very-happy-cli 0.2.200 → 0.2.202

package/dist/{run-iDEMW4js.mjs → run-D59Gb4SQ.mjs}

@@ -1,26 +1,27 @@
-import { i as isClaudeSessionId, h as extractCompleteLines, j as decideBackfill, k as parseTerminalHookPayload, m as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, n as mirrorLineKey, o as mirrorLocalId, q as initializeOwnedWorktree, f as summarizeSpawnSessionForLog, t as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, u as currentWorktreeService } from './mirrorProtocol-DFQLXDBI.mjs';
+import { i as isClaudeSessionId, h as extractCompleteLines, j as decideBackfill, k as parseTerminalHookPayload, m as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, n as mirrorLineKey, o as mirrorLocalId, q as initializeOwnedWorktree, f as summarizeSpawnSessionForLog, t as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, u as currentWorktreeService } from './mirrorProtocol-5aFYsCCe.mjs';
 import { F as FS_MKDIR_CAPABILITY_VERSION } from './fsMkdir-DumgLTzR.mjs';
-import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-Bdj0sjAT.mjs';
+import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-CygWrAwY.mjs';
 import fs from 'fs/promises';
 import os from 'os';
 import * as tmp from 'tmp';
 import axios from 'axios';
+import { a as issueRelaunchEnv } from './sessionMetadata-C1eoAi89.mjs';
 import { readFileSync, openSync, fsyncSync, closeSync, renameSync, existsSync, readdirSync, statSync, unlinkSync, readSync, writeSync, ftruncateSync, utimesSync, realpathSync, promises, constants as constants$1, writeFileSync, mkdirSync, accessSync, rmdirSync } from 'node:fs';
 import { join, isAbsolute, resolve, dirname, sep, basename, relative } from 'node:path';
-import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-4pG95tsq.mjs';
-import { T as TurnActivityTracker, A as ApiClient } from './api-DCUiAds-.mjs';
-import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-XObVj6zN.mjs';
-import { l as logger } from './logger-BLMi8oJK.mjs';
-import { p as pruneStaleCompileCaches } from './index-Sdvy1Lsf.mjs';
-import { a as authAndSetupMachineIfNeeded } from './auth-8jKFCZOX.mjs';
+import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-CQaLZMa-.mjs';
+import { T as TurnActivityTracker, A as ApiClient } from './api-Cu1OFHDM.mjs';
+import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-BclZYkov.mjs';
+import { l as logger } from './logger-BEVIGYKL.mjs';
+import { p as pruneStaleCompileCaches } from './index-BcYJJV-f.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-CgdE-j7z.mjs';
 import { spawn, execSync } from 'child_process';
-import { p as packageJson } from './package-DbGqY8Ej.mjs';
-import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-Dy7z3qvy.mjs';
-import { s as spawnHappyCLI } from './spawnHappyCLI-Cc9kKpcq.mjs';
-import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, s as reportSignature, t as decideDaemonHibernation, v as nextCheckDelay, x as persistSession, d as readDaemonState, y as acquireDaemonLock, a as resolveCheckMs, z as resolveIdleMs, A as deletePersistedSessions, B as writeDaemonState, C as writeSettings, D as settingIdleMs, u as updateSettings, E as rewriteCredentialsForRelay, g as readCredentials, F as releaseDaemonLock } from './persistence-DbOKjdUD.mjs';
-import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, w as cleanupDaemonState } from './controlClient-bqCKl9Nv.mjs';
-import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, n as lineageOf, g as waitForSessionKey, d as archiveSession, h as analyzeLatestTurn, i as readSessionLog, j as TURN_WINDOW, p as userPromptText } from './sessionOps-D-uFSTHk.mjs';
-import { a1 as AgentProfilesStateSchema, am as ServerMigrateNoticeSchema, an as isHarnessInstallId, ao as agentProfileUnavailableReason, ap as MODEL_INTENT_CONFIG, q as AUTOMATION_SUMMARY_MAX_CHARS, aq as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, ar as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, d as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, as as AUTOMATION_CLAIM_MAX_RUNS, at as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, au as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, D as resolveLaunchAgentProfile, av as ISSUE_SENT_FROM, aw as ISSUE_DISPATCH_LOCAL_ID_PREFIX, f as ISSUE_ASSIGNABLE_AGENTS, ax as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-kwsivEs-.mjs';
+import { p as packageJson } from './package-aOUtHYRZ.mjs';
+import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-Wu0yZ80l.mjs';
