claude-code-session-manager 0.111.0 → 0.113.0

package/src/main/seedAgentPersonas.cjs

@@ -12,7 +12,7 @@
  *    `seedVersion` frontmatter stamp (missing counts as 1) against the
  *    bundled file's own stamp. Same or higher stays untouched. Lower checks
  *    the installed file's body against every body this app has ever shipped
- *    for that persona (`lib/shippedPersonaSeeds.cjs`). No match means a
+ *    for that persona (`lib/persona-macro/shippedPersonaSeeds.cjs`). No match means a
  *    person wrote or edited that file; it is left alone and the skip is
  *    logged. Why: a lower stamp alone does not prove the file is a stale
  *    shipped copy — only a body match does. A match replaces the installed
@@ -77,8 +77,8 @@ const path = require('node:path');
 const os = require('node:os');
 const crypto = require('node:crypto');
 const { writeJsonSync, writeTextAtomic, validatePath, validateWrite } = require('./config.cjs');
-const { splitFrontmatter } = require('./lib/prdFrontmatter.cjs');
-const { SHIPPED_PERSONA_SEEDS } = require('./lib/shippedPersonaSeeds.cjs');
+const { splitFrontmatter } = require('./lib/prd/prdFrontmatter.cjs');
+const { SHIPPED_PERSONA_SEEDS } = require('./lib/persona-macro/shippedPersonaSeeds.cjs');
 
 const PERSONAS = ['architect', 'dev-lead', 'project-home-builder', 'validator', 'demo-video-builder'];
 // What `{ done: true }` (the pre-seeded-set marker format) meant: only these two personas existed
@@ -140,7 +140,7 @@ function normalizeNewlines(text) {
   return text.replace(/\r\n/g, '\n').replace(/\r/g, '\n');
 }
 
-/** sha256 hex of a persona's body only (frontmatter stripped, newlines normalized, trimmed) — the key the upgrade pass matches against `lib/shippedPersonaSeeds.cjs`. */
+/** sha256 hex of a persona's body only (frontmatter stripped, newlines normalized, trimmed) — the key the upgrade pass matches against `lib/persona-macro/shippedPersonaSeeds.cjs`. */
 function personaBodyHash(text) {
   const { body } = splitFrontmatter(normalizeNewlines(text));
   return crypto.createHash('sha256').update(body.trim()).digest('hex');
@@ -269,7 +269,7 @@ function buildUpgradedPersona(bundledText, installedText, matches) {
  * Replaces a stale installed persona with the current bundled one, once per
  * boot, for every name in `PERSONAS` whose installed file is both PRESENT
  * and behind the bundled `seedVersion` AND whose body matches a body this
- * app has shipped before (`shippedSeeds`, normally `lib/shippedPersonaSeeds.cjs`
+ * app has shipped before (`shippedSeeds`, normally `lib/persona-macro/shippedPersonaSeeds.cjs`
  * — injectable so tests can supply a fake list). See this file's header for
  * the full rule, and `buildUpgradedPersona` for how frontmatter keys merge.
  * Never overwrites a same-or-newer installed file, or one whose body never

package/src/main/seedDevPlugin.cjs

@@ -1,7 +1,7 @@
 /**
  * First-boot seeder for the bundled `session-manager-dev` plugin.
  *
- * The plugin (the dev skills under plugins/session-manager-dev/skills) ships inside the npx distribution. To make it
+ * The plugin (3 skills under plugins/session-manager-dev/skills: builder, develop, send-feedback) ships inside the npx distribution. To make it
  * a true default, the app installs it on first launch from its own bundled
  * marketplace (offline — no GitHub/registry). Idempotent two ways:
  *
@@ -16,6 +16,12 @@
  *      plugin is already enabled (e.g. installed by hand), we just write the
  *      marker and skip the install.
  *
+ * Stay-current pass (`upgradeIfStale`, like seedAgentPersonas' upgrade pass): runs on EVERY
+ * call, independent of the done-marker. If the plugin is installed AND enabled at a version
+ * older than the bundled plugin.json version, it runs the claude CLI marketplace update +
+ * plugin update. Never acts when not installed, disabled (a deliberate disable stays), or
+ * versions are equal/newer. Failures are logged, never thrown.
+ *
  * Fire-and-forget: called post-window from index.cjs. Errors are logged, never
  * thrown. Kill-switch: SM_SEED_DEV_PLUGIN_DISABLE=1.
  */
@@ -23,7 +29,7 @@
 const fs = require('node:fs');
 const path = require('node:path');
 const os = require('node:os');
-const { install } = require('./pluginInstall.cjs');
+const { install, update } = require('./pluginInstall.cjs');
 
 const PLUGIN_SLUG = 'session-manager-dev';
 const MARKETPLACE = { add: 'bundled', name: 'session-manager' };
@@ -65,8 +71,69 @@ function writeMarker(state) {
   }
 }
 
