@agent-team-foundation/first-tree-hub 0.12.2 → 0.12.3

package/dist/cli/index.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import "../observability-BAScT_5S-BcW9HgkG.mjs";
-import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as success, b as onboardCreate, c as detectInstallMode, ct as FirstTreeHubSDK, d as startServer, dt as cleanWorkspaces, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as probeCapabilities, g as promptMissingFields, h as promptAddAgent, i as createExecuteUpdate, it as fail, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as SdkError, m as isInteractive, mt as configureClientLoggerForService, o as promptUpdate, ot as ClientOrgMismatchError, p as uploadClientCapabilities, pt as applyClientLoggerConfig, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientUserMismatchError, tt as createOwner, u as installGlobalLatest, ut as SessionRegistry, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-_2M4kfPR.mjs";
+import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as success, b as onboardCreate, c as detectInstallMode, ct as FirstTreeHubSDK, d as startServer, dt as cleanWorkspaces, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as probeCapabilities, g as promptMissingFields, h as promptAddAgent, i as createExecuteUpdate, it as fail, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as SdkError, m as isInteractive, mt as configureClientLoggerForService, o as promptUpdate, ot as ClientOrgMismatchError, p as uploadClientCapabilities, pt as applyClientLoggerConfig, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientUserMismatchError, tt as createOwner, u as installGlobalLatest, ut as SessionRegistry, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-_lNV0Liy.mjs";
 import "../logger-core-BTmvdflj-DjW8FM4T.mjs";
 import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-C_K2CKXC.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch--tiwKm5S.mjs";
@@ -8,7 +8,7 @@ import "../dist-DHHd2dar.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-fLnwqCOs.mjs";
 import "../errors-CF5evtJt-B0NTIVPt.mjs";
 import "../src-DNBS5Yjj.mjs";
-import "../client-DHCSQ8kg-DjlSmE9q.mjs";
+import "../client-D1TDiik_-gxtXN9bj.mjs";
 import "../invitation-Bg0TRiyx-BsZH4GCS.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";

package/dist/{client-WubcgX-W-B2bOvgJ1.mjs → client-0RrgrMjR-DPyuu6Ls.mjs}

@@ -3,5 +3,5 @@ import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
 import "./dist-DHHd2dar.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import "./src-DNBS5Yjj.mjs";
-import { q as listMyPinnedAgents } from "./client-DHCSQ8kg-DjlSmE9q.mjs";
+import { q as listMyPinnedAgents } from "./client-D1TDiik_-gxtXN9bj.mjs";
 export { listMyPinnedAgents };

package/dist/{client-DHCSQ8kg-DjlSmE9q.mjs → client-D1TDiik_-gxtXN9bj.mjs}

@@ -4,7 +4,7 @@ import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n
 import { randomUUID } from "node:crypto";
 import { and, desc, eq, inArray, isNotNull, lt, ne, or, sql } from "drizzle-orm";
 import { bigserial, boolean, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
-//#region ../server/dist/client-DHCSQ8kg.mjs
+//#region ../server/dist/client-D1TDiik_.mjs
 /**
 * Client connections. A client is a single SDK process (AgentRuntime) that may
 * host multiple agents. From the unified-user-token milestone on, a client is
@@ -691,14 +691,6 @@ async function leaveChat(db, chatId, humanAgentId) {
 	return db.select().from(chatParticipants).where(eq(chatParticipants.chatId, chatId));
 }
 async function findOrCreateDirectChat(db, agentAId, agentBId) {
-	const aChats = await db.select({ chatId: chatParticipants.chatId }).from(chatParticipants).where(eq(chatParticipants.agentId, agentAId));
-	const bChats = await db.select({ chatId: chatParticipants.chatId }).from(chatParticipants).where(eq(chatParticipants.agentId, agentBId));
-	const bChatIds = new Set(bChats.map((r) => r.chatId));
-	const commonChatIds = aChats.map((r) => r.chatId).filter((id) => bChatIds.has(id));
-	if (commonChatIds.length > 0) {
