botmux 3.5.2 → 3.6.0

package/dist/core/worker-pool.d.ts

@@ -3,11 +3,13 @@
  * Extracted from daemon.ts for modularity.
  */
 import { type ChildProcess } from 'node:child_process';
+import { type RestartObserver } from './restart-coordinator.js';
 export declare function getDaemonBootId(): string;
 import type { CliId } from '../adapters/cli/types.js';
 import type { CliTurnPayload, WorkerToDaemon, Session } from '../types.js';
 import { type DaemonSession } from './types.js';
 import { type CliUsageLimitState } from '../utils/cli-usage-limit.js';
+import { type VcMeetingListenerTopicKey } from '../services/vc-meeting-listener-topic-store.js';
 type WorkerStartupState = {
     ready: boolean;
     failureNotified: boolean;
@@ -30,6 +32,10 @@ export interface WorkerSessionReplyOptions {
      * share a visible chat anchor with ordinary sessions, so the anchor alone
      * cannot identify the transcript/lifecycle owner. */
     sourceSessionId?: string;
+    /** Automatic VC delivery presentation. Explicit human IM replies omit this
+     * and continue to follow their quote/thread context. */
+    placement?: 'auto' | 'chat' | 'topic';
+    meetingTopicKey?: VcMeetingListenerTopicKey;
 }
 export interface WorkerPoolCallbacks {
     sessionReply: (rootId: string, content: string, msgType?: string, larkAppId?: string, turnId?: string, opts?: WorkerSessionReplyOptions) => Promise<string>;
@@ -326,6 +332,19 @@ export declare function sweepGlobalBotmuxSkills(): void;
  *  clobbers other keys; any failure is swallowed so it can't block spawn. */
 export declare function ensureClaudeFolderTrust(workingDir: string, stateJsonPath?: string): void;
 export declare function killWorker(ds: DaemonSession): void;
+/**
+ * Whether a worker-less restart must first destroy the session's persistent
+ * backing pane. Adopt sessions are excluded — botmux never owned the user's
+ * pane, so killing it would violate the bridge invariant. Pure so the
+ * adopt-skip decision is unit-testable without spawning a worker.
+ */
+export declare function shouldDestroyPaneBeforeRestart(ds: Pick<DaemonSession, 'initConfig' | 'adoptedFrom'>): boolean;
+/** Join or start one correlated physical restart for a session. */
+export declare function requestSessionRestart(ds: DaemonSession, observer: RestartObserver): {
+    attemptId: string;
+    joined: boolean;
+};
+export declare function __testOnly_resetRestartCoordinator(): void;
 export declare function suspendWorker(ds: DaemonSession, reason?: string): boolean;
 /**
  * Idempotent close: kill worker if alive, mark Session status='closed' + closedAt,
@@ -440,6 +459,7 @@ export declare function forkWorker(ds: DaemonSession, promptInput: string | CliT
     resume?: boolean;
     turnId?: string;
     dispatchAttempt?: number;
+    restartAttemptId?: string;
 }): void;
 /**
  * Clear the stuck-warning authority markers WITHOUT patching the card. Used by

package/dist/core/worker-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../src/core/worker-pool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAkB,KAAK,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AA0CzF,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAwBD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAItD,OAAO,KAAK,EAAE,cAAc,EAAqC,cAAc,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAC3H,OAAO,EAAqE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAInH,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAyB1F,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB;;;;6DAIyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAgBF,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;6EACyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;yDAEqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,CACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,yBAAyB,KAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,oBAAoB,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,KAAK,MAAM,CAAC;IACrD,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,sDAAsD;IACtD,YAAY,EAAE,CAAC,EAAE,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C;6EACyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,IAAI,CAAC;IACnC;gFAC4E;IAC5E,cAAc,CAAC,EAAE,CACf,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,EAC5D,OAAO,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,KAClC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;oFAEgF;IAChF,6BAA6B,CAAC,EAAE,CAC9B,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAA;KAAE,KACrD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;0EACsE;IACtE,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;KAAE,KACzG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;oDAEgD;IAChD,SAAS,CAAC,EAAE,CACV,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KACjG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;0DACsD;IACtD,oBAAoB,CAAC,EAAE,CACrB,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,KACpE,IAAI,CAAC;IACV;4DACwD;IACxD,oBAAoB,CAAC,EAAE,CACrB,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,gBAAgB,GAAG,YAAY,CAAC;KAC9C,KACE,IAAI,CAAC;CACX;AAID;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,mBAAmB,GAAG,IAAI,CAE5D;AAcD,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,IAAI,CAE7E;AAED,wBAAgB,kBAAkB,IAAI,aAAa,EAAE,CAEpD;AAED;;+BAE+B;AAC/B,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAIlF;AAED;;wEAEwE;AACxE,wBAAgB,yBAAyB,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAElF;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAKjE;AAmCD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAQ7E;AA2CD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAiClE;AA+GD,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAO5D;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AA8DD,