very-happy-cli 0.2.201 → 0.2.202

package/dist/{run-mHeOSOEt.mjs → run-D59Gb4SQ.mjs}

@@ -1,6 +1,6 @@
-import { i as isClaudeSessionId, h as extractCompleteLines, j as decideBackfill, k as parseTerminalHookPayload, m as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, n as mirrorLineKey, o as mirrorLocalId, q as initializeOwnedWorktree, f as summarizeSpawnSessionForLog, t as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, u as currentWorktreeService } from './mirrorProtocol-dRyartIG.mjs';
+import { i as isClaudeSessionId, h as extractCompleteLines, j as decideBackfill, k as parseTerminalHookPayload, m as decideMirrorBinding, M as MIRROR_BACKFILL_LINES_DEFAULT, n as mirrorLineKey, o as mirrorLocalId, q as initializeOwnedWorktree, f as summarizeSpawnSessionForLog, t as startAgentVersionChecks, W as WORKTREE_CAPABILITY_VERSION, u as currentWorktreeService } from './mirrorProtocol-5aFYsCCe.mjs';
 import { F as FS_MKDIR_CAPABILITY_VERSION } from './fsMkdir-DumgLTzR.mjs';
-import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-Cfc-F-FJ.mjs';
+import { P as PI_ADAPTER_INSTALL_HINT, s as sanitizeSpawnModel } from './piRunnerArgs-CygWrAwY.mjs';
 import fs from 'fs/promises';
 import os from 'os';
 import * as tmp from 'tmp';
@@ -8,19 +8,19 @@ import axios from 'axios';
 import { a as issueRelaunchEnv } from './sessionMetadata-C1eoAi89.mjs';
 import { readFileSync, openSync, fsyncSync, closeSync, renameSync, existsSync, readdirSync, statSync, unlinkSync, readSync, writeSync, ftruncateSync, utimesSync, realpathSync, promises, constants as constants$1, writeFileSync, mkdirSync, accessSync, rmdirSync } from 'node:fs';
 import { join, isAbsolute, resolve, dirname, sep, basename, relative } from 'node:path';
-import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-DhEqAYzz.mjs';
-import { T as TurnActivityTracker, A as ApiClient } from './api-1CD4oRSW.mjs';
+import { f as ensurePrivateDirectorySync, w as writePrivateFileSync, c as configuration } from './configuration-CQaLZMa-.mjs';
+import { T as TurnActivityTracker, A as ApiClient } from './api-Cu1OFHDM.mjs';
 import { S as SPAWN_AGENTS, i as isSpawnAgent, s as sanitizeSpawnPermissionMode, r as resolveSpawnPermissionMode, a as resolveFirstMessageMeta, j as joinProject } from './spawnAgents-BclZYkov.mjs';
-import { l as logger } from './logger-CFrzcRHD.mjs';
-import { p as pruneStaleCompileCaches } from './index-C_Y9426m.mjs';
-import { a as authAndSetupMachineIfNeeded } from './auth-WCd2S1zA.mjs';
+import { l as logger } from './logger-BEVIGYKL.mjs';
+import { p as pruneStaleCompileCaches } from './index-BcYJJV-f.mjs';
+import { a as authAndSetupMachineIfNeeded } from './auth-CgdE-j7z.mjs';
 import { spawn, execSync } from 'child_process';
-import { p as packageJson } from './package-DxE8PttX.mjs';
-import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-BanQ3jQg.mjs';
-import { s as spawnHappyCLI } from './spawnHappyCLI-D6OcgFDR.mjs';
-import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, s as reportSignature, t as decideDaemonHibernation, v as nextCheckDelay, x as persistSession, d as readDaemonState, y as acquireDaemonLock, a as resolveCheckMs, z as resolveIdleMs, A as deletePersistedSessions, B as writeDaemonState, C as writeSettings, D as settingIdleMs, u as updateSettings, E as rewriteCredentialsForRelay, g as readCredentials, F as releaseDaemonLock } from './persistence-CF7oV1oH.mjs';
-import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, w as cleanupDaemonState } from './controlClient-PaIiDxM6.mjs';
-import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, n as lineageOf, g as waitForSessionKey, d as archiveSession, h as analyzeLatestTurn, i as readSessionLog, j as TURN_WINDOW, p as userPromptText } from './sessionOps-BmhqmPPd.mjs';
