very-happy-cli 0.2.180 → 0.2.181

package/dist/{AcpBackend-DfRDtMcG.cjs → AcpBackend-CgHb_ya5.cjs}

@@ -3,11 +3,11 @@
 var node_child_process = require('node:child_process');
 var sdk = require('@agentclientprotocol/sdk');
 var node_crypto = require('node:crypto');
-var logger = require('./logger-CphW5nUE.cjs');
-var time = require('./time-Cjv0zxQO.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
+var time = require('./time-nqa9shu8.cjs');
 var contentLogMetadata = require('./contentLogMetadata-ZSFk_NjQ.cjs');
 var processTree = require('./processTree-CMHWlVse.cjs');
-var _package = require('./package-KhLqBDX9.cjs');
+var _package = require('./package-NoD8QOOM.cjs');
 
 function acpImageBlocks(attachments, supportsImages) {
   return attachments.filter((file) => ["image/jpeg", "image/png", "image/gif", "image/webp"].includes(file.mimeType)).map((file) => {

package/dist/{AcpBackend-B8Zi30Zh.mjs → AcpBackend-DZGCSuXF.mjs}

@@ -1,11 +1,11 @@
 import { spawn } from 'node:child_process';
 import { ndJsonStream, ClientSideConnection } from '@agentclientprotocol/sdk';
 import { randomUUID } from 'node:crypto';
-import { l as logger } from './logger-BUngm5Xg.mjs';
-import { d as delay } from './time-D3ETL7Jb.mjs';
+import { l as logger } from './logger-LFr8iPgl.mjs';
+import { d as delay } from './time-BcoJaG8E.mjs';
 import { c as contentLogMetadata, e as errorLogMetadata } from './contentLogMetadata-BlWI0egu.mjs';
 import { r as readableStderrTail, a as appendStderrRing, s as stopProcessGracefully, k as killProcessTree } from './processTree-CP5IvQ2Z.mjs';
-import { p as packageJson } from './package-7Ld1YMhh.mjs';
+import { p as packageJson } from './package-DYGwlmXl.mjs';
 
 function acpImageBlocks(attachments, supportsImages) {
   return attachments.filter((file) => ["image/jpeg", "image/png", "image/gif", "image/webp"].includes(file.mimeType)).map((file) => {

package/dist/{AcpSessionManager-CASKOnOj.cjs → AcpSessionManager-CacC2EVn.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var cuid2 = require('@paralleldrive/cuid2');
-var index = require('./index-Dv0Q48P3.cjs');
+var index = require('./index-Df2eHm3O.cjs');
 
 function turnOptions(turnId, time) {
   return turnId ? { turn: turnId, time } : { time };

package/dist/{AcpSessionManager-i8Rab0xT.mjs → AcpSessionManager-DwuPzWBh.mjs}

@@ -1,5 +1,5 @@
 import { createId } from '@paralleldrive/cuid2';
-import { s as streamKeyOf, d as createEnvelope } from './index-C6Vn5Eac.mjs';
+import { s as streamKeyOf, d as createEnvelope } from './index-CeRXrGnH.mjs';
 
 function turnOptions(turnId, time) {
   return turnId ? { turn: turnId, time } : { time };

package/dist/{BasePermissionHandler-BlM_tfej.cjs → BasePermissionHandler-DCP8ZEB4.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var logger = require('./logger-CphW5nUE.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
 
 class BasePermissionHandler {
   pendingRequests = /* @__PURE__ */ new Map();

package/dist/{BasePermissionHandler-26fKbRCm.mjs → BasePermissionHandler-Uo-GUjbb.mjs}

@@ -1,4 +1,4 @@
-import { l as logger } from './logger-BUngm5Xg.mjs';
+import { l as logger } from './logger-LFr8iPgl.mjs';
 
 class BasePermissionHandler {
   pendingRequests = /* @__PURE__ */ new Map();

package/dist/{acpSessionResume-B9l54P-X.mjs → acpSessionResume-9OLTD6kT.mjs}

@@ -1,6 +1,6 @@
 import { mkdirSync, renameSync, existsSync, unlinkSync } from 'node:fs';
 import { join } from 'node:path';
-import { w as writePrivateFileSync, c as configuration } from './configuration-PxzEJumr.mjs';
+import { w as writePrivateFileSync, c as configuration } from './configuration-BPrfb17M.mjs';
 
 const SESSION_MODE_DIR = "session-modes";
 const ACP_PERMISSION_MODES = ["default", "acceptEdits", "plan", "bypassPermissions"];

package/dist/{acpSessionResume-CR5pmgVo.cjs → acpSessionResume-BaVMD80f.cjs}

@@ -2,7 +2,7 @@
 
 var node_fs = require('node:fs');
 var path = require('node:path');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 
 const SESSION_MODE_DIR = "session-modes";
 const ACP_PERMISSION_MODES = ["default", "acceptEdits", "plan", "bypassPermissions"];

