kojee-mcp 0.7.5-staging.2 → 0.7.5-staging.21

package/dist/{chunk-CUOJHP2S.js → chunk-UGEBGCYU.js}

@@ -11,6 +11,7 @@ var STALE_FLOOR_MS = 9e4;
 var STALE_INTERVAL_MULTIPLIER = 3;
 var STALE_CHECK_INTERVAL_MS = 5e3;
 var UNARMED_FALLBACK_MS = 12 * 6e4;
+var CONNECT_TIMEOUT_MS = 3e4;
 var UNDICI_DEFAULT_BODY_TIMEOUT_MS = 3e5;
 function createAdaptiveWatchdog(options = {}) {
   const floorMs = options.floorMs ?? STALE_FLOOR_MS;
@@ -79,7 +80,18 @@ async function startEventStream(opts) {
   let stopped = false;
   const streamDispatcher = new Agent({
     bodyTimeout: UNDICI_DEFAULT_BODY_TIMEOUT_MS,
-    headersTimeout: UNDICI_DEFAULT_BODY_TIMEOUT_MS
+    headersTimeout: UNDICI_DEFAULT_BODY_TIMEOUT_MS,
+    // FORCE HTTP/1.1 FOR THE SSE STREAM. undici 8.x defaults `allowH2: true`, so on a
+    // TLS connection ALPN negotiates HTTP/2 to the ALB. The ALB then RSTs the long-lived
+    // SSE stream with NGHTTP_INTERNAL_ERROR (H2 idle / per-stream lifetime limits), which
+    // undici surfaces as ERR_HTTP2_STREAM_ERROR — a mid-connection stream reset the
+    // reconnect loop can't recover from: it wedges (connected=false for 90s) → the
+    // liveness watchdog self-exits(1) → systemd restarts → a fresh session that may
+    // subscribe to a partial room-set. Observed fleet-wide (inst-clauron/henry/
+    // shakshuka-dev), 25 recorded flaps all with this signature. HTTP/1.1 keeps the SSE
+    // connection open indefinitely (nginx/ALB 3600s idle timeout + our heartbeats).
+    // Root-caused by Backend-Dev, 2026-08-04.
+    allowH2: false
   });
   const cursors = /* @__PURE__ */ new Map();
   let currentController = new AbortController();
@@ -165,10 +177,16 @@ async function startEventStream(opts) {
 }
 async function connectAndConsume(opts, cursors, controller, isReconnect, state, dispatcher, onCursor, onOpen) {
   const mapSince = cursors.size > 0 ? serializeCursorMap(cursors) : null;
-  let res = await openStream(opts, controller, mapSince, dispatcher);
-  if (res.status === 400 && mapSince !== null) {
-    console.error("[event-stream] per-room ?since rejected (400) \u2014 falling back to bare cursor");
-    res = await openStream(opts, controller, String(Math.min(...cursors.values())), dispatcher);
+  const connectTimer = setTimeout(() => controller.abort(), CONNECT_TIMEOUT_MS);
+  let res;
+  try {
+    res = await openStream(opts, controller, mapSince, dispatcher);
+    if (res.status === 400 && mapSince !== null) {
+      console.error("[event-stream] per-room ?since rejected (400) \u2014 falling back to bare cursor");
+      res = await openStream(opts, controller, String(Math.min(...cursors.values())), dispatcher);
+    }
+  } finally {
+    clearTimeout(connectTimer);
   }
   if (!res.ok) throw new Error(`SSE connect failed: ${res.status}`);
   if (!res.body) throw new Error("SSE response has no body");
@@ -182,10 +200,15 @@ async function connectAndConsume(opts, cursors, controller, isReconnect, state,
   await consumeSse(res.body, opts, controller, state, onCursor);
   return true;
 }
-async function openStream(opts, controller, sinceValue, dispatcher) {
+function buildStreamUrl(brokerUrl, sinceValue, seatName) {
