very-happy-cli 0.2.182 → 0.2.184

package/dist/{run-drtwHYkO.mjs → run-DqjEj8M2.mjs}

@@ -1,25 +1,25 @@
-import { i as isClaudeSessionId, g as extractCompleteLines, h as decideBackfill, j as parseTerminalHookPayload, k as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, m as mirrorLineKey, n as mirrorLocalId, o as initializeOwnedWorktree, e as summarizeSpawnSessionForLog, q as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, t as currentWorktreeService } from './mirrorProtocol-bsCUcaCY.mjs';
+import { i as isClaudeSessionId, g as extractCompleteLines, h as decideBackfill, j as parseTerminalHookPayload, k as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, m as mirrorLineKey, n as mirrorLocalId, o as initializeOwnedWorktree, e as summarizeSpawnSessionForLog, q as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, t as currentWorktreeService } from './mirrorProtocol-DTHWtAE5.mjs';
 import { F as FS_MKDIR_CAPABILITY_VERSION } from './fsMkdir-DumgLTzR.mjs';
-import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-68I5F_M1.mjs';
+import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-CIWprC1S.mjs';
 import fs from 'fs/promises';
 import os from 'os';
 import * as tmp from 'tmp';
 import axios from 'axios';
 import { readFileSync, openSync, fsyncSync, closeSync, renameSync, existsSync, readdirSync, statSync, unlinkSync, realpathSync, promises, writeFileSync, mkdirSync, accessSync, constants as constants$1, readSync, rmdirSync } from 'node:fs';
-import { join, isAbsolute, resolve, dirname, sep, basename, delimiter } from 'node:path';
-import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-YXw_Dcsb.mjs';
-import { T as TurnActivityTracker, A as ApiClient } from './api-C_YSQnsi.mjs';
-import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-Co-SLcx-.mjs';
-import { l as logger } from './logger-DpqihN1f.mjs';
-import { p as pruneStaleCompileCaches } from './index-D_LvOWUN.mjs';
-import { a as authAndSetupMachineIfNeeded } from './auth-CGgpiJ5-.mjs';
+import { join, isAbsolute, resolve, dirname, sep, basename } from 'node:path';
+import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-CVgUe2qN.mjs';
+import { T as TurnActivityTracker, A as ApiClient } from './api-BpTDU2BO.mjs';
+import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-jXo9jIYo.mjs';
+import { l as logger } from './logger-D2qd0mMg.mjs';
+import { p as pruneStaleCompileCaches } from './index-CVUiytNq.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-D6kSt2sR.mjs';
 import { spawn, execSync } from 'child_process';
-import { p as packageJson } from './package-CKj8zndE.mjs';
-import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-bKScPtZu.mjs';
-import { s as spawnHappyCLI } from './spawnHappyCLI-D1doCjkZ.mjs';
-import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, q as reportSignature, s as decideDaemonHibernation, t as nextCheckDelay, v as persistSession, d as readDaemonState, x as acquireDaemonLock, a as resolveCheckMs, y as resolveIdleMs, z as deletePersistedSessions, A as writeDaemonState, B as writeSettings, C as settingIdleMs, u as updateSettings, D as rewriteCredentialsForRelay, g as readCredentials, E as releaseDaemonLock } from './persistence-jOEuAFTS.mjs';
-import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, t as cleanupDaemonState } from './controlClient-BL4hb4l3.mjs';
-import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, g as waitForSessionKey, d as archiveSession, j as analyzeLatestTurn, k as readSessionLog, m as TURN_WINDOW, n as userPromptText } from './sessionOps-D0BPWPoh.mjs';
+import { p as packageJson } from './package-Ek5FOyEo.mjs';
+import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-OwNmTpYh.mjs';
+import { s as spawnHappyCLI } from './spawnHappyCLI-66grqHO0.mjs';
+import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, q as reportSignature, s as decideDaemonHibernation, t as nextCheckDelay, v as persistSession, d as readDaemonState, x as acquireDaemonLock, a as resolveCheckMs, y as resolveIdleMs, z as deletePersistedSessions, A as writeDaemonState, B as writeSettings, C as settingIdleMs, u as updateSettings, D as rewriteCredentialsForRelay, g as readCredentials, E as releaseDaemonLock } from './persistence-DFtgQvr6.mjs';