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAIrE;AAkCD,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAYtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAkBzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,aAAa,EACjB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GACxH,OAAO,CAAC,OAAO,CAAC,CAiElB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,EAAE,CAKtE;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CA8B7D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,CAAC,CAwBxC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,sBAAsB,GAAG,UAAU,GAAG,iBAAiB,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CA+B1E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsBrG;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,GAAG,WAAW,CAAC,CAItD;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAmC5G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,aAAa,EAC/B,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiBf;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAY5F;AA4CD,eAAO,MAAM,aAAa;WAA4B,MAAM;YAAU,MAAM;EAAK,CAAC;AAOlF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAmE5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAKzE;AAOD;;;;0DAI0D;AAC1D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AA0BD;;;6EAG6E;AAC7E,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,GAAE,MAAwC,GAAG,IAAI,CA0BzH;AAID,wBAAgB,UAAU,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAoClD;AA0DD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,SAAmB,GAAG,OAAO,CA2DnF;AAwBD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CA6D/C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC/B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,aAAa,GAChB,OAAO,CAAC,IAAI,CAAC,CAUf;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM;AAC3B;;;;;;;;;;;;;GAaG;AACH,cAAc,EAAE,OAAO,GAAG,KAAK;AAC/B;;;;;;;;GAQG;AACH,WAAW,EAAE,QAAQ,GAAG,MAAM,EAC9B,IAAI,CAAC,EAAE;IACL;;2EAEuE;IACvE,cAAc,CAAC,EAAE,OAAO,UAAU,CAAC;IACnC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,UAAU,CAAC;CACpC,GACA,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA+KtD;AA2BD;;+EAE+E;AAC/E,wBAAgB,eAAe,CAC7B,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,GAAG,cAAc,EAChC,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,GAAE;IACJ,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GACL,OAAO,CAwCT;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,aAAa,EACjB,WAAW,EAAE,MAAM,GAAG,cAAc,EACpC,cAAc,GAAE,OAAO,GAAG,MAAM,GAAG;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAClB,GACR,IAAI,CA0ZN;AAID;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAOlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAY9E;AAED,iBAAS,mBAAmB,CAC1B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,YAAY,EACpB,YAAY,GAAE,kBAA6D,EAC3E,wBAAwB,CAAC,EAAE,MAAM,GAChC,IAAI,CAg5CN;AAMD,iBAAS,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GAAG,MAAM,CAE/G;AAwCD;;;;;;;;;;;;GAYG;AACH,iBAAe,mBAAmB,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBnE;AAED;;;;mCAImC;AACnC,iBAAS,kBAAkB,CACzB,EAAE,EAAE,aAAa,EACjB,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,EACtD,CAAC,EAAE,MAAM,EACT,OAAO,EAAE,MAAM,GACd,IAAI,CAyRN;AAGD;sEACsE;AACtE,eAAO,MAAM,6BAA6B,2BAAqB,CAAC;AAChE,eAAO,MAAM,8BAA8B,4BAAsB,CAAC;AAClE,eAAO,MAAM,8BAA8B,4BAAsB,CAAC;AAClE,eAAO,MAAM,+BAA+B,6BAAuB,CAAC;AAyBpE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,EACtD,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAKT;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAyPlG;AAID,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,YAAY,EAAE,CA+B9C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE;IACtC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAuBd;AAID,wBAAgB,aAAa,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAoB9D;AAyED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"worker-pool.d.ts","sourceRoot":"","sources":["../../src/core/worker-pool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAkB,KAAK,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AAqCzF,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AASpF,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAwBD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAItD,OAAO,KAAK,EAAE,cAAc,EAAqC,cAAc,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAC3H,OAAO,EAAqE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAInH,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAY1F,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,gDAAgD,CAAC;AAgBxD,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB;;;;6DAIyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAsBF,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD;6EACyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;yDAEqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;4DACwD;IACxD,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,CACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,yBAAyB,KAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB,oBAAoB,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,KAAK,MAAM,CAAC;IACrD,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,sDAAsD;IACtD,YAAY,EAAE,CAAC,EAAE,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C;6EACyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,IAAI,CAAC;IACnC;gFAC4E;IAC5E,cAAc,CAAC,EAAE,CACf,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,CAAC,EAC5D,OAAO,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,KAClC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;oFAEgF;IAChF,6BAA6B,CAAC,EAAE,CAC9B,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAAA;KAAE,KACrD,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;0EACsE;IACtE,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAA;KAAE,KACzG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