   const params = new URLSearchParams();
   if (sinceValue !== null) params.set("since", sinceValue);
-  const url = `${opts.brokerUrl}/api/v2/tandems/stream${params.toString() ? "?" + params.toString() : ""}`;
+  if (seatName) params.set("seat_name", seatName);
+  const qs = params.toString();
+  return `${brokerUrl}/api/v2/tandems/stream/${qs ? "?" + qs : ""}`;
+}
+async function openStream(opts, controller, sinceValue, dispatcher) {
+  const url = buildStreamUrl(opts.brokerUrl, sinceValue, opts.seatName);
   const proof = await createDPoPProof(
     opts.gateway.getPrivateKey(),
     opts.gateway.getKid(),
@@ -250,12 +273,19 @@ async function consumeSse(body, opts, controller, state, onCursor) {
           }
           continue;
         }
-        if (evt.event === "message" || evt.event === "state_change") {
+        {
           try {
             const raw = JSON.parse(evt.data);
             const parsed = normalizeBackendEvent(raw, evt.event);
-            onCursor(parsed.tandem_id, parsed.cursor);
-            if (parsed.wake === false) continue;
+            if (typeof parsed.cursor === "number") {
+              onCursor(parsed.tandem_id, parsed.cursor);
+            }
+            if (parsed.wake !== true) continue;
+            if (evt.event === "message_update" && parsed.edited_at === void 0) {
+              console.error(
+                "[event-stream] message_update missing edited_at \u2014 the edit will dedupe against the original and NOT wake (backend contract regression?)"
+              );
+            }
             if (opts.delivery) {
               try {
                 await opts.delivery.deliver(parsed);
@@ -393,6 +423,8 @@ function normalizeBackendEvent(raw, sseEventType) {
   const wake = typeof rawWake === "boolean" ? rawWake : void 0;
   const rawWakeReason = obj["wake_reason"];
   const wakeReason = typeof rawWakeReason === "string" && rawWakeReason.trim() ? sanitizeDisplayname(rawWakeReason) : void 0;
+  const rawEditedAt = obj["edited_at"];
+  const editedAt = typeof rawEditedAt === "string" && rawEditedAt.trim() ? rawEditedAt : void 0;
   const senderPresent = typeof obj === "object" && obj !== null && "sender" in obj;
   const maybeFrom = obj["from"];
   if (!senderPresent && maybeFrom && typeof maybeFrom["principal"] === "string") {
@@ -406,7 +438,8 @@ function normalizeBackendEvent(raw, sseEventType) {
         displayname: resolveDisplayname(maybeFrom["displayname"], canonicalPrincipal)
       },
       ...wake !== void 0 ? { wake } : {},
-      ...wakeReason !== void 0 ? { wake_reason: wakeReason } : {}
+      ...wakeReason !== void 0 ? { wake_reason: wakeReason } : {},
+      ...editedAt !== void 0 ? { edited_at: editedAt } : {}
     };
   }
   const sender = obj["sender"] ?? {};
@@ -441,18 +474,21 @@ function normalizeBackendEvent(raw, sseEventType) {
     ...obj["reply_to"] !== void 0 ? { reply_to: obj["reply_to"] } : {},
     ...severity ? { severity } : {},
     ...wake !== void 0 ? { wake } : {},
-    ...wakeReason !== void 0 ? { wake_reason: wakeReason } : {}
+    ...wakeReason !== void 0 ? { wake_reason: wakeReason } : {},
+    ...editedAt !== void 0 ? { edited_at: editedAt } : {}
   };
 }
 
