kojee-mcp 0.5.12 → 0.5.13

package/dist/{chunk-LDZXU3DW.js → chunk-2OLXXOT3.js}

@@ -62,6 +62,7 @@ function translateHttpError(status, errorCode, trigger) {
   return null;
 }
 var TANDEM_ERROR_MESSAGES = {
+  [-32001]: () => "You aren't an active member of that Tandem (the seat may have been reaped). Run tandem_join to reactivate it, then retry.",
   [-32003]: () => "This Tandem is hardened to owner-only membership; you can't join.",
   [-32004]: () => "You aren't a member of that Tandem. Use tandem_join(join_link) first.",
   [-32006]: (data) => {

package/dist/{chunk-FQZCENSG.js → chunk-3H3TL34J.js}

@@ -2,8 +2,9 @@ import {
   claudeCodeAdapter
 } from "./chunk-XXFVWP6H.js";
 import {
-  GatewayClient
-} from "./chunk-HSR3GXCL.js";
+  GatewayClient,
+  applyStableSessionId
+} from "./chunk-IMOEZ4NJ.js";
 import {
   AuthModule
 } from "./chunk-JXMVZEQ7.js";
@@ -14,7 +15,7 @@ import {
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-WLMPCX7T.js";
+} from "./chunk-CM3EKMDD.js";
 import {
   findClaudeAncestorPid
 } from "./chunk-VHKPWUX7.js";
@@ -23,7 +24,7 @@ import {
 } from "./chunk-YKW54DKF.js";
 
 // src/index.ts
-import fs3 from "fs";
+import fs2 from "fs";
 import os2 from "os";
 import path2 from "path";
 
@@ -149,67 +150,8 @@ var unknownAdapter = {
   }
 };
 
