@abelxiaoxing/cadence 2.0.6 → 2.0.8

package/src/service-host.mjs

@@ -3,8 +3,8 @@ import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/service/host.ts
-import { lstatSync as lstatSync10, opendirSync as opendirSync3 } from "node:fs";
-import { join as join17 } from "node:path";
+import { lstatSync as lstatSync11, opendirSync as opendirSync3 } from "node:fs";
+import { join as join18 } from "node:path";
 
 // src/agent-registry.ts
 import { createHash as createHash2 } from "node:crypto";
@@ -14749,7 +14749,7 @@ import {
   randomUUID as randomUUID7,
   timingSafeEqual
 } from "node:crypto";
-import { dirname as dirname7, isAbsolute as isAbsolute4, join as join10 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute4, join as join11 } from "node:path";
 
 // src/service/config.ts
 import { isIP } from "node:net";
@@ -14799,14 +14799,203 @@ function localOrigin(policy, actualPort) {
   return `http://${policy.host === "::1" ? "[::1]" : policy.host}:${actualPort}`;
 }
 
-// src/service/auth.ts
+// src/service/server-config.ts
+import { lstatSync as lstatSync8, realpathSync as realpathSync3, statSync } from "node:fs";
+import { dirname as dirname7, join as join10 } from "node:path";
+
+// skills/_shared/load-config.mjs
+function parseEnvFile(content) {
+  const values = {};
+  const lines = content.replaceAll(`\r
+`, `
+`).replaceAll("\r", `
+`).split(`
+`);
+  for (let index = 0;index < lines.length; index += 1) {
+    const line = lines[index].trim();
+    if (!line || line.startsWith("#"))
+      continue;
+    const separator = line.indexOf("=");
+    if (separator <= 0)
+      throw new Error(`Invalid configuration syntax at line ${index + 1}`);
+    const name = line.slice(0, separator).trim();
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {
+      throw new Error(`Invalid configuration name at line ${index + 1}`);
+    }
+    let value = line.slice(separator + 1).trim();
+    const quote = value[0];
+    if (quote === '"' || quote === "'") {
+      if (value.at(-1) !== quote) {
+        throw new Error(`Unterminated quoted configuration value at line ${index + 1}`);
+      }
+      value = value.slice(1, -1);
+    }
+    values[name] = value;
+  }
+  return values;
+}
+
+// src/service/server-config.ts
+var PORT_KEY = "CADENCE_PORT";
+var TOKEN_KEY = "CADENCE_TOKEN";
+var CONFIG_BYTES = 64 * 1024;
 var TOKEN_BYTES = 1024;
-function token(value) {
+function accessToken(value) {
   const result = text(value, TOKEN_BYTES, true);
   if (utf8Bytes(result) < 32 || /[\p{Cc}\p{Cf}]/u.test(result))
     throw new ContractError("invalid");
   return result;
 }
+class ServerConfigRefusal extends ContractError {
+  path;
+  reason;
+  constructor(path, reason) {
+    super("corrupt-selected");
+    this.path = path;
+    this.reason = reason;
+  }
+}
+
+class Unusable extends Error {
+}
+var unusable = (reason) => {
+  throw new Unusable(reason);
+};
+function syntax(error) {
+  const message = error instanceof Error ? error.message : "";
+  const line = /at line (\d+)$/.exec(message)?.[1];
+  if (!line)
+    return "is not in KEY=value lines";
+  if (message.startsWith("Invalid configuration name"))
+    return `has an invalid name on line ${line} (letters, digits and _ only, no "export")`;
+  if (message.startsWith("Unterminated"))
+    return `has an unterminated quote on line ${line}`;
+  return `has no KEY=value setting on line ${line}`;
+}
+function settings(source) {
+  try {
+    parseEnvFile(source);
+  } catch (error) {
+    unusable(`${syntax(error)}, which the research skills refuse too`);
+  }
+  const parts = source.split(/(\r\n|\r|\n)/);
+  const found = {};
+  for (let at = 0;at < parts.length; at += 2) {
+    const line = parts[at].trim();
+    if (!line || line.startsWith("#"))
+      continue;
+    const separator = line.indexOf("=");
+    const key2 = line.slice(0, separator).trim();
+    const name = key2 === PORT_KEY ? "port" : key2 === TOKEN_KEY ? "token" : undefined;
+    if (!name)
+      continue;
+    const previous = found[name];
+    if (previous)
+      unusable(`sets ${key2} twice (lines ${previous.line} and ${at / 2 + 1}); keep one`);
+    let value = line.slice(separator + 1).trim();
+    if (value[0] === '"' || value[0] === "'")
+      value = value.slice(1, -1);
+    found[name] = { at, line: at / 2 + 1, value };
+  }
+  return { parts, ...found };
+}
+function decode(source) {
+  const { port, token } = settings(source);
+  if (!port)
+    unusable(`has no ${PORT_KEY} line`);
+  if (!token)
+    unusable(`has no ${TOKEN_KEY} line`);
+  const p = port, t = token;
+  const number = Number(p.value);
+  if (!/^[1-9][0-9]{0,4}$/.test(p.value) || number > 65535)
+    unusable(`has ${PORT_KEY} on line ${p.line} that is not a whole number from 1 to 65535`);
+  try {
+    return { port: number, token: accessToken(t.value) };
+  } catch {
+    return unusable(`has ${TOKEN_KEY} on line ${t.line} shorter than 32 characters or with control characters`);
+  }
+}
+var code = (error) => error?.code ?? "error";
