very-happy-cli 0.2.182 → 0.2.183

package/dist/{run-drtwHYkO.mjs → run-BBU8GyxE.mjs}

@@ -1,25 +1,25 @@
-import { i as isClaudeSessionId, g as extractCompleteLines, h as decideBackfill, j as parseTerminalHookPayload, k as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, m as mirrorLineKey, n as mirrorLocalId, o as initializeOwnedWorktree, e as summarizeSpawnSessionForLog, q as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, t as currentWorktreeService } from './mirrorProtocol-bsCUcaCY.mjs';
+import { i as isClaudeSessionId, g as extractCompleteLines, h as decideBackfill, j as parseTerminalHookPayload, k as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, m as mirrorLineKey, n as mirrorLocalId, o as initializeOwnedWorktree, e as summarizeSpawnSessionForLog, q as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, t as currentWorktreeService } from './mirrorProtocol-DQRy5PaT.mjs';
 import { F as FS_MKDIR_CAPABILITY_VERSION } from './fsMkdir-DumgLTzR.mjs';
-import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-68I5F_M1.mjs';
+import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-IVdoHUB6.mjs';
 import fs from 'fs/promises';
 import os from 'os';
 import * as tmp from 'tmp';
 import axios from 'axios';
 import { readFileSync, openSync, fsyncSync, closeSync, renameSync, existsSync, readdirSync, statSync, unlinkSync, realpathSync, promises, writeFileSync, mkdirSync, accessSync, constants as constants$1, readSync, rmdirSync } from 'node:fs';
-import { join, isAbsolute, resolve, dirname, sep, basename, delimiter } from 'node:path';
-import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-YXw_Dcsb.mjs';
-import { T as TurnActivityTracker, A as ApiClient } from './api-C_YSQnsi.mjs';
-import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-Co-SLcx-.mjs';
-import { l as logger } from './logger-DpqihN1f.mjs';
-import { p as pruneStaleCompileCaches } from './index-D_LvOWUN.mjs';
-import { a as authAndSetupMachineIfNeeded } from './auth-CGgpiJ5-.mjs';
+import { join, isAbsolute, resolve, dirname, sep, basename } from 'node:path';
+import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-elzht62L.mjs';
+import { T as TurnActivityTracker, A as ApiClient } from './api-C29WLYkW.mjs';
+import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-DJHjq01u.mjs';
+import { l as logger } from './logger-RMPh5aqe.mjs';
+import { p as pruneStaleCompileCaches } from './index-CtwqBeH6.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-xT70IYMx.mjs';
 import { spawn, execSync } from 'child_process';
-import { p as packageJson } from './package-CKj8zndE.mjs';
-import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-bKScPtZu.mjs';
-import { s as spawnHappyCLI } from './spawnHappyCLI-D1doCjkZ.mjs';
-import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, q as reportSignature, s as decideDaemonHibernation, t as nextCheckDelay, v as persistSession, d as readDaemonState, x as acquireDaemonLock, a as resolveCheckMs, y as resolveIdleMs, z as deletePersistedSessions, A as writeDaemonState, B as writeSettings, C as settingIdleMs, u as updateSettings, D as rewriteCredentialsForRelay, g as readCredentials, E as releaseDaemonLock } from './persistence-jOEuAFTS.mjs';
-import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, t as cleanupDaemonState } from './controlClient-BL4hb4l3.mjs';
-import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, g as waitForSessionKey, d as archiveSession, j as analyzeLatestTurn, k as readSessionLog, m as TURN_WINDOW, n as userPromptText } from './sessionOps-D0BPWPoh.mjs';
+import { p as packageJson } from './package-CTrz6U3C.mjs';
+import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-Dban2oE2.mjs';
+import { s as spawnHappyCLI } from './spawnHappyCLI-v_bJwZ4Z.mjs';