;oDAEgD;IAChD,SAAS,CAAC,EAAE,CACV,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KACjG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;0DACsD;IACtD,oBAAoB,CAAC,EAAE,CACrB,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,KACpE,IAAI,CAAC;IACV;4DACwD;IACxD,oBAAoB,CAAC,EAAE,CACrB,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,gBAAgB,GAAG,YAAY,CAAC;KAC9C,KACE,IAAI,CAAC;CACX;AAID;;GAEG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,mBAAmB,GAAG,IAAI,CAE5D;AAcD,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,IAAI,CAE7E;AAED,wBAAgB,kBAAkB,IAAI,aAAa,EAAE,CAEpD;AAED;;+BAE+B;AAC/B,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAIlF;AAED;;wEAEwE;AACxE,wBAAgB,yBAAyB,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAElF;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAKjE;AAmCD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,CAQ7E;AA2CD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAiClE;AA+GD,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAO5D;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AA8DD,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAIrE;AAkCD,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAYtD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAkBzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,aAAa,EACjB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GACxH,OAAO,CAAC,OAAO,CAAC,CAiElB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,EAAE,CAKtE;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CA8B7D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,CAAC,CAwBxC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,sBAAsB,GAAG,UAAU,GAAG,iBAAiB,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;CAChD;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CA+B1E;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsBrG;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,GAAG,IAAI,GAAG,QAAQ,GAAG,WAAW,CAAC,CAItD;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,wBAAsB,4BAA4B,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAmC5G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,aAAa,EACjB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,aAAa,EAC/B,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiBf;AASD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAY5F;AA4CD,eAAO,MAAM,aAAa;WAA4B,MAAM;YAAU,MAAM;EAAK,CAAC;AAOlF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAmE5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAKzE;AAOD;;;;0DAI0D;AAC1D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AA0BD;;;6EAG6E;AAC7E,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,GAAE,MAAwC,GAAG,IAAI,CA0BzH;AAID,wBAAgB,UAAU,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAqClD;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,aAAa,CAAC,GACpD,OAAO,CAET;AAiFD,mEAAmE;AACnE,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,aAAa,EACjB,QAAQ,EAAE,eAAe,GACxB;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAgBxC;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AA0DD,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,SAAmB,GAAG,OAAO,CA2DnF;AAwBD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAC,CA8E/C;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC/B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,aAAa,GAChB,OAAO,CAAC,IAAI,CAAC,CAUf;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM;AAC3B;;;;;;;;;;;;;GAaG;AACH,cAAc,EAAE,OAAO,GAAG,KAAK;AAC/B;;;;;;;;GAQG;AACH,WAAW,EAAE,QAAQ,GAAG,MAAM,EAC9B,IAAI,CAAC,EAAE;IACL;;2EAEuE;IACvE,cAAc,CAAC,EAAE,OAAO,UAAU,CAAC;IACnC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,OAAO,UAAU,CAAC;CACpC,GACA,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA+KtD;AA2BD;;+EAE+E;AAC/E,wBAAgB,eAAe,CAC7B,EAAE,EAAE,aAAa,EACjB,OAAO,EAAE,MAAM,GAAG,cAAc,EAChC,MAAM,CAAC,EAAE,MAAM,EACf,IAAI,GAAE;IACJ,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GACL,OAAO,CAwCT;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,aAAa,EACjB,WAAW,EAAE,MAAM,GAAG,cAAc,EACpC,cAAc,GAAE,OAAO,GAAG,MAAM,GAAG;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACnB,GACR,IAAI,CAkaN;AAID;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,aAAa,GAAG,IAAI,CAOlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAY9E;AAED,iBAAS,mBAAmB,CAC1B,EAAE,EAAE,aAAa,EACjB,MAAM,EAAE,YAAY,EACpB,YAAY,GAAE,kBAA6D,EAC3E,wBAAwB,CAAC,EAAE,MAAM,GAChC,IAAI,CAw8CN;AAMD,iBAAS,oBAAoB,CAAC,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GAAG,MAAM,CAE/G;AAwCD;;;;;;;;;;;;GAYG;AACH,iBAAe,mBAAmB,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBnE;AAED;;;;mCAImC;AACnC,iBAAS,kBAAkB,CACzB,EAAE,EAAE,aAAa,EACjB,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,EACtD,CAAC,EAAE,MAAM,EACT,OAAO,EAAE,MAAM,GACd,IAAI,CA4VN;AAGD;sEACsE;AACtE,eAAO,MAAM,6BAA6B,2BAAqB,CAAC;AAChE,eAAO,MAAM,8BAA8B,4BAAsB,CAAC;AAClE,eAAO,MAAM,8BAA8B,4BAAsB,CAAC;AAClE,eAAO,MAAM,+BAA+B,6BAAuB,CAAC;AAyBpE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,EACtD,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAKT;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAyPlG;AAID,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,IAAI,YAAY,EAAE,CA+B9C;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE;IACtC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAuBd;AAID,wBAAgB,aAAa,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAoB9D;AAyED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/core/worker-pool.js

@@ -16,6 +16,7 @@ import { hookCommandFor } from '../adapters/hook-command.js';
 import { randomBytes, randomUUID } from 'node:crypto';
 import { config } from '../config.js';
 import * as sessionStore from '../services/session-store.js';
+import * as asyncTriggerStore from '../services/async-trigger-store.js';