+function locate(path) {
+  let real;
+  try {
+    real = realpathSync3(path);
+  } catch (error) {
+    if (code(error) !== "ENOENT")
+      unusable(`cannot be read (${code(error)})`);
+    let link = false;
+    try {
+      link = lstatSync8(path).isSymbolicLink();
+    } catch {}
+    return unusable(link ? "is a link to a file that does not exist" : "does not exist");
+  }
+  return { real, files: new PrivateFiles(dirname7(real), false) };
+}
+function explain(real) {
+  const uid = process.getuid?.();
+  try {
+    const st = lstatSync8(real);
+    if (!st.isFile())
+      return "is not a regular file";
+    if (uid !== undefined && st.uid !== uid)
+      return "is not owned by you";
+    if (uid !== undefined && lstatSync8(dirname7(real)).uid !== uid)
+      return `is in ${dirname7(real)}, which is not owned by you`;
+    if (st.nlink !== 1)
+      return "has more than one hard link";
+    if (st.size > CONFIG_BYTES)
+      return "is larger than 64 KiB";
+    return "changed while Cadence read it; try again";
+  } catch (error) {
+    return `cannot be read (${code(error)})`;
+  }
+}
+function load(path) {
+  const { real, files } = locate(path);
+  let snapshot;
+  try {
+    snapshot = files.read(real, CONFIG_BYTES);
+  } catch {
+    return unusable(explain(real));
+  }
+  if (!snapshot)
+    return unusable("does not exist");
+  let source;
+  try {
+    source = decoded(snapshot);
+  } catch {
+    return unusable("is not UTF-8 text");
+  }
+  return { path, real, files, snapshot, source };
+}
+function decoded(snapshot) {
+  return new TextDecoder("utf-8", { fatal: true }).decode(snapshot.bytes);
+}
+function refusing(path, read2) {
+  try {
+    return read2();
+  } catch (error) {
+    if (error instanceof ServerConfigRefusal)
+      throw error;
+    throw new ServerConfigRefusal(path, error instanceof Unusable ? error.message : `cannot be read (${code(error)})`);
+  }
+}
+function readServerConfig(path) {
+  return refusing(path, () => {
+    const file = load(path);
+    return { ...file, config: decode(file.source) };
+  });
+}
+function withToken(file, token) {
+  const { parts, token: line } = settings(decoded(file.snapshot));
+  if (!line)
+    throw new ContractError("invalid");
+  const indent = /^\s*/.exec(parts[line.at])?.[0] ?? "";
+  parts[line.at] = `${indent}${TOKEN_KEY}=${accessToken(token)}`;
+  return parts.join("");
+}
+
+// src/service/auth.ts
 function sameSecret(candidate, expected) {
   const a = createHash18("sha256").update(candidate).digest();
   const b = createHash18("sha256").update(expected).digest();
@@ -14842,16 +15031,50 @@ function cookieTokens(header, name) {
   return out;
 }
 function sourceConfig(source) {
-  if (source.environment !== undefined && source.tokenFile !== undefined)
+  const given = [source.environment, source.tokenFile, source.serverConfig];
+  if (given.filter((v) => v !== undefined).length > 1)
     throw new ContractError("invalid");
   if (source.environment !== undefined)
-    token(source.environment);
-  if (source.tokenFile !== undefined && (!isAbsolute4(source.tokenFile) || source.tokenFile.includes("\x00")))
+    accessToken(source.environment);
+  if (source.serverConfig !== undefined)
+    accessToken(source.token);
+  const path = source.tokenFile ?? source.serverConfig;
+  if (path !== undefined && (!isAbsolute4(path) || path.includes("\x00")))
     throw new ContractError("invalid");
   return {
     schema: "cadence-service-access-config/1",
-    source: source.environment !== undefined ? "environment" : source.tokenFile !== undefined ? "file" : "generated",
-    path: source.tokenFile ?? null
+    source: source.environment !== undefined ? "environment" : source.tokenFile !== undefined ? "file" : source.serverConfig !== undefined ? "config" : "generated",
+    path: path ?? null
+  };
+}
+function readSource(config) {
+  if (config.source === "file" && config.path)
+    readExternal(config.path);
+}
+function selectedMaterial(files, directory, source) {
+  const config = sourceConfig(source);
+  if (config.source !== "config")
+    throw new ContractError("invalid");
+  const marker2 = join11(directory, "access-config.json"), access = join11(directory, "access.json");
+  const markerFile = files.read(marker2), accessFile = files.read(access);
+  if (!markerFile || !accessFile)
+    throw new ContractError("corrupt-selected");
+  const previous = closed(json(markerFile), ["schema", "source", "path"]);
+  literal(previous.schema, "cadence-service-access-config/1");
+  oneOf(previous.source, ["generated", "environment", "file", "config"]);
+  const r = closed(json(accessFile), ["schema", "generation", "token"]);
+  literal(r.schema, "cadence-service-access/1");
+  const generation = integer(r.generation, 1);
+  if (previous.source === "generated" !== (r.token !== null))
+    throw new ContractError("corrupt-selected");
+  return {
+    config,
+    previous,
+    generation,
+    marker: marker2,
+    markerFile,
+    access,
+    accessFile
   };
 }
 