 export {
   undiciFetch,
   UNARMED_FALLBACK_MS,
+  CONNECT_TIMEOUT_MS,
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,
   createAdaptiveWatchdog,
   createBackoffController,
   LOG_HEARTBEAT_INTERVAL_MS,
   startEventStream,
+  buildStreamUrl,
   statusReason,
   serializeCursorMap,
   sanitizeDisplayname,

package/dist/{chunk-6XWTUDWW.js → chunk-WDWVBPXA.js}

@@ -1,11 +1,11 @@
+import {
+  wrapNpxLauncher
+} from "./chunk-D6JKFJ6A.js";
 import {
   buildHookCommand,
   isKojeeHookCommand,
   npxHookCommand
-} from "./chunk-TMCNB4JH.js";
-import {
-  wrapNpxLauncher
-} from "./chunk-D6JKFJ6A.js";
+} from "./chunk-AXBJQJKA.js";
 import {
   kojeeHomeDir
 } from "./chunk-SQL56SEB.js";
@@ -14,7 +14,7 @@ import {
 } from "./chunk-U5HHHRXA.js";
 import {
   VERSION
-} from "./chunk-5DHIUN73.js";
+} from "./chunk-6NPMVZD7.js";
 
 // src/wizard/codex-config.ts
 import fs from "fs";
@@ -32,6 +32,7 @@ function defaultCodexConfigPath() {
 function defaultCodexHooksPath() {
   return win32DriveQualified(path.join(kojeeHomeDir(), ".codex", "hooks.json"), ".codex", "hooks.json");
 }
+var CODEX_TRUST_FIX_STEPS = 'to trust it, run `codex`, then type `/hooks` and press `t` on the entry \u2014 Codex only prints a "hooks need review" warning at startup, it does not auto-prompt';
 var CODEX_STOP_HOOK_COMMAND = npxHookCommand("codex-stop");
 function codexStopHookCommand() {
   return buildHookCommand("codex-stop");
@@ -345,6 +346,7 @@ function writeFile600(p, content) {
 export {
   defaultCodexConfigPath,
   defaultCodexHooksPath,
+  CODEX_TRUST_FIX_STEPS,
   buildCodexMcpServerTable,
   buildCodexStopHookBlock,
   buildCodexPromptSubmitHookBlock,

package/dist/{chunk-TNZITJAB.js → chunk-WVQU3QQ7.js}

@@ -15,6 +15,7 @@ var MAX_BODY_CHARS = 200;
 var DEFAULT_MAX_BYTES = 5 * 1024 * 1024;
 var DEFAULT_STATUS_MAX_BYTES = 1 * 1024 * 1024;
 var DEFAULT_MIN_AGE_MS = 6e4;
+var DEDUP_MAX_KEYS = 2e4;
 var STATUS_LINE_PREFIX = "kojee-status";
 function statusLogPath(eventLogPath) {
   const dir = path.dirname(eventLogPath);
@@ -49,6 +50,7 @@ function startEventLog(opts) {
   const dir = opts.dir ?? DEFAULT_DIR;
   const maxBytes = opts.maxBytes ?? DEFAULT_MAX_BYTES;
   const statusMaxBytes = opts.statusMaxBytes ?? DEFAULT_STATUS_MAX_BYTES;
+  const dedupMaxKeys = opts.dedupMaxKeys ?? DEDUP_MAX_KEYS;
   fs.mkdirSync(dir, { recursive: true });
   const filePath = resolveEventLogPath(opts);
   const statusPath = statusLogPath(filePath);
@@ -57,6 +59,14 @@ function startEventLog(opts) {
   fs.writeFileSync(statusPath, "", { mode: 384 });
   secureFile(statusPath);
   let writtenIds = /* @__PURE__ */ new Set();
+  function rememberDedupKey(key) {
+    writtenIds.add(key);
+    while (writtenIds.size > dedupMaxKeys) {
+      const oldest = writtenIds.values().next().value;
+      if (oldest === void 0) break;
+      writtenIds.delete(oldest);
+    }
+  }
   let bytesWritten = 0;
   let linesWritten = 0;
   let statusBytesWritten = 0;
@@ -90,7 +100,6 @@ function startEventLog(opts) {
         await fs.promises.truncate(filePath, 0);
         bytesWritten = 0;
         linesWritten = 0;
-        writtenIds = /* @__PURE__ */ new Set();
         void enqueueStatus(() => writeStatusRaw(`status=rotated dropped=${dropped}`)).catch(() => {
         });
       } catch (err) {
@@ -105,15 +114,16 @@ function startEventLog(opts) {
     path: filePath,
     statusPath,
     async append(event) {
-      if (event.id && writtenIds.has(event.id)) return;
-      if (event.id) writtenIds.add(event.id);
+      const dedupKey = event.id ? event.edited_at ? `${event.id}\0${event.edited_at}` : event.id : void 0;
+      if (dedupKey && writtenIds.has(dedupKey)) return;
+      if (dedupKey) rememberDedupKey(dedupKey);
       const line = formatLine(event);
       await enqueueMsg(async () => {
         try {
           await writeMsgRaw(line);
         } catch (err) {
           console.error("[event-log] append failed:", err.message);
-          if (event.id) writtenIds.delete(event.id);
+          if (dedupKey) writtenIds.delete(dedupKey);
         }
       });
     },