+import { p as packageJson } from './package-aOUtHYRZ.mjs';
+import { a as globalPrefixForPackage, N as NPM_SAFE_ARG, g as getEnvironmentInfo } from './doctor-Wu0yZ80l.mjs';
+import { s as spawnHappyCLI } from './spawnHappyCLI-BckHSjR0.mjs';
+import { c as readPersistedSessions, r as readSettings, l as latchKeepAwake, s as reportSignature, t as decideDaemonHibernation, v as nextCheckDelay, x as persistSession, d as readDaemonState, y as acquireDaemonLock, a as resolveCheckMs, z as resolveIdleMs, A as deletePersistedSessions, B as writeDaemonState, C as writeSettings, D as settingIdleMs, u as updateSettings, E as readDaemonStatePidSync, F as rewriteCredentialsForRelay, g as readCredentials, G as releaseDaemonLock } from './persistence-EuUaQKL7.mjs';
+import { i as isDaemonRunningCurrentlyInstalledHappyVersion, s as stopDaemon, w as cleanupDaemonState } from './controlClient-Cqhd8ynk.mjs';
+import { e as sendUserMessage, f as readSessionMetadata, r as readSessionTranscript, l as listAccountSessions, a as listSessions, M as MAX_READ_LIMIT, s as sessionWebUrl, n as lineageOf, g as waitForSessionKey, d as archiveSession, h as analyzeLatestTurn, i as readSessionLog, j as TURN_WINDOW, p as userPromptText } from './sessionOps-CV5RUpwG.mjs';
 import { a2 as AgentProfilesStateSchema, an as ServerMigrateNoticeSchema, ao as isHarnessInstallId, ap as agentProfileUnavailableReason, aq as MODEL_INTENT_CONFIG, q as AUTOMATION_SUMMARY_MAX_CHARS, ar as AUTOMATION_PRECHECK_OUTPUT_MAX_CHARS, as as AUTOMATION_PRECHECK_DEFAULT_TIMEOUT_MS, d as AUTOMATION_PRECHECK_MAX_TIMEOUT_MS, at as AUTOMATION_CLAIM_MAX_RUNS, au as AUTOMATION_DAEMON_CAPABILITY_PRECHECK, av as AUTOMATION_DEFAULT_LEASE_MS, i as isAutomationRunTerminal, D as resolveLaunchAgentProfile, aw as ISSUE_SENT_FROM, ax as ISSUE_DISPATCH_LOCAL_ID_PREFIX, f as ISSUE_ASSIGNABLE_AGENTS, ay as HARNESS_INSTALL_CAPABILITY_VERSION } from './index-CiRMvS73.mjs';
 import fastify from 'fastify';
 import { z } from 'zod';
@@ -29,37 +29,37 @@ import { d as decodeBase64, s as sameRelay, e as encodeBase64, h as decrypt } fr
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'node:crypto';
 import { c as checkPreviewPath } from './previewPath-CXN4Vag0.mjs';
 import { a as BACKGROUND_TASKS_MAX, d as BACKGROUND_TASK_DESCRIPTION_MAX, e as BackgroundTaskTracker } from './backgroundTaskActivity-8PdPxrvy.mjs';
-import { b as sanitizeRateLimitReport } from './rateLimitWindows-DdUMUEoy.mjs';
-import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-BiFpxXdf.mjs';
+import { b as sanitizeRateLimitReport } from './rateLimitWindows-hv2zLYid.mjs';
+import { f as formatEditConflictNotice, b as SESSION_PEER_SENT_FROM, s as sendPeerMessage, l as listPeerSessions, C as CLI_PEER_SENDER_ID } from './peerTools-BkRgJomj.mjs';
 import os$1, { hostname, homedir, tmpdir } from 'node:os';
-import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-Dj2rV8Az.mjs';
-import { assistantHome, bootstrapAssistantHome } from './bootstrap-D_1MskAl.mjs';
-import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-HJFzeG0B.mjs';
+import { c as RemoteCallBudget, e as REMOTE_WRITE_CALLS_PER_MINUTE, d as deliverToSession, g as guardRemoteSessionOpsRequest, h as remoteError, i as REMOTE_OP_DEADLINE_MS, j as formatRemoteAuditLine, k as REMOTE_SEND_COMMIT_DEADLINE_MS, m as REMOTE_RESUME_WAIT_MS, n as capRemoteTranscript, o as capRemoteText, p as REMOTE_ANSWER_MAX_BYTES, q as REMOTE_TITLE_MAX_BYTES } from './remoteSessionClient-CzjLyL9c.mjs';
+import { assistantHome, bootstrapAssistantHome } from './bootstrap-BTYJf2w8.mjs';
+import { refreshAgentHomes, locateClaudeConversation, agentHomeSpawnEnv } from './index-fNsf-8K-.mjs';
 import require$$0, { existsSync as existsSync$1, statSync as statSync$1, mkdtempSync, rmSync } from 'fs';
 import require$$1, { join as join$1 } from 'path';