+/** Compare dotted numeric versions (pre-release suffixes ignored). <0, 0, >0. */
+function compareSemver(a, b) {
+  const parse = (v) => String(v).split('-')[0].split('.').map((n) => Number(n) || 0);
+  const pa = parse(a);
+  const pb = parse(b);
+  for (let i = 0; i < Math.max(pa.length, pb.length, 3); i++) {
+    const d = (pa[i] || 0) - (pb[i] || 0);
+    if (d !== 0) return d;
+  }
+  return 0;
+}
+
+function readJson(p) {
+  try { return JSON.parse(fs.readFileSync(p, 'utf8')); } catch { return null; }
+}
+
+function bundledVersion() {
+  const m = readJson(path.join(__dirname, '..', '..', 'plugins', PLUGIN_SLUG, '.claude-plugin', 'plugin.json'));
+  return typeof m?.version === 'string' ? m.version : null;
+}
+
+/**
+ * Stay-current pass. Update the installed plugin when older than the bundled one.
+ * Never throws. Deps injectable for tests.
+ */
+async function upgradeIfStale({
+  logger = console,
+  writeLog = () => {},
+  home = os.homedir(),
+  bundledVersion: bundled = bundledVersion(),
+  runUpdate = update,
+} = {}) {
+  if (process.env.SM_SEED_DEV_PLUGIN_DISABLE === '1') return;
+  try {
+    const entries = readJson(path.join(home, '.claude', 'plugins', 'installed_plugins.json'))?.plugins?.[ENABLED_KEY];
+    const installedVersion = Array.isArray(entries) ? entries[0]?.version : null;
+    if (!installedVersion || !bundled) return;                        // not installed / no bundle
+    const enabled = readJson(path.join(home, '.claude', 'settings.json'))?.enabledPlugins;
+    if (!enabled?.[ENABLED_KEY]) return;                              // deliberate disable stays
+    if (compareSemver(installedVersion, bundled) >= 0) return;        // current or newer
+    logger.log?.(`[seedDevPlugin] updating ${ENABLED_KEY} ${installedVersion} → ${bundled}`);
+    const r = await runUpdate({ slug: PLUGIN_SLUG, marketplaceName: MARKETPLACE.name });
+    if (!r?.ok) {
+      writeLog({
+        scope: 'seed-dev-plugin',
+        level: 'error',
+        message: 'upgrade failed',
+        meta: { exitCode: r?.exitCode, error: r?.error, from: installedVersion, to: bundled },
+      });
+    }
+  } catch (err) {
+    writeLog({
+      scope: 'seed-dev-plugin',
+      level: 'error',
+      message: 'upgrade error',
+      meta: { error: err?.message ?? String(err) },
+    });
+  }
+}
+
 async function seedDevPlugin({ logger = console, writeLog = () => {} } = {}) {
   if (process.env.SM_SEED_DEV_PLUGIN_DISABLE === '1') return;
+  await upgradeIfStale({ logger, writeLog });
   const marker = readMarker();
   if (marker.done) return;                       // succeeded before — leave it alone.
   if (marker.attempts >= MAX_ATTEMPTS) return;   // gave up — manual install only.
@@ -104,4 +171,4 @@ async function seedDevPlugin({ logger = console, writeLog = () => {} } = {}) {
   }
 }
 
-module.exports = { seedDevPlugin, markerPath, MAX_ATTEMPTS };
+module.exports = { seedDevPlugin, upgradeIfStale, compareSemver, markerPath, MAX_ATTEMPTS };

package/src/main/seedSchedulerMcp.cjs

@@ -35,8 +35,8 @@ const fs = require('node:fs');
 const path = require('node:path');
 const os = require('node:os');
 const { spawn } = require('node:child_process');
-const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
-const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claude/claudeBin.cjs');
+const { cleanChildEnv, pathWithUserBins } = require('./lib/process/cleanEnv.cjs');
 const { writeJsonSync } = require('./config.cjs');
 const { nodeSpawnSpec } = require('./lib/appRuntime.cjs');
 

package/src/main/supervisor.cjs

@@ -16,10 +16,10 @@ const path = require('node:path');
 const os = require('node:os');
 const { spawn, execFileSync } = require('node:child_process');
 const { ipcMain } = require('electron');
-const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
-const { headlessPermissionArgs, ensureCliCapsProbed } = require('./lib/claudeCliCaps.cjs');
-const { withProcRole } = require('./lib/cleanEnv.cjs');
-const schedulerPaths = require('./lib/schedulerPaths.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claude/claudeBin.cjs');
+const { headlessPermissionArgs, ensureCliCapsProbed } = require('./lib/claude/claudeCliCaps.cjs');
+const { withProcRole } = require('./lib/process/cleanEnv.cjs');
+const schedulerPaths = require('./lib/scheduler/schedulerPaths.cjs');
 
 const HOME = os.homedir();
 const SUPERVISOR_LOG_PATH = path.join(HOME, '.claude', 'session-manager', 'supervisor.log');
@@ -103,7 +103,7 @@ function getChildBashCmdlines(jobPid) {
 
 // ─── Log tail helpers ───────────────────────────────────────────────────────
 
-const { readTail: readTailBytes } = require('./lib/fileTail.cjs');
+const { readTail: readTailBytes } = require('./lib/util/fileTail.cjs');
 
