kojee-mcp 0.7.5-staging.2 → 0.7.5-staging.21

package/dist/{chunk-XPIW4N55.js → chunk-N2YAZRAD.js}

@@ -1,19 +1,22 @@
 import {
+  CODEX_TRUST_FIX_STEPS,
   buildCodexMcpServerTable,
   buildCodexPromptSubmitHookBlock,
   buildCodexStopHookBlock,
   isPlaceholderWebhookUrl,
   removeCodexConfig,
   writeCodexConfig
-} from "./chunk-6XWTUDWW.js";
+} from "./chunk-WDWVBPXA.js";
 import {
   removeOpenclawMcpServer,
   writeOpenclawMcpConfig
 } from "./chunk-E6WMFMM2.js";
 import {
-  WIZARD_RUNTIMES,
-  isWizardRuntime
-} from "./chunk-77HWBSRH.js";
+  HERMES_INSTANCE_KEY,
+  defaultHermesConfigPath,
+  removeHermesMcpServer,
+  writeHermesMcpConfig
+} from "./chunk-GEGUWQYT.js";
 import {
   CONNECT_RUNTIMES
 } from "./chunk-EIH2LNF4.js";
@@ -22,6 +25,10 @@ import {
   readRecordedRuntime,
   recordRuntime
 } from "./chunk-RDLF4NQC.js";
+import {
+  WIZARD_RUNTIMES,
+  isWizardRuntime
+} from "./chunk-77HWBSRH.js";
 import {
   kojeeHomeDir
 } from "./chunk-SQL56SEB.js";
@@ -42,14 +49,12 @@ import {
   secureFile,
   unlinkSyncRetry
 } from "./chunk-U5HHHRXA.js";
-import {
-  VERSION
-} from "./chunk-5DHIUN73.js";
 import {
   CODEX_LISTEN_CAP_MS,
+  VERSION,
   buildCondensedTandemRules,
   buildWebhookReceiverNote
-} from "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 
 // src/wizard/pair-slot.ts
 import fs from "fs";
@@ -350,11 +355,11 @@ function writeWebhookSecretBothSides(opts) {
     ["KOJEE_RUNTIME", opts.runtime],
     ["KOJEE_WEBHOOK_URL", opts.webhookUrl],
     ["KOJEE_WEBHOOK_SECRET", secret],
-    ...opts.signatureEnv ?? []
+    ...opts.signatureEnv ?? [],
+    ...opts.daemonExtraEnv ?? []
   ];
   upsertEnvFile(opts.daemonEnvPath, daemonVars, {
-    exportPrefix: true,
-    header: `# kojee daemon env for runtime=${opts.runtime} (source this before starting the daemon)`
+    header: `# kojee daemon env for runtime=${opts.runtime} (load with: set -a; . <this file>; set +a)`
   });
   secureFile(opts.daemonEnvPath);
   const adapterVars = [
@@ -418,6 +423,22 @@ function installBundledPayload(opts) {
 // src/wizard/service.ts
 import fs5 from "fs";
 import path5 from "path";
+function shQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function wrapperEnvEntries(spec) {
+  const marker = spec.wrapperEnv ?? { KOJEE_WEBHOOK_EXPECTED: "1" };
+  return [["KOJEE_RUNTIME", spec.runtime], ...Object.entries(marker)];
+}
+function daemonSourceExecCommand(spec) {
+  const target = spec.nodePath ? `${spec.nodePath} ${spec.binPath}` : spec.binPath;
+  const withArgs = spec.binArgs && spec.binArgs.length > 0 ? `${target} ${spec.binArgs.map(shQuote).join(" ")}` : target;
+  const source = spec.envFile ? `set -a; . ${spec.envFile}; set +a; ` : "";
+  return `${source}exec ${withArgs}`;
+}
+function xmlEscape(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
 function systemdUnit(spec) {
   return [
     "[Unit]",
@@ -427,9 +448,14 @@ function systemdUnit(spec) {
     "",
     "[Service]",
     "Type=simple",
-    `EnvironmentFile=${spec.envFile}`,
-    `Environment=KOJEE_RUNTIME=${spec.runtime}`,
-    `ExecStart=${spec.binPath}`,
+    // §2b DISCRIMINATOR: KOJEE_WEBHOOK_EXPECTED lives in the WRAPPER env (this
+    // Environment= line), NOT in the sourced env file — a same-class drop would
+    // otherwise kill the marker too. It lets startProxy tell the "webhook was
+    // meant to be here" daemon apart from the tools-only child (which never sets
+    // it) when the sourced URL is absent → null delivery.
