@telora/daemon 0.20.78 → 0.20.95

package/dist/templates/agents-md.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents-md.d.ts","sourceRoot":"","sources":["../../src/templates/agents-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAaH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AA4BD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,2BAA2B,GAAG,MAAM,CAcvE"}
+{"version":3,"file":"agents-md.d.ts","sourceRoot":"","sources":["../../src/templates/agents-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAaH,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AACnE,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AA4BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAWhD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,2BAA2B,GAAG,MAAM,CAcvE"}

package/dist/templates/agents-md.js

@@ -52,6 +52,32 @@ function renderConnectionInvariant(inv) {
         `write it").\n` +
         `\n`);
 }
+/**
+ * Render the header-LESS Codex operator seed block: the shared seed prose only,
+ * with NO per-product connection-invariant header.
+ *
+ * Used for the workstation-shared carriers a Codex session reads from the
+ * operator's own `~/.codex` -- the interactive operator AND daemon-spawned
+ * HOSTED Codex agents (whose ChatGPT-account auth lives in `~/.codex/auth.json`,
+ * so their CODEX_HOME cannot be redirected to a per-product isolated home). One
+ * workstation hosts many products, so a single shared file cannot bake a correct
+ * per-product header for more than one; the identity is resolved on demand via
+ * `telora-daemon status` instead. This is the accepted downgrade of Codex having
+ * no SessionStart hook. The per-product baked header (`renderAgentsMd`) is used
+ * only where the destination is genuinely per-product (the isolated CODEX_HOME
+ * of a local-model Codex product).
+ */
+export function renderCodexOperatorSeed() {
+    const body = SEED_BODY.replace(SEED_MCP_REGISTRATION_SENTENCE, CODEX_MCP_REGISTRATION_SENTENCE);
+    const header = `## Telora connection\n` +
+        `\n` +
+        `This workstation is connected to Telora. This file is workstation-shared\n` +
+        `across every product on the host, so it carries no per-product identity;\n` +
+        `resolve the current connection (URL / org / product) on demand with\n` +
+        `\`telora-daemon status\`.\n` +
+        `\n`;
+    return `${TELORA_AGENTS_MD_BEGIN}\n${header}${body}${TELORA_AGENTS_MD_END}\n`;
+}
 /**
  * Render a fresh-repo AGENTS.md seed block.
  *

package/dist/templates/agents-md.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-md.js","sourceRoot":"","sources":["../../src/templates/agents-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,+BAA+B,GACnC,gEAAgE,CAAC;AAEnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AA0B/D;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,GAAgC;IACjE,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAC/F,OAAO,CACL,wBAAwB;QACxB,IAAI;QACJ,4EAA4E;QAC5E,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAI;QACJ,iBAAiB,GAAG,CAAC,SAAS,IAAI;QAClC,mBAAmB,GAAG,CAAC,cAAc,IAAI;QACzC,cAAc,YAAY,IAAI;QAC9B,IAAI;QACJ,8EAA8E;QAC9E,+EAA+E;QAC/E,2EAA2E;QAC3E,eAAe;QACf,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAgC;IAC7D,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAC5B,8BAA8B,EAC9B,GAAG,CAAC,uBAAuB,IAAI,+BAA+B,CAC/D,CAAC;IACF,MAAM,KAAK,GACT,GAAG,sBAAsB,IAAI;QAC7B,GAAG,yBAAyB,CAAC,GAAG,CAAC,EAAE;QACnC,GAAG,IAAI,EAAE;QACT,GAAG,oBAAoB,IAAI,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"agents-md.js","sourceRoot":"","sources":["../../src/templates/agents-md.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,+BAA+B,GACnC,gEAAgE,CAAC;AAEnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AA0B/D;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,GAAgC;IACjE,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAC/F,OAAO,CACL,wBAAwB;QACxB,IAAI;QACJ,4EAA4E;QAC5E,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAI;QACJ,iBAAiB,GAAG,CAAC,SAAS,IAAI;QAClC,mBAAmB,GAAG,CAAC,cAAc,IAAI;QACzC,cAAc,YAAY,IAAI;QAC9B,IAAI;QACJ,8EAA8E;QAC9E,+EAA+E;QAC/E,2EAA2E;QAC3E,eAAe;QACf,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,8BAA8B,EAAE,+BAA+B,CAAC,CAAC;IAChG,MAAM,MAAM,GACV,wBAAwB;QACxB,IAAI;QACJ,4EAA4E;QAC5E,4EAA4E;QAC5E,uEAAuE;QACvE,6BAA6B;QAC7B,IAAI,CAAC;IACP,OAAO,GAAG,sBAAsB,KAAK,MAAM,GAAG,IAAI,GAAG,oBAAoB,IAAI,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAgC;IAC7D,0EAA0E;IAC1E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAC5B,8BAA8B,EAC9B,GAAG,CAAC,uBAAuB,IAAI,+BAA+B,CAC/D,CAAC;IACF,MAAM,KAAK,GACT,GAAG,sBAAsB,IAAI;QAC7B,GAAG,yBAAyB,CAAC,GAAG,CAAC,EAAE;QACnC,GAAG,IAAI,EAAE;QACT,GAAG,oBAAoB,IAAI,CAAC;IAC9B,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/templates/claude-settings.d.ts