-// src/runtime/cc-session-id.ts
-import fs from "fs";
-import { execFileSync } from "child_process";
-import { createHash } from "crypto";
-var CC_SESSION_ENV = "CLAUDE_CODE_SESSION_ID";
-function extractCcSessionId(raw) {
-  if (raw.includes("\0")) {
-    for (const entry of raw.split("\0")) {
-      if (entry.startsWith(`${CC_SESSION_ENV}=`)) {
-        const v = entry.slice(CC_SESSION_ENV.length + 1);
-        return v.length > 0 ? v : null;
-      }
-    }
-    return null;
-  }
-  const re = new RegExp(`(?:^|\\s)${CC_SESSION_ENV}=([^\\s]+)`, "g");
-  let last = null;
-  let m;
-  while ((m = re.exec(raw)) !== null) last = m[1];
-  return last;
-}
-function defaultReadProcessEnvRaw(pid, platform) {
-  try {
-    if (platform === "linux") {
-      return fs.readFileSync(`/proc/${pid}/environ`, "utf8");
-    }
-    if (platform === "darwin") {
-      return execFileSync("ps", ["eww", "-p", String(pid), "-o", "command="], {
-        encoding: "utf8",
-        timeout: 2e3
-      });
-    }
-  } catch {
-    return null;
-  }
-  return null;
-}
-function sanitizeKey(value) {
-  return value.replace(/[^A-Za-z0-9_-]/g, "");
-}
-function resolveInstanceKey(deps = {}) {
-  const env = deps.env ?? process.env;
-  const platform = deps.platform ?? process.platform;
-  const ccPid = deps.ccPid ?? null;
-  if (ccPid !== null) {
-    const reader = deps.readProcessEnvRaw ?? defaultReadProcessEnvRaw;
-    const raw = reader(ccPid, platform);
-    if (raw) {
-      const sid = sanitizeKey(extractCcSessionId(raw) ?? "");
-      if (sid) return sid;
-    }
-  }
-  const explicit = sanitizeKey((env.KOJEE_INSTANCE ?? "").trim());
-  if (explicit) return `inst-${explicit}`;
-  const base = deps.projectDir ?? env.CLAUDE_PROJECT_DIR ?? deps.cwd ?? process.cwd() ?? "";
-  const hash = createHash("sha256").update(base).digest("hex").slice(0, 12);
-  return `wd-${hash}`;
-}
-
 // src/tandem/room-memory.ts
-import fs2 from "fs";
+import fs from "fs";
 import os from "os";
 import path from "path";
 function defaultKojeeDir() {
@@ -221,7 +163,7 @@ function seatedRoomsPath(key, dir = defaultKojeeDir()) {
 function readSeatedRooms(key, dir = defaultKojeeDir()) {
   let raw;
   try {
-    raw = fs2.readFileSync(seatedRoomsPath(key, dir), "utf8");
+    raw = fs.readFileSync(seatedRoomsPath(key, dir), "utf8");
   } catch {
     return [];
   }
@@ -233,17 +175,17 @@ function readSeatedRooms(key, dir = defaultKojeeDir()) {
   }
 }
 function hasSeatedRoomsFile(key, dir = defaultKojeeDir()) {
-  return fs2.existsSync(seatedRoomsPath(key, dir));
+  return fs.existsSync(seatedRoomsPath(key, dir));
 }
 function seedSeatedRooms(key, rooms, dir = defaultKojeeDir()) {
   writeSeatedRooms(key, [...new Set(rooms)], dir);
 }
 function writeSeatedRooms(key, rooms, dir) {
-  fs2.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs.mkdirSync(dir, { recursive: true, mode: 448 });
   secureDir(dir);
   const filePath = seatedRoomsPath(key, dir);
   const body = { schema: 1, rooms, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  fs2.writeFileSync(filePath, JSON.stringify(body, null, 2), { mode: 384 });
+  fs.writeFileSync(filePath, JSON.stringify(body, null, 2), { mode: 384 });
   secureFile(filePath);
 }
 function addSeatedRoom(key, tandemId, dir = defaultKojeeDir()) {
@@ -294,21 +236,21 @@ async function startProxy(config) {
   const keystorePath = config.keystorePath || DEFAULT_KEYSTORE_PATH;
   const adapter = await selectAdapter();
   console.error(`[kojee-mcp] Starting proxy for ${config.url} (runtime=${adapter.runtime})`);
+  const ccPid = await findClaudeAncestorPid();
+  const { instanceKey } = await applyStableSessionId(config.token, { ccPid });
   const { registry, gateway } = await enrollAndDiscover(config, keystorePath);
   console.error(
     `[kojee-mcp] Ready \u2014 ${registry.toolCount} tools available from ${config.url}`
   );
-  const ccPid = await findClaudeAncestorPid();
-  const instanceKey = resolveInstanceKey({ ccPid });
   const roomMemory = {
     hasMemory: () => hasSeatedRoomsFile(instanceKey),
     read: () => readSeatedRooms(instanceKey),
     seed: (rooms) => seedSeatedRooms(instanceKey, rooms)
   };
   const recordRooms = parseTandemsConfig(process.env["KOJEE_TANDEMS"]).mode === "auto-local";
-  if (recordRooms && instanceKey.startsWith("wd-")) {
+  if (instanceKey.startsWith("wd-")) {
     console.error(
-      "[kojee-mcp] #28: no Claude Code session id available \u2014 room-memory keyed on project-dir hash; concurrent windows in the same dir will share it. Set KOJEE_INSTANCE=<unique-per-window> to keep them session-faithful."
+      "[kojee-mcp] degraded per-window fidelity: no per-window session id \u2014 two concurrent windows in the same project dir share ONE seat" + (recordRooms ? " and one room-memory file" : "") + ". Set KOJEE_INSTANCE=<unique-per-window> to keep them distinct."
     );
   }
   let activeStreamHandle = null;
@@ -370,7 +312,7 @@ async function startProxy(config) {
   }
   console.error(`[kojee-mcp] Tandem memberships: ${tandemMembershipCount === -1 ? "unknown" : tandemMembershipCount}`);
   let server;
-  const { selectDelivery } = await import("./registry-A3VT6VJD.js");
+  const { selectDelivery } = await import("./registry-TGALQP6M.js");
   const delivery = selectDelivery(adapter.runtime, {
     supportsChannels: adapter.supportsChannels
   });
@@ -445,7 +387,7 @@ async function enrollAndDiscover(config, keystorePath, isRetry = false) {
       "[kojee-mcp] Auth failed, attempting recovery with fresh enrollment..."
     );
     try {
-      if (fs3.existsSync(keystorePath)) fs3.unlinkSync(keystorePath);
+      if (fs2.existsSync(keystorePath)) fs2.unlinkSync(keystorePath);
     } catch (unlinkErr) {
       console.error("[kojee-mcp] Could not remove stale keystore:", unlinkErr);
     }