 import { persistStreamCardState, rememberLastCliInput } from './session-manager.js';
 import { fallbackTurnId, isSubstituteTurn } from './reply-target.js';
 import { updateMessage, deleteMessage, sendEphemeralCard, sendUserMessage, addReaction, removeReaction, getMessageChatId, MessageWithdrawnError } from '../im/lark/client.js';
@@ -35,12 +36,15 @@ import { listDocSubscriptionsForSession, removeDocSubscription } from '../servic
 import { TmuxBackend } from '../adapters/backend/tmux-backend.js';
 import { HerdrBackend } from '../adapters/backend/herdr-backend.js';
 import { sandboxEnabled } from '../adapters/backend/sandbox.js';
-import { isSuspendableBackendType, getSessionPersistentBackendType, persistentBackendTargetForSession, killPersistentBackendTarget, managedTargetsForCliChange, resolvePairedSpawnBackendType, resolvePersistentBackendTarget } from './persistent-backend.js';
+import { isSuspendableBackendType, getSessionPersistentBackendType, persistentBackendTargetForSession, killPersistentBackendTarget, probePersistentBackendTarget, managedTargetsForCliChange, resolvePairedSpawnBackendType, resolvePersistentBackendTarget } from './persistent-backend.js';
 import { getBot, getAllBots, resolveBrandLabel } from '../bot-registry.js';
+import { RestartCoordinator } from './restart-coordinator.js';
+import { runtimeBuildIdentity } from '../utils/runtime-build-id.js';
 /** A random id minted once per daemon process (this lifetime). Stamped onto
  *  isolated persistent panes so a suspend→resume reattach (same id) is
  *  distinguishable from a pane surviving a daemon restart (different id). */
 const DAEMON_BOOT_ID = randomUUID();
+const restartCoordinator = new RestartCoordinator();
 export function getDaemonBootId() {
     return DAEMON_BOOT_ID;
 }
@@ -76,8 +80,11 @@ import { evaluateVcMeetingManagedSend, resolveVcMeetingImTurnOrigin, } from '../
 import { finishVcMeetingImReply, prepareVcMeetingDeliveryReply, prepareVcMeetingImReply, } from '../services/vc-meeting-im-reply.js';
 import { neutralizeLarkAtTags } from '../services/send-policy.js';
 import { recordVcMeetingListenerMessage } from '../services/vc-meeting-listener-message-store.js';
+import { getVcMeetingListenerTopicRoot, recordVcMeetingListenerTopicRoot, } from '../services/vc-meeting-listener-topic-store.js';
+import { parseVcMeetingListenerOutput } from '../services/vc-meeting-listener-output-protocol.js';
 import { isLocalCliOpenEnabled, isLocalCliOpenReady } from '../services/local-cli-opener.js';
 import { isSilentScheduledTurn } from './silent-schedule-turns.js';
+import { isTriggerFinalSuppressed } from './trigger-final-suppression.js';
 import { writeDeferredTopicBinding } from './deferred-topic-binding.js';
 import { deferWorkerSpawnDuringDeviceIsolation } from './device-isolation-activation.js';
 import { buildBotmuxLarkNativeSessionTitle, extractBotmuxLarkNativeSessionTitlePrompt, } from './session-title.js';
@@ -94,6 +101,12 @@ function workerForkEnv(base) {
         delete env[key];
     return env;
 }
+/** Fresh workers always start with hidden output, so restore the daemon-owned mode. */
+function syncWorkerDisplayMode(ds) {
+    if (!ds.worker || !ds.displayMode || ds.displayMode === 'hidden')
+        return;
+    ds.worker.send({ type: 'set_display_mode', mode: ds.displayMode });
+}
 let callbacks;
 /**
  * Initialise worker-pool callbacks. Must be called once before forkWorker().
@@ -1089,6 +1102,7 @@ export function ensureClaudeFolderTrust(workingDir, stateJsonPath = join(homedir
 }
 // ─── Kill worker ────────────────────────────────────────────────────────────
 export function killWorker(ds) {
+    restartCoordinator.cancelSession(ds.session.sessionId);
     clearUsageLimitState(ds);
     ds.localProcessAttestation = undefined;
     // A managed-turn capability belongs to one concrete worker generation.
@@ -1126,6 +1140,111 @@ export function killWorker(ds) {
     ds.workerToken = null;
     ds.workerViewToken = null;
 }
+/**
+ * Whether a worker-less restart must first destroy the session's persistent
+ * backing pane. Adopt sessions are excluded — botmux never owned the user's
+ * pane, so killing it would violate the bridge invariant. Pure so the
+ * adopt-skip decision is unit-testable without spawning a worker.
+ */
+export function shouldDestroyPaneBeforeRestart(ds) {
+    return !ds.initConfig?.adoptMode && !ds.adoptedFrom;
+}
+/**
+ * Destroy a still-alive persistent backing pane (tmux/herdr/zellij) before a
+ * worker-less restart forks a fresh worker. Without this, a session that lost
+ * its worker but kept its pane (the normal post-daemon-restart state) would let
+ * spawnCli REATTACH the surviving CLI instead of relaunching it — the CLI is
+ * never actually restarted, yet prompt-ready still fires `restart_result:
+ * succeeded`, so the user sees "restarted" while a wedged CLI stays wedged.
+ * Killing the pane first forces a genuine physical fresh spawn, making the
+ * success receipt truthful.
+ *
+ * Fail-safe (codex 复审观察): the kill primitives swallow their own failures
+ * (TmuxBackend.killSession `catch {}`, Herdr `runHerdr` returns false), so a
+ * plain try/catch here can NEVER observe a failed kill — a wedged tmux server
+ * could leave the pane alive and the fork would silently reattach. So we PROBE
+ * after killing and retry once if the pane survives, escalating to a loud warn
+ * when it still exists. A surviving pane still forks (refusing would strand the
+ * session with no restart at all, strictly worse than the original bug), but
+ * the warn makes the rare failure diagnosable instead of a silent false
+ * success. A fully reattach-proof path (forceFresh signal into spawnCli) is a
+ * larger, separate change — tracked as a follow-up, not blocking this fix.