package/dist/cli.js

@@ -4,12 +4,12 @@ import {
 } from "./chunk-EIAUW6KO.js";
 import {
   startProxy
-} from "./chunk-ZSHCHOPL.js";
-import "./chunk-TCWIXG5C.js";
+} from "./chunk-676WQSWZ.js";
+import "./chunk-CCVRXJJ2.js";
 import {
   pairedConfigPath
 } from "./chunk-5SZHXYPK.js";
-import "./chunk-247WFMCJ.js";
+import "./chunk-AGZ7ZGLY.js";
 import "./chunk-Z5LPNJQ6.js";
 import "./chunk-I67C2HYA.js";
 import "./chunk-MIEI4PLB.js";
@@ -18,14 +18,13 @@ import {
   deriveKeystorePath
 } from "./chunk-6G6YYST6.js";
 import "./chunk-U5HHHRXA.js";
-import "./chunk-A4IOKD4Z.js";
+import "./chunk-QYZP6QT2.js";
 import {
   VERSION
-} from "./chunk-5DHIUN73.js";
-import "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 import "./chunk-PPTKGWFF.js";
 import "./chunk-XJEBJIQE.js";
-import "./chunk-KNEJTD6G.js";
+import "./chunk-SZLNNMIZ.js";
 
 // src/cli.ts
 import { Command } from "commander";
@@ -48,7 +47,7 @@ program.command("pair <code>").description("Pair this machine against Kojee usin
 program.command("connect <code>").description(
   "Connect this runtime to Kojee with a per-agent pair code from the dashboard (claude-code | codex | openclaw | hermes). claude-code/codex/openclaw write a per-runtime paired slot (~/.kojee/agents/<runtime>/config.json) and point the runtime launcher at it via --paired-config; hermes writes the global ~/.kojee/config.json (its daemon + `kojee-mcp send` read that). Idempotent."
 ).requiredOption("--runtime <id>", "Target runtime: claude-code | codex | openclaw | hermes").option("--url <url>", "Broker base URL (default: the canonical staging broker)").action(async (code, opts) => {
-  const { runConnect } = await import("./connect-handler-NZINEMG3.js");
+  const { runConnect } = await import("./connect-handler-GTFXNZUC.js");
   const result = await runConnect({
     code,
     runtime: opts.runtime,
@@ -58,45 +57,59 @@ program.command("connect <code>").description(
   console.error(result.output);
   process.exit(result.exitCode);
 });
+program.command("reconnect").description(
+  "Re-run configure for an already-paired runtime, KEEPING the token + enrolled key (no re-pair). Re-writes configs/hooks to this install and refreshes the agent instructions."
+).option("--runtime <id>", "Target runtime (defaults to the recorded runtime from the last connect/init)").action(async (opts) => {
+  const { runReconnect } = await import("./connect-handler-GTFXNZUC.js");
+  const result = await runReconnect({ ...opts.runtime ? { runtime: opts.runtime } : {} });
+  for (const m of result.messages) console.error(m);
+  console.error(result.output);
+  process.exit(result.exitCode);
+});
 program.command("hook").description("Run a kojee MCP hook script (called by Claude Code via ~/.claude/settings.json)").requiredOption(
   "--type <type>",
-  "Hook type: stop, user-prompt-submit, codex-stop, or codex-prompt-submit"
+  "Hook type: stop, user-prompt-submit, session-start, codex-stop, or codex-prompt-submit"
 ).action(async (opts) => {
   if (opts.type === "stop") {
-    const { runStopHook } = await import("./stop-hook-N6TX4YQT.js");
+    const { runStopHook } = await import("./stop-hook-BLPYRE7T.js");
     await runStopHook();
     process.exit(0);
   } else if (opts.type === "user-prompt-submit") {
-    const { runUserPromptSubmitHook } = await import("./user-prompt-submit-hook-DTXXFDSD.js");
+    const { runUserPromptSubmitHook } = await import("./user-prompt-submit-hook-YQXGE3JU.js");
     await runUserPromptSubmitHook();
     process.exit(0);
+  } else if (opts.type === "session-start") {
+    const { runSessionStartHook } = await import("./session-start-hook-VL3KYDTT.js");
+    await runSessionStartHook();
+    process.exit(0);
   } else if (opts.type === "codex-stop") {
-    const { runCodexStopHook } = await import("./codex-stop-hook-32W4BIOM.js");
+    const { runCodexStopHook } = await import("./codex-stop-hook-GTGRQNVV.js");
     await runCodexStopHook();
     process.exit(0);
   } else if (opts.type === "codex-prompt-submit") {
-    const { runCodexPromptSubmitHook } = await import("./codex-prompt-submit-hook-J5PZEJSK.js");
+    const { runCodexPromptSubmitHook } = await import("./codex-prompt-submit-hook-UQJI6A54.js");
     await runCodexPromptSubmitHook();
     process.exit(0);
   } else {
     console.error(
-      `Unknown hook type: ${opts.type}. Expected 'stop', 'user-prompt-submit', 'codex-stop', or 'codex-prompt-submit'.`