-		const directChats = await db.select().from(chats).where(and(inArray(chats.id, commonChatIds), eq(chats.type, "direct"))).orderBy(chats.createdAt, chats.id).limit(1);
-		if (directChats.length > 0 && directChats[0]) return directChats[0];
-	}
 	const ends = await db.select({
 		uuid: agents.uuid,
 		organizationId: agents.organizationId,
@@ -708,12 +700,22 @@ async function findOrCreateDirectChat(db, agentAId, agentBId) {
 	if (!agentA) throw new NotFoundError(`Agent "${agentAId}" not found`);
 	const agentB = ends.find((a) => a.uuid === agentBId);
 	if (!agentB) throw new NotFoundError(`Agent "${agentBId}" not found`);
+	if (agentA.organizationId !== agentB.organizationId) throw new BadRequestError(`Cannot create direct chat across organizations: agent "${agentAId}" (org "${agentA.organizationId}") vs agent "${agentBId}" (org "${agentB.organizationId}")`);
+	const orgId = agentA.organizationId;
+	const aChats = await db.select({ chatId: chatParticipants.chatId }).from(chatParticipants).where(eq(chatParticipants.agentId, agentAId));
+	const bChats = await db.select({ chatId: chatParticipants.chatId }).from(chatParticipants).where(eq(chatParticipants.agentId, agentBId));
+	const bChatIds = new Set(bChats.map((r) => r.chatId));
+	const commonChatIds = aChats.map((r) => r.chatId).filter((id) => bChatIds.has(id));
+	if (commonChatIds.length > 0) {
+		const directChats = await db.select().from(chats).where(and(inArray(chats.id, commonChatIds), eq(chats.type, "direct"), eq(chats.organizationId, orgId))).orderBy(chats.createdAt, chats.id).limit(1);
+		if (directChats.length > 0 && directChats[0]) return directChats[0];
+	}
 	const mode = agentA.type !== "human" && agentB.type !== "human" ? "mention_only" : "full";
 	const chatId = randomUUID();
 	return db.transaction(async (tx) => {
 		const [chat] = await tx.insert(chats).values({
 			id: chatId,
-			organizationId: agentA.organizationId,
+			organizationId: orgId,
 			type: "direct"
 		}).returning();
 		await tx.insert(chatParticipants).values([{

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, ct as FirstTreeHubSDK, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as SdkError, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, y as onboardCheck, z as installClientService } from "./saas-connect-_2M4kfPR.mjs";
+import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, ct as FirstTreeHubSDK, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as SdkError, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, y as onboardCheck, z as installClientService } from "./saas-connect-_lNV0Liy.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
 import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-C_K2CKXC.mjs";
 import { i as blank, s as status } from "./cli-fetch--tiwKm5S.mjs";
@@ -7,6 +7,6 @@ import "./dist-DHHd2dar.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-fLnwqCOs.mjs";
 import "./errors-CF5evtJt-B0NTIVPt.mjs";
 import "./src-DNBS5Yjj.mjs";
-import "./client-DHCSQ8kg-DjlSmE9q.mjs";
+import "./client-D1TDiik_-gxtXN9bj.mjs";
 import "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, runMigrations, startClientService, startServer, status, stopClientService, stopPostgres, uninstallClientService };

package/dist/{saas-connect-_2M4kfPR.mjs → saas-connect-_lNV0Liy.mjs}

@@ -5,7 +5,7 @@ import { a as print, i as blank, n as CLI_USER_AGENT, r as COMMAND_VERSION, s as
 import { $ as loginSchema, A as createAgentSchema, At as updateTaskStatusSchema, B as githubCallbackQuerySchema, C as agentTypeSchema$1, Ct as updateAdapterConfigSchema, D as contextTreeSnapshotSchema, Dt as updateClientCapabilitiesSchema, E as connectTokenExchangeSchema, Et as updateChatSchema, F as createTaskSchema, G as inboxDeliverFrameSchema$1, H as githubStartQuerySchema, I as defaultRuntimeConfigPayload, J as isRedactedEnvValue, K as inboxPollQuerySchema, L as delegateFeishuUserSchema, M as createMeChatSchema, N as createMemberSchema, O as createAdapterConfigSchema, Ot as updateMemberSchema, P as createOrgFromMeSchema, Q as listMeChatsQuerySchema, R as dryRunAgentRuntimeConfigSchema, S as agentRuntimeConfigPayloadSchema$1, St