mixdog 0.9.84 → 0.9.86

package/src/tui/engine/live-share.mjs

@@ -446,7 +446,7 @@ export function createLiveShare({
   const applyViewerFrame = (frame, socket) => {
     if (frame.t === 'full') {
       viewerApply.replaceItems(Array.isArray(frame.items) ? frame.items : []);
-      if (frame.tail) viewerApply.updateStreamingTail(frame.tail.id, frame.tail);
+      if (frame.tail) viewerApply.updateStreamingTail(frame.tail.id, frame.tail, {}, { resetText: true });
       viewerApply.set({ spinner: frame.spinner || null });
       applyLiveState(frame.live);
       return;
@@ -472,7 +472,7 @@ export function createLiveShare({
         requestSync(socket);
       }
     } else if ('tail' in frame) {
-      if (frame.tail) viewerApply.updateStreamingTail(frame.tail.id, frame.tail);
+      if (frame.tail) viewerApply.updateStreamingTail(frame.tail.id, frame.tail, {}, { resetText: true });
       else viewerApply.clearStreamingTail();
     }
     if ('spinner' in frame) viewerApply.set({ spinner: frame.spinner || null });

package/src/tui/engine/session-api-ext.mjs

@@ -432,9 +432,10 @@ export function createEngineApiB(bag) {
         return next;
       }
       if (enabled && owner && currentId && owner !== currentId) {
-        runtime.claimRemoteForCurrentSession?.();
-        set({ remoteEnabled: true, remoteSessionId: runtime.getRemoteSessionId?.() || null });
-        return true;
+        await runtime.startRemote?.();
+        const next = runtime.isRemoteEnabled?.() === true;
+        set({ remoteEnabled: next, remoteSessionId: runtime.getRemoteSessionId?.() || null });
+        return next;
       }
       if (enabled) await runtime.releaseRemote?.();
       else await runtime.startRemote?.();
@@ -447,17 +448,31 @@ export function createEngineApiB(bag) {
     // superseded and flips itself OFF via onRemoteStateChange. Used by the
     // `/remote` slash command — repeated /remote just re-claims (idempotent).
     claimRemote: async () => {
-      await runtime.startRemote?.();
-      const next = runtime.isRemoteEnabled?.() === true;
-      set({ remoteEnabled: next, remoteSessionId: runtime.getRemoteSessionId?.() || null });
-      return next;
+      // Desired state paints before daemon cold boot. The final read in
+      // `finally` reconciles a skipped/failed claim to the backend truth.
+      set({
+        remoteEnabled: true,
+        remoteSessionId: runtime.getRemoteSessionId?.() || getState().sessionId || null,
+      });
+      try {
+        await runtime.startRemote?.();
+      } finally {
+        const next = runtime.isRemoteEnabled?.() === true;
+        set({ remoteEnabled: next, remoteSessionId: next ? runtime.getRemoteSessionId?.() || null : null });
+      }
+      return runtime.isRemoteEnabled?.() === true;
     },
     // Idempotent desired-state OFF for desktop controls. Unlike toggleRemote,
     // a delayed/replayed request can never turn remote back on.
     releaseRemote: async () => {
-      await runtime.releaseRemote?.();
       set({ remoteEnabled: false, remoteSessionId: null });
-      return false;
+      try {
+        await runtime.releaseRemote?.();
+      } finally {
+        const next = runtime.isRemoteEnabled?.() === true;
+        set({ remoteEnabled: next, remoteSessionId: next ? runtime.getRemoteSessionId?.() || null : null });
+      }
+      return runtime.isRemoteEnabled?.() === true;
     },
     isRemoteEnabled: () => runtime.isRemoteEnabled?.() === true,
     getVoiceStatus: () => getVoiceStatus(),

