@4pm/cli 0.6.0 → 0.8.0

package/dist/index.js

@@ -1353,7 +1353,7 @@ var require_react_development = __commonJS({
           var dispatcher = resolveDispatcher();
           return dispatcher.useReducer(reducer, initialArg, init);
         }
-        function useRef(initialValue) {
+        function useRef2(initialValue) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useRef(initialValue);
         }
@@ -1369,7 +1369,7 @@ var require_react_development = __commonJS({
           var dispatcher = resolveDispatcher();
           return dispatcher.useLayoutEffect(create2, deps);
         }
-        function useCallback(callback, deps) {
+        function useCallback2(callback, deps) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useCallback(callback, deps);
         }
@@ -1995,14 +1995,14 @@ var require_react_development = __commonJS({
               var thenableResult = result;
               var wasAwaited = false;
               var thenable = {
-                then: function(resolve6, reject) {
+                then: function(resolve7, reject) {
                   wasAwaited = true;
                   thenableResult.then(function(returnValue2) {
                     popActScope(prevActScopeDepth);
                     if (actScopeDepth === 0) {
-                      recursivelyFlushAsyncActWork(returnValue2, resolve6, reject);
+                      recursivelyFlushAsyncActWork(returnValue2, resolve7, reject);
                     } else {
-                      resolve6(returnValue2);
+                      resolve7(returnValue2);
                     }
                   }, function(error2) {
                     popActScope(prevActScopeDepth);
@@ -2032,20 +2032,20 @@ var require_react_development = __commonJS({
                   ReactCurrentActQueue.current = null;
                 }
                 var _thenable = {
-                  then: function(resolve6, reject) {
+                  then: function(resolve7, reject) {
                     if (ReactCurrentActQueue.current === null) {
                       ReactCurrentActQueue.current = [];
-                      recursivelyFlushAsyncActWork(returnValue, resolve6, reject);
+                      recursivelyFlushAsyncActWork(returnValue, resolve7, reject);
                     } else {
-                      resolve6(returnValue);
+                      resolve7(returnValue);
                     }
                   }
                 };
                 return _thenable;
               } else {
                 var _thenable2 = {
-                  then: function(resolve6, reject) {
-                    resolve6(returnValue);
+                  then: function(resolve7, reject) {
+                    resolve7(returnValue);
                   }
                 };
                 return _thenable2;
@@ -2061,7 +2061,7 @@ var require_react_development = __commonJS({
             actScopeDepth = prevActScopeDepth;
           }
         }
-        function recursivelyFlushAsyncActWork(returnValue, resolve6, reject) {
+        function recursivelyFlushAsyncActWork(returnValue, resolve7, reject) {
           {
             var queue = ReactCurrentActQueue.current;
             if (queue !== null) {
@@ -2070,16 +2070,16 @@ var require_react_development = __commonJS({
                 enqueueTask(function() {
                   if (queue.length === 0) {
                     ReactCurrentActQueue.current = null;
-                    resolve6(returnValue);
+                    resolve7(returnValue);
                   } else {
-                    recursivelyFlushAsyncActWork(returnValue, resolve6, reject);
+                    recursivelyFlushAsyncActWork(returnValue, resolve7, reject);
                   }
                 });
               } catch (error2) {
                 reject(error2);
               }
             } else {
-              resolve6(returnValue);
+              resolve7(returnValue);
             }
           }
         }
@@ -2136,7 +2136,7 @@ var require_react_development = __commonJS({
         exports.memo = memo;
         exports.startTransition = startTransition;
         exports.unstable_act = act;
-        exports.useCallback = useCallback;
+        exports.useCallback = useCallback2;
         exports.useContext = useContext7;
         exports.useDebugValue = useDebugValue;
         exports.useDeferredValue = useDeferredValue;
@@ -2147,7 +2147,7 @@ var require_react_development = __commonJS({
         exports.useLayoutEffect = useLayoutEffect2;
         exports.useMemo = useMemo4;
         exports.useReducer = useReducer;
-        exports.useRef = useRef;
+        exports.useRef = useRef2;
         exports.useState = useState6;
         exports.useSyncExternalStore = useSyncExternalStore;
         exports.useTransition = useTransition;
@@ -24469,6 +24469,28 @@ function profileDir(name) {
   mkdirSync(dir2, { recursive: true });
   return dir2;
 }
+function defaultProfileConfig() {
+  return {
+    aiCli: "claude",
+    // Lists so failover across profiles is discoverable (ADR-0057) — add more objects.
+    // `args` are the full per-CLI defaults (claude stream-json for metering — ADR-0072).
+    // `model` = the CLI's `--model` flag; default "sonnet" — the balanced mid-price tier
+    // (cheaper than opus, more capable than haiku). "" ⇒ the CLI's own default model.
+    claudeHome: [
+      { profile: ".claude", args: ["-p", "--output-format", "stream-json", "--verbose"], model: "sonnet" }
+    ],
+    codexHome: [{ profile: ".codex", args: ["exec"], model: "" }],
+    antigravityHome: [],
+    autoUpdate: true,
+    commandHistoryUploadMinutes: 10,
+    autoClearIdleMinutes: 10
+  };
+}
+function ensureProfileConfig(dir2) {
+  if (existsSync(join(dir2, "config.json"))) return false;
+  writeProfileConfig(dir2, defaultProfileConfig());
+  return true;
+}
 function readProfileConfig(dir2) {
   const path = join(dir2, "config.json");
   if (!existsSync(path)) return {};
@@ -24483,6 +24505,10 @@ function writeProfileConfig(dir2, patch) {
   writeFileSync(join(dir2, "config.json"), JSON.stringify(merged, null, 2), "utf8");
   return merged;
 }
+function overwriteProfileConfig(dir2, config) {
+  writeFileSync(join(dir2, "config.json"), JSON.stringify(config, null, 2), "utf8");
+  return config;
+}
 function deleteProfileConfigKey(dir2, key) {
   const config = readProfileConfig(dir2);
   delete config[key];
@@ -24638,15 +24664,17 @@ async function runLink(serverUrl, explicitProfile) {
   );
   const profileName = explicitProfile ?? sanitizeProfileName(username);
   const existed = readCredential(profileDir(profileName), profileName) != null;
-  writeCredential(profileDir(profileName), {
+  const dir2 = profileDir(profileName);
+  writeCredential(dir2, {
     serverUrl,
     hashcode3,
     scope,
     // decided by the server from the pairing user (ADR-0010); shown in the TUI
     pairedAt: (/* @__PURE__ */ new Date()).toISOString()
   });
+  ensureProfileConfig(dir2);
   if (projectName && scope === "project") {
-    const folder = join3(profileDir(profileName), projectName);
+    const folder = join3(dir2, projectName);
     mkdirSync2(folder, { recursive: true });
     console.log(`\u2714 Created physic project folder: ${folder}`);
   }
@@ -24663,8 +24691,8 @@ async function runLink(serverUrl, explicitProfile) {
 }
 
 // src/commands/start.ts
-import { spawn as spawn4 } from "child_process";
-import { join as join17 } from "path";
+import { spawn as spawn5 } from "child_process";
+import { join as join19 } from "path";
 
 // src/core/update.ts
 import { execSync as execSync2 } from "child_process";
@@ -24835,7 +24863,7 @@ async function checkAndUpdate(serverUrl, autoUpdate) {
 
 // src/core/ws-client.ts
 import { randomUUID } from "crypto";
-import { basename as basename3, join as join13 } from "path";
+import { basename as basename3, join as join15 } from "path";
 
 // ../../22-packages/11-shared/51-utils/src/helpers.ts
 function backoffJitterMs(attempt, baseMs = 500, maxMs = 1e4) {
@@ -24938,6 +24966,12 @@ var PermissionCode = {
   PROJECT_AI_ASSIST: "project.ai_assist",
   PROJECT_MEMO_READ: "project.memo_read",
   PROJECT_MEMO_WRITE: "project.memo_write",
+  // Git tab (ADR-0151): read git (branches/graph/log/status/diff) via command dispatch;
+  // write = commit/push/pull/checkout/merge/PR + fs.write (machine-0027)
+  PROJECT_GIT: "project.git",
+  PROJECT_GIT_WRITE: "project.git_write",
+  // Autonomous mode (ADR-0152): settings/start-pause/VERIFY-approve/post-USER_TODO
+  PROJECT_AUTONOMOUS: "project.autonomous",
   // permission
   PERMISSION_LIST: "permission.list",
   PERMISSION_READ: "permission.read",
@@ -24963,6 +24997,9 @@ var PermissionCode = {
   // billing
   BILLING_READ: "billing.read",
   BILLING_MANAGE: "billing.manage",
+  // org template files (ADR-0113) — ADMIN + PM manage the org's template library
+  TEMPLATE_READ: "template.read",
+  TEMPLATE_WRITE: "template.write",
   // integration (community-server — ADR-0058; served by @4pm/community)
   INTEGRATION_READ: "integration.read",
   INTEGRATION_CONNECT: "integration.connect",
@@ -25006,6 +25043,8 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.USER_INVITE,
     P.QUOTA_READ,
     P.QUOTA_MANAGE,
+    P.TEMPLATE_READ,
+    P.TEMPLATE_WRITE,
     P.TEAM_LIST,
     P.TEAM_CREATE,
     P.TEAM_READ,
@@ -25032,6 +25071,9 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_AI_ASSIST,
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
+    P.PROJECT_GIT,
+    P.PROJECT_GIT_WRITE,
+    P.PROJECT_AUTONOMOUS,
     P.PERMISSION_LIST,
     P.PERMISSION_READ,
     P.MACHINE_PAIR,
@@ -25056,6 +25098,7 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_READ,
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
+    P.PROJECT_GIT,
     P.INTEGRATION_READ
   ],
   [Role.QA]: [
@@ -25066,6 +25109,7 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_READ,
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
+    P.PROJECT_GIT,
     P.INTEGRATION_READ
   ],
   [Role.BA]: [
@@ -25076,6 +25120,7 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_READ,
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
+    P.PROJECT_GIT,
     P.INTEGRATION_READ
   ],
   [Role.MACHINE]: [
@@ -25083,6 +25128,11 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_READ,
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
+    // git read + write so the autonomous merge cycle (auto-cycle.md) can run (ADR-0151)
+    P.PROJECT_GIT,
+    P.PROJECT_GIT_WRITE,
+    // autonomous mode control on its own physic project (ADR-0152)
+    P.PROJECT_AUTONOMOUS,
     // view one's own worker/cli + configure the physic project
     P.MACHINE_LIST,
     P.MACHINE_PHYSIC_MANAGE,
@@ -25110,7 +25160,10 @@ var PROJECT_SCOPE_CHECKED_CODES = [
   P.PROJECT_PAUSE,
   P.PROJECT_CLOSE,
   P.PROJECT_PAUSE_MEMBER,
-  P.PROJECT_AI_ASSIST
+  P.PROJECT_AI_ASSIST,
+  P.PROJECT_GIT,
+  P.PROJECT_GIT_WRITE,
+  P.PROJECT_AUTONOMOUS
 ];
 var SELF_SERVICE_CODES = [
   P.AUTH_LOGOUT,
@@ -25150,6 +25203,9 @@ var TEAM_GRANTABLE_CODES = [
   P.PROJECT_AI_ASSIST,
   P.PROJECT_MEMO_READ,
   P.PROJECT_MEMO_WRITE,
+  P.PROJECT_GIT,
+  P.PROJECT_GIT_WRITE,
+  P.PROJECT_AUTONOMOUS,
   P.COMMAND_EXECUTE,
   P.COMMAND_READ,
   P.MACHINE_LIST,
@@ -25171,6 +25227,9 @@ var PROJECT_GRANTABLE_CODES = [
   P.PROJECT_AI_ASSIST,
   P.PROJECT_MEMO_READ,
   P.PROJECT_MEMO_WRITE,
+  P.PROJECT_GIT,
+  P.PROJECT_GIT_WRITE,
+  P.PROJECT_AUTONOMOUS,
   P.COMMAND_EXECUTE,
   P.COMMAND_READ,
   P.MACHINE_PHYSIC_MANAGE
@@ -29351,16 +29410,30 @@ var resetPasswordRequestSchema = external_exports.object({
 
 // ../../22-packages/11-shared/31-dto/src/org.ts
 var CLI_SETTINGS_BOUNDS = {
-  reconnectMaxBackoffSec: { min: 5, max: 600 },
+  reconnectMaxBackoffSec: { min: 5, max: 60 },
   autoUpdateHour: { min: 0, max: 23 }
 };
+var orgAliasSchema = external_exports.string().regex(/^([a-z0-9-]{3,40})?$/, "alias must be 3\u201340 chars of a\u2013z, 0\u20139, -");
 var updateOrgRequestSchema = external_exports.object({
   name: external_exports.string().min(1).max(100).optional(),
+  // ADMIN-only login alias (ADR-0111); empty string clears it.
+  alias: orgAliasSchema.optional(),
   settings: external_exports.record(external_exports.unknown()).optional()
 });
 