+ *
+ * Scope: persistent panes only (getSessionPersistentBackendType excludes riff,
+ * which never reattaches — it always builds a fresh RiffBackend — and whose
+ * remote task must survive a restart to preserve follow-up lineage). Adopt
+ * sessions are skipped: botmux never owned the user's pane.
+ */
+function destroyLivePaneBeforeRestart(ds) {
+    if (!shouldDestroyPaneBeforeRestart(ds))
+        return;
+    const target = persistentBackendTargetForSession(ds);
+    if (!target)
+        return;
+    const killOnce = () => {
+        try {
+            killPersistentBackendTarget(target);
+        }
+        catch (err) {
+            // The primitives normally swallow their own errors; this only catches a
+            // truly unexpected throw (e.g. target resolution). Non-fatal — the probe
+            // below is the real signal.
+            logger.warn(`[${tag(ds)}] restart: kill of ${target.backendType} pane threw: ${err}`);
+        }
+    };
+    killOnce();
+    // Advance a single probe result monotonically through the real retry path so
+    // an 'unknown' first probe is never mislabelled as a post-retry survivor:
+    //  - 'missing' → gone, fork is genuinely fresh.
+    //  - 'unknown' → probe indeterminate (e.g. tmux server hiccup); do NOT retry
+    //    and do NOT block the restart — pre-fix always forked, stranding is worse.
+    //  - 'exists'  → confirmed alive: warn, kill once more, re-probe. Only this
+    //    branch performs (and can report) a retry.
+    let probe = probePersistentBackendTarget(target);
+    if (probe === 'exists') {
+        logger.warn(`[${tag(ds)}] restart: ${target.backendType} pane survived first kill — retrying before refork`);
+        killOnce();
+        probe = probePersistentBackendTarget(target);
+    }
+    if (probe === 'exists') {
+        // The kill genuinely failed (twice). Forking will likely reattach the live
+        // pane (the very bug this guards), so the eventual `restart_result:
+        // succeeded` may again be untruthful — but leave a loud, greppable trail.
+        logger.error(`[${tag(ds)}] restart: ${target.backendType} pane STILL alive after retry — `
+            + 'the refork may reattach instead of relaunching (restart success may be untruthful)');
+    }
+    else if (probe === 'unknown') {
+        // Do NOT over-promise a relaunch: an indeterminate probe could still be a
+        // live pane the fork reattaches. Fork proceeds (stranding is worse) but the
+        // diagnostic must not claim a fresh relaunch it can't guarantee.
+        logger.warn(`[${tag(ds)}] restart: ${target.backendType} kill outcome indeterminate — `
+            + 'refork may reattach instead of relaunching');
+    }
+    else {
+        logger.info(`[${tag(ds)}] restart: ${target.backendType} pane missing after kill — CLI will physically relaunch`);
+    }
+}
+/** Join or start one correlated physical restart for a session. */
+export function requestSessionRestart(ds, observer) {
+    return restartCoordinator.request(ds.session.sessionId, observer, attemptId => {
+        if (ds.worker && !ds.worker.killed) {
+            ds.worker.send({ type: 'restart', attemptId });
+            return;
+        }
+        // No live worker but the persistent pane may still be alive (e.g. after a
+        // daemon restart). Tear it down first so forkWorker → spawnCli spawns a
+        // fresh CLI instead of reattaching the old one and falsely reporting a
+        // successful restart.
+        destroyLivePaneBeforeRestart(ds);
+        forkWorker(ds, '', {
+            resume: ds.hasHistory,
+            restartAttemptId: attemptId,
+        });
+    });
+}
+export function __testOnly_resetRestartCoordinator() {
+    restartCoordinator.reset();
+}
 /**
  * Tear down a persistent backing session (tmux/herdr/zellij) directly from the
  * daemon when there is no live worker to do it via the 'close' IPC. The session
@@ -1299,26 +1418,21 @@ export async function closeSession(sessionId) {
         // crash/limited turn may never have reached an idle edge).
         recordUsageForDaemonSession(ds);
         killWorker(ds);
-        // 文档入口清理：会话关闭即删除其绑定。只有旧
-        // /subscribe-lark-doc 记录需要调飞书逐文件退订 API；
-        // /watch-comment 仅依赖应用级评论事件，删本地监听表即可。
-        try {
-            const anchor = sessionAnchorId(ds);
-            const subs = listDocSubscriptionsForSession(config.session.dataDir, ds.larkAppId, anchor);
-            for (const sub of subs) {
-                if (sub.managedBy !== 'watch-comment') {
-                    await unsubscribeDocFile(ds.larkAppId, { fileToken: sub.fileToken, fileType: sub.fileType });
-                }
-                removeDocSubscription(config.session.dataDir, ds.larkAppId, sub.fileToken);
-            }
-            if (subs.length)
-                logger.info(`[doc-comment] session ${sessionId.slice(0, 8)} closed → removed ${subs.length} doc binding(s)`);
-        }
-        catch (err) {
-            logger.warn(`[doc-comment] cleanup on close failed for ${sessionId.slice(0, 8)}: ${err?.message ?? err}`);
-        }
+        // Commit the daemon-visible close barrier before any network await below.