+import { s as spawnHappyCLI } from './spawnHappyCLI-BckHSjR0.mjs';
+import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, s as reportSignature, t as decideDaemonHibernation, v as nextCheckDelay, x as persistSession, d as readDaemonState, y as acquireDaemonLock, a as resolveCheckMs, z as resolveIdleMs, A as deletePersistedSessions, B as writeDaemonState, C as writeSettings, D as settingIdleMs, u as updateSettings, E as readDaemonStatePidSync, F as rewriteCredentialsForRelay, g as readCredentials, G as releaseDaemonLock } from './persistence-EuUaQKL7.mjs';
+import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, w as cleanupDaemonState } from './controlClient-Cqhd8ynk.mjs';
+import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, n as lineageOf, g as waitForSessionKey, d as archiveSession, h as analyzeLatestTurn, i as readSessionLog, j as TURN_WINDOW, p as userPromptText } from './sessionOps-CV5RUpwG.mjs';
+import { a2 as AgentProfilesStateSchema, an as ServerMigrateNoticeSchema, ao as isHarnessInstallId, ap as agentProfileUnavailableReason, aq as MODEL_INTENT_CONFIG, q as AUTOMATION_SUMMARY_MAX_CHARS, ar as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, as as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, d as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, at as AUTOMATION_CLAIM_MAX_RUNS, au as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, av as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, D as resolveLaunchAgentProfile, aw as ISSUE_SENT_FROM, ax as ISSUE_DISPATCH_LOCAL_ID_PREFIX, f as ISSUE_ASSIGNABLE_AGENTS, ay as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-CiRMvS73.mjs';
 import fastify from 'fastify';
 import { z } from 'zod';
 import { validatorCompiler, serializerCompiler } from 'fastify-type-provider-zod';
@@ -28,69 +29,69 @@ import { d as decodeBase64, s as sameRelay, e as encodeBase64, h as decrypt } fr
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'node:crypto';
 import { c as checkPreviewPath } from './previewPath-CXN4Vag0.mjs';
 import { a as BACKGROUND_TASKS_MAX, d as BACKGROUND_TASK_DESCRIPTION_MAX, e as BackgroundTaskTracker } from './backgroundTaskActivity-8PdPxrvy.mjs';
-import { b as sanitizeRateLimitReport } from './rateLimitWindows-DZVrafmm.mjs';
-import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-4GYKxr8J.mjs';
+import { b as sanitizeRateLimitReport } from './rateLimitWindows-hv2zLYid.mjs';
+import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-BkRgJomj.mjs';
 import os$1, { hostname, homedir, tmpdir } from 'node:os';
-import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-BFd_D9ka.mjs';
-import { assistantHome, bootstrapAssistantHome } from './bootstrap-BkLFgEGF.mjs';
-import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-XP-qcJQ3.mjs';
+import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-CzjLyL9c.mjs';
+import { assistantHome, bootstrapAssistantHome } from './bootstrap-BTYJf2w8.mjs';
+import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-fNsf-8K-.mjs';
 import require$$0, { existsSync as existsSync$1, statSync as statSync$1, mkdtempSync, rmSync } from 'fs';
 import require$$1, { join as join$1 } from 'path';
 import { spawn as spawn$1, execFile, spawnSync } from 'node:child_process';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { d as daemonEndpointsMatch, r as resolveClaudeCredentialReadiness } from './doctorReadiness-C208SMN9.mjs';
-import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-D8OWVD4l.mjs';
+import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-BQdp_ihk.mjs';
 import { M as ModelConfigError, B as BackupStore, r as readConfigFile, s as sha256, a as atomicWriteFile } from './fileStore-5qpetZS0.mjs';
 import { c as collectSecretValues, a as parseJsonObject, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
-import { p as parse } from './codexAccount-BAezf1fY.mjs';
+import { p as parse } from './codexAccount-CieIQLOX.mjs';
 import require$$3 from 'crypto';
 import { c as commandOnPath } from './detectCLI-CSGMlV51.mjs';
-import { buildResumeLaunch } from './handleResumeCommand-Dz4Aw_aZ.mjs';
+import { buildResumeLaunch } from './handleResumeCommand-DrJdhjLD.mjs';
 import { n as normalizeWebPanels } from './webPanels-B2_C2-3g.mjs';
 import { access, symlink, readFile, rm, unlink, readlink, lstat, constants, rename, mkdir, copyFile, readdir, stat, open } from 'node:fs/promises';