 // ../../22-packages/11-shared/31-dto/src/user.ts
 var AVATAR_MAX_BYTES = 2 * 1024 * 1024;
+var USAGE_ALERT_METRICS = ["session5h", "weekly", "monthlyTokens"];
+var usageAlertRuleSchema = external_exports.object({
+  id: external_exports.string().min(1).max(64),
+  metric: external_exports.enum(USAGE_ALERT_METRICS),
+  threshold: external_exports.number().int().min(1),
+  email: external_exports.union([emailSchema, external_exports.literal("")]).optional(),
+  enabled: external_exports.boolean().default(true)
+});
+var userAlertsSchema = external_exports.object({
+  rules: external_exports.array(usageAlertRuleSchema).max(20).default([])
+});
 var rolesSchema = external_exports.array(external_exports.enum(ALL_ROLES)).min(1).refine((roles) => isValidRoleSet(roles), {
   message: "ADMIN/MACHINE cannot be combined with other roles"
 });
@@ -29382,7 +29455,11 @@ var updateUserRequestSchema = external_exports.object({
   email: emailSchema.optional(),
   phone: phoneSchema.nullable().optional(),
   roles: rolesSchema.optional(),
-  ipAllowlist: ipAllowlistSchema.optional()
+  ipAllowlist: ipAllowlistSchema.optional(),
+  // Usage-alert rules (ADR-0110) — manager-only, like the IP allowlist.
+  alerts: userAlertsSchema.optional(),
+  // cli data retention days (ADR-0115) — manager-only; capped at the plan's retentionDays.
+  cliRetentionDays: external_exports.number().int().min(0).max(3650).optional()
 });
 var setUserPasswordRequestSchema = external_exports.object({
   password: passwordSchema
@@ -29421,6 +29498,9 @@ var attachTeamUserRequestSchema = external_exports.object({
   isLead: external_exports.boolean().optional()
 });
 
+// ../../22-packages/11-shared/31-dto/src/template.ts
+var TEMPLATE_KINDS = ["report", "est", "wbs", "proposal", "feasibility"];
+
 // ../../22-packages/11-shared/31-dto/src/project.ts
 var listProjectsQuerySchema = baseRequestSchema.extend({
   pinned: pinnedFilterSchema,
@@ -29435,6 +29515,9 @@ var createProjectRequestSchema = external_exports.object({
   description: external_exports.string().max(2e3).optional(),
   machineUserId: external_exports.string().uuid().optional()
 });
+var copyProjectRequestSchema = external_exports.object({
+  name: external_exports.string().min(1).max(100)
+});
 var DEFAULT_OUTBOUND_RULES = {
   secret: [
     String.raw`/\b(api[_-]?key|secret|password|passwd|access[_-]?token|bearer)\b\s*[:=]\s*\S+/i`,
@@ -29465,7 +29548,15 @@ var updateProjectRequestSchema = external_exports.object({
   // Messenger retention in days (0 = keep forever) — manager only (ADR-0078).
   messengerRetentionDays: external_exports.number().int().min(0).max(3650).optional(),
   // Project settings (ADR-0081) — key-level shallow-merge; `tokens` clamped on read.
-  settings: external_exports.record(external_exports.unknown()).optional()
+  settings: external_exports.record(external_exports.unknown()).optional(),
+  // Identity ↔ spec sync (ADR-0148): the Settings tab edits the spec basic group
+  // (id = spec slug, name, desc). The server merges these into `spec` (READY) or
+  // `specDraft` (DRAFT) so the Content → Spec tab / wizard stays consistent.
+  specBasic: external_exports.object({
+    id: external_exports.string().max(200),
+    name: external_exports.string().max(100),
+    desc: external_exports.string().max(2e3)
+  }).partial().optional()
 });
 var MEMO_MAX_LENGTH = 65536;
 var putMemoRequestSchema = external_exports.object({
@@ -29485,6 +29576,17 @@ var putSpecDraftRequestSchema = external_exports.object({
   spec: external_exports.record(external_exports.unknown()),
   specVersion: external_exports.number().int().positive().optional()
 });
+var putProjectSpecRequestSchema = external_exports.object({
+  spec: external_exports.record(external_exports.unknown())
+});
+var ARTIFACT_MAX_BYTES = 512 * 1024;
+var listArtifactsQuerySchema = external_exports.object({
+  kind: external_exports.enum(TEMPLATE_KINDS).optional()
+});
+var createArtifactRequestSchema = external_exports.object({
+  kind: external_exports.enum(TEMPLATE_KINDS),
+  content: external_exports.string().min(1).max(ARTIFACT_MAX_BYTES)
+});
 var repoSpecSchema = external_exports.object({
   /** Role label (e.g. "docs" / "web" / "server") — descriptive, not constrained. */
   role: external_exports.string().max(60).optional().default(""),
@@ -29556,10 +29658,26 @@ var createFromSpecRequestSchema = external_exports.object({
 });
 var addRepoRequestSchema = external_exports.object({
   projectId: external_exports.string().uuid(),
-  path: external_exports.string().min(1).max(500),
-  /** Repo to clone; empty ⇒ `git init` in place. */
-  repoUrl: external_exports.string().url().max(500).optional(),
-  provider: external_exports.enum(["gh", "glab"]).optional()
+  repos: external_exports.array(repoSpecSchema).min(1)
+}).superRefine((v, ctx) => {
+  const primaries = v.repos.filter((r) => r.primary).length;
+  if (primaries !== 1) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["repos"],
+      message: "Exactly one repo must be primary"
+    });
+  }
+  for (let i = 0; i < v.repos.length; i++) {
+    const r = v.repos[i];
+    if (r && r.op === "existing" && !r.url) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["repos", i, "url"],
+        message: "An existing repo requires a url"
+      });
+    }
+  }
 });
 
 // ../../22-packages/11-shared/31-dto/src/activity.ts
@@ -29625,6 +29743,25 @@ var listMachineLinksQuerySchema = baseRequestSchema.extend({
 var updateMachineLinkRequestSchema = external_exports.object({
   hashcode3ExpiresAt: external_exports.string().datetime().nullable()
 });
+var configWriteRequestSchema = external_exports.object({
+  config: external_exports.string().max(256 * 1024)
+});
+var FILE_WRITE_MAX_BYTES = 2 * 1024 * 1024;
+var fsWriteRequestSchema = external_exports.object({
+  /** Path relative to the physic-project root; a `..` escaping the root is rejected on the cli. */
+  path: external_exports.string().min(1).max(1024),
+  /** Full new UTF-8 content (replaces the file wholesale). */
+  content: external_exports.string().max(FILE_WRITE_MAX_BYTES)
+});
+var autonomousWriteRequestSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("settings"), settings: external_exports.string().max(64 * 1024) }),
+  external_exports.object({ kind: external_exports.literal("approvals"), taskId: external_exports.string().min(1).max(64), approved: external_exports.boolean() }),
+  external_exports.object({ kind: external_exports.literal("userTodo"), content: external_exports.string().min(1).max(16 * 1024) }),
+  external_exports.object({ kind: external_exports.literal("cron"), action: external_exports.enum(["install", "uninstall"]) })
+]);
+var autonomousLogsQuerySchema = external_exports.object({
+  date: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
+});
 
 // ../../22-packages/11-shared/31-dto/src/command.ts
 var COMMAND_MAX_LEN = 8e3;
@@ -29645,7 +29782,14 @@ var dispatchCommandRequestSchema = external_exports.object({
    * Short human label shown to OTHER tabs watching this cli's activity feed (ADR-0101):
    * e.g. "AI review" so the Console shows a friendly line instead of the raw prompt.
    */
-  label: external_exports.string().max(120).optional()
+  label: external_exports.string().max(120).optional(),
+  /**
+   * Git tab (ADR-0151): when set, `command` is a `git`/`gh`/`glab` command run on the
+   * worker for the Git tab. The server routes the permission to `project.git` (`read`) /
+   * `project.git_write` (`write`) instead of `command.execute`, and validates `command`
+   * against the git allowlist (`isGitCommandAllowed`). Absent ⇒ normal console dispatch.
+   */
+  gitOp: external_exports.enum(["read", "write"]).optional()
 }).superRefine((v, ctx) => {
   if (!v.ai && v.command.length > COMMAND_MAX_LEN) {
     ctx.addIssue({
@@ -29659,7 +29803,11 @@ var dispatchCommandRequestSchema = external_exports.object({
   }
 });
 var listCommandsQuerySchema = baseRequestSchema.extend({
-  projectId: external_exports.string().uuid()
+  projectId: external_exports.string().uuid(),
+  // Optional search filters (command-0005): `search` (from BaseRequest) matches the command
+  // text/status; `from`/`to` are an inclusive `YYYY-MM-DD` date range over `startedAt`.
+  from: external_exports.string().optional(),
+  to: external_exports.string().optional()
 });
 
 // ../../22-packages/11-shared/31-dto/src/invitation.ts
@@ -29757,23 +29905,52 @@ var planEntitlementsSchema = external_exports.object({
   /** Allowed to use Community/4rum. */
   community: external_exports.boolean().default(false),
   /** Retention cap (days) for log/command/chat; null = unlimited. */
-  retentionDays: external_exports.number().int().min(1).nullable().default(null)
+  retentionDays: external_exports.number().int().min(1).nullable().default(null),
+  /**
+   * Total 4PM-hosted storage per org (bytes). Originally the template-file cap (ADR-0113),
+   * broadened by ADR-0122 to the org's WHOLE hosted storage: messages + command history
+   * (cli input/output/log) + files (templates/attachments/artifacts). `null` = unlimited.
+   */
+  templateStorageBytes: external_exports.number().int().min(0).nullable().default(null),
+  /** Per-file cap for a template upload (bytes — ADR-0113); null = unlimited. */
+  templateFileMaxBytes: external_exports.number().int().min(0).nullable().default(null),
+  /**
+   * How many 4PM-hosted machine-users the org may rent (ADR-0126). Base plans grant `0`;
+   * raised only by the `rented_machine` add-on (ADR-0123/0124). Never `null` (not "unlimited").
+   */
+  rentedMachineSeats: external_exports.number().int().min(0).default(0)
 });
+var DEFAULT_ENTITLEMENTS = {
+  maxUsers: 5,
+  maxProjects: 1,
+  teams: false,
+  community: false,
+  retentionDays: 30,
+  // Free tier: 100 MB total, 10 MB per file (ADR-0113).
+  templateStorageBytes: 100 * 1024 * 1024,
+  templateFileMaxBytes: 10 * 1024 * 1024,
+  // No rented machine-user seats by default — bought via the `rented_machine` add-on (ADR-0126).
+  rentedMachineSeats: 0
+};
 var checkoutRequestSchema = external_exports.object({
   planCode: external_exports.string().min(1).max(50),
   provider: external_exports.enum([PaymentProvider.STRIPE, PaymentProvider.PAYPAL]).optional()
 });
-var upsertPlanRequestSchema = external_exports.object({
-  name: external_exports.string().min(1).max(100),
-  price: external_exports.number().int().min(0).default(0),
-  limits: external_exports.array(planLimitSchema).default([]),
-  entitlements: planEntitlementsSchema.optional()
-});
 var assignPlanRequestSchema = external_exports.object({
   planCode: external_exports.string().min(1).max(50),
   /** Cycle length in days (defaults to 30). */
   periodDays: external_exports.number().int().min(1).max(366).default(30)
 });
+var addonBuyRequestSchema = external_exports.object({
+  code: external_exports.string().min(1).max(50),
+  quantity: external_exports.number().int().min(1).max(1e3),
+  /** Card path only; ignored when the org pays by credit (ADR-0104/0123). */
+  provider: external_exports.enum([PaymentProvider.STRIPE, PaymentProvider.PAYPAL]).optional()
+});
+var addonChangeRequestSchema = external_exports.object({
+  quantity: external_exports.number().int().min(0).max(1e3),
+  provider: external_exports.enum([PaymentProvider.STRIPE, PaymentProvider.PAYPAL]).optional()
+});
 