package/dist/{chunk-5XP2UOFK.js → chunk-74XFVX6Z.js}

@@ -1,7 +1,7 @@
 import {
-  MCP_SESSION_ID,
-  createDPoPProof
-} from "./chunk-2MIISF2W.js";
+  createDPoPProof,
+  getSessionId
+} from "./chunk-NR4Y54OL.js";
 
 // src/tandem/event-stream.ts
 var STALE_FLOOR_MS = 9e4;
@@ -180,7 +180,7 @@ async function openStream(opts, controller, sinceValue) {
     headers: {
       Authorization: `DPoP ${opts.token}`,
       DPoP: proof,
-      "Mcp-Session-Id": MCP_SESSION_ID,
+      "Mcp-Session-Id": getSessionId(),
       Accept: "text/event-stream"
     },
     signal: controller.signal

package/dist/{chunk-WLMPCX7T.js → chunk-CM3EKMDD.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-X672ZN7V.js";
 import {
   translateToolCallResult
-} from "./chunk-LDZXU3DW.js";
+} from "./chunk-2OLXXOT3.js";
 
 // src/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";

package/dist/{chunk-HIZ4NDWN.js → chunk-DXJ6QLSJ.js}

@@ -1,6 +1,6 @@
 import {
   translateToolCallResult
-} from "./chunk-LDZXU3DW.js";
+} from "./chunk-2OLXXOT3.js";
 
 // src/tandem/send.ts
 var SEND_KINDS = ["message", "status"];
@@ -52,7 +52,7 @@ function classifySendFailure(text) {
   if (/token is invalid or expired/i.test(text) || /authentication failed/i.test(text) || /re-?authoriz/i.test(text)) {
     return sendFailure("gateway_auth", text);
   }
-  if (/aren'?t a member|not a member/i.test(text)) {
+  if (/aren'?t a member|not[ _]a[ _]member|aren'?t an active member/i.test(text)) {
     return sendFailure("not_member", text);
   }
   if (/rate limit/i.test(text)) {
@@ -110,6 +110,25 @@ async function executeSend(gateway, request) {
     text
   };
 }
+async function executeJoin(gateway, tandemId) {
+  let result;
+  try {
+    result = await gateway.sendRpc("tools/call", {
+      name: "tandem_join",
+      arguments: { tandem_id: tandemId }
+    });
+  } catch (err) {
+    return classifySendFailure(
+      `tandem_join failed: ${err?.message ?? String(err)}`
+    );
+  }
+  const translated = translateToolCallResult(result);
+  const text = (translated.content ?? []).map((c) => typeof c?.text === "string" ? c.text : "").filter(Boolean).join("\n");
+  if (translated.isError) {
+    return classifySendFailure(text || "tandem_join returned an error with no text");
+  }
+  return { ok: true, tandem_id: tandemId, message_id: null, cursor: null, text };
+}
 var HTTP_STATUS_BY_CODE = {
   bad_request: 400,
   unauthorized: 401,
@@ -137,5 +156,6 @@ export {
   sendFailure,
   parseSendRequest,
   executeSend,
+  executeJoin,
   httpStatusForEnvelope
 };

package/dist/{chunk-HSR3GXCL.js → chunk-IMOEZ4NJ.js}

@@ -1,12 +1,17 @@
 import {
-  MCP_SESSION_ID,
-  createDPoPProof
-} from "./chunk-2MIISF2W.js";
+  createDPoPProof,
+  deriveStableSessionId,
+  getSessionId,
+  setStableSessionId
+} from "./chunk-NR4Y54OL.js";
 import {
   translateHttpError,
   translateJsonRpcError,
   translateNetworkError
-} from "./chunk-LDZXU3DW.js";
+} from "./chunk-2OLXXOT3.js";
+import {
+  findClaudeAncestorPid
+} from "./chunk-VHKPWUX7.js";
 