+        // `botmux delete` may be running inside the session being destroyed; once
+        // its worker/backing pane exits, a new IM message must not find this stale
+        // entry and resurrect the old logical session while doc cleanup is pending.
         activeSessionsRegistry?.delete(activeSessionKey(ds));
         killedLive = true;
+    }
+    // Persistence is part of the same no-await barrier as Map eviction. If the
+    // daemon crashes during best-effort doc cleanup, restart recovery must not
+    // restore a session that was already explicitly closed.
+    const stored = sessionStore.getSession(sessionId);
+    const wasOpen = !!stored && stored.status !== 'closed';
+    if (wasOpen)
+        sessionStore.closeSession(sessionId);
+    if (ds) {
         if (!ds.exitEventEmitted) {
             ds.exitEventEmitted = true;
             dashboardEventBus.publish({
@@ -1328,11 +1442,10 @@ export async function closeSession(sessionId) {
             emitSessionLifecycleHook(ds, 'session.exit', { reason: 'dashboard_close' });
         }
     }
-    // Persistence path — load → mark closed → save (delegated to sessionStore).
-    const stored = sessionStore.getSession(sessionId);
-    const wasOpen = !!stored && stored.status !== 'closed';
+    // Preserve the existing externally-visible event order: exit first, then
+    // the final persisted-row update. Persistence itself was already committed
+    // above as part of the close barrier.
     if (wasOpen) {
-        sessionStore.closeSession(sessionId);
         const after = sessionStore.getSession(sessionId);
         dashboardEventBus.publish({
             type: 'session.update',
@@ -1346,6 +1459,27 @@ export async function closeSession(sessionId) {
             },
         });
     }
+    if (ds) {
+        // 文档入口清理：会话关闭即删除其绑定。只有旧
+        // /subscribe-lark-doc 记录需要调飞书逐文件退订 API；
+        // /watch-comment 仅依赖应用级评论事件，删本地监听表即可。此段允许 await，
+        // 因为上面的内存 + 持久化关闭屏障已经提交。
+        try {
+            const anchor = sessionAnchorId(ds);
+            const subs = listDocSubscriptionsForSession(config.session.dataDir, ds.larkAppId, anchor);
+            for (const sub of subs) {
+                if (sub.managedBy !== 'watch-comment') {
+                    await unsubscribeDocFile(ds.larkAppId, { fileToken: sub.fileToken, fileType: sub.fileType });
+                }
+                removeDocSubscription(config.session.dataDir, ds.larkAppId, sub.fileToken);
+            }
+            if (subs.length)
+                logger.info(`[doc-comment] session ${sessionId.slice(0, 8)} closed → removed ${subs.length} doc binding(s)`);
+        }
+        catch (err) {
+            logger.warn(`[doc-comment] cleanup on close failed for ${sessionId.slice(0, 8)}: ${err?.message ?? err}`);
+        }
+    }
     // alreadyClosed = nothing happened on either path.
     const alreadyClosed = !killedLive && !wasOpen;
     return { ok: true, alreadyClosed };
@@ -1707,6 +1841,7 @@ export function forkWorker(ds, promptInput, resumeOrTurnId = false) {
     let resume = false;
     let initTurnId;
     let initDispatchAttempt;
+    let restartAttemptId;
     if (typeof resumeOrTurnId === 'string') {
         initTurnId = resumeOrTurnId;
     }
@@ -1714,6 +1849,7 @@ export function forkWorker(ds, promptInput, resumeOrTurnId = false) {
         resume = resumeOrTurnId.resume === true;
         initTurnId = resumeOrTurnId.turnId;
         initDispatchAttempt = resumeOrTurnId.dispatchAttempt;
+        restartAttemptId = resumeOrTurnId.restartAttemptId;
     }
     else {
         resume = resumeOrTurnId;
@@ -1927,6 +2063,7 @@ export function forkWorker(ds, promptInput, resumeOrTurnId = false) {
     });
     // Send init config — use per-bot settings
     const promptCodexAppInput = codexAppInputForSession(ds, promptPayload.codexAppInput, initAttributionTurnId);
+    const runtimeIdentity = runtimeBuildIdentity();
     const initMsg = {
         type: 'init',
         sessionId: ds.session.sessionId,
@@ -1998,6 +2135,11 @@ export function forkWorker(ds, promptInput, resumeOrTurnId = false) {
         vcMeetingImTurnOrigin: resolveVcMeetingImTurnOrigin(ds.session, initAttributionTurnId),
         pluginBindings: botCfg.plugins,
         skillPolicy: botCfg.skills,
+        ...(runtimeIdentity.status === 'known'
+            ? { runnerBuildId: runtimeIdentity.id }
+            : {}),
+        ...(ds.session.runnerBuildId ? { persistedRunnerBuildId: ds.session.runnerBuildId } : {}),
+        ...(restartAttemptId ? { restartAttemptId } : {}),
     };
     worker.send(initMsg);
     ds.initConfig = initMsg;
@@ -2139,6 +2281,8 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
     const managedFinalOutputSuppressed = (turnId, dispatchAttempt) => {
         if (isSilentScheduledTurn(ds, turnId))
             return true;
+        if (isTriggerFinalSuppressed(ds, turnId))
+            return true;
         if (!ds.session.vcMeetingReceiver) {
             return ordinaryManagedSuppression(turnId, dispatchAttempt);
         }
@@ -2309,6 +2453,7 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                 // (if any) is left untouched. The next real user turn clears this flag
                 // (rememberLastCliInput) and the normal card flow resumes.