+import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, q as reportSignature, s as decideDaemonHibernation, t as nextCheckDelay, v as persistSession, d as readDaemonState, x as acquireDaemonLock, a as resolveCheckMs, y as resolveIdleMs, z as deletePersistedSessions, A as writeDaemonState, B as writeSettings, C as settingIdleMs, u as updateSettings, D as rewriteCredentialsForRelay, g as readCredentials, E as releaseDaemonLock } from './persistence-zJo4r7YI.mjs';
+import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, t as cleanupDaemonState } from './controlClient-CuYQs2aZ.mjs';
+import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, g as waitForSessionKey, d as archiveSession, j as analyzeLatestTurn, k as readSessionLog, m as TURN_WINDOW, n as userPromptText } from './sessionOps-ByVggB_q.mjs';
 import fastify from 'fastify';
 import { z } from 'zod';
 import { validatorCompiler, serializerCompiler } from 'fastify-type-provider-zod';
@@ -27,62 +27,62 @@ import { d as decodeBase64, s as sameRelay, e as encodeBase64, h as decrypt } fr
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'node:crypto';
 import { c as checkPreviewPath } from './previewPath-CXN4Vag0.mjs';
 import { a as BACKGROUND_TASKS_MAX, d as BACKGROUND_TASK_DESCRIPTION_MAX, e as BackgroundTaskTracker } from './backgroundTaskActivity-8PdPxrvy.mjs';
-import { b as sanitizeRateLimitReport } from './rateLimitWindows-Cqa4AGaB.mjs';
-import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-D_id4d41.mjs';
-import os$1, { hostname, homedir, userInfo, tmpdir } from 'node:os';
-import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-BlURPulk.mjs';
-import { assistantHome, bootstrapAssistantHome } from './bootstrap-D3vlOROj.mjs';
-import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-Cllzqoes.mjs';
+import { b as sanitizeRateLimitReport } from './rateLimitWindows-HlHATOQ0.mjs';
+import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-DIPOX033.mjs';
+import os$1, { hostname, homedir, tmpdir } from 'node:os';
+import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-Cwrddscy.mjs';
+import { assistantHome, bootstrapAssistantHome } from './bootstrap-DS8Acdhm.mjs';
+import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-GkkbUZX-.mjs';
 import require$$0, { existsSync as existsSync$1, statSync as statSync$1, mkdtempSync, rmSync } from 'fs';
 import require$$1, { join as join$1 } from 'path';
 import { spawn as spawn$1, execFile, spawnSync } from 'node:child_process';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { d as daemonEndpointsMatch, r as resolveClaudeCredentialReadiness } from './doctorReadiness-C208SMN9.mjs';
-import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-D4E3qoIG.mjs';
+import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-BTUtPRth.mjs';
 import { M as ModelConfigError, B as BackupStore, r as readConfigFile, s as sha256, a as atomicWriteFile } from './fileStore-5qpetZS0.mjs';
-import { c as collectSecretValues, a as parseJsonObject$1, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
+import { c as collectSecretValues, a as parseJsonObject, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
 import require$$3 from 'crypto';
 import { c as commandOnPath } from './detectCLI-CSGMlV51.mjs';
-import { buildResumeLaunch } from './handleResumeCommand-CjtjQ_I7.mjs';
+import { buildResumeLaunch } from './handleResumeCommand-CLDGWpTJ.mjs';
 import { n as normalizeWebPanels } from './webPanels-B2_C2-3g.mjs';
-import { x as ServerMigrateNoticeSchema, y as isHarnessInstallId, z as AUTOMATION_SUMMARY_MAX_CHARS, D as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, E as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, b as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, F as AUTOMATION_CLAIM_MAX_RUNS, G as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, H as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, I as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-BI0h2Zks.mjs';
