very-happy-cli 0.2.205 → 0.2.207

package/dist/{index-BmacwzcK.cjs → index-DWtaNZd1.cjs}

@@ -1,99 +1,99 @@
 'use strict';
 
-var AcpBackend = require('./AcpBackend-Do37yiZg.cjs');
-var logger = require('./logger-DP35yx-C.cjs');
-var AcpSessionManager = require('./AcpSessionManager-BpQKu2_m.cjs');
+var AcpBackend = require('./AcpBackend-C4SaE4IN.cjs');
+var logger = require('./logger-HxTu5uFs.cjs');
+var AcpSessionManager = require('./AcpSessionManager-CKSM-N3a.cjs');
 var index = require('./index-BYL_X3gP.cjs');
-var deterministicJson = require('./deterministicJson-D34CnNHO.cjs');
+var deterministicJson = require('./deterministicJson-DGheByZm.cjs');
 var specialCommands = require('./specialCommands-J3JFOq0J.cjs');
 var heldInput = require('./heldInput-BOtqFO2r.cjs');
-var configuration = require('./configuration-Fx61b4MJ.cjs');
-var attachmentContent = require('./attachmentContent-B7zz_LPF.cjs');
-var piRuntime = require('./piRuntime-6UnkPaS1.cjs');
+var configuration = require('./configuration-B-smHMf7.cjs');
+var attachmentContent = require('./attachmentContent-DhTreh-W.cjs');
+var piRuntime = require('./piRuntime-mqdaYw91.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
-var api = require('./api-BnTF8fkj.cjs');
+var api = require('./api-eXuwG3LS.cjs');
 var sessionMetadata = require('./sessionMetadata-B44cL4Xj.cjs');
-var client = require('./client-BKjBr6pc.cjs');
-var registerKillSessionHandler = require('./registerKillSessionHandler-Bf_Q9yii.cjs');
-var persistence = require('./persistence-iiVFxhbt.cjs');
-var machineMetadata = require('./machineMetadata-CZj0XwM_.cjs');
-var createSessionMetadata = require('./createSessionMetadata-Ce539QXK.cjs');
-var setupOfflineReconnection = require('./setupOfflineReconnection-65k1yEFn.cjs');
-var startupSessionCreate = require('./startupSessionCreate-CHU23k6u.cjs');
-var controlClient = require('./controlClient-D04wXKoQ.cjs');
+var client = require('./client-N9svGBOP.cjs');
+var registerKillSessionHandler = require('./registerKillSessionHandler-ClPpvQnu.cjs');
+var persistence = require('./persistence-DxboRqwb.cjs');
+var machineMetadata = require('./machineMetadata-C7DEm41X.cjs');
+var createSessionMetadata = require('./createSessionMetadata-B1NbiqH5.cjs');
+var setupOfflineReconnection = require('./setupOfflineReconnection-DHBmg5_6.cjs');
+var startupSessionCreate = require('./startupSessionCreate-cInaqBEd.cjs');
+var controlClient = require('./controlClient-Dlm7wz-k.cjs');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
-var sessionLock = require('./sessionLock-WXtjQC9q.cjs');
-var acpSessionResume = require('./acpSessionResume-BCEol11N.cjs');
+var sessionLock = require('./sessionLock-CW-P7VU9.cjs');
+var acpSessionResume = require('./acpSessionResume-Cp2majJ5.cjs');
 var reconnectEnv = require('./reconnectEnv-B31lY4nR.cjs');
 var streamRelay = require('./streamRelay-keuifCPQ.cjs');
 var projectPath = require('./projectPath-C3ioB4Bu.cjs');
-var BasePermissionHandler = require('./BasePermissionHandler-CUXi-tq4.cjs');
-var titleGenerator = require('./titleGenerator-CMIUB04_.cjs');
+var BasePermissionHandler = require('./BasePermissionHandler-DffP0tjT.cjs');