 // src/gateway-client.ts
 import crypto from "crypto";
@@ -129,7 +134,7 @@ var GatewayClient = class {
         "Content-Type": "application/json",
         Authorization: `DPoP ${this.token}`,
         DPoP: proof,
-        "Mcp-Session-Id": MCP_SESSION_ID
+        "Mcp-Session-Id": getSessionId()
       },
       body: JSON.stringify(rpcRequest),
       // ROUND-3 MAJOR A: the caller's AbortSignal rides HERE (a real fetch
@@ -153,6 +158,78 @@ var GatewayClient = class {
   }
 };
 
+// src/runtime/cc-session-id.ts
+import fs from "fs";
+import { execFileSync } from "child_process";
+import { createHash } from "crypto";
+var CC_SESSION_ENV = "CLAUDE_CODE_SESSION_ID";
+function extractCcSessionId(raw) {
+  if (raw.includes("\0")) {
+    for (const entry of raw.split("\0")) {
+      if (entry.startsWith(`${CC_SESSION_ENV}=`)) {
+        const v = entry.slice(CC_SESSION_ENV.length + 1);
+        return v.length > 0 ? v : null;
+      }
+    }
+    return null;
+  }
+  const re = new RegExp(`(?:^|\\s)${CC_SESSION_ENV}=([^\\s]+)`, "g");
+  let last = null;
+  let m;
+  while ((m = re.exec(raw)) !== null) last = m[1];
+  return last;
+}
+function defaultReadProcessEnvRaw(pid, platform) {
+  try {
+    if (platform === "linux") {
+      return fs.readFileSync(`/proc/${pid}/environ`, "utf8");
+    }
+    if (platform === "darwin") {
+      return execFileSync("ps", ["eww", "-p", String(pid), "-o", "command="], {
+        encoding: "utf8",
+        timeout: 2e3
+      });
+    }
+  } catch {
+    return null;
+  }
+  return null;
+}
+function sanitizeKey(value) {
+  return value.replace(/[^A-Za-z0-9_-]/g, "");
+}
+function resolveInstanceKey(deps = {}) {
+  const env = deps.env ?? process.env;
+  const platform = deps.platform ?? process.platform;
+  const ccPid = deps.ccPid ?? null;
+  if (ccPid !== null) {
+    const reader = deps.readProcessEnvRaw ?? defaultReadProcessEnvRaw;
+    const raw = reader(ccPid, platform);
+    if (raw) {
+      const sid = sanitizeKey(extractCcSessionId(raw) ?? "");
+      if (sid) return sid;
+    }
+  }
+  const explicit = sanitizeKey((env.KOJEE_INSTANCE ?? "").trim());
+  if (explicit) return `inst-${explicit}`;
+  const base = deps.projectDir ?? env.CLAUDE_PROJECT_DIR ?? deps.cwd ?? process.cwd() ?? "";
+  const hash = createHash("sha256").update(base).digest("hex").slice(0, 12);
+  return `wd-${hash}`;
+}
+
+// src/runtime/stable-session.ts
+async function applyStableSessionId(token, deps = {}) {
+  let instanceKey = deps.instanceKey;
+  if (instanceKey === void 0) {
+    const ccPid = deps.ccPid !== void 0 ? deps.ccPid : await findClaudeAncestorPid();
+    instanceKey = resolveInstanceKey({ ccPid });
+  }
+  const sessionId = deriveStableSessionId(token, instanceKey);
+  setStableSessionId(sessionId);
+  return { instanceKey, sessionId };
+}
+
 export {
-  GatewayClient
+  GatewayClient,
+  applyStableSessionId
 };