+import { K as ServerMigrateNoticeSchema, L as isHarnessInstallId, e as AUTOMATION_SUMMARY_MAX_CHARS, M as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, N as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, b as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, Q as AUTOMATION_CLAIM_MAX_RUNS, T as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, U as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, V as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-BptfFoXM.mjs';
 import { access, symlink, readFile, rm, unlink, readlink, lstat, constants, stat, open } from 'node:fs/promises';
 import { p as parseExactVersion, c as compareExactVersions, f as fetchCliUpdateState, r as resolveCliUpdateCheckInterval, D as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS } from './cliUpdate-Y34VGe9Y.mjs';
-import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-o-meK7-a.mjs';
-import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-Ctbw05Xj.mjs';
-import { createRequire } from 'node:module';
+import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-5_zDNdOh.mjs';
+import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-BgHvK7lo.mjs';
+import { w as withKeychainOffPath, a as keychainIdentityFor, i as interpretSecurityRead, s as securityReadArgs, b as securityDeleteArgs, c as keychainOffShimDir, d as interpretCredentialsFile, C as CREDENTIALS_REJECTED_DETAIL, e as buildClaudeAuthState, f as claudeAuthStateChanged, r as resolveSdkClaudeBinary, g as classifyAuthStatus, h as diagnoseStores, p as parseLaunchctlPid, H as HAPPY_DAEMON_LAUNCHD_LABEL, j as classifyLineage, l as probeLaunchdJob, m as detectDaemonSupervisor, n as daemonLineage } from './daemonSupervisor-DfzrtNhM.mjs';
 import { g as getProjectPath } from './path-D2wdaNSk.mjs';
 import { b as extractClaudeEditPaths } from './editPaths-BVfS_FFL.mjs';
-import { s as startFileWatcher } from './startFileWatcher-CCl2fFxT.mjs';
-import { I as InvalidateSync } from './sync-BbjMC3sR.mjs';
+import { s as startFileWatcher } from './startFileWatcher-BCDkT_tr.mjs';
+import { I as InvalidateSync } from './sync--QUIOuf8.mjs';
 import { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import { t as tmuxArgs, a as scrubTmuxClientEnv, s as shellescape } from './tmuxSocket-B8Yx20sT.mjs';
-import { p as processIdentityFields, r as readSessionLock, t as terminateProcess, d as terminateProcessTree } from './sessionLock-B6K4SBZD.mjs';
+import { p as processIdentityFields, r as readSessionLock, t as terminateProcess, d as terminateProcessTree } from './sessionLock-CXOOX-VD.mjs';
 import { findAllHappyProcesses } from './doctor-BPkYWSuq.mjs';
-import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CH1iP6Cv.mjs';
+import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CLdQfe3b.mjs';
 import { promisify } from 'node:util';
-import { c as clipText, r as renderAction, b as renderTemplate } from './template-CiOPa2rd.mjs';
-import { d as detectDaemonSupervisor } from './daemonSupervisor-C6urv3_8.mjs';
+import { b as clipText, r as renderAction, c as clipAutomationReport, e as renderTemplate } from './template-D1fm22em.mjs';
 import { d as describeAgentHome } from './loginShellEnv-Dw8M7tkI.mjs';
-import './acpSessionResume-u2TwX5Jd.mjs';
-import './lidState-D8Iuvjgl.mjs';
+import './acpSessionResume-BKtI9Jq_.mjs';
+import './lidState-DXeYTsrm.mjs';
 import 'node:events';
 import 'socket.io-client';
-import './pushNotifications-CMmRsbKv.mjs';
+import './pushNotifications-C4R9-1hU.mjs';
 import './contentLogMetadata-BlWI0egu.mjs';
 import './limits-DIo7rEBR.mjs';
-import './time-Cfknl7xG.mjs';
-import './registerCommonHandlers-K8dICQO2.mjs';
+import './time-B2KKdAym.mjs';
+import './registerCommonHandlers-a9lHojSV.mjs';