+    `Environment=${wrapperEnvEntries(spec).map(([k, v]) => `${k}=${v}`).join(" ")}`,
+    // §2a: source the env file inside a shell wrapper (replaces EnvironmentFile=).
+    `ExecStart=/bin/sh -c '${daemonSourceExecCommand(spec)}'`,
     "Restart=always",
     "RestartSec=5",
     "StandardOutput=journal",
@@ -450,11 +476,19 @@ function launchdPlist(spec, label) {
     '<plist version="1.0">',
     "<dict>",
     "  <key>Label</key>",
-    `  <string>${label}</string>`,
+    `  <string>${xmlEscape(label)}</string>`,
+    // §2a: same source-wrapper as the systemd unit so macOS actually loads the
+    // env file (the plist historically never did). The secret is never inlined
+    // here — it stays in the 0o600 sourced file.
     "  <key>ProgramArguments</key>",
-    `  <array><string>${spec.binPath}</string></array>`,
+    "  <array>",
+    "    <string>/bin/sh</string>",
+    "    <string>-c</string>",
+    `    <string>${xmlEscape(daemonSourceExecCommand(spec))}</string>`,
+    "  </array>",
+    // §2b: KOJEE_WEBHOOK_EXPECTED in the wrapper env (NOT the sourced file).
     "  <key>EnvironmentVariables</key>",
-    `  <dict><key>KOJEE_RUNTIME</key><string>${spec.runtime}</string></dict>`,
+    `  <dict>${wrapperEnvEntries(spec).map(([k, v]) => `<key>${xmlEscape(k)}</key><string>${xmlEscape(v)}</string>`).join("")}</dict>`,
     "  <key>RunAtLoad</key><true/>",
     "  <key>KeepAlive</key><true/>",
     "</dict>",
@@ -506,6 +540,15 @@ function writeService(platform, spec) {
   }
   return plan;
 }
+function removeService(platform, spec) {
+  const plan = planService(platform, spec);
+  let removed = false;
+  if (plan.unitPath && fs5.existsSync(plan.unitPath)) {
+    fs5.unlinkSync(plan.unitPath);
+    removed = true;
+  }
+  return { removed, deactivateCmd: plan.deactivateCmd };
+}
 
 // src/wizard/installers/hermes.ts
 function installHermes(inp) {
@@ -529,11 +572,14 @@ function installHermes(inp) {
     adapterEnvPath: adapterEnv,
     webhookUrl: inp.webhookUrl,
     runtime: "hermes",
+    daemonExtraEnv: [["KOJEE_INSTANCE", HERMES_INSTANCE_KEY]],
     ...inp.mcpDir ? { mcpDir: inp.mcpDir } : {},
     ...inp.allowAllUsers ? { allowAllUsers: true } : {},
     ...inp.signatureEnv && inp.signatureEnv.length > 0 ? { signatureEnv: inp.signatureEnv } : {},
     ...inp.webhookSecret ? { existingSecret: inp.webhookSecret } : {}
   });
+  const hermesConfig = defaultHermesConfigPath(inp.homeDir);
+  const mcp = writeHermesMcpConfig(hermesConfig, { binPath: inp.binPath });
   const staged = inp.skipPayload ? [] : installBundledPayload({
     runtime: "hermes",
     baseDir: inp.payloadBaseDir,
@@ -543,6 +589,7 @@ function installHermes(inp) {
   const svc = writeService(inp.platform, {
     serviceName: "kojee-hermes",
     binPath: inp.binPath,
+    ...inp.nodePath ? { nodePath: inp.nodePath } : {},
     envFile: daemonEnv,
     runtime: "hermes",
     homeDir: inp.homeDir
@@ -552,6 +599,8 @@ function installHermes(inp) {
     `  secret:      ${sec.reused ? "reused existing" : "generated"} (matched on daemon + adapter env)`,
     `  daemon env:  ${daemonEnv}`,
     `  adapter env: ${adapterEnv}`,
+    `  mcp config:  ${hermesConfig} (mcp_servers.kojee \u2014 agent explores kojee via mcp_kojee_*)`,
+    ...mcp.backedUp ? [`  NOTE: prior ${hermesConfig} was unparseable; backed up to ${mcp.backedUp} before writing.`] : [],
     inp.skipPayload ? `  plugin:      SKIPPED \u2014 no bundled payload (run \`npm run build\` to stage dist/plugins/hermes)` : `  plugin:      ${pluginDir} (${staged.length} files)`,
     svc.supported ? `  service:     ${svc.unitPath}` : `  service:     manual \u2014 ${svc.note ?? "unsupported platform"}`,
     // NB: the "Receiver contract" section is intentionally NOT printed here.