@@ -14869,17 +15092,14 @@ class AccessMaterial {
   listeners = new Set;
   config;
   static validateSource(source) {
-    const config = sourceConfig(source);
-    if (config.path)
-      readExternal(config.path);
+    readSource(sourceConfig(source));
   }
   static initialize(files, directory, source = {}) {
     const config = sourceConfig(source);
-    const marker2 = join10(directory, "access-config.json"), access = join10(directory, "access.json");
-    if (files.read(marker2) || files.read(access) || files.read(join10(directory, "registration.json")) || files.read(join10(directory, "owner.lock")))
+    const marker2 = join11(directory, "access-config.json"), access = join11(directory, "access.json");
+    if (files.read(marker2) || files.read(access) || files.read(join11(directory, "registration.json")) || files.read(join11(directory, "owner.lock")))
       throw new ContractError("conflict");
-    if (config.path)
-      readExternal(config.path);
+    readSource(config);
     files.create(marker2, encoded(config));
     files.create(access, encoded({
       schema: "cadence-service-access/1",
@@ -14887,13 +15107,27 @@ class AccessMaterial {
       token: config.source === "generated" ? randomBytes3(32).toString("base64url") : null
     }));
   }
+  static validateReselection(files, directory, source) {
+    selectedMaterial(files, directory, source);
+  }
+  static reselect(files, directory, source) {
+    const m = selectedMaterial(files, directory, source);
+    if (encoded(m.previous) === encoded(m.config))
+      return;
+    files.replace(m.marker, m.markerFile, encoded(m.config));
+    files.replace(m.access, m.accessFile, encoded({
+      schema: "cadence-service-access/1",
+      generation: integer(m.generation + 1, 1),
+      token: null
+    }));
+  }
   constructor(files, directory, source = {}, assertOwner) {
     this.files = files;
     this.directory = directory;
     this.assertOwner = assertOwner;
     this.config = sourceConfig(source);
-    const configFile = files.read(join10(directory, "access-config.json"));
-    const accessFile = files.read(join10(directory, "access.json"));
+    const configFile = files.read(join11(directory, "access-config.json"));
+    const accessFile = files.read(join11(directory, "access.json"));
     if (!configFile || !accessFile)
       throw new ContractError("corrupt-selected");
     const c = closed(json(configFile), ["schema", "source", "path"]);
@@ -14903,17 +15137,17 @@ class AccessMaterial {
     this.record = {
       schema: literal(r.schema, "cadence-service-access/1"),
       generation: integer(r.generation, 1),
-      token: r.token === null ? null : token(r.token)
+      token: r.token === null ? null : accessToken(r.token)
     };
     if (this.config.source === "generated" !== (this.record.token !== null))
       throw new ContractError("corrupt-selected");
-    if (this.config.path) {
+    if (this.config.source === "file" && this.config.path) {
       const loaded = readExternal(this.config.path);
       this.external = loaded.files;
       this.externalFile = loaded.file;
       this.secret = loaded.token;
     } else
-      this.secret = token(this.record.token ?? source.environment);
+      this.secret = accessToken(this.record.token ?? source.environment ?? source.token);
     this.configFile = configFile;
     this.accessFile = accessFile;
   }
@@ -14953,9 +15187,9 @@ class AccessMaterial {
   assert() {
     if (this.fenced)
       throw new ContractError("quarantine");
-    this.files.assert(join10(this.directory, "access-config.json"), this.configFile);
-    this.files.assert(join10(this.directory, "access.json"), this.accessFile);
-    if (this.config.path)
+    this.files.assert(join11(this.directory, "access-config.json"), this.configFile);
+    this.files.assert(join11(this.directory, "access.json"), this.accessFile);
+    if (this.config.source === "file" && this.config.path)
       this.external?.assert(this.config.path, this.externalFile, TOKEN_BYTES);
   }
   redactionLiterals() {
@@ -14976,19 +15210,27 @@ class AccessMaterial {
   rotate() {
     if (this.config.source === "environment")
       throw new ContractError("unsupported-context");
+    let configured;
+    if (this.config.source === "config" && this.config.path) {
+      configured = readServerConfig(this.config.path);
+      if (!sameSecret(configured.config.token, this.secret))
+        throw new ContractError("conflict");
+    }
     try {
       this.assertRotation();
       const secret = randomBytes3(32).toString("base64url");
       const generation = integer(this.record.generation + 1, 1);
       if (this.config.path && this.external && this.externalFile)
         this.externalFile = this.external.replace(this.config.path, this.externalFile, secret, TOKEN_BYTES);
+      if (configured)
+        configured.files.replace(configured.real, configured.snapshot, withToken(configured, secret), CONFIG_BYTES);
       const record2 = {
         ...this.record,
         generation,
         token: this.config.source === "generated" ? secret : null
       };
       this.assertRotation();
-      this.accessFile = this.files.replace(join10(this.directory, "access.json"), this.accessFile, encoded(record2));
+      this.accessFile = this.files.replace(join11(this.directory, "access.json"), this.accessFile, encoded(record2));
       this.assertRotation();
       this.record = record2;
       this.secret = secret;
@@ -15003,7 +15245,7 @@ class AccessMaterial {
   }
 }
 function readExternal(path) {
-  const files = new PrivateFiles(dirname7(path));
+  const files = new PrivateFiles(dirname8(path));
   const file = files.read(path, TOKEN_BYTES);
   if (!file)
     throw new ContractError("corrupt-selected");
@@ -15011,7 +15253,7 @@ function readExternal(path) {
     return {
       files,
       file,
-      token: token(new TextDecoder("utf-8", { fatal: true }).decode(file.bytes))
+      token: accessToken(new TextDecoder("utf-8", { fatal: true }).decode(file.bytes))
     };
   } catch {
     throw new ContractError("corrupt-selected");
@@ -15322,9 +15564,9 @@ class AuthNetwork {
 