package/dist/{agentHome-CmGy0NWv.mjs → agentHome-B1BsKeqD.mjs}

@@ -1,13 +1,13 @@
 import chalk from 'chalk';
 import { homedir } from 'node:os';
-import { r as readSettings, u as updateSettings } from './persistence-BFUOHW5h.mjs';
+import { r as readSettings, u as updateSettings } from './persistence-D2Djrf7t.mjs';
 import 'node:fs';
-import './logger-BUngm5Xg.mjs';
+import './logger-LFr8iPgl.mjs';
 import { d as describeAgentHome, p as probeLoginShellEnv, r as resolveAgentHomes, e as expandHomePath, A as AGENT_HOME_ENV_NAMES } from './loginShellEnv-Dw8M7tkI.mjs';
 import 'node:fs/promises';
-import './configuration-PxzEJumr.mjs';
+import './configuration-BPrfb17M.mjs';
 import 'node:path';
-import './package-7Ld1YMhh.mjs';
+import './package-DYGwlmXl.mjs';
 import 'zod';
 import './authRelay-DhQhkBvX.mjs';
 import 'node:crypto';

package/dist/{agentHome-C7Sb7-Tz.cjs → agentHome-BtUmGcPX.cjs}

@@ -2,14 +2,14 @@
 
 var chalk = require('chalk');
 var os = require('node:os');
-var persistence = require('./persistence-9BMYspxG.cjs');
+var persistence = require('./persistence-BY-D00wT.cjs');
 require('node:fs');
-require('./logger-CphW5nUE.cjs');
+require('./logger-DgBwUSgS.cjs');
 var loginShellEnv = require('./loginShellEnv-BkuYtExZ.cjs');
 require('node:fs/promises');
-require('./configuration-CYO-kPOS.cjs');
+require('./configuration-C8JgseHy.cjs');
 require('node:path');
-require('./package-KhLqBDX9.cjs');
+require('./package-NoD8QOOM.cjs');
 require('zod');
 require('./authRelay-Dy1qU9td.cjs');
 require('node:crypto');

package/dist/{api-DM7b1OKj.cjs → api-COHFAkb_.cjs}

@@ -1,22 +1,22 @@
 'use strict';
 
 var axios = require('axios');
-var logger = require('./logger-CphW5nUE.cjs');
-var lidState = require('./lidState-DWGnm2H4.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
+var lidState = require('./lidState-x8cJ8J_9.cjs');
 var node_events = require('node:events');
 var socket_ioClient = require('socket.io-client');
-var pushNotifications = require('./pushNotifications-DI92havG.cjs');
+var pushNotifications = require('./pushNotifications-BXoOSq_G.cjs');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
 var limits = require('./limits-C-a7gr04.cjs');
-var time = require('./time-Cjv0zxQO.cjs');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var time = require('./time-nqa9shu8.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 var node_crypto = require('node:crypto');
-var index = require('./index-Dv0Q48P3.cjs');
-var registerCommonHandlers = require('./registerCommonHandlers-C7a_dUWs.cjs');
+var index = require('./index-Df2eHm3O.cjs');
+var registerCommonHandlers = require('./registerCommonHandlers-CRjBoJLK.cjs');
 var cuid2 = require('@paralleldrive/cuid2');
-var sync = require('./sync-Bn-idAoy.cjs');
+var sync = require('./sync-1hQ5KHpL.cjs');
 var backgroundTaskActivity = require('./backgroundTaskActivity-CBvUdj39.cjs');
-var controlClient = require('./controlClient-Bqv5v5OM.cjs');
+var controlClient = require('./controlClient-D68Zj7Q-.cjs');
 var chalk = require('chalk');
 
 async function hmac_sha512(key, data) {
@@ -2949,7 +2949,7 @@ class ApiClient {
     return new ApiSessionClient(this.credential.token, session, opts);
   }
   async machineSyncClient(machine) {
-    const { ApiMachineClient } = await Promise.resolve().then(function () { return require('./apiMachine-DkGRj-Ai.cjs'); });
+    const { ApiMachineClient } = await Promise.resolve().then(function () { return require('./apiMachine-D8H7CXaz.cjs'); });
     return new ApiMachineClient(this.credential.token, machine);
   }
   push() {