 /**
  * Skim the last 16 KB of a run log for the most recent assistant/user/result
@@ -205,6 +205,41 @@ Decision rules:
 - "stuck"/kill-agent only if the agent itself is wedged (no child processes, no recent log events, > 60 min stale). Set targetPid to the claude root pid.`;
 }
 
+/**
+ * Parse `claude -p --output-format json` stdout from a probe.
+ * @param {string} stdout
+ * @returns {{ verdictObj: any, costUsd: number|null, errorSubtype: string|null }}
+ */
+function parseProbeOutput(stdout) {
+  let costUsd = null;
+  let verdictObj = null;
+  let errorSubtype = null;
+
+  // --output-format json emits a single JSON result object.
+  // The `result` field contains the assistant's raw text response.
+  for (const line of String(stdout).split('\n').reverse()) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    try {
+      const obj = JSON.parse(trimmed);
+      if (!obj || typeof obj !== 'object') continue;
+      if (typeof obj.total_cost_usd === 'number') costUsd = obj.total_cost_usd;
+      if (obj.is_error === true || (typeof obj.subtype === 'string' && obj.subtype !== 'success')) {
+        errorSubtype = typeof obj.subtype === 'string' && obj.subtype ? obj.subtype : 'error';
+      }
+      // Extract verdict from the result text field (assistant's response).
+      if (obj.result && typeof obj.result === 'string') {
+        const m = obj.result.match(/\{[^{}]+\}/);
+        if (m) {
+          try { verdictObj = JSON.parse(m[0]); } catch { /* */ }
+        }
+      }
+    } catch { /* not JSON */ }
+    if (verdictObj) break;
+  }
+  return { verdictObj, costUsd, errorSubtype };
+}
+
 async function runProbe(claudeBin, prompt) {
   await ensureCliCapsProbed();
   return new Promise((resolve) => {
@@ -213,10 +248,10 @@ async function runProbe(claudeBin, prompt) {
       const target = claudeSpawnTarget('aux', 'supervisor', claudeBin);
       child = spawn(target.command, [
         '-p', prompt,
-        '--model', 'claude-opus-4-7',
+        '--model', 'claude-haiku-5-5',
         '--no-session-persistence',
         '--output-format', 'json',
-        '--max-budget-usd', '0.10',
+        '--max-budget-usd', '0.50',
         '--dangerously-skip-permissions',
         ...headlessPermissionArgs(),
         '--allowedTools', 'Bash',
@@ -254,26 +289,13 @@ async function runProbe(claudeBin, prompt) {
     child.on('exit', () => {
       clearTimers();
       const stdout = Buffer.concat(stdoutChunks).toString('utf8');
-      let costUsd = null;
-      let verdictObj = null;
-
-      // --output-format json emits a single JSON result object.
-      // The `result` field contains the assistant's raw text response.
-      for (const line of stdout.split('\n').reverse()) {
-        const trimmed = line.trim();
-        if (!trimmed) continue;
-        try {
-          const obj = JSON.parse(trimmed);
-          if (typeof obj.total_cost_usd === 'number') costUsd = obj.total_cost_usd;
-          // Extract verdict from the result text field (assistant's response).
-          if (obj.result && typeof obj.result === 'string') {
-            const m = obj.result.match(/\{[^{}]+\}/);
-            if (m) {
-              try { verdictObj = JSON.parse(m[0]); } catch { /* */ }
-            }
-          }
-        } catch { /* not JSON */ }
-        if (verdictObj) break;
+      const { verdictObj, costUsd, errorSubtype } = parseProbeOutput(stdout);
+
+      if ((!verdictObj || !verdictObj.verdict) && errorSubtype) {
+        // Budget cap / CLI error exit: record it distinctly, never as a real verdict.
+        console.warn('[supervisor] probe error exit (treating as ok):', errorSubtype);
+        resolve({ verdict: 'ok', action: 'none', targetPid: null, reason: `probe_error:${errorSubtype}`, costUsd });
+        return;
       }
 
       if (!verdictObj || !verdictObj.verdict) {
@@ -506,4 +528,5 @@ module.exports = {
   supervisorTick,
   applyAction,
   registerHandlers,
+  parseProbeOutput,
 };

