kojee-mcp 0.7.5-staging.8 → 0.7.5-staging.9

package/dist/{chunk-ZUF47CPP.js → chunk-7DCZNZSP.js}

@@ -1,11 +1,12 @@
 import {
+  CODEX_TRUST_FIX_STEPS,
   buildCodexMcpServerTable,
   buildCodexPromptSubmitHookBlock,
   buildCodexStopHookBlock,
   isPlaceholderWebhookUrl,
   removeCodexConfig,
   writeCodexConfig
-} from "./chunk-376ZI3J7.js";
+} from "./chunk-7LKCTUBY.js";
 import {
   removeOpenclawMcpServer,
   writeOpenclawMcpConfig
@@ -16,10 +17,6 @@ import {
   removeHermesMcpServer,
   writeHermesMcpConfig
 } from "./chunk-GEGUWQYT.js";
-import {
-  WIZARD_RUNTIMES,
-  isWizardRuntime
-} from "./chunk-77HWBSRH.js";
 import {
   CONNECT_RUNTIMES
 } from "./chunk-EIH2LNF4.js";
@@ -28,6 +25,10 @@ import {
   readRecordedRuntime,
   recordRuntime
 } from "./chunk-RDLF4NQC.js";
+import {
+  WIZARD_RUNTIMES,
+  isWizardRuntime
+} from "./chunk-77HWBSRH.js";
 import {
   kojeeHomeDir
 } from "./chunk-SQL56SEB.js";
@@ -972,7 +973,7 @@ function configureCodex(opts) {
   lines.push("");
   if (writeResult.hooksChanged) {
     lines.push(
-      "IMPORTANT: Codex will re-prompt to trust hooks on its next launch \u2014 approve it, or wakes silently stop."
+      `IMPORTANT: this rewrite invalidated Codex's hook trust \u2014 the hooks are now UNTRUSTED and wakes stay silent until you re-trust them: ${CODEX_TRUST_FIX_STEPS}.`
     );
     lines.push("");
   }

package/dist/{chunk-376ZI3J7.js → chunk-7LKCTUBY.js}

@@ -32,6 +32,7 @@ function defaultCodexConfigPath() {
 function defaultCodexHooksPath() {
   return win32DriveQualified(path.join(kojeeHomeDir(), ".codex", "hooks.json"), ".codex", "hooks.json");
 }
+var CODEX_TRUST_FIX_STEPS = 'to trust it, run `codex`, then type `/hooks` and press `t` on the entry \u2014 Codex only prints a "hooks need review" warning at startup, it does not auto-prompt';
 var CODEX_STOP_HOOK_COMMAND = npxHookCommand("codex-stop");
 function codexStopHookCommand() {
   return buildHookCommand("codex-stop");
@@ -345,6 +346,7 @@ function writeFile600(p, content) {
 export {
   defaultCodexConfigPath,
   defaultCodexHooksPath,
+  CODEX_TRUST_FIX_STEPS,
   buildCodexMcpServerTable,
   buildCodexStopHookBlock,
   buildCodexPromptSubmitHookBlock,