 // ../../22-packages/11-shared/31-dto/src/search.ts
 var SearchHitType = {
@@ -29787,11 +29964,11 @@ var SearchHitType = {
   MILESTONE: "milestone",
   /** Page/wiki (confluence + project docs — community). */
   PAGE: "page",
-  /** Message trong channel (Teams channel — community). */
+  /** A message in a channel (Teams channel — community). */
   MESSAGE: "message",
-  /** Message direct/group (lịch sử trò chuyện — community). */
+  /** A direct/group message (chat history — community). */
   CHAT: "chat",
-  /** Bài 4rum (community news/forum). */
+  /** A forum post (community news/forum). */
   POST: "post"
 };
 var searchQuerySchema = external_exports.object({
@@ -29829,8 +30006,21 @@ var WsChannels = {
   ...WsChannel,
   FS_LIST: "fs.list",
   FS_READ: "fs.read",
+  // server → cli (reply): write a file, path-clamped to the physic root (machine-0027,
+  // ADR-0151) — the Git tab's manual conflict resolution (`project.git_write`); the only
+  // git-tab write not carried by a git command over command dispatch.
+  FS_WRITE: "fs.write",
   GIT_DIFF: "git.diff",
   GIT_ENV: "git.env",
+  // server → cli (reply): read/write the paired profile's config.json (machine-0025/0026,
+  // ADR-0141) — the machine-user Settings tab syncs the worker cli's config.
+  CONFIG_READ: "config.read",
+  CONFIG_WRITE: "config.write",
+  // autonomous mode control (ADR-0152): read settings+status+books+approvals, tail logs, and
+  // write {settings|approvals|userTodo|cron} — the dashboard drives the worker's autonomous engine.
+  AUTONOMOUS_READ: "autonomous.read",
+  AUTONOMOUS_WRITE: "autonomous.write",
+  AUTONOMOUS_LOGS: "autonomous.logs",
   // git history browse (read-through cli — ADR-0089): repos on the physic project,
   // commit log, changed files of a commit, parent↔commit diff of one file.
   GIT_REPOS: "git.repos",
@@ -29848,6 +30038,11 @@ var WsChannels = {
   PHYSIC_DELETE: "physic.delete",
   // command lifecycle
   COMMAND_ANNOUNCE: "command.announce",
+  // console transcript sync (ADR-0150): the cli streams its authoritative SessionBus
+  // transcript so the web Console renders it verbatim; gated by console.watch (server → cli:
+  // whether a web viewer is attached) so an unwatched cli syncs nothing.
+  CONSOLE_SYNC: "console.sync",
+  CONSOLE_WATCH: "console.watch",
   // AI spec-assist (suggest/review/compose) moved off dedicated ai.* channels to
   // command.dispatch({ ai:true }) → the profile-failover AI path (ADR-0100).
   // quota & usage (ADR-0020)
@@ -29857,8 +30052,14 @@ var WsChannels = {
   MACHINE_USAGE: "machine.usage",
   // cli → server: durable per-command history record on finish (ADR-0072)
   COMMAND_HISTORY: "command.history",
+  // cli → server: periodic upload of the cli's own JSONL log file (ADR-0122) — stored
+  // server-side + counted in the machine user's storage footprint.
+  MACHINE_LOG: "machine.log",
   // server → cli (reply): tail the cli's own JSONL logs on demand (ADR-0072)
   LOG_READ: "log.read",
+  // server → cli (reply): read a finished command's captured output on demand (ADR-0115) —
+  // cli stores command-output/{commandId}.log; returns null when pruned/unavailable.
+  COMMAND_OUTPUT_READ: "command.output-read",
   // outbound review (ADR-0082): machine→server request, server→outbound evaluate, result back
   REVIEW_REQUEST: "review.request",
   REVIEW_EVALUATE: "review.evaluate",
@@ -29979,7 +30180,7 @@ var OutputBatcher = class {
 };
 
 // src/core/ws-client.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync4, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, rmSync as rmSync4 } from "fs";
 import { randomUUID as randomCommandId } from "crypto";
 
 // src/core/update-scheduler.ts
@@ -29987,7 +30188,7 @@ import { spawn } from "child_process";
 
 // src/common/logger/logger.ts
 import { appendFile, mkdir, readdir, unlink } from "fs/promises";
-import { readdirSync as readdirSync2, readFileSync as readFileSync6 } from "fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync6, statSync } from "fs";
 import { join as join6 } from "path";
 var LEVEL_ORDER = { error: 0, warn: 1, info: 2, debug: 3 };
 var DAY_MS = 24 * 60 * 60 * 1e3;
@@ -30006,6 +30207,13 @@ var CliLogger = class {
     this.retentionDays = opts.retentionDays ?? DEFAULT_RETENTION_DAYS;
     void this.cleanupOldLogs();
   }
+  /** Update the retention window at runtime + prune now (ADR-0115). `days<=0` keeps current. */
+  setRetentionDays(days) {
+    if (days > 0) {
+      this.retentionDays = days;
+      void this.cleanupOldLogs();
+    }
+  }
   /** Log an error-level event. */
   error(event, fields) {
     this.write("error", event, fields);
@@ -30062,6 +30270,24 @@ function readRecentLogLines(dir2, limit) {
     return [];
   }
 }
+var LOG_UPLOAD_CONTENT_MAX = 512 * 1024;
+function readLogUpload(dir2) {
+  try {
+    const files = readdirSync2(dir2).filter((f) => /^cli-\d{4}-\d{2}-\d{2}\.jsonl$/.test(f)).sort();
+    const latest = files[files.length - 1];
+    if (!latest) return null;
+    let totalBytes = 0;
+    for (const f of files) totalBytes += statSync(join6(dir2, f)).size;
+    let content = readFileSync6(join6(dir2, latest), "utf8");
+    if (content.length > LOG_UPLOAD_CONTENT_MAX) {
+      content = `\u2026[truncated]
+${content.slice(-LOG_UPLOAD_CONTENT_MAX)}`;
+    }
+    return { fileName: latest, content, totalBytes };
+  } catch {
+    return null;
+  }
+}
 
 // src/core/update-scheduler.ts
 var TICK_MS = 6e4;
@@ -30197,7 +30423,7 @@ async function runCommand(dispatch, emit) {
   });
   child.stdout?.on("data", (data) => batcher.push(data.toString("utf8")));
   child.stderr?.on("data", (data) => batcher.push(data.toString("utf8")));
-  await new Promise((resolve6) => {
+  await new Promise((resolve7) => {
     child.on("close", (exitCode) => {
       batcher.flush();
       emit({
@@ -30207,7 +30433,7 @@ async function runCommand(dispatch, emit) {
         done: true,
         exitCode: exitCode ?? -1
       });
-      resolve6();
+      resolve7();
     });
     child.on("error", (err) => {
       emit({
@@ -30218,7 +30444,7 @@ async function runCommand(dispatch, emit) {
         done: true,
         exitCode: -1
       });
-      resolve6();
+      resolve7();
     });
   });
 }
@@ -30298,10 +30524,10 @@ function isSessionLimit(text) {
   );
 }
 function runAttempt(commandId, cmd, args, cwd2, env3, onChunk) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     void runCommand({ commandId, cmd, args, path: cwd2, env: env3 }, (out) => {
       if (out.chunk) onChunk(out.chunk);
-      if (out.done) resolve6(out.exitCode ?? -1);
+      if (out.done) resolve7(out.exitCode ?? -1);
     });
   });
 }
@@ -30320,7 +30546,7 @@ async function runAiFailover(plan, commandId, cwd2, handlers) {
         handlers.onChunk(text);
       }
     };
-    finalExit = await runAttempt(commandId, plan.cmd, plan.args, cwd2, attempt.env, emit);
+    finalExit = await runAttempt(commandId, plan.cmd, attempt.args, cwd2, attempt.env, emit);
     const tail = parser.flush();
     if (tail) {
       captured += tail;
@@ -30380,13 +30606,18 @@ function resolveHomePath(value) {
   if (isAbsolute(value)) return value;
   return join8(homedir3(), value);
 }
-function resolveDirs(value) {
-  if (!value) return [];
-  const list = Array.isArray(value) ? value : [value];
-  return list.filter((v) => v && v.trim()).map(resolveHomePath);
+function profileDirs(profiles) {
+  if (!profiles) return [];
+  return profiles.map((p) => p.profile).filter((v) => v && v.trim()).map(resolveHomePath);
+}
+function buildRunArgs(profile, cmd, prompt) {
+  const pre = profile.args ?? DEFAULT_AI_ARGS[cmd] ?? [];
+  const model = profile.model?.trim();
+  const modelArgs = model ? ["--model", model] : [];
+  return [...pre, ...modelArgs, prompt];
 }
-function claudeConfigDirs(config) {
-  const dirs = resolveDirs(config.claudeConfigDir);
+function claudeHomeDirs(config) {
+  const dirs = profileDirs(config.claudeHome);
   return dirs.length > 0 ? dirs : [join8(homedir3(), ".claude")];
 }
 function profileDisplayLabel(dir2) {
@@ -30403,28 +30634,40 @@ function profileEnvVar(cmd) {
   if (cmd.includes("codex")) return "CODEX_HOME";
   return null;
 }
+function profilesFor(config, cmd) {
+  const envVar = profileEnvVar(cmd);
+  if (envVar === "CLAUDE_CONFIG_DIR") return config.claudeHome ?? [];
+  if (envVar === "CODEX_HOME") return config.codexHome ?? [];
+  return [];
+}
 function profileLabels(config) {
   const cmd = config.aiCli ?? DEFAULT_AI_CLI;
-  const envVar = profileEnvVar(cmd);
-  const dirs = envVar === "CLAUDE_CONFIG_DIR" ? resolveDirs(config.claudeConfigDir) : envVar === "CODEX_HOME" ? resolveDirs(config.codexHome) : [];
-  return dirs.map((dir2) => profileDisplayLabel(dir2));
+  return profileDirs(profilesFor(config, cmd)).map((dir2) => profileDisplayLabel(dir2));
 }
 function planAiRun(prompt, config, workingDir) {
   const cmd = config.aiCli ?? DEFAULT_AI_CLI;
-  const args = [...config.aiArgs ?? DEFAULT_AI_ARGS[cmd] ?? [], prompt];
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
-  const dirs = envVar ? envVar === "CLAUDE_CONFIG_DIR" ? resolveDirs(config.claudeConfigDir) : resolveDirs(config.codexHome) : [];
-  if (!envVar || dirs.length === 0) {
-    return { cmd, args, attempts: [{ label: "default", dir: null, env: { ...baseEnv } }] };
-  }
-  const ordered = workingDir && dirs.includes(workingDir) ? [workingDir, ...dirs.filter((d) => d !== workingDir)] : dirs;
-  const attempts = ordered.map((dir2) => ({
+  const defaultPlan = {
+    cmd,
+    attempts: [
+      { label: "default", dir: null, args: buildRunArgs({ profile: "" }, cmd, prompt), env: { ...baseEnv } }
+    ]
+  };
+  if (!envVar) return defaultPlan;
+  const resolved = profilesFor(config, cmd).filter((p) => p.profile && p.profile.trim()).map((p) => ({ profile: p, dir: resolveHomePath(p.profile) }));
+  if (resolved.length === 0) return defaultPlan;
+  const ordered = workingDir && resolved.some((r) => r.dir === workingDir) ? [
+    resolved.find((r) => r.dir === workingDir),
+    ...resolved.filter((r) => r.dir !== workingDir)
+  ] : resolved;
+  const attempts = ordered.map(({ profile, dir: dir2 }) => ({
     label: profileDisplayLabel(dir2),
     dir: dir2,
+    args: buildRunArgs(profile, cmd, prompt),
     env: { ...baseEnv, [envVar]: dir2 }
   }));
-  return { cmd, args, attempts };
+  return { cmd, attempts };
 }
 
 // src/core/claude-usage.ts
@@ -30462,16 +30705,16 @@ async function fetchUsage(token) {
   }
 }
 function runUsageCli(dir2, aiCli2) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     let out = "";
     let child = null;
     const finish = () => {
       clearTimeout(timer);
-      resolve6(out);
+      resolve7(out);
     };
     const timer = setTimeout(() => {
       child?.kill();
-      resolve6(out);
+      resolve7(out);
     }, 3e4);
     timer.unref?.();
     try {
@@ -30779,6 +31022,13 @@ function recordCommand(entry) {
 function getCommandHistory() {
   return entries;
 }
+function pruneCommandHistoryByAge(days) {
+  if (days <= 0) return;
+  const cutoff = Date.now() - days * 24 * 60 * 60 * 1e3;
+  const before = entries.length;
+  entries = entries.filter((e) => new Date(e.startedAt).getTime() >= cutoff);
+  if (entries.length !== before) persist();
+}
 function finishCommand(commandId, exitCode, usage) {
   const entry = entries.find((e) => e.commandId === commandId && e.status === "running");
   if (!entry) return;
@@ -30806,7 +31056,7 @@ import {
   readFileSync as readFileSync11,
   readdirSync as readdirSync3,
   rmSync as rmSync3,
-  statSync
+  statSync as statSync2
 } from "fs";
 import { join as join11 } from "path";
 var KEEP_FILES = 200;
@@ -30839,11 +31089,22 @@ function readCommandOutput(commandId) {
 function prune() {
   if (!dir) return;
   try {
-    const files = readdirSync3(dir).filter((f) => f.endsWith(".log")).map((f) => ({ f, t: statSync(join11(dir, f)).mtimeMs })).sort((a, b) => b.t - a.t);
+    const files = readdirSync3(dir).filter((f) => f.endsWith(".log")).map((f) => ({ f, t: statSync2(join11(dir, f)).mtimeMs })).sort((a, b) => b.t - a.t);
     for (const { f } of files.slice(KEEP_FILES)) rmSync3(join11(dir, f), { force: true });
   } catch {
   }
 }
+function pruneCommandOutputByAge(days) {
+  if (!dir || days <= 0) return;
+  const cutoff = Date.now() - days * 24 * 60 * 60 * 1e3;
+  try {
+    for (const f of readdirSync3(dir).filter((n) => n.endsWith(".log"))) {
+      const p = join11(dir, f);
+      if (statSync2(p).mtimeMs < cutoff) rmSync3(p, { force: true });
+    }
+  } catch {
+  }
+}
 