package/dist/{chunk-2MIISF2W.js → chunk-NR4Y54OL.js}

@@ -26,10 +26,23 @@ function computeAth(accessToken) {
 }
 
 // src/tandem/session-id.ts
+import crypto2 from "crypto";
 import { ulid } from "ulidx";
 var MCP_SESSION_ID = ulid();
+function deriveStableSessionId(token, instanceKey) {
+  return crypto2.createHash("sha256").update(`${token}:${instanceKey}`).digest("hex").slice(0, 32);
+}
+var _stableSessionId = null;
+function setStableSessionId(id) {
+  _stableSessionId = id;
+}
+function getSessionId() {
+  return _stableSessionId ?? MCP_SESSION_ID;
+}
 
 export {
   createDPoPProof,
-  MCP_SESSION_ID
+  deriveStableSessionId,
+  setStableSessionId,
+  getSessionId
 };

package/dist/cli.js

@@ -4,14 +4,14 @@ import {
 } from "./chunk-OGHDTFAX.js";
 import {
   startProxy
-} from "./chunk-FQZCENSG.js";
+} from "./chunk-3H3TL34J.js";
 import "./chunk-XXFVWP6H.js";
 import {
   pairedConfigPath
 } from "./chunk-YH27B6SW.js";
-import "./chunk-HSR3GXCL.js";
+import "./chunk-IMOEZ4NJ.js";
 import "./chunk-JXMVZEQ7.js";
-import "./chunk-2MIISF2W.js";
+import "./chunk-NR4Y54OL.js";
 import {
   defaultPairedKeystorePath,
   deriveKeystorePath
@@ -19,9 +19,9 @@ import {
 import "./chunk-BLEGIR35.js";
 import {
   VERSION
-} from "./chunk-WLMPCX7T.js";
+} from "./chunk-CM3EKMDD.js";
 import "./chunk-X672ZN7V.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
 import "./chunk-VHKPWUX7.js";
 import "./chunk-YKW54DKF.js";
 
@@ -79,7 +79,7 @@ Restart Claude Code for hooks to take effect.`
 program.command("send <tandem_id>").description(
   "Send a Tandem message using this machine's paired credentials (~/.kojee). Prints one JSON envelope to stdout: {ok, message_id, cursor, text} on success, {ok:false, error:<typed code>, message} on failure (exit 1)."
 ).requiredOption("--body <text>", "Message body (required)").option("--reply-to <message_id>", "Message id this send replies to").option("--kind <kind>", "Message kind: message | status (default: backend default)").action(async (tandemId, opts) => {
-  const { runSendCli } = await import("./send-cli-NZP5XE7T.js");
+  const { runSendCli } = await import("./send-cli-RH7D4JDP.js");
   const { exitCode, envelope } = await runSendCli({
     tandemId,
     body: opts.body,
@@ -90,7 +90,7 @@ program.command("send <tandem_id>").description(
   process.exit(exitCode);
 });
 program.command("tail <path>").description("Stream a file's contents and follow appends (portable replacement for `tail -F`)").action(async (filePath) => {
-  const { runTail } = await import("./tail-stream-VZ462ZON.js");
+  const { runTail } = await import("./tail-stream-5DAVRQYK.js");
   try {
     await runTail(filePath);
   } catch (err) {

package/dist/{event-stream-FOT7MJZH.js → event-stream-XX5EZ6HN.js}

@@ -6,8 +6,8 @@ import {
   sanitizeDisplayname,
   serializeCursorMap,
   startEventStream
-} from "./chunk-5XP2UOFK.js";
-import "./chunk-2MIISF2W.js";
+} from "./chunk-74XFVX6Z.js";
+import "./chunk-NR4Y54OL.js";
 export {
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,
   createAdaptiveWatchdog,

package/dist/{hook-server-37E2LUKJ.js → hook-server-T2Z444OV.js}

@@ -3,8 +3,8 @@ import {
   httpStatusForEnvelope,
   parseSendRequest,
   sendFailure
-} from "./chunk-HIZ4NDWN.js";
-import "./chunk-LDZXU3DW.js";
+} from "./chunk-DXJ6QLSJ.js";
+import "./chunk-2OLXXOT3.js";
 
