@4pm/cli 0.9.0 → 1.2.3

package/dist/index.js

@@ -2283,7 +2283,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes3, createHash: createHash3 } = __require("crypto");
+    var { randomBytes: randomBytes3, createHash: createHash5 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -2951,7 +2951,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -3320,7 +3320,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter4 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash3 } = __require("crypto");
+    var { createHash: createHash5 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -3627,7 +3627,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash3("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -5973,14 +5973,14 @@ var require_signal_exit = __commonJS({
         if (opts && opts.alwaysLast) {
           ev = "afterexit";
         }
-        var remove = function() {
+        var remove2 = function() {
           emitter.removeListener(ev, cb);
           if (emitter.listeners("exit").length === 0 && emitter.listeners("afterexit").length === 0) {
             unload();
           }
         };
         emitter.on(ev, cb);
-        return remove;
+        return remove2;
       };
       unload = function unload2() {
         if (!loaded || !processOk(global.process)) {
@@ -11606,7 +11606,7 @@ var require_react_reconciler_development = __commonJS({
           }
         }
         var assign = Object.assign;
-        function get(key) {
+        function get2(key) {
           return key._reactInternals;
         }
         function set(key, value) {
@@ -11961,7 +11961,7 @@ var require_react_reconciler_development = __commonJS({
               instance._warnedAboutRefsInRender = true;
             }
           }
-          var fiber = get(component);
+          var fiber = get2(component);
           if (!fiber) {
             return false;
           }
@@ -18301,7 +18301,7 @@ var require_react_reconciler_development = __commonJS({
         var classComponentUpdater = {
           isMounted,
           enqueueSetState: function(inst, payload, callback) {
-            var fiber = get(inst);
+            var fiber = get2(inst);
             var eventTime = requestEventTime();
             var lane = requestUpdateLane(fiber);
             var update = createUpdate(eventTime, lane);
@@ -18322,7 +18322,7 @@ var require_react_reconciler_development = __commonJS({
             }
           },
           enqueueReplaceState: function(inst, payload, callback) {
-            var fiber = get(inst);
+            var fiber = get2(inst);
             var eventTime = requestEventTime();
             var lane = requestUpdateLane(fiber);
             var update = createUpdate(eventTime, lane);
@@ -18344,7 +18344,7 @@ var require_react_reconciler_development = __commonJS({
             }
           },
           enqueueForceUpdate: function(inst, callback) {
-            var fiber = get(inst);
+            var fiber = get2(inst);
             var eventTime = requestEventTime();
             var lane = requestUpdateLane(fiber);
             var update = createUpdate(eventTime, lane);
@@ -26201,7 +26201,7 @@ var require_react_reconciler_development = __commonJS({
           if (!parentComponent) {
             return emptyContextObject;
           }
-          var fiber = get(parentComponent);
+          var fiber = get2(parentComponent);
           var parentContext = findCurrentUnmaskedContext(fiber);
           if (fiber.tag === ClassComponent) {
             var Component = fiber.type;
@@ -26212,7 +26212,7 @@ var require_react_reconciler_development = __commonJS({
           return parentContext;
         }
         function findHostInstance(component) {
-          var fiber = get(component);
+          var fiber = get2(component);
           if (fiber === void 0) {
             if (typeof component.render === "function") {
               throw new Error("Unable to find node on an unmounted component.");
@@ -26229,7 +26229,7 @@ var require_react_reconciler_development = __commonJS({
         }
         function findHostInstanceWithWarning(component, methodName) {
           {
-            var fiber = get(component);
+            var fiber = get2(component);
             if (fiber === void 0) {
               if (typeof component.render === "function") {
                 throw new Error("Unable to find node on an unmounted component.");
@@ -28274,16 +28274,19 @@ function profileDir(name) {
 }
 function defaultProfileConfig() {
   return {
+    // `aiCli` still names the provider the OAuth-only paths use (usage snapshot / support answer).
     aiCli: "claude",
-    // Lists so failover across profiles is discoverable (ADR-0057) — add more objects.
-    // `args` here are EXTRA args only (empty by default) — the token-metering flags
-    // (claude stream-json / codex `exec --json`) are hardcoded in source and always
-    // injected (ADR-0158, ADR-0072), so they cannot be dropped by editing this file.
-    // `model` = the CLI's `--model` flag; default "sonnet" — the balanced mid-price tier
-    // (cheaper than opus, more capable than haiku). "" ⇒ the CLI's own default model.
-    claudeHome: [{ profile: ".claude", args: [], model: "sonnet" }],
-    codexHome: [{ profile: ".codex", args: [], model: "" }],
-    antigravityHome: [],
+    // Unified mixed credential list (ADR-0182): one ordered, cross-provider failover chain — the
+    // list order IS the priority, and `aiFailoverMode` picks working-first vs top-first. `args`
+    // here are EXTRA args only (empty by default) — the token-metering flags (claude stream-json /
+    // codex `exec --json`) are hardcoded in source and always injected (ADR-0158, ADR-0072), so
+    // they can't be dropped by editing this file. `model` = the CLI's `--model` flag; default
+    // "sonnet" (balanced mid-price tier). "" ⇒ the CLI's own default model.
+    aiProfiles: [
+      { provider: "claude", profile: ".claude", args: [], model: "sonnet" },
+      { provider: "codex", profile: ".codex", args: [], model: "" }
+    ],
+    aiFailoverMode: "remember",
     autoUpdate: true,
     commandHistoryUploadMinutes: 10,
     autoClearIdleMinutes: 10
@@ -28431,6 +28434,13 @@ function confirmPairing(serverUrl, hashcode2, machine) {
     hostname: machine.hostname
   });
 }
+function pairWithToken(serverUrl, token, machine) {
+  return post(serverUrl, "/machine-links/pair-token", {
+    token,
+    fingerprint: machine.fingerprint,
+    hostname: machine.hostname
+  });
+}
 function requestWsToken(serverUrl, hashcode3) {
   return post(serverUrl, "/machine-links/token", { hashcode3 });
 }
@@ -28449,22 +28459,25 @@ async function fetchCliVersion(serverUrl) {
 function sanitizeProfileName(name) {
   return name.replace(/[^a-zA-Z0-9._-]/g, "_") || "profile";
 }
-async function runLink(serverUrl, explicitProfile) {
-  const hashcode1 = randomBytes(32).toString("hex");
-  console.log(`\u2500\u2500 4PM cli pairing (profile: ${explicitProfile ?? "default"}) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
-  console.log("1. Open the 4PM web \u2192 /machines, enter hashcode (1):");
-  console.log(`
+async function runLink(serverUrl, explicitProfile, token = null) {
+  let result;
+  if (token) {
+    console.log(`\u2500\u2500 4PM cli headless pairing (profile: ${explicitProfile ?? "default"}) \u2500\u2500`);
+    result = await pairWithToken(serverUrl, token, collectFingerprint());
+  } else {
+    const hashcode1 = randomBytes(32).toString("hex");
+    console.log(`\u2500\u2500 4PM cli pairing (profile: ${explicitProfile ?? "default"}) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`);
+    console.log("1. Open the 4PM web \u2192 /machines, enter hashcode (1):");
+    console.log(`
    ${hashcode1}
 `);
-  console.log("2. The web will show hashcode (2) \u2014 paste it here.");
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  const hashcode2 = (await rl.question("hashcode (2): ")).trim();
-  rl.close();
-  const { hashcode3, username, scope, projectName } = await confirmPairing(
-    serverUrl,
-    hashcode2,
-    collectFingerprint()
-  );
+    console.log("2. The web will show hashcode (2) \u2014 paste it here.");
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const hashcode2 = (await rl.question("hashcode (2): ")).trim();
+    rl.close();
+    result = await confirmPairing(serverUrl, hashcode2, collectFingerprint());
+  }
+  const { hashcode3, username, scope, projectName } = result;
   const profileName = explicitProfile ?? sanitizeProfileName(username);
   const existed = readCredential(profileDir(profileName), profileName) != null;
   const dir2 = profileDir(profileName);
@@ -28494,8 +28507,8 @@ async function runLink(serverUrl, explicitProfile) {
 }
 
 // src/commands/start.ts
-import { spawn as spawn6 } from "child_process";
-import { join as join23 } from "path";
+import { spawn as spawn8 } from "child_process";
+import { join as join30 } from "path";
 
 // src/core/update.ts
 import { execSync as execSync2 } from "child_process";
@@ -28668,7 +28681,7 @@ async function checkAndUpdate(serverUrl, autoUpdate) {
 // src/core/ws-client.ts
 init_wrapper();
 import { randomUUID } from "crypto";
-import { basename as basename4, join as join19 } from "path";
+import { basename as basename4, join as join25 } from "path";
 
 // ../../22-packages/11-shared/51-utils/src/helpers.ts
 function backoffJitterMs(attempt, baseMs = 500, maxMs = 1e4) {
@@ -28781,6 +28794,9 @@ var PermissionCode = {
   PROJECT_AGENTS: "project.agents",
   // Security & placeholder management (ADR-0154): AI_SECURITY/AI_PLACEHOLDER docs + write-only secrets
   PROJECT_SECRETS: "project.secrets",
+  // Agent tool-permission editor (ADR-0183): edit the Claude `permissions` block of
+  // .claude/settings.json (shared) + per-cli .claude/settings.local.json
+  PROJECT_AGENT_TOOLS: "project.agent_tools",
   // RAG capability install (ADR-0156): install/manage the worker's RAG engine
   PROJECT_RAG: "project.rag",
   // permission
@@ -28811,6 +28827,13 @@ var PermissionCode = {
   // org template files (ADR-0113) — ADMIN + PM manage the org's template library
   TEMPLATE_READ: "template.read",
   TEMPLATE_WRITE: "template.write",
+  // skill/subagent marketplace (ADR-0185) — browse (all roles) + publish (ADMIN/PM/TL/SA_SE)
+  MARKET_READ: "market.read",
+  MARKET_PUBLISH: "market.publish",
+  // moderate the org's global (public) package submissions (ADR-0186) — ADMIN/PM (TL inherits)
+  MARKET_MODERATE: "market.moderate",
+  // knowledge-social posting (ADR-0190) — create/edit/publish + review posts (ADMIN/PM/TL/SA_SE)
+  KNOWLEDGE_PUBLISH: "knowledge.publish",
   // integration (community-server — ADR-0058; served by @4pm/community)
   INTEGRATION_READ: "integration.read",
   INTEGRATION_CONNECT: "integration.connect",
@@ -28862,6 +28885,10 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.QUOTA_MANAGE,
     P.TEMPLATE_READ,
     P.TEMPLATE_WRITE,
+    P.MARKET_READ,
+    P.MARKET_PUBLISH,
+    P.MARKET_MODERATE,
+    P.KNOWLEDGE_PUBLISH,
     P.TEAM_LIST,
     P.TEAM_CREATE,
     P.TEAM_READ,
@@ -28893,6 +28920,7 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_AUTONOMOUS,
     P.PROJECT_AGENTS,
     P.PROJECT_SECRETS,
+    P.PROJECT_AGENT_TOOLS,
     P.PROJECT_RAG,
     P.PERMISSION_LIST,
     P.PERMISSION_READ,
@@ -28923,8 +28951,15 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_AGENTS,
     // manage security/placeholder + set (write-only) secrets — ADR-0154
     P.PROJECT_SECRETS,
+    // edit the Claude tool-permission policy (settings.json + settings.local.json) — ADR-0183
+    P.PROJECT_AGENT_TOOLS,
     // install/manage the worker RAG engine — ADR-0156
     P.PROJECT_RAG,
+    // browse + publish skill/subagent packages — ADR-0185
+    P.MARKET_READ,
+    P.MARKET_PUBLISH,
+    // author knowledge posts — ADR-0190
+    P.KNOWLEDGE_PUBLISH,
     P.INTEGRATION_READ
   ],
   [Role.QA]: [
@@ -28936,6 +28971,8 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
     P.PROJECT_GIT,
+    // browse the marketplace (read-only) — ADR-0185
+    P.MARKET_READ,
     P.INTEGRATION_READ
   ],
   [Role.BA]: [
@@ -28947,6 +28984,8 @@ var ROLE_DEFAULT_PERMISSIONS = {
     P.PROJECT_MEMO_READ,
     P.PROJECT_MEMO_WRITE,
     P.PROJECT_GIT,
+    // browse the marketplace (read-only) — ADR-0185
+    P.MARKET_READ,
     P.INTEGRATION_READ
   ],
   [Role.MACHINE]: [
@@ -33431,6 +33470,7 @@ var createArtifactRequestSchema = external_exports.object({
   kind: external_exports.enum(TEMPLATE_KINDS),
   content: external_exports.string().min(1).max(ARTIFACT_MAX_BYTES)
 });
+var GIT_URL_RE = /^(https?:\/\/|git@[^\s:]+:|ssh:\/\/).+/i;
 var repoSpecSchema = external_exports.object({
   /** Role label (e.g. "docs" / "web" / "server") — descriptive, not constrained. */
   role: external_exports.string().max(60).optional().default(""),
@@ -33438,23 +33478,15 @@ var repoSpecSchema = external_exports.object({
   desc: external_exports.string().max(500).optional().default(""),
   /** Exactly one repo of the project is the primary. */
   primary: external_exports.boolean().optional().default(false),
-  /** `create` a new repo (provider) or use an `existing` one (url). */
-  op: external_exports.enum(["create", "existing"]).default("create"),
-  provider: external_exports.enum(["gh", "glab"]).default("gh"),
-  /** New repo name (op=create; empty ⇒ project id for the primary). */
-  name: external_exports.string().max(100).optional().default(""),
-  visibility: external_exports.enum(["private", "public"]).default("private"),
-  /** Existing repo url to clone/link (op=existing). */
-  url: external_exports.string().max(500).optional().default(""),
+  /** Clone url — `https` or `ssh` (required; ADR-0172). */
+  url: external_exports.string().max(500).regex(GIT_URL_RE, "must be an https or ssh git url"),
   /** Sub-repo subfolder under the target root (empty ⇒ derived from role/name). */
-  subdir: external_exports.string().max(120).optional().default(""),
-  /** Default branch for this repo (empty ⇒ provider default, e.g. `main`). */
-  defaultBranch: external_exports.string().max(100).optional().default(""),
-  /** `.gitignore` template name for this repo (empty ⇒ none). */
-  gitignore: external_exports.string().max(40).optional().default(""),
-  /** Commit-message convention for this repo (empty ⇒ unspecified). */
-  commitConvention: external_exports.string().max(40).optional().default("")
+  subdir: external_exports.string().max(120).optional().default("")
 });
+function repoName(url) {
+  const last = (url || "").trim().replace(/\/+$/, "").split(/[/:]/).pop() ?? "";
+  return last.replace(/\.git$/i, "");
+}
 var specFieldEnvelopeSchema = external_exports.object({
   id: external_exports.string().min(1),
   name: external_exports.string().optional().default(""),
@@ -33512,16 +33544,6 @@ var addRepoRequestSchema = external_exports.object({
       message: "Exactly one repo must be primary"
     });
   }
-  for (let i = 0; i < v.repos.length; i++) {
-    const r = v.repos[i];
-    if (r && r.op === "existing" && !r.url) {
-      ctx.addIssue({
-        code: external_exports.ZodIssueCode.custom,
-        path: ["repos", i, "url"],
-        message: "An existing repo requires a url"
-      });
-    }
-  }
 });
 
 // ../../22-packages/11-shared/31-dto/src/activity.ts
@@ -33563,6 +33585,16 @@ var confirmRequestSchema = external_exports.object({
 var wsTokenRequestSchema = external_exports.object({
   hashcode3: hexTokenSchema
 });
+var pairTokenRequestSchema = external_exports.object({
+  token: external_exports.string().min(16).max(200),
+  fingerprint: external_exports.string().max(200).optional(),
+  hostname: external_exports.string().max(200).optional()
+});
+var issueProvisioningTokenRequestSchema = external_exports.object({
+  machineLinkId: external_exports.string().uuid(),
+  /** TTL seconds (0/absent ⇒ a default short TTL applied server-side). */
+  ttlSec: external_exports.number().int().min(0).max(2592e3).optional()
+});
 var listWorkersQuerySchema = baseRequestSchema.extend({
   status: external_exports.enum(["online", "offline"]).optional()
 });
@@ -33638,6 +33670,20 @@ var agentWriteRequestSchema = external_exports.object({
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["content"], message: "content is required for write" });
   }
 });
+var toolRuleSchema = external_exports.string().min(1).max(500);
+var agentToolsPermissionsSchema = external_exports.object({
+  defaultMode: external_exports.enum(["default", "acceptEdits", "plan", "bypassPermissions"]),
+  allow: external_exports.array(toolRuleSchema).max(500),
+  ask: external_exports.array(toolRuleSchema).max(500),
+  deny: external_exports.array(toolRuleSchema).max(500)
+});
+var agentToolsReadQuerySchema = external_exports.object({
+  scope: external_exports.enum(["shared", "local"])
+});
+var agentToolsWriteRequestSchema = external_exports.object({
+  scope: external_exports.enum(["shared", "local"]),
+  permissions: agentToolsPermissionsSchema
+});
 