as taskListQuerySchema, T as clientRegisterSchema, Tt as updateAgentSchema, U as imageInlineContentSchema, V as githubDevCallbackQuerySchema, W as inboxAckFrameSchema, X as joinByInvitationSchema, Y as isReservedAgentName$1, Z as linkTaskChatSchema, _ as addParticipantSchema, _t as sessionEventSchema$1, a as AGENT_STATUSES, b as agentBindRequestSchema, bt as stripCode, ct as refreshTokenSchema, d as TASK_CREATOR_TYPES, et as messageSourceSchema$1, f as TASK_HEALTH_SIGNALS, ft as selfServiceFeishuBotSchema, g as addMeChatParticipantsSchema, gt as sessionEventMessageSchema, h as WS_AUTH_FRAME_TIMEOUT_MS, ht as sessionCompletionMessageSchema, i as AGENT_SOURCES, it as patchOnboardingSchema, j as createChatSchema, jt as wsAuthFrameSchema, k as createAdapterMappingSchema, kt as updateOrganizationSchema, l as MENTION_REGEX, lt as runtimeStateMessageSchema, m as TASK_TERMINAL_STATUSES, mt as sendToAgentSchema, n as AGENT_NAME_REGEX$1, nt as onboardingEventSchema, o as AGENT_TYPES, p as TASK_STATUSES, pt as sendMessageSchema, q as isOrgSettingNamespace, r as AGENT_SELECTOR_HEADER$1, rt as paginationQuerySchema, s as AGENT_VISIBILITY, st as rebindAgentSchema, t as AGENT_BIND_REJECT_REASONS, tt as notificationQuerySchema, u as ORG_SETTINGS_NAMESPACES$1, ut as safeRedirectPath, v as adminCreateTaskSchema, vt as sessionReconcileRequestSchema, wt as updateAgentRuntimeConfigSchema, x as agentPinnedMessageSchema$1, xt as submitQuestionAnswerSchema, y as adminUpdateTaskSchema, yt as sessionStateMessageSchema } from "./dist-DHHd2dar.mjs";
 import { a as ConflictError, c as UnauthorizedError, i as ClientUserMismatchError$1, l as organizations, n as BadRequestError, o as ForbiddenError, r as ClientOrgMismatchError$1, s as NotFoundError, t as AppError, u as users } from "./errors-CF5evtJt-B0NTIVPt.mjs";
 import { n as init_esm, r as trace, t as esm_exports } from "./esm-iadMkGbV.mjs";
-import { $ as pendingQuestions, A as heartbeatClient, B as listAgentsWithRuntime, C as findOrCreateDirectChat, D as getClient, E as getChatDetail, F as joinChat, G as listClientsForOrgAdmin, H as listChats, I as leaveAsParticipant, J as markStaleAgents, K as listMessages, L as leaveChat, M as inboxEntries, N as invalidateChatAudience, O as getOnlineCount, P as joinAsParticipant, Q as notifyRecipients, R as listActiveAgentsPinnedToClient, S as ensureParticipant$1, T as getCachedAudience, U as listChatsForMember, V as listChatParticipantsWithNames, W as listClients, X as members, Y as markSupersededByChat, Z as messages, _ as createNotifier, _t as updateClientCapabilities, a as agents, at as removeParticipant, b as editMessage, c as bindAgent, ct as retireClient, d as chats, dt as serverInstances, et as recomputeChatWatchers, f as claimClient, ft as setOffline, g as createChat, gt as unbindAgent, h as clients, ht as touchAgent, i as agentVisibilityCondition, it as registerClient, j as heartbeatInstance, k as getPresence, l as chatParticipants, lt as sendMessage, m as cleanupStalePresence, mt as submitAnswer, n as agentChatSessions, nt as recomputeWatchersForMember, o as assertClientOwner, ot as resetActivity, p as cleanupStaleClients, pt as setRuntimeState, r as agentPresence, rt as registerChatMessageDispatcher, s as assertParticipant, st as resolveChatMembership, t as addParticipant, tt as recomputeWatchersForAgent, u as chatSubscriptions, ut as sendToAgent$1, v as deriveAuthState, vt as upsertSessionState, w as getActivityOverview, x as ensureCanJoin, y as disconnectClient, z as listAgentsManagedByUser } from "./client-DHCSQ8kg-DjlSmE9q.mjs";