@@ -14,6 +14,23 @@
  * settings schema): `permissions.allow` is a list of tool patterns. MCP
  * tool patterns follow the form `mcp__<server-name>__<tool-name>`.
  */
+/** A single Claude Code hook command entry. */
+export interface ClaudeHookCommand {
+    type: 'command';
+    command: string;
+}
+/** A hook matcher group: a set of commands run for a matched event. */
+export interface ClaudeHookMatcher {
+    hooks: ClaudeHookCommand[];
+}
+/**
+ * The subset of the Claude Code `hooks` map Telora installs. Only `SessionStart`
+ * is seeded (it carries the workstation seed via `telora-daemon session-state`);
+ * all other hook events are user-owned and left untouched by the merge.
+ */
+export interface TeloraHooks {
+    SessionStart?: ClaudeHookMatcher[];
+}
 export interface TeloraSettingsTemplate {
     permissions: {
         allow: string[];
@@ -26,7 +43,28 @@ export interface TeloraSettingsTemplate {
          */
         deny?: string[];
     };
+    /**
+     * Seeded hooks. Carries the SessionStart hook that runs `telora-daemon
+     * session-state`, which since the seed became workstation context (not a
+     * repo file) is the carrier that delivers the Telora workstation seed to the
+     * session at open. Present on every writable/read-only seed.
+     */
+    hooks?: TeloraHooks;
 }
+/**
+ * The SessionStart hook command. Resolves the `telora-daemon` binary from the
+ * project's local `node_modules/.bin` first (the pinned install), falling back
+ * to whatever is on PATH, and no-ops cleanly (`|| true`) when neither is present
+ * so a repo without the daemon installed never has session start blocked.
+ *
+ * `session-state` emits the connection invariants AND the workstation seed to
+ * stdout, which the SessionStart hook contract feeds into the session as
+ * additionalContext -- so newly shipped Telora directives reach a connected
+ * workstation by updating the daemon binary, with no file on disk changing.
+ */
+export declare const TELORA_SESSION_START_HOOK_COMMAND: string;
+/** Build the seeded SessionStart hook group. */
+export declare function buildSessionStartHooks(): TeloraHooks;
 /**
  * Write-shaped tool denials for a read-only audit focus.
  *
@@ -63,7 +101,12 @@ export declare function buildClaudeSettings({ readOnly }?: {
  * - `permissions.deny`: same union semantics. Only written when the seed (or
  *   the existing file) carries deny entries -- a writable seed against a
  *   deny-free existing file leaves no `deny` key.
- * - All other top-level keys: untouched. We only own the permissions list.
+ * - `hooks.SessionStart`: union of the user's matcher groups with the seed's,
+ *   deduplicated by command string -- a re-merge never appends a second copy of
+ *   our SessionStart command. All OTHER hook events (PreToolUse, Stop, ...) are
+ *   left exactly as the user had them.
+ * - All other top-level keys: untouched. We only own the permissions list and
+ *   the SessionStart hook.
  */
 export declare function mergeClaudeSettings(existing: Record<string, unknown> | null, seed: TeloraSettingsTemplate): Record<string, unknown>;
 //# sourceMappingURL=claude-settings.d.ts.map

package/dist/templates/claude-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-settings.d.ts","sourceRoot":"","sources":["../../src/templates/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB;;;;;;WAMG;QACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH;AAqCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAiBhD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,QAAQ,EAAE,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACxC,sBAAsB,CAOxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACxC,IAAI,EAAE,sBAAsB,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkCzB"}
+{"version":3,"file":"claude-settings.d.ts","sourceRoot":"","sources":["../../src/templates/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE;QACX,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB;;;;;;WAMG;QACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iCAAiC,QAGG,CAAC;AAElD,gDAAgD;AAChD,wBAAgB,sBAAsB,IAAI,WAAW,CAMpD;AAqCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAiBhD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,QAAQ,EAAE,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACxC,sBAAsB,CAQxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACxC,IAAI,EAAE,sBAAsB,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqCzB"}