package/dist/{api-Hov8p7CA.mjs → api-Dr3wXL_7.mjs}

@@ -1,20 +1,20 @@
 import axios from 'axios';
-import { l as logger, r as redactLogValue } from './logger-BUngm5Xg.mjs';
-import { R as RpcHandlerManager, a as answerSocketRequest, c as connectGuarded, s as socketConnectGuard, d as describeSocketAckDrop, b as safeAck, i as isRateQuotaCode, p as pauseForRateQuota, e as shouldReconnect } from './lidState-bBrmaQd2.mjs';
+import { l as logger, r as redactLogValue } from './logger-LFr8iPgl.mjs';
+import { R as RpcHandlerManager, a as answerSocketRequest, c as connectGuarded, s as socketConnectGuard, d as describeSocketAckDrop, b as safeAck, i as isRateQuotaCode, p as pauseForRateQuota, e as shouldReconnect } from './lidState-DghbfRbr.mjs';
 import { EventEmitter } from 'node:events';
 import { io } from 'socket.io-client';
-import { A as AsyncLock, a as MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES, U as UserMessageSchema, F as FileEventMessageSchema, P as PushNotificationClient } from './pushNotifications-DCiBEVeC.mjs';
+import { A as AsyncLock, a as MAX_CHAT_ATTACHMENT_ENCRYPTED_BYTES, U as UserMessageSchema, F as FileEventMessageSchema, P as PushNotificationClient } from './pushNotifications-DXGIhE-A.mjs';
 import { h as decrypt, d as decodeBase64, i as decryptBlob, e as encodeBase64, g as encrypt, l as libsodiumEncryptForPublicKey, j as libsodiumPublicKeyFromSecretKey, k as getRandomBytes } from './authRelay-DhQhkBvX.mjs';
 import { p as prepareClipboardText, d as prepareClipboardHistoryText } from './limits-DIo7rEBR.mjs';
-import { b as backoff, d as delay, e as exponentialBackoffDelay } from './time-D3ETL7Jb.mjs';
-import { c as configuration } from './configuration-PxzEJumr.mjs';
+import { b as backoff, d as delay, e as exponentialBackoffDelay } from './time-BcoJaG8E.mjs';
+import { c as configuration } from './configuration-BPrfb17M.mjs';
 import { createHmac, randomUUID } from 'node:crypto';
-import { d as createEnvelope, s as streamKeyOf, R as ReleaseDrainNoticeSchema, t as RelayAssignmentResponseSchema } from './index-C6Vn5Eac.mjs';
-import { r as registerCommonHandlers } from './registerCommonHandlers-CTkCvjxt.mjs';
+import { d as createEnvelope, s as streamKeyOf, R as ReleaseDrainNoticeSchema, t as RelayAssignmentResponseSchema } from './index-CeRXrGnH.mjs';
+import { r as registerCommonHandlers } from './registerCommonHandlers-DF6bdDtd.mjs';
 import { createId } from '@paralleldrive/cuid2';
-import { I as InvalidateSync } from './sync-BvVhDO40.mjs';
+import { I as InvalidateSync } from './sync-DO-2PU45.mjs';
 import { B as BackgroundTaskReporter } from './backgroundTaskActivity-8PdPxrvy.mjs';
-import { k as notifyDaemonTurnEvent, m as notifyDaemonBackgroundTasks } from './controlClient-DoeYovwP.mjs';
+import { k as notifyDaemonTurnEvent, m as notifyDaemonBackgroundTasks } from './controlClient-CkNpT5zS.mjs';
 import chalk from 'chalk';
 
 async function hmac_sha512(key, data) {
@@ -2947,7 +2947,7 @@ class ApiClient {
     return new ApiSessionClient(this.credential.token, session, opts);
   }
   async machineSyncClient(machine) {
-    const { ApiMachineClient } = await import('./apiMachine-CwGEhQDT.mjs');
+    const { ApiMachineClient } = await import('./apiMachine-CHEzPQdS.mjs');
     return new ApiMachineClient(this.credential.token, machine);
   }
   push() {

