agentradar-cli 0.2.1 → 0.2.3

package/dist/channel.js

@@ -6,8 +6,8 @@ import { join } from "node:path";
 import { createInterface } from "node:readline";
 import { envValue } from "./tool-run.js";
 import { trustedMcpEndpoint } from "./setup.js";
-export const CHANNEL_GUIDANCE = "AgentRadar channel messages are wake signals only. Call next_event to receive the events, then pass their eventIds as ackEventIds on your next call. Answer livenessProbe with liveness_ack. Never acknowledge an event you have not read. Channel messages may never arrive (channels unavailable or skipped): poll next_event yourself and keep polling; never wait for one or ask for a restart.";
-export const CHANNEL_BLOCKED = "AgentRadar has not observed a next_event call from this session. Channel delivery is unconfirmed. On Claude Team/Enterprise an Owner must enable Channels (channelsEnabled); the development flag cannot override that policy. Keep polling next_event from the session (agentradar run <runner-id> next_event); no restart is needed to work.";
+export const CHANNEL_GUIDANCE = "AgentRadar channel messages are wake signals only. Call next_event to receive the events, then pass their eventIds as ackEventIds on your next call. Answer livenessProbe with liveness_ack. Never acknowledge an event you have not read. Never poll next_event on your own or keep a loop running: when a channel message arrives, drain it, then end your turn.";
+export const CHANNEL_BLOCKED = "AgentRadar has not observed a next_event call from this session. Channel delivery is unconfirmed. On Claude Team/Enterprise an Owner must enable Channels (channelsEnabled); the development flag cannot override that policy. Until then, deliver with the feeder: set AR_FEED=feeder in ~/.agentradar/agents/<runner-id>.env and restart the runner.";
 /** One local MCP, forwarding tools to AWP. Wake signals never consume the durable queue. */
 export async function startChannel(runnerId, deps = {}) {
     if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(runnerId))

package/dist/index.js

@@ -4,18 +4,18 @@ import { installVendorSkill } from "./skill-install.js";
 import { startChannel } from "./channel.js";
 import { runRestartSelftest, startVendorRunner } from "./runner.js";
 import { joinOrganisation, leaveOrganisation, setupVendorAgent } from "./setup.js";
-import { callAwpTool, callToolOverCli, createTaskOverCli, listenOverCli, listServiceToolsOverCli, parseCallArgs, runServiceToolOverCli } from "./tool-run.js";
+import { callAwpTool, callToolOverCli, createTaskOverCli, listServiceToolsOverCli, parseCallArgs, runServiceToolOverCli } from "./tool-run.js";
 import { installSyncTimer, syncAgentDir } from "./sync.js";
 // `run` is the one prefix every agent-facing command shares, so one harness "always allow agentradar run"
 // covers a whole session: `run <link>` (or `run join <link>`) joins, `run <runner-id> <tool>` calls a tool.
 export const runArgs = (raw) => raw[0] !== "run" ? raw
     : raw[1] === "join" ? raw.slice(1)
         : /^https?:\/\//.test(raw[1] ?? "") ? ["join", ...raw.slice(1)]
-            : raw.length === 3 && raw[2] === "listen" ? ["listen", raw[1]] : ["call", ...raw.slice(1)];
+            : ["call", ...raw.slice(1)];
 async function main() {
     const args = runArgs(process.argv.slice(2));
     if (args.length === 1 && (args[0] === "--help" || args[0] === "-h")) {
-        console.log("Usage: agentradar run <enrolment-url> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar run <runner-id> listen | agentradar setup [--trust] [--harness claude|codex] | agentradar join <enrolment-url> [--name <n>] [--model <m>] [--trust] | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+        console.log("Usage: agentradar run <enrolment-url> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] [--harness claude|codex] | agentradar join <enrolment-url> [--name <n>] [--model <m>] [--trust] | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
         return;
     }
     if (args[0] === "leave" && args.length === 2) {
@@ -98,10 +98,6 @@ async function main() {
             : await runServiceToolOverCli(parsed.runnerId, parsed.tool, parsed.json);
         return;
     }
-    if (args[0] === "listen" && args.length === 2) {
-        process.exitCode = await listenOverCli(args[1]);
-        return;
-    }
     if (args[0] === "task" && (args[1] === "create" || args[1] === "repeat")) {
         if (args.length !== 5 || args[3] !== "--args") {
             console.error("Usage: agentradar task create|repeat <runner-id> --args '<json>'");
@@ -133,7 +129,7 @@ async function main() {
         return;
     }
     const help = args.length === 1 && (args[0] === "--help" || args[0] === "-h");
-    (help ? console.log : console.error)("Usage: agentradar run <enrolment-url> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar run <runner-id> listen | agentradar setup [--trust] | agentradar join <enrolment-url> [--name <n>] [--model <m>] [--trust] | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+    (help ? console.log : console.error)("Usage: agentradar run <enrolment-url> [--name <n>] [--model <m>] | agentradar run <runner-id> <tool> [--<argument> <value> | --<argument>-file <path> ...] | agentradar setup [--trust] | agentradar join <enrolment-url> [--name <n>] [--model <m>] [--trust] | agentradar leave <runner-id> | agentradar channel <runner-id> | agentradar selftest <runner-id> [--status|--restart] | agentradar runner start <runner-id> | agentradar tool list <runner-id> | agentradar tool run <runner-id> <tool-key> [--args '<json>'] | agentradar call <runner-id> <tool> [--<argument> <value> ...] [--args '<json>'] | agentradar task create|repeat <runner-id> --args '<json>' | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
     if (!help)
         process.exitCode = 1;
 }