 import 'util';
 import 'cross-spawn';
 import '@paralleldrive/cuid2';
 import 'chalk';
+import 'node:module';
 import 'tweetnacl';
-import './browser-CUxGoATV.mjs';
+import './browser-1j9gdZoD.mjs';
 import 'open';
 import './ids-DU6sLx4C.mjs';
 import 'url';
-import './localHappyAgentAuth-D3rQDRd9.mjs';
+import './localHappyAgentAuth-C1A4ChCR.mjs';
 import './processTreeSnapshot-CuLJDNC-.mjs';
 import 'ps-list';
 
@@ -2361,14 +2361,14 @@ const claudeAdapter = {
   binary: "claude",
   files: (ctx) => [{ role: ROLE$1, path: claudeSettingsPath(ctx) }],
   view(files, ctx) {
-    const settings = parseJsonObject$1(files[ROLE$1].content, "settings.json");
+    const settings = parseJsonObject(files[ROLE$1].content, "settings.json");
     const current = currentOf$2(settings, ctx);
     return { current, pickerModels: pickerModelsOf(current), warnings: warningsOf$2(settings, current, ctx) };
   },
   plan(files, raw, ctx) {
     const patch = parsePatch$1(raw);
     const original = files[ROLE$1].content;
-    const before = parseJsonObject$1(original, "settings.json");
+    const before = parseJsonObject(original, "settings.json");
     const settings = structuredClone(before);
     const hadEnv = settings.env !== void 0;
     const env = childObject(settings, "env", "settings");
@@ -2429,7 +2429,7 @@ const claudeAdapter = {
   },
   secretsIn(_role, content) {
     try {
-      return collectSecretValues(parseJsonObject$1(content, "settings.json"));
+      return collectSecretValues(parseJsonObject(content, "settings.json"));
     } catch {
       return /* @__PURE__ */ new Set();
     }
@@ -3979,7 +3979,7 @@ const geminiAdapter = {
   binary: "gemini",
   files: (ctx) => [{ role: SETTINGS, path: join(geminiDir(ctx), "settings.json") }, { role: ENV, path: join(geminiDir(ctx), ".env") }],
   view(files, ctx) {
-    const settings = parseJsonObject$1(files[SETTINGS].content, "settings.json");
+    const settings = parseJsonObject(files[SETTINGS].content, "settings.json");
     const current = currentOf(settings, parseDotenv(files[ENV].content), ctx);
     return { current, pickerModels: uniq([current.model]), warnings: warningsOf(settings, current) };
   },
@@ -3989,7 +3989,7 @@ const geminiAdapter = {
     const apiKey = normalizeSecret(p.apiKey, ["keep", "clear", "literal"]);
     const model = normalizeModelId(p.model);
     const settingsText = files[SETTINGS].content;
-    const before = parseJsonObject$1(settingsText, "settings.json");
+    const before = parseJsonObject(settingsText, "settings.json");
     const settings = structuredClone(before);
     const changedKeys = [];
     let settingsOut;
@@ -4020,7 +4020,7 @@ const geminiAdapter = {
   },
   secretsIn(role, content) {
     try {
-      return role === ENV ? collectSecretValues(parseDotenv(content)) : collectSecretValues(parseJsonObject$1(content, "settings.json"));
+      return role === ENV ? collectSecretValues(parseDotenv(content)) : collectSecretValues(parseJsonObject(content, "settings.json"));
     } catch {
       return /* @__PURE__ */ new Set();
     }
@@ -5093,196 +5093,6 @@ async function waitForSessionLive(sessionId, live, timeoutMs = AUTOMATION_WAKE_T
   return true;
 }
 
-const CLAUDE_KEYCHAIN_SERVICE_PREFIX = "Claude Code";
-function keychainIdentity(env = process.env, deps = {}) {
-  const home = deps.home ?? homedir();
-  const secureDir = env.CLAUDE_SECURESTORAGE_CONFIG_DIR?.trim();
-  const configDirEnv = env.CLAUDE_CONFIG_DIR?.trim();
-  const configDir = secureDir || configDirEnv || join(home, ".claude");
-  const hasCustomDir = Boolean(secureDir || configDirEnv);
-  const dirSuffix = hasCustomDir ? "-" + createHash("sha256").update(configDir.normalize("NFC")).digest("hex").slice(0, 8) : "";
-  const oauthSuffix = env.CLAUDE_CODE_OAUTH_CLIENT_ID?.trim() ? "-custom-oauth" : "";