 import { spawn as spawn$1, execFile, spawnSync } from 'node:child_process';
 import { p as projectPath } from './projectPath-BTBIMB57.mjs';
 import { d as daemonEndpointsMatch, r as resolveClaudeCredentialReadiness } from './doctorReadiness-C208SMN9.mjs';
-import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-DiStbYik.mjs';
+import { o as ownerRetryPending, c as consumeOwnerRetry, s as spawnGate, a as afterStartupFailure, b as startupFailureMessage, T as TEAM_SPAWN_MAX_ATTEMPTS, d as TEAM_CLEANUP_RETRY_MS, g as getInitialMachineMetadata, e as getStartupCliAvailability, f as TEAM_RETRY_CAPABILITY_VERSION, w as withRunningCliFacts } from './machineMetadata-BQdp_ihk.mjs';
 import { M as ModelConfigError, B as BackupStore, r as readConfigFile, s as sha256, a as atomicWriteFile } from './fileStore-5qpetZS0.mjs';
 import { c as collectSecretValues, a as parseJsonObject, b as childObject, s as setOrDelete, d as changedPaths, e as stringifyLike, f as fail, n as normalizeModelList, g as normalizeModelId, h as normalizeSecret, i as normalizeBaseUrl, u as uniq, j as baseUrlWarnings, m as maskSecret, k as getPath$1, l as normalizeProviderId, o as piAdapter, r as redactText } from './pi-CqyoZMjI.mjs';
 import { p as parse } from './codexAccount-CieIQLOX.mjs';
 import require$$3 from 'crypto';
 import { c as commandOnPath } from './detectCLI-CSGMlV51.mjs';
-import { buildResumeLaunch } from './handleResumeCommand-BRV-9h0o.mjs';
+import { buildResumeLaunch } from './handleResumeCommand-DrJdhjLD.mjs';
 import { n as normalizeWebPanels } from './webPanels-B2_C2-3g.mjs';
 import { access, symlink, readFile, rm, unlink, readlink, lstat, constants, rename, mkdir, copyFile, readdir, stat, open } from 'node:fs/promises';
 import { p as parseExactVersion, c as compareExactVersions, f as fetchCliUpdateState, r as resolveCliUpdateCheckInterval, D as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS } from './cliUpdate-Y34VGe9Y.mjs';
-import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-BgInTvr6.mjs';
-import { d as wrapperReportsIdle, f as decideAutoRestart, s as statusFromVerdict, g as autoRestartNextCheck, h as wrapperStaleness, r as recordAttempt, i as AUTO_RESTART_MAX_ATTEMPTS, j as AUTO_RESTART_MIN_GAP_MS, p as processIdentityFields, k as readSessionLock, l as AUTO_RESTARTED_ENV, n as encodeAutoRestarted, o as pendingUpgradeVersion, q as resolveQuietMs, u as AUTO_RESTART_RECHECK_CAP_MS } from './sessionLock-Dj9_lShU.mjs';
-import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-4YWjreN3.mjs';
+import { P as ProjectsUnsupportedError, c as createProjectsClient } from './client-DfT_CRwl.mjs';
+import { d as wrapperReportsIdle, f as decideAutoRestart, s as statusFromVerdict, g as autoRestartNextCheck, h as wrapperStaleness, r as recordAttempt, i as AUTO_RESTART_MAX_ATTEMPTS, j as AUTO_RESTART_MIN_GAP_MS, p as processIdentityFields, k as readSessionLock, l as AUTO_RESTARTED_ENV, n as encodeAutoRestarted, o as pendingUpgradeVersion, q as resolveQuietMs, u as AUTO_RESTART_RECHECK_CAP_MS } from './sessionLock-CVjlaRSL.mjs';
+import { c as createAutomationsClient, i as isAutomationsUnavailable, d as AutomationsRequestError } from './client-D0oBXuEe.mjs';
 import { w as withKeychainOffPath, a as keychainIdentityFor, i as interpretSecurityRead, s as securityReadArgs, b as securityDeleteArgs, c as keychainOffShimDir, d as interpretCredentialsFile, C as CREDENTIALS_REJECTED_DETAIL, e as buildClaudeAuthState, f as claudeAuthStateChanged, r as resolveSdkClaudeBinary, g as classifyAuthStatus, h as diagnoseStores, p as parseLaunchctlPid, H as HAPPY_DAEMON_LAUNCHD_LABEL, j as classifyLineage, l as probeLaunchdJob, m as detectDaemonSupervisor, n as daemonLineage, o as probeSystemdKillMode, q as wrappersSurviveHandover, t as handoverWaitsForSessions } from './daemonSupervisor-BxohggqN.mjs';