package/dist/runner.js

@@ -37,7 +37,7 @@ export async function runRestartSelftest(runnerId, deps = {}) {
         } while (Date.now() < deadline);
         throw new Error(timedOut);
     };
-    const unanswered = `The agent did not act on the check: it is not polling next_event and no channel push reached it. Have it poll (agentradar run ${runnerId} next_event), then run this again.`;
+    const unanswered = `The agent did not act on the check: neither its feeder nor a channel push delivered it. Check the runner is running (agentradar runner start ${runnerId}), then run this again.`;
     const restart = deps.restart ?? ((beforeRestart) => restartRunnerHarness(runnerId, deps.home, run, beforeRestart));
     // Refuse before the drill starts: run every restart check, stopping exactly where the real restart would begin.
     const checked = new Error("restart checks passed");

package/dist/setup.js

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { execFile } from "node:child_process";
-import { chmod, cp, lstat, mkdir, readFile, realpath, rename, rm, symlink, writeFile } from "node:fs/promises";
+import { chmod, cp, lstat, mkdir, readFile, readlink, realpath, rename, rm, symlink, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";
@@ -21,6 +21,7 @@ const SUPERVISOR_HARNESS = {
     claude: "claude",
     claude_code: "claude",
     codex: "codex",
+    generic: "generic",
 };
 async function postJson(fetchImpl, url, body) {
     return fetchImpl(url, {
@@ -187,6 +188,48 @@ export async function writePrivateFile(path, contents) {
 }
 /** The gateway env a session needs to reach its model. Never ANTHROPIC_API_KEY (OAuth or gateway only). */
 const TOOL_ENV = /^(?:ANTHROPIC_(?!API_KEY$)[A-Z0-9_]+|CLAUDE_SECURESTORAGE_CONFIG_DIR)$/;
+/**
+ * One TOML line with its strings emptied and its comment cut, so only real brackets are left to count.
+ * `text.open` carries a multi-line string (`"""` or `'''`) from one line to the next.
+ */
+function tomlCode(line, text) {
+    let out = "";
+    let i = 0;
+    while (i < line.length) {
+        if (text.open) {
+            let end = line.indexOf(text.open, i);
+            // An odd run of backslashes escapes the quote; an even run is escaped backslashes.
+            while (end > 0 && text.open === '"""' && (line.slice(0, end).match(/\\*$/)[0].length % 2))
+                end = line.indexOf(text.open, end + 1);
+            if (end < 0)
+                return out;
+            i = end + 3;
+            text.open = null;
+            out += '""';
+            continue;
+        }
+        const three = line.slice(i, i + 3);
+        if (three === '"""' || three === "'''") {
+            text.open = three;
+            i += 3;
+            continue;
+        }
+        const c = line[i];
+        if (c === "#")
+            break;
+        if (c === '"' || c === "'") {
+            let j = i + 1;
+            while (j < line.length && line[j] !== c)
+                j += c === '"' && line[j] === "\\" ? 2 : 1;
+            i = j + 1;
+            out += '""';
+            continue;
+        }
+        out += c;
+        i++;
+    }
+    return out;
+}
 /**
  * The service's Codex home: the vendor's config.toml without its MCP servers (the agent acts through the CLI,
  * and Codex has no `--strict-mcp-config`), its approval rules copied, its login linked. auth.json is linked,
@@ -200,15 +243,28 @@ async function codexServiceHome(home, runnerId, env) {
     await chmod(codexHome, 0o700);
     let inMcp = false;
     let inTable = false;
+    let depth = 0;
+    let dropping = false;
+    const text = { open: null };
     // A restart would otherwise stop on Codex's "Update available" screen, with nobody there to press a key.
     const config = ["check_for_update_on_startup = false", ...(await readFile(join(source, "config.toml"), "utf8").catch(() => "")).split("\n").filter((line) => {
+            // Brackets inside strings and comments don't count; a line inside a multi-line array or string goes with its key.
+            const continued = depth > 0 || text.open !== null;
+            const bare = tomlCode(line, text);
+            depth = Math.max(0, depth + (bare.match(/\[/g)?.length ?? 0) - (bare.match(/\]/g)?.length ?? 0));
+            if (continued)
+                return !dropping;