 import { p as parseExactVersion, c as compareExactVersions, f as fetchCliUpdateState, r as resolveCliUpdateCheckInterval, D as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS } from './cliUpdate-Y34VGe9Y.mjs';
-import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-BXwIqRha.mjs';
-import { d as wrapperReportsIdle, f as decideAutoRestart, s as statusFromVerdict, g as autoRestartNextCheck, h as wrapperStaleness, r as recordAttempt, i as AUTO_RESTART_MAX_ATTEMPTS, j as AUTO_RESTART_MIN_GAP_MS, p as processIdentityFields, k as readSessionLock, l as AUTO_RESTARTED_ENV, n as encodeAutoRestarted, o as pendingUpgradeVersion, q as resolveQuietMs, u as AUTO_RESTART_RECHECK_CAP_MS } from './sessionLock-CphKQyav.mjs';
-import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-Blpuk2Hr.mjs';
+import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-DfT_CRwl.mjs';
+import { d as wrapperReportsIdle, f as decideAutoRestart, s as statusFromVerdict, g as autoRestartNextCheck, h as wrapperStaleness, r as recordAttempt, i as AUTO_RESTART_MAX_ATTEMPTS, j as AUTO_RESTART_MIN_GAP_MS, p as processIdentityFields, k as readSessionLock, l as AUTO_RESTARTED_ENV, n as encodeAutoRestarted, o as pendingUpgradeVersion, q as resolveQuietMs, u as AUTO_RESTART_RECHECK_CAP_MS } from './sessionLock-CVjlaRSL.mjs';
+import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-D0oBXuEe.mjs';
 import { w as withKeychainOffPath, a as keychainIdentityFor, i as interpretSecurityRead, s as securityReadArgs, b as securityDeleteArgs, c as keychainOffShimDir, d as interpretCredentialsFile, C as CREDENTIALS_REJECTED_DETAIL, e as buildClaudeAuthState, f as claudeAuthStateChanged, r as resolveSdkClaudeBinary, g as classifyAuthStatus, h as diagnoseStores, p as parseLaunchctlPid, H as HAPPY_DAEMON_LAUNCHD_LABEL, j as classifyLineage, l as probeLaunchdJob, m as detectDaemonSupervisor, n as daemonLineage, o as probeSystemdKillMode, q as wrappersSurviveHandover, t as handoverWaitsForSessions } from './daemonSupervisor-BxohggqN.mjs';
-import { A as AccountService } from './accountService-ELazcp3V.mjs';
-import { spawnSetupTokenPty, watchAccountFiles } from './daemonAccounts-B8xnkprW.mjs';
+import { A as AccountService } from './accountService-DEpIq6CF.mjs';
+import { spawnSetupTokenPty, watchAccountFiles } from './daemonAccounts-D5shoCLt.mjs';
 import { g as getProjectPath } from './path-D2wdaNSk.mjs';
 import { b as extractClaudeEditPaths } from './editPaths-BVfS_FFL.mjs';
-import { s as startFileWatcher } from './startFileWatcher-t3K1y9kY.mjs';
-import { I as InvalidateSync } from './sync-s1pUqWGm.mjs';
+import { s as startFileWatcher } from './startFileWatcher-BXiBlfVr.mjs';
+import { I as InvalidateSync } from './sync-BfM5OKSS.mjs';
 import { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import { t as tmuxArgs, a as scrubTmuxClientEnv, s as shellescape } from './tmuxSocket-BmZyixRM.mjs';
 import { i as isProcessAlive, t as terminateProcessTree } from './processTermination-ChJG5SLW.mjs';
 import { findAllHappyProcesses } from './doctor-GN5mPOn5.mjs';
 import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CLP_MpK4.mjs';
 import { promisify } from 'node:util';
-import { b as clipText, r as renderAction, c as clipAutomationReport, e as renderTemplate } from './template-oBrR0saD.mjs';
-import { I as IssuesUnsupportedError, a as IssueRequestError, c as createIssuesClient } from './client-BgxQ9aej.mjs';
+import { b as clipText, r as renderAction, c as clipAutomationReport, e as renderTemplate } from './template-CtRLg2PG.mjs';
+import { I as IssuesUnsupportedError, a as IssueRequestError, c as createIssuesClient } from './client-Cj7D61by.mjs';
 import { d as describeAgentHome } from './loginShellEnv-Dw8M7tkI.mjs';
-import { S as SPAWN_ACCOUNT_ENV } from './store-CqNAE-0v.mjs';
-import './acpSessionResume-De_sTG30.mjs';
-import './pushNotifications-CrCTpDiN.mjs';
+import { S as SPAWN_ACCOUNT_ENV } from './store-DWmjM4Ex.mjs';
+import './acpSessionResume-BKjQRT4V.mjs';
+import './pushNotifications-B7Ga8Zyf.mjs';
 import './contentLogMetadata-BlWI0egu.mjs';
-import './reconnectGate-COxAZTv8.mjs';
+import './reconnectGate-DO_ZQmJE.mjs';
 import 'node:events';
 import 'socket.io-client';
 import './limits-DIo7rEBR.mjs';
-import './time-qd46L189.mjs';
-import './registerCommonHandlers-Cfl_dEWs.mjs';
+import './time-BQWf06hA.mjs';
+import './registerCommonHandlers-BEpK4WD2.mjs';
 import 'util';
 import 'cross-spawn';
 import '@paralleldrive/cuid2';
 import 'chalk';