 import { A as AccountService } from './accountService-DEpIq6CF.mjs';
 import { spawnSetupTokenPty, watchAccountFiles } from './daemonAccounts-D5shoCLt.mjs';
 import { g as getProjectPath } from './path-D2wdaNSk.mjs';
 import { b as extractClaudeEditPaths } from './editPaths-BVfS_FFL.mjs';
-import { s as startFileWatcher } from './startFileWatcher-BiWGhlGW.mjs';
-import { I as InvalidateSync } from './sync-CcBrziWp.mjs';
+import { s as startFileWatcher } from './startFileWatcher-BXiBlfVr.mjs';
+import { I as InvalidateSync } from './sync-BfM5OKSS.mjs';
 import { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import { t as tmuxArgs, a as scrubTmuxClientEnv, s as shellescape } from './tmuxSocket-BmZyixRM.mjs';
 import { i as isProcessAlive, t as terminateProcessTree } from './processTermination-ChJG5SLW.mjs';
@@ -67,30 +67,30 @@ import { findAllHappyProcesses } from './doctor-GN5mPOn5.mjs';
 import { T as TEAM_SKILL, a as TEAM_LEAD_PLAYBOOK, b as TEAM_MEMBER_RULES } from './resources-CLP_MpK4.mjs';
 import { promisify } from 'node:util';
 import { b as clipText, r as renderAction, c as clipAutomationReport, e as renderTemplate } from './template-CtRLg2PG.mjs';
-import { I as IssuesUnsupportedError, a as IssueRequestError, c as createIssuesClient } from './client-CMUlpYcy.mjs';
+import { I as IssuesUnsupportedError, a as IssueRequestError, c as createIssuesClient } from './client-Cj7D61by.mjs';
 import { d as describeAgentHome } from './loginShellEnv-Dw8M7tkI.mjs';
 import { S as SPAWN_ACCOUNT_ENV } from './store-DWmjM4Ex.mjs';
-import './acpSessionResume-urFpnGsk.mjs';
-import './pushNotifications-CxX10K6n.mjs';
+import './acpSessionResume-BKjQRT4V.mjs';
+import './pushNotifications-B7Ga8Zyf.mjs';
 import './contentLogMetadata-BlWI0egu.mjs';
-import './reconnectGate-uTLj82tS.mjs';
+import './reconnectGate-DO_ZQmJE.mjs';
 import 'node:events';
 import 'socket.io-client';
 import './limits-DIo7rEBR.mjs';
-import './time-DJF2csbV.mjs';
-import './registerCommonHandlers-BYrmi-A4.mjs';
+import './time-BQWf06hA.mjs';
+import './registerCommonHandlers-BEpK4WD2.mjs';
 import 'util';
 import 'cross-spawn';
 import '@paralleldrive/cuid2';
 import 'chalk';
 import 'node:module';
 import 'tweetnacl';
-import './browser-DL3QIQLS.mjs';
+import './browser-Dx3UOVPP.mjs';
 import 'open';
 import './specialCommands-MXUN0wfI.mjs';
 import './ids-DU6sLx4C.mjs';
 import 'url';
-import './localHappyAgentAuth-kg2RFvOy.mjs';
+import './localHappyAgentAuth-BUX4E1ug.mjs';
 import './claudeAccountEnv-DowsOlDB.mjs';
 import 'node:readline';
 import 'node-pty';
@@ -3894,8 +3894,9 @@ function createUpdateController(deps) {
     outcome = { state, version, detail, at: now(), ...manualVersion ? { source: "manual" } : {} };
     deps.publish(snapshot());
   }
+  const superseded = () => !!deps.owned && !deps.owned();
   async function evaluate() {
-    if (!policy || running) return;
+    if (!policy || running || superseded()) return;
     const target = manualVersion ?? policy.autoUpdateVersion ?? null;
     if (outcome?.version === target && ["failed", "installed", "manual_required"].includes(outcome.state)) {
       const fingerprint = JSON.stringify([policy.checkedAt, outcome.state, outcome.version, outcome.detail, manualVersion, autoUpdateEnabled]);
@@ -3987,19 +3988,23 @@ function createUpdateController(deps) {
     }
   }
   async function refresh() {
-    if (operation || blocked) return;
+    if (superseded()) return "superseded";
+    if (blocked) return "blocked";
+    if (operation) return "busy";
     operation = "refresh";
     try {
       const next = await deps.policy();
-      if (!next) return;
+      if (!next) return "unavailable";
       if (manualVersion && !validManualTarget(next, manualVersion)) manualVersion = null;
       policy = next;