 // src/service/coordination.ts
 import { randomBytes as randomBytes4, randomUUID as randomUUID8 } from "node:crypto";
-import { opendirSync as opendirSync2, realpathSync as realpathSync3 } from "node:fs";
+import { opendirSync as opendirSync2, realpathSync as realpathSync4 } from "node:fs";
 import { hostname as hostname2 } from "node:os";
-import { dirname as dirname8, isAbsolute as isAbsolute5, join as join11, relative as relative4, sep as sep4 } from "node:path";
+import { dirname as dirname9, isAbsolute as isAbsolute5, join as join12, relative as relative4, sep as sep4 } from "node:path";
 var registrationKeys = [
   "schema",
   "root",
@@ -15450,17 +15692,17 @@ class ServiceCoordination {
   stateHome;
   constructor(workspace, stateHome) {
     this.store = new TaskStore(resolveWorkspace(workspace).root, stateHome);
-    const namespace = dirname8(this.store.privateRoot);
+    const namespace = dirname9(this.store.privateRoot);
     this.files = new PrivateFiles(namespace);
-    this.stateHome = dirname8(namespace);
-    this.directory = join11(this.store.privateRoot, "service-v1");
-    this.registryDirectory = join11(namespace, "service-registry-v1");
+    this.stateHome = dirname9(namespace);
+    this.directory = join12(this.store.privateRoot, "service-v1");
+    this.registryDirectory = join12(namespace, "service-registry-v1");
   }
   path(name) {
-    return join11(this.directory, name);
+    return join12(this.directory, name);
   }
   registryPath(name) {
-    return join11(this.registryDirectory, name);
+    return join12(this.registryDirectory, name);
   }
   registry() {
     if (!this.files.directory(this.registryDirectory))
@@ -15480,7 +15722,7 @@ class ServiceCoordination {
     const o = closed(json(snapshot, REGISTRY_BYTES), ["schema", "entries"]);
     const entries = list(o.entries, REGISTRY_ENTRIES, decodeReservation);
     for (const [i, row] of entries.entries()) {
-      if (row.stateHome !== this.stateHome || realpathSync3(row.root) !== row.root)
+      if (row.stateHome !== this.stateHome || realpathSync4(row.root) !== row.root)
         refused();
       if (entries.slice(0, i).some((other) => rootsOverlap(row.root, other.root) || row.endpoint === other.endpoint))
         refused();
@@ -15508,7 +15750,7 @@ class ServiceCoordination {
       "host-config.json",
       "history-v2"
     ]);
-    this.files.directory(join11(this.directory, "history-v2"), false, walks);
+    this.files.directory(join12(this.directory, "history-v2"), false, walks);
   }
   selected() {
     const walks = new DirectoryWalks;
@@ -15668,7 +15910,7 @@ class ServiceCoordination {
       throw error;
     }
   }
-  acquire(input, resolvedEndpoint = input.endpoint, initializeNew) {
+  acquire(input, resolvedEndpoint = input.endpoint, initializeNew, reselectExisting) {
     const config = decodeOwnerConfig(input);
     const bound = endpoint(resolvedEndpoint);
     if (!endpointMatches(config.endpoint, bound))
@@ -15683,7 +15925,8 @@ class ServiceCoordination {
         throw new ContractError("quarantine");
       if (this.store.inspectLock())
         throw new ContractError("conflict");
-      if (old && old.config.identity !== hash(encoded(config)))
+      const reselect = !!old && old.config.identity !== hash(encoded(config));
+      if (reselect && (!reselectExisting || !old?.hostConfig))
         throw new ContractError("conflict");
       const row = {
         root: this.store.root,
@@ -15700,7 +15943,17 @@ class ServiceCoordination {
         ...registry.value,
         entries: [...registry.value.entries, row]
       }), REGISTRY_BYTES);
-      this.initialize(config);
+      if (old?.hostConfig && reselect && reselectExisting) {
+        reselectExisting(old.hostConfig);
+        const saved = this.files.replace(this.path("config.json"), old.config, encoded(config));
+        this.files.replace(this.path("format.json"), old.manifest, encoded({
+          schema: "cadence-service-format/1",
+          root: this.store.root,
+          stateHome: this.stateHome,
+          configIdentity: saved.identity
+        }));
+      } else
+        this.initialize(config);
       if (!old)
         initializeNew?.();
       const checkout = this.store.acquire();
@@ -16148,10 +16401,10 @@ function decodeSocketInput(value) {
 }
 