-  const rawAccount = env.USER || safeUsername(deps.username);
-  const account = /^[a-zA-Z0-9._-]+$/.test(rawAccount) ? rawAccount : "claude-code-user";
-  return {
-    service: `${CLAUDE_KEYCHAIN_SERVICE_PREFIX}${oauthSuffix}-credentials${dirSuffix}`,
-    account,
-    configDir,
-    credentialsPath: join(configDir, ".credentials.json")
-  };
-}
-function safeUsername(provider) {
-  try {
-    return provider ? provider() : userInfo().username;
-  } catch {
-    return "";
-  }
-}
-
-const CLAUDE_AUTH_PROBE_VERSION = 1;
-const LOCAL_CREDENTIAL_SOURCE = "Claude local credentials";
-function classifyAuthStatus(run, credentialSource) {
-  const localSource = credentialSource === void 0 || credentialSource === LOCAL_CREDENTIAL_SOURCE;
-  if (run.spawnError) {
-    return { status: "error", diagnosis: "probe-crash", detail: `could not run claude auth status: ${run.spawnError}` };
-  }
-  if (run.timedOut) {
-    return { status: "error", diagnosis: "probe-timeout", detail: "claude auth status did not answer within the timeout" };
-  }
-  const parsed = parseJsonObject(run.stdout);
-  if (!parsed) {
-    if (!localSource) return { status: "unknown", authMethod: credentialSource, detail: `auth status unparseable under ${credentialSource}` };
-    return { status: "error", diagnosis: "probe-crash", detail: `claude auth status returned no JSON (exit ${run.exitCode ?? "null"})` };
-  }
-  const authMethod = typeof parsed.authMethod === "string" ? parsed.authMethod : void 0;
-  const subscriptionType = typeof parsed.subscriptionType === "string" ? parsed.subscriptionType : void 0;
-  if (parsed.loggedIn === true) {
-    return { status: "ok", authMethod: localSource ? authMethod : credentialSource, subscriptionType };
-  }
-  if (!localSource) {
-    return { status: "unknown", authMethod: credentialSource, detail: `Claude Code reports loggedIn=false under ${credentialSource}; not a local-credential failure` };
-  }
-  return { status: "not-logged-in", authMethod, subscriptionType, detail: "Claude Code in the daemon context reports it is not logged in" };
-}
-function parseJsonObject(text) {
-  const trimmed = text.trim();
-  if (!trimmed) return null;
-  const start = trimmed.indexOf("{");
-  if (start < 0) return null;
-  try {
-    const value = JSON.parse(trimmed.slice(start));
-    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
-  } catch {
-    return null;
-  }
-}
-function resolveSdkClaudeBinary(platform = process.platform, arch = process.arch, resolver = (s) => createRequire(import.meta.url).resolve(s)) {
-  const platformArch = `${platform}-${arch}`;
-  const candidates = [
-    `@anthropic-ai/claude-agent-sdk-${platformArch}/claude`,
-    `@anthropic-ai/claude-agent-sdk-${platformArch}/claude.exe`
-  ];
-  for (const candidate of candidates) {
-    try {
-      return resolver(candidate);
-    } catch {
-    }
-  }
-  return null;
-}
-function interpretSecurityRead(result) {
-  if (result.error === "ENOENT") return { kind: "unsupported" };
-  if (result.error === "timeout") return { kind: "error", detail: "security timed out" };
-  if (result.exitCode === 44) return { kind: "absent" };
-  if (result.exitCode === 36) return { kind: "unreadable" };
-  if (result.exitCode !== 0) return { kind: "error", detail: `security exited ${result.exitCode ?? "null"}` };
-  const raw = result.stdout.trim();
-  if (!raw) return { kind: "absent" };
-  const parsed = parseJsonObject(raw);
-  const oauth = parsed && typeof parsed.claudeAiOauth === "object" && parsed.claudeAiOauth ? parsed.claudeAiOauth : null;
-  if (!oauth) return { kind: "present", accessToken: "", refreshToken: "", raw };
-  return {
-    kind: "present",
-    accessToken: typeof oauth.accessToken === "string" ? oauth.accessToken : "",
-    refreshToken: typeof oauth.refreshToken === "string" ? oauth.refreshToken : "",