 // src/core/fs-browse.ts
 import { readdir as readdir2 } from "fs/promises";
@@ -30884,24 +31145,210 @@ async function readWorkerFile(path) {
   }
 }
 
-// src/core/git-diff.ts
-import { readFile as readFile2 } from "fs/promises";
-import { execFile as execFile2 } from "child_process";
-import { basename as basename2, dirname as dirname3, resolve as resolve3 } from "path";
+// src/core/fs-write.ts
+import { mkdir as mkdir2, writeFile } from "fs/promises";
+import { dirname as dirname3, resolve as resolve3, sep as sep3 } from "path";
+var MAX_BYTES2 = 2 * 1024 * 1024;
+function resolveInRoot(root, relPath) {
+  if (!root) return null;
+  const base = resolve3(root);
+  const target = resolve3(base, relPath || ".");
+  return target === base || target.startsWith(base + sep3) ? target : null;
+}
+async function writeWorkerFile(root, relPath, content) {
+  const target = resolveInRoot(root, relPath);
+  if (!target) {
+    return { ok: false, path: relPath, bytes: 0, error: "path escapes the project root" };
+  }
+  const bytes = Buffer.byteLength(content, "utf8");
+  if (bytes > MAX_BYTES2) {
+    return { ok: false, path: target, bytes: 0, error: `content too large (max ${MAX_BYTES2} bytes)` };
+  }
+  try {
+    await mkdir2(dirname3(target), { recursive: true });
+    await writeFile(target, content, "utf8");
+    return { ok: true, path: target, bytes };
+  } catch (err) {
+    return { ok: false, path: target, bytes: 0, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// src/core/autonomous.ts
+import { readFile as readFile2, writeFile as writeFile2, chmod } from "fs/promises";
+import { readFileSync as readFileSync12 } from "fs";
+import { execFile as execFile2, spawn as spawn4 } from "child_process";
+import { join as join12 } from "path";
 import { promisify as promisify2 } from "util";
 var run2 = promisify2(execFile2);
+var SETTINGS_REL = ".claude/.autonomous.settings.json";
+var HISTORIES_REL = ".claude/.autonomous.histories.json";
+var APPROVALS_REL = ".claude/.autonomous.approvals.json";
+var TICK_REL = ".claude/hooks/autonomous-tick.sh";
+var LOG_DIR_REL = ".claude/logs";
+var BOOK_FILES = {
+  userTodo: "USER_TODO.md",
+  aiTodo: "AI_TODO.md",
+  aiProgress: "AI_PROGRESS.md",
+  aiDone: "AI_DONE.md",
+  userQa: "USER_QA.md"
+};
+var DEFAULT_CRON = "*/10 * * * *";
+async function readText(path, fallback = "") {
+  try {
+    return await readFile2(path, "utf8");
+  } catch {
+    return fallback;
+  }
+}
+function parseJson(text) {
+  try {
+    const v = JSON.parse(text);
+    return v && typeof v === "object" ? v : null;
+  } catch {
+    return null;
+  }
+}
+function tickScript(root) {
+  return join12(root, TICK_REL);
+}
+async function crontabList() {
+  try {
+    const { stdout } = await run2("crontab", ["-l"], { timeout: 1e4 });
+    return stdout;
+  } catch {
+    return "";
+  }
+}
+async function crontabSet(content) {
+  return new Promise((resolve7) => {
+    const child = spawn4("crontab", ["-"], { stdio: ["pipe", "ignore", "ignore"] });
+    child.on("error", () => resolve7(false));
+    child.on("close", (code) => resolve7(code === 0));
+    child.stdin.end(content.endsWith("\n") ? content : content + "\n");
+  });
+}
+async function cronInstalled(root) {
+  const script = tickScript(root);
+  return (await crontabList()).split("\n").some((l) => l.includes(script) && !l.trim().startsWith("#"));
+}
+async function getAutonomousStatus(root) {
+  const settings = parseJson(await readText(join12(root, SETTINGS_REL))) ?? {};
+  const hist = parseJson(await readText(join12(root, HISTORIES_REL))) ?? {};
+  const records = Array.isArray(hist.records) ? hist.records : [];
+  const last = records[records.length - 1];
+  const ticks = hist.ticks ?? {};
+  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  return {
+    installed: await cronInstalled(root),
+    paused: settings.paused === true,
+    cronSchedule: typeof settings.cron_schedule === "string" ? settings.cron_schedule : DEFAULT_CRON,
+    lastTickAt: last && typeof last.ts === "string" ? last.ts : null,
+    lastResult: last && typeof last.status === "string" ? last.status : null,
+    consecutiveFails: typeof hist.consecutive_fails === "number" ? hist.consecutive_fails : 0,
+    todayTicks: ticks.day === today && typeof ticks.count === "number" ? ticks.count : 0
+  };
+}
+function isAutonomousRunning(root) {
+  try {
+    const s = JSON.parse(readFileSync12(join12(root, SETTINGS_REL), "utf8"));
+    if (s.paused === true) return false;
+    const h = JSON.parse(readFileSync12(join12(root, HISTORIES_REL), "utf8"));
+    const ts = h.records?.[h.records.length - 1]?.ts;
+    if (!ts) return false;
+    const t = Date.parse(ts.replace(" ", "T"));
+    return Number.isFinite(t) && Date.now() - t < 6 * 3600 * 1e3;
+  } catch {
+    return false;
+  }
+}
+async function readAutonomous(root) {
+  const [settings, approvals, status, ...books] = await Promise.all([
+    readText(join12(root, SETTINGS_REL)),
+    readText(join12(root, APPROVALS_REL), "{}"),
+    getAutonomousStatus(root),
+    ...Object.values(BOOK_FILES).map((f) => readText(join12(root, f)))
+  ]);
+  const keys = Object.keys(BOOK_FILES);
+  const bookMap = {};
+  keys.forEach((k, i) => bookMap[k] = books[i] ?? "");
+  return { settings, status, books: bookMap, approvals };
+}
+async function readAutonomousLogs(root, date) {
+  const day = date && /^\d{4}-\d{2}-\d{2}$/.test(date) ? date : (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const text = await readText(join12(root, LOG_DIR_REL, `autonomous-tick-${day}.log`));
+  const lines = text ? text.split("\n").filter((l) => l.length > 0).slice(-500) : [];
+  return { date: day, lines };
+}
+async function installCron(root) {
+  const script = tickScript(root);
+  const status = await getAutonomousStatus(root);
+  await chmod(script, 493).catch(() => void 0);
+  const kept = (await crontabList()).split("\n").filter((l) => l.trim() && !l.includes(script));
+  kept.push(`${status.cronSchedule} ${script}`);
+  await crontabSet(kept.join("\n"));
+}
+async function uninstallCron(root) {
+  const script = tickScript(root);
+  const cur = await crontabList();
+  if (!cur.includes(script)) return;
+  const kept = cur.split("\n").filter((l) => l.trim() && !l.includes(script));
+  await crontabSet(kept.join("\n"));
+}
+async function writeAutonomous(root, req, by) {
+  try {
+    switch (req.kind) {
+      case "settings": {
+        if (!parseJson(req.settings)) return { ok: false, error: "settings is not valid JSON" };
+        await writeFile2(join12(root, SETTINGS_REL), req.settings, "utf8");
+        break;
+      }
+      case "approvals": {
+        const map = parseJson(await readText(join12(root, APPROVALS_REL), "{}")) ?? {};
+        if (req.approved) map[req.taskId] = { approved: true, by, at: (/* @__PURE__ */ new Date()).toISOString() };
+        else delete map[req.taskId];
+        await writeFile2(join12(root, APPROVALS_REL), JSON.stringify(map, null, 2) + "\n", "utf8");
+        break;
+      }
+      case "userTodo": {
+        const cur = await readText(join12(root, BOOK_FILES.userTodo));
+        const block = `
+
+> posted by ${by} at ${(/* @__PURE__ */ new Date()).toISOString()}
+${req.content.trim()}
+`;
+        await writeFile2(join12(root, BOOK_FILES.userTodo), cur.trimEnd() + block, "utf8");
+        break;
+      }
+      case "cron": {
+        if (req.action === "install") await installCron(root);
+        else await uninstallCron(root);
+        break;
+      }
+    }
+    return { ok: true, status: await getAutonomousStatus(root) };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// src/core/git-diff.ts
+import { readFile as readFile3 } from "fs/promises";
+import { execFile as execFile3 } from "child_process";
+import { basename as basename2, dirname as dirname4, resolve as resolve4 } from "path";
+import { promisify as promisify3 } from "util";
+var run3 = promisify3(execFile3);
 async function gitDiff(path) {
-  const target = resolve3(path);
-  const dir2 = dirname3(target);
+  const target = resolve4(path);
+  const dir2 = dirname4(target);
   const base = basename2(target);
   let newContent = "";
   try {
-    newContent = await readFile2(target, "utf8");
+    newContent = await readFile3(target, "utf8");
   } catch {
   }
   let oldContent = "";
   try {
-    const { stdout } = await run2("git", ["show", `HEAD:./${base}`], {
+    const { stdout } = await run3("git", ["show", `HEAD:./${base}`], {
       cwd: dir2,
       timeout: 15e3,
       maxBuffer: 4 * 1024 * 1024
@@ -30913,12 +31360,12 @@ async function gitDiff(path) {
 }
 
 // src/core/git-env.ts
-import { execFile as execFile3 } from "child_process";
-import { promisify as promisify3 } from "util";
-var run3 = promisify3(execFile3);
+import { execFile as execFile4 } from "child_process";
+import { promisify as promisify4 } from "util";
+var run4 = promisify4(execFile4);
 async function hasBinary(bin, args = ["--version"]) {
   try {
-    await run3(bin, args, { timeout: 5e3 });
+    await run4(bin, args, { timeout: 5e3 });
     return true;
   } catch {
     return false;
@@ -30931,7 +31378,7 @@ async function checkGitEnv(provider) {
   let account = null;
   if (installed) {
     try {
-      const { stdout, stderr } = await run3(bin, ["auth", "status"], { timeout: 8e3 });
+      const { stdout, stderr } = await run4(bin, ["auth", "status"], { timeout: 8e3 });
       const out = `${stdout}
 ${stderr}`;
       authenticated = /logged in|logged into|✓/i.test(out);
@@ -30945,21 +31392,21 @@ ${stderr}`;
 
 // src/core/git-history.ts
 import { readdir as readdir3 } from "fs/promises";
-import { execFile as execFile4 } from "child_process";
-import { resolve as resolve4, sep as sep3 } from "path";
-import { promisify as promisify4 } from "util";
-var run4 = promisify4(execFile4);
+import { execFile as execFile5 } from "child_process";
+import { resolve as resolve5, sep as sep4 } from "path";
+import { promisify as promisify5 } from "util";
+var run5 = promisify5(execFile5);
 var FS = "";
 var RS = "";
 function resolveRepo(root, repo) {
   if (!root) return null;
-  const base = resolve4(root);
-  const requested = resolve4(base, repo && repo.trim() ? repo : ".");
-  return requested === base || requested.startsWith(base + sep3) ? requested : base;
+  const base = resolve5(root);
+  const requested = resolve5(base, repo && repo.trim() ? repo : ".");
+  return requested === base || requested.startsWith(base + sep4) ? requested : base;
 }
 async function git(cwd2, args) {
   try {
-    const { stdout } = await run4("git", args, {
+    const { stdout } = await run5("git", args, {
       cwd: cwd2,
       timeout: 15e3,
       maxBuffer: 8 * 1024 * 1024
@@ -30971,13 +31418,13 @@ async function git(cwd2, args) {
 }
 async function gitRepos(root) {
   if (!root) return { repos: [] };
-  const base = resolve4(root);
+  const base = resolve5(root);
   const found = /* @__PURE__ */ new Set();
   const repos = [];
   const add = async (dir2) => {
     const inside = await git(dir2, ["rev-parse", "--show-toplevel"]);
     const top = inside.trim();
-    if (!top || found.has(top) || !(top === base || top.startsWith(base + sep3))) return;
+    if (!top || found.has(top) || !(top === base || top.startsWith(base + sep4))) return;
     found.add(top);
     const subdir = top === base ? "" : top.slice(base.length + 1);
     const remote = (await git(top, ["remote", "get-url", "origin"])).trim();
@@ -30988,13 +31435,13 @@ async function gitRepos(root) {
     const lvl1 = await readdir3(base, { withFileTypes: true });
     for (const d of lvl1) {
       if (!d.isDirectory() || d.name === ".git" || d.name === "node_modules") continue;
-      const p1 = resolve4(base, d.name);
+      const p1 = resolve5(base, d.name);
       await add(p1);
       try {
         const lvl2 = await readdir3(p1, { withFileTypes: true });
         for (const d2 of lvl2) {
           if (!d2.isDirectory() || d2.name === ".git" || d2.name === "node_modules") continue;
-          await add(resolve4(p1, d2.name));
+          await add(resolve5(p1, d2.name));
         }
       } catch {
       }
@@ -31061,24 +31508,24 @@ async function gitCommitDiff(root, repo, hash, path) {
 }
 