package/src/main/telemetryIpc.cjs

@@ -0,0 +1,51 @@
+'use strict';
+
+/**
+ * telemetryIpc.cjs — registers the `otel:*` and `telemetry:*` IPC handlers. Moved verbatim out of
+ * index.cjs; channel names and handler bodies are unchanged.
+ */
+
+const { schemas, validated } = require('./ipcSchemas.cjs');
+const otel = require('./otel.cjs');
+const otelSettings = require('./otelSettings.cjs');
+const telemetrySettings = require('./lib/telemetry/telemetrySettings.cjs');
+const telemetryClient = require('./lib/telemetry/telemetryClient.cjs');
+const telemetryBacklog = require('./lib/telemetry/telemetryBacklog.cjs');
+const telemetryConsent = require('./lib/telemetry/telemetryConsent.cjs');
+
+/**
+ * @param {{ ipcMain: any }} opts
+ */
+function registerTelemetryHandlers({ ipcMain }) {
+  // OTEL telemetry export (opt-in via ~/.claude/session-manager/otel.json).
+  ipcMain.handle('otel:get-config', async () => otelSettings.load());
+  ipcMain.handle('otel:set-config', async (_e, cfg) => {
+    if (!otelSettings.isValid(cfg)) {
+      return { ok: false, error: 'invalid config' };
+    }
+    const saved = await otelSettings.save(cfg);
+    const result = await otel.applyConfig(saved);
+    return { ok: !!result?.ok, error: result?.error ?? null, config: saved, status: otel.status() };
+  });
+  ipcMain.handle('otel:status', () => otel.status());
+  ipcMain.handle('otel:config-path', () => otelSettings.storePath());
+
+  // Product telemetry (bilko.run) — anonymous, on-by-default, opt-out consent
+  // UX + inspector over the client PRDs above wired. Settings > Telemetry's
+  // "Product telemetry" section is the sole UI surface for this; see
+  // session-manager-operations/architecture/telemetry.md for the data model.
+  ipcMain.handle('telemetry:get-config', async () => telemetrySettings.load());
+  ipcMain.handle('telemetry:set-config', validated(schemas.telemetrySetConfig, async (cfg) => {
+    const saved = await telemetryConsent.applyConsentUpdate(cfg, { telemetrySettings, telemetryClient });
+    return { ok: true, config: saved, status: telemetryClient.status() };
+  }));
+  ipcMain.handle('telemetry:status', () => ({
+    ...telemetryClient.status(),
+    backlog: telemetryBacklog.lastRunSummary(),
+  }));
+  ipcMain.handle('telemetry:config-path', () => telemetrySettings.storePath());
+  ipcMain.handle('telemetry:recent-records', () => telemetryClient.recentRecords());
+  ipcMain.handle('telemetry:flush-now', () => telemetryClient.flush('manual'));
+}
+
+module.exports = { registerTelemetryHandlers };

package/src/main/transcripts.cjs

@@ -36,10 +36,10 @@ function attachWindow(w) {
   window = w;
 }
 
-const { encodeCwd } = require('./lib/encodeCwd.cjs');
-const { LRUCache } = require('./lib/lruCache.cjs');
+const { encodeCwd } = require('./lib/util/encodeCwd.cjs');
+const { LRUCache } = require('./lib/util/lruCache.cjs');
 const { classifyLine } = require('./lib/classifyTranscriptLine.cjs');
-const { resolveEpicTranscriptPath } = require('./lib/epicTranscriptPath.cjs');
+const { resolveEpicTranscriptPath } = require('./lib/epic/epicTranscriptPath.cjs');
 
 /**
  * Where the CLI's JSONL for this session lives. Epic sessions run in a

package/src/main/updaterIpc.cjs

@@ -28,7 +28,7 @@ function defaultDeps() {
     platform: process.platform,
     env: process.env,
     settings: require('./lib/updaterSettings.cjs'),
-    sessionSlots: require('./lib/sessionSlots.cjs'),
+    sessionSlots: require('./lib/scheduler/sessionSlots.cjs'),
     currentVersion: () => require('electron').app.getVersion(),
     log: (message, meta) => {
       try {

package/src/main/usage.cjs

@@ -23,7 +23,7 @@ const os = require('node:os');
 const { ipcMain } = require('electron');
 const { refreshIfNeeded, expiresAtMs } = require('./lib/credentials.cjs');
 const { writeJson } = require('./config.cjs');
-const { createUsageCircuit, singleFlight } = require('./lib/usageCircuit.cjs');
+const { createUsageCircuit, singleFlight } = require('./lib/claude/usageCircuit.cjs');
 
 const USAGE_URL = 'https://api.anthropic.com/api/oauth/usage';
 

package/src/main/watchers.cjs

@@ -14,7 +14,7 @@ const crypto = require('node:crypto');
 const path = require('node:path');
 const os = require('node:os');
 const fs = require('node:fs');
-const { cleanChildEnv } = require('./lib/cleanEnv.cjs');
+const { cleanChildEnv } = require('./lib/process/cleanEnv.cjs');
 const { checkInsideHome } = require('./lib/insideHome.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
 

package/src/main/webRemote.cjs

@@ -27,11 +27,11 @@ const fs = require('node:fs');
 const { writeTextAtomic, validatePath } = require('./config.cjs');
 const logs = require('./logs.cjs');
 const { sendIfAlive } = require('./lib/sendToRenderer.cjs');
-const { claudeHome } = require('./lib/schedulerPaths.cjs');
+const { claudeHome } = require('./lib/scheduler/schedulerPaths.cjs');
 const { schemas } = require('./ipcSchemas.cjs');
 const { summarize: _sharedSummarize } = require('./lib/summarize.cjs');
 const { makeState, confirmSas: confirmSasLogic } = require('./lib/e2eStateMachine.cjs');
-const { createClientSessions, LEGACY_CLIENT_KEY } = require('./lib/remoteClientSessions.cjs');
+const { createClientSessions, LEGACY_CLIENT_KEY } = require('./lib/feedback-remote/remoteClientSessions.cjs');
 
