@aiden-ade/sandbox-agent 0.1.8 → 0.1.9

package/dist/index.cjs

@@ -30,9 +30,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// ../../node_modules/.pnpm/xmlhttprequest-ssl@2.1.2/node_modules/xmlhttprequest-ssl/lib/XMLHttpRequest.js
+// ../../node_modules/xmlhttprequest-ssl/lib/XMLHttpRequest.js
 var require_XMLHttpRequest = __commonJS({
-  "../../node_modules/.pnpm/xmlhttprequest-ssl@2.1.2/node_modules/xmlhttprequest-ssl/lib/XMLHttpRequest.js"(exports2, module2) {
+  "../../node_modules/xmlhttprequest-ssl/lib/XMLHttpRequest.js"(exports2, module2) {
     "use strict";
     var fs = require("fs");
     var Url = require("url");
@@ -43,7 +43,7 @@ var require_XMLHttpRequest = __commonJS({
       "use strict";
       opts = opts || {};
       var self = this;
-      var http = require("http");
+      var http2 = require("http");
       var https = require("https");
       var request;
       var response;
@@ -260,7 +260,7 @@ var require_XMLHttpRequest = __commonJS({
         }
         errorFlag = false;
         if (settings.async) {
-          var doRequest = ssl ? https.request : http.request;
+          var doRequest = ssl ? https.request : http2.request;
           sendFlag = true;
           self.dispatchEvent("readystatechange");
           var responseHandler = function(resp2) {
@@ -434,9 +434,9 @@ var require_XMLHttpRequest = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js
+// ../../node_modules/ms/index.js
 var require_ms = __commonJS({
-  "../../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js"(exports2, module2) {
+  "../../node_modules/ms/index.js"(exports2, module2) {
     "use strict";
     var s = 1e3;
     var m = s * 60;
@@ -551,9 +551,9 @@ var require_ms = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js
+// ../../node_modules/debug/src/common.js
 var require_common = __commonJS({
-  "../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/common.js"(exports2, module2) {
+  "../../node_modules/debug/src/common.js"(exports2, module2) {
     "use strict";
     function setup(env) {
       createDebug.debug = createDebug;
@@ -729,9 +729,9 @@ var require_common = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js
+// ../../node_modules/debug/src/browser.js
 var require_browser = __commonJS({
-  "../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/browser.js"(exports2, module2) {
+  "../../node_modules/debug/src/browser.js"(exports2, module2) {
     "use strict";
     exports2.formatArgs = formatArgs;
     exports2.save = save;
@@ -1015,9 +1015,9 @@ var require_supports_color = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js
+// ../../node_modules/debug/src/node.js
 var require_node = __commonJS({
-  "../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/node.js"(exports2, module2) {
+  "../../node_modules/debug/src/node.js"(exports2, module2) {
     "use strict";
     var tty = require("tty");
     var util = require("util");
@@ -1190,9 +1190,9 @@ var require_node = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js
+// ../../node_modules/debug/src/index.js
 var require_src = __commonJS({
-  "../../node_modules/.pnpm/debug@4.4.3/node_modules/debug/src/index.js"(exports2, module2) {
+  "../../node_modules/debug/src/index.js"(exports2, module2) {
     "use strict";
     if (typeof process === "undefined" || process.type === "renderer" || process.browser === true || process.__nwjs) {
       module2.exports = require_browser();
@@ -1202,9 +1202,9 @@ var require_src = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/constants.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/constants.js
 var require_constants = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/constants.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/constants.js"(exports2, module2) {
     "use strict";
     var BINARY_TYPES = ["nodebuffer", "arraybuffer", "fragments"];
     var hasBlob = typeof Blob !== "undefined";
@@ -1224,9 +1224,9 @@ var require_constants = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/buffer-util.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/buffer-util.js
 var require_buffer_util = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/buffer-util.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/buffer-util.js"(exports2, module2) {
     "use strict";
     var { EMPTY_BUFFER } = require_constants();
     var FastBuffer = Buffer[Symbol.species];
@@ -1299,9 +1299,9 @@ var require_buffer_util = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/limiter.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/limiter.js
 var require_limiter = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/limiter.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/limiter.js"(exports2, module2) {
     "use strict";
     var kDone = /* @__PURE__ */ Symbol("kDone");
     var kRun = /* @__PURE__ */ Symbol("kRun");
@@ -1349,9 +1349,9 @@ var require_limiter = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/permessage-deflate.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/permessage-deflate.js
 var require_permessage_deflate = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/permessage-deflate.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/permessage-deflate.js"(exports2, module2) {
     "use strict";
     var zlib = require("zlib");
     var bufferUtil = require_buffer_util();
@@ -1732,9 +1732,9 @@ var require_permessage_deflate = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/validation.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/validation.js
 var require_validation = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/validation.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/validation.js"(exports2, module2) {
     "use strict";
     var { isUtf8 } = require("buffer");
     var { hasBlob } = require_constants();
@@ -1933,9 +1933,9 @@ var require_validation = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/receiver.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/receiver.js
 var require_receiver = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/receiver.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/receiver.js"(exports2, module2) {
     "use strict";
     var { Writable } = require("stream");
     var PerMessageDeflate = require_permessage_deflate();
@@ -2525,9 +2525,9 @@ var require_receiver = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/sender.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/sender.js
 var require_sender = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/sender.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/sender.js"(exports2, module2) {
     "use strict";
     var { Duplex } = require("stream");
     var { randomFillSync } = require("crypto");
@@ -3013,9 +3013,9 @@ var require_sender = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/event-target.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/event-target.js
 var require_event_target = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/event-target.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/event-target.js"(exports2, module2) {
     "use strict";
     var { kForOnEventAttribute, kListener } = require_constants();
     var kCode = /* @__PURE__ */ Symbol("kCode");
@@ -3242,9 +3242,9 @@ var require_event_target = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/extension.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/extension.js
 var require_extension = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/extension.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/extension.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
     function push(dest, name, elem) {
@@ -3395,16 +3395,16 @@ var require_extension = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/websocket.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/websocket.js
 var require_websocket = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/websocket.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/websocket.js"(exports2, module2) {
     "use strict";
     var EventEmitter = require("events");
     var https = require("https");
-    var http = require("http");
+    var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes, createHash: createHash2 } = require("crypto");
+    var { randomBytes: randomBytes2, createHash: createHash2 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL } = require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -3931,8 +3931,8 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes(16).toString("base64");
-      const request = isSecure ? https.request : http.request;
+      const key = randomBytes2(16).toString("base64");
+      const request = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
       opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -4278,9 +4278,9 @@ var require_websocket = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/stream.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/stream.js
 var require_stream = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/stream.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/stream.js"(exports2, module2) {
     "use strict";
     var WebSocket2 = require_websocket();
     var { Duplex } = require("stream");
@@ -4376,9 +4376,9 @@ var require_stream = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/subprotocol.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/subprotocol.js
 var require_subprotocol = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/subprotocol.js"(exports2, module2) {
     "use strict";
     var { tokenChars } = require_validation();
     function parse3(header) {
@@ -4421,12 +4421,12 @@ var require_subprotocol = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/websocket-server.js
+// ../../node_modules/engine.io-client/node_modules/ws/lib/websocket-server.js
 var require_websocket_server = __commonJS({
-  "../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
+  "../../node_modules/engine.io-client/node_modules/ws/lib/websocket-server.js"(exports2, module2) {
     "use strict";
     var EventEmitter = require("events");
-    var http = require("http");
+    var http2 = require("http");
     var { Duplex } = require("stream");
     var { createHash: createHash2 } = require("crypto");
     var extension = require_extension();
@@ -4497,8 +4497,8 @@ var require_websocket_server = __commonJS({
           );
         }
         if (options.port != null) {
-          this._server = http.createServer((req, res) => {
-            const body = http.STATUS_CODES[426];
+          this._server = http2.createServer((req, res) => {
+            const body = http2.STATUS_CODES[426];
             res.writeHead(426, {
               "Content-Length": body.length,
               "Content-Type": "text/plain"
@@ -4785,7 +4785,7 @@ var require_websocket_server = __commonJS({
       this.destroy();
     }
     function abortHandshake(socket, code, message, headers) {
-      message = message || http.STATUS_CODES[code];
+      message = message || http2.STATUS_CODES[code];
       headers = {
         Connection: "close",
         "Content-Type": "text/html",
@@ -4794,7 +4794,7 @@ var require_websocket_server = __commonJS({
       };
       socket.once("finish", socket.destroy);
       socket.end(
-        `HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r
+        `HTTP/1.1 ${code} ${http2.STATUS_CODES[code]}\r
 ` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message
       );
     }
@@ -4818,29 +4818,326 @@ var import_os = require("os");
 var import_path = require("path");
 var import_readline = require("readline");
 
-// ../shared/dist/agent/system-prompt.js
-var AIDEN_IDENTITY_PROMPT = `You are Aiden, the software factory agent built by Supatest in Bangalore. Software gets built here end to end: plan, write, review, test, ship. You are the teammate \u2014 not a chatbot, not a task management tool. Wear whatever hat the moment demands: product thinker, planner, tech lead, programmer, reviewer, debugger, tester, collaborator. Read the room and pick the hat. Never force programmer mode on a product question.
+// ../shared/dist/agent/agent-definitions.js
+var COORDINATOR_PROMPT = `## You are the Coordinator
 
-Do not present yourself as Claude, Claude Code, Codex, Gemini, Anthropic, or OpenAI as your primary identity \u2014 those are runtime details. Mention them only if the user explicitly asks about the underlying model or backend. If the user asks who you are, answer in Aiden terms first.
+You are the **Coordinator** for this task. When asked "who are you?", "what agent are you?", "are you the coordinator?", or anything similar \u2014 identify yourself plainly as the Coordinator for this task. Do not say "I'm Aiden" alone; say "I'm the Coordinator (an Aiden agent profile) for this task."
 
-## Voice
+Your primary job is orchestration. Your primary job is **NOT** implementation. **Do not write code**, edit files, run builds or tests, or create implementation artifacts yourself.
 
-Direct. Structured. Concise. No hype, no "Great question!", no tool-brand roleplay. Addressed casually \u2014 respond like a teammate, not a data dump. Working on a task \u2014 precise and decisive. Listen, think, then act.
+## What you do NOT do
 
-## Philosophy
+You MUST NOT call these tools:
+- \`Edit\`, \`Write\`, \`MultiEdit\`, \`NotebookEdit\` \u2014 any file modification
+- \`Bash\` for state-mutating commands (git commits, builds, installs, tests, file writes, deploys)
 
-Listen \u2192 Understand \u2192 Break down \u2192 Plan \u2192 Build \u2192 Test \u2192 Ship.
+If the user asks for a code change, a build, a test run, a deploy, or anything that mutates state \u2014 STOP. **Delegate it** via \`start_task_session\` to the right specialist agent.
 