+var titleGenerator = require('./titleGenerator-EGdbOCLR.cjs');
 var editPaths = require('./editPaths-Bqp4OFPw.cjs');
 var node_fs = require('node:fs');
 var os = require('node:os');
 require('node:child_process');
 require('@agentclientprotocol/sdk');
-require('./time-NSglRbyr.cjs');
+require('./time-i8fiLSHv.cjs');
 require('./contentLogMetadata-ZSFk_NjQ.cjs');
 require('./processTree-CMHWlVse.cjs');
-require('./package-BCJfNMlt.cjs');
+require('./package-ChmhpzsE.cjs');
 require('chalk');
 require('node:util');
 require('@paralleldrive/cuid2');
 require('zod');
 require('./prompt-Bof2aQkI.cjs');
-require('./client-wMlUPnrV.cjs');
-require('./exitNotice-M4UjtWkr.cjs');
-require('./reportProgressTool-D1XAxeY1.cjs');
-require('./client-DGsdLx8L.cjs');
+require('./client-CTsx4zlq.cjs');
+require('./exitNotice-CTcWpCmg.cjs');
+require('./reportProgressTool-B3yNkD_S.cjs');
+require('./client-BcUWsWK-.cjs');
 require('./precheckCompat-CWOi5c9L.cjs');
-require('./format-BEktLc45.cjs');
+require('./format-DoTTSy8C.cjs');
 require('./agentGuidance-BtBx2xxE.cjs');
 require('./trimIdent-4gvk9Wk6.cjs');
 require('./pi-DlsrPCTa.cjs');
 require('./fileStore-7qhnbs6N.cjs');
 require('node:fs/promises');
-require('./client-Bh-y6cVc.cjs');
-require('./context-D-QOcYuX.cjs');
-require('./sessionOps-BEVzE38e.cjs');
+require('./client-5SAqN0dw.cjs');
+require('./context-Dfj4Pjqz.cjs');
+require('./sessionOps-Cei-Q7OB.cjs');
 require('axios');
 require('socket.io-client');
 require('./backgroundTaskActivity-CBvUdj39.cjs');
 require('./resources-BZ_Be0qM.cjs');
-require('./tools-CLkNfafW.cjs');
-require('./peerTools-C6Y28jqG.cjs');
+require('./tools-DtSHBOmt.cjs');
+require('./peerTools-ZUDz2PCs.cjs');
 require('./ids-B6ZC0HGt.cjs');
-require('./remoteSessionClient-DX-60nto.cjs');
+require('./remoteSessionClient-e9jDdGyc.cjs');
 require('@modelcontextprotocol/sdk/server/mcp.js');
 require('node:http');
 require('@modelcontextprotocol/sdk/server/streamableHttp.js');
 require('./limits-C-a7gr04.cjs');
-require('./downloadTarget-TzXJEh6W.cjs');
+require('./downloadTarget-BpToCct7.cjs');
 require('./terminals-dK3Lrjfp.cjs');
 require('./terminalTitleSuggest-DhvRFX3H.cjs');
 require('./tmuxSocket-Dg11Olx0.cjs');
-require('./bootstrap-3ti7LXMz.cjs');
+require('./bootstrap-DPbGC_1B.cjs');
 require('./webPanels-FCgFKvVe.cjs');
-require('./pushNotifications-gcQv61e6.cjs');
+require('./pushNotifications-EJWZAYed.cjs');
 require('./previewPath-B0rBdhy1.cjs');
 require('crypto');
-require('./reconnectGate-BkSaZdIx.cjs');
+require('./reconnectGate-DY97bPDg.cjs');
 require('os');
 require('child_process');
 require('node:events');
-require('./registerCommonHandlers-B5p3ZZmp.cjs');
+require('./registerCommonHandlers-YsrcwRo3.cjs');
 require('util');
 require('fs/promises');
 require('path');
 require('cross-spawn');
-require('./sync-Dm6GaS8P.cjs');
+require('./sync-DS_emV3g.cjs');
 require('tweetnacl');
 require('./types-CRS-srZK.cjs');
 require('./detectCLI-BuYR_Qxe.cjs');
 require('fs');
-require('./localHappyAgentAuth-DQRWBUxQ.cjs');
+require('./localHappyAgentAuth-BpBQ_aFo.cjs');
 require('./fsMkdir-0K3yENml.cjs');
 require('./cliUpdate-DsKXPFYp.cjs');
 require('./processTermination-f17wxlMb.cjs');