 import 'node:module';
 import 'tweetnacl';
-import './browser-BAlw0rns.mjs';
+import './browser-Dx3UOVPP.mjs';
 import 'open';
 import './specialCommands-MXUN0wfI.mjs';
 import './ids-DU6sLx4C.mjs';
 import 'url';
-import './localHappyAgentAuth-DeDQjw24.mjs';
-import './claudeAccountEnv-CI8RlIB9.mjs';
+import './localHappyAgentAuth-BUX4E1ug.mjs';
+import './claudeAccountEnv-DowsOlDB.mjs';
 import 'node:readline';
 import 'node-pty';
 import './processTreeSnapshot-fuwxC0fr.mjs';
@@ -3893,8 +3894,9 @@ function createUpdateController(deps) {
     outcome = { state, version, detail, at: now(), ...manualVersion ? { source: "manual" } : {} };
     deps.publish(snapshot());
   }
+  const superseded = () => !!deps.owned && !deps.owned();
   async function evaluate() {
-    if (!policy || running) return;
+    if (!policy || running || superseded()) return;
     const target = manualVersion ?? policy.autoUpdateVersion ?? null;
     if (outcome?.version === target && ["failed", "installed", "manual_required"].includes(outcome.state)) {
       const fingerprint = JSON.stringify([policy.checkedAt, outcome.state, outcome.version, outcome.detail, manualVersion, autoUpdateEnabled]);
@@ -3986,19 +3988,23 @@ function createUpdateController(deps) {
     }
   }
   async function refresh() {
-    if (operation || blocked) return;
+    if (superseded()) return "superseded";
+    if (blocked) return "blocked";
+    if (operation) return "busy";
     operation = "refresh";
     try {
       const next = await deps.policy();
-      if (!next) return;
+      if (!next) return "unavailable";
       if (manualVersion && !validManualTarget(next, manualVersion)) manualVersion = null;
       policy = next;
       await evaluate();
+      return policyStale() ? "stale" : "ok";
     } finally {
       operation = null;
     }
   }
   async function retry(version) {
+    if (superseded()) return { error: "daemon_superseded" };
     if (operation || blocked) return { error: blocked ? "manual_recovery_required" : "update_in_progress" };
     if (typeof version !== "string" || outcome?.state !== "failed" || outcome.version !== version) {
       return { error: "no_matching_failed_update" };
@@ -4023,6 +4029,7 @@ function createUpdateController(deps) {
     }
   }
   async function request(version) {
+    if (superseded()) return { error: "daemon_superseded" };
     if (operation || blocked) return { error: blocked ? "manual_recovery_required" : "update_in_progress" };
     operation = "request";
     try {
@@ -4066,7 +4073,8 @@ function createUpdateController(deps) {
     handoverHold = { reason, at: now() };
     publish("failed", manualVersion ?? policy?.autoUpdateVersion ?? null, "handover_preflight_failed");
   }
-  return { refresh, retry, request, tick, withHandover, holdHandover, isRunning: () => running, currentTarget: () => policy?.autoUpdateVersion ?? null };
+  const policyStale = () => !policy || now() - policy.checkedAt > 65 * 6e4;
+  return { refresh, retry, request, tick, withHandover, holdHandover, policyStale, isRunning: () => running, currentTarget: () => policy?.autoUpdateVersion ?? null };
 }
 
 const defaults = {
@@ -4275,6 +4283,132 @@ function createPolicyAnnouncementHandler(deps) {
   };
 }
 
+const POLICY_REFRESH_MIN_INTERVAL_MS = 5 * 6e4;
+const POLICY_REFRESH_RETRY_MS = 3e4;
+const POLICY_REFRESH_MAX_BACKOFF_MS = 30 * 6e4;
+const WAKE_GAP_SLACK_MS = 2 * 6e4;
+function createPolicyRefreshTrigger(deps) {
+  const now = deps.now ?? Date.now;
+  const minIntervalMs = deps.minIntervalMs ?? POLICY_REFRESH_MIN_INTERVAL_MS;
+  const retryMs = deps.retryMs ?? POLICY_REFRESH_RETRY_MS;
+  const maxBackoffMs = deps.maxBackoffMs ?? POLICY_REFRESH_MAX_BACKOFF_MS;
+  const setTimer = deps.setTimer ?? ((fn, ms) => {
+    const t = setTimeout(fn, ms);
+    t.unref?.();
+    return t;
+  });
+  const clearTimer = deps.clearTimer ?? ((handle) => clearTimeout(handle));
+  const log = (message, level) => deps.log?.(message, level);
+  let lastSuccessAt = null;
+  let lastAttemptAt = null;
+  let lastBypassAt = null;
+  let failures = 0;
+  let inFlight = false;
+  let timer = null;
+  let stopped = false;
+  const backoff = (n) => n <= 0 ? retryMs : Math.min(retryMs * 2 ** (n - 1), maxBackoffMs);
+  function earliestRun(reason) {
+    const windowEnd = lastSuccessAt === null ? 0 : lastSuccessAt + minIntervalMs;
+    const retryAt = lastAttemptAt === null ? 0 : lastAttemptAt + backoff(failures);