package/dist/templates/claude-settings.js

@@ -14,6 +14,28 @@
  * settings schema): `permissions.allow` is a list of tool patterns. MCP
  * tool patterns follow the form `mcp__<server-name>__<tool-name>`.
  */
+/**
+ * The SessionStart hook command. Resolves the `telora-daemon` binary from the
+ * project's local `node_modules/.bin` first (the pinned install), falling back
+ * to whatever is on PATH, and no-ops cleanly (`|| true`) when neither is present
+ * so a repo without the daemon installed never has session start blocked.
+ *
+ * `session-state` emits the connection invariants AND the workstation seed to
+ * stdout, which the SessionStart hook contract feeds into the session as
+ * additionalContext -- so newly shipped Telora directives reach a connected
+ * workstation by updating the daemon binary, with no file on disk changing.
+ */
+export const TELORA_SESSION_START_HOOK_COMMAND = 'bin="${CLAUDE_PROJECT_DIR:-.}/node_modules/.bin/telora-daemon"; ' +
+    '[ -x "$bin" ] || bin="$(command -v telora-daemon)"; ' +
+    '[ -n "$bin" ] && "$bin" session-state || true';
+/** Build the seeded SessionStart hook group. */
+export function buildSessionStartHooks() {
+    return {
+        SessionStart: [
+            { hooks: [{ type: 'command', command: TELORA_SESSION_START_HOOK_COMMAND }] },
+        ],
+    };
+}
 /**
  * Routine MCP tool calls expected during a normal Telora session.
  *
@@ -93,6 +115,7 @@ export function buildClaudeSettings({ readOnly } = {}) {
             allow: [...TELORA_MCP_ALLOWLIST],
             ...(readOnly ? { deny: buildReadOnlyDenyList() } : {}),
         },
+        hooks: buildSessionStartHooks(),
     };
 }
 /**
@@ -106,7 +129,12 @@ export function buildClaudeSettings({ readOnly } = {}) {
  * - `permissions.deny`: same union semantics. Only written when the seed (or
  *   the existing file) carries deny entries -- a writable seed against a
  *   deny-free existing file leaves no `deny` key.
- * - All other top-level keys: untouched. We only own the permissions list.
+ * - `hooks.SessionStart`: union of the user's matcher groups with the seed's,
+ *   deduplicated by command string -- a re-merge never appends a second copy of
+ *   our SessionStart command. All OTHER hook events (PreToolUse, Stop, ...) are
+ *   left exactly as the user had them.
+ * - All other top-level keys: untouched. We only own the permissions list and
+ *   the SessionStart hook.
  */
 export function mergeClaudeSettings(existing, seed) {
     const out = existing && typeof existing === 'object' ? { ...existing } : {};
@@ -134,6 +162,50 @@ export function mergeClaudeSettings(existing, seed) {
         // against a deny-free existing file must not introduce an empty deny key.
         ...(mergedDeny.length > 0 ? { deny: mergedDeny } : {}),
     };
+    const mergedHooks = mergeSessionStartHooks(out.hooks, seed.hooks);
+    if (mergedHooks)
+        out.hooks = mergedHooks;
     return out;
 }
+/**
+ * Merge the seed's SessionStart hook into an existing `hooks` map.
+ *
+ * - Every existing hook event is preserved verbatim.
+ * - The seed's SessionStart matcher groups are appended to any the user already
+ *   has, skipping a group whose command already appears (so a re-merge is a
+ *   no-op). Returns null only when there is nothing to write (no seed hooks and
+ *   no existing hooks), so a settings file that never had hooks stays clean.
+ */
+function mergeSessionStartHooks(existingHooks, seedHooks) {
+    const existing = existingHooks && typeof existingHooks === 'object' && !Array.isArray(existingHooks)
+        ? { ...existingHooks }
+        : {};
+    const seedGroups = seedHooks?.SessionStart ?? [];
+    if (seedGroups.length === 0) {
+        return Object.keys(existing).length > 0 ? existing : null;
+    }
+    const existingGroups = Array.isArray(existing.SessionStart)
+        ? [...existing.SessionStart]
+        : [];
+    const commandOf = (group) => {
+        if (!group || typeof group !== 'object')
+            return [];
+        const hooks = group.hooks;
+        if (!Array.isArray(hooks))
+            return [];
+        return hooks
+            .map((h) => (h && typeof h === 'object' ? h.command : undefined))
+            .filter((c) => typeof c === 'string');
+    };
+    const present = new Set(existingGroups.flatMap(commandOf));
+    for (const group of seedGroups) {
+        const cmds = commandOf(group);
+        if (cmds.some((c) => present.has(c)))
+            continue;
+        existingGroups.push(group);
+        cmds.forEach((c) => present.add(c));
+    }
+    existing.SessionStart = existingGroups;
+    return existing;
+}
 //# sourceMappingURL=claude-settings.js.map

