@agentproto/runtime 5.7.0 → 5.9.0

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import { execFile, spawn, execFileSync } from 'child_process';
 import { readFile, unlink, mkdir, writeFile, readdir, stat, readlink, chmod, mkdtemp, rm, rename, copyFile, realpath, appendFile, open, access } from 'fs/promises';
 import { homedir, freemem, loadavg, totalmem, cpus, hostname, tmpdir } from 'os';
-import { join, resolve, dirname, basename, isAbsolute, normalize as normalize$1, relative, sep, extname, delimiter } from 'path';
+import { join, resolve, dirname, isAbsolute, basename, normalize as normalize$1, relative, sep, extname, delimiter } from 'path';
 import { canonicalizePath, resolveCommandSandbox, loadAdapterSpawnSandboxConfig, loadSandboxConfig, COMMAND_SANDBOX_MODE_ENV } from '@agentproto/command-sandbox';
 import { ensureChromeDevtoolsMcp, resolveChrome, buildHeadlessBrowserMcpEntry, headlessBrowserReadPaths } from '@agentproto/plugin-local-browser';
 import { resolvePricing, getModelProvider, resolveContextWindow, formatTokens, LLM_PRICING_CATALOG, resolvePricingExact, splitContextWindowHint, MODEL_ALIASES, isKnownLlmId } from '@agentproto/model-catalog/llm';
 import { randomBytes, randomUUID, timingSafeEqual, createHmac, createHash } from 'crypto';
-import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, existsSync, mkdtempSync, chmodSync, openSync, closeSync, fstatSync, readSync, realpathSync, statSync, cpSync, appendFileSync, createWriteStream } from 'fs';
+import { createReadStream, promises, readFileSync, mkdirSync, writeFileSync, renameSync, readdirSync, openSync, fstatSync, readSync, closeSync, existsSync, statSync, mkdtempSync, chmodSync, realpathSync, cpSync, appendFileSync, createWriteStream } from 'fs';
 import { createInterface } from 'readline';
 import * as providers_store_star from '@agentproto/providers-store';
 import { resolveCustomRoute, registerCustomRoute, formatModelRef, resolveLlmModelRoute, tryParseModelRef, stripRouteSuffix, stripFixedNativeVendor } from '@agentproto/model-catalog/route-identity';
@@ -29,7 +29,7 @@ import { SandboxSpecSchema, resolveLifecyclePolicy, createSandboxAgentSessionHos
 import { APP_UI_DISCOVERY_TOOLS, RUNNER_SELECT_SCRIPT } from '@agentproto/app-client/runner-select';
 import { DISPLAY_MODE_SCRIPT } from '@agentproto/app-client/display-mode';
 import { defineTool, catchErrors, ToolError, pageParamsShape, paginated, toToolResult, paginate, toolText } from '@agentproto/tool';
-import { toMcpTool, createMcpServer, registerBuiltinTool, registerUiResource } from '@agentproto/mcp-server';
+import { toMcpTool, createMcpServer, registerBuiltinTool, registerUiResource, registerEventsMethods } from '@agentproto/mcp-server';
 import { SESSION_CHAT_APP_ID, liveSessionApp, makeLiveSessionApp, sessionsPanelApp, agentsOverviewApp, bureauSessionsApp, sessionStoryApp, workBoardApp, reviewPanelApp, makeSessionsPanelApp, makeAgentsOverviewApp, makeBureauSessionsApp, makeSessionStoryPanelApp, makeSessionChatApp, makeWorkBoardApp, makeReviewPanelApp, sessionChatApp } from '@agentproto/apps';
 import { EventEmitter } from 'events';
 import { inferLegacyModeKind, parseModelSwitchCommand, isModelSwitchAcknowledgement } from '@agentproto/driver-agent-cli';
@@ -2827,7 +2827,7 @@ function tokenizeCommand(s) {
   if (buf) out.push(buf);
   return out;
 }
-var RESUME_STRATEGIES, RESUME_ID_REJECTED_RE;
+var RESUME_STRATEGIES, RESUME_ID_REJECTED_RE, RESUME_CONNECTION_LOST_RE;
 var init_resume_strategies = __esm({
   "src/resume-strategies.ts"() {
     init_conversation_store();
@@ -2856,6 +2856,7 @@ var init_resume_strategies = __esm({
       })
     );
     RESUME_ID_REJECTED_RE = /not found|does not support|not supported|unsupported/i;
+    RESUME_CONNECTION_LOST_RE = /connection closed|connection lost|epipe/i;
   }
 });
 function writeCommandLogEntry(sessionId, entry, baseDir) {
@@ -7284,6 +7285,36 @@ var init_bundles = __esm({
     };
   }
 });
+function directAuthMethods(descriptor, endpoint) {
+  const methods = [];
+  if (subscriptionSurfaceFor(descriptor?.authSubscription, endpoint) !== void 0) {
+    methods.push("oauth-bearer");
+  }
+  if (descriptor?.provider || descriptor?.modelDerivedApiKey) methods.push("api-key");
+  return methods;
+}
+function spawnEligibilityManifest(adapter, descriptor, route, model) {
+  const directEndpoint = descriptor?.provider ?? (model ? descriptor?.modelProviders?.[model] : void 0) ?? (model && descriptor?.modelDerivedApiKey ? modelIdPrefixProvider(model) : void 0) ?? (model ? getModelProvider(model) : void 0);
+  const routeId = route?.gateway ?? directEndpoint;
+  if (!routeId) return void 0;
+  const direct = directEndpoint !== void 0 && routeId === directEndpoint;
+  return {
+    manifest: {
+      id: adapter,
+      endpointByRoute: { [routeId]: direct ? directEndpoint : routeId },
+      methodsByRoute: {
+        [routeId]: direct ? directAuthMethods(descriptor, directEndpoint) : ["api-key"]
+      }
+    },
+    routeId,
+    direct
+  };
+}
+var init_eligibility_manifest = __esm({
+  "src/eligibility-manifest.ts"() {
+    init_spawn_defaults();
+  }
+});
 function normalizeRouterPrefixedId(id) {
   const firstSlash = id.indexOf("/");
   if (firstSlash === -1) return id;
@@ -7508,6 +7539,7 @@ function buildCatalogModels(input) {
   ];
   const merged = mergeContributions(contributions);
   const query = input.query ?? {};
+  const queryAdapter = query.adapter ? input.adapters.find((a) => a.slug === query.adapter) : void 0;
   const servableByRoute = /* @__PURE__ */ new Map();
   for (const row of merged) {
     const set = servableByRoute.get(row.route) ?? /* @__PURE__ */ new Set();
@@ -7522,12 +7554,18 @@ function buildCatalogModels(input) {
     if (query.adapter && !row.adapters.includes(query.adapter)) continue;
     const isDirectVendorRoute = row.route === row.vendor && row.adapterModes.length === 0;
     const walletEligible = !isDirectVendorRoute || checkModelWalletEligibility(`${row.vendor}/${row.product}`, row.route).ok;
-    const manifest = {
+    const projected = queryAdapter === void 0 ? void 0 : queryAdapter.authDescriptor ? spawnEligibilityManifest(
+      queryAdapter.slug,
+      queryAdapter.authDescriptor,
+      { gateway: row.route },
+      row.ref
+    ) : null;
+    const manifest = projected?.manifest ?? {
       id: `${row.vendor}/${row.product}@${row.route}`,
       endpointByRoute: { [row.route]: billedVendor(row.vendor, row.route) },
       methodsByRoute: { [row.route]: row.methods }
     };
-    const eligible = walletEligible ? eligibleProfiles(input.profiles, manifest, row.route).filter(
+    const eligible = walletEligible && projected !== null ? eligibleProfiles(input.profiles, manifest, projected?.routeId ?? row.route).filter(
       (p) => profileAllowsModel(p, row.ref, `${row.vendor}/${row.product}`)
     ) : [];
     const runnable = eligible.length > 0;
@@ -7680,6 +7718,7 @@ var WIDENING_ROUTES, VENDOR_COMPATIBILITY_ROUTES;
 var init_catalog_models = __esm({
   "src/catalog-models.ts"() {
     init_spawn_defaults();
+    init_eligibility_manifest();
     WIDENING_ROUTES = [
       "openrouter",
       "requesty",
@@ -9046,6 +9085,20 @@ var init_mcp_credential_deps = __esm({
 });
 
 // src/sandbox-agent-session-proxy.ts
+function stripAnsiCodes(s) {
+  return s.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "");
+}
+async function* harvestHostErrorNotice(host, remoteSessionId) {
+  let tail;
+  try {
+    tail = await host.output(remoteSessionId, MAX_OUTPUT_LINES);
+  } catch {
+    return;
+  }
+  const lines = tail.split(/\r?\n/).map((l) => stripAnsiCodes(l).trim()).filter((l) => l.length > 0 && HOST_ERROR_LINE_RE.test(l));
+  if (lines.length === 0) return;
+  yield { kind: "notice", text: lines.join("\n") };
+}
 function extractPromptText(message) {
   if (typeof message === "string") return message;
   if (message && typeof message === "object" && "text" in message) {
@@ -9168,13 +9221,18 @@ function createSandboxAgentSessionProxy(opts) {
   let lastPrompt;
   let closed = false;
   let transcriptCursor = 0;
+  let turnsSent = 0;
   return {
     sessionId: remoteSessionId,
     async *send(message) {
       const prompt = extractPromptText(message);
       lastPrompt = prompt;
+      const isFirstTurn = turnsSent === 0;
+      turnsSent++;
       const since = await host.currentEventsCursor();
-      await host.prompt(remoteSessionId, prompt);
+      if (!(opts.promptCarriedInStart && isFirstTurn)) {
+        await host.prompt(remoteSessionId, prompt);
+      }
       const controller = new AbortController();
       let sseBody;
       try {
@@ -9193,15 +9251,23 @@ function createSandboxAgentSessionProxy(opts) {
       }
       try {
         let sawTurnEnd = false;
+        let sawAssistantText = false;
+        let sawToolCall = false;
         for await (const record2 of readSseRecords(sseBody)) {
           if (typeof record2.seq === "number") transcriptCursor = record2.seq;
           const evt = recordToStreamEvent(record2);
           if (!evt) continue;
-          yield evt;
+          if (evt.kind === "text-delta" && evt.text?.trim()) sawAssistantText = true;
+          else if (evt.kind === "tool-call") sawToolCall = true;
           if (evt.kind === "turn-end") {
             sawTurnEnd = true;
+            if (opts.surfaceHostTurnErrors && isFirstTurn && (evt.reason === "error" || !sawAssistantText && !sawToolCall)) {
+              yield* harvestHostErrorNotice(host, remoteSessionId);
+            }
+            yield evt;
             break;
           }
+          yield evt;
         }
         if (!sawTurnEnd) {
           throw new Error(
@@ -9249,7 +9315,7 @@ function createSandboxAgentSessionProxy(opts) {
     }
   };
 }
-var MAX_POLL_MS, MAX_OUTPUT_LINES, MAX_CONSECUTIVE_POLL_FAILURES, POLL_RETRY_DELAY_MS, STREAM_EVENT_RECORD_KINDS;
+var MAX_POLL_MS, MAX_OUTPUT_LINES, MAX_CONSECUTIVE_POLL_FAILURES, POLL_RETRY_DELAY_MS, HOST_ERROR_LINE_RE, STREAM_EVENT_RECORD_KINDS;
 var init_sandbox_agent_session_proxy = __esm({
   "src/sandbox-agent-session-proxy.ts"() {
     init_sandbox_ledger();
@@ -9257,6 +9323,7 @@ var init_sandbox_agent_session_proxy = __esm({
     MAX_OUTPUT_LINES = 500;
     MAX_CONSECUTIVE_POLL_FAILURES = 6;
     POLL_RETRY_DELAY_MS = 5e3;
+    HOST_ERROR_LINE_RE = /\[(?:error|warning)\]|\berror\b|\bwarning\b|invalid model|model not found|unknown model|unsupported model/i;
     STREAM_EVENT_RECORD_KINDS = /* @__PURE__ */ new Set([
       "text-delta",
       "thought",
@@ -10077,35 +10144,10 @@ function findWorktreeLabelCwdCollision(registry, excludeId, label, cwd) {
 function profileMethodToAuthMode(method) {
   return method === "oauth-bearer" ? "subscription" : "api-key";
 }
-function directAuthMethods(descriptor, endpoint) {
-  const methods = [];
-  if (subscriptionSurfaceFor(descriptor?.authSubscription, endpoint) !== void 0) {
-    methods.push("oauth-bearer");
-  }
-  if (descriptor?.provider || descriptor?.modelDerivedApiKey) methods.push("api-key");
-  return methods;
-}
 function subscriptionOauthMethodId(descriptor, provider) {
   if (!Array.isArray(descriptor?.authSubscription) || !provider) return void 0;
   return `${provider}-oauth`;
 }
-function spawnEligibilityManifest(adapter, descriptor, route, model) {
-  const directEndpoint = descriptor?.provider ?? (model ? descriptor?.modelProviders?.[model] : void 0) ?? (model && descriptor?.modelDerivedApiKey ? modelIdPrefixProvider(model) : void 0) ?? (model ? getModelProvider(model) : void 0);
-  const routeId = route?.gateway ?? directEndpoint;
-  if (!routeId) return void 0;
-  const direct = directEndpoint !== void 0 && routeId === directEndpoint;
-  return {
-    manifest: {
-      id: adapter,
-      endpointByRoute: { [routeId]: direct ? directEndpoint : routeId },
-      methodsByRoute: {
-        [routeId]: direct ? directAuthMethods(descriptor, directEndpoint) : ["api-key"]
-      }
-    },
-    routeId,
-    direct
-  };
-}
 function resolveProfileAwareRoute(adapter, authDescriptor, profile, model) {
   if (!model) return void 0;
   const eligibleCandidates = serviceableModelRoutes(model).map((gateway) => spawnEligibilityManifest(adapter, authDescriptor, { gateway }, model)).filter(
@@ -10428,6 +10470,7 @@ async function spawnAgentSession(deps2, input) {
   const {
     registry,
     resolveAgentAdapter,
+    listAgentAdapters,
     buildOrchestratorMcp,
     daemonMcpUrl,
     callerScope,
@@ -10914,10 +10957,16 @@ async function spawnAgentSession(deps2, input) {
   if (input.sandbox === void 0 && !resolved) {
     const profileHint = await authProfileAsAdapterHint(input.adapter, getAuthProfile);
     const gatewayHint = profileHint ? void 0 : gatewayAsAdapterHint(input.adapter);
+    let installedHint;
+    if (!profileHint && !gatewayHint) {
+      const installed = await listAgentAdapters?.().catch(() => void 0);
+      installedHint = installed && installed.length > 0 ? `Installed adapters: ${installed.map((a) => a.slug).sort().join(", ")}.` : void 0;
+    }
+    const genericHint = `If it was working a moment ago, something may be mid-rebuild \u2014 wait and retry. ` + (installedHint ?? `If it has never been installed, run \`agentproto install ${input.adapter}\` first.`);
     return {
       ok: false,
       code: "adapter_not_found",
-      message: profileHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${profileHint}` : gatewayHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${gatewayHint}` : `agent_start: adapter "${input.adapter}" could not be resolved. If it was working a moment ago, something may be mid-rebuild \u2014 wait and retry. If it has never been installed, run \`agentproto install ${input.adapter}\` first.`
+      message: profileHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${profileHint}` : gatewayHint ? `agent_start: adapter "${input.adapter}" could not be resolved. ${gatewayHint}` : `agent_start: adapter "${input.adapter}" could not be resolved. ${genericHint}`
     };
   }
   if (resolveHostAuth && !resolved) {
@@ -11528,7 +11577,15 @@ ${asyncPrompt}`;
         // (never the value) before the box boots.
         ...authSpec ? { authSpec } : {},
         ...descriptorRoute ? { route: descriptorRoute } : {},
-        ...input.appServe ? { appServe: input.appServe } : {}
+        ...input.appServe ? { appServe: input.appServe } : {},
+        // F2 single-dial spawn — DEVICE ONLY: carry the composed initial
+        // prompt INSIDE the inner `agent_start` (see `bootSandboxAgentSession`'s
+        // `initialPrompt`) so the device bridge makes ONE dial, not two. The
+        // controller still drives/records the first turn through the proxy
+        // below (`registry.spawnAgent`'s `initialPrompt` / the `wait`
+        // `sendPrompt`); `promptCarriedInStart` stops the proxy from
+        // re-sending it. Non-device sandboxes are untouched (two-dial shape).