+    if (retryAt <= Math.max(windowEnd, now())) return { at: windowEnd, bypass: false };
+    const mayBypass = (reason === "connect" || reason === "wake") && (lastBypassAt === null || now() - lastBypassAt >= minIntervalMs);
+    return mayBypass ? { at: windowEnd, bypass: true } : { at: retryAt, bypass: false };
+  }
+  function defer(ms) {
+    if (timer !== null) return;
+    timer = setTimer(() => {
+      timer = null;
+      request("scheduled");
+    }, Math.max(0, ms));
+  }
+  function run(reason) {
+    inFlight = true;
+    lastAttemptAt = now();
+    log(`CLI update policy refresh (${reason})`, failures === 0 ? "warn" : "debug");
+    void deps.refresh().catch(() => "unavailable").then((result) => {
+      inFlight = false;
+      if (result === "superseded") {
+        stop();
+        return;
+      }
+      if (result === "ok") {
+        if (failures > 0) log(`CLI update policy refresh recovered after ${failures} failed attempt(s)`, "warn");
+        lastSuccessAt = now();
+        failures = 0;
+        return;
+      }
+      if (result === "busy") lastAttemptAt = now();
+      else {
+        if (result === "stale") lastSuccessAt = now();
+        failures += 1;
+        const stepUp = failures === 1 || backoff(failures) > backoff(failures - 1);
+        const next = result === "blocked" ? "waiting for the next connect / wake / hourly check" : `next try in ${Math.round(backoff(failures) / 1e3)}s`;
+        log(`CLI update policy refresh (${reason}) read no fresh policy (${result}, ${failures} in a row); ${next}`, stepUp ? "warn" : "debug");
+      }
+      if (stopped || result === "blocked") return;
+      defer(earliestRun("scheduled").at - now());
+    });
+  }
+  function request(reason) {
+    if (stopped) return "stopped";
+    if (inFlight) return "in-flight";
+    const { at, bypass } = earliestRun(reason);
+    const wait = at - now();
+    if (wait > 0) {
+      defer(wait);
+      return "deferred";
+    }
+    if (bypass) lastBypassAt = now();
+    if (timer !== null) {
+      clearTimer(timer);
+      timer = null;
+    }
+    run(reason);
+    return "run";
+  }
+  function stop() {
+    stopped = true;
+    if (timer !== null) clearTimer(timer);
+    timer = null;
+  }
+  return {
+    request,
+    /** Any other refresh (startup, hourly, announcement) that read a policy restarts the window (and a fresh one ends the backoff); one that found us superseded stops it. */
+    noteRefreshed(result) {
+      if (result === "ok" || result === "stale") lastSuccessAt = now();
+      if (result === "ok") failures = 0;
+      else if (result === "superseded") stop();
+    },
+    stop
+  };
+}
+function createWakeDetector(intervalMs, now = Date.now, slackMs = WAKE_GAP_SLACK_MS) {
+  let last = null;
+  return {
+    /** Call once per heartbeat; true when the process was just suspended. */
+    beat() {
+      const at = now();
+      const woke = last !== null && at - last > intervalMs + slackMs;
+      last = at;
+      return woke;
+    }
+  };
+}
+
+function createDaemonOwnership(deps) {
+  let superseded = false;
+  return {
+    owns() {
+      if (superseded) return false;
+      const ownerPid = deps.statePid();
+      if (ownerPid === null || ownerPid === deps.pid) return true;
+      superseded = true;
+      deps.onSuperseded(ownerPid);
+      return false;
+    }
+  };
+}
+
 const HARNESS_INSTALL_CATALOG = Object.freeze({
   claude: Object.freeze({ packages: [{ name: "@anthropic-ai/claude-code", spec: "latest" }], commands: ["claude"], minNode: "22.0.0", scripts: true }),
   codex: Object.freeze({ packages: [{ name: "@openai/codex", spec: "latest" }], commands: ["codex"], minNode: "16.0.0", scripts: false }),
@@ -7053,6 +7187,7 @@ function listIssueReceipts(home, now = Date.now()) {
 
 const ISSUE_POLL_MS = 5e3;
 const ISSUE_SPAWNED_BY = "issue";
+const ISSUE_SPAWN_UNKNOWN_GRACE_MS = 6e4;
 const FIRST_MESSAGE_KEY_WAIT_MS = 1e4;
 function issueKeyFromPrompt(prompt) {
   return /^You are assigned issue ([A-Z]+-\d{1,9}):/.exec(prompt)?.[1] ?? null;
@@ -7104,10 +7239,35 @@ function createIssueWorker(deps) {
     writeIssueReceipt(home, receipt);
     return receipt;
   };
-  async function fail(receipt, error, unknown = false) {
-    await client.fail(receipt.dispatchId, { machineId: deps.machineId, claimId: receipt.claimId, error: error.slice(0, 4e3), ...unknown ? { unknown: true } : {} });
-    save({ ...receipt, phase: unknown ? receipt.phase : "failed" });