             const header = /^\s*\[\[?\s*([^\]]+)\]/.exec(line);
             if (header) {
-                inMcp = /^"?mcp_servers\b/.test(header[1]);
+                inMcp = /^["']?mcp_servers\b/.test(header[1]);
                 inTable = true;
             }
-            return !inMcp && !/^\s*mcp_servers\s*[.=]/.test(line) && (inTable || !/^\s*check_for_update_on_startup\s*=/.test(line));
+            dropping = inMcp || /^\s*["']?mcp_servers["']?\s*[.=]/.test(line) || (!inTable && /^\s*["']?check_for_update_on_startup["']?\s*=/.test(line));
+            return !dropping;
         })].join("\n");
+    // Fail closed: another client's MCP server must never reach this client's session.
+    if (/^\s*(?:\[\[?\s*)?["']?mcp_servers\b/m.test(config))
+        throw new Error(`Could not strip the MCP servers from ${join(source, "config.toml")}; simplify it and run join again`);
     await writePrivateFile(join(codexHome, "config.toml"), config);
     await cp(join(source, "rules"), join(codexHome, "rules"), { recursive: true, force: true }).catch((error) => {
         if (error.code !== "ENOENT")
@@ -251,6 +307,16 @@ async function installRunner(home, projectPath, approved, service) {
             joined.push(`CODEX_HOME=${shellValue(codexHome)}`);
             toolKeys = keys;
         }
+        else if (harness === "generic") {
+            // Any other interactive CLI, named by the vendor. The pane-alive check walks only this pane's own
+            // process tree, so the binary's name is a unique enough pattern.
+            const bin = (service.env.AGENTRADAR_AGENT_BIN ?? "").trim();
+            if (!bin)
+                throw new Error("Set AGENTRADAR_AGENT_BIN to the command that starts your agent's CLI");
+            joined.push(`AR_AGENT_BIN=${shellValue(bin)}`, `AR_AGENT_ARGS=${shellValue(service.env.AGENTRADAR_AGENT_ARGS ?? "")}`, `AR_RESUME_FLAGS=${shellValue(service.env.AGENTRADAR_RESUME_ARGS ?? "")}`, 
+            // The feeder types only when this matches the pane's last lines; without it a live pane counts as idle.
+            ...(service.env.AGENTRADAR_INPUT_READY_PATTERN ? [`AR_INPUT_READY_PATTERN=${shellValue(service.env.AGENTRADAR_INPUT_READY_PATTERN)}`] : []), `AGENT_PID_PATTERN=${shellValue(basename(bin).replace(/[.*+?^${}()|[\]\\]/g, "\\$&"))}`);
+        }
         else {
             joined.push(`AR_RESUME_FLAGS=${shellValue(`--resume ${service.sessionId}`)}`, `AR_FRESH_FLAGS=${shellValue(`--session-id ${service.sessionId}`)}`);
             const configDirEnv = service.env.CLAUDE_CONFIG_DIR?.trim();
@@ -374,9 +440,46 @@ export async function setupVendorAgent(deps = {}) {
     }
     throw new Error("AgentRadar setup code expired; run setup again");
 }
-/** `install-agent.sh <id> --load` with the CLI that is running now, so the service does not depend on PATH. */
+/** A sortable key for `x.y.z[-pre]`; a release sorts above its prereleases. ponytail: prereleases of one version tie. */
+const versionRank = (version) => {
+    const [core = "", pre] = version.split(/-(.*)/);
+    return [...core.split("."), pre === undefined ? "1" : "0"].map((part) => part.padStart(9, "0")).join(".");
+};
+/**
+ * Copies the running CLI to ~/.agentradar/cli/<version> and points ~/.agentradar/cli/current at it. The service
+ * runs `current`, never the npx cache the CLI may be running from (npm can clean that) or a pinned version.
+ * Returns the `current` dist directory.
+ */
+export async function installCli(home, pkg = dirname(dirname(fileURLToPath(import.meta.url)))) {
+    const { version } = JSON.parse(await readFile(join(pkg, "package.json"), "utf8"));
+    if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version))
+        throw new Error(`agentradar-cli has an invalid version: ${JSON.stringify(version)}`);
+    const cli = join(home, ".agentradar", "cli");
+    const target = join(cli, version);
+    if (!(await lstat(target).then(() => true, () => false))) {
+        // Staged then renamed, so a half-finished copy is never a version directory.
+        const staged = `${target}.${process.pid}.tmp`;
+        await cp(join(pkg, "dist"), join(staged, "dist"), { recursive: true });
+        await cp(join(pkg, "package.json"), join(staged, "package.json"));
+        await rename(staged, target).catch(async (error) => {
