@songsid/agend 2.1.5 → 2.1.6-beta.10

package/dist/backend/muse.js

@@ -0,0 +1,437 @@
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync, chmodSync } from "node:fs";
+import { homedir } from "node:os";
+import { createHash } from "node:crypto";
+import { resolveBinary, shellQuote, validateModel, warnIfModelMismatch } from "./types.js";
+import { appendWithMarker, removeMarker } from "./marker-utils.js";
+/** Session ids are UUIDs (e.g. "01a0c784-fb91-…"); guard before shell interpolation. */
+const SESSION_ID_RE = /^[0-9a-fA-F-]{8,}$/;
+/**
+ * Enough of a session log to reach the `route_facts` record that names the
+ * working directory. Measured on a live session: `"cwd"` landed at byte 3899 of
+ * a 450KB log, at sequence 4. 64KiB is ~16x that headroom and keeps the scan
+ * cheap even with dozens of sessions on disk.
+ */
+const SESSION_HEAD_BYTES = 65_536;
+/** Read the workspace a session was started in, without reading the whole log. */
+export function museSessionCwd(head) {
+    return head.match(/"cwd":"((?:[^"\\]|\\.)*)"/)?.[1]?.replace(/\\(.)/g, "$1") ?? null;
+}
+/**
+ * Meta Muse Code — the `muse` CLI (v1.3.0 verified).
+ *
+ * Everything below was confirmed against live sessions on 2026-09-22 rather
+ * than read out of `--help`, because the two disagree in the places that
+ * matter. Three findings shaped this file:
+ *
+ *   1. The input prompt `❯` stays on screen the entire time muse works, so the
+ *      ready pattern alone can never say "idle" — hence getBusyPattern().
+ *   2. Ctrl+C is QUIT (twice), not cancel. The TUI's own hint is "esc to
+ *      interrupt", and Escape is what stops a run. Wiring C-c to cancel would
+ *      have left every instance one stray keypress from death.
+ *   3. `--disable-approval` alone still stops at a workspace-trust dialog. It
+ *      needs `--trust-workspace` beside it to reach the prompt unattended.
+ */
+export class MuseBackend {
+    instanceDir;
+    binaryName = "muse";
+    binaryPath;
+    // Cached from buildCommand/writeConfig so getSessionId() (which takes no
+    // args) can match sessions against this instance's workspace.
+    workingDirectory;
+    constructor(instanceDir) {
+        this.instanceDir = instanceDir;
+        this.binaryPath = resolveBinary("muse");
+    }
+    buildCommand(config) {
+        this.workingDirectory = config.workingDirectory;
+        // `muse` on PATH is a launcher script that checks for a new release, may
+        // replace the binary underneath us, and records an update notice that the
+        // next start prints. A fleet agent can run for days; an update arriving
+        // mid-run would repaint the pane and swap the CLI. One year in seconds
+        // keeps the check quiet while staying inside the launcher's own numeric
+        // guard (a non-numeric value also disables it, but undocumented).
+        let cmd = `MUSE_UPDATE_INTERVAL_SECONDS=31536000 ${this.binaryPath}`;
+        // The daemon may prepare a localhost-only usage relay before spawning Muse.
+        // If relay preparation fails this remains unset and Muse connects directly;
+        // usage must never become a prerequisite for a working conversation.
+        if (config.museBaseUrl)
+            cmd += ` --base-url ${shellQuote(config.museBaseUrl)}`;
+        // Verified: `--disable-approval` on its own leaves the session parked on
+        // "Do you trust this workspace?" forever. Trust is a separate axis, so both
+        // flags are needed to reach the prompt unattended.
+        //
+        // NOT `--yolo`: that disables approval, trust AND the OS sandbox. The
+        // sandbox was measured to permit what an agent actually needs — writes in
+        // the workspace and to the temp dir, and outbound network through the proxy
+        // (curl to example.com returned 200) — so there is nothing to buy by
+        // switching it off, and a sandboxed shell is worth keeping.
+        if (config.skipPermissions !== false)
+            cmd += " --disable-approval --trust-workspace";
+        if (config.model) {
+            const model = validateModel(config.model);
+            warnIfModelMismatch("muse", model);
+            cmd += ` --model ${shellQuote(model)}`;
+        }
+        // muse accepts none|minimal|low|medium|high|xhigh|max|ultra; AgEnD's levels
+        // are a subset, so whatever the fleet holds is passed through unchanged.
+        if (config.effort)
+            cmd += ` --reasoning-effort ${shellQuote(config.effort)}`;
+        // Resume is a SUBCOMMAND, and root options may sit on either side of it
+        // (stated in `muse resume --help`, and verified: root flags + `resume <id>`
+        // launched into the prior conversation with the model flag applied).