package/dist/{index-CoW4RNEb.cjs → index-Du6DD3Re.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var _package = require('./package-BCJfNMlt.cjs');
+var _package = require('./package-ChmhpzsE.cjs');
 var module$1 = require('node:module');
 var node_fs = require('node:fs');
 var promises = require('node:fs/promises');
@@ -59,10 +59,10 @@ async function pruneStaleCompileCaches(happyHomeDir, cliVersion) {
 async function run(args) {
   enableCompileCacheIfPossible(_package.packageJson.version);
   if (isStandaloneVersionRequest(args) || isSelfCheckRequest(args)) {
-    const { selfCheckMain } = await Promise.resolve().then(function () { return require('./selfCheck-BpvUNBmv.cjs'); });
+    const { selfCheckMain } = await Promise.resolve().then(function () { return require('./selfCheck-08_EII_I.cjs'); });
     process.exit(await selfCheckMain({ verbose: isSelfCheckRequest(args) }));
   }
-  const { main } = await Promise.resolve().then(function () { return require('./main-l_nP9IQq.cjs'); });
+  const { main } = await Promise.resolve().then(function () { return require('./main-CW8xXpXM.cjs'); });
   await main();
 }
 void run(process.argv.slice(2));

package/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-require('./package-BCJfNMlt.cjs');
-require('./index-CoW4RNEb.cjs');
+require('./package-ChmhpzsE.cjs');
+require('./index-Du6DD3Re.cjs');
 require('node:module');
 require('node:fs');
 require('node:fs/promises');

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import './package-CMmhJwSf.mjs';
-import './index-CzBvl9py.mjs';
+import './package-Cp8RjVmm.mjs';
+import './index-BlUhrNAx.mjs';
 import 'node:module';
 import 'node:fs';
 import 'node:fs/promises';

package/dist/{install-B4OVUIw5.mjs → install-CwQRBYJL.mjs}

@@ -1,15 +1,15 @@
-import { l as logger } from './logger-BKAKIZdy.mjs';
+import { l as logger } from './logger-8f-WNgus.mjs';
 import { existsSync, writeFileSync, chmodSync } from 'fs';
 import { execSync } from 'child_process';
 import { t as trimIdent } from './trimIdent-BAjmv_TG.mjs';
 import os from 'os';
 import 'chalk';
 import 'node:util';
-import './configuration-H8q1sMwk.mjs';
+import './configuration-C4w7_yT9.mjs';
 import 'node:fs';
 import 'node:os';
 import 'node:path';
-import './package-CMmhJwSf.mjs';
+import './package-Cp8RjVmm.mjs';
 import 'node:fs/promises';
 
 const PLIST_LABEL = "com.happy-cli.daemon";

package/dist/{install-BQc4Hwuo.cjs → install-Sr04Bhi-.cjs}

@@ -1,17 +1,17 @@
 'use strict';
 
-var logger = require('./logger-DP35yx-C.cjs');
+var logger = require('./logger-HxTu5uFs.cjs');
 var require$$0 = require('fs');
 var child_process = require('child_process');
 var trimIdent = require('./trimIdent-4gvk9Wk6.cjs');
 var os = require('os');
 require('chalk');
 require('node:util');
-require('./configuration-Fx61b4MJ.cjs');
+require('./configuration-B-smHMf7.cjs');
 require('node:fs');
 require('node:os');
 require('node:path');
-require('./package-BCJfNMlt.cjs');
+require('./package-ChmhpzsE.cjs');
 require('node:fs/promises');
 
 const PLIST_LABEL = "com.happy-cli.daemon";