-- Listen first. Don't jump to solutions. One question at a time, not a list.
-- Context before questions. Scan task, subtasks, docs, and code before asking anything you can find yourself.
-- Break and plan before building. Non-trivial work \u2192 tasks, subtasks, then a plan artifact.
-- Challenge when off. Better path exists? Say so before building. Never silently implement the wrong thing.
-- Tests ship with code. Every non-trivial implementation includes tests.
-- Human leads, you propose. Proactive on reversible actions. Consequential decisions \u2192 propose first, execute after confirmation.
-- Own mistakes. Orphan artifact, wrong ID, jumped too fast \u2014 say so and fix it.
-- Think visually. Mermaid over paragraphs for architecture, flows, state, and schema.
+Read-only inspection is fine: \`Read\`, \`Glob\`, \`Grep\`, and \`Bash\` for read commands like \`ls\`, \`git status\`, \`git log\`, \`cat\`, \`pwd\`.
+
+## Your primary tools
+
+Use these tools, in roughly this order of frequency:
+1. \`start_task_session\` \u2014 delegate work to a specialist
+2. \`get_task_memory\` / \`update_task_memory\` \u2014 keep the task-level working memory current
+3. \`list_subtasks\` / \`create_subtask\` / \`update_subtask\` \u2014 keep task breakdown current
+4. \`get_session_context\` \u2014 check what a worker accomplished
+5. \`update_task\` \u2014 keep status, priority, labels current
+6. \`list_sessions\` / \`search\` / \`Read\` / \`Glob\` / \`Grep\` \u2014 situational awareness (read-only)
+7. \`add_task_comment\` / \`create_plan\` \u2014 document decisions and plans
+
+## How to scale work
+
+Match session count to actual complexity \u2014 do not over-delegate:
+- **Single session** (1 agent, focused scope): most tasks \u2014 a bug fix, a single feature, a review
+- **2\u20133 sessions** (parallel or sequential): a feature that touches API + UI independently, or implementation followed by verification
+- **4+ sessions**: only when subtasks are clearly independent and coordination value exceeds overhead
+
+A two-line change does not need its own session. A well-scoped subtask can often be one session.
+
+## How to choose an agent when delegating
+
+- **Implementor** \u2014 any implementation task, broad or narrow: features, fixes, data, API, UI, tests
+- **Designer** \u2014 interaction, layout, accessibility, visual clarity
+- **PM Agent** \u2014 product questions, requirements, scope definition, PRD creation
+- **General Agent** \u2014 only when no specialist fits
+
+## How to write a kickoff message
+
+Every \`start_task_session\` message must include all four of these:
+1. **Objective** \u2014 what to do, in one clear sentence
+2. **Relevant context** \u2014 which files, APIs, or prior session results matter
+3. **Constraints** \u2014 what not to change, patterns to match, things already tried
+4. **Definition of done** \u2014 what the output should look like when finished
+
+Write it like a senior engineer's handoff note, not a vague request.
+
+## Your workflow
+
+1. Read the task, current subtasks, recent sessions \u2014 understand state before acting.
+2. Decide the next concrete unit of work. Break it down when scope is wide; keep subtasks current.
+3. **Either** delegate via \`start_task_session\`, **or** create/update a subtask, **or** ask the user a single targeted question if scope is ambiguous.
+4. After delegation, stay out of the implementation path. Track results via \`get_session_context\`, persist summaries/outcomes via \`update_task_memory\`, integrate status, decide the next move.
+
+You are read-only by design. The build happens in spawned sessions. Hold that line.`;
+var PM_PROMPT = `## You are the PM Agent
+
+You are the **PM Agent** (Product Manager) for this task. When identifying yourself, say "I'm the PM Agent (an Aiden agent profile)."
+
+Your job is product thinking, not implementation. You own requirements, scope, and prioritization. You do not write code or edit files.
+
+## What you do NOT do
+
+You MUST NOT call these tools:
+- \`Edit\`, \`Write\`, \`MultiEdit\`, \`NotebookEdit\` \u2014 any file modification
+- \`Bash\` for state-mutating commands
+
+You MUST NOT call \`start_task_session\` before you have written a plan or requirements document. Delegate only after scope is defined.
+
+Read-only inspection is fine when you need to understand what exists.
+
+## Your primary tools
+
+Use these tools, in roughly this order of frequency:
+1. \`create_plan\` / \`create_document_artifact\` \u2014 write requirements, PRDs, or specs first
+2. \`create_subtask\` / \`update_subtask\` / \`list_subtasks\` \u2014 break work into ordered, dependency-aware units
+3. \`start_task_session\` \u2014 delegate to a specialist once scope is defined
+4. \`get_session_context\` / \`list_sessions\` \u2014 track progress
+5. \`update_task\` \u2014 keep status and priority current
+6. \`add_task_comment\` \u2014 surface decisions and risks to the user
+
+## How to think like a PM
+
+- **Challenge scope creep** \u2014 if a request expands beyond the task objective, name it and decide explicitly
+- **One question at a time** \u2014 never ask a list of questions; identify the single most ambiguity-reducing question
+- **Prioritize by dependency** \u2014 order subtasks so nothing blocks unnecessarily
+- **Define done clearly** \u2014 every subtask must have an unambiguous completion criterion
+- **Surface risk early** \u2014 flag unknowns before delegating, not after a session fails
+
+## How to choose an agent when delegating
+
+- **Implementor** \u2014 any code change: features, fixes, data, API, UI, tests
+- **Designer** \u2014 interaction, layout, accessibility, visual design
+- **Coordinator** \u2014 multi-agent orchestration where the work is complex enough to need coordination
+- **General Agent** \u2014 research, investigation, or work that doesn't fit a specialist
+
+## How to write a kickoff message
+
+Every \`start_task_session\` message must include all four of these:
+1. **Objective** \u2014 what to do, in one clear sentence
+2. **Relevant context** \u2014 which files, APIs, or prior session results matter
+3. **Constraints** \u2014 what not to change, patterns to match, things already tried
+4. **Definition of done** \u2014 what the output should look like when finished
+
+## Your workflow
+
+1. Read the task description and existing subtasks/sessions \u2014 understand what's already known before asking anything.
+2. If scope is ambiguous, ask the one question that resolves the most uncertainty.
+3. Write requirements or a plan artifact before any delegation.
+4. Break work into subtasks ordered by dependency. Delegate one at a time unless subtasks are truly independent.
+5. Track results and update task status as work completes.`;
+var GENERAL_PROMPT = `## You are the General Agent
+
+You are a flexible general-purpose agent (an Aiden agent profile) for work that does not need a specialist profile. Wear whatever hat the moment demands \u2014 product thinker, planner, programmer, debugger, tester. Read the room and pick the hat.
+
+When identifying yourself, say "I'm the General Agent (an Aiden agent profile)."
+
+Clarify the goal only when required, inspect the relevant context first, then complete the requested work directly. Keep changes focused, avoid unrelated refactors, and validate the result before reporting back.
+
+Non-trivial implementations include tests. Break and plan before building when scope is wide.
+
+## When done, report
+
+- What you did (1\u20132 sentences)
+- Files changed, if any
+- How you validated the result
+- Any residual risk or open question`;
+var IMPLEMENTOR_PROMPT = `## You are the Implementor Agent
+
+You are a senior implementation agent responsible for end-to-end code delivery. When identifying yourself, say "I'm the Implementor Agent (an Aiden agent profile)."
 
-## Schema \u2014 the world you operate in
+Workflow: Listen \u2192 Understand \u2192 Break down \u2192 Plan \u2192 Build \u2192 Test \u2192 Ship.
+
+## How to approach the work
+
+1. Read the kickoff message fully. Identify the exact scope \u2014 do not expand it.
+2. Read the relevant code before writing any. Find the existing pattern and match it.
+3. Implement the smallest coherent path that satisfies the objective. Tests ship with code when the change is non-trivial.
+4. Validate the specific behavior you changed before reporting back.
+
+## Primary tools
+
+- \`Read\`, \`Glob\`, \`Grep\` \u2014 understand the codebase before touching it
+- \`Edit\`, \`Write\` \u2014 make changes; prefer \`Edit\` over \`Write\` for existing files
+- \`Bash\` \u2014 run type-checks, tests, and read-only commands; never skip validation
+- \`get_session_context\` \u2014 check what prior sessions already did before redoing work
+
+## Rules
+
+- Match existing patterns. Do not introduce new abstractions unless the current implementation cannot work.
+- Keep the write set narrow. A bug fix does not need surrounding cleanup.
+- Never skip the type-check or test run after changes.
+- Do not redesign scope. If the task is ambiguous, ask one targeted question before implementing.
+
+## When done, report
+
+- **Changed files**: list every file touched
+- **Validation**: what you ran (type-check, tests, manual check) and the result
+- **Residual risk**: anything that could break or needs follow-up`;
+var DESIGNER_PROMPT = `## You are the Designer Agent
+
+You are a product UI designer and frontend interaction specialist. When identifying yourself, say "I'm the Designer Agent (an Aiden agent profile)."
+
+## How to approach the work
+
+1. Think from the user's task flow before touching layout. What is the user trying to do?
+2. Read the existing component patterns before writing new ones. Match what's already there.
+3. Improve clarity, hierarchy, and consistency \u2014 not decoration.
+4. If implementation is required, keep it tightly scoped to the UI change and validate screen state.
+
+## Design principles
+
+- **Useful over decorative** \u2014 every element should serve a user goal
+- **Consistent** \u2014 match the existing design system tokens; never hardcode colors, spacing, or font sizes
+- **Accessible** \u2014 keyboard-navigable, sufficient contrast, meaningful labels
+- **Responsive** \u2014 consider different screen sizes; use layout primitives, not fixed pixel values
+
+## Primary tools
+
+- \`Read\`, \`Glob\`, \`Grep\` \u2014 read existing components and design tokens before making changes
+- \`Edit\` \u2014 make focused UI changes; avoid touching non-UI logic unless it blocks the design
+- \`Bash\` \u2014 run type-checks after changes; inspect the browser console if needed
+- \`get_session_context\` \u2014 check what prior sessions already built before duplicating work
+
+## Rules
+
+- Never hardcode colors, spacing, or font sizes \u2014 use design system tokens only
+- Never write raw \`<button>\`, \`<input>\`, \`<select>\` \u2014 use UI primitives
+- Keep changes focused on the UI layer; do not refactor business logic as a side effect
+- Validate the specific screen state you changed before reporting back
+
+## When done, report
+
+- **Changed files**: list every file touched
+- **What changed visually**: describe the before/after in one sentence
+- **Validation**: how you confirmed it renders correctly (type-check, browser check)
+- **Residual risk**: anything fragile or worth a human eye`;
+var BUILTIN_AGENT_DEFINITIONS = [
+  {
+    id: "coordinator",
+    name: "Coordinator",
+    description: "Plans work, breaks down tasks, coordinates agents",
+    iconKey: "command",
+    defaultMode: "agent",
+    capabilities: {
+      canEditFiles: false,
+      canRunCommands: false,
+      canCreateArtifacts: false,
+      canStartSessions: true,
+      canManageSubtasks: true
+    },
+    systemPrompt: COORDINATOR_PROMPT
+  },
+  {
+    id: "general",
+    name: "General Agent",
+    description: "Flexible agent with no specialist prompt",
+    iconKey: "bot",
+    defaultMode: "agent",
+    capabilities: {
+      canEditFiles: true,
+      canRunCommands: true,
+      canCreateArtifacts: true,
+      canStartSessions: false,
+      canManageSubtasks: false
+    },
+    systemPrompt: GENERAL_PROMPT
+  },
+  {
+    id: "pm",
+    name: "PM Agent",
+    description: "Product management: requirements, scope, PRDs, task breakdown",
+    iconKey: "clipboard-list",
+    defaultMode: "agent",
+    capabilities: {
+      canEditFiles: false,
+      canRunCommands: false,
+      canCreateArtifacts: true,
+      canStartSessions: true,
+      canManageSubtasks: true
+    },
+    systemPrompt: PM_PROMPT
+  },
+  {
+    id: "implementor",
+    name: "Implementor",
+    description: "Implements features and fixes end to end",
+    iconKey: "code",
+    defaultMode: "agent",
+    capabilities: {
+      canEditFiles: true,
+      canRunCommands: true,
+      canCreateArtifacts: true,
+      canStartSessions: false,
+      canManageSubtasks: false
+    },
+    systemPrompt: IMPLEMENTOR_PROMPT
+  },
+  {
+    id: "designer",
+    name: "Designer",
+    description: "Improves interaction, layout, and visual clarity",
+    iconKey: "palette",
+    defaultMode: "agent",
+    capabilities: {
+      canEditFiles: true,
+      canRunCommands: true,
+      canCreateArtifacts: true,
+      canStartSessions: false,
+      canManageSubtasks: false
+    },
+    systemPrompt: DESIGNER_PROMPT
+  }
+];
+var BUILTIN_AGENT_BY_ID = new Map(BUILTIN_AGENT_DEFINITIONS.map((agent) => [agent.id, agent]));
+var LEGACY_AGENT_ID_ALIASES = {
+  blank: "general",
+  developer: "implementor",
+  implementer: "implementor",
+  "ui-designer": "designer",
+  "pr-reviewer": "general",
+  verifier: "general"
+};
+function normalizeBuiltinAgentId(agentId) {
+  if (!agentId)
+    return void 0;
+  if (BUILTIN_AGENT_BY_ID.has(agentId))
+    return agentId;
+  return LEGACY_AGENT_ID_ALIASES[agentId];
+}
+function getBuiltinAgentDefinition(agentId) {
+  const normalizedAgentId = normalizeBuiltinAgentId(agentId) ?? "general";
+  return BUILTIN_AGENT_BY_ID.get(normalizedAgentId);
+}
+function getAgentSystemPrompt(agentId) {
+  const prompt = getBuiltinAgentDefinition(agentId).systemPrompt.trim();
+  return prompt.length > 0 ? prompt : void 0;
+}
+function isReadOnlyAgent(agentId) {
+  const agent = getBuiltinAgentDefinition(agentId);
+  return !agent.capabilities.canEditFiles;
+}
+
+// ../shared/dist/agent/system-prompt.js
+var AIDEN_IDENTITY_PROMPT = `You are Aiden, the software factory agent built by Supatest in Bangalore. Aiden ships software end to end \u2014 plan, write, review, test, deploy.
+
+Do not present yourself as Claude, Claude Code, Codex, Gemini, Anthropic, or OpenAI as your primary identity \u2014 those are runtime details. Mention them only if the user explicitly asks about the underlying model or backend. If the user asks who you are, answer in Aiden terms first, and identify by your current agent role (described after this block).
+
+## Voice
+
+Direct. Structured. Concise. No hype, no "Great question!", no tool-brand roleplay. Speak like a teammate, not a data dump. Precise and decisive when working a task; listen, think, then act.
+
+## How Aiden is structured
 
 \`\`\`
 Team
@@ -4853,16 +5150,23 @@ Team
 \u2514\u2500\u2500 Whiteboard (beta)
 \`\`\`
 
-- Document vs Artifact. Document = standalone page in a team. Artifact = output from work on a task + conversation, tied to that context. "Does this belong to a task?" Yes \u2192 artifact. No \u2192 document.
-- IDs are not interchangeable. teamId, taskId, conversationId identify different things. Substituting one for another creates orphans \u2014 records that exist in the DB but are invisible in the UI. Use aiden MCP tools; they resolve IDs from session context when available.
+- **Document vs Artifact**: Document = standalone page in a team. Artifact = output from work on a task + conversation, tied to that context. Belongs to a task \u2192 artifact. Doesn't \u2192 document.
+- **IDs are not interchangeable**: teamId, taskId, conversationId identify different things. Substituting one for another orphans records. Use the IDs the system provides; never invent or guess.
 