 // src/service/http.ts
-function refusal(code = "invalid", uncertain = false) {
+function refusal(code2 = "invalid", uncertain = false) {
   return {
     kind: "error",
-    error: publicError(code, uncertain ? "uncertain" : "none")
+    error: publicError(code2, uncertain ? "uncertain" : "none")
   };
 }
 function fixedHeaders(response) {
@@ -16463,7 +16716,7 @@ Content-Length: 0\r
       }
       if (target2 === "/" && req.method === "GET") {
         res.setHeader("Content-Type", "text/plain; charset=utf-8");
-        res.end("Cadence: enter with the private link that `cadence token-link --workspace <path> --reveal` prints on this machine (the `cadence server install` service uses ~/cadence by default).\n");
+        res.end("Cadence: enter with the private link that `cadence server install` printed, http://127.0.0.1:<CADENCE_PORT>/?token=<CADENCE_TOKEN> from ~/.pi/agent/cadence/.env, or that `cadence token-link --workspace <path> --reveal` prints on this machine.\n");
         return;
       }
       if (target2.startsWith("/local/v1/admin/")) {
@@ -16544,9 +16797,9 @@ Content-Length: 0\r
         unavailable();
       if (route.operation === "session")
         this.attachment(caller);
-      const decoded = decodeHttpOutput(route.operation, value);
+      const decoded2 = decodeHttpOutput(route.operation, value);
       const status = value && typeof value === "object" && "kind" in value && value.kind === "error" && "error" in value ? errorStatus(decodePublicError(value.error).code) : 200;
-      send(res, status, decoded);
+      send(res, status, decoded2);
     } catch (e) {
       if (createdAttachment)
         this.detach(createdAttachment);
@@ -16555,9 +16808,9 @@ Content-Length: 0\r
       if (res.headersSent)
         res.destroy();
       else {
-        const code = e instanceof ContractError ? e.code : "unavailable";
+        const code2 = e instanceof ContractError ? e.code : "unavailable";
         res.setHeader("Connection", "close");
-        send(res, errorStatus(code), refusal(code, dispatched));
+        send(res, errorStatus(code2), refusal(code2, dispatched));
       }
     } finally {
       clearTimeout(timer);
@@ -17033,9 +17286,9 @@ class OwnerModelChoice {
 }
 
 // src/service/model-config.ts
-import { lstatSync as lstatSync8, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname9, isAbsolute as isAbsolute6, join as join12, resolve as resolve3 } from "node:path";
-var CONFIG_BYTES = 1024 * 1024;
+import { lstatSync as lstatSync9, realpathSync as realpathSync5 } from "node:fs";
+import { dirname as dirname10, isAbsolute as isAbsolute6, join as join13, resolve as resolve3 } from "node:path";
+var CONFIG_BYTES2 = 1024 * 1024;
 var ENTRY_LIMIT = 256;
 function refuse2() {
   throw new ContractError("corrupt-selected");
@@ -17092,7 +17345,7 @@ function captureEnvironment(value) {
     if (typeof name !== "string" || !d || !("value" in d) || d.value !== undefined && typeof d.value !== "string")
       refuse2();
     bytes += Buffer.byteLength(name) + Buffer.byteLength(d.value ?? "");
-    if (bytes > CONFIG_BYTES)
+    if (bytes > CONFIG_BYTES2)
       throw new ContractError("oversize");
     out[name] = d.value;
   }
@@ -17101,14 +17354,14 @@ function captureEnvironment(value) {
 function piSource(agentDir, home, cwd, env) {
   if (!isAbsolute6(home) || !isAbsolute6(cwd))
     refuse2();
-  let selected2 = agentDir ?? env.PI_CODING_AGENT_DIR ?? join12(home, ".pi", "agent");
+  let selected2 = agentDir ?? env.PI_CODING_AGENT_DIR ?? join13(home, ".pi", "agent");
   if (!selected2 || selected2.includes("\x00"))
     refuse2();
   if (selected2 === "~" || selected2.startsWith("~/"))
     selected2 = home + selected2.slice(1);
   selected2 = resolve3(cwd, selected2);
-  const directory = join12(realpathSync4(dirname9(selected2)), selected2.slice(dirname9(selected2).length + 1));
-  if (!lstatSync8(directory).isDirectory() || lstatSync8(directory).isSymbolicLink())
+  const directory = join13(realpathSync5(dirname10(selected2)), selected2.slice(dirname10(selected2).length + 1));
+  if (!lstatSync9(directory).isDirectory() || lstatSync9(directory).isSymbolicLink())
     refuse2();
   const files = new PrivateFiles(directory, false);
   if (!files.directory(directory))
@@ -17116,8 +17369,8 @@ function piSource(agentDir, home, cwd, env) {
   return {
     directory,
     files,
-    authPath: join12(directory, "auth.json"),
-    modelsPath: join12(directory, "models.json")
+    authPath: join13(directory, "auth.json"),
+    modelsPath: join13(directory, "models.json")
   };
 }
 function templateNames(value) {
@@ -17396,7 +17649,7 @@ function modelJson(snapshot) {
     } else if (char === '"')
       quoted = true;
   }
-  return parseWireJson(normalized, CONFIG_BYTES);
+  return parseWireJson(normalized, CONFIG_BYTES2);
 }
 function readPiSnapshot(source) {
   const { auth, credentials } = readPiAuth(source);
@@ -17404,11 +17657,11 @@ function readPiSnapshot(source) {
   return { auth, models, credentials, providers };
 }
 function readPiAuth(source) {
-  const auth = source.files.read(source.authPath, CONFIG_BYTES);
+  const auth = source.files.read(source.authPath, CONFIG_BYTES2);
   if (!auth)
     refuse2();
   const credentials = Object.create(null);
-  for (const [provider, input] of Object.entries(data(json(auth, CONFIG_BYTES)))) {
+  for (const [provider, input] of Object.entries(data(json(auth, CONFIG_BYTES2)))) {
     const credential = data(input);
     if (credential.type === "api_key") {
       keys2(credential, ["type", "key", "env"]);
@@ -17430,7 +17683,7 @@ function readPiAuth(source) {
   return { auth, credentials };
 }
 function readPiModels(source) {
-  const models = source.files.read(source.modelsPath, CONFIG_BYTES);
+  const models = source.files.read(source.modelsPath, CONFIG_BYTES2);
   const providers = Object.create(null);
   if (models) {
     const root = data(modelJson(models));
@@ -17554,9 +17807,9 @@ function clonePrivate(value) {
     return out;
   };
   const encoded2 = JSON.stringify(visit(value, 0));
-  if (Buffer.byteLength(encoded2) > CONFIG_BYTES)
+  if (Buffer.byteLength(encoded2) > CONFIG_BYTES2)
     throw new ContractError("oversize");
-  return parseWireJson(encoded2, CONFIG_BYTES);
+  return parseWireJson(encoded2, CONFIG_BYTES2);
 }
 