+        // `resume --last` is workspace-scoped and would silently adopt a session the
+        // user started by hand in the same directory, so we resume the id we
+        // persisted and nothing else.
+        if (!config.skipResume) {
+            const sid = this.storedSessionId();
+            if (sid)
+                cmd += ` resume ${sid}`;
+        }
+        return cmd;
+    }
+    /** The daemon's persisted session id (written from getSessionId()), for resume. */
+    storedSessionId() {
+        try {
+            const sid = readFileSync(join(this.instanceDir, "session-id"), "utf-8").trim();
+            return SESSION_ID_RE.test(sid) ? sid : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Per-instance MCP key. Instance names can be CJK (persona channels), and a
+     * settings file shared by every instance needs keys that cannot collide, so a
+     * non-ASCII name becomes an ASCII slug plus a hash of the original.
+     */
+    mcpKey(mcpName, instanceName) {
+        const ascii = instanceName.replace(/[^\x20-\x7E]/g, "");
+        if (ascii === instanceName)
+            return `agend-${mcpName}-${instanceName}`;
+        const slug = ascii.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+        const hash = createHash("md5").update(instanceName).digest("hex").slice(0, 8);
+        return slug ? `agend-${mcpName}-${slug}-${hash}` : `agend-${mcpName}-${hash}`;
+    }
+    /** `$XDG_CONFIG_HOME/muse/settings.json`, else `~/.config/muse/settings.json`. */
+    settingsPath() {
+        const base = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+        return join(base, "muse", "settings.json");
+    }
+    writeConfig(config) {
+        this.workingDirectory = config.workingDirectory;
+        // Muse reads MCP servers from ONE file — the user-level settings.json. It
+        // has no project-level equivalent (checked: `muse init` scaffolds AGENTS.md
+        // and nothing else, and the binary documents a single `$CONFIG_DIR` path).
+        // So this writes into the user's own settings, which means two rules:
+        // every key we did not put there is preserved, and ours are namespaced per
+        // instance so instances sharing a machine cannot overwrite each other.
+        //
+        // Isolating this per instance would mean relocating XDG_CONFIG_HOME, which
+        // also moves auth.json — the user's login. Not worth doing blind; left as a
+        // follow-up for whoever needs per-instance muse credentials.
+        const settingsPath = this.settingsPath();
+        let root = {};
+        try {
+            root = JSON.parse(readFileSync(settingsPath, "utf-8"));
+        }
+        catch { /* new file */ }
+        if (typeof root.schema_version !== "number")
+            root.schema_version = 1;
+        const servers = (root.mcpServers ?? {});
+        // Drop our own stale entries whose wrapper script is gone (deleted instance,
+        // cleared instance dir). Never touch a key we did not write.
+        for (const [key, val] of Object.entries(servers)) {
+            if (!key.startsWith("agend-"))
+                continue;
+            const cmd = val?.command;
+            if (typeof cmd === "string" && !existsSync(cmd))
+                delete servers[key];
+        }
+        for (const [name, entry] of Object.entries(config.mcpServers)) {
+            const allEnv = { ...entry.env, AGEND_INSTANCE_NAME: config.instanceName };
+            // Same wrapper as grok/kiro. Two jobs: export the env explicitly rather
+            // than trusting the CLI to forward the entry's `env` block, and wait for
+            // the IPC socket to exist — a server that starts first would fail to
+            // connect and every fleet tool (reply/react/…) would be dead for the run.
+            const wrapperPath = join(this.instanceDir, `mcp-wrapper-${name}.sh`);
+            const envExports = Object.entries(allEnv)
+                .map(([k, v]) => `export ${k}='${String(v).replace(/'/g, "'\\''")}'`)
+                .join("\n");
+            // 0o700: the wrapper inlines sensitive env (tokens, socket paths).
+            writeFileSync(wrapperPath, `#!/bin/bash\n${envExports}\n# Wait for IPC socket to be ready (up to 10s)\nfor i in $(seq 1 20); do [ -S "$AGEND_SOCKET_PATH" ] && break; sleep 0.5; done\nexec ${entry.command} ${entry.args.map((a) => JSON.stringify(a)).join(" ")}\n`, { mode: 0o700 });
+            chmodSync(wrapperPath, 0o700);
+            // Entry shape per muse's own documentation: type/command/args/env/mode.
+            // "optional" so a server that fails to start degrades the session instead
+            // of stopping it.