package/dist/{apiMachine-CwGEhQDT.mjs → apiMachine-CHEzPQdS.mjs}

@@ -1,42 +1,43 @@
 import { io } from 'socket.io-client';
 import { a as webPanelsSignature } from './webPanels-B2_C2-3g.mjs';
-import { l as logger } from './logger-BUngm5Xg.mjs';
-import { R as RpcHandlerManager, i as isRateQuotaCode, p as pauseForRateQuota, s as socketConnectGuard, c as connectGuarded, a as answerSocketRequest, e as shouldReconnect, d as describeSocketAckDrop } from './lidState-bBrmaQd2.mjs';
-import { M as ModelConfigError, i as isClaudeSessionId, s as stableVersion, a as sanitizeTagList, p as pickMirrorForTerminal, l as liveSnapshotChanged, b as sanitizeLiveSnapshot, c as serializeLiveSnapshot, r as registerWorktreeHandlers, d as configureWorktreeService, e as summarizeSpawnSessionForLog, f as parseMirrorSendParams } from './mirrorProtocol-BR4luBC0.mjs';
-import { c as configuration } from './configuration-PxzEJumr.mjs';
+import { l as logger } from './logger-LFr8iPgl.mjs';
+import { R as RpcHandlerManager, i as isRateQuotaCode, p as pauseForRateQuota, s as socketConnectGuard, c as connectGuarded, a as answerSocketRequest, e as shouldReconnect, d as describeSocketAckDrop } from './lidState-DghbfRbr.mjs';
+import { i as isClaudeSessionId, s as stableVersion, a as sanitizeTagList, p as pickMirrorForTerminal, l as liveSnapshotChanged, b as sanitizeLiveSnapshot, c as serializeLiveSnapshot, r as registerWorktreeHandlers, d as configureWorktreeService, e as summarizeSpawnSessionForLog, f as parseMirrorSendParams } from './mirrorProtocol-CAxOMBkb.mjs';
+import { c as configuration } from './configuration-BPrfb17M.mjs';
 import { w as withCurrentCliUpdateState } from './cliUpdate-Y34VGe9Y.mjs';
-import { r as registerCommonHandlers } from './registerCommonHandlers-CTkCvjxt.mjs';
+import { r as registerCommonHandlers } from './registerCommonHandlers-DF6bdDtd.mjs';
 import { stat, readdir, lstat, open, readFile, rm, mkdir, chmod, writeFile, rename } from 'node:fs/promises';
 import { join, isAbsolute, resolve } from 'node:path';
 import os, { homedir } from 'node:os';
 import { spawn, execFile, spawnSync } from 'node:child_process';
-import { r as readSettings, c as readPersistedSessions, o as readTrackedClaudeSessionIds, p as readTrackedCodexThreadIds } from './persistence-BFUOHW5h.mjs';
+import { r as readSettings, c as readPersistedSessions, o as readTrackedClaudeSessionIds, p as readTrackedCodexThreadIds } from './persistence-D2Djrf7t.mjs';
+import { M as ModelConfigError } from './fileStore-5qpetZS0.mjs';
 import { e as encodeBase64, g as encrypt, h as decrypt, d as decodeBase64 } from './authRelay-DhQhkBvX.mjs';
 import { p as prepareClipboardText, d as prepareClipboardHistoryText } from './limits-DIo7rEBR.mjs';
-import { b as backoff, d as delay } from './time-D3ETL7Jb.mjs';
+import { b as backoff, d as delay } from './time-BcoJaG8E.mjs';
 import * as pty from 'node-pty';
 import { a as attachStartupCommand, v as validateTerminalTags, d as deriveAutoTitle, T as TMUX_SESSION_ID_RE, i as isSafeTmuxSessionName, b as isVhSessionName, U as USER_SESSIONS_FORMAT, p as parseUserSessions, L as LIST_SESSIONS_FORMAT, c as parseSessionListLine, e as LIST_FIELD_SEP, s as sendToVhTerminal } from './terminals-Dlg0x3nY.mjs';
 import { t as tmuxArgs, V as VH_TMUX_SOCKET_ENV, a as scrubTmuxClientEnv } from './tmuxSocket-B8Yx20sT.mjs';
-import { locateClaudeConversation, refreshAgentHomes } from './index-Bsvbgh9e.mjs';
+import { locateClaudeConversation, refreshAgentHomes } from './index-CO0n9ue6.mjs';
 import { randomBytes } from 'node:crypto';
 import { readdirSync, unlinkSync, existsSync, mkdirSync, writeFileSync, readFileSync, statSync, chmodSync, renameSync, rmSync, accessSync, constants } from 'node:fs';
 import axios from 'axios';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { a as isValidTerminalId } from './ids-DU6sLx4C.mjs';
 import { d as detectCLIAvailability } from './detectCLI-CSGMlV51.mjs';
-import { d as detectResumeSupport } from './localHappyAgentAuth-Dn1jYDpt.mjs';
+import { d as detectResumeSupport } from './localHappyAgentAuth-IKmeRpuQ.mjs';
 import { g as getProjectPath, a as getClaudeProjectsRoot } from './path-D2wdaNSk.mjs';
 import { i as isVeryHappyOneShotPrompt } from './oneShotPrompts-DT4p6RNd.mjs';
-import { f as forkSession, F as ForkSourceMissingError, d as discardForkedSession, l as listClaudeRewindPoints, a as forkAndTruncateSession, b as ForkTruncateUuidNotFoundError, c as forkBeforeUserMessage } from './claudeSessionFork-GAVWhiKG.mjs';
-import { C as CodexAppServerClient } from './codexAppServerClient-CO4G6OS4.mjs';
-import { v as RelayCandidatesResponseSchema, t as RelayAssignmentResponseSchema, R as ReleaseDrainNoticeSchema } from './index-C6Vn5Eac.mjs';
+import { f as forkSession, F as ForkSourceMissingError, d as discardForkedSession, l as listClaudeRewindPoints, a as forkAndTruncateSession, b as ForkTruncateUuidNotFoundError, c as forkBeforeUserMessage } from './claudeSessionFork-2ZkSTOGn.mjs';
+import { C as CodexAppServerClient } from './codexAppServerClient-C3JO3pwM.mjs';
+import { u as RelayCandidatesResponseSchema, t as RelayAssignmentResponseSchema, R as ReleaseDrainNoticeSchema } from './index-CeRXrGnH.mjs';