package/src/tui/engine/session-flow.mjs

@@ -43,8 +43,12 @@ export function createSessionFlow(bag) {
     const mode = options.mode || 'prompt';
     const priority = options.priority || defaultQueuePriority(mode);
     const displayText = promptDisplayText(text, options);
+    const submittedAt = Number(options.submittedAt);
     return {
       id: options.id || nextId(),
+      submittedAt: Number.isFinite(submittedAt) && submittedAt > 0
+        ? Math.round(submittedAt)
+        : Date.now(),
       text: displayText,
       content: text,
       pastedImages: options.pastedImages && typeof options.pastedImages === 'object' ? options.pastedImages : null,
@@ -283,6 +287,8 @@ export function createSessionFlow(bag) {
       set({ queued: [...getState().queued, entry] });
       if (isQueuedEntryEditable(entry)) flushEmitImmediate?.();
     }
+    const queueAgeMs = Math.max(0, Date.now() - Number(entry.submittedAt || Date.now()));
+    tuiDebug(`prompt-queued id=${String(entry.id)} busy=${getState().busy ? 1 : 0} ageMs=${queueAgeMs}`);
     if (getState().busy) tuiDebug(`busy-queue enqueue mode=${entry.mode} pending=${pending.length}`);
     void drain();
     return true;
@@ -309,24 +315,28 @@ export function createSessionFlow(bag) {
       if (batch.length === 0) break;
       for (const entry of batch) {
         const content = entry.content;
+        const steeringMeta = {
+          id: entry.id,
+          submittedAt: entry.submittedAt,
+          ...(Array.isArray(entry.images) && entry.images.length ? { images: entry.images } : {}),
+        };
         if (entry.suppressDisplay) {
           // Model-visible twin of an already-rendered live completion: deliver
           // content to the model but flag onSteerMessage to skip the duplicate
           // transcript card (no fall-back to content-derived display text).
           if (Array.isArray(content) ? content.length > 0 : String(content ?? '').trim().length > 0) {
-            out.push({ text: STEERING_SUPPRESSED_DISPLAY, content });
+            out.push({ ...steeringMeta, text: STEERING_SUPPRESSED_DISPLAY, content });
           }
           continue;
         }
-        const value = typeof content === 'string'
-          ? content.trim()
-          : { text: String(entry.text || '').trim(), content };
-        if (typeof value === 'string') {
-          if (value.length > 0) out.push(value);
-        } else if (Array.isArray(value.content)) {
-          if (value.content.length > 0) out.push(value);
-        } else if (String(value.content ?? '').trim().length > 0) {
-          out.push(value);
+        const displayText = String(entry.text || '').trim();
+        if (typeof content === 'string') {
+          const value = content.trim();
+          if (value.length > 0) out.push({ ...steeringMeta, text: displayText || value, content: value });
+        } else if (Array.isArray(content)) {
+          if (content.length > 0) out.push({ ...steeringMeta, text: displayText, content });
+        } else if (String(content ?? '').trim().length > 0) {
+          out.push({ ...steeringMeta, text: displayText, content });
         }
       }
       commitSteeringQueueEntries(batch);