-    raw
-  };
-}
-function interpretCredentialsFile(text) {
-  if (text === null) return { exists: false, hasTokens: false, refreshToken: "" };
-  const parsed = parseJsonObject(text);
-  const oauth = parsed && typeof parsed.claudeAiOauth === "object" && parsed.claudeAiOauth ? parsed.claudeAiOauth : null;
-  const access = oauth && typeof oauth.accessToken === "string" ? oauth.accessToken : "";
-  const refresh = oauth && typeof oauth.refreshToken === "string" ? oauth.refreshToken : "";
-  return { exists: true, hasTokens: access.length > 0 && refresh.length > 0, refreshToken: refresh };
-}
-function tokenTail(token) {
-  return token ? createHash("sha256").update(token).digest("hex").slice(-6) : "";
-}
-const CREDENTIALS_REJECTED_DETAIL = "Credentials exist but Claude Code rejects them in the daemon context \u2014 the refresh token has most likely been rotated away by another store or another machine using the same credentials. Log in again with `claude` on this machine.";
-function diagnoseStores(input) {
-  const { status, keychain, file } = input;
-  if (keychain.kind === "present") {
-    const empty = keychain.accessToken.length === 0 && keychain.refreshToken.length === 0;
-    if (empty && file.hasTokens && status === "not-logged-in") {
-      return {
-        diagnosis: "keychain-empty-item",
-        repairable: "delete-empty-keychain-item",
-        keychainRaw: keychain.raw,
-        detail: "The login keychain holds a Claude Code credentials item with empty tokens; Claude Code prefers it over the valid ~/.claude/.credentials.json and reports not logged in."
-      };
-    }
-    if (!empty && file.hasTokens && tokenTail(keychain.refreshToken) !== tokenTail(file.refreshToken)) {
-      return {
-        diagnosis: "store-divergence",
-        detail: "Keychain and ~/.claude/.credentials.json hold different refresh tokens; one of them will stop working at its next refresh. Treat the daemon-context login as canonical, or pin credentialStore=file."
-      };
-    }
-    return {};
-  }
-  if ((keychain.kind === "absent" || keychain.kind === "unreadable" || keychain.kind === "unsupported") && !file.hasTokens) {
-    return { diagnosis: "no-credentials", detail: "No Claude Code credentials found for this daemon context; log in with `claude` on this machine." };
-  }
-  if (keychain.kind === "unreadable" && file.hasTokens && status === "not-logged-in") {
-    return { diagnosis: "credentials-rejected", detail: CREDENTIALS_REJECTED_DETAIL };
-  }
-  if (keychain.kind === "error") {
-    return { detail: `keychain check failed: ${keychain.detail}` };
-  }
-  return {};
-}
-function securityReadArgs(identity) {
-  return ["find-generic-password", "-s", identity.service, "-a", identity.account, "-w"];
-}
-function securityDeleteArgs(identity) {
-  return ["delete-generic-password", "-s", identity.service, "-a", identity.account];
-}
-const HAPPY_DAEMON_LAUNCHD_LABEL = "com.mereith.happy-daemon";
-function classifyLineage(input) {
-  if (input.platform !== "darwin") return "other";
-  const label = input.label ?? HAPPY_DAEMON_LAUNCHD_LABEL;
-  if (input.env.XPC_SERVICE_NAME !== label) return "other";
-  if (input.launchdJobPid !== null && input.ancestorPids.includes(input.launchdJobPid)) return "launchd";
-  return "inherited-env";
-}
-function parseLaunchctlPid(printOutput) {
-  const match = /^\s*pid\s*=\s*(\d+)/m.exec(printOutput);
-  return match ? Number(match[1]) : null;
-}
-function keychainOffShimDir(happyLibDir) {
-  return join(happyLibDir, "scripts", "shims", "keychain-off");
-}
-function withKeychainOffPath(path, shimDir) {
-  const parts = (path ?? "").split(delimiter).filter((p) => p && p !== shimDir);
-  return [shimDir, ...parts].join(delimiter);
-}
-function buildClaudeAuthState(input) {
-  const { classification, diagnosis } = input;