package/dist/templates/claude-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-settings.js","sourceRoot":"","sources":["../../src/templates/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgBH;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG;IAC3B,WAAW;IACX,sCAAsC;IACtC,4CAA4C;IAC5C,+CAA+C;IAC/C,4CAA4C;IAC5C,qBAAqB;IACrB,0CAA0C;IAC1C,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,8CAA8C;IAC9C,gDAAgD;IAChD,yCAAyC;IACzC,+CAA+C;IAC/C,wBAAwB;IACxB,4CAA4C;IAC5C,4CAA4C;IAC5C,0CAA0C;IAC1C,2CAA2C;IAC3C,uCAAuC;IACvC,oCAAoC;IACpC,2CAA2C;IAC3C,uCAAuC;CACxC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,OAAO;QACP,MAAM;QACN,cAAc;QACd,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,kBAAkB;QAClB,iBAAiB;QACjB,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAE,QAAQ,KAA6B,EAAE;IAEzC,OAAO;QACL,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,GAAG,oBAAoB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAwC,EACxC,IAA4B;IAE5B,MAAM,GAAG,GACP,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,MAAM,mBAAmB,GACtB,GAAG,CAAC,WAA+D,IAAI,EAAE,CAAC;IAE7E,MAAM,SAAS,GAAG,CAAC,YAAqB,EAAE,QAA2B,EAAY,EAAE;QACjF,MAAM,IAAI,GAAa,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAChD,CAAC,CAAE,YAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/E,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAEpF,GAAG,CAAC,WAAW,GAAG;QAChB,GAAG,CAAC,OAAO,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,EAAE,WAAW;QAClB,sEAAsE;QACtE,0EAA0E;QAC1E,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"claude-settings.js","sourceRoot":"","sources":["../../src/templates/claude-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA2CH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,kEAAkE;IAClE,sDAAsD;IACtD,+CAA+C,CAAC;AAElD,gDAAgD;AAChD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,YAAY,EAAE;YACZ,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,EAAE;SAC7E;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG;IAC3B,WAAW;IACX,sCAAsC;IACtC,4CAA4C;IAC5C,+CAA+C;IAC/C,4CAA4C;IAC5C,qBAAqB;IACrB,0CAA0C;IAC1C,4CAA4C;IAC5C,+CAA+C;IAC/C,+CAA+C;IAC/C,8CAA8C;IAC9C,8CAA8C;IAC9C,gDAAgD;IAChD,yCAAyC;IACzC,+CAA+C;IAC/C,wBAAwB;IACxB,4CAA4C;IAC5C,4CAA4C;IAC5C,0CAA0C;IAC1C,2CAA2C;IAC3C,uCAAuC;IACvC,oCAAoC;IACpC,2CAA2C;IAC3C,uCAAuC;CACxC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,OAAO;QACP,MAAM;QACN,cAAc;QACd,WAAW;QACX,YAAY;QACZ,oBAAoB;QACpB,kBAAkB;QAClB,iBAAiB;QACjB,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAE,QAAQ,KAA6B,EAAE;IAEzC,OAAO;QACL,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,GAAG,oBAAoB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,KAAK,EAAE,sBAAsB,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAwC,EACxC,IAA4B;IAE5B,MAAM,GAAG,GACP,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElE,MAAM,mBAAmB,GACtB,GAAG,CAAC,WAA+D,IAAI,EAAE,CAAC;IAE7E,MAAM,SAAS,GAAG,CAAC,YAAqB,EAAE,QAA2B,EAAY,EAAE;QACjF,MAAM,IAAI,GAAa,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAChD,CAAC,CAAE,YAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/E,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,SAAS,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,SAAS,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAEpF,GAAG,CAAC,WAAW,GAAG;QAChB,GAAG,CAAC,OAAO,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,EAAE,WAAW;QAClB,sEAAsE;QACtE,0EAA0E;QAC1E,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IAEF,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,WAAW;QAAE,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC;IAEzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAC7B,aAAsB,EACtB,SAAkC;IAElC,MAAM,QAAQ,GACZ,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QACjF,CAAC,CAAC,EAAE,GAAI,aAAyC,EAAE;QACnD,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,UAAU,GAAG,SAAS,EAAE,YAAY,IAAI,EAAE,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,MAAM,cAAc,GAAc,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;QACpE,CAAC,CAAC,CAAC,GAAI,QAAQ,CAAC,YAA0B,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,SAAS,GAAG,CAAC,KAAc,EAAY,EAAE;QAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnD,MAAM,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAA2B,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;aAC3F,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAE3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/C,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,QAAQ,CAAC,YAAY,GAAG,cAAc,CAAC;IACvC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/unified-shell-provisioning.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Boot-time per-product provisioning for the unified daemon shell.
+ *
+ * Every function here answers the same question: "connect seeds this once --
+ * what keeps it current on the daemon's update cadence?" Each walks
+ * `config.base.products` directly, is idempotent (no write when already
+ * current, so an unchanged repo sees no git churn), and is per-product
+ * best-effort -- one repo's unreadable or unwritable path must never abort the
+ * daemon or the remaining products.
+ *
+ * `telora-daemon update` is covered by construction: update re-execs the
+ * daemon, so an updating workstation necessarily runs this whole pass.