package/src/tui/engine/turn.mjs

@@ -17,8 +17,11 @@ export function createRunTurn(bag) {
   } = bag;
   // Small fallbacks keep isolated createRunTurn harnesses source-compatible;
   // the real engine supplies atomic implementations that also maintain revision.
-  const updateStreamingTail = updateStreamingTailFromStore || ((id, patch = {}) => {
-    set({ streamingTail: { ...(getState().streamingTail || {}), ...patch, kind: 'assistant', id, streaming: true } });
+  const updateStreamingTail = updateStreamingTailFromStore || ((id, patch = {}, extra = {}) => {
+    set({
+      streamingTail: { ...(getState().streamingTail || {}), ...patch, kind: 'assistant', id, streaming: true },
+      ...extra,
+    });
     return true;
   });
   const settleStreamingTail = settleStreamingTailFromStore || ((id, patch = {}) => {
@@ -671,7 +674,12 @@ export function createRunTurn(bag) {
           patch.spinner = { ...getState().spinner, responseLength: responseLengthVal, thinking: false, thinkingLastEndedAt: _pendingThinkingLastEndedAt || getState().spinner.thinkingLastEndedAt, mode: compactingActive ? 'compacting' : 'responding' };
           _publishedThinkingActive = false;
         }
-        if (Object.keys(patch).length > 0) set(patch);
+        if (patch.streamingTail) {
+          const { streamingTail, ...extra } = patch;
+          updateStreamingTail(streamingTail.id, streamingTail, extra);
+        } else if (Object.keys(patch).length > 0) {
+          set(patch);
+        }
         _pendingThinkingLastEndedAt = 0;
       }
       if (_pendingThinkFlush) {
@@ -800,7 +808,7 @@ export function createRunTurn(bag) {
         onStreamDelta: () => {
           markTurnProgress('stream-delta');
         },
-        onSteerMessage: (text) => {
+        onSteerMessage: (text, steeringMeta = {}) => {
           if (!markTurnProgress('steer-message')) return;
           // A suppressed live-completion twin is model-visible only; its
           // Response card was already pushed at delivery time. Skip the
@@ -826,7 +834,17 @@ export function createRunTurn(bag) {
             // same-category tool call opens a fresh card instead of reusing
             // one whose count would then change ABOVE this steered user item.
             clearAggregateContinuation();
-            pushUserOrSyntheticItem(value, undefined, 'injected');
+            const steeringIds = Array.isArray(steeringMeta?.ids)
+              ? steeringMeta.ids.filter((id) => id !== undefined && id !== null)
+              : [];
+            pushUserOrSyntheticItem(
+              value,
+              steeringIds[0],
+              'injected',
+              Array.isArray(steeringMeta?.images) && steeringMeta.images.length
+                ? { images: steeringMeta.images }
+                : null,
+            );
           }
         },
         onToolCall: async (_iter, calls) => {
@@ -1091,17 +1109,11 @@ export function createRunTurn(bag) {
           _emittedVisibleText = '';
           if (currentAssistantId) {
             if (currentAssistantText) {
-              set({
-                streamingTail: {
-                  ...(getState().streamingTail || {}),
-                  kind: 'assistant',
-                  id: currentAssistantId,
-                  text: currentAssistantText,
-                  streaming: true,
-                  at: getState().streamingTail?.at || Date.now(),
-                  ...turnRouteMeta,
-                },
-              });
+              updateStreamingTail(currentAssistantId, {
+                text: currentAssistantText,
+                at: getState().streamingTail?.at || Date.now(),
+                ...turnRouteMeta,
+              }, {}, { resetText: true });
             } else {
               clearStreamingTail(currentAssistantId);
               currentAssistantId = null;

package/src/tui/engine.mjs

@@ -345,6 +345,12 @@ export async function createEngineSession({
     const commandBusyReleased = state.commandBusy === true
       && Object.prototype.hasOwnProperty.call(patch, 'commandBusy')
       && patch.commandBusy === false;
+    // Some recovery and externally-driven settlement paths release busy
+    // without returning through drain's own finally. Re-kick centrally so a
+    // prompt accepted during the old turn cannot remain queued indefinitely.
+    const busyReleased = state.busy === true
+      && Object.prototype.hasOwnProperty.call(patch, 'busy')
+      && patch.busy === false;
     state = { ...state, ...effectivePatch };
     if (requestsStructureChange) publisher.markStructureChange();
     emit();
@@ -353,7 +359,7 @@ export async function createEngineSession({
     if (effectivePatch.commandStatus || effectivePatch.toolApproval) {
       flushEmitImmediate();
     }
-    if (commandBusyReleased) queueMicrotask(() => { void bag.drain?.(); });
+    if (commandBusyReleased || busyReleased) queueMicrotask(() => { void bag.drain?.(); });
     return true;
   };
 