+import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, u as cleanupDaemonState } from './controlClient-DMCxtwq2.mjs';
+import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, g as waitForSessionKey, d as archiveSession, j as analyzeLatestTurn, k as readSessionLog, m as TURN_WINDOW, n as userPromptText } from './sessionOps-Di9MC0FP.mjs';
 import fastify from 'fastify';
 import { z } from 'zod';
 import { validatorCompiler, serializerCompiler } from 'fastify-type-provider-zod';
@@ -27,62 +27,62 @@ import { d as decodeBase64, s as sameRelay, e as encodeBase64, h as decrypt } fr
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'node:crypto';
 import { c as checkPreviewPath } from './previewPath-CXN4Vag0.mjs';
 import { a as BACKGROUND_TASKS_MAX, d as BACKGROUND_TASK_DESCRIPTION_MAX, e as BackgroundTaskTracker } from './backgroundTaskActivity-8PdPxrvy.mjs';
-import { b as sanitizeRateLimitReport } from './rateLimitWindows-Cqa4AGaB.mjs';
-import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-D_id4d41.mjs';
-import os$1, { hostname, homedir, userInfo, tmpdir } from 'node:os';
-import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-BlURPulk.mjs';
-import { assistantHome, bootstrapAssistantHome } from './bootstrap-D3vlOROj.mjs';
-import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-Cllzqoes.mjs';
+import { b as sanitizeRateLimitReport } from './rateLimitWindows-DM_gshI4.mjs';
+import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-CABQ6iKd.mjs';
+import os$1, { hostname, homedir, tmpdir } from 'node:os';
+import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-1nycIdrG.mjs';
+import { assistantHome, bootstrapAssistantHome } from './bootstrap-CodyCmGt.mjs';
+import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-C7zgeuLP.mjs';
 import require$$0, { existsSync as existsSync$1, statSync as statSync$1, mkdtempSync, rmSync } from 'fs';
 import require$$1, { join as join$1 } from 'path';
 import { spawn as spawn$1, execFile, spawnSync } from 'node:child_process';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { d as daemonEndpointsMatch, r as resolveClaudeCredentialReadiness } from './doctorReadiness-C208SMN9.mjs';
-import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-D4E3qoIG.mjs';
+import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-B2czDiTd.mjs';
 import { M as ModelConfigError, B as BackupStore, r as readConfigFile, s as sha256, a as atomicWriteFile } from './fileStore-5qpetZS0.mjs';
-import { c as collectSecretValues, a as parseJsonObject$1, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
+import { c as collectSecretValues, a as parseJsonObject, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
 import require$$3 from 'crypto';
 import { c as commandOnPath } from './detectCLI-CSGMlV51.mjs';
-import { buildResumeLaunch } from './handleResumeCommand-CjtjQ_I7.mjs';
+import { buildResumeLaunch } from './handleResumeCommand-BO00SYjG.mjs';
 import { n as normalizeWebPanels } from './webPanels-B2_C2-3g.mjs';
-import { x as ServerMigrateNoticeSchema, y as isHarnessInstallId, z as AUTOMATION_SUMMARY_MAX_CHARS, D as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, E as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, b as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, F as AUTOMATION_CLAIM_MAX_RUNS, G as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, H as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, I as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-BI0h2Zks.mjs';
+import { K as ServerMigrateNoticeSchema, L as isHarnessInstallId, e as AUTOMATION_SUMMARY_MAX_CHARS, M as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, N as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, b as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, Q as AUTOMATION_CLAIM_MAX_RUNS, T as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, U as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, V as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-DisBaRvM.mjs';