                 if (ds.suppressRecoveryCard) {
+                    syncWorkerDisplayMode(ds);
                     logger.info(`[${t}] Restored session — suppressing recovery streaming card (silent restart)`);
                     break;
                 }
@@ -2343,9 +2488,7 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                         }
                         persistStreamCardState(ds);
                         // Re-sync worker's display mode (it starts fresh in 'hidden')
-                        if (ds.worker && ds.displayMode && ds.displayMode !== 'hidden') {
-                            ds.worker.send({ type: 'set_display_mode', mode: ds.displayMode });
-                        }
+                        syncWorkerDisplayMode(ds);
                         // The restored card is now the active one — withdraw any cards
                         // frozen before the daemon went down so they don't pile up in the
                         // thread on each restart.
@@ -2395,9 +2538,7 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                     ds.streamCardPending = false;
                     persistStreamCardState(ds);
                     // Re-sync worker's display mode (it starts fresh in 'hidden')
-                    if (ds.worker && ds.displayMode && ds.displayMode !== 'hidden') {
-                        ds.worker.send({ type: 'set_display_mode', mode: ds.displayMode });
-                    }
+                    syncWorkerDisplayMode(ds);
                     // New card is live — recall any cards frozen by previous turns.
                     // Done after `streamCardId` is committed so we never delete the old
                     // card without a successor visible to the user.
@@ -2494,6 +2635,28 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                 invalidateStuckWarning(ds, 'prompt_ready');
                 break;
             }
+            case 'runner_build_ready': {
+                const identity = runtimeBuildIdentity();
+                if (ds.worker === worker
+                    && effectiveCliId === 'codex-app'
+                    && identity.status === 'known'
+                    && msg.runnerBuildId === identity.id) {
+                    ds.session.runnerBuildId = msg.runnerBuildId;
+                    sessionStore.updateSession(ds.session);
+                }
+                else {
+                    logger.warn(`[${t}] Ignored invalid or stale runner_build_ready`);
+                }
+                break;
+            }
+            case 'restart_result': {
+                if (ds.worker !== worker) {
+                    logger.warn(`[${t}] Ignored restart_result from stale worker generation`);
+                    break;
+                }
+                restartCoordinator.resolve(ds.session.sessionId, msg.attemptId, msg.status);
+                break;
+            }
             case 'cli_session_id': {
                 const wasLocalCliOpenReady = isLocalCliOpenReady(ds, { cliId: effectiveCliId });
                 ds.session.cliSessionId = msg.cliSessionId;
@@ -3113,6 +3276,25 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                 }
                 break;
             }
+            case 'steer_accepted': {
+                if (ds.worker !== worker) {
+                    logger.warn(`[${t}] Ignored steer_accepted from stale worker generation`);
+                    break;
+                }
+                logger.info(`[${t}] Codex App steer accepted `
+                    + `appTurn=${msg.appTurnId.slice(0, 12)} replyTurn=${msg.turnId.slice(0, 12)}`);
+                if (managedAuxUiSuppressed(msg.turnId, undefined))
+                    break;
+                try {
+                    await scopedReply(tr('worker.steer_accepted', undefined, loc), 'text', msg.turnId);
+                }
+                catch {
+                    logger.error(`[${t}] Failed to deliver steer acknowledgement `
+                        + `appTurn=${msg.appTurnId.slice(0, 12)} replyTurn=${msg.turnId.slice(0, 12)} `
+                        + 'category=delivery');
+                }
+                break;
+            }
             case 'turn_terminal': {
                 if (ds.worker !== worker) {
                     logger.warn(`[${t}] Ignored turn_terminal from stale worker generation`);
@@ -3243,6 +3425,17 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
                 // Worker pops the turn off its queue right after emit, so it will
                 // NOT re-send this payload on its own. Daemon owns retry on
                 // transient Lark failures.
+                // A real harvested answer is a definitive self-heal signal: if the
+                // session was parked in `limited` by a structured rate-limit emit
+                // (Claude adopt/bridge sessions where the user recovers in their own
+                // terminal — no Lark turn, retry button, or kill to clear it), the
+                // model is plainly working again. Clear the stale limit so the card /
+                // Dashboard「需要你」 don't stay pinned with a dead retry countdown.
+                if (ds.usageLimit) {
+                    clearUsageLimitState(ds);
+                    if (ds.lastScreenStatus === 'limited')
+                        ds.lastScreenStatus = 'idle';
+                }
                 deliverFinalOutput(ds, msg, t, 0);
                 break;
             }
@@ -3299,6 +3492,7 @@ function setupWorkerHandlers(ds, worker, startupState = { ready: false, failureN
         // A stale takeover worker never clears the replacement — during takeover the
         // old worker's exit fires AFTER the new worker has been assigned.
         if (ds.worker === worker) {
+            restartCoordinator.failSession(ds.session.sessionId);
             ds.worker = null;
             ds.workerPort = null;
             ds.managedTurnOrigin = undefined;
@@ -3445,9 +3639,14 @@ function deliverFinalOutput(ds, msg, t, attempt) {
     }
     const asyncResult = managedReceiver ? undefined : ds.asyncTriggerResults?.get(msg.turnId);
     if (asyncResult) {
+        const completedAt = Date.now();
         asyncResult.status = 'completed';
         asyncResult.content = msg.content;
-        asyncResult.completedAt = Date.now();
+        asyncResult.completedAt = completedAt;
+        // Durably persist the outcome so trigger-result can rebuild `completed`
+        // (with content) after a daemon restart drops the in-memory Map. Stamp the
+        // owning bot for cross-bot isolation.