 // ─── Constants ───────────────────────────────────────────────────────────────
 
@@ -69,8 +69,8 @@ const MSG_MAX_BYTES = 256 * 1024;
 const { ALLOWED_COMMANDS, MUTATE_COMMANDS, SAS_GATED_READS } = require('./ipcSchemas.cjs');
 
 // ─── E2E encryption helpers (P-256 ECDH + AES-256-GCM, ADR §5.2) ────────────
-// Implemented in ./lib/remoteE2eCrypto.cjs (shared with the desktop client role).
-const { generateE2EKeyPair, deriveSessionKey, deriveSas, encryptBox, decryptBox } = require('./lib/remoteE2eCrypto.cjs');
+// Implemented in ./lib/feedback-remote/remoteE2eCrypto.cjs (shared with the desktop client role).
+const { generateE2EKeyPair, deriveSessionKey, deriveSas, encryptBox, decryptBox } = require('./lib/feedback-remote/remoteE2eCrypto.cjs');
 
 // ─── Module state ────────────────────────────────────────────────────────────
 
@@ -83,6 +83,7 @@ let _pongTimer = null;
 let _missedPongs = 0;
 let _configCache = null;
 let _configCacheAt = 0;
+let _repairNeeded = false; // relay rejected the device token (invalid_token / 401): terminal until re-pair
 let _destroyed = false; // set at app shutdown to stop reconnect loops
 
 // E2E session state — reset on each new WS connection.
@@ -274,6 +275,7 @@ function computeStatus(cfg) {
     enabled: cfg.remoteEnabled,
     remoteControlEnabled: cfg.remoteControlEnabled ?? false,
     connected,
+    linkState: _repairNeeded ? 'repair-needed' : 'ok',
     e2eActive: connected && _clients.values().some((r) => r.e2e.sessionKey !== null),
     e2eAuthenticated: connected && authed !== null,
     e2eState: connected ? e2eState : 'idle',
@@ -389,9 +391,18 @@ async function connect() {
       scope: 'webRemote', level: 'warn',
       message: 'device ticket request failed', meta: { error: e?.message },
     });
+    // invalid_token / 401 is final (device unpaired server-side): retrying only
+    // spams the relay. Park in repair-needed until a new pair stores a fresh token.
+    if (e?.message === 'invalid_token' || e?.message === 'HTTP 401') {
+      cancelReconnect();
+      _repairNeeded = true;
+      broadcastStatus();
+      return;
+    }
     scheduleReconnect();
     return;
   }
+  _repairNeeded = false;
 
   // Step 2: open WSS connection with the ticket.
   let ws;
@@ -735,7 +746,7 @@ async function pushSessionList() {
     const data = await sessionsStore.load();
     // Tabs + their ACTIVE Epics → SessionMeta. tabId === claude sessionId so it
     // matches the transcript JSONL name used by cmd:session:subscribe.
-    const { readActiveIndex } = require('./lib/epicMint.cjs');
+    const { readActiveIndex } = require('./lib/epic/epicMint.cjs');
     const sessions = buildRemoteSessionList(data?.tabs ?? [], readActiveIndex).map((s) => ({
       ...s,
       state: _sessionWatchers.get(s.tabId)?.state ?? null,
@@ -1092,7 +1103,7 @@ function getDispatchMap() {
       sessionsStore.load(),
 
     'cmd:sessions:list': async () => {
-      const { readActiveIndex } = require('./lib/epicMint.cjs');
+      const { readActiveIndex } = require('./lib/epic/epicMint.cjs');
       const data = await sessionsStore.load();
       return {
         sessions: buildRemoteSessionList(data?.tabs ?? [], readActiveIndex),
@@ -1196,7 +1207,7 @@ function getDispatchMap() {
     'cmd:session:options': async () => {
       const { EpicTagSchema } = require('./lib/promptSessionSchema.cjs');
       const agentLibrary = require('./agentLibrary.cjs');
-      const macroLibrary = require('./lib/macroLibrary.cjs');
+      const macroLibrary = require('./lib/persona-macro/macroLibrary.cjs');
       const { tabs } = await sessionsStore.load();
       const personas = await agentLibrary.listPersonas();
       return {
@@ -1278,6 +1289,7 @@ async function pair(otp) {
   }];
 
   await saveConfig({ ...cfg, devices });
+  _repairNeeded = false;
 
   if (cfg.remoteEnabled) {
     connect().catch(() => {});
@@ -1480,6 +1492,9 @@ module.exports = {
     getDispatchMap,
     buildRemoteSessionList,
     setWs: (ws) => { _ws = ws; },
+    connect,
+    hasReconnectTimer: () => _reconnectTimer !== null,
+    cancelReconnect,
     invalidateConfigCache,
     setE2eAuthenticated: (key, clientKey = LEGACY_CLIENT_KEY) => {
       _clients.getOrCreate(clientKey).e2e = makeState('authenticated', key, null);

package/src/preload/api.d.ts

@@ -254,7 +254,7 @@ export interface McpCatalogResult {
   recipes: McpRecipe[];
 }
 