+        ...isDeviceSpawn && effectivePrompt !== void 0 ? { initialPrompt: effectivePrompt } : {}
       });
       if (!booted.ok) return booted;
       agentSession = booted.agentSession;
@@ -11902,6 +11959,29 @@ function withSandboxInstallAdapters(spec) {
 function looksLikeHostOnlyPath(p) {
   return HOST_ONLY_PATH_PATTERNS.some((re) => re.test(p));
 }
+function isDeviceTransportError(err) {
+  return DEVICE_TRANSPORT_ERROR_RE.test(err instanceof Error ? err.message : String(err));
+}
+function deviceTargetOf(sandbox) {
+  const slug = typeof sandbox === "string" ? sandbox : sandbox.provider;
+  return slug.startsWith("device:") ? slug.slice("device:".length) : void 0;
+}
+async function startDeviceSessionWithRetry(host, args, target) {
+  const attempts = 2;
+  let lastErr;
+  for (let attempt = 1; attempt <= attempts; attempt++) {
+    try {
+      return await host.start(args);
+    } catch (err) {
+      lastErr = err;
+      if (!isDeviceTransportError(err)) throw err;
+      if (attempt < attempts) {
+        await new Promise((resolve42) => setTimeout(resolve42, DEVICE_SPAWN_RETRY_DELAY_MS));
+      }
+    }
+  }
+  throw new DeviceSpawnUnreachableError(target, attempts, lastErr);
+}
 async function bootSandboxAgentSession(opts) {
   const providerSlug = typeof opts.sandbox === "string" ? opts.sandbox : opts.sandbox.provider;
   if (!opts.resolveSandboxProvider) {
@@ -12014,10 +12094,12 @@ async function bootSandboxAgentSession(opts) {
     ...lifecyclePolicy.pauseAfterIdleMs !== void 0 ? { expiresAt: new Date(Date.now() + lifecyclePolicy.pauseAfterIdleMs).toISOString() } : {}
   });
   const omitCwd = handle.omitCwdWhenImplicit === true && !opts.explicitCwd;
+  const deviceTarget = deviceTargetOf(opts.sandbox);
+  const carriedPrompt = deviceTarget !== void 0 && opts.initialPrompt !== void 0 ? typeof opts.initialPrompt === "string" ? [{ type: "text", text: opts.initialPrompt }] : opts.initialPrompt : void 0;
   let remoteSessionId;
   let resolvedCwd = boxCwd;
   try {
-    const remoteDesc = await host.start({
+    const startArgs = {
       adapter: opts.adapter,
       ...omitCwd ? {} : { cwd: boxCwd },
       // Issue #1647 — DEVICE-BRIDGE ONLY: forward an EXPLICIT
@@ -12035,13 +12117,24 @@ async function bootSandboxAgentSession(opts) {
       ...opts.route ? { route: opts.route } : {},
       ...opts.effort ? { effort: opts.effort } : {},
       ...opts.label ? { label: opts.label } : {},
-      ...opts.auth ? { auth: opts.auth } : {}
-    });
+      ...opts.auth ? { auth: opts.auth } : {},
+      // F2 — the initial prompt rides the SAME dial as the spawn (device only).
+      ...carriedPrompt !== void 0 ? { prompt: carriedPrompt } : {}
+    };
+    const remoteDesc = deviceTarget !== void 0 ? await startDeviceSessionWithRetry(host, startArgs, deviceTarget) : await host.start(startArgs);
     remoteSessionId = remoteDesc.id;
     if (omitCwd && remoteDesc.cwd) resolvedCwd = remoteDesc.cwd;
   } catch (err) {
     await host.stop().catch(() => void 0);
     recordSandboxState(host.sandboxId, "stopped");
+    if (err instanceof DeviceSpawnUnreachableError) {
+      return {
+        ok: false,
+        code: "device_spawn_unreachable",
+        message: err.message,
+        details: { target: err.target, attempts: err.attempts }
+      };
+    }
     return {
       ok: false,
       code: "sandbox_proxy_failed",
@@ -12068,7 +12161,13 @@ async function bootSandboxAgentSession(opts) {
       host,
       remoteSessionId,
       lifecyclePolicy,
-      ledger: { sandboxId: host.sandboxId, provider: providerSlug }
+      ledger: { sandboxId: host.sandboxId, provider: providerSlug },
+      // Device spawns only: surface a first-turn failure's raw host line
+      // (see `surfaceHostTurnErrors`).
+      ...deviceTarget !== void 0 ? { surfaceHostTurnErrors: true } : {},
+      // F2 — when the first prompt rode the spawn dial, don't re-send it as a
+      // second `agent_prompt` dial (see `promptCarriedInStart`).
+      ...carriedPrompt !== void 0 ? { promptCarriedInStart: true } : {}
     }),
     commandPreview: `sandbox:${providerSlug} \u2192 ${opts.adapter}`,
     sandboxId: host.sandboxId,
@@ -12148,7 +12247,7 @@ async function resolveEffectiveCommandSandbox(requested, cwd) {
     return void 0;
   }
 }
-var SPAWN_CLAIM_WINDOW_MS, IMPLICIT_SPAWN_CLAIM_WINDOW_MS, MAX_RESOLVED_CLAIMS, spawnClaimsByRegistry, HOST_ONLY_PATH_PATTERNS;
+var SPAWN_CLAIM_WINDOW_MS, IMPLICIT_SPAWN_CLAIM_WINDOW_MS, MAX_RESOLVED_CLAIMS, spawnClaimsByRegistry, HOST_ONLY_PATH_PATTERNS, DEVICE_TRANSPORT_ERROR_RE, DEVICE_SPAWN_RETRY_DELAY_MS, DeviceSpawnUnreachableError;
 var init_session_spawn = __esm({
   "src/session-spawn.ts"() {
     init_process_stats();
@@ -12161,6 +12260,7 @@ var init_session_spawn = __esm({
     init_bundles();
     init_mcp_imports();
     init_launch_config();
+    init_eligibility_manifest();
     init_claude_code_oauth_source();
     init_providers_store();
     init_catalog_models();
@@ -12197,6 +12297,21 @@ var init_session_spawn = __esm({
       /^\/Users\//,
       /^[A-Za-z]:[\\/]/
     ];
+    DEVICE_TRANSPORT_ERROR_RE = /device_unreachable|transport closed|handshake timed out|did not send hello|closed the channel after handshake|socket hang up|other side closed|ECONNRESET|ECONNREFUSED|EPIPE|ETIMEDOUT|fetch failed/i;
+    DEVICE_SPAWN_RETRY_DELAY_MS = 2e3;
+    DeviceSpawnUnreachableError = class extends Error {
+      target;
+      attempts;
+      constructor(target, attempts, cause) {
+        const detail = cause instanceof Error ? cause.message : String(cause);
+        super(
+          `agent_start: could not reach paired device "${target}" over its host channel after ${attempts} attempt${attempts === 1 ? "" : "s"} \u2014 the host channel may be flapping; retry in a few seconds and check \`agentproto devices status ${target}\`. Last error: ${detail}`
+        );
+        this.name = "DeviceSpawnUnreachableError";
+        this.target = target;
+        this.attempts = attempts;
+      }
+    };
   }
 });
 function tryParseJson(value) {
@@ -13667,7 +13782,10 @@ function registerAgentTools(server, opts) {
           ...provisionWorktree ? { provisionWorktree } : {},
           ...resolveWorktreeIsolation ? { resolveWorktreeIsolation } : {},
           ...listCatalogModels ? { listCatalogModels } : {},
-          ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+          ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+          // Lets the generic `adapter_not_found` error name the installed
+          // adapters (session-spawn.ts) instead of only saying "install it".
+          ...listAgentAdapters ? { listAgentAdapters } : {}
         },
         {
           ...spawnInput,
@@ -13973,6 +14091,11 @@ function registerAgentTools(server, opts) {
                 // Surfaced so a caller can distinguish "idle" from "mid tool
                 // call" without guessing from empty output.
                 ...desc.blockedOn ? { blockedOn: desc.blockedOn } : {},
+                // Device-spawn first-turn failure (bad model id / host-side
+                // adapter error) — see `SessionDescriptor.firstTurnFailed`.
+                // The underlying host error line rides the `lines` tail above
+                // (surfaced as a `notice` by the sandbox proxy).
+                ...desc.firstTurnFailed ? { firstTurnFailed: true } : {},
                 ...activityFallback ? { activityFallback: true } : {},
                 // An ended session's derived outcome (what it produced) —
                 // the ring above is empty for a row reloaded after a restart.
@@ -14209,6 +14332,7 @@ function registerAgentTools(server, opts) {
     ...s.lastTurnErrorMessage !== void 0 ? { lastTurnErrorMessage: s.lastTurnErrorMessage } : {},
     ...s.lastTurnReason !== void 0 ? { lastTurnReason: s.lastTurnReason } : {},
     ...s.lastTurnEmpty !== void 0 ? { lastTurnEmpty: s.lastTurnEmpty } : {},
+    ...s.firstTurnFailed ? { firstTurnFailed: true } : {},
     ...s.stats !== void 0 ? { stats: s.stats } : {}
   });
   const agentSessionsListSchema = z.object({
@@ -16529,6 +16653,267 @@ var init_session_end_reason = __esm({
     PROVIDER_LIMIT_ERROR_RE = /\bhit your (?:session|usage) limit\b/i;
   }
 });
+function sessionIndexPath(sessionId, baseDir) {
+  return join(sessionTranscriptDir(sessionId, baseDir), "index.json");
+}
+function capText(text13, max) {
+  const flat = text13.replace(/\s+/g, " ").trim();
+  const points = Array.from(flat);
+  if (points.length <= max) return flat;
+  return points.slice(0, max - 1).join("") + "\u2026";
+}
+function isRecord5(value) {
+  return typeof value === "object" && value !== null;
+}
+function indexEntryFromDescriptor(desc, extra) {
+  const entry = {
+    id: desc.id,
+    kind: desc.kind,
+    status: desc.status,
+    alive: desc.status === "running" || desc.status === "starting",
+    startedAt: desc.startedAt
+  };
+  if (desc.label !== void 0) entry.label = desc.label;
+  if (desc.title !== void 0) entry.title = desc.title;
+  if (desc.renamedByUser !== void 0) entry.renamedByUser = desc.renamedByUser;
+  if (desc.adapterSlug !== void 0) entry.adapter = desc.adapterSlug;
+  if (desc.model !== void 0) entry.model = desc.model;
+  if (desc.cwd !== void 0) entry.cwd = desc.cwd;
+  if (desc.workspaceSlug !== void 0) entry.workspaceSlug = desc.workspaceSlug;
+  if (desc.origin !== void 0) entry.origin = desc.origin;
+  if (desc.depth !== void 0) entry.depth = desc.depth;
+  if (desc.parentSessionId !== void 0) entry.parentSessionId = desc.parentSessionId;
+  if (desc.lastActivityAt !== void 0) entry.lastActivityAt = desc.lastActivityAt;
+  if (desc.lastTurnReason !== void 0) entry.lastTurnReason = desc.lastTurnReason;
+  if (desc.turnsCompleted !== void 0) entry.turnsCompleted = desc.turnsCompleted;
+  if (desc.costUsd !== void 0) entry.costUsd = desc.costUsd;
+  const prompt = extra?.lastUserPrompt;
+  if (prompt && prompt.text.trim()) {
+    entry.lastUserPrompt = { ts: prompt.ts, text: capText(prompt.text, INDEX_MAX_PROMPT) };
+  }
+  const output = extra?.lastOutputText;
+  if (output && output.trim()) entry.lastOutputText = capText(output, INDEX_MAX_OUTPUT);
+  return entry;
+}
+function readSessionIndex(sessionId, baseDir) {
+  let raw;
+  try {
+    raw = readFileSync(sessionIndexPath(sessionId, baseDir), "utf8");
+  } catch {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return void 0;
+  }
+  if (!isRecord5(parsed) || typeof parsed.id !== "string" || parsed.id.length === 0) return void 0;
+  return parsed;
+}
+function writeSessionIndex(entry, baseDir) {
+  try {
+    const dir = sessionTranscriptDir(entry.id, baseDir);
+    mkdirSync(dir, { recursive: true });
+    const finalPath = join(dir, "index.json");
+    const tmpPath = `${finalPath}.tmp`;
+    writeFileSync(tmpPath, JSON.stringify(entry) + "\n");
+    renameSync(tmpPath, finalPath);
+  } catch {
+  }
+}
+function readTranscriptTail(eventsPath2, maxBytes = INDEX_TAIL_BYTES) {
+  const empty = { prompts: [], bytesRead: 0 };
+  let fd;
+  try {
+    fd = openSync(eventsPath2, "r");
+  } catch {
+    return empty;
+  }
+  let tail;
+  let bytesRead = 0;
+  try {
+    const size = fstatSync(fd).size;
+    const len = Math.min(size, Math.max(0, maxBytes));
+    if (len === 0) return empty;
+    const buf = Buffer.alloc(len);
+    readSync(fd, buf, 0, len, size - len);
+    bytesRead = len;
+    tail = buf.toString("utf8");
+  } catch {
+    return empty;
+  } finally {
+    closeSync(fd);
+  }
+  const prompts = [];
+  let assistant = "";
+  let lastOutputText;
+  let firstTs;
+  const sealAssistant = () => {
+    const t = assistant.trim();
+    if (t) lastOutputText = t;
+    assistant = "";
+  };
+  for (const line of tail.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    let rec;
+    try {
+      rec = JSON.parse(trimmed);
+    } catch {
+      continue;
+    }
+    if (firstTs === void 0 && typeof rec.ts === "string") firstTs = rec.ts;
+    if (rec.kind === "user-prompt" && typeof rec.text === "string") {
+      sealAssistant();
+      if (rec.text.trim()) {
+        prompts.push({ ts: typeof rec.ts === "string" ? rec.ts : "", text: rec.text });
+      }
+    } else if (rec.kind === "text-delta" && typeof rec.text === "string") {
+      assistant += rec.text;
+    } else if (rec.kind === "tool-call" || rec.kind === "tool-result" || rec.kind === "turn-end") {
+      sealAssistant();
+    }
+  }
+  sealAssistant();
+  return { prompts, ...lastOutputText !== void 0 ? { lastOutputText } : {}, bytesRead, ...firstTs !== void 0 ? { firstTs } : {} };
+}
+function deriveIndexFromTranscript(sessionId, baseDir) {
+  const eventsPath2 = sessionEventsPath(sessionId, baseDir);
+  if (!existsSync(eventsPath2)) return void 0;
+  const tail = readTranscriptTail(eventsPath2);
+  let startedAt;
+  try {
+    const stat19 = statSync(eventsPath2);
+    if (stat19.birthtimeMs > 0) startedAt = stat19.birthtime.toISOString();
+    else startedAt = stat19.mtime.toISOString();
+  } catch {
+  }
+  startedAt = startedAt ?? tail.firstTs ?? (/* @__PURE__ */ new Date(0)).toISOString();
+  const lastPrompt = tail.prompts[tail.prompts.length - 1];
+  return {
+    id: sessionId,
+    kind: "agent-cli",
+    status: "unknown",
+    alive: false,
+    startedAt,
+    ...lastPrompt ? { lastUserPrompt: { ts: lastPrompt.ts, text: capText(lastPrompt.text, INDEX_MAX_PROMPT) } } : {},
+    ...tail.lastOutputText ? { lastOutputText: capText(tail.lastOutputText, INDEX_MAX_OUTPUT) } : {}
+  };
+}
+function readAllSessionIndexes(baseDir) {
+  const dir = baseDir ?? defaultTranscriptBaseDir();
+  let entries;
+  try {
+    entries = readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const ent of entries) {
+    if (!ent.isDirectory()) continue;
+    const id = ent.name;
+    const index = readSessionIndex(id, dir);
+    if (index) {
+      out.push(index);
+      continue;
+    }
+    const derived = deriveIndexFromTranscript(id, dir);
+    if (derived) out.push(derived);
+  }
+  out.sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt));
+  return out;
+}
+function matchesSessionQuery(entry, query) {
+  const q = query.trim().toLowerCase();
+  if (!q) return true;
+  if (entry.id.toLowerCase().startsWith(q)) return true;
+  for (const field of [entry.label, entry.title, entry.cwd, entry.workspaceSlug]) {
+    if (field && field.toLowerCase().includes(q)) return true;
+  }
+  return false;
+}
+function searchSessionIndexes(entries, query, opts = {}) {
+  const limit = opts.limit ?? INDEX_DEFAULT_LIMIT;
+  return entries.filter((e) => matchesSessionQuery(e, query)).filter((e) => opts.status ? e.status === opts.status : true).sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt)).slice(0, Math.max(0, limit));
+}
+function buildSessionRecap(input) {
+  const { entry } = input;
+  const last = input.last ?? 8;
+  const tail = readTranscriptTail(input.eventsPath);
+  const source = tail.prompts.length > 0 ? tail.prompts : entry.lastUserPrompt ? [entry.lastUserPrompt] : [];