+import { $ as pendingQuestions, A as heartbeatClient, B as listAgentsWithRuntime, C as findOrCreateDirectChat, D as getClient, E as getChatDetail, F as joinChat, G as listClientsForOrgAdmin, H as listChats, I as leaveAsParticipant, J as markStaleAgents, K as listMessages, L as leaveChat, M as inboxEntries, N as invalidateChatAudience, O as getOnlineCount, P as joinAsParticipant, Q as notifyRecipients, R as listActiveAgentsPinnedToClient, S as ensureParticipant$1, T as getCachedAudience, U as listChatsForMember, V as listChatParticipantsWithNames, W as listClients, X as members, Y as markSupersededByChat, Z as messages, _ as createNotifier, _t as updateClientCapabilities, a as agents, at as removeParticipant, b as editMessage, c as bindAgent, ct as retireClient, d as chats, dt as serverInstances, et as recomputeChatWatchers, f as claimClient, ft as setOffline, g as createChat, gt as unbindAgent, h as clients, ht as touchAgent, i as agentVisibilityCondition, it as registerClient, j as heartbeatInstance, k as getPresence, l as chatParticipants, lt as sendMessage, m as cleanupStalePresence, mt as submitAnswer, n as agentChatSessions, nt as recomputeWatchersForMember, o as assertClientOwner, ot as resetActivity, p as cleanupStaleClients, pt as setRuntimeState, r as agentPresence, rt as registerChatMessageDispatcher, s as assertParticipant, st as resolveChatMembership, t as addParticipant, tt as recomputeWatchersForAgent, u as chatSubscriptions, ut as sendToAgent$1, v as deriveAuthState, vt as upsertSessionState, w as getActivityOverview, x as ensureCanJoin, y as disconnectClient, z as listAgentsManagedByUser } from "./client-D1TDiik_-gxtXN9bj.mjs";
 import { a as invitationRedemptions, c as recordRedemption, i as getActiveInvitation, l as rotateInvitation, n as ensureActiveInvitation, o as invitations, r as findActiveByToken, t as buildInviteUrl, u as uuidv7 } from "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
 import { createRequire } from "node:module";
 import { ZodError, z } from "zod";
@@ -2948,8 +2948,6 @@ function installFirstTreeIntegration(options) {
 	const integrateArgs = [
 		"tree",
 		"integrate",
-		"--source-path",
-		workspacePath,
 		"--tree-path",
 		contextTreePath,
 		"--mode",
@@ -2984,8 +2982,13 @@ function installFirstTreeIntegration(options) {
 		} catch (err) {
 			const msg = err instanceof Error ? err.message : String(err);
 			const binaryMissing = /ENOENT|not found|command not found/i.test(msg);
+			const unsupportedByThisCli = /unknown (?:option|command|argument)|unrecognized option/i.test(msg);
+			const shouldRetry = binaryMissing || unsupportedByThisCli;
 			const isLastAttempt = index === attempts.length - 1;
-			if (binaryMissing && !isLastAttempt) continue;
+			if (shouldRetry && !isLastAttempt) {
+				log(`First-tree integration via ${attempt.label} unusable; falling back: ${msg.slice(0, 200)}`);
+				continue;
+			}
 			log(`First-tree integration skipped (${attempt.label}): ${msg.slice(0, 200)}`);
 			return false;
 		}
@@ -4608,6 +4611,8 @@ const createClaudeCodeHandler = (config) => {
 		}
 	}
 	const contextTreePath = config.contextTreePath ?? null;
+	const contextTreeRepoUrl = config.contextTreeRepoUrl ?? null;
+	const agentName = config.agentName ?? null;
 	/**
 	* Materialise the runtime config's `gitRepos` into worktrees under `cwd`.
 	* Idempotent across resumes: reuses an existing Hub-managed worktree if
@@ -4675,7 +4680,8 @@ const createClaudeCodeHandler = (config) => {
 		if (contextTreePath) installFirstTreeIntegration({
 			workspacePath: workspace,
 			contextTreePath,
-			workspaceId: sessionCtx.chatId,
+			workspaceId: agentName ?? sessionCtx.chatId,
+			treeRepoUrl: contextTreeRepoUrl ?? void 0,
 			log: (msg) => sessionCtx.log(msg)
 		});
 	}
@@ -4864,6 +4870,8 @@ const createCodexHandler = (config) => {
 	const agentConfigCache = config.agentConfigCache ?? null;
 	const gitMirrorManager = config.gitMirrorManager ?? null;
 	const contextTreePath = config.contextTreePath ?? null;
+	const contextTreeRepoUrl = config.contextTreeRepoUrl ?? null;
+	const agentName = config.agentName ?? null;
 	let cwd = null;
 	let codex = null;
 	let thread = null;
@@ -5135,6 +5143,17 @@ const createCodexHandler = (config) => {
 		if (inputs.length === 0) return;
 		await runTurn(inputs.join("\n\n"), sessionCtx);
 	}
+	/** Install the first-tree skill + binding block; no-op when context tree is unconfigured. */
+	function ensureFirstTreeBinding(workspace, sessionCtx) {
+		if (!contextTreePath) return;
+		installFirstTreeIntegration({
+			workspacePath: workspace,