+            servers[this.mcpKey(name, config.instanceName)] = {
+                type: "stdio",
+                command: wrapperPath,
+                args: [],
+                mode: "optional",
+            };
+        }
+        root.mcpServers = servers;
+        try {
+            mkdirSync(join(settingsPath, ".."), { recursive: true });
+            writeFileSync(settingsPath, JSON.stringify(root, null, 2));
+        }
+        catch { /* best effort — a muse without MCP still starts */ }
+        // `muse init` scaffolds AGENTS.md and the binary reads it as project rules,
+        // the same convention as codex and grok. Additive + idempotent via marker.
+        if (config.instructions) {
+            try {
+                appendWithMarker(join(config.workingDirectory, "AGENTS.md"), config.instanceName, config.instructions);
+            }
+            catch { /* best effort */ }
+        }
+    }
+    requiresDeliveryEnterRetry() {
+        // Measured, not inferred. An Enter that arrives in the same keystroke burst
+        // as the text is taken as a NEWLINE: `tmux send-keys "probe N" Enter`
+        // failed to submit three times out of three, and the drafts stacked up in
+        // the input box —
+        //
+        //   ❯ probe 1
+        //     probe 2
+        //     probe 3
+        //
+        // The damage is not a lost message but a merged one: the next Enter submits
+        // the whole draft as a single turn. The daemon's waitForPasteSettle already
+        // opens the gap muse needs (a paste followed by Enter a second later
+        // submitted every time, including mid-turn), so this is insurance against
+        // the case where the settle wait is blind and falls back to a fixed delay.
+        //
+        // Safe on every delivery, both preconditions verified live: a bare Enter is
+        // a no-op at an empty idle prompt, and a no-op mid-turn with empty input.
+        return true;
+    }
+    getReadyPattern() {
+        // The ready screen carries the `Muse Code <version>` header and an empty
+        // `❯` input row. Both survive scrollback, which is fine — this pattern only
+        // has to say "the TUI is up"; getBusyPattern() is what says "not now".
+        return /❯|Muse Code \d/m;
+    }
+    /**
+     * The working line, which is on screen only while muse is generating.
+     *
+     * Required for the same reason grok and claude-code needed one: the input box
+     * (and therefore `❯`) stays visible the whole time muse works, so the ready
+     * pattern is effectively constant-true and the instance would never be seen
+     * as busy — no hang detection, and a frozen CLI reported as idle.
+     *
+     * Sampled from a live run. The phase word changes (`Thinking`, `Working`,
+     * `Double checking`) and the leading glyph cycles (◇ ◆ ◈), so neither is the
+     * anchor. What every working frame has, and no idle frame does, is the
+     * interrupt hint muse prints beside the elapsed timer:
+     *
+     *   ◇ Thinking (2s · esc to interrupt)
+     *   ◆ Double checking (4s · esc to interrupt)
+     *
+     * Anchoring on the glyph would be wrong in a way that matters: completed
+     * output lines start with `◆ ` too (`◆ Panes split the dark screen`), so a
+     * glyph-anchored pattern would pin a finished instance in `working` forever.
+     */
+    getBusyPattern() {
+        return /\(\s*\d+(?:\.\d+)?s\s*·\s*esc to interrupt\s*\)/;
+    }
+    getErrorPatterns() {
+        // NOTE: an Escape-interrupted run prints "interrupting run" in the status
+        // bar. That is normal user-initiated behaviour, not an error — nothing here
+        // matches it, and nothing that does should be added.
+        return [
+            { pattern: /rate.?limit|too many requests|\b429\b/i, type: "rate_limit", action: "failover", message: "Muse rate limit reached" },
+            { pattern: /unauthorized|authentication (failed|error)|\b401\b|muse login/i, type: "auth_error", action: "pause", message: "Muse authentication error" },
+            { pattern: /quota|usage limit|out of credits/i, type: "quota", action: "notify", message: "Muse quota exhausted" },
+        ];
+    }
+    getStartupDialogs() {
+        return [
+            // Workspace trust. `--trust-workspace` normally prevents this from ever
+            // appearing; it is still handled because an instance configured with
+            // skip_permissions: false gets neither flag and would otherwise hang
+            // here forever. Verified layout: a two-row menu, option 1 preselected,
+            // "Use Up/Down or 1/2, then Enter."
+            {
+                pattern: /Do you trust this workspace\?/,
+                keys: ["1", "Enter"],
+                description: "Muse workspace trust — choose 'Trust and continue'",
+            },
+            // Login is BLOCKING and cannot be auto-dismissed — the user has to
+            // complete it. Empty keys mean the daemon sends nothing but keeps
+            // treating the screen as not-ready, so a login page is never mistaken
+            // for the idle prompt.