+  const prompts = source.slice(Math.max(0, source.length - last));
+  const lastOutputText = tail.lastOutputText ?? entry.lastOutputText;
+  return {
+    id: entry.id,
+    status: entry.status,
+    alive: entry.alive,
+    ...entry.label !== void 0 ? { label: entry.label } : {},
+    ...entry.title !== void 0 ? { title: entry.title } : {},
+    ...entry.adapter !== void 0 ? { adapter: entry.adapter } : {},
+    ...entry.model !== void 0 ? { model: entry.model } : {},
+    ...entry.cwd !== void 0 ? { cwd: entry.cwd } : {},
+    ...entry.workspaceSlug !== void 0 ? { workspaceSlug: entry.workspaceSlug } : {},
+    ...entry.parentSessionId !== void 0 ? { parentSessionId: entry.parentSessionId } : {},
+    children: [...input.children ?? []],
+    startedAt: entry.startedAt,
+    ...entry.lastActivityAt !== void 0 ? { lastActivityAt: entry.lastActivityAt } : {},
+    ...entry.turnsCompleted !== void 0 ? { turnsCompleted: entry.turnsCompleted } : {},
+    ...entry.costUsd !== void 0 ? { costUsd: entry.costUsd } : {},
+    ...entry.lastTurnReason !== void 0 ? { lastTurnReason: entry.lastTurnReason } : {},
+    prompts,
+    ...lastOutputText ? { lastOutputText: capText(lastOutputText, INDEX_MAX_OUTPUT) } : {},
+    ...input.queuedPrompts !== void 0 ? { queuedPrompts: input.queuedPrompts } : {}
+  };
+}
+function backfillSessionIndexes(baseDir, opts) {
+  const dir = baseDir ?? defaultTranscriptBaseDir();
+  const byId = /* @__PURE__ */ new Map();
+  if (opts?.descriptors) {
+    for (const desc of opts.descriptors) byId.set(desc.id, desc);
+  }
+  let dirents;
+  try {
+    dirents = readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return { scanned: 0, created: 0, skipped: 0 };
+  }
+  let scanned = 0;
+  let created = 0;
+  let skipped = 0;
+  for (const ent of dirents) {
+    if (!ent.isDirectory()) continue;
+    scanned++;
+    const id = ent.name;
+    if (readSessionIndex(id, dir)) {
+      skipped++;
+      continue;
+    }
+    const desc = byId.get(id);
+    const derived = deriveIndexFromTranscript(id, dir);
+    if (!desc && !derived) {
+      skipped++;
+      continue;
+    }
+    const entry = desc ? indexEntryFromDescriptor(desc, {
+      ...derived?.lastUserPrompt ? { lastUserPrompt: derived.lastUserPrompt } : {},
+      ...derived?.lastOutputText ? { lastOutputText: derived.lastOutputText } : {}
+    }) : derived;
+    writeSessionIndex(entry, dir);
+    created++;
+  }
+  return { scanned, created, skipped };
+}
+var INDEX_MAX_PROMPT, INDEX_MAX_OUTPUT, INDEX_TAIL_BYTES, INDEX_DEFAULT_LIMIT;
+var init_session_index = __esm({
+  "src/session-index.ts"() {
+    init_transcript_writer();
+    INDEX_MAX_PROMPT = 500;
+    INDEX_MAX_OUTPUT = 300;
+    INDEX_TAIL_BYTES = 256 * 1024;
+    INDEX_DEFAULT_LIMIT = 20;
+  }
+});
 function isBackgroundToolCallArguments(args) {
   return typeof args === "object" && args !== null && args.run_in_background === true;
 }
@@ -16708,6 +17093,7 @@ function toSessionSummary(desc) {
     blockedOn: desc.blockedOn,
     stalledSinceMs: desc.stalledSinceMs,
     pendingBgTasks: desc.pendingBgTasks,
+    ...desc.wrapupFlag ? { wrapupFlag: desc.wrapupFlag } : {},
     backgroundTasks: desc.backgroundTasks,
     lastTurnErroredAt: desc.lastTurnErroredAt,
     ...desc.lastError ? { lastError: desc.lastError.slice(0, 2e3) } : {},
@@ -16836,6 +17222,18 @@ function stampInterrupted(desc) {
     delete desc.interrupted;
   }
 }
+function stampAdapterConnected(desc, rt) {
+  const probe = rt.agentSession?.isConnected;
+  if (!probe) {
+    delete desc.adapterConnected;
+    return;
+  }
+  try {
+    desc.adapterConnected = probe.call(rt.agentSession);
+  } catch {
+    delete desc.adapterConnected;
+  }
+}
 function stampLiveModes(desc, rt) {
   const modes = rt.agentSession?.availableModes;
   if (modes && modes.length > 0) {
@@ -16847,6 +17245,9 @@ function stampLiveModes(desc, rt) {
 function isResumable(desc) {
   return desc.kind === "agent-cli" && !!desc.adapterSlug && !!desc.adapterSessionId && !!desc.cwd && !desc.archived;
 }
+function crashReasonText(reason, pid) {
+  return reason === "transport-closed" ? `adapter connection closed (pid ${pid ?? "?"} may still be running) \u2014 session crashed` : `adapter process gone (pid ${pid}) \u2014 session crashed`;
+}
 function canResume(desc) {
   return isResumable(desc) && (desc.resumeAttempts ?? 0) < MAX_RESUME_ATTEMPTS;
 }
@@ -16872,18 +17273,18 @@ function worktreeFields(cwd) {
     ...identity.mainRepoPath === void 0 ? {} : { mainRepoPath: identity.mainRepoPath }
   };
 }
-function stripAnsiCodes(s) {
+function stripAnsiCodes2(s) {
   return s.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "");
 }
 function terminalOutputTail(rt, maxChars = 500) {
   if (rt.recentBytes.length === 0) return "";
   const text13 = Buffer.concat(rt.recentBytes, rt.recentBytesSize).toString("utf8");
-  const plain = stripAnsiCodes(text13).replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1b[()][A-Za-z0-9]/g, "").replace(/\x1b[0-9A-Za-z=>]/g, "").replace(/[\x00-\x09\x0b-\x1f]/g, "").trim();
+  const plain = stripAnsiCodes2(text13).replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, "").replace(/\x1b[()][A-Za-z0-9]/g, "").replace(/\x1b[0-9A-Za-z=>]/g, "").replace(/[\x00-\x09\x0b-\x1f]/g, "").trim();
   if (!plain) return "";
   return plain.length > maxChars ? plain.slice(-maxChars) : plain;
 }
 function deriveHeuristicQuestion(recentLines) {
-  const visible = recentLines.map(stripAnsiCodes).map((l) => l.trim()).filter((l) => l.length > 0 && !SYNTHETIC_LINE.test(l));
+  const visible = recentLines.map(stripAnsiCodes2).map((l) => l.trim()).filter((l) => l.length > 0 && !SYNTHETIC_LINE.test(l));
   if (visible.length === 0) return void 0;
   const options = [];
   let i = visible.length - 1;
@@ -17085,6 +17486,7 @@ function createSessionsRegistry(opts) {
       }
     }
     recordOutcome(rt);
+    writeIndexNow(rt);
     rt.linkProbeStop?.();
     cancelPendingPermissionsForSession(rt);
     if (runWorktreeAutoReclaim && rt.desc.worktreeAutoProvisioned && rt.desc.worktreePath) {
@@ -17319,6 +17721,53 @@ function createSessionsRegistry(opts) {
       void persistSnapshot();
     }, PERSIST_DEBOUNCE_MS2);
   };
+  const INDEX_WRITE_THROTTLE_MS = 400;
+  const dirtyIndexIds = /* @__PURE__ */ new Set();
+  let indexFlushTimer;
+  const captureIndexTail = (rt) => {
+    let lastUserPrompt = rt.lastUserPrompt;
+    let lastOutputText = rt.lastAssistantText;
+    if (lastUserPrompt === void 0 || lastOutputText === void 0) {
+      const tail = readTranscriptTail(sessionEventsPath(rt.desc.id, transcriptBaseDir), INDEX_TAIL_BYTES);
+      if (lastUserPrompt === void 0 && tail.prompts.length > 0) {
+        lastUserPrompt = tail.prompts[tail.prompts.length - 1];
+      }
+      if (lastOutputText === void 0) lastOutputText = tail.lastOutputText;
+    }
+    return {
+      ...lastUserPrompt ? { lastUserPrompt } : {},
+      ...lastOutputText ? { lastOutputText } : {}
+    };
+  };
+  const writeIndexNow = (rt) => {
+    try {
+      writeSessionIndex(indexEntryFromDescriptor(rt.desc, captureIndexTail(rt)), transcriptBaseDir);
+    } catch {
+    }
+  };
+  const flushDirtyIndexes = () => {
+    if (indexFlushTimer) {
+      clearTimeout(indexFlushTimer);
+      indexFlushTimer = void 0;
+    }
+    if (dirtyIndexIds.size === 0) return;
+    const ids = [...dirtyIndexIds];
+    dirtyIndexIds.clear();
+    for (const id of ids) {
+      const rt = sessions.get(id);
+      if (rt) writeIndexNow(rt);
+    }
+  };
+  const scheduleIndexWrite = (rt) => {
+    if (shutdownDone) return;
+    dirtyIndexIds.add(rt.desc.id);
+    if (indexFlushTimer) return;
+    indexFlushTimer = setTimeout(() => {
+      indexFlushTimer = void 0;
+      flushDirtyIndexes();
+    }, INDEX_WRITE_THROTTLE_MS);
+    indexFlushTimer.unref?.();
+  };
   const conversationLinkProbeMs = opts?.conversationLinkProbeMs ?? {
     initialMs: 3e3,
     intervalMs: 15e3
@@ -17481,7 +17930,7 @@ function createSessionsRegistry(opts) {
     const strategySlug = rt.desc.adapterSlug ?? conversationTerminalSlugFor(rt.desc);
     const strategy = strategySlug ? RESUME_STRATEGIES[strategySlug] : void 0;
     if (!strategy?.outputHint) return;
-    const plain = stripAnsiCodes(line);
+    const plain = stripAnsiCodes2(line);
     const m = plain.match(strategy.outputHint);
     if (m && m[1]) {
       rt.desc.resumeMetadata = {
@@ -17719,6 +18168,14 @@ function createSessionsRegistry(opts) {
         }
         break;
       }
+      case "notice": {
+        if (evt.text) {
+          for (const line of evt.text.split(/\r?\n/)) {
+            if (line.trim()) appendLine(rt, `\x1B[2m[notice] ${line}\x1B[0m`, "stderr");
+          }
+        }
+        break;
+      }
       case "plan": {
         const entries = evt.entries ?? [];
         const done = entries.filter((e) => e.status === "completed").length;
@@ -17913,7 +18370,12 @@ function createSessionsRegistry(opts) {
     schedulePersist();
   };
   const maybeResumeAgent = async (rt, resumedFrom = "daemon-restart") => {
-    if (rt.agentSession) return;
+    if (rt.agentSession) {
+      if (rt.agentSession.isConnected?.() === false) {
+        markCrashedInternal(rt.desc.id, "transport-closed");
+      }
+      if (rt.agentSession) return;
+    }
     if (!resumeAgent) return;
     if (!isResumable(rt.desc)) return;
     if (!canResume(rt.desc)) {
@@ -17959,7 +18421,7 @@ function createSessionsRegistry(opts) {
           recordFailedResume(rt);
           return;
         }
-        rt.agentSession = fresh;
+        bindAgentSession(rt, fresh);
         bindOutOfTurnEvents(rt);
         stampCapabilities(rt);
         rt.adapterSlug = adapterSlug;
@@ -18016,6 +18478,48 @@ function createSessionsRegistry(opts) {
       rt.resumePromise = void 0;
     }
   };
+  const markCrashedInternal = (id, reason = "process-gone") => {
+    const rt = sessions.get(id);
+    if (!rt) return false;
+    if (rt.desc.kind !== "agent-cli" || rt.desc.status !== "running") {
+      return false;
+    }
+    const pid = rt.desc.pid;
+    const providerLimitMessage = isProviderLimitError(rt.lastErrorMessage) ? rt.lastErrorMessage : void 0;
+    const detail = providerLimitMessage ? `provider usage limit hit: ${providerLimitMessage}` : crashReasonText(reason, pid);
+    rt.desc.status = "error";
+    rt.desc.endedAt = (/* @__PURE__ */ new Date()).toISOString();
+    rt.desc.endedReason = providerLimitMessage ? "provider-limit" : "crashed";
+    rt.desc.crashedAt = rt.desc.endedAt;
+    rt.desc.lastError = detail;
+    if (rt.agentSession) {
+      releaseOutOfTurnEvents(rt);
+      delete rt.desc.backgroundTasks;
+      recordExitUsageSnapshot(rt);
+      void rt.agentSession.close().catch(() => void 0);
+      void transcriptWriter.close(rt.desc.id);
+      tracedSessions.delete(rt.desc.id);
+      rt.agentSession = void 0;
+    }
+    schedulePersist();
+    const banner = providerLimitMessage ? `[provider-limit] ${providerLimitMessage}` : `[crashed] ${detail}`;
+    appendLine(rt, banner, "stderr");
+    transcriptWriter.recordEvent(rt.desc.id, { kind: "notice", text: banner });
+    emitExited(rt);
+    return true;
+  };
+  const bindAgentSession = (rt, session) => {
+    rt.agentSession = session;
+    session.onDisconnect?.((err) => {
+      const id = rt.desc.id;
+      if (rt.agentSession !== session) return;
+      if (markCrashedInternal(id, "transport-closed")) {
+        console.warn(
+          `[sessions] ${id}: adapter connection closed (${err.message}) \u2014 marked crashed; the row stays lazy-resumable.`
+        );
+      }
+    });
+  };
   const buildUsageSnapshot = (rt) => deriveSessionUsage({
     ...rt.desc.model !== void 0 ? { model: rt.desc.model } : {},
     ...rt.adapterReportedCost && rt.desc.costUsd !== void 0 ? { adapterCostUsd: rt.desc.costUsd } : {},
@@ -18475,6 +18979,7 @@ ${message}`;
           ...messageTurn ? { messages: turnOpts.messages } : {}
         } : void 0
       );
+      rt.lastUserPrompt = { ts: (/* @__PURE__ */ new Date()).toISOString(), text: promptTextForIndex(message, turnOpts?.system) };
       const wrapped = typeof message === "string" ? { type: "text", text: message } : message;
       const switchCandidate = typeof message === "string" ? parseModelSwitchCommand(message) : void 0;
       let switchLearned = false;
@@ -18638,6 +19143,10 @@ ${message}`;
         } else if (rt.desc.lastTurnReason !== void 0) {
           delete rt.desc.lastTurnReason;
         }
+        if (rt.desc.remote === true && rt.desc.sandboxProvider?.startsWith("device:") && rt.desc.turnsCompleted === 1 && (emptyTurn || turnEndReason === "error")) {
+          rt.desc.firstTurnFailed = true;
+          schedulePersist();
+        }
         const nextActivity = regenerateActivitySummary(rt.desc, rt.recentLines, Date.now());
         if (nextActivity) {
           rt.desc.activitySummary = nextActivity;
@@ -18692,6 +19201,10 @@ ${message}`;
         } else if (rt.desc.lastTurnReason !== void 0) {
           delete rt.desc.lastTurnReason;
         }
+        if (rt.desc.remote === true && rt.desc.sandboxProvider?.startsWith("device:") && rt.desc.turnsCompleted === 1 && turnEndReason === "error") {
+          rt.desc.firstTurnFailed = true;
+          schedulePersist();
+        }
         if (sessionEvents) {
           sessionEvents.emit({
             type: "session:turn-end",
@@ -18704,6 +19217,7 @@ ${message}`;
           });
         }
       }
+      scheduleIndexWrite(rt);
       if (!interruptedBy) dispatchQueuedPrompt(rt);
       else if (interruptedBy.deliverQueueId) {
         dispatchQueuedPrompt(rt, interruptedBy.deliverQueueId);
@@ -18998,6 +19512,10 @@ ${message}`;
   };
   const registry = {
     bootId,
+    transcriptBaseDir,
+    flushSessionIndexes() {
+      flushDirtyIndexes();
+    },
     recordAutoContinue(id) {
       const rt = sessions.get(id);
       if (!rt) return;
@@ -19074,6 +19592,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     register(input) {
@@ -19123,6 +19642,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     spawnAgent(input) {
@@ -19224,7 +19744,6 @@ ${message}`;
       }
       const rt = {
         desc,
-        agentSession: input.agentSession,
         adapterSlug: input.adapterSlug,
         recentLines: [],
         recentBytes: [],
@@ -19241,6 +19760,7 @@ ${message}`;
       rt.emitter.setMaxListeners(50);
       sessions.set(id, rt);
       linkContinuedTo(input.resumedFrom, id);
+      bindAgentSession(rt, input.agentSession);
       bindOutOfTurnEvents(rt);
       stampCapabilities(rt);
       armUsageRefresh(rt);
@@ -19258,6 +19778,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       recordConversationLink(rt);
       desc.eventsPath = sessionEventsPath(desc.id, transcriptBaseDir);
       if (input.initialPrompt) {
@@ -19376,6 +19897,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       desc.eventsPath = sessionEventsPath(desc.id, transcriptBaseDir);