+			contextTreePath,
+			workspaceId: agentName ?? sessionCtx.chatId,
+			treeRepoUrl: contextTreeRepoUrl ?? void 0,
+			log: (msg) => sessionCtx.log(msg)
+		});
+	}
 	return {
 		async start(message, sessionCtx) {
 			ctx = sessionCtx;
@@ -5160,6 +5179,7 @@ const createCodexHandler = (config) => {
 					content: buildAgentBriefing(payload)
 				}
 			});
+			ensureFirstTreeBinding(cwd, sessionCtx);
 			await prepareGitWorktrees(payload, cwd, sessionCtx.chatId);
 			codex = new Codex({
 				env: buildEnv(sessionCtx),
@@ -5184,17 +5204,20 @@ const createCodexHandler = (config) => {
 				env: [],
 				gitRepos: []
 			};
-			bootstrapWorkspace({
-				workspacePath: cwd,
-				identity: sessionCtx.agent,
-				contextTreePath,
-				serverUrl: sessionCtx.sdk.serverUrl,
-				chatId: sessionCtx.chatId,
-				briefing: {
-					format: "agents-md",
-					content: buildAgentBriefing(payload)
-				}
-			});
+			if (!existsSync(join(cwd, ".agent", "identity.json"))) {
+				bootstrapWorkspace({
+					workspacePath: cwd,
+					identity: sessionCtx.agent,
+					contextTreePath,
+					serverUrl: sessionCtx.sdk.serverUrl,
+					chatId: sessionCtx.chatId,
+					briefing: {
+						format: "agents-md",
+						content: buildAgentBriefing(payload)
+					}
+				});
+				ensureFirstTreeBinding(cwd, sessionCtx);
+			}
 			await prepareGitWorktrees(payload, cwd, sessionCtx.chatId);
 			codex = new Codex({
 				env: buildEnv(sessionCtx),
@@ -6227,7 +6250,7 @@ var AgentSlot = class {
 			lastActivityMs: 0
 		};
 	}
-	async start(contextTreePath) {
+	async start(contextTreeBinding) {
 		const sdk = (await this.clientConnection.bindAgent(this.config.agentId, this.config.runtimeType ?? this.config.type, this.config.runtimeVersion)).sdk;
 		this.sdk = sdk;
 		const agent = await sdk.register();
@@ -6305,7 +6328,9 @@ var AgentSlot = class {
 			handlerFactory: this.config.handlerFactory,
 			handlerConfig: {
 				workspaceRoot: join(DEFAULT_DATA_DIR, "workspaces", this.config.name),
-				contextTreePath: contextTreePath ?? void 0,
+				agentName: this.config.name,
+				contextTreePath: contextTreeBinding?.path,
+				contextTreeRepoUrl: contextTreeBinding?.repoUrl,
 				gitMirrorManager
 			},
 			agentIdentity: {
@@ -10242,7 +10267,7 @@ function createFeedbackHandler(config) {
 	return { handle };
 }
 //#endregion
-//#region ../server/dist/app-CkYiQS_D.mjs
+//#region ../server/dist/app-BXdU2BzM.mjs
 var import_fastify_opentelemetry = /* @__PURE__ */ __toESM(require_fastify_opentelemetry(), 1);
 init_esm();
 var __defProp = Object.defineProperty;
@@ -11007,6 +11032,28 @@ async function resolveAgentClient(db, data) {
 	return client.id;
 }
 /**
+* Validate a `delegateMention` write at the service layer. Two checks:
+*   1. Target uuid must resolve to an existing agent — dangling references
+*      would silently break webhook delegation at runtime.
+*   2. Target must belong to the same organization as the source agent —
+*      cross-org delegate links are rejected here at the source so the
+*      database never accumulates dirty rows. The webhook router has a
+*      defense-in-depth check that filters them at fan-out time, but this
+*      keeps the data clean and gives the admin UI an immediate 422 instead
+*      of a silent runtime drop.
+*
+* `null` clears the field — handled by the caller; we are only invoked when
+* the caller wrote a non-null uuid.
+*/
+async function validateDelegateMentionTarget(db, targetUuid, sourceOrgId) {
+	const [target] = await db.select({
+		uuid: agents.uuid,
+		organizationId: agents.organizationId
+	}).from(agents).where(eq(agents.uuid, targetUuid)).limit(1);
+	if (!target) throw new BadRequestError(`delegateMention target "${targetUuid}" not found`);
+	if (target.organizationId !== sourceOrgId) throw new BadRequestError("delegateMention target must belong to the same organization as the agent");
+}
+/**
 * Pick the first admin member in the org for internal system agents. Throws
 * if the org has no admin — the caller should surface the error so an admin
 * is created before the system tries to register more agents.