 // ../../22-packages/11-shared/31-dto/src/command.ts
 var COMMAND_MAX_LEN = 8e3;
@@ -33844,6 +33890,72 @@ var addonChangeRequestSchema = external_exports.object({
   provider: external_exports.enum([PaymentProvider.STRIPE, PaymentProvider.PAYPAL]).optional()
 });
 
+// ../../22-packages/11-shared/31-dto/src/market.ts
+var listMarketQuerySchema = baseRequestSchema.extend({
+  scope: external_exports.enum(["personal", "org", "global"]).optional(),
+  kind: external_exports.enum(["subagent", "skill"]).optional(),
+  category: external_exports.string().max(50).optional(),
+  tag: external_exports.string().max(50).optional(),
+  minRating: external_exports.coerce.number().min(1).max(5).optional()
+});
+var marketReviewUpsertSchema = external_exports.object({
+  rating: external_exports.coerce.number().int().min(1).max(5),
+  title: external_exports.string().max(120).optional(),
+  body: external_exports.string().max(2e3).optional()
+});
+var marketPurchaseSchema = external_exports.object({
+  method: external_exports.enum(["card", "credit"]).optional(),
+  provider: external_exports.string().max(30).optional(),
+  email: external_exports.string().email().max(200).optional(),
+  successUrl: external_exports.string().url().max(500).optional(),
+  cancelUrl: external_exports.string().url().max(500).optional()
+});
+var marketPublishScopeSchema = external_exports.enum(["personal", "org", "global"]);
+var packageInstallRequestSchema = external_exports.object({
+  packageId: external_exports.string().uuid(),
+  version: external_exports.string().min(1).max(30)
+});
+var packagePublishFromProjectRequestSchema = external_exports.object({
+  kind: external_exports.enum(["subagent", "skill"]),
+  name: external_exports.string().min(1).max(100),
+  scope: external_exports.enum(["personal", "org", "global"]),
+  version: external_exports.string().min(1).max(30),
+  changelog: external_exports.string().max(2e3).optional()
+});
+var marketRejectRequestSchema = external_exports.object({
+  reason: external_exports.string().max(500).optional()
+});
+
+// ../../22-packages/11-shared/31-dto/src/knowledge.ts
+var listKnowledgeQuerySchema = baseRequestSchema.extend({
+  scope: external_exports.enum(["personal", "org", "global"]).optional(),
+  category: external_exports.string().max(50).optional(),
+  tag: external_exports.string().max(50).optional(),
+  minRating: external_exports.coerce.number().min(1).max(5).optional()
+});
+var knowledgePostUpsertSchema = external_exports.object({
+  title: external_exports.string().min(1).max(200),
+  summary: external_exports.string().max(500).optional(),
+  bodyMarkdown: external_exports.string().min(1).max(1e5),
+  scope: external_exports.enum(["personal", "org", "global"]),
+  category: external_exports.string().max(50).optional(),
+  tags: external_exports.array(external_exports.string().max(50)).max(10).optional(),
+  status: external_exports.enum(["draft", "published"]).default("published"),
+  sourceProjectId: external_exports.string().uuid().optional(),
+  /** Denormalized author display name (the web supplies it from the session; authorId is the
+   *  trustworthy key). */
+  authorName: external_exports.string().max(120).optional()
+});
+var knowledgeReviewUpsertSchema = external_exports.object({
+  rating: external_exports.coerce.number().int().min(1).max(5),
+  title: external_exports.string().max(120).optional(),
+  body: external_exports.string().max(2e3).optional()
+});
+var knowledgeDistillSchema = external_exports.object({
+  projectId: external_exports.string().uuid(),
+  prompt: external_exports.string().max(2e3).optional()
+});
+
 // ../../22-packages/11-shared/31-dto/src/search.ts
 var SearchHitType = {
   PROJECT: "project",
@@ -33973,9 +34085,20 @@ var WsChannels = {
   AGENTS_LIST: "agents.list",
   AGENTS_READ: "agents.read",
   AGENTS_WRITE: "agents.write",
+  // skill/subagent marketplace (ADR-0185): pack a project artifact into a zip (publish),
+  // install a package version into .claude/agents|skills + .4pm-packages.json, list installed
+  // (with on-disk sha256 for drift), remove an installed package.
+  PACKAGES_PACK: "packages.pack",
+  PACKAGES_INSTALL: "packages.install",
+  PACKAGES_LIST: "packages.list",
+  PACKAGES_REMOVE: "packages.remove",
   // security & placeholder management (ADR-0154): AI_SECURITY/AI_PLACEHOLDER + write-only secrets
   SECRETS_READ: "secrets.read",
   SECRETS_WRITE: "secrets.write",
+  // agent tool-permission editor (ADR-0183): read/write the `permissions` block of
+  // .claude/settings.json (shared) or .claude/settings.local.json (per-cli local)
+  AGENT_TOOLS_READ: "agentTools.read",
+  AGENT_TOOLS_WRITE: "agentTools.write",
   // docs & code dependency graph (ADR-0155): build a {nodes,edges,orphans} graph per mode
   GRAPH_BUILD: "graph.build",
   // RAG capability + install (ADR-0156): probe the worker + install a worker-tuned model
@@ -33990,6 +34113,9 @@ var WsChannels = {
   GIT_LOG: "git.log",
   GIT_COMMIT: "git.commit",
   GIT_COMMIT_DIFF: "git.commit-diff",
+  // server → cli (reply): manage the rented worker's ssh deploy key (ADR-0173) — generate
+  // (ed25519, on the worker) / get / delete. The private key never leaves the worker.
+  GIT_SSH_KEY: "git.ssh-key",
   PROJECT_CREATE: "project.create",
   PROJECT_ADD: "project.add",
   PROJECT_PROGRESS: "project.progress",
@@ -34026,7 +34152,14 @@ var WsChannels = {
   // outbound review (ADR-0082): machine→server request, server→outbound evaluate, result back
   REVIEW_REQUEST: "review.request",
   REVIEW_EVALUATE: "review.evaluate",
-  REVIEW_RESULT: "review.result"
+  REVIEW_RESULT: "review.result",
+  // AI support answer (ADR-0170): server → support-agent cli request–reply. The dispatcher
+  // sends the question + asker role + the shared docs/FAQ repo config; the worker clones/pulls
+  // the repo, runs `claude` grounded in its docs+FAQ, and replies with the composed answer.
+  SUPPORT_ANSWER: "support.answer",
+  // AI knowledge distill (ADR-0190): server → project cli request–reply. The worker runs the AI CLI
+  // in the project's working dir with a distillation prompt and replies with the composed markdown.
+  KNOWLEDGE_COMPOSE: "knowledge.compose"
 };
 
 // ../../22-packages/21-protocol/21-websocket/src/crypto.ts
@@ -34143,7 +34276,7 @@ var OutputBatcher = class {
 };
 
 // src/core/ws-client.ts
-import { existsSync as existsSync9, mkdirSync as mkdirSync4, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync5, rmSync as rmSync5 } from "fs";
 import { randomUUID as randomCommandId } from "crypto";
 
 // src/core/update-scheduler.ts
@@ -34302,9 +34435,9 @@ var UpdateScheduler = class {
         day: "2-digit",
         hour: "2-digit"
       }).formatToParts(/* @__PURE__ */ new Date());
-      const get = (type) => parts.find((p) => p.type === type)?.value ?? "";
-      const hour = Number.parseInt(get("hour"), 10);
-      const dateKey = `${get("year")}-${get("month")}-${get("day")}`;
+      const get2 = (type) => parts.find((p) => p.type === type)?.value ?? "";
+      const hour = Number.parseInt(get2("hour"), 10);
+      const dateKey = `${get2("year")}-${get2("month")}-${get2("day")}`;
       if (Number.isNaN(hour)) return null;
       return { hour: hour % 24, dateKey };
     } catch {
@@ -34521,7 +34654,7 @@ async function runAiFailover(plan, commandId, cwd2, handlers) {
   for (let i = 0; i < total; i++) {
     const attempt = plan.attempts[i];
     if (total > 1) handlers.onAttemptStart(attempt.label, i, total);
-    const parser = createAiStreamParser(plan.cmd);
+    const parser = createAiStreamParser(attempt.cmd);
     let captured = "";
     const emit = (raw) => {
       const text = parser.push(raw);
@@ -34530,7 +34663,7 @@ async function runAiFailover(plan, commandId, cwd2, handlers) {
         handlers.onChunk(text);
       }
     };
-    finalExit = await runAttempt(commandId, plan.cmd, attempt.args, cwd2, attempt.env, emit);
+    finalExit = await runAttempt(commandId, attempt.cmd, attempt.args, cwd2, attempt.env, emit);
     const tail = parser.flush();
     if (tail) {
       captured += tail;
@@ -34539,13 +34672,13 @@ async function runAiFailover(plan, commandId, cwd2, handlers) {
     if (finalExit === 0) {
       const usage = parser.usage();
       if (usage.tokens === 0) usage.tokens = estimateTokens(captured);
-      return { exitCode: 0, workedDir: attempt.dir, usage };
+      return { exitCode: 0, workedDir: attempt.dir, workedKey: attempt.key, workedCmd: attempt.cmd, usage };
     }
     const reason = isAuthFailure(captured) ? "auth" : isSessionLimit(captured) ? "limit" : null;
     if (!reason || i === total - 1) break;
     handlers.onAttemptFail(attempt.label, reason);
   }
-  return { exitCode: finalExit, workedDir: null, usage: { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 } };
+  return { exitCode: finalExit, workedDir: null, workedKey: null, workedCmd: null, usage: { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 } };
 }
 
 // src/core/ai-profile-state.ts
@@ -34575,6 +34708,19 @@ function setWorkingProfile(profileDir2, cmd, dir2) {
   } catch {
   }
 }
+var WORKING_CREDENTIAL_KEY = "__credential__";
+function getWorkingCredential(profileDir2) {
+  return readState(profileDir2)[WORKING_CREDENTIAL_KEY] ?? null;
+}
+function setWorkingCredential(profileDir2, key) {
+  const state = readState(profileDir2);
+  if (state[WORKING_CREDENTIAL_KEY] === key) return;
+  state[WORKING_CREDENTIAL_KEY] = key;
+  try {
+    writeFileSync4(statePath(profileDir2), JSON.stringify(state, null, 2), "utf8");
+  } catch {
+  }
+}
 
 // src/utils/ai-cli.ts
 import { readFileSync as readFileSync8 } from "fs";
@@ -34591,6 +34737,37 @@ function requiredArgs(cmd) {
   return REQUIRED_AI_ARGS.antigravity;
 }
 var DEFAULT_AI_CLI = "claude";
+var AI_PROVIDERS = ["claude", "codex", "antigravity"];
+function isUsableProfile(p) {
+  return p.enabled !== false && Boolean(p.profile && p.profile.trim());
+}
+function isUsableCredential(c) {
+  return isUsableProfile(c) && AI_PROVIDERS.includes(c.provider);
+}
+function credentialKey(provider, resolvedDir) {
+  return `${provider}::${resolvedDir}`;
+}
+function dirFromCredentialKey(key) {
+  const at = key.indexOf("::");
+  return at >= 0 ? key.slice(at + 2) : key;
+}
+function labelFromCredentialKey(key) {
+  return profileDisplayLabel(dirFromCredentialKey(key));
+}
+function resolveClaudeAuthMode(config) {
+  const key = config.aiEnv?.["ANTHROPIC_API_KEY"] ?? process.env.ANTHROPIC_API_KEY;
+  return key && key.trim() ? "api-key" : "subscription";
+}
+function isUnifiedConfig(config) {
+  return Array.isArray(config.aiProfiles) && config.aiProfiles.some(isUsableCredential);
+}
+function claudeProfilesOf(config) {
+  if (isUnifiedConfig(config)) return config.aiProfiles.filter((c) => c.provider === "claude");
+  return config.claudeHome ?? [];
+}
+function claudeCredentialKeys(config) {
+  return claudeProfilesOf(config).filter(isUsableProfile).map((p) => credentialKey("claude", resolveHomePath(p.profile)));
+}
 function resolveHomePath(value) {
   if (value.startsWith("~")) return join8(homedir3(), value.slice(1).replace(/^[/\\]/, ""));
   if (isAbsolute(value)) return value;
@@ -34598,7 +34775,16 @@ function resolveHomePath(value) {
 }
 function profileDirs(profiles) {
   if (!profiles) return [];
-  return profiles.map((p) => p.profile).filter((v) => v && v.trim()).map(resolveHomePath);
+  return profiles.filter(isUsableProfile).map((p) => resolveHomePath(p.profile));
+}
+function folderScopeGuard(folder, prompt) {
+  return [
+    `IMPORTANT: You are working inside the project folder \`${folder}\`. Only read, use, and`,
+    "modify content inside this folder to accomplish the task; do not access, reference, or",
+    "change anything outside it.",
+    "",
+    prompt
+  ].join("\n");
 }
 function buildRunArgs(profile, cmd, prompt) {
   const extras = profile.args ?? [];
@@ -34607,7 +34793,7 @@ function buildRunArgs(profile, cmd, prompt) {
   return [...requiredArgs(cmd), ...extras, ...modelArgs, prompt];
 }
 function claudeHomeDirs(config) {
-  const dirs = profileDirs(config.claudeHome);
+  const dirs = profileDirs(claudeProfilesOf(config));
   return dirs.length > 0 ? dirs : [join8(homedir3(), ".claude")];
 }
 function profileDisplayLabel(dir2) {
@@ -34631,29 +34817,64 @@ function profilesFor(config, cmd) {
   return [];
 }
 function profileLabels(config) {
+  if (isUnifiedConfig(config)) {
+    return config.aiProfiles.filter(isUsableCredential).map((c) => c.label?.trim() || profileDisplayLabel(resolveHomePath(c.profile)));
+  }
   const cmd = config.aiCli ?? DEFAULT_AI_CLI;
   return profileDirs(profilesFor(config, cmd)).map((dir2) => profileDisplayLabel(dir2));
 }
-function planAiRun(prompt, config, workingDir) {
-  const cmd = config.aiCli ?? DEFAULT_AI_CLI;
+function resolveClaudeProfiles(config, workingDir) {
+  const profiles = claudeProfilesOf(config).filter(isUsableProfile).map((p) => ({ dir: resolveHomePath(p.profile), model: p.model?.trim() || void 0 }));
+  const idx = workingDir ? profiles.findIndex((p) => p.dir === workingDir) : -1;
+  if (idx > 0) profiles.unshift(profiles.splice(idx, 1)[0]);
+  return profiles;
+}
+function planAiRun(prompt, config, hint = {}) {
+  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null) : planLegacyRun(prompt, config, hint.dir ?? null);
+}
+function planUnifiedRun(prompt, config, workingCredential) {
+  const baseEnv = config.aiEnv ?? {};
+  const resolved = config.aiProfiles.filter(isUsableCredential).map((cred) => {
+    const cmd = cred.provider;
+    const dir2 = resolveHomePath(cred.profile);
+    return { cred, cmd, dir: dir2, key: credentialKey(cmd, dir2), envVar: profileEnvVar(cmd) };
+  });
+  const ordered = workingCredential && resolved.some((r) => r.key === workingCredential) ? [
+    resolved.find((r) => r.key === workingCredential),
+    ...resolved.filter((r) => r.key !== workingCredential)
+  ] : resolved;
+  const attempts = ordered.map(({ cred, cmd, dir: dir2, key, envVar }) => ({
+    cmd,
+    label: cred.label?.trim() || profileDisplayLabel(dir2),
+    dir: dir2,
+    key,
+    args: buildRunArgs(cred, cmd, prompt),
+    env: envVar ? { ...baseEnv, [envVar]: dir2 } : { ...baseEnv }
+  }));
+  return { cmd: attempts[0]?.cmd ?? DEFAULT_AI_CLI, attempts };
+}
+function planLegacyRun(prompt, config, workingDir) {
+  const cmd = config.aiCli || DEFAULT_AI_CLI;
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
   const defaultPlan = {
     cmd,
     attempts: [
-      { label: "default", dir: null, args: buildRunArgs({ profile: "" }, cmd, prompt), env: { ...baseEnv } }
+      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, prompt), env: { ...baseEnv } }
     ]
   };
   if (!envVar) return defaultPlan;
-  const resolved = profilesFor(config, cmd).filter((p) => p.profile && p.profile.trim()).map((p) => ({ profile: p, dir: resolveHomePath(p.profile) }));
+  const resolved = profilesFor(config, cmd).filter(isUsableProfile).map((p) => ({ profile: p, dir: resolveHomePath(p.profile) }));
   if (resolved.length === 0) return defaultPlan;
   const ordered = workingDir && resolved.some((r) => r.dir === workingDir) ? [
     resolved.find((r) => r.dir === workingDir),
     ...resolved.filter((r) => r.dir !== workingDir)
   ] : resolved;
   const attempts = ordered.map(({ profile, dir: dir2 }) => ({
+    cmd,
     label: profileDisplayLabel(dir2),
     dir: dir2,
+    key: credentialKey(cmd, dir2),
     args: buildRunArgs(profile, cmd, prompt),
     env: { ...baseEnv, [envVar]: dir2 }
   }));
@@ -35163,13 +35384,228 @@ async function writeWorkerFile(root, relPath, content) {
   }
 }
 