@@ -559,11 +608,18 @@ function installHermes(inp) {
     // every daemon runtime) on the same URL-present path before this output, so
     // emitting it here too would print the contract twice.
     "",
-    "Next:",
-    `  - start the daemon service:  ${svc.activateCmd}`,
-    "  - reload the Hermes gateway to load the plugin:  systemctl --user restart hermes-gateway (or: hermes gateway restart)",
-    "  - join a tandem once:  tandem_join <tandem_id>",
-    "  - verify:  kojee-mcp doctor"
+    "Next \u2014 ACTIVATE (owner steps; the receiver never binds until you do these, in order):",
+    "  1. enable the Tandem receiver plugin (WITHOUT this, the gateway restart loads nothing):",
+    "         hermes plugins enable kojee-tandem",
+    "  2. restart the gateway to bind the receiver (:8645) AND load the kojee MCP tools:",
+    "         hermes gateway restart   (or: systemctl --user restart hermes-gateway)",
+    `  3. start the pusher daemon:  ${svc.activateCmd}`,
+    "  4. verify end-to-end (should read HEALTHY):  kojee-mcp doctor --runtime hermes",
+    "",
+    "  Notes:",
+    "   - the agent joins rooms from its own tools:  mcp_kojee_tandem_join <tandem_id>",
+    "   - if tools don't register: ensure Hermes has the MCP extra",
+    '       (cd ~/.hermes/hermes-agent && uv pip install -e ".[mcp]") and re-check connect_timeout.'
   ];
   return {
     runtime: "hermes",
@@ -580,6 +636,16 @@ function installOpenclaw(inp) {
     ...inp.pairedConfigPath ? { pairedConfigPath: inp.pairedConfigPath } : {},
     ...inp.now ? { now: inp.now } : {}
   });
+  const platform = inp.platform ?? process.platform;
+  const svc = !inp.skipService && inp.binPath && inp.homeDir ? writeService(platform, {
+    serviceName: "kojee-openclaw",
+    binPath: inp.binPath,
+    ...inp.nodePath ? { nodePath: inp.nodePath } : {},
+    runtime: "openclaw",
+    homeDir: inp.homeDir,
+    binArgs: ["--paired-config", inp.pairedConfigPath ?? perRuntimeConfigPath("openclaw")],
+    wrapperEnv: { KOJEE_HEADLESS: "1" }
+  }) : null;
   const lines = [];
   if (r.backedUp) {
     lines.push(
@@ -588,17 +654,22 @@ function installOpenclaw(inp) {
     );
   }
   lines.push(
-    "Configured runtime: openclaw (MCP server + /wake injector)",
-    "Wake mode: kojee-mcp runs as OpenClaw's MCP server; Tandem events POST to the local",
-    "           OpenClaw gateway /hooks/wake (Bearer hooks.token) \u2192 the agent wakes.",
-    `  mcp config:  ${inp.openclawConfigPath} (mcp.servers.kojee)`,
+    "Configured runtime: openclaw (MCP server + standing /hooks/agent wake daemon)",
+    "Wake mode: the kojee-openclaw DAEMON holds the Tandem SSE stream and, on an @mention,",
+    "           POSTs the local OpenClaw gateway /hooks/agent (Bearer hooks.token) \u2192 a FULL",
+    "           agent run (kojee tools mounted) so the agent can reply via tandem_send.",
+    `  mcp config:  ${inp.openclawConfigPath} (mcp.servers.kojee \u2014 per-run tools; no SSE stream)`,
     inp.pairedConfigPath ? `  credentials: per-runtime paired slot (${inp.pairedConfigPath})` : `  credentials: shared ~/.kojee/config.json (paired)`,
     `  hooks token: ${r.hooksTokenGenerated ? "generated + hooks.enabled=true (new)" : "preserved existing"}`,
+    svc ? svc.supported ? `  wake daemon: ${svc.unitPath}` : `  wake daemon: manual \u2014 ${svc.note ?? "unsupported platform"}` : "  wake daemon: NOT installed (no launch path resolved) \u2014 run connect from the CLI",
     "",
     "Next steps (openclaw):",
-    "  - Run OpenClaw as its GATEWAY DAEMON (its default mode) \u2014 the /wake injector only",
-    "    wakes a running gateway. If the gateway is down, nudges are dropped until it restarts.",
-    "  - Restart the OpenClaw gateway to spawn the kojee MCP server: openclaw gateway restart",
+    ...svc && svc.supported ? [
+      `  - Start the standing wake daemon:  ${svc.activateCmd}`,
+      "    (it holds the SSE stream so an IDLE agent is still woken on @mentions)."