 import { f as forkCodexThread, C as CodexForkRewindPointNotFoundError, l as listCodexRewindPoints, a as forkCodexBeforeUserMessage } from './codexThreadFork-R76RU5H0.mjs';
-import { p as planRateLimitWrite, m as mergeRateLimitReports } from './rateLimitWindows-BkfuUB1a.mjs';
+import { p as planRateLimitWrite, m as mergeRateLimitReports } from './rateLimitWindows-ZtHZHe-l.mjs';
 import 'chalk';
 import 'node:util';
 import 'os';
 import 'child_process';
-import './package-7Ld1YMhh.mjs';
+import './package-DYGwlmXl.mjs';
 import 'util';
 import 'fs/promises';
 import 'crypto';
@@ -10600,6 +10601,10 @@ class ApiMachineClient {
   setCliUpdateRequestHandler(handler) {
     this.rpcHandlerManager.registerHandler("cli-update-request", (params) => handler(params && typeof params === "object" ? params.version : void 0));
   }
+  /** B-719: `harness-install` — the owner asked this machine to install one harness id. */
+  setHarnessInstallHandler(handler) {
+    this.rpcHandlerManager.registerHandler("harness-install", (params) => handler(params));
+  }
   setCliUpdateRetryHandler(handler) {
     this.rpcHandlerManager.registerHandler("cli-update-retry", (params) => handler(params && typeof params === "object" ? params.version : void 0));
   }
@@ -11474,6 +11479,15 @@ class ApiMachineClient {
       if (this.socket !== socket) return;
       this.serverMigrateHandler?.(data);
     });
+    socket.on("cli-update-policy", (data) => {
+      if (this.socket !== socket) return;
+      this.cliUpdatePolicyHandler?.(data);
+    });
+  }
+  cliUpdatePolicyHandler = null;
+  /** B-718: the daemon decides what a policy announcement means (update/policyAnnouncement.ts). */
+  setCliUpdatePolicyHandler(handler) {
+    this.cliUpdatePolicyHandler = handler;
   }
   serverMigrateHandler = null;
   /** B-635: the daemon decides what to do with a relay-migration notice (daemon/serverMigration.ts). */
@@ -11559,27 +11573,35 @@ class ApiMachineClient {
       if (Date.now() - this.lastCliProbeAt < CLI_AVAILABILITY_RECHECK_MS) {
         return;
       }
-      this.lastCliProbeAt = Date.now();
-      const newAvailability = detectCLIAvailability();
-      const prev = this.lastKnownCLIAvailability;
-      const newResumeSupport = detectResumeSupport();
-      const prevResume = this.lastKnownResumeSupport;
-      const cliAvailabilityChanged = !prev || prev.claude !== newAvailability.claude || prev.codex !== newAvailability.codex || prev.gemini !== newAvailability.gemini || prev.openclaw !== newAvailability.openclaw || prev.pi !== newAvailability.pi;
-      const resumeSupportChanged = !prevResume || prevResume.rpcAvailable !== newResumeSupport.rpcAvailable || prevResume.happyAgentAuthenticated !== newResumeSupport.happyAgentAuthenticated;
-      if (cliAvailabilityChanged || resumeSupportChanged) {
-        this.lastKnownCLIAvailability = newAvailability;
-        this.lastKnownResumeSupport = newResumeSupport;
-        this.updateMachineMetadata((metadata) => ({
-          ...metadata || {},
-          cliAvailability: newAvailability,
-          resumeSupport: { ...newResumeSupport, rpcAvailable: !!this.resumeSessionHandler }
-        })).catch((err) => {
-          logger.debug("[API MACHINE] Failed to update machine capabilities:", err);
-        });
-      }
+      this.recheckCliAvailability();
     }, 2e4);
     logger.debug("[API MACHINE] Keep-alive started (20s interval)");
   }
+  /**
+   * Re-detect CLI availability and publish it when it changed. Called on the
+   * throttled keep-alive and, B-719, right after the owner installed a
+   * harness so the launcher enables it without waiting up to five minutes.
+   */
+  recheckCliAvailability() {
+    this.lastCliProbeAt = Date.now();
+    const newAvailability = detectCLIAvailability();
+    const prev = this.lastKnownCLIAvailability;
+    const newResumeSupport = detectResumeSupport();
+    const prevResume = this.lastKnownResumeSupport;
+    const cliAvailabilityChanged = !prev || prev.claude !== newAvailability.claude || prev.codex !== newAvailability.codex || prev.gemini !== newAvailability.gemini || prev.openclaw !== newAvailability.openclaw || prev.pi !== newAvailability.pi;
+    const resumeSupportChanged = !prevResume || prevResume.rpcAvailable !== newResumeSupport.rpcAvailable || prevResume.happyAgentAuthenticated !== newResumeSupport.happyAgentAuthenticated;
+    if (cliAvailabilityChanged || resumeSupportChanged) {
+      this.lastKnownCLIAvailability = newAvailability;
+      this.lastKnownResumeSupport = newResumeSupport;
+      this.updateMachineMetadata((metadata) => ({
+        ...metadata || {},
+        cliAvailability: newAvailability,
+        resumeSupport: { ...newResumeSupport, rpcAvailable: !!this.resumeSessionHandler }
+      })).catch((err) => {
+        logger.debug("[API MACHINE] Failed to update machine capabilities:", err);
+      });
+    }
+  }
   bindRpcRequestHandler(socket, transport) {
     socket.on("rpc-request", async (data, callback) => {
       if (typeof data?.method === "string" && this.rpcHandlerManager.isPlainMethod(data.method)) {