       return desc;
     },
@@ -19431,7 +19953,7 @@ ${message}`;
         emitExited(rt);
         return;
       }
-      rt.agentSession = outcome.agentSession;
+      bindAgentSession(rt, outcome.agentSession);
       bindOutOfTurnEvents(rt);
       stampCapabilities(rt);
       rt.readUsage = outcome.readUsage;
@@ -19453,6 +19975,7 @@ ${message}`;
         "stdout"
       );
       schedulePersist();
+      writeIndexNow(rt);
       recordConversationLink(rt);
       if (outcome.initialPrompt) {
         void runAgentTurn(
@@ -19622,6 +20145,7 @@ ${message}`;
         emitExited(rt);
       });
       schedulePersist();
+      writeIndexNow(rt);
       return desc;
     },
     recordCommand(input) {
@@ -20246,6 +20770,7 @@ ${message}`;
         stampCurrentStatus(rt);
         stampWatchers(desc);
         stampLiveModes(desc, rt);
+        stampAdapterConnected(desc, rt);
         desc.childrenBusy = childrenBusy.get(desc.id) ?? 0;
         desc.queuedPrompts = desc.promptQueue?.length ?? 0;
         return desc;
@@ -20303,6 +20828,7 @@ ${message}`;
         stampCurrentStatus(rt);
         stampWatchers(desc);
         stampLiveModes(desc, rt);
+        stampAdapterConnected(desc, rt);
         desc.childrenBusy = childrenBusyCounts().get(desc.id) ?? 0;
         desc.queuedPrompts = desc.promptQueue?.length ?? 0;
       }
@@ -20558,34 +21084,8 @@ ${message}`;
       emitExited(rt);
       return true;
     },
-    markCrashed(id) {
-      const rt = sessions.get(id);
-      if (!rt) return false;
-      if (rt.desc.kind !== "agent-cli" || rt.desc.status !== "running") {
-        return false;
-      }
-      const pid = rt.desc.pid;
-      const providerLimitMessage = isProviderLimitError(rt.lastErrorMessage) ? rt.lastErrorMessage : void 0;
-      rt.desc.status = "error";
-      rt.desc.endedAt = (/* @__PURE__ */ new Date()).toISOString();
-      rt.desc.endedReason = providerLimitMessage ? "provider-limit" : "crashed";
-      rt.desc.crashedAt = rt.desc.endedAt;
-      rt.desc.lastError = providerLimitMessage ? `provider usage limit hit: ${providerLimitMessage}` : `adapter process gone (pid ${pid}) \u2014 session crashed`;
-      if (rt.agentSession) {
-        releaseOutOfTurnEvents(rt);
-        delete rt.desc.backgroundTasks;
-        recordExitUsageSnapshot(rt);
-        void rt.agentSession.close().catch(() => void 0);
-        void transcriptWriter.close(rt.desc.id);
-        tracedSessions.delete(rt.desc.id);
-        rt.agentSession = void 0;
-      }
-      schedulePersist();
-      const banner = providerLimitMessage ? `[provider-limit] ${providerLimitMessage}` : `[crashed] adapter process gone (pid ${pid}) \u2014 session crashed`;
-      appendLine(rt, banner, "stderr");
-      transcriptWriter.recordEvent(rt.desc.id, { kind: "notice", text: banner });
-      emitExited(rt);
-      return true;
+    markCrashed(id, reason = "process-gone") {
+      return markCrashedInternal(id, reason);
     },
     markStalled(id, stalledSinceMs) {
       const rt = sessions.get(id);
@@ -20751,6 +21251,7 @@ ${message}`;
         ts: (/* @__PURE__ */ new Date()).toISOString()
       });
       stampReadLiveness(rt.desc);
+      writeIndexNow(rt);
       return rt.desc;
     },
     setKeepAlive(id, keepAlive) {
@@ -20874,6 +21375,7 @@ ${message}`;
     if (shutdownDone) return;
     shutdownDone = true;
     if (persistTimer) clearTimeout(persistTimer);
+    flushDirtyIndexes();
     if (persist) {
       try {
         process.off("exit", onProcessExit);
@@ -21026,6 +21528,13 @@ function loadHistorySnapshot(persistPath, sessions, sessionEvents, transcriptBas
     }
   }
 }
+function promptTextForIndex(message, system) {
+  const text13 = typeof message === "string" ? message : (Array.isArray(message) ? message : [message]).map(
+    (b) => b && typeof b === "object" && typeof b.text === "string" ? b.text : ""
+  ).filter(Boolean).join("\n");
+  if (system && text13.startsWith(system)) return text13.slice(system.length).replace(/^\n\n/, "");
+  return text13;
+}
 function quoteArg(arg) {
   if (arg === "") return '""';
   if (/^[a-zA-Z0-9._/=:@,+-]+$/.test(arg)) return arg;
@@ -21065,6 +21574,7 @@ var init_sessions = __esm({
     init_session_continue_fresh();
     init_session_outcome();
     init_session_end_reason();
+    init_session_index();
     init_session_message();
     SESSIONS_FILE_PATH = () => resolve(homedir(), ".agentproto", "sessions.json");
     SESSION_ID_ENV = "AGENTPROTO_SESSION_ID";
@@ -22812,7 +23322,7 @@ init_resume_strategies();
 init_spawn_defaults();
 init_launch_config();
 init_resume_context_digest();
-init_session_spawn();
+init_eligibility_manifest();
 init_providers_store();
 init_catalog_models();
 init_config();
@@ -23310,7 +23820,7 @@ async function restartAgentSession(registry, resolveAgentAdapter, prev, opts = {
     desc = await spawnWithResume(strategy.resumeSessionId);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    if (strategy.resumeSessionId && RESUME_ID_REJECTED_RE.test(msg)) {
+    if (strategy.resumeSessionId && (RESUME_ID_REJECTED_RE.test(msg) || RESUME_CONNECTION_LOST_RE.test(msg))) {
       desc = await spawnWithResume(void 0);
       resumeFallback = true;
     } else {
@@ -23601,7 +24111,7 @@ var EMPTY_SKILLS = {
   byHarness: [],
   defaults: { global: [], byAdapter: {} }
 };
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function classifyDaemonMount(adapter) {
@@ -23754,15 +24264,15 @@ var slugToCamel2 = (slug) => slug.replace(/-([a-z0-9])/g, (_m, c) => c.toUpperCa
 async function readAdapterManifest(adapter) {
   try {
     const mod = await import(adapter.packageName);
-    if (!isRecord5(mod)) return void 0;
+    if (!isRecord6(mod)) return void 0;
     const candidate = mod[slugToCamel2(adapter.slug)] ?? mod.default ?? mod.handle;
-    return isRecord5(candidate) ? candidate : void 0;
+    return isRecord6(candidate) ? candidate : void 0;
   } catch {
     return void 0;
   }
 }
 function asSkillsTarget(value) {
-  if (!isRecord5(value) || typeof value.format !== "string") return void 0;
+  if (!isRecord6(value) || typeof value.format !== "string") return void 0;
   const out = { format: value.format };
   if (typeof value.dir === "string") out.dir = value.dir;
   if (typeof value.outDir === "string") out.outDir = value.outDir;
@@ -23779,10 +24289,10 @@ async function listNativeSkills(adapter) {
 }
 async function buildHarnessEntry(adapter) {
   const manifest = await readAdapterManifest(adapter);
-  const metadata = manifest && isRecord5(manifest.metadata) ? manifest.metadata : void 0;
+  const metadata = manifest && isRecord6(manifest.metadata) ? manifest.metadata : void 0;
   const target = asSkillsTarget(metadata?.skills);
   const options = manifest && Array.isArray(manifest.options) ? manifest.options : [];
-  const spawnOption = options.some((o) => isRecord5(o) && o.id === "skills");
+  const spawnOption = options.some((o) => isRecord6(o) && o.id === "skills");
   const [installed, native] = await Promise.all([
     target ? listInstalledForTarget(target) : Promise.resolve([]),
     listNativeSkills(adapter)
@@ -24168,6 +24678,8 @@ async function processTreeRss(rootPids, exec = defaultPsExecutor) {
 }
 
 // src/session-tools.ts
+init_transcript_writer();
+init_session_index();
 init_process_stats();
 
 // src/host-load.ts
@@ -25961,6 +26473,7 @@ var publicSessionDescriptor = (session) => {
 var compactSessionItem = (s) => ({
   id: s.id,
   kind: s.kind,
+  ...s.origin ? { origin: s.origin } : {},
   name: s.name,
   label: s.label,
   status: s.status,
@@ -25995,6 +26508,7 @@ var compactSessionItem = (s) => ({
   ...s.lastTurnErrorMessage !== void 0 ? { lastTurnErrorMessage: s.lastTurnErrorMessage } : {},
   ...s.lastTurnReason !== void 0 ? { lastTurnReason: s.lastTurnReason } : {},
   ...s.lastTurnEmpty !== void 0 ? { lastTurnEmpty: s.lastTurnEmpty } : {},
+  ...s.firstTurnFailed ? { firstTurnFailed: true } : {},
   ...s.interrupted ? { interrupted: true } : {},
   ...s.rssBytes !== void 0 ? { rssBytes: s.rssBytes } : {},
   ...s.stats !== void 0 ? { stats: s.stats } : {},
@@ -26248,6 +26762,66 @@ function registerSessionTools(rawServer, opts) {
       })
     ]
   });
+  const sessionSearchSchema = z.object({
+    query: z.string().describe(
+      "Case-insensitive substring to match: a session id PREFIX, or a substring of label, title, cwd, or workspace slug. Empty matches all."
+    ),
+    status: z.enum(["starting", "running", "exited", "killed", "error"]).optional().describe("Filter by exact status."),
+    ...pageParamsShape
+  });
+  registerBuiltinTool(server, {
+    id: "session_search",
+    description: "Find sessions by a case-insensitive query across id prefix, label, title, cwd and workspace slug \u2014 the daemon-side twin of `agentproto sessions find <query>`. Optional `status` filters to an exact lifecycle status; `limit` (default 20) caps the result. Each hit uses the same compact shape as `session_list`. Read-only; use `session_recap` on a hit to see where that session stopped.",
+    inputSchema: sessionSearchSchema,
+    handler: async (input) => {
+      let rows = registry.list({ includeArchived: true });
+      if (callerScope) {
+        const subtree = collectSubtree(callerScope.ownerSessionId, rows);
+        rows = rows.filter((s) => subtree.has(s.id));
+      }
+      rows = rows.filter((s) => matchesSessionQuery(s, input.query));
+      if (input.status) rows = rows.filter((s) => s.status === input.status);
+      const limit = Math.max(1, Math.min(200, input.limit ?? INDEX_DEFAULT_LIMIT));
+      rows = rows.sort((a, b) => (b.lastActivityAt ?? b.startedAt).localeCompare(a.lastActivityAt ?? a.startedAt)).slice(0, limit);
+      return rows.map(publicSessionDescriptor);
+    },
+    transformers: [
+      paginated({
+        project: compactSessionItem,
+        keyOf: (s) => s.id,
+        maxLimit: 200,
+        itemKey: "sessions"
+      })
+    ]
+  });
+  registerBuiltinTool(server, {
+    id: "session_recap",
+    description: 'One-glance "where did we stop" for a session: the last K user prompts with timestamps, the final assistant text of the last turn, and meta (status/alive, model, adapter, cwd, parent, child ids, cost, queued prompts). Reads the session\'s index sidecar plus a bounded tail of its transcript \u2014 never the whole file. Use it to resume an interrupted session by id (find the id with `session_search`).',
+    inputSchema: z.object({
+      id: z.string().min(1).describe("Session id or name \u2014 from `session_list`/`session_search`."),
+      last: z.number().int().min(1).max(50).optional().describe("How many recent user prompts to include (default 8).")
+    }),
+    handler: async (input) => {
+      const resolved = registry.findByIdOrName(input.id);
+      if (!resolved) throw new Error(`session_recap: no session "${input.id}"`);
+      const desc = registry.get(resolved.id) ?? resolved;
+      const baseDir = registry.transcriptBaseDir;
+      const index = readSessionIndex(desc.id, baseDir);
+      const entry = indexEntryFromDescriptor(desc, {
+        ...index?.lastUserPrompt ? { lastUserPrompt: index.lastUserPrompt } : {},
+        ...index?.lastOutputText ? { lastOutputText: index.lastOutputText } : {}
+      });
+      const children = registry.list({ includeArchived: true }).filter((s) => s.parentSessionId === desc.id).map((s) => s.id);
+      return buildSessionRecap({
+        entry,
+        eventsPath: sessionEventsPath(desc.id, baseDir),
+        last: input.last ?? 8,
+        children,
+        ...desc.queuedPrompts !== void 0 ? { queuedPrompts: desc.queuedPrompts } : {}
+      });
+    },
+    transformers: [catchErrors()]
+  });
   registerBuiltinTool(server, {
     id: "session_stats",
     description: 'Resource usage per session, sampled from the OS process table: RSS bytes, %CPU, process count and top commands by RSS for every live session, sorted by RSS (each row labelled with the session\'s `label`/`name`), plus `daemon` (the daemon process + its own children), `provisioning` (worktree setup work such as `pnpm install` not yet attached to a session, with `inFlight` provisions), `orphans` (processes that look agentproto-owned but belong to no live session - reported only, never killed), `totals`, and `host` (load average, free/total memory). `detail:"full"` adds every process (pid, command, RSS, CPU, elapsed) per row. Cached ~3s; `fresh:true` forces a new sample. A subtree-scoped caller sees only its own sessions (no daemon/provisioning/orphan buckets).',
@@ -28495,8 +29069,8 @@ function registerSessionTools(rawServer, opts) {
     'Record a verdict on specific sessions \u2014 the mutating half of `session_wrapup_plan`. Each id is RE-CLASSIFIED from scratch immediately before acting (a plan computed moments earlier can be stale) and is only acted on if it is STILL `close` or `stuck`. Pass `judgedBy` (a judge session id) to also accept a `judge`-class id \u2014 the judge\'s verdict is what makes it safe to act on. `keep`-class ids are ALWAYS refused, no exception. `verdict: "done"` or `"abandoned"` actually CLOSES the session (tagged `endedReason:\'steward-completed\'`/`\'steward-abandoned\'`) and leaves it resumable (same as the idle reaper) \u2014 this never deletes anything. `verdict: "blocked"` or `"needs-input"` is NOT a completion: the session is left running untouched and the verdict is recorded as a flag (`SessionDescriptor.wrapupFlag`) instead \u2014 the per-id result\'s `action` says `closed` vs `flagged`. Also refused (result `ok:false`, `error:\'refused_stale_or_busy\'`) if the session is busy/awaitingInput/awaitingPermission or has a background task outstanding at the moment of the call, for either kind of action. A scoped orchestrator may only act on its own subtree. Returns a per-id result. Only the requested sessions are re-checked (never a full plan). If it outlasts 25 s (`waitMs`) it returns `{ jobId, status: "running", followUp }` \u2014 poll `session_wrapup_status`; the apply keeps running regardless.',
     {
       sessionIds: z.array(z.string().min(1)).min(1).describe("Session ids or names, from `session_wrapup_plan`."),
-      verdict: z.enum(["done", "abandoned", "blocked", "needs-input"]).describe(
-        'What the session\'s work amounted to. "done"/"abandoned" CLOSE the session (`endedReason:\'steward-completed\'`/`\'steward-abandoned\'`); "blocked"/"needs-input" only FLAG it (`SessionDescriptor.wrapupFlag`) \u2014 the session keeps running.'
+      verdict: z.enum(["done", "abandoned", "partial", "failed", "blocked", "needs-input"]).describe(
+        'What the session\'s work amounted to. "done"/"abandoned"/"partial"/"failed" CLOSE the session (`endedReason:\'steward-completed\'`/`\'steward-abandoned\'` \u2014 done only), the verdict nuance kept on the outcome; "blocked"/"needs-input" only FLAG it (`SessionDescriptor.wrapupFlag`) \u2014 the session keeps running.'