package/dist/{chunk-HRDASFRF.js → chunk-EF466Y7P.js}

@@ -296,7 +296,7 @@ async function startProxy(config) {
   console.error(`[kojee-mcp] Tandem memberships: ${tandemMembershipCount === -1 ? "unknown" : tandemMembershipCount}`);
   let server;
   const isHeadlessDaemon = !!process.env["KOJEE_HEADLESS"] || !!process.env["KOJEE_WEBHOOK_EXPECTED"];
-  const { selectDelivery } = await import("./registry-NLRXVII7.js");
+  const { selectDelivery } = await import("./registry-PNL4VGNK.js");
   const delivery = selectDelivery(adapter.runtime, {
     supportsChannels: adapter.supportsChannels,
     headless: isHeadlessDaemon,
@@ -364,6 +364,33 @@ async function startProxy(config) {
       "[kojee-mcp] no resolvable Claude ancestor (Windows fallback) \u2014 parent-liveness watchdog not armed; stdin close/end + SIGHUP/SIGINT/SIGTERM cover shutdown, and per-window wake is preserved via the session-id discovery key."
     );
   }
+  if (isHeadlessDaemon && activeStreamHandle) {
+    const { createStreamWatchdog } = await import("./stream-watchdog-CLRS2VMV.js");
+    const { recordFlap } = await import("./flap-log-D4KG7RK4.js");
+    const handleForWatchdog = activeStreamHandle;
+    const bootAt = Date.now();
+    const streamWatchdog = createStreamWatchdog({
+      getState: () => {
+        const s = handleForWatchdog.getState();
+        return { connected: s.connected, lastEventAt: s.lastEventAt };
+      },
+      onUnhealthy: ({ disconnectedForMs, reason }) => {
+        recordFlap({
+          ts: Date.now(),
+          instanceKey,
+          reason,
+          disconnectedForMs,
+          uptimeMs: Date.now() - bootAt
+        });
+        console.error(
+          `[kojee-mcp] stream-liveness watchdog: ${reason} \u2014 self-exiting(1); the service manager (Restart=always) will start a fresh process. Repeated exits are recorded and surfaced by \`kojee-mcp doctor\` (flap detection).`
+        );
+        process.exit(1);
+      }
+    });
+    streamWatchdog.start();
+    teardownSteps.push(() => streamWatchdog.stop());
+  }
   await startMcpServer(server);
 }
 async function enrollAndDiscover(config, keystorePath, isRetry = false) {

package/dist/chunk-P64UR3SE.js

@@ -0,0 +1,86 @@
+import {
+  kojeeHomeDir
+} from "./chunk-SQL56SEB.js";
+
+// src/runtime/flap-log.ts
+import fs from "fs";
+import path from "path";
+var MAX_FLAP_ENTRIES = 25;
+function defaultFlapLogPath() {
+  return path.join(kojeeHomeDir(), ".kojee", "daemon-flaps.json");
+}
+function realRead(p) {
+  try {
+    return fs.readFileSync(p, "utf8");
+  } catch {
+    return null;
+  }
+}
+function realWrite(p, content) {
+  fs.mkdirSync(path.dirname(p), { recursive: true });
+  fs.writeFileSync(p, content, "utf8");
+}
+function readFlaps(deps = {}) {
+  const p = deps.filePath ?? defaultFlapLogPath();
+  const raw = (deps.readFile ?? realRead)(p);
+  if (raw === null) return [];
+  try {
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(
+      (e) => !!e && typeof e.ts === "number" && typeof e.instanceKey === "string"
+    );
+  } catch {
+    return [];
+  }
+}
+function recordFlap(entry, deps = {}) {
+  try {
+    const p = deps.filePath ?? defaultFlapLogPath();
+    const existing = readFlaps(deps);
+    const next = [...existing, entry].slice(-MAX_FLAP_ENTRIES);
+    (deps.writeFile ?? realWrite)(p, JSON.stringify(next, null, 2));
+  } catch {
+  }
+}
+function flapRateExceeds(flaps, opts) {
+  const cutoff = opts.now - opts.windowMs;
+  return flaps.filter((f) => f.ts >= cutoff).length >= opts.count;
+}
+function recentFlapCount(flaps, windowMs, now) {
+  const cutoff = now - windowMs;
+  return flaps.filter((f) => f.ts >= cutoff).length;
+}
+var FLAP_WINDOW_MS = 15 * 6e4;
+var FLAP_WARN_COUNT = 3;
+function buildFlapDoctorCheck(deps = {}) {
+  const name = deps.name ?? "daemon flapping";
+  const history = (deps.readFlaps ?? readFlaps)();
+  const now = deps.now?.() ?? Date.now();
+  const recent = recentFlapCount(history, FLAP_WINDOW_MS, now);
+  if (flapRateExceeds(history, { count: FLAP_WARN_COUNT, windowMs: FLAP_WINDOW_MS, now })) {
+    const last = history[history.length - 1];
+    return {
+      name,
+      ok: "warn",
+      detail: `the stream-liveness watchdog self-exited ${recent} times in the last 15min \u2014 the SSE reconnect loop is repeatedly wedging. This is a CHRONIC failure being masked by auto-restart; root-cause it (last reason: "${last?.reason ?? "unknown"}").`
+    };
+  }
+  return {
+    name,
+    ok: true,
+    detail: recent === 0 ? "no stream-liveness self-exits recently (healthy)" : `${recent} self-exit(s) in the last 15min \u2014 below the ${FLAP_WARN_COUNT}-in-15min chronic threshold`
+  };
+}
+
+export {
+  MAX_FLAP_ENTRIES,
+  defaultFlapLogPath,
+  readFlaps,
+  recordFlap,
+  flapRateExceeds,
+  recentFlapCount,
+  FLAP_WINDOW_MS,
+  FLAP_WARN_COUNT,
+  buildFlapDoctorCheck
+};