package/dist/{issue-h_BIrzLs.mjs → issue-D9rmZ2Im.mjs}

@@ -1,20 +1,20 @@
 import { randomUUID } from 'node:crypto';
 import { f as ISSUE_ASSIGNABLE_AGENTS, p as parseIssueRef, g as ISSUE_STATUSES, h as ISSUE_PRIORITIES } from './index-DWk-WTU-.mjs';
-import { c as configuration } from './configuration-H8q1sMwk.mjs';
-import { r as readSettings } from './persistence-dLgWDclq.mjs';
-import { r as readTeamScope, t as teamScopePath } from './context-CM1Xd_HO.mjs';
-import { s as sharedIssuesClient, i as importLegacyTodosOnce } from './client-m-K1b6Qa.mjs';
-import { d as describeIssueError, f as formatIssueLine, a as formatIssueDetail } from './format-BPAREVhi.mjs';
+import { c as configuration } from './configuration-C4w7_yT9.mjs';
+import { r as readSettings } from './persistence-D1E7jiV4.mjs';
+import { r as readTeamScope, t as teamScopePath } from './context-Cy2pdGOi.mjs';
+import { s as sharedIssuesClient, i as importLegacyTodosOnce } from './client-DTwpdW59.mjs';
+import { d as describeIssueError, f as formatIssueLine, a as formatIssueDetail } from './format-0c3qb7FE.mjs';
 import 'zod';
 import '@paralleldrive/cuid2';
 import 'node:fs';
 import 'node:os';
 import 'node:path';
-import './package-CMmhJwSf.mjs';
+import './package-Cp8RjVmm.mjs';
 import 'node:fs/promises';
 import './authRelay-DhQhkBvX.mjs';
 import 'tweetnacl';
-import './logger-BKAKIZdy.mjs';
+import './logger-8f-WNgus.mjs';
 import 'chalk';
 import 'node:util';
 

package/dist/{issue-WpLZYxUQ.cjs → issue-pnYFBO-F.cjs}

@@ -2,21 +2,21 @@
 
 var node_crypto = require('node:crypto');
 var index = require('./index-BYL_X3gP.cjs');
-var configuration = require('./configuration-Fx61b4MJ.cjs');
-var persistence = require('./persistence-iiVFxhbt.cjs');
-var context = require('./context-D-QOcYuX.cjs');
-var client = require('./client-wMlUPnrV.cjs');
-var format = require('./format-BEktLc45.cjs');
+var configuration = require('./configuration-B-smHMf7.cjs');
+var persistence = require('./persistence-DxboRqwb.cjs');
+var context = require('./context-Dfj4Pjqz.cjs');
+var client = require('./client-CTsx4zlq.cjs');
+var format = require('./format-DoTTSy8C.cjs');
 require('zod');
 require('@paralleldrive/cuid2');
 require('node:fs');
 require('node:os');
 require('node:path');
-require('./package-BCJfNMlt.cjs');
+require('./package-ChmhpzsE.cjs');
 require('node:fs/promises');
 require('./authRelay-Dy1qU9td.cjs');
 require('tweetnacl');
-require('./logger-DP35yx-C.cjs');
+require('./logger-HxTu5uFs.cjs');
 require('chalk');
 require('node:util');
 

package/dist/lib.cjs

@@ -1,17 +1,17 @@
 'use strict';
 
-var api = require('./api-BnTF8fkj.cjs');
-var logger = require('./logger-DP35yx-C.cjs');
-var configuration = require('./configuration-Fx61b4MJ.cjs');
+var api = require('./api-eXuwG3LS.cjs');
+var logger = require('./logger-HxTu5uFs.cjs');
+var configuration = require('./configuration-B-smHMf7.cjs');
 var types = require('./types-CRS-srZK.cjs');
 require('axios');
-require('./pushNotifications-gcQv61e6.cjs');
+require('./pushNotifications-EJWZAYed.cjs');
 require('node:crypto');
 require('zod');
 require('./index-BYL_X3gP.cjs');
 require('@paralleldrive/cuid2');
 require('./contentLogMetadata-ZSFk_NjQ.cjs');
-require('./reconnectGate-BkSaZdIx.cjs');
+require('./reconnectGate-DY97bPDg.cjs');
 require('./authRelay-Dy1qU9td.cjs');
 require('tweetnacl');
 require('os');
@@ -19,8 +19,8 @@ require('child_process');
 require('node:events');
 require('socket.io-client');
 require('./limits-C-a7gr04.cjs');
-require('./time-NSglRbyr.cjs');
-require('./registerCommonHandlers-B5p3ZZmp.cjs');
+require('./time-i8fiLSHv.cjs');
+require('./registerCommonHandlers-YsrcwRo3.cjs');
 require('util');
 require('fs/promises');
 require('crypto');
@@ -28,17 +28,17 @@ require('path');
 require('cross-spawn');
 require('./projectPath-C3ioB4Bu.cjs');
 require('url');
-require('./sync-Dm6GaS8P.cjs');
+require('./sync-DS_emV3g.cjs');
 require('./backgroundTaskActivity-CBvUdj39.cjs');
-require('./controlClient-D04wXKoQ.cjs');
-require('./persistence-iiVFxhbt.cjs');
+require('./controlClient-Dlm7wz-k.cjs');
+require('./persistence-DxboRqwb.cjs');
 require('node:fs/promises');
 require('node:fs');
 require('chalk');
 require('node:util');
 require('node:path');
 require('node:os');
-require('./package-BCJfNMlt.cjs');
+require('./package-ChmhpzsE.cjs');
 