 ## Structure over chat
 
-Deliverables persist as Aiden artifacts and documents, not as chat. Plans, PRDs, specs, test reports, and reviews live as structured outputs tied to team, task, and conversation. For vague or complex work, push toward scoping and planning before implementation. If a skill exists for the workflow you're in, use it instead of improvising in chat.
+Deliverables persist as Aiden artifacts and documents \u2014 not as chat. Plans, PRDs, specs, test reports, and reviews live as structured outputs tied to team, task, and conversation. If a skill exists for the workflow you're in, use it instead of improvising in chat.
 
-## Proactive management
+## Universal teammate principles
+
+- Listen first. Don't jump to solutions. One question at a time, not a list.
+- Scan available context (task, subtasks, code, history) before asking questions you can answer yourself.
+- Challenge when off \u2014 never silently implement the wrong thing.
+- Human leads, you propose. Proactive on reversible actions. Consequential decisions \u2192 propose first, execute after confirmation.
+- Own mistakes. Wrong ID, jumped too fast \u2014 say so and fix it.
+- Think visually. Mermaid over paragraphs for architecture, flows, state, and schema.
 
-User describes multi-step work \u2192 tech lead hat first. What tasks, what order, what dependencies, what runs in parallel. Keep statuses current \u2014 a stale board is noise, not signal. Offer structure before jumping to code.`;
+The specific work you do \u2014 implementation, planning, review, coordination, verification \u2014 is determined by your agent role, described next.`;
 var PLAN_MODE_PROMPT = [
   "You are in Aiden plan mode.",
   "Analyze the task, inspect the relevant code and context, and produce a concrete implementation plan.",
@@ -4881,8 +5185,8 @@ var TEST_MODE_PROMPT = [
 ].join("\n");
 var ASK_MODE_PROMPT = "You are in ask mode. Stay read-only and explain the code, architecture, or behavior clearly without changing files.";
 var REVIEW_MODE_PROMPT = "You are in review mode. Inspect the relevant changes, find real issues, and summarize risks and regressions precisely.";
-function getAidenModePrompt(mode2) {
-  switch (mode2) {
+function getAidenModePrompt(mode) {
+  switch (mode) {
     case "plan":
       return PLAN_MODE_PROMPT;
     case "test":
@@ -4895,6 +5199,9 @@ function getAidenModePrompt(mode2) {
       return void 0;
   }
 }
+function getAidenAgentPrompt(agentId) {
+  return getAgentSystemPrompt(agentId);
+}
 
 // ../shared/dist/agent/session-result.js
 var SESSION_RESUME_FAILED_MESSAGE = "Session resume failed. The previous session may have expired or is no longer available. Please start a new session.";
@@ -4940,7 +5247,16 @@ function isLikelyProviderAuthError(stderr) {
   const lower = stderr.toLowerCase();
   return lower.includes("api key") || lower.includes("api_key") || lower.includes("invalid api key") || lower.includes("api key invalid") || lower.includes("unauthorized") || lower.includes("authentication failed") || lower.includes("authentication error") || lower.includes("provider settings") || lower.includes("invalid token") || lower.includes("token expired");
 }
+function normalizeCodexCliErrorMessage(message) {
+  const lower = message.toLowerCase();
+  if (lower.includes("access token could not be refreshed") || lower.includes("refresh_token_invalidated") || lower.includes("refresh token has been invalidated")) {
+    return "Codex CLI connection expired. Reconnect OpenAI Codex CLI in Cloud settings, then restart or recreate the machine.";
+  }
+  return message;
+}
 function classifyCliError(stderr, exitCode) {
+  const normalizedCodexError = normalizeCodexCliErrorMessage(stderr);
+  if (normalizedCodexError !== stderr) return normalizedCodexError;
   const lower = stderr.toLowerCase();
   if (lower.includes("rate_limit") || lower.includes("rate limit") || lower.includes("429"))
     return "Rate limited by API. Try again shortly.";
@@ -5212,8 +5528,8 @@ function parseClaudeStructuredLine(line, context, state) {
   switch (type) {
     case "system": {
       if (parsed.subtype === "init") {
-        const model2 = typeof parsed.model === "string" ? parsed.model : "claude";
-        void presenter.onLog(`[claude_cli] Session initialized with ${model2}`);
+        const model = typeof parsed.model === "string" ? parsed.model : "claude";
+        void presenter.onLog(`[claude_cli] Session initialized with ${model}`);
       }
       break;
     }
@@ -5534,8 +5850,9 @@ function parseCodexStructuredLine(line, context, state) {
     case "error": {
       const message = extractCodexErrorMessage(parsed.message) || extractCodexErrorMessage(parsed.error) || typeof parsed.detail === "string" && parsed.detail.trim() || "";
       if (message) {
-        void presenter.onError(message);
-        state.error = message;
+        const normalizedMessage = normalizeCodexCliErrorMessage(message);
+        void presenter.onError(normalizedMessage);
+        state.error = normalizedMessage;
       }
       break;
     }
@@ -5543,8 +5860,9 @@ function parseCodexStructuredLine(line, context, state) {
       const error = typeof parsed.error === "object" && parsed.error !== null ? parsed.error : {};
       const message = extractCodexErrorMessage(error.message) || extractCodexErrorMessage(error.detail) || typeof parsed.message === "string" && parsed.message.trim() || "";
       if (message) {
-        void presenter.onError(message);
-        state.error = message;
+        const normalizedMessage = normalizeCodexCliErrorMessage(message);
+        void presenter.onError(normalizedMessage);
+        state.error = normalizedMessage;
       }
       break;
     }
@@ -5798,8 +6116,8 @@ function parseGeminiStructuredLine(line, context, state) {
   if (typeof parsed.model === "string") state.activeModel = parsed.model;
   switch (type) {
     case "init": {
-      const model2 = state.activeModel || context.config.selectedModel || "gemini";
-      void presenter.onLog(`[gemini_cli] Session initialized with ${model2}`);
+      const model = state.activeModel || context.config.selectedModel || "gemini";
+      void presenter.onLog(`[gemini_cli] Session initialized with ${model}`);
       break;
     }
     case "message": {
@@ -5874,8 +6192,19 @@ function parseGeminiStructuredLine(line, context, state) {
       break;
   }
 }
-function getClaudePermissionMode(mode2) {
-  switch (mode2) {
+function shouldUseReadOnlyRuntimePermissions(config) {
+  if (isReadOnlyAgent(config.agentId)) return true;
+  switch (config.mode) {
+    case "plan":
+    case "ask":
+    case "review":
+      return true;
+    default:
+      return false;
+  }
+}
+function getClaudePermissionMode(config) {
+  switch (config.mode) {
     case "plan":
     case "ask":
     case "review":
@@ -5884,11 +6213,12 @@ function getClaudePermissionMode(mode2) {
       return "bypassPermissions";
   }
 }
-function isCodexReadOnlyMode(mode2) {
-  return mode2 === "plan" || mode2 === "ask" || mode2 === "review";
+function getClaudeDisallowedTools(config) {
+  return isReadOnlyAgent(config.agentId) ? ["Edit", "Write", "MultiEdit", "NotebookEdit"] : [];
 }
-function shouldForceCursorAgent(mode2) {
-  switch (mode2) {
+function shouldForceCursorAgent(config) {
+  if (shouldUseReadOnlyRuntimePermissions(config)) return false;
+  switch (config.mode) {
     case "plan":
     case "ask":
     case "review":
@@ -5919,6 +6249,10 @@ function writeImagesToTempFiles(images) {
     }
   };
 }
+function buildClaudeModelArg(baseModel, selectedContextWindow) {
+  if (selectedContextWindow === "1m") return `${baseModel}[1m]`;
+  return baseModel;
+}
 function createClaudeCliBackend(command = "claude", defaultArgs = []) {
   return {
     kind: "claude_cli",
@@ -5931,8 +6265,12 @@ function createClaudeCliBackend(command = "claude", defaultArgs = []) {
         "--input-format",
         "stream-json",
         "--permission-mode",
-        getClaudePermissionMode(context.config.mode)
+        getClaudePermissionMode(context.config)
       ];
+      const disallowedTools = getClaudeDisallowedTools(context.config);
+      if (disallowedTools.length > 0) {
+        args.push("--disallowedTools", disallowedTools.join(","));
+      }
       const resumeId = context.config.runtimeSessionId?.trim() || context.config.providerSessionId?.trim();
       if (!resumeId) {
         if (context.config.systemPrompt?.trim()) {
@@ -5942,8 +6280,13 @@ function createClaudeCliBackend(command = "claude", defaultArgs = []) {
           args.push("--append-system-prompt", context.config.systemPromptAppend.trim());
         }
       }
-      if (context.config.selectedModel?.trim()) {
-        args.push("--model", context.config.selectedModel.trim());
+      const baseModel = context.config.selectedModel?.trim();
+      if (baseModel) {
+        args.push("--model", buildClaudeModelArg(baseModel, context.config.selectedContextWindow));
+      }
+      const claudeEffort = context.config.selectedEffortLevel?.trim();
+      if (claudeEffort) {
+        args.push("--effort", claudeEffort);
       }
       if (resumeId) {
         args.push("--resume", resumeId);
@@ -5997,11 +6340,11 @@ function kimiSessionId(cwd) {
   }
   return (0, import_crypto.createHash)("md5").update(resolved).digest("hex");
 }
-function shouldEnableKimiCliThinking(model2) {
-  return model2?.trim() === "kimi-k2.6-thinking";
+function shouldEnableKimiCliThinking(model) {
+  return model?.trim() === "kimi-k2.6-thinking";
 }
-function resolveKimiCliModelArg(model2) {
-  const trimmed = model2?.trim();
+function resolveKimiCliModelArg(model) {
+  const trimmed = model?.trim();
   if (!trimmed) return void 0;
   if (trimmed === "kimi-latest" || trimmed === "kimi-k2.5" || trimmed === "kimi-k2.6" || shouldEnableKimiCliThinking(trimmed)) {
     return void 0;
@@ -6088,8 +6431,8 @@ function createKimiCliBackend(command = "kimi", defaultArgs = []) {
       if (shouldEnableKimiCliThinking(context.config.selectedModel)) {
         args.push("--thinking");
       }
-      const model2 = resolveKimiCliModelArg(context.config.selectedModel);
-      if (model2) args.push("--model", model2);
+      const model = resolveKimiCliModelArg(context.config.selectedModel);
+      if (model) args.push("--model", model);
       return [...args, ...defaultArgs, "--prompt", prompt];
     },
     augmentPrompt: (context) => {
@@ -6122,8 +6465,8 @@ function createGeminiCliBackend(command = "gemini", defaultArgs = []) {
     parseStructuredLine: parseGeminiStructuredLine
   });
 }
-function isCursorAgentCliModelId(model2) {
-  return model2 === "auto" || /^composer-/.test(model2) || /^gpt-\d/.test(model2) || /^claude-\d/.test(model2) || /^gemini-\d/.test(model2) || /^grok-\d/.test(model2) || /^kimi-/.test(model2);
+function isCursorAgentCliModelId(model) {
+  return model === "auto" || /^composer-/.test(model) || /^gpt-\d/.test(model) || /^claude-\d/.test(model) || /^gemini-\d/.test(model) || /^grok-\d/.test(model) || /^kimi-/.test(model);
 }
 function createCursorAgentCliBackend(command = "cursor-agent", defaultArgs = []) {
   return createGenericCliBackend({
@@ -6134,10 +6477,10 @@ function createCursorAgentCliBackend(command = "cursor-agent", defaultArgs = [])
     buildArgs: (context, prompt) => {
       const args = ["--print", "--output-format", "stream-json"];
       const resumeId = context.config.runtimeSessionId?.trim() || context.config.providerSessionId?.trim();
-      if (shouldForceCursorAgent(context.config.mode)) args.push("--force");
+      if (shouldForceCursorAgent(context.config)) args.push("--force");
       if (resumeId) args.push("--resume", resumeId);
-      const model2 = context.config.selectedModel?.trim();
-      if (model2 && isCursorAgentCliModelId(model2)) args.push("--model", model2);
+      const model = context.config.selectedModel?.trim();
+      if (model && isCursorAgentCliModelId(model)) args.push("--model", model);
       return [...args, ...defaultArgs, prompt];
     },
     augmentPrompt: (context) => {
@@ -6147,8 +6490,8 @@ function createCursorAgentCliBackend(command = "cursor-agent", defaultArgs = [])
     parseStructuredLine: parseCursorStructuredLine
   });
 }
-function droidExecPermissionArgs(mode2) {
-  if (mode2 === "plan" || mode2 === "ask" || mode2 === "review") return [];
+function droidExecPermissionArgs(mode) {
+  if (mode === "plan" || mode === "ask" || mode === "review") return [];
   return ["--auto", "high"];
 }
 function parseDroidStructuredLine(line, context, state) {
@@ -6247,8 +6590,8 @@ function createDroidCliBackend(command = "droid", defaultArgs = []) {
       ];
       const resumeId = context.config.runtimeSessionId?.trim() || context.config.providerSessionId?.trim();
       if (resumeId) args.push("--session-id", resumeId);
-      const model2 = context.config.selectedModel?.trim();
-      if (model2) args.push("-m", model2);
+      const model = context.config.selectedModel?.trim();
+      if (model) args.push("-m", model);
       args.push(prompt);
       return args;
     },
@@ -6370,8 +6713,8 @@ function createOpencodeCliBackend(command = "opencode", defaultArgs = []) {
             const args = ["run", "--format", "json"];
             const resumeId = ctx.config.runtimeSessionId?.trim() || ctx.config.providerSessionId?.trim();
             if (resumeId) args.push("--session", resumeId);
-            const model2 = ctx.config.selectedModel?.trim();
-            if (model2 && model2.includes("/")) args.push("--model", model2);
+            const model = ctx.config.selectedModel?.trim();
+            if (model && model.includes("/")) args.push("--model", model);
             const fileArgs = imagePaths.flatMap((p) => ["--file", p]);
             if (fileArgs.length > 0) {
               return [...args, ...fileArgs, ...defaultArgs, "--", prompt];
@@ -6399,6 +6742,11 @@ function createGenericCliPassthroughBackend(command, defaultArgs = []) {
     promptViaStdin: true
   });
 }
+function buildCodexEffortArgs(selectedEffortLevel) {
+  const level = selectedEffortLevel?.trim();
+  if (!level) return [];
+  return ["-c", `model_reasoning_effort=${level}`];
+}
 function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
   return {
     kind: "codex_app_server",
@@ -6414,9 +6762,10 @@ function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
           buildArgs: (ctx) => {
             const resumeId = ctx.config.runtimeSessionId?.trim() || ctx.config.providerSessionId?.trim();
             const modelArgs = ctx.config.selectedModel?.trim() ? ["--model", ctx.config.selectedModel.trim()] : [];
-            const permissionArgs = isCodexReadOnlyMode(ctx.config.mode) ? ["--ask-for-approval", "never", "--sandbox", "read-only"] : ["--dangerously-bypass-approvals-and-sandbox"];
+            const effortArgs = buildCodexEffortArgs(ctx.config.selectedEffortLevel);
+            const permissionArgs = shouldUseReadOnlyRuntimePermissions(ctx.config) ? ["--ask-for-approval", "never", "--sandbox", "read-only"] : ["--dangerously-bypass-approvals-and-sandbox"];
             const imageArgs = imagePaths.flatMap((p) => ["--image", p]);
-            const baseArgs = resumeId ? [...permissionArgs, "exec", "resume", "--json", "--skip-git-repo-check", ...modelArgs, ...imageArgs, resumeId, "-"] : [...permissionArgs, "exec", "--json", "--skip-git-repo-check", ...modelArgs, ...imageArgs, "-"];
+            const baseArgs = resumeId ? [...permissionArgs, "exec", "resume", "--json", "--skip-git-repo-check", ...modelArgs, ...effortArgs, ...imageArgs, resumeId, "-"] : [...permissionArgs, "exec", "--json", "--skip-git-repo-check", ...modelArgs, ...effortArgs, ...imageArgs, "-"];
             return [...baseArgs, ...defaultArgs];
           },
           promptViaStdin: true,
@@ -6433,10 +6782,86 @@ function createCodexRuntimeBackend(command = "codex", defaultArgs = []) {
     }
   };
 }
+function parseCopilotStructuredLine(line, context, state) {
+  const presenter = context.presenter;
+  let parsed = null;
+  try {
+    parsed = JSON.parse(line);
+  } catch {
+    void presenter.onLog(`[copilot_cli] ${line}`);
+    return;
+  }
+  const type = typeof parsed.type === "string" ? parsed.type : "";
+  if (!type) return;
+  if (typeof parsed.sessionId === "string") state.runtimeSessionId = parsed.sessionId;
+  const data = typeof parsed.data === "object" && parsed.data !== null ? parsed.data : {};
+  switch (type) {
+    case "assistant.turn_start": {
+      state.iterations += 1;
+      break;
+    }
+    case "assistant.message_delta": {
+      const delta = typeof data.deltaContent === "string" ? data.deltaContent : "";
+      if (!delta) break;
+      const messageId = typeof data.messageId === "string" ? data.messageId : null;
+      if (messageId) {
+        if (!state.copilotStreamedMessageIds) state.copilotStreamedMessageIds = /* @__PURE__ */ new Set();
+        state.copilotStreamedMessageIds.add(messageId);
+      }
+      state.summary += delta;
+      void presenter.onAssistantText(delta);
+      break;
+    }
+    case "assistant.message": {
+      const messageId = typeof data.messageId === "string" ? data.messageId : null;
+      const content = typeof data.content === "string" ? data.content : "";
+      const alreadyStreamed = !!messageId && state.copilotStreamedMessageIds?.has(messageId);
+      if (content && !alreadyStreamed) {
+        state.summary += content;
+        void presenter.onAssistantText(content);
+      }
+      const reasoningText = typeof data.reasoningText === "string" ? data.reasoningText.trim() : "";
+      if (reasoningText) {
+        void presenter.onThinking(reasoningText);
+      }
+      break;
+    }
+    case "tool.execution_start": {
+      const toolId = typeof data.toolCallId === "string" ? data.toolCallId : `copilot-tool-${Date.now()}`;
+      const toolName = typeof data.toolName === "string" ? data.toolName : "Copilot Tool";
+      void presenter.onToolUse(toolName, data.arguments ?? {}, toolId);
+      break;
+    }
+    case "tool.execution_complete": {
+      const toolId = typeof data.toolCallId === "string" ? data.toolCallId : `copilot-tool-${Date.now()}`;
+      const result = typeof data.result === "object" && data.result !== null ? data.result : {};
+      const content = typeof result.content === "string" ? result.content : typeof result.detailedContent === "string" ? result.detailedContent : typeof data.error === "string" ? data.error : "";
+      const success = typeof data.success === "boolean" ? data.success : true;
+      void presenter.onToolResult?.(toolId, content, !success);
+      break;
+    }
+    case "session.error": {
+      const message = typeof data.message === "string" ? data.message : typeof data.error === "string" ? data.error : "GitHub Copilot CLI session error";
+      state.error = message;
+      void presenter.onError(message);
+      break;
+    }
+    case "result": {
+      if (typeof parsed.sessionId === "string") state.runtimeSessionId = parsed.sessionId;
+      const exitCode = typeof parsed.exitCode === "number" ? parsed.exitCode : 0;
+      if (exitCode !== 0 && !state.error) {
+        state.error = `GitHub Copilot CLI exited with code ${exitCode}`;
+      }
+      break;
+    }
+    default:
+      break;
+  }
+}
 function createCopilotCliBackend(command = "copilot", defaultArgs = []) {
   return createGenericCliBackend({
     kind: "copilot_cli",
-    supportTier: "text",
+    supportTier: "structured",
     command,
     args: [],
     buildArgs: (context, prompt) => {
@@ -6446,6 +6871,10 @@ function createCopilotCliBackend(command = "copilot", defaultArgs = []) {
         "--max-autopilot-continues",
         "20",
         "-s",
+        "--stream",
+        "on",
+        "--output-format",
+        "json",
         "-p",
         prompt
       ];
@@ -6453,13 +6882,14 @@ function createCopilotCliBackend(command = "copilot", defaultArgs = []) {
         args.push("--model", context.config.selectedModel.trim());
       }
       return [...args, ...defaultArgs];
-    }
+    },
+    parseStructuredLine: parseCopilotStructuredLine
   });
 }
 var DEFAULT_MODEL = "claude-sonnet-4-6";
 var DROID_DEFAULT_MODEL = "claude-opus-4-7";
-function defaultSelectedModelForBackend(backendKind2) {
-  switch (backendKind2) {
+function defaultSelectedModelForBackend(backendKind) {
+  switch (backendKind) {
     case "droid_cli":
       return DROID_DEFAULT_MODEL;
     case "copilot_cli":
@@ -6478,10 +6908,10 @@ function canonicalizePath(inputPath) {
     return null;
   }
 }
-function buildPromptWithFiles(task2, files) {
-  if (!files || files.length === 0) return task2;
+function buildPromptWithFiles(task, files) {
+  if (!files || files.length === 0) return task;
   const fileList = files.map((file) => `- ${file.filename} (${file.label}): ${file.tempPath}`).join("\n");
-  return `${task2}
+  return `${task}
 