       await evaluate();
+      return policyStale() ? "stale" : "ok";
     } finally {
       operation = null;
     }
   }
   async function retry(version) {
+    if (superseded()) return { error: "daemon_superseded" };
     if (operation || blocked) return { error: blocked ? "manual_recovery_required" : "update_in_progress" };
     if (typeof version !== "string" || outcome?.state !== "failed" || outcome.version !== version) {
       return { error: "no_matching_failed_update" };
@@ -4024,6 +4029,7 @@ function createUpdateController(deps) {
     }
   }
   async function request(version) {
+    if (superseded()) return { error: "daemon_superseded" };
     if (operation || blocked) return { error: blocked ? "manual_recovery_required" : "update_in_progress" };
     operation = "request";
     try {
@@ -4067,7 +4073,8 @@ function createUpdateController(deps) {
     handoverHold = { reason, at: now() };
     publish("failed", manualVersion ?? policy?.autoUpdateVersion ?? null, "handover_preflight_failed");
   }
-  return { refresh, retry, request, tick, withHandover, holdHandover, isRunning: () => running, currentTarget: () => policy?.autoUpdateVersion ?? null };
+  const policyStale = () => !policy || now() - policy.checkedAt > 65 * 6e4;
+  return { refresh, retry, request, tick, withHandover, holdHandover, policyStale, isRunning: () => running, currentTarget: () => policy?.autoUpdateVersion ?? null };
 }
 
 const defaults = {
@@ -4276,6 +4283,132 @@ function createPolicyAnnouncementHandler(deps) {
   };
 }
 
+const POLICY_REFRESH_MIN_INTERVAL_MS = 5 * 6e4;
+const POLICY_REFRESH_RETRY_MS = 3e4;
+const POLICY_REFRESH_MAX_BACKOFF_MS = 30 * 6e4;
+const WAKE_GAP_SLACK_MS = 2 * 6e4;
+function createPolicyRefreshTrigger(deps) {
+  const now = deps.now ?? Date.now;
+  const minIntervalMs = deps.minIntervalMs ?? POLICY_REFRESH_MIN_INTERVAL_MS;
+  const retryMs = deps.retryMs ?? POLICY_REFRESH_RETRY_MS;
+  const maxBackoffMs = deps.maxBackoffMs ?? POLICY_REFRESH_MAX_BACKOFF_MS;
+  const setTimer = deps.setTimer ?? ((fn, ms) => {
+    const t = setTimeout(fn, ms);
+    t.unref?.();
+    return t;
+  });
+  const clearTimer = deps.clearTimer ?? ((handle) => clearTimeout(handle));
+  const log = (message, level) => deps.log?.(message, level);
+  let lastSuccessAt = null;
+  let lastAttemptAt = null;
+  let lastBypassAt = null;
+  let failures = 0;
+  let inFlight = false;
+  let timer = null;
+  let stopped = false;
+  const backoff = (n) => n <= 0 ? retryMs : Math.min(retryMs * 2 ** (n - 1), maxBackoffMs);
+  function earliestRun(reason) {
+    const windowEnd = lastSuccessAt === null ? 0 : lastSuccessAt + minIntervalMs;
+    const retryAt = lastAttemptAt === null ? 0 : lastAttemptAt + backoff(failures);
+    if (retryAt <= Math.max(windowEnd, now())) return { at: windowEnd, bypass: false };
+    const mayBypass = (reason === "connect" || reason === "wake") && (lastBypassAt === null || now() - lastBypassAt >= minIntervalMs);
+    return mayBypass ? { at: windowEnd, bypass: true } : { at: retryAt, bypass: false };
+  }
+  function defer(ms) {
+    if (timer !== null) return;
+    timer = setTimer(() => {
+      timer = null;
+      request("scheduled");
+    }, Math.max(0, ms));
+  }
+  function run(reason) {
+    inFlight = true;
+    lastAttemptAt = now();
+    log(`CLI update policy refresh (${reason})`, failures === 0 ? "warn" : "debug");
+    void deps.refresh().catch(() => "unavailable").then((result) => {
+      inFlight = false;
+      if (result === "superseded") {
+        stop();
+        return;
+      }
+      if (result === "ok") {
+        if (failures > 0) log(`CLI update policy refresh recovered after ${failures} failed attempt(s)`, "warn");
+        lastSuccessAt = now();
+        failures = 0;
+        return;
+      }