 // src/tandem/hook-server.ts
 import crypto from "crypto";

package/dist/index.js

@@ -1,16 +1,16 @@
 import {
   listTandemIds,
   startProxy
-} from "./chunk-FQZCENSG.js";
+} from "./chunk-3H3TL34J.js";
 import "./chunk-XXFVWP6H.js";
-import "./chunk-HSR3GXCL.js";
+import "./chunk-IMOEZ4NJ.js";
 import "./chunk-JXMVZEQ7.js";
-import "./chunk-2MIISF2W.js";
+import "./chunk-NR4Y54OL.js";
 import "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-WLMPCX7T.js";
+import "./chunk-CM3EKMDD.js";
 import "./chunk-X672ZN7V.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
 import "./chunk-VHKPWUX7.js";
 import "./chunk-YKW54DKF.js";
 export {

package/dist/lib.d.ts

@@ -438,6 +438,49 @@ interface ResubscribeOptions {
  */
 declare function resubscribeMemberships(opts: ResubscribeOptions): Promise<number>;
 
+interface StableSessionDeps {
+    /**
+     * The Claude Code ancestor PID, when the caller already has it (the daemon).
+     * Pass `null` to SKIP the ancestry read (non-CC contexts, tests) — resolution
+     * then falls to KOJEE_INSTANCE → working-dir hash. Omit to resolve ancestry.
+     */
+    ccPid?: number | null;
+    /**
+     * An explicit instanceKey — bypasses ancestry AND resolveInstanceKey entirely.
+     * Used where the window identity is known out-of-band (an embedder's account
+     * key, tests).
+     */
+    instanceKey?: string;
+}
+/**
+ * §7 — install the STABLE Mcp-Session-Id (D1) for THIS process, the one DRY way
+ * every outbound construction site does it: the daemon (index.ts), the `send`
+ * sub-command, and embedding plugins (OpenClaw). Same (token, instanceKey) →
+ * same id → the backend converges on ONE seat per (credential, window) across
+ * restarts (no phantom seats; reaper retired).
+ *
+ * instanceKey precedence: an explicit `deps.instanceKey` wins; otherwise it's
+ * resolved by {@link resolveInstanceKey} from `deps.ccPid` (or a fresh ancestry
+ * read when `ccPid` is omitted) → CC session id, else KOJEE_INSTANCE, else a
+ * working-dir hash.
+ *
+ * Returns the resolved instanceKey + the installed sessionId so callers that
+ * also need the key (room-memory, discovery) don't resolve it twice.
+ */
+declare function applyStableSessionId(token: string, deps?: StableSessionDeps): Promise<{
+    instanceKey: string;
+    sessionId: string;
+}>;
+
+/**
+ * D1 — the STABLE Mcp-Session-Id: deterministic per (token, instanceKey),
+ * one-way + opaque. Same inputs → same id across proxy restarts, so the backend
+ * resolves the SAME Session + seat (no phantom seats, reaper retired). Computed
+ * at proxy startup where the gateway token + instanceKey (resolveInstanceKey)
+ * are known, in place of the random ulid() above.
+ */
+declare function deriveStableSessionId(token: string, instanceKey: string): string;
+
 /**
  * Flat tool registry — fetches all Kojee tools with full schemas on startup
  * and registers them directly with the MCP server. No discovery indirection,
@@ -604,4 +647,4 @@ interface WakeDelivery {
     health?(): DeliveryHealth;
 }
 