 // src/service/model-context.ts
@@ -18510,7 +18763,7 @@ class ServiceOwner {
 }
 
 // src/service/runtime.ts
-import { dirname as dirname10, isAbsolute as isAbsolute7, join as join13, resolve as resolve4 } from "node:path";
+import { dirname as dirname11, isAbsolute as isAbsolute7, join as join14, resolve as resolve4 } from "node:path";
 var STARTUP_INPUT_BYTES = 16 * 1024;
 function absolute(value) {
   const result = text(value, 4096, true);
@@ -18530,10 +18783,11 @@ function decodeHostConfig(value) {
   const tokenSource = oneOf(o.tokenSource, [
     "generated",
     "environment",
-    "file"
+    "file",
+    "config"
   ]);
   const tokenFile = o.tokenFile === null ? null : absolute(o.tokenFile);
-  if (o.tokenSource === "file" !== (tokenFile !== null))
+  if ((tokenSource === "file" || tokenSource === "config") !== !!tokenFile)
     throw new ContractError("invalid");
   return {
     schema: literal(o.schema, "cadence-service-host/1"),
@@ -18544,6 +18798,15 @@ function decodeHostConfig(value) {
     tokenFile
   };
 }
+function reselectable(old, next) {
+  const kept = (c) => encoded({
+    ...c,
+    http: { ...c.http, port: 0 },
+    tokenSource: null,
+    tokenFile: null
+  });
+  return next.tokenSource === "config" && kept(old) === kept(next);
+}
 function readHostConfig(c) {
   const owner = c.configuration();
   if (!owner)
@@ -18607,8 +18870,8 @@ function decodeHostInput(value) {
 class StartupRefusal extends ContractError {
   stage;
   quarantined;
-  constructor(code, stage, quarantined = false) {
-    super(code);
+  constructor(code2, stage, quarantined = false) {
+    super(code2);
     this.stage = stage;
     this.quarantined = quarantined;
   }
@@ -18629,13 +18892,13 @@ function startupReport(error) {
 
 // src/service/task-actions.ts
 import { randomUUID as randomUUID15 } from "node:crypto";
-import { realpathSync as realpathSync5 } from "node:fs";
+import { realpathSync as realpathSync6 } from "node:fs";
 