@@ -11046,6 +11093,7 @@ async function createAgent(db, data, options = {}) {
 		type: data.type
 	});
 	await ensureClientSupportsRuntimeProvider(db, clientId, runtimeProvider, { force: options.force });
+	if (data.delegateMention) await validateDelegateMentionTarget(db, data.delegateMention, orgId);
 	const [org] = await db.select({ maxAgents: organizations.maxAgents }).from(organizations).where(eq(organizations.id, orgId)).limit(1);
 	if (org && org.maxAgents > 0) {
 		if (((await db.select({ value: count() }).from(agents).where(and(eq(agents.organizationId, orgId), ne(agents.status, AGENT_STATUSES.DELETED))))[0]?.value ?? 0) >= org.maxAgents) throw new ForbiddenError(`Organization "${orgId}" has reached its agent limit (${org.maxAgents}). Upgrade your plan or delete unused agents.`);
@@ -11192,7 +11240,10 @@ async function updateAgent(db, uuid, data) {
 	const updates = { updatedAt: /* @__PURE__ */ new Date() };
 	if (data.type !== void 0) updates.type = data.type;
 	if (data.displayName !== void 0) updates.displayName = data.displayName;
-	if (data.delegateMention !== void 0) updates.delegateMention = data.delegateMention;
+	if (data.delegateMention !== void 0) {
+		if (data.delegateMention !== null) await validateDelegateMentionTarget(db, data.delegateMention, agent.organizationId);
+		updates.delegateMention = data.delegateMention;
+	}
 	if (data.visibility !== void 0) updates.visibility = data.visibility;
 	if (data.metadata !== void 0) updates.metadata = data.metadata;
 	if (data.managerId !== void 0) {
@@ -13779,7 +13830,7 @@ async function agentRoutes(app) {
 	});
 	app.post("/:uuid/test", async (request, reply) => {
 		const { uuid } = request.params;
-		await requireAgentAccess(request, app.db, "manage");
+		const { agent: targetAgent } = await requireAgentAccess(request, app.db, "manage");
 		const presence = await getPresence(app.db, uuid);
 		const wsConnected = hasActiveConnection(uuid);
 		const clientId = getAgentClientId(uuid) ?? presence?.clientId ?? null;
@@ -13816,15 +13867,15 @@ async function agentRoutes(app) {
 			message: "Agent connection is stale — heartbeat lost. The client process may have crashed.",
 			connection
 		});
-		const [owner] = await app.db.select({ uuid: agents.uuid }).from(agents).where(and(eq(agents.delegateMention, uuid), eq(agents.status, "active"))).limit(1);
+		const [owner] = await app.db.select({ uuid: agents.uuid }).from(agents).where(and(eq(agents.delegateMention, uuid), eq(agents.status, "active"), eq(agents.organizationId, targetAgent.organizationId))).limit(1);
 		let senderId = owner?.uuid ?? null;
 		if (!senderId) {
-			const [other] = await app.db.select({ uuid: agents.uuid }).from(agents).where(and(ne(agents.uuid, uuid), eq(agents.status, "active"))).limit(1);
+			const [other] = await app.db.select({ uuid: agents.uuid }).from(agents).where(and(ne(agents.uuid, uuid), eq(agents.status, "active"), eq(agents.organizationId, targetAgent.organizationId))).limit(1);
 			senderId = other?.uuid ?? null;
 		}
 		if (!senderId) return reply.status(200).send({
 			status: "error",
-			message: "No suitable sender found. Need at least one other active agent.",
+			message: "No suitable sender found. Need at least one other active agent in the same organization.",
 			connection
 		});
 		const chat = await findOrCreateDirectChat(app.db, senderId, uuid);
@@ -15017,7 +15068,7 @@ function decodeCursor(cursor) {
 *   - Cursor narrows the result to rows STRICTLY before `(cursor.ts, cursor.id)`.
 *   - Followed by a small participant-list lookup for the page only.