 import { access, symlink, readFile, rm, unlink, readlink, lstat, constants, stat, open } from 'node:fs/promises';
 import { p as parseExactVersion, c as compareExactVersions, f as fetchCliUpdateState, r as resolveCliUpdateCheckInterval, D as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS } from './cliUpdate-Y34VGe9Y.mjs';
-import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-o-meK7-a.mjs';
-import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-Ctbw05Xj.mjs';
-import { createRequire } from 'node:module';
+import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-CX-_2myt.mjs';
+import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-BdbVizjk.mjs';
+import { w as withKeychainOffPath, a as keychainIdentityFor, i as interpretSecurityRead, s as securityReadArgs, b as securityDeleteArgs, c as keychainOffShimDir, d as interpretCredentialsFile, C as CREDENTIALS_REJECTED_DETAIL, e as buildClaudeAuthState, f as claudeAuthStateChanged, r as resolveSdkClaudeBinary, g as classifyAuthStatus, h as diagnoseStores, p as parseLaunchctlPid, H as HAPPY_DAEMON_LAUNCHD_LABEL, j as classifyLineage, l as probeLaunchdJob, m as detectDaemonSupervisor, n as daemonLineage } from './daemonSupervisor-DfzrtNhM.mjs';
 import { g as getProjectPath } from './path-D2wdaNSk.mjs';
 import { b as extractClaudeEditPaths } from './editPaths-BVfS_FFL.mjs';
-import { s as startFileWatcher } from './startFileWatcher-CCl2fFxT.mjs';
-import { I as InvalidateSync } from './sync-BbjMC3sR.mjs';
+import { s as startFileWatcher } from './startFileWatcher-BLDkieUW.mjs';
+import { I as InvalidateSync } from './sync-DJvx7RbO.mjs';
 import { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import { t as tmuxArgs, a as scrubTmuxClientEnv, s as shellescape } from './tmuxSocket-B8Yx20sT.mjs';
-import { p as processIdentityFields, r as readSessionLock, t as terminateProcess, d as terminateProcessTree } from './sessionLock-B6K4SBZD.mjs';
+import { p as processIdentityFields, r as readSessionLock, t as terminateProcess, d as terminateProcessTree } from './sessionLock-ha9gsQEn.mjs';
 import { findAllHappyProcesses } from './doctor-BPkYWSuq.mjs';
-import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CH1iP6Cv.mjs';
+import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CLdQfe3b.mjs';
 import { promisify } from 'node:util';
-import { c as clipText, r as renderAction, b as renderTemplate } from './template-CiOPa2rd.mjs';
-import { d as detectDaemonSupervisor } from './daemonSupervisor-C6urv3_8.mjs';
+import { b as clipText, r as renderAction, c as clipAutomationReport, e as renderTemplate } from './template-YlpbYGeQ.mjs';
 import { d as describeAgentHome } from './loginShellEnv-Dw8M7tkI.mjs';
-import './acpSessionResume-u2TwX5Jd.mjs';
-import './lidState-D8Iuvjgl.mjs';
+import './acpSessionResume-Dz1myMbR.mjs';
+import './lidState-CBjQEwTt.mjs';
 import 'node:events';
 import 'socket.io-client';
-import './pushNotifications-CMmRsbKv.mjs';
+import './pushNotifications-gVJWGFBP.mjs';
 import './contentLogMetadata-BlWI0egu.mjs';
 import './limits-DIo7rEBR.mjs';
-import './time-Cfknl7xG.mjs';
-import './registerCommonHandlers-K8dICQO2.mjs';
+import './time-Du0scQeJ.mjs';
+import './registerCommonHandlers-CyAtDNvs.mjs';
 import 'util';
 import 'cross-spawn';
 import '@paralleldrive/cuid2';
 import 'chalk';
+import 'node:module';
 import 'tweetnacl';
-import './browser-CUxGoATV.mjs';
+import './browser-CqMhj8Gm.mjs';
 import 'open';
 import './ids-DU6sLx4C.mjs';
 import 'url';
-import './localHappyAgentAuth-D3rQDRd9.mjs';
+import './localHappyAgentAuth-CcWGU_lS.mjs';
 import './processTreeSnapshot-CuLJDNC-.mjs';
 import 'ps-list';
 
@@ -572,6 +572,7 @@ function startDaemonControlServer({
   stopSession,
   spawnSession,
   resumeSession,
+  restartSession,
   requestShutdown,
   onHappySessionWebhook,
   onSessionStateEvent,
@@ -868,6 +869,34 @@ function startDaemonControlServer({