+      if (result === "busy") lastAttemptAt = now();
+      else {
+        if (result === "stale") lastSuccessAt = now();
+        failures += 1;
+        const stepUp = failures === 1 || backoff(failures) > backoff(failures - 1);
+        const next = result === "blocked" ? "waiting for the next connect / wake / hourly check" : `next try in ${Math.round(backoff(failures) / 1e3)}s`;
+        log(`CLI update policy refresh (${reason}) read no fresh policy (${result}, ${failures} in a row); ${next}`, stepUp ? "warn" : "debug");
+      }
+      if (stopped || result === "blocked") return;
+      defer(earliestRun("scheduled").at - now());
+    });
+  }
+  function request(reason) {
+    if (stopped) return "stopped";
+    if (inFlight) return "in-flight";
+    const { at, bypass } = earliestRun(reason);
+    const wait = at - now();
+    if (wait > 0) {
+      defer(wait);
+      return "deferred";
+    }
+    if (bypass) lastBypassAt = now();
+    if (timer !== null) {
+      clearTimer(timer);
+      timer = null;
+    }
+    run(reason);
+    return "run";
+  }
+  function stop() {
+    stopped = true;
+    if (timer !== null) clearTimer(timer);
+    timer = null;
+  }
+  return {
+    request,
+    /** Any other refresh (startup, hourly, announcement) that read a policy restarts the window (and a fresh one ends the backoff); one that found us superseded stops it. */
+    noteRefreshed(result) {
+      if (result === "ok" || result === "stale") lastSuccessAt = now();
+      if (result === "ok") failures = 0;
+      else if (result === "superseded") stop();
+    },
+    stop
+  };
+}
+function createWakeDetector(intervalMs, now = Date.now, slackMs = WAKE_GAP_SLACK_MS) {
+  let last = null;
+  return {
+    /** Call once per heartbeat; true when the process was just suspended. */
+    beat() {
+      const at = now();
+      const woke = last !== null && at - last > intervalMs + slackMs;
+      last = at;
+      return woke;
+    }
+  };
+}
+
+function createDaemonOwnership(deps) {
+  let superseded = false;
+  return {
+    owns() {
+      if (superseded) return false;
+      const ownerPid = deps.statePid();
+      if (ownerPid === null || ownerPid === deps.pid) return true;
+      superseded = true;
+      deps.onSuperseded(ownerPid);
+      return false;
+    }
+  };
+}
+
 const HARNESS_INSTALL_CATALOG = Object.freeze({
   claude: Object.freeze({ packages: [{ name: "@anthropic-ai/claude-code", spec: "latest" }], commands: ["claude"], minNode: "22.0.0", scripts: true }),
   codex: Object.freeze({ packages: [{ name: "@openai/codex", spec: "latest" }], commands: ["codex"], minNode: "16.0.0", scripts: false }),
@@ -8898,6 +9031,14 @@ async function startDaemon() {
         host: initialMachineMetadata.host
       })).then(() => logger.debug(`[DAEMON RUN] claimed the machine record for host ${initialMachineMetadata.host}`)).catch((error) => logger.debug("[DAEMON RUN] could not refresh the recorded host:", error));
     }
+    const daemonOwnership = createDaemonOwnership({
+      pid: process.pid,
+      statePid: readDaemonStatePidSync,
+      onSuperseded: (ownerPid) => {
+        logger.debug(`[DAEMON RUN] Somehow a different daemon (pid ${ownerPid}) was started without killing us. We should kill ourselves.`);
+        requestShutdown("exception", "A different daemon was started without killing us. We should kill ourselves.");
+      }
+    });
     let lastUpdateLog = "";
     let harnessInstaller = null;
     let handoverInFlight = false;
@@ -8920,7 +9061,9 @@ async function startDaemon() {
       installFenced: () => !!harnessInstaller?.isRunning(),
       busyGraceMs: resolveBusyInstallGrace(process.env.HAPPY_CLI_UPDATE_BUSY_GRACE_MS),
       lastInstall: lastInstallStore(configuration.happyHomeDir),
+      owned: daemonOwnership.owns,
       publish: (state) => {