+    ] : svc ? [`  - Start the standing wake daemon:  ${svc.activateCmd}`] : [],
+    "  - Ensure the OpenClaw gateway is running (the daemon POSTs /hooks/agent to it).",
+    "  - Restart the OpenClaw gateway to spawn the kojee MCP tools server: openclaw gateway restart",
     "  - Verify: openclaw mcp list  (kojee should be listed)  /  kojee-mcp doctor",
     "",
     // Belt-and-suspenders: the same condensed rules ride the kojee MCP server's
@@ -613,11 +684,21 @@ function installOpenclaw(inp) {
 }
 function uninstallOpenclaw(inp) {
   const removed = removeOpenclawMcpServer(inp.openclawConfigPath);
+  const svc = inp.homeDir ? removeService(inp.platform ?? process.platform, {
+    serviceName: "kojee-openclaw",
+    binPath: "",
+    runtime: "openclaw",
+    homeDir: inp.homeDir
+  }) : null;
   const lines = [
-    "Uninstalling runtime: openclaw (MCP server + /wake injector)",
+    "Uninstalling runtime: openclaw (MCP server + wake daemon)",
     removed ? `  removed mcp.servers.kojee from ${inp.openclawConfigPath} (hooks + siblings preserved)` : `  no mcp.servers.kojee in ${inp.openclawConfigPath} \u2014 nothing to remove`,
+    ...svc ? [
+      svc.removed ? `  removed the kojee-openclaw wake-daemon unit (stop it: ${svc.deactivateCmd})` : "  no kojee-openclaw wake-daemon unit found"
+    ] : [],
     "",
     "Next steps (openclaw):",
+    "  - Stop the wake daemon if still running (see the deactivate command above).",
     "  - Restart the OpenClaw gateway: openclaw gateway restart",
     "  - hooks.enabled/token were left intact (you may use hooks for other integrations)."
   ];
@@ -790,7 +871,7 @@ function whatHappensNext(runtime, opts) {
   return lines.join("\n");
 }
 async function configureClaudeCode(opts) {
-  const { runInit } = await import("./install-JQNDGAAQ.js");
+  const { runInit } = await import("./install-GJVZEWLI.js");
   const report = runInit({
     ...opts.configPath ? { configPath: opts.configPath } : {},
     ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
@@ -892,7 +973,7 @@ function configureCodex(opts) {
   lines.push("");
   if (writeResult.hooksChanged) {
     lines.push(
-      "IMPORTANT: Codex will re-prompt to trust hooks on its next launch \u2014 approve it, or wakes silently stop."
+      `IMPORTANT: this rewrite invalidated Codex's hook trust \u2014 the hooks are now UNTRUSTED and wakes stay silent until you re-trust them: ${CODEX_TRUST_FIX_STEPS}.`
     );
     lines.push("");
   }
@@ -923,7 +1004,7 @@ function buildDaemonEnvBlock(runtime, wh, envFile) {
     lines.push(`  export KOJEE_WEBHOOK_SECRET=<generated; in ${envFile}>`);
     for (const [k, v] of wh.signatureEnv) lines.push(`  export ${k}=${shellSingleQuote(v)}`);
     lines.push(`  (validated: ${wh.redactedSummary})`);
-    lines.push(`  source ${envFile}`);
+    lines.push(`  set -a; . ${envFile}; set +a`);
   } else {
     lines.push("Set the daemon env (no receiver URL supplied yet):");
     lines.push(`  export KOJEE_RUNTIME=${shellSingleQuote(runtime)}`);
@@ -941,7 +1022,18 @@ function distDir() {
 }
 function resolveBinPath() {
   const entry = process.argv[1];
-  return entry && entry.length > 0 ? entry : "kojee-mcp";
+  if (!entry || entry.length === 0) return "kojee-mcp";
+  try {
+    return fs6.realpathSync(entry);
+  } catch {
+    return entry;
+  }
+}
+function resolveDaemonExec() {
+  const nodePath = process.execPath;
+  const binPath = resolveBinPath();
+  const ephemeral = /[\\/]_npx[\\/]/.test(binPath);
+  return { nodePath, binPath, ephemeral };
 }
 function configureHermes(opts) {
   const runtime = "hermes";
@@ -955,7 +1047,10 @@ function configureHermes(opts) {
   opts = effectiveOpts;
   const lines = [];
   lines.push(`Configured runtime: ${runtime}`);
-  lines.push("Wake mode: webhook sink (daemon-consumed). NO MCP-config file, NO hooks written.");
+  lines.push(
+    "Wake mode: webhook sink (daemon-consumed). ALSO registers kojee as the Hermes agent's",
+    "MCP server (mcp_servers.kojee) so the agent can explore kojee tools. NO hooks written."