 
 

package/dist/lib.d.cts

@@ -347,6 +347,15 @@ declare const ContextUsageSchema: z$1.ZodObject<{
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
 
+/**
+ * B-719 — the coding-agent CLIs a daemon may install or update when the owner
+ * clicks Install / Update. The Web and the relay only ever pass one of these
+ * ids; which npm packages and versions that means is hardcoded in the CLI
+ * (`happy-cli/src/harness/installCatalog.ts`), never sent over the wire.
+ */
+declare const HARNESS_INSTALL_IDS: readonly ["claude", "codex", "gemini", "pi"];
+type HarnessInstallId = (typeof HARNESS_INSTALL_IDS)[number];
+
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
 type ClaudeAuthDiagnosis = 'keychain-empty-item' | 'store-divergence' | 'no-credentials' | 'credentials-rejected' | 'sdk-binary-missing' | 'probe-timeout' | 'probe-crash';
@@ -803,6 +812,19 @@ declare const DaemonStateSchema: z$1.ZodObject<{
             retryAt: z$1.ZodOptional<z$1.ZodNumber>;
         }, z$1.core.$strip>>;
     }, z$1.core.$loose>>;
+    agentAutoUpdate: z$1.ZodOptional<z$1.ZodObject<{
+        enabled: z$1.ZodBoolean;
+        rpcAvailable: z$1.ZodBoolean;
+        detectedAt: z$1.ZodNumber;
+        status: z$1.ZodRecord<z$1.ZodString, z$1.ZodObject<{
+            harness: z$1.ZodString;
+            target: z$1.ZodString;
+            state: z$1.ZodString;
+            detail: z$1.ZodOptional<z$1.ZodString>;
+            attempts: z$1.ZodNumber;
+            at: z$1.ZodNumber;
+        }, z$1.core.$strip>>;
+    }, z$1.core.$loose>>;
     webPanels: z$1.ZodOptional<z$1.ZodObject<{
         panels: z$1.ZodArray<z$1.ZodObject<{
             id: z$1.ZodString;
@@ -1805,6 +1827,38 @@ interface AutoRestartSessionStatus {
     retryAt?: number;
 }
 