-/** Mirrors WorkType (src/main/lib/workTypeLibrary.cjs) / EpicTag (tagLibrary.ts) — the
+/** Mirrors WorkType (src/main/lib/prd/workTypeLibrary.cjs) / EpicTag (tagLibrary.ts) — the
  *  same Epic-mission taxonomy, reused here since an Agent persona's `tags` field is that
  *  same concept, not a free-form string list. */
 export type AgentPersonaTag = 'feature' | 'bug' | 'discussion' | 'build' | 'project-home-builder';
@@ -491,7 +491,7 @@ export interface OtelSetConfigResult {
 }
 
 // Customer feedback — client submissions + owner inbox. Shapes mirror
-// src/main/lib/customerFeedbackClient.cjs and customerFeedbackInbox.cjs.
+// src/main/lib/feedback-remote/customerFeedbackClient.cjs and customerFeedbackInbox.cjs.
 export type CustomerFeedbackTag = 'bug' | 'feature' | 'discussion';
 export type CustomerFeedbackStatus = 'open' | 'in_progress' | 'resolved' | 'wontfix';
 
@@ -610,7 +610,7 @@ export interface ScheduleConfig {
   schemaVersion: 1;
 }
 
-/** Mirrors JOB_STATUSES (src/main/lib/scheduleJobSchema.cjs) — the single
+/** Mirrors JOB_STATUSES (src/main/lib/scheduler/scheduleJobSchema.cjs) — the single
  *  source of truth asserted at read time by queueStore.cjs's shapeJobs. This
  *  file can't require that .cjs module (types-only, erased at build time),
  *  so this union is a manually-kept copy; drift from JOB_STATUSES (and from
@@ -868,7 +868,7 @@ export interface ScheduleJobHold {
   reason?: string | null;
 }
 
-/** Why a headless run never got a model turn (lib/launchFailure.cjs, issue #11). */
+/** Why a headless run never got a model turn (lib/scheduler/launchFailure.cjs, issue #11). */
 export type ScheduleLaunchFailureKind =
   | 'model_config_rejected'
   | 'bad_request'
@@ -1495,6 +1495,8 @@ export interface ChatRunPayload {
   /** Originating PromptTicket.id (PRD 748) when dequeued from a tab's
    *  prompt queue — absent for a fresh manual send. */
   promptId?: string;
+  /** Who wrote the prompt: a local human, an injected external source, or an Epic proposal from another project. */
+  origin?: 'human' | 'external' | 'inbound-proposal';
 }
 
 export interface ChatCreatePrdPayload {
@@ -1649,6 +1651,8 @@ export interface WebRemoteStatus {
   enabled: boolean;
   remoteControlEnabled: boolean;
   connected: boolean;
+  /** 'repair-needed' once the relay rejected the device token; the device must be re-paired. */
+  linkState?: 'ok' | 'repair-needed';
   e2eActive: boolean;
   /** True once the user has confirmed the SAS on the desktop. */
   e2eAuthenticated: boolean;
@@ -2260,28 +2264,30 @@ export interface SessionManagerAPI {
     }) => Promise<Exchange[]>;
   };
   promptSessions: {
+    /** Main requests approve-and-start of a verified inbound proposal. */
+    onInboundAutoApprove: (handler: (e: { cwd: string; epicId: string }) => void) => () => void;
     /** Fires when the main process appends an event to a PromptSession's
      *  chain on disk (currently only the scheduler's response-event append
      *  from notifyOriginatingTab) — lets an already-hydrated Epic pick it up
      *  live instead of waiting for a restart. */
     onEventAppended: (handler: (e: PromptSessionEventAppendedPayload) => void) => () => void;
     /** Main-side read-merge-write of a cwd's active-index.json
-     *  (lib/activeIndexMerge.cjs) — persistActiveIndex sends only its own
+     *  (lib/epic/activeIndexMerge.cjs) — persistActiveIndex sends only its own
      *  in-memory contribution for the cwd; disk stays main's truth, merged
      *  inside the same lock epicMint.cjs's ensureEpic serializes through. */
     mergeActiveIndex: (payload: PromptSessionsMergeActiveIndexPayload) => Promise<PromptSessionsMergeActiveIndexResult>;
     /** Mints a brand-new 'proposed' Epic through main's own ensureEpic()
-     *  (lib/promptSessionsCreateEpic.cjs) instead of the renderer
+     *  (lib/epic/promptSessionsCreateEpic.cjs) instead of the renderer
      *  hand-constructing the PromptSession record itself. Unused today —
      *  additive step 1 of a two-PRD chain; a later PRD routes
      *  createPromptSession through this. */
     create: (payload: PromptSessionsCreateEpicPayload) => Promise<PromptSessionsCreateEpicResult>;
     /** Creates this Epic's isolated `git worktree` checkout
-     *  (lib/epicWorktreeMint.cjs) — resolves to the `worktree` field shape on
+     *  (lib/epic/epicWorktreeMint.cjs) — resolves to the `worktree` field shape on
      *  success, or null on any failure (never rejects). */
     createWorktree: (payload: PromptSessionsCreateWorktreePayload) => Promise<PromptSessionsCreateWorktreeResult | null>;
     /** Folds an Epic's isolated git worktree branch back into its owning
-     *  project's main tree (lib/epicWorktreeMerge.cjs) — the ONLY point
+     *  project's main tree (lib/epic/epicWorktreeMerge.cjs) — the ONLY point
      *  where PRD 1033's per-Epic isolation resolves back into the shared
      *  tree. Never rejects. */
     mergeToMain: (payload: PromptSessionsMergeToMainPayload) => Promise<PromptSessionsMergeToMainResult>;