-  const detail = (diagnosis?.detail ?? classification.detail)?.slice(0, 200);
-  const state = {
-    probeVersion: CLAUDE_AUTH_PROBE_VERSION,
-    daemonPid: input.daemonPid,
-    status: classification.status,
-    context: { platform: input.platform, lineage: input.lineage, credentialStore: input.credentialStore },
-    checkedAt: input.now ?? Date.now()
-  };
-  if (classification.authMethod) state.authMethod = classification.authMethod;
-  if (classification.subscriptionType) state.subscriptionType = classification.subscriptionType;
-  const diag = diagnosis?.diagnosis ?? classification.diagnosis;
-  if (diag) state.diagnosis = diag;
-  if (detail) state.detail = detail;
-  if (diagnosis?.repairable) state.repairable = diagnosis.repairable;
-  return state;
-}
-function claudeAuthStateChanged(prev, next) {
-  if (!prev) return true;
-  const strip = ({ checkedAt: _c, ...rest }) => JSON.stringify(rest);
-  return strip(prev) !== strip(next);
-}
-function keychainIdentityFor(env) {
-  return keychainIdentity(env);
-}
-
 const CLAUDE_AUTH_PROBE_INTERVAL_MS = 10 * 60 * 1e3;
 const CLAUDE_AUTH_REFRESH_INTERVAL_MS = 30 * 60 * 1e3;
 const PROBE_TIMEOUT_MS = 8e3;
@@ -5293,6 +5103,7 @@ class ClaudeAuthService {
     this.opts = opts;
     this.env = opts.env ?? process.env;
     this.platform = opts.platform ?? process.platform;
+    this.lineage = opts.lineage ?? null;
   }
   timer = null;
   signalTimer = null;
@@ -6931,7 +6742,9 @@ function createAutomationRunner(deps) {
   function persist(receipt) {
     writeReceipt(home, receipt, now());
   }
-  async function finish(item, report2) {
+  async function finish(item, input) {
+    const { report: report2, clipped } = clipAutomationReport(input);
+    if (clipped.length) deps.log(`Automation run ${item.runId} report clipped: ${clipped.map((c) => `${c.field} ${c.from}\u2192${c.to}`).join(", ")}`);
     try {
       await client.report(item.runId, report2);
     } catch (error) {
@@ -8571,8 +8384,10 @@ async function startDaemon() {
       }
     });
     const daemonClaudeCredentials = resolveClaudeCredentialReadiness();
-    const daemonSupervisor = detectDaemonSupervisor(process.env);
-    logger.debug(`[DAEMON RUN] Supervisor: ${daemonSupervisor}`);
+    const launchdJob = process.platform === "darwin" ? await probeLaunchdJob() : null;
+    const daemonSupervisor = detectDaemonSupervisor(process.env, process.platform, launchdJob);
+    const lineage = daemonLineage(daemonSupervisor, process.env, process.platform, launchdJob);
+    logger.debug(`[DAEMON RUN] Supervisor: ${daemonSupervisor} (lineage ${lineage}${launchdJob ? `, launchd job pid ${launchdJob.jobPid ?? "-"}` : ""})`);
     let fileState = {
       pid: process.pid,
       httpPort: controlPort,
@@ -8655,7 +8470,8 @@ async function startDaemon() {
         await writeSettings({ ...settings, claudeCredentialStore: store });
         claudeCredentialStoreSetting = store;
       },
-      publish: (state) => apiMachine.setClaudeAuthState(state)
+      publish: (state) => apiMachine.setClaudeAuthState(state),
+      lineage
     });
     claudeAuthServiceRef = claudeAuthService;
     apiMachine.setClaudeAuthHandlers({
@@ -8832,8 +8648,8 @@ async function startDaemon() {
               await cleanupDaemonState();
               await releaseDaemonLock(daemonLockHandle);
               await stopCaffeinate();
-              if (daemonSupervisor === "systemd") {
-                logger.debug(`[DAEMON RUN] systemd-supervised: exiting ${HANDOVER_EXIT_CODE} for the unit to restart on the new bundle`);
+              if (daemonSupervisor !== "none") {
+                logger.debug(`[DAEMON RUN] ${daemonSupervisor}-supervised: exiting ${HANDOVER_EXIT_CODE} for the supervisor to restart on the new bundle`);
                 process.exit(HANDOVER_EXIT_CODE);
               }
               try {