+/**
+ * B-894 — 「自动更新 agent」: with the owner's per-machine switch on (default
+ * OFF), the daemon updates an outdated Codex CLI through the same B-719
+ * harness installer the machine page's Update button uses.
+ *
+ * - Only when `daemonState.agentVersions` (fresh, this daemon) says
+ *   `update-available`, no Codex session has a turn in flight and no install /
+ *   CLI update is running. Idle Codex sessions are then moved onto the new
+ *   binary by the existing B-852 agent-version auto-restart.
+ * - Never an endless loop: at most MAX_ATTEMPTS installs per target version
+ *   (a refusal that is not transient counts), BACKOFF_MS between them, and
+ *   none after one succeeded (the version check still says outdated = the
+ *   new binary is not the one on PATH). The last outcome is published so the
+ *   Web shows a failure instead of silently retrying.
+ * - Attempts, backoff and the last outcome survive daemon restarts / handovers
+ *   (agentAutoUpdateStore, B-894c); they are per target, so a new release
+ *   starts from zero. An install cut off by the restart counts as a failure.
+ * - Claude is not here: Web/remote sessions run the SDK binary bundled with
+ *   the CLI, which moves with CLI releases.
+ */
+
+/** Published in `daemonState.agentAutoUpdate`; `rpcAvailable` + `detectedAt` = the capability (same rule as autoRestart). */
+interface AgentAutoUpdateStatus {
+    harness: HarnessInstallId;
+    target: string;
+    /** installing → installed | failed; gave-up = no more automatic attempts for this target. */
+    state: 'installing' | 'installed' | 'failed' | 'gave-up';
+    detail?: string;
+    attempts: number;
+    at: number;
+}
+
 /**
  * B-510: machine web panels — local web pages a person may need to look at
  * (noVNC, an agent-browser dashboard, Grafana, a dev server), declared ONLY in
@@ -2376,6 +2430,7 @@ type MachineRpcHandlers = {
     restartSession?: (sessionId: string, options?: {
         model?: string;
         permissionMode?: string;
+        ifIdle?: true;
     }) => Promise<SpawnSessionResult>;
     stopSession: (sessionId: string) => boolean;
     listTrackedSessionIds?: () => string[];
@@ -2409,6 +2464,7 @@ declare class ApiMachineClient {
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
     private autoRestart;
+    private agentAutoUpdate;
     /** B-510: last normalized `webPanels` (null = never set → field not written). */
     private webPanels;
     private webPanelsSignatureSent;
@@ -2511,6 +2567,15 @@ declare class ApiMachineClient {
     /** B-852: the scheduler's per-session status changed (already signature-deduped). */
     setAutoRestartSessions(sessions: Record<string, AutoRestartSessionStatus>): Promise<void>;
     private autoRestartState;
+    /**
+     * B-894: the machine page's「自动更新 agent」switch (`agent-auto-update-set`)
+     * and `daemonState.agentAutoUpdate` (capability + setting + last outcome).
+     * Call before connect().
+     */
+    setAgentAutoUpdateHandlers(initialEnabled: boolean, set: (enabled: boolean) => Promise<boolean>): void;
+    setAgentAutoUpdateStatus(status: Record<string, AgentAutoUpdateStatus>): Promise<void>;
+    private agentAutoUpdateState;
+    private publishAgentAutoUpdate;
     private publishAutoRestart;
     /** B-276 machine RPCs. Responses always carry `claudeAuth` so the web can refresh in place. */
     setClaudeAuthHandlers(handlers: {

package/dist/lib.d.mts

@@ -347,6 +347,15 @@ declare const ContextUsageSchema: z$1.ZodObject<{
 }, z$1.core.$strip>;
 type ContextUsage = z$1.infer<typeof ContextUsageSchema>;
 
+/**
+ * B-719 — the coding-agent CLIs a daemon may install or update when the owner
+ * clicks Install / Update. The Web and the relay only ever pass one of these
+ * ids; which npm packages and versions that means is hardcoded in the CLI
+ * (`happy-cli/src/harness/installCatalog.ts`), never sent over the wire.
+ */
+declare const HARNESS_INSTALL_IDS: readonly ["claude", "codex", "gemini", "pi"];
+type HarnessInstallId = (typeof HARNESS_INSTALL_IDS)[number];
+
 declare const CLAUDE_AUTH_PROBE_VERSION: 1;
 type ClaudeAuthStatus = 'ok' | 'not-logged-in' | 'unknown' | 'error' | 'claude-missing';
 type ClaudeAuthDiagnosis = 'keychain-empty-item' | 'store-divergence' | 'no-credentials' | 'credentials-rejected' | 'sdk-binary-missing' | 'probe-timeout' | 'probe-crash';
@@ -803,6 +812,19 @@ declare const DaemonStateSchema: z$1.ZodObject<{
             retryAt: z$1.ZodOptional<z$1.ZodNumber>;
         }, z$1.core.$strip>>;
     }, z$1.core.$loose>>;
+    agentAutoUpdate: z$1.ZodOptional<z$1.ZodObject<{
+        enabled: z$1.ZodBoolean;
+        rpcAvailable: z$1.ZodBoolean;
+        detectedAt: z$1.ZodNumber;
+        status: z$1.ZodRecord<z$1.ZodString, z$1.ZodObject<{
+            harness: z$1.ZodString;
+            target: z$1.ZodString;
+            state: z$1.ZodString;
+            detail: z$1.ZodOptional<z$1.ZodString>;
+            attempts: z$1.ZodNumber;
+            at: z$1.ZodNumber;
+        }, z$1.core.$strip>>;
+    }, z$1.core.$loose>>;
     webPanels: z$1.ZodOptional<z$1.ZodObject<{
         panels: z$1.ZodArray<z$1.ZodObject<{
             id: z$1.ZodString;
@@ -1805,6 +1827,38 @@ interface AutoRestartSessionStatus {
     retryAt?: number;
 }
 