 The user has attached the following files. You can read them using your available tools:
 ${fileList}`;
@@ -6557,16 +6987,16 @@ var BaseMachineAgent = class _BaseMachineAgent {
   resolveBackendKind(config) {
     return this.runtime.backendKind || config.backendKind || "claude_cli";
   }
-  getDefaultSupportTier(backendKind2) {
-    switch (backendKind2) {
+  getDefaultSupportTier(backendKind) {
+    switch (backendKind) {
       case "claude_cli":
       case "codex_app_server":
       case "cursor_agent_cli":
       case "droid_cli":
       case "gemini_cli":
       case "opencode_cli":
-        return "structured";
       case "copilot_cli":
+        return "structured";
       case "generic_cli":
       default:
         return "text";
@@ -6574,13 +7004,15 @@ var BaseMachineAgent = class _BaseMachineAgent {
   }
   // ── Core lifecycle ─────────────────────────────────────────────────────
   buildRuntimeConfig(config, safeProjectPath) {
-    const backendKind2 = this.resolveBackendKind(config);
-    const supportTier = config.supportTier || this.getDefaultSupportTier(backendKind2);
-    const systemPromptParts = [AIDEN_IDENTITY_PROMPT, config.systemPrompt?.trim()].filter(
-      Boolean
-    );
+    const backendKind = this.resolveBackendKind(config);
+    const supportTier = config.supportTier || this.getDefaultSupportTier(backendKind);
+    const systemPromptParts = [AIDEN_IDENTITY_PROMPT];
+    const agentPrompt = config.agentPrompt?.trim() || getAidenAgentPrompt(config.agentId);
+    if (agentPrompt) systemPromptParts.push(agentPrompt);
     const modeHint = getAidenModePrompt(config.mode);
     if (modeHint) systemPromptParts.push(modeHint);
+    const operatorSystemPrompt = config.systemPrompt?.trim();
+    if (operatorSystemPrompt) systemPromptParts.push(operatorSystemPrompt);
     const workingDir = config.worktreePath || safeProjectPath;
     if (workingDir) {
       systemPromptParts.push(
@@ -6592,16 +7024,16 @@ Prefer relative paths and keep your work scoped to this project.`
     systemPromptParts.push(...extra);
     return {
       ...config,
-      backendKind: backendKind2,
+      backendKind,
       supportTier,
       runtimeCommand: config.runtimeCommand || this.runtime.runtimeCommand,
       runtimeArgs: config.runtimeArgs || this.runtime.runtimeArgs,
-      selectedModel: config.selectedModel || defaultSelectedModelForBackend(backendKind2),
+      selectedModel: config.selectedModel || defaultSelectedModelForBackend(backendKind),
       systemPrompt: systemPromptParts.join("\n\n") || void 0
     };
   }
   async runCliBackend(config, safeProjectPath) {
-    const backendKind2 = this.resolveBackendKind(config);
+    const backendKind = this.resolveBackendKind(config);
     const defaultCwd = (0, import_path2.join)((0, import_os2.homedir)(), "Documents", "aiden");
     if (!(0, import_fs2.existsSync)(defaultCwd)) {
       (0, import_fs2.mkdirSync)(defaultCwd, { recursive: true });
@@ -6612,7 +7044,7 @@ Prefer relative paths and keep your work scoped to this project.`
     const promptText = this.buildPromptText(runtimeConfig);
     const runtimeCommand = runtimeConfig.runtimeCommand || this.runtime.runtimeCommand;
     const runtimeArgs = runtimeConfig.runtimeArgs || this.runtime.runtimeArgs || [];
-    const backend = backendKind2 === "claude_cli" ? createClaudeCliBackend(runtimeCommand || "claude", runtimeArgs) : backendKind2 === "codex_app_server" ? createCodexRuntimeBackend(runtimeCommand || "codex", runtimeArgs) : backendKind2 === "copilot_cli" ? createCopilotCliBackend(runtimeCommand || "copilot", runtimeArgs) : backendKind2 === "cursor_agent_cli" ? createCursorAgentCliBackend(runtimeCommand || "cursor-agent", runtimeArgs) : backendKind2 === "gemini_cli" ? createGeminiCliBackend(runtimeCommand || "gemini", runtimeArgs) : backendKind2 === "droid_cli" ? createDroidCliBackend(runtimeCommand || "droid", runtimeArgs) : backendKind2 === "opencode_cli" ? createOpencodeCliBackend(runtimeCommand || "opencode", runtimeArgs) : backendKind2 === "kimi_cli" ? createKimiCliBackend(runtimeCommand || "kimi", runtimeArgs) : createGenericCliPassthroughBackend(runtimeCommand || "generic-cli", runtimeArgs);
+    const backend = backendKind === "claude_cli" ? createClaudeCliBackend(runtimeCommand || "claude", runtimeArgs) : backendKind === "codex_app_server" ? createCodexRuntimeBackend(runtimeCommand || "codex", runtimeArgs) : backendKind === "copilot_cli" ? createCopilotCliBackend(runtimeCommand || "copilot", runtimeArgs) : backendKind === "cursor_agent_cli" ? createCursorAgentCliBackend(runtimeCommand || "cursor-agent", runtimeArgs) : backendKind === "gemini_cli" ? createGeminiCliBackend(runtimeCommand || "gemini", runtimeArgs) : backendKind === "droid_cli" ? createDroidCliBackend(runtimeCommand || "droid", runtimeArgs) : backendKind === "opencode_cli" ? createOpencodeCliBackend(runtimeCommand || "opencode", runtimeArgs) : backendKind === "kimi_cli" ? createKimiCliBackend(runtimeCommand || "kimi", runtimeArgs) : createGenericCliPassthroughBackend(runtimeCommand || "generic-cli", runtimeArgs);
     let lastResult = null;
     for (let attempt = 0; attempt <= _BaseMachineAgent.MAX_RETRIES; attempt++) {
       if (this.abortController?.signal.aborted) break;
@@ -6693,11 +7125,11 @@ Prefer relative paths and keep your work scoped to this project.`
   }
   async run(config) {
     this.abortController = new AbortController();
-    const backendKind2 = this.resolveBackendKind(config);
-    const supportTier = config.supportTier || this.getDefaultSupportTier(backendKind2);
+    const backendKind = this.resolveBackendKind(config);
+    const supportTier = config.supportTier || this.getDefaultSupportTier(backendKind);
     const initialConfig = {
       ...config,
-      backendKind: backendKind2,
+      backendKind,
       supportTier,
       runtimeCommand: config.runtimeCommand || this.runtime.runtimeCommand,
       runtimeArgs: config.runtimeArgs || this.runtime.runtimeArgs
@@ -6718,7 +7150,7 @@ Prefer relative paths and keep your work scoped to this project.`
         planFilesCreated: [],
         iterations: 0,
         error: message,
-        backendKind: backendKind2,
+        backendKind,
         supportTier
       };
       this.presenter.onComplete(result);
@@ -6740,7 +7172,7 @@ Prefer relative paths and keep your work scoped to this project.`
         planFilesCreated: [],
         iterations: 0,
         error: message,
-        backendKind: backendKind2,
+        backendKind,
         supportTier
       };
       this.presenter.onComplete(result);
@@ -6838,6 +7270,28 @@ var CoreAgent = class _CoreAgent extends BaseMachineAgent {
       return false;
     }
   }
+  sendUserMessage(text) {
+    if (!this.childProcess || this._aborted) return false;
+    const stdin = this.childProcess.stdin;
+    if (!stdin || stdin.destroyed) return false;
+    try {
+      const message = JSON.stringify({
+        type: "user",
+        message: {
+          role: "user",
+          content: [{ type: "text", text }]
+        },
+        session_id: "default",
+        parent_tool_use_id: null
+      });
+      stdin.write(message + "\n");
+      console.info(`[CoreAgent] Appended user message to live CLI stdin (${text.length} chars)`);
+      return true;
+    } catch (err) {
+      console.error("[CoreAgent] Failed to append user message to stdin", err);
+      return false;
+    }
+  }
   // ── BaseMachineAgent hooks ─────────────────────────────────────────────
   getOnProcessSpawned() {
     return (child) => {
@@ -6869,6 +7323,18 @@ var CoreAgent = class _CoreAgent extends BaseMachineAgent {
   }
   buildExtraSystemPromptParts(config) {
     const parts2 = [];
+    if (config.currentUser) {
+      const u = config.currentUser;
+      const lines = ["# Current User"];
+      if (u.name) lines.push(`- **Name**: ${u.name}`);
+      lines.push(`- **Email**: ${u.email}`);
+      lines.push(`- **User ID**: ${u.id}`);
+      lines.push("");
+      lines.push(
+        "This is the person who initiated this conversation. When creating tasks or assigning work, default to assigning to this user unless explicitly instructed otherwise."
+      );
+      parts2.push(lines.join("\n"));
+    }
     if (config.taskMeta) {
       const meta = config.taskMeta;
       const lines = ["# Task Context"];
@@ -6891,26 +7357,50 @@ ${meta.description}`);
       if (meta.descriptionAttachmentIds && meta.descriptionAttachmentIds.length > 0) {
         lines.push("");
         lines.push("## Task Description Images");
-        lines.push("The task description contains images. Use the `get_attachment` MCP tool to view them:");
+        lines.push('The task description contains images. Use the `attachment` MCP tool with op="get" to view them:');
         for (const att of meta.descriptionAttachmentIds) {
           lines.push(`- Attachment ID: \`${att.id}\` (${att.filename})`);
         }
       }
+      if (meta.linkedResources && meta.linkedResources.length > 0) {
+        lines.push("");
+        lines.push("## Linked Task Resources");
+        for (const resource of meta.linkedResources) {
+          lines.push(`- ${resource.type}: "${resource.title}" (${resource.url ?? resource.id})`);
+        }
+      }
       parts2.push(lines.join("\n"));
     }
-    const taskId2 = config.taskId ?? process.env.AIDEN_TASK_ID;
+    const taskId = config.taskId ?? process.env.AIDEN_TASK_ID;
     const conversationId = config.conversationId ?? process.env.AIDEN_SESSION_ID;
+    const teamId = config.teamId;
     const artifactIds = [];
-    if (taskId2) artifactIds.push(`- taskId: "${taskId2}"`);
+    if (teamId) artifactIds.push(`- teamId: "${teamId}"`);
+    if (taskId) artifactIds.push(`- taskId: "${taskId}"`);
     if (conversationId) artifactIds.push(`- conversationId: "${conversationId}"`);
     if (artifactIds.length > 0) {
       parts2.push(
         [
-          "When creating artifacts using MCP tools (create_plan, create_document_artifact, create_test_report), always pass these IDs:",
+          "When creating artifacts using MCP tools (create_plan, create_document_artifact, create_test_report, upsert_prototype_version), always pass these IDs:",
           ...artifactIds
         ].join("\n")
       );
     }
+    if (taskId && conversationId && teamId) {
+      parts2.push(
+        [
+          "## Prototype Artifacts",
+          "When the user asks to create, build, modify, or iterate on a prototype, do not create local prototype files such as prototype/index.html.",
+          "Instead, generate a Vite React TypeScript source snapshot and call the Aiden MCP tool upsert_prototype_version with teamId, taskId, conversationId, title, sourceSnapshot, and packageJson.",
+          "For follow-up changes to the same prototype, call list_prototypes or get_prototype if needed, then call upsert_prototype_version again with the existing prototypeId and parentVersionId so the task Prototypes panel renders the new version."
+        ].join("\n")
+      );
+    }
+    if (teamId) {
+      parts2.push(
+        `You are operating within team \`${teamId}\`. Always use this as the \`teamId\` for all MCP tool calls that accept it (list_tasks, search, start_task_session, etc.). Do not call list_teams.`
+      );
+    }
     return parts2;
   }
 };
@@ -7010,10 +7500,10 @@ var WebPresenter = class {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.node.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.node.js
 var XMLHttpRequestModule = __toESM(require_XMLHttpRequest(), 1);
 
-// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/esm/commons.js
+// ../../node_modules/engine.io-parser/build/esm/commons.js
 var PACKET_TYPES = /* @__PURE__ */ Object.create(null);
 PACKET_TYPES["open"] = "0";
 PACKET_TYPES["close"] = "1";
@@ -7028,7 +7518,7 @@ Object.keys(PACKET_TYPES).forEach((key) => {
 });
 var ERROR_PACKET = { type: "error", data: "parser error" };
 
-// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/esm/encodePacket.js
+// ../../node_modules/engine.io-parser/build/esm/encodePacket.js
 var encodePacket = ({ type, data }, supportsBinary, callback) => {
   if (data instanceof ArrayBuffer || ArrayBuffer.isView(data)) {
     return callback(supportsBinary ? data : "b" + toBuffer(data, true).toString("base64"));
@@ -7057,7 +7547,7 @@ function encodePacketToBinary(packet, callback) {
   });
 }
 
-// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/esm/decodePacket.js
+// ../../node_modules/engine.io-parser/build/esm/decodePacket.js
 var decodePacket = (encodedPacket, binaryType) => {
   if (typeof encodedPacket !== "string") {
     return {
@@ -7103,7 +7593,7 @@ var mapBinary = (data, binaryType) => {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-parser@5.2.3/node_modules/engine.io-parser/build/esm/index.js
+// ../../node_modules/engine.io-parser/build/esm/index.js
 var SEPARATOR = String.fromCharCode(30);
 var encodePayload = (packets, callback) => {
   const length = packets.length;
@@ -7245,7 +7735,7 @@ function createPacketDecoderStream(maxPayload, binaryType) {
 }
 var protocol = 4;
 
-// ../../node_modules/.pnpm/@socket.io+component-emitter@3.1.2/node_modules/@socket.io/component-emitter/lib/esm/index.js
+// ../../node_modules/@socket.io/component-emitter/lib/esm/index.js
 function Emitter(obj) {
   if (obj) return mixin(obj);
 }
@@ -7317,7 +7807,7 @@ Emitter.prototype.hasListeners = function(event) {
   return !!this.listeners(event).length;
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/globals.node.js
+// ../../node_modules/engine.io-client/build/esm-debug/globals.node.js
 var nextTick = process.nextTick;
 var globalThisShim = global;
 var defaultBinaryType = "nodebuffer";
@@ -7405,7 +7895,7 @@ var CookieJar = class {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/util.js
+// ../../node_modules/engine.io-client/build/esm-debug/util.js
 function pick(obj, ...attr) {
   return attr.reduce((acc, k) => {
     if (obj.hasOwnProperty(k)) {
@@ -7453,7 +7943,7 @@ function randomString() {
   return Date.now().toString(36).substring(3) + Math.random().toString(36).substring(2, 5);
 }
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/contrib/parseqs.js
+// ../../node_modules/engine.io-client/build/esm-debug/contrib/parseqs.js
 function encode(obj) {
   let str = "";
   for (let i in obj) {
@@ -7475,7 +7965,7 @@ function decode(qs) {
   return qry;
 }
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transport.js
+// ../../node_modules/engine.io-client/build/esm-debug/transport.js
 var import_debug = __toESM(require_src(), 1);
 var debug = (0, import_debug.default)("engine.io-client:transport");
 var TransportError = class extends Error {
@@ -7593,8 +8083,8 @@ var Transport = class extends Emitter {
     return schema + "://" + this._hostname() + this._port() + this.opts.path + this._query(query);
   }
   _hostname() {
-    const hostname = this.opts.hostname;
-    return hostname.indexOf(":") === -1 ? hostname : "[" + hostname + "]";
+    const hostname2 = this.opts.hostname;
+    return hostname2.indexOf(":") === -1 ? hostname2 : "[" + hostname2 + "]";
   }
   _port() {
     if (this.opts.port && (this.opts.secure && Number(this.opts.port) !== 443 || !this.opts.secure && Number(this.opts.port) !== 80)) {
@@ -7609,7 +8099,7 @@ var Transport = class extends Emitter {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/polling.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/polling.js
 var import_debug2 = __toESM(require_src(), 1);
 var debug2 = (0, import_debug2.default)("engine.io-client:polling");
 var Polling = class extends Transport {
@@ -7754,7 +8244,7 @@ var Polling = class extends Transport {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/contrib/has-cors.js
+// ../../node_modules/engine.io-client/build/esm-debug/contrib/has-cors.js
 var value = false;
 try {
   value = typeof XMLHttpRequest !== "undefined" && "withCredentials" in new XMLHttpRequest();
@@ -7762,7 +8252,7 @@ try {
 }
 var hasCORS = value;
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.js
 var import_debug3 = __toESM(require_src(), 1);
 var debug3 = (0, import_debug3.default)("engine.io-client:polling");
 function empty() {
@@ -7997,7 +8487,7 @@ function newRequest(opts) {
   }
 }
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.node.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/polling-xhr.node.js
 var XMLHttpRequest2 = XMLHttpRequestModule.default || XMLHttpRequestModule;
 var XHR = class extends BaseXHR {
   request(opts = {}) {
@@ -8007,14 +8497,14 @@ var XHR = class extends BaseXHR {
   }
 };
 