 */
-async function listMeChats(db, humanAgentId, query) {
+async function listMeChats(db, humanAgentId, organizationId, query) {
 	const limit = query.limit;
 	const cursor = query.cursor ? decodeCursor(query.cursor) : null;
 	if (query.cursor && !cursor) throw new BadRequestError("Invalid cursor");
@@ -15058,6 +15109,11 @@ async function listMeChats(db, humanAgentId, query) {
       FROM chats c
       JOIN deduped d ON d.chat_id = c.id
      WHERE c.parent_chat_id IS NULL
+       /* Scope to the caller's org. Without this, cross-org dirty chats
+          whose chat_participants still reference the caller's human agent
+          (historical pollution — see fix/cross-org-direct-chat-pollution)
+          would leak into the list and 404 on click via requireChatAccess. */
+       AND c.organization_id = ${organizationId}
        /* Filter: unread / watching */
        AND (${!filterUnreadOnly}::bool OR d.unread_mention_count > 0)
        AND (${!filterWatchingOnly}::bool OR d.membership_kind = 'watching')
@@ -16077,17 +16133,17 @@ function isGithubHttpsRepo(repoUrl) {
 }
 function contextStatus(warning) {
 	if (warning?.stale) return {
-		label: "Team context is stale",
+		label: "Context Tree may be stale",
 		detail: warning.detail,
 		severity: "warning"
 	};
 	if (warning) return {
-		label: "Team context needs attention",
+		label: "Context Tree needs attention",
 		detail: warning.detail,
 		severity: "warning"
 	};
 	return {
-		label: "Team context is current",
+		label: "Context Tree is up to date",
 		detail: "Agents have a synced team context snapshot available.",
 		severity: "ok"
 	};
@@ -17018,7 +17074,7 @@ async function meRoutes(app) {
 	*/
 	app.get("/me/pinned-agents", async (request) => {
 		const { userId } = requireUser(request);
-		const { listMyPinnedAgents } = await import("./client-WubcgX-W-B2bOvgJ1.mjs");
+		const { listMyPinnedAgents } = await import("./client-0RrgrMjR-DPyuu6Ls.mjs");
 		return listMyPinnedAgents(app.db, { userId });
 	});
 	/**
@@ -17451,7 +17507,7 @@ async function orgChatRoutes(app) {
 		}
 		if (view === "grouped") return listChatsForMember(app.db, scope.memberId, scope.humanAgentId);
 		const query = listMeChatsQuerySchema.parse(request.query);
-		return listMeChats(app.db, scope.humanAgentId, query);
+		return listMeChats(app.db, scope.humanAgentId, scope.organizationId, query);
 	});
 	/**
 	* POST /orgs/:orgId/chats — create a new chat. The :orgId path param
@@ -18187,6 +18243,31 @@ function extractMentions$1(text) {
 	}
 	return [...names];
 }
+/** Extract mentions from structural payload fields (not free-form text).
+* GitHub's `pull_request.review_requested` puts the targeted reviewer in
+* `requested_reviewer.login`, not in any text body — `extractMentions` would
+* miss it. Team requests use `requested_team` instead, which we deliberately
+* skip to stay consistent with `extractMentions` ignoring `@org/team`. */
+function extractStructuralMentions(eventType, payload) {
+	if (!isRecord(payload)) return [];
+	if (eventType !== "pull_request") return [];
+	if (payload.action !== "review_requested") return [];
+	const reviewer = isRecord(payload.requested_reviewer) ? payload.requested_reviewer : null;
+	const login = typeof reviewer?.login === "string" ? reviewer.login : null;
+	return login ? [login.toLowerCase()] : [];
+}
+const DELEGATE_VERDICT_MESSAGES = {
+	ok: "delegate_mention target eligible",
+	not_found: "delegate_mention target not found, skipping",
+	cross_org: "delegate_mention target belongs to another org, skipping",
+	inactive: "delegate_mention target not active, skipping"
+};
+function evaluateDelegateTarget(target, sourceOrgId) {
+	if (!target) return "not_found";
+	if (target.organizationId !== sourceOrgId) return "cross_org";
+	if (target.status !== "active") return "inactive";
+	return "ok";
+}
 /**
 * Route @mentions to delegate agents.
 * For each mentioned user who has delegate_mention configured,
@@ -18205,13 +18286,19 @@ async function routeMentionDelegations(app, organizationId, mentionedNames, ctx)
 		if (agent.status !== "active" || !agent.delegateMention) continue;
 		const [target] = await app.db.select({
 			id: agents.uuid,
-			status: agents.status
+			status: agents.status,
+			organizationId: agents.organizationId
 		}).from(agents).where(eq(agents.uuid, agent.delegateMention)).limit(1);
-		if (!target || target.status !== "active") {
+		const verdict = evaluateDelegateTarget(target, organizationId);
+		if (verdict !== "ok") {
 			log$1.warn({
 				targetAgent: agent.delegateMention,
-				sourceAgent: agent.name
-			}, "delegate_mention target not active, skipping");
+				sourceAgent: agent.name,
+				sourceOrg: organizationId,
+				targetOrg: target?.organizationId,