+      `Unknown hook type: ${opts.type}. Expected 'stop', 'user-prompt-submit', 'session-start', 'codex-stop', or 'codex-prompt-submit'.`
     );
     process.exit(1);
   }
 });
-program.command("install-hooks").description("Install kojee Stop + UserPromptSubmit hooks in ~/.claude/settings.json (idempotent)").option("--hooks-path <path>", "Override default ~/.claude/settings.json").option("--uninstall", "Remove kojee hook entries instead of installing them").action(async (opts) => {
-  const { installHooks, uninstallHooks } = await import("./install-JQNDGAAQ.js");
+program.command("install-hooks").description("Install kojee Stop + UserPromptSubmit + SessionStart hooks in ~/.claude/settings.json (idempotent)").option("--hooks-path <path>", "Override default ~/.claude/settings.json").option("--uninstall", "Remove kojee hook entries instead of installing them").action(async (opts) => {
+  const { installHooks, uninstallHooks } = await import("./install-GJVZEWLI.js");
   if (opts.uninstall) {
     const removed = uninstallHooks({ hooksPath: opts.hooksPath });
     console.error(removed ? "Removed kojee hook entries." : "No kojee hook entries found.");
   } else {
-    const { stop, ups } = installHooks({ hooksPath: opts.hooksPath });
+    const { stop, ups, sessionStart } = installHooks({ hooksPath: opts.hooksPath });
     const label = (s) => s === "added" ? "\u2713 added" : s === "updated" ? "\u21BB updated" : "\u21BB already installed";
     console.error(
       "Installed kojee hooks in " + (opts.hooksPath ?? "~/.claude/settings.json") + `:
   - Stop:              ${label(stop)}
   - UserPromptSubmit:  ${label(ups)}
+  - SessionStart:      ${label(sessionStart)}
 Restart Claude Code for hooks to take effect.`
     );
   }
@@ -104,7 +117,7 @@ Restart Claude Code for hooks to take effect.`
 program.command("send <tandem_id>").description(
   "Send a Tandem message using this machine's paired credentials (~/.kojee). Prints one JSON envelope to stdout: {ok, message_id, cursor, text} on success, {ok:false, error:<typed code>, message} on failure (exit 1)."
 ).requiredOption("--body <text>", "Message body (required)").option("--reply-to <message_id>", "Message id this send replies to").option("--kind <kind>", "Message kind: message | status (default: backend default)").action(async (tandemId, opts) => {
-  const { runSendCli } = await import("./send-cli-45RLGYIC.js");
+  const { runSendCli } = await import("./send-cli-WTY7H3BR.js");
   const { exitCode, envelope } = await runSendCli({
     tandemId,
     body: opts.body,
@@ -114,17 +127,23 @@ program.command("send <tandem_id>").description(
   process.stdout.write(JSON.stringify(envelope) + "\n");
   process.exit(exitCode);
 });
-program.command("tail <path>").description("Stream a file's contents and follow appends (portable replacement for `tail -F`)").action(async (filePath) => {
-  const { runTail } = await import("./tail-stream-G4WGTXDS.js");
+program.command("tail <path>").description("Stream a file's appends and follow (portable `tail -F`; follows from EOF \u2014 new events only)").option(
+  "--wake-only",
+  "Suppress routine heartbeat warn/recover telemetry; surface only a sustained stream outage"
+).option(
+  "--replay",
+  "Replay the whole file from the start before following (default: follow from EOF, no replay)"
+).action(async (filePath, opts) => {
+  const { runTail } = await import("./tail-stream-PQXEY3TI.js");
   try {
-    await runTail(filePath);
+    await runTail(filePath, { wakeOnly: opts.wakeOnly === true, replay: opts.replay === true });
   } catch (err) {
     console.error("[kojee-mcp tail] Error:", err.message);
     process.exit(1);
   }
 });
 program.command("doctor").description("Diagnose the kojee wake path (proxy, hook-server, SSE stream, event log, Monitor) and print the exact wake recipe").action(async () => {
-  const { runDoctor } = await import("./doctor-WUU5BVPT.js");
+  const { runDoctor } = await import("./doctor-54S7JGOE.js");
   const code = await runDoctor();
   process.exit(code);
 });
@@ -143,7 +162,7 @@ function addInstallOptions(cmd, runtimeHelp) {
 function makeInstallAction(verb) {
   return async (opts) => {
     const interactive = process.stdin.isTTY === true && opts.runtime === void 0;
-    const { runSetup, resolvePairCode } = await import("./setup-handler-44ASXYMS.js");
+    const { runSetup, resolvePairCode } = await import("./setup-handler-GNAIWAYU.js");
     const pairCode = resolvePairCode(opts);
     const result = await runSetup({
       verb,