       ),
       note: z.string().optional().describe("Free-text note recorded on the outcome or the flag."),
       judgedBy: z.string().optional().describe(
@@ -28571,6 +29145,70 @@ function registerSessionTools(rawServer, opts) {
       }
     }
   );
+  server.tool(
+    "session_mark_completed",
+    "Mark a live session as completed \u2014 closes it with verdict:'done' and tags it as steward-completed. Use when a human (or an agent's judge) decides the session's work is done \u2014 the declared path: no wrapup plan, no classification. One call fuses what would otherwise be `session_wrapup_apply` without a plan: the verdict (with an optional summary + who judged it) is written onto the session's Level-2 `SessionOutcome` and the session is closed gracefully the same way wrapup-apply does, left lazy-resumable (never deleted). `verdict:'partial'`/'failed'/'abandoned' close as not-completed (`endedReason:'steward-abandoned'`); `'blocked'`/'needs-input' are NOT completions \u2014 the session stays running and the verdict is recorded as a flag instead. Refused (result ok:false) when the session is missing, not agent-cli, already terminal, mid-turn/awaiting input/permission, or has a background task in flight.",
+    {
+      sessionId: z.string().min(1).describe("Session id or name \u2014 from `session_list`, must be a live agent-cli session."),
+      verdict: z.enum(["done", "abandoned", "partial", "failed", "blocked", "needs-input"]).optional().describe(
+        "Default 'done'. 'done' closes as completed (`endedReason:'steward-completed'`); 'partial'/'failed'/'abandoned' close as not-completed (steward-abandoned) with the verdict nuance kept on the outcome; 'blocked'/'needs-input' flag instead \u2014 the session keeps running."
+      ),
+      summary: z.string().optional().describe("Overrides the outcome's derived summary (trimmed to the same cap as the derived one)."),
+      note: z.string().optional().describe("Free-text note explaining the verdict."),
+      judgedBy: z.string().optional().describe(
+        "A judge session id \u2014 sets the outcome's source to 'judged'. Omitted \u21D2 'declared', judgedBy:'steward-rules'."
+      )
+    },
+    async (input) => {
+      const desc = registry.findByIdOrName(input.sessionId);
+      if (!desc) {
+        return { content: [{ type: "text", text: JSON.stringify({ ok: false, error: "not_found", sessionId: input.sessionId }) }] };
+      }
+      if (callerScope) {
+        const subtree = collectSubtree(callerScope.ownerSessionId, registry.list({ includeArchived: true }));
+        if (!subtree.has(desc.id)) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify({
+                  ok: false,
+                  error: "orchestrator_session_out_of_scope",
+                  message: `session_mark_completed: session "${desc.id}" is not in your subtree \u2014 a scoped orchestrator can only mark sessions it (transitively) spawned.`,
+                  sessionId: desc.id
+                })
+              }
+            ],
+            isError: true
+          };
+        }
+      }
+      const verdict = input.verdict ?? "done";
+      const status = registry.get(desc.id)?.status ?? desc.status;
+      if (status !== "running" && status !== "starting") {
+        return {
+          content: [{ type: "text", text: JSON.stringify({ ok: false, error: "not_live", status, sessionId: desc.id }) }],
+          isError: true
+        };
+      }
+      const source = input.judgedBy ? "judged" : "declared";
+      const applied = registry.closeWithOutcome(desc.id, {
+        verdict,
+        ...input.summary !== void 0 ? { summary: input.summary } : {},
+        ...input.note !== void 0 ? { note: input.note } : {},
+        judgedBy: input.judgedBy ?? "steward-rules",
+        source
+      });
+      const out = {
+        ok: applied,
+        sessionId: desc.id,
+        verdict,
+        action: verdict === "blocked" || verdict === "needs-input" ? "flagged" : "closed",
+        ...!applied ? { error: "refused_stale_or_busy" } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(applied ? { ...out, endedReason: registry.get(desc.id)?.endedReason } : out) }] };
+    }
+  );
   server.tool(
     "session_evidence",
     "READ-ONLY \u2014 a compact evidence object for ONE session, as fed to the session-steward judge: label, cwd, adapter, status, keepAlive, awaitingInput, busy, idle minutes, the last ~10 user/assistant turns (trimmed to ~3 KB total, newest kept first), and \u2014 for a session in a linked worktree \u2014 branch, dirty counts, ahead/behind and PR state/number. Mutates nothing.",
@@ -31672,12 +32310,18 @@ function registerMcpApps(server, apps) {
       uri: resourceUri,
       html,
       description: app.description,
-      csp: app.csp
+      csp: app.csp,
+      ...app.openai?.resource !== void 0 ? {
+        // Namespaced under `openai/ui` per §3.2 — a sibling of the
+        // canonical `_meta.ui`, never an overwrite of it.
+        meta: { "openai/ui": JSON.parse(JSON.stringify(app.openai.resource)) }
+      } : {}
     });
     server.registerTool(
       app.id,
       {
         description: app.description ?? app.title,
+        ...app.openai !== void 0 ? { title: app.title } : {},
         inputSchema: app.inputSchema.shape,
         annotations: {
           readOnlyHint: true,
@@ -31687,7 +32331,13 @@ function registerMcpApps(server, apps) {
           ui: {
             resourceUri,
             visibility: ["model", "app"]
-          }
+          },
+          ...app.openai?.tool?.entrypoints !== void 0 || app.openai?.icons !== void 0 ? {
+            "openai/ui": {
+              ...app.openai.tool?.entrypoints !== void 0 ? { entrypoints: JSON.parse(JSON.stringify(app.openai.tool.entrypoints)) } : {},
+              ...app.openai.icons !== void 0 ? { icons: JSON.parse(JSON.stringify(app.openai.icons)) } : {}
+            }
+          } : {}
         }
       },
       async (args) => {
@@ -34786,11 +35436,11 @@ function verifySignatureV2(secret, headers, body, nowMs, skewMs = SIGNATURE_V2_S
   if (a.length !== b.length || !timingSafeEqual(a, b)) return { ok: false, reason: "signature_mismatch" };
   return { ok: true, timestampSec };
 }
-var isRecord6 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord7 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function toSentinelEvent(raw, seq) {
-  if (!isRecord6(raw)) return null;
+  if (!isRecord7(raw)) return null;
   const { id, source, type, subject, time, data, summary, subjects, terminal, consumerref } = raw;
-  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord6(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
+  if (raw.specversion !== "1.0" || typeof id !== "string" || id === "" || typeof source !== "string" || typeof type !== "string" || type === "" || typeof subject !== "string" || subject === "" || typeof time !== "string" || !isRecord7(data) || typeof summary !== "string" || !Array.isArray(subjects) || !subjects.every((s) => typeof s === "string") || typeof terminal !== "boolean") {
     return null;
   }
   const envSeq = typeof raw.seq === "number" ? raw.seq : seq;
@@ -34896,7 +35546,7 @@ function agentpushSentinelProvider(opts = {}) {
       json3 = void 0;
     }
     if (!res.ok) {
-      const detail = isRecord6(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
+      const detail = isRecord7(json3) && typeof json3.error === "string" ? json3.error : text13.slice(0, 200);
       throw new AgentpushHttpError(res.status, `agentpush ${method} ${path} \u2192 HTTP ${res.status}${detail ? `: ${detail}` : ""}`);
     }
     return json3;
@@ -34982,7 +35632,7 @@ function agentpushSentinelProvider(opts = {}) {
           ...push ? { callback_url: callbackUrl2(delivery.callbackUrl, hookKey), callback_secret: callbackSecret } : {}
         }
       });
-      const id = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription.id : void 0;
+      const id = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription.id : void 0;
       if (typeof id !== "string" || id === "") throw new Error("agentpush: create returned no subscription id");
       return {
         provider: AGENTPUSH_SLUG,
@@ -35009,7 +35659,7 @@ function agentpushSentinelProvider(opts = {}) {
       let sub;
       try {
         const json3 = await api("GET", subPath(handle));
-        sub = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription : void 0;
+        sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
       } catch (err) {
         if (isHttp(err, 404)) {
           throw new Error(`agentpush subscription ${handle.remoteId} no longer exists \u2014 re-create the sentinel`);
@@ -35040,7 +35690,7 @@ function agentpushSentinelProvider(opts = {}) {
     async status(handle) {
       try {
         const json3 = await api("GET", subPath(handle));
-        const sub = isRecord6(json3) && isRecord6(json3.subscription) ? json3.subscription : void 0;
+        const sub = isRecord7(json3) && isRecord7(json3.subscription) ? json3.subscription : void 0;
         const status = sub && typeof sub.status === "string" ? sub.status : "unknown";
         if (status === "active") return { ok: true };
         return { ok: false, detail: `the agentpush subscription is ${status}` };
@@ -35052,12 +35702,12 @@ function agentpushSentinelProvider(opts = {}) {
       const after = handle.cursor ?? "0";
       if (stateOf(handle).mode === "push") return { events: [], cursor: after };
       const json3 = await api("GET", `${subPath(handle)}/events`, { query: { after, limit: Math.max(1, Math.min(limit, 1e3)) } });
-      const items = isRecord6(json3) && Array.isArray(json3.items) ? json3.items : [];
+      const items = isRecord7(json3) && Array.isArray(json3.items) ? json3.items : [];
       const events = [];
       let cursor = Number(after);
       if (!Number.isFinite(cursor)) cursor = 0;
       for (const item of items) {
-        if (!isRecord6(item)) continue;
+        if (!isRecord7(item)) continue;
         const seq = typeof item.seq === "number" ? item.seq : void 0;
         if (seq !== void 0 && seq > cursor) cursor = seq;
         const event = toSentinelEvent(item.envelope, seq);
@@ -37433,11 +38083,11 @@ function sanitize(cacheKey) {
   const cleaned = cacheKey.replace(/[^a-zA-Z0-9._-]/g, "_");
   return cleaned.length > 0 ? cleaned : "default";
 }
-function isRecord7(v) {
+function isRecord8(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function isEntry2(v) {
-  return isRecord7(v) && typeof v.resolvedInputHash === "string" && "output" in v;
+  return isRecord8(v) && typeof v.resolvedInputHash === "string" && "output" in v;
 }
 function createFileStepCache(cacheKey, opts) {
   const dir = opts?.dir ?? DEFAULT_CACHE_DIR();
@@ -37450,7 +38100,7 @@ function createFileStepCache(cacheKey, opts) {
     } catch {
       return {};
     }
-    if (!isRecord7(parsed)) return {};
+    if (!isRecord8(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) if (isEntry2(v)) out[k] = v;
     return out;
@@ -43534,7 +44184,15 @@ async function performInstall(dir, appRegistry, listRegisteredToolIds, resolveAg
     ...handle.ui?.description !== void 0 ? { description: handle.ui.description } : {},
     ...handle.ui?.tools !== void 0 ? { tools: handle.ui.tools } : {},
     ...handle.ui?.csp !== void 0 ? { csp: handle.ui.csp } : {},
-    ...handle.ui?.build !== void 0 ? { build: handle.ui.build } : {}
+    ...handle.ui?.build !== void 0 ? { build: handle.ui.build } : {},
+    // OpenAI MCP-extensions carrier (plan W-B): the normalized,
+    // app-kit-validated `ui.extensions` block persists verbatim on the
+    // installed record — `makeInstalledAppUiApps` (W-C) is the only
+    // consumer. Frozen already by app-kit; spread-cloned here so the
+    // persisted shape stays a plain JSON-safe object (apps.json is
+    // what actually freezes it). Apps without the block install
+    // identically to before (plan I1).
+    ...handle.ui?.extensions !== void 0 ? { extensions: handle.ui.extensions } : {}
   } : void 0;
   const artifact = refs.artifact ? {
     path: refs.artifact.path,
@@ -44576,12 +45234,12 @@ async function readBody2(req) {
   }
   return { raw: Buffer.concat(chunks).toString("utf8") };
 }
-var isRecord8 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isRecord9 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function parseParts(raw) {
   if (!Array.isArray(raw)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "message.parts must be an array");
   const parts = [];
   for (const p of raw) {
-    if (!isRecord8(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
+    if (!isRecord9(p)) throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "each message part must be an object");
     if ("text" in p) {
       if (typeof p.text !== "string") throw new RpcFailure(JSON_RPC_ERROR.invalidParams, "part.text must be a string");
       parts.push({ text: p.text });
@@ -44614,13 +45272,13 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.parse, message: "parse error: body is not valid JSON" } });
     return true;
   }
-  if (!isRecord8(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
+  if (!isRecord9(rpc) || rpc.jsonrpc !== "2.0" || typeof rpc.method !== "string") {
     send(res, 200, { jsonrpc: "2.0", id: null, error: { code: JSON_RPC_ERROR.invalidRequest, message: 'invalid request: expected a JSON-RPC 2.0 object with a string "method" (batches are not supported)' } });
     return true;
   }
   const id = typeof rpc.id === "string" || typeof rpc.id === "number" ? rpc.id : null;
   const method = rpc.method;
-  const params = isRecord8(rpc.params) ? rpc.params : {};
+  const params = isRecord9(rpc.params) ? rpc.params : {};
   const requested = negotiateVersion(
     typeof req.headers["a2a-version"] === "string" ? req.headers["a2a-version"] : void 0,
     new URL(req.url ?? "/", "http://localhost").searchParams.get("version")
@@ -44678,14 +45336,14 @@ async function handleA2aTaskRequest(req, res, path, deps2) {
           throw new RpcFailure(JSON_RPC_ERROR.unsupportedOperation, `method "SendMessage" is not allowed for app "${appId}": its manifest does not declare accepts.tasks: true`);
         }
         const rawMessage = params.message;
-        if (!isRecord8(rawMessage) || rawMessage.role !== "ROLE_USER") {
+        if (!isRecord9(rawMessage) || rawMessage.role !== "ROLE_USER") {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'params.message must be an object with role "ROLE_USER"');
         }
         const parts = parseParts(rawMessage.parts);
         const { skill, prompt } = extractSkillRequest(
-          { parts, ...isRecord8(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
+          { parts, ...isRecord9(rawMessage.metadata) ? { metadata: rawMessage.metadata } : {} },
           appId,
-          isRecord8(params.metadata) ? params.metadata : void 0
+          isRecord9(params.metadata) ? params.metadata : void 0
         );
         if (!skill) {
           throw new RpcFailure(JSON_RPC_ERROR.invalidParams, 'no skill requested: set message.metadata.skill or start the first text part with "skill:<id>"');
@@ -46565,6 +47223,7 @@ async function startHttpServer(opts) {
             opts.resolveSandboxProvider,
             opts.webhookNotifier,
             opts.ensureLlmEndpointRunning,
+            opts.listAgentAdapters,
             opts.deviceMirrorSync
           );
           if (handled) return;
@@ -48617,7 +49276,7 @@ async function handleSandboxes(_req, res, path, resolveSandboxProvider2) {
   json3(200, { alive: true, ...probe.state ? { state: probe.state } : { state: row.state }, checkedAt });
   return true;
 }
-async function handleSessions(req, res, path, registry, resolveAgentAdapter, ptyEnabled = false, resolveBrowserAdapter, listBrowserAdapters, sessionEvents, eventRing, buildOrchestratorMcp, daemonMcpUrl, provisionWorktree, listCatalogModels, resolveSandboxProvider2, webhookNotifier, ensureLlmEndpointRunning, deviceMirrorSync) {
+async function handleSessions(req, res, path, registry, resolveAgentAdapter, ptyEnabled = false, resolveBrowserAdapter, listBrowserAdapters, sessionEvents, eventRing, buildOrchestratorMcp, daemonMcpUrl, provisionWorktree, listCatalogModels, resolveSandboxProvider2, webhookNotifier, ensureLlmEndpointRunning, listAgentAdapters, deviceMirrorSync) {
   const json3 = (status, body) => {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(body));
@@ -48775,12 +49434,13 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
         ...listCatalogModels ? { listCatalogModels } : {},
         ...resolveSandboxProvider2 ? { resolveSandboxProvider: resolveSandboxProvider2 } : {},
         ...webhookNotifier ? { webhookNotifier } : {},
-        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+        ...listAgentAdapters ? { listAgentAdapters } : {}
       },
       spawnArgs
     );
     if (!result.ok) {
-      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" ? 400 : 500;
+      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" || result.code === "device_spawn_unreachable" ? 400 : 500;
       json3(status, {
         error: result.code,
         message: result.message,
@@ -48842,12 +49502,13 @@ async function handleSessions(req, res, path, registry, resolveAgentAdapter, pty
         ...listCatalogModels ? { listCatalogModels } : {},
         ...resolveSandboxProvider2 ? { resolveSandboxProvider: resolveSandboxProvider2 } : {},
         ...webhookNotifier ? { webhookNotifier } : {},
-        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {}
+        ...ensureLlmEndpointRunning ? { ensureLlmEndpointRunning } : {},
+        ...listAgentAdapters ? { listAgentAdapters } : {}
       },
       spawnArgs
     );
     if (!result.ok) {
-      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" ? 400 : 500;
+      const status = result.code === "adapter_not_found" || result.code === "no_cwd" ? 404 : result.code === "orchestrator_not_enabled" ? 501 : result.code === "orchestrator_max_depth_exceeded" || result.code === "orchestrator_child_quota_exceeded" || result.code === "role_spawn_denied" ? 409 : result.code === "invalid_role" || result.code === "browser_unsupported" || result.code === "worktree_requires_explicit_repo" || result.code === "device_spawn_requires_repo_identity" || result.code === "device_bridge_workspace_unknown" || result.code === "access_profile_not_found" || result.code === "access_profile_ineligible" || result.code === "sandbox_cwd_invalid" || result.code === "device_spawn_unreachable" ? 400 : 500;
       json3(status, {
         error: result.code,
         message: result.message,
@@ -52198,9 +52859,13 @@ function isCrashed(desc) {
   if (desc.kind !== "agent-cli") return false;
   if (desc.status !== "running") return false;
   if (desc.remote === true) return false;
+  if (desc.adapterConnected === false) return true;
   if (desc.pid === null || desc.pid === void 0) return false;
   return desc.processAlive === false;
 }
+function crashReasonFor(desc) {
+  return desc.adapterConnected === false ? "transport-closed" : "process-gone";
+}
 function runCrashDetectPass(opts) {
   const { registry, isServed } = opts;
   const intervalMs = opts.crashDetectIntervalMs;
@@ -52216,7 +52881,7 @@ function runCrashDetectPass(opts) {
     ids: []
   };
   for (const d of candidates) {
-    if (registry.markCrashed(d.id)) {
+    if (registry.markCrashed(d.id, crashReasonFor(d))) {
       summary.crashed++;
       summary.ids.push(d.id);
     }
@@ -52386,6 +53051,7 @@ async function resolveMessagingDefaults(loadCfg = loadConfig) {
 
 // src/index.ts
 init_transcript_writer();
+init_session_index();
 var BINDINGS_FILE_PATH = () => resolve(homedir(), ".agentproto", "transmitter-bindings.json");
 var PERSIST_DEBOUNCE_MS5 = 1500;
 var keyOf = (alias, source, contactRef) => `${alias}:${source}:${contactRef}`;
@@ -52799,12 +53465,13 @@ async function ssrfFetch(url, init, io = {}) {
   if ((init.body?.byteLength ?? 0) > MAX_REQUEST_BODY_BYTES) {
     throw new SsrfFetchError("connect", `request body exceeds the ${MAX_REQUEST_BODY_BYTES}-byte clamp`);
   }
+  const port = parsed.port ? Number(parsed.port) : 443;
   if (testDispatcher) {
     const literal = parseIpv4(parsed.hostname);
     if (literal && !ipv4Public(literal[0], literal[1], literal[2], literal[3])) {
       throw new SsrfFetchError("private_target", `literal non-public address ${parsed.hostname}`);
     }
-    return await testDispatcher({ url, headers: init.headers ?? {}, body: init.body, timeoutMs: init.timeoutMs });
+    return await testDispatcher({ url, headers: finalHeaders(init.headers ?? {}, parsed.hostname, port), body: init.body, timeoutMs: init.timeoutMs });
   }
   const candidates = await resolveHost(parsed.hostname, io.resolvers ?? {});
   if (candidates.length === 0) {
@@ -52816,17 +53483,26 @@ async function ssrfFetch(url, init, io = {}) {
   }
   const connectIp = candidates[0] ?? candidates[candidates.length - 1];
   if (connectIp === void 0) throw new SsrfFetchError("connect", "no address available for connect");
-  const port = parsed.port ? Number(parsed.port) : 443;
   return await rawPost({
     connectIp,
     servername: parsed.hostname,
     port,
     path: `${parsed.pathname}${parsed.search}`,
-    headers: init.headers ?? {},
+    // HTTP Host header must stay the ORIGINAL hostname — `request({host})`
+    // below only picks the TCP destination; a literal-IP Host is answered
+    // 403/421 by name-based vhosts (tested live against cloudflared+CF edge),
+    // which would falsely categorise every virtual-hosted subscriber as
+    // non_2xx. An explicit caller Host header wins (finalHeaders keeps it).