-    deps.log(`Issue dispatch ${receipt.dispatchId} ${unknown ? "outcome unknown" : "failed"}`);
+  const now = deps.now ?? Date.now;
+  const unknownSpawns = /* @__PURE__ */ new Map();
+  async function fail(receipt, error) {
+    await client.fail(receipt.dispatchId, { machineId: deps.machineId, claimId: receipt.claimId, error: error.slice(0, 4e3) });
+    save({ ...receipt, phase: "failed" });
+    deps.log(`Issue dispatch ${receipt.dispatchId} failed`);
+  }
+  function holdUnknown(view, receipt, reason) {
+    const held = unknownSpawns.get(view.id);
+    unknownSpawns.set(view.id, { view, receipt, reason, deadline: held?.deadline ?? now() + ISSUE_SPAWN_UNKNOWN_GRACE_MS });
+    deps.log(`Issue dispatch ${view.id} spawn outcome unknown; re-checking`);
+  }
+  async function recheckUnknown() {
+    for (const [id, held] of [...unknownSpawns]) {
+      if (closed) return;
+      const matches = persistedRunSessions(held.view.runId);
+      try {
+        if (matches.length === 1) {
+          unknownSpawns.delete(id);
+          await afterSpawn(held.view, save({ ...held.receipt, sessionId: matches[0], phase: "spawned" }));
+        } else if (matches.length > 1 || now() >= held.deadline) {
+          unknownSpawns.delete(id);
+          await fail(held.receipt, matches.length > 1 ? `Spawn produced ${matches.length} sessions for this run; stop the extra ones and retry` : `Session did not start within ${Math.round(ISSUE_SPAWN_UNKNOWN_GRACE_MS / 1e3)} s (${held.reason}); check the machine before retrying`);
+        }
+      } catch (error) {
+        if (httpCode(error) === "issue_dispatch_claim_mismatch" || error instanceof IssuesUnsupportedError) unknownSpawns.delete(id);
+        deps.log(`Issue dispatch ${id} remains pending${error instanceof IssueRequestError && error.code ? ` (${error.code})` : ""}`);
+      }
+    }
   }
   async function complete(receipt) {
     let lastError;
@@ -7166,7 +7326,7 @@ function createIssueWorker(deps) {
         await fail({ ...receipt, phase: "claimed" }, accountUnavailableError(spawned.errorMessage, "issue") ?? spawned.errorMessage);
         return;
       }
-      if (spawned.type === "error" && spawned.startupExit?.exited) {
+      if (spawned.type === "error" && (spawned.startupExit?.exited || spawned.notStarted)) {
         await fail(receipt, `Session failed to start: ${spawned.errorMessage}`);
         return;
       }
@@ -7177,25 +7337,36 @@ function createIssueWorker(deps) {
       if (spawned.type !== "success") {
         const matches = persistedRunSessions(view.runId);
         if (matches.length !== 1) {
-          await fail(receipt, `Spawn outcome unknown: ${spawned.errorMessage}`, true);
+          holdUnknown(view, receipt, spawned.errorMessage);
           return;
         }
         receipt = save({ ...receipt, sessionId: matches[0], phase: "spawned" });
       } else {
         receipt = save({ ...receipt, sessionId: spawned.sessionId, phase: "spawned" });
       }
-      runBySession.set(receipt.sessionId, view.runId);
-      if (spawn.projectId && deps.joinProject) await deps.joinProject(receipt.sessionId, spawn.projectId).catch(() => void 0);
-    }
-    if (receipt.phase === "spawning") {
+    } else if (receipt.phase === "spawning") {
       const matches = persistedRunSessions(view.runId);
       if (matches.length !== 1) {
-        await fail(receipt, "Spawn outcome unknown; verify the old process before retrying", true);
+        holdUnknown(view, receipt, "the spawn was interrupted by a daemon restart");
         return;
       }
       receipt = save({ ...receipt, sessionId: matches[0], phase: "spawned" });
-      runBySession.set(receipt.sessionId, view.runId);
+    } else {
+      if (receipt.sessionId && !receipt.ended) runBySession.set(receipt.sessionId, view.runId);
+      await deliverAndComplete(view, receipt);
+      return;
     }
+    await afterSpawn(view, receipt);
+  }
+  async function afterSpawn(view, receipt) {
+    runBySession.set(receipt.sessionId, view.runId);
+    const projectId = view.spawn?.projectId;
+    if (projectId && deps.joinProject) await deps.joinProject(receipt.sessionId, projectId).catch(() => void 0);
+    await deliverAndComplete(view, receipt);
+  }
+  async function deliverAndComplete(view, receipt) {
+    const spawn = view.spawn;
+    const agent = spawn.agent;
     if (receipt.phase === "spawned") {
       const sessionId = receipt.sessionId;
       const mode = sanitizeSpawnPermissionMode(spawn.permissionMode ?? void 0);