package/dist/{codex-prompt-submit-hook-J5PZEJSK.js → codex-prompt-submit-hook-UQJI6A54.js}

@@ -1,12 +1,12 @@
 import {
   readHookStdin
-} from "./chunk-LSUB6QMP.js";
+} from "./chunk-NIIBVKLP.js";
 import {
   listPending
 } from "./chunk-IZN7IZPW.js";
 import {
   CODEX_WAKE_BELL
-} from "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 
 // src/hooks/codex-prompt-submit-hook.ts
 function buildCodexPromptSubmitOutput() {

package/dist/{codex-stop-hook-32W4BIOM.js → codex-stop-hook-GTGRQNVV.js}

@@ -1,6 +1,6 @@
 import {
   readHookStdin
-} from "./chunk-LSUB6QMP.js";
+} from "./chunk-NIIBVKLP.js";
 import {
   drainedRoomsPath,
   listPending,
@@ -8,7 +8,7 @@ import {
 } from "./chunk-IZN7IZPW.js";
 import {
   CODEX_WAKE_BELL
-} from "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 
 // src/hooks/codex-stop-hook.ts
 import fs from "fs";

package/dist/{connect-handler-NZINEMG3.js → connect-handler-GTFXNZUC.js}

@@ -2,16 +2,19 @@ import {
   DEFAULT_BROKER_URL,
   reconcileConnectPairSlot,
   runWizard
-} from "./chunk-XPIW4N55.js";
-import "./chunk-6XWTUDWW.js";
+} from "./chunk-N2YAZRAD.js";
+import "./chunk-WDWVBPXA.js";
 import "./chunk-E6WMFMM2.js";
-import "./chunk-77HWBSRH.js";
-import "./chunk-TMCNB4JH.js";
-import "./chunk-D6JKFJ6A.js";
+import "./chunk-GEGUWQYT.js";
 import {
   CONNECT_RUNTIMES
 } from "./chunk-EIH2LNF4.js";
-import "./chunk-RDLF4NQC.js";
+import {
+  readRecordedRuntime
+} from "./chunk-RDLF4NQC.js";
+import "./chunk-77HWBSRH.js";
+import "./chunk-D6JKFJ6A.js";
+import "./chunk-AXBJQJKA.js";
 import "./chunk-SQL56SEB.js";
 import "./chunk-V5VZPYMZ.js";
 import {
@@ -29,10 +32,10 @@ import {
   deriveKeystorePath
 } from "./chunk-6G6YYST6.js";
 import "./chunk-U5HHHRXA.js";
-import "./chunk-5DHIUN73.js";
-import "./chunk-FJUAMJHU.js";
+import "./chunk-6NPMVZD7.js";
 