           return { success: false, error: result.errorMessage };
       }
     });
+    typed.post("/restart-session", {
+      schema: {
+        body: z.object({ sessionId: z.string().min(1).max(200) }),
+        response: {
+          200: z.object({ success: z.boolean(), sessionId: z.string().optional(), error: z.string().optional() }),
+          500: z.object({ success: z.boolean(), error: z.string().optional() }),
+          503: z.object({ success: z.boolean(), error: z.string().optional() })
+        }
+      }
+    }, async (request, reply) => {
+      const { sessionId } = request.body;
+      if (!restartSession) {
+        reply.code(503);
+        return { success: false, error: "daemon is still starting up" };
+      }
+      logger.debug(`[CONTROL SERVER] Restart session request: ${sessionId}`);
+      const result = await restartSession(sessionId, { keepPublishedPermissionMode: true });
+      switch (result.type) {
+        case "success":
+          return { success: true, sessionId: result.sessionId };
+        case "requestToApproveDirectoryCreation":
+          reply.code(500);
+          return { success: false, error: `Cannot restart: working directory ${result.directory} needs to be created first` };
+        case "error":
+          reply.code(500);
+          return { success: false, error: result.errorMessage };
+      }
+    });
     typed.post("/terminal-hook", {
       schema: {
         body: z.any(),
@@ -2361,14 +2390,14 @@ const claudeAdapter = {
   binary: "claude",
   files: (ctx) => [{ role: ROLE$1, path: claudeSettingsPath(ctx) }],
   view(files, ctx) {
-    const settings = parseJsonObject$1(files[ROLE$1].content, "settings.json");
+    const settings = parseJsonObject(files[ROLE$1].content, "settings.json");
     const current = currentOf$2(settings, ctx);
     return { current, pickerModels: pickerModelsOf(current), warnings: warningsOf$2(settings, current, ctx) };
   },
   plan(files, raw, ctx) {
     const patch = parsePatch$1(raw);
     const original = files[ROLE$1].content;
-    const before = parseJsonObject$1(original, "settings.json");
+    const before = parseJsonObject(original, "settings.json");
     const settings = structuredClone(before);
     const hadEnv = settings.env !== void 0;
     const env = childObject(settings, "env", "settings");
@@ -2429,7 +2458,7 @@ const claudeAdapter = {
   },
   secretsIn(_role, content) {
     try {
-      return collectSecretValues(parseJsonObject$1(content, "settings.json"));
+      return collectSecretValues(parseJsonObject(content, "settings.json"));
     } catch {
       return /* @__PURE__ */ new Set();
     }
@@ -3979,7 +4008,7 @@ const geminiAdapter = {
   binary: "gemini",
   files: (ctx) => [{ role: SETTINGS, path: join(geminiDir(ctx), "settings.json") }, { role: ENV, path: join(geminiDir(ctx), ".env") }],
   view(files, ctx) {
-    const settings = parseJsonObject$1(files[SETTINGS].content, "settings.json");
+    const settings = parseJsonObject(files[SETTINGS].content, "settings.json");
     const current = currentOf(settings, parseDotenv(files[ENV].content), ctx);
     return { current, pickerModels: uniq([current.model]), warnings: warningsOf(settings, current) };
   },
@@ -3989,7 +4018,7 @@ const geminiAdapter = {
     const apiKey = normalizeSecret(p.apiKey, ["keep", "clear", "literal"]);
     const model = normalizeModelId(p.model);
     const settingsText = files[SETTINGS].content;
-    const before = parseJsonObject$1(settingsText, "settings.json");
+    const before = parseJsonObject(settingsText, "settings.json");
     const settings = structuredClone(before);
     const changedKeys = [];
     let settingsOut;
@@ -4020,7 +4049,7 @@ const geminiAdapter = {
   },
   secretsIn(role, content) {
     try {
-      return role === ENV ? collectSecretValues(parseDotenv(content)) : collectSecretValues(parseJsonObject$1(content, "settings.json"));
+      return role === ENV ? collectSecretValues(parseDotenv(content)) : collectSecretValues(parseJsonObject(content, "settings.json"));
     } catch {
       return /* @__PURE__ */ new Set();