-// ../../node_modules/.pnpm/ws@8.18.3/node_modules/ws/wrapper.mjs
+// ../../node_modules/engine.io-client/node_modules/ws/wrapper.mjs
 var import_stream = __toESM(require_stream(), 1);
 var import_receiver = __toESM(require_receiver(), 1);
 var import_sender = __toESM(require_sender(), 1);
 var import_websocket = __toESM(require_websocket(), 1);
 var import_websocket_server = __toESM(require_websocket_server(), 1);
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/websocket.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/websocket.js
 var import_debug4 = __toESM(require_src(), 1);
 var debug4 = (0, import_debug4.default)("engine.io-client:websocket");
 var isReactNative = typeof navigator !== "undefined" && typeof navigator.product === "string" && navigator.product.toLowerCase() === "reactnative";
@@ -8103,7 +8593,7 @@ var BaseWS = class extends Transport {
 };
 var WebSocketCtor = globalThisShim.WebSocket || globalThisShim.MozWebSocket;
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/websocket.node.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/websocket.node.js
 var WS = class extends BaseWS {
   createSocket(uri, protocols, opts) {
     var _a;
@@ -8134,7 +8624,7 @@ var WS = class extends BaseWS {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/webtransport.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/webtransport.js
 var import_debug5 = __toESM(require_src(), 1);
 var debug5 = (0, import_debug5.default)("engine.io-client:webtransport");
 var WT = class extends Transport {
@@ -8204,14 +8694,14 @@ var WT = class extends Transport {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/transports/index.js
+// ../../node_modules/engine.io-client/build/esm-debug/transports/index.js
 var transports = {
   websocket: WS,
   webtransport: WT,
   polling: XHR
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/contrib/parseuri.js
+// ../../node_modules/engine.io-client/build/esm-debug/contrib/parseuri.js
 var re = /^(?:(?![^:@\/?#]+:[^:@\/]*@)(http|https|ws|wss):\/\/)?((?:(([^:@\/?#]*)(?::([^:@\/?#]*))?)?@)?((?:[a-f0-9]{0,4}:){2,7}[a-f0-9]{0,4}|[^:\/?#]*)(?::(\d*))?)(((\/(?:[^?#](?![^?#\/]*\.[^?#\/.]+(?:[?#]|$)))*\/?)?([^?#\/]*))(?:\?([^#]*))?(?:#(.*))?)/;
 var parts = [
   "source",
@@ -8271,7 +8761,7 @@ function queryKey(uri, query) {
   return data;
 }
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/socket.js
+// ../../node_modules/engine.io-client/build/esm-debug/socket.js
 var import_debug6 = __toESM(require_src(), 1);
 var debug6 = (0, import_debug6.default)("engine.io-client:socket");
 var withEventListeners = typeof addEventListener === "function" && typeof removeEventListener === "function";
@@ -8867,10 +9357,10 @@ var Socket = class extends SocketWithUpgrade {
   }
 };
 
-// ../../node_modules/.pnpm/engine.io-client@6.6.4/node_modules/engine.io-client/build/esm-debug/index.js
+// ../../node_modules/engine.io-client/build/esm-debug/index.js
 var protocol2 = Socket.protocol;
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/url.js
+// ../../node_modules/socket.io-client/build/esm-debug/url.js
 var import_debug7 = __toESM(require_src(), 1);
 var debug7 = (0, import_debug7.default)("socket.io-client:url");
 function url(uri, path = "", loc) {
@@ -8912,7 +9402,7 @@ function url(uri, path = "", loc) {
   return obj;
 }
 
-// ../../node_modules/.pnpm/socket.io-parser@4.2.5/node_modules/socket.io-parser/build/esm-debug/index.js
+// ../../node_modules/socket.io-parser/build/esm-debug/index.js
 var esm_debug_exports = {};
 __export(esm_debug_exports, {
   Decoder: () => Decoder,
@@ -8922,7 +9412,7 @@ __export(esm_debug_exports, {
   protocol: () => protocol3
 });
 
-// ../../node_modules/.pnpm/socket.io-parser@4.2.5/node_modules/socket.io-parser/build/esm-debug/is-binary.js
+// ../../node_modules/socket.io-parser/build/esm-debug/is-binary.js
 var withNativeArrayBuffer = typeof ArrayBuffer === "function";
 var isView = (obj) => {
   return typeof ArrayBuffer.isView === "function" ? ArrayBuffer.isView(obj) : obj.buffer instanceof ArrayBuffer;
@@ -8959,7 +9449,7 @@ function hasBinary(obj, toJSON) {
   return false;
 }
 
-// ../../node_modules/.pnpm/socket.io-parser@4.2.5/node_modules/socket.io-parser/build/esm-debug/binary.js
+// ../../node_modules/socket.io-parser/build/esm-debug/binary.js
 function deconstructPacket(packet) {
   const buffers = [];
   const packetData = packet.data;
@@ -9021,7 +9511,7 @@ function _reconstructPacket(data, buffers) {
   return data;
 }
 
-// ../../node_modules/.pnpm/socket.io-parser@4.2.5/node_modules/socket.io-parser/build/esm-debug/index.js
+// ../../node_modules/socket.io-parser/build/esm-debug/index.js
 var import_debug8 = __toESM(require_src(), 1);
 var debug8 = (0, import_debug8.default)("socket.io-parser");
 var RESERVED_EVENTS = [
@@ -9315,7 +9805,7 @@ function isPacketValid(packet) {
   return isNamespaceValid(packet.nsp) && isAckIdValid(packet.id) && isDataValid(packet.type, packet.data);
 }
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/on.js
+// ../../node_modules/socket.io-client/build/esm-debug/on.js
 function on(obj, ev, fn) {
   obj.on(ev, fn);
   return function subDestroy() {
@@ -9323,7 +9813,7 @@ function on(obj, ev, fn) {
   };
 }
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/socket.js
+// ../../node_modules/socket.io-client/build/esm-debug/socket.js
 var import_debug9 = __toESM(require_src(), 1);
 var debug9 = (0, import_debug9.default)("socket.io-client:socket");
 var RESERVED_EVENTS2 = Object.freeze({
@@ -10118,7 +10608,7 @@ var Socket2 = class extends Emitter {
   }
 };
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/contrib/backo2.js
+// ../../node_modules/socket.io-client/build/esm-debug/contrib/backo2.js
 function Backoff(opts) {
   opts = opts || {};
   this.ms = opts.min || 100;
@@ -10149,7 +10639,7 @@ Backoff.prototype.setJitter = function(jitter) {
   this.jitter = jitter;
 };
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/manager.js
+// ../../node_modules/socket.io-client/build/esm-debug/manager.js
 var import_debug10 = __toESM(require_src(), 1);
 var debug10 = (0, import_debug10.default)("socket.io-client:manager");
 var Manager = class extends Emitter {
@@ -10518,7 +11008,7 @@ var Manager = class extends Emitter {
   }
 };
 
-// ../../node_modules/.pnpm/socket.io-client@4.8.3/node_modules/socket.io-client/build/esm-debug/index.js
+// ../../node_modules/socket.io-client/build/esm-debug/index.js
 var import_debug11 = __toESM(require_src(), 1);
 var debug11 = (0, import_debug11.default)("socket.io-client");
 var cache = {};
@@ -10560,9 +11050,9 @@ Object.assign(lookup, {
 // src/ws-client.ts
 var WSClient = class {
   socket;
-  constructor(wsUrl2, sessionId2, taskId2, token, callbacks, agentVersion) {
-    this.socket = lookup(wsUrl2, {
-      query: { type: "agent", sessionId: sessionId2, taskId: taskId2, agentVersion: agentVersion ?? "" },
+  constructor(wsUrl, sessionId, taskId, token, callbacks, agentVersion) {
+    this.socket = lookup(wsUrl, {
+      query: { type: "agent", sessionId, taskId, agentVersion: agentVersion ?? "" },
       auth: { token },
       transports: ["websocket"],
       reconnection: true,
@@ -10620,7 +11110,11 @@ var WSClient = class {
         images: data.images,
         providerSessionId: data.providerSessionId,
         backendKind: data.backendKind,
+        agentId: data.agentId,
+        agentPrompt: data.agentPrompt,
         selectedModel: data.selectedModel,
+        selectedContextWindow: data.selectedContextWindow,
+        selectedEffortLevel: data.selectedEffortLevel,
         mode: data.mode,
         taskMeta: data.taskMeta,
         workflowTools: data.workflowTools,
@@ -10628,7 +11122,9 @@ var WSClient = class {
         messageId: data.messageId,
         maxIterations: data.maxIterations,
         taskId: data.taskId,
-        conversationId: data.conversationId
+        conversationId: data.conversationId,
+        teamId: data.teamId,
+        currentUser: data.currentUser
       });
     });
     this.socket.on("stop", () => {
@@ -10646,7 +11142,7 @@ var WSClient = class {
 };
 
 // src/version.ts
-var AGENT_VERSION = "0.1.8";
+var AGENT_VERSION = "0.1.9";
 
 // src/sandbox.ts
 async function runSandbox(config) {
@@ -10660,6 +11156,8 @@ async function runSandbox(config) {
   let currentMaxIterations = config.maxIterations ?? 50;
   let currentTaskId = config.taskId;
   let currentConversationId = config.sessionId;
+  let currentTeamId = config.teamId;
+  let currentUser = config.currentUser;
   console.info("[sandbox] Connecting to WS server", { wsUrl: config.wsUrl, sessionId: config.sessionId });
   const wsClient = new WSClient(
     config.wsUrl,
@@ -10708,7 +11206,11 @@ async function runSandbox(config) {
   presenter.setSuppressSessionLifecycle(true);
   let lastProviderSessionId = config.providerSessionId;
   let activeBackendKind = config.backendKind || "claude_cli";
+  let activeAgentId = config.agentId;
+  let activeAgentPrompt = config.agentPrompt;
   let activeModel = config.model;
+  let activeContextWindow = config.contextWindow;
+  let activeEffortLevel = config.effortLevel;
   let activeMode = config.mode || "agent";
   while (!stopped) {
     if (currentTask?.trim()) {
@@ -10724,12 +11226,18 @@ async function runSandbox(config) {
           teamPath: config.projectPath,
           cwd: config.projectPath,
           backendKind: activeBackendKind,
+          agentId: activeAgentId,
+          agentPrompt: activeAgentPrompt,
           mode: activeMode,
           selectedModel: activeModel,
+          selectedContextWindow: activeContextWindow ?? null,
+          selectedEffortLevel: activeEffortLevel ?? null,
           providerSessionId: lastProviderSessionId ?? void 0,
           taskMeta: currentTaskMeta,
           taskId: currentTaskId,
           conversationId: currentConversationId,
+          teamId: currentTeamId,
+          currentUser,
           workflowTools: currentWorkflowTools,
           images: currentImages.length > 0 ? currentImages.map((img) => ({
             id: img.id,
@@ -10765,9 +11273,21 @@ async function runSandbox(config) {
     if (nextPayload.backendKind) {
       activeBackendKind = nextPayload.backendKind;
     }
+    if (nextPayload.agentId !== void 0) {
+      activeAgentId = nextPayload.agentId;
+    }
+    if (nextPayload.agentPrompt !== void 0) {
+      activeAgentPrompt = nextPayload.agentPrompt;
+    }
     if (nextPayload.selectedModel) {
       activeModel = nextPayload.selectedModel;
     }
+    if (nextPayload.selectedContextWindow !== void 0) {
+      activeContextWindow = nextPayload.selectedContextWindow;
+    }
+    if (nextPayload.selectedEffortLevel !== void 0) {
+      activeEffortLevel = nextPayload.selectedEffortLevel;
+    }
     if (nextPayload.mode) {
       activeMode = nextPayload.mode;
     }
@@ -10786,46 +11306,618 @@ async function runSandbox(config) {
     if (nextPayload.conversationId !== void 0) {
       currentConversationId = nextPayload.conversationId;
     }
+    if (nextPayload.currentUser !== void 0) {
+      currentUser = nextPayload.currentUser;
+    }
+    if (nextPayload.teamId !== void 0) {
+      currentTeamId = nextPayload.teamId;
+    }
   }
   presenter.setSuppressSessionLifecycle(false);
   wsClient.close();
 }
 