+            {
+                pattern: /muse login|Log in to (Meta|continue)|device code/i,
+                keys: [],
+                description: "Muse login — wait for the user to authenticate (no auto-dismiss)",
+            },
+        ];
+    }
+    getRuntimeDialogs() {
+        return [
+            // Net for a tool-approval prompt arriving despite --disable-approval (an
+            // enterprise policy can pin approval on). Muse's menus are numbered with
+            // the first option preselected, same shape as the trust dialog.
+            {
+                pattern: /Allow this (tool|command)|Approve this (tool|command)|1\s+(Allow|Approve)/i,
+                keys: ["1", "Enter"],
+                description: "Muse tool approval — allow",
+            },
+        ];
+    }
+    getContextUsage() {
+        // Muse reports context only inside `/status` ("98% left · 23.8K used /
+        // 1008K"), not on the persistent status bar, so there is nothing a passive
+        // reader can see between turns. Returning a stale or invented number would
+        // be worse than none.
+        return null;
+    }
+    // Muse usage is collected by the daemon-owned localhost relay in
+    // muse-usage-relay.ts.  Keeping this backend free of direct Meta requests is
+    // deliberate: the relay observes only response.subscription_usage frames and
+    // the model conversation remains byte-for-byte transparent.
+    getSessionId() {
+        // Sessions live at ~/.local/share/muse/sessions/<YYYY>/<MM>/<DD>/<uuid>/,
+        // filed by date rather than by workspace, so the workspace has to be read
+        // out of each session's own log (`route_facts` names the cwd near the top).
+        // Returns the most recently ACTIVE session started in this instance's
+        // directory, which is what the daemon persists for resume.
+        if (!this.workingDirectory)
+            return null;
+        try {
+            const root = join(homedir(), ".local", "share", "muse", "sessions");
+            let newestId = null;
+            let newestMtime = -1;
+            for (const sessionDir of museSessionDirs(root)) {
+                const name = sessionDir.slice(sessionDir.lastIndexOf("/") + 1);
+                if (!SESSION_ID_RE.test(name))
+                    continue;
+                let head;
+                try {
+                    const fd = readFileSync(join(sessionDir, "session.jsonl"), { encoding: "utf-8", flag: "r" });
+                    head = fd.slice(0, SESSION_HEAD_BYTES);
+                }
+                catch {
+                    continue;
+                }
+                if (museSessionCwd(head) !== this.workingDirectory)
+                    continue;
+                // Activity = latest inner-file mtime. The directory's own mtime does not
+                // move when a log is appended, and is misleadingly recent for a session
+                // that was only just created — it must not outrank a resumed older
+                // session whose log was written to seconds ago.
+                let activity = -1;
+                try {
+                    for (const f of readdirSync(sessionDir)) {
+                        try {
+                            const m = statSync(join(sessionDir, f)).mtimeMs;
+                            if (m > activity)
+                                activity = m;
+                        }
+                        catch { /* skip */ }
+                    }
+                }
+                catch { /* unreadable */ }
+                if (activity > newestMtime) {
+                    newestMtime = activity;
+                    newestId = name;
+                }
+            }
+            return newestId;
+        }
+        catch {
+            return null;
+        }
+    }
+    // `/quit` is muse's own "quit when idle". The key chord is Ctrl+C pressed
+    // TWICE ("Press Ctrl-C again to quit") — kept as the fallback, with the count
+    // the TUI actually requires.
+    getQuitCommand() { return "/quit"; }
+    getQuitKey() { return "C-c"; }
+    getQuitKeyPresses() { return 2; }
+    getCompactCommand() { return "/compact"; }
+    getClearCommand() { return "/clear"; }
+    /**
+     * Escape, not Ctrl+C. Verified both ways on a live session: Escape mid-run
+     * put "interrupting run" in the status bar and returned the prompt with the
+     * partial answer kept, while Ctrl+C armed the quit confirmation ("Press
+     * Ctrl-C again to quit"). Cancelling with C-c would leave every instance one
+     * stray keypress from exiting.
+     */
+    getCancelKey() { return "Escape"; }
+    // `/effort` is in the TUI command list, so a level change needs no restart.
+    getEffortStrategy() { return "runtime"; }
+    // muse also accepts none|minimal|ultra, which AgEnD has no level for; the
+    // canonical five map straight through.
+    getEffortLevels() { return ["low", "medium", "high", "xhigh", "max"]; }
+    // `/model` opens an arrow-key picker, not a one-shot command → restart.
+    getModelSwitchStrategy() { return "restart"; }
+    async listModels() {
+        // muse has no models subcommand (the command table is: resume, exec,
+        // config, export, trace, skills, plugins, sandbox, schema, serve,
+        // session-message, mcp, auth, login, logout, init). This set was read off
+        // the live `/model` picker; the `-contributor` variants are the same models
+        // with content sharing enabled, which the picker spells out.