+				targetStatus: target?.status,
+				verdict
+			}, DELEGATE_VERDICT_MESSAGES[verdict]);
 			continue;
 		}
 		try {
@@ -18222,6 +18309,7 @@ async function routeMentionDelegations(app, organizationId, mentionedNames, ctx)
 					type: "github_mention",
 					mentionedUser: agent.name,
 					event: ctx.event,
+					action: ctx.action,
 					repository: ctx.repository,
 					sender: ctx.sender,
 					title: ctx.title,
@@ -18231,7 +18319,8 @@ async function routeMentionDelegations(app, organizationId, mentionedNames, ctx)
 				metadata: {
 					source: "github",
 					event: "mention_delegation",
-					mentionedUser: agent.name
+					mentionedUser: agent.name,
+					action: ctx.action
 				}
 			});
 			notifyRecipients(app.notifier, recipients, msg.id);
@@ -18388,12 +18477,14 @@ function extractEventContext(eventType, payload) {
 	const sender = isRecord(payload.sender) ? payload.sender : null;
 	const repository = typeof repo?.full_name === "string" ? repo.full_name : "";
 	const senderLogin = typeof sender?.login === "string" ? sender.login : "";
+	const action = typeof payload.action === "string" ? payload.action : void 0;
 	switch (eventType) {
 		case "issues": {
 			const issue = isRecord(payload.issue) ? payload.issue : null;
 			if (!issue) return null;
 			return {
 				event: "issues",
+				action,
 				repository,
 				sender: senderLogin,
 				title: `Issue #${issue.number}: ${issue.title}`,
@@ -18407,6 +18498,7 @@ function extractEventContext(eventType, payload) {
 			if (!issue || !comment) return null;
 			return {
 				event: "issue_comment",
+				action,
 				repository,
 				sender: senderLogin,
 				title: `Issue #${issue.number}: ${issue.title}`,
@@ -18419,6 +18511,7 @@ function extractEventContext(eventType, payload) {
 			if (!pr) return null;
 			return {
 				event: "pull_request",
+				action,
 				repository,
 				sender: senderLogin,
 				title: `PR #${pr.number}: ${pr.title}`,
@@ -18432,6 +18525,7 @@ function extractEventContext(eventType, payload) {
 			if (!pr || !review) return null;
 			return {
 				event: "pull_request_review",
+				action,
 				repository,
 				sender: senderLogin,
 				title: `PR #${pr.number}: ${pr.title}`,
@@ -18445,6 +18539,7 @@ function extractEventContext(eventType, payload) {
 			if (!pr || !comment) return null;
 			return {
 				event: "pull_request_review_comment",
+				action,
 				repository,
 				sender: senderLogin,
 				title: `PR #${pr.number}: ${pr.title}`,
@@ -18457,6 +18552,7 @@ function extractEventContext(eventType, payload) {
 			if (!disc) return null;
 			return {
 				event: "discussion",
+				action,
 				repository,
 				sender: senderLogin,
 				title: typeof disc.title === "string" ? disc.title : "",
@@ -18470,6 +18566,7 @@ function extractEventContext(eventType, payload) {
 			if (!disc || !comment) return null;
 			return {
 				event: "discussion_comment",
+				action,
 				repository,
 				sender: senderLogin,
 				title: typeof disc.title === "string" ? disc.title : "",
@@ -18482,6 +18579,7 @@ function extractEventContext(eventType, payload) {
 			if (!comment) return null;
 			return {
 				event: "commit_comment",
+				action,
 				repository,
 				sender: senderLogin,
 				title: "Commit comment",
@@ -18497,16 +18595,26 @@ function extractEventContext(eventType, payload) {
 * Only called after action gating confirms this is a "new content" event.
 */
 async function handleMentionDelegation(app, organizationId, eventType, payload) {
-	const mentions = extractMentions$1(extractEventText(eventType, payload));
+	const textMentions = extractMentions$1(extractEventText(eventType, payload));
+	const structuralMentions = extractStructuralMentions(eventType, payload);
+	const mentions = [...new Set([...textMentions, ...structuralMentions])];
 	const mentionCtx = extractEventContext(eventType, payload);
 	if (mentions.length > 0 && mentionCtx) return routeMentionDelegations(app, organizationId, mentions, mentionCtx);
 	return 0;
 }
-/** Actions that represent new/changed content (worth scanning for @mentions). */
+/** Actions that represent new/changed content (worth scanning for @mentions).
+* Note: `pull_request.review_requested` doesn't carry an @mention in any
+* text body — the reviewer is in `requested_reviewer.login`. We pick it up
+* via `extractStructuralMentions`. The complementary `review_request_removed`
+* is intentionally omitted to avoid notifying the reviewer twice. */
 const MENTION_ACTIONS = {
 	issues: ["opened", "edited"],
 	issue_comment: ["created"],
-	pull_request: ["opened", "edited"],
+	pull_request: [
+		"opened",
+		"edited",
+		"review_requested"
+	],
 	pull_request_review: ["submitted"],
 	pull_request_review_comment: ["created"],
 	discussion: ["created", "edited"],