-// src/core/autonomous.ts
-import { readFile as readFile2, writeFile as writeFile2, chmod } from "fs/promises";
-import { readFileSync as readFileSync12 } from "fs";
-import { execFile as execFile2, spawn as spawn4 } from "child_process";
+// src/core/support-answer.ts
+import { spawn as spawn4 } from "child_process";
+import { execFile as execFile2 } from "child_process";
+import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readdirSync as readdirSync4, readFileSync as readFileSync12, statSync as statSync3 } from "fs";
 import { join as join12 } from "path";
 import { promisify as promisify2 } from "util";
-var run2 = promisify2(execFile2);
+var execFileAsync = promisify2(execFile2);
+var MAX_CONTEXT_CHARS = 12e4;
+var ANSWER_TIMEOUT_MS = 12e4;
+var DOC_EXTENSIONS = [".md", ".mdx", ".txt"];
+function kbRoot(profileDir2) {
+  return join12(profileDir2, "support-kb");
+}
+function repoDir(profileDir2, url, branch) {
+  const key = createHash3("sha1").update(`${url}#${branch}`).digest("hex").slice(0, 16);
+  return join12(kbRoot(profileDir2), key);
+}
+function authedUrl(url, token) {
+  if (!token) return url;
+  if (url.startsWith("https://")) return url.replace("https://", `https://${token}@`);
+  return url;
+}
+async function ensureRepo(profileDir2, repo) {
+  const dir2 = repoDir(profileDir2, repo.url, repo.branch);
+  if (existsSync7(join12(dir2, ".git"))) return dir2;
+  const url = authedUrl(repo.url, repo.token);
+  const gitEnv = { ...process.env, GIT_TERMINAL_PROMPT: "0" };
+  mkdirSync4(kbRoot(profileDir2), { recursive: true });
+  await execFileAsync("git", ["clone", "--depth", "1", "--branch", repo.branch, url, dir2], {
+    env: gitEnv
+  });
+  return dir2;
+}
+async function refreshSupportKb(profileDir2) {
+  const root = kbRoot(profileDir2);
+  if (!existsSync7(root)) return;
+  const gitEnv = { ...process.env, GIT_TERMINAL_PROMPT: "0" };
+  for (const entry of readdirSync4(root)) {
+    const dir2 = join12(root, entry);
+    if (!existsSync7(join12(dir2, ".git"))) continue;
+    try {
+      await execFileAsync("git", ["-C", dir2, "pull", "--ff-only"], { env: gitEnv });
+    } catch (err) {
+      logger.warn("support.kb.refresh.failed", { dir: dir2, error: String(err) });
+    }
+  }
+}
+function collectDocs(dir2) {
+  const parts = [];
+  let total = 0;
+  const walk2 = (current) => {
+    if (total >= MAX_CONTEXT_CHARS) return;
+    for (const entry of readdirSync4(current)) {
+      if (entry === ".git" || entry === "node_modules") continue;
+      const full = join12(current, entry);
+      const st = statSync3(full);
+      if (st.isDirectory()) {
+        walk2(full);
+      } else if (DOC_EXTENSIONS.some((ext) => entry.toLowerCase().endsWith(ext))) {
+        const rel = full.slice(dir2.length + 1);
+        const body = readFileSync12(full, "utf8");
+        const block = `
+
+===== ${rel} =====
+${body}`;
+        parts.push(block.slice(0, MAX_CONTEXT_CHARS - total));
+        total += block.length;
+        if (total >= MAX_CONTEXT_CHARS) return;
+      }
+    }
+  };
+  walk2(dir2);
+  return parts.join("");
+}
+function buildPrompt(docs, question, askerRole) {
+  const roleNote = askerRole === "admin" ? "The asker is a platform admin." : "The asker is a regular user \u2014 do NOT reveal admin-only features.";
+  return [
+    "You are the 4PM product support assistant. Answer the user's question about how to use 4PM",
+    "using ONLY the documentation and FAQ provided below. If the answer is not in the docs, say",
+    "you don't have that information and suggest contacting human support \u2014 do not invent details.",
+    roleNote,
+    "Answer concisely in the user's language; reference the relevant doc heading/path when useful.",
+    "",
+    "===== DOCUMENTATION =====",
+    docs,
+    "",
+    "===== QUESTION =====",
+    question
+  ].join("\n");
+}
+function runClaudeOnce(cmd, profile, prompt, extraEnv) {
+  return new Promise((resolve8, reject) => {
+    const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
+    const env3 = {
+      ...process.env,
+      ...extraEnv,
+      ...profile ? { CLAUDE_CONFIG_DIR: profile.dir } : {}
+    };
+    const child = spawn4(cmd, args, { stdio: ["pipe", "pipe", "pipe"], env: env3 });
+    let out = "";
+    let err = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error("claude answer timed out"));
+    }, ANSWER_TIMEOUT_MS);
+    timer.unref();
+    child.stdout.on("data", (d) => out += d.toString());
+    child.stderr.on("data", (d) => err += d.toString());
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve8({ code: code ?? -1, out, err });
+    });
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+async function runClaudeWithFailover(prompt, ai) {
+  const attempts = ai.profiles.length > 0 ? ai.profiles : [null];
+  let lastReason = "no attempt";
+  for (let i = 0; i < attempts.length; i++) {
+    const { code, out, err } = await runClaudeOnce(ai.cmd, attempts[i], prompt, ai.env);
+    if (code === 0 && out.trim()) return out.trim();
+    const combined = err || out;
+    lastReason = `exited ${code}: ${combined.slice(0, 500)}`;
+    if (!isAuthFailure(combined) && !isSessionLimit(combined) || i === attempts.length - 1) break;
+  }
+  throw new Error(`claude ${lastReason}`);
+}
+async function runSupportAnswer(req, ai, profileDir2) {
+  try {
+    const dir2 = await ensureRepo(profileDir2, req.repo);
+    const docs = collectDocs(dir2);
+    if (!docs.trim()) return { body: "", error: "KB repo has no documentation" };
+    const body = await runClaudeWithFailover(buildPrompt(docs, req.question, req.askerRole), ai);
+    if (!body) return { body: "", error: "empty answer" };
+    return { body };
+  } catch (err) {
+    logger.warn("support.answer.failed", { error: String(err) });
+    return { body: "", error: String(err) };
+  }
+}
+
+// src/core/knowledge-compose.ts
+import { spawn as spawn5 } from "child_process";
+var COMPOSE_TIMEOUT_MS = 18e4;
+function buildPrompt2(req) {
+  const focus = req.prompt ? `
+
+Extra focus from the author: ${req.prompt}` : "";
+  return [
+    `You are in the working directory of a software project named "${req.projectName}".`,
+    "Read the project (code, docs, config) and write a concise, shareable KNOWLEDGE ARTICLE that",
+    "distils it for other engineers. Use Markdown and this structure:",
+    "- a single top-level title line starting with '# '",
+    "- a one-paragraph summary",
+    "- '## The problem' \u2014 what problem the project solves",
+    "- '## The approach' \u2014 the key decisions and how it works",
+    "- '## What we learned' \u2014 reusable takeaways",
+    "Output ONLY the Markdown article, no preamble or code fences around the whole thing." + focus
+  ].join("\n");
+}
+function runOnce(cmd, profile, prompt, cwd2, extraEnv) {
+  return new Promise((resolve8, reject) => {
+    const args = ["-p", ...profile?.model ? ["--model", profile.model] : []];
+    const env3 = {
+      ...process.env,
+      ...extraEnv,
+      ...profile ? { CLAUDE_CONFIG_DIR: profile.dir } : {}
+    };
+    const child = spawn5(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
+    let out = "";
+    let err = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error("knowledge compose timed out"));
+    }, COMPOSE_TIMEOUT_MS);
+    timer.unref();
+    child.stdout.on("data", (d) => out += d.toString());
+    child.stderr.on("data", (d) => err += d.toString());
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve8({ code: code ?? -1, out, err });
+    });
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+async function runKnowledgeCompose(req, ai, physicRoot) {
+  const prompt = buildPrompt2(req);
+  const attempts = ai.profiles.length > 0 ? ai.profiles : [null];
+  let lastReason = "no attempt";
+  for (let i = 0; i < attempts.length; i++) {
+    try {
+      const { code, out, err } = await runOnce(ai.cmd, attempts[i], prompt, physicRoot, ai.env);
+      if (code === 0 && out.trim()) return { bodyMarkdown: out.trim() };
+      const combined = err || out;
+      lastReason = `exited ${code}: ${combined.slice(0, 500)}`;
+      if (!isAuthFailure(combined) && !isSessionLimit(combined) || i === attempts.length - 1) break;
+    } catch (e) {
+      lastReason = String(e);
+      break;
+    }
+  }
+  return { bodyMarkdown: "", error: lastReason };
+}
+
+// src/core/autonomous.ts
+import { readFile as readFile2, writeFile as writeFile2, chmod } from "fs/promises";
+import { readFileSync as readFileSync13 } from "fs";
+import { execFile as execFile3, spawn as spawn6 } from "child_process";
+import { join as join13 } from "path";
+import { promisify as promisify3 } from "util";
+var run2 = promisify3(execFile3);
 var SETTINGS_REL = ".claude/.autonomous.settings.json";
 var HISTORIES_REL = ".claude/.autonomous.histories.json";
 var APPROVALS_REL = ".claude/.autonomous.approvals.json";
@@ -35199,7 +35635,7 @@ function parseJson(text) {
   }
 }
 function tickScript(root) {
-  return join12(root, TICK_REL);
+  return join13(root, TICK_REL);
 }
 async function crontabList() {
   try {
@@ -35211,7 +35647,7 @@ async function crontabList() {
 }
 async function crontabSet(content) {
   return new Promise((resolve8) => {
-    const child = spawn4("crontab", ["-"], { stdio: ["pipe", "ignore", "ignore"] });
+    const child = spawn6("crontab", ["-"], { stdio: ["pipe", "ignore", "ignore"] });
     child.on("error", () => resolve8(false));
     child.on("close", (code) => resolve8(code === 0));
     child.stdin.end(content.endsWith("\n") ? content : content + "\n");
@@ -35222,8 +35658,8 @@ async function cronInstalled(root) {
   return (await crontabList()).split("\n").some((l) => l.includes(script) && !l.trim().startsWith("#"));
 }
 async function getAutonomousStatus(root) {
-  const settings = parseJson(await readText(join12(root, SETTINGS_REL))) ?? {};
-  const hist = parseJson(await readText(join12(root, HISTORIES_REL))) ?? {};
+  const settings = parseJson(await readText(join13(root, SETTINGS_REL))) ?? {};
+  const hist = parseJson(await readText(join13(root, HISTORIES_REL))) ?? {};
   const records = Array.isArray(hist.records) ? hist.records : [];
   const last = records[records.length - 1];
   const ticks = hist.ticks ?? {};
@@ -35240,9 +35676,9 @@ async function getAutonomousStatus(root) {
 }
 function isAutonomousRunning(root) {
   try {
-    const s = JSON.parse(readFileSync12(join12(root, SETTINGS_REL), "utf8"));
+    const s = JSON.parse(readFileSync13(join13(root, SETTINGS_REL), "utf8"));
     if (s.paused === true) return false;
-    const h = JSON.parse(readFileSync12(join12(root, HISTORIES_REL), "utf8"));
+    const h = JSON.parse(readFileSync13(join13(root, HISTORIES_REL), "utf8"));
     const ts = h.records?.[h.records.length - 1]?.ts;
     if (!ts) return false;
     const t = Date.parse(ts.replace(" ", "T"));
@@ -35253,10 +35689,10 @@ function isAutonomousRunning(root) {
 }
 async function readAutonomous(root) {
   const [settings, approvals, status, ...books] = await Promise.all([
-    readText(join12(root, SETTINGS_REL)),
-    readText(join12(root, APPROVALS_REL), "{}"),
+    readText(join13(root, SETTINGS_REL)),
+    readText(join13(root, APPROVALS_REL), "{}"),
     getAutonomousStatus(root),
-    ...Object.values(BOOK_FILES).map((f) => readText(join12(root, f)))
+    ...Object.values(BOOK_FILES).map((f) => readText(join13(root, f)))
   ]);
   const keys = Object.keys(BOOK_FILES);
   const bookMap = {};
@@ -35265,7 +35701,7 @@ async function readAutonomous(root) {
 }
 async function readAutonomousLogs(root, date) {
   const day = date && /^\d{4}-\d{2}-\d{2}$/.test(date) ? date : (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const text = await readText(join12(root, LOG_DIR_REL, `autonomous-tick-${day}.log`));
+  const text = await readText(join13(root, LOG_DIR_REL, `autonomous-tick-${day}.log`));
   const lines = text ? text.split("\n").filter((l) => l.length > 0).slice(-500) : [];
   return { date: day, lines };
 }
@@ -35289,24 +35725,24 @@ async function writeAutonomous(root, req, by) {
     switch (req.kind) {
       case "settings": {
         if (!parseJson(req.settings)) return { ok: false, error: "settings is not valid JSON" };
-        await writeFile2(join12(root, SETTINGS_REL), req.settings, "utf8");
+        await writeFile2(join13(root, SETTINGS_REL), req.settings, "utf8");
         break;
       }
       case "approvals": {
-        const map = parseJson(await readText(join12(root, APPROVALS_REL), "{}")) ?? {};
+        const map = parseJson(await readText(join13(root, APPROVALS_REL), "{}")) ?? {};
         if (req.approved) map[req.taskId] = { approved: true, by, at: (/* @__PURE__ */ new Date()).toISOString() };
         else delete map[req.taskId];
-        await writeFile2(join12(root, APPROVALS_REL), JSON.stringify(map, null, 2) + "\n", "utf8");
+        await writeFile2(join13(root, APPROVALS_REL), JSON.stringify(map, null, 2) + "\n", "utf8");
         break;
       }
       case "userTodo": {
-        const cur = await readText(join12(root, BOOK_FILES.userTodo));
+        const cur = await readText(join13(root, BOOK_FILES.userTodo));
         const block = `
 
 > posted by ${by} at ${(/* @__PURE__ */ new Date()).toISOString()}
 ${req.content.trim()}
 `;
-        await writeFile2(join12(root, BOOK_FILES.userTodo), cur.trimEnd() + block, "utf8");
+        await writeFile2(join13(root, BOOK_FILES.userTodo), cur.trimEnd() + block, "utf8");
         break;
       }
       case "cron": {
@@ -35323,7 +35759,7 @@ ${req.content.trim()}
 