+        return [
+            { id: "muse-spark-1.3", label: "muse-spark-1.3" },
+            { id: "muse-spark-1.3-contributor", label: "muse-spark-1.3-contributor (shares content)" },
+            { id: "muse-spark-1.2", label: "muse-spark-1.2" },
+            { id: "muse-spark-1.2-contributor", label: "muse-spark-1.2-contributor (shares content)" },
+        ];
+    }
+    async probeCLIEnv() {
+        const { probeCliVersion } = await import("./types.js");
+        // The selected model is the one thing muse persists where we can read it.
+        let currentModel;
+        try {
+            const settings = JSON.parse(readFileSync(this.settingsPath(), "utf-8"));
+            if (typeof settings.model === "string")
+                currentModel = settings.model;
+        }
+        catch { /* best effort */ }
+        return { version: probeCliVersion(this.binaryPath), models: await this.listModels(), currentModel };
+    }
+    cleanup(config) {
+        try {
+            const settingsPath = this.settingsPath();
+            const root = JSON.parse(readFileSync(settingsPath, "utf-8"));
+            if (root.mcpServers) {
+                for (const name of Object.keys(config.mcpServers)) {
+                    delete root.mcpServers[this.mcpKey(name, config.instanceName)];
+                }
+                writeFileSync(settingsPath, JSON.stringify(root, null, 2));
+            }
+        }
+        catch { /* best effort */ }
+        try {
+            removeMarker(join(config.workingDirectory, "AGENTS.md"), config.instanceName);
+        }
+        catch { /* best effort */ }
+    }
+}
+/** Every `<year>/<month>/<day>/<uuid>` directory under the session store. */
+export function museSessionDirs(root) {
+    const out = [];
+    const children = (dir) => {
+        try {
+            return readdirSync(dir);
+        }
+        catch {
+            return [];
+        }
+    };
+    for (const year of children(root)) {
+        if (!/^\d{4}$/.test(year))
+            continue;
+        for (const month of children(join(root, year))) {
+            for (const day of children(join(root, year, month))) {
+                for (const session of children(join(root, year, month, day))) {
+                    out.push(join(root, year, month, day, session));
+                }
+            }
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=muse.js.map

package/dist/backend/muse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"muse.js","sourceRoot":"","sources":["../../src/backend/muse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAuH,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAChN,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEnE,wFAAwF;AACxF,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,WAAW;IAOF;IANX,UAAU,GAAG,MAAM,CAAC;IACrB,UAAU,CAAS;IAC3B,yEAAyE;IACzE,8DAA8D;IACtD,gBAAgB,CAAU;IAElC,YAAoB,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;QACrC,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY,CAAC,MAAwB;QACnC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAEhD,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,GAAG,GAAG,yCAAyC,IAAI,CAAC,UAAU,EAAE,CAAC;QAErE,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,IAAI,MAAM,CAAC,WAAW;YAAE,GAAG,IAAI,eAAe,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAE/E,yEAAyE;QACzE,4EAA4E;QAC5E,mDAAmD;QACnD,EAAE;QACF,sEAAsE;QACtE,0EAA0E;QAC1E,4EAA4E;QAC5E,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,MAAM,CAAC,eAAe,KAAK,KAAK;YAAE,GAAG,IAAI,uCAAuC,CAAC;QAErF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1C,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,GAAG,IAAI,YAAY,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,IAAI,uBAAuB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAE7E,wEAAwE;QACxE,4EAA4E;QAC5E,qEAAqE;QACrE,6EAA6E;QAC7E,qEAAqE;QACrE,8BAA8B;QAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACnC,IAAI,GAAG;gBAAE,GAAG,IAAI,WAAW,GAAG,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mFAAmF;IAC3E,eAAe;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/E,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,OAAe,EAAE,YAAoB;QAClD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,YAAY;YAAE,OAAO,SAAS,OAAO,IAAI,YAAY,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,OAAO,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,OAAO,IAAI,IAAI,EAAE,CAAC;IAChF,CAAC;IAED,kFAAkF;IAC1E,YAAY;QAClB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,CAAC;IAED,WAAW,CAAC,MAAwB;QAClC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAEhD,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,sEAAsE;QACtE,2EAA2E;QAC3E,uEAAuE;QACvE,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QACxF,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;YAAE,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;QACnE,6EAA6E;QAC7E,6DAA6D;QAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACxC,MAAM,GAAG,GAAI,GAA+B,EAAE,OAAO,CAAC;YACtD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1E,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,0EAA0E;YAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,IAAI,KAAK,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;iBACpE,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,mEAAmE;YACnE,aAAa,CACX,WAAW,EACX,gBAAgB,UAAU,yIAAyI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAClP,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;YACF,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAE9B,wEAAwE;YACxE,0EAA0E;YAC1E,kBAAkB;YAClB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG;gBAChD,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;QAE/D,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACzG,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,0BAA0B;QACxB,4EAA4E;QAC5E,sEAAsE;QACtE,0EAA0E;QAC1E,kBAAkB;QAClB,EAAE;QACF,cAAc;QACd,cAAc;QACd,cAAc;QACd,EAAE;QACF,4EAA4E;QAC5E,4EAA4E;QAC5E,qEAAqE;QACrE,0EAA0E;QAC1E,2EAA2E;QAC3E,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;QACb,yEAAyE;QACzE,4EAA4E;QAC5E,uEAAuE;QACvE,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,cAAc;QACZ,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IAED,gBAAgB;QACd,0EAA0E;QAC1E,4EAA4E;QAC5E,qDAAqD;QACrD,OAAO;YACL,EAAE,OAAO,EAAE,wCAAwC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,yBAAyB,EAAE;YACjI,EAAE,OAAO,EAAE,gEAAgE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE;YACxJ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE;SACnH,CAAC;IACJ,CAAC;IAED,iBAAiB;QACf,OAAO;YACL,wEAAwE;YACxE,qEAAqE;YACrE,qEAAqE;YACrE,uEAAuE;YACvE,oCAAoC;YACpC;gBACE,OAAO,EAAE,+BAA+B;gBACxC,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC;gBACpB,WAAW,EAAE,oDAAoD;aAClE;YACD,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,uBAAuB;YACvB;gBACE,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,EAAE;gBACR,WAAW,EAAE,kEAAkE;aAChF;SACF,CAAC;IACJ,CAAC;IAED,iBAAiB;QACf,OAAO;YACL,yEAAyE;YACzE,yEAAyE;YACzE,gEAAgE;YAChE;gBACE,OAAO,EAAE,4EAA4E;gBACrF,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC;gBACpB,WAAW,EAAE,4BAA4B;aAC1C;SACF,CAAC;IACJ,CAAC;IAED,eAAe;QACb,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,sBAAsB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iEAAiE;IACjE,6EAA6E;IAC7E,6EAA6E;IAC7E,4DAA4D;IAE5D,YAAY;QACV,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACpE,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;YACrB,KAAK,MAAM,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACxC,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC7F,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACrB,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,gBAAgB;oBAAE,SAAS;gBAC7D,yEAAyE;gBACzE,wEAAwE;gBACxE,mEAAmE;gBACnE,gDAAgD;gBAChD,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;gBAClB,IAAI,CAAC;oBACH,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;wBACxC,IAAI,CAAC;4BAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;4BAAC,IAAI,CAAC,GAAG,QAAQ;gCAAE,QAAQ,GAAG,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;oBAC/G,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;gBAC5B,IAAI,QAAQ,GAAG,WAAW,EAAE,CAAC;oBAAC,WAAW,GAAG,QAAQ,CAAC;oBAAC,QAAQ,GAAG,IAAI,CAAC;gBAAC,CAAC;YAC1E,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,6BAA6B;IAC7B,cAAc,KAAoB,OAAO,OAAO,CAAC,CAAC,CAAC;IACnD,UAAU,KAAa,OAAO,KAAK,CAAC,CAAC,CAAC;IACtC,iBAAiB,KAAa,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzC,iBAAiB,KAAa,OAAO,UAAU,CAAC,CAAC,CAAC;IAClD,eAAe,KAAoB,OAAO,QAAQ,CAAC,CAAC,CAAC;IAErD;;;;;;OAMG;IACH,YAAY,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;IAE3C,4EAA4E;IAC5E,iBAAiB,KAA4C,OAAO,SAAS,CAAC,CAAC,CAAC;IAChF,0EAA0E;IAC1E,uCAAuC;IACvC,eAAe,KAAe,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjF,wEAAwE;IACxE,sBAAsB,KAA4B,OAAO,SAAS,CAAC,CAAC,CAAC;IAErE,KAAK,CAAC,UAAU;QACd,qEAAqE;QACrE,kEAAkE;QAClE,0EAA0E;QAC1E,4EAA4E;QAC5E,6DAA6D;QAC7D,OAAO;YACL,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACjD,EAAE,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,6CAA6C,EAAE;YAC1F,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACjD,EAAE,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE,6CAA6C,EAAE;SAC3F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QACvD,0EAA0E;QAC1E,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YACxE,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBAAE,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC;IACtG,CAAC;IAED,OAAO,CAAC,MAAwB;QAC9B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAY,EAAE;QACzC,IAAI,CAAC;YAAC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACvD,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/backend/types.d.ts

@@ -36,6 +36,8 @@ export interface CliBackendConfig {
     agentPort?: number;
     /** Per-backend options merged from fleet defaults + instance config (e.g. { provider: "glm" }). */
     backendOptions?: Record<string, unknown>;
+    /** Daemon-owned localhost Muse usage relay, prepared before spawn. */
+    museBaseUrl?: string;
 }
 /** Action to take when an error pattern is detected in PTY output. */
 export type ErrorActionType = "notify" | "failover" | "restart" | "pause";
@@ -52,6 +54,8 @@ export interface ErrorPattern {
      * when the match can't be re-derived. Receives the LAST match in the pane,
      * i.e. the most recent occurrence. */
     formatMessage?: (match: RegExpMatchArray) => string;
+    /** Run the backend's live quota check before surfacing a quota notice. */
+    verifyQuota?: boolean;
     /** Skip the 5-min per-type notification cooldown so every occurrence notifies
      * (e.g. Kiro "Response timed out" — each timeout should reach the user). */
     skipCooldown?: boolean;
@@ -150,6 +154,33 @@ export interface RuntimeDialog {
      * ignored.