 // src/core/git-commit-identity.ts
-import { execFile as execFile5 } from "child_process";
-import { promisify as promisify5 } from "util";
-var run5 = promisify5(execFile5);
+import { execFile as execFile6 } from "child_process";
+import { promisify as promisify6 } from "util";
+var run6 = promisify6(execFile6);
 async function setCommitAuthor(cwd2, machineUsername) {
   if (!machineUsername) return;
   try {
-    await run5("git", ["config", "--local", "user.name", machineUsername], { cwd: cwd2, timeout: 8e3 });
+    await run6("git", ["config", "--local", "user.name", machineUsername], { cwd: cwd2, timeout: 8e3 });
   } catch {
   }
 }
 
 // src/core/scaffold.ts
-import { cp, mkdir as mkdir2, writeFile } from "fs/promises";
-import { execFile as execFile6 } from "child_process";
-import { dirname as dirname4, join as join12, resolve as resolve5 } from "path";
+import { cp, mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
+import { execFile as execFile7 } from "child_process";
+import { dirname as dirname5, join as join13, resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { promisify as promisify6 } from "util";
-var run6 = promisify6(execFile6);
+import { promisify as promisify7 } from "util";
+var run7 = promisify7(execFile7);
 function reposOf(spec) {
   const repos = spec?.repos;
   return Array.isArray(repos) ? repos : [];
@@ -31087,46 +31534,51 @@ function subDirName(repo) {
   const raw = (repo.subdir || repo.role || repo.name || "repo").trim();
   return raw.replace(/[^\w.-]+/g, "-").replace(/^-+|-+$/g, "") || "repo";
 }
-async function provisionRepos(target, repos, emit) {
+async function provisionRepos(target, repos, emit, opts = {}) {
   for (const repo of repos) {
     if (repo.primary) {
+      if (opts.clonePrimary && repo.op === "existing" && repo.url) {
+        emit("git", `Cloning ${repo.url}\u2026`);
+        await run7("git", ["clone", repo.url, target], { timeout: 12e4 });
+        continue;
+      }
       emit("git", "Initializing the primary repo\u2026");
-      await run6("git", ["init"], { cwd: target, timeout: 2e4 });
+      await run7("git", ["init"], { cwd: target, timeout: 2e4 });
       if (repo.op === "existing" && repo.url) {
-        await run6("git", ["remote", "add", "origin", repo.url], { cwd: target, timeout: 2e4 }).catch(
+        await run7("git", ["remote", "add", "origin", repo.url], { cwd: target, timeout: 2e4 }).catch(
           () => void 0
         );
       }
       continue;
     }
-    const dir2 = join12(target, subDirName(repo));
+    const dir2 = join13(target, subDirName(repo));
     if (repo.op === "existing" && repo.url) {
       emit("git", `Cloning sub-repo ${repo.url}\u2026`);
-      await run6("git", ["clone", repo.url, dir2], { timeout: 12e4 });
+      await run7("git", ["clone", repo.url, dir2], { timeout: 12e4 });
     } else {
       emit("git", `Initializing sub-repo ${subDirName(repo)}\u2026`);
-      await mkdir2(dir2, { recursive: true });
-      await run6("git", ["init"], { cwd: dir2, timeout: 2e4 });
+      await mkdir3(dir2, { recursive: true });
+      await run7("git", ["init"], { cwd: dir2, timeout: 2e4 });
     }
   }
 }
 function sampleDir() {
   if (process.env.SCAFFOLD_SAMPLE_DIR) return process.env.SCAFFOLD_SAMPLE_DIR;
-  const here = dirname4(fileURLToPath3(import.meta.url));
-  return resolve5(here, "../../project-sample");
+  const here = dirname5(fileURLToPath3(import.meta.url));
+  return resolve6(here, "../../project-sample");
 }
 async function scaffoldProject(payload, profileDir2, onProgress) {
   const emit = (step, message) => onProgress?.({ projectId: payload.projectId, step, message });
   try {
-    const root = process.env.SCAFFOLD_ROOT ? resolve5(process.env.SCAFFOLD_ROOT) : resolve5(profileDir2);
-    const target = join12(root, payload.projectName);
-    await mkdir2(target, { recursive: true });
+    const root = process.env.SCAFFOLD_ROOT ? resolve6(process.env.SCAFFOLD_ROOT) : resolve6(profileDir2);
+    const target = join13(root, payload.projectName);
+    await mkdir3(target, { recursive: true });
     emit("copy", "Copying the sample template\u2026");
     await cp(sampleDir(), target, { recursive: true, force: false, errorOnExist: false });
     if (payload.spec) {
       emit("spec", "Writing project.spec.json\u2026");
-      await writeFile(
-        join12(target, "project.spec.json"),
+      await writeFile3(
+        join13(target, "project.spec.json"),
         JSON.stringify(payload.spec, null, 2),
         "utf8"
       );
@@ -31144,7 +31596,7 @@ async function aiInit(target, spec, emit) {
   emit("ai-init", "AI init: subagents, README, CLAUDE.md\u2026");
   const subagents = Array.isArray(spec.subagents) ? spec.subagents : [];
   if (subagents.length > 0) {
-    await mkdir2(join12(target, ".claude", "agents"), { recursive: true });
+    await mkdir3(join13(target, ".claude", "agents"), { recursive: true });
     for (const sa of subagents) {
       const name = (sa.name || "").trim().replace(/[^\w.-]+/g, "-").replace(/^-+|-+$/g, "");
       if (!name) continue;
@@ -31154,17 +31606,17 @@ name: ${name}
 
 ${(sa.description || "").trim()}
 `;
-      await writeFile(join12(target, ".claude", "agents", `${name}.md`), body, "utf8");
+      await writeFile3(join13(target, ".claude", "agents", `${name}.md`), body, "utf8");
     }
   }
   const specJson = JSON.stringify(spec);
   await generateFile(
-    join12(target, "README.md"),
+    join13(target, "README.md"),
     `Write a concise README.md (Markdown only, no preamble) for this project from its spec JSON:
 ${specJson}`
   );
   await generateFile(
-    join12(target, "CLAUDE.md"),
+    join13(target, "CLAUDE.md"),
     `Write a CLAUDE.md (Markdown only, no preamble) with guidance/conventions for AI agents working in this project, derived from its spec JSON:
 ${specJson}`
   );
@@ -31172,35 +31624,66 @@ ${specJson}`
 async function generateFile(path, prompt) {
   try {
     const text = await aiGenerate(prompt);
-    if (text.trim()) await writeFile(path, text.trim() + "\n", "utf8");
+    if (text.trim()) await writeFile3(path, text.trim() + "\n", "utf8");
   } catch {
   }
 }
-async function addProject(payload, onProgress) {
+async function addProject(payload, profileDir2, onProgress) {
   const emit = (step, message) => onProgress?.({ projectId: payload.projectId, step, message });
   try {
-    const target = resolve5(payload.path);
-    await mkdir2(target, { recursive: true });
-    if (payload.repoUrl) {
-      emit("clone", `Cloning ${payload.repoUrl}\u2026`);
-      await run6("git", ["clone", payload.repoUrl, target], { timeout: 12e4 });
-    } else {
-      emit("init", "git init\u2026");
-      await run6("git", ["init"], { cwd: target, timeout: 2e4 });
-    }
-    onProgress?.({ projectId: payload.projectId, step: "done", message: "Repo ready.", done: true });
+    const root = process.env.SCAFFOLD_ROOT ? resolve6(process.env.SCAFFOLD_ROOT) : resolve6(profileDir2);
+    const target = join13(root, payload.projectName);
+    await mkdir3(target, { recursive: true });
+    const repos = payload.repos ?? [];
+    if (repos.length > 0) await provisionRepos(target, repos, emit, { clonePrimary: true });
+    onProgress?.({ projectId: payload.projectId, step: "done", message: "Project added.", done: true });
     return { ok: true, path: target };
   } catch (err) {
     return { ok: false, error: err instanceof Error ? err.message : String(err) };
   }
 }
 