-export { AuthModule, type DeliveryHealth, type EventLog, type EventStreamOptions, GatewayClient, type HarnessAdapter, type PairedConfig, ProxyConfig, type Runtime, type StartedDelivery, type StreamHandle, type StreamLike, type StreamState, type TandemEvent, ToolCallResult, type WakeDelivery, type WakeDeliveryContext, type WebhookSink, createDPoPProof, defaultPairedKeystorePath, deriveKeystorePath, generateES256KeyPair, loadKeystore, loadPairedConfig, normalizeBackendEvent, pairedConfigPath, resubscribeMemberships, sanitizeDisplayname, saveKeystore, startEventStream };
+export { AuthModule, type DeliveryHealth, type EventLog, type EventStreamOptions, GatewayClient, type HarnessAdapter, type PairedConfig, ProxyConfig, type Runtime, type StableSessionDeps, type StartedDelivery, type StreamHandle, type StreamLike, type StreamState, type TandemEvent, ToolCallResult, type WakeDelivery, type WakeDeliveryContext, type WebhookSink, applyStableSessionId, createDPoPProof, defaultPairedKeystorePath, deriveKeystorePath, deriveStableSessionId, generateES256KeyPair, loadKeystore, loadPairedConfig, normalizeBackendEvent, pairedConfigPath, resubscribeMemberships, sanitizeDisplayname, saveKeystore, startEventStream };

package/dist/lib.js

@@ -5,20 +5,22 @@ import {
   normalizeBackendEvent,
   sanitizeDisplayname,
   startEventStream
-} from "./chunk-5XP2UOFK.js";
+} from "./chunk-74XFVX6Z.js";
 import {
   loadPairedConfig,
   pairedConfigPath
 } from "./chunk-YH27B6SW.js";
 import {
-  GatewayClient
-} from "./chunk-HSR3GXCL.js";
+  GatewayClient,
+  applyStableSessionId
+} from "./chunk-IMOEZ4NJ.js";
 import {
   AuthModule
 } from "./chunk-JXMVZEQ7.js";
 import {
-  createDPoPProof
-} from "./chunk-2MIISF2W.js";
+  createDPoPProof,
+  deriveStableSessionId
+} from "./chunk-NR4Y54OL.js";
 import {
   defaultPairedKeystorePath,
   deriveKeystorePath,
@@ -27,13 +29,16 @@ import {
   saveKeystore
 } from "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
+import "./chunk-VHKPWUX7.js";
 export {
   AuthModule,
   GatewayClient,
+  applyStableSessionId,
   createDPoPProof,
   defaultPairedKeystorePath,
   deriveKeystorePath,
+  deriveStableSessionId,
   generateES256KeyPair,
   loadKeystore,
   loadPairedConfig,

package/dist/{registry-A3VT6VJD.js → registry-TGALQP6M.js}

@@ -4,9 +4,9 @@ import "./chunk-LSUB6QMP.js";
 import {
   claudeCodeAdapter
 } from "./chunk-XXFVWP6H.js";
-import "./chunk-WLMPCX7T.js";
+import "./chunk-CM3EKMDD.js";
 import "./chunk-X672ZN7V.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
 
 // src/delivery/lib/fanout.ts
 async function deliverEvent(event, sinks) {
@@ -56,7 +56,7 @@ function createClaudeCodeDelivery() {
     name: "claude-code",
     async start(ctx) {
       const { EventQueue } = await import("./event-queue-5YVJFR3E.js");
-      const { startHookServer } = await import("./hook-server-37E2LUKJ.js");
+      const { startHookServer } = await import("./hook-server-T2Z444OV.js");
       const {
         writeDiscoveryByKey,
         cleanupDiscoveryByKey,
@@ -66,8 +66,8 @@ function createClaudeCodeDelivery() {
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
-      const { startEventStream } = await import("./event-stream-FOT7MJZH.js");
-      const { createMcpServer } = await import("./server-77QRWKJM.js");
+      const { startEventStream } = await import("./event-stream-XX5EZ6HN.js");
+      const { createMcpServer } = await import("./server-LBVEDIXP.js");
       const { deriveDiscoveryKey } = await import("./ancestry-ONFBQEP5.js");
       sweepStaleDiscovery();
       sweepStaleEventLogs();
@@ -234,8 +234,8 @@ function createWebhookDelivery(name) {
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
-      const { startEventStream } = await import("./event-stream-FOT7MJZH.js");
-      const { createMcpServer } = await import("./server-77QRWKJM.js");
+      const { startEventStream } = await import("./event-stream-XX5EZ6HN.js");
+      const { createMcpServer } = await import("./server-LBVEDIXP.js");
       sweepStaleEventLogs();
       eventLog = startEventLog({
         key: ctx.instanceKey,