package/dist/{apiMachine-DkGRj-Ai.cjs → apiMachine-D8H7CXaz.cjs}

@@ -2,43 +2,44 @@
 
 var socket_ioClient = require('socket.io-client');
 var webPanels = require('./webPanels-FCgFKvVe.cjs');
-var logger = require('./logger-CphW5nUE.cjs');
-var lidState = require('./lidState-DWGnm2H4.cjs');
-var mirrorProtocol = require('./mirrorProtocol-HKPivs5o.cjs');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
+var lidState = require('./lidState-x8cJ8J_9.cjs');
+var mirrorProtocol = require('./mirrorProtocol-BphKIAK9.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 var cliUpdate = require('./cliUpdate-DsKXPFYp.cjs');
-var registerCommonHandlers = require('./registerCommonHandlers-C7a_dUWs.cjs');
+var registerCommonHandlers = require('./registerCommonHandlers-CRjBoJLK.cjs');
 var promises = require('node:fs/promises');
 var path = require('node:path');
 var os = require('node:os');
 var node_child_process = require('node:child_process');
-var persistence = require('./persistence-9BMYspxG.cjs');
+var persistence = require('./persistence-BY-D00wT.cjs');
+var fileStore = require('./fileStore-7qhnbs6N.cjs');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
 var limits = require('./limits-C-a7gr04.cjs');
-var time = require('./time-Cjv0zxQO.cjs');
+var time = require('./time-nqa9shu8.cjs');
 var pty = require('node-pty');
 var terminals = require('./terminals-B_bfC9c2.cjs');
 var tmuxSocket = require('./tmuxSocket-D-Xt6Vn-.cjs');
-var index = require('./index-C64Ufj4D.cjs');
+var index = require('./index-BkluinoS.cjs');
 var node_crypto = require('node:crypto');
 var node_fs = require('node:fs');
 var axios = require('axios');
 var projectPath = require('./projectPath-C3ioB4Bu.cjs');
 var ids = require('./ids-B6ZC0HGt.cjs');
 var detectCLI = require('./detectCLI-BuYR_Qxe.cjs');
-var localHappyAgentAuth = require('./localHappyAgentAuth-DZHQnIW9.cjs');
+var localHappyAgentAuth = require('./localHappyAgentAuth-DZ2kb9uq.cjs');
 var path$1 = require('./path-B7zW-WwE.cjs');
 var oneShotPrompts = require('./oneShotPrompts-CL0dip9C.cjs');
-var claudeSessionFork = require('./claudeSessionFork-Be16vzGc.cjs');
-var codexAppServerClient = require('./codexAppServerClient-PE-12AsW.cjs');
-var index$1 = require('./index-Dv0Q48P3.cjs');
+var claudeSessionFork = require('./claudeSessionFork-pwcKqB-e.cjs');
+var codexAppServerClient = require('./codexAppServerClient-BRX3JZ_5.cjs');
+var index$1 = require('./index-Df2eHm3O.cjs');
 var codexThreadFork = require('./codexThreadFork-DNekT4nQ.cjs');
-var rateLimitWindows = require('./rateLimitWindows-YRIYVdo4.cjs');
+var rateLimitWindows = require('./rateLimitWindows-OpAmdOtC.cjs');
 require('chalk');
 require('node:util');
 require('os');
 require('child_process');
-require('./package-KhLqBDX9.cjs');
+require('./package-NoD8QOOM.cjs');
 require('util');
 require('fs/promises');
 require('crypto');
@@ -372,7 +373,7 @@ async function guarded(fn) {
   try {
     return await fn();
   } catch (error) {
-    if (error instanceof mirrorProtocol.ModelConfigError) return { error: error.message, code: error.code };
+    if (error instanceof fileStore.ModelConfigError) return { error: error.message, code: error.code };
     return { error: error instanceof Error ? error.message : "Unknown error", code: "internal" };
   }
 }
@@ -10621,6 +10622,10 @@ class ApiMachineClient {
   setCliUpdateRequestHandler(handler) {
     this.rpcHandlerManager.registerHandler("cli-update-request", (params) => handler(params && typeof params === "object" ? params.version : void 0));
   }
+  /** B-719: `harness-install` — the owner asked this machine to install one harness id. */
+  setHarnessInstallHandler(handler) {
+    this.rpcHandlerManager.registerHandler("harness-install", (params) => handler(params));
+  }
   setCliUpdateRetryHandler(handler) {
     this.rpcHandlerManager.registerHandler("cli-update-retry", (params) => handler(params && typeof params === "object" ? params.version : void 0));
   }
@@ -11495,6 +11500,15 @@ class ApiMachineClient {
       if (this.socket !== socket) return;
       this.serverMigrateHandler?.(data);
     });
+    socket.on("cli-update-policy", (data) => {
+      if (this.socket !== socket) return;
+      this.cliUpdatePolicyHandler?.(data);
+    });
+  }
+  cliUpdatePolicyHandler = null;
+  /** B-718: the daemon decides what a policy announcement means (update/policyAnnouncement.ts). */
+  setCliUpdatePolicyHandler(handler) {
+    this.cliUpdatePolicyHandler = handler;
   }
   serverMigrateHandler = null;
   /** B-635: the daemon decides what to do with a relay-migration notice (daemon/serverMigration.ts). */
@@ -11580,27 +11594,35 @@ class ApiMachineClient {
       if (Date.now() - this.lastCliProbeAt < CLI_AVAILABILITY_RECHECK_MS) {
         return;
       }
-      this.lastCliProbeAt = Date.now();
-      const newAvailability = detectCLI.detectCLIAvailability();
-      const prev = this.lastKnownCLIAvailability;
-      const newResumeSupport = localHappyAgentAuth.detectResumeSupport();
-      const prevResume = this.lastKnownResumeSupport;
-      const cliAvailabilityChanged = !prev || prev.claude !== newAvailability.claude || prev.codex !== newAvailability.codex || prev.gemini !== newAvailability.gemini || prev.openclaw !== newAvailability.openclaw || prev.pi !== newAvailability.pi;
-      const resumeSupportChanged = !prevResume || prevResume.rpcAvailable !== newResumeSupport.rpcAvailable || prevResume.happyAgentAuthenticated !== newResumeSupport.happyAgentAuthenticated;
-      if (cliAvailabilityChanged || resumeSupportChanged) {
-        this.lastKnownCLIAvailability = newAvailability;
-        this.lastKnownResumeSupport = newResumeSupport;
-        this.updateMachineMetadata((metadata) => ({
-          ...metadata || {},
-          cliAvailability: newAvailability,
-          resumeSupport: { ...newResumeSupport, rpcAvailable: !!this.resumeSessionHandler }
-        })).catch((err) => {
-          logger.logger.debug("[API MACHINE] Failed to update machine capabilities:", err);
-        });
-      }
+      this.recheckCliAvailability();
     }, 2e4);
     logger.logger.debug("[API MACHINE] Keep-alive started (20s interval)");
   }
+  /**
+   * Re-detect CLI availability and publish it when it changed. Called on the
+   * throttled keep-alive and, B-719, right after the owner installed a
+   * harness so the launcher enables it without waiting up to five minutes.
+   */
+  recheckCliAvailability() {
+    this.lastCliProbeAt = Date.now();
+    const newAvailability = detectCLI.detectCLIAvailability();
+    const prev = this.lastKnownCLIAvailability;
+    const newResumeSupport = localHappyAgentAuth.detectResumeSupport();
+    const prevResume = this.lastKnownResumeSupport;
+    const cliAvailabilityChanged = !prev || prev.claude !== newAvailability.claude || prev.codex !== newAvailability.codex || prev.gemini !== newAvailability.gemini || prev.openclaw !== newAvailability.openclaw || prev.pi !== newAvailability.pi;
+    const resumeSupportChanged = !prevResume || prevResume.rpcAvailable !== newResumeSupport.rpcAvailable || prevResume.happyAgentAuthenticated !== newResumeSupport.happyAgentAuthenticated;
+    if (cliAvailabilityChanged || resumeSupportChanged) {
+      this.lastKnownCLIAvailability = newAvailability;
+      this.lastKnownResumeSupport = newResumeSupport;
+      this.updateMachineMetadata((metadata) => ({
+        ...metadata || {},
+        cliAvailability: newAvailability,
+        resumeSupport: { ...newResumeSupport, rpcAvailable: !!this.resumeSessionHandler }
+      })).catch((err) => {
+        logger.logger.debug("[API MACHINE] Failed to update machine capabilities:", err);
+      });
+    }
+  }
   bindRpcRequestHandler(socket, transport) {
     socket.on("rpc-request", async (data, callback) => {
       if (typeof data?.method === "string" && this.rpcHandlerManager.isPlainMethod(data.method)) {