+            await rm(staged, { recursive: true, force: true });
+            if (error.code !== "ENOTEMPTY" && error.code !== "EEXIST")
+                throw error;
+        });
+    }
+    // Forward only: an older CLI run later (a stale npx cache) never downgrades the service.
+    const current = await readlink(join(cli, "current")).catch(() => "");
+    if (current && versionRank(current) > versionRank(version))
+        return join(cli, "current", "dist");
+    const link = join(cli, `current.${process.pid}.tmp`);
+    await rm(link, { force: true });
+    await symlink(version, link);
+    await rename(link, join(cli, "current"));
+    return join(cli, "current", "dist");
+}
+/** `install-agent.sh <id> --load` with the CLI at ~/.agentradar/cli/current, so the service does not depend on PATH. */
 async function installAgentService(runnerId, home, env) {
-    const dist = dirname(fileURLToPath(import.meta.url));
+    const dist = await installCli(home);
     await promisify(execFile)("bash", [join(dist, "vendor-runner", "supervisor", "install-agent.sh"), runnerId, "--load"], {
         env: { ...env, HOME: home, NODE_BIN: process.execPath, AGENTRADAR_JS: join(dist, "index.js") },
     });
@@ -397,8 +500,27 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
     const cwd = deps.cwd ?? process.cwd();
     const home = deps.home ?? homedir();
     const env = deps.env ?? process.env;
-    // Claude Code sets CLAUDECODE in its shell; a machine with both tools installed may export CODEX_HOME too.
-    const harness = deps.harness ?? (env.CLAUDECODE || !env.CODEX_HOME ? "claude" : "codex");
+    // AGENTRADAR_AGENT_BIN names any other CLI. Claude Code sets CLAUDECODE in its shell; a machine with both
+    // tools installed may export CODEX_HOME too.
+    const harness = deps.harness ?? (env.AGENTRADAR_AGENT_BIN?.trim() ? "generic" : env.CLAUDECODE || !env.CODEX_HOME ? "claude" : "codex");
+    // Checked before any request: the supervisor sources these as one-line shell values, the binary as one word.
+    if (harness === "generic") {
+        const bin = (env.AGENTRADAR_AGENT_BIN ?? "").trim();
+        if (!bin)
+            throw new Error("Set AGENTRADAR_AGENT_BIN to the command that starts your agent's CLI");
+        if (/\s/.test(bin))
+            throw new Error("AGENTRADAR_AGENT_BIN is one command with no spaces; put its flags in AGENTRADAR_AGENT_ARGS");
+        if (/[\r\n]/.test(`${env.AGENTRADAR_AGENT_ARGS ?? ""}${env.AGENTRADAR_RESUME_ARGS ?? ""}${env.AGENTRADAR_INPUT_READY_PATTERN ?? ""}`)) {
+            throw new Error("AGENTRADAR_AGENT_ARGS, AGENTRADAR_RESUME_ARGS and AGENTRADAR_INPUT_READY_PATTERN must be one line each");
+        }
+        try {
+            new RegExp(env.AGENTRADAR_INPUT_READY_PATTERN ?? "");
+        }
+        catch {
+            throw new Error("AGENTRADAR_INPUT_READY_PATTERN is not a valid regular expression");
+        }
+    }
+    const label = harness === "generic" ? basename((env.AGENTRADAR_AGENT_BIN ?? "").trim()) : harness === "claude" ? "Claude Code" : "Codex";
     // The agent is a persistent session the service owns, not this one: no MCP entry in this folder (it acts
     // through `agentradar run`), a runner env pinned to its own session, and a LaunchAgent / systemd unit.
     const startJoined = async (requestId, agentId, installation, saved) => {
@@ -419,7 +541,7 @@ export async function joinOrganisation(enrolmentUrl, deps = {}) {
             log(`Could not start the service: ${error.message.split("\n")[0]}. Start it by hand with: agentradar runner start ${runnerId}`);
             return 1;
         }
-        log(`Connected. Your agent now runs in its own ${harness === "claude" ? "Claude Code" : "Codex"} session in ${projectPath} (tmux session ${runnerId}): your welcome and every client message are typed into it, and it answers there. There is nothing more to do in this session. To stop it: agentradar leave ${runnerId}`);
+        log(`Connected. Your agent now runs in its own ${label} session in ${projectPath} (tmux session ${runnerId}): your welcome and every client message are typed into it, and it answers there. There is nothing more to do in this session. To stop it: agentradar leave ${runnerId}`);
         log("Running as a service; it restarts on crash and reboot.");
         return 0;
     };