package/src/preload/index.cjs

@@ -543,6 +543,12 @@ contextBridge.exposeInMainWorld('api', {
     list: (payload) => ipcRenderer.invoke('exchanges:list', payload),
   },
   promptSessions: {
+    /** Main asks the renderer to approve-and-start a verified inbound proposal. */
+    onInboundAutoApprove: (handler) => {
+      const listener = (_e, payload) => handler(payload);
+      ipcRenderer.on('promptSessions:inbound-auto-approve', listener);
+      return () => ipcRenderer.removeListener('promptSessions:inbound-auto-approve', listener);
+    },
     /** Fires when the main process (currently only the scheduler's
      *  response-event append) appends an event to a PromptSession's chain on
      *  disk — lets an already-hydrated Epic pick it up live instead of
@@ -553,12 +559,12 @@ contextBridge.exposeInMainWorld('api', {
       return () => ipcRenderer.removeListener('promptSession:event-appended', listener);
     },
     /** Main-side read-merge-write of a cwd's active-index.json
-     *  (lib/activeIndexMerge.cjs) — replaces persistActiveIndex's old
+     *  (lib/epic/activeIndexMerge.cjs) — replaces persistActiveIndex's old
      *  renderer-side read-merge-write. Payload carries only this renderer's
      *  own in-memory contribution for the cwd; disk stays main's truth. */
     mergeActiveIndex: (payload) => ipcRenderer.invoke('promptSessions:merge-active-index', payload),
     /** Mints a brand-new 'proposed' Epic through main's own ensureEpic()
-     *  (lib/promptSessionsCreateEpic.cjs) instead of the renderer
+     *  (lib/epic/promptSessionsCreateEpic.cjs) instead of the renderer
      *  hand-constructing the PromptSession record itself. Unused today —
      *  additive step 1 of a two-PRD chain; a later PRD routes
      *  createPromptSession through this. */
@@ -571,7 +577,7 @@ contextBridge.exposeInMainWorld('api', {
     createWorktree: (payload) => ipcRenderer.invoke('promptSessions:create-worktree', payload),
     /** Folds an Epic's isolated git worktree branch back into its owning
      *  project's main tree (main-side gitWorktree.cjs's integrateEpicBranch,
-     *  via lib/epicWorktreeMerge.cjs) — the ONLY point where PRD 1033's
+     *  via lib/epic/epicWorktreeMerge.cjs) — the ONLY point where PRD 1033's
      *  per-Epic isolation resolves back into the shared tree. Never rejects:
      *  resolves `{ ok: true, status: 'merged', integrated }` on a clean
      *  merge (worktree cleaned up), or `{ ok: false, status:

