[eshurakov]

Summary

• Keep warm direct-credential reattachment, but omit preparation events and attach preparation metadata when the session is already attached to the same wrapper.
• Preserve cold-start/rebuild preparation, credential refresh ordering, runtime fences, and visible delivery failures.
• Cover Cloudflare and Vercel warm refresh, pending/completed visibility, snapshot replay, and failed refresh without prompt delivery.

Control-plane flow only. Existing saved preparation rows are unchanged.

Verification

• Red/green: all three regression cases failed on unwanted preparation broadcasts before the fix.
• pnpm --filter cloud-agent-next test src/sandbox-session/session-message-queue.test.ts src/sandbox-session/control-plane-preparing.test.ts src/sandbox-session/control-dispatch.test.ts src/session/preparation-progress.test.ts src/session/preparation-history.test.ts — 246 passed.
• pnpm -C services/cloud-agent-next/wrapper exec bun test ./src/control/apply-attach.test.ts — 52 passed.
• pnpm --filter cloud-agent-next typecheck — passed for service and wrapper.
• pnpm --filter cloud-agent-next lint and explicit regression-test lint — passed.
• Changed-file formatting and git diff --check — passed.

No live-provider, Workers integration, or browser E2E run.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• services/cloud-agent-next/src/sandbox-session/SandboxSession.ts
• services/cloud-agent-next/src/sandbox-session/session-message-queue.test.ts

---

_{Reviewed by grok-4.6 · Input: 67.2K · Output: 11.8K · Cached: 597.2K}

_{Review guidance: REVIEW.md from base branch main}