+/**
+ * B-894 — 「自动更新 agent」: with the owner's per-machine switch on (default
+ * OFF), the daemon updates an outdated Codex CLI through the same B-719
+ * harness installer the machine page's Update button uses.
+ *
+ * - Only when `daemonState.agentVersions` (fresh, this daemon) says
+ *   `update-available`, no Codex session has a turn in flight and no install /
+ *   CLI update is running. Idle Codex sessions are then moved onto the new
+ *   binary by the existing B-852 agent-version auto-restart.
+ * - Never an endless loop: at most MAX_ATTEMPTS installs per target version
+ *   (a refusal that is not transient counts), BACKOFF_MS between them, and
+ *   none after one succeeded (the version check still says outdated = the
+ *   new binary is not the one on PATH). The last outcome is published so the
+ *   Web shows a failure instead of silently retrying.
+ * - Attempts, backoff and the last outcome survive daemon restarts / handovers
+ *   (agentAutoUpdateStore, B-894c); they are per target, so a new release
+ *   starts from zero. An install cut off by the restart counts as a failure.
+ * - Claude is not here: Web/remote sessions run the SDK binary bundled with
+ *   the CLI, which moves with CLI releases.
+ */
+
+/** Published in `daemonState.agentAutoUpdate`; `rpcAvailable` + `detectedAt` = the capability (same rule as autoRestart). */
+interface AgentAutoUpdateStatus {
+    harness: HarnessInstallId;
+    target: string;
+    /** installing → installed | failed; gave-up = no more automatic attempts for this target. */
+    state: 'installing' | 'installed' | 'failed' | 'gave-up';
+    detail?: string;
+    attempts: number;
+    at: number;
+}
+
 /**
  * B-510: machine web panels — local web pages a person may need to look at
  * (noVNC, an agent-browser dashboard, Grafana, a dev server), declared ONLY in
@@ -2376,6 +2430,7 @@ type MachineRpcHandlers = {
     restartSession?: (sessionId: string, options?: {
         model?: string;
         permissionMode?: string;
+        ifIdle?: true;
     }) => Promise<SpawnSessionResult>;
     stopSession: (sessionId: string) => boolean;
     listTrackedSessionIds?: () => string[];
@@ -2409,6 +2464,7 @@ declare class ApiMachineClient {
     private agentHibernationIdleMs;
     /** B-852: auto-restart setting + per-session status (null until the daemon installs it). */
     private autoRestart;
+    private agentAutoUpdate;
     /** B-510: last normalized `webPanels` (null = never set → field not written). */
     private webPanels;
     private webPanelsSignatureSent;
@@ -2511,6 +2567,15 @@ declare class ApiMachineClient {
     /** B-852: the scheduler's per-session status changed (already signature-deduped). */
     setAutoRestartSessions(sessions: Record<string, AutoRestartSessionStatus>): Promise<void>;
     private autoRestartState;
+    /**
+     * B-894: the machine page's「自动更新 agent」switch (`agent-auto-update-set`)
+     * and `daemonState.agentAutoUpdate` (capability + setting + last outcome).
+     * Call before connect().
+     */
+    setAgentAutoUpdateHandlers(initialEnabled: boolean, set: (enabled: boolean) => Promise<boolean>): void;
+    setAgentAutoUpdateStatus(status: Record<string, AgentAutoUpdateStatus>): Promise<void>;
+    private agentAutoUpdateState;
+    private publishAgentAutoUpdate;
     private publishAutoRestart;
     /** B-276 machine RPCs. Responses always carry `claudeAuth` so the web can refresh in place. */
     setClaudeAuthHandlers(handlers: {