package/dist/{chunk-CUOJHP2S.js → chunk-QDQGN5XP.js}

@@ -11,6 +11,7 @@ var STALE_FLOOR_MS = 9e4;
 var STALE_INTERVAL_MULTIPLIER = 3;
 var STALE_CHECK_INTERVAL_MS = 5e3;
 var UNARMED_FALLBACK_MS = 12 * 6e4;
+var CONNECT_TIMEOUT_MS = 3e4;
 var UNDICI_DEFAULT_BODY_TIMEOUT_MS = 3e5;
 function createAdaptiveWatchdog(options = {}) {
   const floorMs = options.floorMs ?? STALE_FLOOR_MS;
@@ -165,10 +166,16 @@ async function startEventStream(opts) {
 }
 async function connectAndConsume(opts, cursors, controller, isReconnect, state, dispatcher, onCursor, onOpen) {
   const mapSince = cursors.size > 0 ? serializeCursorMap(cursors) : null;
-  let res = await openStream(opts, controller, mapSince, dispatcher);
-  if (res.status === 400 && mapSince !== null) {
-    console.error("[event-stream] per-room ?since rejected (400) \u2014 falling back to bare cursor");
-    res = await openStream(opts, controller, String(Math.min(...cursors.values())), dispatcher);
+  const connectTimer = setTimeout(() => controller.abort(), CONNECT_TIMEOUT_MS);
+  let res;
+  try {
+    res = await openStream(opts, controller, mapSince, dispatcher);
+    if (res.status === 400 && mapSince !== null) {
+      console.error("[event-stream] per-room ?since rejected (400) \u2014 falling back to bare cursor");
+      res = await openStream(opts, controller, String(Math.min(...cursors.values())), dispatcher);
+    }
+  } finally {
+    clearTimeout(connectTimer);
   }
   if (!res.ok) throw new Error(`SSE connect failed: ${res.status}`);
   if (!res.body) throw new Error("SSE response has no body");
@@ -448,6 +455,7 @@ function normalizeBackendEvent(raw, sseEventType) {
 export {
   undiciFetch,
   UNARMED_FALLBACK_MS,
+  CONNECT_TIMEOUT_MS,
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,
   createAdaptiveWatchdog,
   createBackoffController,