     }
@@ -5093,196 +5122,6 @@ async function waitForSessionLive(sessionId, live, timeoutMs = AUTOMATION_WAKE_T
   return true;
 }
 
-const CLAUDE_KEYCHAIN_SERVICE_PREFIX = "Claude Code";
-function keychainIdentity(env = process.env, deps = {}) {
-  const home = deps.home ?? homedir();
-  const secureDir = env.CLAUDE_SECURESTORAGE_CONFIG_DIR?.trim();
-  const configDirEnv = env.CLAUDE_CONFIG_DIR?.trim();
-  const configDir = secureDir || configDirEnv || join(home, ".claude");
-  const hasCustomDir = Boolean(secureDir || configDirEnv);
-  const dirSuffix = hasCustomDir ? "-" + createHash("sha256").update(configDir.normalize("NFC")).digest("hex").slice(0, 8) : "";
-  const oauthSuffix = env.CLAUDE_CODE_OAUTH_CLIENT_ID?.trim() ? "-custom-oauth" : "";
-  const rawAccount = env.USER || safeUsername(deps.username);
-  const account = /^[a-zA-Z0-9._-]+$/.test(rawAccount) ? rawAccount : "claude-code-user";
-  return {
-    service: `${CLAUDE_KEYCHAIN_SERVICE_PREFIX}${oauthSuffix}-credentials${dirSuffix}`,
-    account,
-    configDir,
-    credentialsPath: join(configDir, ".credentials.json")
-  };
-}
-function safeUsername(provider) {
-  try {
-    return provider ? provider() : userInfo().username;
-  } catch {
-    return "";
-  }
-}
-
-const CLAUDE_AUTH_PROBE_VERSION = 1;
-const LOCAL_CREDENTIAL_SOURCE = "Claude local credentials";
-function classifyAuthStatus(run, credentialSource) {
-  const localSource = credentialSource === void 0 || credentialSource === LOCAL_CREDENTIAL_SOURCE;
-  if (run.spawnError) {
-    return { status: "error", diagnosis: "probe-crash", detail: `could not run claude auth status: ${run.spawnError}` };
-  }
-  if (run.timedOut) {
-    return { status: "error", diagnosis: "probe-timeout", detail: "claude auth status did not answer within the timeout" };
-  }
-  const parsed = parseJsonObject(run.stdout);
-  if (!parsed) {
-    if (!localSource) return { status: "unknown", authMethod: credentialSource, detail: `auth status unparseable under ${credentialSource}` };
-    return { status: "error", diagnosis: "probe-crash", detail: `claude auth status returned no JSON (exit ${run.exitCode ?? "null"})` };
-  }
-  const authMethod = typeof parsed.authMethod === "string" ? parsed.authMethod : void 0;
-  const subscriptionType = typeof parsed.subscriptionType === "string" ? parsed.subscriptionType : void 0;
-  if (parsed.loggedIn === true) {
-    return { status: "ok", authMethod: localSource ? authMethod : credentialSource, subscriptionType };
-  }
-  if (!localSource) {
-    return { status: "unknown", authMethod: credentialSource, detail: `Claude Code reports loggedIn=false under ${credentialSource}; not a local-credential failure` };
-  }
-  return { status: "not-logged-in", authMethod, subscriptionType, detail: "Claude Code in the daemon context reports it is not logged in" };
-}
-function parseJsonObject(text) {
-  const trimmed = text.trim();
-  if (!trimmed) return null;
-  const start = trimmed.indexOf("{");
-  if (start < 0) return null;
-  try {
-    const value = JSON.parse(trimmed.slice(start));
-    return value && typeof value === "object" && !Array.isArray(value) ? value : null;
-  } catch {
-    return null;
-  }
-}
-function resolveSdkClaudeBinary(platform = process.platform, arch = process.arch, resolver = (s) => createRequire(import.meta.url).resolve(s)) {
-  const platformArch = `${platform}-${arch}`;
-  const candidates = [
-    `@anthropic-ai/claude-agent-sdk-${platformArch}/claude`,
-    `@anthropic-ai/claude-agent-sdk-${platformArch}/claude.exe`
-  ];
-  for (const candidate of candidates) {
-    try {
-      return resolver(candidate);
-    } catch {
-    }
-  }
-  return null;
-}
-function interpretSecurityRead(result) {
-  if (result.error === "ENOENT") return { kind: "unsupported" };
-  if (result.error === "timeout") return { kind: "error", detail: "security timed out" };
-  if (result.exitCode === 44) return { kind: "absent" };
-  if (result.exitCode === 36) return { kind: "unreadable" };