 // src/core/agents.ts
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3, readdir as readdir3, rm } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var AGENTS_REL = ".claude/agents";
 var SKILLS_REL = ".claude/skills";
 var MEMORY_DIRS = /* @__PURE__ */ new Set(["short-memory", "long-memory"]);
@@ -35340,24 +35776,24 @@ async function readText2(path, fallback = "") {
 function frontmatter(text) {
   const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   const body = m?.[1] ?? "";
-  const get = (key) => body.match(new RegExp(`^${key}:\\s*(.+)$`, "m"))?.[1]?.trim().replace(/^["']|["']$/g, "") ?? "";
-  return { name: get("name"), description: get("description") };
+  const get2 = (key) => body.match(new RegExp(`^${key}:\\s*(.+)$`, "m"))?.[1]?.trim().replace(/^["']|["']$/g, "") ?? "";
+  return { name: get2("name"), description: get2("description") };
 }
 async function listAgents(root) {
   const subagents = [];
   const skills = [];
   try {
-    for (const e of await readdir3(join13(root, AGENTS_REL), { withFileTypes: true })) {
+    for (const e of await readdir3(join14(root, AGENTS_REL), { withFileTypes: true })) {
       if (!e.isFile() || !e.name.endsWith(".md") || MEMORY_DIRS.has(e.name)) continue;
-      const fm = frontmatter(await readText2(join13(root, AGENTS_REL, e.name)));
+      const fm = frontmatter(await readText2(join14(root, AGENTS_REL, e.name)));
       subagents.push({ name: e.name.replace(/\.md$/, ""), description: fm.description });
     }
   } catch {
   }
   try {
-    for (const e of await readdir3(join13(root, SKILLS_REL), { withFileTypes: true })) {
+    for (const e of await readdir3(join14(root, SKILLS_REL), { withFileTypes: true })) {
       if (!e.isDirectory()) continue;
-      const fm = frontmatter(await readText2(join13(root, SKILLS_REL, e.name, "SKILL.md")));
+      const fm = frontmatter(await readText2(join14(root, SKILLS_REL, e.name, "SKILL.md")));
       skills.push({ name: e.name, description: fm.description });
     }
   } catch {
@@ -35368,15 +35804,15 @@ async function listAgents(root) {
 }
 function itemPath(root, kind, name) {
   const n = safeName(name);
-  return kind === "subagent" ? join13(root, AGENTS_REL, `${n}.md`) : join13(root, SKILLS_REL, n, "SKILL.md");
+  return kind === "subagent" ? join14(root, AGENTS_REL, `${n}.md`) : join14(root, SKILLS_REL, n, "SKILL.md");
 }
 async function readAgent(root, kind, name) {
   const content = await readText2(itemPath(root, kind, name));
   if (kind !== "subagent") return { content };
   const n = safeName(name);
   const [short, long] = await Promise.all([
-    readText2(join13(root, AGENTS_REL, "short-memory", `${n}.md`)),
-    readText2(join13(root, AGENTS_REL, "long-memory", `${n}.md`))
+    readText2(join14(root, AGENTS_REL, "short-memory", `${n}.md`)),
+    readText2(join14(root, AGENTS_REL, "long-memory", `${n}.md`))
   ]);
   return { content, memory: { short, long } };
 }
@@ -35386,12 +35822,12 @@ async function writeAgent(root, req) {
   try {
     if (req.action === "delete") {
       if (req.kind === "subagent") await rm(itemPath(root, "subagent", n), { force: true });
-      else await rm(join13(root, SKILLS_REL, n), { recursive: true, force: true });
+      else await rm(join14(root, SKILLS_REL, n), { recursive: true, force: true });
       return { ok: true };
     }
     if (req.content === void 0) return { ok: false, error: "content is required" };
     const path = itemPath(root, req.kind, n);
-    await mkdir3(join13(path, ".."), { recursive: true });
+    await mkdir3(join14(path, ".."), { recursive: true });
     await writeFile3(path, req.content, "utf8");
     return { ok: true };
   } catch (err) {
@@ -35399,22 +35835,257 @@ async function writeAgent(root, req) {
   }
 }
 
+// src/core/packages.ts
+import { createHash as createHash4 } from "crypto";
+import { readFile as readFile4, writeFile as writeFile4, mkdir as mkdir4, readdir as readdir4, rm as rm2, stat } from "fs/promises";
+import { dirname as dirname4, join as join15, relative } from "path";
+var AGENTS_REL2 = ".claude/agents";
+var SKILLS_REL2 = ".claude/skills";
+var MANIFEST_REL = ".claude/.4pm-packages.json";
+function safeName2(name) {
+  return name.replace(/[^\w.-]+/g, "-").replace(/^[-.]+|[-.]+$/g, "");
+}
+async function readMaybe(path) {
+  try {
+    return await readFile4(path);
+  } catch {
+    return null;
+  }
+}
+async function listFilesRel(dir2) {
+  const out = [];
+  async function walk2(d) {
+    let entries2;
+    try {
+      entries2 = await readdir4(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries2) {
+      const full = join15(d, e.name);
+      if (e.isDirectory()) await walk2(full);
+      else if (e.isFile()) out.push(relative(dir2, full));
+    }
+  }
+  await walk2(dir2);
+  return out.sort();
+}
+async function readArtifactFiles(root, kind, slug) {
+  const files = [];
+  if (kind === "subagent") {
+    const agent = await readMaybe(join15(root, AGENTS_REL2, `${slug}.md`));
+    if (agent) files.push({ path: "agent.md", contentBase64: agent.toString("base64") });
+    const short = await readMaybe(join15(root, AGENTS_REL2, "short-memory", `${slug}.md`));
+    if (short) files.push({ path: "short-memory.md", contentBase64: short.toString("base64") });
+    const long = await readMaybe(join15(root, AGENTS_REL2, "long-memory", `${slug}.md`));
+    if (long) files.push({ path: "long-memory.md", contentBase64: long.toString("base64") });
+  } else {
+    const base = join15(root, SKILLS_REL2, slug);
+    for (const rel of await listFilesRel(base)) {
+      const buf = await readMaybe(join15(base, rel));
+      if (buf) files.push({ path: rel.split("\\").join("/"), contentBase64: buf.toString("base64") });
+    }
+  }
+  return files;
+}
+async function artifactSha256(root, kind, slug) {
+  const files = await readArtifactFiles(root, kind, slug);
+  const h = createHash4("sha256");
+  for (const f of [...files].sort((a, b) => a.path.localeCompare(b.path))) {
+    h.update(f.path);
+    h.update("\0");
+    h.update(f.contentBase64);
+    h.update("\0");
+  }
+  return h.digest("hex");
+}
+async function artifactExists(root, kind, slug) {
+  const target = kind === "subagent" ? join15(root, AGENTS_REL2, `${slug}.md`) : join15(root, SKILLS_REL2, slug);
+  try {
+    await stat(target);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readManifest(root) {
+  const buf = await readMaybe(join15(root, MANIFEST_REL));
+  if (!buf) return {};
+  try {
+    return JSON.parse(buf.toString("utf8"));
+  } catch {
+    return {};
+  }
+}
+async function writeManifest(root, manifest) {
+  const path = join15(root, MANIFEST_REL);
+  await mkdir4(dirname4(path), { recursive: true });
+  await writeFile4(path, JSON.stringify(manifest, null, 2), "utf8");
+}
+async function writeArtifactFiles(root, kind, slug, files) {
+  const byPath = new Map(files.map((f) => [f.path, Buffer.from(f.contentBase64, "base64")]));
+  if (kind === "subagent") {
+    const agent = byPath.get("agent.md");
+    if (agent) {
+      await mkdir4(join15(root, AGENTS_REL2), { recursive: true });
+      await writeFile4(join15(root, AGENTS_REL2, `${slug}.md`), agent);
+    }
+    const short = byPath.get("short-memory.md");
+    if (short) {
+      await mkdir4(join15(root, AGENTS_REL2, "short-memory"), { recursive: true });
+      await writeFile4(join15(root, AGENTS_REL2, "short-memory", `${slug}.md`), short);
+    }
+    const long = byPath.get("long-memory.md");
+    if (long) {
+      await mkdir4(join15(root, AGENTS_REL2, "long-memory"), { recursive: true });
+      await writeFile4(join15(root, AGENTS_REL2, "long-memory", `${slug}.md`), long);
+    }
+  } else {
+    const base = join15(root, SKILLS_REL2, slug);
+    for (const [rel, buf] of byPath) {
+      if (rel.includes("..") || rel.startsWith("/")) continue;
+      const dest = join15(base, rel);
+      await mkdir4(dirname4(dest), { recursive: true });
+      await writeFile4(dest, buf);
+    }
+  }
+}
+async function packPackage(root, kind, name) {
+  const slug = safeName2(name);
+  if (!slug) return { ok: false, files: [], error: "invalid name" };
+  const files = await readArtifactFiles(root, kind, slug);
+  if (files.length === 0) return { ok: false, files: [], error: "artifact not found" };
+  return { ok: true, files };
+}
+async function installPackage(root, req) {
+  const slug = safeName2(req.slug);
+  if (!slug) return { ok: false, error: "invalid slug" };
+  try {
+    const manifest = await readManifest(root);
+    const existing = manifest[slug];
+    if (!existing && await artifactExists(root, req.kind, slug)) {
+      return { ok: false, error: "ALREADY_INSTALLED" };
+    }
+    if (existing) {
+      const currentSha = await artifactSha256(root, req.kind, slug);
+      if (currentSha !== existing.sha256) return { ok: false, error: "DRIFT" };
+    }
+    await writeArtifactFiles(root, req.kind, slug, req.files);
+    const sha256 = await artifactSha256(root, req.kind, slug);
+    manifest[slug] = {
+      kind: req.kind,
+      version: req.version,
+      packageId: req.packageId,
+      installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      sha256
+    };
+    await writeManifest(root, manifest);
+    return { ok: true, sha256 };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+async function listPackages(root) {
+  const manifest = await readManifest(root);
+  const installed = [];
+  for (const [slug, entry] of Object.entries(manifest)) {
+    installed.push({
+      slug,
+      kind: entry.kind,
+      version: entry.version,
+      packageId: entry.packageId,
+      installedAt: entry.installedAt,
+      sha256: entry.sha256,
+      currentSha256: await artifactSha256(root, entry.kind, slug)
+    });
+  }
+  installed.sort((a, b) => a.slug.localeCompare(b.slug));
+  return { installed };
+}
+async function removePackage(root, slug) {
+  const n = safeName2(slug);
+  if (!n) return { ok: false, error: "invalid slug" };
+  try {
+    const manifest = await readManifest(root);
+    const entry = manifest[n];
+    if (!entry) return { ok: false, error: "not installed" };
+    if (entry.kind === "subagent") {
+      await rm2(join15(root, AGENTS_REL2, `${n}.md`), { force: true });
+      await rm2(join15(root, AGENTS_REL2, "short-memory", `${n}.md`), { force: true });
+      await rm2(join15(root, AGENTS_REL2, "long-memory", `${n}.md`), { force: true });
+    } else {
+      await rm2(join15(root, SKILLS_REL2, n), { recursive: true, force: true });
+    }
+    delete manifest[n];
+    await writeManifest(root, manifest);
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
+// src/core/sandbox.ts
+import { rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
+import { join as join16 } from "path";
+var EGRESS_ALLOWLIST_FILE = "sandbox-egress.txt";
+function writeEgressAllowlist(profileDir2, policy) {
+  const path = join16(profileDir2, EGRESS_ALLOWLIST_FILE);
+  try {
+    if (policy && policy.network === "allowlist") {
+      const body = ["# 4PM egress allowlist (ADR-0192) \u2014 generated from the project sandbox policy"].concat(policy.allowedDomains).join("\n");
+      writeFileSync6(path, `${body}
+`, "utf8");
+    } else {
+      rmSync4(path, { force: true });
+    }
+  } catch {
+  }
+}
+
+// src/core/git-auth.ts
+import { writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join17 } from "path";
+function tokenTarget(method) {
+  if (method === "gitlab-group-token") {
+    return { host: process.env.FOURPM_GIT_HOST || "gitlab.com", user: "oauth2" };
+  }
+  if (method === "github-app") {
+    return { host: process.env.FOURPM_GIT_HOST || "github.com", user: "x-access-token" };
+  }
+  return null;
+}
+function applyGitAuth(method) {
+  if (!method) return false;
+  const target = tokenTarget(method);
+  const token = process.env.FOURPM_GIT_TOKEN;
+  if (!target || !token) return false;
+  try {
+    const line = `https://${target.user}:${token}@${target.host}
+`;
+    writeFileSync7(join17(homedir4(), ".git-credentials"), line, { encoding: "utf8", mode: 384 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 // src/core/secrets.ts
-import { readFile as readFile4, writeFile as writeFile4 } from "fs/promises";
-import { join as join14 } from "path";
+import { readFile as readFile5, writeFile as writeFile5 } from "fs/promises";
+import { join as join18 } from "path";
 var SECURITY_REL = "AI_SECURITY.md";
 var PLACEHOLDER_REL = "AI_PLACEHOLDER.md";
 var SECRETS_REL = "project.secrets.json";
 async function readText3(path, fallback = "") {
   try {
-    return await readFile4(path, "utf8");
+    return await readFile5(path, "utf8");
   } catch {
     return fallback;
   }
 }
 async function readSecretsObject(root) {
   try {
-    const v = JSON.parse(await readFile4(join14(root, SECRETS_REL), "utf8"));
+    const v = JSON.parse(await readFile5(join18(root, SECRETS_REL), "utf8"));
     return v && typeof v === "object" ? v : {};
   } catch {
     return {};
@@ -35433,8 +36104,8 @@ function placeholderKeys(text) {
 }
 async function readSecrets(root) {
   const [security, placeholder, secrets] = await Promise.all([
-    readText3(join14(root, SECURITY_REL)),
-    readText3(join14(root, PLACEHOLDER_REL)),
+    readText3(join18(root, SECURITY_REL)),
+    readText3(join18(root, PLACEHOLDER_REL)),
     readSecretsObject(root)
   ]);
   const names = /* @__PURE__ */ new Set([...placeholderKeys(placeholder), ...Object.keys(secrets)]);
@@ -35447,14 +36118,14 @@ async function readSecrets(root) {
 async function writeSecrets(root, req) {
   try {
     if (req.kind === "security") {
-      await writeFile4(join14(root, SECURITY_REL), req.content, "utf8");
+      await writeFile5(join18(root, SECURITY_REL), req.content, "utf8");
     } else if (req.kind === "placeholder") {
-      await writeFile4(join14(root, PLACEHOLDER_REL), req.content, "utf8");
+      await writeFile5(join18(root, PLACEHOLDER_REL), req.content, "utf8");
     } else {
       const secrets = await readSecretsObject(root);
       if (req.kind === "secret") secrets[req.key] = req.value;
       else delete secrets[req.key];
-      await writeFile4(join14(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
+      await writeFile5(join18(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
     }
     return { ok: true };
   } catch (err) {
@@ -35462,9 +36133,52 @@ async function writeSecrets(root, req) {
   }
 }
 