+// src/core/config-sync.ts
+import { existsSync as existsSync7, readFileSync as readFileSync13 } from "fs";
+import { join as join14 } from "path";
+var SERVER_MANAGED_KEYS = ["physicPath", "sessionSwitchPct", "perPromptTokenLimit"];
+function readConfigText(profileDir2) {
+  const path = join14(profileDir2, "config.json");
+  if (existsSync7(path)) {
+    try {
+      return readFileSync13(path, "utf8");
+    } catch {
+    }
+  }
+  return JSON.stringify(defaultProfileConfig(), null, 2);
+}
+function applyConfigText(profileDir2, text) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (err) {
+    return { ok: false, error: `Invalid JSON: ${err.message}` };
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    return { ok: false, error: "config.json must be a JSON object." };
+  }
+  const next = { ...parsed };
+  const current = readProfileConfig(profileDir2);
+  for (const key of SERVER_MANAGED_KEYS) {
+    if (current[key] !== void 0) next[key] = current[key];
+    else delete next[key];
+  }
+  overwriteProfileConfig(profileDir2, next);
+  return { ok: true };
+}
+
 // src/core/ws-client.ts
 var HEARTBEAT_MS = 3e4;
 var USAGE_POLL_MS = 5 * 6e4;
+var LOG_UPLOAD_MS = 10 * 6e4;
 var RECONNECT_BACKOFF_BASE_MS = 1e3;
-var RECONNECT_MAX_BACKOFF_DEFAULT_SEC = 600;
-var RECONNECT_BACKOFF_MAX_ATTEMPT = 10;
+var RECONNECT_MAX_BACKOFF_DEFAULT_SEC = 60;
+var RECONNECT_BACKOFF_MAX_ATTEMPT = 6;
 function envReconnectMaxSec() {
   const raw = Number(process.env.FOURPM_RECONNECT_MAX_BACKOFF_SEC);
   if (!Number.isFinite(raw)) return null;
@@ -31210,6 +31693,11 @@ function envReconnectMaxSec() {
 var MAX_HASHCODE_INVALID_RETRIES = 5;
 var CLOSE_DRAINING = 4001;
 var OFFLINE_BUFFER_MAX_BYTES = 512 * 1024;
+var CONSOLE_SNAPSHOT_INTERVAL_MS = 3e4;
+var CONSOLE_WATCH_LEASE_MS = 45e3;
+function toDtoEntry(e) {
+  return { id: e.id, source: e.source, kind: e.kind, text: e.text, level: e.level, resultKind: e.resultKind };
+}
 var WsClient = class {
   constructor(context) {
     this.context = context;
@@ -31221,14 +31709,26 @@ var WsClient = class {
     );
     context.bus.onLocalSubmit((input) => void this.runLocalCommand(input));
     context.bus.onReconnect(() => this.reconnectNow());
+    context.bus.onTranscript((entry) => this.emitConsole({ kind: "add", entry: toDtoEntry(entry) }));
+    context.bus.onTranscriptUpdate(
+      (entry) => this.emitConsole({ kind: "update", entry: toDtoEntry(entry) })
+    );
+    context.bus.onClear(() => this.emitConsole({ kind: "clear" }));
   }
   context;
   socket = null;
   sessionKey = null;
+  // True once the current connectOnce() reached hello_ack — a *real* session. Gates the
+  // backoff reset so a socket that opens then closes before the handshake keeps backing off
+  // instead of hammering the server every ~1s.
+  sessionEstablished = false;
   ecdh = null;
   wsToken = "";
   heartbeat = null;
   usageTimer = null;
+  logUploadTimer = null;
+  /** Signature (fileName + totalBytes) of the last log upload — skip re-sending if unchanged. */
+  lastLogSig = null;
   usageSnapshot = null;
   /** Whether the serving project requires outbound review before each AI spawn (ADR-0082). */
   outboundReviewEnabled = false;
@@ -31253,7 +31753,25 @@ var WsClient = class {
   connectWaiters = [];
   /** Output buffered while disconnected (flushed on reconnect). */
   offlineBuffer = [];
+  /**
+   * Command ids already accepted (insertion-ordered, bounded). WS delivery is at-least-once —
+   * a redelivered `COMMAND_DISPATCH` (reconnect/blip during a long AI run) must NOT run again:
+   * re-running an AI prompt would waste tokens and echo the prompt a second time in the console.
+   */
+  handledCommands = /* @__PURE__ */ new Set();
   offlineBufferBytes = 0;
+  /**
+   * Console-sync state (ADR-0150). `consoleWatching` is set by `console.watch` from the server
+   * (a web Console viewer is attached); only then does the cli emit `console.sync`. `consoleRev`
+   * is the monotonic revision the web uses to detect a gap; `consoleSnapshotTimer` periodically
+   * re-sends a full snapshot to self-heal. Watching resets to false on each reconnect (the server
+   * re-asserts it), so a fresh session re-snapshots.
+   */
+  consoleWatching = false;
+  consoleRev = 0;
+  consoleSnapshotTimer = null;
+  /** Lease expiry: stop syncing if the server does not renew `console.watch` in time. */
+  consoleWatchExpiry = null;
   /** cli → server requests awaiting a reply (quota.check — ADR-0020). */
   pending = /* @__PURE__ */ new Map();
   /** Daily scheduled cli auto-update (ADR-0074); policy fed from each ws_token. */
@@ -31287,42 +31805,50 @@ var WsClient = class {
    */
   awaitConnected(timeoutMs) {
     if (this.sessionKey && this.bus.status === "connected") return Promise.resolve(true);
-    return new Promise((resolve6) => {
+    return new Promise((resolve7) => {
       const waiter = () => {
         clearTimeout(timer);
-        resolve6(true);
+        resolve7(true);
       };
       const timer = setTimeout(() => {
         this.connectWaiters = this.connectWaiters.filter((w) => w !== waiter);
-        resolve6(false);
+        resolve7(false);
       }, timeoutMs);
       this.connectWaiters.push(waiter);
     });
   }
   /**
    * Resolve the reconnect-backoff cap (ms): the org value (from ws_token) over the
-   * env override over the default. Each is already clamped to the 10-min ceiling.
+   * env override over the default. Each is already clamped to the 1-min ceiling.
    */
   reconnectMaxMs() {
     const sec = this.orgReconnectMaxSec ?? this.envReconnectMaxSec ?? RECONNECT_MAX_BACKOFF_DEFAULT_SEC;
     return sec * 1e3;
   }
+  /** Mark a commandId as accepted for dedup, keeping the set bounded (drop the oldest). */
+  markCommandHandled(commandId) {
+    this.handledCommands.add(commandId);
+    if (this.handledCommands.size > 1e3) {
+      const oldest = this.handledCommands.values().next().value;
+      if (oldest !== void 0) this.handledCommands.delete(oldest);
+    }
+  }
   /** Backoff sleep that can be woken early by reconnectNow(). */
   interruptibleSleep(ms) {
     if (this.forceReconnect) {
       this.forceReconnect = false;
       return Promise.resolve();
     }
-    return new Promise((resolve6) => {
+    return new Promise((resolve7) => {
       const timer = setTimeout(() => {
         this.wakeReconnect = null;
-        resolve6();
+        resolve7();
       }, ms);
       this.wakeReconnect = () => {
         clearTimeout(timer);
         this.wakeReconnect = null;
         this.forceReconnect = false;
-        resolve6();
+        resolve7();
       };
     });
   }
@@ -31334,8 +31860,10 @@ var WsClient = class {
     for (let attempt = 0; !this.stopped; attempt++) {
       try {
         await this.connectOnce();
-        attempt = 0;
-        hashcodeInvalidStreak = 0;
+        if (this.sessionEstablished) {
+          attempt = 0;
+          hashcodeInvalidStreak = 0;
+        }
       } catch (err) {
         if (err instanceof CliApiError) {
           if (["HASHCODE_EXPIRED", "LINK_REVOKED"].includes(err.errorCode)) {
@@ -31376,8 +31904,9 @@ var WsClient = class {
    * One WS session: token → connect → handshake → handle messages until close.
    */
   connectOnce() {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       void (async () => {
+        this.sessionEstablished = false;
         this.bus.setStatus("connecting");
         const token = await requestWsToken(this.credential.serverUrl, this.credential.hashcode3);
         this.wsToken = token.wsToken;
@@ -31391,6 +31920,11 @@ var WsClient = class {
             timezone: token.timezone
           });
         }
+        if (typeof token.cliRetentionDays === "number" && token.cliRetentionDays > 0) {
+          logger.setRetentionDays(token.cliRetentionDays);
+          pruneCommandHistoryByAge(token.cliRetentionDays);
+          pruneCommandOutputByAge(token.cliRetentionDays);
+        }
         writeProfileConfig(this.context.profileDir, {
           sessionSwitchPct: token.projectTokens?.sessionSwitchPct ?? 0,
           perPromptTokenLimit: token.projectTokens?.perPromptTokenLimit ?? 0
@@ -31404,7 +31938,12 @@ var WsClient = class {
         } else if (token.scope) {
           this.bus.setScope(token.scope);
         }
-        const wsUrl = this.credential.serverUrl.replace(/^http/, "ws") + "/ws";
+        if (token.wsUrl !== void 0 && token.wsUrl !== this.credential.wsUrl) {
+          this.credential.wsUrl = token.wsUrl || void 0;
+          writeCredential(this.context.profileDir, this.credential);
+        }
+        const wsBase = this.credential.wsUrl ?? this.credential.serverUrl;
+        const wsUrl = wsBase.replace(/^http/, "ws") + "/ws";
         const socket = new wrapper_default(wsUrl);
         this.socket = socket;
         socket.on("open", () => {
@@ -31434,7 +31973,7 @@ var WsClient = class {
           if (code === CLOSE_DRAINING) {
             this.bus.log("Server draining \u2014 will reconnect (backoff + jitter).");
           }
-          resolve6();
+          resolve7();
         });
         socket.on("error", (err) => {
           this.clearHeartbeat();
@@ -31450,6 +31989,7 @@ var WsClient = class {
     if ("type" in message) {
       if (message.type === "hello_ack" && this.ecdh) {
         this.sessionKey = deriveSessionKey(this.ecdh, message.pubkey);
+        this.sessionEstablished = true;
         if (message.workerName) this.bus.setWorker(message.workerName);
         if (message.projectName) {
           this.bus.setProject(message.projectName);
@@ -31460,12 +32000,14 @@ var WsClient = class {
           this.physicRoot = null;
         }
         logger.info("ws.connected", { version: CLI_VERSION });
+        this.stopConsoleSync();
         this.bus.setStatus("connected");
         this.bus.log("\u2714 Connected to the server (session encryption ready).");
         this.sendMachineStatus();
         this.flushOfflineBuffer();
         this.startHeartbeat();
         this.startUsagePolling();
+        this.startLogUpload();
         this.connectWaiters.splice(0).forEach((fn) => fn());
         return;
       }
@@ -31523,8 +32065,12 @@ var WsClient = class {
     switch (message.channel) {
       case WsChannels.PHYSIC_SYNC: {
         const sync = payload;
-        if (sync.oldName) rmSync4(join13(this.context.profileDir, sync.oldName), { recursive: true, force: true });
-        mkdirSync4(join13(this.context.profileDir, sync.newName), { recursive: true });
+        if (sync.oldName) {
+          const oldRoot = this.physicFolderPath(sync.oldName);
+          if (oldRoot) void uninstallCron(oldRoot).catch(() => void 0);
+        }
+        if (sync.oldName) rmSync4(join15(this.context.profileDir, sync.oldName), { recursive: true, force: true });
+        mkdirSync4(join15(this.context.profileDir, sync.newName), { recursive: true });
         this.physicRoot = this.physicFolderPath(sync.newName);
         this.bus.setProject(sync.newName);
         this.bus.log(`Physic project folder synced \u2192 ${sync.newName}`);
@@ -31533,7 +32079,9 @@ var WsClient = class {
       case WsChannels.PHYSIC_DELETE: {
         const del = payload;
         if (del.name) {
-          rmSync4(join13(this.context.profileDir, del.name), { recursive: true, force: true });
+          const delRoot = this.physicFolderPath(del.name);
+          if (delRoot) void uninstallCron(delRoot).catch(() => void 0);
+          rmSync4(join15(this.context.profileDir, del.name), { recursive: true, force: true });
           this.bus.log(`Physic project folder deleted (project removed) \u2192 ${del.name}`);
         }
         this.bus.setProject(null);
@@ -31542,6 +32090,11 @@ var WsClient = class {
       }
       case WsChannels.COMMAND_DISPATCH: {
         const dispatch = payload;
+        if (this.handledCommands.has(dispatch.commandId)) {
+          logger.info("command.dispatch.duplicate", { commandId: dispatch.commandId });
+          break;
+        }
+        this.markCommandHandled(dispatch.commandId);
         logger.info("command.dispatch", {
           commandId: dispatch.commandId,
           cmd: dispatch.cmd,
@@ -31593,6 +32146,53 @@ var WsClient = class {
           (reply) => this.send(WsChannels.FS_READ, reply, message.id)
         );
         break;
+      case WsChannels.FS_WRITE: {
+        const req = payload;
+        void writeWorkerFile(this.physicRoot, req.path, req.content).then(
+          (reply) => this.send(WsChannels.FS_WRITE, reply, message.id)
+        );
+        break;
+      }
+      case WsChannels.AUTONOMOUS_READ:
+        if (this.physicRoot) {
+          void readAutonomous(this.physicRoot).then(
+            (reply) => this.send(WsChannels.AUTONOMOUS_READ, reply, message.id)
+          );
+        }
+        break;
+      case WsChannels.AUTONOMOUS_LOGS: {
+        const req = payload;
+        if (this.physicRoot) {
+          void readAutonomousLogs(this.physicRoot, req.date).then(
+            (reply) => this.send(WsChannels.AUTONOMOUS_LOGS, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.AUTONOMOUS_WRITE: {
+        const req = payload;
+        if (this.physicRoot) {
+          void writeAutonomous(this.physicRoot, req, req.by ?? "unknown").then(
+            (reply) => this.send(WsChannels.AUTONOMOUS_WRITE, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.CONFIG_READ:
+        this.send(
+          WsChannels.CONFIG_READ,
+          { config: readConfigText(this.context.profileDir) },
+          message.id
+        );
+        break;
+      case WsChannels.CONFIG_WRITE: {
+        const res = applyConfigText(
+          this.context.profileDir,
+          payload.config
+        );
+        this.send(WsChannels.CONFIG_WRITE, res, message.id);
+        break;
+      }
       case WsChannels.GIT_DIFF:
         void gitDiff(payload.path).then(
           (reply) => this.send(WsChannels.GIT_DIFF, reply, message.id)
@@ -31631,10 +32231,15 @@ var WsClient = class {
       }
       case WsChannels.LOG_READ: {
         const limit = Math.min(Math.max(payload.limit ?? 200, 1), 2e3);
-        const lines = readRecentLogLines(join13(this.context.profileDir, "logs"), limit);
+        const lines = readRecentLogLines(join15(this.context.profileDir, "logs"), limit);
         this.send(WsChannels.LOG_READ, { lines }, message.id);
         break;
       }
+      case WsChannels.COMMAND_OUTPUT_READ: {
+        const output = readCommandOutput(payload.commandId);
+        this.send(WsChannels.COMMAND_OUTPUT_READ, { output }, message.id);
+        break;
+      }
       case WsChannels.PROJECT_CREATE:
         void scaffoldProject(
           payload,
@@ -31645,6 +32250,7 @@ var WsClient = class {
       case WsChannels.PROJECT_ADD:
         void addProject(
           payload,
+          this.context.profileDir,
           (p) => this.send(WsChannels.PROJECT_PROGRESS, p)
         ).then((reply) => this.send(WsChannels.PROJECT_ADD, reply, message.id));
         break;
@@ -31655,6 +32261,9 @@ var WsClient = class {
           (reply) => this.send(WsChannels.REVIEW_EVALUATE, reply, message.id)
         );
         break;
+      case WsChannels.CONSOLE_WATCH:
+        this.setConsoleWatching(payload.on);
+        break;
       default:
         this.bus.log(`Unsupported channel: ${message.channel}`, "warn");
     }
@@ -31699,7 +32308,7 @@ var WsClient = class {
     if (perPromptLimit > 0) {
       const estimated = estimateTokens(prompt);
       if (estimated > perPromptLimit) {
-        this.rejectPromptOverLimit(commandId, origin, estimated, perPromptLimit);
+        this.rejectPromptOverLimit(commandId, origin, prompt, estimated, perPromptLimit);
         return;
       }
     }
@@ -31714,7 +32323,7 @@ var WsClient = class {
         verdict = { commandId, ok: false, reasons: ["unavailable"] };
       }
       if (!verdict.ok) {
-        this.rejectByReview(commandId, origin, verdict.reasons);
+        this.rejectByReview(commandId, origin, prompt, verdict.reasons);
         return;
       }
     }
@@ -31736,17 +32345,20 @@ var WsClient = class {
       });
     }
     const plan = planAiRun(prompt, config, startDir ?? workingDir);
+    const markerArgs = plan.attempts[0]?.args ?? [];
     this.bus.push({ source: origin, kind: "aireq", text: `${plan.cmd} \u2039 ${prompt}` });
     logger.info("command.ai", { commandId, origin, cmd: plan.cmd, profiles: plan.attempts.length });
     if (origin === "local") {
       this.send(WsChannels.COMMAND_ANNOUNCE, {
         commandId,
         cmd: plan.cmd,
-        args: plan.args,
+        args: markerArgs,
+        // The raw prompt so the web console echoes it like this TUI (ADR-0108), not "claude".
+        prompt,
         origin: "local"
       });
     }
-    recordCommand({ commandId, cmd: plan.cmd, args: plan.args });
+    recordCommand({ commandId, cmd: plan.cmd, args: markerArgs });
     const startedAt = (/* @__PURE__ */ new Date()).toISOString();
     this.bus.startBusy(plan.cmd);
     let seq = 0;
@@ -31782,17 +32394,18 @@ var WsClient = class {
           this.bus.push({ source: origin, kind: "out", text: resultBuf });
         }
       },
-      onAttemptStart: (label, index, total) => this.bus.push({
-        source: origin,
-        kind: "log",
-        text: `\u2192 trying ${plan.cmd} profile "${label}" (${index + 1}/${total})\u2026`
-      }),
-      onAttemptFail: (label, reason) => this.bus.push({
-        source: origin,
-        kind: "log",
-        text: reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : `profile "${label}" failed to authenticate \u2014 trying next`,
-        level: "warn"
-      })
+      onAttemptStart: (label, index, total) => {
+        const text = `\u2192 trying ${plan.cmd} profile "${label}" (${index + 1}/${total})\u2026`;
+        this.bus.push({ source: origin, kind: "log", text });
+        this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: `${text}
+`, log: true });
+      },
+      onAttemptFail: (label, reason) => {
+        const text = reason === "limit" ? `profile "${label}" hit its session limit \u2014 trying next` : `profile "${label}" failed to authenticate \u2014 trying next`;
+        this.bus.push({ source: origin, kind: "log", text, level: "warn" });
+        this.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: `${text}
+`, log: true });
+      }
     });
     this.bus.endBusy(plan.cmd);
     const profileLabel = result.workedDir ? profileDisplayLabel(result.workedDir) : null;
@@ -31811,10 +32424,19 @@ var WsClient = class {
     this.send(WsChannels.COMMAND_HISTORY, {
       commandId,
       cmd: plan.cmd,
-      args: plan.args,
+      args: markerArgs,
       status: result.exitCode === 0 ? "done" : "failed",
       exitCode: result.exitCode,
       tokens: result.usage.tokens,
+      // The ai_tokens split for this run (ADR-0145); attached only when we metered real tokens.
+      ...result.usage.tokens > 0 && {
+        tokensBreakdown: {
+          input: result.usage.input,
+          output: result.usage.output,
+          cacheRead: result.usage.cacheRead,
+          cacheCreation: result.usage.cacheCreation
+        }
+      },
       startedAt,
       finishedAt: (/* @__PURE__ */ new Date()).toISOString()
     });
@@ -31823,7 +32445,16 @@ var WsClient = class {
       { metric: UsageMetric.COMMANDS, amount: 1, occurredAt }
     ];
     if (result.exitCode === 0 && result.usage.tokens > 0) {
-      events.push({ metric: UsageMetric.AI_TOKENS, amount: result.usage.tokens, occurredAt });
+      events.push({
+        metric: UsageMetric.AI_TOKENS,
+        amount: result.usage.tokens,
+        occurredAt,
+        // The ai_tokens split so the server can persist + display it (ADR-0145).
+        inputTokens: result.usage.input,
+        outputTokens: result.usage.output,
+        cacheReadTokens: result.usage.cacheRead,
+        cacheCreationTokens: result.usage.cacheCreation
+      });
       this.bus.addTokens?.(result.usage.tokens);
     }
     this.reportUsage(events, profileLabel);
@@ -31847,7 +32478,7 @@ var WsClient = class {
     if (threshold <= 0 || cmd !== "claude") return null;
     const util2 = this.usageSnapshot?.session.utilizationPct ?? 0;
     if (util2 < threshold) return null;
-    const dirs = claudeConfigDirs(config);
+    const dirs = claudeHomeDirs(config);
     if (dirs.length < 2) return null;
     const currentIndex = workingDir ? dirs.indexOf(workingDir) : -1;
     const next = dirs[(currentIndex + 1) % dirs.length];
@@ -31858,7 +32489,7 @@ var WsClient = class {
    * without spawning: surface it in the transcript + close the command on the server with a
    * PROMPT_TOKEN_LIMIT_EXCEEDED note (exit 1). No usage is metered (nothing ran).
    */
-  rejectPromptOverLimit(commandId, origin, estimated, limit) {
+  rejectPromptOverLimit(commandId, origin, prompt, estimated, limit) {
     const message = `[PROMPT_TOKEN_LIMIT_EXCEEDED] Prompt (~${estimated} tokens) exceeds the project per-prompt limit of ${limit} tokens.`;
     logger.warn("command.ai.prompt-limit", { commandId, origin, estimated, limit });
     this.bus.push({ source: origin, kind: "log", text: message, level: "error" });
@@ -31867,6 +32498,7 @@ var WsClient = class {
         commandId,
         cmd: "claude",
         args: [],
+        prompt,
         origin: "local"
       });
     }
@@ -31884,7 +32516,7 @@ var WsClient = class {
    * verdict + close the command on the server. `reasons` contains only violation categories
    * (never secret values); a "unavailable" reason maps to no-outbound-available.
    */
-  rejectByReview(commandId, origin, reasons) {
+  rejectByReview(commandId, origin, prompt, reasons) {
     const unavailable = reasons.includes("unavailable");
     const code = unavailable ? "OUTBOUND_REVIEW_UNAVAILABLE" : "OUTBOUND_REVIEW_REJECTED";
     const detail = reasons.filter((r) => r !== "unavailable").join(", ");
@@ -31896,6 +32528,7 @@ var WsClient = class {
         commandId,
         cmd: "claude",
         args: [],
+        prompt,
         origin: "local"
       });
     }
@@ -31929,12 +32562,65 @@ var WsClient = class {
     };
     this.socket.send(JSON.stringify(envelope));
   }
+  /**
+   * Console sync (ADR-0150): emit one incremental `console.sync` event (add/update/clear) — only
+   * while a web Console viewer is attached (`consoleWatching`); each carries the next `rev` so the
+   * web detects a gap. Dropped when disconnected — the next snapshot on (re)attach re-syncs.
+   */
+  emitConsole(ev) {
+    if (!this.consoleWatching) return;
+    this.send(WsChannels.CONSOLE_SYNC, { ...ev, rev: ++this.consoleRev });
+  }
+  /** Send a full transcript snapshot (on attach + the periodic self-heal — ADR-0150). */
+  sendConsoleSnapshot() {
+    const entries2 = this.bus.snapshot().map(toDtoEntry);
+    this.send(WsChannels.CONSOLE_SYNC, {
+      kind: "snapshot",
+      rev: ++this.consoleRev,
+      entries: entries2
+    });
+  }
+  /**
+   * Handle `console.watch` (ADR-0150) — a renewable lease. `on` renews it: start mirroring on the
+   * first assertion (fresh snapshot + arm the periodic snapshot); later renewals just extend the
+   * lease (no re-snapshot). No renewal within `CONSOLE_WATCH_LEASE_MS` ⇒ the lease expires and
+   * syncing stops. An explicit `on:false` stops immediately.
+   */
+  setConsoleWatching(on) {
+    if (!on) {
+      this.stopConsoleSync();
+      return;
+    }
+    if (this.consoleWatchExpiry) clearTimeout(this.consoleWatchExpiry);
+    this.consoleWatchExpiry = setTimeout(() => this.stopConsoleSync(), CONSOLE_WATCH_LEASE_MS);
+    this.consoleWatchExpiry.unref?.();
+    if (this.consoleWatching) return;
+    this.consoleWatching = true;
+    this.sendConsoleSnapshot();
+    this.consoleSnapshotTimer = setInterval(
+      () => this.sendConsoleSnapshot(),
+      CONSOLE_SNAPSHOT_INTERVAL_MS
+    );
+    this.consoleSnapshotTimer.unref?.();
+  }
+  /** Stop mirroring the transcript (lease expired / viewer left / reconnect) — clears both timers. */
+  stopConsoleSync() {
+    this.consoleWatching = false;
+    if (this.consoleSnapshotTimer) {
+      clearInterval(this.consoleSnapshotTimer);
+      this.consoleSnapshotTimer = null;
+    }
+    if (this.consoleWatchExpiry) {
+      clearTimeout(this.consoleWatchExpiry);
+      this.consoleWatchExpiry = null;
+    }
+  }
   /**
    * Send a cli → server request and await the reply by envelope id (15s timeout).
    * Used for quota.check before spawning an AI cli (ADR-0020).
    */
   request(channel, data) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve7, reject) => {
       if (!this.socket || !this.sessionKey) {
         reject(new Error("Not connected to the server."));
         return;
@@ -31954,7 +32640,7 @@ var WsClient = class {
       }, 15e3);
       timer.unref?.();
       this.pending.set(envelope.id, {
-        resolve: (value) => resolve6(value),
+        resolve: (value) => resolve7(value),
         timer
       });
       this.socket.send(JSON.stringify(envelope));
@@ -32001,7 +32687,7 @@ var WsClient = class {
   /** Create the physic folder at an absolute path if missing (best-effort). */
   ensurePhysicFolderPath(folder) {
     try {
-      if (!existsSync7(folder)) {
+      if (!existsSync8(folder)) {
         mkdirSync4(folder, { recursive: true });
         this.bus.log(`Created physic project folder: ${folder}`);
       }
@@ -32016,7 +32702,7 @@ var WsClient = class {
    */
   physicFolderPath(projectName) {
     const safe = projectName.replace(/[/\\]/g, "_").replace(/\.\./g, "_").trim();
-    return safe ? join13(this.context.profileDir, safe) : null;
+    return safe ? join15(this.context.profileDir, safe) : null;
   }
   /**
    * Report machine.status: version + the state of the physic project being served
@@ -32030,8 +32716,9 @@ var WsClient = class {
       projects: [],
       version: CLI_VERSION,
       physicPath,
-      physicPathExists: physicPath ? existsSync7(physicPath) : void 0,
-      autonomousRunning: false
+      physicPathExists: physicPath ? existsSync8(physicPath) : void 0,
+      // Real coarse state (ADR-0152): !paused and a recent tick (was hard-coded false).
+      autonomousRunning: physicPath ? isAutonomousRunning(physicPath) : false
     });
   }
   /** Heartbeat every 30s: ping + periodically re-report machine.status. */
@@ -32048,6 +32735,8 @@ var WsClient = class {
     this.heartbeat = null;
     if (this.usageTimer) clearInterval(this.usageTimer);
     this.usageTimer = null;
+    if (this.logUploadTimer) clearInterval(this.logUploadTimer);
+    this.logUploadTimer = null;
   }
   /**
    * Poll the Claude subscription usage API and push a `machine.usage` snapshot (ADR-0072).
@@ -32060,7 +32749,7 @@ var WsClient = class {
       const config = readProfileConfig(this.context.profileDir);
       const aiCli2 = config.aiCli ?? "claude";
       const working = getWorkingProfile(this.context.profileDir, aiCli2);
-      const configured = claudeConfigDirs(config);
+      const configured = claudeHomeDirs(config);
       const dirs = working ? [working, ...configured.filter((d) => d !== working)] : configured;
       const profile = working ? basename3(working) : dirs[0] ? basename3(dirs[0]) : "default";
       const api = await checkClaudeUsage(dirs, aiCli2);
@@ -32085,6 +32774,29 @@ var WsClient = class {
     this.usageTimer.unref?.();
     void this.pollUsage();
   }
+  /** Start the periodic upload of the cli's own JSONL log to the server (ADR-0122). */
+  startLogUpload() {
+    if (this.logUploadTimer) clearInterval(this.logUploadTimer);
+    this.logUploadTimer = setInterval(() => this.uploadLog(), LOG_UPLOAD_MS);
+    this.logUploadTimer.unref?.();
+    this.uploadLog();
+  }
+  /**
+   * Upload the newest cli log file + the total log footprint to the server (ADR-0122), so it is
+   * stored + retained server-side and counted in the machine user's storage. Skips when nothing
+   * changed since the last upload. Best-effort — never disrupts the session.
+   */
+  uploadLog() {
+    try {
+      const upload = readLogUpload(join15(this.context.profileDir, "logs"));
+      if (!upload) return;
+      const sig = `${upload.fileName}:${upload.totalBytes}`;
+      if (sig === this.lastLogSig) return;
+      this.lastLogSig = sig;
+      this.send(WsChannels.MACHINE_LOG, upload);
+    } catch {
+    }
+  }
   /**
    * Logout: close WS, delete `.cre`, and prompt to pair again (Unlinked state).
    */
@@ -32104,10 +32816,10 @@ var WsClient = class {
 };
 