+  );
   lines.push("");
   if (!suppliedUrl) {
     lines.push(
@@ -981,11 +1076,13 @@ function configureHermes(opts) {
     }
     const env = opts.env ?? process.env;
     const suppliedSecret = (opts.webhookSecret ?? env["KOJEE_WEBHOOK_SECRET"] ?? "").trim();
+    const daemonExec = resolveDaemonExec();
     const install = installHermes({
       homeDir: home,
       payloadBaseDir: base,
       platform: process.platform,
-      binPath: resolveBinPath(),
+      binPath: daemonExec.binPath,
+      nodePath: daemonExec.nodePath,
       webhookUrl: wh.url,
       ...suppliedSecret ? { webhookSecret: suppliedSecret } : {},
       ...wh.signatureEnv.length > 0 ? { signatureEnv: wh.signatureEnv } : {},
@@ -998,6 +1095,15 @@ function configureHermes(opts) {
       return { runtime, output: lines.join("\n"), exitCode: install.exitCode };
     }
     recordRuntime(runtime);
+    if (daemonExec.ephemeral) {
+      lines.push(
+        "\u26A0 DURABILITY: this ran from an ephemeral npx cache, so the daemon points at a",
+        "  path npx will eventually delete (the daemon would then fail to start).",
+        "  For a durable daemon, install globally and re-run init:",
+        "      npm i -g kojee-mcp && kojee-mcp init --runtime hermes",
+        ""
+      );
+    }
     const envFile = path7.join(home, ".kojee", "hermes.env");
     lines.push(...buildDaemonEnvBlock(runtime, wh, envFile));
     lines.push("");
@@ -1024,18 +1130,35 @@ function openclawConfigPath(opts) {
 }
 function configureOpenclaw(opts) {
   const runtime = "openclaw";
+  const daemonExec = resolveDaemonExec();
   const install = installOpenclaw({
     openclawConfigPath: openclawConfigPath(opts),
-    ...opts.pairedConfigPath ? { pairedConfigPath: opts.pairedConfigPath } : {}
+    ...opts.pairedConfigPath ? { pairedConfigPath: opts.pairedConfigPath } : {},
+    // Launch coords for the standing kojee-openclaw wake daemon (holds the SSE
+    // stream so an idle agent is reachable). Absent → installer writes only the
+    // MCP config (the shape tests).