+// src/core/agent-tools.ts
+import { readFile as readFile6, writeFile as writeFile6, mkdir as mkdir5 } from "fs/promises";
+import { dirname as dirname5, join as join19 } from "path";
+var SHARED_REL = ".claude/settings.json";
+var LOCAL_REL = ".claude/settings.local.json";
+var SECRETS_DENY = "Read(./project.secrets.json)";
+var MODES = ["default", "acceptEdits", "plan", "bypassPermissions"];
+function fileFor(root, scope) {
+  return join19(root, scope === "shared" ? SHARED_REL : LOCAL_REL);
+}
+async function readSettingsObject(path) {
+  try {
+    const v = JSON.parse(await readFile6(path, "utf8"));
+    return v && typeof v === "object" ? v : {};
+  } catch {
+    return {};
+  }
+}
+function normalizePermissions(raw) {
+  const p = raw && typeof raw === "object" ? raw : {};
+  const mode = MODES.includes(p.defaultMode) ? p.defaultMode : "default";
+  const list = (v) => Array.isArray(v) ? v.filter((x) => typeof x === "string") : [];
+  return { defaultMode: mode, allow: list(p.allow), ask: list(p.ask), deny: list(p.deny) };
+}
+async function readAgentTools(root, scope) {
+  const obj = await readSettingsObject(fileFor(root, scope));
+  return { permissions: normalizePermissions(obj.permissions) };
+}
+async function writeAgentTools(root, scope, permissions) {
+  try {
+    const path = fileFor(root, scope);
+    const obj = await readSettingsObject(path);
+    const next = normalizePermissions(permissions);
+    if (scope === "shared" && !next.deny.includes(SECRETS_DENY)) next.deny = [...next.deny, SECRETS_DENY];
+    obj.permissions = next;
+    await mkdir5(dirname5(path), { recursive: true });
+    await writeFile6(path, JSON.stringify(obj, null, 2) + "\n", "utf8");
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+
 // src/core/graph.ts
-import { readFile as readFile5, readdir as readdir4 } from "fs/promises";
-import { join as join15, relative, dirname as dirname4, resolve as resolve4, extname, basename as basename2 } from "path";
+import { readFile as readFile7, readdir as readdir5 } from "fs/promises";
+import { join as join20, relative as relative2, dirname as dirname6, resolve as resolve4, extname, basename as basename2 } from "path";
 var MAX_FILES = 2e3;
 var MAX_NODES = 3e3;
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", "out", "coverage", ".turbo"]);
@@ -35476,7 +36190,7 @@ async function walk(root, accept) {
     const dir2 = stack.pop();
     let entries2;
     try {
-      entries2 = await readdir4(dir2, { withFileTypes: true });
+      entries2 = await readdir5(dir2, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -35484,7 +36198,7 @@ async function walk(root, accept) {
       if (e.name.startsWith(".") && e.name !== ".claude") {
         if (e.isDirectory()) continue;
       }
-      const full = join15(dir2, e.name);
+      const full = join20(dir2, e.name);
       if (e.isDirectory()) {
         if (!SKIP_DIRS.has(e.name)) stack.push(full);
       } else if (accept(full)) {
@@ -35501,25 +36215,25 @@ function orphansOf(nodes, edges) {
 }
 async function buildDocs(root) {
   const files = await walk(root, (p) => extname(p) === ".md");
-  const ids = new Set(files.map((f) => relative(root, f).split("\\").join("/")));
+  const ids = new Set(files.map((f) => relative2(root, f).split("\\").join("/")));
   const nodes = files.map((f) => {
-    const rel = relative(root, f).split("\\").join("/");
+    const rel = relative2(root, f).split("\\").join("/");
     return { id: rel, label: basename2(rel), kind: "doc", file: rel };
   });
   const edges = [];
   const seen = /* @__PURE__ */ new Set();
   for (const f of files) {
-    const rel = relative(root, f).split("\\").join("/");
+    const rel = relative2(root, f).split("\\").join("/");
     let text = "";
     try {
-      text = await readFile5(f, "utf8");
+      text = await readFile7(f, "utf8");
     } catch {
       continue;
     }
     for (const m of text.matchAll(/\[[^\]]*\]\(([^)]+)\)/g)) {
       const href = (m[1] ?? "").split("#")[0].trim();
       if (!href || !href.endsWith(".md") || href.startsWith("http")) continue;
-      const target = relative(root, resolve4(dirname4(f), href)).split("\\").join("/");
+      const target = relative2(root, resolve4(dirname6(f), href)).split("\\").join("/");
       if (ids.has(target) && target !== rel) {
         const key = `${rel}->${target}`;
         if (!seen.has(key)) {
@@ -35548,10 +36262,10 @@ async function buildCode(root) {
   const fileDefs = /* @__PURE__ */ new Map();
   for (const f of files) {
     if (nodes.length >= MAX_NODES) break;
-    const rel = relative(root, f).split("\\").join("/");
+    const rel = relative2(root, f).split("\\").join("/");
     let text = "";
     try {
-      text = await readFile5(f, "utf8");
+      text = await readFile7(f, "utf8");
     } catch {
       continue;
     }
@@ -35603,13 +36317,13 @@ async function buildGraph(root, mode) {
 }
 
 // src/core/rag.ts
-import { readFile as readFile6, writeFile as writeFile5, statfs, mkdir as mkdir4 } from "fs/promises";
-import { existsSync as existsSync7 } from "fs";
-import { execFile as execFile3, spawn as spawn5 } from "child_process";
+import { readFile as readFile8, writeFile as writeFile7, statfs, mkdir as mkdir6 } from "fs/promises";
+import { existsSync as existsSync8 } from "fs";
+import { execFile as execFile4, spawn as spawn7 } from "child_process";
 import { totalmem, cpus } from "os";
-import { join as join16 } from "path";
-import { promisify as promisify3 } from "util";
-var run3 = promisify3(execFile3);
+import { join as join21 } from "path";
+import { promisify as promisify4 } from "util";
+var run3 = promisify4(execFile4);
 var RAG_REL = ".claude/rag";
 async function tryRun(cmd, args) {
   try {
@@ -35628,7 +36342,7 @@ async function detectPython() {
 }
 async function installLog(root) {
   try {
-    const text = await readFile6(join16(root, RAG_REL, "install.log"), "utf8");
+    const text = await readFile8(join21(root, RAG_REL, "install.log"), "utf8");
     return text.split("\n").filter((l) => l.length > 0).slice(-200);
   } catch {
     return [];
@@ -35690,14 +36404,14 @@ async function ragStatus(root) {
   };
   let modelName = "";
   try {
-    modelName = (await readFile6(join16(root, RAG_REL, ".installed"), "utf8")).trim();
+    modelName = (await readFile8(join21(root, RAG_REL, ".installed"), "utf8")).trim();
   } catch {
     modelName = "";
   }
   const modelPresent = modelName.length > 0;
   return {
     installed: fastembed && sqliteVec && modelPresent,
-    installing: existsSync7(join16(root, RAG_REL, ".installing")),
+    installing: existsSync8(join21(root, RAG_REL, ".installing")),
     python: { found: py.found, version: py.version },
     deps: { pip, fastembed, sqliteVec },
     model: { present: modelPresent, name: modelName },
@@ -35708,9 +36422,9 @@ async function ragStatus(root) {
   };
 }
 async function readIndexMeta(root) {
-  const indexing = existsSync7(join16(root, RAG_REL, ".indexing"));
+  const indexing = existsSync8(join21(root, RAG_REL, ".indexing"));
   try {
-    const m = JSON.parse(await readFile6(join16(root, RAG_REL, ".index.json"), "utf8"));
+    const m = JSON.parse(await readFile8(join21(root, RAG_REL, ".index.json"), "utf8"));
     return {
       present: true,
       indexing,
@@ -35777,14 +36491,14 @@ if __name__ == "__main__":
     elif cmd == "query": query(sys.argv[2], int(sys.argv[3]) if len(sys.argv) > 3 else 8)
 `;
 async function ensureEngine(root) {
-  await mkdir4(join16(root, RAG_REL), { recursive: true }).catch(() => void 0);
-  await writeFile5(join16(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
+  await mkdir6(join21(root, RAG_REL), { recursive: true }).catch(() => void 0);
+  await writeFile7(join21(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
 }
 async function ragReindex(root) {
   const py = await detectPython();
   if (!py.found) return { ok: false, started: false, error: "python3 not found" };
-  if (!existsSync7(join16(root, RAG_REL, ".installed"))) return { ok: false, started: false, error: "RAG is not installed" };
-  if (existsSync7(join16(root, RAG_REL, ".indexing"))) return { ok: true, started: true };
+  if (!existsSync8(join21(root, RAG_REL, ".installed"))) return { ok: false, started: false, error: "RAG is not installed" };
+  if (existsSync8(join21(root, RAG_REL, ".indexing"))) return { ok: true, started: true };
   await ensureEngine(root);
   const script = `
 set +e
@@ -35792,7 +36506,7 @@ touch "${RAG_REL}/.indexing"
 { echo "[reindex] $(date)"; "$RAG_PY" "${RAG_REL}/rag_engine.py" reindex 2>&1; } >> "${RAG_REL}/index.log" 2>&1
 rm -f "${RAG_REL}/.indexing"
 `;
-  const child = spawn5("bash", ["-c", script], {
+  const child = spawn7("bash", ["-c", script], {
     cwd: root,
     env: { ...process.env, RAG_PY: py.bin },
     detached: true,
@@ -35804,12 +36518,12 @@ rm -f "${RAG_REL}/.indexing"
 async function ragQuery(root, queryText, k = 8) {
   const py = await detectPython();
   if (!py.found) return { results: [], error: "python3 not found" };
-  if (!existsSync7(join16(root, RAG_REL, "index.db"))) return { results: [], error: "no index \u2014 reindex first" };
+  if (!existsSync8(join21(root, RAG_REL, "index.db"))) return { results: [], error: "no index \u2014 reindex first" };
   await ensureEngine(root);
   try {
     const { stdout } = await run3(
       py.bin,
-      [join16(RAG_REL, "rag_engine.py"), "query", queryText, String(Math.min(Math.max(k, 1), 20))],
+      [join21(RAG_REL, "rag_engine.py"), "query", queryText, String(Math.min(Math.max(k, 1), 20))],
       { cwd: root, timeout: 3e4, maxBuffer: 4 * 1024 * 1024 }
     );
     const parsed = JSON.parse(stdout.trim() || '{"results":[]}');
@@ -35821,9 +36535,9 @@ async function ragQuery(root, queryText, k = 8) {
 async function ragInstall(root, model) {
   const py = await detectPython();
   if (!py.found) return { ok: false, started: false, error: "python3 not found on the worker" };
-  if (existsSync7(join16(root, RAG_REL, ".installing"))) return { ok: true, started: true };
+  if (existsSync8(join21(root, RAG_REL, ".installing"))) return { ok: true, started: true };
   try {
-    await mkdir4(join16(root, RAG_REL), { recursive: true });
+    await mkdir6(join21(root, RAG_REL), { recursive: true });
   } catch {
   }
   const script = `
@@ -35839,7 +36553,7 @@ rm -f "${RAG_REL}/.installed"
 } >> "${RAG_REL}/install.log" 2>&1
 rm -f "${RAG_REL}/.installing"
 `;
-  const child = spawn5("bash", ["-c", script], {
+  const child = spawn7("bash", ["-c", script], {
     cwd: root,
     env: { ...process.env, RAG_PY: py.bin, RAG_MODEL: model },
     detached: true,
@@ -35850,18 +36564,18 @@ rm -f "${RAG_REL}/.installing"
 }
 
 // src/core/git-diff.ts
-import { readFile as readFile7 } from "fs/promises";
-import { execFile as execFile4 } from "child_process";
-import { basename as basename3, dirname as dirname5, resolve as resolve5 } from "path";
-import { promisify as promisify4 } from "util";
-var run4 = promisify4(execFile4);
+import { readFile as readFile9 } from "fs/promises";
+import { execFile as execFile5 } from "child_process";
+import { basename as basename3, dirname as dirname7, resolve as resolve5 } from "path";
+import { promisify as promisify5 } from "util";
+var run4 = promisify5(execFile5);
 async function gitDiff(path) {
   const target = resolve5(path);
-  const dir2 = dirname5(target);
+  const dir2 = dirname7(target);
   const base = basename3(target);
   let newContent = "";
   try {
-    newContent = await readFile7(target, "utf8");
+    newContent = await readFile9(target, "utf8");
   } catch {
   }
   let oldContent = "";
@@ -35878,9 +36592,9 @@ async function gitDiff(path) {
 }
 
 // src/core/git-env.ts
-import { execFile as execFile5 } from "child_process";
-import { promisify as promisify5 } from "util";
-var run5 = promisify5(execFile5);
+import { execFile as execFile6 } from "child_process";
+import { promisify as promisify6 } from "util";
+var run5 = promisify6(execFile6);
 async function hasBinary(bin, args = ["--version"]) {
   try {
     await run5(bin, args, { timeout: 5e3 });
@@ -35908,12 +36622,80 @@ ${stderr}`;
   return { installed, authenticated, account, claudeCli };
 }
 
+// src/core/git-ssh-key.ts
+import { execFile as execFile7 } from "child_process";
+import { readFile as readFile10, rm as rm3, mkdir as mkdir7 } from "fs/promises";
+import { join as join22 } from "path";
+import { promisify as promisify7 } from "util";
+var run6 = promisify7(execFile7);
+function keyPaths(profileDir2) {
+  const dir2 = join22(profileDir2, ".ssh");
+  const key = join22(dir2, "id_4pm");
+  return { dir: dir2, key, pub: `${key}.pub` };
+}
+async function readPublicKey(pub) {
+  try {
+    return (await readFile10(pub, "utf8")).trim();
+  } catch {
+    return null;
+  }
+}
+async function fingerprintOf(pub) {
+  try {
+    const { stdout } = await run6("ssh-keygen", ["-lf", pub], { timeout: 5e3 });
+    return stdout.match(/SHA256:[A-Za-z0-9+/=]+/)?.[0] ?? null;
+  } catch {
+    return null;
+  }
+}
+async function configureGit(key) {
+  await run6(
+    "git",
+    ["config", "--global", "core.sshCommand", `ssh -i ${key} -o IdentitiesOnly=yes`],
+    { timeout: 5e3 }
+  ).catch(() => void 0);
+}
+async function generate(profileDir2) {
+  const { dir: dir2, key, pub } = keyPaths(profileDir2);
+  await mkdir7(dir2, { recursive: true });
+  await rm3(key, { force: true });
+  await rm3(pub, { force: true });
+  await run6("ssh-keygen", ["-t", "ed25519", "-f", key, "-N", "", "-C", "4pm-deploy-key"], {
+    timeout: 15e3
+  });
+  await configureGit(key);
+  return { publicKey: await readPublicKey(pub), fingerprint: await fingerprintOf(pub) };
+}
+async function remove(profileDir2) {
+  const { key, pub } = keyPaths(profileDir2);
+  await rm3(key, { force: true });
+  await rm3(pub, { force: true });
+  await run6("git", ["config", "--global", "--unset", "core.sshCommand"], { timeout: 5e3 }).catch(
+    () => void 0
+  );
+  return { publicKey: null, fingerprint: null };
+}
+async function get(profileDir2) {
+  const { pub } = keyPaths(profileDir2);
+  const publicKey = await readPublicKey(pub);
+  return { publicKey, fingerprint: publicKey ? await fingerprintOf(pub) : null };
+}
+async function manageSshKey(op, profileDir2) {
+  try {
+    if (op === "generate") return await generate(profileDir2);
+    if (op === "delete") return await remove(profileDir2);
+    return await get(profileDir2);
+  } catch {
+    return { publicKey: null, fingerprint: null };
+  }
+}
+
 // src/core/git-history.ts
-import { readdir as readdir5 } from "fs/promises";
-import { execFile as execFile6 } from "child_process";
+import { readdir as readdir6 } from "fs/promises";
+import { execFile as execFile8 } from "child_process";
 import { resolve as resolve6, sep as sep4 } from "path";
-import { promisify as promisify6 } from "util";
-var run6 = promisify6(execFile6);
+import { promisify as promisify8 } from "util";
+var run7 = promisify8(execFile8);
 var FS = "";
 var RS = "";
 function resolveRepo(root, repo) {
@@ -35924,7 +36706,7 @@ function resolveRepo(root, repo) {
 }
 async function git(cwd2, args) {
   try {
-    const { stdout } = await run6("git", args, {
+    const { stdout } = await run7("git", args, {
       cwd: cwd2,
       timeout: 15e3,
       maxBuffer: 8 * 1024 * 1024
@@ -35950,13 +36732,13 @@ async function gitRepos(root) {
   };
   await add(base);
   try {
-    const lvl1 = await readdir5(base, { withFileTypes: true });
+    const lvl1 = await readdir6(base, { withFileTypes: true });
     for (const d of lvl1) {
       if (!d.isDirectory() || d.name === ".git" || d.name === "node_modules") continue;
       const p1 = resolve6(base, d.name);
       await add(p1);
       try {
-        const lvl2 = await readdir5(p1, { withFileTypes: true });
+        const lvl2 = await readdir6(p1, { withFileTypes: true });
         for (const d2 of lvl2) {
           if (!d2.isDirectory() || d2.name === ".git" || d2.name === "node_modules") continue;
           await add(resolve6(p1, d2.name));
@@ -36026,77 +36808,77 @@ async function gitCommitDiff(root, repo, hash, path) {
 }
 
 // src/core/git-commit-identity.ts
-import { execFile as execFile7 } from "child_process";
-import { promisify as promisify7 } from "util";
-var run7 = promisify7(execFile7);
+import { execFile as execFile9 } from "child_process";
+import { promisify as promisify9 } from "util";
+var run8 = promisify9(execFile9);
 async function setCommitAuthor(cwd2, machineUsername) {
   if (!machineUsername) return;
   try {
-    await run7("git", ["config", "--local", "user.name", machineUsername], { cwd: cwd2, timeout: 8e3 });
+    await run8("git", ["config", "--local", "user.name", machineUsername], { cwd: cwd2, timeout: 8e3 });
   } catch {
   }
 }
 