+ *
+ * Called from `runUnifiedDaemon` (`unified-shell.ts`) in a load-bearing order --
+ * see `refreshClaudeSettingsForProducts` for the one ordering constraint that
+ * is a correctness requirement rather than a preference.
+ */
+import type { UnifiedConfig } from '@telora/daemon-core';
+/**
+ * Refresh `.mcp.json` in each configured product's repo so Claude Code's
+ * MCP invocation always points at the daemon's currently-installed
+ * `@telora/mcp-products`. Idempotent: writes the same bytes if nothing
+ * has changed. All failures are warnings -- a missing or unwritable repo
+ * path must not block the daemon.
+ */
+export declare function refreshMcpConfigsForProducts(config: UnifiedConfig): void;
+/**
+ * Refresh `.claude/settings.json` in each configured product's repo so the
+ * SessionStart seed hook (which carries the Claude workstation seed at session
+ * open) reaches EVERY connected repo -- not only newly-connected ones.
+ *
+ * `.claude/settings.json` is otherwise written at connect time only
+ * (writeOrMergeClaudeSettings, sole call site in connect scaffolding). Without
+ * this boot-cadence refresh, an already-connected repo would never receive the
+ * hook, and once the repo-root CLAUDE.md file carrier is withdrawn that repo
+ * would carry NO seed at all -- silently. This is the exact analog of
+ * `refreshMcpConfigsForProducts`: "connect seeds it once, this keeps it current
+ * on the daemon's update cadence." It walks `config.base.products` directly, so
+ * it reaches every product in the local daemon.json regardless of which
+ * workstation claims it; `telora-daemon update` re-execs, so an updating
+ * workstation necessarily runs this pass.
+ *
+ * CRITICAL ORDERING (runUnifiedDaemon): this MUST run BEFORE the CLAUDE.md
+ * retirement (`scaffoldProductsAtBoot`), so a workstation cannot reach the file
+ * withdrawal without having just installed the hook carrier in the same boot.
+ *
+ * Idempotent (writeOrMergeClaudeSettings no-writes when unchanged) and
+ * per-product best-effort: one repo's unwritable settings must not abort the rest.
+ */
+export declare function refreshClaudeSettingsForProducts(config: UnifiedConfig): void;
+/**
+ * Boot-time self-heal of every configured product's directory. Routes each
+ * product through the single idempotent `scaffoldProductDirectory` -- the exact
+ * same scaffolder the SIGHUP hot-reload handler calls for newly-added products
+ * -- so there is ONE scaffold implementation shared by both entry points.
+ *
+ * For each product this (idempotently):
+ *   - Refreshes the delimited `<!-- BEGIN/END TELORA SEED -->` block in the
+ *     repo's `CLAUDE.md` to the daemon's installed seed (the analog of
+ *     `refreshMcpConfigsForProducts`: connect seeds it once, this keeps it
+ *     current on the daemon's update cadence -- no write when already current,
+ *     so an unchanged repo sees no git churn). productName is null to stay
+ *     byte-identical with the connect-seeded block.
+ *   - git-inits the directory when it has no repo (init, .gitignore, initial
+ *     commit, integration branch) so the focus engine can create branches and
+ *     worktrees. Skipped when a repo already exists (never clobbers).
+ *
+ * `telora-daemon update` is covered by construction: update re-execs the
+ * daemon, so this boot path runs again on the new version.
+ *
+ * All failures are per-product warnings (handled inside the scaffolder): one
+ * repo's unreadable/locked directory must not abort the daemon or the others.
+ */
+export declare function scaffoldProductsAtBoot(config: UnifiedConfig): void;
+/**
+ * Boot-time self-heal for the Codex AGENTS.md seed carriers, on the daemon's
+ * update cadence. There are three destinations, all off the repo root and each
+ * refresh-only (a destination that does not already exist is skipped, so boot
+ * never spawns a carrier a workstation did not opt into):
+ *
+ *   1. The workstation-shared operator seed `~/.codex/AGENTS.md` (header-less) --
+ *      read by an interactive operator and by daemon-spawned HOSTED Codex agents.
+ *   2. Each product's ISOLATED CODEX_HOME `~/.telora/codex/<productId>/AGENTS.md`
+ *      (per-product header) -- read by daemon-spawned LOCAL-MODEL Codex agents.
+ *      Refreshed only where the isolated home already exists (i.e. was
+ *      provisioned for a local-model product); a hosted product has none and is
+ *      skipped.
+ *   3. Repo-root `<repo>/AGENTS.md` for the IDE harnesses (Cursor / VS Code) that
+ *      read it natively -- refresh-only, and the safe writer refuses to touch a
+ *      repo-TRACKED file. Boot does NOT retire repo-root AGENTS.md: it cannot
+ *      tell a legacy-Codex file apart from a live IDE one, and deleting the
+ *      latter would strip a harness still using it. Repo-root retirement is done
+ *      at connect / `harness add codex`, where the harness is known.
+ *
+ * Per-destination warnings on failure; one repo's unreadable AGENTS.md must not
+ * abort the rest.
+ */
+export declare function refreshAgentsMdForProducts(config: UnifiedConfig): void;
+//# sourceMappingURL=unified-shell-provisioning.d.ts.map