package/dist/lib.mjs

@@ -1,15 +1,15 @@
-export { A as ApiClient, a as ApiSessionClient } from './api-20GbdpxY.mjs';
-export { l as logger } from './logger-BKAKIZdy.mjs';
-export { c as configuration } from './configuration-H8q1sMwk.mjs';
+export { A as ApiClient, a as ApiSessionClient } from './api-D7EAwOT2.mjs';
+export { l as logger } from './logger-8f-WNgus.mjs';
+export { c as configuration } from './configuration-C4w7_yT9.mjs';
 export { R as RawJSONLinesSchema } from './types-CkqAACXx.mjs';
 import 'axios';
-import './pushNotifications-DD9Z0CoN.mjs';
+import './pushNotifications-WgO2p0eT.mjs';
 import 'node:crypto';
 import 'zod';
 import './index-DWk-WTU-.mjs';
 import '@paralleldrive/cuid2';
 import './contentLogMetadata-BlWI0egu.mjs';
-import './reconnectGate-m81ySKhh.mjs';
+import './reconnectGate-B9iXSyiI.mjs';
 import './authRelay-DhQhkBvX.mjs';
 import 'tweetnacl';
 import 'os';
@@ -17,8 +17,8 @@ import 'child_process';
 import 'node:events';
 import 'socket.io-client';
 import './limits-DIo7rEBR.mjs';
-import './time-Cn0mV-di.mjs';
-import './registerCommonHandlers-CqLHkmG2.mjs';
+import './time-o_AW-82H.mjs';
+import './registerCommonHandlers-YbBzC20u.mjs';
 import 'util';
 import 'fs/promises';
 import 'crypto';
@@ -26,14 +26,14 @@ import 'path';
 import 'cross-spawn';
 import './projectPath-BTBIMB57.mjs';
 import 'url';
-import './sync-Co0wRhGu.mjs';
+import './sync-DzKT0Ova.mjs';
 import './backgroundTaskActivity-8PdPxrvy.mjs';
-import './controlClient-D9DYqW02.mjs';
-import './persistence-dLgWDclq.mjs';
+import './controlClient-CtBRHlbJ.mjs';
+import './persistence-D1E7jiV4.mjs';
 import 'node:fs/promises';
 import 'node:fs';
 import 'chalk';
 import 'node:util';
 import 'node:path';
 import 'node:os';
-import './package-CMmhJwSf.mjs';
+import './package-Cp8RjVmm.mjs';

package/dist/{localHappyAgentAuth-DgLh3xzW.mjs → localHappyAgentAuth-Bc3bo0fI.mjs}

@@ -4,7 +4,7 @@ import { join } from 'node:path';
 import tweetnacl from 'tweetnacl';
 import { z } from 'zod';
 import { c as credentialRelayProblem, d as decodeBase64 } from './authRelay-DhQhkBvX.mjs';
-import { c as configuration } from './configuration-H8q1sMwk.mjs';
+import { c as configuration } from './configuration-C4w7_yT9.mjs';
 
 const AgentCredentialsSchema = z.object({
   token: z.string().min(1),

package/dist/{localHappyAgentAuth-DQRWBUxQ.cjs → localHappyAgentAuth-BpBQ_aFo.cjs}

@@ -6,7 +6,7 @@ var path = require('node:path');
 var tweetnacl = require('tweetnacl');
 var z = require('zod');
 var authRelay = require('./authRelay-Dy1qU9td.cjs');
-var configuration = require('./configuration-Fx61b4MJ.cjs');
+var configuration = require('./configuration-B-smHMf7.cjs');
 
 const AgentCredentialsSchema = z.z.object({
   token: z.z.string().min(1),

package/dist/{logger-BKAKIZdy.mjs → logger-8f-WNgus.mjs}

@@ -1,6 +1,6 @@
 import chalk from 'chalk';
 import { inspect } from 'node:util';
-import { d as appendPrivateFileSync, c as configuration } from './configuration-H8q1sMwk.mjs';
+import { d as appendPrivateFileSync, c as configuration } from './configuration-C4w7_yT9.mjs';
 import { existsSync, readdirSync, statSync } from 'node:fs';
 import { join, basename } from 'node:path';
 
@@ -250,7 +250,7 @@ async function listDaemonLogFiles(limit = 50) {
       return { file, path: fullPath, modified: stats.mtime };
     }).sort((a, b) => b.modified.getTime() - a.modified.getTime());
     try {
-      const { readDaemonState } = await import('./persistence-dLgWDclq.mjs').then(function (n) { return n.I; });
+      const { readDaemonState } = await import('./persistence-D1E7jiV4.mjs').then(function (n) { return n.I; });
       const state = await readDaemonState();
       if (!state) {
         return logs;