 // src/core/scaffold.ts
-import { cp, mkdir as mkdir5, writeFile as writeFile6 } from "fs/promises";
-import { execFile as execFile8 } from "child_process";
-import { dirname as dirname6, join as join17, resolve as resolve7 } from "path";
+import { cp, mkdir as mkdir8, writeFile as writeFile8 } from "fs/promises";
+import { execFile as execFile10 } from "child_process";
+import { dirname as dirname8, join as join23, resolve as resolve7 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
-import { promisify as promisify8 } from "util";
-var run8 = promisify8(execFile8);
+import { promisify as promisify10 } from "util";
+var run9 = promisify10(execFile10);
 function reposOf(spec) {
   const repos = spec?.repos;
   return Array.isArray(repos) ? repos : [];
 }
 function subDirName(repo) {
-  const raw = (repo.subdir || repo.role || repo.name || "repo").trim();
+  const raw = (repo.subdir || repo.role || repoName(repo.url ?? "") || "repo").trim();
   return raw.replace(/[^\w.-]+/g, "-").replace(/^-+|-+$/g, "") || "repo";
 }
 async function provisionRepos(target, repos, emit, opts = {}) {
   for (const repo of repos) {
     if (repo.primary) {
-      if (opts.clonePrimary && repo.op === "existing" && repo.url) {
+      if (opts.clonePrimary && repo.url) {
         emit("git", `Cloning ${repo.url}\u2026`);
-        await run8("git", ["clone", repo.url, target], { timeout: 12e4 });
+        await run9("git", ["clone", repo.url, target], { timeout: 12e4 });
         continue;
       }
       emit("git", "Initializing the primary repo\u2026");
-      await run8("git", ["init"], { cwd: target, timeout: 2e4 });
-      if (repo.op === "existing" && repo.url) {
-        await run8("git", ["remote", "add", "origin", repo.url], { cwd: target, timeout: 2e4 }).catch(
+      await run9("git", ["init"], { cwd: target, timeout: 2e4 });
+      if (repo.url) {
+        await run9("git", ["remote", "add", "origin", repo.url], { cwd: target, timeout: 2e4 }).catch(
           () => void 0
         );
       }
       continue;
     }
-    const dir2 = join17(target, subDirName(repo));
-    if (repo.op === "existing" && repo.url) {
+    const dir2 = join23(target, subDirName(repo));
+    if (repo.url) {
       emit("git", `Cloning sub-repo ${repo.url}\u2026`);
-      await run8("git", ["clone", repo.url, dir2], { timeout: 12e4 });
+      await run9("git", ["clone", repo.url, dir2], { timeout: 12e4 });
     } else {
       emit("git", `Initializing sub-repo ${subDirName(repo)}\u2026`);
-      await mkdir5(dir2, { recursive: true });
-      await run8("git", ["init"], { cwd: dir2, timeout: 2e4 });
+      await mkdir8(dir2, { recursive: true });
+      await run9("git", ["init"], { cwd: dir2, timeout: 2e4 });
     }
   }
 }
 function sampleDir() {
   if (process.env.SCAFFOLD_SAMPLE_DIR) return process.env.SCAFFOLD_SAMPLE_DIR;
-  const here = dirname6(fileURLToPath3(import.meta.url));
+  const here = dirname8(fileURLToPath3(import.meta.url));
   return resolve7(here, "../../project-sample");
 }
 async function scaffoldProject(payload, profileDir2, onProgress) {
   const emit = (step, message) => onProgress?.({ projectId: payload.projectId, step, message });
   try {
     const root = process.env.SCAFFOLD_ROOT ? resolve7(process.env.SCAFFOLD_ROOT) : resolve7(profileDir2);
-    const target = join17(root, payload.projectName);
-    await mkdir5(target, { recursive: true });
+    const target = join23(root, payload.projectName);
+    await mkdir8(target, { recursive: true });
     emit("copy", "Copying the sample template\u2026");
     await cp(sampleDir(), target, { recursive: true, force: false, errorOnExist: false });
     if (payload.spec) {
       emit("spec", "Writing project.spec.json\u2026");
-      await writeFile6(
-        join17(target, "project.spec.json"),
+      await writeFile8(
+        join23(target, "project.spec.json"),
         JSON.stringify(payload.spec, null, 2),
         "utf8"
       );
@@ -36114,7 +36896,7 @@ async function aiInit(target, spec, emit) {
   emit("ai-init", "AI init: subagents, README, CLAUDE.md\u2026");
   const subagents = Array.isArray(spec.subagents) ? spec.subagents : [];
   if (subagents.length > 0) {
-    await mkdir5(join17(target, ".claude", "agents"), { recursive: true });
+    await mkdir8(join23(target, ".claude", "agents"), { recursive: true });
     for (const sa of subagents) {
       const name = (sa.name || "").trim().replace(/[^\w.-]+/g, "-").replace(/^-+|-+$/g, "");
       if (!name) continue;
@@ -36124,17 +36906,17 @@ name: ${name}
 
 ${(sa.description || "").trim()}
 `;
-      await writeFile6(join17(target, ".claude", "agents", `${name}.md`), body, "utf8");
+      await writeFile8(join23(target, ".claude", "agents", `${name}.md`), body, "utf8");
     }
   }
   const specJson = JSON.stringify(spec);
   await generateFile(
-    join17(target, "README.md"),
+    join23(target, "README.md"),
     `Write a concise README.md (Markdown only, no preamble) for this project from its spec JSON:
 ${specJson}`
   );
   await generateFile(
-    join17(target, "CLAUDE.md"),
+    join23(target, "CLAUDE.md"),
     `Write a CLAUDE.md (Markdown only, no preamble) with guidance/conventions for AI agents working in this project, derived from its spec JSON:
 ${specJson}`
   );
@@ -36142,7 +36924,7 @@ ${specJson}`
 async function generateFile(path, prompt) {
   try {
     const text = await aiGenerate(prompt);
-    if (text.trim()) await writeFile6(path, text.trim() + "\n", "utf8");
+    if (text.trim()) await writeFile8(path, text.trim() + "\n", "utf8");
   } catch {
   }
 }
@@ -36150,8 +36932,8 @@ async function addProject(payload, profileDir2, onProgress) {
   const emit = (step, message) => onProgress?.({ projectId: payload.projectId, step, message });
   try {
     const root = process.env.SCAFFOLD_ROOT ? resolve7(process.env.SCAFFOLD_ROOT) : resolve7(profileDir2);
-    const target = join17(root, payload.projectName);
-    await mkdir5(target, { recursive: true });
+    const target = join23(root, payload.projectName);
+    await mkdir8(target, { recursive: true });
     const repos = payload.repos ?? [];
     if (repos.length > 0) await provisionRepos(target, repos, emit, { clonePrimary: true });
     onProgress?.({ projectId: payload.projectId, step: "done", message: "Project added.", done: true });
@@ -36162,14 +36944,14 @@ async function addProject(payload, profileDir2, onProgress) {
 }
 
 // src/core/config-sync.ts
-import { existsSync as existsSync8, readFileSync as readFileSync13 } from "fs";
-import { join as join18 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync14 } from "fs";
+import { join as join24 } from "path";
 var SERVER_MANAGED_KEYS = ["physicPath", "sessionSwitchPct", "perPromptTokenLimit"];
 function readConfigText(profileDir2) {
-  const path = join18(profileDir2, "config.json");
-  if (existsSync8(path)) {
+  const path = join24(profileDir2, "config.json");
+  if (existsSync9(path)) {
     try {
-      return readFileSync13(path, "utf8");
+      return readFileSync14(path, "utf8");
     } catch {
     }
   }
@@ -36199,6 +36981,7 @@ function applyConfigText(profileDir2, text) {
 var HEARTBEAT_MS = 3e4;
 var USAGE_POLL_MS = 5 * 6e4;
 var LOG_UPLOAD_MS = 10 * 6e4;
+var KB_REFRESH_MS = 24 * 60 * 6e4;
 var RECONNECT_BACKOFF_BASE_MS = 1e3;
 var RECONNECT_MAX_BACKOFF_DEFAULT_SEC = 60;
 var RECONNECT_BACKOFF_MAX_ATTEMPT = 6;
@@ -36245,11 +37028,17 @@ var WsClient = class {
   heartbeat = null;
   usageTimer = null;
   logUploadTimer = null;
+  kbRefreshTimer = null;
   /** Signature (fileName + totalBytes) of the last log upload — skip re-sending if unchanged. */
   lastLogSig = null;
   usageSnapshot = null;
   /** Whether the serving project requires outbound review before each AI spawn (ADR-0082). */
   outboundReviewEnabled = false;
+  /**
+   * Whether the serving project restricts the AI to its worker folder (project aiScope) —
+   * when true the cli prepends a folder-scope guard to every AI prompt. Fed by each ws_token.
+   */
+  restrictToFolder = false;
   stopped = false;
   /** Resolver to wake the backoff sleep early (set while waiting) — for /reconnect. */
   wakeReconnect = null;
@@ -36453,6 +37242,9 @@ var WsClient = class {
           perPromptTokenLimit: token.projectTokens?.perPromptTokenLimit ?? 0
         });
         this.outboundReviewEnabled = token.outboundReview?.enabled === true;
+        this.restrictToFolder = token.aiRestrictToFolder === true;
+        writeEgressAllowlist(this.context.profileDir, token.aiSandbox ?? null);
+        applyGitAuth(token.gitAuth ?? null);
         this.machineUsername = token.machineUsername ?? "";
         if (token.scope && token.scope !== this.credential.scope) {
           this.credential.scope = token.scope;
@@ -36531,6 +37323,7 @@ var WsClient = class {
         this.startHeartbeat();
         this.startUsagePolling();
         this.startLogUpload();
+        this.startKbRefresh();
         this.connectWaiters.splice(0).forEach((fn) => fn());
         return;
       }
@@ -36592,8 +37385,8 @@ var WsClient = class {
           const oldRoot = this.physicFolderPath(sync.oldName);
           if (oldRoot) void uninstallCron(oldRoot).catch(() => void 0);
         }
-        if (sync.oldName) rmSync4(join19(this.context.profileDir, sync.oldName), { recursive: true, force: true });
-        mkdirSync4(join19(this.context.profileDir, sync.newName), { recursive: true });
+        if (sync.oldName) rmSync5(join25(this.context.profileDir, sync.oldName), { recursive: true, force: true });
+        mkdirSync5(join25(this.context.profileDir, sync.newName), { recursive: true });
         this.physicRoot = this.physicFolderPath(sync.newName);
         this.bus.setProject(sync.newName);
         this.bus.log(`Physic project folder synced \u2192 ${sync.newName}`);
@@ -36604,9 +37397,10 @@ var WsClient = class {
         if (del.name) {
           const delRoot = this.physicFolderPath(del.name);
           if (delRoot) void uninstallCron(delRoot).catch(() => void 0);
-          rmSync4(join19(this.context.profileDir, del.name), { recursive: true, force: true });
+          rmSync5(join25(this.context.profileDir, del.name), { recursive: true, force: true });
           this.bus.log(`Physic project folder deleted (project removed) \u2192 ${del.name}`);
         }
+        void manageSshKey("delete", this.context.profileDir).catch(() => void 0);
         this.bus.setProject(null);
         this.physicRoot = null;
         break;
@@ -36676,6 +37470,61 @@ var WsClient = class {
         );
         break;
       }
+      case WsChannels.SUPPORT_ANSWER: {
+        const req = payload;
+        const supportConfig = readProfileConfig(this.context.profileDir);
+        const supportCmd = supportConfig.aiCli || "claude";
+        const supportAi = {
+          cmd: supportCmd,
+          profiles: resolveClaudeProfiles(
+            supportConfig,
+            getWorkingProfile(this.context.profileDir, supportCmd)
+          ),
+          env: supportConfig.aiEnv
+        };
+        this.bus.push({ source: "server", kind: "aireq", text: `${supportCmd} \u2039 ${req.question}` });
+        this.bus.startBusy("support-answer");
+        void runSupportAnswer(req, supportAi, this.context.profileDir).then((reply) => {
+          if (reply.error) {
+            this.bus.push({
+              source: "server",
+              kind: "log",
+              text: `support-answer failed: ${reply.error}`,
+              level: "warn"
+            });
+          } else {
+            this.bus.push({ source: "server", kind: "aires", text: `${supportCmd} \u203A` });
+            this.bus.push({ source: "server", kind: "out", text: reply.body });
+          }
+          this.send(WsChannels.SUPPORT_ANSWER, reply, message.id);
+        }).finally(() => this.bus.endBusy("support-answer"));
+        break;
+      }
+      case WsChannels.KNOWLEDGE_COMPOSE: {
+        const kreq = payload;
+        if (!this.physicRoot) {
+          this.send(WsChannels.KNOWLEDGE_COMPOSE, { bodyMarkdown: "", error: "no project" }, message.id);
+          break;
+        }
+        const kcfg = readProfileConfig(this.context.profileDir);
+        const kcmd = kcfg.aiCli || "claude";
+        const kai = {
+          cmd: kcmd,
+          profiles: resolveClaudeProfiles(kcfg, getWorkingProfile(this.context.profileDir, kcmd)),
+          env: kcfg.aiEnv
+        };
+        this.bus.push({ source: "server", kind: "aireq", text: `${kcmd} \u2039 distil knowledge` });
+        this.bus.startBusy("knowledge-compose");
+        void runKnowledgeCompose(kreq, kai, this.physicRoot).then((reply) => {
+          if (reply.error) {
+            this.bus.push({ source: "server", kind: "log", text: `knowledge-compose failed: ${reply.error}`, level: "warn" });
+          } else {
+            this.bus.push({ source: "server", kind: "aires", text: `${kcmd} \u203A` });
+          }
+          this.send(WsChannels.KNOWLEDGE_COMPOSE, reply, message.id);
+        }).finally(() => this.bus.endBusy("knowledge-compose"));
+        break;
+      }
       case WsChannels.AUTONOMOUS_READ:
         if (this.physicRoot) {
           void readAutonomous(this.physicRoot).then(
@@ -36742,6 +37591,58 @@ var WsClient = class {
         }
         break;
       }
+      case WsChannels.AGENT_TOOLS_READ: {
+        const req = payload;
+        if (this.physicRoot) {
+          void readAgentTools(this.physicRoot, req.scope).then(
+            (reply) => this.send(WsChannels.AGENT_TOOLS_READ, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.AGENT_TOOLS_WRITE: {
+        const req = payload;
+        if (this.physicRoot) {
+          void writeAgentTools(this.physicRoot, req.scope, req.permissions).then(
+            (reply) => this.send(WsChannels.AGENT_TOOLS_WRITE, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.PACKAGES_PACK: {
+        const req = payload;
+        if (this.physicRoot) {
+          void packPackage(this.physicRoot, req.kind, req.name).then(
+            (reply) => this.send(WsChannels.PACKAGES_PACK, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.PACKAGES_INSTALL: {
+        const req = payload;
+        if (this.physicRoot) {
+          void installPackage(this.physicRoot, req).then(
+            (reply) => this.send(WsChannels.PACKAGES_INSTALL, reply, message.id)
+          );
+        }
+        break;
+      }
+      case WsChannels.PACKAGES_LIST:
+        if (this.physicRoot) {
+          void listPackages(this.physicRoot).then(
+            (reply) => this.send(WsChannels.PACKAGES_LIST, reply, message.id)
+          );
+        }
+        break;
+      case WsChannels.PACKAGES_REMOVE: {
+        const req = payload;
+        if (this.physicRoot) {
+          void removePackage(this.physicRoot, req.slug).then(
+            (reply) => this.send(WsChannels.PACKAGES_REMOVE, reply, message.id)
+          );
+        }
+        break;
+      }
       case WsChannels.GRAPH_BUILD: {
         const req = payload;
         if (this.physicRoot) {
@@ -36813,6 +37714,13 @@ var WsClient = class {
           (reply) => this.send(WsChannels.GIT_REPOS, reply, message.id)
         );
         break;
+      case WsChannels.GIT_SSH_KEY: {
+        const req = payload;
+        void manageSshKey(req.op, this.context.profileDir).then(
+          (reply) => this.send(WsChannels.GIT_SSH_KEY, reply, message.id)
+        );
+        break;
+      }
       case WsChannels.GIT_LOG: {
         const req = payload;
         void gitLog(this.physicRoot, req.repo ?? "", req.skip ?? 0, req.limit ?? 50).then(
@@ -36836,7 +37744,7 @@ var WsClient = class {
       }
       case WsChannels.LOG_READ: {
         const limit = Math.min(Math.max(payload.limit ?? 200, 1), 2e3);
-        const lines = readRecentLogLines(join19(this.context.profileDir, "logs"), limit);
+        const lines = readRecentLogLines(join25(this.context.profileDir, "logs"), limit);
         this.send(WsChannels.LOG_READ, { lines }, message.id);
         break;
       }
@@ -36939,9 +37847,13 @@ var WsClient = class {
     } else {
       this.bus.log("No project attached \u2014 running in the current directory.", "warn");
     }
-    const cmd = config.aiCli ?? "claude";
-    const workingDir = getWorkingProfile(this.context.profileDir, cmd);
-    const startDir = this.profileUnderSessionPressure(config, cmd, workingDir);
+    const cmd = config.aiCli || "claude";
+    const unified = isUnifiedConfig(config);
+    const mode = config.aiFailoverMode ?? "remember";
+    const workingDir = unified ? null : getWorkingProfile(this.context.profileDir, cmd);
+    const workingCred = unified && mode === "remember" ? getWorkingCredential(this.context.profileDir) : null;
+    const startDir = unified ? null : this.profileUnderSessionPressure(config, cmd, workingDir);
+    const startCred = unified ? this.credentialUnderSessionPressure(config, workingCred) : null;
     if (startDir && startDir !== workingDir) {
       this.bus.push({
         source: origin,
@@ -36949,7 +37861,19 @@ var WsClient = class {
         text: `session ${this.usageSnapshot?.session.utilizationPct ?? 0}% \u2265 ${config.sessionSwitchPct}% \u2014 switching to Claude profile "${profileDisplayLabel(startDir)}"`
       });
     }
-    const plan = planAiRun(prompt, config, startDir ?? workingDir);
+    if (startCred && startCred !== workingCred) {
+      this.bus.push({
+        source: origin,
+        kind: "log",
+        text: `session ${this.usageSnapshot?.session.utilizationPct ?? 0}% \u2265 ${config.sessionSwitchPct}% \u2014 switching to Claude profile "${labelFromCredentialKey(startCred)}"`
+      });
+    }
+    const effectivePrompt = this.restrictToFolder && this.physicRoot ? folderScopeGuard(this.physicRoot, prompt) : prompt;
+    const plan = planAiRun(
+      effectivePrompt,
+      config,
+      unified ? { credential: startCred ?? workingCred } : { dir: startDir ?? workingDir }
+    );
     const markerArgs = plan.attempts[0]?.args ?? [];
     this.bus.push({ source: origin, kind: "aireq", text: `${plan.cmd} \u2039 ${prompt}` });
     logger.info("command.ai", { commandId, origin, cmd: plan.cmd, profiles: plan.attempts.length });
@@ -37015,7 +37939,11 @@ var WsClient = class {
     this.bus.endBusy(plan.cmd);
     const profileLabel = result.workedDir ? profileDisplayLabel(result.workedDir) : null;
     if (result.workedDir) {
-      setWorkingProfile(this.context.profileDir, plan.cmd, result.workedDir);
+      if (unified && result.workedKey) {
+        setWorkingCredential(this.context.profileDir, result.workedKey);
+      } else {
+        setWorkingProfile(this.context.profileDir, result.workedCmd ?? plan.cmd, result.workedDir);
+      }
       this.bus.setActiveProfile(profileLabel ?? plan.cmd);
     }
     this.send(WsChannels.COMMAND_OUTPUT, {
@@ -37058,7 +37986,9 @@ var WsClient = class {
         inputTokens: result.usage.input,
         outputTokens: result.usage.output,
         cacheReadTokens: result.usage.cacheRead,
-        cacheCreationTokens: result.usage.cacheCreation
+        cacheCreationTokens: result.usage.cacheCreation,
+        // Auth mode for billing split (ADR-0192 §5): subscription (OAuth) vs api-key (API-billed).
+        authMode: resolveClaudeAuthMode(config)
       });
       this.bus.addTokens?.(result.usage.tokens);
     }
@@ -37089,6 +38019,22 @@ var WsClient = class {
     const next = dirs[(currentIndex + 1) % dirs.length];
     return next ?? null;
   }
+  /**
+   * Unified-list equivalent of {@link profileUnderSessionPressure} (ADR-0182): under session
+   * pressure, return the next **claude** credential key (cyclically after the working one) so the
+   * failover starts on a fresher Claude account. Claude-only — %session is a Claude subscription
+   * metric; codex/antigravity entries are unaffected. Null ⇒ keep the working-first order.
+   */
+  credentialUnderSessionPressure(config, workingCred) {
+    const threshold = config.sessionSwitchPct ?? 0;
+    if (threshold <= 0) return null;
+    const util2 = this.usageSnapshot?.session.utilizationPct ?? 0;
+    if (util2 < threshold) return null;
+    const keys = claudeCredentialKeys(config);
+    if (keys.length < 2) return null;
+    const currentIndex = workingCred ? keys.indexOf(workingCred) : -1;
+    return keys[(currentIndex + 1) % keys.length] ?? null;
+  }
   /**
    * Reject a prompt whose estimated tokens exceed the project's per-prompt limit (ADR-0081)
    * without spawning: surface it in the transcript + close the command on the server with a
@@ -37332,8 +38278,8 @@ var WsClient = class {
   /** Create the physic folder at an absolute path if missing (best-effort). */
   ensurePhysicFolderPath(folder) {
     try {
-      if (!existsSync9(folder)) {
-        mkdirSync4(folder, { recursive: true });
+      if (!existsSync10(folder)) {
+        mkdirSync5(folder, { recursive: true });
         this.bus.log(`Created physic project folder: ${folder}`);
       }
     } catch (err) {
@@ -37347,7 +38293,7 @@ var WsClient = class {
    */
   physicFolderPath(projectName) {
     const safe = projectName.replace(/[/\\]/g, "_").replace(/\.\./g, "_").trim();
-    return safe ? join19(this.context.profileDir, safe) : null;
+    return safe ? join25(this.context.profileDir, safe) : null;
   }
   /**
    * Report machine.status: version + the state of the physic project being served
@@ -37361,7 +38307,7 @@ var WsClient = class {
       projects: [],
       version: CLI_VERSION,
       physicPath,
-      physicPathExists: physicPath ? existsSync9(physicPath) : void 0,
+      physicPathExists: physicPath ? existsSync10(physicPath) : void 0,
       // Real coarse state (ADR-0152): !paused and a recent tick (was hard-coded false).
       autonomousRunning: physicPath ? isAutonomousRunning(physicPath) : false
     });
@@ -37382,6 +38328,8 @@ var WsClient = class {
     this.usageTimer = null;
     if (this.logUploadTimer) clearInterval(this.logUploadTimer);
     this.logUploadTimer = null;
+    if (this.kbRefreshTimer) clearInterval(this.kbRefreshTimer);
+    this.kbRefreshTimer = null;
   }
   /**
    * Poll the Claude subscription usage API and push a `machine.usage` snapshot (ADR-0072).
@@ -37392,7 +38340,7 @@ var WsClient = class {
     if (!this.sessionKey) return;
     try {
       const config = readProfileConfig(this.context.profileDir);
-      const aiCli2 = config.aiCli ?? "claude";
+      const aiCli2 = config.aiCli || "claude";
       const working = getWorkingProfile(this.context.profileDir, aiCli2);
       const configured = claudeHomeDirs(config);
       const dirs = working ? [working, ...configured.filter((d) => d !== working)] : configured;
@@ -37426,6 +38374,20 @@ var WsClient = class {
     this.logUploadTimer.unref?.();
     this.uploadLog();
   }
+  /**
+   * Start the daily FAQ/KB refresh for a support agent (ADR-0170): pull each KB clone already
+   * present in this profile so answers stay current without fetching on each dispatch. A no-op
+   * for a normal project cli (no `support-kb` dir), so it is safe to start on every session.
+   */
+  startKbRefresh() {
+    if (this.kbRefreshTimer) clearInterval(this.kbRefreshTimer);
+    this.kbRefreshTimer = setInterval(
+      () => void refreshSupportKb(this.context.profileDir),
+      KB_REFRESH_MS
+    );
+    this.kbRefreshTimer.unref?.();
+    void refreshSupportKb(this.context.profileDir);
+  }
   /**
    * Upload the newest cli log file + the total log footprint to the server (ADR-0122), so it is
    * stored + retained server-side and counted in the machine user's storage. Skips when nothing
@@ -37433,7 +38395,7 @@ var WsClient = class {
    */
   uploadLog() {
     try {
-      const upload = readLogUpload(join19(this.context.profileDir, "logs"));
+      const upload = readLogUpload(join25(this.context.profileDir, "logs"));
       if (!upload) return;
       const sig = `${upload.fileName}:${upload.totalBytes}`;
       if (sig === this.lastLogSig) return;
@@ -37461,10 +38423,10 @@ var WsClient = class {
 };
 