@@ -7286,6 +7457,7 @@ function createIssueWorker(deps) {
     if (running || closed || Date.now() < retryAt) return;
     running = true;
     try {
+      await recheckUnknown();
       let dispatches;
       try {
         dispatches = (await client.poll(deps.machineId)).dispatches ?? [];
@@ -7767,7 +7939,8 @@ async function startDaemon() {
           logger.debug(`[DAEMON RUN] Directory creation failed: ${errorMessage}`);
           return {
             type: "error",
-            errorMessage
+            errorMessage,
+            notStarted: true
           };
         }
       }
@@ -7826,11 +7999,11 @@ async function startDaemon() {
             const requested = forkSpawnAccount(options.agentProfileId, options.parentSessionId, (id) => accountServiceRef.sessionAccount(id));
             spawnAccountId = accountServiceRef.resolveSpawnAccount(accountAgent, requested);
           } catch (error) {
-            return { type: "error", errorMessage: error instanceof Error ? error.message : String(error) };
+            return { type: "error", errorMessage: error instanceof Error ? error.message : String(error), notStarted: true };
           }
           if (spawnAccountId) extraEnv[SPAWN_ACCOUNT_ENV] = spawnAccountId;
         } else if (options.agentProfileId) {
-          return { type: "error", errorMessage: `agent-profile-unavailable:agent-mismatch: accounts are not supported for ${options.agent} yet` };
+          return { type: "error", errorMessage: `agent-profile-unavailable:agent-mismatch: accounts are not supported for ${options.agent} yet`, notStarted: true };
         }
         const claudeAuthStatus = claudeAuthServiceRef?.current()?.status;
         if ((options.agent ?? "claude") === "claude" && claudeAuthStatus && !spawnAccountId) {
@@ -7857,7 +8030,8 @@ async function startDaemon() {
           logger.warn(`[DAEMON RUN] ${errorMessage}`);
           return {
             type: "error",
-            errorMessage
+            errorMessage,
+            notStarted: true
           };
         }
         let tmuxSessionName = extraEnv.TMUX_SESSION_NAME;
@@ -7878,7 +8052,8 @@ async function startDaemon() {
           if (!isSpawnAgent(agent)) {
             return {
               type: "error",
-              errorMessage: `Unsupported agent type: '${options.agent}'. Please update your CLI to the latest version.`
+              errorMessage: `Unsupported agent type: '${options.agent}'. Please update your CLI to the latest version.`,
+              notStarted: true
             };
           }
           const resumeId = agent === "claude" ? options.resumeClaudeSessionId : agent === "codex" ? options.resumeCodexThreadId : void 0;
@@ -7964,7 +8139,8 @@ async function startDaemon() {
             default:
               return {
                 type: "error",
-                errorMessage: `Unsupported agent type: '${options.agent}'. Please update your CLI to the latest version.`
+                errorMessage: `Unsupported agent type: '${options.agent}'. Please update your CLI to the latest version.`,
+                notStarted: true
               };
           }
           const args = [
@@ -8034,7 +8210,8 @@ async function startDaemon() {
         logger.debug("[DAEMON RUN] Failed to spawn process - no PID returned");
         return Promise.resolve({
           type: "error",
-          errorMessage: "Failed to spawn Happy process - no PID returned"
+          errorMessage: "Failed to spawn Happy process - no PID returned",
+          notStarted: true
         });
       }
       timer?.mark("spawned");
@@ -8260,7 +8437,9 @@ async function startDaemon() {
             HAPPY_RECONNECT_SEQ: String(tracked.encryption.seq),
             HAPPY_RECONNECT_METADATA_VERSION: String(tracked.encryption.metadataVersion),
             HAPPY_RECONNECT_AGENT_STATE_VERSION: String(tracked.encryption.agentStateVersion),
-            ...teamEnv
+            ...teamEnv,
+            // B-874c: an issue run's binding rides every relaunch (digest, MCP context).
+            ...issueRelaunchEnv(metadata)
           }
         });
         if (result.type === "success") {
@@ -8402,6 +8581,8 @@ async function startDaemon() {
             HAPPY_RECONNECT_METADATA_VERSION: String(tracked.encryption.metadataVersion),
             HAPPY_RECONNECT_AGENT_STATE_VERSION: String(tracked.encryption.agentStateVersion),
             ...teamEnv,
+            // B-874c: see resumeSessionImpl.