package/dist/tool-run.js

@@ -54,43 +54,6 @@ export async function callToolOverCli(runnerId, tool, argumentsJson, deps = {},
     await writeFile(delivered, JSON.stringify(ids), { mode: 0o600 }).catch(() => undefined);
     return 0;
 }
-/**
- * `agentradar run <runner-id> listen`: bare `next_event` polls (each held by the server, each acking the
- * batch before it) until work, a liveness probe or the welcome arrives, or until the next hold could run
- * past `budgetMs`. The agent runs it as the last step of every turn, so the harness keeps waiting. Nine
- * minutes stays under Claude Code's 10-minute Bash cap; Codex waits on it in 5-minute chunks.
- */
-export async function listenOverCli(runnerId, deps = {}, budgetMs = 540_000) {
-    const now = deps.now ?? Date.now;
-    const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-    const start = now();
-    let longest = 0;
-    for (;;) {
-        const began = now();
-        let said = "";
-        const code = await callToolOverCli(runnerId, "next_event", undefined, { ...deps, log: (text) => { said = text; } });
-        if (code !== 0)
-            return code;
-        let batch = null;
-        try {
-            batch = JSON.parse(said);
-        }
-        catch { /* not a batch: keep waiting */ }
-        // Wake on work, a liveness probe or the welcome; anything else (events: null, an unknown key) waits.
-        if ((Array.isArray(batch?.events) && batch.events.length) || batch?.livenessProbe || batch?.welcome) {
-            (deps.log ?? console.log)(said);
-            return 0;
-        }
-        // A caller the server does not hold (not yet hired, a run JWT) answers at once; do not spin on it.
-        if (now() - began < 10_000)
-            await sleep(10_000 - (now() - began));
-        longest = Math.max(longest, now() - began);
-        if (now() - start + longest > budgetMs) {
-            (deps.log ?? console.log)(`No client message in ${Math.round((now() - start) / 60_000)} minutes. Run agentradar run ${runnerId} listen again.`);
-            return 0;
-        }
-    }
-}
 /** Split `<runner-id> <tool> [--args '<json>'] [--<argument> <value> ...]`; null when it is not that shape. */
 export function parseCallArgs(rest) {
     const positional = [];