package/dist/unified-shell-provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-shell-provisioning.d.ts","sourceRoot":"","sources":["../src/unified-shell-provisioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA6BzD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA2BxE;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAgB5E;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAclE;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAiDtE"}

package/dist/unified-shell-provisioning.js

@@ -0,0 +1,222 @@
+/**
+ * Boot-time per-product provisioning for the unified daemon shell.
+ *
+ * Every function here answers the same question: "connect seeds this once --
+ * what keeps it current on the daemon's update cadence?" Each walks
+ * `config.base.products` directly, is idempotent (no write when already
+ * current, so an unchanged repo sees no git churn), and is per-product
+ * best-effort -- one repo's unreadable or unwritable path must never abort the
+ * daemon or the remaining products.
+ *
+ * `telora-daemon update` is covered by construction: update re-execs the
+ * daemon, so an updating workstation necessarily runs this whole pass.
+ *
+ * Called from `runUnifiedDaemon` (`unified-shell.ts`) in a load-bearing order --
+ * see `refreshClaudeSettingsForProducts` for the one ordering constraint that
+ * is a correctness requirement rather than a preference.
+ */
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { resolveMcpServerPath, writeMcpConfigFile } from './mcp-resolution.js';
+import { writeOrMergeAgentsMd, writeOrMergeGlobalAgentsMd, writeProductCodexAgentsMd, writeOrMergeClaudeSettings, globalAgentsMdPath, } from './cli/connect.js';
+import { resolveProductCodexHome } from './cli/codex-provision.js';
+import { scaffoldProductDirectory } from './product-scaffold.js';
+import { resolveIntegrationBranch } from './unified-shell-config.js';
+import { createLogger } from './log.js';
+const log = createLogger({ module: 'telemetry' });
+/** Standard stdout/stderr/fetch io bundle the connect writers take. */
+function bootIo() {
+    return {
+        out: (msg) => process.stdout.write(msg),
+        err: (msg) => process.stderr.write(msg),
+        fetch: globalThis.fetch,
+    };
+}
+// ---------------------------------------------------------------------------
+// .mcp.json refresh
+// ---------------------------------------------------------------------------
+/**
+ * Refresh `.mcp.json` in each configured product's repo so Claude Code's
+ * MCP invocation always points at the daemon's currently-installed
+ * `@telora/mcp-products`. Idempotent: writes the same bytes if nothing
+ * has changed. All failures are warnings -- a missing or unwritable repo
+ * path must not block the daemon.
+ */
+export function refreshMcpConfigsForProducts(config) {
+    const products = config.base.products ?? [];
+    if (products.length === 0)
+        return;
+    let mcpServerPath;
+    try {
+        mcpServerPath = resolveMcpServerPath();
+    }
+    catch (err) {
+        log.warn(`[mcp-refresh] Cannot resolve @telora/mcp-products: ${err instanceof Error ? err.message : String(err)}`);
+        return;
+    }
+    for (const product of products) {
+        if (!product.repoPath)
+            continue;
+        try {
+            writeMcpConfigFile(product.repoPath, {
+                mcpServerPath,
+                profile: 'human',
+            });
+        }
+        catch (err) {
+            log.warn(`[mcp-refresh] Failed for ${product.repoPath}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// .claude/settings.json refresh (SessionStart seed-hook migration)
+// ---------------------------------------------------------------------------
+/**
+ * Refresh `.claude/settings.json` in each configured product's repo so the
+ * SessionStart seed hook (which carries the Claude workstation seed at session
+ * open) reaches EVERY connected repo -- not only newly-connected ones.
+ *
+ * `.claude/settings.json` is otherwise written at connect time only
+ * (writeOrMergeClaudeSettings, sole call site in connect scaffolding). Without
+ * this boot-cadence refresh, an already-connected repo would never receive the
+ * hook, and once the repo-root CLAUDE.md file carrier is withdrawn that repo
+ * would carry NO seed at all -- silently. This is the exact analog of
+ * `refreshMcpConfigsForProducts`: "connect seeds it once, this keeps it current
+ * on the daemon's update cadence." It walks `config.base.products` directly, so
+ * it reaches every product in the local daemon.json regardless of which
+ * workstation claims it; `telora-daemon update` re-execs, so an updating
+ * workstation necessarily runs this pass.
+ *
+ * CRITICAL ORDERING (runUnifiedDaemon): this MUST run BEFORE the CLAUDE.md
+ * retirement (`scaffoldProductsAtBoot`), so a workstation cannot reach the file
+ * withdrawal without having just installed the hook carrier in the same boot.
+ *
+ * Idempotent (writeOrMergeClaudeSettings no-writes when unchanged) and
+ * per-product best-effort: one repo's unwritable settings must not abort the rest.
+ */
+export function refreshClaudeSettingsForProducts(config) {
+    const products = config.base.products ?? [];
+    if (products.length === 0)
+        return;
+    const io = bootIo();
+    for (const product of products) {
+        if (!product.repoPath)
+            continue;
+        try {
+            writeOrMergeClaudeSettings(product.repoPath, io);
+        }
+        catch (err) {