-  if (result.exitCode !== 0) return { kind: "error", detail: `security exited ${result.exitCode ?? "null"}` };
-  const raw = result.stdout.trim();
-  if (!raw) return { kind: "absent" };
-  const parsed = parseJsonObject(raw);
-  const oauth = parsed && typeof parsed.claudeAiOauth === "object" && parsed.claudeAiOauth ? parsed.claudeAiOauth : null;
-  if (!oauth) return { kind: "present", accessToken: "", refreshToken: "", raw };
-  return {
-    kind: "present",
-    accessToken: typeof oauth.accessToken === "string" ? oauth.accessToken : "",
-    refreshToken: typeof oauth.refreshToken === "string" ? oauth.refreshToken : "",
-    raw
-  };
-}
-function interpretCredentialsFile(text) {
-  if (text === null) return { exists: false, hasTokens: false, refreshToken: "" };
-  const parsed = parseJsonObject(text);
-  const oauth = parsed && typeof parsed.claudeAiOauth === "object" && parsed.claudeAiOauth ? parsed.claudeAiOauth : null;
-  const access = oauth && typeof oauth.accessToken === "string" ? oauth.accessToken : "";
-  const refresh = oauth && typeof oauth.refreshToken === "string" ? oauth.refreshToken : "";
-  return { exists: true, hasTokens: access.length > 0 && refresh.length > 0, refreshToken: refresh };
-}
-function tokenTail(token) {
-  return token ? createHash("sha256").update(token).digest("hex").slice(-6) : "";
-}
-const CREDENTIALS_REJECTED_DETAIL = "Credentials exist but Claude Code rejects them in the daemon context \u2014 the refresh token has most likely been rotated away by another store or another machine using the same credentials. Log in again with `claude` on this machine.";
-function diagnoseStores(input) {
-  const { status, keychain, file } = input;
-  if (keychain.kind === "present") {
-    const empty = keychain.accessToken.length === 0 && keychain.refreshToken.length === 0;
-    if (empty && file.hasTokens && status === "not-logged-in") {
-      return {
-        diagnosis: "keychain-empty-item",
-        repairable: "delete-empty-keychain-item",
-        keychainRaw: keychain.raw,
-        detail: "The login keychain holds a Claude Code credentials item with empty tokens; Claude Code prefers it over the valid ~/.claude/.credentials.json and reports not logged in."
-      };
-    }
-    if (!empty && file.hasTokens && tokenTail(keychain.refreshToken) !== tokenTail(file.refreshToken)) {
-      return {
-        diagnosis: "store-divergence",
-        detail: "Keychain and ~/.claude/.credentials.json hold different refresh tokens; one of them will stop working at its next refresh. Treat the daemon-context login as canonical, or pin credentialStore=file."
-      };
-    }
-    return {};
-  }
-  if ((keychain.kind === "absent" || keychain.kind === "unreadable" || keychain.kind === "unsupported") && !file.hasTokens) {
-    return { diagnosis: "no-credentials", detail: "No Claude Code credentials found for this daemon context; log in with `claude` on this machine." };
-  }
-  if (keychain.kind === "unreadable" && file.hasTokens && status === "not-logged-in") {
-    return { diagnosis: "credentials-rejected", detail: CREDENTIALS_REJECTED_DETAIL };
-  }
-  if (keychain.kind === "error") {
-    return { detail: `keychain check failed: ${keychain.detail}` };
-  }
-  return {};
-}
-function securityReadArgs(identity) {
-  return ["find-generic-password", "-s", identity.service, "-a", identity.account, "-w"];
-}
-function securityDeleteArgs(identity) {
-  return ["delete-generic-password", "-s", identity.service, "-a", identity.account];
-}
-const HAPPY_DAEMON_LAUNCHD_LABEL = "com.mereith.happy-daemon";
-function classifyLineage(input) {
-  if (input.platform !== "darwin") return "other";
-  const label = input.label ?? HAPPY_DAEMON_LAUNCHD_LABEL;
-  if (input.env.XPC_SERVICE_NAME !== label) return "other";
-  if (input.launchdJobPid !== null && input.ancestorPids.includes(input.launchdJobPid)) return "launchd";
-  return "inherited-env";
-}
-function parseLaunchctlPid(printOutput) {
-  const match = /^\s*pid\s*=\s*(\d+)/m.exec(printOutput);
-  return match ? Number(match[1]) : null;
-}
-function keychainOffShimDir(happyLibDir) {