+        if (!daemonOwnership.owns()) return;
         cliUpdateStateRef = state;
         fileState = { ...fileState, cliUpdate: state };
         writeDaemonState(fileState);
@@ -8957,10 +9100,17 @@ async function startDaemon() {
         relayMoveInFlight = null;
       });
     });
-    const refreshCliUpdate = () => updateController.refresh().catch((error) => {
+    const policyRefresh = createPolicyRefreshTrigger({
+      refresh: () => updateController.refresh(),
+      log: (message, level) => level === "warn" ? logger.warn(`[DAEMON RUN] ${message}`) : logger.debug(`[DAEMON RUN] ${message}`)
+    });
+    const refreshCliUpdate = () => updateController.refresh().then(policyRefresh.noteRefreshed).catch((error) => {
       logger.debug("[DAEMON RUN] CLI update policy check failed:", error);
     });
-    void refreshCliUpdate();
+    apiMachine.setControlConnectedHandler(() => {
+      policyRefresh.request("connect");
+    });
+    policyRefresh.request("startup");
     const cliUpdateIntervalMs = resolveCliUpdateCheckInterval(process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL);
     if (process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL && cliUpdateIntervalMs === DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS && process.env.HAPPY_CLI_UPDATE_CHECK_INTERVAL.trim() !== String(DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS)) {
       logger.warn(`[DAEMON RUN] Ignoring invalid HAPPY_CLI_UPDATE_CHECK_INTERVAL; using ${DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS}ms`);
@@ -8997,6 +9147,7 @@ async function startDaemon() {
     });
     apiMachine.setHarnessInstallHandler((params) => harnessInstaller.request(params));
     const heartbeatIntervalMs = parseInt(process.env.HAPPY_DAEMON_HEARTBEAT_INTERVAL || "60000");
+    const wakeDetector = createWakeDetector(heartbeatIntervalMs);
     const restartOnStaleVersionAndHeartbeat = setInterval(serialTask(async () => {
       try {
         if (process.env.DEBUG) {
@@ -9008,6 +9159,7 @@ async function startDaemon() {
             onChildExited(pid);
           }
         }
+        if (!daemonOwnership.owns()) return;
         await updateController.tick();
         await updateController.withHandover(async () => {
           handoverInFlight = true;
@@ -9044,6 +9196,7 @@ async function startDaemon() {
               clearInterval(restartOnStaleVersionAndHeartbeat);
               clearInterval(cliUpdateInterval);
               policyAnnouncements.stop();
+              policyRefresh.stop();
               stopAgentVersionChecks();
               claudeAuthService.stop();
               stopAccountWatch();
@@ -9071,12 +9224,9 @@ async function startDaemon() {
             handoverInFlight = false;
           }
         });
-        const daemonState = await readDaemonState();
-        if (daemonState && daemonState.pid !== process.pid) {
-          logger.debug("[DAEMON RUN] Somehow a different daemon was started without killing us. We should kill ourselves.");
-          requestShutdown("exception", "A different daemon was started without killing us. We should kill ourselves.");
-          return;
-        }
+        if (!daemonOwnership.owns()) return;
+        const woke = wakeDetector.beat();
+        if (woke || updateController.policyStale()) policyRefresh.request(woke ? "wake" : "stale");
         try {
           fileState = withDaemonHeartbeat(fileState, (/* @__PURE__ */ new Date()).toLocaleString());
           writeDaemonState(fileState);
@@ -9188,6 +9338,7 @@ async function startDaemon() {
       clearInterval(cliUpdateInterval);
       clearInterval(autoRestartSweep);
       policyAnnouncements.stop();
+      policyRefresh.stop();
       stopAgentVersionChecks();
       await apiMachine.updateDaemonState((state) => ({
         ...state,