package/dist/{attachmentContent-CIn4iPEk.mjs → attachmentContent-1YwtKgWl.mjs}

@@ -1,8 +1,8 @@
 import { randomUUID } from 'node:crypto';
 import { writeFile, rename, unlink } from 'node:fs/promises';
 import { join, basename } from 'node:path';
-import { M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES } from './pushNotifications-DCiBEVeC.mjs';
-import { e as ensurePrivateDirectory, h as hardenPrivateFile } from './configuration-PxzEJumr.mjs';
+import { M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES } from './pushNotifications-DXGIhE-A.mjs';
+import { e as ensurePrivateDirectory, h as hardenPrivateFile } from './configuration-BPrfb17M.mjs';
 
 const CLAUDE_ATTACHMENT_KINDS = [
   "image/jpeg",

package/dist/{attachmentContent-CEm13_gF.cjs → attachmentContent-mIhbtRKl.cjs}

@@ -3,8 +3,8 @@
 var node_crypto = require('node:crypto');
 var promises = require('node:fs/promises');
 var path = require('node:path');
-var pushNotifications = require('./pushNotifications-DI92havG.cjs');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var pushNotifications = require('./pushNotifications-BXoOSq_G.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 
 const CLAUDE_ATTACHMENT_KINDS = [
   "image/jpeg",