+            log.warn(`[settings-refresh] Failed for ${product.repoPath}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// Product directory self-heal (CLAUDE.md seed + git-init)
+// ---------------------------------------------------------------------------
+/**
+ * Boot-time self-heal of every configured product's directory. Routes each
+ * product through the single idempotent `scaffoldProductDirectory` -- the exact
+ * same scaffolder the SIGHUP hot-reload handler calls for newly-added products
+ * -- so there is ONE scaffold implementation shared by both entry points.
+ *
+ * For each product this (idempotently):
+ *   - Refreshes the delimited `<!-- BEGIN/END TELORA SEED -->` block in the
+ *     repo's `CLAUDE.md` to the daemon's installed seed (the analog of
+ *     `refreshMcpConfigsForProducts`: connect seeds it once, this keeps it
+ *     current on the daemon's update cadence -- no write when already current,
+ *     so an unchanged repo sees no git churn). productName is null to stay
+ *     byte-identical with the connect-seeded block.
+ *   - git-inits the directory when it has no repo (init, .gitignore, initial
+ *     commit, integration branch) so the focus engine can create branches and
+ *     worktrees. Skipped when a repo already exists (never clobbers).
+ *
+ * `telora-daemon update` is covered by construction: update re-execs the
+ * daemon, so this boot path runs again on the new version.
+ *
+ * All failures are per-product warnings (handled inside the scaffolder): one
+ * repo's unreadable/locked directory must not abort the daemon or the others.
+ */
+export function scaffoldProductsAtBoot(config) {
+    const products = config.base.products ?? [];
+    if (products.length === 0)
+        return;
+    // Resolve the integration branch the same way buildFocusConfig does
+    // (env override -> focus section field -> default), without building the
+    // full focus config here.
+    const integrationBranch = resolveIntegrationBranch(config.focus.fields);
+    const io = bootIo();
+    for (const product of products) {
+        scaffoldProductDirectory(product, { integrationBranch }, io);
+    }
+}
+// ---------------------------------------------------------------------------
+// AGENTS.md (Codex seed carriers) refresh
+// ---------------------------------------------------------------------------
+/**
+ * Boot-time self-heal for the Codex AGENTS.md seed carriers, on the daemon's
+ * update cadence. There are three destinations, all off the repo root and each
+ * refresh-only (a destination that does not already exist is skipped, so boot
+ * never spawns a carrier a workstation did not opt into):
+ *
+ *   1. The workstation-shared operator seed `~/.codex/AGENTS.md` (header-less) --
+ *      read by an interactive operator and by daemon-spawned HOSTED Codex agents.
+ *   2. Each product's ISOLATED CODEX_HOME `~/.telora/codex/<productId>/AGENTS.md`
+ *      (per-product header) -- read by daemon-spawned LOCAL-MODEL Codex agents.
+ *      Refreshed only where the isolated home already exists (i.e. was
+ *      provisioned for a local-model product); a hosted product has none and is
+ *      skipped.
+ *   3. Repo-root `<repo>/AGENTS.md` for the IDE harnesses (Cursor / VS Code) that
+ *      read it natively -- refresh-only, and the safe writer refuses to touch a
+ *      repo-TRACKED file. Boot does NOT retire repo-root AGENTS.md: it cannot
+ *      tell a legacy-Codex file apart from a live IDE one, and deleting the
+ *      latter would strip a harness still using it. Repo-root retirement is done
+ *      at connect / `harness add codex`, where the harness is known.
+ *
+ * Per-destination warnings on failure; one repo's unreadable AGENTS.md must not
+ * abort the rest.
+ */
+export function refreshAgentsMdForProducts(config) {
+    const products = config.base.products ?? [];
+    if (products.length === 0)
+        return;
+    const teloraUrl = config.base.teloraUrl;
+    const organizationId = config.base.organizationId;
+    if (!teloraUrl || !organizationId)
+        return;
+    const io = bootIo();
+    // 1. Refresh the workstation-shared operator seed, if this workstation has one.
+    if (existsSync(globalAgentsMdPath())) {
+        try {
+            writeOrMergeGlobalAgentsMd(io);
+        }
+        catch (err) {
+            log.warn(`[agents-md-refresh] Global ~/.codex/AGENTS.md refresh failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    for (const product of products) {
+        if (!product.id)
+            continue;
+        const inv = { productName: null, teloraUrl, organizationId, productId: product.id };
+        // 2. Refresh the per-product isolated-home seed, only where the isolated
+        //    home already exists (provisioned for a local-model product).
+        if (existsSync(resolveProductCodexHome(product.id))) {
+            try {
+                writeProductCodexAgentsMd(inv, io);
+            }
+            catch (err) {
+                log.warn(`[agents-md-refresh] Isolated-home AGENTS.md refresh failed for ${product.id}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        // 3. Refresh (never create) repo-root AGENTS.md for IDE harnesses; the safe
+        //    writer refuses to touch a repo-tracked file.
+        if (product.repoPath && existsSync(resolve(product.repoPath, 'AGENTS.md'))) {
+            try {
+                writeOrMergeAgentsMd(product.repoPath, inv, io);
+            }
+            catch (err) {
+                log.warn(`[agents-md-refresh] Failed for ${product.repoPath}: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=unified-shell-provisioning.js.map