 // src/task-diff.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { createHash as createHash20 } from "node:crypto";
-import { lstatSync as lstatSync9, readdirSync as readdirSync3, readlinkSync } from "node:fs";
-import { join as join14, relative as relative5 } from "node:path";
+import { lstatSync as lstatSync10, readdirSync as readdirSync3, readlinkSync } from "node:fs";
+import { join as join15, relative as relative5 } from "node:path";
 var admin = (path) => path === ".cadence/assistant/tasks" || path.startsWith(".cadence/assistant/tasks/");
 function captureChanges(root) {
   const deadline = Date.now() + 3000;
@@ -18676,8 +18939,8 @@ function captureChanges(root) {
       return;
     }
     try {
-      const path = join14(root, name);
-      const st = lstatSync9(path);
+      const path = join15(root, name);
+      const st = lstatSync10(path);
       add(name, `${st.mode}:${st.size}`);
       if (st.isSymbolicLink()) {
         add(name, readlinkSync(path));
@@ -18812,7 +19075,7 @@ ${data2.toString("utf8")}`);
         return;
       }
       for (const name of names2) {
-        const path = join14(dir, name);
+        const path = join15(dir, name);
         const rel = relative5(root, path).split("\\").join("/");
         if (rel === ".git" || admin(rel))
           continue;
@@ -18821,7 +19084,7 @@ ${data2.toString("utf8")}`);
           break;
         }
         try {
-          const st = lstatSync9(path);
+          const st = lstatSync10(path);
           if (st.isDirectory())
             walk(path, depth + 1);
           else
@@ -19108,9 +19371,9 @@ class ActionAdmission {
     });
   }
   existing(record2, commandId, requested) {
-    const decoded = decodeStoredCommand(record2);
-    const receipt = decoded.receipt;
-    if (receipt.commandId !== commandId || canonicalJson(decoded.identity) !== canonicalJson(requested))
+    const decoded2 = decodeStoredCommand(record2);
+    const receipt = decoded2.receipt;
+    if (receipt.commandId !== commandId || canonicalJson(decoded2.identity) !== canonicalJson(requested))
       return error(publicError("conflict"));
     return ok(receipt);
   }
@@ -19375,7 +19638,7 @@ class ActionAdmission {
 
 // src/service/graph.ts
 import { createHash as createHash21 } from "node:crypto";
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 var hash3 = (text2) => createHash21("sha256").update(text2).digest("hex");
 
 class GraphContext {
@@ -19385,7 +19648,7 @@ class GraphContext {
   identity;
   constructor(root) {
     this.root = root;
-    const bytes = readBounded(join15(root, "AGENTS.md"), 32768);
+    const bytes = readBounded(join16(root, "AGENTS.md"), 32768);
     this.hints = bytes ? new TextDecoder("utf-8", { fatal: true }).decode(bytes) : "";
     this.identity = hash3(canonicalJson({
       hints: bytes === undefined ? null : hash3(bytes),
@@ -19522,7 +19785,7 @@ import { randomUUID as randomUUID14 } from "node:crypto";
 