@@ -537,12 +543,28 @@ export async function createEngineSession({
       ...extra,
     });
   };
-  const updateStreamingTail = (id, patch = {}, extra = {}) => {
+  // Non-enumerable so the marker never enters persisted transcript items,
+  // live-share JSON, or renderer snapshots. The desktop host reads the shared
+  // Symbol.for key before cloning and uses it to prove that a growing text is
+  // an append, avoiding an O(total text) startsWith check on every frame.
+  const streamingTailTextEpochKey = Symbol.for('mixdog.streaming-tail-text-epoch');
+  let streamingTailTextEpoch = 0;
+  const updateStreamingTail = (id, patch = {}, extra = {}, { resetText = false } = {}) => {
     if (id == null) return false;
     const current = state.streamingTail?.id === id
       ? state.streamingTail
       : { kind: 'assistant', id, text: '', streaming: true };
     const next = { ...current, ...patch, kind: 'assistant', id, streaming: true };
+    const currentTextEpoch = current[streamingTailTextEpochKey];
+    const textEpoch = !resetText && Number.isSafeInteger(currentTextEpoch)
+      ? currentTextEpoch
+      : ++streamingTailTextEpoch;
+    Object.defineProperty(next, streamingTailTextEpochKey, {
+      value: textEpoch,
+      enumerable: false,
+      configurable: false,
+      writable: false,
+    });
     let changed = state.streamingTail !== current;
     if (!changed) {
       for (const [key, value] of Object.entries(next)) {

package/src/tui/figures.mjs

@@ -27,7 +27,6 @@ export const RESULT_GUTTER_CONT_GLYPH = '\u2502'; // │ - tool-result continuat
 
 export const BLOCKQUOTE_BAR = '\u258e'; // ▎ - blockquote line prefix
 
-export const THEREFORE = '\u2234'; // ∴ - collapsed-thinking prefix (∴ Thinking)
 // Turn-complete marker — kept distinct from live-thinking's therefore sign.
 export const TURN_DONE_MARKER = '\u25c8'; // ◈ - turn-complete marker
 

package/src/ui/statusline-format.mjs

@@ -26,7 +26,6 @@ export const D = colorEnabled() ? rgbSgr(136, 136, 136) : '';
 export const GRN = colorEnabled() ? rgbSgr(0, 170, 75) : '';
 export const YLW = colorEnabled() ? rgbSgr(255, 193, 7) : '';
 export const RED = colorEnabled() ? rgbSgr(220, 70, 88) : '';
-export const GREY = colorEnabled() ? rgbSgr(136, 136, 136) : '';
 
 export function terminalColumns() {
   const cols = Number(process.stdout?.columns);

package/src/hooks/lib/permission-evaluator.cjs

@@ -1,24 +0,0 @@
-'use strict';
-/**
- * permission-evaluator.cjs
- *
- * Permission enforcement has been removed by user request: every tool call is
- * trusted. This module retains only the `evaluatePermission` entry point for
- * API compatibility with callers (PreToolUse hook / hook-pipe-server,
- * session manager, agent loop). It unconditionally returns an `allow`
- * decision — no path-based hard-deny, no secret-read deny, no settings.json
- * allow/deny rules, no permission-mode sandbox.
- *
- * Exported function:
- *   evaluatePermission({ toolName }) → { decision: 'allow', reason: string }
- *
- * The 'deny'/'ask' decision types are no longer produced; the return shape is
- * kept as `{ decision, reason }` so existing consumers keep working.
- */
-
-function evaluatePermission({ toolName } = {}) {
-  const name = typeof toolName === 'string' ? toolName : '';
-  return { decision: 'allow', reason: `permissions disabled: trust/allow (${name})` };
-}
-
-module.exports.evaluatePermission = evaluatePermission;