+    binPath: daemonExec.binPath,
+    nodePath: daemonExec.nodePath,
+    homeDir: kojeeHomeDir(),
+    platform: process.platform
   });
   recordRuntime(runtime);
-  return { runtime, output: install.output, exitCode: install.exitCode };
+  const lines = [install.output];
+  if (daemonExec.ephemeral) {
+    lines.push(
+      "",
+      "\u26A0 DURABILITY: this ran from an ephemeral npx cache, so the wake daemon points at a",
+      "  path npx will eventually delete (the daemon would then fail to start). For a durable",
+      "  daemon:  npm i -g kojee-mcp && kojee-mcp connect <code> --runtime openclaw"
+    );
+  }
+  return { runtime, output: lines.join("\n"), exitCode: install.exitCode };
 }
 async function runWizardUninstall(runtime, opts) {
   const effective = opts.runtime !== void 0 ? runtime : readRecordedRuntime() ?? runtime;
   const lines = [`Uninstalling runtime: ${effective}`];
   if (effective === "claude-code") {
-    const { runUninstall } = await import("./install-JQNDGAAQ.js");
+    const { runUninstall } = await import("./install-GJVZEWLI.js");
     const report = runUninstall({
       ...opts.configPath ? { configPath: opts.configPath } : {},
       ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {}
@@ -1059,11 +1182,19 @@ async function runWizardUninstall(runtime, opts) {
     lines.push(`  config.toml [mcp_servers.kojee]: ${removed.mcpServer ? "removed" : "not found"}`);
     lines.push(`  hooks.json Stop: ${removed.stopHook ? "removed" : "not found"}`);
   } else if (effective === "openclaw") {
-    const un = uninstallOpenclaw({ openclawConfigPath: openclawConfigPath(opts) });
+    const un = uninstallOpenclaw({
+      openclawConfigPath: openclawConfigPath(opts),
+      homeDir: kojeeHomeDir(),
+      platform: process.platform
+    });
     lines.push(un.output);
   } else {
-    lines.push("  (hermes writes no MCP-config or hooks \u2014 nothing to tear down.");
-    lines.push("   Stop the daemon and unset KOJEE_WEBHOOK_URL/SECRET to disable the sink.)");
+    const hermesConfig = defaultHermesConfigPath(kojeeHomeDir());
+    const removedMcp = removeHermesMcpServer(hermesConfig);
+    lines.push(
+      removedMcp ? `  removed mcp_servers.kojee from ${hermesConfig} (operator config preserved)` : `  no mcp_servers.kojee in ${hermesConfig} \u2014 nothing to remove`
+    );
+    lines.push("  (stop the daemon service + reload the gateway to disable the webhook wake path.)");
     const envPath = path7.join(kojeeHomeDir(), ".kojee", `${effective}.env`);
     try {
       fs6.unlinkSync(envPath);
@@ -1109,7 +1240,11 @@ registerBuiltinInstaller(
     "webhook",
     "webhook-secret-both-sides",
     "plugin-payload-copy",
-    "service-install"
+    "service-install",
+    // kojee registered as the Hermes agent's MCP server (mcp_servers.kojee in
+    // ~/.hermes/config.yaml) so the agent can EXPLORE + call kojee tools —
+    // additive to the channel plugin, does not change the webhook wake path.
+    "mcp-config-write"
   ],
   (o) => configureHermes(o)
 );

package/dist/{chunk-LSUB6QMP.js → chunk-NIIBVKLP.js}

@@ -5,6 +5,7 @@ var NULL_RESULT = {
   sessionId: null,
   transcriptPath: null,
   hookEventName: null,
+  source: null,
   stopHookActive: false,
   raw: ""
 };
@@ -22,6 +23,7 @@ async function readHookStdin() {
       sessionId: stringOrNull(parsed["session_id"]),
       transcriptPath: stringOrNull(parsed["transcript_path"]),
       hookEventName: stringOrNull(parsed["hook_event_name"]),
+      source: stringOrNull(parsed["source"]),
       stopHookActive: parsed["stop_hook_active"] === true,
       raw
     };
@@ -30,6 +32,7 @@ async function readHookStdin() {
       sessionId: null,
       transcriptPath: null,
       hookEventName: null,
+      source: null,
       stopHookActive: false,
       raw
     };

package/dist/chunk-P64UR3SE.js

@@ -0,0 +1,86 @@
+import {
+  kojeeHomeDir
+} from "./chunk-SQL56SEB.js";
+
+// src/runtime/flap-log.ts
+import fs from "fs";
+import path from "path";
+var MAX_FLAP_ENTRIES = 25;