-  return join(happyLibDir, "scripts", "shims", "keychain-off");
-}
-function withKeychainOffPath(path, shimDir) {
-  const parts = (path ?? "").split(delimiter).filter((p) => p && p !== shimDir);
-  return [shimDir, ...parts].join(delimiter);
-}
-function buildClaudeAuthState(input) {
-  const { classification, diagnosis } = input;
-  const detail = (diagnosis?.detail ?? classification.detail)?.slice(0, 200);
-  const state = {
-    probeVersion: CLAUDE_AUTH_PROBE_VERSION,
-    daemonPid: input.daemonPid,
-    status: classification.status,
-    context: { platform: input.platform, lineage: input.lineage, credentialStore: input.credentialStore },
-    checkedAt: input.now ?? Date.now()
-  };
-  if (classification.authMethod) state.authMethod = classification.authMethod;
-  if (classification.subscriptionType) state.subscriptionType = classification.subscriptionType;
-  const diag = diagnosis?.diagnosis ?? classification.diagnosis;
-  if (diag) state.diagnosis = diag;
-  if (detail) state.detail = detail;
-  if (diagnosis?.repairable) state.repairable = diagnosis.repairable;
-  return state;
-}
-function claudeAuthStateChanged(prev, next) {
-  if (!prev) return true;
-  const strip = ({ checkedAt: _c, ...rest }) => JSON.stringify(rest);
-  return strip(prev) !== strip(next);
-}
-function keychainIdentityFor(env) {
-  return keychainIdentity(env);
-}
-
 const CLAUDE_AUTH_PROBE_INTERVAL_MS = 10 * 60 * 1e3;
 const CLAUDE_AUTH_REFRESH_INTERVAL_MS = 30 * 60 * 1e3;
 const PROBE_TIMEOUT_MS = 8e3;
@@ -5293,6 +5132,7 @@ class ClaudeAuthService {
     this.opts = opts;
     this.env = opts.env ?? process.env;
     this.platform = opts.platform ?? process.platform;
+    this.lineage = opts.lineage ?? null;
   }
   timer = null;
   signalTimer = null;
@@ -6356,6 +6196,10 @@ async function removeTeamWorktree(resource) {
   if (ownBranch) await git(repository, ["branch", "-D", branch]);
 }
 
+function refusalCode(error) {
+  const code = axios.isAxiosError(error) ? error.response?.data?.error : void 0;
+  return typeof code === "string" && /^[a-z_]{1,64}$/.test(code) ? ` (${code})` : "";
+}
 function persistedSpawnMatches(operationId) {
   return Object.entries(readPersistedSessions()).filter(([, entry]) => entry.metadata?.teamOperationId === operationId);
 }
@@ -6390,6 +6234,7 @@ function createTeamWorker(deps) {
       writeReceipt$1(home, receipt);
     }
     if (receipt.phase === "completed") return;
+    let sessionStopped = false;
     try {
       if (op.type === "spawn") {
         if (ownerRetryPending(op, receipt) && (receipt.phase === "prepared" || receipt.phase === "spawning" && persistedSpawnMatches(op.id).length === 0)) {
@@ -6486,10 +6331,11 @@ function createTeamWorker(deps) {
           return;
         }
         const bot = team.bots.find((candidate) => candidate.id === op.botId);
-        if (!bot || bot.generation !== op.generation || bot.sessionId !== op.sessionId) throw new Error("Worker binding changed; preserve resources for reconciliation");
+        if (!bot || op.sessionId && bot.transferredTo?.sessionId === op.sessionId) throw new Error("Worker binding changed; preserve resources for reconciliation");
         if (op.sessionId) {
           await deps.stopAndWait(op.sessionId);
           await archiveSession(op.sessionId);
+          sessionStopped = true;
         }
         if (team.archivedAt !== void 0) {
           await complete(op, receipt);
@@ -6512,7 +6358,7 @@ function createTeamWorker(deps) {
         } catch {
         }
       }
-      await action(op.teamId, `failure-${op.id}-${receipt.phase}-${createHash("sha256").update(detail).digest("hex").slice(0, 12)}`, { type: "fail-operation", operationId: op.id, machineId: deps.machineId, claimId: receipt.claimId, error: detail.slice(0, 1e3), unknown }).catch(() => {
+      await action(op.teamId, `failure-${op.id}-${receipt.phase}-${createHash("sha256").update(detail).digest("hex").slice(0, 12)}${sessionStopped ? "-stopped" : ""}`, { type: "fail-operation", operationId: op.id, machineId: deps.machineId, claimId: receipt.claimId, error: detail.slice(0, 1e3), unknown, ...sessionStopped ? { sessionStopped: true } : {} }).catch(() => {