package/dist/assets/ProvenanceBadge-vC7Tj-JP.js

@@ -1 +0,0 @@
-import{a3 as P,b1 as G,aD as x,an as i,Z as R,B as T,a as _}from"./index-CPieAFsl.js";import{a as E,C as B,c as L,d as S,b as I}from"./Library-CeF4qh9d.js";const O=e=>`${e}/.claude/session-manager/provenance.json`;function D(e){if(!e||typeof e!="object")return{};const t={};for(const[n,o]of Object.entries(e))(o==="anthropic"||o==="community"||o==="local")&&(t[n]=o);return t}const K=P((e,t)=>({overrides:{},loaded:!1,loading:!1,home:null,load:async n=>{const o=t();if(!(o.home===n&&(o.loaded||o.loading))){e({home:n,loading:!0});try{const r=await window.api.config.readJson(O(n)),d=r.exists?D(r.data):{};e(h=>({overrides:{...d,...h.overrides},loaded:!0,loading:!1}))}catch{e({loaded:!0,loading:!1})}}},setOverride:async(n,o)=>{const r={...t().overrides};o===null?delete r[n]:r[n]=o,e({overrides:r});const d=t().home;if(d)try{await window.api.config.writeJson(O(d),r)}catch{}}})),a=e=>(e??"").toLowerCase().trim(),j=new Set,$=new Set;for(const e of I){const t=e.official?j:$;t.add(a(e.id)),t.add(a(e.name))}const H=new Set(S.filter(e=>e.official).flatMap(e=>[a(e.id),a(e.name)])),J=new Set(S.filter(e=>!e.official).flatMap(e=>[a(e.id),a(e.name)])),U=new Set(L.filter(e=>e.official).flatMap(e=>[a(e.id),a(e.name)])),V=new Set(L.filter(e=>!e.official).flatMap(e=>[a(e.id),a(e.name)])),z=new Set(B.flatMap(e=>[a(e.id),a(e.name)])),Z=new Set(E.flatMap(e=>[a(e.id),a(e.name)])),q=new Set(E.map(e=>e.command.trim())),F=new Set(["security-review","pr-comments","release-notes","add-dir","code-review","simplify"]),Q=/(@anthropic-ai\/|anthropic\.com|github\.com\/anthropics)/i,W=/(^|\s)(npx|uvx|pipx|bunx|mcp-remote|deno\s+run|docker\s+run)(\s|$)/i;function X(e){return[e.command,...e.args??[],e.url,e.repository,e.homepage].filter(Boolean).join(" ").toLowerCase()}const l=e=>({provenance:"anthropic",reason:e}),y=e=>({provenance:"community",reason:e});function Y(e,t,n){switch(e){case"mcp":return j.has(t)?l("official MCP server (catalog)"):$.has(t)?y("third-party server (catalog)"):null;case"skill":case"command":return H.has(t)?l("official Anthropic skill (catalog)"):J.has(t)?y("third-party skill (catalog)"):null;case"plugin":return U.has(t)?l("official Anthropic plugin (catalog)"):V.has(t)?y("third-party plugin (catalog)"):null;case"subagent":return z.has(t)?l("bundled Anthropic subagent (catalog)"):null;case"hook":return Z.has(t)||n&&q.has(n.trim())?l("bundled hook (catalog)"):null}}function ee(e,t){return e.repository?"has a source repository":e.homepage?"has a homepage":e.url?"remote endpoint":W.test(t)?"installed from a package registry":null}function te(e){const t=a(e.name),n=X(e),o=Y(e.type,t,e.command);if(o)return o;if((e.type==="command"||e.type==="skill")&&F.has(t))return l("built-in Claude Code command");if(Q.test(n))return l("Anthropic package or repo");const r=ee(e,n);return r?y(r):{provenance:"local",reason:"no external source — assumed self-created"}}function ne(e,t,n){return`${e}:${t??"-"}:${n}`}const c={anthropic:"Anthropic",community:"Community",local:"Local"},N={anthropic:"accent",community:"warn",local:"dim"},oe=["anthropic","community","local"];function se({input:e,scope:t,interactive:n=!0,className:o=""}){const r=G(),{overrides:d,load:h,setOverride:k}=K(),[b,m]=x.useState(!1),v=x.useRef(null);x.useEffect(()=>{r&&h(r)},[r,h]),x.useEffect(()=>{if(!b)return;const s=C=>{v.current&&!v.current.contains(C.target)&&m(!1)},g=C=>{C.key==="Escape"&&m(!1)};return window.addEventListener("mousedown",s),window.addEventListener("keydown",g),()=>{window.removeEventListener("mousedown",s),window.removeEventListener("keydown",g)}},[b]);const w=ne(e.type,t??null,e.name),f=te(e),p=d[w],u=p??f.provenance,M=p?`Origin manually set to ${c[u]} — auto-detected ${c[f.provenance]} (${f.reason})`:`Auto-detected ${c[u]}: ${f.reason}`,A=i.jsxs(_,{tone:N[u],title:M,className:`${n?"cursor-pointer hover:brightness-125":""} ${o}`,children:[c[u],p&&i.jsx("span",{className:"w-1 h-1 rounded-full bg-current opacity-70","aria-hidden":!0})]});return n?i.jsxs("span",{ref:v,className:"relative inline-flex",children:[i.jsx("button",{type:"button",onClick:s=>{s.stopPropagation(),m(g=>!g)},className:"inline-flex","aria-label":`Origin: ${c[u]}. Click to change.`,children:A}),b&&i.jsxs("span",{className:`absolute ${R.dialog} top-full right-0 mt-1 min-w-[7.5rem] rounded-md border border-line bg-bg-elev shadow-lg py-1 text-left`,onClick:s=>s.stopPropagation(),children:[i.jsx("span",{className:"block px-2 pb-1 text-[10px] uppercase tracking-wide text-fg-faint",children:"Mark origin as"}),oe.map(s=>i.jsxs("button",{type:"button",onClick:()=>{k(w,s),m(!1)},className:`flex w-full items-center gap-2 px-2 py-1 text-[12px] hover:bg-bg-hi/60 ${u===s?"text-fg":"text-fg-dim"}`,children:[i.jsx("span",{className:`w-2 h-2 rounded-full border ${T[N[s]]}`,"aria-hidden":!0}),c[s],p===s&&i.jsx("span",{className:"ml-auto text-[10px] text-fg-faint",children:"set"})]},s)),i.jsx("div",{className:"my-1 border-t border-line"}),i.jsxs("button",{type:"button",onClick:()=>{k(w,null),m(!1)},disabled:!p,className:"flex w-full items-center gap-2 px-2 py-1 text-[12px] text-fg-dim hover:bg-bg-hi/60 disabled:opacity-40 disabled:hover:bg-transparent",title:`Revert to auto-detection (${c[f.provenance]})`,children:["Auto-detect",i.jsx("span",{className:"ml-auto text-[10px] text-fg-faint",children:c[f.provenance]})]})]})]}):A}export{se as P};