package/src/lib/config-cjs.cjs

@@ -1,61 +0,0 @@
-'use strict';
-/**
- * CJS shim for shared config reading in hooks.
- *
- * Read-only mirror of src/shared/config.mjs's section accessor. Hook
- * processes only read mixdog-config.json — never write, never rename.
- */
-
-const fs = require('fs');
-const path = require('path');
-const { resolvePluginData } = require('./plugin-paths.cjs');
-const { getSecret: _getSecret } = require('./keychain-cjs.cjs');
-
-const DATA_DIR = resolvePluginData();
-
-const GENERATED_KEY = '_generated';
-
-function stripGeneratedMarker(data) {
-  if (!data || typeof data !== 'object' || Array.isArray(data)) return data;
-  if (!Object.prototype.hasOwnProperty.call(data, GENERATED_KEY)) return data;
-  const { [GENERATED_KEY]: _unused, ...rest } = data;
-  return rest;
-}
-
-function readJsonFile(filePath) {
-  try {
-    return JSON.parse(fs.readFileSync(filePath, 'utf8'));
-  } catch {
-    return null;
-  }
-}
-
-function readSection(section) {
-  const unified = readJsonFile(path.join(DATA_DIR, 'mixdog-config.json'));
-  if (!unified || typeof unified !== 'object') return {};
-  const raw = unified[section];
-  if (raw == null) return {};
-  return stripGeneratedMarker(raw) || {};
-}
-
-// ── Secret-aware getters (CJS, for hooks) ────────────────────────────────────
-// Read order: ENV MIXDOG_<UPPER_SNAKE> → OS keychain → null.
-
-function _envKey(account) {
-  return 'MIXDOG_' + account.replace(/[.\s]+/g, '_').toUpperCase();
-}
-
-function _readSecret(account) {
-  const envVal = process.env[_envKey(account)];
-  if (envVal) return envVal;
-  try { return _getSecret(account); } catch { return null; }
-}
-
-function getDiscordToken() {
-  return _readSecret('discord.token');
-}
-
-module.exports = {
-  readSection,
-  getDiscordToken,
-};