       });
       deps.log(`Teams operation ${op.id} ${unknown ? "needs reconciliation" : "will retry"}`);
     }
@@ -6592,8 +6438,8 @@ Use the teams tools to inspect current task state before acting. This message is
         if (closed) break;
         try {
           await execute(op);
-        } catch {
-          deps.log(`Teams operation ${op.id} remains pending`);
+        } catch (error) {
+          deps.log(`Teams operation ${op.id} remains pending${refusalCode(error)}`);
         }
       }
       await flushEvents(data.teams ?? []);
@@ -6931,7 +6777,9 @@ function createAutomationRunner(deps) {
   function persist(receipt) {
     writeReceipt(home, receipt, now());
   }
-  async function finish(item, report2) {
+  async function finish(item, input) {
+    const { report: report2, clipped } = clipAutomationReport(input);
+    if (clipped.length) deps.log(`Automation run ${item.runId} report clipped: ${clipped.map((c) => `${c.field} ${c.from}\u2192${c.to}`).join(", ")}`);
     try {
       await client.report(item.runId, report2);
     } catch (error) {
@@ -8368,7 +8216,7 @@ async function startDaemon() {
         }
         const model = sanitizeResumeModel(options?.model);
         if (model) args.push("--model", model);
-        const permissionMode = sanitizeSpawnPermissionMode(options?.permissionMode);
+        const permissionMode = sanitizeSpawnPermissionMode(options?.permissionMode ?? (options?.keepPublishedPermissionMode ? publishedRelaunchPermissionMode(metadata) : void 0));
         if (permissionMode) args.push("--permission-mode", permissionMode);
         restartCounts.set(happySessionId, recordRestartAttempt(prior));
         const teamEnv = await teamRelaunchEnvFor(happySessionId, metadata);
@@ -8527,6 +8375,8 @@ async function startDaemon() {
       spawnSession,
       resumeSession,
       // B-501: `very-happy send --resume`
+      restartSession,
+      // B-794: `very-happy session provider`
       requestShutdown: () => requestShutdown("happy-cli"),
       onHappySessionWebhook,
       onSessionStateEvent,
@@ -8571,8 +8421,10 @@ async function startDaemon() {
       }
     });
     const daemonClaudeCredentials = resolveClaudeCredentialReadiness();
-    const daemonSupervisor = detectDaemonSupervisor(process.env);
-    logger.debug(`[DAEMON RUN] Supervisor: ${daemonSupervisor}`);
+    const launchdJob = process.platform === "darwin" ? await probeLaunchdJob() : null;
+    const daemonSupervisor = detectDaemonSupervisor(process.env, process.platform, launchdJob);
+    const lineage = daemonLineage(daemonSupervisor, process.env, process.platform, launchdJob);
+    logger.debug(`[DAEMON RUN] Supervisor: ${daemonSupervisor} (lineage ${lineage}${launchdJob ? `, launchd job pid ${launchdJob.jobPid ?? "-"}` : ""})`);
     let fileState = {
       pid: process.pid,
       httpPort: controlPort,
@@ -8655,7 +8507,8 @@ async function startDaemon() {
         await writeSettings({ ...settings, claudeCredentialStore: store });
         claudeCredentialStoreSetting = store;
       },
-      publish: (state) => apiMachine.setClaudeAuthState(state)
+      publish: (state) => apiMachine.setClaudeAuthState(state),
+      lineage
     });
     claudeAuthServiceRef = claudeAuthService;
     apiMachine.setClaudeAuthHandlers({
@@ -8832,8 +8685,8 @@ async function startDaemon() {
               await cleanupDaemonState();
               await releaseDaemonLock(daemonLockHandle);
               await stopCaffeinate();
-              if (daemonSupervisor === "systemd") {
-                logger.debug(`[DAEMON RUN] systemd-supervised: exiting ${HANDOVER_EXIT_CODE} for the unit to restart on the new bundle`);
+              if (daemonSupervisor !== "none") {
+                logger.debug(`[DAEMON RUN] ${daemonSupervisor}-supervised: exiting ${HANDOVER_EXIT_CODE} for the supervisor to restart on the new bundle`);
                 process.exit(HANDOVER_EXIT_CODE);
               }
               try {