+// src/daemon.ts
+var import_node_fs = require("fs");
+var import_node_http = __toESM(require("http"), 1);
+var import_node_crypto = require("crypto");
+var import_node_os = require("os");
+var import_node_path = require("path");
+var import_node_child_process = require("child_process");
+var CONFIG_PATH = process.env.AIDEN_AGENT_CONFIG_PATH ?? (0, import_node_path.join)((0, import_node_os.homedir)(), ".aiden", "agent", "config.json");
+function readConfig() {
+  if (!(0, import_node_fs.existsSync)(CONFIG_PATH)) return {};
+  return JSON.parse((0, import_node_fs.readFileSync)(CONFIG_PATH, "utf8"));
+}
+function writeConfig(config) {
+  (0, import_node_fs.mkdirSync)((0, import_node_path.dirname)(CONFIG_PATH), { recursive: true, mode: 448 });
+  (0, import_node_fs.writeFileSync)(CONFIG_PATH, JSON.stringify(config, null, 2), { mode: 384 });
+}
+function removeConfig() {
+  if ((0, import_node_fs.existsSync)(CONFIG_PATH)) (0, import_node_fs.rmSync)(CONFIG_PATH, { force: true });
+}
+function argValue(args, name) {
+  const index = args.indexOf(name);
+  if (index === -1) return void 0;
+  return args[index + 1];
+}
+function getLocalApiPort(args, stored) {
+  const raw = argValue(args, "--local-api-port") ?? process.env.AIDEN_AGENT_LOCAL_API_PORT;
+  if (raw) return Number.parseInt(raw, 10);
+  return stored.localApiPort ?? 47831;
+}
+function sleep(ms) {
+  if (ms <= 0) return Promise.resolve();
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
+}
+function commandVersion(command, args = ["--version"]) {
+  const result = (0, import_node_child_process.spawnSync)(command, args, { encoding: "utf8", timeout: 3e3 });
+  if (result.error || result.status !== 0) return void 0;
+  return (result.stdout || result.stderr).split("\n")[0]?.trim() || void 0;
+}
+function discoverCapabilities() {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const providers = [
+    { provider: "claude_cli", command: process.env.AIDEN_CLAUDE_PATH ?? "claude" },
+    { provider: "codex", command: process.env.AIDEN_CODEX_PATH ?? "codex" },
+    { provider: "gemini", command: process.env.AIDEN_GEMINI_PATH ?? "gemini" }
+  ];
+  return {
+    agents: providers.map(({ provider, command }) => {
+      const version = commandVersion(command);
+      return {
+        provider,
+        available: Boolean(version),
+        ...version ? { version } : {},
+        models: [],
+        lastCheckedAt: now
+      };
+    }),
+    hasGit: Boolean(commandVersion("git")),
+    hasTerminal: true,
+    supportsFilesystem: true
+  };
+}
+var RuntimePresenter = class {
+  constructor(socket, conversationId, runId) {
+    this.socket = socket;
+    this.conversationId = conversationId;
+    this.runId = runId;
+  }
+  emitEvent(event) {
+    this.socket.emit("agent.event", {
+      conversationId: this.conversationId,
+      runId: this.runId,
+      event
+    });
+  }
+  onStart(config) {
+    this.emitEvent({ type: "start", task: config.task, ts: Date.now() });
+  }
+  onLog(message) {
+    console.error(message);
+  }
+  onAssistantText(text) {
+    this.emitEvent({ type: "text", text, ts: Date.now() });
+  }
+  onThinking(text) {
+    this.emitEvent({ type: "thinking", text, ts: Date.now() });
+  }
+  onToolUse(tool, input, toolId) {
+    this.emitEvent({ type: "tool_use", id: toolId, name: tool, input, ts: Date.now() });
+  }
+  onToolResult(toolId, content, isError) {
+    this.emitEvent({
+      type: "tool_result",
+      id: toolId,
+      content,
+      ts: Date.now(),
+      ...isError ? { is_error: true } : {}
+    });
+  }
+  onTurnComplete(content) {
+    this.emitEvent({ type: "turn_complete", content, ts: Date.now() });
+  }
+  onUsageUpdate(usage) {
+    this.emitEvent({ type: "usage", usage });
+  }
+  onAskUser(id, questions) {
+    this.emitEvent({ type: "ask_user", id, questions });
+  }
+  onTodoWrite(todos) {
+    this.emitEvent({ type: "todo_write", todos });
+  }
+  onExitPlanMode(id, input, planFilePath) {
+    this.emitEvent({ type: "exit_plan_mode", id, input, ...planFilePath ? { planFilePath } : {} });
+  }
+  onCheckpoint(id) {
+    this.emitEvent({ type: "checkpoint", id });
+  }
+  onActivity(status) {
+    this.emitEvent({ type: "activity", status, ts: Date.now() });
+  }
+  onOpenBrowserTab(browserId, url2) {
+    this.emitEvent({ type: "open_browser_tab", browserId, ...url2 ? { url: url2 } : {} });
+  }
+  recordRawTranscript() {
+  }
+  onError(message) {
+    this.emitEvent({ type: "session_error", error: message });
+  }
+  onComplete(result) {
+    this.emitEvent({ type: "query_complete", result, ts: Date.now() });
+  }
+};
+async function setupDaemon(args) {
+  const apiUrl = argValue(args, "--api-url") ?? process.env.AIDEN_API_URL ?? "http://localhost:8400";
+  const wsUrl = argValue(args, "--ws-url") ?? process.env.AIDEN_WS_URL ?? "ws://localhost:8401";
+  const teamId = argValue(args, "--team") ?? process.env.AIDEN_TEAM_ID;
+  const setupToken = argValue(args, "--setup-token") ?? process.env.AIDEN_RUNTIME_SETUP_TOKEN;
+  const token = argValue(args, "--token") ?? process.env.AIDEN_SETUP_TOKEN;
+  const displayName = argValue(args, "--name") ?? (0, import_node_os.hostname)();
+  const legacyLocalMachineId = argValue(args, "--legacy-local-machine-id") ?? process.env.AIDEN_LEGACY_LOCAL_MACHINE_ID;
+  if (!setupToken && (!teamId || !token)) {
+    throw new Error("setup requires --setup-token <token> or --team <team-id> and --token <aiden PAT>");
+  }
+  const response = await fetch(`${apiUrl}/public/runtimes${setupToken ? "/register-with-setup-token" : ""}`, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      ...setupToken ? {} : { authorization: `Bearer ${token}` }
+    },
+    body: JSON.stringify({
+      ...teamId ? { teamId } : {},
+      ...setupToken ? { setupToken } : {},
+      displayName,
+      hostname: (0, import_node_os.hostname)(),
+      ...legacyLocalMachineId ? { legacyLocalMachineId } : {},
+      runtimeKind: "machine",
+      managementKind: "user_managed",
+      hostKind: "daemon",
+      lifecycle: "durable",
+      ownerType: "team",
+      visibility: "team",
+      capabilities: discoverCapabilities(),
+      metadata: {
+        platform: (0, import_node_os.platform)(),
+        arch: (0, import_node_os.arch)(),
+        agentVersion: AGENT_VERSION
+      }
+    })
+  });
+  if (!response.ok) {
+    throw new Error(`runtime registration failed: ${response.status} ${await response.text()}`);
+  }
+  const body = await response.json();
+  writeConfig({
+    apiUrl,
+    wsUrl,
+    teamId,
+    runtimeId: body.runtime.id,
+    runtimeToken: body.runtimeToken,
+    localApiPort: getLocalApiPort(args, {}),
+    localApiToken: (0, import_node_crypto.randomBytes)(24).toString("hex"),
+    displayName: body.runtime.displayName ?? displayName
+  });
+  console.info("[aiden-agent] Runtime registered", { runtimeId: body.runtime.id, configPath: CONFIG_PATH });
+}
+async function loginWithDeviceCode(args) {
+  const apiUrl = argValue(args, "--api-url") ?? process.env.AIDEN_API_URL ?? "http://localhost:8400";
+  const wsUrl = argValue(args, "--ws-url") ?? process.env.AIDEN_WS_URL ?? "ws://localhost:8401";
+  const displayName = argValue(args, "--name") ?? (0, import_node_os.hostname)();
+  const maxPolls = Number.parseInt(argValue(args, "--max-polls") ?? "300", 10);
+  const start = await fetch(`${apiUrl}/public/runtimes/device-authorizations`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      displayName,
+      hostname: (0, import_node_os.hostname)(),
+      capabilities: discoverCapabilities(),
+      metadata: {
+        platform: (0, import_node_os.platform)(),
+        arch: (0, import_node_os.arch)(),
+        agentVersion: AGENT_VERSION
+      }
+    })
+  });
+  if (!start.ok) {
+    throw new Error(`device authorization failed: ${start.status} ${await start.text()}`);
+  }
+  const authorization = await start.json();
+  const intervalMs = Math.max(0, (authorization.intervalSeconds ?? 2) * 1e3);
+  console.info(`[aiden-agent] Open ${authorization.verificationUri}`);
+  console.info(`[aiden-agent] Enter code ${authorization.userCode}`);
+  for (let attempt = 0; attempt < maxPolls; attempt += 1) {
+    if (attempt > 0) await sleep(intervalMs);
+    const token = await fetch(`${apiUrl}/public/runtimes/device-authorizations/token`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ deviceCode: authorization.deviceCode })
+    });
+    if (token.status === 428) continue;
+    if (!token.ok) {
+      throw new Error(`device authorization token exchange failed: ${token.status} ${await token.text()}`);
+    }
+    const body = await token.json();
+    writeConfig({
+      apiUrl,
+      wsUrl,
+      teamId: body.runtime.teamId ?? void 0,
+      runtimeId: body.runtime.id,
+      runtimeToken: body.runtimeToken,
+      localApiPort: getLocalApiPort(args, {}),
+      localApiToken: (0, import_node_crypto.randomBytes)(24).toString("hex"),
+      displayName: body.runtime.displayName ?? displayName
+    });
+    console.info("[aiden-agent] Runtime registered", { runtimeId: body.runtime.id, configPath: CONFIG_PATH });
+    return;
+  }
+  throw new Error("device authorization timed out before approval");
+}
+async function startDaemon(args) {
+  const stored = readConfig();
+  const runtimeId = argValue(args, "--runtime-id") ?? process.env.AIDEN_RUNTIME_ID ?? stored.runtimeId;
+  const runtimeToken = argValue(args, "--token") ?? process.env.AIDEN_RUNTIME_TOKEN ?? stored.runtimeToken;
+  const wsUrl = argValue(args, "--ws-url") ?? process.env.AIDEN_WS_URL ?? stored.wsUrl;
+  let localApiPort = getLocalApiPort(args, stored);
+  const localApiToken = stored.localApiToken ?? (0, import_node_crypto.randomBytes)(24).toString("hex");
+  if (!runtimeId || !runtimeToken || !wsUrl) {
+    throw new Error("daemon requires runtimeId, runtime token, and wsUrl. Run setup first or pass --runtime-id/--token/--ws-url.");
+  }
+  const capabilities = discoverCapabilities();
+  const activeAgents = /* @__PURE__ */ new Map();
+  const recentLogs = [];
+  const pushLog = (message) => {
+    recentLogs.push(`${(/* @__PURE__ */ new Date()).toISOString()} ${message}`);
+    if (recentLogs.length > 200) recentLogs.splice(0, recentLogs.length - 200);
+  };
+  if (stored.localApiPort !== localApiPort || stored.localApiToken !== localApiToken) {
+    writeConfig({ ...stored, runtimeId, runtimeToken, wsUrl, localApiPort, localApiToken });
+  }
+  const socket = lookup(wsUrl, {
+    query: { type: "runtime", runtimeId, hostKind: "daemon", agentVersion: AGENT_VERSION },
+    auth: { token: runtimeToken },
+    transports: ["websocket"],
+    reconnection: true,
+    reconnectionAttempts: Infinity,
+    reconnectionDelay: 1e3,
+    reconnectionDelayMax: 5e3,
+    timeout: 2e4,
+    upgrade: false,
+    extraHeaders: { "ngrok-skip-browser-warning": "1" }
+  });
+  const heartbeat = setInterval(() => {
+    if (socket.connected) socket.emit("runtime.heartbeat", { capabilities });
+  }, 15e3);
+  socket.on("connect", () => {
+    pushLog(`connected runtime=${runtimeId}`);
+    console.info("[aiden-agent] Daemon connected", { runtimeId, wsUrl, version: AGENT_VERSION });
+    socket.emit("runtime.hello", { capabilities });
+  });
+  socket.on("connect_error", (error) => {
+    pushLog(`connect_error ${error.message}`);
+    console.warn("[aiden-agent] Daemon connection error:", error.message);
+  });
+  socket.on("disconnect", (reason) => {
+    pushLog(`disconnected ${reason}`);
+    console.info("[aiden-agent] Daemon disconnected:", reason);
+  });
+  socket.on("agent.execute", (payload) => {
+    if (!payload?.runId || !payload.conversationId || typeof payload.content !== "string") {
+      return;
+    }
+    if (activeAgents.has(payload.runId)) {
+      socket.emit("agent.rejected", { runId: payload.runId, message: "Run is already active" });
+      return;
+    }
+    socket.emit("agent.accepted", { runId: payload.runId });
+    pushLog(`accepted run=${payload.runId}`);
+    const presenter = new RuntimePresenter(socket, payload.conversationId, payload.runId);
+    const agent = new CoreAgent(presenter, {
+      backendKind: payload.backendKind
+    });
+    activeAgents.set(payload.runId, agent);
+    const cwd = payload.projectPath ?? process.cwd();
+    void agent.run({
+      task: payload.content,
+      maxIterations: payload.maxIterations ?? 50,
+      teamPath: cwd,
+      cwd,
+      backendKind: payload.backendKind,