package/src/runtime/shared/launcher-control.mjs

@@ -1,258 +0,0 @@
-// Cross-platform managed-launcher control channel.
-//
-// Replaces the Windows-only AttachConsole + WriteConsoleInputW front-injection
-// path. A `mixdog`-launched session can be "managed": the launcher
-// (setup/mixdog.mjs) owns the child process and exposes a file-based
-// command queue under the runtime root. Internal commands (/clear,
-// /reload-plugins) are enqueued by the MCP server (inject_input)
-// and the launcher delivers them to the child's stdin — no terminal keystroke
-// injection, no new window. Works on Windows / macOS / Linux.
-//
-// Native backend (CANONICAL): Rust is canonical for mixdog's native
-// functionality. The enqueue/drain primitives and the managed terminal bridge
-// are owned by the Rust crate native/mixdog-launch. The pure-JS queue path below
-// is only a wire-compatible fallback for queue writes/drains when the binary has
-// not landed; managed terminal ownership never falls back to JS/node-pty.
-//
-// Wire-up:
-//   • The launcher sets MIXDOG_LAUNCH_ID (and MIXDOG_MANAGED_LAUNCH=1) on the
-//     child env ONLY when it has actually engaged the stdin control bridge.
-//   • The MCP server (a descendant of the child) inherits that env, so
-//     managedLaunchId() is the single source of truth for "am I managed?".
-//   • enqueueLauncherCommand() publishes one command file atomically; the
-//     launcher's watchLauncherCommands() drains + delivers them in order.
-
-import {
-  mkdirSync,
-  readdirSync,
-  readFileSync,
-  writeFileSync,
-  rmSync,
-  renameSync,
-  existsSync,
-  statSync,
-} from 'node:fs';
-import { spawnSync } from 'node:child_process';
-import { tmpdir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { randomUUID } from 'node:crypto';
-
-const ENV_LAUNCH_ID = 'MIXDOG_LAUNCH_ID';
-const ENV_MANAGED = 'MIXDOG_MANAGED_LAUNCH';
-
-// 0x1E (ASCII Record Separator): how `mixdog-launch drain` joins multiple
-// command bodies on stdout so embedded newlines in a command survive transport.
-const RECORD_SEP = '\x1e';
-
-// Names the env vars the launcher must set on the child so this module's
-// managedLaunchId() resolves inside the MCP server.
-
-// Mirror of channels/lib/runtime-paths.mjs RUNTIME_ROOT resolution so the
-// launcher and the MCP server agree on the queue location without importing
-// the channels layer into setup/.
-function launcherRuntimeRoot() {
-  return process.env.MIXDOG_RUNTIME_ROOT
-    ? resolve(process.env.MIXDOG_RUNTIME_ROOT)
-    : join(tmpdir(), 'mixdog');
-}
-
-function sanitize(value) {
-  return String(value).replace(/[^a-zA-Z0-9._-]/g, '_');
-}
-
-function launcherQueueDir(launchId) {
-  return join(launcherRuntimeRoot(), `launch-cmds-${sanitize(launchId)}`);
-}
-
-// ── Native backend resolution (canonical) ──────────────────────────────────
-// Locate the Rust mixdog-launch binary built by dev-sync / cargo. Resolution
-// order: explicit override → fresh live build → local cargo release build →
-// shipped prebuilt.
-// Returns an absolute path when present, else null (JS fallback engages).
-const PLUGIN_ROOT = process.env.MIXDOG_ROOT
-  || resolve(dirname(fileURLToPath(import.meta.url)), '../..');
-const NATIVE_LAUNCH_DEFAULT_BIN = join(
-  PLUGIN_ROOT,
-  'native/mixdog-launch/target/release',
-  process.platform === 'win32' ? 'mixdog-launch.exe' : 'mixdog-launch',
-);
-const NATIVE_LAUNCH_LIVE_BIN = join(
-  PLUGIN_ROOT,
-  'native/mixdog-launch/target-live/release',
-  process.platform === 'win32' ? 'mixdog-launch.exe' : 'mixdog-launch',
-);
-
-function nativeLaunchSourceMtime() {
-  let mtime = 0;
-  for (const rel of ['native/mixdog-launch/Cargo.toml', 'native/mixdog-launch/src/main.rs']) {
-    try { mtime = Math.max(mtime, statSync(join(PLUGIN_ROOT, rel)).mtimeMs); } catch {}
-  }
-  return mtime;
-}
-
-function freshNativeLaunchBin(path) {
-  try {
-    const binMtime = statSync(path).mtimeMs;
-    const srcMtime = nativeLaunchSourceMtime();
-    return binMtime > 0 && binMtime >= srcMtime ? path : null;
-  } catch {
-    return null;
-  }
-}
-
-// Shipped prebuilt path under native/prebuilt/<os-arch>/mixdog-launch(.exe)
-function nativeLaunchPrebuiltPath() {
-  const arch =
-    process.arch === 'x64' ? 'x86_64'
-    : process.arch === 'arm64' ? 'aarch64'
-    : process.arch === 'ia32' ? 'i686'
-    : process.arch;
-  const os =
-    process.platform === 'win32' ? 'windows'
-    : process.platform === 'darwin' ? 'macos'
-    : 'linux';
-  const ext = process.platform === 'win32' ? '.exe' : '';
-  return join(PLUGIN_ROOT, 'native', 'prebuilt', `${os}-${arch}`, `mixdog-launch${ext}`);
-}
-
-let _nativeBinCache; // undefined = unresolved, string|null = resolved
-function nativeLaunchBin() {
-  if (_nativeBinCache !== undefined) return _nativeBinCache;
-  // Opt-out for tests / forced-JS parity checks.
-  if (/^(0|false|no|off|js)$/i.test(String(process.env.MIXDOG_LAUNCH_NATIVE || ''))) {