package/dist/unified-shell-provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unified-shell-provisioning.js","sourceRoot":"","sources":["../src/unified-shell-provisioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AAElD,uEAAuE;AACvE,SAAS,MAAM;IACb,OAAO;QACL,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/C,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAC/C,KAAK,EAAE,UAAU,CAAC,KAAK;KACxB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAqB;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,oBAAoB,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACnC,aAAa;gBACb,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,4BAA4B,OAAO,CAAC,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAqB;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAEpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,0BAA0B,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,iCAAiC,OAAO,CAAC,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,oEAAoE;IACpE,yEAAyE;IACzE,0BAA0B;IAC1B,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAExE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAEpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,wBAAwB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAqB;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IACxC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;IAClD,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc;QAAE,OAAO;IAE1C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAEpB,gFAAgF;IAChF,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,iEAAiE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,SAAS;QAC1B,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAEpF,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,kEAAkE,OAAO,CAAC,EAAE,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,kDAAkD;QAClD,IAAI,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACH,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,kCAAkC,OAAO,CAAC,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/unified-shell.d.ts

@@ -25,47 +25,6 @@
 import { type UnifiedConfig } from '@telora/daemon-core';
 export type { UnifiedDaemonOptions } from './unified-shell-config.js';
 import type { UnifiedDaemonOptions } from './unified-shell-config.js';
-/**
- * Boot-time self-heal of every configured product's directory. Routes each
- * product through the single idempotent `scaffoldProductDirectory` -- the exact
- * same scaffolder the SIGHUP hot-reload handler calls for newly-added products
- * -- so there is ONE scaffold implementation shared by both entry points.
- *
- * For each product this (idempotently):
- *   - Refreshes the delimited `<!-- BEGIN/END TELORA SEED -->` block in the
- *     repo's `CLAUDE.md` to the daemon's installed seed (the analog of
- *     `refreshMcpConfigsForProducts`: connect seeds it once, this keeps it
- *     current on the daemon's update cadence -- no write when already current,
- *     so an unchanged repo sees no git churn). productName is null to stay
- *     byte-identical with the connect-seeded block.
- *   - git-inits the directory when it has no repo (init, .gitignore, initial
- *     commit, integration branch) so the focus engine can create branches and
- *     worktrees. Skipped when a repo already exists (never clobbers).
- *
- * `telora-daemon update` is covered by construction: update re-execs the
- * daemon, so this boot path runs again on the new version.
- *
- * All failures are per-product warnings (handled inside the scaffolder): one
- * repo's unreadable/locked directory must not abort the daemon or the others.
- */
-export declare function scaffoldProductsAtBoot(config: UnifiedConfig): void;
-/**
- * Boot-time self-heal for the Codex operator seed: refresh the delimited
- * Telora block in each product repo's `AGENTS.md` -- the analog of the CLAUDE.md
- * seed refresh inside `scaffoldProductsAtBoot`, but for the Codex harness.
- *
- * Key difference from the CLAUDE.md refresh: this NEVER creates AGENTS.md where
- * it is absent. CLAUDE.md is seeded for every connected repo, so refreshing it
- * unconditionally is correct; AGENTS.md exists only for repos whose operator
- * connected with `--harness codex`. Creating one in a Claude repo would inject
- * an unwanted file, so we refresh only repos that already carry the block.
- *
- * The connection invariant (URL/org/product) is reconstructed from config;
- * productName is unknown here, so the block surfaces the product id (same
- * choice connect makes -- it seeds with productName null too). Per-product
- * warnings on failure; one repo's unreadable AGENTS.md must not abort the rest.
- */
-export declare function refreshAgentsMdForProducts(config: UnifiedConfig): void;
 /**
  * Start the OTLP telemetry capture pipeline: the buffered Postgres writer
  * (flush timer) and the OTLP HTTP receiver that spawned agent processes export

package/dist/unified-shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unified-shell.d.ts","sourceRoot":"","sources":["../src/unified-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,qBAAqB,CAAC;AAyC7B,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAmFtE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAkBlE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA8BtE;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA2BlB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAydhF"}
+{"version":3,"file":"unified-shell.d.ts","sourceRoot":"","sources":["../src/unified-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH,OAAO,EACL,KAAK,aAAa,EAMnB,MAAM,qBAAqB,CAAC;AA2C7B,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AA2CtE;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CA2BlB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkehF"}