      */
     holdOnly?: boolean;
+    /**
+     * This dialog owns stdin while it is visible.  Unlike a generic runtime
+     * dialog, the daemon exposes the state separately so the pane monitor can
+     * suppress false stuck/auto-pause decisions while a CLI is waiting for a
+     * human choice.
+     */
+    inputBlocked?: boolean;
+    /**
+     * The daemon may re-read the pane under the write lock after sending these
+     * keys.  This is intentionally opt-in: most dialogs are fire-and-forget,
+     * while safety-critical dialogs must prove that the prompt disappeared
+     * before any follow-up system message is submitted.
+     */
+    verifyAfterKeys?: boolean;
+    /**
+     * Send the notice only after {@link verifyAfterKeys} observes this dialog
+     * gone.  The text is code-owned and must never include command arguments.
+     */
+    postDismissNotice?: {
+        text: string;
+        label: string;
+    };
+    /**
+     * A key used only for the daemon's generation fence.  Implementations must
+     * return a stable, non-secret value; never include pane contents or tokens.
+     */
+    autoResolutionKey?: string;
 }
 /**
  * A self-clearing TUI phase during which an input row may be visible but Enter
@@ -284,6 +315,19 @@ export interface CliBackend {
      * false.
      */
     hasPeriodicPaneRedraw?(): boolean;
+    /**
+     * Positive, structural proof that a periodically-redrawing TUI is parked at
+     * its live input prompt.  This is deliberately stronger than
+     * `getReadyPattern()`: many TUIs leave their header, context meter and even
+     * input chrome visible while a turn is still running.  The daemon may use
+     * two consecutive positive captures to recover working -> idle even when
+     * cosmetic animation prevents the ordinary silence debounce from firing.
+     *
+     * Return false for an unfamiliar layout.  False negatives merely retain the
+     * existing working state; false positives can retire Cancel and admit a new
+     * delivery into a busy CLI.
+     */
+    isPeriodicRedrawIdlePane?(pane: string): boolean;
     /** Build the shell command string to launch the CLI in a tmux window. */
     buildCommand(config: CliBackendConfig): string;
     /** Write all config files the CLI needs before launch. */
@@ -432,6 +476,16 @@ export interface CliBackend {
         currentModel?: string;
         models: ModelOption[];
     }>;
+    /**
+     * Ask the CLI to refresh its OWN model catalog before the next probe reads it.
+     *
+     * For a backend whose probe only reads a file the CLI maintains (codex's
+     * models_cache.json), re-reading that file is not a refresh: the list is as
+     * old as the last time the CLI itself fetched it. This makes the CLI fetch.
+     * Called only by an explicit refresh — never by the startup or /model probe —
+     * and it may throw; the caller reports a failed refresh and keeps the old list.