package/dist/cli.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-EIAUW6KO.js";
 import {
   startProxy
-} from "./chunk-HRDASFRF.js";
+} from "./chunk-EF466Y7P.js";
 import "./chunk-XYDNRVOU.js";
 import {
   pairedConfigPath
@@ -47,7 +47,7 @@ program.command("pair <code>").description("Pair this machine against Kojee usin
 program.command("connect <code>").description(
   "Connect this runtime to Kojee with a per-agent pair code from the dashboard (claude-code | codex | openclaw | hermes). claude-code/codex/openclaw write a per-runtime paired slot (~/.kojee/agents/<runtime>/config.json) and point the runtime launcher at it via --paired-config; hermes writes the global ~/.kojee/config.json (its daemon + `kojee-mcp send` read that). Idempotent."
 ).requiredOption("--runtime <id>", "Target runtime: claude-code | codex | openclaw | hermes").option("--url <url>", "Broker base URL (default: the canonical staging broker)").action(async (code, opts) => {
-  const { runConnect } = await import("./connect-handler-NJ4FZIAM.js");
+  const { runConnect } = await import("./connect-handler-J5RA3EJJ.js");
   const result = await runConnect({
     code,
     runtime: opts.runtime,
@@ -60,7 +60,7 @@ program.command("connect <code>").description(
 program.command("reconnect").description(
   "Re-run configure for an already-paired runtime, KEEPING the token + enrolled key (no re-pair). Re-writes configs/hooks to this install and refreshes the agent instructions."
 ).option("--runtime <id>", "Target runtime (defaults to the recorded runtime from the last connect/init)").action(async (opts) => {
-  const { runReconnect } = await import("./connect-handler-NJ4FZIAM.js");
+  const { runReconnect } = await import("./connect-handler-J5RA3EJJ.js");
   const result = await runReconnect({ ...opts.runtime ? { runtime: opts.runtime } : {} });
   for (const m of result.messages) console.error(m);
   console.error(result.output);
@@ -126,7 +126,7 @@ program.command("tail <path>").description("Stream a file's contents and follow
   "--wake-only",
   "Suppress routine heartbeat warn/recover telemetry; surface only a sustained stream outage"
 ).action(async (filePath, opts) => {
-  const { runTail } = await import("./tail-stream-HG4BKJOG.js");
+  const { runTail } = await import("./tail-stream-EIMLRRUP.js");
   try {
     await runTail(filePath, { wakeOnly: opts.wakeOnly === true });
   } catch (err) {
@@ -135,7 +135,7 @@ program.command("tail <path>").description("Stream a file's contents and follow
   }
 });
 program.command("doctor").description("Diagnose the kojee wake path (proxy, hook-server, SSE stream, event log, Monitor) and print the exact wake recipe").action(async () => {
-  const { runDoctor } = await import("./doctor-KMYKRYPE.js");
+  const { runDoctor } = await import("./doctor-7Y7PWE54.js");
   const code = await runDoctor();
   process.exit(code);
 });
@@ -154,7 +154,7 @@ function addInstallOptions(cmd, runtimeHelp) {
 function makeInstallAction(verb) {
   return async (opts) => {
     const interactive = process.stdin.isTTY === true && opts.runtime === void 0;
-    const { runSetup, resolvePairCode } = await import("./setup-handler-I7ZEZTKW.js");
+    const { runSetup, resolvePairCode } = await import("./setup-handler-VWP6D74B.js");
     const pairCode = resolvePairCode(opts);
     const result = await runSetup({
       verb,

package/dist/{connect-handler-NJ4FZIAM.js → connect-handler-J5RA3EJJ.js}

@@ -2,19 +2,19 @@ import {
   DEFAULT_BROKER_URL,
   reconcileConnectPairSlot,
   runWizard
-} from "./chunk-ZUF47CPP.js";
-import "./chunk-376ZI3J7.js";
+} from "./chunk-7DCZNZSP.js";
+import "./chunk-7LKCTUBY.js";
 import "./chunk-E6WMFMM2.js";
 import "./chunk-GEGUWQYT.js";
-import "./chunk-77HWBSRH.js";
-import "./chunk-D6JKFJ6A.js";
-import "./chunk-COM6435C.js";
 import {
   CONNECT_RUNTIMES
 } from "./chunk-EIH2LNF4.js";
 import {
   readRecordedRuntime
 } from "./chunk-RDLF4NQC.js";
+import "./chunk-77HWBSRH.js";
+import "./chunk-D6JKFJ6A.js";
+import "./chunk-COM6435C.js";
 import "./chunk-SQL56SEB.js";
 import "./chunk-V5VZPYMZ.js";
 import {