-    _nativeBinCache = null;
-    return _nativeBinCache;
-  }
-  const override = process.env.MIXDOG_LAUNCH_NATIVE_BIN;
-  if (override && existsSync(override)) { _nativeBinCache = override; return _nativeBinCache; }
-  const live = freshNativeLaunchBin(NATIVE_LAUNCH_LIVE_BIN);
-  if (live) { _nativeBinCache = live; return _nativeBinCache; }
-  const release = freshNativeLaunchBin(NATIVE_LAUNCH_DEFAULT_BIN);
-  if (release) { _nativeBinCache = release; return _nativeBinCache; }
-  // Shipped prebuilt fallback (under native/prebuilt/<os-arch>/)
-  const prebuilt = nativeLaunchPrebuiltPath();
-  if (prebuilt && existsSync(prebuilt)) { _nativeBinCache = prebuilt; return _nativeBinCache; }
-  _nativeBinCache = null;
-  return _nativeBinCache;
-}
-
-// Returns true when the native mixdog-launch binary's `bridge` subcommand is
-// available for this platform (exit 0). The launcher uses this to gate the
-// managed-launch interactive path — no JS stdin pipe bridge fallback.
-function nativeBridgeAvailable() {
-  const bin = nativeLaunchBin();
-  if (!bin) return false;
-  const r = spawnSync(bin, ['bridge', '--probe'], {
-    encoding: 'utf8', windowsHide: true,
-    stdio: ['ignore', 'pipe', 'pipe'],
-  });
-  return r.status === 0;
-}
-
-function newLaunchId() {
-  return `${process.pid}-${randomUUID().slice(0, 8)}`;
-}
-
-// MCP-server side: returns the managed launch id when this process belongs to a
-// `mixdog`-launched session that engaged the control bridge, else null. The
-// launcher only sets MIXDOG_LAUNCH_ID once the bridge is live, so presence is
-// sufficient — there is no half-managed state to disambiguate.
-function managedLaunchId() {
-  const id = process.env[ENV_LAUNCH_ID];
-  return id && String(id).length > 0 ? String(id) : null;
-}
-
-let enqueueSequence = 0;
-
-// Writer side (inject_input): publish one command for the
-// launcher to deliver. Prefers the canonical Rust backend; the JS writer (temp
-// name + rename so the watcher never sees a partial file) is the fallback.
-// Returns the published path.
-function enqueueLauncherCommand(launchId, command) {
-  const dir = launcherQueueDir(launchId);
-  mkdirSync(dir, { recursive: true });
-  const bin = nativeLaunchBin();
-  if (bin) {
-    const r = spawnSync(bin, ['enqueue', '--dir', dir, '--command', String(command)], {
-      encoding: 'utf8', windowsHide: true,
-    });
-    if (r.status === 0) {
-      const out = String(r.stdout || '').trim();
-      if (out) return out;
-    }
-    // Native spawn failed / non-zero → fall through to the JS writer.
-  }
-  const seq = String(enqueueSequence++).padStart(6, '0');
-  const base = `${Date.now()}-${seq}-${randomUUID().slice(0, 8)}.cmd`;
-  const tmp = join(dir, `.${base}.tmp`);
-  const dst = join(dir, base);
-  writeFileSync(tmp, String(command), 'utf8');
-  renameSync(tmp, dst);
-  return dst;
-}
-
-// Launcher side: drain queued commands oldest-first (lexical sort on the
-// timestamp-prefixed name), deleting each as it is read. Prefers the canonical
-// Rust backend; the JS reader is the fallback.
-function drainLauncherCommands(launchId) {
-  const dir = launcherQueueDir(launchId);
-  const bin = nativeLaunchBin();
-  if (bin) {
-    const r = spawnSync(bin, ['drain', '--dir', dir], {
-      encoding: 'utf8', windowsHide: true,
-    });
-    if (r.status === 0) {
-      const out = String(r.stdout || '');
-      return out.length === 0 ? [] : out.split(RECORD_SEP);
-    }
-    // Native spawn failed / non-zero → fall through to the JS reader.
-  }
-  let entries;
-  try {
-    entries = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  const out = [];
-  for (const name of entries.filter((f) => f.endsWith('.cmd')).sort()) {
-    const full = join(dir, name);
-    let text;
-    try {
-      text = readFileSync(full, 'utf8');
-    } catch {
-      continue;
-    }
-    try {
-      rmSync(full, { force: true });
-    } catch {}
-    out.push(text);
-  }
-  return out;
-}
-
-// Launcher side: poll-based watcher. fs.watch semantics differ enough across
-// platforms (and miss atomic-rename publishes on some) that a short poll is the
-// robust choice for this low-rate control path. Returns a stop() that also
-// removes the queue directory.
-function watchLauncherCommands(launchId, onCommand, { intervalMs = 150 } = {}) {
-  mkdirSync(launcherQueueDir(launchId), { recursive: true });
-  let stopped = false;
-  const timer = setInterval(() => {
-    if (stopped) return;
-    for (const cmd of drainLauncherCommands(launchId)) {
-      try {
-        onCommand(cmd);
-      } catch {}
-    }
-  }, intervalMs);
-  if (typeof timer.unref === 'function') timer.unref();
-  return () => {
-    if (stopped) return;
-    stopped = true;
-    clearInterval(timer);
-    try {
-      rmSync(launcherQueueDir(launchId), { recursive: true, force: true });
-    } catch {}
-  };
-}