package/dist/{send-cli-NZP5XE7T.js → send-cli-RH7D4JDP.js}

@@ -1,25 +1,28 @@
 import {
+  executeJoin,
   executeSend,
   parseSendRequest,
   sendFailure
-} from "./chunk-HIZ4NDWN.js";
+} from "./chunk-DXJ6QLSJ.js";
 import {
   loadPairedConfig
 } from "./chunk-YH27B6SW.js";
 import {
-  GatewayClient
-} from "./chunk-HSR3GXCL.js";
-import "./chunk-2MIISF2W.js";
+  GatewayClient,
+  applyStableSessionId
+} from "./chunk-IMOEZ4NJ.js";
+import "./chunk-NR4Y54OL.js";
 import {
   loadKeystore
 } from "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
+import "./chunk-VHKPWUX7.js";
 
 // src/tandem/send-cli.ts
 import os from "os";
 import path from "path";
-async function createPairedGateway(kojeeDir) {
+async function createPairedGateway(kojeeDir, stableDeps = {}) {
   const configPath = path.join(kojeeDir, "config.json");
   const paired = loadPairedConfig(configPath);
   if (!paired) {
@@ -28,6 +31,7 @@ async function createPairedGateway(kojeeDir) {
       `no paired config at ${configPath} \u2014 run \`kojee-mcp pair <code> --url <broker>\` first`
     );
   }
+  await applyStableSessionId(paired.token, stableDeps);
   const brokerUrl = paired.broker_url.replace(/\/+$/, "");
   const keystorePath = path.join(kojeeDir, "keypair.json");
   const keystore = await loadKeystore(keystorePath, brokerUrl).catch(() => null);
@@ -65,6 +69,10 @@ async function runSendCli(args, deps = {}) {
   if (!resolution.ok) {
     return { exitCode: 1, envelope: resolution };
   }
+  const joined = await executeJoin(resolution.gateway, parsed.request.tandem_id);
+  if (!joined.ok && (joined.error === "not_member" || joined.error === "gateway_auth")) {
+    return { exitCode: 1, envelope: joined };
+  }
   const envelope = await executeSend(resolution.gateway, parsed.request);
   return { exitCode: envelope.ok ? 0 : 1, envelope };
 }

package/dist/{server-77QRWKJM.js → server-LBVEDIXP.js}

@@ -3,9 +3,9 @@ import {
   createMcpServer,
   executeToolCall,
   startMcpServer
-} from "./chunk-WLMPCX7T.js";
+} from "./chunk-CM3EKMDD.js";
 import "./chunk-X672ZN7V.js";
-import "./chunk-LDZXU3DW.js";
+import "./chunk-2OLXXOT3.js";
 export {
   buildChannelInstructions,
   createMcpServer,

package/dist/{tail-stream-VZ462ZON.js → tail-stream-5DAVRQYK.js}

@@ -7,8 +7,8 @@ import {
 import "./chunk-DO42NPNR.js";
 import {
   createAdaptiveWatchdog
-} from "./chunk-5XP2UOFK.js";
-import "./chunk-2MIISF2W.js";
+} from "./chunk-74XFVX6Z.js";
+import "./chunk-NR4Y54OL.js";
 import "./chunk-BLEGIR35.js";
 
 // src/tail-stream.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kojee-mcp",
-  "version": "0.5.12",
+  "version": "0.5.13",
   "type": "module",
   "main": "dist/index.js",
   "exports": {