+    headers: finalHeaders(init.headers ?? {}, parsed.hostname, port),
     body: init.body,
     timeoutMs: init.timeoutMs
   });
 }
+function finalHeaders(headers, hostname6, port) {
+  const hasHost = "Host" in headers || "host" in headers;
+  if (hasHost) return headers;
+  return { ...headers, Host: port === 443 ? hostname6 : `${hostname6}:${port}` };
+}
 function rawPost(args) {
   return new Promise((resolve42, reject) => {
     const req = request({
@@ -52837,6 +53513,8 @@ function rawPost(args) {
       path: args.path,
       method: "POST",
       servername: args.servername,
+      // Host already defaulted to the ORIGINAL hostname by finalHeaders —
+      // the socket only carries `args.connectIp` as its TCP destination.
       headers: args.headers,
       rejectUnauthorized: true
     });
@@ -52954,6 +53632,562 @@ async function deliverEventEnvelope(replay, event, deps2 = {}) {
   }
   return { ok: false, reason: "retries_exhausted", delivery };
 }
+function challengeReasonForSsrf(reason) {
+  if (reason === "non_https") return "non_https";
+  if (reason === "private_target" || reason === "redirect") return "ssrf_blocked";
+  return "timeout";
+}
+var CHALLENGE_TTL_MS = 10 * 60 * 1e3;
+var encoder = new TextEncoder();
+var cache = /* @__PURE__ */ new Map();
+function challengeCacheSize() {
+  return cache.size;
+}
+function resetChallengeCacheForTests() {
+  cache.clear();
+}
+function normalizeCallbackUrl(url) {
+  try {
+    const u = new URL(url);
+    const port = u.port === "443" ? "" : `:${u.port}`;
+    return `${u.protocol.toLowerCase()}//${u.hostname.toLowerCase()}${port}${u.pathname}${u.search}`;
+  } catch {
+    return null;
+  }
+}
+function hashSecret(secret) {
+  return createHash("sha256").update(secret, "utf8").digest("hex");
+}
+function constantTimeEq(a, b) {
+  const da = createHash("sha256").update(a, "utf8").digest();
+  const db = createHash("sha256").update(b, "utf8").digest();
+  return timingSafeEqual(da, db);
+}
+async function verifyCallback(input, deps2 = {}) {
+  const now = deps2.now ?? (() => Date.now());
+  const normalized = normalizeCallbackUrl(input.url);
+  if (normalized === null || !normalized.startsWith("https://")) {
+    return { ok: false, reason: "non_https", detail: "callback URL must be an https URL" };
+  }
+  if (decodeWhsecSecret(input.secret) === null) {
+    return {
+      ok: false,
+      reason: "challenge_failed",
+      detail: "invalid secret format \u2014 must be whsec_ + base64 decoding to 24..64 bytes (the caller validates before this; a bad secret is never cached)"
+    };
+  }
+  const cacheKey = `${input.principal}|${normalized}|${hashSecret(input.secret)}`;
+  const cached = cache.get(cacheKey);
+  if (cached && cached.expiresAt > now()) {
+    return { ok: true, verificationBytes: cached.requestBytes };
+  }
+  if (cached) cache.delete(cacheKey);
+  const challenge = randomBytes(32).toString("hex");
+  const requestBytes = encoder.encode(JSON.stringify({ type: "verification", challenge }));
+  const msgId = `msg_verification_${randomBytes(12).toString("hex")}`;
+  const timestamp = Math.floor(now() / 1e3);
+  let headers;
+  try {
+    const signed = signWebhook({ msgId, timestamp, payload: requestBytes, secrets: [input.secret] });
+    headers = {
+      ...signed,
+      "content-type": "application/json",
+      "X-MCP-Subscription-Id": input.subscriptionId
+    };
+  } catch (err) {
+    return { ok: false, reason: "challenge_failed", detail: `signing failed: ${err.message}` };
+  }
+  let response;
+  try {
+    response = await (deps2.fetch ?? ssrfFetch)(input.url, {
+      method: "POST",
+      headers,
+      body: requestBytes,
+      timeoutMs: 1e4
+      // default challenge timeout (delivery uses 15_000)
+    });
+  } catch (err) {
+    if (err instanceof SsrfFetchError) {
+      return { ok: false, reason: challengeReasonForSsrf(err.reason), detail: `${err.reason}: ${err.message}` };
+    }
+    return { ok: false, reason: "timeout", detail: err.message };
+  }
+  if (response.status < 200 || response.status > 299) {
+    return { ok: false, reason: "non_2xx", detail: `callback responded with status ${response.status}` };
+  }
+  let parsedBody;
+  try {
+    parsedBody = JSON.parse(response.body);
+  } catch {
+    return { ok: false, reason: "challenge_failed", detail: "response body is not JSON" };
+  }
+  const echoed = parsedBody?.challenge;
+  if (typeof echoed !== "string" || !constantTimeEq(echoed, challenge)) {
+    return { ok: false, reason: "challenge_failed", detail: "response did not echo the fresh challenge" };
+  }
+  cache.set(cacheKey, { requestBytes, expiresAt: now() + CHALLENGE_TTL_MS });
+  return { ok: true, verificationBytes: requestBytes };
+}
+function canonicalizeJcs(value) {
+  if (value === null) return "null";
+  switch (typeof value) {
+    case "boolean":
+      return value ? "true" : "false";
+    case "number":
+      if (!Number.isFinite(value)) throw new Error("JCS: non-finite number is not JSON");
+      return JSON.stringify(value);
+    case "string":
+      return JSON.stringify(value);
+    case "object":
+      break;
+    default:
+      throw new Error(`JCS: unsupported value type "${typeof value}"`);
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map(canonicalizeJcs).join(",")}]`;
+  }
+  const obj = value;
+  const keys = Object.keys(obj).sort();
+  const members = keys.map((key) => `${JSON.stringify(key)}:${canonicalizeJcs(obj[key])}`);
+  return `{${members.join(",")}}`;
+}
+function subscriptionId(identity) {
+  const canonical3 = canonicalizeJcs({
+    principal: identity.principal,
+    callbackUrl: identity.callbackUrl,
+    eventName: identity.eventName,
+    args: identity.args
+  });
+  const digest = createHash("sha256").update(canonical3, "utf8").digest("hex");
+  return `sub_${digest.slice(0, 32)}`;
+}
+
+// src/mcp-events/events-registry.ts
+function daemonBearerPrincipal() {
+  return "daemon-bearer";
+}
+function sessionPrincipal(sessionId) {
+  return `session:${sessionId}`;
+}
+function typeMatches(type, value) {
+  if (Array.isArray(type)) return type.some((t) => typeMatches(t, value));
+  switch (type) {
+    case "object":
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    case "array":
+      return Array.isArray(value);
+    case "string":
+      return typeof value === "string";
+    case "number":
+      return typeof value === "number" && Number.isFinite(value);
+    case "integer":
+      return typeof value === "number" && Number.isInteger(value);
+    case "boolean":
+      return typeof value === "boolean";
+    case "null":
+      return value === null;
+    default:
+      return true;
+  }
+}
+function deepEqual2(a, b) {
+  if (a === b) return true;
+  if (typeof a !== typeof b) return false;
+  if (Array.isArray(a) && Array.isArray(b)) {
+    return a.length === b.length && a.every((v, i) => deepEqual2(v, b[i]));
+  }
+  if (typeof a === "object" && a !== null && typeof b === "object" && b !== null) {
+    const ao = a;
+    const bo = b;
+    const ak = Object.keys(ao);
+    const bk = Object.keys(bo);
+    return ak.length === bk.length && ak.every((k) => deepEqual2(ao[k], bo[k]));
+  }
+  return false;
+}
+function validateNode(schema, value, path) {
+  const at = path || "$";
+  if (schema.type !== void 0 && !typeMatches(schema.type, value)) {
+    return { ok: false, reason: `${at}: expected ${String(schema.type)}` };
+  }
+  if (schema.const !== void 0 && !deepEqual2(schema.const, value)) {
+    return { ok: false, reason: `${at}: must equal the const value` };
+  }
+  if (Array.isArray(schema.enum) && !schema.enum.some((e) => deepEqual2(e, value))) {
+    return { ok: false, reason: `${at}: not one of the allowed values` };
+  }
+  if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+    const obj = value;
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    for (const key of required) {
+      if (!(key in obj)) return { ok: false, reason: `${at}: missing required property "${key}"` };
+    }
+    const properties = schema.properties ?? {};
+    if (schema.additionalProperties === false) {
+      for (const key of Object.keys(obj)) {
+        if (!(key in properties)) return { ok: false, reason: `${at}: unexpected property "${key}"` };
+      }
+    }
+    for (const [key, sub] of Object.entries(properties)) {
+      if (key in obj) {
+        const result = validateNode(sub, obj[key], `${path}.${key}`);
+        if (!result.ok) return result;
+      }
+    }
+  }
+  if (Array.isArray(value) && schema.items !== void 0) {
+    const items = schema.items;
+    for (let i = 0; i < value.length; i++) {
+      const result = validateNode(items, value[i], `${path}[${i}]`);
+      if (!result.ok) return result;
+    }
+  }
+  if (typeof value === "string") {
+    if (typeof schema.minLength === "number" && value.length < schema.minLength) {
+      return { ok: false, reason: `${at}: shorter than ${schema.minLength}` };
+    }
+    if (typeof schema.pattern === "string" && !new RegExp(schema.pattern).test(value)) {
+      return { ok: false, reason: `${at}: does not match the required pattern` };
+    }
+  }
+  if (typeof value === "number" && typeof schema.minimum === "number" && value < schema.minimum) {
+    return { ok: false, reason: `${at}: below the minimum ${schema.minimum}` };
+  }
+  return { ok: true };
+}
+function validateAgainstInputSchema(schema, args) {
+  return validateNode(schema, args, "");
+}
+var PR_ARGS_INPUT_SCHEMA = {
+  type: "object",
+  properties: {
+    repo: {
+      type: "string",
+      description: "Repository in `owner/name` form, e.g. `agentproto/ts`.",
+      pattern: "^[^/\\s]+/[^/\\s]+$"
+    },
+    number: {
+      type: "integer",
+      description: "Pull request number.",
+      minimum: 1
+    }
+  },
+  required: ["repo", "number"],
+  additionalProperties: false
+};
+var ENVELOPE_DATA_PROPERTIES = {
+  subject: { type: "string", description: "CloudEvents subject the event is filed under." },
+  summary: { type: "string", description: "One-line human-readable summary." }
+};
+function payloadSchema2(properties, required) {
+  return {
+    type: "object",
+    properties: { ...properties, ...ENVELOPE_DATA_PROPERTIES },
+    required: [...required, "subject", "summary"],
+    additionalProperties: false
+  };
+}
+function githubPrArgumentsToMatch(eventName) {
+  return (args) => {
+    const repo = args.repo;
+    const number = args.number;
+    if (typeof repo !== "string" || !/^[^/\s]+\/[^/\s]+$/.test(repo)) {
+      return { ok: false, reason: "`repo` must be `owner/name`" };
+    }
+    if (typeof number !== "number" || !Number.isInteger(number) || number <= 0) {
+      return { ok: false, reason: "`number` must be a positive integer" };
+    }
+    return {
+      ok: true,
+      matchClauses: [{ subject: `github:${repo}#${number}`, types: [eventName] }],
+      providerSlug: "local-gh"
+    };
+  };
+}
+function githubAuthorize(_args, _principal) {
+  return true;
+}
+function githubEvent(input) {
+  return {
+    definition: {
+      name: input.name,
+      description: input.description,
+      delivery: ["webhook"],
+      inputSchema: PR_ARGS_INPUT_SCHEMA,
+      payloadSchema: input.payloadSchema
+    },
+    meta: {
+      // v1 REALITY: no provider has historical replay (plan §2) — every
+      // definition is non-replayable and always returns `cursor: null`.