 // src/core/instance-lock.ts
-import { readFileSync as readFileSync12, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "fs";
-import { join as join14 } from "path";
+import { readFileSync as readFileSync14, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "fs";
+import { join as join16 } from "path";
 function lockPath(profileDir2) {
-  return join14(profileDir2, "start.lock");
+  return join16(profileDir2, "start.lock");
 }
 function isAlive(pid) {
   try {
@@ -32119,7 +32831,7 @@ function isAlive(pid) {
 }
 function lockHolder(profileDir2) {
   try {
-    const pid = Number.parseInt(readFileSync12(lockPath(profileDir2), "utf8").trim(), 10);
+    const pid = Number.parseInt(readFileSync14(lockPath(profileDir2), "utf8").trim(), 10);
     if (Number.isInteger(pid) && pid > 0 && isAlive(pid)) return pid;
   } catch {
   }
@@ -32132,7 +32844,7 @@ function acquireInstanceLock(profileDir2) {
 }
 function releaseInstanceLock(profileDir2) {
   try {
-    const pid = Number.parseInt(readFileSync12(lockPath(profileDir2), "utf8").trim(), 10);
+    const pid = Number.parseInt(readFileSync14(lockPath(profileDir2), "utf8").trim(), 10);
     if (pid === process.pid) rmSync5(lockPath(profileDir2), { force: true });
   } catch {
   }
@@ -32181,6 +32893,24 @@ var SessionBus = class {
     this.emitter.emit("transcript", entry);
     return entry.id;
   }
+  /**
+   * Wipe the transcript (`/clear` + idle auto-clear — ADR-0057): empty the replay history and
+   * notify consumers so the TUI clears the screen and the console-sync emitter (ADR-0150) sends
+   * a `clear` event. The current snapshot afterwards is empty (until new lines arrive).
+   */
+  clear() {
+    this.history.length = 0;
+    this.emitter.emit("clear");
+  }
+  /** Subscribe to transcript clears (TUI screen wipe + console.sync `clear` — ADR-0150). */
+  onClear(fn) {
+    this.emitter.on("clear", fn);
+    return () => this.emitter.off("clear", fn);
+  }
+  /** The current transcript entries (a copy) — the console-sync snapshot source (ADR-0150). */
+  snapshot() {
+    return [...this.history];
+  }
   /**
    * Producer → consumers: replace the text of an already-pushed entry (ADR-0108) — used to
    * grow a streaming `result` block in place without pushing a new line per chunk. No-op if the
@@ -37616,8 +38346,8 @@ var Ink = class {
     }
   }
   async waitUntilExit() {
-    this.exitPromise ||= new Promise((resolve6, reject) => {
-      this.resolveExitPromise = resolve6;
+    this.exitPromise ||= new Promise((resolve7, reject) => {
+      this.resolveExitPromise = resolve7;
       this.rejectExitPromise = reject;
     });
     return this.exitPromise;
@@ -37984,17 +38714,17 @@ var import_react21 = __toESM(require_react(), 1);
 var import_react26 = __toESM(require_react(), 1);
 