 // src/wizard/connect-handler.ts
+import fs from "fs";
 import os from "os";
 import path from "path";
 function absConfigPath(runtime) {
@@ -139,7 +142,63 @@ Start (or restart) the hermes daemon to pick up the connection.`,
     exitCode: 0
   };
 }
+async function runReconnect(opts = {}) {
+  const messages = [];
+  const runtime = opts.runtime ?? readRecordedRuntime() ?? null;
+  if (!runtime) {
+    return {
+      messages,
+      output: `reconnect: no runtime recorded on this box \u2014 pass --runtime (${CONNECT_RUNTIMES.join(" | ")} | hermes), or run \`kojee-mcp connect <code> --runtime <id>\` first.`,
+      exitCode: 2
+    };
+  }
+  const isHermes = runtime === "hermes";
+  if (!isHermes && !CONNECT_RUNTIMES.includes(runtime)) {
+    return {
+      messages,
+      output: `reconnect supports: ${CONNECT_RUNTIMES.join(", ")}, hermes. Unknown --runtime "${runtime}".`,
+      exitCode: 2
+    };
+  }
+  const configPath = isHermes ? pairedConfigPath() : absConfigPath(runtime);
+  const paired = loadPairedConfig(configPath);
+  if (!paired?.token) {
+    return {
+      messages,
+      output: `reconnect: no paired config at ${configPath} \u2014 nothing to keep. Run \`kojee-mcp connect <code> --runtime ${runtime}\` to pair first.`,
+      exitCode: 2
+    };
+  }
+  const keystorePath = isHermes ? defaultPairedKeystorePath() : deriveKeystorePath(paired.token);
+  if (!fs.existsSync(keystorePath)) {
+    messages.push(
+      `\u26A0 enrolled keystore MISSING at ${keystorePath} \u2014 configs will be refreshed, but the proxy cannot authenticate with a new key on this token (backend rejects double-enroll). If sends fail, re-pair with a fresh code.`
+    );
+  }
+  const wizard = opts.runWizard ?? runWizard;
+  const wiz = await wizard({
+    runtime,
+    ...isHermes ? {} : { pairedConfigPath: configPath },
+    interactive: false
+  });
+  if (wiz.exitCode !== 0) {
+    return { messages, output: wiz.output, exitCode: wiz.exitCode };
+  }
+  const label = identityLabel(paired);
+  return {
+    messages,
+    output: [
+      `\u21BB reconfigured ${runtime} as ${label} \u2014 token KEPT (no re-pair, no key re-enrollment).`,
+      "Configs + hooks re-written to this install; agent instructions refreshed below.",
+      `Restart ${runtime} to pick up the changes.`,
+      "",
+      wiz.output
+    ].join("\n"),
+    exitCode: 0
+  };
+}
 export {
   runConnect,
-  runConnectHermes
+  runConnectHermes,
+  runReconnect
 };

package/dist/{doctor-WUU5BVPT.js → doctor-54S7JGOE.js}

@@ -1,3 +1,7 @@
+import {
+  classifyHookCommand,
+  isKojeeHookCommand
+} from "./chunk-AXBJQJKA.js";
 import "./chunk-XLKGPGZT.js";
 import {
   loadControlToken
@@ -5,7 +9,7 @@ import {
 import {
   monitorHeartbeatPath,
   statusLogPath
-} from "./chunk-TNZITJAB.js";
+} from "./chunk-WVQU3QQ7.js";
 import {
   discoveryPathForKey,
   readSessionDiscoveryByKey,
@@ -18,14 +22,14 @@ import "./chunk-U5HHHRXA.js";
 import {
   buildMonitorSpawn,
   buildReplyRecipe
-} from "./chunk-FJUAMJHU.js";
+} from "./chunk-6NPMVZD7.js";
 import {
   deriveDiscoveryKey,
   findClaudeAncestorPid
 } from "./chunk-XJEBJIQE.js";
 import {
   resolveSharedSessionId
-} from "./chunk-KNEJTD6G.js";
+} from "./chunk-SZLNNMIZ.js";
 