package/dist/{doctor-KMYKRYPE.js → doctor-7Y7PWE54.js}

@@ -407,18 +407,18 @@ function formatDoctorReport(report) {
 async function runDoctor() {
   const { readRecordedRuntime } = await import("./runtime-record-OXRLTOLC.js");
   if (readRecordedRuntime() === "codex") {
-    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-HB442SFA.js");
+    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-OEYUM7DE.js");
     const report2 = collectCodexDoctorReport();
     console.error(formatCodexDoctorReport(report2));
     return report2.verdict === "broken" ? 1 : 0;
   }
   if (readRecordedRuntime() === "openclaw") {
-    const { collectOpenclawDoctorReport, formatOpenclawDoctorReport } = await import("./doctor-openclaw-IWY64I2E.js");
+    const { collectOpenclawDoctorReport, formatOpenclawDoctorReport } = await import("./doctor-openclaw-B5KADVHD.js");
     const report2 = collectOpenclawDoctorReport();
     console.error(formatOpenclawDoctorReport(report2));
     return report2.verdict === "broken" ? 1 : 0;
   }
-  const { hermesArtifactsPresent, collectHermesDoctorReport, formatHermesDoctorReport } = await import("./doctor-hermes-WLDI4R6P.js");
+  const { hermesArtifactsPresent, collectHermesDoctorReport, formatHermesDoctorReport } = await import("./doctor-hermes-KMHM27Y3.js");
   if (hermesArtifactsPresent()) {
     const hermesReport = collectHermesDoctorReport();
     console.error(formatHermesDoctorReport(hermesReport));

package/dist/{doctor-codex-HB442SFA.js → doctor-codex-OEYUM7DE.js}

@@ -1,8 +1,9 @@
 import {
+  CODEX_TRUST_FIX_STEPS,
   defaultCodexConfigPath,
   defaultCodexHooksPath,
   isPlaceholderWebhookUrl
-} from "./chunk-376ZI3J7.js";
+} from "./chunk-7LKCTUBY.js";
 import "./chunk-D6JKFJ6A.js";
 import {
   classifyHookCommand,
@@ -25,6 +26,7 @@ import {
 
 // src/doctor-codex.ts
 import fs from "fs";
+import path from "path";
 
 // src/hooks/codex-trust-hash.ts
 import crypto from "crypto";
@@ -130,15 +132,33 @@ function extractPairedConfigPath(toml) {
   const m = toml.match(/args\s*=\s*\[[^\]]*"--paired-config"\s*,\s*"([^"]+)"/);
   return m ? m[1].replace(/\\\\/g, "\\") : null;
 }
-function defaultReadFile(path) {
+function defaultReadFile(filePath) {
   return () => {
     try {
-      return fs.readFileSync(path, "utf8");
+      return fs.readFileSync(filePath, "utf8");
     } catch {
       return null;
     }
   };
 }
+function defaultDiscoverProjectCodexConfigs(cwd = process.cwd()) {
+  const globalToml = path.resolve(defaultCodexConfigPath());
+  const found = [];
+  let dir = cwd;
+  for (let hops = 0; hops < 64; hops++) {
+    const candidate = path.join(dir, ".codex", "config.toml");
+    if (path.resolve(candidate) !== globalToml) {
+      try {
+        found.push({ path: candidate, toml: fs.readFileSync(candidate, "utf8") });
+      } catch {
+      }
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return found;
+}
 function collectCodexDoctorReport(deps = {}) {
   const readConfigToml = deps.readConfigToml ?? defaultReadFile(defaultCodexConfigPath());
   const readHooksJson = deps.readHooksJson ?? defaultReadFile(defaultCodexHooksPath());
@@ -153,6 +173,25 @@ function collectCodexDoctorReport(deps = {}) {
     ok: configOk,
     detail: configOk ? 'present with env.KOJEE_RUNTIME="codex" (Tier-1 contract)' : `MISSING [mcp_servers.kojee] or env.KOJEE_RUNTIME="codex" \u2014 ${WIZARD_RERUN}`
   });
+  const projectConfigs = deps.discoverProjectCodexConfigs?.() ?? defaultDiscoverProjectCodexConfigs();
+  const shadowing = projectConfigs.filter(
+    (c) => c.toml.includes("[mcp_servers.kojee]") || /\[hooks\.state/.test(c.toml) || /hook --type=codex-/.test(c.toml)
+  );
+  if (shadowing.length > 0) {
+    const pins = shadowing.map((s) => /kojee-mcp@([^\s"']+)/.exec(s.toml)?.[1]).filter((v) => !!v);
+    const pinNote = pins.length ? ` (pins kojee-mcp@${[...new Set(pins)].join(", ")})` : "";
+    checks.push({
+      name: "Codex config shadowing",
+      ok: "warn",
+      detail: `project-local ${shadowing.map((s) => s.path).join(", ")} defines Kojee/hook config${pinNote} that OVERLAYS the global ~/.codex/config.toml \u2014 Codex may run it instead of the reconnected global entry (split-brain), and this doctor's other checks read only the global file so they may not reflect what Codex actually runs. Reconcile or move the project file(s) aside (e.g. rename to config.toml.bak) so the global reconnect takes effect.`
+    });
+  } else {
+    checks.push({
+      name: "Codex config shadowing",
+      ok: true,
+      detail: "no project-local .codex/config.toml overlaying the global"
+    });
+  }
   const hooksRaw = readHooksJson() ?? "{}";
   let hooksJson = {};
   try {
@@ -246,13 +285,13 @@ function collectCodexDoctorReport(deps = {}) {
           checks.push({
             name: `hook trust (${event})`,
             ok: "warn",
-            detail: `${label} is UNTRUSTED \u2014 no [hooks.state]."${key}" trusted_hash. Codex will NOT run it (wakes silently stop) until you launch Codex and APPROVE its trust prompt.`
+            detail: `${label} is UNTRUSTED \u2014 no [hooks.state]."${key}" trusted_hash. Codex will NOT run it (wakes silently stop) \u2014 ${CODEX_TRUST_FIX_STEPS}.`
           });
         } else {
           checks.push({
             name: `hook trust (${event})`,
             ok: "warn",
-            detail: `${label} trust is STALE \u2014 trusted_hash no longer matches the current hooks.json entry (a rewrite invalidated it). Codex will NOT run it until you re-approve the trust prompt.`
+            detail: `${label} trust is STALE \u2014 trusted_hash no longer matches the current hooks.json entry (a rewrite invalidated it). Codex will NOT run it \u2014 ${CODEX_TRUST_FIX_STEPS}.`
           });
         }
       }
@@ -399,6 +438,7 @@ function formatCodexDoctorReport(report) {
 }
 export {
   collectCodexDoctorReport,
+  defaultDiscoverProjectCodexConfigs,
   formatCodexDoctorReport,
   parseCodexEnvFromToml
 };

