
+ * Recovery is also cleared POSITIVELY — a successful `--resume` launch on the
+ * backend proves it reachable (see Daemon.spawnClaudeWindow) — so the long TTL
+ * costs nothing once the service is back.
+ */
+export const BACKEND_OUTAGE_ACTIVE_MS = 20 * 60_000;
+export class BackendOutageTracker {
+    now;
+    outages = new Map();
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    /**
+     * Record a sighting. Returns `isNew` when this opens an outage (first
+     * sighting, or the previous one had aged out) — the moment to notify.
+     */
+    record(backend, instance, detail) {
+        const now = this.now();
+        const existing = this.outages.get(backend);
+        if (existing && now - existing.lastSeenAt < BACKEND_OUTAGE_ACTIVE_MS) {
+            existing.lastSeenAt = now;
+            if (detail)
+                existing.detail = detail;
+            if (instance)
+                existing.instances.add(instance);
+            return { isNew: false, sighting: existing };
+        }
+        const sighting = {
+            firstSeenAt: now,
+            lastSeenAt: now,
+            detail,
+            instances: new Set(instance ? [instance] : []),
+        };
+        this.outages.set(backend, sighting);
+        return { isNew: true, sighting };
+    }
+    isActive(backend) {
+        const sighting = this.outages.get(backend);
+        return !!sighting && this.now() - sighting.lastSeenAt < BACKEND_OUTAGE_ACTIVE_MS;
+    }
+    /** The active sighting, or null once it has aged out. */
+    active(backend) {
+        return this.isActive(backend) ? this.outages.get(backend) : null;
+    }
+    /** Forget a backend (e.g. an operator-confirmed recovery). */
+    clear(backend) {
+        this.outages.delete(backend);
+    }
+}
+//# sourceMappingURL=backend-outage.js.map

package/dist/backend-outage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-outage.js","sourceRoot":"","sources":["../src/backend-outage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC;AAWpD,MAAM,OAAO,oBAAoB;IAGF;IAFZ,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEpE,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D;;;OAGG;IACH,MAAM,CAAC,OAAe,EAAE,QAAiB,EAAE,MAAe;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,UAAU,GAAG,wBAAwB,EAAE,CAAC;YACrE,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,IAAI,MAAM;gBAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;YACrC,IAAI,QAAQ;gBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,QAAQ,GAA0B;YACtC,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,GAAG;YACf,MAAM;YACN,SAAS,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,GAAG,wBAAwB,CAAC;IACnF,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/channel/adapters/discord.d.ts

@@ -1,5 +1,6 @@
 import { EventEmitter } from "node:events";
-import type { ChannelAdapter, ApprovalHandle, SendOpts, SentMessage, PermissionPrompt, Choice, AlertData } from "../types.js";
+import { Client } from "discord.js";
+import type { ChannelAdapter, ApprovalHandle, SendOpts, SentMessage, PermissionPrompt, Choice, AlertData, AdapterHealthSnapshot } from "../types.js";
 import type { AccessManager } from "../access-manager.js";
 /** Curated ClassicBot backends for Discord's native slash-option dropdown. */
 export declare const DISCORD_START_BACKEND_CHOICES: readonly [{
@@ -30,12 +31,39 @@ export interface DiscordAdapterOptions {
     categoryName?: string;
     generalChannelId?: string;
     registerCommands?: boolean;
+    /** Test seams; production callers leave these unset. */
+    clientFactory?: () => Client;
+    now?: () => number;
+    watchdogIntervalMs?: number;
+    staleThresholdMs?: number;
+    reconnectBaseDelayMs?: number;
 }
 export declare class DiscordAdapter extends EventEmitter implements ChannelAdapter {
     readonly type = "discord";
     readonly topology: "channels";
     readonly id: string;
     private client;
+    private readonly clientFactory;
+    private readonly now;
+    private readonly watchdogIntervalMs;
+    private readonly staleThresholdMs;
+    private readonly reconnectBaseDelayMs;
+    private desiredRunning;
+    private lifecycleEpoch;
+    private clientGeneration;
+    private reconnectPromise;
+    private watchdogTimer;
+    private lastWatchdogTickAt;
+    private generationReadyAt;
+    private generationNonReadySince;
+    private shardNonReadySince;
+    private previousHeartbeatAck;
+    private observedHeartbeatInterval;
+    private healthStatus;
+    private lastDispatchAt;
+    private lastReconnectAt;
+    private lastReconnectReason;
+    private reconnectCount;
     private botToken;
     private accessManager;
     private inboxDir;
@@ -49,10 +77,22 @@ export declare class DiscordAdapter extends EventEmitter implements ChannelAdapt
     private attachmentUrls;
     private categoryIdPromise?;
     constructor(opts: DiscordAdapterOptions);
+    private buildClient;
     private _fetchTextChannel;
-    private _registerHandlers;
+    private registerClientHandlers;
     /** Mark channels as open (skip access control) — used for classic bot channels */
     setOpenChannels(channelIds: string[]): void;
+    private isCurrentClient;
+    private emitFromClient;
+    private emitHealthChanged;
+    private loginFreshClient;
+    /** Rebuild just this bot's gateway Client. Calls coalesce into one generation. */
+    reconnectGateway(reason: string): Promise<void>;
+    private readyClient;
+    private startGatewayWatchdog;
+    private checkGatewayLiveness;
+    getHealthSnapshot(): AdapterHealthSnapshot;
+    private handleClientReady;
     start(): Promise<void>;
     stop(): Promise<void>;
     /**
@@ -69,6 +109,8 @@ export declare class DiscordAdapter extends EventEmitter implements ChannelAdapt
     editMessage(chatId: string, messageId: string, text: string, threadId?: string): Promise<void>;
     /** Edit text and clear components (Discord keeps components on a plain edit,
      * so we must pass an empty array to drop the Cancel button). */
+    /** Keyboard-only removal — Discord keeps the original content untouched. */
+    removeMessageButtons(chatId: string, messageId: string, threadId?: string): Promise<void>;
     editMessageRemoveButtons(chatId: string, messageId: string, text: string, threadId?: string): Promise<void>;
     deleteMessage(chatId: string, messageId: string, threadId?: string): Promise<void>;
     react(chatId: string, messageId: string, emoji: string, threadId?: string): Promise<void>;