 // src/doctor.ts
 import fs from "fs";
@@ -149,6 +153,53 @@ async function resolveDefaultPairedScope() {
   }
   return { scope: resolution.scope, present, ...runtime ? { runtime } : {} };
 }
+function defaultReadHookCommands() {
+  try {
+    const p = path.join(os.homedir(), ".claude", "settings.json");
+    const raw = fs.readFileSync(p, "utf8");
+    const cfg = JSON.parse(raw);
+    const out = [];
+    for (const event of ["Stop", "UserPromptSubmit"]) {
+      for (const matcher of cfg.hooks?.[event] ?? []) {
+        for (const h of matcher.hooks ?? []) {
+          if (typeof h.command === "string" && isKojeeHookCommand(h.command)) out.push(h.command);
+        }
+      }
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+var HOOK_REPIN_FIX = "fix: `npm i -g kojee-mcp` then re-run `kojee-mcp setup` (re-pins in place, no re-pair)";
+function hookPinCheck(commands) {
+  const name = "hook pin (settings.json Stop/UserPromptSubmit)";
+  if (commands === null) {
+    return { name, ok: "warn", detail: `no ~/.claude/settings.json readable \u2014 run \`kojee-mcp setup\` to install the wake hooks` };
+  }
+  if (commands.length === 0) {
+    return { name, ok: "warn", detail: `no kojee hooks installed \u2014 run \`kojee-mcp setup\` (the stop-hook is the Monitor self-heal)` };
+  }
+  const states = commands.map((c) => classifyHookCommand(c));
+  if (states.includes("pinned-broken")) {
+    return { name, ok: false, detail: `pinned cli.js is GONE \u2014 hooks are failing with exit 127 RIGHT NOW; ${HOOK_REPIN_FIX}` };
+  }
+  if (states.includes("pinned-ephemeral")) {
+    return {
+      name,
+      ok: false,
+      detail: `pinned INTO the npx cache (~/.npm/_npx/\u2026) \u2014 npx cache GC will silently kill the hooks (exit 127 every turn); ${HOOK_REPIN_FIX}`
+    };
+  }
+  if (states.includes("npx")) {
+    return {
+      name,
+      ok: "warn",
+      detail: `unpinned (npx -y) \u2014 pays npx resolution every turn and can stall on a registry fetch; ${HOOK_REPIN_FIX}`
+    };
+  }
+  return { name, ok: true, detail: `pinned to a durable binary (${commands.length} hook${commands.length === 1 ? "" : "s"})` };
+}
 async function collectDoctorReport(deps = {}) {
   const fetchFn = deps.fetchFn ?? fetch;
   const isPidAlive = deps.isPidAlive ?? defaultIsPidAlive;
@@ -183,6 +234,8 @@ async function collectDoctorReport(deps = {}) {
       detail: pairedScope.present ? "present (legacy global slot)" : "MISSING \u2014 run `kojee-mcp connect <code> --runtime <id>` (or `kojee-mcp pair`)"
     });
   }
+  const hookCommands = (deps.readHookCommands ?? defaultReadHookCommands)();
+  checks.push(hookPinCheck(hookCommands));
   let logPath = null;
   if (!discovery) {
     checks.push({
@@ -354,17 +407,23 @@ function formatDoctorReport(report) {
 async function runDoctor() {
   const { readRecordedRuntime } = await import("./runtime-record-OXRLTOLC.js");
   if (readRecordedRuntime() === "codex") {
-    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-PJFWIABF.js");
+    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-6H4OOS6O.js");
     const report2 = collectCodexDoctorReport();
     console.error(formatCodexDoctorReport(report2));
     return report2.verdict === "broken" ? 1 : 0;
   }
   if (readRecordedRuntime() === "openclaw") {
-    const { collectOpenclawDoctorReport, formatOpenclawDoctorReport } = await import("./doctor-openclaw-LL6NSPLC.js");
+    const { collectOpenclawDoctorReport, formatOpenclawDoctorReport } = await import("./doctor-openclaw-B5KADVHD.js");
     const report2 = collectOpenclawDoctorReport();
     console.error(formatOpenclawDoctorReport(report2));
     return report2.verdict === "broken" ? 1 : 0;
   }
+  const { hermesArtifactsPresent, collectHermesDoctorReport, formatHermesDoctorReport } = await import("./doctor-hermes-KMHM27Y3.js");
+  if (hermesArtifactsPresent()) {
+    const hermesReport = collectHermesDoctorReport();
+    console.error(formatHermesDoctorReport(hermesReport));
+    return hermesReport.verdict === "broken" ? 1 : 0;
+  }
   const report = await collectDoctorReport();
   console.error(formatDoctorReport(report));
   return report.verdict === "broken" ? 1 : 0;