package/dist/{doctor-hermes-WLDI4R6P.js → doctor-hermes-KMHM27Y3.js}

@@ -2,6 +2,10 @@ import {
   HERMES_INSTANCE_KEY,
   HERMES_MCP_SERVER_NAME
 } from "./chunk-GEGUWQYT.js";
+import {
+  buildFlapDoctorCheck
+} from "./chunk-P64UR3SE.js";
+import "./chunk-SQL56SEB.js";
 
 // src/doctor-hermes.ts
 import fs from "fs";
@@ -513,6 +517,19 @@ function collectHermesDoctorReport(deps = {}) {
       );
     }
   }
+  const flapCheck = buildFlapDoctorCheck({
+    name: "webhook.daemon-flapping",
+    // hermes namespaces every check `webhook.*`
+    ...deps.readFlaps ? { readFlaps: deps.readFlaps } : {},
+    ...deps.now ? { now: deps.now } : {}
+  });
+  emit(
+    checks,
+    collector,
+    flapCheck.name,
+    flapCheck.ok === "warn" ? "warn" : "ok",
+    flapCheck.detail
+  );
   return { checks, findings: collector.findings, verdict: collector.verdict() };
 }
 var CHECK_GROUP = {

package/dist/{doctor-openclaw-IWY64I2E.js → doctor-openclaw-B5KADVHD.js}

@@ -6,6 +6,9 @@ import "./chunk-D6JKFJ6A.js";
 import {
   resolveOpenclawWakeTarget
 } from "./chunk-LKGKDZSO.js";
+import {
+  buildFlapDoctorCheck
+} from "./chunk-P64UR3SE.js";
 import "./chunk-SQL56SEB.js";
 import {
   loadPairedConfig,
@@ -60,6 +63,7 @@ function collectOpenclawDoctorReport(deps = {}) {
     ok: paired !== null,
     detail: paired ? `resolves \u2014 source: ${paired.source} paired slot (token value never printed)` : `NONE resolves (no ~/.kojee/agents/openclaw/config.json or ~/.kojee/config.json token) \u2014 ${WIZARD_RERUN}`
   });
+  checks.push(buildFlapDoctorCheck({ ...deps.readFlaps ? { readFlaps: deps.readFlaps } : {}, ...deps.now ? { now: deps.now } : {} }));
   const verdict = checks.some((c) => c.ok === false) ? "broken" : checks.some((c) => c.ok === "warn") ? "degraded" : "healthy";
   return { checks, verdict };
 }