+     */
+    refreshModelCatalog?(): Promise<void>;
 }
 export declare function resolveBinary(name: string, fallbackDirs?: readonly string[]): string;
 /**

package/dist/backend/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAsG1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,GAAG,yBAAyB,CAAC;AAEnG,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvJ,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AA+VD;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC;QACrC,gBAAgB;QAChB,UAAU;QACV,MAAM;KACP,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEjC,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAEvD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAgC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,YAAY,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,wDAAwD;AACvE,CAAC;AAED;;;;;;GAMG;AACH,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,sBAAsB,GAA2B;IACrD,aAAa,EAAE,kDAAkD;IACjE,UAAU,EAAE,iEAAiE;IAC7E,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,GAAG,EAAG,iDAAiD;IACnE,0EAA0E;IAC1E,8DAA8D;IAC9D,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,QAAQ,EAAG,gDAAgD;CACpE,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,KAAa;IAClE,MAAM,OAAO,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAa;IACpE,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,uCAAuC,WAAW,0BAA0B,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA0G1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,GAAG,yBAAyB,CAAC;AAEnG,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvJ,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAgZD;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG;QACX,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC;QACrC,gBAAgB;QAChB,UAAU;QACV,MAAM;KACP,CAAC;IAEF,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEjC,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAEvD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,YAAgC;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAExD,KAAK,MAAM,GAAG,IAAI,YAAY,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,SAAS,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,wDAAwD;AACvE,CAAC;AAED;;;;;;GAMG;AACH,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,mDAAmD,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,sBAAsB,GAA2B;IACrD,aAAa,EAAE,kDAAkD;IACjE,UAAU,EAAE,iEAAiE;IAC7E,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,GAAG,EAAG,iDAAiD;IACnE,0EAA0E;IAC1E,8DAA8D;IAC9D,aAAa,EAAE,2BAA2B;IAC1C,MAAM,EAAE,QAAQ,EAAG,gDAAgD;CACpE,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,KAAa;IAClE,MAAM,OAAO,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,KAAa;IACpE,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,uCAAuC,WAAW,0BAA0B,CAAC,CAAC;IACpH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/channel/access-manager.d.ts

@@ -4,6 +4,12 @@ export declare class AccessManager {
     private statePath;
     private state;
     private failedAttempts;
+    /**
+     * The mode that came out of the state file, or undefined when the file had
+     * none. Kept separately because the constructor fills `state.mode` in from
+     * the config when the file is silent, after which the two are indistinguishable.
+     */
+    private persistedMode?;
     constructor(config: AccessConfig, statePath: string);
     private persist;
     private pruneExpired;
@@ -13,6 +19,20 @@ export declare class AccessManager {
     confirmCode(code: string, callerUserId?: string): boolean;
     setMode(mode: "pairing" | "locked" | "open"): void;
     getMode(): "pairing" | "locked" | "open";
+    /**
+     * The configured mode that the state file is overriding, or null when they
+     * agree or nothing was persisted.
+     *
+     * State wins on purpose — a pairing that happened at runtime must survive a
+     * fleet restart — but the first `persist()` freezes whatever the mode was at
+     * the time, and from then on editing `access.mode` in fleet.yaml changes
+     * nothing. Without this, that reads as "my config edit did nothing" with no
+     * way to find out why.
+     *
+     * Reported rather than logged from here: the CLI also builds an AccessManager
+     * with a synthetic config, where a mismatch means nothing.
+     */
+    overriddenConfigMode(): "pairing" | "locked" | "open" | null;
     getAllowedUsers(): (number | string)[];
     removeUser(userId: number | string): boolean;
 }

package/dist/channel/access-manager.js

@@ -5,6 +5,12 @@ export class AccessManager {
     statePath;
     state;
     failedAttempts = new Map();
+    /**
+     * The mode that came out of the state file, or undefined when the file had
+     * none. Kept separately because the constructor fills `state.mode` in from
+     * the config when the file is silent, after which the two are indistinguishable.
+     */
+    persistedMode;
     constructor(config, statePath) {
         this.config = config;
         this.statePath = statePath;
@@ -13,6 +19,7 @@ export class AccessManager {
             try {
                 const raw = readFileSync(statePath, "utf8");
                 const saved = JSON.parse(raw);
+                this.persistedMode = saved.mode;
                 this.state = {
                     mode: saved.mode,
                     allowed_users: saved.allowed_users ?? [],
@@ -138,6 +145,24 @@ export class AccessManager {
     getMode() {
         return this.state.mode ?? this.config.mode;
     }
+    /**
+     * The configured mode that the state file is overriding, or null when they
+     * agree or nothing was persisted.
+     *
+     * State wins on purpose — a pairing that happened at runtime must survive a
+     * fleet restart — but the first `persist()` freezes whatever the mode was at
+     * the time, and from then on editing `access.mode` in fleet.yaml changes
+     * nothing. Without this, that reads as "my config edit did nothing" with no
+     * way to find out why.
+     *
+     * Reported rather than logged from here: the CLI also builds an AccessManager
+     * with a synthetic config, where a mismatch means nothing.
+     */
+    overriddenConfigMode() {
+        if (this.persistedMode === undefined)
+            return null;
+        return this.persistedMode === this.config.mode ? null : this.config.mode;
+    }
     getAllowedUsers() {
         return [...this.state.allowed_users];
     }