 // src/core/input-history.ts
-import { existsSync as existsSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync16, writeFileSync as writeFileSync7 } from "fs";
+import { join as join17 } from "path";
 var MAX_HISTORY = 200;
 function historyPath(profileDir2) {
-  return join15(profileDir2, "input-history.json");
+  return join17(profileDir2, "input-history.json");
 }
 function loadInputHistory(profileDir2) {
   const path = historyPath(profileDir2);
-  if (!existsSync9(path)) return [];
+  if (!existsSync10(path)) return [];
   try {
-    const data = JSON.parse(readFileSync14(path, "utf8"));
+    const data = JSON.parse(readFileSync16(path, "utf8"));
     return Array.isArray(data) ? data.filter((x) => typeof x === "string") : [];
   } catch {
     return [];
@@ -38254,20 +38984,20 @@ function TranscriptLine({ line }) {
 var import_react24 = __toESM(require_react(), 1);
 
 // src/ui/slash-commands.ts
-import { existsSync as existsSync10 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync11 } from "fs";
+import { join as join18 } from "path";
 var CONFIG_KEYS = [
   "aiCli",
-  "aiArgs",
-  "claudeConfigDir",
+  "claudeHome",
   "codexHome",
+  "antigravityHome",
   "physicPath",
   "commandHistoryUploadMinutes",
   "autoUpdate",
   "aiEnv"
 ];
 function configPath(profileDir2) {
-  return join16(profileDir2, "config.json");
+  return join18(profileDir2, "config.json");
 }
 function parseConfigAssignment(key, valueTokens) {
   const value = valueTokens.join(" ").trim();
@@ -38276,14 +39006,13 @@ function parseConfigAssignment(key, valueTokens) {
     case "physicPath":
       if (!value) return { error: `Missing value for "${key}".` };
       return { patch: { [key]: value } };
-    case "claudeConfigDir":
-    case "codexHome": {
+    case "claudeHome":
+    case "codexHome":
+    case "antigravityHome": {
       const dirs = valueTokens.filter((t) => t.trim());
       if (dirs.length === 0) return { error: `Missing value for "${key}".` };
-      return { patch: { [key]: dirs.length === 1 ? dirs[0] : dirs } };
+      return { patch: { [key]: dirs.map((profile) => ({ profile, model: "" })) } };
     }
-    case "aiArgs":
-      return { patch: { aiArgs: valueTokens } };
     case "commandHistoryUploadMinutes": {
       const n = Number(value);
       if (!Number.isFinite(n) || n <= 0) return { error: `"${value}" is not a positive number.` };
@@ -38313,22 +39042,19 @@ function runConfig(ctx) {
     return;
   }
   if (sub === "init") {
-    if (existsSync10(path)) {
-      ctx.print(`config already exists: ${path} (use /config set <key> <value>)`, "warn");
+    const writeDefaults = (verb) => {
+      overwriteProfileConfig(dir2, defaultProfileConfig());
+      ctx.print(`\u2714 ${verb} default config: ${path}`);
+      ctx.print("add claude profiles: /config set claudeHome .claude .claude-1 (tried in order)");
+    };
+    if (existsSync11(path)) {
+      ctx.confirm(
+        `config exists: ${path} \u2014 replace it with defaults? (y/N)`,
+        () => writeDefaults("replaced with")
+      );
       return;
     }
-    const defaults = {
-      aiCli: "claude",
-      aiArgs: ["-p"],
-      // Lists so failover across profiles is discoverable (ADR-0057) — add more dirs.
-      claudeConfigDir: [".claude"],
-      codexHome: [".codex"],
-      autoUpdate: true,
-      commandHistoryUploadMinutes: 10
-    };
-    writeProfileConfig(dir2, defaults);
-    ctx.print(`\u2714 wrote default config: ${path}`);
-    ctx.print("add claude profiles: /config set claudeConfigDir .claude .claude-1 (tried in order)");
+    writeDefaults("wrote");
     return;
   }
   if (sub === "set") {
@@ -38406,7 +39132,7 @@ function runOutput(ctx) {
 }
 function runLogs(ctx) {
   const n = Math.max(1, Math.min(200, Number(ctx.args[0]) || 20));
-  const dir2 = join16(ctx.info.profileDir, "logs");
+  const dir2 = join18(ctx.info.profileDir, "logs");
   const lines = readRecentLogLines(dir2, n);
   if (lines.length === 0) {
     ctx.print("No log lines yet.");
@@ -38729,11 +39455,30 @@ function App2({
   const [expanded, setExpanded] = (0, import_react26.useState)(() => /* @__PURE__ */ new Set());
   const [history, setHistory] = (0, import_react26.useState)(() => loadInputHistory(info.profileDir));
   const [startedAt] = (0, import_react26.useState)(() => Date.now());
+  const [pendingConfirm, setPendingConfirm] = (0, import_react26.useState)(null);
+  const [autoClearIdleMs] = (0, import_react26.useState)(() => {
+    const min = readProfileConfig(info.profileDir).autoClearIdleMinutes ?? 10;
+    return min > 0 ? min * 6e4 : 0;
+  });
+  const lastActivityRef = (0, import_react26.useRef)(startedAt);
+  const busyRef = (0, import_react26.useRef)(busy);
+  busyRef.current = busy;
+  const entriesLenRef = (0, import_react26.useRef)(entries2.length);
+  entriesLenRef.current = entries2.length;
+  const pendingConfirmRef = (0, import_react26.useRef)(pendingConfirm);
+  pendingConfirmRef.current = pendingConfirm;
+  const clearTranscript = (0, import_react26.useCallback)(() => {
+    setEntries([]);
+    setScrollBack(0);
+    stdout.write("\x1B[2J\x1B[3J\x1B[H");
+    bus.clear();
+  }, [stdout, bus]);
   (0, import_react26.useEffect)(() => {
     const offTranscript = bus.onTranscript((entry) => {
       setEntries(
         (prev) => prev.length >= ENTRY_CAP ? [...prev.slice(prev.length - ENTRY_CAP + 1), entry] : [...prev, entry]
       );
+      if (entry.source !== "system") lastActivityRef.current = Date.now();
       if (entry.kind === "aireq" || entry.kind === "aires") setExpanded(/* @__PURE__ */ new Set());
     });
     const offUpdate = bus.onTranscriptUpdate(
@@ -38760,6 +39505,21 @@ function App2({
       offTokens();
     };
   }, [bus]);
+  (0, import_react26.useEffect)(() => {
+    if (autoClearIdleMs <= 0) return;
+    const timer = setInterval(() => {
+      if (busyRef.current !== null || pendingConfirmRef.current || entriesLenRef.current === 0) return;
+      if (Date.now() - lastActivityRef.current < autoClearIdleMs) return;
+      clearTranscript();
+      bus.push({
+        source: "system",
+        kind: "log",
+        text: `Transcript auto-cleared after ${Math.round(autoClearIdleMs / 6e4)} min idle.`
+      });
+      lastActivityRef.current = Date.now();
+    }, 6e4);
+    return () => clearInterval(timer);
+  }, [autoClearIdleMs, bus, clearTranscript]);
   const bodyHeight = Math.max(3, rows - CHROME_ROWS);
   const textWidth = Math.max(10, cols - 1 - 8);
   const lines = (0, import_react26.useMemo)(() => flattenEntries(entries2, textWidth, expanded), [entries2, textWidth, expanded]);
@@ -38785,19 +39545,28 @@ function App2({
   };
   const handleSubmit = (input) => {
     setScrollBack(0);
-    setHistory((prev) => appendInputHistory(info.profileDir, input, prev));
+    lastActivityRef.current = Date.now();
     const trimmed = input.trim();
+    if (pendingConfirm) {
+      const { onYes } = pendingConfirm;
+      setPendingConfirm(null);
+      bus.push({ source: "local", kind: "cmd", text: trimmed });
+      if (/^y(es)?$/i.test(trimmed)) onYes();
+      else bus.push({ source: "local", kind: "log", text: "cancelled." });
+      return;
+    }
+    setHistory((prev) => appendInputHistory(info.profileDir, input, prev));
     if (trimmed.startsWith("/")) {
       bus.push({ source: "local", kind: "cmd", text: trimmed });
       runSlashCommand(trimmed, {
         info,
         print: (text, level) => bus.push({ source: "local", kind: "log", text, level }),
-        clear: () => {
-          setEntries([]);
-          setScrollBack(0);
-          stdout.write("\x1B[2J\x1B[3J\x1B[H");
-        },
+        clear: clearTranscript,
         quit: () => exit(),
+        confirm: (prompt, onYes) => {
+          bus.push({ source: "local", kind: "log", text: prompt });
+          setPendingConfirm({ prompt, onYes });
+        },
         submitAi: (aiInput) => bus.submitLocal(aiInput),
         reconnect: () => bus.requestReconnect(),
         expand: expandFold,
@@ -38864,11 +39633,12 @@ async function runStart(profileDir2, profileName) {
     return;
   }
   logger.configure({
-    dir: join17(profileDir2, "logs"),
+    dir: join19(profileDir2, "logs"),
     level: resolveLogLevel(),
     base: { version: CLI_VERSION, profile: profileName, scope: credential.scope }
   });
   logger.info("cli.start", { serverUrl: credential.serverUrl });
+  ensureProfileConfig(profileDir2);
   const config = readProfileConfig(profileDir2);
   const autoUpdate = config.autoUpdate !== false && process.env.FOURPM_NO_UPDATE !== "1";
   const result = await checkAndUpdate(credential.serverUrl, autoUpdate);
@@ -38883,7 +39653,7 @@ async function runStart(profileDir2, profileName) {
   if (result.action === "updated") {
     logger.info("update.updated", { version: result.version });
     console.log("Restarting with the new version\u2026");
-    const child = spawn4(process.execPath, process.argv.slice(1), {
+    const child = spawn5(process.execPath, process.argv.slice(1), {
       stdio: "inherit",
       env: { ...process.env, FOURPM_NO_UPDATE: "1" }
     });
@@ -38921,7 +39691,7 @@ async function runStart(profileDir2, profileName) {
           logger.error("ws.run.crash", { message: e.message, stack: e.stack });
           if (client.isStopped) return;
           bus.log(`Recovered from an internal error \u2014 reconnecting: ${e.message}`, "error");
-          await new Promise((resolve6) => setTimeout(resolve6, 1e3));
+          await new Promise((resolve7) => setTimeout(resolve7, 1e3));
         }
       }
     };
@@ -39048,10 +39818,10 @@ function Picker({
   ] });
 }
 function selectFromList(items, title) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     let chosen = null;
     const app = render_default(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Picker, { items, title, onDone: (v) => chosen = v }));
-    void app.waitUntilExit().then(() => resolve6(chosen));
+    void app.waitUntilExit().then(() => resolve7(chosen));
   });
 }