+        asyncTriggerStore.recordCompleted(ds.session.sessionId, msg.turnId, msg.content, completedAt, ds.larkAppId);
         ds.lastBridgeEmittedUuid = finalOutputDedupeKey(ds, msg);
         logger.info(`[${t}] Captured final_output for Async HTTP request (turn ${msg.turnId.substring(0, 8)})`);
         return;
@@ -3545,12 +3744,48 @@ function deliverFinalOutput(ds, msg, t, attempt) {
                 && managedDecision.kind === 'listener_thread'
                 ? managedDecision.meetingOwner
                 : undefined;
+            const listenerOutputPlacement = managedDecision?.ok
+                && managedDecision.kind === 'listener_thread'
+                ? managedDecision.outputPlacement
+                : 'auto';
+            const listenerOutputProtocol = managedDecision?.ok
+                && managedDecision.kind === 'listener_thread'
+                ? managedDecision.listenerOutputProtocol
+                : 'plain';
+            const meetingTopicKey = !imOrigin
+                && listenerOutputOwner
+                && listenerOutputPlacement === 'topic'
+                ? {
+                    ...listenerOutputOwner,
+                    targetChatId: ds.chatId,
+                }
+                : undefined;
+            let visibleAssistantText = msg.content;
+            if (!imOrigin
+                && listenerOutputOwner
+                && msg.dispatchAttempt !== undefined
+                && listenerOutputProtocol === 'decision_v1') {
+                const controlledOutput = parseVcMeetingListenerOutput(msg.content);
+                if (!controlledOutput.ok) {
+                    ds.lastBridgeEmittedUuid = finalOutputDedupeKey(ds, msg);
+                    logger.error(`[${t}] VC listener output suppressed: invalid control envelope `
+                        + `(${controlledOutput.reason}) turn=${msg.turnId.substring(0, 8)}`);
+                    return;
+                }
+                if (controlledOutput.decision === 'skip') {
+                    ds.lastBridgeEmittedUuid = finalOutputDedupeKey(ds, msg);
+                    logger.info(`[${t}] VC listener output skipped by agent decision `
+                        + `(turn ${msg.turnId.substring(0, 8)})`);
+                    return;
+                }
+                visibleAssistantText = controlledOutput.content;
+            }
             // Meeting-derived text is untrusted card markdown. A model-authored
             // native <at> tag and the ordinary owner footer would both create a
             // second addressing side effect outside the action ledger.
             const safeAssistantText = managedReceiver
-                ? neutralizeLarkAtTags(msg.content)
-                : msg.content;
+                ? neutralizeLarkAtTags(visibleAssistantText)
+                : visibleAssistantText;
             const safeUserText = managedReceiver && msg.userText !== undefined
                 ? neutralizeLarkAtTags(msg.userText)
                 : msg.userText;
@@ -3577,6 +3812,9 @@ function deliverFinalOutput(ds, msg, t, attempt) {
             const proposedOutput = {
                 targetChatId: ds.chatId,
                 ...(imOrigin ? { quoteTargetId: imOrigin.larkMessageId } : {}),
+                ...(!imOrigin && listenerOutputOwner
+                    ? { placement: listenerOutputPlacement }
+                    : {}),
                 msgType: 'interactive',
                 content: cardJson,
             };
@@ -3607,6 +3845,13 @@ function deliverFinalOutput(ds, msg, t, attempt) {
             const recordPrimaryOutput = (messageId) => {
                 if (!listenerOutputOwner)
                     return;
+                if (meetingTopicKey
+                    && !getVcMeetingListenerTopicRoot(config.session.dataDir, meetingTopicKey)) {
+                    const topic = recordVcMeetingListenerTopicRoot(config.session.dataDir, meetingTopicKey, messageId);
+                    if (!topic.ok) {
+                        logger.error(`[${t}] VC listener topic anchor rejected message=${messageId} reason=${topic.reason}`);
+                    }
+                }
                 try {
                     const recorded = recordVcMeetingListenerMessage(config.session.dataDir, {
                         ...listenerOutputOwner,
@@ -3644,6 +3889,12 @@ function deliverFinalOutput(ds, msg, t, attempt) {
                     // provider call). Never fan meeting content out to user hooks,
                     // including the first attempt and crash reconciliation replay.
                     suppressHook: true,
+                    ...(!imOrigin && listenerOutputOwner
+                        ? {
+                            placement: canonicalOutput.placement ?? 'auto',
+                            ...(meetingTopicKey ? { meetingTopicKey } : {}),
+                        }
+                        : {}),
                 }
                 : undefined);
             recordPrimaryOutput(messageId);