package/dist/{event-stream-ATKYXDBV.js → event-stream-KQHPW42G.js}

@@ -1,4 +1,5 @@
 import {
+  CONNECT_TIMEOUT_MS,
   LOG_HEARTBEAT_INTERVAL_MS,
   UNARMED_FALLBACK_MS,
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,
@@ -10,10 +11,11 @@ import {
   startEventStream,
   statusReason,
   undiciFetch
-} from "./chunk-CUOJHP2S.js";
+} from "./chunk-QDQGN5XP.js";
 import "./chunk-Z5LPNJQ6.js";
 import "./chunk-MIEI4PLB.js";
 export {
+  CONNECT_TIMEOUT_MS,
   LOG_HEARTBEAT_INTERVAL_MS,
   UNARMED_FALLBACK_MS,
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,

package/dist/flap-log-D4KG7RK4.js

@@ -0,0 +1,23 @@
+import {
+  FLAP_WARN_COUNT,
+  FLAP_WINDOW_MS,
+  MAX_FLAP_ENTRIES,
+  buildFlapDoctorCheck,
+  defaultFlapLogPath,
+  flapRateExceeds,
+  readFlaps,
+  recentFlapCount,
+  recordFlap
+} from "./chunk-P64UR3SE.js";
+import "./chunk-SQL56SEB.js";
+export {
+  FLAP_WARN_COUNT,
+  FLAP_WINDOW_MS,
+  MAX_FLAP_ENTRIES,
+  buildFlapDoctorCheck,
+  defaultFlapLogPath,
+  flapRateExceeds,
+  readFlaps,
+  recentFlapCount,
+  recordFlap
+};

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   listTandemIds,
   startProxy
-} from "./chunk-HRDASFRF.js";
+} from "./chunk-EF466Y7P.js";
 import "./chunk-XYDNRVOU.js";
 import "./chunk-TBVJOXIR.js";
 import "./chunk-Z5LPNJQ6.js";

package/dist/lib.js

@@ -2,7 +2,7 @@ import {
   normalizeBackendEvent,
   sanitizeDisplayname,
   startEventStream
-} from "./chunk-CUOJHP2S.js";
+} from "./chunk-QDQGN5XP.js";
 import {
   resubscribeMemberships
 } from "./chunk-OT2GILXC.js";

package/dist/{registry-NLRXVII7.js → registry-PNL4VGNK.js}

@@ -125,7 +125,7 @@ function createClaudeCodeDelivery() {
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
-      const { startEventStream } = await import("./event-stream-ATKYXDBV.js");
+      const { startEventStream } = await import("./event-stream-KQHPW42G.js");
       const { createMcpServer } = await import("./server-RK4UK6SP.js");
       const { deriveDiscoveryKey } = await import("./ancestry-A2F5KQ6A.js");
       const { resolveSharedSessionId } = await import("./cc-session-id-NNCZCHZZ.js");
@@ -322,7 +322,7 @@ function createWebhookDelivery(name, pendingLedger) {
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
-      const { startEventStream } = await import("./event-stream-ATKYXDBV.js");
+      const { startEventStream } = await import("./event-stream-KQHPW42G.js");
       const { createMcpServer } = await import("./server-RK4UK6SP.js");
       sweepStaleEventLogs();
       eventLog = startEventLog({
@@ -515,7 +515,7 @@ function createOpenclawDelivery(deps = {}) {
     async start(ctx) {
       const { startEventLog, sweepStaleEventLogs } = await import("./event-log-2NBJEIEP.js");
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
-      const { startEventStream } = await import("./event-stream-ATKYXDBV.js");
+      const { startEventStream } = await import("./event-stream-KQHPW42G.js");
       const { createMcpServer } = await import("./server-RK4UK6SP.js");
       sweepStaleEventLogs();
       eventLog = startEventLog({