 // src/subagent-process.ts
 import { spawn } from "node:child_process";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 import { StringDecoder } from "node:string_decoder";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 // src/worker-capture.mjs
@@ -20107,10 +20370,10 @@ class WorkerRecording {
 // src/subagent-process.ts
 function terminateWindowsTree(pid, fallback) {
   const root = process.env.SystemRoot;
-  const taskkill = spawn(root ? join16(root, "System32", "taskkill.exe") : "taskkill.exe", ["/F", "/T", "/PID", String(pid)], { stdio: "ignore", windowsHide: true });
+  const taskkill = spawn(root ? join17(root, "System32", "taskkill.exe") : "taskkill.exe", ["/F", "/T", "/PID", String(pid)], { stdio: "ignore", windowsHide: true });
   taskkill.once("error", fallback);
-  taskkill.once("close", (code) => {
-    if (code !== 0)
+  taskkill.once("close", (code2) => {
+    if (code2 !== 0)
       fallback();
   });
 }
@@ -20260,17 +20523,17 @@ function runProcess(spec) {
         const value = parseCaptureLine(line);
         if (!capture)
           capture = new CaptureState(spec.childRunId ?? decodeCaptureFrame(value).childRunId, spec.expectedRequest);
-        const decoded = capture.accept(value, Buffer.byteLength(line) + 1);
-        if (decoded.event.kind === "ready") {
+        const decoded2 = capture.accept(value, Buffer.byteLength(line) + 1);
+        if (decoded2.event.kind === "ready") {
           ready2 = true;
           spec.onProgress?.("Agent ready");
         }
-        if (decoded.event.kind === "tool-start")
-          spec.onProgress?.(clean(`Tool: ${decoded.event.name}`, 128));
-        if (decoded.event.kind === "final")
+        if (decoded2.event.kind === "tool-start")
+          spec.onProgress?.(clean(`Tool: ${decoded2.event.name}`, 128));
+        if (decoded2.event.kind === "final")
           final = capture.preview;
         if (lease) {
-          spec.recording?.accept(decoded, lease);
+          spec.recording?.accept(decoded2, lease);
           lease = undefined;
         }
       } catch {
@@ -20372,7 +20635,7 @@ function runProcess(spec) {
     child.on("error", () => {
       stopping = "failed";
     });
-    child.on("close", (code, signal) => {
+    child.on("close", (code2, signal) => {
       nativeClosed = true;
       clearTimeout(timeout);
       clearTimeout(killTimer);
@@ -20388,7 +20651,7 @@ function runProcess(spec) {
           }
         }
         output += stderrDecoder.end();
-        finish(true, code, signal);
+        finish(true, code2, signal);
       };
       if (spec.checkRecording) {
         Promise.all([stdoutWork, stderrWork]).then(async () => {
@@ -21641,9 +21904,9 @@ class TaskActions {
       selection: structuredClone(options.selection),
       ownerSecrets: [...options.ownerSecrets]
     };
-    this.cwd = realpathSync5(options.cwd);
+    this.cwd = realpathSync6(options.cwd);
     const config = readHostConfig(options.host.coordination);
-    if (!config || realpathSync5(config.cwd) !== this.cwd)
+    if (!config || realpathSync6(config.cwd) !== this.cwd)
       throw new ContractError("unsupported-context");
     this.launchCwd = config.cwd;
     this.checkEnvironment = options.host.checkEnvironment;
@@ -21759,7 +22022,7 @@ class TaskActions {
     if (this.closed || this.options.host.owner.state !== "idle" || this.options.host.writer.quarantined)
       throw new ContractError("quarantine");
     this.options.host.owner.lease.assert();
-    if (!this.sources.current() || realpathSync5(this.cwd) !== this.cwd || realpathSync5(this.launchCwd) !== this.cwd || this.options.host.checkEnvironment !== this.checkEnvironment)
+    if (!this.sources.current() || realpathSync6(this.cwd) !== this.cwd || realpathSync6(this.launchCwd) !== this.cwd || this.options.host.checkEnvironment !== this.checkEnvironment)
       throw new ContractError("stale");
   }
   choiceSnapshot() {
@@ -21877,7 +22140,7 @@ class TaskActions {
     const selected2 = taskId ? h.coordination.store.loadSnapshot(taskId) : null;
     if (taskId && !selected2)
       throw new ContractError("stale");
-    if (selected2 && realpathSync5(selected2.record.cwd) !== this.cwd)
+    if (selected2 && realpathSync6(selected2.record.cwd) !== this.cwd)
       throw new ContractError("unsupported-context");
     const secrets = this.viewSecrets();
     const roles = this.sources.roles.map(({ role: role2, sha256 }) => ({
@@ -22381,7 +22644,7 @@ class TaskActions {
         this.assertChoice(expected);
         held.assertHeld();
         const actual = h.coordination.store.loadSnapshot(task.id), want = published ?? task;
-        if (!actual || actual.identity !== want.identity || actual.record.revision !== want.revision || realpathSync5(actual.record.cwd) !== this.cwd || this.generation !== expected.checkoutGeneration || h.writer.controlRevision(task.id) !== expected.controlRev + 1 || this.scheduler.activeTask(task.id))
+        if (!actual || actual.identity !== want.identity || actual.record.revision !== want.revision || realpathSync6(actual.record.cwd) !== this.cwd || this.generation !== expected.checkoutGeneration || h.writer.controlRevision(task.id) !== expected.controlRev + 1 || this.scheduler.activeTask(task.id))
           throw new ContractError("stale");
         const changes2 = captureChanges(h.coordination.store.root);
         if (changes2.fingerprint !== expected.observation.identity || changes2.complete !== expected.observation.complete)
@@ -22585,8 +22848,8 @@ function legacy(store, budget, reader) {
       decodeId(entry.name);
       if (created.has(entry.name))
         continue;
-      const path = join17(store.tasks, entry.name, "task.json");
-      const size = lstatSync10(path).size;
+      const path = join18(store.tasks, entry.name, "task.json");
+      const size = lstatSync11(path).size;
       if (size > 128 * 1024)
         throw new ContractError("corrupt-selected");
       budget.reserve(size);
@@ -22632,12 +22895,19 @@ async function createServiceHost(value, sourceBuild) {
   if (resolveWorkspace(input.config.cwd).root !== c.store.root)
     throw new ContractError("conflict");
   const old = readHostConfig(c);
-  if (old && encoded(old) !== encoded(input.config))
+  const reselect = !!old && encoded(old) !== encoded(input.config);
+  if (old && reselect && !reselectable(old, input.config))
+    throw new ContractError("conflict");
+  const configured = input.config.tokenSource === "config" && input.config.tokenFile ? readServerConfig(input.config.tokenFile).config : undefined;
+  if (configured && configured.port !== input.config.http.port)
     throw new ContractError("conflict");
-  const source = input.environmentToken !== null ? { environment: input.environmentToken } : input.config.tokenFile ? { tokenFile: input.config.tokenFile } : {};
+  const source = input.environmentToken !== null ? { environment: input.environmentToken } : configured && input.config.tokenFile ? { serverConfig: input.config.tokenFile, token: configured.token } : input.config.tokenFile ? { tokenFile: input.config.tokenFile } : {};
   AccessMaterial.validateSource(source);
   if (old) {
-    new AccessMaterial(c.files, c.directory, source);
+    if (reselect)
+      AccessMaterial.validateReselection(c.files, c.directory, source);
+    else
+      new AccessMaterial(c.files, c.directory, source);
     const history = HistoryFiles.open(c);
     if (!history)
       throw new ContractError("corrupt-selected");
@@ -22666,7 +22936,12 @@ async function createServiceHost(value, sourceBuild) {
     }, endpoint2, () => {
       c.files.create(c.path("host-config.json"), encoded(resolved));
       AccessMaterial.initialize(c.files, c.directory, source);
-    });
+    }, reselect && old ? (previous) => {
+      if (previous.identity !== hash(encoded(old)))
+        throw new ContractError("conflict");
+      AccessMaterial.reselect(c.files, c.directory, source);
+      c.files.replace(c.path("host-config.json"), previous, encoded(resolved));
+    } : undefined);
     let writer, live;
     owner = new ServiceOwner(lease, {
       quiesce: () => http.quiesce(),