 // src/core/instance-lock.ts
-import { readFileSync as readFileSync14, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "fs";
-import { join as join20 } from "path";
+import { readFileSync as readFileSync15, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "fs";
+import { join as join26 } from "path";
 function lockPath(profileDir2) {
-  return join20(profileDir2, "start.lock");
+  return join26(profileDir2, "start.lock");
 }
 function isAlive(pid) {
   try {
@@ -37476,7 +38438,7 @@ function isAlive(pid) {
 }
 function lockHolder(profileDir2) {
   try {
-    const pid = Number.parseInt(readFileSync14(lockPath(profileDir2), "utf8").trim(), 10);
+    const pid = Number.parseInt(readFileSync15(lockPath(profileDir2), "utf8").trim(), 10);
     if (Number.isInteger(pid) && pid > 0 && isAlive(pid)) return pid;
   } catch {
   }
@@ -37484,13 +38446,13 @@ function lockHolder(profileDir2) {
 }
 function acquireInstanceLock(profileDir2) {
   if (lockHolder(profileDir2) !== null) return false;
-  writeFileSync6(lockPath(profileDir2), String(process.pid), "utf8");
+  writeFileSync8(lockPath(profileDir2), String(process.pid), "utf8");
   return true;
 }
 function releaseInstanceLock(profileDir2) {
   try {
-    const pid = Number.parseInt(readFileSync14(lockPath(profileDir2), "utf8").trim(), 10);
-    if (pid === process.pid) rmSync5(lockPath(profileDir2), { force: true });
+    const pid = Number.parseInt(readFileSync15(lockPath(profileDir2), "utf8").trim(), 10);
+    if (pid === process.pid) rmSync6(lockPath(profileDir2), { force: true });
   } catch {
   }
 }
@@ -37577,6 +38539,16 @@ var SessionBus = class {
   log(text, level = "info") {
     this.push({ source: "system", kind: "log", text, level });
   }
+  /**
+   * Insert a fully-formed transcript entry (preserving its id/ts) — used by the attach client
+   * (ADR-0192 §2) to mirror a daemon's transcript over the control channel so `updateEntry` can
+   * still target the same id. `push` is for producers minting a new entry; this is for replay.
+   */
+  pushEntry(entry) {
+    this.history.push(entry);
+    if (this.history.length > REPLAY_CAP) this.history.shift();
+    this.emitter.emit("transcript", entry);
+  }
   /** Producer → consumers: update the connection status. */
   setStatus(status) {
     this.currentStatus = status;
@@ -37602,6 +38574,15 @@ var SessionBus = class {
     else this.busyStack.pop();
     this.emitter.emit("busy", this.busy);
   }
+  /**
+   * Mirror the current busy label directly (attach client — ADR-0192 §2): replaces the stack with
+   * `[label]` (or empties it) and notifies. For a real session use `startBusy`/`endBusy` instead.
+   */
+  setBusy(label) {
+    this.busyStack.length = 0;
+    if (label) this.busyStack.push(label);
+    this.emitter.emit("busy", this.busy);
+  }
   /** Subscribe to processing-state changes. */
   onBusy(fn) {
     this.emitter.on("busy", fn);
@@ -37684,6 +38665,11 @@ var SessionBus = class {
     this.currentSessionTokens += n;
     this.emitter.emit("tokens", this.currentSessionTokens);
   }
+  /** Set the session token total directly (attach client mirror — ADR-0192 §2). */
+  setTokens(total) {
+    this.currentSessionTokens = total;
+    this.emitter.emit("tokens", this.currentSessionTokens);
+  }
   /** Subscribe to session-token changes. */
   onTokens(fn) {
     this.emitter.on("tokens", fn);
@@ -37725,6 +38711,112 @@ var SessionBus = class {
   }
 };
 
+// src/core/control-server.ts
+import { createServer } from "net";
+import { rmSync as rmSync7 } from "fs";
+import { join as join27 } from "path";
+
+// src/core/control-protocol.ts
+var CONTROL_SOCKET_FILE = "control.sock";
+function encodeFrame(frame) {
+  return `${JSON.stringify(frame)}
+`;
+}
+function createFrameParser() {
+  let buffer = "";
+  return (chunk) => {
+    buffer += chunk;
+    const lines = buffer.split("\n");
+    buffer = lines.pop() ?? "";
+    const out = [];
+    for (const line of lines) {
+      const s = line.trim();
+      if (!s) continue;
+      try {
+        out.push(JSON.parse(s));
+      } catch {
+      }
+    }
+    return out;
+  };
+}
+
+// src/core/control-server.ts
+function startControlServer(bus, profileDir2, info) {
+  const socketPath = join27(profileDir2, CONTROL_SOCKET_FILE);
+  try {
+    rmSync7(socketPath, { force: true });
+  } catch {
+  }
+  const clients = /* @__PURE__ */ new Set();
+  const send = (sock, frame) => {
+    try {
+      sock.write(encodeFrame(frame));
+    } catch {
+    }
+  };
+  const broadcast = (frame) => {
+    for (const sock of clients) send(sock, frame);
+  };
+  const unsubs = [
+    bus.onTranscript((entry) => broadcast({ t: "transcript", entry })),
+    bus.onTranscriptUpdate(
+      (entry) => broadcast({ t: "update", id: entry.id, text: entry.text, level: entry.level })
+    ),
+    bus.onClear(() => broadcast({ t: "clear" })),
+    bus.onStatus((status) => broadcast({ t: "status", status })),
+    bus.onBusy((label) => broadcast({ t: "busy", label })),
+    bus.onActiveProfile((label) => broadcast({ t: "activeProfile", label })),
+    bus.onScope((scope) => broadcast({ t: "scope", scope })),
+    bus.onWorker((worker) => broadcast({ t: "worker", worker })),
+    bus.onProject((project) => broadcast({ t: "project", project })),
+    bus.onUsage((usage) => broadcast({ t: "usage", usage })),
+    bus.onTokens((total) => broadcast({ t: "tokens", total }))
+  ];
+  const server = createServer((sock) => {
+    clients.add(sock);
+    send(sock, {
+      t: "snapshot",
+      info,
+      status: bus.status,
+      busy: bus.busy,
+      activeProfile: bus.activeProfile,
+      scope: bus.scope,
+      worker: bus.worker,
+      project: bus.project,
+      usage: bus.usage,
+      tokens: bus.sessionTokens,
+      transcript: bus.snapshot()
+    });
+    const parse = createFrameParser();
+    sock.setEncoding("utf8");
+    sock.on("data", (chunk) => {
+      for (const frame of parse(chunk)) {
+        if (frame.t === "submit") bus.submitLocal(frame.input);
+        else if (frame.t === "reconnect") bus.requestReconnect();
+      }
+    });
+    const drop = () => {
+      clients.delete(sock);
+    };
+    sock.on("close", drop);
+    sock.on("error", drop);
+  });
+  server.on("error", () => {
+  });
+  server.listen(socketPath);
+  return () => {
+    for (const un of unsubs) un();
+    for (const sock of clients) sock.destroy();
+    clients.clear();
+    server.close();
+    try {
+      rmSync7(socketPath, { force: true });
+    } catch {
+    }
+  };
+}
+
 // src/ui/console-sink.ts
 function attachConsoleSink(bus) {
   bus.onTranscript((entry) => {
@@ -43360,17 +44452,17 @@ var import_react21 = __toESM(require_react(), 1);
 var import_react26 = __toESM(require_react(), 1);
 
 // src/core/input-history.ts
-import { existsSync as existsSync11, readFileSync as readFileSync16, writeFileSync as writeFileSync7 } from "fs";
-import { join as join21 } from "path";
+import { existsSync as existsSync12, readFileSync as readFileSync17, writeFileSync as writeFileSync9 } from "fs";
+import { join as join28 } from "path";
 var MAX_HISTORY = 200;
 function historyPath(profileDir2) {
-  return join21(profileDir2, "input-history.json");
+  return join28(profileDir2, "input-history.json");
 }
 function loadInputHistory(profileDir2) {
   const path = historyPath(profileDir2);
-  if (!existsSync11(path)) return [];
+  if (!existsSync12(path)) return [];
   try {
-    const data = JSON.parse(readFileSync16(path, "utf8"));
+    const data = JSON.parse(readFileSync17(path, "utf8"));
     return Array.isArray(data) ? data.filter((x) => typeof x === "string") : [];
   } catch {
     return [];
@@ -43381,7 +44473,7 @@ function appendInputHistory(profileDir2, line, current) {
   if (!trimmed || current[current.length - 1] === trimmed) return current;
   const next = [...current, trimmed].slice(-MAX_HISTORY);
   try {
-    writeFileSync7(historyPath(profileDir2), JSON.stringify(next), "utf8");
+    writeFileSync9(historyPath(profileDir2), JSON.stringify(next), "utf8");
   } catch {
   }
   return next;
@@ -43630,8 +44722,8 @@ function TranscriptLine({ line }) {
 var import_react24 = __toESM(require_react(), 1);
 
 // src/ui/slash-commands.ts
-import { existsSync as existsSync12 } from "fs";
-import { join as join22 } from "path";
+import { existsSync as existsSync13 } from "fs";
+import { join as join29 } from "path";
 var CONFIG_KEYS = [
   "aiCli",
   "claudeHome",
@@ -43643,7 +44735,7 @@ var CONFIG_KEYS = [
   "aiEnv"
 ];
 function configPath(profileDir2) {
-  return join22(profileDir2, "config.json");
+  return join29(profileDir2, "config.json");
 }
 function parseConfigAssignment(key, valueTokens) {
   const value = valueTokens.join(" ").trim();
@@ -43693,7 +44785,7 @@ function runConfig(ctx) {
       ctx.print(`\u2714 ${verb} default config: ${path}`);
       ctx.print("add claude profiles: /config set claudeHome .claude .claude-1 (tried in order)");
     };
-    if (existsSync12(path)) {
+    if (existsSync13(path)) {
       ctx.confirm(
         `config exists: ${path} \u2014 replace it with defaults? (y/N)`,
         () => writeDefaults("replaced with")
@@ -43778,7 +44870,7 @@ function runOutput(ctx) {
 }
 function runLogs(ctx) {
   const n = Math.max(1, Math.min(200, Number(ctx.args[0]) || 20));
-  const dir2 = join22(ctx.info.profileDir, "logs");
+  const dir2 = join29(ctx.info.profileDir, "logs");
   const lines = readRecentLogLines(dir2, n);
   if (lines.length === 0) {
     ctx.print("No log lines yet.");
@@ -44056,7 +45148,7 @@ var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u282
 function Spinner() {
   const [index, setIndex] = (0, import_react25.useState)(0);
   (0, import_react25.useEffect)(() => {
-    const timer = setInterval(() => setIndex((i) => (i + 1) % FRAMES.length), 90);
+    const timer = setInterval(() => setIndex((i) => (i + 1) % FRAMES.length), 120);
     return () => clearInterval(timer);
   }, []);
   return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { color: "yellow", children: FRAMES[index] });
@@ -44066,6 +45158,7 @@ function Spinner() {
 var import_jsx_runtime5 = __toESM(require_jsx_runtime(), 1);
 var CHROME_ROWS = 12;
 var ENTRY_CAP = 3e3;
+var UPDATE_FLUSH_MS = 66;
 function Rule({ width }) {
   return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { dimColor: true, children: "\u2500".repeat(Math.max(10, width)) });
 }
@@ -44113,6 +45206,16 @@ function App2({
   entriesLenRef.current = entries2.length;
   const pendingConfirmRef = (0, import_react26.useRef)(pendingConfirm);
   pendingConfirmRef.current = pendingConfirm;
+  const pendingUpdatesRef = (0, import_react26.useRef)(/* @__PURE__ */ new Map());
+  const flushTimerRef = (0, import_react26.useRef)(null);
+  const flushUpdates = (0, import_react26.useCallback)(() => {
+    flushTimerRef.current = null;
+    const pending = pendingUpdatesRef.current;
+    if (pending.size === 0) return;
+    const snapshot = new Map(pending);
+    pending.clear();
+    setEntries((prev) => prev.map((e) => snapshot.has(e.id) ? { ...e, text: snapshot.get(e.id) } : e));
+  }, []);
   const clearTranscript = (0, import_react26.useCallback)(() => {
     setEntries([]);
     setScrollBack(0);
@@ -44127,9 +45230,12 @@ function App2({
       if (entry.source !== "system") lastActivityRef.current = Date.now();
       if (entry.kind === "aireq" || entry.kind === "aires") setExpanded(/* @__PURE__ */ new Set());
     });
-    const offUpdate = bus.onTranscriptUpdate(
-      (updated) => setEntries((prev) => prev.map((e) => e.id === updated.id ? { ...e, text: updated.text } : e))
-    );
+    const offUpdate = bus.onTranscriptUpdate((updated) => {
+      pendingUpdatesRef.current.set(updated.id, updated.text);
+      if (flushTimerRef.current === null) {
+        flushTimerRef.current = setTimeout(flushUpdates, UPDATE_FLUSH_MS);
+      }
+    });
     const offStatus = bus.onStatus(setStatus);
     const offBusy = bus.onBusy(setBusy);
     const offProfile = bus.onActiveProfile(setActiveProfile);
@@ -44149,8 +45255,13 @@ function App2({
       offProject();
       offUsage();
       offTokens();
+      if (flushTimerRef.current !== null) {
+        clearTimeout(flushTimerRef.current);
+        flushTimerRef.current = null;
+      }
+      flushUpdates();
     };
-  }, [bus]);
+  }, [bus, flushUpdates]);
   (0, import_react26.useEffect)(() => {
     if (autoClearIdleMs <= 0) return;
     const timer = setInterval(() => {
@@ -44166,7 +45277,8 @@ function App2({
     }, 6e4);
     return () => clearInterval(timer);
   }, [autoClearIdleMs, bus, clearTranscript]);
-  const bodyHeight = Math.max(3, rows - CHROME_ROWS);
+  const frameRows = Math.max(4, rows - 1);
+  const bodyHeight = Math.max(3, frameRows - CHROME_ROWS);
   const textWidth = Math.max(10, cols - 1 - 8);
   const lines = (0, import_react26.useMemo)(() => flattenEntries(entries2, textWidth, expanded), [entries2, textWidth, expanded]);
   const maxBlock = (0, import_react26.useMemo)(() => lines.reduce((m, l) => Math.max(m, l.blockIndex ?? 0), 0), [lines]);
@@ -44234,7 +45346,7 @@ function App2({
     if (key.pageUp) setScrollBack((b) => Math.min(maxScroll, b + bodyHeight));
     else if (key.pageDown) setScrollBack((b) => Math.max(0, b - bodyHeight));
   });
-  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", height: rows, children: [
+  return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", height: frameRows, children: [
     /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Banner, { info, scope, worker, project, status, activeProfile, usage, sessionTokens }),
     /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Rule, { width }),
     /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", height: bodyHeight, overflow: "hidden", children: [
@@ -44279,7 +45391,7 @@ async function runStart(profileDir2, profileName) {
     return;
   }
   logger.configure({
-    dir: join23(profileDir2, "logs"),
+    dir: join30(profileDir2, "logs"),
     level: resolveLogLevel(),
     base: { version: CLI_VERSION, profile: profileName, scope: credential.scope }
   });
@@ -44299,7 +45411,7 @@ async function runStart(profileDir2, profileName) {
   if (result.action === "updated") {
     logger.info("update.updated", { version: result.version });
     console.log("Restarting with the new version\u2026");
-    const child = spawn6(process.execPath, process.argv.slice(1), {
+    const child = spawn8(process.execPath, process.argv.slice(1), {
       stdio: "inherit",
       env: { ...process.env, FOURPM_NO_UPDATE: "1" }
     });
@@ -44314,6 +45426,7 @@ async function runStart(profileDir2, profileName) {
     return;
   }
   const release = () => releaseInstanceLock(profileDir2);
+  let stopControl = null;
   process.once("exit", release);
   process.once("SIGINT", () => process.exit(0));
   process.once("SIGTERM", () => process.exit(0));
@@ -44327,6 +45440,14 @@ async function runStart(profileDir2, profileName) {
       profileDir: profileDir2,
       bus
     });
+    stopControl = startControlServer(bus, profileDir2, {
+      version: CLI_VERSION,
+      scope: credential.scope,
+      profile: profileName,
+      serverUrl: credential.serverUrl,
+      physicPath: config.physicPath ?? null,
+      aiCli: config.aiCli || "claude"
+    });
     const runResilient = async () => {
       for (; ; ) {
         try {
@@ -44350,10 +45471,10 @@ async function runStart(profileDir2, profileName) {
         profileDir: profileDir2,
         serverUrl: credential.serverUrl,
         physicPath: config.physicPath ?? null,
-        aiCli: config.aiCli ?? "claude",
+        aiCli: config.aiCli || "claude",
         whoami: () => fetchWhoami(credential.serverUrl, credential.hashcode3).catch(() => null)
       };
-      const aiCli2 = config.aiCli ?? "claude";
+      const aiCli2 = config.aiCli || "claude";
       const workingDir = getWorkingProfile(profileDir2, aiCli2);
       const labels = profileLabels(config);
       bus.setActiveProfile(workingDir ? profileDisplayLabel(workingDir) : labels[0] ?? null);
@@ -44367,12 +45488,144 @@ async function runStart(profileDir2, profileName) {
       await runResilient();
     }
   } finally {
+    stopControl?.();
     release();
   }
 }
 
+// src/commands/attach.ts
+import { join as join31 } from "path";
+
+// src/core/control-client.ts
+import { connect } from "net";
+function connectControl(socketPath, bus) {
+  return new Promise((resolve8, reject) => {
+    const socket = connect(socketPath);
+    socket.setEncoding("utf8");
+    let ready = false;
+    const forwardSubmit = bus.onLocalSubmit((input) => {
+      try {
+        socket.write(encodeFrame({ t: "submit", input }));
+      } catch {
+      }
+    });
+    const forwardReconnect = bus.onReconnect(() => {
+      try {
+        socket.write(encodeFrame({ t: "reconnect" }));
+      } catch {
+      }
+    });
+    const close = () => {
+      forwardSubmit();
+      forwardReconnect();
+      socket.destroy();
+    };
+    const parse = createFrameParser();
+    socket.on("data", (chunk) => {
+      for (const frame of parse(chunk)) apply(frame);
+    });
+    socket.on("error", (err) => {
+      if (!ready) reject(err);
+    });
+    socket.on("close", () => {
+      if (ready) {
+        bus.setStatus("stopped");
+        bus.log("Daemon disconnected \u2014 the worker process closed the control channel.", "warn");
+      }
+    });
+    function apply(frame) {
+      switch (frame.t) {
+        case "snapshot":
+          bus.setStatus(frame.status);
+          bus.setBusy(frame.busy);
+          bus.setActiveProfile(frame.activeProfile);
+          if (frame.scope) bus.setScope(frame.scope);
+          if (frame.worker) bus.setWorker(frame.worker);
+          bus.setProject(frame.project);
+          if (frame.usage) bus.setUsage(frame.usage);
+          bus.setTokens(frame.tokens);
+          for (const entry of frame.transcript) bus.pushEntry(entry);
+          ready = true;
+          resolve8({ info: frame.info, close });
+          break;
+        case "transcript":
+          bus.pushEntry(frame.entry);
+          break;
+        case "update":
+          bus.updateEntry(frame.id, frame.text, frame.level);
+          break;
+        case "clear":
+          bus.clear();
+          break;
+        case "status":
+          bus.setStatus(frame.status);
+          break;
+        case "busy":
+          bus.setBusy(frame.label);
+          break;
+        case "activeProfile":
+          bus.setActiveProfile(frame.label);
+          break;
+        case "scope":
+          bus.setScope(frame.scope);
+          break;
+        case "worker":
+          bus.setWorker(frame.worker);
+          break;
+        case "project":
+          bus.setProject(frame.project);
+          break;
+        case "usage":
+          bus.setUsage(frame.usage);
+          break;
+        case "tokens":
+          bus.setTokens(frame.total);
+          break;
+      }
+    }
+  });
+}
+
+// src/commands/attach.ts
+async function runAttach(profileDir2, profileName) {
+  if (!process.stdout.isTTY) {
+    console.error("`4pm attach` needs an interactive terminal (TTY).");
+    process.exitCode = 1;
+    return;
+  }
+  const socketPath = join31(profileDir2, CONTROL_SOCKET_FILE);
+  const bus = new SessionBus();
+  let conn;
+  try {
+    conn = await connectControl(socketPath, bus);
+  } catch {
+    console.error(
+      `No running daemon for profile "${profileName}". Start it first: 4pm start --profile ${profileName}`
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const credential = readCredential(profileDir2, profileName);
+  const info = {
+    version: conn.info.version,
+    scope: conn.info.scope,
+    profile: conn.info.profile,
+    profileDir: profileDir2,
+    serverUrl: conn.info.serverUrl,
+    physicPath: conn.info.physicPath,
+    aiCli: conn.info.aiCli,
+    whoami: () => credential ? fetchWhoami(credential.serverUrl, credential.hashcode3).catch(() => null) : Promise.resolve(null)
+  };
+  bus.log(`Attached to profile "${profileName}" \u2014 the worker runs headless; input is forwarded.`);
+  try {
+    await runTui(bus, info);
+  } finally {
+    conn.close();
+  }
+}
+
 // src/commands/unlink.ts
-import { rmSync as rmSync6 } from "fs";
+import { rmSync as rmSync8 } from "fs";
 async function runUnlink(profileDir2, profileName) {
   const cred = readCredential(profileDir2, profileName);
   if (!cred) {
@@ -44387,7 +45640,7 @@ async function runUnlink(profileDir2, profileName) {
       `\u26A0 Could not reach the server to revoke \u2014 revoke it at web /machines. (${err.message})`
     );
   }
-  rmSync6(profileDir2, { recursive: true, force: true });
+  rmSync8(profileDir2, { recursive: true, force: true });
   clearDefaultProfileIf(profileName);
   console.log("\u2714 Deleted the profile and its physic project folder.");
 }
@@ -44522,10 +45775,16 @@ async function main() {
   switch (command) {
     case "link": {
       const serverUrl = flagValue(rest, "server") || process.env.FOURPM_SERVER || "http://localhost:42001";
-      await runLink(serverUrl.replace(/\/$/, ""), explicitProfile);
+      const pairToken = flagValue(rest, "token") || process.env.FOURPM_PAIR_TOKEN || null;
+      await runLink(serverUrl.replace(/\/$/, ""), explicitProfile, pairToken);
       break;
     }
     case "start": {
+      const bootToken = process.env.FOURPM_PAIR_TOKEN || null;
+      if (bootToken && listProfiles().filter((p) => p.linked).length === 0) {
+        const serverUrl = flagValue(rest, "server") || process.env.FOURPM_SERVER || "http://localhost:42001";
+        await runLink(serverUrl.replace(/\/$/, ""), explicitProfile, bootToken);
+      }
       const name = await pickLinkedProfile(explicitProfile, "start");
       if (!name) {
         process.exitCode = 1;
@@ -44534,6 +45793,15 @@ async function main() {
       await runStart(profileDir(name), name);
       break;
     }
+    case "attach": {
+      const name = await pickLinkedProfile(explicitProfile, "attach");
+      if (!name) {
+        process.exitCode = 1;
+        break;
+      }
+      await runAttach(profileDir(name), name);
+      break;
+    }
     case "unlink": {
       const name = await pickLinkedProfile(explicitProfile, "unlink");
       if (!name) {
@@ -44564,6 +45832,7 @@ async function main() {
           "Usage:",
           "  4pm link      Pair with the server (hashcode 1\u21922\u21923)",
           "  4pm start     Connect WS, receive commands from the server",
+          "  4pm attach    Open the TUI against a running headless daemon (ADR-0192)",
           "  4pm unlink    Delete a link (pick a profile if several)",
           "  4pm version   Show the installed version (+ latest from the server)",
           "  4pm update    Update to the latest version now",