package/dist/{setup-handler-I7ZEZTKW.js → setup-handler-VWP6D74B.js}

@@ -3,17 +3,17 @@ import {
   pairSlotFor,
   reconcileConnectPairSlot,
   runWizard
-} from "./chunk-ZUF47CPP.js";
-import "./chunk-376ZI3J7.js";
+} from "./chunk-7DCZNZSP.js";
+import "./chunk-7LKCTUBY.js";
 import "./chunk-E6WMFMM2.js";
 import "./chunk-GEGUWQYT.js";
+import "./chunk-EIH2LNF4.js";
+import "./chunk-RDLF4NQC.js";
 import {
   isWizardRuntime
 } from "./chunk-77HWBSRH.js";
 import "./chunk-D6JKFJ6A.js";
 import "./chunk-COM6435C.js";
-import "./chunk-EIH2LNF4.js";
-import "./chunk-RDLF4NQC.js";
 import "./chunk-SQL56SEB.js";
 import "./chunk-V5VZPYMZ.js";
 import {

package/dist/stream-watchdog-CLRS2VMV.js

@@ -0,0 +1,59 @@
+// src/runtime/stream-watchdog.ts
+var DEFAULT_STREAM_THRESHOLD_MS = 9e4;
+var DEFAULT_STREAM_INTERVAL_MS = 15e3;
+function createStreamWatchdog(opts) {
+  const thresholdMs = opts.thresholdMs ?? DEFAULT_STREAM_THRESHOLD_MS;
+  const intervalMs = opts.intervalMs ?? DEFAULT_STREAM_INTERVAL_MS;
+  const now = opts.now ?? Date.now;
+  let timer = null;
+  let fired = false;
+  let lastHealthyAt = now();
+  let lastSeenEventAt = null;
+  function stop() {
+    if (timer !== null) {
+      clearInterval(timer);
+      timer = null;
+    }
+  }
+  function check() {
+    if (fired) return;
+    let state;
+    try {
+      state = opts.getState();
+    } catch {
+      return;
+    }
+    const t = now();
+    const eventAdvanced = state.lastEventAt !== null && state.lastEventAt !== lastSeenEventAt;
+    if (state.lastEventAt !== null) lastSeenEventAt = state.lastEventAt;
+    if (state.connected || eventAdvanced) {
+      lastHealthyAt = t;
+      return;
+    }
+    const disconnectedForMs = t - lastHealthyAt;
+    if (disconnectedForMs > thresholdMs) {
+      fired = true;
+      stop();
+      try {
+        opts.onUnhealthy({
+          disconnectedForMs,
+          reason: `SSE stream unhealthy for ${Math.round(disconnectedForMs / 1e3)}s (connected=false, no new events) \u2014 reconnect loop presumed wedged`
+        });
+      } catch {
+      }
+    }
+  }
+  return {
+    start() {
+      if (timer !== null || fired) return;
+      timer = setInterval(() => check(), intervalMs);
+      timer.unref?.();
+    },
+    stop
+  };
+}
+export {
+  DEFAULT_STREAM_INTERVAL_MS,
+  DEFAULT_STREAM_THRESHOLD_MS,
+  createStreamWatchdog
+};

package/dist/{tail-stream-HG4BKJOG.js → tail-stream-EIMLRRUP.js}

@@ -9,7 +9,7 @@ import {
   LOG_HEARTBEAT_INTERVAL_MS,
   UNARMED_FALLBACK_MS,
   createAdaptiveWatchdog
-} from "./chunk-CUOJHP2S.js";
+} from "./chunk-QDQGN5XP.js";
 import "./chunk-Z5LPNJQ6.js";
 import "./chunk-MIEI4PLB.js";
 import "./chunk-U5HHHRXA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kojee-mcp",
-  "version": "0.7.5-staging.8",
+  "version": "0.7.5-staging.9",
   "type": "module",
   "main": "dist/index.js",
   "exports": {