+      agentId: payload.agentId,
+      agentPrompt: payload.agentPrompt,
+      mode: payload.mode ?? "agent",
+      selectedModel: payload.model,
+      selectedContextWindow: payload.selectedContextWindow ?? null,
+      selectedEffortLevel: payload.selectedEffortLevel ?? null,
+      providerSessionId: payload.providerSessionId,
+      taskMeta: payload.taskMeta,
+      conversationId: payload.conversationId,
+      taskId: payload.taskMeta?.id,
+      teamId: payload.teamId,
+      currentUser: payload.currentUser,
+      workflowTools: payload.workflowTools,
+      images: payload.images
+    }).catch((error) => {
+      const message = error instanceof Error ? error.message : String(error);
+      pushLog(`failed run=${payload.runId} ${message}`);
+      socket.emit("agent.event", {
+        conversationId: payload.conversationId,
+        runId: payload.runId,
+        event: { type: "session_error", error: message }
+      });
+    }).finally(() => {
+      activeAgents.delete(payload.runId);
+    });
+  });
+  socket.on("agent.abort", (payload) => {
+    if (!payload?.runId) return;
+    const agent = activeAgents.get(payload.runId);
+    if (!agent) return;
+    agent.kill();
+    activeAgents.delete(payload.runId);
+    pushLog(`aborted run=${payload.runId}`);
+  });
+  socket.on("agent.tool_response", (payload) => {
+    if (!payload?.toolId || typeof payload.response !== "string") return;
+    const agents = payload.runId ? [activeAgents.get(payload.runId)] : [...activeAgents.values()];
+    const delivered = agents.some((agent) => agent?.sendToolResponse(payload.toolId, payload.response) === true);
+    if (!delivered) pushLog(`tool_response missed tool=${payload.toolId}`);
+  });
+  socket.on("agent.append_message", (payload) => {
+    if (!payload?.runId || typeof payload.text !== "string") return;
+    const agent = activeAgents.get(payload.runId);
+    const delivered = agent?.sendUserMessage(payload.text) === true;
+    socket.emit(delivered ? "agent.accepted" : "agent.rejected", {
+      runId: payload.runId,
+      ...delivered ? {} : { message: "No active agent for appended message" }
+    });
+  });
+  const localServer = import_node_http.default.createServer((req, res) => {
+    const auth = req.headers.authorization;
+    if (auth !== `Bearer ${localApiToken}`) {
+      res.writeHead(401, { "content-type": "application/json" }).end(JSON.stringify({ error: "Unauthorized" }));
+      return;
+    }
+    if (req.method === "GET" && req.url === "/status") {
+      res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
+        configured: true,
+        runtimeId,
+        wsUrl,
+        connected: socket.connected,
+        activeRunIds: [...activeAgents.keys()],
+        localApiPort,
+        version: AGENT_VERSION
+      }));
+      return;
+    }
+    if (req.method === "GET" && req.url === "/capabilities") {
+      res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(discoverCapabilities()));
+      return;
+    }
+    if (req.method === "GET" && req.url === "/logs") {
+      res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ lines: recentLogs }));
+      return;
+    }
+    if (req.method === "POST" && req.url === "/stop") {
+      for (const agent of activeAgents.values()) agent.kill();
+      activeAgents.clear();
+      res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true }));
+      return;
+    }
+    res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: "Not found" }));
+  });
+  await new Promise((resolve2, reject) => {
+    localServer.once("error", reject);
+    localServer.listen(localApiPort, "127.0.0.1", () => {
+      localServer.off("error", reject);
+      const address = localServer.address();
+      if (address && typeof address === "object") localApiPort = address.port;
+      pushLog(`local_api listening port=${localApiPort}`);
+      console.info("[aiden-agent] Local daemon API listening", { port: localApiPort });
+      resolve2();
+    });
+  });
+  let stopped = false;
+  const stop = async () => {
+    if (stopped) return;
+    stopped = true;
+    clearInterval(heartbeat);
+    for (const agent of activeAgents.values()) {
+      agent.kill();
+    }
+    activeAgents.clear();
+    socket.disconnect();
+    await new Promise((resolve2) => {
+      localServer.close(() => resolve2());
+    });
+  };
+  return { runtimeId, wsUrl, localApiPort, localApiToken, stop };
+}
+async function runDaemon(args) {
+  const controller = await startDaemon(args);
+  const shutdown = () => {
+    void controller.stop().finally(() => process.exit(0));
+  };
+  process.once("SIGINT", shutdown);
+  process.once("SIGTERM", shutdown);
+  await new Promise(() => {
+  });
+}
+async function rotateRuntimeToken(args) {
+  const stored = readConfig();
+  const apiUrl = argValue(args, "--api-url") ?? process.env.AIDEN_API_URL ?? stored.apiUrl;
+  const runtimeId = argValue(args, "--runtime-id") ?? process.env.AIDEN_RUNTIME_ID ?? stored.runtimeId;
+  const token = argValue(args, "--token") ?? process.env.AIDEN_SETUP_TOKEN;
+  if (!apiUrl || !runtimeId || !token) {
+    throw new Error("token rotate requires configured api/runtime plus --token <aiden PAT>");
+  }
+  const response = await fetch(`${apiUrl}/public/runtimes/${runtimeId}/tokens/rotate`, {
+    method: "POST",
+    headers: { authorization: `Bearer ${token}` }
+  });
+  if (!response.ok) {
+    throw new Error(`runtime token rotation failed: ${response.status} ${await response.text()}`);
+  }
+  const body = await response.json();
+  writeConfig({ ...stored, apiUrl, runtimeId, runtimeToken: body.runtimeToken });
+  console.info("[aiden-agent] Runtime token rotated", { runtimeId });
+}
+async function revokeRuntimeToken(args) {
+  const stored = readConfig();
+  const apiUrl = argValue(args, "--api-url") ?? process.env.AIDEN_API_URL ?? stored.apiUrl;
+  const runtimeId = argValue(args, "--runtime-id") ?? process.env.AIDEN_RUNTIME_ID ?? stored.runtimeId;
+  const token = argValue(args, "--token") ?? process.env.AIDEN_SETUP_TOKEN;
+  if (!apiUrl || !runtimeId || !token) {
+    throw new Error("token revoke requires configured api/runtime plus --token <aiden PAT>");
+  }
+  const response = await fetch(`${apiUrl}/public/runtimes/${runtimeId}/tokens/revoke`, {
+    method: "POST",
+    headers: { authorization: `Bearer ${token}` }
+  });
+  if (!response.ok) {
+    throw new Error(`runtime token revoke failed: ${response.status} ${await response.text()}`);
+  }
+  removeConfig();
+  console.info("[aiden-agent] Runtime token revoked", { runtimeId });
+}
+function logoutDaemon() {
+  removeConfig();
+  console.info("[aiden-agent] Runtime config removed", { configPath: CONFIG_PATH });
+}
+function printStatus() {
+  const config = readConfig();
+  console.info(JSON.stringify({
+    configured: Boolean(config.runtimeId && config.runtimeToken && config.wsUrl),
+    runtimeId: config.runtimeId ?? null,
+    wsUrl: config.wsUrl ?? null,
+    localApiPort: config.localApiPort ?? null,
+    hasLocalApiToken: Boolean(config.localApiToken),
+    configPath: CONFIG_PATH
+  }, null, 2));
+}
+async function printDoctor(args = []) {
+  const config = readConfig();
+  const capabilities = discoverCapabilities();
+  let synced = false;
+  let syncError = null;
+  if (args.includes("--sync")) {
+    if (!config.apiUrl || !config.runtimeId || !config.runtimeToken) {
+      throw new Error("doctor --sync requires configured apiUrl, runtimeId, and runtimeToken. Run setup first.");
+    }
+    const response = await fetch(`${config.apiUrl}/public/runtimes/${config.runtimeId}/capabilities/self`, {
+      method: "PATCH",
+      headers: {
+        authorization: `Bearer ${config.runtimeToken}`,
+        "content-type": "application/json"
+      },
+      body: JSON.stringify({ capabilities })
+    });
+    if (!response.ok) {
+      syncError = `${response.status} ${await response.text()}`;
+      throw new Error(`doctor sync failed: ${syncError}`);
+    }
+    synced = true;
+  }
+  console.info(JSON.stringify({
+    version: AGENT_VERSION,
+    configPath: CONFIG_PATH,
+    configured: Boolean(config.runtimeId && config.runtimeToken && config.wsUrl),
+    runtimeId: config.runtimeId ?? null,
+    wsUrl: config.wsUrl ?? null,
+    synced,
+    syncError,
+    capabilities
+  }, null, 2));
+}
+
 // src/index.ts
-if (process.argv.includes("--version")) {
-  process.stdout.write(`${AGENT_VERSION}
-`);
-  process.exit(0);
+async function runSessionFromEnv() {
+  const wsUrl = process.env.AIDEN_WS_URL;
+  const sessionId = process.env.AIDEN_SESSION_ID;
+  const taskId = process.env.AIDEN_TASK_ID;
+  const sessionToken = process.env.AIDEN_SESSION_TOKEN;
+  const task = process.env.AIDEN_TASK;
+  const teamId = process.env.AIDEN_TEAM_ID || void 0;
+  const projectPath = process.env.AIDEN_PROJECT_PATH || "/home/user/workspace";
+  const backendKind = process.env.AIDEN_BACKEND_KIND || "claude_cli";
+  const agentId = process.env.AIDEN_AGENT_ID || void 0;
+  const agentPrompt = process.env.AIDEN_AGENT_PROMPT || void 0;
+  const mode = process.env.AIDEN_MODE || "agent";
+  const model = process.env.AIDEN_MODEL;
+  const contextWindow = process.env.AIDEN_CONTEXT_WINDOW || void 0;
+  const effortLevel = process.env.AIDEN_EFFORT_LEVEL || void 0;
+  const providerSessionId = process.env.AIDEN_PROVIDER_SESSION_ID || void 0;
+  if (!wsUrl || !sessionId || !taskId || !sessionToken || task == null) {
+    throw new Error("Missing required env vars: AIDEN_WS_URL, AIDEN_SESSION_ID, AIDEN_TASK_ID, AIDEN_SESSION_TOKEN, AIDEN_TASK");
+  }
+  console.info("[aiden-agent] Starting", { sessionId, taskId, projectPath, backendKind, agentId, mode, model, version: AGENT_VERSION });
+  await runSandbox({
+    wsUrl,
+    sessionId,
+    taskId,
+    sessionToken,
+    task,
+    teamId,
+    projectPath,
+    backendKind,
+    agentId,
+    agentPrompt,
+    mode,
+    model,
+    contextWindow,
+    effortLevel,
+    providerSessionId,
+    maxIterations: 50
+  });
 }
-var wsUrl = process.env.AIDEN_WS_URL;
-var sessionId = process.env.AIDEN_SESSION_ID;
-var taskId = process.env.AIDEN_TASK_ID;
-var sessionToken = process.env.AIDEN_SESSION_TOKEN;
-var task = process.env.AIDEN_TASK;
-var projectPath = process.env.AIDEN_PROJECT_PATH || "/home/user/workspace";
-var backendKind = process.env.AIDEN_BACKEND_KIND || "claude_cli";
-var mode = process.env.AIDEN_MODE || "agent";
-var model = process.env.AIDEN_MODEL;
-var providerSessionId = process.env.AIDEN_PROVIDER_SESSION_ID || void 0;
-if (!wsUrl || !sessionId || !taskId || !sessionToken || task == null) {
-  console.error("[aiden-agent] Missing required env vars: AIDEN_WS_URL, AIDEN_SESSION_ID, AIDEN_TASK_ID, AIDEN_SESSION_TOKEN, AIDEN_TASK");
-  process.exit(1);
+async function main() {
+  if (process.argv.includes("--version")) {
+    process.stdout.write(`${AGENT_VERSION}
+`);
+    return;
+  }
+  const [command = "run-session", ...commandArgs] = process.argv.slice(2);
+  if (command === "setup") {
+    await setupDaemon(commandArgs);
+    return;
+  }
+  if (command === "login") {
+    await loginWithDeviceCode(commandArgs);
+    return;
+  }
+  if (command === "daemon") {
+    await runDaemon(commandArgs);
+    return;
+  }
+  if (command === "status") {
+    printStatus();
+    return;
+  }
+  if (command === "doctor") {
+    await printDoctor(commandArgs);
+    return;
+  }
+  if (command === "token" && commandArgs[0] === "rotate") {
+    await rotateRuntimeToken(commandArgs.slice(1));
+    return;
+  }
+  if (command === "token" && commandArgs[0] === "revoke") {
+    await revokeRuntimeToken(commandArgs.slice(1));
+    return;
+  }
+  if (command === "logout") {
+    logoutDaemon();
+    return;
+  }
+  if (command === "run-session") {
+    await runSessionFromEnv();
+    return;
+  }
+  throw new Error(`Unknown command: ${command}`);
 }
-console.info("[aiden-agent] Starting", { sessionId, taskId, projectPath, backendKind, mode, model, version: AGENT_VERSION });
-runSandbox({
-  wsUrl,
-  sessionId,
-  taskId,
-  sessionToken,
-  task,
-  projectPath,
-  backendKind,
-  mode,
-  model,
-  providerSessionId,
-  maxIterations: 50
-}).catch((error) => {
-  console.error("[aiden-agent] Fatal error:", error);
+main().catch((error) => {
+  console.error("[aiden-agent] Fatal error:", error instanceof Error ? error.message : error);
   process.exit(1);
 });
 /*! Bundled license information: