@4pm/cli 1.32.0 → 1.34.0

package/dist/index.js

@@ -28569,6 +28569,365 @@ async function fetchCliVersion(serverUrl, version) {
   }
 }
 
+// vendor/@4pm/constants/ai-prompt-defaults.json
+var ai_prompt_defaults_default = {
+  "server.knowledge.distill": `You are in the working directory of a software project named "{{projectName}}".
+Read the project (code, docs, config) and write a concise, shareable KNOWLEDGE ARTICLE that
+distils it for other engineers. Use Markdown and this structure:
+- a single top-level title line starting with '# '
+- a one-paragraph summary
+- '## The problem' \u2014 what problem the project solves
+- '## The approach' \u2014 the key decisions and how it works
+- '## What we learned' \u2014 reusable takeaways
+Output ONLY the Markdown article, no preamble or code fences around the whole thing.{{focusExtra}}`,
+  "cli.research.policy": `You are a research assistant for the 4PM platform. Answer the user's question thoroughly and
+accurately, in Markdown. Use the read-only web tools (WebSearch / WebFetch) to find current, factual
+information when helpful, and cite sources inline where relevant.
+
+STRICT CONTENT POLICY \u2014 you MUST refuse, and must not answer, if the question (or a faithful answer
+to it) would involve any of:
+- sexual, abusive, hateful, or illegal content;
+- political persuasion, campaigning, or partisan advocacy;
+- discrimination or demeaning content targeting a race, ethnicity, religion, gender, nationality, or
+  other protected group;
+- probing, scanning, exploiting, or attacking the security of ANY system, network, account, device,
+  or person you do not own (no vulnerability hunting, no exploit/malware creation, no credential or
+  PII harvesting, no evasion of security controls). General defensive-security education is allowed.
+- any other seriously harmful activity.
+
+When you must refuse, reply with EXACTLY one line starting with "REFUSED:" followed by a short,
+neutral reason, and output nothing else.
+
+You have READ-ONLY web tools only. Never attempt to read local files, run shell commands, or interact
+with other systems.
+
+---
+
+Question:
+{{question}}`,
+  "cli.memory.compact": "You maintain a COMPACT running memory of an ongoing assistant conversation so it can continue\nacross sessions and accounts. Merge the latest exchange into the existing memory and return the\nUPDATED memory. Keep it UNDER {{budgetChars}} characters. Use terse Markdown bullets grouped\nas: Decisions, Constraints, Open tasks, Glossary. Keep durable facts; drop chit-chat and anything\nnow obsolete. Output ONLY the updated memory text \u2014 no preamble, no code fences.\n\n=== EXISTING MEMORY ===\n{{oldMemory}}\n\n=== LATEST USER PROMPT ===\n{{prompt}}\n\n=== LATEST ASSISTANT ANSWER ===\n{{answer}}",
+  "cli.support.answer": `You are the 4PM product support assistant. Answer the user's question about how to use 4PM
+using ONLY the documentation and FAQ provided below. If the answer is not in the docs, say
+you don't have that information and suggest contacting human support \u2014 do not invent details.
+{{roleNote}}
+Answer concisely in the user's language; reference the relevant doc heading/path when useful.
+
+Return ONLY a single JSON object (no markdown fences, no prose around it) with these keys:
+  "onTopic": boolean   \u2014 false if the question is NOT about how to use the 4PM product,
+  "sensitive": boolean \u2014 true if the question is inappropriate / abusive OR asks how to hack,
+                         bypass security, gain unauthorized access, take over or steal another
+                         user's/org's account or data, obtain credentials, or any malicious intent,
+  "reason": string     \u2014 a short reason when onTopic is false or sensitive is true, else "",
+  "answer": string     \u2014 your reply to the user, in markdown (in the user's language).
+Refusal policy (ADR-0237): if the question is off-topic (onTopic false) OR sensitive, DO NOT
+answer it. Set "answer" to this EXACT same polite refusal for BOTH cases (in the user's
+language, do not reveal which category or hint at the reason): "Sorry, I can only help with
+questions about how to use 4PM. For anything else, please contact human support." Only answer
+normally when onTopic is true AND sensitive is false.
+
+===== DOCUMENTATION =====
+{{docs}}
+
+===== QUESTION =====
+{{question}}`,
+  "cli.support.reply_draft": "You are drafting a reply FROM the 4PM support team TO the customer in the support ticket below.\nAddress the customer's latest message, using the whole conversation for context. Be accurate,\nfriendly and concise. Write in the language the customer uses in the ticket.\nUse the documentation and FAQ below for any product facts; never invent features, prices or\ncommitments that are not in the docs \u2014 leave a clear [placeholder] for the admin to fill instead.\nFollow the admin's instructions when given. A human admin reviews and edits your draft before\nsending it.\n\nOutput ONLY the message body in markdown \u2014 no subject line, no preamble, no explanation, no code\nfences around the whole message.\n\n===== DOCUMENTATION =====\n{{docs}}\n\n===== CONTEXT =====\n{{context}}",
+  "cli.support.outreach_draft": "You are drafting an outreach message FROM the 4PM platform team TO the customer organizations.\nUse the subject and any current draft below as the starting point. Be clear, friendly and concise.\nWrite in the language of the subject/draft (or of the admin's instructions when those are empty).\nUse the documentation and FAQ below for any product facts; never invent features, prices or\ncommitments that are not in the docs \u2014 leave a clear [placeholder] for the admin to fill instead.\nFollow the admin's instructions when given. A human admin reviews and edits your draft before\nsending it.\n\nOutput ONLY the message body in markdown \u2014 no subject line, no preamble, no explanation, no code\nfences around the whole message.\n\n===== DOCUMENTATION =====\n{{docs}}\n\n===== CONTEXT =====\n{{context}}",
+  "cli.support.legal_draft": "You are drafting the body of one of 4PM's legal documents (Terms of Service, Privacy Policy,\nAdd-on Terms, Rented Machine Addendum, \u2026) for the platform admin to review and publish.\nWrite or revise the WHOLE document body in the target locale given in the context. Keep the\nexisting heading structure and numbering unless the admin's instructions say otherwise.\nWhen the target locale is not English and an English reference is given, follow its meaning closely.\nRules:\n- Every {{placeholder}} (e.g. {{companyName}}) must be kept verbatim \u2014 never fill or rename it.\n- Describe plans, prices, upgrades, downgrades, cancellations, renewals, refunds and add-ons ONLY\n  as stated in the PLAN CATALOG and BILLING FACTS below or the documentation; never invent\n  commitments, prices or legal guarantees. Where something is unknown write `[TODO: \u2026]`.\n- Plain, precise legal English (or the target language); short numbered sections and bullet lists.\n- This is a draft, not legal advice; do not add a disclaimer about that inside the document.\n\nOutput ONLY the document body in markdown \u2014 no title line, no preamble, no explanation, no code\nfences around the whole document.\n\n===== DOCUMENTATION =====\n{{docs}}\n\n===== CONTEXT =====\n{{context}}",
+  "cli.faq.compose": "You are maintaining the 4PM product FAQ, stored as markdown in THIS git repository (your CWD).\nFrom the resolved support tickets below, distil reusable, product-general FAQ entries and add or\nupdate the appropriate markdown file(s) in this repo (e.g. an FAQ.md, or the closest existing\ntopic file \u2014 inspect the repo first and match its structure/style).\n\nRules:\n- Write generalized Q&A, NOT ticket-specific replies; never include customer names, emails, ids,\n  org names or any personal data from the tickets.\n- Merge with existing entries instead of duplicating; keep the existing formatting and headings.\n- If a ticket yields no reusable FAQ value, skip it. If nothing is worth adding, make NO changes.\n- Only edit markdown documentation files; do not touch code, CI, or unrelated files.\n- Do NOT run git commit/push or open a PR yourself \u2014 just leave the edited files in the working\n  tree; the surrounding tooling handles commit + PR.{{customInstruction}}\n\n===== RESOLVED TICKETS =====\n{{transcript}}\n\n===== REQUIRED FINAL OUTPUT =====\nAfter finishing all file edits, output \u2014 as the LAST thing, on its own \u2014 a single fenced JSON\nblock summarizing what you did PER TICKET (created/updated which FAQ entry, or skipped + why):\n```json\n{{ticketJsonSkeleton}}\n```\nInclude exactly one entry per ticket id above; keep each summary to one or two sentences.",
+  "cli.scaffold.readme": "Write a concise README.md (Markdown only, no preamble) for this project from its spec JSON:\n{{specJson}}",
+  "cli.scaffold.guide": "Write a {{guideFile}} (Markdown only, no preamble) with guidance/conventions for AI agents working in this project, derived from its spec JSON:\n{{specJson}}{{guideInstructionsBlock}}",
+  "cli.autonomous.intake": "You are the 4PM autonomous INTAKE step (headless). Edit ONLY `USER_TODO.md`, `USER_QA.md` and\n`AI_TODO.md`. Do NOT run git, do NOT touch `AI_PROGRESS.md` / `AI_DONE.md` / any code \u2014 the 4PM cli\ncommits and publishes your book edits. Write in the language the project's `CLAUDE.md` specifies (default English).\n\n{{booksIntro}}\n\n## 1 \u2014 Approved user requests \u2192 tasks\nRead `USER_TODO.md` (columns `ID | Group | Depends | Request`). For each APPROVED `REQ-\u2026` whose `Depends`\nare already handled:\n- CLEAR request \u21D2 split it into tasks appended to `AI_TODO.md` (columns\n  `ID | Priority | Tag | Depends | Group | Task description | Notes`), ids `TSK-{groupid:0000}-{taskid:0000}`\n  (groupid UNIQUE + INCREASING across all history \u2014 the largest ever used in `AI_TODO.md`/`AI_DONE.md`/\n  `AI_PROGRESS.md`/their git history, +1; taskid from 0001). `Depends` = the `TSK-\u2026` it needs.\n  Remove the analysed request row (empty \u21D2 reset to the empty template).\n- UNCLEAR request \u21D2 do NOT guess: append a `USER_QA.md` row (`ID | Group | Depends | Original request |\n  Question / options | Answer`) with a new `QA-{groupid:0000}-{qaid:0000}`, blank `Answer`; remove the request row.\nAn unapproved request stays.\n\n## 2 \u2014 Answered intake questions\nFor each `USER_QA.md` row with an `Answer`, APPROVED, and whose id is NOT in any `AI_TODO.md` `Depends`\n(those are task questions \u2014 the cli handles them; leave them alone): re-analyse the original request with the\nanswer into tasks (same rules), then remove that QA row.\n\n## Task size (MANDATORY \u2014 every task must be finishable in ONE run)\nSize each task by SCOPE and write `size: S` or `size: M` at the start of `Notes`:\n- **S** \u2014 one small change in one module/layer (\u2248 \u2264 {{sMaxFiles}} files, \u2248 \u2264 {{sMaxLines}} lines), e.g. fix a bug, add a field.\n- **M** \u2014 one feature slice across 2\u20133 layers with ONE purpose (\u2248 \u2264 {{mMaxFiles}} files, \u2248 \u2264 {{mMaxLines}} lines), e.g. one CRUD screen, one API + its UI + tests.\n- **L** \u2014 several features, a cross-cutting change, a big migration, a new subsystem, or an architecture decision.\n  **Never write an L task**: split it into S/M tasks chained with `Depends`, or ask in `USER_QA.md` when the split needs a decision.\nThe counts are hints, not hard limits. Each task's `Task description` states the acceptance criteria and how to test it.\n\nWhen done, reply with one short line summarising what you added.",
+  "cli.autonomous.implement": 'You are the 4PM autonomous IMPLEMENT step (headless). Implement exactly ONE task, then STOP.\n\nTask {{taskId}} (group {{group}}, attempt {{attempt}}):\n{{desc}}\nNotes: {{notes}}\n{{resumedNote}}\nBranches (already checked out by the 4PM cli \u2014 stay on them):\n- project root is on `{{branch}}`\n{{subLines}}\n\nRules:\n- Follow the project\'s architecture and `CLAUDE.md`. Add/update tests; run the project\'s test command and WAIT for the result.\n- Commit your work (`git add` + `git commit`) in the root and/or inside each submodule you changed.\n- Do NOT push, do NOT open pull requests, do NOT switch/create branches, do NOT edit the book files\n  (USER_TODO/USER_QA/AI_TODO/AI_PROGRESS/AI_DONE) \u2014 the 4PM cli delivers and records everything.\n- If you need a human DECISION to continue (ambiguous requirement, missing information, a choice with real\n  trade-offs), do NOT guess: commit what you have and report `needs-input` with the question + options.\n\nFinish with ONLY one fenced `json` block:\n{"status": "done" | "needs-input" | "failed", "summary": "<what you did / why it failed>", "question": "<only for needs-input: the question and the options>"}',
+  "cli.autonomous.split": 'You are the 4PM autonomous SPLIT step (read-only \u2014 do not change any file). Task {{taskId}} failed to\nfinish after repeated attempts, so it is probably too big for one run. Split it into 2\u20136 smaller child tasks\nthat are each finishable in ONE run (size S or M), in execution order (each depends on the previous).\n\nTask: {{desc}}\nNotes: {{notes}}\nWhy the attempts ended: {{reasons}}\nWork already done on its WIP branch `{{branch}}` (diff against the base, may be truncated):\n```\n{{diff}}\n```\nThe first child continues from that WIP branch: note which parts are already done so they are not redone.\nEach child description must state its acceptance criteria and how to test it.\n\nReply with ONLY one fenced `json` block:\n{"children": [{"desc": "<task + acceptance criteria>", "priority": "High|Medium|Low", "size": "S|M", "notes": "<optional>"}]}',
+  "web.generators": "You are producing {{what}} for a software project, derived strictly from its specification (the source of truth). Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. Write a clear, well-structured **Markdown** document. Output ONLY the Markdown document \u2014 no preamble and no wrapping code fence.{{templateHint}}{{paramsBlock}}\nProject spec \u2014 self-describing JSON (fields with id/name/description/type/options/value):\n{{specContext}}",
+  "web.guide": 'You are producing a {{file}} file \u2014 guidance and conventions for AI coding agents working in this project \u2014 derived strictly from its specification (the source of truth). Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. Write a clear, well-structured **Markdown** document. Output ONLY the Markdown document \u2014 no preamble and no wrapping code fence.\nThe document MUST include a prominent, mandatory section near the top (e.g. "## Security") that instructs the agent to READ and STRICTLY FOLLOW the project\'s security policy file `AI_SECURITY.md` (at the repository root) before doing any work, and that its rules \u2014 secret handling, data masking, and commit rules \u2014 override anything else when they conflict.{{baseBlock}}{{extraBlock}}\nProject spec \u2014 self-describing JSON (fields with id/name/description/type/options/value):\n{{specContext}}',
+  "web.draft_tasks": 'You are a senior software project manager. From the project specification below (the source of truth), produce a concise, well-ordered list of concrete, actionable engineering tasks to build this project. Prefer vertical slices, keep each task independently shippable, and order by dependency. Output ONLY a JSON array \u2014 no preamble, no code fence. Each element is an object with exactly these string fields:\n- "priority": one of "High", "Medium", "Low"\n- "group": a short phase/area label (e.g. "Setup", "Auth", "API", "UI")\n- "depends": comma-separated titles of tasks in THIS list it depends on (or "")\n- "description": the task as a clear imperative sentence\n- "notes": optional extra detail (or "")\n\nProject spec \u2014 self-describing JSON (fields with id/name/description/type/options/value):\n{{specContext}}',
+  "web.spec.review": 'Review this software project specification WITHOUT changing it \u2014 you only advise. Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. Reply in EXACTLY this format:\nASSESSMENT:\n<a short overall assessment of feasibility, coherence and reasonableness, in Markdown>\nISSUES:\n<one point that is unclear, inconsistent or unreasonable per line, or "none">\nDo not rewrite or output the spec \u2014 reply with only the assessment and issues. Spec \u2014 self-describing JSON (fields with id/name/description/type/options/value):\n{{specContext}}',
+  "web.spec.compose": `You are revising a software project specification for consistency and feasibility, guided by the review in its "meta._aiReview" field. Make MINIMAL edits: keep the author's original intent and wording, only tighten coherence, fill clear gaps and link the fields together sensibly. Do NOT rewrite drastically or add scope the author did not intend. Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. Then judge whether the revised spec has enough coherent information to create the project. Reply with ONLY a single-line minified JSON object (no preamble, no code fence, no pretty-printing/indentation) of the form {"changes": [{"field": "<id>", "before": "<old value>", "after": "<new value>"}], "tree": "<source directory tree>", "ok": <true|false>, "assessment": "<one short Markdown paragraph on the result>", "blockers": ["<one must-fix gap per item; empty when ok>"]}. Include a "changes" entry ONLY for each field you actually edit \u2014 do NOT echo unchanged fields and do NOT return the whole spec. Use the SAME field ids as the input; "before"/"after" carry that field's value in its native JSON type (a string for text/select fields, a JSON array of strings for multiselect fields) and MUST keep select/multiselect values within their allowed options. Set "ok" true ONLY when nothing blocks creating the project. The "tree" is a plain-text ASCII directory tree for the project's source layout, derived from the chosen architecture, source pattern, tech stack and modules (use \u251C\u2500 \u2502 \u2514\u2500 connectors; a trailing "/" marks folders). Current spec \u2014 self-describing JSON (fields with id/name/description/type/options/value):
+{{specContext}}`,
+  "web.spec.suggest": "You are helping fill a software project specification. Suggest a value for {{target}} Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. {{seed}}{{shape}} {{instructionBlock}}Context \u2014 the full spec so far as a self-describing JSON (each field has id/name/description/type/options/value; use it to stay coherent):\n{{specContext}}",
+  "web.spec.group_suggest": `You are helping fill a software project specification. Suggest values for ALL fields of the "{{groupKey}}" section below, in one pass, keeping them coherent with each other and with the rest of the spec. Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. For each field: if it already has a non-empty value, treat it as the author's intent \u2014 keep it and only refine/expand; otherwise fill it. For select fields return exactly one of the allowed options (or "" if none fits); for multiselect return an array of allowed options; for textarea return detailed clean Markdown; for text return a concise single-line string. Fields:
+{{fieldLines}}
+{{instructionBlock}}Reply with ONLY a single-line minified JSON object mapping each field id to its value \u2014 no preamble, no code fence, no markdown, no extra keys, no pretty-printing/indentation. Context \u2014 the spec as self-describing JSON:
+{{specContext}}`,
+  "web.spec.subagents_suggest": 'You are helping declare the custom AI subagents of a software project. Each subagent becomes a ".claude/agents/<name>.md" file the coding assistant can delegate to. Propose a small, focused set (typically 2\u20135) of subagents that fit THIS project, coherent with its architecture, tech stack and modules. Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. Keep every already-declared subagent (refine its description if useful) and add the missing ones. Each subagent has a "name" (a short kebab-case identifier, e.g. "code-reviewer") and a "description" (one or two sentences on its role and when to use it). Already declared: {{current}}. {{instructionBlock}}Reply with ONLY a single-line minified JSON array of {"name","description"} objects \u2014 no preamble, no code fence, no markdown, no extra keys, no pretty-printing/indentation. Context \u2014 the spec as self-describing JSON:\n{{specContext}}',
+  "web.spec.subagent_desc": `You are helping declare the custom AI subagents of a software project. Each subagent becomes a ".claude/agents/<name>.md" file the coding assistant can delegate to. Write the description for {{who}}: one or two sentences on its role and when to use it, specific to THIS project's architecture, tech stack and modules. Evaluate (when relevant): business logic, project security, AI-usage security, technical soundness, methodology/approach, and overall feasibility & coherence. {{seed}}{{others}}{{instructionBlock}}Reply with ONLY the description text \u2014 no preamble, no code fence, no name, no JSON, no quotes. Context \u2014 the spec as self-describing JSON:
+{{specContext}}`,
+  "web.template.analyze": "You are assessing a 4PM project-template (scaffold) update WITHOUT changing anything \u2014 advisory only. This project was scaffolded from template version {{localVersion}}; the latest is {{latestVersion}}. The template changelog for the versions this project would gain:\n{{changelog}}\n\nInspect the project's current files (they may have been customized since scaffolding) and report, in clear Markdown:\n1. What the update changes (config, hooks, conventions, layout).\n2. Which of THIS project's files are affected.\n3. Likely conflicts with local customizations (call out anything risky to overwrite).\n4. Overall effort and risk.\nDo NOT edit, create, delete, or move any file, and do NOT run git write commands \u2014 output only the report.{{extras}}",
+  "web.template.update": 'You are applying a 4PM project-template (scaffold) update as a REVIEWED change \u2014 never a blind overwrite, and never a merge into the main branch. This project was scaffolded from template version {{localVersion}}; update it to {{latestVersion}}. The template changelog for the versions to apply:\n{{changelog}}\n\nSteps (do them in order; stop and report if one cannot be completed):\n{{resolveBase}}1. Run "git fetch origin", then create and switch to a new git branch "{{branch}}" FROM "origin/{{baseRef}}" (never from whatever branch is currently checked out): git checkout -B "{{branch}}" "origin/{{baseRef}}".\n2. Apply the template changes above to this project. The files may have been customized \u2014 MERGE the changes, preserving local customizations; never clobber intentional edits. Add new template files/hooks/config as needed.\n3. Update (or create) "./.4pm/.4pm.json" so its "templateVersion" is "{{latestVersion}}", keeping any other fields.\n4. Commit everything on "{{branch}}" with a clear message, then PUSH the branch to the remote.\n5. Open a PULL REQUEST from "{{branch}}" INTO "{{baseRef}}" using the host CLI that matches the remote \u2014 "gh pr create --base {{baseRef}} --head {{branch}}" for GitHub, "glab mr create --target-branch {{baseRef}} --source-branch {{branch}}" for GitLab (do NOT merge it). Capture the created PR/MR number and its URL.\nDo NOT stop to ask for confirmation \u2014 you are authorized to run these git and PR commands.{{extras}}\n\nWhen finished, reply with ONLY a single fenced code block tagged json (no prose before or after) of the form {"status": "success" | "blocked" | "failed", "pullRequestId": "<the PR/MR number, or null>", "pullRequestUrl": "<the PR/MR URL, or null>", "branch": "<the branch you created, e.g. {{branch}}>", "message": "<one short line: what changed on success, or WHY it could not complete>"}. Use "success" ONLY if the pull request was actually created and you have its id/number; if you were blocked (e.g. a command needed approval, or "gh"/"glab" is missing or not authenticated) use "blocked"; use "failed" for an outright error. Never report "success" without a real pull request id.',
+  "web.checklist.eval": `You are checking a checklist against the {{contextLabel}} of this project. You MAY read the project's files (read-only) but MUST NOT write anything.
+
+Checklist "{{name}}" \u2014 decide a verdict for EACH item: pass, fail, skip, or na.
+Items:
+{{lines}}
+
+{{contextLabel}}:
+{{contextText}}
+
+Reply with EXACTLY one line per item, in the form:
+[<ID>] <pass|fail|skip|na> \u2014 <one-line reason>
+No other text, no code fences.`,
+  "web.checklist.author": `You are helping author a reusable project checklist (a "definition of ready"-style rubric). Produce the checklist's items based on the author's instruction, keeping the result coherent and actionable. Treat the current items as the author's intent: keep the ones that should stay, refine wording where it helps, and add the missing ones.
+Current items (JSON): {{current}}
+Author's instruction:
+"""
+{{instruction}}
+"""
+Reply with ONLY a single-line minified JSON array of the FULL new item list \u2014 each element an object with "text" (string, required), optional "description" (string) and optional "required" (boolean). No ids, no preamble, no code fence, no pretty-printing.`,
+  "web.memo.compose": `You are turning a set of a teammate's project notes into ONE community forum post for the team. The notes may reference pasted screenshots/diagrams as [Image#N] tokens \u2014 for each, use the Read tool on the file path the token was rewritten to, look at the image, and weave what it shows into the post where relevant. Write a clear, helpful, self-contained post (not a raw copy of the notes). Reply with ONLY a single fenced code block tagged json containing an object of the form {"title": "<a short title, at most 200 characters>", "body": "<the post body as plain text, at most 10000 characters>"} \u2014 no prose before or after the fence.
+
+Notes:
+{{notes}}`,
+  "web.verify": "You are verifying entries in this project's {{verifyBook}} book. You MAY read the project's files (read-only) but MUST NOT write anything.\n\nSelected entries (use all of them together as shared context, then answer each one):\n{{entries}}\n\nQuestion to answer for EACH entry: {{question}}\n\nReply with EXACTLY one line per entry, in the form:\n[<ID>] <concise one-line answer>\nNo other text, no code fences.",
+  "web.git.resolve": "Resolve all git merge conflicts in {{repoScope}} of the current project. Edit each conflicted file to a correct merged result (remove all conflict markers), then run `git add` on each. Do NOT commit \u2014 leave the merge staged for review."
+};
+
+// vendor/@4pm/constants/ai-prompts.ts
+var DEFAULTS = ai_prompt_defaults_default;
+function renderPrompt(template, vars) {
+  return template.replace(
+    /\{\{\s*([a-zA-Z0-9_]+)\s*\}\}/g,
+    (match, name) => Object.prototype.hasOwnProperty.call(vars, name) ? String(vars[name]) : match
+  );
+}
+var PROMPT_META = [
+  {
+    key: "server.knowledge.distill",
+    ownerApp: "server",
+    phase: 1,
+    title: "Knowledge distillation",
+    description: "Turns a project into a shareable knowledge article (read-only agent in the project folder).",
+    requiredVars: ["projectName"]
+  },
+  {
+    key: "cli.research.policy",
+    ownerApp: "cli",
+    phase: 1,
+    title: "AI Research \u2014 system policy",
+    description: "System instruction + content policy prepended to an org Research question.",
+    requiredVars: ["question"]
+  },
+  {
+    key: "cli.memory.compact",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Console memory compaction",
+    description: "Merges the latest exchange into the rolling per-project AI memory, budget-bounded.",
+    requiredVars: ["budgetChars", "oldMemory", "prompt", "answer"]
+  },
+  {
+    key: "cli.support.answer",
+    ownerApp: "cli",
+    phase: 1,
+    title: "AI Help \u2014 support answer",
+    description: "Answers a user/admin product question from the KB docs, with the inline moderation JSON contract. Edit with care: the response must stay a single JSON object with onTopic/sensitive/reason/answer.",
+    requiredVars: ["roleNote", "docs", "question"]
+  },
+  {
+    key: "cli.support.reply_draft",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Admin draft \u2014 ticket reply",
+    description: "Drafts a support-team reply to a ticket (freeform markdown).",
+    requiredVars: ["docs", "context"]
+  },
+  {
+    key: "cli.support.outreach_draft",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Admin draft \u2014 outreach message",
+    description: "Drafts an outreach message to customer orgs (freeform markdown).",
+    requiredVars: ["docs", "context"]
+  },
+  {
+    key: "cli.support.legal_draft",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Admin draft \u2014 legal document body",
+    description: "Drafts/revises a legal document body in a locale, keeping legal {{placeholders}} verbatim.",
+    requiredVars: ["docs", "context"]
+  },
+  {
+    key: "cli.faq.compose",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Ticket \u2192 FAQ synthesis",
+    description: "Agent-write run that distils resolved tickets into FAQ markdown + a per-ticket JSON summary. Keep the required JSON output block and the {{ticketJsonSkeleton}} intact.",
+    requiredVars: ["transcript", "ticketJsonSkeleton"]
+  },
+  {
+    key: "cli.scaffold.readme",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Scaffold \u2014 README author",
+    description: "Writes the initial README.md for a new project from its spec JSON (on project create).",
+    requiredVars: ["specJson"]
+  },
+  {
+    key: "cli.scaffold.guide",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Scaffold \u2014 agent guide author",
+    description: "Writes the project's CLAUDE.md / AGENT.md guide from its spec JSON (on project create).",
+    requiredVars: ["guideFile", "specJson"]
+  },
+  {
+    key: "cli.autonomous.intake",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Autonomous \u2014 intake",
+    description: "Analyses approved user requests + answered intake questions into sized AI tasks (books only; no git/code).",
+    requiredVars: ["booksIntro", "sMaxFiles", "sMaxLines", "mMaxFiles", "mMaxLines"]
+  },
+  {
+    key: "cli.autonomous.implement",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Autonomous \u2014 implement",
+    description: "Implements exactly one task on the prepared branches (commit only). Keep the final JSON status block intact.",
+    requiredVars: ["taskId", "desc", "branch", "subLines"]
+  },
+  {
+    key: "cli.autonomous.split",
+    ownerApp: "cli",
+    phase: 1,
+    title: "Autonomous \u2014 split",
+    description: "Read-only: proposes smaller child tasks when a task repeatedly fails. Keep the final JSON children block intact.",
+    requiredVars: ["taskId", "desc", "reasons", "branch", "diff"]
+  },
+  {
+    key: "web.generators",
+    ownerApp: "web",
+    phase: 2,
+    title: "Content generator",
+    description: "Produces a report / estimation / WBS / proposal / feasibility Markdown document from the project spec.",
+    requiredVars: ["what", "specContext"]
+  },
+  {
+    key: "web.guide",
+    ownerApp: "web",
+    phase: 2,
+    title: "AI guide (CLAUDE.md / AGENT.md)",
+    description: "Writes/refines the project's agent-guide file from the spec. Keep the mandatory AI_SECURITY.md section.",
+    requiredVars: ["file", "specContext"]
+  },
+  {
+    key: "web.draft_tasks",
+    ownerApp: "web",
+    phase: 2,
+    title: "Draft tasks from spec",
+    description: "Breaks the spec into a JSON array of engineering tasks. Keep the required JSON array output shape.",
+    requiredVars: ["specContext"]
+  },
+  {
+    key: "web.spec.review",
+    ownerApp: "web",
+    phase: 2,
+    title: "Spec review (advisory)",
+    description: "Advises on the whole spec in the fixed ASSESSMENT/ISSUES format (no rewrite). Keep that reply format.",
+    requiredVars: ["specContext"]
+  },
+  {
+    key: "web.spec.compose",
+    ownerApp: "web",
+    phase: 2,
+    title: "Spec compose (gates create)",
+    description: "Revises the spec with minimal edits + judges readiness. GATES project creation \u2014 keep the exact JSON object shape (changes/tree/ok/assessment/blockers).",
+    requiredVars: ["specContext"]
+  },
+  {
+    key: "web.spec.suggest",
+    ownerApp: "web",
+    phase: 2,
+    title: "Spec field suggest (\u2728)",
+    description: "Suggests a value for one spec field. {{shape}} carries the reply-format rule the parser depends on.",
+    requiredVars: ["target", "shape", "specContext"]
+  },
+  {
+    key: "web.spec.group_suggest",
+    ownerApp: "web",
+    phase: 2,
+    title: "Spec section suggest",
+    description: "Suggests values for a whole wizard section. Keep the single-line JSON object (field id \u2192 value) output shape.",
+    requiredVars: ["groupKey", "fieldLines", "specContext"]
+  },
+  {
+    key: "web.spec.subagents_suggest",
+    ownerApp: "web",
+    phase: 2,
+    title: "Subagents suggest",
+    description: "Proposes the project's AI subagents. Keep the JSON array of {name,description} output shape.",
+    requiredVars: ["current", "specContext"]
+  },
+  {
+    key: "web.spec.subagent_desc",
+    ownerApp: "web",
+    phase: 2,
+    title: "Subagent description suggest",
+    description: "Writes one subagent's description (plain text, no JSON).",
+    requiredVars: ["who", "specContext"]
+  },
+  {
+    key: "web.template.analyze",
+    ownerApp: "web",
+    phase: 2,
+    title: "Template update \u2014 analyze impact",
+    description: "Read-only: reports what a project-template update changes + affected files + risk.",
+    requiredVars: ["localVersion", "latestVersion", "changelog"]
+  },
+  {
+    key: "web.template.update",
+    ownerApp: "web",
+    phase: 2,
+    title: "Template update \u2014 apply (branch + PR)",
+    description: "Agent-write: applies the template update on a branch + opens a PR. Keep the branch/PR steps + the final JSON status block.",
+    requiredVars: ["latestVersion", "branch", "baseRef", "changelog"]
+  },
+  {
+    key: "web.checklist.eval",
+    ownerApp: "web",
+    phase: 2,
+    title: "Checklist evaluate",
+    description: "Read-only: verdict (pass/fail/skip/na) per checklist item vs content. Keep the one-line-per-item reply format.",
+    requiredVars: ["contextLabel", "name", "lines", "contextText"]
+  },
+  {
+    key: "web.checklist.author",
+    ownerApp: "web",
+    phase: 2,
+    title: "Checklist authoring",
+    description: "Proposes the full checklist item list from an instruction + current items. Keep the JSON array output shape.",
+    requiredVars: ["current", "instruction"]
+  },
+  {
+    key: "web.memo.compose",
+    ownerApp: "web",
+    phase: 2,
+    title: "Memo \u2192 community post",
+    description: "Turns a teammate's notes (with [Image#N] tokens) into one forum post. Keep the fenced JSON {title,body} output.",
+    requiredVars: ["notes"]
+  },
+  {
+    key: "web.verify",
+    ownerApp: "web",
+    phase: 2,
+    title: "AI Verify (book entries)",
+    description: "Read-only: answers a question per selected book entry. Keep the one-line-per-entry reply format.",
+    requiredVars: ["verifyBook", "entries", "question"]
+  },
+  {
+    key: "web.git.resolve",
+    ownerApp: "web",
+    phase: 2,
+    title: "Git \u2014 resolve conflicts",
+    description: "Agent: resolves merge conflicts + stages (no commit).",
+    requiredVars: ["repoScope"]
+  }
+];
+var AI_PROMPTS = Object.fromEntries(
+  PROMPT_META.map((m2) => [m2.key, { ...m2, defaultTemplate: DEFAULTS[m2.key] ?? "" }])
+);
+
 // vendor/@4pm/constants/error-codes.ts
 var ErrorCode = {
   // Common
@@ -28587,6 +28946,11 @@ var ErrorCode = {
   FEATURE_NOT_AVAILABLE: "FEATURE_NOT_AVAILABLE",
   // Request body exceeded the HTTP gateway's JSON size limit (see HTTP_JSON_BODY_LIMIT_BYTES).
   PAYLOAD_TOO_LARGE: "PAYLOAD_TOO_LARGE",
+  // Unified composer attachments (ADR-0388): an upload over ATTACHMENT_MAX_BYTES, a MIME outside the
+  // image + file lists, or a submit carrying more than ATTACHMENT_MAX_COUNT refs.
+  ATTACHMENT_TOO_LARGE: "ATTACHMENT_TOO_LARGE",
+  ATTACHMENT_TYPE_UNSUPPORTED: "ATTACHMENT_TYPE_UNSUPPORTED",
+  ATTACHMENT_LIMIT_EXCEEDED: "ATTACHMENT_LIMIT_EXCEEDED",
   INTERNAL_ERROR: "INTERNAL_ERROR",
   // auth
   INVALID_CREDENTIALS: "INVALID_CREDENTIALS",
@@ -28715,6 +29079,9 @@ var ErrorCode = {
   // Change-request (ADR-0379) not found / already resolved.
   CHANGE_REQUEST_NOT_FOUND: "CHANGE_REQUEST_NOT_FOUND",
   CHANGE_REQUEST_ALREADY_RESOLVED: "CHANGE_REQUEST_ALREADY_RESOLVED",
+  // org AI Research (ADR-0380): question refused by the content policy / research-guard; row not found.
+  RESEARCH_REFUSED: "RESEARCH_REFUSED",
+  RESEARCH_NOT_FOUND: "RESEARCH_NOT_FOUND",
   MACHINE_ALREADY_IN_POOL: "MACHINE_ALREADY_IN_POOL",
   NOT_MACHINE_USER: "NOT_MACHINE_USER",
   // worker · physic project
@@ -28751,6 +29118,14 @@ var ErrorCode = {
   // web blocks the dispatch and shows an actionable "spec too large" message instead of letting
   // the server reject it as a confusing VALIDATION_FAILED.
   AI_PROMPT_TOO_LARGE: "AI_PROMPT_TOO_LARGE",
+  // Server-managed prompt catalog (ADR-0381): the key is not in the @4pm/constants registry.
+  AI_PROMPT_KEY_UNKNOWN: "AI_PROMPT_KEY_UNKNOWN",
+  // The submitted template is missing a required `{{var}}` the builder depends on.
+  AI_PROMPT_TEMPLATE_INVALID: "AI_PROMPT_TEMPLATE_INVALID",
+  // Prompt editing is disabled by the AI_PROMPTS_READONLY env flag (use the defaults).
+  AI_PROMPTS_READONLY: "AI_PROMPTS_READONLY",
+  // Terms & policies editing is disabled by the LEGAL_READONLY env flag.
+  LEGAL_READONLY: "LEGAL_READONLY",
   REPO_NOT_FOUND: "REPO_NOT_FOUND",
   // invitation
   INVITATION_TOKEN_INVALID: "INVITATION_TOKEN_INVALID",
@@ -29932,8 +30307,8 @@ async function runLink(serverUrl, explicitProfile, token = null) {
 }
 
 // src/commands/start.ts
-import { spawn as spawn11 } from "child_process";
-import { join as join42 } from "path";
+import { spawn as spawn12 } from "child_process";
+import { join as join43 } from "path";
 
 // src/core/update.ts
 import { execSync as execSync2 } from "child_process";
@@ -33152,7 +33527,7 @@ async function checkAndUpdate(serverUrl, autoUpdate) {
 // src/core/ws-client.ts
 init_wrapper();
 import { randomUUID as randomUUID4 } from "crypto";
-import { basename as basename7, join as join37 } from "path";
+import { basename as basename7, join as join38 } from "path";
 import { existsSync as existsSync19, mkdirSync as mkdirSync9 } from "fs";
 
 // vendor/@4pm/utils/helpers.ts
@@ -33185,6 +33560,59 @@ function prettyResult(text) {
   return trimmed;
 }
 
+// vendor/@4pm/dto/attachment.ts
+var ATTACHMENT_MAX_BYTES = 10 * 1024 * 1024;
+var ATTACHMENT_MAX_COUNT = 10;
+var ATTACHMENT_IMAGE_MIME_TYPES = ["image/png", "image/jpeg", "image/webp", "image/gif"];
+var ATTACHMENT_FILE_MIME_TYPES = [
+  "application/pdf",
+  "application/zip",
+  "application/x-zip-compressed",
+  "application/msword",
+  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  "application/vnd.ms-excel",
+  "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  "text/plain",
+  "text/csv",
+  "application/json"
+];
+var ATTACHMENT_FILE_EXTENSIONS = [".pdf", ".zip", ".doc", ".docx", ".xls", ".xlsx", ".txt", ".csv", ".json"];
+var ATTACHMENT_ACCEPT = [...ATTACHMENT_IMAGE_MIME_TYPES, ...ATTACHMENT_FILE_MIME_TYPES, ...ATTACHMENT_FILE_EXTENSIONS].join(",");
+function attachmentExt(mime) {
+  switch (mime) {
+    case "image/png":
+      return "png";
+    case "image/jpeg":
+      return "jpg";
+    case "image/webp":
+      return "webp";
+    case "image/gif":
+      return "gif";
+    case "application/pdf":
+      return "pdf";
+    case "application/zip":
+    case "application/x-zip-compressed":
+      return "zip";
+    case "application/msword":
+      return "doc";
+    case "application/vnd.openxmlformats-officedocument.wordprocessingml.document":
+      return "docx";
+    case "application/vnd.ms-excel":
+      return "xls";
+    case "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet":
+      return "xlsx";
+    case "text/plain":
+      return "txt";
+    case "text/csv":
+      return "csv";
+    case "application/json":
+      return "json";
+    default:
+      return null;
+  }
+}
+var ATTACHMENT_ID_EXT_PATTERN = "png|jpg|webp|gif|pdf|zip|doc|docx|xls|xlsx|txt|csv|json";
+
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
 __export(external_exports, {
@@ -37240,23 +37668,13 @@ var deletedFilterSchema = external_exports.enum(["true", "false"]).transform((v2
 // vendor/@4pm/dto/command.ts
 var COMMAND_MAX_LEN = 8e3;
 var AI_PROMPT_MAX_LEN = 5e5;
-var COMMAND_IMAGE_MAX_BYTES = 5 * 1024 * 1024;
-var COMMAND_IMAGE_MAX_COUNT = 10;
-var COMMAND_IMAGE_MIME_TYPES = ["image/png", "image/jpeg", "image/webp", "image/gif"];
-var COMMAND_IMAGE_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.(png|jpg|webp|gif)$/;
+var COMMAND_IMAGE_MAX_COUNT = ATTACHMENT_MAX_COUNT;
+var COMMAND_IMAGE_MIME_TYPES = [...ATTACHMENT_IMAGE_MIME_TYPES, ...ATTACHMENT_FILE_MIME_TYPES];
+var COMMAND_IMAGE_ID_RE = new RegExp(
+  `^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\.(${ATTACHMENT_ID_EXT_PATTERN})$`
+);
 function commandImageExt(mime) {
-  switch (mime) {
-    case "image/png":
-      return "png";
-    case "image/jpeg":
-      return "jpg";
-    case "image/webp":
-      return "webp";
-    case "image/gif":
-      return "gif";
-    default:
-      return "bin";
-  }
+  return attachmentExt(mime) ?? "bin";
 }
 var commandImageRefSchema = external_exports.object({
   // Constrained to `<uuidv4>.<ext>` (the only id the upload mints) so a client-supplied id can never
@@ -37264,7 +37682,9 @@ var commandImageRefSchema = external_exports.object({
   id: external_exports.string().regex(COMMAND_IMAGE_ID_RE),
   placeholder: external_exports.string().min(1).max(40),
   name: external_exports.string().max(255),
-  mime: external_exports.enum(COMMAND_IMAGE_MIME_TYPES)
+  mime: external_exports.enum(COMMAND_IMAGE_MIME_TYPES),
+  /** Image or file (ADR-0388); omitted by older clients ⇒ derived from `mime`. */
+  category: external_exports.enum(["image", "file"]).optional()
 });
 var aiRunConfigSchema = external_exports.object({
   /** `--model` override for this run (must match the resolved provider's model id). */
@@ -37441,6 +37861,14 @@ var putGitCredentialRequestSchema = external_exports.object({
     ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["host"], message: "host is required for GitHub Enterprise" });
   }
 });
+var putGitLabCredentialRequestSchema = external_exports.object({
+  host: hostSchema.optional(),
+  group: external_exports.string().trim().min(1).max(200),
+  /** The access token; omit to keep the stored one (required on first save — enforced server-side). */
+  token: external_exports.string().trim().min(1).max(512).optional(),
+  apiBaseUrl: external_exports.string().trim().url().startsWith("https://").max(500).nullable().optional(),
+  caCert: external_exports.string().trim().max(32768).nullable().optional()
+});
 function parseRepoUrl(url) {
   const raw = url.trim();
   const scp = /^[\w.-]+@([^:/\s]+):([^/\s]+)\/(.+?)(?:\.git)?\/?$/.exec(raw);
@@ -38074,6 +38502,23 @@ import { tmpdir as tmpdir2 } from "os";
 import { dirname as dirname3, join as join6, resolve } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { promisify } from "util";
+
+// src/core/prompt-overrides.ts
+var overrides = {};
+function setPromptOverrides(map) {
+  overrides = map ?? {};
+}
+function getPromptOverride(key) {
+  const byLocale = overrides[key];
+  if (!byLocale) return null;
+  return byLocale[getLocale()] ?? byLocale.en ?? null;
+}
+function resolveCliPrompt(key, vars) {
+  const template = getPromptOverride(key) ?? AI_PROMPTS[key]?.defaultTemplate ?? "";
+  return renderPrompt(template, vars);
+}
+
+// src/core/scaffold.ts
 var run = promisify(execFile);
 function reposOf(spec) {
   const repos = spec?.repos;
@@ -38489,18 +38934,22 @@ ${(sa.description || "").trim()}
       generate3,
       join6(target, "README.md"),
       "README.md",
-      `Write a concise README.md (Markdown only, no preamble) for this project from its spec JSON:
-${specJson}`
+      // Admin override (ADR-0381) for `cli.scaffold.readme`, else the shared registry default.
+      resolveCliPrompt("cli.scaffold.readme", { specJson })
     );
     await generateFile(
       generate3,
       join6(target, guideFile),
       guideFile,
-      `Write a ${guideFile} (Markdown only, no preamble) with guidance/conventions for AI agents working in this project, derived from its spec JSON:
-${specJson}` + (guideInstructions ? `
+      // Admin override (ADR-0381) for `cli.scaffold.guide`, else the shared registry default.
+      resolveCliPrompt("cli.scaffold.guide", {
+        guideFile,
+        specJson,
+        guideInstructionsBlock: guideInstructions ? `
 Also incorporate these additional instructions/content:
 ${guideInstructions}
-` : ""),
+` : ""
+      }),
       guideInstructions
     );
   } finally {
@@ -39022,6 +39471,15 @@ var WsChannels = {
   // tools, empty dir — like support-answer) and replies with the raw output for the web to parse. No
   // project is involved (checklists are org-scoped).
   CHECKLIST_AUTHOR: "checklist.author",
+  // Org-level "AI Research" (ADR-0380): server (picks an idle cli of the org AI pool) → cli
+  // request–reply. The server forwards the user's question; the worker runs a one-shot research agent
+  // (read-only web/search tools) under a content policy + a research-guard post-check, and replies with
+  // the markdown answer (or a structured refusal) plus the run's token usage so the server meters it to
+  // the org (projectId=null). No project is involved.
+  RESEARCH_ASK: "research.ask",
+  // Org AI Research live progress (ADR-0380): cli → server one-way stream of answer chunks / status for
+  // a running research question, keyed by the query id, relayed to the web over SSE.
+  RESEARCH_PROGRESS: "research.progress",
   // Shared AI memory (ADR-0245): cli → server one-way write-back of the compacted rolling memory for
   // the project it serves (persisted per project × machine-user link). The read direction rides
   // `ws_token` (seeds the cli cache on connect); this channel only carries updates.
@@ -40268,7 +40726,7 @@ async function materializeImages(physicRoot, commandId, images, fetch2) {
         continue;
       }
       const ext = commandImageExt(reply.mime ?? img.mime);
-      const file = join12(dir2, `img-${n}.${ext}`);
+      const file = join12(dir2, `attachment-${n}.${ext}`);
       writeFileSync6(file, Buffer.from(reply.dataBase64, "base64"));
       map.set(img.placeholder, file);
     } catch (err) {
@@ -40526,13 +40984,13 @@ var ENV_ALLOW = /* @__PURE__ */ new Set([
   "PROGRAMFILES"
 ]);
 var ENV_ALLOW_PREFIXES = ["LC_", "XDG_", "ANTHROPIC_", "CLAUDE_", "CODEX_", "OPENAI_", "AWS_", "GOOGLE_", "CLOUD_ML_", "VERTEX_"];
-function agentEnv(extraEnv, overrides) {
+function agentEnv(extraEnv, overrides2) {
   const env3 = {};
   for (const [key, value] of Object.entries(process.env)) {
     if (value === void 0) continue;
     if (ENV_ALLOW.has(key) || ENV_ALLOW_PREFIXES.some((p2) => key.startsWith(p2))) env3[key] = value;
   }
-  return { ...env3, ...extraEnv, ...overrides };
+  return { ...env3, ...extraEnv, ...overrides2 };
 }
 function gitAuthArgs(user, password) {
   if (!user && !password) return [];
@@ -40628,106 +41086,46 @@ ${body}`;
 }
 function buildPrompt(docs, question, askerRole) {
   const roleNote = askerRole === "admin" ? "The asker is a platform admin." : "The asker is a regular user \u2014 do NOT reveal admin-only features.";
-  return [
-    "You are the 4PM product support assistant. Answer the user's question about how to use 4PM",
-    "using ONLY the documentation and FAQ provided below. If the answer is not in the docs, say",
-    "you don't have that information and suggest contacting human support \u2014 do not invent details.",
-    roleNote,
-    "Answer concisely in the user's language; reference the relevant doc heading/path when useful.",
-    "",
-    // Structured output for inline moderation (ADR-0237): the same run also classifies the question.
-    "Return ONLY a single JSON object (no markdown fences, no prose around it) with these keys:",
-    '  "onTopic": boolean   \u2014 false if the question is NOT about how to use the 4PM product,',
-    '  "sensitive": boolean \u2014 true if the question is inappropriate / abusive OR asks how to hack,',
-    "                         bypass security, gain unauthorized access, take over or steal another",
-    "                         user's/org's account or data, obtain credentials, or any malicious intent,",
-    '  "reason": string     \u2014 a short reason when onTopic is false or sensitive is true, else "",',
-    `  "answer": string     \u2014 your reply to the user, in markdown (in the user's language).`,
-    "Refusal policy (ADR-0237): if the question is off-topic (onTopic false) OR sensitive, DO NOT",
-    `answer it. Set "answer" to this EXACT same polite refusal for BOTH cases (in the user's`,
-    'language, do not reveal which category or hint at the reason): "Sorry, I can only help with',
-    'questions about how to use 4PM. For anything else, please contact human support." Only answer',
-    "normally when onTopic is true AND sensitive is false.",
-    "",
-    "===== DOCUMENTATION =====",
-    docs,
-    "",
-    "===== QUESTION =====",
-    question
-  ].join("\n");
+  return resolveCliPrompt("cli.support.answer", { roleNote, docs, question });
 }
 function buildDraftPrompt(docs, context, task) {
-  if (task === "legal_draft") return buildLegalDraftPrompt(docs, context);
-  const goal = task === "reply_draft" ? [
-    "You are drafting a reply FROM the 4PM support team TO the customer in the support ticket below.",
-    "Address the customer's latest message, using the whole conversation for context. Be accurate,",
-    "friendly and concise. Write in the language the customer uses in the ticket."
-  ] : [
-    "You are drafting an outreach message FROM the 4PM platform team TO the customer organizations.",
-    "Use the subject and any current draft below as the starting point. Be clear, friendly and concise.",
-    "Write in the language of the subject/draft (or of the admin's instructions when those are empty)."
-  ];
+  if (task === "prompt_generate") return buildPromptGeneratePrompt(context);
+  if (task === "prompt_translate") return buildPromptTranslatePrompt(context);
+  if (task === "legal_draft") return resolveCliPrompt("cli.support.legal_draft", { docs, context });
+  const key = task === "reply_draft" ? "cli.support.reply_draft" : "cli.support.outreach_draft";
+  return resolveCliPrompt(key, { docs, context });
+}
+function buildPromptGeneratePrompt(context) {
   return [
-    ...goal,
-    "Use the documentation and FAQ below for any product facts; never invent features, prices or",
-    "commitments that are not in the docs \u2014 leave a clear [placeholder] for the admin to fill instead.",
-    "Follow the admin's instructions when given. A human admin reviews and edits your draft before",
-    "sending it.",
-    "",
-    "Output ONLY the message body in markdown \u2014 no subject line, no preamble, no explanation, no code",
-    "fences around the whole message.",
-    "",
-    "===== DOCUMENTATION =====",
-    docs,
+    "You are writing a reusable AI PROMPT TEMPLATE for the 4PM platform. Based on the specification",
+    "below, write a clear, effective prompt. Include each required {{placeholder}} verbatim where",
+    "appropriate \u2014 never rename or invent placeholders. A human admin reviews your draft before it",
+    "goes live.",
+    "Output ONLY the prompt template text \u2014 no preamble, no explanation, no code fences.",
     "",
-    "===== CONTEXT =====",
+    "===== SPECIFICATION =====",
     context
   ].join("\n");
 }
-function buildLegalDraftPrompt(docs, context) {
+function buildPromptTranslatePrompt(context) {
   return [
-    "You are drafting the body of one of 4PM's legal documents (Terms of Service, Privacy Policy,",
-    "Add-on Terms, Rented Machine Addendum, \u2026) for the platform admin to review and publish.",
-    "Write or revise the WHOLE document body in the target locale given in the context. Keep the",
-    "existing heading structure and numbering unless the admin's instructions say otherwise.",
-    "When the target locale is not English and an English reference is given, follow its meaning closely.",
-    "Rules:",
-    "- Every {{placeholder}} (e.g. {{companyName}}) must be kept verbatim \u2014 never fill or rename it.",
-    "- Describe plans, prices, upgrades, downgrades, cancellations, renewals, refunds and add-ons ONLY",
-    "  as stated in the PLAN CATALOG and BILLING FACTS below or the documentation; never invent",
-    "  commitments, prices or legal guarantees. Where something is unknown write `[TODO: \u2026]`.",
-    "- Plain, precise legal English (or the target language); short numbered sections and bullet lists.",
-    "- This is a draft, not legal advice; do not add a disclaimer about that inside the document.",
+    "You are translating a reusable AI PROMPT TEMPLATE for the 4PM platform into the target language",
+    "given below. Preserve EVERY {{placeholder}} exactly \u2014 never translate, rename, or remove a",
+    "placeholder. Keep the same structure, intent and formatting. A human admin reviews your draft.",
+    "Output ONLY the translated template text \u2014 no preamble, no explanation, no code fences.",
     "",
-    "Output ONLY the document body in markdown \u2014 no title line, no preamble, no explanation, no code",
-    "fences around the whole document.",
-    "",
-    "===== DOCUMENTATION =====",
-    docs,
-    "",
-    "===== CONTEXT =====",
+    "===== SPECIFICATION =====",
     context
   ].join("\n");
 }
 function imageExt(mime) {
-  switch (mime) {
-    case "image/png":
-      return "png";
-    case "image/jpeg":
-      return "jpg";
-    case "image/webp":
-      return "webp";
-    case "image/gif":
-      return "gif";
-    default:
-      return "png";
-  }
+  return commandImageExt(mime);
 }
 function materializeImages2(images, question) {
   const dir2 = mkdtempSync2(join14(tmpdir3(), "4pm-help-images-"));
   let rewritten = question;
   images.forEach((img, i) => {
-    const file = join14(dir2, `image-${i + 1}.${imageExt(img.mime)}`);
+    const file = join14(dir2, `attachment-${i + 1}.${imageExt(img.mime)}`);
     writeFileSync7(file, Buffer.from(img.dataBase64, "base64"));
     if (img.placeholder) rewritten = rewritten.split(img.placeholder).join(file);
   });
@@ -40823,12 +41221,12 @@ async function runClaudeWithFailover(prompt, ai2, imageDir, timeoutMs = ANSWER_T
 }
 async function runChecklistAuthor(req, ai2) {
   try {
-    const { text } = await runClaudeWithFailover(req.prompt, ai2);
-    if (!text) return { error: "empty output" };
-    return { output: text };
+    const { text, usage } = await runClaudeWithFailover(req.prompt, ai2);
+    if (!text) return { reply: { error: "empty output" }, usage };
+    return { reply: { output: text }, usage };
   } catch (err) {
     logger.warn("checklist.author.failed", { error: String(err) });
-    return { error: String(err) };
+    return { reply: { error: String(err) }, usage: { ...NO_USAGE } };
   }
 }
 async function runSupportAnswer(req, ai2, profileDir2) {
@@ -41880,6 +42278,24 @@ fi
 exec "${realGh}" "$@"
 `;
 }
+function findRealGlab(pathValue, shimDir) {
+  for (const dir2 of pathValue.split(delimiter)) {
+    if (!dir2 || dir2 === shimDir) continue;
+    const candidate = join20(dir2, process.platform === "win32" ? "glab.exe" : "glab");
+    if (existsSync13(candidate)) return candidate;
+  }
+  return null;
+}
+function glabShimScript(realGlab, cli) {
+  return `#!/bin/sh
+# 4PM glab shim (ADR-0382) \u2014 injects the served project's GitLab group token.
+if [ -z "$GITLAB_TOKEN" ]; then
+  T="$(${cli} git-token 2>/dev/null)"
+  if [ -n "$T" ]; then export GITLAB_HOST="$${GIT_HOST_ENV}" GITLAB_TOKEN="$T"; fi
+fi
+exec "${realGlab}" "$@"
+`;
+}
 function clearEnv() {
   if (!state.baseEnv) return;
   const { count, path } = state.baseEnv;
@@ -41896,7 +42312,8 @@ function clearEnv() {
 }
 function configureGitAuth(method, host, profileDir2, transport) {
   try {
-    const active = method === "github-app" && !!host;
+    const isGitlab = method === "gitlab-group-token";
+    const active = (method === "github-app" || isGitlab) && !!host;
     if (!active || state.host && state.host !== host) {
       if (state.host) void revokeAll();
       clearEnv();
@@ -41925,22 +42342,26 @@ function configureGitAuth(method, host, profileDir2, transport) {
       process.env.TSX_TSCONFIG_PATH = devTsconfig;
     }
     process.env[GIT_HOST_ENV] = host;
-    process.env[GIT_HOST_KIND_ENV] = githubHostKind(host);
+    process.env[GIT_HOST_KIND_ENV] = isGitlab ? "gitlab" : githubHostKind(host);
     if (process.platform !== "win32") {
       const shimDir = join20(profileDir2, "bin");
-      const realGh = findRealGh(state.baseEnv.path, shimDir);
-      if (realGh) {
+      const toolName = isGitlab ? "glab" : "gh";
+      const otherTool = isGitlab ? "gh" : "glab";
+      const realTool = isGitlab ? findRealGlab(state.baseEnv.path, shimDir) : findRealGh(state.baseEnv.path, shimDir);
+      if (realTool) {
         mkdirSync6(shimDir, { recursive: true });
-        const shim = join20(shimDir, "gh");
-        writeFileSync8(shim, shimScript(realGh, cliInvocation()), { encoding: "utf8", mode: 493 });
+        const shim = join20(shimDir, toolName);
+        const shimContent = isGitlab ? glabShimScript(realTool, cliInvocation()) : shimScript(realTool, cliInvocation());
+        writeFileSync8(shim, shimContent, { encoding: "utf8", mode: 493 });
         chmodSync3(shim, 493);
         process.env.PATH = `${shimDir}${delimiter}${state.baseEnv.path}`;
       } else {
-        rmSync6(join20(shimDir, "gh"), { force: true });
+        rmSync6(join20(shimDir, toolName), { force: true });
       }
+      rmSync6(join20(shimDir, otherTool), { force: true });
     }
     state.host = host;
-    logger.info("git.auth.github-app", { host });
+    logger.info(isGitlab ? "git.auth.gitlab" : "git.auth.github-app", { host });
     return true;
   } catch (err) {
     logger.warn("git.auth.configure.failed", { error: String(err) });
@@ -42826,22 +43247,12 @@ function parseJsonResult(out) {
 }
 var COMPACT_TIMEOUT_MS = 6e4;
 function buildPrompt2(input) {
-  return [
-    "You maintain a COMPACT running memory of an ongoing assistant conversation so it can continue",
-    "across sessions and accounts. Merge the latest exchange into the existing memory and return the",
-    `UPDATED memory. Keep it UNDER ${input.budgetChars} characters. Use terse Markdown bullets grouped`,
-    "as: Decisions, Constraints, Open tasks, Glossary. Keep durable facts; drop chit-chat and anything",
-    "now obsolete. Output ONLY the updated memory text \u2014 no preamble, no code fences.",
-    "",
-    "=== EXISTING MEMORY ===",
-    input.oldMemory || "(empty)",
-    "",
-    "=== LATEST USER PROMPT ===",
-    input.prompt,
-    "",
-    "=== LATEST ASSISTANT ANSWER ===",
-    input.answer
-  ].join("\n");
+  return resolveCliPrompt("cli.memory.compact", {
+    budgetChars: input.budgetChars,
+    oldMemory: input.oldMemory || "(empty)",
+    prompt: input.prompt,
+    answer: input.answer
+  });
 }
 function runOnce(cmd, profile, prompt, cwd2, extraEnv, denyDirs = []) {
   return new Promise((resolve13, reject) => {
@@ -43019,10 +43430,10 @@ function activeAiRunCount() {
   return activeRuns.size;
 }
 function cancelActiveRun(commandId) {
-  const run15 = activeRuns.get(commandId);
-  if (!run15) return { ok: false, state: "unknown" };
-  run15.controller.abort();
-  return { ok: true, state: run15.state };
+  const run16 = activeRuns.get(commandId);
+  if (!run16) return { ok: false, state: "unknown" };
+  run16.controller.abort();
+  return { ok: true, state: run16.state };
 }
 function handleCommandChannels(ctx, message, payload) {
   if (message.channel === WsChannels.COMMAND_CANCEL) {
@@ -43120,16 +43531,16 @@ async function runLocalCommand(ctx, input) {
 }
 var REFUSED = { exitCode: 1, cancelled: false, exhausted: false, neverStarted: true, output: "" };
 async function runAiPrompt(ctx, prompt, commandId, origin, oneShot = false, images, aiConfig, readOnly = false, bypass = false) {
-  const run15 = { controller: new AbortController(), state: "queued" };
-  activeRuns.set(commandId, run15);
+  const run16 = { controller: new AbortController(), state: "queued" };
+  activeRuns.set(commandId, run16);
   try {
-    return await runAiPromptInner(ctx, prompt, commandId, origin, run15, oneShot, images, aiConfig, readOnly, bypass);
+    return await runAiPromptInner(ctx, prompt, commandId, origin, run16, oneShot, images, aiConfig, readOnly, bypass);
   } finally {
     activeRuns.delete(commandId);
     if (!readOnly) requestGitSnapshot("ai-run");
   }
 }
-async function runAiPromptInner(ctx, prompt, commandId, origin, run15, oneShot = false, images, aiConfig, readOnly = false, bypass = false) {
+async function runAiPromptInner(ctx, prompt, commandId, origin, run16, oneShot = false, images, aiConfig, readOnly = false, bypass = false) {
   const config = readProfileConfig(ctx.profileDir);
   const projectTimeoutSec = config.projectAiRunTimeoutSec ?? 0;
   const machineTimeoutSec = config.aiRunTimeoutSec ?? 0;
@@ -43312,7 +43723,7 @@ ${guardedPrompt}`;
           queue: { position, limit, running: running2 }
         });
       },
-      run15.controller.signal
+      run16.controller.signal
     );
     if (slot.kind === "timeout") {
       neverStarted = true;
@@ -43333,9 +43744,9 @@ ${guardedPrompt}`;
       result = { exitCode: COMMAND_CANCELLED_EXIT_CODE, workedDir: null, workedKey: null, workedCmd: null, usage: { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 }, sessionId: "", cancelled: true };
     } else {
       if (slot.queued) ctx.send(WsChannels.COMMAND_OUTPUT, { commandId, seq: seq++, chunk: "", log: true, queue: null });
-      run15.state = "running";
+      run16.state = "running";
       try {
-        result = await runAiFailover(plan, commandId, cwd2, handlers, aiRunTimeoutMs, run15.controller.signal);
+        result = await runAiFailover(plan, commandId, cwd2, handlers, aiRunTimeoutMs, run16.controller.signal);
       } finally {
         slot.handle.release();
       }
@@ -44100,79 +44511,37 @@ empty template. The single source of truth for approval is \`.claude/.autonomous
 NEVER act on an unapproved row.`;
 function buildIntakePrompt(cfg) {
   const h = cfg.taskSizeHints;
-  return `You are the 4PM autonomous INTAKE step (headless). Edit ONLY \`USER_TODO.md\`, \`USER_QA.md\` and
-\`AI_TODO.md\`. Do NOT run git, do NOT touch \`AI_PROGRESS.md\` / \`AI_DONE.md\` / any code \u2014 the 4PM cli
-commits and publishes your book edits. Write in the language the project's \`CLAUDE.md\` specifies (default English).
-
-${BOOKS_INTRO}
-
-## 1 \u2014 Approved user requests \u2192 tasks
-Read \`USER_TODO.md\` (columns \`ID | Group | Depends | Request\`). For each APPROVED \`REQ-\u2026\` whose \`Depends\`
-are already handled:
-- CLEAR request \u21D2 split it into tasks appended to \`AI_TODO.md\` (columns
-  \`ID | Priority | Tag | Depends | Group | Task description | Notes\`), ids \`TSK-{groupid:0000}-{taskid:0000}\`
-  (groupid UNIQUE + INCREASING across all history \u2014 the largest ever used in \`AI_TODO.md\`/\`AI_DONE.md\`/
-  \`AI_PROGRESS.md\`/their git history, +1; taskid from 0001). \`Depends\` = the \`TSK-\u2026\` it needs.
-  Remove the analysed request row (empty \u21D2 reset to the empty template).
-- UNCLEAR request \u21D2 do NOT guess: append a \`USER_QA.md\` row (\`ID | Group | Depends | Original request |
-  Question / options | Answer\`) with a new \`QA-{groupid:0000}-{qaid:0000}\`, blank \`Answer\`; remove the request row.
-An unapproved request stays.
-
-## 2 \u2014 Answered intake questions
-For each \`USER_QA.md\` row with an \`Answer\`, APPROVED, and whose id is NOT in any \`AI_TODO.md\` \`Depends\`
-(those are task questions \u2014 the cli handles them; leave them alone): re-analyse the original request with the
-answer into tasks (same rules), then remove that QA row.
-
-## Task size (MANDATORY \u2014 every task must be finishable in ONE run)
-Size each task by SCOPE and write \`size: S\` or \`size: M\` at the start of \`Notes\`:
-- **S** \u2014 one small change in one module/layer (\u2248 \u2264 ${h.sMaxFiles} files, \u2248 \u2264 ${h.sMaxLines} lines), e.g. fix a bug, add a field.
-- **M** \u2014 one feature slice across 2\u20133 layers with ONE purpose (\u2248 \u2264 ${h.mMaxFiles} files, \u2248 \u2264 ${h.mMaxLines} lines), e.g. one CRUD screen, one API + its UI + tests.
-- **L** \u2014 several features, a cross-cutting change, a big migration, a new subsystem, or an architecture decision.
-  **Never write an L task**: split it into S/M tasks chained with \`Depends\`, or ask in \`USER_QA.md\` when the split needs a decision.
-The counts are hints, not hard limits. Each task's \`Task description\` states the acceptance criteria and how to test it.
-
-When done, reply with one short line summarising what you added.`;
+  return resolveCliPrompt("cli.autonomous.intake", {
+    booksIntro: BOOKS_INTRO,
+    sMaxFiles: h.sMaxFiles,
+    sMaxLines: h.sMaxLines,
+    mMaxFiles: h.mMaxFiles,
+    mMaxLines: h.mMaxLines
+  });
 }
 function buildImplementPrompt(mine, subs, resumed) {
   const subLines = subs.length ? subs.map((s3) => `- submodule \`${s3.dir}\` is on branch \`${s3.branch}\` \u2014 commit changes to it INSIDE \`${s3.dir}\``).join("\n") : "- (no submodules)";
-  return `You are the 4PM autonomous IMPLEMENT step (headless). Implement exactly ONE task, then STOP.
-
-Task ${mine.id} (group ${mine.task.group}, attempt ${mine.attempt}):
-${mine.task.desc}
-Notes: ${mine.task.notes || "(none)"}
-${resumed ? "\nThis is a CONTINUATION: earlier work for this task is already committed on the branches below \u2014 review it (git log / git diff against the base) and continue from it; do not start over.\n" : ""}
-Branches (already checked out by the 4PM cli \u2014 stay on them):
-- project root is on \`${mine.branch}\`
-${subLines}
-
-Rules:
-- Follow the project's architecture and \`CLAUDE.md\`. Add/update tests; run the project's test command and WAIT for the result.
-- Commit your work (\`git add\` + \`git commit\`) in the root and/or inside each submodule you changed.
-- Do NOT push, do NOT open pull requests, do NOT switch/create branches, do NOT edit the book files
-  (USER_TODO/USER_QA/AI_TODO/AI_PROGRESS/AI_DONE) \u2014 the 4PM cli delivers and records everything.
-- If you need a human DECISION to continue (ambiguous requirement, missing information, a choice with real
-  trade-offs), do NOT guess: commit what you have and report \`needs-input\` with the question + options.
-
-Finish with ONLY one fenced \`json\` block:
-{"status": "done" | "needs-input" | "failed", "summary": "<what you did / why it failed>", "question": "<only for needs-input: the question and the options>"}`;
+  const resumedNote = resumed ? "\nThis is a CONTINUATION: earlier work for this task is already committed on the branches below \u2014 review it (git log / git diff against the base) and continue from it; do not start over.\n" : "";
+  return resolveCliPrompt("cli.autonomous.implement", {
+    taskId: mine.id,
+    group: mine.task.group,
+    attempt: mine.attempt,
+    desc: mine.task.desc,
+    notes: mine.task.notes || "(none)",
+    resumedNote,
+    branch: mine.branch,
+    subLines
+  });
 }
 function buildSplitPrompt(mine, reasons, diff2) {
-  return `You are the 4PM autonomous SPLIT step (read-only \u2014 do not change any file). Task ${mine.id} failed to
-finish after repeated attempts, so it is probably too big for one run. Split it into 2\u20136 smaller child tasks
-that are each finishable in ONE run (size S or M), in execution order (each depends on the previous).
-
-Task: ${mine.task.desc}
-Notes: ${mine.task.notes || "(none)"}
-Why the attempts ended: ${reasons || "(unknown)"}
-Work already done on its WIP branch \`${mine.branch}\` (diff against the base, may be truncated):
-\`\`\`
-${diff2 || "(no changes yet)"}
-\`\`\`
-The first child continues from that WIP branch: note which parts are already done so they are not redone.
-Each child description must state its acceptance criteria and how to test it.
-
-Reply with ONLY one fenced \`json\` block:
-{"children": [{"desc": "<task + acceptance criteria>", "priority": "High|Medium|Low", "size": "S|M", "notes": "<optional>"}]}`;
+  return resolveCliPrompt("cli.autonomous.split", {
+    taskId: mine.id,
+    desc: mine.task.desc,
+    notes: mine.task.notes || "(none)",
+    reasons: reasons || "(unknown)",
+    branch: mine.branch,
+    diff: diff2 || "(no changes yet)"
+  });
 }
 function parseJsonReply(text) {
   const fenced = [...text.matchAll(/```json\s*([\s\S]*?)```/gi)].map((m2) => m2[1].trim());
@@ -45587,8 +45956,256 @@ function applyGitAuth(ctx, method, host) {
   );
 }
 
-// src/core/knowledge-compose.ts
+// src/core/research-run.ts
 import { spawn as spawn8 } from "child_process";
+import { mkdtempSync as mkdtempSync3, rmSync as rmSync8, writeFileSync as writeFileSync9 } from "fs";
+import { tmpdir as tmpdir5 } from "os";
+import { join as join29 } from "path";
+var RESEARCH_TIMEOUT_MS = 9 * 60 * 1e3;
+var RESEARCH_MAX_TURNS = 16;
+var NO_USAGE2 = { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 };
+var RESEARCH_ALLOWED_TOOLS = "WebSearch,WebFetch";
+var RESEARCH_ATTACH_TOOLS = "WebSearch,WebFetch,Read,Glob";
+var RESEARCH_DENIED_BASE = [
+  "Bash",
+  "Edit",
+  "Write",
+  "Read",
+  "Glob",
+  "Grep",
+  "NotebookEdit",
+  "Task",
+  "SlashCommand",
+  "Skill",
+  "ToolSearch",
+  "TaskCreate",
+  "TaskGet",
+  "TaskList",
+  "TaskOutput",
+  "TaskStop",
+  "TaskUpdate",
+  "Monitor",
+  "DesignSync",
+  "CronCreate",
+  "CronDelete",
+  "CronList",
+  "EnterWorktree",
+  "ExitWorktree",
+  "RemoteTrigger",
+  "ScheduleWakeup",
+  "SendMessage",
+  "PushNotification"
+];
+function safeAttachmentName(name, index) {
+  const base = (name || `file-${index + 1}`).replace(/[/\\]/g, "_").replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 80);
+  return base || `file-${index + 1}`;
+}
+function buildResearchPrompt(question) {
+  return resolveCliPrompt("cli.research.policy", { question });
+}
+function runClaudeOnce2(cmd, profile, prompt, extraEnv, onChunk, denyDirs, attachments) {
+  return new Promise((resolve13, reject) => {
+    const isClaude = cmd.includes("claude");
+    const cwd2 = mkdtempSync3(join29(tmpdir5(), "4pm-research-"));
+    const hasAttachments = attachments.length > 0;
+    let finalPrompt = prompt;
+    if (hasAttachments) {
+      const lines = [];
+      attachments.forEach((a, i) => {
+        const file = join29(cwd2, safeAttachmentName(a.name, i));
+        try {
+          writeFileSync9(file, Buffer.from(a.dataBase64, "base64"));
+          lines.push(`- \`${file}\``);
+        } catch {
+        }
+      });
+      if (lines.length > 0) {
+        finalPrompt = `${prompt}
+
+The user attached these files \u2014 use the Read tool to read them before answering:
+${lines.join("\n")}`;
+      }
+    }
+    const args = [
+      "-p",
+      ...profile?.model ? ["--model", profile.model] : [],
+      ...isClaude ? ["--output-format", "stream-json", "--verbose"] : [],
+      // Secret-path deny rules (ADR-0347) — reads are not confined to the working dir.
+      ...denySettingsArgs(cmd, [...denyDirs, profile?.dir]),
+      // Web-only agent (+ Read/Glob of the scratch dir when attachments are present): allow the tool set,
+      // deny everything else, bound the loop. `--permission-mode default` is the non-variadic terminator
+      // (so the variadic tool flags consume only their own comma-token — same trick as the other runners).
+      ...isClaude ? [
+        `--max-turns=${RESEARCH_MAX_TURNS}`,
+        "--allowedTools",
+        hasAttachments ? RESEARCH_ATTACH_TOOLS : RESEARCH_ALLOWED_TOOLS,
+        "--disallowedTools",
+        (hasAttachments ? RESEARCH_DENIED_BASE.filter((t2) => t2 !== "Read" && t2 !== "Glob") : RESEARCH_DENIED_BASE).join(","),
+        "--permission-mode",
+        "default"
+      ] : []
+    ];
+    const env3 = agentEnv(extraEnv, profile ? { CLAUDE_CONFIG_DIR: profile.dir } : void 0);
+    const cleanup = () => {
+      try {
+        rmSync8(cwd2, { recursive: true, force: true });
+      } catch {
+      }
+    };
+    const child = spawn8(cmd, args, { stdio: ["pipe", "pipe", "pipe"], env: env3, cwd: cwd2 });
+    const parser = createAiStreamParser(cmd);
+    let out = "";
+    let err = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      reject(new Error("research run timed out"));
+    }, RESEARCH_TIMEOUT_MS);
+    timer.unref();
+    child.stdout.on("data", (d) => {
+      const delta = parser.push(d.toString());
+      if (delta) {
+        out += delta;
+        onChunk(delta);
+      }
+    });
+    child.stderr.on("data", (d) => err += d.toString());
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      cleanup();
+      reject(e);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      cleanup();
+      const tail = parser.flush();
+      if (tail) {
+        out += tail;
+        onChunk(tail);
+      }
+      resolve13({ code: code ?? -1, out, err, usage: parser.usage() });
+    });
+    child.stdin.write(finalPrompt);
+    child.stdin.end();
+  });
+}
+async function runResearch(question, ai2, onChunk, attachments = []) {
+  const prompt = buildResearchPrompt(question);
+  const denyDirs = ai2.profiles.map((p2) => p2.dir);
+  const attempts = ai2.profiles.length > 0 ? ai2.profiles : [null];
+  let lastReason = "no attempt";
+  for (let i = 0; i < attempts.length; i++) {
+    try {
+      const { code, out, err, usage } = await runClaudeOnce2(ai2.cmd, attempts[i], prompt, ai2.env, onChunk, denyDirs, attachments);
+      if (code === 0 && out.trim()) {
+        const u2 = usage.tokens > 0 ? usage : { ...NO_USAGE2, tokens: estimateTokens(out) };
+        return { text: out.trim(), usage: u2 };
+      }
+      lastReason = `exited ${code}: ${(err || out).slice(0, 300)}`;
+    } catch (e) {
+      lastReason = e instanceof Error ? e.message : String(e);
+    }
+  }
+  return { text: "", usage: { ...NO_USAGE2 }, error: lastReason };
+}
+
+// src/core/research-guard.ts
+var REFUSAL_PREFIX = "REFUSED:";
+var ATTACK_INTENT = [
+  /\b(hack|break|breare|breach|compromise|exploit|gain (unauthorized )?access to|take over|take control of|ddos|dos attack)\b[^.?!]{0,60}\b(into|someone|their|his|her|another|the victim'?s|a target|account|server|network|website|wifi|camera|phone|system|database)\b/i,
+  /\b(write|create|build|generate|give me)\b[^.?!]{0,40}\b(malware|ransomware|a virus|a keylogger|a trojan|spyware|a rootkit|a worm|a botnet|an exploit|a phishing (kit|page|email|site))\b/i,
+  /\bbypass\b[^.?!]{0,40}\b(authentication|login|the firewall|a paywall|security|2fa|mfa|licen[sc]e|drm)\b/i,
+  /\b(steal|harvest|exfiltrate|dump|crack)\b[^.?!]{0,40}\b(credentials|passwords|password hashes|credit cards?|personal data|pii|session tokens)\b/i,
+  /\bbrute[- ]?force\b[^.?!]{0,40}\b(login|password|account|credential)/i
+];
+function isModelRefusal(text) {
+  return text.trimStart().toUpperCase().startsWith(REFUSAL_PREFIX);
+}
+function refusalReasonOf(text) {
+  const after = text.trim().slice(REFUSAL_PREFIX.length).trim();
+  return (after || "This question is outside what Research can answer.").slice(0, 300);
+}
+function screenQuestion(question) {
+  if (ATTACK_INTENT.some((re2) => re2.test(question))) {
+    return { blocked: true, reason: "The question asks to attack or compromise a system, which Research does not do." };
+  }
+  return { blocked: false };
+}
+function screenAnswer(answer) {
+  if (isModelRefusal(answer)) return { blocked: true, reason: refusalReasonOf(answer) };
+  if (ATTACK_INTENT.some((re2) => re2.test(answer))) {
+    return { blocked: true, reason: "The answer was withheld by the content policy." };
+  }
+  return { blocked: false };
+}
+
+// src/core/ws-client/handlers/research.ts
+function handleResearchChannels(ctx, message, payload) {
+  if (message.channel !== WsChannels.RESEARCH_ASK) return false;
+  const req = payload;
+  const config = readProfileConfig(ctx.profileDir);
+  const cmd = config.aiCli || "claude";
+  ctx.bus.push({ source: "server", kind: "aireq", text: `${cmd} \u2039 research` });
+  ctx.bus.startBusy("research");
+  void run14(ctx, message, req, config, cmd).finally(() => ctx.bus.endBusy("research"));
+  return true;
+}
+async function run14(ctx, message, req, config, cmd) {
+  const emit = (p2) => ctx.send(WsChannels.RESEARCH_PROGRESS, { queryId: req.queryId, ...p2 });
+  const reply = (r) => ctx.send(WsChannels.RESEARCH_ASK, r, message.id);
+  const pre = screenQuestion(req.question);
+  if (pre.blocked) {
+    reply({ refused: true, refusalReason: pre.reason });
+    return;
+  }
+  const slot = await acquireRunSlot(ctx, (info) => emit({ message: `queued #${info.position}` }));
+  if (slot.kind !== "granted") {
+    reply({ error: slot.kind === "denied" ? "storage full" : "no idle run slot" });
+    return;
+  }
+  try {
+    const ai2 = {
+      cmd,
+      profiles: resolveClaudeProfiles(config, getWorkingProfile(ctx.profileDir, cmd)),
+      env: config.aiEnv
+    };
+    const result = await runResearch(req.question, ai2, (delta) => emit({ chunk: delta }), req.attachments ?? []);
+    const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
+    const events = [{ metric: UsageMetric.COMMANDS, amount: 1, occurredAt }];
+    if (result.usage.tokens > 0) {
+      events.push({
+        metric: UsageMetric.AI_TOKENS,
+        amount: result.usage.tokens,
+        occurredAt,
+        inputTokens: result.usage.input,
+        outputTokens: result.usage.output,
+        cacheReadTokens: result.usage.cacheRead,
+        cacheCreationTokens: result.usage.cacheCreation,
+        provider: aiProviderOf(cmd),
+        authMode: resolveClaudeAuthMode(config)
+      });
+    }
+    ctx.reportUsage(events, null);
+    if (result.error || !result.text) {
+      ctx.bus.push({ source: "server", kind: "log", text: `research failed: ${result.error ?? "empty"}`, level: "warn" });
+      reply({ error: result.error || "empty answer", tokens: result.usage.tokens });
+      return;
+    }
+    const post2 = screenAnswer(result.text);
+    if (post2.blocked) {
+      reply({ refused: true, refusalReason: post2.reason, tokens: result.usage.tokens });
+      return;
+    }
+    ctx.bus.push({ source: "server", kind: "aires", text: `${cmd} \u203A` });
+    reply({ answer: result.text, tokens: result.usage.tokens });
+  } catch (err) {
+    reply({ error: err instanceof Error ? err.message : String(err) });
+  } finally {
+    slot.handle.release();
+  }
+}
+
+// src/core/knowledge-compose.ts
+import { spawn as spawn9 } from "child_process";
 var COMPOSE_TIMEOUT_MS = 18e4;
 function buildPrompt3(req) {
   const focus = req.prompt ? `
@@ -45614,7 +46231,7 @@ function runOnce2(cmd, profile, prompt, cwd2, extraEnv, denyDirs = []) {
       ...extraEnv,
       ...profile ? { CLAUDE_CONFIG_DIR: profile.dir } : {}
     };
-    const child = spawn8(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
+    const child = spawn9(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
     let out = "";
     let err = "";
     const timer = setTimeout(() => {
@@ -45660,14 +46277,14 @@ async function runKnowledgeCompose(req, ai2, physicRoot) {
 }
 
 // src/core/faq-compose.ts
-import { spawn as spawn9, execFile as execFile14 } from "child_process";
-import { existsSync as existsSync16, mkdirSync as mkdirSync8, rmSync as rmSync8 } from "fs";
+import { spawn as spawn10, execFile as execFile14 } from "child_process";
+import { existsSync as existsSync16, mkdirSync as mkdirSync8, rmSync as rmSync9 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
-import { join as join29 } from "path";
-import { tmpdir as tmpdir5 } from "os";
+import { join as join30 } from "path";
+import { tmpdir as tmpdir6 } from "os";
 import { promisify as promisify14 } from "util";
 var execFileAsync2 = promisify14(execFile14);
-var NO_USAGE2 = { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 };
+var NO_USAGE3 = { tokens: 0, input: 0, output: 0, cacheRead: 0, cacheCreation: 0 };
 var COMPOSE_TIMEOUT_MS2 = 10 * 60 * 1e3;
 var AGENT_DENIED_TOOLS = ["Bash", "WebFetch", "WebSearch", "NotebookEdit", "Task"];
 function buildPrompt4(tickets, customPrompt) {
@@ -45677,33 +46294,12 @@ function buildPrompt4(tickets, customPrompt) {
 ${thread}`;
   }).join("\n\n");
   const ids = tickets.map((t2) => t2.id);
-  return [
-    "You are maintaining the 4PM product FAQ, stored as markdown in THIS git repository (your CWD).",
-    "From the resolved support tickets below, distil reusable, product-general FAQ entries and add or",
-    "update the appropriate markdown file(s) in this repo (e.g. an FAQ.md, or the closest existing",
-    "topic file \u2014 inspect the repo first and match its structure/style).",
-    "",
-    "Rules:",
-    "- Write generalized Q&A, NOT ticket-specific replies; never include customer names, emails, ids,",
-    "  org names or any personal data from the tickets.",
-    "- Merge with existing entries instead of duplicating; keep the existing formatting and headings.",
-    "- If a ticket yields no reusable FAQ value, skip it. If nothing is worth adding, make NO changes.",
-    "- Only edit markdown documentation files; do not touch code, CI, or unrelated files.",
-    "- Do NOT run git commit/push or open a PR yourself \u2014 just leave the edited files in the working",
-    "  tree; the surrounding tooling handles commit + PR.",
-    ...customPrompt?.trim() ? ["", "Additional instruction from the operator (follow it too):", customPrompt.trim()] : [],
-    "",
-    "===== RESOLVED TICKETS =====",
-    transcript,
-    "",
-    "===== REQUIRED FINAL OUTPUT =====",
-    "After finishing all file edits, output \u2014 as the LAST thing, on its own \u2014 a single fenced JSON",
-    "block summarizing what you did PER TICKET (created/updated which FAQ entry, or skipped + why):",
-    "```json",
-    `{"perTicket":[${ids.map((id) => `{"ticketId":"${id}","summary":"..."}`).join(",")}]}`,
-    "```",
-    "Include exactly one entry per ticket id above; keep each summary to one or two sentences."
-  ].join("\n");
+  const ticketJsonSkeleton = `{"perTicket":[${ids.map((id) => `{"ticketId":"${id}","summary":"..."}`).join(",")}]}`;
+  const customInstruction = customPrompt?.trim() ? `
+
+Additional instruction from the operator (follow it too):
+${customPrompt.trim()}` : "";
+  return resolveCliPrompt("cli.faq.compose", { transcript, ticketJsonSkeleton, customInstruction });
 }
 function parsePerTicket(text) {
   const idx = text.lastIndexOf('"perTicket"');
@@ -45730,7 +46326,7 @@ function parsePerTicket(text) {
   }
   return [];
 }
-function runClaudeOnce2(cmd, profile, prompt, cwd2, extraEnv, denyDirs = []) {
+function runClaudeOnce3(cmd, profile, prompt, cwd2, extraEnv, denyDirs = []) {
   return new Promise((resolve13, reject) => {
     const isClaude = cmd.includes("claude");
     const args = [
@@ -45746,7 +46342,7 @@ function runClaudeOnce2(cmd, profile, prompt, cwd2, extraEnv, denyDirs = []) {
       ...cmd.includes("codex") ? ["--sandbox", "workspace-write"] : []
     ];
     const env3 = agentEnv(extraEnv, profile ? { CLAUDE_CONFIG_DIR: profile.dir } : void 0);
-    const child = spawn9(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
+    const child = spawn10(cmd, args, { stdio: ["pipe", "pipe", "pipe"], cwd: cwd2, env: env3 });
     const parser = createAiStreamParser(cmd);
     let out = "";
     let err = "";
@@ -45774,7 +46370,7 @@ async function runClaudeWithFailover2(prompt, cwd2, ai2) {
   const attempts = ai2.profiles.length > 0 ? ai2.profiles : [null];
   let lastReason = "no attempt";
   for (let i = 0; i < attempts.length; i++) {
-    const { code, out, err, usage } = await runClaudeOnce2(ai2.cmd, attempts[i], prompt, cwd2, ai2.env, ai2.profiles.map((p2) => p2.dir));
+    const { code, out, err, usage } = await runClaudeOnce3(ai2.cmd, attempts[i], prompt, cwd2, ai2.env, ai2.profiles.map((p2) => p2.dir));
     if (code === 0) return { usage, text: out.trim() };
     lastReason = `exited ${code}: ${(err || out).slice(0, 500)}`;
     if (i === attempts.length - 1) break;
@@ -45784,7 +46380,7 @@ async function runClaudeWithFailover2(prompt, cwd2, ai2) {
 var MAX_OUTPUT_CHARS = 8e3;
 async function runFaqCompose(req, ai2) {
   if (!req.repo.token) return { prUrl: "", error: "no write token" };
-  const workDir = join29(tmpdir5(), "4pm-faq-sync", randomUUID3());
+  const workDir = join30(tmpdir6(), "4pm-faq-sync", randomUUID3());
   const gitEnv = { ...process.env, GIT_TERMINAL_PROMPT: "0" };
   const auth = gitAuthArgs("x-access-token", req.repo.token);
   try {
@@ -45814,7 +46410,7 @@ async function runFaqCompose(req, ai2) {
     } catch (err) {
       logger.warn("faq.compose.pr.failed", { error: String(err) });
     }
-    const u2 = usage.tokens > 0 ? usage : { ...NO_USAGE2 };
+    const u2 = usage.tokens > 0 ? usage : { ...NO_USAGE3 };
     return {
       prUrl,
       branch: req.headBranch,
@@ -45830,7 +46426,7 @@ async function runFaqCompose(req, ai2) {
   } finally {
     if (existsSync16(workDir)) {
       try {
-        rmSync8(workDir, { recursive: true, force: true });
+        rmSync9(workDir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -45926,15 +46522,45 @@ function handleSupportChannels(ctx, message, payload) {
       };
       ctx.bus.push({ source: "server", kind: "aireq", text: `${ccmd} \u2039 author checklist items` });
       ctx.bus.startBusy("checklist-author");
-      void runChecklistAuthor(creq, cai).then((reply) => {
-        if (reply.error) {
-          ctx.bus.push({ source: "server", kind: "log", text: `checklist-author failed: ${reply.error}`, level: "warn" });
-        } else {
-          ctx.bus.push({ source: "server", kind: "aires", text: `${ccmd} \u203A` });
+      void (async () => {
+        const slot = await acquireRunSlot(ctx, () => void 0);
+        if (slot.kind !== "granted") {
+          ctx.send(
+            WsChannels.CHECKLIST_AUTHOR,
+            { error: slot.kind === "denied" ? "storage full" : "no idle run slot" },
+            message.id
+          );
+          return;
+        }
+        try {
+          const { reply, usage } = await runChecklistAuthor(creq, cai);
+          const occurredAt = (/* @__PURE__ */ new Date()).toISOString();
+          const events = [{ metric: UsageMetric.COMMANDS, amount: 1, occurredAt }];
+          if (usage.tokens > 0) {
+            events.push({
+              metric: UsageMetric.AI_TOKENS,
+              amount: usage.tokens,
+              occurredAt,
+              inputTokens: usage.input,
+              outputTokens: usage.output,
+              cacheReadTokens: usage.cacheRead,
+              cacheCreationTokens: usage.cacheCreation,
+              provider: aiProviderOf(ccmd),
+              authMode: resolveClaudeAuthMode(ccfg)
+            });
+          }
+          ctx.reportUsage(events, null);
+          if (reply.error) {
+            ctx.bus.push({ source: "server", kind: "log", text: `checklist-author failed: ${reply.error}`, level: "warn" });
+          } else {
+            ctx.bus.push({ source: "server", kind: "aires", text: `${ccmd} \u203A` });
+          }
+          reportToolResult(ccmd, !reply.error, reply.error);
+          ctx.send(WsChannels.CHECKLIST_AUTHOR, reply, message.id);
+        } finally {
+          slot.handle.release();
         }
-        reportToolResult(ccmd, !reply.error, reply.error);
-        ctx.send(WsChannels.CHECKLIST_AUTHOR, reply, message.id);
-      }).finally(() => ctx.bus.endBusy("checklist-author"));
+      })().finally(() => ctx.bus.endBusy("checklist-author"));
       return true;
     }
     default:
@@ -46035,7 +46661,7 @@ function handleToolsChannels(ctx, message, payload) {
 
 // src/core/agents.ts
 import { readFile as readFile14, writeFile as writeFile10, mkdir as mkdir8, readdir as readdir6, rm as rm7 } from "fs/promises";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 var AGENTS_REL = ".claude/agents";
 var SKILLS_REL = ".claude/skills";
 var MEMORY_DIRS = /* @__PURE__ */ new Set(["short-memory", "long-memory"]);
@@ -46059,17 +46685,17 @@ async function listAgents(root) {
   const subagents = [];
   const skills = [];
   try {
-    for (const e of await readdir6(join30(root, AGENTS_REL), { withFileTypes: true })) {
+    for (const e of await readdir6(join31(root, AGENTS_REL), { withFileTypes: true })) {
       if (!e.isFile() || !e.name.endsWith(".md") || MEMORY_DIRS.has(e.name)) continue;
-      const fm = frontmatter(await readText2(join30(root, AGENTS_REL, e.name)));
+      const fm = frontmatter(await readText2(join31(root, AGENTS_REL, e.name)));
       subagents.push({ name: e.name.replace(/\.md$/, ""), description: fm.description });
     }
   } catch {
   }
   try {
-    for (const e of await readdir6(join30(root, SKILLS_REL), { withFileTypes: true })) {
+    for (const e of await readdir6(join31(root, SKILLS_REL), { withFileTypes: true })) {
       if (!e.isDirectory()) continue;
-      const fm = frontmatter(await readText2(join30(root, SKILLS_REL, e.name, "SKILL.md")));
+      const fm = frontmatter(await readText2(join31(root, SKILLS_REL, e.name, "SKILL.md")));
       skills.push({ name: e.name, description: fm.description });
     }
   } catch {
@@ -46080,15 +46706,15 @@ async function listAgents(root) {
 }
 function itemPath(root, kind, name) {
   const n = safeName(name);
-  return kind === "subagent" ? join30(root, AGENTS_REL, `${n}.md`) : join30(root, SKILLS_REL, n, "SKILL.md");
+  return kind === "subagent" ? join31(root, AGENTS_REL, `${n}.md`) : join31(root, SKILLS_REL, n, "SKILL.md");
 }
 async function readAgent(root, kind, name) {
   const content = await readText2(itemPath(root, kind, name));
   if (kind !== "subagent") return { content };
   const n = safeName(name);
   const [short, long] = await Promise.all([
-    readText2(join30(root, AGENTS_REL, "short-memory", `${n}.md`)),
-    readText2(join30(root, AGENTS_REL, "long-memory", `${n}.md`))
+    readText2(join31(root, AGENTS_REL, "short-memory", `${n}.md`)),
+    readText2(join31(root, AGENTS_REL, "long-memory", `${n}.md`))
   ]);
   return { content, memory: { short, long } };
 }
@@ -46098,12 +46724,12 @@ async function writeAgent(root, req) {
   try {
     if (req.action === "delete") {
       if (req.kind === "subagent") await rm7(itemPath(root, "subagent", n), { force: true });
-      else await rm7(join30(root, SKILLS_REL, n), { recursive: true, force: true });
+      else await rm7(join31(root, SKILLS_REL, n), { recursive: true, force: true });
       return { ok: true };
     }
     if (req.content === void 0) return { ok: false, error: "content is required" };
     const path = itemPath(root, req.kind, n);
-    await mkdir8(join30(path, ".."), { recursive: true });
+    await mkdir8(join31(path, ".."), { recursive: true });
     await writeFile10(path, req.content, "utf8");
     return { ok: true };
   } catch (err) {
@@ -46113,7 +46739,7 @@ async function writeAgent(root, req) {
 
 // src/core/secrets.ts
 import { readFile as readFile15, writeFile as writeFile11 } from "fs/promises";
-import { join as join31 } from "path";
+import { join as join32 } from "path";
 var SECURITY_REL = "AI_SECURITY.md";
 var PLACEHOLDER_REL = "AI_PLACEHOLDER.md";
 var SECRETS_REL = "project.secrets.json";
@@ -46126,7 +46752,7 @@ async function readText3(path, fallback = "") {
 }
 async function readSecretsObject(root) {
   try {
-    const v2 = JSON.parse(await readFile15(join31(root, SECRETS_REL), "utf8"));
+    const v2 = JSON.parse(await readFile15(join32(root, SECRETS_REL), "utf8"));
     return v2 && typeof v2 === "object" ? v2 : {};
   } catch {
     return {};
@@ -46145,8 +46771,8 @@ function placeholderKeys(text) {
 }
 async function readSecrets(root) {
   const [security, placeholder, secrets] = await Promise.all([
-    readText3(join31(root, SECURITY_REL)),
-    readText3(join31(root, PLACEHOLDER_REL)),
+    readText3(join32(root, SECURITY_REL)),
+    readText3(join32(root, PLACEHOLDER_REL)),
     readSecretsObject(root)
   ]);
   const names = /* @__PURE__ */ new Set([...placeholderKeys(placeholder), ...Object.keys(secrets)]);
@@ -46159,14 +46785,14 @@ async function readSecrets(root) {
 async function writeSecrets(root, req) {
   try {
     if (req.kind === "security") {
-      await writeFile11(join31(root, SECURITY_REL), req.content, "utf8");
+      await writeFile11(join32(root, SECURITY_REL), req.content, "utf8");
     } else if (req.kind === "placeholder") {
-      await writeFile11(join31(root, PLACEHOLDER_REL), req.content, "utf8");
+      await writeFile11(join32(root, PLACEHOLDER_REL), req.content, "utf8");
     } else {
       const secrets = await readSecretsObject(root);
       if (req.kind === "secret") secrets[req.key] = req.value;
       else delete secrets[req.key];
-      await writeFile11(join31(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
+      await writeFile11(join32(root, SECRETS_REL), JSON.stringify(secrets, null, 2) + "\n", "utf8");
     }
     return { ok: true };
   } catch (err) {
@@ -46176,12 +46802,12 @@ async function writeSecrets(root, req) {
 
 // src/core/agent-tools.ts
 import { readFile as readFile16, writeFile as writeFile12, mkdir as mkdir9 } from "fs/promises";
-import { dirname as dirname9, join as join32 } from "path";
+import { dirname as dirname9, join as join33 } from "path";
 var SHARED_REL = ".claude/settings.json";
 var LOCAL_REL = ".claude/settings.local.json";
 var SECRETS_DENY = "Read(./project.secrets.json)";
 function fileFor(root, scope) {
-  return join32(root, scope === "shared" ? SHARED_REL : LOCAL_REL);
+  return join33(root, scope === "shared" ? SHARED_REL : LOCAL_REL);
 }
 async function readSettingsObject(path) {
   try {
@@ -46218,7 +46844,7 @@ async function writeAgentTools(root, scope, permissions) {
 // src/core/packages.ts
 import { createHash as createHash4 } from "crypto";
 import { readFile as readFile17, writeFile as writeFile13, mkdir as mkdir10, readdir as readdir7, rm as rm8, stat as stat5 } from "fs/promises";
-import { dirname as dirname10, join as join33, relative } from "path";
+import { dirname as dirname10, join as join34, relative } from "path";
 var AGENTS_REL2 = ".claude/agents";
 var SKILLS_REL2 = ".claude/skills";
 var MANIFEST_REL = ".claude/.4pm-packages.json";
@@ -46242,7 +46868,7 @@ async function listFilesRel(dir2) {
       return;
     }
     for (const e of entries2) {
-      const full = join33(d, e.name);
+      const full = join34(d, e.name);
       if (e.isDirectory()) await walk2(full);
       else if (e.isFile()) out.push(relative(dir2, full));
     }
@@ -46253,16 +46879,16 @@ async function listFilesRel(dir2) {
 async function readArtifactFiles(root, kind, slug) {
   const files = [];
   if (kind === "subagent") {
-    const agent = await readMaybe(join33(root, AGENTS_REL2, `${slug}.md`));
+    const agent = await readMaybe(join34(root, AGENTS_REL2, `${slug}.md`));
     if (agent) files.push({ path: "agent.md", contentBase64: agent.toString("base64") });
-    const short = await readMaybe(join33(root, AGENTS_REL2, "short-memory", `${slug}.md`));
+    const short = await readMaybe(join34(root, AGENTS_REL2, "short-memory", `${slug}.md`));
     if (short) files.push({ path: "short-memory.md", contentBase64: short.toString("base64") });
-    const long = await readMaybe(join33(root, AGENTS_REL2, "long-memory", `${slug}.md`));
+    const long = await readMaybe(join34(root, AGENTS_REL2, "long-memory", `${slug}.md`));
     if (long) files.push({ path: "long-memory.md", contentBase64: long.toString("base64") });
   } else {
-    const base = join33(root, SKILLS_REL2, slug);
+    const base = join34(root, SKILLS_REL2, slug);
     for (const rel of await listFilesRel(base)) {
-      const buf = await readMaybe(join33(base, rel));
+      const buf = await readMaybe(join34(base, rel));
       if (buf) files.push({ path: rel.split("\\").join("/"), contentBase64: buf.toString("base64") });
     }
   }
@@ -46280,7 +46906,7 @@ async function artifactSha256(root, kind, slug) {
   return h.digest("hex");
 }
 async function artifactExists(root, kind, slug) {
-  const target = kind === "subagent" ? join33(root, AGENTS_REL2, `${slug}.md`) : join33(root, SKILLS_REL2, slug);
+  const target = kind === "subagent" ? join34(root, AGENTS_REL2, `${slug}.md`) : join34(root, SKILLS_REL2, slug);
   try {
     await stat5(target);
     return true;
@@ -46289,7 +46915,7 @@ async function artifactExists(root, kind, slug) {
   }
 }
 async function readManifest(root) {
-  const buf = await readMaybe(join33(root, MANIFEST_REL));
+  const buf = await readMaybe(join34(root, MANIFEST_REL));
   if (!buf) return {};
   try {
     return JSON.parse(buf.toString("utf8"));
@@ -46298,7 +46924,7 @@ async function readManifest(root) {
   }
 }
 async function writeManifest(root, manifest) {
-  const path = join33(root, MANIFEST_REL);
+  const path = join34(root, MANIFEST_REL);
   await mkdir10(dirname10(path), { recursive: true });
   await writeFile13(path, JSON.stringify(manifest, null, 2), "utf8");
 }
@@ -46307,24 +46933,24 @@ async function writeArtifactFiles(root, kind, slug, files) {
   if (kind === "subagent") {
     const agent = byPath.get("agent.md");
     if (agent) {
-      await mkdir10(join33(root, AGENTS_REL2), { recursive: true });
-      await writeFile13(join33(root, AGENTS_REL2, `${slug}.md`), agent);
+      await mkdir10(join34(root, AGENTS_REL2), { recursive: true });
+      await writeFile13(join34(root, AGENTS_REL2, `${slug}.md`), agent);
     }
     const short = byPath.get("short-memory.md");
     if (short) {
-      await mkdir10(join33(root, AGENTS_REL2, "short-memory"), { recursive: true });
-      await writeFile13(join33(root, AGENTS_REL2, "short-memory", `${slug}.md`), short);
+      await mkdir10(join34(root, AGENTS_REL2, "short-memory"), { recursive: true });
+      await writeFile13(join34(root, AGENTS_REL2, "short-memory", `${slug}.md`), short);
     }
     const long = byPath.get("long-memory.md");
     if (long) {
-      await mkdir10(join33(root, AGENTS_REL2, "long-memory"), { recursive: true });
-      await writeFile13(join33(root, AGENTS_REL2, "long-memory", `${slug}.md`), long);
+      await mkdir10(join34(root, AGENTS_REL2, "long-memory"), { recursive: true });
+      await writeFile13(join34(root, AGENTS_REL2, "long-memory", `${slug}.md`), long);
     }
   } else {
-    const base = join33(root, SKILLS_REL2, slug);
+    const base = join34(root, SKILLS_REL2, slug);
     for (const [rel, buf] of byPath) {
       if (rel.includes("..") || rel.startsWith("/")) continue;
-      const dest = join33(base, rel);
+      const dest = join34(base, rel);
       await mkdir10(dirname10(dest), { recursive: true });
       await writeFile13(dest, buf);
     }
@@ -46390,11 +47016,11 @@ async function removePackage(root, slug) {
     const entry = manifest[n];
     if (!entry) return { ok: false, error: "not installed" };
     if (entry.kind === "subagent") {
-      await rm8(join33(root, AGENTS_REL2, `${n}.md`), { force: true });
-      await rm8(join33(root, AGENTS_REL2, "short-memory", `${n}.md`), { force: true });
-      await rm8(join33(root, AGENTS_REL2, "long-memory", `${n}.md`), { force: true });
+      await rm8(join34(root, AGENTS_REL2, `${n}.md`), { force: true });
+      await rm8(join34(root, AGENTS_REL2, "short-memory", `${n}.md`), { force: true });
+      await rm8(join34(root, AGENTS_REL2, "long-memory", `${n}.md`), { force: true });
     } else {
-      await rm8(join33(root, SKILLS_REL2, n), { recursive: true, force: true });
+      await rm8(join34(root, SKILLS_REL2, n), { recursive: true, force: true });
     }
     delete manifest[n];
     await writeManifest(root, manifest);
@@ -46406,7 +47032,7 @@ async function removePackage(root, slug) {
 
 // src/core/graph.ts
 import { readFile as readFile18, readdir as readdir8 } from "fs/promises";
-import { join as join34, relative as relative2, dirname as dirname11, resolve as resolve12, extname as extname2, basename as basename6 } from "path";
+import { join as join35, relative as relative2, dirname as dirname11, resolve as resolve12, extname as extname2, basename as basename6 } from "path";
 var MAX_FILES = 2e3;
 var MAX_NODES = 3e3;
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist", "build", ".next", "out", "coverage", ".turbo"]);
@@ -46426,7 +47052,7 @@ async function walk(root, accept) {
       if (e.name.startsWith(".") && e.name !== ".claude") {
         if (e.isDirectory()) continue;
       }
-      const full = join34(dir2, e.name);
+      const full = join35(dir2, e.name);
       if (e.isDirectory()) {
         if (!SKIP_DIRS.has(e.name)) stack.push(full);
       } else if (accept(full)) {
@@ -46547,15 +47173,15 @@ async function buildGraph(root, mode) {
 // src/core/rag.ts
 import { readFile as readFile19, writeFile as writeFile14, statfs as statfs2, mkdir as mkdir11 } from "fs/promises";
 import { existsSync as existsSync17 } from "fs";
-import { execFile as execFile15, spawn as spawn10 } from "child_process";
+import { execFile as execFile15, spawn as spawn11 } from "child_process";
 import { totalmem as totalmem2, cpus as cpus2 } from "os";
-import { join as join35 } from "path";
+import { join as join36 } from "path";
 import { promisify as promisify15 } from "util";
-var run14 = promisify15(execFile15);
+var run15 = promisify15(execFile15);
 var RAG_REL = ".claude/rag";
 async function tryRun(cmd, args) {
   try {
-    const { stdout } = await run14(cmd, args, { timeout: 8e3 });
+    const { stdout } = await run15(cmd, args, { timeout: 8e3 });
     return { ok: true, out: stdout.trim() };
   } catch {
     return { ok: false, out: "" };
@@ -46570,7 +47196,7 @@ async function detectPython() {
 }
 async function installLog(root) {
   try {
-    const text = await readFile19(join35(root, RAG_REL, "install.log"), "utf8");
+    const text = await readFile19(join36(root, RAG_REL, "install.log"), "utf8");
     return text.split("\n").filter((l) => l.length > 0).slice(-200);
   } catch {
     return [];
@@ -46632,14 +47258,14 @@ async function ragStatus(root) {
   };
   let modelName = "";
   try {
-    modelName = (await readFile19(join35(root, RAG_REL, ".installed"), "utf8")).trim();
+    modelName = (await readFile19(join36(root, RAG_REL, ".installed"), "utf8")).trim();
   } catch {
     modelName = "";
   }
   const modelPresent = modelName.length > 0;
   return {
     installed: fastembed && sqliteVec && modelPresent,
-    installing: existsSync17(join35(root, RAG_REL, ".installing")),
+    installing: existsSync17(join36(root, RAG_REL, ".installing")),
     python: { found: py.found, version: py.version },
     deps: { pip, fastembed, sqliteVec },
     model: { present: modelPresent, name: modelName },
@@ -46650,9 +47276,9 @@ async function ragStatus(root) {
   };
 }
 async function readIndexMeta(root) {
-  const indexing = existsSync17(join35(root, RAG_REL, ".indexing"));
+  const indexing = existsSync17(join36(root, RAG_REL, ".indexing"));
   try {
-    const m2 = JSON.parse(await readFile19(join35(root, RAG_REL, ".index.json"), "utf8"));
+    const m2 = JSON.parse(await readFile19(join36(root, RAG_REL, ".index.json"), "utf8"));
     return {
       present: true,
       indexing,
@@ -46719,14 +47345,14 @@ if __name__ == "__main__":
     elif cmd == "query": query(sys.argv[2], int(sys.argv[3]) if len(sys.argv) > 3 else 8)
 `;
 async function ensureEngine(root) {
-  await mkdir11(join35(root, RAG_REL), { recursive: true }).catch(() => void 0);
-  await writeFile14(join35(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
+  await mkdir11(join36(root, RAG_REL), { recursive: true }).catch(() => void 0);
+  await writeFile14(join36(root, RAG_REL, "rag_engine.py"), RAG_ENGINE_PY, "utf8");
 }
 async function ragReindex(root) {
   const py = await detectPython();
   if (!py.found) return { ok: false, started: false, error: "python3 not found" };
-  if (!existsSync17(join35(root, RAG_REL, ".installed"))) return { ok: false, started: false, error: "RAG is not installed" };
-  if (existsSync17(join35(root, RAG_REL, ".indexing"))) return { ok: true, started: true };
+  if (!existsSync17(join36(root, RAG_REL, ".installed"))) return { ok: false, started: false, error: "RAG is not installed" };
+  if (existsSync17(join36(root, RAG_REL, ".indexing"))) return { ok: true, started: true };
   await ensureEngine(root);
   const script = `
 set +e
@@ -46734,7 +47360,7 @@ touch "${RAG_REL}/.indexing"
 { echo "[reindex] $(date)"; "$RAG_PY" "${RAG_REL}/rag_engine.py" reindex 2>&1; } >> "${RAG_REL}/index.log" 2>&1
 rm -f "${RAG_REL}/.indexing"
 `;
-  const child = spawn10("bash", ["-c", script], {
+  const child = spawn11("bash", ["-c", script], {
     cwd: root,
     env: { ...process.env, RAG_PY: py.bin },
     detached: true,
@@ -46746,12 +47372,12 @@ rm -f "${RAG_REL}/.indexing"
 async function ragQuery(root, queryText, k2 = 8) {
   const py = await detectPython();
   if (!py.found) return { results: [], error: "python3 not found" };
-  if (!existsSync17(join35(root, RAG_REL, "index.db"))) return { results: [], error: "no index \u2014 reindex first" };
+  if (!existsSync17(join36(root, RAG_REL, "index.db"))) return { results: [], error: "no index \u2014 reindex first" };
   await ensureEngine(root);
   try {
-    const { stdout } = await run14(
+    const { stdout } = await run15(
       py.bin,
-      [join35(RAG_REL, "rag_engine.py"), "query", queryText, String(Math.min(Math.max(k2, 1), 20))],
+      [join36(RAG_REL, "rag_engine.py"), "query", queryText, String(Math.min(Math.max(k2, 1), 20))],
       { cwd: root, timeout: 3e4, maxBuffer: 4 * 1024 * 1024 }
     );
     const parsed = JSON.parse(stdout.trim() || '{"results":[]}');
@@ -46766,9 +47392,9 @@ async function ragInstall(root, model) {
   }
   const py = await detectPython();
   if (!py.found) return { ok: false, started: false, error: "python3 not found on the worker" };
-  if (existsSync17(join35(root, RAG_REL, ".installing"))) return { ok: true, started: true };
+  if (existsSync17(join36(root, RAG_REL, ".installing"))) return { ok: true, started: true };
   try {
-    await mkdir11(join35(root, RAG_REL), { recursive: true });
+    await mkdir11(join36(root, RAG_REL), { recursive: true });
   } catch {
   }
   const script = `
@@ -46784,7 +47410,7 @@ rm -f "${RAG_REL}/.installed"
 } >> "${RAG_REL}/install.log" 2>&1
 rm -f "${RAG_REL}/.installing"
 `;
-  const child = spawn10("bash", ["-c", script], {
+  const child = spawn11("bash", ["-c", script], {
     cwd: root,
     env: { ...process.env, RAG_PY: py.bin, RAG_MODEL: model },
     detached: true,
@@ -46796,7 +47422,7 @@ rm -f "${RAG_REL}/.installing"
 
 // src/core/config-sync.ts
 import { existsSync as existsSync18, readFileSync as readFileSync16 } from "fs";
-import { join as join36 } from "path";
+import { join as join37 } from "path";
 var SERVER_MANAGED_KEYS = [
   "physicPath",
   "sessionSwitchPct",
@@ -46813,7 +47439,7 @@ var SERVER_MANAGED_KEYS = [
   "projectAiMemoryBudgetChars"
 ];
 function readConfigText(profileDir2) {
-  const path = join36(profileDir2, "config.json");
+  const path = join37(profileDir2, "config.json");
   if (existsSync18(path)) {
     try {
       return readFileSync16(path, "utf8");
@@ -47439,6 +48065,7 @@ var WsClient = class {
         if (token.aiMemory && !this.aiMemory) this.aiMemory = token.aiMemory.text;
         this.outboundReviewEnabled = token.outboundReview?.enabled === true;
         this.restrictToFolder = token.aiRestrictToFolder === true;
+        setPromptOverrides(token.promptOverrides ?? null);
         configureGitAuth(
           token.gitAuth ?? null,
           token.gitAuthHost ?? null,
@@ -47604,6 +48231,7 @@ var WsClient = class {
     if (handleToolsChannels(this.hctx, message, payload)) return;
     if (handleGitChannels(this.hctx, message, payload)) return;
     if (handleSupportChannels(this.hctx, message, payload)) return;
+    if (handleResearchChannels(this.hctx, message, payload)) return;
     if (handleMiscChannels(this.hctx, message, payload)) return;
     this.bus.log(t("error.unsupportedChannel", { channel: message.channel }), "warn");
   }
@@ -47722,7 +48350,7 @@ var WsClient = class {
    */
   physicFolderPath(projectName) {
     const safe = projectName.replace(/[/\\]/g, "_").replace(/\.\./g, "_").trim();
-    return safe ? join37(this.context.profileDir, safe) : null;
+    return safe ? join38(this.context.profileDir, safe) : null;
   }
   /**
    * Report machine.status: version + the state of the physic project being served
@@ -47834,7 +48462,7 @@ var WsClient = class {
    */
   uploadLog() {
     try {
-      const upload = readLogUpload(join37(this.context.profileDir, "logs"));
+      const upload = readLogUpload(join38(this.context.profileDir, "logs"));
       if (!upload) return;
       const sig = `${upload.fileName}:${upload.totalBytes}`;
       if (sig === this.lastLogSig) return;
@@ -47996,10 +48624,10 @@ var WsClient = class {
 };
 
 // src/core/instance-lock.ts
-import { readFileSync as readFileSync17, rmSync as rmSync9, writeFileSync as writeFileSync9 } from "fs";
-import { join as join38 } from "path";
+import { readFileSync as readFileSync17, rmSync as rmSync10, writeFileSync as writeFileSync10 } from "fs";
+import { join as join39 } from "path";
 function lockPath(profileDir2) {
-  return join38(profileDir2, "start.lock");
+  return join39(profileDir2, "start.lock");
 }
 function isAlive(pid) {
   try {
@@ -48019,13 +48647,13 @@ function lockHolder(profileDir2) {
 }
 function acquireInstanceLock(profileDir2) {
   if (lockHolder(profileDir2) !== null) return false;
-  writeFileSync9(lockPath(profileDir2), String(process.pid), "utf8");
+  writeFileSync10(lockPath(profileDir2), String(process.pid), "utf8");
   return true;
 }
 function releaseInstanceLock(profileDir2) {
   try {
     const pid = Number.parseInt(readFileSync17(lockPath(profileDir2), "utf8").trim(), 10);
-    if (pid === process.pid) rmSync9(lockPath(profileDir2), { force: true });
+    if (pid === process.pid) rmSync10(lockPath(profileDir2), { force: true });
   } catch {
   }
 }
@@ -48320,8 +48948,8 @@ var SessionBus = class {
 
 // src/core/control-server.ts
 import { createServer } from "net";
-import { chmodSync as chmodSync5, rmSync as rmSync10 } from "fs";
-import { join as join40 } from "path";
+import { chmodSync as chmodSync5, rmSync as rmSync11 } from "fs";
+import { join as join41 } from "path";
 
 // src/core/control-protocol.ts
 var CONTROL_SOCKET_FILE = "control.sock";
@@ -48350,16 +48978,16 @@ function createFrameParser() {
 }
 
 // src/core/control-token.ts
-import { chmodSync as chmodSync4, readFileSync as readFileSync18, writeFileSync as writeFileSync10 } from "fs";
+import { chmodSync as chmodSync4, readFileSync as readFileSync18, writeFileSync as writeFileSync11 } from "fs";
 import { randomBytes as randomBytes3, timingSafeEqual } from "crypto";
-import { join as join39 } from "path";
+import { join as join40 } from "path";
 function controlTokenPath(profileDir2) {
-  return join39(profileDir2, CONTROL_TOKEN_FILE);
+  return join40(profileDir2, CONTROL_TOKEN_FILE);
 }
 function writeControlToken(profileDir2) {
   const token = randomBytes3(32).toString("hex");
   const path = controlTokenPath(profileDir2);
-  writeFileSync10(path, token, { mode: 384 });
+  writeFileSync11(path, token, { mode: 384 });
   try {
     chmodSync4(path, 384);
   } catch {
@@ -48383,9 +49011,9 @@ function tokenMatches(expected, given) {
 
 // src/core/control-server.ts
 function startControlServer(bus, profileDir2, info) {
-  const socketPath = join40(profileDir2, CONTROL_SOCKET_FILE);
+  const socketPath = join41(profileDir2, CONTROL_SOCKET_FILE);
   try {
-    rmSync10(socketPath, { force: true });
+    rmSync11(socketPath, { force: true });
   } catch {
   }
   const clients = /* @__PURE__ */ new Set();
@@ -48476,8 +49104,8 @@ function startControlServer(bus, profileDir2, info) {
     clients.clear();
     server.close();
     try {
-      rmSync10(socketPath, { force: true });
-      rmSync10(controlTokenPath(profileDir2), { force: true });
+      rmSync11(socketPath, { force: true });
+      rmSync11(controlTokenPath(profileDir2), { force: true });
     } catch {
     }
   };
@@ -50456,7 +51084,7 @@ var src_default = Yoga;
 
 // ../../node_modules/.pnpm/ink@5.2.1_@types+react@18.3.31_react@18.3.1/node_modules/ink/build/reconciler.js
 var import_react_reconciler = __toESM(require_react_reconciler(), 1);
-var import_constants12 = __toESM(require_constants2(), 1);
+var import_constants15 = __toESM(require_constants2(), 1);
 import process3 from "process";
 
 // ../../node_modules/.pnpm/ansi-regex@6.2.2/node_modules/ansi-regex/index.js
@@ -51698,7 +52326,7 @@ var reconciler_default = (0, import_react_reconciler.default)({
   scheduleTimeout: setTimeout,
   cancelTimeout: clearTimeout,
   noTimeout: -1,
-  getCurrentEventPriority: () => import_constants12.DefaultEventPriority,
+  getCurrentEventPriority: () => import_constants15.DefaultEventPriority,
   beforeActiveInstanceBlur() {
   },
   afterActiveInstanceBlur() {
@@ -54140,11 +54768,11 @@ var import_react21 = __toESM(require_react(), 1);
 var import_react26 = __toESM(require_react(), 1);
 
 // src/core/input-history.ts
-import { existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync11 } from "fs";
-import { join as join41 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync12 } from "fs";
+import { join as join42 } from "path";
 var MAX_HISTORY = 200;
 function historyPath(profileDir2) {
-  return join41(profileDir2, "input-history.json");
+  return join42(profileDir2, "input-history.json");
 }
 function loadInputHistory(profileDir2) {
   const path = historyPath(profileDir2);
@@ -54161,7 +54789,7 @@ function appendInputHistory(profileDir2, line, current2) {
   if (!trimmed || current2[current2.length - 1] === trimmed) return current2;
   const next = [...current2, trimmed].slice(-MAX_HISTORY);
   try {
-    writeFileSync11(historyPath(profileDir2), JSON.stringify(next), "utf8");
+    writeFileSync12(historyPath(profileDir2), JSON.stringify(next), "utf8");
   } catch {
   }
   return next;
@@ -54758,7 +55386,7 @@ async function runStart(profileDir2, profileName) {
     return;
   }
   logger.configure({
-    dir: join42(profileDir2, "logs"),
+    dir: join43(profileDir2, "logs"),
     level: resolveLogLevel(),
     base: { version: CLI_VERSION, profile: profileName, scope: credential.scope }
   });
@@ -54778,7 +55406,7 @@ async function runStart(profileDir2, profileName) {
   if (result.action === "updated") {
     logger.info("update.updated", { version: result.version });
     console.log(t("start.restarting"));
-    const child = spawn11(process.execPath, process.argv.slice(1), {
+    const child = spawn12(process.execPath, process.argv.slice(1), {
       stdio: "inherit",
       env: { ...process.env, FOURPM_NO_UPDATE: "1" }
     });
@@ -54868,7 +55496,7 @@ async function runStart(profileDir2, profileName) {
 }
 
 // src/commands/attach.ts
-import { join as join43 } from "path";
+import { join as join44 } from "path";
 
 // src/core/control-client.ts
 import { connect as connect2 } from "net";
@@ -54977,7 +55605,7 @@ async function runAttach(profileDir2, profileName) {
     process.exitCode = 1;
     return;
   }
-  const socketPath = join43(profileDir2, CONTROL_SOCKET_FILE);
+  const socketPath = join44(profileDir2, CONTROL_SOCKET_FILE);
   const bus = new SessionBus();
   let conn;
   try {
@@ -55008,11 +55636,11 @@ async function runAttach(profileDir2, profileName) {
 
 // src/commands/auto-run.ts
 import { connect as connect3 } from "net";
-import { join as join44 } from "path";
+import { join as join45 } from "path";
 var AUTO_RUN_TIMEOUT_MS = 3 * 60 * 60 * 1e3;
 async function runAutoRun(profileDir2, profileName) {
   initI18n(readProfileConfig(profileDir2).locale);
-  const socketPath = join44(profileDir2, CONTROL_SOCKET_FILE);
+  const socketPath = join45(profileDir2, CONTROL_SOCKET_FILE);
   const token = readControlToken(profileDir2);
   const code = await new Promise((resolve13) => {
     let settled = false;
@@ -55069,7 +55697,7 @@ async function runAutoRun(profileDir2, profileName) {
 
 // src/commands/git-credential.ts
 import { connect as connect4 } from "net";
-import { join as join45 } from "path";
+import { join as join46 } from "path";
 var REQUEST_TIMEOUT_MS = 2e4;
 function requestToken(host, path) {
   const profileDir2 = process.env[PROFILE_DIR_ENV];
@@ -55084,7 +55712,7 @@ function requestToken(host, path) {
       socket.destroy();
       resolve13(value);
     };
-    const socket = connect4(join45(profileDir2, CONTROL_SOCKET_FILE));
+    const socket = connect4(join46(profileDir2, CONTROL_SOCKET_FILE));
     socket.setEncoding("utf8");
     const timer = setTimeout(() => finish(null), REQUEST_TIMEOUT_MS);
     socket.on("connect", () => {
@@ -55125,7 +55753,8 @@ async function runGitCredential(action) {
   const host = (input.host ?? "").toLowerCase();
   if (input.protocol !== "https" || !host || host !== (process.env[GIT_HOST_ENV] ?? "").toLowerCase()) return;
   const token = await requestToken(host, input.path ?? "");
-  if (token) process.stdout.write(`username=x-access-token
+  const username = (process.env[GIT_HOST_KIND_ENV] ?? "") === "gitlab" ? "oauth2" : "x-access-token";
+  if (token) process.stdout.write(`username=${username}
 password=${token}
 `);
 }
@@ -55138,12 +55767,12 @@ async function runGitToken() {
 }
 
 // src/commands/ai-login.ts
-import { spawn as spawn12 } from "child_process";
+import { spawn as spawn13 } from "child_process";
 import { mkdirSync as mkdirSync10 } from "fs";
 import { basename as basename8 } from "path";
 function runProviderLogin(cmd, envVar, dir2) {
   return new Promise((resolve13) => {
-    const child = spawn12(cmd, [], {
+    const child = spawn13(cmd, [], {
       stdio: "inherit",
       env: { ...process.env, [envVar]: dir2 }
     });
@@ -55188,7 +55817,7 @@ async function runAiLogin(profileDir2, profileName, aiFilter) {
 }
 
 // src/commands/unlink.ts
-import { rmSync as rmSync11 } from "fs";
+import { rmSync as rmSync12 } from "fs";
 async function runUnlink(profileDir2, profileName) {
   initI18n(readProfileConfig(profileDir2).locale);
   const cred = readCredential(profileDir2, profileName);
@@ -55202,7 +55831,7 @@ async function runUnlink(profileDir2, profileName) {
   } catch (err) {
     console.log(t("unlink.revokeFailed", { message: err.message }));
   }
-  rmSync11(profileDir2, { recursive: true, force: true });
+  rmSync12(profileDir2, { recursive: true, force: true });
   clearDefaultProfileIf(profileName);
   console.log(t("unlink.deleted"));
 }