+      replayable: false,
+      argumentsToMatch: githubPrArgumentsToMatch(input.name),
+      authorize: githubAuthorize
+    }
+  };
+}
+var GITHUB_SCHEME = {
+  scheme: "github",
+  events: [
+    githubEvent({
+      name: "github.pull_request.closed",
+      description: "A pull request was closed or merged.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "closed" },
+          merged: { type: "boolean", description: "True when the PR was merged rather than closed unmerged." },
+          repo: { type: "string" },
+          number: { type: "integer" }
+        },
+        ["action", "merged", "repo", "number"]
+      )
+    }),
+    githubEvent({
+      name: "github.pull_request.synchronize",
+      description: "New commits were pushed to a pull request's head branch.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "synchronize" },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          headSha: { type: "string" }
+        },
+        ["action", "repo", "number", "headSha"]
+      )
+    }),
+    githubEvent({
+      name: "github.pull_request_review.submitted",
+      description: "A review was submitted on a pull request.",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "submitted" },
+          state: { type: "string", description: "Review state, e.g. `approved`, `changes_requested`." },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          actor: { type: "string" }
+        },
+        ["action", "state", "repo", "number", "actor"]
+      )
+    }),
+    githubEvent({
+      name: "github.check_suite.completed",
+      description: "The checks on a pull request finished (a `failure` conclusion is the build-failed signal).",
+      payloadSchema: payloadSchema2(
+        {
+          action: { type: "string", const: "completed" },
+          conclusion: { type: "string", description: "Rolled-up worst-of conclusion across the completed checks." },
+          repo: { type: "string" },
+          number: { type: "integer" },
+          checks: {
+            type: "array",
+            items: {
+              type: "object",
+              properties: {
+                name: { type: "string" },
+                conclusion: { type: ["string", "null"] }
+              },
+              required: ["name", "conclusion"],
+              additionalProperties: true
+            }
+          }
+        },
+        ["action", "conclusion", "repo", "number", "checks"]
+      )
+    })
+  ]
+};
+var EVENT_REGISTRY = [GITHUB_SCHEME];
+function tenantScope(_principal) {
+  return EVENT_REGISTRY;
+}
+function findEventDefinition(name) {
+  for (const scheme of EVENT_REGISTRY) {
+    for (const event of scheme.events) {
+      if (event.definition.name === name) return event;
+    }
+  }
+  return void 0;
+}
+
+// src/mcp-events/adapter.ts
+var DEFAULT_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var MAX_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+var MIN_TTL_MS = 60 * 1e3;
+function computeRefreshBefore(until) {
+  return until.kind === "at" ? new Date(until.ms).toISOString() : null;
+}
+function untilForTtl(ttlMs, now) {
+  if (ttlMs === null) return { kind: "never" };
+  const requested = ttlMs === void 0 ? DEFAULT_TTL_MS : ttlMs;
+  const granted = Math.max(MIN_TTL_MS, Math.min(requested, MAX_TTL_MS));
+  return { kind: "at", ms: now + granted };
+}
+var McpEventsError = class extends Error {
+  code;
+  data;
+  constructor(code, message, data) {
+    super(message);
+    this.name = "McpEventsError";
+    this.code = code;
+    this.data = data;
+  }
+};
+function invalidParams(reason, detail) {
+  return new McpEventsError(-32602, `Invalid params: ${detail}`, { reason });
+}
+function callbackEndpointError(reason, detail) {
+  return new McpEventsError(-32015, `CallbackEndpointError: ${detail}`, { reason });
+}
+var mutationChain = Promise.resolve();
+function withSubscribeMutex(fn) {
+  const run = mutationChain.then(fn, fn);
+  mutationChain = run.catch(() => void 0);
+  return run;
+}
+function isRecord10(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var LIST_PAGE_DEFAULT = 50;
+var LIST_PAGE_MAX = 200;
+function encodeListCursor(offset, scheme) {
+  return Buffer.from(JSON.stringify({ offset, scheme }), "utf8").toString("base64url");
+}
+function decodeListCursor(cursor) {
+  if (cursor === void 0 || cursor === "") return 0;
+  try {
+    const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+    if (typeof parsed.offset !== "number" || !Number.isInteger(parsed.offset) || parsed.offset < 0) {
+      throw new Error("bad offset");
+    }
+    return parsed.offset;
+  } catch {
+    throw invalidParams("invalid_cursor", "`cursor` is not a cursor issued by a previous events/list response");
+  }
+}
+function requireWebhookDelivery(delivery) {
+  if (!isRecord10(delivery) || delivery.mode !== "webhook") {
+    throw invalidParams("unsupported_delivery_mode", 'delivery.mode must be "webhook"');
+  }
+  if (typeof delivery.url !== "string" || delivery.url.length === 0) {
+    throw invalidParams("invalid_callback_url", "delivery.url is required");
+  }
+  return { mode: "webhook", url: delivery.url, ...typeof delivery.secret === "string" ? { secret: delivery.secret } : {} };
+}
+function validateArgsOrThrow(name, registration, args) {
+  if (!isRecord10(args)) throw invalidParams("invalid_arguments", "`arguments` must be an object");
+  const schemaCheck = validateAgainstInputSchema(registration.definition.inputSchema, args);
+  if (!schemaCheck.ok) {
+    throw invalidParams("invalid_arguments", `arguments for "${name}": ${schemaCheck.reason}`);
+  }
+  return args;
+}
+async function eventsList(r, ctx) {
+  const schemes = tenantScope(ctx.principal);
+  const definitions = schemes.flatMap((scheme2) => scheme2.events.map((event) => event.definition));
+  const requested = r.pageSize ?? LIST_PAGE_DEFAULT;
+  const pageSize = Math.max(1, Math.min(Number.isFinite(requested) ? Math.floor(requested) : LIST_PAGE_DEFAULT, LIST_PAGE_MAX));
+  const offset = decodeListCursor(r.cursor);
+  const page = definitions.slice(offset, offset + pageSize);
+  const next = offset + page.length;
+  const scheme = schemes[0]?.scheme ?? "*";
+  return { events: page, nextCursor: next < definitions.length ? encodeListCursor(next, scheme) : null };
+}
+async function eventsSubscribe(input, ctx) {
+  const now = ctx.nowMs ?? Date.now;
+  const registration = findEventDefinition(input.name);
+  if (!registration) throw invalidParams("unknown_event", `unknown event "${input.name}"`);
+  const args = validateArgsOrThrow(input.name, registration, input.arguments);
+  if (!registration.meta.authorize(args, ctx.principal)) {
+    throw invalidParams("unauthorized", `not authorized to subscribe to "${input.name}" with the given arguments`);
+  }
+  const mapped = registration.meta.argumentsToMatch(args);
+  if (!mapped.ok) throw invalidParams("invalid_arguments", `arguments for "${input.name}": ${mapped.reason}`);
+  const delivery = requireWebhookDelivery(input.delivery);
+  const secret = delivery.secret;
+  if (secret === void 0 || decodeWhsecSecret(secret) === null) {
+    throw invalidParams(
+      "invalid_secret",
+      "delivery.secret must be `whsec_` followed by base64 that decodes to 24..64 bytes"
+    );
+  }
+  if (input.ttlMs !== void 0 && input.ttlMs !== null && (typeof input.ttlMs !== "number" || !Number.isFinite(input.ttlMs))) {
+    throw invalidParams("invalid_ttl", "`ttlMs` must be a finite number or null");
+  }
+  const id = subscriptionId({
+    principal: ctx.principal,
+    callbackUrl: delivery.url,
+    eventName: input.name,
+    args
+  });
+  const verify = ctx.verify ?? verifyCallback;
+  const outcome = await verify({ principal: ctx.principal, url: delivery.url, subscriptionId: id, secret });
+  if (!outcome.ok) throw callbackEndpointError(outcome.reason, outcome.detail);
+  return withSubscribeMutex(async () => {
+    const until = untilForTtl(input.ttlMs, now());
+    const existing = ctx.store.get(id);
+    if (existing) {
+      const target = existing.spec.target;
+      if (target.kind !== "webhook") {
+        throw invalidParams("identity_conflict", `subscription ${id} exists with a non-webhook target`);
+      }
+      const ref = ctx.store.materializeWebhookTargetRef(target);
+      if (ref !== void 0) ctx.store.putSentinelSecret(ref, { secret });
+      ctx.store.update(id, { spec: { ...existing.spec, until }, status: "active" });
+      return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+    }
+    const provider = await ctx.resolveProvider(mapped.providerSlug);
+    if (!provider) {
+      throw invalidParams("provider_unavailable", `sentinel provider "${mapped.providerSlug}" is not available`);
+    }
+    const spec = {
+      match: mapped.matchClauses,
+      until,
+      target: { kind: "webhook", url: delivery.url, secret },
+      provider: mapped.providerSlug
+    };
+    const handle = await provider.create(spec, deliveryPreferenceFor(provider, ctx.activeIntervalMs ?? 15e3), {
+      sentinelId: id
+    });
+    ctx.store.create({ id, spec, provider: mapped.providerSlug, handle });
+    return { id, refreshBefore: computeRefreshBefore(until), cursor: null };
+  });
+}
+async function eventsUnsubscribe(input, ctx) {
+  const registration = findEventDefinition(input.name);
+  if (!registration) throw invalidParams("unknown_event", `unknown event "${input.name}"`);
+  const args = validateArgsOrThrow(input.name, registration, input.arguments);
+  if (!registration.meta.authorize(args, ctx.principal)) {
+    throw invalidParams("unauthorized", `not authorized to unsubscribe from "${input.name}" with the given arguments`);
+  }
+  const delivery = requireWebhookDelivery(input.delivery);
+  const id = subscriptionId({
+    principal: ctx.principal,
+    callbackUrl: delivery.url,
+    eventName: input.name,
+    args
+  });
+  await withSubscribeMutex(async () => {
+    const existing = ctx.store.get(id);
+    if (!existing) return;
+    const provider = await ctx.resolveProvider(existing.provider);
+    if (provider) {
+      try {
+        await provider.cancel(existing.handle);
+      } catch {
+      }
+    }
+    ctx.store.remove(id);
+  });
+  return {};
+}
+function toMcpEvent(event) {
+  return {
+    eventId: event.id,
+    name: event.type,
+    timestamp: event.time,
+    data: { ...event.data, subject: event.subject, summary: event.summary },
+    cursor: null
+  };
+}
 
 // src/sentinel-webhook-outbox.ts
 function agentprotoHome3() {
@@ -52969,13 +54203,7 @@ function webhookRequestId(sentinelId, eventId) {
   return `sub_${digest.slice(0, 32)}`;
 }
 function toWebhookEnvelope(event) {
-  return {
-    eventId: event.id,
-    name: event.type,
-    timestamp: event.time,
-    data: { ...event.data, subject: event.subject, summary: event.summary },
-    cursor: null
-  };
+  return toMcpEvent(event);
 }
 function createSentinelWebhookOutbox(opts) {
   const filePath = opts.filePath ?? resolve(agentprotoHome3(), "sentinel-webhook-outbox.json");
@@ -54877,12 +56105,12 @@ function canonicalJson(value) {
 }
 function isToolAppVisible(tool) {
   const meta = tool._meta;
-  const ui = isRecord9(meta?.ui) ? meta.ui : void 0;
+  const ui = isRecord11(meta?.ui) ? meta.ui : void 0;
   const visibility = ui?.visibility;
   if (!Array.isArray(visibility)) return true;
   return visibility.includes("app");
 }
-function isRecord9(v) {
+function isRecord11(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function buildUiToolIndex(tools) {
@@ -55407,19 +56635,19 @@ function classifyMcpError(err) {
   return { status: "unreachable", error };
 }
 function uiMetaOf(meta) {
-  if (!isRecord10(meta) || !isRecord10(meta.ui)) return {};
+  if (!isRecord12(meta) || !isRecord12(meta.ui)) return {};
   const ui = meta.ui;
   const csp = cspOf(ui.csp);
   return {
     ...csp ? { csp } : {},
-    ...isRecord10(ui.permissions) ? { permissions: ui.permissions } : {},
+    ...isRecord12(ui.permissions) ? { permissions: ui.permissions } : {},
     ...typeof ui.prefersBorder === "boolean" ? { prefersBorder: ui.prefersBorder } : {},
     ...typeof ui.domain === "string" ? { domain: ui.domain } : {}
   };
 }
 var CSP_DOMAIN_KEYS = ["connectDomains", "resourceDomains", "frameDomains", "baseUriDomains"];
 function cspOf(raw) {
-  if (!isRecord10(raw)) return void 0;
+  if (!isRecord12(raw)) return void 0;
   const csp = {};
   for (const key of CSP_DOMAIN_KEYS) {
     const value = raw[key];
@@ -55429,7 +56657,7 @@ function cspOf(raw) {
   }
   return Object.keys(csp).length > 0 ? csp : void 0;
 }
-function isRecord10(v) {
+function isRecord12(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function errorMessage(err) {
@@ -57218,6 +58446,7 @@ function createPrProvenanceReconciler(opts) {
   const stampedPrUrls = /* @__PURE__ */ new Set();
   const costRefreshedPrUrls = /* @__PURE__ */ new Set();
   const lastPollAt = /* @__PURE__ */ new Map();
+  const scannedPrUrls = /* @__PURE__ */ new Set();
   const reconcile = async (sessionId, terminal) => {
     const desc = opts.registry.get(sessionId);
     if (!desc || desc.kind !== "agent-cli") return;
@@ -57256,6 +58485,29 @@ function createPrProvenanceReconciler(opts) {
       if (!shouldStamp(record2.createdPrUrl)) continue;
       await stamp({ number: record2.createdPrNumber, url: record2.createdPrUrl });
     }
+    if (desc.eventsPath) {
+      for (const turn of readRecentTurnsSync(desc.eventsPath)) {
+        if (turn.role !== "assistant") continue;
+        const re = /https?:\/\/[^\s<>"]+/g;
+        let m;
+        while ((m = re.exec(turn.text)) !== null) {
+          const url = m[0].replace(/[.,;:)\]]+$/, "");
+          const parsed = parsePrUrl(url);
+          if (!parsed) continue;
+          if (desc.openedPrs?.some((known) => known.url === url)) continue;
+          if (scannedPrUrls.has(url)) continue;
+          scannedPrUrls.add(url);
+          try {
+            opts.registry.recordOpenedPr(sessionId, {
+              adapter: "output-scan",
+              number: parsed.number,
+              url
+            });
+          } catch {
+          }
+        }
+      }
+    }
     const pr = await opts.resolveOpenPr(cwd);
     if (pr && shouldStamp(pr.url)) await stamp(pr);
     await refreshCost(desc, supervisor, cwd);
@@ -57914,7 +59166,7 @@ function humanizeKey(key) {
   const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[_\-.]+/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
   return words.length === 0 ? "Value" : words.charAt(0).toUpperCase() + words.slice(1);
 }
-function isRecord11(value) {
+function isRecord13(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function scalarText(value) {
@@ -57944,7 +59196,7 @@ function flattenRows(value, label, depth, out) {
     });
     return;
   }
-  if (isRecord11(value)) {
+  if (isRecord13(value)) {
     if (depth >= MAX_DEPTH) return;
     for (const [key, child] of Object.entries(value)) {
       flattenRows(child, label ? `${label} / ${humanizeKey(key)}` : humanizeKey(key), depth + 1, out);
@@ -57966,7 +59218,7 @@ function renderMail(preview2) {
   const cc = addressList(preview2.cc);
   const subject = scalarText(preview2.subject) ?? "";
   const body = scalarText(preview2.body) ?? "";
-  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord11).map((a) => {
+  const attachments = Array.isArray(preview2.attachments) ? preview2.attachments.filter(isRecord13).map((a) => {
     const name = scalarText(a.fileName) ?? "";
     const size = typeof a.sizeBytes === "number" ? humanSize(a.sizeBytes) : "";
     return size ? `${name} (${size})` : name;
@@ -57981,9 +59233,9 @@ function renderMail(preview2) {
 }
 function renderPreview(record2) {
   const preview2 = record2.preview;
-  if (isRecord11(preview2) && preview2.kind === "mail") return renderMail(preview2);
+  if (isRecord13(preview2) && preview2.kind === "mail") return renderMail(preview2);
   const rows = [];
-  if (isRecord11(preview2)) {
+  if (isRecord13(preview2)) {
     for (const [key, value] of Object.entries(preview2)) flattenRows(value, humanizeKey(key), 1, rows);
   } else {
     flattenRows(preview2, "Details", 1, rows);
@@ -59435,6 +60687,8 @@ async function reconcileSandboxLedger(deps2) {
 // src/index.ts
 init_session_outcome();
 init_session_end_reason();
+init_transcript_writer();