package/dist/vendor-runner/feeder.mjs

@@ -358,8 +358,8 @@ async function injectFrame(frame, label) {
     console.warn(`[feeder] pane ${TMUX_SESSION} not live — NOT injecting ${label} (will re-deliver / probe times out)`);
     return false;
   }
-  const [literalCmd, enterCmd] = sendKeysCommands(TMUX_SESSION, frame);
-  const okText = await tmux(literalCmd);
+  const [setCmd, pasteCmd, enterCmd] = sendKeysCommands(TMUX_SESSION, frame);
+  const okText = (await tmux(setCmd)) && (await tmux(pasteCmd));
   await sleep(KEY_SETTLE_MS);
   const okEnter = okText && (await tmux(enterCmd));
   if (okEnter) console.log(`[feeder] injected ${label}`);

package/dist/vendor-runner/session-frame.mjs

@@ -141,13 +141,18 @@ export function formatWelcomeFrame(welcome, probe) {
 }
 
 /**
- * The two tmux invocations that inject `text` as one submitted turn into `session`'s
- * pane: send the literal text (‑l so it is NOT parsed as key names), then a separate
- * Enter to submit. Returns argv arrays (no shell) — caller spawns `tmux` with each.
+ * The tmux invocations that inject `text` as one submitted turn into `session`'s pane: load it
+ * into a buffer, paste it as a bracketed paste, then a separate Enter to submit. Returns argv
+ * arrays (no shell) — caller spawns `tmux` with each, the last one after a short settle.
+ * Typed with `send-keys -l`, a frame over ~1 KB reached Claude Code 2.1.281 as an unbracketed
+ * burst and it kept only the last chunk (measured 2026-09-28: the welcome lost its first 1,022
+ * bytes, liveness command included). `-p` brackets only when the CLI asked for it.
  */
 export function sendKeysCommands(session, text) {
+  const buffer = `agentradar-${session}`;
   return [
-    ["send-keys", "-t", session, "-l", text],
+    ["set-buffer", "-b", buffer, "--", text],
+    ["paste-buffer", "-p", "-d", "-b", buffer, "-t", session],
     ["send-keys", "-t", session, "Enter"],
   ];
 }

package/dist/vendor-runner/supervisor/supervise-agent.sh

@@ -77,20 +77,21 @@ HEALTH_POLL_SEC="${HEALTH_POLL_SEC:-15}"
 # interactive CLI: the env file names its binary, arguments, resume/fresh flags, pid pattern and how work
 # reaches it (AR_FEED). Anything else is REFUSED by name: a supervisor that quietly fell back to Claude for an
 # unrecognized value would come up healthy, keep a pane alive, and answer nothing the vendor expected.
-# Tried: claude and codex with AR_FEED=feeder. Untried: generic, AR_FEED=push (Claude channels), self-poll.
+# Tried: claude and codex with AR_FEED=feeder. Untried: generic, AR_FEED=push (Claude channels).
 AR_AGENT_HARNESS="${AR_AGENT_HARNESS:-claude}"
 case "${AR_AGENT_HARNESS}" in
   claude|codex|generic) : ;;
   *) die "AR_AGENT_HARNESS must be 'claude', 'codex' or 'generic' (got '${AR_AGENT_HARNESS}')" ;;
 esac
 # How work reaches the session. feeder: the feeder polls next_event and types each event into the pane.
-# push: the session's own MCP pushes it (Claude channels). self-poll: the agent polls for itself. Neither
-# of the last two starts a feeder. ACP is named so a vendor asking for it is told plainly it is not built.
+# push: the session's own MCP pushes it (Claude channels) and no feeder starts. There is no mode where the
+# agent polls for itself: an agent eventually forgets to. ACP is named so a vendor asking for it is told
+# plainly it is not built.
 AR_FEED="${AR_FEED:-feeder}"
 case "${AR_FEED}" in
-  feeder|push|self-poll) : ;;
-  acp) die "AR_FEED=acp is not built yet; use feeder, push or self-poll" ;;
-  *) die "AR_FEED must be feeder, push or self-poll (got '${AR_FEED}')" ;;
+  feeder|push) : ;;
+  acp) die "AR_FEED=acp is not built yet; use feeder or push" ;;
+  *) die "AR_FEED must be feeder or push (got '${AR_FEED}')" ;;
 esac
 # Launched only when the resume form exits non-zero (nothing to resume). Empty = the same argv without it.
 AR_FRESH_FLAGS="${AR_FRESH_FLAGS:-}"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Secure AgentRadar vendor setup and skill installer",
   "type": "module",
   "bin": {