package/dist/{auth-rggxMpEE.mjs → auth-CbZkcMAb.mjs}

@@ -1,11 +1,11 @@
 import chalk from 'chalk';
-import { g as readCredentials, r as readSettings, h as clearCredentials, i as clearMachineId } from './persistence-BFUOHW5h.mjs';
-import { a as authAndSetupMachineIfNeeded } from './auth-BG1DY0gj.mjs';
-import { c as configuration } from './configuration-PxzEJumr.mjs';
+import { g as readCredentials, r as readSettings, h as clearCredentials, i as clearMachineId } from './persistence-D2Djrf7t.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-DZsthtSk.mjs';
+import { c as configuration } from './configuration-BPrfb17M.mjs';
 import { existsSync, rmSync } from 'node:fs';
 import { createInterface } from 'node:readline';
-import { a as checkIfDaemonRunningAndCleanupStaleState, s as stopDaemon } from './controlClient-DoeYovwP.mjs';
-import { l as logger } from './logger-BUngm5Xg.mjs';
+import { a as checkIfDaemonRunningAndCleanupStaleState, s as stopDaemon } from './controlClient-CkNpT5zS.mjs';
+import { l as logger } from './logger-LFr8iPgl.mjs';
 import os from 'node:os';
 import { c as credentialRelayProblem } from './authRelay-DhQhkBvX.mjs';
 import 'node:fs/promises';
@@ -13,11 +13,11 @@ import 'zod';
 import 'node:crypto';
 import 'tweetnacl';
 import 'axios';
-import './time-D3ETL7Jb.mjs';
-import './browser-DUNetFT4.mjs';
+import './time-BcoJaG8E.mjs';
+import './browser-C2qhUHSE.mjs';
 import 'open';
 import 'node:path';
-import './package-7Ld1YMhh.mjs';
+import './package-DYGwlmXl.mjs';
 import 'node:util';
 
 function localMachineIdentityStatus(machineId) {

package/dist/{auth-CBXnm-Mj.cjs → auth-CgQP7d0q.cjs}

@@ -1,14 +1,14 @@
 'use strict';
 
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 var node_crypto = require('node:crypto');
 var tweetnacl = require('tweetnacl');
 var axios = require('axios');
-var time = require('./time-Cjv0zxQO.cjs');
-var persistence = require('./persistence-9BMYspxG.cjs');
-var browser = require('./browser-DZ6qRtfH.cjs');
-var logger = require('./logger-CphW5nUE.cjs');
+var time = require('./time-nqa9shu8.cjs');
+var persistence = require('./persistence-BY-D00wT.cjs');
+var browser = require('./browser-DjNNQQk2.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
 
 function generateWebAuthUrl(publicKey) {
   const publicKeyBase64 = authRelay.encodeBase64(publicKey, "base64url");

package/dist/{auth-BG1DY0gj.mjs → auth-DZsthtSk.mjs}

@@ -1,12 +1,12 @@
 import { e as encodeBase64, c as credentialRelayProblem, f as encodeBase64Url, d as decodeBase64 } from './authRelay-DhQhkBvX.mjs';
-import { c as configuration } from './configuration-PxzEJumr.mjs';
+import { c as configuration } from './configuration-BPrfb17M.mjs';
 import { randomUUID, randomBytes } from 'node:crypto';
 import tweetnacl from 'tweetnacl';
 import axios from 'axios';
-import { d as delay } from './time-D3ETL7Jb.mjs';
-import { g as readCredentials, k as readSettingsOutcome, u as updateSettings, w as writeCredentialsLegacy, m as writeCredentialsDataKey } from './persistence-BFUOHW5h.mjs';
-import { o as openBrowser } from './browser-DUNetFT4.mjs';
-import { l as logger } from './logger-BUngm5Xg.mjs';
+import { d as delay } from './time-BcoJaG8E.mjs';
+import { g as readCredentials, k as readSettingsOutcome, u as updateSettings, w as writeCredentialsLegacy, m as writeCredentialsDataKey } from './persistence-D2Djrf7t.mjs';
+import { o as openBrowser } from './browser-C2qhUHSE.mjs';
+import { l as logger } from './logger-LFr8iPgl.mjs';
 
 function generateWebAuthUrl(publicKey) {
   const publicKeyBase64 = encodeBase64(publicKey, "base64url");

package/dist/{auth-Dawj7pP5.cjs → auth-Fg8fLadK.cjs}

@@ -1,13 +1,13 @@
 'use strict';
 
 var chalk = require('chalk');
-var persistence = require('./persistence-9BMYspxG.cjs');
-var auth = require('./auth-CBXnm-Mj.cjs');
-var configuration = require('./configuration-CYO-kPOS.cjs');
+var persistence = require('./persistence-BY-D00wT.cjs');
+var auth = require('./auth-CgQP7d0q.cjs');
+var configuration = require('./configuration-C8JgseHy.cjs');
 var node_fs = require('node:fs');
 var node_readline = require('node:readline');
-var controlClient = require('./controlClient-Bqv5v5OM.cjs');
-var logger = require('./logger-CphW5nUE.cjs');
+var controlClient = require('./controlClient-D68Zj7Q-.cjs');
+var logger = require('./logger-DgBwUSgS.cjs');
 var os = require('node:os');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
 require('node:fs/promises');
@@ -15,11 +15,11 @@ require('zod');
 require('node:crypto');
 require('tweetnacl');
 require('axios');
-require('./time-Cjv0zxQO.cjs');
-require('./browser-DZ6qRtfH.cjs');
+require('./time-nqa9shu8.cjs');
+require('./browser-DjNNQQk2.cjs');
 require('open');
 require('node:path');
-require('./package-KhLqBDX9.cjs');
+require('./package-NoD8QOOM.cjs');
 require('node:util');
 
 function localMachineIdentityStatus(machineId) {