+function defaultFlapLogPath() {
+  return path.join(kojeeHomeDir(), ".kojee", "daemon-flaps.json");
+}
+function realRead(p) {
+  try {
+    return fs.readFileSync(p, "utf8");
+  } catch {
+    return null;
+  }
+}
+function realWrite(p, content) {
+  fs.mkdirSync(path.dirname(p), { recursive: true });
+  fs.writeFileSync(p, content, "utf8");
+}
+function readFlaps(deps = {}) {
+  const p = deps.filePath ?? defaultFlapLogPath();
+  const raw = (deps.readFile ?? realRead)(p);
+  if (raw === null) return [];
+  try {
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(
+      (e) => !!e && typeof e.ts === "number" && typeof e.instanceKey === "string"
+    );
+  } catch {
+    return [];
+  }
+}
+function recordFlap(entry, deps = {}) {
+  try {
+    const p = deps.filePath ?? defaultFlapLogPath();
+    const existing = readFlaps(deps);
+    const next = [...existing, entry].slice(-MAX_FLAP_ENTRIES);
+    (deps.writeFile ?? realWrite)(p, JSON.stringify(next, null, 2));
+  } catch {
+  }
+}
+function flapRateExceeds(flaps, opts) {
+  const cutoff = opts.now - opts.windowMs;
+  return flaps.filter((f) => f.ts >= cutoff).length >= opts.count;
+}
+function recentFlapCount(flaps, windowMs, now) {
+  const cutoff = now - windowMs;
+  return flaps.filter((f) => f.ts >= cutoff).length;
+}
+var FLAP_WINDOW_MS = 15 * 6e4;
+var FLAP_WARN_COUNT = 3;
+function buildFlapDoctorCheck(deps = {}) {
+  const name = deps.name ?? "daemon flapping";
+  const history = (deps.readFlaps ?? readFlaps)();
+  const now = deps.now?.() ?? Date.now();
+  const recent = recentFlapCount(history, FLAP_WINDOW_MS, now);
+  if (flapRateExceeds(history, { count: FLAP_WARN_COUNT, windowMs: FLAP_WINDOW_MS, now })) {
+    const last = history[history.length - 1];
+    return {
+      name,
+      ok: "warn",
+      detail: `the stream-liveness watchdog self-exited ${recent} times in the last 15min \u2014 the SSE reconnect loop is repeatedly wedging. This is a CHRONIC failure being masked by auto-restart; root-cause it (last reason: "${last?.reason ?? "unknown"}").`
+    };
+  }
+  return {
+    name,
+    ok: true,
+    detail: recent === 0 ? "no stream-liveness self-exits recently (healthy)" : `${recent} self-exit(s) in the last 15min \u2014 below the ${FLAP_WARN_COUNT}-in-15min chronic threshold`
+  };
+}
+
+export {
+  MAX_FLAP_ENTRIES,
+  defaultFlapLogPath,
+  readFlaps,
+  recordFlap,
+  flapRateExceeds,
+  recentFlapCount,
+  FLAP_WINDOW_MS,
+  FLAP_WARN_COUNT,
+  buildFlapDoctorCheck
+};

package/dist/{chunk-A4IOKD4Z.js → chunk-QYZP6QT2.js}

@@ -1,12 +1,10 @@
 import {
-  VERSION
-} from "./chunk-5DHIUN73.js";
-import {
+  VERSION,
   buildCatchUpNote,
   buildCondensedTandemRules,
   buildMonitorSpawn,
   buildReplyRecipe
-} from "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 import {
   translateToolCallResult
 } from "./chunk-PPTKGWFF.js";

package/dist/{chunk-KNEJTD6G.js → chunk-SZLNNMIZ.js}

@@ -1,17 +1,20 @@
 // src/runtime/cc-session-id.ts
 import { randomUUID } from "crypto";
 var SESSION_ID_ENV_VARS = ["CLAUDE_CODE_SESSION_ID"];
+var STABLE_RUNTIMES = /* @__PURE__ */ new Set(["openclaw", "open_claw"]);
 function sanitizeKey(value) {
   return value.replace(/[^A-Za-z0-9_-]/g, "");
 }
 function resolveInstanceKey(deps = {}) {
   const env = deps.env ?? process.env;
+  const explicit = sanitizeKey((env.KOJEE_INSTANCE ?? "").trim());
+  if (explicit) return `inst-${explicit}`;
   for (const name of SESSION_ID_ENV_VARS) {
     const sid = sanitizeKey((env[name] ?? "").trim());
     if (sid) return sid;
   }
-  const explicit = sanitizeKey((env.KOJEE_INSTANCE ?? "").trim());
-  if (explicit) return `inst-${explicit}`;
+  const runtime = sanitizeKey((env.KOJEE_RUNTIME ?? "").trim().toLowerCase());
+  if (STABLE_RUNTIMES.has(runtime)) return `rt-${runtime}`;
   const mint = deps.randomUUID ?? randomUUID;
   return `mint-${mint()}`;
 }
@@ -26,6 +29,7 @@ function resolveSharedSessionId(deps = {}) {
 
 export {
   SESSION_ID_ENV_VARS,
+  STABLE_RUNTIMES,
   resolveInstanceKey,
   resolveSharedSessionId
 };