+            ...issueRelaunchEnv(metadata),
             ...options?.auto ? { [AUTO_RESTARTED_ENV]: encodeAutoRestarted(options.auto.kind, options.auto.target) } : {}
           }
         });
@@ -8850,6 +9031,14 @@ async function startDaemon() {
         host: initialMachineMetadata.host
       })).then(() => logger.debug(`[DAEMON RUN] claimed the machine record for host ${initialMachineMetadata.host}`)).catch((error) => logger.debug("[DAEMON RUN] could not refresh the recorded host:", error));
     }
+    const daemonOwnership = createDaemonOwnership({
+      pid: process.pid,
+      statePid: readDaemonStatePidSync,
+      onSuperseded: (ownerPid) => {
+        logger.debug(`[DAEMON RUN] Somehow a different daemon (pid ${ownerPid}) was started without killing us. We should kill ourselves.`);
+        requestShutdown("exception", "A different daemon was started without killing us. We should kill ourselves.");
+      }
+    });
     let lastUpdateLog = "";
     let harnessInstaller = null;
     let handoverInFlight = false;
@@ -8872,7 +9061,9 @@ async function startDaemon() {
       installFenced: () => !!harnessInstaller?.isRunning(),
       busyGraceMs: resolveBusyInstallGrace(process.env.HAPPY_CLI_UPDATE_BUSY_GRACE_MS),
       lastInstall: lastInstallStore(configuration.happyHomeDir),
+      owned: daemonOwnership.owns,
       publish: (state) => {
+        if (!daemonOwnership.owns()) return;
         cliUpdateStateRef = state;
         fileState = { ...fileState, cliUpdate: state };
         writeDaemonState(fileState);
@@ -8909,10 +9100,17 @@ async function startDaemon() {
         relayMoveInFlight = null;
       });
     });
-    const refreshCliUpdate = () => updateController.refresh().catch((error) => {
+    const policyRefresh = createPolicyRefreshTrigger({
+      refresh: () => updateController.refresh(),
+      log: (message, level) => level === "warn" ? logger.warn(`[DAEMON RUN] ${message}`) : logger.debug(`[DAEMON RUN] ${message}`)
+    });
+    const refreshCliUpdate = () => updateController.refresh().then(policyRefresh.noteRefreshed).catch((error) => {
       logger.debug("[DAEMON RUN] CLI update policy check failed:", error);
     });
-    void refreshCliUpdate();
+    apiMachine.setControlConnectedHandler(() => {
+      policyRefresh.request("connect");
+    });
+    policyRefresh.request("startup");
     const cliUpdateIntervalMs = resolveCliUpdateCheckInterval(process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL);
     if (process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL && cliUpdateIntervalMs === DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS && process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL.trim() !== String(DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS)) {
       logger.warn(`[DAEMON RUN] Ignoring invalid HAPPY_CLI_UPDATE_CHECK_INTERVAL; using ${DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS}ms`);
@@ -8949,6 +9147,7 @@ async function startDaemon() {
     });
     apiMachine.setHarnessInstallHandler((params) => harnessInstaller.request(params));
     const heartbeatIntervalMs = parseInt(process.env.HAPPY_DAEMON_HEARTBEAT_INTERVAL || "60000");
+    const wakeDetector = createWakeDetector(heartbeatIntervalMs);
     const restartOnStaleVersionAndHeartbeat = setInterval(serialTask(async () => {
       try {
         if (process.env.DEBUG) {
@@ -8960,6 +9159,7 @@ async function startDaemon() {
             onChildExited(pid);
           }
         }
+        if (!daemonOwnership.owns()) return;
         await updateController.tick();
         await updateController.withHandover(async () => {
           handoverInFlight = true;
@@ -8996,6 +9196,7 @@ async function startDaemon() {
               clearInterval(restartOnStaleVersionAndHeartbeat);
               clearInterval(cliUpdateInterval);
               policyAnnouncements.stop();
+              policyRefresh.stop();
               stopAgentVersionChecks();
               claudeAuthService.stop();
               stopAccountWatch();
@@ -9023,12 +9224,9 @@ async function startDaemon() {
             handoverInFlight = false;
           }
         });
-        const daemonState = await readDaemonState();
-        if (daemonState && daemonState.pid !== process.pid) {
-          logger.debug("[DAEMON RUN] Somehow a different daemon was started without killing us. We should kill ourselves.");
-          requestShutdown("exception", "A different daemon was started without killing us. We should kill ourselves.");
-          return;
-        }
+        if (!daemonOwnership.owns()) return;
+        const woke = wakeDetector.beat();
+        if (woke || updateController.policyStale()) policyRefresh.request(woke ? "wake" : "stale");
         try {
           fileState = withDaemonHeartbeat(fileState, (/* @__PURE__ */ new Date()).toLocaleString());
           writeDaemonState(fileState);
@@ -9140,6 +9338,7 @@ async function startDaemon() {
       clearInterval(cliUpdateInterval);
       clearInterval(autoRestartSweep);
       policyAnnouncements.stop();
+      policyRefresh.stop();
       stopAgentVersionChecks();
       await apiMachine.updateDaemonState((state) => ({
         ...state,