+init_session_index();
 init_sessions();
 init_sessions();
 init_process_stats();
@@ -59454,12 +60708,12 @@ function measureToolList(tools) {
 }
 var packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 var helpDir = join(packageRoot, "docs", "mcp-tools");
-var cache = /* @__PURE__ */ new Map();
+var cache2 = /* @__PURE__ */ new Map();
 function getToolHelp(name) {
-  if (cache.has(name)) return cache.get(name);
+  if (cache2.has(name)) return cache2.get(name);
   const path = join(helpDir, `${name}.md`);
   const content = existsSync(path) ? readFileSync(path, "utf8") : void 0;
-  cache.set(name, content);
+  cache2.set(name, content);
   return content;
 }
 function listToolHelpTopics() {
@@ -61752,7 +63006,7 @@ async function registerSentinelAdapterTools(server, opts = {}) {
   makeListTool({
     server,
     toolName: "list_sentinel_adapters",
-    description: "List known sentinel providers with their status (supported/available/ready), version, and declared capabilities (subjects, push, poll, durable, needsPublicUrl, requiresAuth, typicalLatencyMs). Credentials are never returned. Use `setup_sentinel_provider` to configure a provider that needs creds.",
+    description: "List known sentinel providers with their status (supported/available/ready), version, and declared capabilities (subjects, push, poll, durable, needsPublicUrl, requiresAuth, typicalLatencyMs). Credentials are never returned. Use `setup_sentinel_provider` to configure a provider that needs creds. A `webhook` sentinel target (Standard Webhooks signed delivery to an external HTTP callback, with persisted outbox and resume post-restart) is accepted since W-B; the `mcp-events` MCP surface (events/list, events/subscribe, events/unsubscribe) ships with W-C.",
     lister: makeSentinelLister({ credsStore, ledger })
   });
   const { validSlugs, fields } = await collectSetupSchema3();
@@ -61877,102 +63131,6 @@ function createWorkspaceFs(opts) {
 
 // src/index.ts
 init_role();
-function challengeReasonForSsrf(reason) {
-  if (reason === "non_https") return "non_https";
-  if (reason === "private_target" || reason === "redirect") return "ssrf_blocked";
-  return "timeout";
-}
-var CHALLENGE_TTL_MS = 10 * 60 * 1e3;
-var encoder = new TextEncoder();
-var cache2 = /* @__PURE__ */ new Map();
-function challengeCacheSize() {
-  return cache2.size;
-}
-function resetChallengeCacheForTests() {
-  cache2.clear();
-}
-function normalizeCallbackUrl(url) {
-  try {
-    const u = new URL(url);
-    const port = u.port === "443" ? "" : `:${u.port}`;
-    return `${u.protocol.toLowerCase()}//${u.hostname.toLowerCase()}${port}${u.pathname}${u.search}`;
-  } catch {
-    return null;
-  }
-}
-function hashSecret(secret) {
-  return createHash("sha256").update(secret, "utf8").digest("hex");
-}
-function constantTimeEq(a, b) {
-  const da = createHash("sha256").update(a, "utf8").digest();
-  const db = createHash("sha256").update(b, "utf8").digest();
-  return timingSafeEqual(da, db);
-}
-async function verifyCallback(input, deps2 = {}) {
-  const now = deps2.now ?? (() => Date.now());
-  const normalized = normalizeCallbackUrl(input.url);
-  if (normalized === null || !normalized.startsWith("https://")) {
-    return { ok: false, reason: "non_https", detail: "callback URL must be an https URL" };
-  }
-  if (decodeWhsecSecret(input.secret) === null) {
-    return {
-      ok: false,
-      reason: "challenge_failed",
-      detail: "invalid secret format \u2014 must be whsec_ + base64 decoding to 24..64 bytes (the caller validates before this; a bad secret is never cached)"
-    };
-  }
-  const cacheKey = `${input.principal}|${normalized}|${hashSecret(input.secret)}`;
-  const cached = cache2.get(cacheKey);
-  if (cached && cached.expiresAt > now()) {
-    return { ok: true, verificationBytes: cached.requestBytes };
-  }
-  if (cached) cache2.delete(cacheKey);
-  const challenge = randomBytes(32).toString("hex");
-  const requestBytes = encoder.encode(JSON.stringify({ type: "verification", challenge }));
-  const msgId = `msg_verification_${randomBytes(12).toString("hex")}`;
-  const timestamp = Math.floor(now() / 1e3);
-  let headers;
-  try {
-    const signed = signWebhook({ msgId, timestamp, payload: requestBytes, secrets: [input.secret] });
-    headers = {
-      ...signed,
-      "content-type": "application/json",
-      "X-MCP-Subscription-Id": input.subscriptionId
-    };
-  } catch (err) {
-    return { ok: false, reason: "challenge_failed", detail: `signing failed: ${err.message}` };
-  }
-  let response;
-  try {
-    response = await (deps2.fetch ?? ssrfFetch)(input.url, {
-      method: "POST",
-      headers,
-      body: requestBytes,
-      timeoutMs: 1e4
-      // default challenge timeout (delivery uses 15_000)
-    });
-  } catch (err) {
-    if (err instanceof SsrfFetchError) {
-      return { ok: false, reason: challengeReasonForSsrf(err.reason), detail: `${err.reason}: ${err.message}` };
-    }
-    return { ok: false, reason: "timeout", detail: err.message };
-  }
-  if (response.status < 200 || response.status > 299) {
-    return { ok: false, reason: "non_2xx", detail: `callback responded with status ${response.status}` };
-  }
-  let parsedBody;
-  try {
-    parsedBody = JSON.parse(response.body);
-  } catch {
-    return { ok: false, reason: "challenge_failed", detail: "response body is not JSON" };
-  }
-  const echoed = parsedBody?.challenge;
-  if (typeof echoed !== "string" || !constantTimeEq(echoed, challenge)) {
-    return { ok: false, reason: "challenge_failed", detail: "response did not echo the fresh challenge" };
-  }
-  cache2.set(cacheKey, { requestBytes, expiresAt: now() + CHALLENGE_TTL_MS });
-  return { ok: true, verificationBytes: requestBytes };
-}
 async function hasNamedLlmEndpoints() {
   const override = process.env.LLM_ENDPOINT_ENDPOINTS_FILE?.trim();
   const path = override && override.length > 0 ? override : join(homedir(), ".agentproto", "llm-endpoints.json");
@@ -62001,7 +63159,7 @@ init_worktree_isolation();
 var pairing_registry_exports = {};
 __reExport(pairing_registry_exports, pairing_host_star);
 var JOIN_TOKENS_VERSION = 1;
-var DEFAULT_TTL_MS = 90 * 864e5;
+var DEFAULT_TTL_MS2 = 90 * 864e5;
 var DEFAULT_RECONNECT_MIN_MS = 1e3;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_HANDSHAKE_TIMEOUT_MS = 11e4;
@@ -62111,7 +63269,7 @@ function createJoinTokenRegistry(deps2) {
     const secret = b64url(randomBytes(16));
     const id = randomBytes(6).toString("hex");
     const nowIso2 = new Date(now()).toISOString();
-    const ttlMs = input.ttlMs ?? DEFAULT_TTL_MS;
+    const ttlMs = input.ttlMs ?? DEFAULT_TTL_MS2;
     const expiresAt = new Date(now() + ttlMs).toISOString();
     const record2 = {
       id,
@@ -63283,6 +64441,20 @@ async function createGateway(opts) {
     });
     registerEvalReporterTools(server);
     registerPresetTools(server);
+    const eventsPrincipal = callerSessionId ? sessionPrincipal(callerSessionId) : daemonBearerPrincipal();
+    registerEventsMethods(server, {
+      list: (params) => eventsList(params, { principal: eventsPrincipal }),
+      subscribe: (params) => eventsSubscribe(params, {
+        principal: eventsPrincipal,
+        store: sentinelStore,
+        resolveProvider: resolveSentinelProviderResolved
+      }),
+      unsubscribe: (params) => eventsUnsubscribe(params, {
+        principal: eventsPrincipal,
+        store: sentinelStore,
+        resolveProvider: resolveSentinelProviderResolved
+      })
+    });
     return server;
   };
   let internalToolServerPromise;
@@ -63607,6 +64779,15 @@ async function createGateway(opts) {
         ...passOpts?.isServed ? { isServed: passOpts.isServed } : {}
       });
     },
+    backfillSessionIndexes() {
+      try {
+        return backfillSessionIndexes(sessions.transcriptBaseDir, {
+          descriptors: sessions.list({ includeArchived: true })
+        });
+      } catch {
+        return { scanned: 0, created: 0, skipped: 0 };
+      }
+    },
     async stop() {
       heartbeat.stop();
       if (idleReapTimer) clearInterval(idleReapTimer);
@@ -63679,6 +64860,6 @@ var export_readPairingsSnapshot = pairing_registry_exports.readPairingsSnapshot;
 var export_removeProviderKey = providers_store_exports.removeProviderKey;
 var export_setProviderKey = providers_store_exports.setProviderKey;
 
-export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, GC_REAPABLE_STATES, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MODEL_ROLE_REF_PREFIX, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, canonicalForModeId, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, seedWalkForTranscript, serializeEnvelope, setDefaultPreset, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry };
+export { AnthropicRemainingQuotaReader, AuthResolutionError, BUCKETS_ROOT, CLAMP_LIMIT_BYTES, CLAUDE_CODE_OAUTH_SOURCE, CONTINUE_PROMPT_SOURCE, DEAD_SESSION_STATUSES, DEFAULT_ALWAYS_ON_TOOLS, DEFAULT_BUCKET, DEFAULT_CONTINUE_PROMPT, DEFAULT_HOST_LOAD_BUDGET_MS, DEFAULT_HOST_LOAD_THRESHOLDS, DEFAULT_MODEL_ROLES, DEFAULT_ORCHESTRATOR_TOOLS, DEFAULT_TTL_MS, DEFAULT_WORKTREE_ISOLATION, DEFAULT_WORKTREE_PROVISION_CONCURRENCY, DEVICE_PROMPT_PATH_PREFIX, EVENT_REGISTRY, GC_REAPABLE_STATES, GITHUB_SCHEME, HOSTS_VERSION, HOST_HANDSHAKE_REMEDIATION_HINT, HOST_SCOPE_HEADER, HarnessPresetValidationError, INBOUND_PROVIDERS, INDEX_DEFAULT_LIMIT, INDEX_MAX_OUTPUT, INDEX_MAX_PROMPT, INDEX_TAIL_BYTES, JOIN_TOKENS_VERSION, LEGACY_SESSIONS_FILE, MAX_ATTEMPTS, MAX_AUTO_CONTINUE_ATTEMPTS, MAX_MESSAGE_DATA_BYTES, MAX_TTL_MS, MCP_APP_BRIDGE_SCRIPT, MESSAGE_KINDS, MESSAGE_PREAMBLE, MESSAGE_TAG, MESSAGE_URGENCIES, MIN_TTL_MS, MODEL_ROLE_REF_PREFIX, McpEventsError, export_PAIRINGS_VERSION as PAIRINGS_VERSION, POSTURE_NATIVE_ALIASES, POSTURE_PREAMBLES, export_PROVIDER_ENV_VARS as PROVIDER_ENV_VARS, PrLookupError, ResumeDisabledError, SESSION_END_REASONS, SESSION_ID_ENV, SIGN_NAMESPACE, SsrfFetchError, SubscriptionSourceError, TASK_STATUSES, WORKSPACE_SLUG_ENV, WORKTREE_ISOLATION_ENV, WORKTREE_PROVISION_CONCURRENCY_ENV, activityCounts, addHarnessPreset, allowedSignersLine, appendConversationRecord, attachSandbox, backfillSessionIndexes, bucketDir, bucketSessionsFile, bucketTranscriptDir, buildCatalogModels, buildCatalogProviderModels, buildHostLoadReport, buildMcpConfigSnippet, buildRouteAwareLaunchConfig, buildSessionRecap, canonicalForModeId, canonicalizeJcs, challengeCacheSize, challengeReasonForSsrf, claudeProjectSlug, collectGcCandidates, collectHostSample, compactOutcome, composeMode, composeSessionObservers, composedFromRangeSha, computeHostWarnings, computeRefreshBefore, continueInterruptedSessions, continueSkipReason, conversationIndexPath, createActivityProjector, createDaemonReviewerHost, createDefaultHostProbes, createDeviceRegistry, createFileStepCache, createGateway, createHostLoadService, createHostRegistry, createInboundEndpointStore, createJoinTokenRegistry, createOrchestratorInjector, createOrchestratorMcpServerFactory, export_createPairingRegistry as createPairingRegistry, createPrProvenanceReconciler, createProcessStatsService, createReviewLaneExecutor, createReviewLedger, createReviewPackLoader, createReviewRunner, createScopeTokenRegistry, createSentinelWebhookOutbox, createSessionMessage, createSupervisorTaskGateRunner, createTaskLedger, createWorkspaceBrainSubscriber, createWorkspaceBrains, createWorkspaceFs, credentialFingerprint, daemonBearerPrincipal, daemonRegistryDir, decideWorktreeIsolation, declaredPresetToProviderPreset, decodeWhsecSecret, decomposeMode, defaultBrowserAdapterIds, defaultBrowserAdapterResolution, defaultReviewKeysDir, defaultReviewLedgerRoot, defaultReviewPackCacheDir, defaultTranscriptBaseDir, defineBraveSearchHttpDriver, defineSerperHttpDriver, deleteUserPreset, deliverEventEnvelope, deliveryBackoffDelay, deriveIndexFromTranscript, deriveSessionOutcome, deriveSessionUsage, describeOwner, encodeWhsecSecret, enrichRollupWithProviderQuota, enrichWithRemainingQuota, ensureReviewSigningKey, envelopeClampedBytes, escapeHumanPrompt, escapeMessageBody, evaluateCostBudget, eventsList, eventsSubscribe, eventsUnsubscribe, execGh, extractHelpSection, fetchHostTurns, fetchPrStatus, fileConversationStore, fileExists3 as fileExists, filterActivities, findComposeCandidate, findConversationRecord, findEventDefinition, findNativeMode, findPrForCommit, formatToolCall, formatToolResult, getDefaultHarnessPreset, getHarnessPreset, getHostLoadService, getMcpCredentialDeps, getProcessStatsService, export_getProviderKey as getProviderKey, getToolHelp, getUserPreset, githubRepoOf, harnessPresetsPath, hostPlaceholders, hostRecordToMirrorRecord, indexEntryFromDescriptor, injectMcpAppBridge, export_injectProviderKeysIntoEnv as injectProviderKeysIntoEnv, isAgentCliAuthConfigured, isClosedTaskStatus, isKnownSessionEndReason, isMessageAllowed, isNoSessionPromptFailure, isProviderLimitError, isPubliclyRoutable, isSafeBucketSlug, isTerminalActivityState, listBuckets, listHarnessPresets, listModelRoles, listPresets, listToolHelpTopics, listUserPresets, loadHarnessPresets, export_loadProviders as loadProviders, loadQuotaStore, loadUserPresets, loadWorkspaceModelRoles, loadWorktreeIsolation, locateConversationByNativePath, locateConversationBySessionId, makeBrowserAdapterLister, makeSandboxCredsStore, makeSandboxResolver, matchesMessageFilter, matchesSessionQuery, measureTool, measureToolList, messageFrom, migrateLegacySessionsFile, migrationMarkerPath, mintMessageId, mirrorCursorForSession, monitorPolicyWait, monitorSessionWait, narrowOrchestratorTools, normalizeCallbackUrl, normalizeCommand, normalizeInbound, normalizeModeId, normalizeRemote, normalizeSkillsOption, normalizeWorktreeField, parseAnthropicRateLimitHeaders, parseDuration, parseModelRoleRef, parsePrUrl, parseTaskStatus, parseWindow, parseWorktreeIsolationMode, pickUsageDetail, policyToActivities, policyWatchesSession, prHeadSha, prToActivities, projectBrowserTools, projectSessionUsage, promptDeviceSession, promptHostSession, export_providerEnvVar as providerEnvVar, export_providersPath as providersPath, readAllSessionIndexes, readConversationIndex, readDaemonRegistry, readHostsSnapshot, export_readPairingsSnapshot as readPairingsSnapshot, readProfileQuota, readRegisteredSlugs, readRuntimeMeta, readSandboxLedger, readSessionForBrain, readSessionIndex, readTranscriptTail, readUsageSnapshots, reapGcEntry, reapOrphanedDescendants, reconcileSandboxLedger, recordProfileQuota, recordSandboxBoot, recordSandboxLiveness, recordSandboxOrigin, recordSandboxState, registerBrainTools, registerBuiltinRoutes, registerDeviceTools, registerPairingTools, registerReviewTools, registerSandboxAttachTool, registerWebSearchTools, removeHarnessPreset, export_removeProviderKey as removeProviderKey, removeSandboxLedgerEntry, renderInboxDigest, renderSessionMessage, renderSessionMessages, repoSlug, resetChallengeCacheForTests, resolveAuthSpec, resolveBucketSlug, resolveDeferredToolsGatewayOption, resolveDevicePromptMapping, resolveEffectiveLlmEndpointFlag, resolveModelRole, resolveNativeLink, resolvePosture, resolvePrincipal, resolveRelation, resolveReuseFromLedger, resolveReviewerPreset, resolveSpawnDefaults, resolveSubscriptionCredential, rollupSessionSubtree, rollupUsage, runContinueOnBootPass, runCrashDetectPass, runEagerResumePass, runIdleReapPass, runShellLane, runStallWatchdogPass, sandboxLedgerPath, sanitizeLabel, saveUserPreset, searchSessionIndexes, seedWalkForTranscript, serializeEnvelope, sessionEventsPath, sessionIndexPath, sessionPrincipal, sessionTranscriptDir, setDefaultPreset, setDefaultSessionsBaseDir, setEgressDispatcherForTests, setMcpCredentialDeps, export_setProviderKey as setProviderKey, signAttestation, signWebhook, ssrfFetch, subscriptionId, sweepStaleDaemonRegistry, sweepStaleRuntimeMetas, syncDeviceMirror, tenantScope, toMcpEvent, toWebhookEnvelope, toWorktreeStatusView, trackWorktreeProvision, turnToActivities, unlinkDaemonRegistryEntry, unlinkRuntimeMeta, untilForTtl, updateHarnessPreset, upsertSandboxLedger, userPresetsPath, validateAgainstInputSchema, verifyCallback, verifyInboundSignature, verifySignedAttestation, webSearchTool, webhookRequestId, withPr, withPrStatus, workflowToActivities, writeDaemonRegistryEntry, writeSessionIndex };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map